<\/div>/u.test(html) &&
+ /src="\/src\/main\.tsx"/u.test(html) &&
+ !/workbench-shell|device-pod-sidebar|command-input|conversation-list|session-tabs/u.test(html);
+}
+
+function reactStrictTypeScriptEntry({ app, tsconfig, tscCheck }) {
+ return /createRoot/u.test(app) &&
+ /React\.StrictMode/u.test(app) &&
+ /"strict"\s*:\s*true/u.test(tsconfig) &&
+ /"noImplicitAny"\s*:\s*true/u.test(tsconfig) &&
+ /"noUncheckedIndexedAccess"\s*:\s*true/u.test(tsconfig) &&
+ /explicit any/u.test(tscCheck) &&
+ !/(^|[^A-Za-z0-9_])(?:as\s+any|:\s*any\b|Array\s*<\s*any\s*>|<\s*any\s*>)/u.test(app);
+}
+
+function reactModuleBoundaries() {
+ return requiredWebAssets
+ .filter((file) => file.startsWith("src/"))
+ .every((file) => fs.existsSync(path.join(webRoot, file)));
+}
+
+function legacyRuntimePathsRemoved() {
+ return legacyRuntimeFiles.every((file) => !fs.existsSync(path.join(webRoot, file)));
+}
+
+function reactCoreWorkbenchSelectors({ app }) {
+ return [
+ "data-app-shell",
+ "id=\"command-input\"",
+ "id=\"conversation-list\"",
+ "id=\"device-pod-sidebar\"",
+ "id=\"device-event-scroll\"",
+ "id=\"logout-button\"",
+ "data-view=\"gate\"",
+ "data-view=\"help\"",
+ "SkillsView",
+ "SettingsView"
+ ].every((term) => app.includes(term));
+}
+
+function reactApiStateSeparation({ app }) {
+ return [
+ "services/api/client.ts",
+ "state/workbench.ts",
+ "state/conversation.ts",
+ "services/markdown/render.ts"
+ ].every((file) => fs.existsSync(path.join(webRoot, "src", file))) &&
+ /fetchJson/u.test(app) &&
+ /useWorkbenchStore/u.test(app) &&
+ /renderMessageMarkdown/u.test(app) &&
+ /selectConversation/u.test(app);
+}
+
+function viteBuildAndDistContract({ packageJson, distContract, viteConfig }) {
+ return /"build"\s*:\s*"bun run scripts\/build\.ts"/u.test(packageJson) &&
+ /vite.*build/u.test(distContract) &&
+ /entryFileNames:\s*"app\.js"/u.test(viteConfig) &&
+ /assets\/index\.css/u.test(distContract) &&
+ gateRouteAliases.every((route) => distContract.includes(`${route.replace(/^\//u, "")}/index.html`)) &&
+ helpRouteAliases.every((route) => distContract.includes(`${route.replace(/^\//u, "")}/index.html`));
+}
+
+function reactLayoutContract({ styles }) {
+ return /html, body, #root \{[^}]*overflow:\s*hidden;/su.test(styles) &&
+ /\.workbench-shell \{[^}]*overflow:\s*hidden;/su.test(styles) &&
+ /@media \(max-width: 720px\)/u.test(styles) &&
+ /grid-template-columns:\s*56px\s+minmax\(0,\s*1fr\)/u.test(styles) &&
+ /\.device-event-scroll\s*\{[\s\S]*?overscroll-behavior:\s*contain;/u.test(styles);
+}
+
+function inspectReactHelpContract({ app, help }) {
+ return {
+ status: /data-view="help"/u.test(app) && /fetchText\("\/help\.md"/u.test(app) && help.trim().length > 0 ? "pass" : "blocked",
+ route: "/help",
+ source: "web/hwlab-cloud-web/help.md"
+ };
+}
+
function readText(relativePath) {
return fs.readFileSync(path.join(repoRoot, relativePath), "utf8");
}
function readCloudWebAppSource() {
- return cloudWebAppSourceFiles.map((file) => readText(`web/hwlab-cloud-web/${file}`)).join("\n");
+ return collectCloudWebSourceFiles(path.join(webRoot, "src"))
+ .map((file) => fs.readFileSync(file, "utf8"))
+ .join("\n");
}
-function readCloudWebRuntime() {
- const source = fs.readFileSync(path.join(webRoot, "src/logic/runtime.ts"), "utf8");
- const match = source.match(/export const runtime\s*=\s*([\s\S]*?);\s*$/u);
- if (!match) throw new Error("Unable to parse web/hwlab-cloud-web/src/logic/runtime.ts");
- return Function(`return (${match[1]});`)();
+function collectCloudWebSourceFiles(dir) {
+ const files = [];
+ for (const entry of fs.readdirSync(dir)) {
+ const full = path.join(dir, entry);
+ const stat = fs.statSync(full);
+ if (stat.isDirectory()) files.push(...collectCloudWebSourceFiles(full));
+ else if (/\.(ts|tsx|css)$/u.test(full)) files.push(full);
+ }
+ return files.sort();
}
function resolveBunCommand() {
@@ -1775,21 +1760,13 @@ function compareLiveAsset(assetPath, live, sourceText) {
}
async function buildCloudWebAppBundleText() {
- const tmpDir = fs.mkdtempSync(path.join("/tmp", "hwlab-cloud-web-live-asset-"));
- const entryPath = path.join(webRoot, ".app-entry.generated.ts");
- try {
- fs.writeFileSync(entryPath, `${readCloudWebAppSource()}\n`);
- execFileSync(resolveBunCommand(), ["build", entryPath, "--target", "browser", "--format", "esm", "--outfile", path.join(tmpDir, "app.js")], {
- cwd: repoRoot,
- encoding: "utf8",
- stdio: ["ignore", "pipe", "pipe"],
- timeout: 30000
- });
- return fs.readFileSync(path.join(tmpDir, "app.js"), "utf8");
- } finally {
- fs.rmSync(entryPath, { force: true });
- fs.rmSync(tmpDir, { recursive: true, force: true });
- }
+ execFileSync(resolveBunCommand(), ["run", "build"], {
+ cwd: webRoot,
+ encoding: "utf8",
+ stdio: ["ignore", "pipe", "pipe"],
+ timeout: 60000
+ });
+ return fs.readFileSync(path.join(webRoot, "dist/app.js"), "utf8");
}
function hashText(value) {
@@ -2563,6 +2540,7 @@ function findHelpMarkdownFiles() {
}
function findMarkdownRenderers() {
+ const renderService = readText("web/hwlab-cloud-web/src/services/markdown/render.ts");
const packages = ["package.json", "web/hwlab-cloud-web/package.json"]
.filter((file) => fs.existsSync(path.join(repoRoot, file)))
.flatMap((file) => {
@@ -2571,11 +2549,8 @@ function findMarkdownRenderers() {
});
const source = `${readCloudWebAppSource()}\n${readText("web/hwlab-cloud-web/index.html")}`;
const imported = markdownRendererPackages.filter((name) => new RegExp(`from\\s+["']${escapeRegExp(name)}["']|import\\(["']${escapeRegExp(name)}["']\\)`, "u").test(source));
- const vendoredMarked = /from\s+["']\.\/third_party\/marked\/marked\.esm\.js["']/u.test(source) &&
- fs.existsSync(path.join(repoRoot, "web/hwlab-cloud-web/third_party/marked/marked.esm.js")) &&
- fs.existsSync(path.join(repoRoot, "web/hwlab-cloud-web/third_party/marked/LICENSE"));
const renderers = [...packages, ...imported].filter((name) => markdownRendererPackages.includes(name));
- if (vendoredMarked) renderers.push("marked:vendored");
+ if (/export function renderMessageMarkdown/u.test(renderService) && /escapeHtml/u.test(renderService)) renderers.push("react-render-service");
return [...new Set(renderers)].sort();
}
@@ -3527,7 +3502,16 @@ async function inspectAuthFixtureViewport(browser, url, viewport) {
}
async function loginWithDefaultCredentials(page) {
- const loginVisible = await page.locator("#login-shell").evaluate((element) => element.hidden === false).catch(() => false);
+ await page.waitForFunction(
+ () => document.querySelector("#command-input") !== null || document.querySelector("#login-username") !== null,
+ null,
+ { timeout: 12000 }
+ ).catch(() => {});
+ const loginVisible = await page.evaluate(() => {
+ const login = document.querySelector("#login-shell");
+ const username = document.querySelector("#login-username");
+ return Boolean(login && username && login.hidden === false);
+ });
if (!loginVisible) return;
await page.locator("#login-username").fill(defaultAuthCredentials.username);
await page.locator("#login-password").fill(defaultAuthCredentials.password);
@@ -6061,7 +6045,7 @@ async function inspectWorkbenchGateLayout(browser, url, viewport, options = {})
}
}
-async function inspectMinimalWorkbenchLayout(browser, url, viewport) {
+async function inspectMinimalWorkbenchLayout(browser, url, viewport, options = {}) {
const page = await browser.newPage({
viewport: { width: viewport.width, height: viewport.height },
deviceScaleFactor: 1,
@@ -6093,12 +6077,14 @@ async function inspectMinimalWorkbenchLayout(browser, url, viewport) {
observations.conversationVisible &&
observations.rightSidebarVisible &&
observations.rightSidebarToggleVisible;
+ const screenshots = [await captureElementScreenshot(page, "[data-app-shell]", options.artifactRoot, viewport, `minimal-${viewport.id}-shell`)].filter(Boolean);
return {
id: `layout-minimal-${viewport.id}`,
status: pass ? "pass" : "blocked",
viewport: { id: viewport.id, width: viewport.width, height: viewport.height },
summary: `${viewport.id} workbench opens after auth and exposes core conversation plus Device Pod controls.`,
observations,
+ artifacts: { screenshots },
failures: pass ? [] : [
{
selector: "[data-app-shell], #command-input, #conversation-list, #device-pod-sidebar, #right-sidebar-toggle",
diff --git a/scripts/src/dev-runtime-postflight.mjs b/scripts/src/dev-runtime-postflight.mjs
index 5c199cd0..ac8bac16 100644
--- a/scripts/src/dev-runtime-postflight.mjs
+++ b/scripts/src/dev-runtime-postflight.mjs
@@ -29,7 +29,7 @@ function bunExecutable() {
function classifyRuntimeDurableReadiness(payload = {}, options = {}) {
const script = [
- "import { classifyRuntimeDurableReadiness } from './web/hwlab-cloud-web/live-status.ts';",
+ "import { classifyRuntimeDurableReadiness } from './tools/src/runtime-durable-readiness.ts';",
"const input = JSON.parse(await Bun.stdin.text());",
"const output = classifyRuntimeDurableReadiness(input.payload, input.options);",
"process.stdout.write(JSON.stringify(output));"
diff --git a/scripts/src/m3-io-control-e2e.mjs b/scripts/src/m3-io-control-e2e.mjs
index cc70175d..fd0f4b87 100644
--- a/scripts/src/m3-io-control-e2e.mjs
+++ b/scripts/src/m3-io-control-e2e.mjs
@@ -1,4 +1,5 @@
import { randomUUID } from "node:crypto";
+import { readdirSync, statSync } from "node:fs";
import { mkdir, readFile, writeFile } from "node:fs/promises";
import path from "node:path";
import { fileURLToPath } from "node:url";
@@ -228,7 +229,7 @@ export async function runM3IoControlSourceChecks({ repoRoot: root = repoRoot } =
readRepoText(root, "internal/cloud/server.ts"),
readRepoText(root, "internal/cloud/json-rpc.ts"),
readRepoText(root, "internal/cloud/m3-io-control.ts"),
- Promise.all(["web/hwlab-cloud-web/app.ts","web/hwlab-cloud-web/app-device-pod.ts","web/hwlab-cloud-web/app-conversation.ts","web/hwlab-cloud-web/app-trace.ts","web/hwlab-cloud-web/app-helpers.ts"].map((file) => readRepoText(root, file))).then((parts) => parts.join("\n")),
+ readCloudWebReactSource(root),
readRepoText(root, "web/hwlab-cloud-web/index.html"),
readRepoText(root, "scripts/artifact-publish.mjs"),
readRepoText(root, "internal/dev-entrypoint/cloud-web-routes.mjs")
@@ -325,6 +326,24 @@ export async function runM3IoControlSourceChecks({ repoRoot: root = repoRoot } =
];
}
+async function readCloudWebReactSource(root) {
+ const sourceRoot = path.join(root, "web/hwlab-cloud-web/src");
+ const files = listCloudWebSourceFiles(sourceRoot);
+ const parts = await Promise.all(files.map((file) => readFile(file, "utf8")));
+ return parts.join("\n");
+}
+
+function listCloudWebSourceFiles(dir) {
+ const files = [];
+ for (const entry of readdirSync(dir)) {
+ const full = path.join(dir, entry);
+ const stat = statSync(full);
+ if (stat.isDirectory()) files.push(...listCloudWebSourceFiles(full));
+ else if (/\.(ts|tsx|css)$/u.test(full)) files.push(full);
+ }
+ return files.sort();
+}
+
export function checkFrontendNoDirectRuntimeCalls({ appSource, htmlSource = "", artifactPublisherSource = "", cloudWebRouteSource = "" }) {
const source = `${appSource}\n${htmlSource}`;
const fetchTargets = literalFetchTargets(appSource);
diff --git a/tools/hwlab-cli/client.test.ts b/tools/hwlab-cli/client.test.ts
index 917dc865..04270ac1 100644
--- a/tools/hwlab-cli/client.test.ts
+++ b/tools/hwlab-cli/client.test.ts
@@ -1207,7 +1207,7 @@ test("hwlab-cli client agent trace can render with the Web trace row path", asyn
assert.equal(result.exitCode, 0);
assert.equal(result.payload.body.render, "web");
- assert.equal(result.payload.body.renderer, "web/hwlab-cloud-web/app-trace:traceDisplayRows");
+ assert.equal(result.payload.body.renderer, "tools/src/hwlab-cli/trace-renderer:traceDisplayRows");
assert.equal(result.payload.body.sourceEventCount, 3);
assert.ok(result.payload.body.renderedRowCount >= 1);
assert.ok(result.payload.body.rows.some((row: any) => /助手最后一条消息/u.test(row.header)));
diff --git a/tools/src/hwlab-cli-lib.ts b/tools/src/hwlab-cli-lib.ts
index ed233215..dbe494ce 100644
--- a/tools/src/hwlab-cli-lib.ts
+++ b/tools/src/hwlab-cli-lib.ts
@@ -1,8 +1,8 @@
import { createHash } from "node:crypto";
import { chmod, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
import path from "node:path";
-import { computeCodeAgentComposerState, isCodeAgentSessionUnusableStatus } from "../../web/hwlab-cloud-web/composer-policy.ts";
-import { traceDisplayRows, traceNoiseEventCount } from "../../web/hwlab-cloud-web/app-trace.ts";
+import { computeCodeAgentComposerState, isCodeAgentSessionUnusableStatus } from "./hwlab-cli/composer-policy.ts";
+import { traceDisplayRows, traceNoiseEventCount } from "./hwlab-cli/trace-renderer.ts";
import { resolveRuntimeEndpoint, runtimeEndpointVisibility, sameRuntimeEndpointScope } from "./runtime-endpoint-resolver.ts";
const VERSION = "0.2.0-client";
@@ -2301,7 +2301,7 @@ function webTraceRenderBody(traceObject: any, parsed: ParsedArgs) {
traceId: traceObject?.traceId ?? null,
status: traceObject?.status ?? null,
render: "web",
- renderer: "web/hwlab-cloud-web/app-trace:traceDisplayRows",
+ renderer: "tools/src/hwlab-cli/trace-renderer:traceDisplayRows",
sourceEventCount: traceObject?.eventCount ?? events.length,
renderedRowCount: rows.length,
returnedRowCount: rowTail.length,
diff --git a/web/hwlab-cloud-web/src/logic/composer-policy.ts b/tools/src/hwlab-cli/composer-policy.ts
similarity index 100%
rename from web/hwlab-cloud-web/src/logic/composer-policy.ts
rename to tools/src/hwlab-cli/composer-policy.ts
diff --git a/tools/src/hwlab-cli/trace-renderer.ts b/tools/src/hwlab-cli/trace-renderer.ts
new file mode 100644
index 00000000..75f9afd7
--- /dev/null
+++ b/tools/src/hwlab-cli/trace-renderer.ts
@@ -0,0 +1,229 @@
+export interface TraceEventRow {
+ rowId: string;
+ seq: number | null;
+ tone: "ok" | "blocked" | "warn" | "source";
+ header: string;
+ body: string | null;
+ terminal?: boolean;
+ bodyFormat?: "markdown";
+}
+
+type TraceEvent = Record
;
+
+export function traceDisplayRows(trace: Record = {}, events: TraceEvent[] = []): TraceEventRow[] {
+ const rows: TraceEventRow[] = [];
+ let requestRendered = false;
+ let setupRendered = false;
+ let completionRendered = false;
+ for (const event of events) {
+ if (!event || isNoisyTraceEvent(event)) continue;
+ if (isRequestTraceEvent(event)) {
+ if (!requestRendered) {
+ rows.push(traceRequestSummaryRow(event));
+ requestRendered = true;
+ }
+ continue;
+ }
+ if (isSetupTraceEvent(event)) {
+ if (!setupRendered) {
+ rows.push(traceSetupSummaryRow(event));
+ setupRendered = true;
+ }
+ continue;
+ }
+ if (isTerminalAssistantTraceEvent(event)) {
+ rows.push(traceAssistantSummaryRow(trace, event));
+ completionRendered = true;
+ continue;
+ }
+ if (isCompletionTraceEvent(event)) {
+ if (!completionRendered) {
+ rows.push(traceCompletionSummaryRow(trace, event));
+ completionRendered = true;
+ }
+ continue;
+ }
+ rows.push(traceDisplayRow(trace, event));
+ }
+ return rows.length > 0 ? rows : events.map((event) => traceDisplayRow(trace, event));
+}
+
+export function traceNoiseEventCount(events: TraceEvent[] = []): number {
+ return Array.isArray(events) ? events.filter((event) => isNoisyTraceEvent(event)).length : 0;
+}
+
+function traceRequestSummaryRow(event: TraceEvent): TraceEventRow {
+ const prompt = cleanTraceText(event.promptSummary ?? event.prompt ?? "");
+ return {
+ rowId: `trace-request:${event.seq ?? "accepted"}`,
+ seq: numberOrNull(event.seq),
+ tone: traceEventTone(event),
+ header: `${traceClock(event.createdAt)} 请求接受${prompt ? `，提示词："${compactTraceOneLine(prompt, 120)}"` : ""}`,
+ body: null
+ };
+}
+
+function traceSetupSummaryRow(event: TraceEvent): TraceEventRow {
+ const label = String(event.label ?? "");
+ const parts = [
+ /session:reused|thread\/resume/iu.test(label) ? "会话复用" : "会话就绪",
+ /prompt:sent|sent prompt/iu.test(label) ? "提示词已发送" : null,
+ /turn[:/]start|turn:started|turn\/start/iu.test(label) ? "轮次开始" : null
+ ].filter(Boolean).join("，");
+ return {
+ rowId: `trace-setup:${event.seq ?? "session-turn"}`,
+ seq: numberOrNull(event.seq),
+ tone: "source",
+ header: `${traceClock(event.createdAt)} ${parts || "会话准备完成"}`,
+ body: null
+ };
+}
+
+function traceAssistantSummaryRow(trace: Record, event: TraceEvent): TraceEventRow {
+ const text = cleanTraceText(event.message ?? event.outputSummary ?? assistantStreamText(trace, event) ?? "");
+ return {
+ rowId: `event:${event.seq ?? `${event.label ?? event.type ?? "assistant"}:${event.createdAt ?? "unknown"}`}`,
+ seq: numberOrNull(event.seq),
+ tone: "ok",
+ header: `${traceClock(event.createdAt)} 助手最后一条消息，轮次完成（总耗时 ${formatTraceDuration(traceRelativeMs(trace, event))}）`,
+ terminal: true,
+ body: text || null,
+ bodyFormat: "markdown"
+ };
+}
+
+function traceCompletionSummaryRow(trace: Record, event: TraceEvent): TraceEventRow {
+ return {
+ rowId: `trace-completion:${event.seq ?? "turn"}`,
+ seq: numberOrNull(event.seq),
+ tone: traceEventTone(event),
+ header: `${traceClock(event.createdAt)} 轮次完成（总耗时 ${formatTraceDuration(traceRelativeMs(trace, event))}）`,
+ body: null
+ };
+}
+
+function traceDisplayRow(trace: Record, event: TraceEvent): TraceEventRow {
+ const label = readableTraceLabel(event);
+ return {
+ rowId: `event:${event.seq ?? `${event.label ?? event.type ?? "event"}:${event.createdAt ?? "unknown"}`}`,
+ seq: numberOrNull(event.seq),
+ tone: traceEventTone(event),
+ header: `${traceClock(event.createdAt)} total=${formatTraceDuration(traceRelativeMs(trace, event))} ${traceStatusToken(event)} ${label}`.trim(),
+ body: traceDisplayBody(event)
+ };
+}
+
+function assistantStreamText(trace: Record, event: TraceEvent): string {
+ const streams = Array.isArray(trace.assistantStreams) ? trace.assistantStreams.filter(isRecord) : [];
+ const itemId = nonEmptyString(event.itemId ?? event.messageId ?? event.id);
+ const matched = itemId ? streams.find((stream) => [stream.itemId, stream.messageId, stream.id].map(nonEmptyString).includes(itemId)) : null;
+ return nonEmptyString(matched?.text ?? streams.at(-1)?.text) ?? "";
+}
+
+function isRequestTraceEvent(event: TraceEvent): boolean {
+ const label = String(event.label ?? "");
+ return label === "agentrun:request:accepted" || label === "request:accepted-short-connection" || label === "request:accepted" || label === "request:received";
+}
+
+function isSetupTraceEvent(event: TraceEvent): boolean {
+ const label = String(event.label ?? "");
+ return /^session:|^stdio:|^prompt:|^thread:|^turn:started|^turn:start|turn\/start|codex turn|tool:codex-app-server/iu.test(label) ||
+ /^agentrun:backend:(codex-app-server-starting|initialize:completed|thread\/start|thread\/resume|thread\/started|turn\/start|turn\/started)/iu.test(label);
+}
+
+function isCompletionTraceEvent(event: TraceEvent): boolean {
+ const label = String(event.label ?? "");
+ return label.startsWith("turn:completed") || label.startsWith("result:completed") || label === "agentrun:backend:turn/completed" || label === "agentrun:result:completed";
+}
+
+function isTerminalAssistantTraceEvent(event: TraceEvent): boolean {
+ const label = String(event.label ?? "");
+ if (event.terminal === true || label === "assistant:completed") return true;
+ if (label === "agentrun:assistant:message") return event.replyAuthority === true || event.final === true;
+ return event.type === "assistant_message" && (event.status === "completed" || event.final === true);
+}
+
+function isNoisyTraceEvent(event: TraceEvent): boolean {
+ const label = String(event.label ?? "");
+ if (isRequestTraceEvent(event) || isSetupTraceEvent(event) || isCompletionTraceEvent(event) || isTerminalAssistantTraceEvent(event)) return false;
+ if (/token_count|outputDelta:chunk/iu.test(label)) return true;
+ if (/^agentrun:backend:(run-created|command-created|runner-job-created|thread\/status\/changed|thread\/tokenUsage\/updated|account\/rateLimits\/updated|remoteControl\/status\/changed|configWarning|codex-app-server-closed|session-updated|command-terminal|item\/agentMessage:(started|completed)|thread\/goal\/cleared)$/u.test(label)) return true;
+ return event.type === "event" && !event.outputSummary && !event.message && !event.errorCode;
+}
+
+function readableTraceLabel(event: TraceEvent): string {
+ const label = String(event.label ?? `${event.type ?? "event"}:${event.status ?? "observed"}`);
+ if (label === "request:accepted-short-connection") return "submit short-connection";
+ if (label === "request:accepted") return "request accepted";
+ if (label.startsWith("turn:completed")) return "turn completed";
+ if (label.startsWith("result:completed")) return "result ready";
+ return label.replace(/^tool:/u, "").replace(/^assistant:/u, "assistant ").replace(/:completed$/u, " completed").replace(/:started$/u, " started");
+}
+
+function traceDisplayBody(event: TraceEvent): string | null {
+ const lines = [
+ event.command ? `command=${compactTraceOneLine(event.command, 900)}` : null,
+ event.stdoutSummary ? `stdout:\n${compactTraceOneLine(event.stdoutSummary, 1200)}` : null,
+ event.stderrSummary ? `stderr:\n${compactTraceOneLine(event.stderrSummary, 800)}` : null,
+ event.outputSummary,
+ event.promptSummary,
+ event.message,
+ event.chunk
+ ].map(cleanTraceText).filter(Boolean);
+ return lines.length > 0 ? lines.join("\n").slice(0, 1400) : null;
+}
+
+function traceStatusToken(event: TraceEvent): string {
+ const status = String(event.status ?? "");
+ if (status === "completed" || status === "succeeded") return "ok";
+ if (["failed", "blocked", "error", "timeout", "canceled"].includes(status) || event.errorCode) return "fail";
+ if (["started", "running", "accepted"].includes(status)) return "run";
+ return status || "event";
+}
+
+function traceEventTone(event: TraceEvent): TraceEventRow["tone"] {
+ const status = traceStatusToken(event);
+ if (status === "ok") return "ok";
+ if (status === "fail") return "blocked";
+ if (status === "run") return "warn";
+ return "source";
+}
+
+function traceClock(value: unknown): string {
+ const date = new Date(String(value ?? ""));
+ return Number.isNaN(date.getTime()) ? "--:--:--" : date.toISOString().slice(11, 19);
+}
+
+function traceRelativeMs(trace: Record, event: TraceEvent): number {
+ if (typeof event.elapsedMs === "number") return event.elapsedMs;
+ const start = Date.parse(String(trace.startedAt ?? trace.createdAt ?? ""));
+ const current = Date.parse(String(event.createdAt ?? ""));
+ return Number.isNaN(start) || Number.isNaN(current) ? 0 : Math.max(0, current - start);
+}
+
+function formatTraceDuration(ms: number): string {
+ const seconds = Math.floor(Math.max(0, Number(ms) || 0) / 1000);
+ return [Math.floor(seconds / 3600), Math.floor((seconds % 3600) / 60), seconds % 60].map((part) => String(part).padStart(2, "0")).join(":");
+}
+
+function cleanTraceText(value: unknown): string {
+ return String(value ?? "").replace(/\u0000/gu, "").replace(/\r\n|\r/gu, "\n").replace(/[ \t]{2,}/gu, " ").replace(/\n{3,}/gu, "\n\n").trim();
+}
+
+function compactTraceOneLine(value: unknown, limit = 220): string {
+ const text = cleanTraceText(value).replace(/\s+/gu, " ");
+ return text.length <= limit ? text : `${text.slice(0, Math.max(0, limit - 3))}...`;
+}
+
+function numberOrNull(value: unknown): number | null {
+ return Number.isInteger(value) ? Number(value) : null;
+}
+
+function nonEmptyString(value: unknown): string | null {
+ const text = String(value ?? "").trim();
+ return text ? text : null;
+}
+
+function isRecord(value: unknown): value is Record {
+ return Boolean(value && typeof value === "object");
+}
diff --git a/tools/src/runtime-durable-readiness.ts b/tools/src/runtime-durable-readiness.ts
new file mode 100644
index 00000000..ed1045c1
--- /dev/null
+++ b/tools/src/runtime-durable-readiness.ts
@@ -0,0 +1,216 @@
+const readyQueryResults = Object.freeze(["durable_readiness_ready", "runtime_durable_ready", "query_ready", "readiness_ready", "ready", "ok", "pass", "passed"]);
+const blockedQueryResults = Object.freeze>({
+ driver_missing: "runtime_durable_adapter_driver_missing",
+ ssl_negotiation_blocked: "runtime_durable_adapter_ssl_blocked",
+ auth_blocked: "runtime_durable_adapter_auth_blocked",
+ schema_blocked: "runtime_durable_adapter_schema_blocked",
+ migration_blocked: "runtime_durable_adapter_migration_blocked",
+ query_blocked: "runtime_durable_adapter_query_blocked",
+ not_ready: "runtime_durable_adapter_query_blocked"
+});
+const gateLayers = Object.freeze(["ssl", "auth", "schema", "migration", "durability"]);
+
+export function classifyRuntimeDurableReadiness(payload: Record = {}, options: { requirePostgresAdapter?: boolean } = {}) {
+ const runtime = record(payload.runtime);
+ const readiness = record(payload.readiness);
+ const durability = record(readiness.durability);
+ const db = record(payload.db);
+ const dbRuntimeReadiness = record(db.runtimeReadiness);
+ const gates = record(runtime.gates ?? durability.gates);
+ const gateBlocker = firstBlockedRuntimeGate(gates);
+ const queryResult = firstNonEmpty(record(runtime.connection).queryResult, durability.queryResult, dbRuntimeReadiness.queryResult);
+ const queryBlocker = runtimeDurableBlockerFromQueryResult(queryResult);
+ const readyQueryResult = isRuntimeDurableReadyQueryResult(queryResult);
+ const explicitDurabilityReady = durabilityReadySignal({ runtime, durability, dbRuntimeReadiness, gateBlocker, queryResult, readyQueryResult, queryBlocker });
+ const directBlocker = firstNonEmpty(
+ explicitDurabilityReady ? "" : runtime.blocker,
+ durability.blocker,
+ dbRuntimeReadiness.blocker,
+ explicitDurabilityReady ? "" : blockerCodeStartingWith(payload, "runtime_durable_adapter_")
+ );
+ const reasonCode = firstNonEmpty(directBlocker, gateBlocker?.blocker, queryBlocker);
+ const blockedLayer = firstNonEmpty(
+ record(runtime.durabilityContract).blockedLayer,
+ durability.blockedLayer,
+ dbRuntimeReadiness.blockedLayer,
+ gateBlocker?.layer,
+ runtimeDurableLayerFromBlocker(reasonCode),
+ runtimeDurableLayerFromQueryResult(queryResult)
+ );
+ const adapter = firstNonEmpty(runtime.adapter, durability.adapter, dbRuntimeReadiness.adapter, "unknown");
+ const runtimeDurable = runtime.durable === true || durability.durable === true || dbRuntimeReadiness.durable === true;
+ const runtimeExplicitlyNonDurable = runtime.durable === false || durability.durable === false || dbRuntimeReadiness.durable === false;
+ const runtimeReady = runtime.ready === true || durability.runtimeReady === true || dbRuntimeReadiness.ready === true;
+ const durabilityReady = durability.ready === true || dbRuntimeReadiness.ready === true || runtimeReady;
+ const liveRuntimeEvidence = runtime.liveRuntimeEvidence === true || durability.liveRuntimeEvidence === true || dbRuntimeReadiness.liveRuntimeEvidence === true;
+ const rawStatus = rawStatusFrom(payload);
+ const postgresRequired = options.requirePostgresAdapter === true;
+ const ready = (!postgresRequired || adapter === "postgres") && runtimeDurable && runtimeReady && durabilityReady && liveRuntimeEvidence && !reasonCode && !blockedLayer && (!queryResult || readyQueryResult);
+
+ if (ready) {
+ return {
+ status: "ready",
+ ready: true,
+ classification: "runtime_durable_ready",
+ reasonCode: "runtime_durable_ready",
+ reason: `runtime durable ready; adapter=${adapter}; queryResult=${queryResult || "not_observed"}`,
+ impact: "Device Pod readiness checks may rely on durable runtime evidence when persistence readiness is green.",
+ safeNextAction: "Continue with repo-owned DEV CD postflight; do not read or print Secret values.",
+ retryable: true,
+ readonly: false,
+ evidence: runtimeDurableEvidence({ adapter, runtimeDurable, runtimeReady, durabilityReady, liveRuntimeEvidence, blockedLayer: null, queryResult, readyQueryResult, reasonCode: null, gates, rawStatus, postgresRequired })
+ };
+ }
+
+ const nonReadyReasonCode = firstNonEmpty(
+ reasonCode,
+ postgresRequired && adapter !== "postgres" ? "runtime_durable_adapter_not_postgres" : "",
+ runtimeExplicitlyNonDurable ? "runtime_durable_false" : "",
+ runtimeDurable ? "" : "runtime_durable_adapter_missing",
+ runtimeReady ? "" : "runtime_durable_runtime_not_ready",
+ liveRuntimeEvidence ? "" : "runtime_durable_live_evidence_missing",
+ blockedRuntimeStatus(rawStatus) ? rawStatus : "",
+ "runtime_durable_adapter_not_ready"
+ );
+ const layer = firstNonEmpty(blockedLayer, runtimeDurableLayerFromBlocker(nonReadyReasonCode), runtimeExplicitlyNonDurable ? "runtime-durable" : "", "runtime-durable");
+ return {
+ status: "blocked",
+ ready: false,
+ classification: nonReadyReasonCode,
+ reasonCode: nonReadyReasonCode,
+ reason: runtimeDurableBlockedReason({ reasonCode: nonReadyReasonCode, adapter, layer, queryResult }),
+ impact: "Device Pod readiness remains source-level while durable runtime evidence is blocked.",
+ safeNextAction: runtimeDurableSafeNextAction(nonReadyReasonCode, layer),
+ retryable: true,
+ readonly: true,
+ evidence: runtimeDurableEvidence({ adapter, runtimeDurable, runtimeReady, durabilityReady, liveRuntimeEvidence, blockedLayer: layer, queryResult, readyQueryResult, reasonCode: nonReadyReasonCode, gates, rawStatus, postgresRequired })
+ };
+}
+
+function durabilityReadySignal(input: { runtime: Record; durability: Record; dbRuntimeReadiness: Record; gateBlocker: { layer: string; blocker: string } | null; queryResult: string; readyQueryResult: boolean; queryBlocker: string }): boolean {
+ if (input.gateBlocker || input.queryBlocker) return false;
+ if (input.queryResult && !input.readyQueryResult) return false;
+ const ready = input.durability.ready === true || input.dbRuntimeReadiness.ready === true || record(input.runtime.durabilityContract).ready === true;
+ if (!ready) return false;
+ return !firstNonEmpty(input.durability.blocker, input.dbRuntimeReadiness.blocker, record(input.runtime.durabilityContract).blocker, input.durability.blockedLayer, input.dbRuntimeReadiness.blockedLayer, record(input.runtime.durabilityContract).blockedLayer);
+}
+
+function firstBlockedRuntimeGate(gates: Record): { layer: string; blocker: string } | null {
+ for (const layer of gateLayers) {
+ const gate = record(gates[layer]);
+ const status = normalized(gate.status);
+ if (gate.ready === false || status === "blocked" || status === "failed") return { layer, blocker: firstNonEmpty(gate.blocker, blockerForLayer(layer)) };
+ }
+ return null;
+}
+
+function blockerForLayer(layer: string): string {
+ if (layer === "ssl") return "runtime_durable_adapter_ssl_blocked";
+ if (layer === "auth") return "runtime_durable_adapter_auth_blocked";
+ if (layer === "schema") return "runtime_durable_adapter_schema_blocked";
+ if (layer === "migration") return "runtime_durable_adapter_migration_blocked";
+ return "runtime_durable_adapter_query_blocked";
+}
+
+function runtimeDurableLayerFromBlocker(blocker: string): string {
+ const text = normalized(blocker);
+ if (text.includes("ssl")) return "ssl";
+ if (text.includes("auth")) return "auth";
+ if (text.includes("schema")) return "schema";
+ if (text.includes("migration")) return "migration";
+ if (text.includes("query")) return "durability_query";
+ if (text.includes("missing") || text.includes("unconfigured") || text.includes("driver")) return "adapter";
+ return "";
+}
+
+function runtimeDurableLayerFromQueryResult(queryResult: string): string {
+ const text = normalized(queryResult);
+ if (!text || isRuntimeDurableReadyQueryResult(text)) return "";
+ if (text.includes("ssl")) return "ssl";
+ if (text.includes("auth")) return "auth";
+ if (text.includes("schema")) return "schema";
+ if (text.includes("migration")) return "migration";
+ if (text.includes("query")) return "durability_query";
+ if (text.includes("driver")) return "adapter";
+ return "";
+}
+
+function runtimeDurableBlockerFromQueryResult(queryResult: string): string {
+ const text = normalized(queryResult);
+ if (!text || isRuntimeDurableReadyQueryResult(text)) return "";
+ return blockedQueryResults[text] ?? "";
+}
+
+function isRuntimeDurableReadyQueryResult(queryResult: string): boolean {
+ return readyQueryResults.includes(normalized(queryResult));
+}
+
+function runtimeDurableEvidence(input: { adapter: string; runtimeDurable: boolean; runtimeReady: boolean; durabilityReady: boolean; liveRuntimeEvidence: boolean; blockedLayer: string | null; queryResult: string; readyQueryResult: boolean; reasonCode: string | null; gates: Record; rawStatus: unknown; postgresRequired: boolean }) {
+ return {
+ adapter: input.adapter,
+ durable: input.runtimeDurable,
+ runtimeReady: input.runtimeReady,
+ durabilityReady: input.durabilityReady,
+ liveRuntimeEvidence: input.liveRuntimeEvidence,
+ blocker: input.reasonCode,
+ blockedLayer: input.blockedLayer,
+ queryResult: input.queryResult || null,
+ readyQueryResult: input.readyQueryResult,
+ rawStatus: input.rawStatus || null,
+ postgresRequired: input.postgresRequired,
+ gates: Object.fromEntries(gateLayers.map((layer) => {
+ const gate = record(input.gates[layer]);
+ return [layer, { checked: gate.checked === true, ready: gate.ready === true, status: gate.status ?? "unknown", blocker: gate.blocker ?? null }];
+ })),
+ secretMaterialRead: false
+ };
+}
+
+function runtimeDurableBlockedReason(input: { reasonCode: string; adapter: string; layer: string; queryResult: string }): string {
+ if (input.reasonCode === "runtime_durable_false") return `runtime durable=false; adapter=${input.adapter}; queryResult=${input.queryResult || "not_observed"}`;
+ if (input.reasonCode === "runtime_durable_adapter_not_postgres") return `runtime durable adapter is not postgres; adapter=${input.adapter}; queryResult=${input.queryResult || "not_observed"}`;
+ return `runtime durable blocked at ${input.layer || "runtime-durable"}; blocker=${input.reasonCode}; queryResult=${input.queryResult || "unknown"}`;
+}
+
+function runtimeDurableSafeNextAction(reasonCode: string, layer: string): string {
+ const text = normalized(`${reasonCode} ${layer}`);
+ if (text.includes("auth")) return "Repair DEV DB auth/SecretRef metadata through repo-owned provisioning, then rerun postflight without printing Secret values.";
+ if (text.includes("schema") || text.includes("migration")) return "Run repo-owned DEV runtime provisioning and migration, then rerun postflight.";
+ if (text.includes("ssl")) return "Align DEV DB SSL mode with the repo-owned DEV contract, then rerun postflight.";
+ if (text.includes("query")) return "Inspect durable runtime query readiness, preserve evidence persistence, and rerun postflight.";
+ if (text.includes("postgres")) return "Run DEV with HWLAB_CLOUD_RUNTIME_ADAPTER=postgres and DB URLs injected only through SecretRefs.";
+ return "Restore durable runtime readiness through repo-owned DEV CD steps, then rerun postflight.";
+}
+
+function rawStatusFrom(payload: Record): unknown {
+ return payload.status ?? record(payload.readiness).status ?? record(payload.runtime).status ?? record(record(payload.readiness).durability).status ?? "";
+}
+
+function blockerCodeStartingWith(payload: Record, prefix: string): string {
+ const readiness = record(payload.readiness);
+ return [...array(payload.blockerCodes), ...array(readiness.blockerCodes)].map(String).find((code) => code.startsWith(prefix)) ?? "";
+}
+
+function blockedRuntimeStatus(value: unknown): boolean {
+ return ["error", "failed", "failure", "blocked", "unavailable", "rejected", "degraded"].includes(normalized(value));
+}
+
+function record(value: unknown): Record {
+ return value && typeof value === "object" ? value as Record : {};
+}
+
+function array(value: unknown): unknown[] {
+ return Array.isArray(value) ? value : [];
+}
+
+function firstNonEmpty(...values: unknown[]): string {
+ for (const value of values) {
+ const text = String(value ?? "").trim();
+ if (text) return text;
+ }
+ return "";
+}
+
+function normalized(value: unknown): string {
+ return String(value ?? "").trim().toLowerCase();
+}
diff --git a/web/hwlab-cloud-web/index.html b/web/hwlab-cloud-web/index.html
index 0c7cd4b2..bafd07ed 100644
--- a/web/hwlab-cloud-web/index.html
+++ b/web/hwlab-cloud-web/index.html
@@ -5,11 +5,9 @@
HWLAB 云工作台
-
-
-
+