fix(web): 修复消息排序问题 - 后端返回过滤后的权限

[0x7551]

问题描述

切换会话时可能出现消息排序问题，权限请求显示不正确。

修复内容

1. 在API响应中按消息时间范围过滤权限
2. 使用实时 agentState 处理待处理的权限请求

via HAPI

Co-Authored-By: HAPI noreply@hapi.run

[github-actions]

Findings

• [Major] 完成态权限不会随着 SSE 更新 — SessionChat 用 props.permissions.completedRequests 覆盖了 session.agentState.completedRequests，而权限只在拉取分页时更新，SSE 新消息不会更新权限，导致新完成的权限卡片不显示直到刷新。证据：web/src/components/SessionChat.tsx:183, web/src/lib/message-window-store.ts:327, web/src/lib/message-window-store.ts:402
  Suggested fix:

  const oldestMessageTime = normalizedMessages.length > 0
      ? Math.min(...normalizedMessages.map(m => m.createdAt))
      : null
  const liveCompleted = props.session.agentState?.completedRequests ?? {}
  const filteredLiveCompleted = oldestMessageTime === null
      ? liveCompleted
      : Object.fromEntries(
          Object.entries(liveCompleted).filter(([, req]) => (req.createdAt ?? 0) >= oldestMessageTime)
      )
  const filteredAgentState = {
      ...props.session.agentState,
      requests: props.session.agentState?.requests ?? {},
      completedRequests: { ...props.permissions.completedRequests, ...filteredLiveCompleted }
  }

Summary

• 发现 1 个主要问题：完成态权限不会实时更新，可能导致权限卡片缺失。建议合并过滤后的实时 completedRequests。

Testing

• Not run (automation)

[github-actions]

[MAJOR] [Realtime] 完成态权限不会随着 SSE 更新

Why this is a problem: 现在 SessionChat 只使用 props.permissions.completedRequests，而该对象只在 fetchLatestMessages/fetchOlderMessages 时更新，message-received 的 SSE 路径不会刷新权限。这样新完成的权限（没有对应 tool message 的情况下）会一直不显示，直到用户手动刷新消息。

Suggested fix:

const oldestMessageTime = normalizedMessages.length > 0
    ? Math.min(...normalizedMessages.map(m => m.createdAt))
    : null
const liveCompleted = props.session.agentState?.completedRequests ?? {}
const filteredLiveCompleted = oldestMessageTime === null
    ? liveCompleted
    : Object.fromEntries(
        Object.entries(liveCompleted).filter(([, req]) => (req.createdAt ?? 0) >= oldestMessageTime)
    )
const filteredAgentState = {
    ...props.session.agentState,
    requests: props.session.agentState?.requests ?? {},
    completedRequests: { ...props.permissions.completedRequests, ...filteredLiveCompleted }
}

[github-actions]

Findings

• [Major] 完成态权限不会随着 SSE 更新 — SessionChat 用 props.permissions.completedRequests 覆盖了 session.agentState.completedRequests，而权限只在拉取分页时更新，SSE 新消息不会更新权限，导致新完成的权限卡片不显示直到刷新。证据：web/src/components/SessionChat.tsx:183, web/src/lib/message-window-store.ts:327, web/src/lib/message-window-store.ts:402
  Suggested fix:

  const oldestMessageTime = normalizedMessages.length > 0
      ? Math.min(...normalizedMessages.map(m => m.createdAt))
      : null
  const liveCompleted = props.session.agentState?.completedRequests ?? {}
  const filteredLiveCompleted = oldestMessageTime === null
      ? liveCompleted
      : Object.fromEntries(
          Object.entries(liveCompleted).filter(([, req]) => (req.createdAt ?? 0) >= oldestMessageTime)
      )
  const filteredAgentState = {
      ...props.session.agentState,
      requests: props.session.agentState?.requests ?? {},
      completedRequests: { ...props.permissions.completedRequests, ...filteredLiveCompleted }
  }

Summary

• 发现 1 个主要问题：完成态权限不会实时更新，可能导致权限卡片缺失。建议合并过滤后的实时 completedRequests。

Testing

• Not run (automation)