v2026.9.9

.flocks/flockshub/plugins/webuis/soc_ui/soc_dashboard/api/routes.yaml

@@ -9,6 +9,11 @@ routes:
     handler: handlers.get_activity
     timeoutMs: 5000
     description: Incremental alert denoise and triage activity
+  - method: GET
+    path: /ai-tasks
+    handler: handlers.get_ai_tasks
+    timeoutMs: 5000
+    description: Authoritative SOC workflow execution task snapshot
   - method: GET
     path: /task-center
     handler: handlers.get_task_center

.flocks/flockshub/plugins/webuis/soc_ui/soc_dashboard/src/severityValues.ts

@@ -1,6 +1,6 @@
 type SeverityItem = {
   label?: string;
-  value?: number;
+  value?: number | null;
 };
 
 export function severityKey(value: unknown) {
@@ -12,16 +12,19 @@ export function severityKey(value: unknown) {
   return '';
 }
 
-export function severityRows(stats: { severityLevels?: SeverityItem[] }) {
+export function severityRows(
+  stats: { severityLevels?: SeverityItem[] },
+  metricsAvailable = true,
+) {
   const counts = { critical: 0, high: 0, medium: 0, low: 0 };
   for (const item of stats.severityLevels || []) {
     const key = severityKey(item.label);
     if (key) counts[key] += Number(item.value || 0);
   }
   return [
-    { key: 'critical', label: '严重', value: counts.critical, tone: 'critical' },
-    { key: 'high', label: '高危', value: counts.high, tone: 'high' },
-    { key: 'medium', label: '中危', value: counts.medium, tone: 'medium' },
-    { key: 'low', label: '低危', value: counts.low, tone: 'low' },
+    { key: 'critical', label: '严重', value: metricsAvailable ? counts.critical : null, tone: 'critical' },
+    { key: 'high', label: '高危', value: metricsAvailable ? counts.high : null, tone: 'high' },
+    { key: 'medium', label: '中危', value: metricsAvailable ? counts.medium : null, tone: 'medium' },
+    { key: 'low', label: '低危', value: metricsAvailable ? counts.low : null, tone: 'low' },
   ];
 }

.flocks/plugins/workflows/loop_host_forensics_fast/workflow.md

@@ -51,14 +51,14 @@
 
 ### 3. 单台巡检（`inspect_host`）
 
-- 工具/模型：Python + `ssh_host_cmd` 预检 + `task`（`subagent_type=host-forensics-fast`）
+- 工具/模型：Python + `ssh_host_cmd` 预检 + `delegate_task`（`subagent_type=host-forensics-fast`）
 - 输入：`hosts`、`host_idx`、`ssh_user`、`per_host_dir`、`batch_report_path`、`triage_results`
 - 处理逻辑：
   - 取当前 `hosts[host_idx]`，计算 `ssh_target`，并归一化出 `ssh_host` / `ssh_user`。
   - 先用 `ssh_host_cmd("echo FLOCKS_SSH_OK")` 做轻量 SSH 预检。
   - 若预检失败：按错误文本归类（如 `auth_failed`、`connect_timeout`、`connection_refused` 等），直接写入索引与单机报告。
   - 若预检通过：构造 prompt，明确要求子 Agent 调用 SSH 工具时分别传 `host` 和 `username`。
-  - 调用 `tool.run_safe('task', ...)` 执行巡检；若仅因超时失败，则自动重试 1 次。
+  - 调用 `tool.run_safe('delegate_task', ...)` 执行巡检；若仅因超时失败，则自动重试 1 次。
   - 将本轮完整输出立即写入 `host_triage/NNNN_slug.md`。
   - 从子 Agent 输出中提取 `Verdict`，未识别时回退为 `UNKNOWN`。
   - 向 `triage_results` 仅追加轻量字段：`{host, ssh_user, ssh_target, ssh_host, success, verdict, failure_category, inspect_attempts, error, per_host_md}`。

.github/workflows/sync-gitee.yml

@@ -75,7 +75,7 @@ jobs:
             > "${release_metadata}"
 
           resolved_tag="$(jq -er '.tag_name' "${release_metadata}")"
-          is_draft="$(jq -er '.draft' "${release_metadata}")"
+          is_draft="$(jq -r '.draft' "${release_metadata}")"
           published_at="$(jq -r '.published_at // empty' "${release_metadata}")"
 
           if [[ "${resolved_tag}" != "${TAG_NAME}" ]]; then
@@ -218,14 +218,18 @@ jobs:
           encoded_tag="$(jq -rn --arg value "${TAG_NAME}" '$value | @uri')"
           release_lookup="${RUNNER_TEMP}/gitee-release-lookup.json"
           release_response="${RUNNER_TEMP}/gitee-release-response.json"
-          lookup_status="$(
+          if ! lookup_status="$(
             curl --silent --show-error --retry 3 \
               --output "${release_lookup}" \
               --write-out '%{http_code}' \
               --get \
               --data-urlencode "access_token=${GITEE_TOKEN}" \
               "${GITEE_API_BASE_URL}/repos/${GITEE_OWNER}/${GITEE_REPO}/releases/tags/${encoded_tag}"
-          )"
+          )"; then
+            echo "::error title=Gitee Release lookup request failed::Could not query ${TAG_NAME} after retries."
+            exit 1
+          fi
+          echo "Gitee Release lookup returned HTTP ${lookup_status}."
 
           common_fields=(
             --data-urlencode "access_token=${GITEE_TOKEN}"
@@ -235,37 +239,73 @@ jobs:
             --data-urlencode "prerelease=${prerelease}"
           )
 
+          release_missing="false"
           if [[ "${lookup_status}" == "200" ]]; then
-            release_id="$(jq -er '.id' "${release_lookup}")"
-            sync_method="PATCH"
-            sync_url="${GITEE_API_BASE_URL}/repos/${GITEE_OWNER}/${GITEE_REPO}/releases/${release_id}"
-            echo "Gitee Release ${TAG_NAME} already exists; updating its metadata only."
+            release_id="$(jq -r '.id // empty' "${release_lookup}")"
+            if [[ -n "${release_id}" ]]; then
+              sync_method="PATCH"
+              sync_url="${GITEE_API_BASE_URL}/repos/${GITEE_OWNER}/${GITEE_REPO}/releases/${release_id}"
+              echo "Gitee Release ${TAG_NAME} already exists; updating its metadata only."
+            elif jq -e 'type == "null"' "${release_lookup}" > /dev/null; then
+              release_missing="true"
+              echo "Gitee returned HTTP 200 with null for missing Release ${TAG_NAME}."
+            else
+              echo "::error title=Unexpected Gitee Release lookup response::HTTP 200 response does not contain a Release ID."
+              exit 1
+            fi
           elif [[ "${lookup_status}" == "404" ]]; then
-            sync_method="POST"
-            sync_url="${GITEE_API_BASE_URL}/repos/${GITEE_OWNER}/${GITEE_REPO}/releases"
-            common_fields+=(--data-urlencode "target_commitish=${VERIFIED_SHA}")
-            echo "Creating Gitee Release ${TAG_NAME} at verified commit ${VERIFIED_SHA}."
+            release_missing="true"
           else
             message="$(jq -r '.message // "unknown Gitee API error"' "${release_lookup}" 2>/dev/null || true)"
             echo "::error title=Gitee Release lookup failed::HTTP ${lookup_status}: ${message}"
             exit 1
           fi
 
-          sync_status="$(
+          if [[ "${release_missing}" == "true" ]]; then
+            sync_method="POST"
+            sync_url="${GITEE_API_BASE_URL}/repos/${GITEE_OWNER}/${GITEE_REPO}/releases"
+            common_fields+=(--data-urlencode "target_commitish=${VERIFIED_SHA}")
+            echo "Creating Gitee Release ${TAG_NAME} at verified commit ${VERIFIED_SHA}."
+          fi
+
+          if ! sync_status="$(
             curl --silent --show-error --retry 3 \
               --output "${release_response}" \
               --write-out '%{http_code}' \
               --request "${sync_method}" \
               "${common_fields[@]}" \
               "${sync_url}"
-          )"
+          )"; then
+            echo "::error title=Gitee Release sync request failed::Release ${sync_method} failed after retries."
+            exit 1
+          fi
+          echo "Gitee Release ${sync_method} returned HTTP ${sync_status}."
 
           if [[ ! "${sync_status}" =~ ^2[0-9][0-9]$ ]]; then
             message="$(jq -r '.message // "unknown Gitee API error"' "${release_response}" 2>/dev/null || true)"
             echo "::error title=Gitee Release sync failed::HTTP ${sync_status}: ${message}"
             exit 1
           fi
 
+          if ! verification_status="$(
+            curl --silent --show-error --retry 3 \
+              --output "${release_response}" \
+              --write-out '%{http_code}' \
+              --get \
+              --data-urlencode "access_token=${GITEE_TOKEN}" \
+              "${GITEE_API_BASE_URL}/repos/${GITEE_OWNER}/${GITEE_REPO}/releases/tags/${encoded_tag}"
+          )"; then
+            echo "::error title=Gitee Release verification request failed::Could not verify ${TAG_NAME} after retries."
+            exit 1
+          fi
+          echo "Gitee Release verification returned HTTP ${verification_status}."
+
+          if [[ "${verification_status}" != "200" ]]; then
+            message="$(jq -r '.message // "unknown Gitee API error"' "${release_response}" 2>/dev/null || true)"
+            echo "::error title=Gitee Release verification failed::HTTP ${verification_status}: ${message}"
+            exit 1
+          fi
+
           synced_tag="$(jq -er '.tag_name' "${release_response}")"
           synced_release_id="$(jq -er '.id' "${release_response}")"
           if [[ "${synced_tag}" != "${TAG_NAME}" ]]; then

README.md

@@ -270,6 +270,18 @@ Non-browser clients (TUI, SDKs, scripts):
   curl -H "Authorization: Bearer <token>" https://flocks.example.com/api/health
   ```
 
+  Query the live runtime status of a specific session:
+
+  ```bash
+  curl -H "Authorization: Bearer <token>" \
+    https://flocks.example.com/api/session/<sessionID>/status
+  ```
+
+  `status.type` is one of `idle`, `queued`, `busy`, `retry`, `compacting`, or
+  `dreaming`. Automation clients can use `isProcessing` to determine whether
+  accepted work is still running or waiting. `idle` only means that the session
+  is currently inactive; it does not indicate whether the previous run succeeded.
+
 Reverse-proxy deployments:
 
 - Always set `X-Forwarded-For` on the proxy. Without it, any direct

README_zh.md

@@ -261,6 +261,17 @@ flocks start --server-host 0.0.0.0 --webui-host 0.0.0.0
   curl -H "Authorization: Bearer <token>" https://flocks.example.com/api/health
   ```
 
+  查询指定会话的实时运行状态：
+
+  ```bash
+  curl -H "Authorization: Bearer <token>" \
+    https://flocks.example.com/api/session/<sessionID>/status
+  ```
+
+  `status.type` 可能为 `idle`、`queued`、`busy`、`retry`、`compacting` 或
+  `dreaming`。自动化调用可通过 `isProcessing` 判断是否仍有已接收的工作正在执行或等待执行；
+  `idle` 只表示当前空闲，不代表上一次执行成功。
+
 反向代理部署：
 
 - 反代必须主动注入 `X-Forwarded-For`。若缺失该头，且前方存在代理，中间件会拒绝信任回环地址，避免任何直连本机的请求被自动提升为 `admin`。

flocks/agent/agents/hephaestus/prompt_builder.py

@@ -29,7 +29,6 @@ def inject(
         available_agents=available_agents,
         available_tools=tools,
         available_skills=skills,
-        use_task_system=False,
     )
 
 
@@ -39,6 +38,8 @@ def build_hephaestus_prompt(
     available_skills: List["AvailableSkill"],
     use_task_system: bool = False,
 ) -> str:
+    del use_task_system
+
     from flocks.agent.prompt_utils import (
         build_agent_selection_table,
         build_key_triggers_section,
@@ -62,7 +63,7 @@ def build_hephaestus_prompt(
     oracle_section = build_oracle_section(available_agents)
     hard_blocks = build_hard_blocks_section()
     anti_patterns = build_anti_patterns_section()
-    todo_discipline = _todo_discipline_section(use_task_system)
+    todo_discipline = _todo_discipline_section()
 
     template = """You are Hephaestus, an autonomous deep worker for software engineering.
 
@@ -245,44 +246,7 @@ def build_hephaestus_prompt(
     return prompt
 
 
-def _todo_discipline_section(use_task_system: bool) -> str:
-    if use_task_system:
-        return """## Task Discipline (NON-NEGOTIABLE)
-
-**Track ALL multi-step work with tasks. This is your execution backbone.**
-
-### When to Create Tasks (MANDATORY)
-
-| Trigger | Action |
-|---------|--------|
-| 2+ step task | `TaskCreate` FIRST, atomic breakdown |
-| Uncertain scope | `TaskCreate` to clarify thinking |
-| Complex single task | Break down into trackable steps |
-
-### Workflow (STRICT)
-
-1. **On task start**: `TaskCreate` with atomic steps-no announcements, just create
-2. **Before each step**: `TaskUpdate(status="in_progress")` (ONE at a time)
-3. **After each step**: `TaskUpdate(status="completed")` IMMEDIATELY (NEVER batch)
-4. **Scope changes**: Update tasks BEFORE proceeding
-
-### Why This Matters
-
-- **Execution anchor**: Tasks prevent drift from original request
-- **Recovery**: If interrupted, tasks enable seamless continuation
-- **Accountability**: Each task = explicit commitment to deliver
-
-### Anti-Patterns (BLOCKING)
-
-| Violation | Why It Fails |
-|-----------|--------------|
-| Skipping tasks on multi-step work | Steps get forgotten, user has no visibility |
-| Batch-completing multiple tasks | Defeats real-time tracking purpose |
-| Proceeding without `in_progress` | No indication of current work |
-| Finishing without completing tasks | Task appears incomplete |
-
-**NO TASKS ON MULTI-STEP WORK = INCOMPLETE WORK.**"""
-
+def _todo_discipline_section() -> str:
     return """## Todo Discipline (NON-NEGOTIABLE)
 
 **Track ALL multi-step work with todos. This is your execution backbone.**