新增调用前端分区渲染功能，节点通过 ref 文件传输，并增加简单认证

src/routes/chat.ts

@@ -5,9 +5,11 @@ import { z } from "zod";
 import { type LearningOrchestrator } from "../learning/orchestrator.js";
 import { logger } from "../logger.js";
 import { MemoryStore } from "../memory/store.js";
+import { type ResultReferenceStore } from "../results/store.js";
 import { type OpencodeRuntimeAdapter } from "../runtime/opencode.js";
 import { type ChatSessionBridge } from "../chat/sessionBridge.js";
 import { writeLlmRequestAuditLog } from "../audit/llmRequestAudit.js";
+import { toActorKey } from "../utils/fileStore.js";
 
 const supportedModels = [
   "deepseek/deepseek-v4-flash",
@@ -36,9 +38,47 @@ export const buildChatRouter = (
   runtime: OpencodeRuntimeAdapter,
   memoryStore: MemoryStore,
   learningOrchestrator: LearningOrchestrator,
+  resultReferenceStore: ResultReferenceStore,
 ) => {
   const chatRouter = Router();
 
+  chatRouter.get("/render-ref/:renderRef", async (req, res) => {
+    const renderRef = req.params.renderRef?.trim();
+    const userId = req.header("x-user-id")?.trim();
+    const projectId = req.header("x-project-id") ?? undefined;
+    const clientSessionId =
+      typeof req.query.session_id === "string"
+        ? req.query.session_id.trim()
+        : undefined;
+
+    if (!userId) {
+      res.status(400).json({
+        message: "x-user-id is required",
+      });
+      return;
+    }
+
+    if (!renderRef) {
+      res.status(400).json({
+        message: "render_ref is required",
+      });
+      return;
+    }
+
+    const result = await resultReferenceStore.getFullAuthorized(renderRef, {
+      actorKey: toActorKey(userId),
+      clientSessionId,
+      projectId,
+    });
+
+    if (!result) {
+      res.status(404).json({ message: "render_ref not found" });
+      return;
+    }
+
+    res.json(result);
+  });
+
   chatRouter.post("/abort", async (req, res) => {
     const parsed = abortPayloadSchema.safeParse(req.body);
     if (!parsed.success) {
@@ -1037,6 +1077,7 @@ const toolLabels: Record<string, string> = {
   view_history: "历史数据面板",
   view_scada: "SCADA 面板",
   show_chart: "图表渲染",
+  render_junctions: "节点渲染",
 };
 
 const buildPromptWithLearningContext = async (