Unify referenced result validation

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

src/server.ts

@@ -8,6 +8,7 @@ import { config } from "./config.js";
 import { logger } from "./logger.js";
 import { LearningOrchestrator } from "./learning/orchestrator.js";
 import { MemoryStore } from "./memory/store.js";
+import { ResultReferenceResolver } from "./results/resolver.js";
 import { ResultReferenceStore } from "./results/store.js";
 import { buildChatRouter } from "./routes/chat.js";
 import { opencodeRuntime } from "./runtime/opencode.js";
@@ -27,10 +28,11 @@ const learningOrchestrator = new LearningOrchestrator(
   sessionHistoryStore,
 );
 const resultReferenceStore = new ResultReferenceStore();
+const resultReferenceResolver = new ResultReferenceResolver(resultReferenceStore);
 const dynamicHttpExecutor = new DynamicHttpExecutor(resultReferenceStore);
 const internalToken = config.AGENT_INTERNAL_TOKEN ?? randomUUID();
 
-// 这个 token 只用于仍需服务端上下文的工具桥（dynamic_http_call / fetch_result_ref）。
+// 这个 token 只用于仍需服务端上下文的工具桥（dynamic_http_call / fetch_result_ref / store_render_ref）。
 process.env.TJWATER_AGENT_INTERNAL_TOKEN = internalToken;
 
 app.use(cors());
@@ -121,12 +123,17 @@ app.post("/internal/tools/fetch-result-ref", async (req, res) => {
     return;
   }
 
-  const result = await resultReferenceStore.getAuthorized(resultRef, {
-    actorKey: context.actorKey,
-    maxItems:
-      typeof req.body?.max_items === "number" ? req.body.max_items : undefined,
-    projectId: context.projectId,
-  });
+  const result = await resultReferenceResolver.getAuthorized(
+    resultRef,
+    {
+      actorKey: context.actorKey,
+      projectId: context.projectId,
+    },
+    {
+      maxItems:
+        typeof req.body?.max_items === "number" ? req.body.max_items : undefined,
+    },
+  );
 
   if (!result) {
     res.status(404).json({ message: "result_ref not found" });
@@ -136,6 +143,55 @@ app.post("/internal/tools/fetch-result-ref", async (req, res) => {
   res.json(result);
 });
 
+app.post("/internal/tools/store-render-ref", async (req, res) => {
+  if (req.header("x-agent-internal-token") !== internalToken) {
+    res.status(403).json({ message: "forbidden" });
+    return;
+  }
+
+  const sessionId = typeof req.body?.sessionId === "string" ? req.body.sessionId : "";
+  const filePath = typeof req.body?.file_path === "string" ? req.body.file_path.trim() : "";
+  const context = sessionBridge.getSessionContext(sessionId);
+  if (!context) {
+    res.status(404).json({
+      message: "session context not found",
+      detail: sessionId,
+    });
+    return;
+  }
+  if (!filePath) {
+    res.status(400).json({ message: "file_path is required" });
+    return;
+  }
+
+  try {
+    const record = await resultReferenceResolver.registerRenderPayloadFile(filePath, {
+      actorKey: context.actorKey,
+      clientSessionId: context.clientSessionId,
+      projectId: context.projectId,
+      projectKey: context.projectKey,
+      sessionId,
+      source: "migration",
+      traceId: context.traceId,
+    });
+    res.json({
+      ok: true,
+      render_ref: record.resultRef,
+      stored_at: record.createdAt,
+      preview: record.preview,
+      kind: record.kind,
+      schema_version: record.schemaVersion,
+      source: record.source,
+    });
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    res.status(400).json({
+      message: "store render ref failed",
+      detail,
+    });
+  }
+});
+
 app.post("/internal/tools/session-search", async (req, res) => {
   if (req.header("x-agent-internal-token") !== internalToken) {
     res.status(403).json({ message: "forbidden" });
@@ -177,7 +233,7 @@ app.use(
     opencodeRuntime,
     memoryStore,
     learningOrchestrator,
-    resultReferenceStore,
+    resultReferenceResolver,
   ),
 );