feat(flow): 实时全链路流程可视化 P1——trace→graph_update→前端全链路流程页(design/19)

后端: trace/graph.go(RunGraph 图构建器,kind/status 映射,父子优先连线,脱敏白名单+截断);
       loop/flow.go(FlowPublisher 按会话增量发布 ws.graph_update,仅主人web会话); loop span
       start/finish 折入图; run.go StartRound/EndRound; wire.go 组装+注入.
前端: Flow.tsx(全链路流程页:FlowGraphView+会话/节点/开始/耗时卡片+状态计数+节点点开日志);
       FlowGraph 组件加 onNodeClick; types/wsParse 扩展; router/sections/AdminApp 注册 flow;
       api-client.md §3.5 graph_update 契约.
验证: 后端 build/vet/test 全绿+flow_test.go 集成(span→graph→ws.graph_update主干); 前端 build 绿.
红线: 单二进制零新依赖; 工具参数/结果脱敏; 仅主人web会话; 身份靠actor元数据; 只读不虚构.
P2(并行子代理分支/泳道/节点实时日志)后置.

cmd/cyrene/wire.go

@@ -315,6 +315,17 @@ func (a *app) wireRuntime() error {
 	store := a.memStore
 
 	tracer := trace.New(trace.NewJSONRecorder(os.Stderr))
+	// Realtime flow visualization (design/19 §1): the publisher accumulates the
+	// loop's trace spans into a per-session flow graph and publishes
+	// ws.graph_update on each span transition. It is gated to the owner's web
+	// sessions ("web" and web sub-sessions), so IM / stranger / sub-agent turns
+	// never leak into the admin panel. A nil flow keeps the loop's prior behavior.
+	flowPub := loop.NewFlowPublisher(
+		func(subject string, payload any) { _ = a.bus.Publish(context.Background(), subject, payload) },
+		func(sessionID string) bool {
+			return sessionID == history.MainSessionID || strings.HasPrefix(sessionID, history.MainSessionID+":")
+		},
+	)
 	checkpoint, perr := persist.New(context.Background(), a.db, a.log)
 	if perr != nil {
 		return fmt.Errorf("checkpoint store: %w", perr)
@@ -348,6 +359,7 @@ func (a *app) wireRuntime() error {
 		Extractor:     memory.NewManualExtractor(personaID, "owner"),
 		Checkpoint:    checkpoint,
 		Tracer:        tracer,
+		Flow:          flowPub,
 		Guards:        guards,
 		PersonaID:     personaID,
 		Timezone:      a.cfg.Timezone,