@gt-fe/eap-runtime 0.0.30 → 0.0.31

package/dist/api/handlers/invoke.handler.js

@@ -16,6 +16,7 @@
  */
 import { randomUUID } from 'node:crypto';
 import { buildHitlWaitingTaskOutput, loadModelFacingHistory, messageRecordsToGraphMessages, persistGraphMessageBaseline, turnGraphMessagesAfterCompression, persistHitlWaitingPlaceholder, persistTurnTranscript, persistUserTurnMessage, resolveCheckpointThreadId, sessionVisibleGraphMessages, } from '../../session/persist-turn-messages.js';
+import { applyInjectedAssistant, collectPublicArtifactLinks, injectPublicArtifactLinks, } from '../../tool/inject-public-artifact-links.js';
 import { SessionBudgetExhaustedError } from '../../token/session-budget-checker.js';
 import { TokenBudgetExhaustedError } from '../../token/token-budget-guard.js';
 import { recordTaskTokenUsages, tokenUsagesFromLlmChannel, } from '../../token/record-task-token-usage.js';
@@ -380,21 +381,24 @@ export class InvokeOrchestrator {
                 },
             ]);
         }
-        // ─── Step 7: 完成 Task (running → success) ───
-        await this.taskService.updateStatus(task.id, 'success', graphResult.output);
         // ─── Step 7b: 持久化本轮 transcript（统一顺序：assistant tool_calls → tool → assistant 文本）───
         // 切点是入图 messages 基线（压缩 `__set` 后 Graph 短于 Session 全文）。user 已在 4b 写入。
         const allMessages = Array.isArray(graphResult.finalState?.messages)
             ? graphResult.finalState.messages
             : [];
         const newMessages = sessionVisibleGraphMessages(allMessages.slice(persistBaseline), finishPoints);
+        const links = collectPublicArtifactLinks(allMessages);
+        const { injected } = injectPublicArtifactLinks(graphResult.output ?? '', links);
+        const persisted = applyInjectedAssistant(newMessages, injected, links);
+        // ─── Step 7: 完成 Task (running → success) ───
+        await this.taskService.updateStatus(task.id, 'success', injected);
         const duration = Date.now() - startTime;
         await persistTurnTranscript(this.messageService, {
             sessionId,
             taskId: task.id,
             correlationId,
-            messages: newMessages,
-            fallbackAssistantContent: graphResult.output ?? '',
+            messages: persisted,
+            fallbackAssistantContent: injected,
             assistantTokenCount: tokenUsage.output,
             assistantDurationMs: duration,
         });
@@ -404,7 +408,7 @@ export class InvokeOrchestrator {
         return this.buildResponse(traceId, {
             taskId: task.id,
             sessionId,
-            output: graphResult.output,
+            output: injected,
             tokenUsage,
             duration,
             status: 'success',

package/dist/api/handlers/stream.handler.js

@@ -20,6 +20,7 @@
  * @see requirements.md Requirement 11 AC2
  */
 import { buildHitlWaitingTaskOutput, buildTurnTranscriptFromStreamEvents, loadModelFacingHistory, turnGraphMessagesAfterCompression, extractStreamReasoning, applyStreamTextDelta, createStreamAssistantBuckets, visibleStreamAssistantText, streamAssistantTexts, messageRecordsToGraphMessages, persistHitlWaitingPlaceholder, persistTurnTranscript, persistUserTurnMessage, appendTerminalToolResult, } from '../../session/persist-turn-messages.js';
+import { collectPublicArtifactLinks, collectPublicArtifactLinksFromEvent, injectPublicArtifactLinks, mergeArtifactLinks, } from '../../tool/inject-public-artifact-links.js';
 import { SessionBudgetExhaustedError } from '../../token/session-budget-checker.js';
 import { TokenBudgetExhaustedError } from '../../token/token-budget-guard.js';
 import { recordTaskTokenUsages } from '../../token/record-task-token-usage.js';
@@ -268,6 +269,7 @@ export class StreamOrchestrator {
         let assistantReasoningContent;
         const pendingToolCalls = [];
         const toolResults = [];
+        const artifactLinks = [];
         // ─── Step 6: Graph.stream() 流式执行 ───
         try {
             const eventStream = runWithExecutionTrace({ abortSignal }, () => this.graphEngine.stream(graph, {
@@ -326,6 +328,7 @@ export class StreamOrchestrator {
                     }
                 }
                 appendTerminalToolResult(runtimeEvent.type, runtimeEvent.payload, toolResults);
+                collectPublicArtifactLinksFromEvent(runtimeEvent.type, runtimeEvent.payload, artifactLinks);
                 const streamedReasoning = extractStreamReasoning(runtimeEvent.type, runtimeEvent.payload);
                 if (streamedReasoning)
                     assistantReasoningContent = streamedReasoning;
@@ -387,10 +390,18 @@ export class StreamOrchestrator {
             this.timeoutManager?.clearTimer(taskId);
         }
         // ─── Step 7: 发送结束事件序列 ───
-        // Emit: response.final（带完整 assistant 文本，供客户端兜底）
         const tokenStats = this.tokenStatsService.getTaskStats(taskId);
+        const visible = visibleStreamAssistantText(assistantBuckets);
+        const links = mergeArtifactLinks(artifactLinks, collectPublicArtifactLinks(toolResults));
+        const { injected, suffix } = injectPublicArtifactLinks(visible, links);
+        if (suffix) {
+            emitter.emit(this.buildSSEEvent('response.chunk', correlationId, taskId, {
+                content: suffix,
+                format: 'text',
+            }));
+        }
         emitter.emit(this.buildSSEEvent('response.final', correlationId, taskId, {
-            content: visibleStreamAssistantText(assistantBuckets),
+            content: injected,
             format: 'text',
         }));
         const totalTokens = (tokenStats.total.input ?? 0) + (tokenStats.total.output ?? 0);
@@ -424,8 +435,8 @@ export class StreamOrchestrator {
             messages: buildTurnTranscriptFromStreamEvents({
                 pendingToolCalls,
                 toolResults,
-                assistantTexts: streamAssistantTexts(assistantBuckets),
-                assistantText: visibleStreamAssistantText(assistantBuckets),
+                assistantTexts: suffix ? undefined : streamAssistantTexts(assistantBuckets),
+                assistantText: injected,
                 finishPoints: graph.finishPoints,
                 toolCallReasoningContent,
                 assistantReasoningContent,

package/dist/common/index.d.ts

@@ -4,3 +4,4 @@ export * from './health.js';
 export * from './agent-code.js';
 export * from './trace-id.js';
 export { RUNTIME_PACKAGE_VERSION } from './runtime-package-version.js';
+export { userRoot, USERS_DIR_NAME, MISSING_USER_DIR } from './user-root.js';

package/dist/common/index.js

@@ -4,3 +4,4 @@ export * from './health.js';
 export * from './agent-code.js';
 export * from './trace-id.js';
 export { RUNTIME_PACKAGE_VERSION } from './runtime-package-version.js';
+export { userRoot, USERS_DIR_NAME, MISSING_USER_DIR } from './user-root.js';

package/dist/common/user-root.d.ts

@@ -0,0 +1,8 @@
+export declare const MISSING_USER_DIR = "\u7F3A\u5C11\u7528\u6237\u76EE\u5F55\uFF0C\u62D2\u7EDD\u8BE5\u64CD\u4F5C";
+/** `agents/<code>/users/`：与 `<ver>` 平级，不是版本目录。 */
+export declare const USERS_DIR_NAME = "users";
+/**
+ * jail 写根：`dirname(agentDir)/users/<userId>`。
+ * `agentDir` 仍是版本目录 `agents/<code>/<ver>`。
+ */
+export declare function userRoot(agentDir: string, userId: string): string;

package/dist/common/user-root.js

@@ -0,0 +1,19 @@
+import path from 'node:path';
+export const MISSING_USER_DIR = '缺少用户目录，拒绝该操作';
+/** `agents/<code>/users/`：与 `<ver>` 平级，不是版本目录。 */
+export const USERS_DIR_NAME = 'users';
+/**
+ * jail 写根：`dirname(agentDir)/users/<userId>`。
+ * `agentDir` 仍是版本目录 `agents/<code>/<ver>`。
+ */
+export function userRoot(agentDir, userId) {
+    const dir = agentDir.trim();
+    const uid = userId.trim();
+    if (!dir || !uid) {
+        throw new Error(MISSING_USER_DIR);
+    }
+    if (uid === '.' || uid === '..' || /[\\/]/.test(uid)) {
+        throw new Error('非法用户标识');
+    }
+    return path.resolve(path.dirname(dir), USERS_DIR_NAME, uid);
+}

package/dist/graph/adapters/langgraph.adapter.js

@@ -374,6 +374,8 @@ export class LangGraphAdapter {
                     ...(progress.toolset ? { toolset: progress.toolset } : {}),
                     content: progress.content,
                     success: true,
+                    ...(progress.file ? { file: progress.file } : {}),
+                    ...(progress.files?.length ? { files: progress.files } : {}),
                     ...loc,
                 },
             });
@@ -390,6 +392,9 @@ export class LangGraphAdapter {
                     ...(progress.toolset ? { toolset: progress.toolset } : {}),
                     error: progress.error ?? 'Unknown error',
                     willRetry: progress.willRetry === true,
+                    ...(progress.content ? { content: progress.content } : {}),
+                    ...(progress.file ? { file: progress.file } : {}),
+                    ...(progress.files?.length ? { files: progress.files } : {}),
                     ...loc,
                 },
             });
@@ -1592,10 +1597,20 @@ export class LangGraphAdapter {
                     continue;
                 }
                 if (msg.role === 'tool') {
-                    // tool.result / tool.error 由 Tool 节点旁路发出，此处只补 file.created
+                    // tool.result / tool.error 由 Tool 节点旁路发出（已带 file/files）；此处再补 file.created
                     const raw = typeof msg.content === 'string' ? msg.content : '';
-                    const file = msg.file ?? fileArtifactFromToolOutput(raw);
-                    if (file) {
+                    const files = [
+                        ...(msg.file ? [msg.file] : []),
+                        ...(msg.files ?? []),
+                    ];
+                    if (files.length === 0) {
+                        const parsed = fileArtifactFromToolOutput(raw);
+                        if (parsed)
+                            files.push(parsed);
+                    }
+                    for (const file of files) {
+                        if (!file?.url)
+                            continue;
                         yield {
                             type: 'file.created',
                             taskId: undefined,
@@ -1662,6 +1677,7 @@ export class LangGraphAdapter {
                 success: typeof m['success'] === 'boolean' ? m['success'] : undefined,
                 reasoningContent: typeof m['reasoningContent'] === 'string' ? m['reasoningContent'] : undefined,
                 file: readFileArtifact(m['file']),
+                files: readFileArtifactList(m['files']),
             };
         });
     }
@@ -1679,3 +1695,14 @@ function readFileArtifact(value) {
         url: rec.url,
     };
 }
+function readFileArtifactList(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const out = [];
+    for (const item of value) {
+        const file = readFileArtifact(item);
+        if (file)
+            out.push(file);
+    }
+    return out.length > 0 ? out : undefined;
+}

package/dist/graph/adapters/skill-read.js

@@ -1,5 +1,6 @@
 import { realpathSync } from 'node:fs';
 import path from 'node:path';
+import { userRoot } from '../../common/user-root.js';
 function tryRealpath(p) {
     try {
         return realpathSync(p);
@@ -49,12 +50,20 @@ export function classifySkillSpace(bundleOrFilePath, opts) {
             return 'agent';
         const uid = opts?.userId?.trim();
         if (uid) {
-            const user = `${root}/users/${uid}/skills`;
-            if (target === user || target.startsWith(`${user}/`))
-                return 'user';
+            try {
+                const user = normalizeForMatch(path.join(userRoot(agentDir, uid), 'skills'));
+                if (target === user || target.startsWith(`${user}/`))
+                    return 'user';
+            }
+            catch {
+                // 非法 userId 时不按用户槽判定
+            }
         }
-        if (new RegExp(`^${escapeRegExp(root)}/users/[^/]+/skills(/|$)`).test(target))
+        const usersRoot = normalizeForMatch(path.join(path.dirname(agentDir), 'users'));
+        if ((target === usersRoot || target.startsWith(`${usersRoot}/`)) &&
+            /(^|\/)skills(\/|$)/.test(target.slice(usersRoot.length))) {
             return 'user';
+        }
         return 'local';
     }
     if (/(^|\/)preinstall\/skills(\/|$)/i.test(target))

package/dist/graph/contracts/executable-graph.d.ts

@@ -276,13 +276,19 @@ export interface GraphMessage {
      * 多轮请求必须原样回传，否则上游会 400。
      */
     reasoningContent?: string;
-    /** 工具产出的文件；仅 Runtime 发 file.created，不进模型正文 */
+    /** 工具产出的文件；SSE tool.result / tool.error 与 file.created 共用，不进模型正文 */
     file?: {
         fileName: string;
         fileType: string;
         size: number;
         url: string;
     };
+    files?: Array<{
+        fileName: string;
+        fileType: string;
+        size: number;
+        url: string;
+    }>;
 }
 /** Tool 调用信息 */
 export interface ToolCallInfo {

package/dist/graph/nodes/tool-node.d.ts

@@ -10,7 +10,7 @@
  * @see requirements.md Requirement 8 AC1, AC3, AC5
  */
 import type { NodeRetryConfig } from '../contracts/executable-graph.js';
-import type { AuthContext } from '../../tool/tool-executor.interface.js';
+import type { AuthContext, ToolCallResult } from '../../tool/tool-executor.interface.js';
 import type { ToolOrchestrator } from '../../tool/tool-orchestrator.js';
 import type { ToolResultInjector } from '../../tool/tool-result-injector.js';
 import type { SkillDirRef } from '../adapters/skill-read.js';
@@ -41,6 +41,9 @@ export interface ToolNodeProgress {
     arguments?: Record<string, unknown>;
     content?: string;
     error?: string;
+    /** 与 ToolCallResult.file / files 同形；completed 与失败终态都带 */
+    file?: ToolCallResult['file'];
+    files?: ToolCallResult['files'];
     executionTime?: number;
     node?: string;
     skillId?: string;

package/dist/graph/nodes/tool-node.js

@@ -19,9 +19,17 @@ import { resolveCheckpointThreadId } from '../../session/persist-turn-messages.j
 import { mcpToolsetCode, toolTraceIdentity } from '../../tool/mcp-list.js';
 import { resolveExecutionTrace, warnTraceSpanFailure, } from '../execution-trace-context.js';
 import { emitRuntimeLog } from '../../common/logger.js';
+import { toolResultHasArtifacts } from '../../tool/inject-public-artifact-links.js';
 import { decideBeforeTool, } from '../../execution/interceptors.js';
 import { isRetryableToolFailure, resolveToolRetryConfig, sleepToolRetry, toolRetryDelayMs, } from '../../tool/tool-retry.js';
 import { isIsolatedSkillState } from '../adapters/skill-isolate.js';
+function toolArtifactFields(result) {
+    return {
+        ...(result.content ? { content: result.content } : {}),
+        ...(result.file ? { file: result.file } : {}),
+        ...(result.files?.length ? { files: result.files } : {}),
+    };
+}
 function skillDirsFromState(state) {
     const defs = state['skillDefinitions'];
     return Object.values(defs ?? {})
@@ -302,6 +310,7 @@ export class ToolNode {
                         status: 'completed',
                         arguments: req.arguments,
                         content: result.content,
+                        ...toolArtifactFields(result),
                         executionTime,
                         ...(skillIdentity?.skillSpace ? { skillSpace: skillIdentity.skillSpace } : {}),
                         ...(skillIdentity?.skillVersion ? { skillVersion: skillIdentity.skillVersion } : {}),
@@ -317,6 +326,7 @@ export class ToolNode {
                         status: 'error',
                         arguments: req.arguments,
                         error: result.error ?? 'unknown error',
+                        ...toolArtifactFields(result),
                         executionTime,
                     });
                 }
@@ -421,12 +431,15 @@ export class ToolNode {
             role: 'tool',
             content: result.success
                 ? result.content
-                : `[Tool Error] ${result.error ?? 'unknown error'}`,
+                : toolResultHasArtifacts(result) && result.content
+                    ? `${result.content}\n[Tool Error] ${result.error ?? 'unknown error'}`
+                    : `[Tool Error] ${result.error ?? 'unknown error'}`,
             // 以下字段符合 LLM function-calling 协议（ToolMessage 接口）
             toolCallId: result.toolCallId,
             toolName: result.toolName,
             success: result.success,
             ...('file' in result && result.file ? { file: result.file } : {}),
+            ...('files' in result && result.files?.length ? { files: result.files } : {}),
         }));
         const lastSpanId = [...spanIds].reverse().find((id) => Boolean(id));
         return {
@@ -477,6 +490,7 @@ export class ToolNode {
                 status: 'error',
                 arguments: req.arguments,
                 error: last.error ?? 'unknown error',
+                ...toolArtifactFields(last),
                 willRetry: true,
             });
             await sleepToolRetry(toolRetryDelayMs(attempt, retry.backoff));

package/dist/registry/deployment-snapshot.d.ts

@@ -4,7 +4,7 @@
  * 目录（Agent 自包含，无全局共享层）：
  *   {root}/agents/<agentCode>/<version>/preinstall/tools/<toolsetCode>/
  *   {root}/agents/<agentCode>/<version>/preinstall/skills/<skillCode>/
- *   {root}/agents/<agentCode>/<version>/users/<userId>/skills/<skillCode>/
+ *   {root}/agents/<agentCode>/users/<userId>/skills/<skillCode>/
  *
  * 命名：agentCode / toolsetCode / skillCode / toolName 均为语义化小写标识；
  * Skill 目录无版本层：包内必含 SKILL.md（Agent Skills）。

package/dist/registry/deployment-snapshot.js

@@ -4,7 +4,7 @@
  * 目录（Agent 自包含，无全局共享层）：
  *   {root}/agents/<agentCode>/<version>/preinstall/tools/<toolsetCode>/
  *   {root}/agents/<agentCode>/<version>/preinstall/skills/<skillCode>/
- *   {root}/agents/<agentCode>/<version>/users/<userId>/skills/<skillCode>/
+ *   {root}/agents/<agentCode>/users/<userId>/skills/<skillCode>/
  *
  * 命名：agentCode / toolsetCode / skillCode / toolName 均为语义化小写标识；
  * Skill 目录无版本层：包内必含 SKILL.md（Agent Skills）。
@@ -18,6 +18,7 @@ import { findSkillEntryFile } from './skill-tree.js';
 import { preloadMissing, preloadPackageCorrupt, } from './preload-errors.js';
 import { isRequireChecksum, resolvePreloadBehaviorFlags, } from './preload-flags.js';
 import { emitRuntimeLog } from '../common/logger.js';
+import { userRoot, USERS_DIR_NAME } from '../common/user-root.js';
 async function pathExists(p) {
     try {
         await access(p, fsConstants.F_OK);
@@ -141,7 +142,9 @@ async function pickLatestVersionDir(parent) {
     if (!(await pathExists(parent)))
         return null;
     const entries = await readdir(parent, { withFileTypes: true });
-    const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
+    const dirs = entries
+        .filter((e) => e.isDirectory() && e.name !== USERS_DIR_NAME)
+        .map((e) => e.name);
     if (dirs.includes('current')) {
         return path.join(parent, 'current');
     }
@@ -534,7 +537,7 @@ export class FileSystemDeploymentSnapshot {
         // 用户装配 → 开发态作者源 extraRoots → Agent 预装
         const candidates = [];
         if (userId != null && userId !== '') {
-            candidates.push(path.join(agentDir, 'users', userId, 'skills', ref.skillId));
+            candidates.push(path.join(userRoot(agentDir, userId), 'skills', ref.skillId));
         }
         for (const root of extraRoots) {
             if (root)

package/dist/registry/skill-tree.d.ts

@@ -25,6 +25,6 @@ export declare function inspectAgentSkillTree(agentDir: string, userId?: string,
  */
 export declare function watchPreinstallSkillRoot(preinstallRoot: string, onChange: () => void, debounceMs?: number): () => void;
 export declare function watchSkillRoots(roots: string[], onChange: () => void, debounceMs?: number): () => void;
-export declare function watchAgentSkillDirs(agentDir: string, onChange: () => void, debounceMs?: number, extraRoots?: string[]): () => void;
+export declare function watchAgentSkillDirs(agentDir: string, onChange: () => void, debounceMs?: number, extraRoots?: string[], userId?: string): () => void;
 /** EAP_SKILL_HOT_RELOAD：dev 默认开；server/desktop 默认关 */
 export declare function resolveSkillHotReload(deploymentContext: string, explicit?: boolean): boolean;

package/dist/registry/skill-tree.js

@@ -2,7 +2,7 @@
  * Agent 自带 Skill 目录扫描（§3.1）
  *
  *   agents/<code>/<ver>/preinstall/skills/<skillCode>/
- *   agents/<code>/<ver>/users/<userId>/skills/<skillCode>/   同名覆盖
+ *   agents/<code>/users/<userId>/skills/<skillCode>/   同名覆盖（写根与 <ver> 平级）
  *
  * 热加载用 stamp：目录/文件 mtime 变化则缓存失效。
  */
@@ -11,6 +11,7 @@ import { watch } from 'node:fs';
 import { constants as fsConstants } from 'node:fs';
 import path from 'node:path';
 import { SKILL_ENTRY_CANDIDATES } from '@gt-fe/eap-contracts';
+import { userRoot } from '../common/user-root.js';
 const SKILL_CODE = /^[a-z0-9][a-z0-9-]*$/;
 async function exists(p) {
     try {
@@ -75,7 +76,7 @@ export async function readSkillAssembly(agentDir, userId) {
     const candidates = [];
     const uid = userId?.trim();
     if (uid)
-        candidates.push(path.join(agentDir, 'users', uid, '.assembly.json'));
+        candidates.push(path.join(userRoot(agentDir, uid), '.assembly.json'));
     candidates.push(path.join(agentDir, '.assembly.json'), path.join(agentDir, 'assembly.json'));
     for (const file of candidates) {
         const parsed = await readAssemblyFile(file);
@@ -102,7 +103,7 @@ export async function skillAssemblyStamp(agentDir, userId) {
     const candidates = [];
     const uid = userId?.trim();
     if (uid)
-        candidates.push(path.join(agentDir, 'users', uid, '.assembly.json'));
+        candidates.push(path.join(userRoot(agentDir, uid), '.assembly.json'));
     candidates.push(path.join(agentDir, '.assembly.json'), path.join(agentDir, 'assembly.json'));
     let latest = 0;
     for (const file of candidates) {
@@ -114,7 +115,7 @@ export function preinstallSkillsDir(agentDir) {
     return path.join(agentDir, 'preinstall', 'skills');
 }
 export function userSkillsDir(agentDir, userId) {
-    return path.join(agentDir, 'users', userId, 'skills');
+    return path.join(userRoot(agentDir, userId), 'skills');
 }
 export async function inspectAgentSkillTree(agentDir, userId, extraRoots = []) {
     const roots = [preinstallSkillsDir(agentDir), ...extraRoots.filter(Boolean)];
@@ -205,8 +206,12 @@ export function watchSkillRoots(roots, onChange, debounceMs = 200) {
             watcher.close();
     };
 }
-export function watchAgentSkillDirs(agentDir, onChange, debounceMs = 200, extraRoots = []) {
-    return watchSkillRoots([preinstallSkillsDir(agentDir), path.join(agentDir, 'users'), ...extraRoots], onChange, debounceMs);
+export function watchAgentSkillDirs(agentDir, onChange, debounceMs = 200, extraRoots = [], userId) {
+    const roots = [preinstallSkillsDir(agentDir), ...extraRoots];
+    const uid = userId?.trim();
+    if (uid)
+        roots.push(userSkillsDir(agentDir, uid));
+    return watchSkillRoots(roots, onChange, debounceMs);
 }
 /** EAP_SKILL_HOT_RELOAD：dev 默认开；server/desktop 默认关 */
 export function resolveSkillHotReload(deploymentContext, explicit) {

package/dist/runtime/agent-runtime.js

@@ -16,6 +16,7 @@ import { toLoadedSkillMap } from '../tool/system-prompt-builder.js';
 import { assembleLoadedTools } from '../tool/harness-primitives.js';
 import { createFileLlmTurnLogFromEnv, } from '../debug/llm-turn-log.js';
 import { buildHitlWaitingTaskOutput, buildTurnTranscriptFromStreamEvents, loadModelFacingHistory, turnGraphMessagesAfterCompression, extractHitlThreadId, extractStreamReasoning, applyStreamTextDelta, createStreamAssistantBuckets, visibleStreamAssistantText, streamAssistantTexts, messageRecordsToGraphMessages, persistHitlWaitingPlaceholder, persistTurnTranscript, persistUserTurnMessage, resolveCheckpointThreadId, appendTerminalToolResult, } from '../session/persist-turn-messages.js';
+import { collectPublicArtifactLinks, collectPublicArtifactLinksFromEvent, injectPublicArtifactLinks, mergeArtifactLinks, } from '../tool/inject-public-artifact-links.js';
 import { iterSessionCompression, withCompressionSummaryModel, } from '../session/apply-session-compression.js';
 import { applySessionMemory } from '../session/apply-session-memory.js';
 import { buildSessionTitleUserPayload, invokeSessionTitle, } from '../session/session-title.js';
@@ -378,6 +379,7 @@ export class AgentRuntime {
         let assistantReasoningContent;
         const pendingToolCalls = [];
         const toolResults = [];
+        const artifactLinks = [];
         const nodeTokenUsages = [];
         try {
             for await (const runtimeEvent of runWithExecutionTrace({ abortSignal }, () => this.deps.graphEngine.stream(graph, {
@@ -421,6 +423,7 @@ export class AgentRuntime {
                 }
                 // 终态 tool.result / tool.error 回填历史；willRetry 的 error 不进 transcript
                 appendTerminalToolResult(runtimeEvent.type, runtimeEvent.payload, toolResults);
+                collectPublicArtifactLinksFromEvent(runtimeEvent.type, runtimeEvent.payload, artifactLinks);
                 const streamedReasoning = extractStreamReasoning(runtimeEvent.type, runtimeEvent.payload);
                 if (streamedReasoning)
                     assistantReasoningContent = streamedReasoning;
@@ -433,6 +436,19 @@ export class AgentRuntime {
             await recordTaskTokenUsages(this.deps.taskService, task.id, nodeTokenUsages);
             await this.deps.taskService.updateStatus(task.id, 'success');
             const tokenSummary = summarizeTokenUsages(nodeTokenUsages);
+            const visible = visibleStreamAssistantText(assistantBuckets);
+            const links = mergeArtifactLinks(artifactLinks, collectPublicArtifactLinks(toolResults));
+            const { injected, suffix } = injectPublicArtifactLinks(visible, links);
+            if (suffix) {
+                yield this.toSSE('response.chunk', correlationId, task.id, {
+                    content: suffix,
+                    format: 'text',
+                });
+            }
+            yield this.toSSE('response.final', correlationId, task.id, {
+                content: injected,
+                format: 'text',
+            });
             await persistTurnTranscript(this.deps.messageService, {
                 sessionId,
                 taskId: task.id,
@@ -440,8 +456,8 @@ export class AgentRuntime {
                 messages: buildTurnTranscriptFromStreamEvents({
                     pendingToolCalls,
                     toolResults,
-                    assistantTexts: streamAssistantTexts(assistantBuckets),
-                    assistantText: visibleStreamAssistantText(assistantBuckets),
+                    assistantTexts: suffix ? undefined : streamAssistantTexts(assistantBuckets),
+                    assistantText: injected,
                     finishPoints: graph.finishPoints,
                     toolCallReasoningContent,
                     assistantReasoningContent,
@@ -621,6 +637,7 @@ export class AgentRuntime {
         let assistantReasoningContent;
         const pendingToolCalls = [];
         const toolResults = [];
+        const artifactLinks = [];
         const nodeTokenUsages = [];
         try {
             for await (const runtimeEvent of runWithExecutionTrace({ abortSignal, abortDeadlineMs: continueState.abortDeadlineMs }, () => this.deps.graphEngine.stream(graph, continueState))) {
@@ -638,6 +655,7 @@ export class AgentRuntime {
                     }
                 }
                 appendTerminalToolResult(runtimeEvent.type, runtimeEvent.payload, toolResults);
+                collectPublicArtifactLinksFromEvent(runtimeEvent.type, runtimeEvent.payload, artifactLinks);
                 const streamedReasoning = extractStreamReasoning(runtimeEvent.type, runtimeEvent.payload);
                 if (streamedReasoning)
                     assistantReasoningContent = streamedReasoning;
@@ -647,8 +665,21 @@ export class AgentRuntime {
                     yield this.runtimeEventToSSE(runtimeEvent, correlationId, taskId);
                 }
             }
+            const visible = visibleStreamAssistantText(assistantBuckets);
+            const links = mergeArtifactLinks(artifactLinks, collectPublicArtifactLinks(toolResults));
+            const { injected, suffix } = injectPublicArtifactLinks(visible, links);
+            if (suffix) {
+                yield this.toSSE('response.chunk', correlationId, taskId, {
+                    content: suffix,
+                    format: 'text',
+                });
+            }
+            yield this.toSSE('response.final', correlationId, taskId, {
+                content: injected,
+                format: 'text',
+            });
             await recordTaskTokenUsages(this.deps.taskService, taskId, nodeTokenUsages);
-            await this.deps.taskService.updateStatus(taskId, 'success', visibleStreamAssistantText(assistantBuckets) || undefined);
+            await this.deps.taskService.updateStatus(taskId, 'success', injected || undefined);
             const tokenSummary = summarizeTokenUsages(nodeTokenUsages);
             if (sessionId) {
                 await persistTurnTranscript(this.deps.messageService, {
@@ -658,8 +689,8 @@ export class AgentRuntime {
                     messages: buildTurnTranscriptFromStreamEvents({
                         pendingToolCalls,
                         toolResults,
-                        assistantTexts: streamAssistantTexts(assistantBuckets),
-                        assistantText: visibleStreamAssistantText(assistantBuckets),
+                        assistantTexts: suffix ? undefined : streamAssistantTexts(assistantBuckets),
+                        assistantText: injected,
                         finishPoints: graph.finishPoints,
                         toolCallReasoningContent,
                         assistantReasoningContent,

package/dist/session/persist-turn-messages.d.ts

@@ -91,12 +91,7 @@ export declare function sessionVisibleGraphMessages(messages: GraphMessage[], fi
 export declare function extractStreamReasoning(eventType: string, payload: unknown): string | undefined;
 /** 落盘 / 回填历史只收终态：result，或不会再试的 error。willRetry 的 error 只给直播 UI。 */
 export declare function isTerminalToolStreamEvent(eventType: string, payload: unknown): boolean;
-export declare function appendTerminalToolResult(eventType: string, payload: unknown, bucket: Array<{
-    toolCallId: string;
-    toolName: string;
-    content: unknown;
-    success: boolean;
-}>): void;
+export declare function appendTerminalToolResult(eventType: string, payload: unknown, bucket: StreamToolResult[]): void;
 /** 历史 MessageRecord → GraphMessage（保留 tool 元数据与 reasoning） */
 export declare function messageRecordsToGraphMessages(records: MessageRecord[]): GraphMessage[];
 type CheckpointLoad = {
@@ -203,6 +198,18 @@ export type StreamToolResult = {
     toolName: string;
     content: unknown;
     success: boolean;
+    file?: {
+        fileName: string;
+        fileType: string;
+        size: number;
+        url: string;
+    };
+    files?: Array<{
+        fileName: string;
+        fileType: string;
+        size: number;
+        url: string;
+    }>;
 };
 /**
  * 将 stream 侧累加的 tool 事件规范为与 invoke GraphState 增量同序的 messages：

package/dist/session/persist-turn-messages.js

@@ -242,6 +242,8 @@ export function appendTerminalToolResult(eventType, payload, bucket) {
         toolName: p.toolName,
         content: p.content ?? p.error,
         success: eventType === 'tool.result' && p.success !== false,
+        ...(p.file ? { file: p.file } : {}),
+        ...(p.files?.length ? { files: p.files } : {}),
     });
 }
 /** 历史 MessageRecord → GraphMessage（保留 tool 元数据与 reasoning） */
@@ -525,6 +527,8 @@ export function buildTurnTranscriptFromStreamEvents(params) {
             toolCallId: tr.toolCallId,
             toolName: tr.toolName,
             success: tr.success,
+            ...(tr.file ? { file: tr.file } : {}),
+            ...(tr.files?.length ? { files: tr.files } : {}),
         });
     }
     if (texts.length > 0) {