@walkhi/code-relax 0.1.0-beta.26 → 0.1.0-beta.28

package/dist/src/server.mjs

@@ -8,28 +8,47 @@ import vm from 'node:vm';
 import sharp from 'sharp';
 import { attachLanSocket } from './lan-socket-server.mjs';
 import fileMentions from '../shared/file-mentions.cjs';
+import fileCitations from '../shared/file-citations.cjs';
 import { validateInlineImage } from './message-images.mjs';
 import { ThreadWriterConflictError } from './shared-app-server.mjs';
 import { ManagedAppServer, managedAppServerUrl } from './managed-app-server.mjs';
 import { RuntimeDiscovery } from './runtime-discovery.mjs';
-import { streamSharedThread } from './shared-thread-stream.mjs';
+import { streamSharedThread, threadListNotificationMethods } from './shared-thread-stream.mjs';
 import appServerEvents from '../shared/app-server-events.cjs';
+import messageDelivery from '../shared/message-delivery.cjs';
+import fileChanges from '../shared/file-changes.cjs';
 import { runtimePaths } from './platform/windows/runtime-paths.mjs';
 import { openControl } from './service-control.mjs';
 import { writeRecord, readRecord } from './service-lifecycle.mjs';
 import { ExecutionHealth } from './execution-health.mjs';
-import { authorizeLanDevice, onLanAuthorizationsChanged } from './self-relay/lan-authorizations.mjs';
+import { authorizeLanDevice, onLanAuthorizationsChanged } from './self-relay/lan-authorizations.mjs';
 import { createRelayManager } from './self-relay/lifecycle.mjs';
 import { generateAndSetThreadTitle } from './thread-title-generation.mjs';
 import { desktopHost } from './platform/windows/desktop-host.mjs';
 import { SharedCatalog } from './shared-catalog.mjs';
+import { DotsAppServer } from './dots-task-catalog.mjs';
+import { DotsChatServer } from './dots-chat-server.mjs';
+import { HostedHistoryCache } from './hosted-history-cache.mjs';
+import { readDotsSummaryTasks } from './dots-summary-tasks.mjs';
+import { readDotsSchedules } from './dots-schedules.mjs';
+import { DotsMessageImages } from './dots-message-images.mjs';
+import { desktopDotsProfiles } from './platform/windows/dots-profile.mjs';
 import { requestRecovery, recoveryStatus } from './shared-recovery.mjs';
 import { requestServiceRestart } from './service-restart.mjs';
 import { TurnModelHistory } from './turn-model-history.mjs';
+import { browseCode } from './code-browser.mjs';
+import { fileRange, fileRevision, FileRangeError } from './file-transfer-range.mjs';
+import { browseProjectFolders, createProjectFolder, saveProject } from './project-management.mjs';
+import { projectLocations } from './platform/windows/project-locations.mjs';
+import { createWorkstationProject } from './project-create.mjs';
+import { WorkstationDownloads } from './workstation-downloads.mjs';
+import { consumeUsageReset } from './usage-reset.mjs';
 
 const turnModelHistory = new TurnModelHistory();
+const messageReceipts = new messageDelivery.Store();
 
-const MAX_ATTACHMENT_BYTES = 16 * 1024 * 1024;
+const MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+const MAX_FILE_DOWNLOAD_BYTES = 20 * 1024 * 1024;
 const MAX_CACHED_ATTACHMENTS = 32;
 const MAX_CACHED_FILES = 64;
 const MAX_CONTEXT_TAIL_BYTES = 4 * 1024 * 1024;
@@ -37,15 +56,6 @@ const MAX_LIVE_ACTIVITY_TAIL_BYTES = 1024 * 1024;
 const SHARED_HISTORY_PAGE_BYTES = 500 * 1024;
 const SHARED_HISTORY_PAGE_TURNS = 8;
 const MAX_SETTINGS_SCAN_BYTES = 64 * 1024 * 1024;
-const ALLOWED_MODELS = new Set([
-  'gpt-6-astra',
-  'gpt-6-sol',
-  'gpt-5.6-sol',
-  'gpt-5.6-terra',
-  'gpt-5.6-luna',
-  'gpt-5.5',
-  'gpt-5.3-codex-spark',
-]);
 const ALLOWED_THINKING = new Set(['low', 'medium', 'high', 'xhigh', 'max', 'ultra']);
 
 class RequestError extends Error {
@@ -74,10 +84,12 @@ const runtimeVersion = readRuntimeVersion();
 const webRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'web');
 const projectRoot = os.homedir();
 const { codexDataRoot, stateRoot, sessionsRoot, uploadsRoot } = runtimePaths();
+const workstationDownloads = new WorkstationDownloads(stateRoot);
 const markdownItScript = fs.readFileSync(path.join(webRoot, 'vendor', 'markdown-it.umd.min.js'));
 const markdownSandbox = { atob };
 vm.runInNewContext(markdownItScript.toString(), markdownSandbox);
 const imageMarkdown = markdownSandbox.markdownit({ html: false });
+fileCitations.install(imageMarkdown);
 const attachmentCache = new Map();
 const fileCache = new Map();
 const fileCapabilitySecret = crypto.randomBytes(32);
@@ -88,6 +100,11 @@ const sessionSettingsCache = new Map();
 const liveActivityCache = new Map();
 let sharedServer = null;
 const managedAppServer = new ManagedAppServer({ stateRoot, host: desktopHost });
+const hostedHistoryCache = new HostedHistoryCache(stateRoot);
+const dotsServer = new DotsAppServer(managedAppServer.client, desktopDotsProfiles(codexDataRoot, stateRoot), hostedHistoryCache);
+const dotsImages = new DotsMessageImages({ localServer: managedAppServer.client, identity: () => dotsServer.profileIdentity,
+  cache: attachmentCache, capabilityKey: imageCapabilityKey, maxEntries: MAX_CACHED_ATTACHMENTS, maxBytes: MAX_ATTACHMENT_BYTES });
+const dotsChat = new DotsChatServer(dotsServer, undefined, { uploadsRoot });
 const runtimeDiscovery = new RuntimeDiscovery({ stateRoot, host: desktopHost, url: managedAppServerUrl });
 const relayManager = createRelayManager(stateRoot);
 let sharedCatalog = null, executionMode = 'ordinary';
@@ -95,7 +112,7 @@ function selectSharedExecution(enabled) {
   const next = enabled ? managedAppServer.client : null;
   if (sharedServer === next) return;
   sharedServer = next;
-  sharedCatalog = sharedServer ? new SharedCatalog(sharedServer) : null;
+  sharedCatalog = sharedServer ? new SharedCatalog(sharedServer, dotsServer, dotsChat) : null;
 }
 const executionHealth = new ExecutionHealth(async () => {
   await managedAppServer.ensure();
@@ -114,18 +131,23 @@ async function refreshExecution() {
   await executionHealth.refresh();
   return { mode: executionMode };
 }
-async function requireExecutionWritable(threadId) {
+async function requireExecutionWritable(threadId, client = sharedServer) {
   const execution = await executionHealth.refresh();
   if (!execution.canWrite) {
     throw new RequestError(503, 'Codex 内核未就绪。请重启工作站服务；若仍失败，运行 relax doctor。',
       { code: 'full_control_required', execution });
   }
-  if (threadId && sharedServer) sharedServer.requireWritable(threadId);
+  if (threadId && client) client.requireWritable(threadId);
   return execution;
 }
 managedAppServer.client.on('subscription-error', error => console.error('Codex 内核任务取消订阅失败：', error.message));
+dotsServer.on('subscription-error', error => console.error('Dots 任务取消订阅失败：', error.message));
+dotsChat.on('subscription-error', error => console.error('Dots 对话取消订阅失败：', error.message));
+dotsChat.on('activity-error', error => console.error('点点状态通道不可用：', error.message));
 
+dotsServer.on('profile-error', error => console.error(error.message));
 async function handleRequest(request, response) {
+  let messageSubmissionStarted = false;
   try {
     const url = new URL(request.url || '/', `http://${request.headers.host || 'localhost'}`);
 
@@ -215,9 +237,19 @@ async function handleRequest(request, response) {
       return;
     }
 
+    const fileLinkMatch = /^\/api\/files\/([a-f0-9]{64})\/link$/.exec(url.pathname);
+    if (request.method === 'GET' && fileLinkMatch) {
+      const attachment = attachmentCache.get(fileLinkMatch[1])
+        || dotsImages.restore(fileLinkMatch[1], url.searchParams.get('recovery') || '');
+      if (!attachment?.dotsFile) throw new RequestError(404, '此附件没有网络链接，请重新读取对话。');
+      sendJson(response, 200, { url: await dotsImages.fileLink(attachment) });
+      return;
+    }
+
     const imageMatch = /^\/api\/images\/([a-f0-9]{64})$/.exec(url.pathname);
     if (request.method === 'GET' && imageMatch) {
       let image = attachmentCache.get(imageMatch[1])
+        || dotsImages.restore(imageMatch[1], url.searchParams.get('recovery') || '')
         || recoverLocalImage(imageMatch[1], url.searchParams.get('recovery') || '');
       const contextThreadId = url.searchParams.get('threadId') || '';
       const contextTurnId = url.searchParams.get('turnId') || '';
@@ -229,24 +261,64 @@ async function handleRequest(request, response) {
         } catch {}
       }
       if (!image) throw new RequestError(404, '这张图片已失效，无法从工作站重新读取。');
-      const thumbnail = url.searchParams.get('variant') === 'thumbnail';
-      const asset = thumbnail ? await attachmentThumbnail(image) : { buffer: image.buffer, mimeType: image.mimeType };
-      sendJson(response, 200, { url: `data:${asset.mimeType};base64,${asset.buffer.toString('base64')}` });
+      if (image.dotsFile) await dotsImages.load(image);
+      if (url.searchParams.get('variant') === 'thumbnail') {
+        const asset = await attachmentThumbnail(image);
+        sendJson(response, 200, { url: `data:${asset.mimeType};base64,${asset.buffer.toString('base64')}` });
+        return;
+      }
+      const size = image.buffer.length;
+      if (size > MAX_ATTACHMENT_BYTES) throw new RequestError(413, '图片超过下载上限（20 MiB），无法下载。');
+      if (!size) throw new RequestError(400, '图片为空，无法下载。');
+      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道读取原图。');
+      const revision = imageMatch[1];
+      const { offset, length } = fileRange(url.searchParams, size, revision);
+      response.filePart({ name: image.name || '图片', size, offset, revision, mimeType: image.mimeType },
+        image.buffer.subarray(offset, offset + length));
       return;
     }
 
     const fileMatch = /^\/api\/files\/([a-f0-9]{64})$/.exec(url.pathname);
     if (request.method === 'GET' && fileMatch) {
+      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道下载附件。');
+      const hosted = attachmentCache.get(fileMatch[1])
+        || dotsImages.restore(fileMatch[1], url.searchParams.get('recovery') || '');
+      if (hosted?.dotsFile) {
+        const { bytes, ...metadata } = await dotsImages.readPart(hosted, url.searchParams);
+        response.filePart(metadata, bytes);
+        return;
+      }
       const file = fileCache.get(fileMatch[1]);
       if (!file) throw new RequestError(404, '文件授权已失效，请重新读取对话。');
-      let stat;
-      try { stat = fs.statSync(file.path); } catch { throw new RequestError(404, '电脑上的文件已不存在。'); }
-      if (!stat.isFile() || stat.size !== file.size || stat.mtimeMs !== file.mtimeMs) {
-        fileCache.delete(fileMatch[1]);
-        throw new RequestError(409, '电脑上的文件已发生变化，请重新读取对话。');
+      if (file.externalIdentity) await dotsImages.authorization(file.externalIdentity);
+      const { offset, length } = fileRange(url.searchParams, file.size, file.revision);
+      let handle;
+      try { handle = fs.openSync(file.path, 'r'); }
+      catch (error) {
+        if (error.code === 'ENOENT') throw new RequestError(404, '电脑上的文件已不存在。');
+        throw error;
       }
-      if (stat.size > MAX_ATTACHMENT_BYTES) throw new RequestError(413, '暂只支持下载不超过 16 MiB 的文件。');
-      sendJson(response, 200, { name: file.name, size: file.size, dataBase64: fs.readFileSync(file.path).toString('base64') });
+      try {
+        const validate = () => {
+          const stat = fs.fstatSync(handle);
+          if (!stat.isFile() || fileRevision(stat) !== file.revision || fileRevision(fs.statSync(file.path)) !== file.revision) {
+            fileCache.delete(fileMatch[1]);
+            throw new RequestError(409, '电脑上的文件已发生变化，请重新读取对话。');
+          }
+          if (stat.size > MAX_FILE_DOWNLOAD_BYTES) throw new RequestError(413, '文件超过下载上限（20 MiB），无法下载。');
+          if (!stat.size) throw new RequestError(400, '文件为空，无法下载。');
+        };
+        validate();
+        const data = Buffer.alloc(length);
+        let bytesRead = 0;
+        while (bytesRead < data.length) {
+          const count = fs.readSync(handle, data, bytesRead, data.length - bytesRead, offset + bytesRead);
+          if (!count) throw new RequestError(409, '电脑上的文件读取不完整，请重新读取对话。');
+          bytesRead += count;
+        }
+        validate();
+        response.filePart({ name: file.name, size: file.size, offset, revision: file.revision }, data);
+      } finally { fs.closeSync(handle); }
       return;
     }
 
@@ -257,23 +329,112 @@ async function handleRequest(request, response) {
     if (taskPath && (url.pathname.endsWith('/takeover') || url.pathname === `/api/threads/${taskPath[1]}`)) {
       throw new RequestError(410, '此连接方式已停用。', { code: 'unsupported_control' });
     }
-    if (url.searchParams.has('hostId') && url.searchParams.get('hostId') !== 'local') {
+    const hostId = url.searchParams.get('hostId') || 'local';
+    if (!['local', 'durable'].includes(hostId)) {
       throw new RequestError(410, '此对话的连接方式已停用，请检查 Codex 内核状态。', { code: 'unsupported_control' });
     }
     if (!executionHealth.state.ready || sharedServer?.ready !== true) {
       throw new RequestError(503, 'Codex 内核未就绪。请重启工作站服务；若仍失败，运行 relax doctor。',
         { code: 'full_control_required' });
     }
+    const rootChat = hostId === 'durable' && taskPath
+      && await dotsServer.source(decodeURIComponent(taskPath[1])) === 'aeon';
+    const execution = rootChat ? dotsChat : hostId === 'durable' ? dotsServer : sharedServer;
+
+    const dotsActivityMatch = /^\/api\/threads\/([^/]+)\/dots-activity-events$/.exec(url.pathname);
+    if (request.method === 'GET' && dotsActivityMatch) {
+      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此活动面板。');
+      response.startEvents();
+      const disconnected = () => response.end();
+      dotsChat.on('disconnected', disconnected);
+      const release = dotsChat.acquirePanelActivity(decodeURIComponent(dotsActivityMatch[1]), value => {
+        if (!response.destroyed) response.event('dots-activity', { threadId: value.threadId, activity: value.activity });
+      });
+      response.once('close', () => { release(); dotsChat.off('disconnected', disconnected); });
+      return;
+    }
+
+    const dotsTasksMatch = /^\/api\/threads\/([^/]+)\/dots-tasks$/.exec(url.pathname);
+    if (request.method === 'GET' && dotsTasksMatch) {
+      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此任务面板。');
+      sendJson(response, 200, await readDotsSummaryTasks(dotsServer, decodeURIComponent(dotsTasksMatch[1])));
+      return;
+    }
+
+    const dotsSchedulesMatch = /^\/api\/threads\/([^/]+)\/dots-schedules$/.exec(url.pathname);
+    if (request.method === 'GET' && dotsSchedulesMatch) {
+      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此定时任务列表。');
+      sendJson(response, 200, await readDotsSchedules(dotsServer, decodeURIComponent(dotsSchedulesMatch[1])));
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname.startsWith('/api/code/')) {
+      const operation = url.pathname.slice('/api/code/'.length);
+      if (hostId === 'durable' && operation !== 'change') throw new RequestError(405, 'Dots 委派任务尚未接入代码浏览。');
+      try {
+        if ((operation === 'image' || operation === 'binary') && !request.fileTransfer) throw new RequestError(400, '请通过文件通道读取预览文件。');
+        const result = await browseCode((method, params) => execution.request(method, params), operation, url.searchParams);
+        if (operation === 'image' || operation === 'binary') {
+          const { data, ...metadata } = result;
+          response.filePart(metadata, data);
+        } else sendJson(response, 200, result);
+      } catch (error) { throw new RequestError(error.statusCode || 502, error.message); }
+      return;
+    }
 
     if (request.method === 'GET' && url.pathname === '/api/models') {
-      sendJson(response, 200, await sharedServer.models());
+      sendJson(response, 200, await execution.models());
       return;
     }
 
     if (request.method === 'GET' && url.pathname === '/api/threads') {
       const limit = boundedInteger(url.searchParams.get('limit'), 20, 1, 200);
       const archived = url.searchParams.get('archived') === 'true';
-      sendJson(response, 200, await sharedCatalog.threads(limit, archived));
+      const scope = url.searchParams.get('scope') || 'all';
+      if (!['all', 'local', 'durable'].includes(scope)) { sendJson(response, 400, { error: '无效的会话列表范围' }); return; }
+      sendJson(response, 200, await sharedCatalog.threads(limit, archived, scope, url.searchParams.get('refresh') === '1'));
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/file-local-copy') {
+      const value = url.searchParams.get('source') || '';
+      const id = /^([a-f0-9]{64})(?:\?recovery=[A-Za-z0-9_-]{1,4096})?$/.exec(value)?.[1];
+      if (id && (fileCache.has(id) || attachmentCache.has(id) && !attachmentCache.get(id).dotsFile)) {
+        sendJson(response, 200, { external: false, localCopy: null }); return;
+      }
+      const asset = await externalDownloadAsset(value, url.searchParams.get('recovery'));
+      const copy = await workstationDownloads.copy(asset.id);
+      sendJson(response, 200, { external: true, localCopy: copy ? workstationCopyReference(copy, asset) : null,
+        cachedContent: asset.buffer ? { remotePath: asset.id, name: asset.name, size: asset.buffer.length, mimeType: asset.mimeType } : null });
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/file-save-locations') {
+      await requireExecutionWritable();
+      const locations = await projectLocations();
+      const projects = (await sharedCatalog.projects()).projects.filter(project => project.hostId === 'local' && project.roots?.length);
+      sendJson(response, 200, { projects, downloads: locations.downloads });
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/file-save-folders') {
+      await requireExecutionWritable();
+      sendJson(response, 200, await workstationDownloads.browse((method, params) => sharedServer.request(method, params),
+        await projectLocations(), Object.fromEntries(url.searchParams)));
+      return;
+    }
+
+    if (request.method === 'POST' && url.pathname === '/api/file-saves') {
+      await requireExecutionWritable();
+      const body = await readJsonBody(request);
+      const asset = await externalDownloadAsset(body.source, body.recovery);
+      const controller = new AbortController(), cancel = () => controller.abort();
+      response.once('close', cancel);
+      try {
+        const result = await workstationDownloads.save((method, params) => sharedServer.request(method, params),
+          await projectLocations(), body, asset, (file, query) => dotsImages.readPart(file, query), controller.signal);
+        sendJson(response, 201, { localCopy: workstationCopyReference(result, asset), warning: result.warning || '' });
+      } finally { response.off('close', cancel); }
       return;
     }
 
@@ -282,11 +443,45 @@ async function handleRequest(request, response) {
       return;
     }
 
+    if (url.pathname === '/api/project-folders' && ['GET', 'POST'].includes(request.method)) {
+      await requireExecutionWritable();
+      try {
+        const rpc = (method, params) => sharedServer.request(method, params);
+        const result = request.method === 'GET'
+          ? await browseProjectFolders(rpc, await projectLocations(), url.searchParams.get('path'))
+          : await createProjectFolder(rpc, await readJsonBody(request));
+        sendJson(response, request.method === 'GET' ? 200 : 201, result);
+      } catch (error) { throw new RequestError(error.statusCode || 502, error.message); }
+      return;
+    }
+
+    const updateProjectMatch = /^\/api\/projects\/([^/]+)$/.exec(url.pathname);
+    if (request.method === 'POST' && (url.pathname === '/api/projects' || updateProjectMatch)) {
+      await requireExecutionWritable();
+      const body = await readJsonBody(request);
+      try {
+        const result = !updateProjectMatch ? await createWorkstationProject(sharedServer, stateRoot, codexDataRoot, body)
+          : await saveProject((method, params) => sharedServer.request(method, params),
+          await projectLocations(), body, updateProjectMatch ? decodeURIComponent(updateProjectMatch[1]) : null);
+        sendJson(response, updateProjectMatch ? 200 : 201, result);
+      } catch (error) { throw new RequestError(error.statusCode || 502, error.message, error.details); }
+      return;
+    }
+
     if (request.method === 'GET' && url.pathname === '/api/usage-limits') {
       sendJson(response, 200, await sharedServer.usage());
       return;
     }
 
+    if (request.method === 'POST' && url.pathname === '/api/usage-reset') {
+      await requireExecutionWritable();
+      const body = await readJsonBody(request);
+      try { sendJson(response, 200, await consumeUsageReset(sharedServer, body)); }
+      catch (error) { throw new RequestError(error.statusCode || 502, error.message,
+        error.code === 'usage_reset_not_submitted' ? { code: error.code, deliveryUnknown: false } : undefined); }
+      return;
+    }
+
     if (request.method === 'GET' && url.pathname === '/api/usage-events') {
       const execution = sharedServer;
       response.startEvents();
@@ -299,9 +494,37 @@ async function handleRequest(request, response) {
       return;
     }
 
-    if (request.method === 'GET' && url.pathname === '/api/turn-events') {
-      const execution = sharedServer;
-      response.startEvents();
+    if (request.method === 'GET' && url.pathname === '/api/thread-events') {
+      await sharedServer.connect();
+      const clients = [sharedServer, dotsServer, dotsChat];
+      response.startEvents();
+      const listener = ({ method, params }) => {
+        if (!threadListNotificationMethods.has(method) || response.destroyed) return;
+        response.event('thread-list-changed', { method, threadId: params.threadId || params.thread?.id || '',
+          ...(params.hostId ? { hostId: params.hostId } : {}),
+          ...(params.chatRevision !== undefined ? { chatRevision: params.chatRevision } : {}),
+          ...(params.updatedAt !== undefined ? { updatedAt: params.updatedAt } : {}),
+          ...(params.chatMessageRevision !== undefined ? { chatMessageRevision: params.chatMessageRevision } : {}),
+          ...(params.status ? { status: typeof params.status === 'string' ? params.status : params.status.type } : {}) });
+      };
+      const disconnected = () => response.end();
+      for (const client of clients) {
+        client.on('notification', listener);
+        client.on('disconnected', disconnected);
+      }
+      response.once('close', () => {
+        for (const client of clients) {
+          client.off('notification', listener);
+          client.off('disconnected', disconnected);
+        }
+      });
+      response.event('ready', {});
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/turn-events') {
+      const clients = [sharedServer, dotsServer, dotsChat];
+      response.startEvents();
       const listener = ({ method, params }) => {
         if (!['turn/started', 'turn/completed'].includes(method)) return;
         const threadId = params?.threadId, turnId = params?.turn?.id;
@@ -310,24 +533,29 @@ async function handleRequest(request, response) {
         }
       };
       const disconnected = () => response.end();
-      execution.on('notification', listener);
-      execution.on('disconnected', disconnected);
-      response.once('close', () => {
-        execution.off('notification', listener);
-        execution.off('disconnected', disconnected);
+      for (const client of clients) {
+        client.on('notification', listener);
+        client.on('disconnected', disconnected);
+      }
+      response.once('close', () => {
+        for (const client of clients) {
+          client.off('notification', listener);
+          client.off('disconnected', disconnected);
+        }
       });
       return;
     }
 
     const activeTurnMatch = /^\/api\/threads\/([^/]+)\/active-turn$/.exec(url.pathname);
     if (request.method === 'GET' && activeTurnMatch) {
+      if (rootChat) { sendJson(response, 200, { turnId: null }); return; }
       const threadId = decodeURIComponent(activeTurnMatch[1]);
-      await sharedServer.connect();
-      const { thread } = await sharedServer.request('thread/read', { threadId, includeTurns: false });
+      await execution.connect();
+      const { thread } = await execution.request('thread/read', { threadId, includeTurns: false });
       const status = typeof thread.status === 'string' ? thread.status : thread.status?.type;
       let turnId = null;
       if (status === 'active') {
-        const page = await sharedServer.request('thread/turns/list', {
+        const page = await execution.request('thread/turns/list', {
           threadId, limit: 1, sortDirection: 'desc', itemsView: 'summary',
         });
         const latest = page.data?.[0];
@@ -354,11 +582,12 @@ async function handleRequest(request, response) {
       let target = appServerEvents.projectlessThreadTarget(projectRoot);
       if (project) {
         const nativeProjects = await appServerEvents.readProjects(rpc);
-        const nativeId = nativeProjects.find(item => item.id === project.projectId)?.id;
-        if (!nativeId) throw new RequestError(404, 'Codex 内核中没有找到对应项目，请刷新项目列表。');
-        target = { projectId:nativeId, cwd:project.path };
+        const nativeProject = nativeProjects.find(item => item.id === project.projectId);
+        if (!nativeProject) throw new RequestError(404, 'Codex 内核中没有找到对应项目，请刷新项目列表。');
+        target = appServerEvents.projectThreadTarget(nativeProject);
       }
       const { input } = appServerTurnArguments('', body);
+      messageSubmissionStarted = true;
       const created = await appServerEvents.createThread(rpc, target, input, body);
       const prompt = input.filter(part => part.type === 'text').map(part => part.text).join('\n');
       void generateAndSetThreadTitle({
@@ -376,13 +605,24 @@ async function handleRequest(request, response) {
     }
 
     const timelineMatch = /^\/api\/threads\/([^/]+)\/timeline$/.exec(url.pathname);
-    if (request.method === 'GET' && timelineMatch) {
-      const threadId = decodeURIComponent(timelineMatch[1]);
-      const execution = sharedServer;
-      const timeline = normalizeSharedTimeline(await execution.timeline(threadId, sharedHistoryPageOptions()));
-      if (request.socketRequest) {
-        response.on('progress', () => execution.keepSnapshotAlive(threadId, timeline.sync));
-        response.once('close', () => execution.keepSnapshotAlive(threadId, timeline.sync));
+    if (request.method === 'GET' && timelineMatch) {
+      const threadId = decodeURIComponent(timelineMatch[1]);
+      const knownSeq = url.searchParams.get('knownSeq');
+      const knownSync = { id: url.searchParams.get('knownSyncId'),
+        epoch: url.searchParams.get('knownEpoch'), seq: knownSeq === null ? undefined : Number(knownSeq),
+        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
+      const pageOptions = sharedHistoryPageOptions();
+      pageOptions.reconcileObserved = url.searchParams.get('refresh') === '1';
+      if (request.socketRequest) {
+        pageOptions.onWindow = async window => {
+          if (response.writableEnded) return;
+          await response.historyPage(await prepareSharedTimeline(window));
+        };
+      }
+      const timeline = await prepareSharedTimeline(await execution.timeline(threadId, pageOptions, knownSync));
+      if (request.socketRequest) {
+        response.on('progress', () => execution.keepSnapshotAlive(threadId, timeline.sync));
+        response.once('close', () => execution.keepSnapshotAlive(threadId, timeline.sync));
       }
       sendJson(response, 200, timeline);
       return;
@@ -391,19 +631,20 @@ async function handleRequest(request, response) {
     const approvalMatch = /^\/api\/threads\/([^/]+)\/approvals$/.exec(url.pathname);
     if (request.method === 'POST' && approvalMatch) {
       const threadId = decodeURIComponent(approvalMatch[1]);
-      await requireExecutionWritable(threadId);
+      await requireExecutionWritable(threadId, execution);
       const body = await readJsonBody(request);
-      sendJson(response, 200, await sharedServer.respondApproval(threadId, body)); return;
+      sendJson(response, 200, await execution.respondApproval(threadId, body)); return;
     }
 
     const eventsMatch = /^\/api\/threads\/([^/]+)\/events$/.exec(url.pathname);
     if (request.method === 'GET' && eventsMatch) {
       const threadId = decodeURIComponent(eventsMatch[1]);
       const after = Number(url.searchParams.get('afterSeq'));
-      const requestedSync = url.searchParams.get('syncId') && url.searchParams.get('syncEpoch') && Number.isSafeInteger(after) && after >= 0
-        ? { id: url.searchParams.get('syncId'), epoch: url.searchParams.get('syncEpoch'), after } : undefined;
-      await streamSharedThread(response, threadId, sharedServer,
-        normalizeSharedTimeline, requestedSync);
+      const requestedSync = { id: url.searchParams.get('syncId'), epoch: url.searchParams.get('syncEpoch'),
+        after: Number.isSafeInteger(after) && after >= 0 ? after : undefined,
+        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
+      await streamSharedThread(response, threadId, execution,
+        prepareSharedTimeline, requestedSync);
       return;
     }
 
@@ -411,14 +652,14 @@ async function handleRequest(request, response) {
     if (request.method === 'GET' && modelChangesMatch) {
       const threadId = decodeURIComponent(modelChangesMatch[1]);
       if (!/^[0-9a-f]{8}-[0-9a-f-]{20,55}$/i.test(threadId)) throw new RequestError(400, '对话 ID 无效。');
-      sendJson(response, 200, await turnModelHistory.read(findSessionPath(threadId), (url.searchParams.get('turnIds') || '').split(',').filter(Boolean)));
+      sendJson(response, 200, hostId === 'durable' ? [] : await turnModelHistory.read(findSessionPath(threadId), (url.searchParams.get('turnIds') || '').split(',').filter(Boolean)));
       return;
     }
     const contextMatch = /^\/api\/threads\/([^/]+)\/context$/.exec(url.pathname);
     if (request.method === 'GET' && contextMatch) {
       const threadId = decodeURIComponent(contextMatch[1]);
-      const current = readContextUsage(threadId);
-      const native = await sharedServer.readContext(threadId);
+      const current = hostId === 'durable' ? { available: false } : readContextUsage(threadId);
+      const native = await execution.readContext(threadId, url.searchParams.get('refreshSettings') === 'true');
       sendJson(response, 200, { ...current, ...(native.model ? { model: native.model, thinking: native.thinking, serviceTier: native.serviceTier,
         permissionMode: native.permissionMode, permissionModes: native.permissionModes } : {}), ...(native.available ? native : {}) });
       return;
@@ -428,34 +669,45 @@ async function handleRequest(request, response) {
     if (sharedAction) {
       const id = decodeURIComponent(sharedAction[1]);
       if (request.method === 'GET' && sharedAction[2] === 'history') {
-        sendJson(response, 200, normalizeSharedTimeline(await sharedServer.history(id, url.searchParams.get('cursor'), sharedHistoryPageOptions())));
+        const pageOptions = sharedHistoryPageOptions();
+        if (url.searchParams.has('itemLimit')) {
+          const itemLimit = Number(url.searchParams.get('itemLimit'));
+          if (!Number.isInteger(itemLimit) || itemLimit < 1 || itemLimit > 100) throw new RequestError(400, '历史条目数量无效。');
+          pageOptions.itemLimit = itemLimit;
+        }
+        const history = await execution.history(id, url.searchParams.get('cursor'), pageOptions);
+        sendJson(response, 200, await prepareSharedTimeline(history, hostId));
         return;
       }
       if (request.method === 'POST' && sharedAction[2] === 'settings') {
-        await requireExecutionWritable(id);
+        if (rootChat) throw new RequestError(405, 'Dots 主对话不提供 Codex 模型设置。');
+        await requireExecutionWritable(id, execution);
         const body = await readJsonBody(request);
-        sendJson(response, 200, await sharedServer.settings(id, body.model, body.thinking, body.serviceTier));
+        sendJson(response, 200, await execution.settings(id, body.model, body.thinking, body.serviceTier));
         return;
       }
       if (request.method === 'POST' && sharedAction[2] === 'permissions') {
-        await requireExecutionWritable(id);
+        if (rootChat) throw new RequestError(405, 'Dots 主对话不提供 Codex 权限设置。');
+        await requireExecutionWritable(id, execution);
         const body = await readJsonBody(request);
-        sendJson(response, 200, await sharedServer.permissions(id, body.mode));
+        sendJson(response, 200, await execution.permissions(id, body.mode));
         return;
       }
     }
 
     const archiveMatch = /^\/api\/threads\/([^/]+)\/(archive|unarchive)$/.exec(url.pathname);
     if (request.method === 'POST' && archiveMatch) {
+      if (rootChat) throw new RequestError(405, 'Dots 主对话不提供任务归档。');
       const threadId = decodeURIComponent(archiveMatch[1]);
-      await requireExecutionWritable(threadId);
-      await sharedServer.request(`thread/${archiveMatch[2]}`, { threadId });
+      await requireExecutionWritable(threadId, execution);
+      await execution.request(`thread/${archiveMatch[2]}`, { threadId });
       sendJson(response, 200, { threadId, archived: archiveMatch[2] === 'archive' });
       return;
     }
 
     const queueMatch = /^\/api\/threads\/([^/]+)\/queue$/.exec(url.pathname);
     if (queueMatch) {
+      if (hostId === 'durable') throw new RequestError(405, '当前托管连接不提供排队消息。');
       const threadId = decodeURIComponent(queueMatch[1]);
       await sharedServer.connect();
       const rpc = (method, params) => sharedServer.request(method, params);
@@ -470,6 +722,7 @@ async function handleRequest(request, response) {
 
     const queueItemMatch = /^\/api\/threads\/([^/]+)\/queue\/([a-f0-9-]+)(?:\/(steer))?$/.exec(url.pathname);
     if (queueItemMatch) {
+      if (hostId === 'durable') throw new RequestError(405, '当前托管连接不提供排队消息。');
       const threadId = decodeURIComponent(queueItemMatch[1]);
       const itemId = queueItemMatch[2];
       await sharedServer.connect();
@@ -481,23 +734,43 @@ async function handleRequest(request, response) {
 
     const interruptMatch = /^\/api\/threads\/([^/]+)\/interrupt$/.exec(url.pathname);
     if (request.method === 'POST' && interruptMatch) {
+      if (rootChat) throw new RequestError(405, 'Dots 主对话不提供停止 Codex 任务的操作。');
       const threadId = decodeURIComponent(interruptMatch[1]);
-      await requireExecutionWritable(threadId);
+      await requireExecutionWritable(threadId, execution);
       const body = await readJsonBody(request);
       if (!body.turnId) throw new RequestError(400, '缺少活动轮次 ID。');
-      await sharedServer.interrupt(threadId, body.turnId);
+      await execution.interrupt(threadId, body.turnId);
       sendJson(response, 200, { requested: true });
       return;
     }
 
+    const roomReadMatch = /^\/api\/threads\/([^/]+)\/read$/.exec(url.pathname);
+    if (request.method === 'POST' && roomReadMatch) {
+      if (!rootChat) throw new RequestError(405, '此对话不提供消息房间已读操作。');
+      await dotsChat.markRead(decodeURIComponent(roomReadMatch[1]), await readJsonBody(request));
+      sendJson(response, 200, { success: true });
+      return;
+    }
+
+    const messageStatusMatch = /^\/api\/threads\/([^/]+)\/messages\/([a-f0-9]{32})\/status$/.exec(url.pathname);
+    if (request.method === 'GET' && messageStatusMatch) {
+      sendJson(response, 200, messageReceipts.status([hostId, decodeURIComponent(messageStatusMatch[1])], messageStatusMatch[2]));
+      return;
+    }
     const messageMatch = /^\/api\/threads\/([^/]+)\/messages$/.exec(url.pathname);
     if (request.method === 'POST' && messageMatch) {
       const threadId = decodeURIComponent(messageMatch[1]);
-      await requireExecutionWritable(threadId);
       const body = await readJsonBody(request);
-      if (body.hostId && body.hostId !== 'local') throw new RequestError(410, '此对话的连接方式已停用。', { code: 'unsupported_control' });
-      const submitted = await sharedServer.send(appServerTurnArguments(threadId, body));
-      sendJson(response, 200, { success: true, data: submitted.result, usage: submitted.usage });
+      if (body.hostId && body.hostId !== hostId) throw new RequestError(400, '请求中的对话主机不一致。');
+      const result = await messageReceipts.submit([hostId, threadId], body.clientUserMessageId, async () => {
+        let args;
+        try { await requireExecutionWritable(threadId, execution); args = execution === dotsChat ? { ...body, threadId } : appServerTurnArguments(threadId, body); }
+        catch (error) { error.deliveryUnknown = false; throw error; }
+        messageSubmissionStarted = true;
+        const submitted = await execution.send(args);
+        return { success: true, data: submitted.result, usage: submitted.usage };
+      });
+      sendJson(response, 200, result);
       return;
     }
 
@@ -507,13 +780,15 @@ async function handleRequest(request, response) {
       if (!response.writableEnded) response.end();
       return;
     }
-    const status = error instanceof RequestError || error instanceof ThreadWriterConflictError ? (error.statusCode || 409) : 502;
+    if (!messageSubmissionStarted && error.deliveryUnknown === undefined && request.method === 'POST'
+      && /^\/api\/threads\/[^/]+\/messages(?:\?|$)/.test(request.url || '')) error.deliveryUnknown = false;
+    const status = error instanceof RequestError || error instanceof ThreadWriterConflictError || error instanceof FileRangeError ? (error.statusCode || 409) : 502;
     sendJson(response, status, {
       error: error instanceof Error ? error.message : String(error),
       code: error?.code,
       threadId: error?.threadId,
       readOnly: error?.readOnly,
-      details: error?.details,
+      details: error?.deliveryUnknown === undefined ? error?.details : { ...error?.details, deliveryUnknown: error.deliveryUnknown },
     });
   }
 }
@@ -521,8 +796,8 @@ async function handleRequest(request, response) {
 const server = http.createServer(handleRequest);
 const lanSocket = attachLanSocket(server, { token: options.token, dispatch: handleRequest,
   uploadsRoot,
-  authorizeDevice: (clientId, credential) => authorizeLanDevice(stateRoot, clientId, credential),
-  onDeviceAuthorizationsChanged: listener => onLanAuthorizationsChanged(stateRoot, listener),
+  authorizeDevice: (clientId, credential) => authorizeLanDevice(stateRoot, clientId, credential),
+  onDeviceAuthorizationsChanged: listener => onLanAuthorizationsChanged(stateRoot, listener),
 });
 
 let control;
@@ -548,6 +823,7 @@ server.listen(options.port, options.lan ? '0.0.0.0' : '127.0.0.1', async () => {
             const state = managedAppServer.snapshot();
             return state.launcherRestartRequired ? managedAppServer.restart(crypto.randomUUID()) : state;
           },
+          'restart-managed-app-server-confirmed': () => managedAppServer.restart(crypto.randomUUID()),
         } });
       writeRecord(process.env.CODEX_REMOTE_READY_PATH, { instanceId: process.env.CODEX_REMOTE_INSTANCE,
         pid: process.pid, controlPort: control.port });
@@ -571,6 +847,8 @@ async function shutDown() {
   executionHealth?.stop();
   runtimeDiscovery.stop();
   await relayManager.close();
+  dotsServer.close();
+  dotsChat.close();
   managedAppServer.close();
   await control?.close();
   process.exit(0);
@@ -713,6 +991,14 @@ function messagePayload(body) {
     if (!fs.existsSync(file)) throw new RequestError(400, '图片不存在，请重新添加。');
     return file;
   });
+  for (const input of fileMentions.originalInputs(body)) {
+    const incoming = fs.realpathSync(path.join(uploadsRoot, 'incoming'));
+    const imagePath = fs.realpathSync(input.path);
+    if (path.dirname(imagePath).toLowerCase() !== incoming.toLowerCase()) throw new RequestError(400, '原图必须来自上传目录。');
+    const stat = fs.statSync(imagePath);
+    if (!stat.isFile() || stat.size <= 0 || stat.size > MAX_ATTACHMENT_BYTES) throw new RequestError(400, '原图为空或超过 20 MiB。');
+    images.push(imagePath);
+  }
   if (images.filter(image => image.startsWith('data:')).reduce((size, image) => size + Buffer.byteLength(image.slice(image.indexOf(',') + 1), 'base64'), 0) > 8 * 1024 * 1024) throw new RequestError(413, '本条消息图片合计不能超过 8 MiB。');
   if (!prompt && !images.length) throw new RequestError(400, 'prompt 不能为空。');
   if (prompt.length > 32_000) throw new RequestError(400, 'prompt 不能超过 32000 个字符。');
@@ -720,9 +1006,7 @@ function messagePayload(body) {
   const payload = { prompt, images };
   if (typeof body.hostId === 'string' && body.hostId.trim()) payload.hostId = body.hostId.trim();
   if (typeof body.model === 'string' && body.model.trim()) {
-    const model = body.model.trim();
-    if (!ALLOWED_MODELS.has(model)) throw new RequestError(400, '不支持的模型。');
-    payload.model = model;
+    payload.model = body.model.trim();
   }
   if (typeof body.thinking === 'string' && body.thinking.trim()) {
     const thinking = body.thinking.trim();
@@ -759,13 +1043,36 @@ function normalizeTimeline(data) {
   };
 }
 
-function normalizeSharedTimeline({ thread, nextCursor, sync }) {
-  const timeline = normalizeTimeline({ thread: { ...thread, title: thread.name || thread.title || '', hostId: 'local', transport: 'shared-app-server' } });
+function normalizeSharedTimeline({ thread, nextCursor, sync, notModified, incremental }, hostId = thread?.hostId || 'local') {
+  const timeline = normalizeTimeline({ thread: { ...thread, title: thread.name || thread.title || '', hostId,
+    transport: 'shared-app-server' } });
   return { ...timeline,
-    historyView: 'item-pages-v1',
+    historyItemCount: (thread.turns || []).reduce((count, turn) => count + (turn.roomMessage ? 1 : turn.items?.length || 0), 0),
+    historyView: thread?.threadSource === 'aeon' ? 'chat-items-v1' : 'item-pages-v1',
+    ...(notModified ? { notModified: true } : {}),
+    ...(incremental ? { incremental: true } : {}),
     ...(nextCursor !== undefined ? { nextCursor } : {}), ...(sync ? { sync } : {}) };
 }
 
+async function prepareSharedTimeline(value, hostId) {
+  if (value.thread?.threadSource !== 'aeon') return normalizeSharedTimeline(value, hostId);
+  const epoch = dotsChat.epoch, threadId = value.thread.id;
+  const current = () => {
+    if (epoch !== dotsChat.epoch) throw new Error('点点连接已变化，请重新同步。');
+  };
+  if (value.notModified) {
+    const record = dotsChat.threads.get(threadId);
+    if (await dotsImages.prepareTimeline(record?.thread)) {
+      current();
+      value = dotsChat.snapshot(threadId, record);
+    }
+  }
+  const snapshot = structuredClone(value);
+  await dotsImages.prepareTimeline(snapshot.thread);
+  current();
+  return normalizeSharedTimeline(snapshot, hostId);
+}
+
 function normalizeThread(thread) {
   const source = thread && typeof thread === 'object' ? thread : {};
   return {
@@ -777,6 +1084,10 @@ function normalizeThread(thread) {
     projectId: source.projectId || '',
     cwd: source.cwd || '',
     hostId: source.hostId || '',
+    threadSource: source.threadSource || '',
+    ...(['aeon', 'aeon_child'].includes(source.threadSource) ? { chatRevision: source.chatRevision || '' } : {}),
+    ...(source.threadSource === 'aeon' ? { avatar: source.avatar || '', color: source.color || '',
+      chatMessageRevision: source.chatMessageRevision, messagingRoomId: source.messagingRoomId, lastMessageAt: source.lastMessageAt } : {}),
     transport: source.transport || 'shared-app-server',
     readOnly: source.readOnly === true,
     readOnlyReason: source.readOnlyReason || '',
@@ -798,7 +1109,12 @@ function normalizeTurn(turn) {
     completedAt: source.completedAt || null,
     durationMs: source.durationMs ?? null,
     error: source.error ?? null,
+    runtimeNotice: source.runtimeNotice ?? null,
     ...(source.itemPage ? { itemPage: source.itemPage } : {}),
+    ...(source.roomMessage ? { roomMessage: true } : {}),
+    ...(source.deleted ? { deleted: true } : {}),
+    ...(source.historyOnly ? { historyOnly: true } : {}),
+    ...(source.cacheStub ? { cacheStub: true } : {}),
     entries,
   };
 }
@@ -806,6 +1122,10 @@ function normalizeTurn(turn) {
 function normalizeItem(item) {
   if (!item || typeof item !== 'object') return null;
 
+  if (item.type === 'approval') {
+    return { ...item, type: 'activity', kind: 'approval', title: item.params?.message || '需要你的批准' };
+  }
+
   if (item.type === 'contextCompaction') {
     return {
       type: 'activity',
@@ -815,24 +1135,21 @@ function normalizeItem(item) {
     };
   }
 
-  if (item.type === 'functionCallOutput'
-    && item.namespace === 'codex_app'
-    && ['create_thread', 'send_message_to_thread'].includes(item.name)) {
-    const text = extractDelegatedInput(delegatedOutputText(item.output));
-    if (text) {
-      return {
-        type: 'message',
-        id: item.id || '',
-        role: 'user',
-        source: 'remote',
-        ...splitUploadedImages(text),
-      };
-    }
+  const delegated = appServerEvents.toolDelegation(item);
+  if (delegated) {
+    return {
+      type: 'message', id: item.id || '', role: 'user', source: 'remote',
+      delegation: delegationSource(delegated), ...splitUploadedImages(delegated.input),
+    };
   }
 
   if (item.type === 'userMessage') {
-    const { text, files } = extractUserText(item.content);
-    const attachments = [...normalizeAttachments(item.content), ...files];
+    const { text, files, delegation } = extractUserText(item.content);
+    const attachments = [...normalizeAttachments(item.content), ...files.map(file => ({
+      ...file,
+      remotePath: rememberLocalFile(file.path)?.id || '',
+      previewRemotePath: file.previewPath ? rememberLocalFile(file.previewPath)?.id || '' : '',
+    }))];
     if (!text && !attachments.length) return null;
     return {
       clientId: item.clientId,
@@ -841,6 +1158,7 @@ function normalizeItem(item) {
       role: 'user',
       text,
       attachments,
+      ...(delegation ? { delegation: delegationSource(delegation) } : {}),
     };
   }
 
@@ -853,6 +1171,7 @@ function normalizeItem(item) {
       delivery: item.delivery,
       questions: item.questions,
       text: item.text || '',
+      attachments: normalizeAttachments(item.attachments),
       imageAssets: markdownImageAssets(item.text || ''),
       fileAssets: markdownFileAssets(item.text || ''),
     };
@@ -926,7 +1245,7 @@ function normalizeItem(item) {
       title: '文件修改',
       titleOnly: true,
       status: statusText(item.status),
-      changes: Array.isArray(item.changes) ? item.changes : [],
+      changes: fileChanges.summarize(item.changes),
     };
   }
 
@@ -946,16 +1265,6 @@ function normalizeItem(item) {
     const image = typeof item.path === 'string' && item.path
       ? normalizeAttachment({ type: 'localImage', path: item.path })
       : null;
-    if (image?.available) {
-      return {
-        type: 'message',
-        id: item.id || '',
-        role: 'assistant',
-        phase: 'commentary',
-        text: '',
-        attachments: [image],
-      };
-    }
     return {
       type: 'activity',
       id: item.id || '',
@@ -968,9 +1277,11 @@ function normalizeItem(item) {
   }
 
   if (item.type === 'imageGeneration') {
+    const result = typeof item.result === 'string' ? item.result.trim() : '';
     const image = typeof item.savedPath === 'string' && item.savedPath
       ? normalizeAttachment({ type: 'localImage', path: item.savedPath, name: '生成的图片' })
-      : null;
+      : result ? normalizeAttachment({ type: 'image', name: '生成的图片',
+        url: result.startsWith('data:image/') ? result : `data:image/png;base64,${result}` }) : null;
     return {
       type: 'activity',
       id: item.id || '',
@@ -1045,7 +1356,7 @@ function normalizeAttachments(content) {
     else items.push({ type: 'localImage', path: imagePath });
   }
   const seen = new Set();
-  return items.map(normalizeAttachment).filter(item => {
+  return items.map(item => normalizeAttachment(item)).filter(item => {
     if (!item.url) return true;
     if (seen.has(item.url)) return false;
     seen.add(item.url); return true;
@@ -1057,22 +1368,20 @@ function markdownImageAssets(text) {
   function visit(tokens) {
     for (const token of tokens) {
       const value = token.type === 'image' ? token.attrGet('src')
-        : token.type === 'link_open' ? token.attrGet('href') : null;
+        : token.type === 'link_open' && !token.meta?.fileCitation ? token.attrGet('href') : null;
       if (value && !Object.hasOwn(assets, value)) {
-        let localPath;
-        try { localPath = decodeURIComponent(value); } catch { continue; }
+        const localPath = fileCitations.localReference(value)?.path;
         // Only paths actually referenced by Desktop messages become accessible.
         // Do not expose a client-supplied filesystem path endpoint or UNC shares.
-        if (/^\/?[a-z]:[\\/]/i.test(localPath)) {
-          localPath = localPath.replace(/^\/(?=[a-z]:)/i, '');
+        if (localPath && /^[a-z]:[\\/]/i.test(localPath)) {
           const asset = normalizeAttachment({ type: 'localImage', path: localPath });
           if (asset.available) assets[value] = asset;
         }
       }
-      if (token.children) visit(token.children);
+      if (token.children && token.type !== 'image') visit(token.children);
     }
   }
-  visit(imageMarkdown.parse(text, {}));
+  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
   return assets;
 }
 
@@ -1083,20 +1392,17 @@ function markdownFileAssets(text) {
       if (token.type === 'link_open') {
         const value = token.attrGet('href');
         if (value && !Object.hasOwn(assets, value)) {
-          let localPath;
-          try { localPath = decodeURIComponent(value); } catch { localPath = ''; }
-          if (/^\/?[a-z]:[\\/]/i.test(localPath)) {
-            localPath = localPath.replace(/^\/(?=[a-z]:)/i, '');
-            localPath = localPath.replace(/:(\d+)(?::\d+)?$/, '');
+          const localPath = fileCitations.localReference(value)?.path;
+          if (localPath && /^[a-z]:[\\/]/i.test(localPath)) {
             const asset = rememberLocalFile(localPath);
             if (asset) assets[value] = { remotePath: asset.id, name: asset.name, size: asset.size };
           }
         }
       }
-      if (token.children) visit(token.children);
+      if (token.children && token.type !== 'image') visit(token.children);
     }
   }
-  visit(imageMarkdown.parse(text, {}));
+  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
   return assets;
 }
 
@@ -1104,12 +1410,12 @@ function rememberLocalFile(filePath) {
   try {
     const resolved = path.resolve(filePath);
     const stat = fs.statSync(resolved);
-    if (!stat.isFile() || stat.size > MAX_ATTACHMENT_BYTES) return null;
+    if (!stat.isFile()) return null;
     const id = crypto.createHmac('sha256', fileCapabilitySecret)
       .update(resolved).update('\0').update(String(stat.size)).update('\0').update(String(stat.mtimeMs)).digest('hex');
     if (!fileCache.has(id)) {
       while (fileCache.size >= MAX_CACHED_FILES) fileCache.delete(fileCache.keys().next().value);
-      fileCache.set(id, { id, path: resolved, name: path.basename(resolved), size: stat.size, mtimeMs: stat.mtimeMs });
+      fileCache.set(id, { id, path: resolved, name: path.basename(resolved), size: stat.size, revision: fileRevision(stat) });
     }
     return fileCache.get(id);
   } catch {
@@ -1140,12 +1446,29 @@ function splitUploadedImages(text) {
   return { text: visibleText, attachments, imageAssets: markdownImageAssets(visibleText) };
 }
 
-function normalizeAttachment(item) {
+async function externalDownloadAsset(value, recovery = '') {
+  const match = /^([a-f0-9]{64})(?:\?recovery=([A-Za-z0-9_-]{1,4096}))?$/.exec(value || '');
+  if (!match) throw new RequestError(400, '无效的外部文件标识。');
+  const asset = attachmentCache.get(match[1]) || dotsImages.restore(match[1], match[2] || recovery || '');
+  if (!asset?.dotsFile) throw new RequestError(404, '外部文件授权已失效，请重新读取对话。');
+  await dotsImages.authorization(asset.identity);
+  return asset;
+}
+
+function workstationCopyReference(copy, asset) {
+  const id = crypto.createHmac('sha256', fileCapabilitySecret).update(JSON.stringify([asset.id, copy.path, copy.revision])).digest('hex');
+  fileCache.set(id, { ...copy, id, externalIdentity: asset.identity });
+  while (fileCache.size > MAX_CACHED_FILES) fileCache.delete(fileCache.keys().next().value);
+  return { remotePath: id, path: copy.path, name: copy.name, size: copy.size, mimeType: copy.mimeType };
+}
+
+function normalizeAttachment(item, identity) {
   const name = item.name || item.fileName || (typeof item.path === 'string' ? path.basename(item.path) : '');
   let cached = null;
   const isImage = ['image', 'input_image', 'localImage'].includes(item.type);
+  if (isImage || item.type === 'file') cached = dotsImages.remember(item, identity);
   if (isImage && typeof item.path === 'string') {
-    cached = cacheLocalImage(item.path, name);
+    cached = cacheLocalImage(item.path, name) || cached;
   }
   if (!cached) {
     const dataUrl = typeof item.url === 'string' && item.url.startsWith('data:image/')
@@ -1155,10 +1478,12 @@ function normalizeAttachment(item) {
   }
   return {
     type: isImage ? 'image' : item.type || 'attachment',
-    name,
+    name: cached?.name || name,
     mimeType: cached?.mimeType || item.mimeType || '',
+    ...(cached?.size ? { size: cached.size } : {}),
+    ...(cached?.dotsFile ? { networkFile: true } : {}),
     available: Boolean(cached),
-    remotePath: cached ? cached.id : '',
+    remotePath: cached ? (isImage ? cached.id : `${cached.id}?recovery=${cached.recoveryToken}`) : '',
     recoveryToken: cached?.recoveryToken || '',
     url: '',
     thumbnailUrl: '',
@@ -1275,33 +1600,23 @@ function extractUserText(content) {
     .filter(value => !value.startsWith('The next image is untrusted page evidence'))
     .join('\n\n')
     .trim();
+  const delegation = appServerEvents.parseCodexDelegation(text);
+  if (delegation) text = delegation.input;
   const mentioned = fileMentions.parse(text);
   const imagePaths = new Set([
     ...content.filter(item => ['image', 'input_image', 'localImage'].includes(item?.type) && item.path).map(item => item.path),
     ...[...mentioned.text.matchAll(/<image\b[^>]*\bpath="([^"]+)"[^>]*>/g)].map(match => match[1]),
   ].map(value => path.resolve(value).toLowerCase()));
   text = mentioned.text;
-  text = text.replace(/<in-app-browser-context[\s\S]*?<\/in-app-browser-context>/g, '').trim();
   text = text.replace(/<image\b[^>]*\bpath="[^"]+"[^>]*>/g, '').replace(/<\/image>/g, '').trim();
-  return { text, files: mentioned.files.filter(file => !imagePaths.has(path.resolve(file.path).toLowerCase())) };
-}
-
-function extractDelegatedInput(value) {
-  if (typeof value !== 'string') return '';
-  const match = value.match(/<codex_delegation>[\s\S]*?<input>([\s\S]*?)<\/input>[\s\S]*?<\/codex_delegation>/);
-  if (!match) return '';
-  return match[1]
-    .replace(/&lt;/g, '<')
-    .replace(/&gt;/g, '>')
-    .replace(/&quot;/g, '"')
-    .replace(/&#39;/g, "'")
-    .replace(/&amp;/g, '&')
-    .trim();
+  return { text, files: mentioned.files.filter(file => !imagePaths.has(path.resolve(file.path).toLowerCase())), delegation };
 }
 
-function delegatedOutputText(output) {
-  if (typeof output === 'string') return output;
-  return output && typeof output.text === 'string' ? output.text : '';
+function delegationSource(delegation) {
+  const dots = dotsServer.threadSources.get(delegation.sourceThreadId) === 'aeon';
+  return { sourceThreadId: delegation.sourceThreadId, sourceKind: dots ? 'dots' : 'codex',
+    ...(dots ? { sourceName: dotsServer.profileName(delegation.sourceThreadId),
+      sourceAvatar: dotsServer.profileAvatar(delegation.sourceThreadId) } : {}) };
 }
 
 function summaryText(value) {
@@ -1327,7 +1642,7 @@ function sendBuffer(response, statusCode, contentType, value) {
     'Content-Length': value.length,
     'Cache-Control': 'no-store',
     'X-Content-Type-Options': 'nosniff',
-    'Content-Security-Policy': "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:",
+    'Content-Security-Policy': "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; media-src blob:",
   });
   response.end(value);
 }