@whyshu/argent 0.1.27 → 0.2.1

package/src/office-runtime.js

@@ -0,0 +1,1102 @@
+/**
+ * argent · ERP 机器连接器（自 @whyshu/argent-dsh@0.1.10 office-runtime fork）（Host 端，2026-10-21 P0）
+ *
+ * 目的：把**本机 dsh 的 AI 员工运行时**（实时 agent / 子代理 / 后台 jobs）以出站 HTTPS 上报到
+ * Argent ERP 的「办公室现场」——按租户隔离（问述科技 = whyshu-tech，六禾园 = ly-0001），
+ * 机器必须先由该租户管理员在 ERP 登记，令牌放 `~/.dsh/argent/agent-report.json`（600）。
+ *
+ * 设计红线：
+ *  · 只出站，⛔ 不监听公网、⛔ 不开反向隧道；
+ *  · 只上报**元数据**（agent id/父子/状态/当前任务标题/jobs 摘要/计数），
+ *    ⛔ 不上报 prompt、消息正文、工具入参输出、文件路径、凭据；
+ *  · 配置每个 tick 重读 ⇒ 改开关/换机器/换令牌**不需要重启 dsh**（仅本模块代码本身需要重启加载）；
+ *  · ERP 不可达 / 未配置时静默跳过（只在状态变化时打日志），绝不影响 dsh 与会话；
+ *  · 本机 HTTP 调试端点仅允许回环（127.0.0.1 / ::1）。
+ *
+ * 配置（~/.dsh/argent/agent-report.json，600）：
+ * {
+ *   "enabled": true,
+ *   "serverUrl": "https://whyshu.com",
+ *   "tenantAppId": "whyshu-tech",
+ *   "machineId": "mac-chester",
+ *   "machineName": "Chester Mac mini",
+ *   "runnerToken": "eyJ…",          // ERP 管理员签发、绑定该租户；⛔ 不打印
+ *   "intervalSec": 10,
+ *   "includeSessionTitles": true,    // 默认 true（问述自己租户）；客户机建议 false
+ *   "chatEnabled": false             // P2 机器对话执行器（默认关；开启后本机执行 ERP 发来的会话消息）
+ * }
+ */
+import { mkdirSync, readdirSync, renameSync, statSync, writeFileSync, existsSync } from 'node:fs'
+import { spawn } from 'node:child_process'
+import { readFile } from 'node:fs/promises'
+import os from 'node:os'
+import { basename, dirname, join } from 'node:path'
+import { readConfig, REPORT_FILE } from './config.mjs'
+import { extractFulfillmentResult, uploadFulfillmentFiles } from './fulfillment-result.mjs'
+import { buildSkuFlowRecord, findSkuFlowArtifactsIn } from './skuflow-runner.mjs'
+import { engineDirSync } from './kernel.mjs'
+import { runEngineTask } from './actions.mjs'
+import { collectHealth } from './health.mjs'
+
+const MAX_AGENTS = 200
+const LOOPBACK = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1'])
+
+const trunc = (v, n) => {
+  const s = String(v ?? '').replace(/[\u0000-\u001f\u007f]/g, ' ').trim()
+  return s.length > n ? `${s.slice(0, n - 1)}…` : s
+}
+
+/** 从 assistant/message 事件的 message.content 里取纯文本（忽略 tool-call 等块）。 */
+function extractAssistantText(message) {
+  const blocks = Array.isArray(message?.content) ? message.content : []
+  const parts = []
+  for (const b of blocks) {
+    if (b && b.type === 'text' && typeof b.text === 'string' && b.text.trim()) parts.push(b.text)
+  }
+  return parts.join('\n').trim()
+}
+
+/** dsh 内置 preset 的展示名（与 dsh 客户端一致的英文口径；自定义 preset 用 id 兜底）。 */
+const BUILT_IN_PRESET_LABELS = { standard: 'Standard', ptc: 'PTC', minimal: 'Minimal', cordis: 'Creator mode' }
+
+/** 会话**当前** preset：header 只是创建时的值，会话可以改选（记录在 session/agent-preset/selected）。
+ *  优先读 sessionProjections 投影，其次扫日志最后一条 selected 事件，最后回退 header。 */
+function currentPresetOf(ctx, session) {
+  try {
+    const proj = ctx.get('sessionProjections') || ctx.sessionProjections
+    const v = proj?.stateOf?.(session, 'agentPreset')
+    if (typeof v === 'string' && v) return v
+  } catch { /* 投影不可读则走日志 */ }
+  const log = Array.isArray(session?.log) ? session.log : []
+  for (let i = log.length - 1; i >= 0; i -= 1) {
+    const ev = log[i]
+    if (ev?.type === 'agent-preset/selected' && ev.data?.agentPreset) return String(ev.data.agentPreset)
+  }
+  return String(session?.header?.agentPreset || '')
+}
+
+const MAX_ATTACH_BYTES = 2 * 1024 * 1024
+const IMAGE_MIME = { '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.webp': 'image/webp', '.gif': 'image/gif' }
+
+/** 从消息 content 块里取纯文本（不含图片/工具块）。 */
+function textOfContent(content) {
+  const blocks = Array.isArray(content) ? content : []
+  const parts = []
+  for (const b of blocks) if (b && b.type === 'text' && typeof b.text === 'string' && b.text.trim()) parts.push(b.text)
+  return parts.join('\n').trim()
+}
+
+/** 把 markdown 里的**本地图片**上传到 ERP 附件存储（生产=COS），替换为 `argent-attachment:<id>`。
+ *  只处理可读、MIME 白名单、≤2MB 的本地绝对路径；单张失败不影响文本。 */
+async function rewriteLocalImages(cfg, text) {
+  const src = String(text || '')
+  if (!src || !src.includes('![')) return src
+  const re = /!\[([^\]]*)\]\(([^)]+)\)/g
+  const jobs = []
+  let m
+  while ((m = re.exec(src))) {
+    const target = String(m[2] || '').trim()
+    if (!target || /^https?:\/\//i.test(target) || target.startsWith('argent-attachment:')) continue
+    jobs.push({ raw: m[0], alt: m[1], target })
+  }
+  if (!jobs.length) return src
+  let out = src
+  for (const job of jobs) {
+    const path = job.target.replace(/^file:\/\//, '')
+    const ext = (path.match(/\.[a-z0-9]+$/i)?.[0] || '').toLowerCase()
+    const mime = IMAGE_MIME[ext]
+    if (!mime) continue
+    try {
+      const buf = await readFile(path)
+      if (!buf.length || buf.length > MAX_ATTACH_BYTES) continue
+      const res = await apiCall(cfg, 'POST', `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}/attachments`, {
+        filename: basename(path).slice(0, 200), mime, dataBase64: buf.toString('base64'), kind: 'machine-image',
+      }, 30_000)
+      const id = res?.data?.attachment?._id
+      if (id) out = out.split(job.raw).join(`![${job.alt}](argent-attachment:${id})`)
+    } catch { /* 单张失败：保留原文本 */ }
+  }
+  return out
+}
+
+/** dsh 注入给模型看的运行时上下文/时间戳消息（日志里 role=user，但不是用户真正发的话）。 */
+const INTERNAL_USER_TEXT_RE = /^(?:Time sampled while preparing turn|Current runtime context\.|Browser time zone for this request:|Elapsed since (?:the )?(?:preceding|previous)|Current DSH file policy:|Approval prompts are disabled|Current working directory:|<system-reminder>|This is an automatically generated checkpoint|<goal_round>|<goal_blocked>|\[model changed:|Background subagent |Team message from )/
+/** 只有 source.kind=user 的 user/message 才是真人输入；其余都是 dsh 运行时注入。 */
+const INTERNAL_USER_SOURCE_KINDS = new Set(['agent-instructions','runtime-context','skill-catalog','compact-checkpoint','subagent-settled','goal','tool-goal','tool-jobs','time-context','model-selection','agent-message','team-message'])
+
+/** 从 dsh 会话日志提取最近 N 条消息：每个 turn 只保留最后一条 assistant 文本（与 dsh 聊天一致，
+ *  不把中间“先查一下/正在处理”等过程消息带到 ERP 历史）。user 消息保留并过滤运行时注入。 */
+function historyFromLog(log, limit) {
+  const items = []
+  let turnAssistant = ''
+  const pushAssistant = (at) => {
+    if (!turnAssistant) return
+    items.push({ role: 'assistant', text: turnAssistant, at })
+    turnAssistant = ''
+  }
+  for (const ev of (Array.isArray(log) ? log : [])) {
+    const at = ev?.time ? new Date(ev.time).toISOString() : ''
+    if (ev?.type === 'user/message') {
+      pushAssistant(at) // 防御：上个 turn 没有 end 事件时也要收口
+      const text = textOfContent(ev.data?.content)
+      if (!text) continue
+      const sourceKind = String(ev.data?.source?.kind || '')
+      if (sourceKind && sourceKind !== 'user') continue // 结构判据优先：合成消息不是用户输入
+      if (INTERNAL_USER_TEXT_RE.test(String(text).trim())) continue
+      items.push({ role: 'user', text, at })
+    } else if (ev?.type === 'assistant/message') {
+      const text = textOfContent(ev.data?.message?.content)
+      if (text) turnAssistant = text
+    } else if (ev?.type === 'turn/end') {
+      pushAssistant(at)
+    }
+  }
+  pushAssistant('')
+  const n = Math.min(Math.max(Number(limit) || 40, 1), 80)
+  return items.slice(-n)
+}
+
+/** 统一调用 ERP（出站；runner token）。非 2xx 抛错（错误文本截断，避免刷屏）。 */
+async function apiCall(cfg, method, path, body, timeoutMs = 15_000) {
+  const res = await fetch(`${cfg.serverUrl}${path}`, {
+    method,
+    headers: { 'content-type': 'application/json', authorization: `Bearer ${cfg.runnerToken}` },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutMs),
+  })
+  const text = await res.text().catch(() => '')
+  let json = null
+  try { json = JSON.parse(text) } catch { /* 非 JSON */ }
+  if (!res.ok) throw new Error(`HTTP ${res.status} ${trunc(text || res.statusText, 160)}`)
+  return json
+}
+
+/** 收集运行时快照（纯只读；服务缺失时给空结构，不抛错）。 */
+async function collectSnapshot(ctx, cfg) {
+  const agentsSvc = ctx.get('agents')
+  const jobsSvc = ctx.get('jobs')
+  const subagentsSvc = ctx.get('subagents')
+  const titleSvc = ctx.get('sessionTitle')
+  const live = typeof agentsSvc?.list === 'function' ? agentsSvc.list() : []
+  const roots = typeof agentsSvc?.roots === 'function' ? agentsSvc.roots() : live
+
+  // 子代理目录：root → 后代（parentId/depth），用于标记父子与补全非活跃子会话
+  const lineage = new Map()
+  const catalogChildren = []
+  if (subagentsSvc && typeof subagentsSvc.listDescendants === 'function') {
+    for (const root of roots) {
+      try {
+        const rows = await subagentsSvc.listDescendants(String(root.id))
+        for (const row of rows || []) {
+          const childId = String(row.childSessionId || row.childId || row.id || '')
+          if (!childId) continue
+          const parentId = String(row.parentId || root.id)
+          lineage.set(childId, { parentId, depth: Number(row.depth) || 1 })
+          catalogChildren.push({ id: childId, parentId, depth: Number(row.depth) || 1 })
+        }
+      } catch { /* 目录不可读：不阻塞上报 */ }
+    }
+  }
+
+  const agentsOut = []
+  let running = 0
+  let idle = 0
+  let subagents = 0
+  let jobsRunning = 0
+  for (const a of live) {
+    if (agentsOut.length >= MAX_AGENTS) break
+    const id = String(a.id)
+    const session = a.session
+    const status = a.status === 'running' ? 'running' : 'idle'
+    if (status === 'running') running += 1
+    else idle += 1
+    const preset = currentPresetOf(ctx, session)
+    const presetLabel = BUILT_IN_PRESET_LABELS[preset] || ''
+    let title = ''
+    if (cfg.includeSessionTitles && session) {
+      try { title = trunc(titleSvc?.get?.(session)?.title || '', 80) } catch { /* noop */ }
+    }
+    let jobs = []
+    if (jobsSvc && typeof jobsSvc.list === 'function') {
+      try { jobs = jobsSvc.list(a.id) || [] } catch { jobs = [] }
+    }
+    const runningJob = jobs.find((j) => j.status === 'running') || jobs.find((j) => j.status === 'stopping')
+    // ⚠️ 只上报「kind + 进度」，⛔ 不上报 job label（bash 的 label 是整条命令，可能带路径/参数）；
+    //    服务端还有一层兜底脱敏（长命令行式标题 → 「后台任务」）。
+    const jobKind = String(runningJob?.kind || '后台')
+    const current = runningJob
+      ? { kind: 'job', title: trunc(`${jobKind} 任务${runningJob.progress ? ` · ${runningJob.progress}` : ''}`, 60), progress: null }
+      : (status === 'running' ? { kind: 'turn', title: '处理中', progress: null } : null)
+    const line = lineage.get(id)
+    if (line) subagents += 1
+    jobsRunning += jobs.filter((j) => j.status === 'running' || j.status === 'stopping').length
+    agentsOut.push({
+      id,
+      parentId: line?.parentId || null,
+      depth: line?.depth || 0,
+      name: title || `${preset || '会话'} ${id.slice(0, 8)}`,
+      preset,
+      presetLabel,
+      roleLabel: preset ? `AI 员工 · ${presetLabel || preset}` : 'AI 员工',
+      status,
+      current,
+      jobs: jobs.slice(0, 10).map((j) => ({
+        id: String(j.id),
+        kind: String(j.kind || ''),
+        status: String(j.status || ''),
+        startedAt: j.startedAt ? new Date(j.startedAt).toISOString() : '',
+      })),
+    })
+  }
+  // 目录里有、但当前没有活跃 Agent 的子会话：作为离线/历史叶子补上（最多 50，避免刷屏）
+  for (const c of catalogChildren.slice(0, 50)) {
+    if (agentsOut.some((a) => a.id === c.id)) continue
+    subagents += 1
+    agentsOut.push({
+      id: c.id, parentId: c.parentId, depth: c.depth,
+      name: '子代理（非活跃）', preset: '', roleLabel: 'AI 员工 · 子代理',
+      status: 'idle', current: null, jobs: [],
+    })
+  }
+
+  // preset 花名册（供 ERP「选 preset 新建会话」；内置 preset 用展示名，自定义用 declaration name/id）
+  const presets = []
+  let defaultPreset = ''
+  try {
+    const presetSvc = ctx.get('agentPresets') || ctx.agentPresets
+    if (presetSvc && typeof presetSvc.list === 'function') {
+      const rows = await presetSvc.list()
+      for (const row of (Array.isArray(rows) ? rows : []).slice(0, 60)) {
+        if (!row?.id) continue
+        presets.push({
+          id: String(row.id).slice(0, 80),
+          name: String(row.name || BUILT_IN_PRESET_LABELS[row.id] || row.id).slice(0, 80),
+          description: row.description ? trunc(row.description, 200) : '',
+          broken: row.broken ? trunc(row.broken, 200) : '',
+          isDefault: false,
+        })
+      }
+      defaultPreset = String(presetSvc.defaultId || '')
+      for (const p of presets) if (p.id === defaultPreset) p.isDefault = true
+    }
+  } catch { /* 花名册不可读时不影响上报 */ }
+
+  return {
+    schemaVersion: 1,
+    adapter: { id: 'dsh', version: '' },
+    generatedAt: new Date().toISOString(),
+    ...(presets.length ? { presets } : {}),
+    ...(defaultPreset ? { defaultPreset } : {}),
+    machine: {
+      machineId: cfg.machineId,
+      name: cfg.machineName,
+      platform: `${os.platform()}-${os.arch()}`,
+      runtime: { name: 'dsh', version: '' },
+    },
+    agents: agentsOut,
+    kpis: { agents: agentsOut.length, running, idle, subagents, jobsRunning },
+  }
+}
+
+/**
+ * 启动上报循环 + 本机调试端点。
+ * @param ctx host 插件 context（需 webServer；agents/jobs/subagents/sessionTitle 可选）
+ * @param {{dataDir: string}} opts
+ */
+export function startOfficeRuntime(ctx, { dataDir } = {}) {
+  const state = { lastOkAt: null, lastPushAt: null, lastError: '', lastReason: '', timer: null, busy: false }
+
+  const log = (level, msg) => {
+    if (level === 'warn') console.warn(`[argent] ${msg}`)
+    else console.log(`[argent] ${msg}`)
+  }
+
+  // 桌面端的 launch token 只在壳内部（外部 curl 拿不到）⇒ 把只读状态落到数据目录，
+  // 供验收/排障：`cat ~/.dsh/argent/argent-status.json`。
+  // ⛔ 不含 token、不含消息正文；写失败绝不影响 ERP 连接。
+  // 状态文件放在 **argent 数据目录的兄弟目录**（~/.dsh/argent/），
+  // 不放进 ~/.dsh/argent：后者是业务台账目录，agent-bundle-generation 门禁会盯它的零增量；
+  // 每 2s 的心跳文件放在那里会让该门禁在"插件正在运行"的机器上误报。
+  const STATUS_FILE = dataDir ? join(dirname(dataDir), 'argent', 'argent-status.json') : ''
+  function writeStatus() {
+    if (!STATUS_FILE) return
+    try {
+      const cfg = readConfig(dataDir)
+      const payload = {
+        at: new Date().toISOString(),
+        pid: process.pid,
+        dataDir,
+        enabled: cfg.ok,
+        reason: cfg.ok ? '' : cfg.reason,
+        machineId: cfg.ok ? cfg.machineId : '',
+        tenantAppId: cfg.ok ? cfg.tenantAppId : '',
+        serverUrl: cfg.ok ? cfg.serverUrl : '',
+        lastOkAt: state.lastOkAt,
+        lastPushAt: state.lastPushAt,
+        lastError: state.lastError,
+        chat: {
+          enabled: cfg.ok && cfg.chatEnabled,
+          started: chatState.started,
+          lastOkAt: chatState.lastOkAt,
+          lastCommandAt: chatState.lastCommandAt,
+          lastError: chatState.lastError,
+        },
+      }
+      mkdirSync(dirname(STATUS_FILE), { recursive: true, mode: 0o700 })
+      const tmp = `${STATUS_FILE}.tmp`
+      writeFileSync(tmp, `${JSON.stringify(payload, null, 2)}\n`, { mode: 0o600 })
+      renameSync(tmp, STATUS_FILE)
+    } catch { /* 状态文件失败不影响 ERP 连接 */ }
+  }
+
+  async function snapshotOrNull() {
+    const cfg = readConfig(dataDir)
+    if (!cfg.ok) return { cfg, snapshot: null }
+    try {
+      return { cfg, snapshot: await collectSnapshot(ctx, cfg) }
+    } catch (e) {
+      return { cfg, snapshot: null, error: String(e?.message || e) }
+    }
+  }
+
+  async function pushOnce() {
+    if (state.busy) return
+    state.busy = true
+    try {
+      const cfg = readConfig(dataDir)
+      if (!cfg.ok) {
+        if (state.lastReason !== cfg.reason) {
+          state.lastReason = cfg.reason
+          if (cfg.reason !== 'missing' && cfg.reason !== 'disabled') log('warn', `未启用上报（${cfg.reason}）——见 ${join(dataDir || '~/.dsh/argent', REPORT_FILE)}`)
+        }
+        return
+      }
+      state.lastReason = ''
+      const snapshot = await collectSnapshot(ctx, cfg)
+      const url = `${cfg.serverUrl}/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}/snapshot`
+      const res = await fetch(url, {
+        method: 'PUT',
+        headers: { 'content-type': 'application/json', authorization: `Bearer ${cfg.runnerToken}` },
+        body: JSON.stringify(snapshot),
+        signal: AbortSignal.timeout(10_000),
+      })
+      state.lastPushAt = new Date().toISOString()
+      if (!res.ok) {
+        const text = await res.text().catch(() => '')
+        throw new Error(`HTTP ${res.status} ${trunc(text, 200)}`)
+      }
+      if (state.lastError) log('info', '上报已恢复')
+      else if (!state.lastOkAt) log('info', `上报已启动：${cfg.tenantAppId} / ${cfg.machineId}（每 ${cfg.intervalSec}s）`)
+      state.lastError = ''
+      state.lastOkAt = state.lastPushAt
+    } catch (e) {
+      const msg = trunc(e?.message || e, 300)
+      if (msg !== state.lastError) {
+        state.lastError = msg
+        log('warn', `上报失败（dsh 不受影响，下轮重试）：${msg}`)
+      }
+    } finally {
+      state.busy = false
+      writeStatus()
+    }
+  }
+
+  // ── P2：机器对话执行器（2026-10-21）────────────────────────────────────────
+  // ERP 入队命令 → 本机**出站轮询**领取 → sessionController.prompt 投给目标会话 →
+  // 监听 session/event 收助手回复 → 回传 ERP。默认关（配置 chatEnabled=true 才启用）。
+  // ⛔ 只出站；⛔ 不打印消息正文（日志只记命令/会话 id 前缀与状态）。
+  const chatState = { lastOkAt: null, lastError: '', started: false, busy: false, lastCommandAt: null, lastTickAt: 0, activeSessions: new Set(), activeTasks: new Set(), activeTaskCtx: new Map() }
+  const waiters = new Map() // sessionId -> waiter（同一 session 同一时刻最多一个）
+  // 2026-10-22：长回复不能按总时长一刀切。默认 15 分钟无任何 session 事件才判异常，
+  // 单轮最多 60 分钟；期间任何 assistant/tool/turn 事件都会续期。
+  const CHAT_IDLE_MS = 15 * 60 * 1000
+  const CHAT_MAX_MS = 60 * 60 * 1000
+  const CHAT_HEARTBEAT_MS = 30 * 1000
+  const TASK_MAX_MS = 45 * 60 * 1000
+
+  ctx.effect(() => {
+    const off = ctx.on('session/event', (session, event) => {
+      const sid = String(session?.id || '')
+      const w = sid ? waiters.get(sid) : null
+      if (!w || w.disposed) return
+      w.touch()
+      if (event.type === 'user/message') { w.active = true; w.lastText = ''; return }
+      if (!w.active) return
+      if (event.type === 'assistant/message') {
+        const text = extractAssistantText(event.data?.message)
+        if (text) w.lastText = text
+        return
+      }
+      if (event.type === 'turn/end') {
+        // 本轮显式失败（模型鉴权/网络/限流等）时把真实原因回传 ERP ——
+        // 不要把 "ACCOUNT_SIGN_IN_REQUIRED" 这类可行动错误吞成"没有文本回复"。
+        const reason = event.data?.reason
+        if (reason?.kind === 'error') {
+          const detail = reason.error?.message || reason.error?.code || 'agent 本轮失败'
+          w.reject(new Error(String(detail)))
+          return
+        }
+        const text = w.lastText || ''
+        if (text) w.resolve(text)
+        else w.reject(new Error('agent 本轮没有文本回复'))
+      }
+    })
+    return () => {
+      try { off?.() } catch { /* noop */ }
+      for (const w of [...waiters.values()]) { try { w.reject(new Error('office runtime disposed')) } catch { /* noop */ } }
+    }
+  }, 'argent: office chat session events')
+
+  function makeChatWaiter(sessionId, requestId) {
+    const settle = {}
+    const promise = new Promise((res, rej) => { settle.res = res; settle.rej = rej })
+    const w = {
+      sessionId, requestId, promise, active: false, lastText: '', disposed: false,
+      idleTimer: null, maxTimer: null, lastActivityAt: Date.now(),
+      touch() {
+        if (w.disposed) return
+        w.lastActivityAt = Date.now()
+        clearTimeout(w.idleTimer)
+        w.idleTimer = setTimeout(() => w.reject(Object.assign(
+          new Error(`AI 连续 ${Math.round(CHAT_IDLE_MS / 60000)} 分钟无活动`), { code: 'chat_idle_timeout' },
+        )), CHAT_IDLE_MS)
+      },
+      resolve(v) {
+        if (w.disposed) return
+        w.disposed = true
+        clearTimeout(w.idleTimer); clearTimeout(w.maxTimer)
+        waiters.delete(sessionId); settle.res(v)
+      },
+      reject(e) {
+        if (w.disposed) return
+        w.disposed = true
+        clearTimeout(w.idleTimer); clearTimeout(w.maxTimer)
+        waiters.delete(sessionId); settle.rej(e)
+      },
+      dispose() {
+        w.disposed = true
+        clearTimeout(w.idleTimer); clearTimeout(w.maxTimer)
+        if (waiters.get(sessionId) === w) waiters.delete(sessionId)
+      },
+    }
+    w.maxTimer = setTimeout(() => w.reject(Object.assign(
+      new Error(`AI 单轮超过 ${Math.round(CHAT_MAX_MS / 60000)} 分钟`), { code: 'chat_max_timeout' },
+    )), CHAT_MAX_MS)
+    w.touch()
+    waiters.set(sessionId, w)
+    return w
+  }
+
+  /** 执行期间定期续租；旧服务端没有 heartbeat 路由时静默失败，不中断本轮。 */
+  function startChatHeartbeat(cfg, cmdBase) {
+    let stopped = false
+    const beat = async () => {
+      if (stopped) return
+      try {
+        await apiCall(cfg, 'POST', `${cmdBase}/heartbeat`, { progressText: 'AI 正在处理中' })
+      } catch { /* 旧服务端/no-op */ }
+    }
+    void beat()
+    const timer = setInterval(() => { void beat() }, CHAT_HEARTBEAT_MS)
+    return () => { stopped = true; clearInterval(timer) }
+  }
+
+  /** 单独处理 kind=cancel：领取 → sessionController.cancel → 回执。 */
+  async function executeCancelCommand(cfg, command) {
+    const cid = String(command?.commandId || '')
+    if (!cid) return false
+    const cmdBase = `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}/commands/${encodeURIComponent(cid)}`
+    try {
+      await apiCall(cfg, 'POST', `${cmdBase}/claim`, {})
+    } catch { return false }
+    let status = 'done'
+    let error = ''
+    try {
+      const sc = ctx.get('sessionController') || ctx.sessionController
+      if (!sc || typeof sc.cancel !== 'function') throw new Error('sessionController.cancel 不可用（该 dsh 版本不支持）')
+      sc.cancel({ sessionId: command.sessionId })
+    } catch (e) {
+      status = 'failed'
+      error = trunc(e?.message || e, 300)
+    }
+    try {
+      await apiCall(cfg, 'POST', `${cmdBase}/reply`, { status, error })
+      log('info', `暂停命令 ${cid.slice(0, 8)} 已回传（${status}${error ? `：${error}` : ''}）`)
+    } catch (e) {
+      log('warn', `暂停回执失败：${trunc(e?.message || e, 200)}`)
+    }
+    return status === 'done'
+  }
+
+  /** 任务 brief：只描述业务目标/验收/允许动作；⛔ 不拼接任意 shell。 */
+  function buildTaskPrompt(command) {
+    const task = command?.task && typeof command.task === 'object' ? command.task : {}
+    const lines = [
+      '# 多机器任务命令',
+      '',
+      `WorkItem: ${String(command.workItemId || '')}`,
+      `AgentNode: ${String(command.agentId || '')}`,
+      `任务标题: ${String(task.title || '')}`,
+      `类型/等级/风险: ${String(task.type || '')} / ${String(task.level || '')} / ${String(task.risk || '')}`,
+      `授权层级: ${String(task.authority || '')}`,
+      `仓库: ${String(task.repo || '')}`,
+      `基准分支: ${String(task.baseRef || '')}`,
+      `Worktree: ${String(task.worktree || '')}`,
+      `允许动作: ${Array.isArray(task.actions) ? task.actions.join(', ') : ''}`,
+      '',
+      '## 验收标准',
+      ...(Array.isArray(task.acceptance) ? task.acceptance.map((x) => `- ${x}`) : ['- 无']),
+      '',
+      '## 任务说明',
+      String(task.instructions || '按验收标准完成任务，并回报实际改动、验证命令/结果、风险与未决问题。'),
+      '',
+      '## 回传要求',
+      '- 实际改了哪些文件/仓库/分支',
+      '- 执行了哪些验证，结果如何',
+      '- 未能完成的部分与原因',
+      '- 不要伪造测试/提交/部署结果',
+    ]
+    if (task.skuFlowId || task.step) {
+      const skuStep = String(task.step || '')
+      const example = skuStep === 'productLabel'
+        ? '{"files":[{"path":"/abs/product-label.pdf","kind":"product_label"},{"path":"/abs/carton.pdf","kind":"carton"}]}'
+        : '{"files":[{"path":"/abs/bulk-label.pdf","kind":"bulk_label"}]}'
+      lines.push(
+        '',
+        '## 产物回传（SkuFlow）',
+        '- 执行完成后，把产物 PDF 的**绝对路径**放在最终回复最后一行：',
+        `FULFILLMENT_RESULT: ${example}`,
+        skuStep === 'productLabel'
+          ? '- 产品标任务必须同时回传 product_label 和 carton（同一个 FULL 货件产出），否则节点会被判失败。'
+          : '- kind 只能是 bulk_label；单文件 ≤2MB；不要上传无关文件。',
+      )
+    }
+    return lines.join('\n').slice(0, 30_000)
+  }
+
+  /** 引擎目录：**只认契约**（`ARGENT_ENGINE_DIR` → `<profile>/argent.json`），不再猜候选路径。 */
+  function resolveEngineDir() {
+    return engineDirSync()
+  }
+
+  /** SkuFlow 发票任务：复用既有鑫中航/文鳐流程；不走 LLM 会话；可 kill。 */
+  async function executeSkuInvoiceTask(cfg, command, cmdBase, task) {
+    const cid = String(command?.commandId || '')
+    const workItemId = String(command?.workItemId || '')
+    let stdout = ''
+    let stderr = ''
+    try {
+      const record = { ...(task.context || {}), ...task }
+      const ac = new AbortController()
+      const r = await runEngineTask({
+        kind: 'skuflow', record, confirm: true, timeoutMs: TASK_MAX_MS,
+        onStart: (h) => chatState.activeTaskCtx.set(cid, { ac, child: h }),
+      })
+      chatState.activeTaskCtx.delete(cid)
+      const result = r.result || {}
+      if (!r.ok || result.ok === false) {
+        throw new Error(result.error || r.error || `invoice runner exit=${r.code}: ${String(r.stderr || '').slice(-300)}`)
+      }
+      const files = []
+      if (result.invoicePath) files.push({ path: result.invoicePath, kind: 'invoice' })
+      if (result.bulkLabelPath) files.push({ path: result.bulkLabelPath, kind: 'bulk_label' })
+      const uploaded = await uploadFulfillmentFiles({
+        files, cmdBase: `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}`,
+        apiCall: (method, path, body, timeoutMs) => apiCall(cfg, method, path, body, timeoutMs),
+      })
+      if (uploaded.errors.length) throw new Error(`发票/大货标签上传失败: ${uploaded.errors.join('; ')}`)
+      await apiCall(cfg, 'POST', `${cmdBase}/reply`, {
+        status: 'done', replyText: `SkuFlow 发票完成：${result.orderNo || ''}`,
+        resultData: { workItemId, orderNo: result.orderNo || '', files: uploaded.files, summary: `发票/大货标签完成` },
+      })
+      log('info', `SkuFlow 发票任务 ${cid.slice(0, 8)} 完成 order=${result.orderNo || ''}`)
+    } catch (e) {
+      chatState.activeTaskCtx.delete(cid)
+      try { await apiCall(cfg, 'POST', `${cmdBase}/reply`, { status: 'failed', error: trunc(e?.message || e, 300), resultData: { workItemId, error: trunc(e?.message || e, 300) } }) } catch { /* noop */ }
+    }
+  }
+
+  /** SkuFlow FULL 任务：确定性 orchestrator，不走 LLM/会话；可被 task_cancel kill。 */
+  async function executeSkuFullTask(cfg, command, cmdBase, task) {
+    const cid = String(command?.commandId || '')
+    const workItemId = String(command?.workItemId || '')
+    let status = 'done'
+    let error = ''
+    let stdout = ''
+    let stderr = ''
+    const startedAt = Date.now()
+    try {
+      const record = buildSkuFlowRecord(task)
+      const ac = new AbortController()
+      const r = await runEngineTask({
+        kind: 'orchestrator', record, confirm: true, timeoutMs: TASK_MAX_MS,
+        onStart: (h) => chatState.activeTaskCtx.set(cid, { ac, child: h }),
+      })
+      chatState.activeTaskCtx.delete(cid)
+      if (!r.ok) throw new Error(`orchestrator exit=${r.code}: ${String(r.stderr || '').slice(-300)}`)
+      const result = r.result || {}
+      if (!['success', 'partial', 'already_completed'].includes(String(result.status || ''))) {
+        throw new Error(`orchestrator status=${result.status || 'unknown'} step=${result.failed_step ?? ''}`)
+      }
+      const shipmentNo = String(result.shipment_id || '')
+      // 紫鸟下载目录有两种形态：<ziniao browser>/<店铺名>/ 与直接 <ziniao browser>/（编排器默认）
+      // ⇒ 两处都找，避免「PDF 已生成却报未找到」（2026-11-03 实测：文件落在根目录）
+      const dlRoot = join(os.homedir(), 'Library', 'Application Support', 'ziniaobrowserdatas', 'ziniao browser')
+      const artifacts = findSkuFlowArtifactsIn({
+        dirs: [join(dlRoot, String(task.store || '')), dlRoot],
+        startedAt, shipmentNo, readdir: readdirSync, stat: statSync,
+      })
+      const { product, carton } = artifacts
+      if (!product || !carton) throw new Error(`未找到产品标/箱唛 PDF（shipment=${shipmentNo}，files=${artifacts.files.map((x) => x.name).join('|')}）`)
+      const uploaded = await uploadFulfillmentFiles({
+        cmdBase: `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}`,
+        apiCall: (method, path, body, timeoutMs) => apiCall(cfg, method, path, body, timeoutMs),
+        files: [
+          { path: product.path, kind: 'product_label', filename: product.name },
+          { path: carton.path, kind: 'carton', filename: carton.name },
+        ],
+      })
+      if (uploaded.errors.length) throw new Error(`产物上传失败: ${uploaded.errors.join('; ')}`)
+      await apiCall(cfg, 'POST', `${cmdBase}/reply`, {
+        status: 'done', replyText: `SkuFlow FULL 完成：${shipmentNo}`,
+        resultData: { workItemId, shipmentNo, files: uploaded.files, summary: `FULL 完成：${shipmentNo}` },
+      })
+      log('info', `SkuFlow FULL 任务 ${cid.slice(0, 8)} 完成 shipment=${shipmentNo} files=${uploaded.files.length}`)
+    } catch (e) {
+      status = 'failed'
+      error = trunc(e?.message || e, 300)
+      chatState.activeTaskCtx.delete(cid)
+      try {
+        await apiCall(cfg, 'POST', `${cmdBase}/reply`, { status, error, resultData: { workItemId, error } })
+      } catch (e2) {
+        log('warn', `SkuFlow FULL 回执失败：${trunc(e2?.message || e2, 200)}`)
+      }
+    }
+  }
+
+  /** kind=task：创建任务会话 → 执行 → 回传结果。 */
+  async function executeTaskCommand(cfg, command, cmdBase) {
+    const cid = String(command?.commandId || '')
+    const task = command?.task && typeof command.task === 'object' ? command.task : {}
+    if (String(task.kind || '') === 'sku.full') {
+      await executeSkuFullTask(cfg, command, cmdBase, { ...task, ...(task.context || {}) })
+      return
+    }
+    if (String(task.kind || '') === 'sku.invoice') {
+      await executeSkuInvoiceTask(cfg, command, cmdBase, task)
+      return
+    }
+    let status = 'done'
+    let replyText = ''
+    let error = ''
+    let resultSessionId = ''
+    const resultData = {}
+    try {
+      const sc = ctx.get('sessionController') || ctx.sessionController
+      if (!sc || typeof sc.create !== 'function' || typeof sc.prompt !== 'function') {
+        throw new Error('sessionController.create/prompt 不可用（该 dsh 版本不支持）')
+      }
+      const created = await sc.create({ agentPreset: String(command.preset || '') || undefined })
+      resultSessionId = String(created?.sessionId || '')
+      if (!resultSessionId) throw new Error('create 未返回 sessionId')
+      const waiter = makeChatWaiter(resultSessionId, cid)
+      const stopHeartbeat = startChatHeartbeat(cfg, cmdBase)
+      const ac = new AbortController()
+      const timer = setTimeout(() => ac.abort(), TASK_MAX_MS + 30_000)
+      chatState.activeTaskCtx.set(cid, { ac, sessionId: resultSessionId })
+      try {
+        await sc.prompt(
+          { requestId: cid, sessionId: resultSessionId, mode: 'queue', content: [{ type: 'text', text: buildTaskPrompt(command) }] },
+          ac.signal,
+        )
+        replyText = await waiter.promise
+      } finally {
+        clearTimeout(timer)
+        chatState.activeTaskCtx.delete(cid)
+        stopHeartbeat()
+        waiter.dispose()
+      }
+      if (status === 'done' && (task.skuFlowId || task.step)) {
+        const parsed = extractFulfillmentResult(replyText)
+        const errors = parsed.errors.slice()
+        let uploaded = { files: [], errors: [] }
+        if (parsed.files.length) {
+          const machineBase = `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}`
+          uploaded = await uploadFulfillmentFiles({
+            files: parsed.files, cmdBase: machineBase,
+            apiCall: (method, path, body, timeoutMs) => apiCall(cfg, method, path, body, timeoutMs),
+          })
+          errors.push(...uploaded.errors)
+        } else if (!errors.length) {
+          errors.push('未找到 FULFILLMENT_RESULT 产物回传')
+        }
+        resultData.files = uploaded.files
+        resultData.fileErrors = errors.slice(0, 20)
+        for (const x of errors) log('warn', `SkuFlow 产物回传: ${trunc(x, 200)}`)
+      }
+    } catch (e) {
+      status = 'failed'
+      error = e?.name === 'AbortError' || e?.code === 'ABORT_ERR' ? '任务已取消或超时' : trunc(e?.message || e, 300)
+    }
+    try {
+      await apiCall(cfg, 'POST', `${cmdBase}/reply`, {
+        status,
+        replyText: status === 'done' ? trunc(replyText, 7000) : '',
+        error,
+        resultSessionId,
+        resultData: {
+          ...resultData,
+          workItemId: String(command.workItemId || ''),
+          agentId: String(command.agentId || ''),
+          sessionId: resultSessionId,
+          summary: trunc(replyText, 2000),
+          taskTitle: String(task.title || ''),
+        },
+      })
+      chatState.lastCommandAt = new Date().toISOString()
+      log('info', `任务命令 ${cid.slice(0, 8)} 已回传（${status}${resultSessionId ? ` → ${resultSessionId.slice(0, 12)}` : ''}）`)
+    } catch (e) {
+      const msg = trunc(e?.message || e, 200)
+      if (msg !== chatState.lastError) { chatState.lastError = msg; log('warn', `任务回执失败：${msg}`) }
+    }
+  }
+
+  /** kind=task_cancel：领取取消命令 → abort 对应任务会话 → 回执。 */
+  async function handleTaskCancelCommand(cfg, command) {
+    const cid = String(command?.commandId || '')
+    const target = String(command?.targetCommandId || '')
+    if (!cid) return
+    const cmdBase = `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}/commands/${encodeURIComponent(cid)}`
+    try { await apiCall(cfg, 'POST', `${cmdBase}/claim`, {}) } catch { return }
+    const active = target ? chatState.activeTaskCtx.get(target) : null
+    let status = 'done'
+    let error = ''
+    if (active) {
+      try { active.ac.abort() } catch { /* noop */ }
+      try { active.child?.kill('SIGTERM') } catch { /* noop */ }
+      try {
+        const sc = ctx.get('sessionController') || ctx.sessionController
+        if (sc && typeof sc.cancel === 'function' && active.sessionId) sc.cancel({ sessionId: active.sessionId })
+      } catch { /* 会话可能已结束 */ }
+    } else {
+      error = '任务未在执行（可能已结束）'
+      status = 'done'
+    }
+    try {
+      await apiCall(cfg, 'POST', `${cmdBase}/reply`, { status, error })
+      log('info', `任务取消命令 ${cid.slice(0, 8)} 已回传（${active ? 'aborted' : 'no-active-task'}）`)
+    } catch (e) {
+      log('warn', `任务取消回执失败：${trunc(e?.message || e, 200)}`)
+    }
+  }
+
+  async function handleChatCommand(cfg, command) {
+    const cid = String(command?.commandId || '')
+    const sid = String(command?.sessionId || '')
+    if (!cid) return
+    if (command.kind !== 'create_session' && command.kind !== 'task' && !sid) return
+    const cmdBase = `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}/commands/${encodeURIComponent(cid)}`
+    try {
+      await apiCall(cfg, 'POST', `${cmdBase}/claim`, {})
+    } catch { return } // 404 已被处理 / 409 已被领取：跳过
+    log('info', `收到机器命令 ${cid.slice(0, 8)}${command.kind === 'create_session' ? `（新建会话 preset=${String(command.preset || '').slice(0, 32)}）` : command.kind === 'task' ? `（任务 ${String(command.workItemId || '').slice(0, 24)}）` : `（会话 ${sid.slice(0, 8)}）`}`)
+    // ── 任务命令：创建任务会话 → 执行 → 回传（Phase 3）──
+    if (command.kind === 'task') {
+      await executeTaskCommand(cfg, command, cmdBase)
+      chatState.lastCommandAt = new Date().toISOString()
+      return
+    }
+    // ── 暂停本轮：调用 sessionController.cancel 中断 active turn（待办 inbox 不丢）──
+    if (command.kind === 'cancel') {
+      await executeCancelCommand(cfg, command)
+      chatState.lastCommandAt = new Date().toISOString()
+      return
+    }
+    // ── 读取会话历史：读 dsh 会话日志 → resultData.messages（本地图片顺带上传 COS）──
+    if (command.kind === 'history') {
+      let status = 'done'
+      let error = ''
+      let messages = []
+      try {
+        const sc = ctx.get('sessionController') || ctx.sessionController
+        if (!sc) throw new Error('sessionController 不可用')
+        // 优先 inspect（冷读、不激活 Agent，返回完整 events）；失败再退回 resolveAgent().session.log
+        let events = []
+        if (typeof sc.inspect === 'function') {
+          try { const st = await sc.inspect(command.sessionId); events = Array.isArray(st?.events) ? st.events : [] } catch { events = [] }
+        }
+        if (!events.length) {
+          if (typeof sc.resolveAgent !== 'function') throw new Error('sessionController.inspect/resolveAgent 都不可用')
+          const agent = await sc.resolveAgent(command.sessionId)
+          events = Array.isArray(agent?.session?.log) ? agent.session.log : []
+        }
+        const raw = historyFromLog(events, command.historyLimit)
+        for (const it of raw) {
+          messages.push({
+            role: it.role,
+            text: it.role === 'assistant' ? await rewriteLocalImages(cfg, it.text) : it.text,
+            at: it.at,
+          })
+        }
+      } catch (e) {
+        status = 'failed'
+        error = trunc(e?.message || e, 300)
+      }
+      try {
+        const resultData = messages.length
+          ? { messages }
+          : { messages, debug: { events: Array.isArray(events) ? events.length : -1, types: [...new Set((Array.isArray(events) ? events : []).slice(-300).map((e) => e?.type).filter(Boolean))].slice(0, 15) } }
+        await apiCall(cfg, 'POST', `${cmdBase}/reply`, { status, resultData, error })
+        chatState.lastCommandAt = new Date().toISOString()
+        log('info', `会话历史命令 ${cid.slice(0, 8)} 已回传（${status}，${messages.length} 条）`)
+      } catch (e) {
+        const msg = trunc(e?.message || e, 200)
+        if (msg !== chatState.lastError) { chatState.lastError = msg; log('warn', `历史回执失败：${msg}`) }
+      }
+      return
+    }
+
+    // ── 新建会话：选 preset 开一个新 dsh 会话，回传 resultSessionId，并立即刷新一次快照 ──
+    if (command.kind === 'create_session') {
+      let status = 'done'
+      let resultSessionId = ''
+      let error = ''
+      try {
+        const sc = ctx.get('sessionController') || ctx.sessionController
+        if (!sc || typeof sc.create !== 'function') throw new Error('sessionController.create 不可用（该 dsh 版本不支持）')
+        const created = await sc.create({ agentPreset: String(command.preset || '') || undefined })
+        resultSessionId = String(created?.sessionId || '')
+        if (!resultSessionId) throw new Error('create 未返回 sessionId')
+      } catch (e) {
+        status = 'failed'
+        error = trunc(e?.message || e, 300)
+      }
+      try {
+        await apiCall(cfg, 'POST', `${cmdBase}/reply`, {
+          status,
+          resultSessionId: status === 'done' ? resultSessionId : '',
+          error,
+        })
+        chatState.lastCommandAt = new Date().toISOString()
+        log('info', `新建会话命令 ${cid.slice(0, 8)} 已回传（${status}${resultSessionId ? ` → ${resultSessionId.slice(0, 12)}` : ''}）`)
+        if (status === 'done') void pushOnce() // 让新会话尽快出现在办公室快照
+      } catch (e) {
+        const msg = trunc(e?.message || e, 200)
+        if (msg !== chatState.lastError) { chatState.lastError = msg; log('warn', `新建会话回执失败：${msg}`) }
+      }
+      return
+    }
+    let status = 'done'
+    let replyText = ''
+    let error = ''
+    let sc = null
+    try {
+      sc = ctx.get('sessionController') || ctx.sessionController
+      if (!sc || typeof sc.prompt !== 'function') throw new Error('sessionController 不可用（该 dsh 版本不支持）')
+      const waiter = makeChatWaiter(sid, cid)
+      const stopHeartbeat = startChatHeartbeat(cfg, cmdBase)
+      // ⚠️ 关键：本轮 prompt 的 await 会阻塞 chatTick，cancel 命令必须走独立小轮询，
+      // 否则暂停要等 AI 本轮结束才被领取（2026-10-22 实测“UI 暂停了但 dsh 还在跑”）。
+      let cancelSeen = false
+      const cancelWatch = setInterval(() => {
+        if (cancelSeen) return
+        void (async () => {
+          try {
+            const d = await apiCall(cfg, 'GET', `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}/commands?limit=5`)
+            const commands = Array.isArray(d?.data?.commands) ? d.data.commands : []
+            const c = commands.find((x) => x && x.kind === 'cancel' && String(x.sessionId || '') === sid)
+            if (!c) return
+            cancelSeen = true
+            await executeCancelCommand(cfg, c)
+          } catch { /* 下一轮重试 */ }
+        })()
+      }, 1500)
+      try {
+        await sc.prompt(
+          { requestId: cid, sessionId: sid, mode: 'queue', content: [{ type: 'text', text: String(command.text || '').slice(0, 4000) }] },
+          AbortSignal.timeout(CHAT_MAX_MS + 30_000),
+        )
+        replyText = await waiter.promise
+      } finally {
+        clearInterval(cancelWatch)
+        stopHeartbeat()
+        waiter.dispose()
+      }
+    } catch (e) {
+      status = 'failed'
+      error = trunc(e?.message || e, 300)
+      // 超时/无活动时主动中断本轮，避免 sc.prompt 一直挂在后台阻塞后续命令。
+      if (e && (e.code === 'chat_idle_timeout' || e.code === 'chat_max_timeout')) {
+        try { sc?.cancel?.({ sessionId: sid }) } catch { /* noop */ }
+      }
+    }
+    try {
+      if (status === 'done' && replyText) {
+        try { replyText = await rewriteLocalImages(cfg, replyText) } catch { /* 图片上传失败不影响回复 */ }
+      }
+      await apiCall(cfg, 'POST', `${cmdBase}/reply`, {
+        status,
+        replyText: status === 'done' ? trunc(replyText, 7000) : '',
+        error,
+      })
+      chatState.lastCommandAt = new Date().toISOString()
+      log('info', `命令 ${cid.slice(0, 8)} 已回传（${status}）`)
+    } catch (e) {
+      const msg = trunc(e?.message || e, 200)
+      if (msg !== chatState.lastError) { chatState.lastError = msg; log('warn', `命令回执失败：${msg}`) }
+    }
+  }
+
+  async function chatTick() {
+    if (chatState.busy) return
+    const cfg = readConfig(dataDir)
+    if (!cfg.ok || !cfg.chatEnabled) {
+      if (chatState.started) { chatState.started = false; log('info', '机器对话已停止（配置关闭）') }
+      return
+    }
+    const now = Date.now()
+    if (now - chatState.lastTickAt < cfg.chatPollSec * 1000) return
+    chatState.lastTickAt = now
+    if (!chatState.started) {
+      chatState.started = true
+      log('info', `机器对话已启动：${cfg.tenantAppId} / ${cfg.machineId}（每 ${cfg.chatPollSec}s 轮询）`)
+    }
+    chatState.busy = true
+    try {
+      const data = await apiCall(cfg, 'GET', `/api/argent/v1/tenants/${encodeURIComponent(cfg.tenantAppId)}/machines/${encodeURIComponent(cfg.machineId)}/commands?limit=5`)
+      const commands = Array.isArray(data?.data?.commands) ? data.data.commands : []
+      for (const command of commands) {
+        const sid = String(command.sessionId || '')
+        if (command.kind === 'chat') {
+          // 同一 session 串行；不同 session 可并行，长任务不再堵住整台机器。
+          if (!sid || chatState.activeSessions.has(sid)) continue
+          chatState.activeSessions.add(sid)
+          void handleChatCommand(cfg, command)
+            .catch((e) => log('warn', `机器对话命令异常：${trunc(e?.message || e, 160)}`))
+            .finally(() => chatState.activeSessions.delete(sid))
+        } else if (command.kind === 'task_cancel') {
+          await handleTaskCancelCommand(cfg, command)
+        } else if (command.kind === 'task') {
+          // 任务可并行，但每台机器限制 2 个，避免抢占本地资源；不阻塞轮询 cancel/其他命令。
+          const tcid = String(command.commandId || '')
+          if (!tcid || chatState.activeTasks.has(tcid) || chatState.activeTasks.size >= 2) continue
+          chatState.activeTasks.add(tcid)
+          void handleChatCommand(cfg, command)
+            .catch((e) => log('warn', `任务命令异常：${trunc(e?.message || e, 160)}`))
+            .finally(() => chatState.activeTasks.delete(tcid))
+        } else {
+          await handleChatCommand(cfg, command)
+        }
+      }
+      chatState.lastOkAt = new Date().toISOString()
+      if (chatState.lastError) { chatState.lastError = ''; log('info', '机器对话轮询已恢复') }
+    } catch (e) {
+      const msg = trunc(e?.message || e, 300)
+      if (msg !== chatState.lastError) { chatState.lastError = msg; log('warn', `机器对话轮询失败（下轮重试）：${msg}`) }
+    } finally {
+      chatState.busy = false
+      writeStatus()
+    }
+  }
+
+  ctx.effect(() => {
+    const timer = setInterval(() => { void chatTick() }, 2_000)
+    const kick = setTimeout(() => { void chatTick() }, 5_000)
+    return () => { clearInterval(timer); clearTimeout(kick) }
+  }, 'argent: office chat executor')
+
+  // 定时器：每 5s 检查一次配置（配置里的 intervalSec 控制实际推送节奏）
+  let lastTick = 0
+  ctx.effect(() => {
+    const timer = setInterval(() => {
+      const cfg = readConfig(dataDir)
+      const intervalMs = (cfg.ok ? cfg.intervalSec : 30) * 1000
+      const now = Date.now()
+      if (now - lastTick < intervalMs) return
+      lastTick = now
+      void pushOnce()
+    }, 5_000)
+    // 启动后 3s 先来一次（把 dsh 刚起来的状态尽快送到 ERP）
+    const kick = setTimeout(() => { lastTick = Date.now(); void pushOnce() }, 3_000)
+    return () => { clearInterval(timer); clearTimeout(kick) }
+  }, 'argent: office runtime reporter')
+
+  // ── 本机只读调试端点（仅回环；给办公室页/排障用，不暴露任何令牌）──
+  const loopbackOnly = (req) => LOOPBACK.has(String(req.socket?.remoteAddress || ''))
+  ctx.effect(() => ctx.webServer.register({
+    kind: 'prefix',
+    path: '/api/argent-office',
+    handler: async (req, res) => {
+      const json = (code, body) => {
+        res.writeHead(code, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' })
+        res.end(JSON.stringify(body))
+      }
+      if (!loopbackOnly(req)) return json(403, { ok: false, error: 'loopback-only' })
+      try {
+        const path = new URL(req.url || '/', 'http://localhost').pathname
+        if (path === '/api/argent-office/status') {
+          const cfg = readConfig(dataDir)
+          return json(200, {
+            ok: true,
+            enabled: cfg.ok,
+            reason: cfg.ok ? '' : cfg.reason,
+            machineId: cfg.ok ? cfg.machineId : '',
+            tenantAppId: cfg.ok ? cfg.tenantAppId : '',
+            serverUrl: cfg.ok ? cfg.serverUrl : '',
+            intervalSec: cfg.ok ? cfg.intervalSec : null,
+            lastOkAt: state.lastOkAt,
+            lastPushAt: state.lastPushAt,
+            lastError: state.lastError,
+            chat: {
+              enabled: cfg.ok && cfg.chatEnabled,
+              pollSec: cfg.ok ? cfg.chatPollSec : null,
+              started: chatState.started,
+              lastOkAt: chatState.lastOkAt,
+              lastCommandAt: chatState.lastCommandAt,
+              lastError: chatState.lastError,
+            },
+            configPath: join(dataDir || '~/.dsh/argent', REPORT_FILE),
+          })
+        }
+        if (path === '/api/argent-office/snapshot') {
+          const { cfg, snapshot, error } = await snapshotOrNull()
+          if (!snapshot) return json(200, { ok: false, error: error || `not-enabled:${cfg.reason}`, snapshot: null })
+          return json(200, { ok: true, snapshot })
+        }
+        return json(404, { ok: false, error: 'not-found' })
+      } catch (e) {
+        return json(500, { ok: false, error: String(e?.message || e) })
+      }
+    },
+  }), 'argent: office local endpoints')
+
+  // ── 桌宠 / 验收共用的健康聚合（2026-10-29）：宿主全局认证兜底，不返回 token/正文 ──
+  ctx.effect(() => ctx.webServer.register({
+    kind: 'prefix',
+    path: '/api/argent/health',
+    handler: async (req, res) => {
+      const json = (code, body) => {
+        res.writeHead(code, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' })
+        res.end(JSON.stringify(body))
+      }
+      try {
+        const u = new URL(req.url || '/', 'http://localhost')
+        if (u.pathname !== '/api/argent/health') return json(404, { ok: false, error: 'not-found' })
+        if ((req.method || 'GET') !== 'GET') return json(405, { ok: false, error: 'method-not-allowed' })
+        const health = await collectHealth({
+          ctx, dataDir, state, chatState,
+          refresh: u.searchParams.get('refresh') === '1',
+        })
+        return json(200, health)
+      } catch (e) {
+        return json(500, { ok: false, error: String(e?.message || e) })
+      }
+    },
+  }), 'argent: health endpoint')
+
+  writeStatus()   // 启动即落一份，验收不必等第一个 tick
+  return state
+}
+
+// 供回归用例直接验证配置契约（不发网络请求、不依赖宿主）
+export { readConfig }