@zq-silk/yui 2.21.0 → 2.22.0

package/docs/cli-information-contract.zh-CN.md

@@ -19,7 +19,7 @@ CLI 调用成功，不代表 Task、原生 Turn 或远端投递完成。
 | 发生了什么变化？ | `task context delta <task> --after <cursor>` | 固定上界内的不可变事件，不是可变当前状态的快照 |
 | Global 收到了什么？ | `session context <role>` | 身份、Profile 读取指针、权限、当前 Turn/retry 事实与小窗口 pending 页；历史按需读取 |
 | 读取 Global 输入 | `role message list <role> [--pending]`、`role message show <role> <id>` | 在自身范围内发现，再读完整原文；队列接受不删除历史 |
-| 本次唤醒带来什么？ | `task wake show <task> <wake>` | 固定窗口的输入/结果、标明来源的可选摘要和确切原文入口；`--history` 展开诊断历史 |
+| 本次唤醒带来什么？ | `task wake show <task> <wake>` | 固定窗口的输入/结果、有界完整普通输入和确切原文入口；`--history` 展开诊断历史 |
 | 分配了什么？ | `task run context <task>/<run>` | 冻结授权与有限 `pointers` 窗口，变化身份和活跃观察附总数；`--view refs/full` 按需扩展 |
 | 实际配置是什么？ | `task role session inspect <task> <role>` | Task/Role 身份、期望绑定、冻结 Session、当前 Provider 绑定、retry 与显式 Host 观察；不复制整个 Task/Role 或 Provider 会话历史 |
 
@@ -28,15 +28,42 @@ Task Message、事件、WorkItem、Run、决策、里程碑、publication 和 In
 Role 发现返回 `recordedHealth` 与 `hostObservation: "not-requested"`，不是实时 Host
 健康度。记录状态正常也不能排除 Host 失败或终态未确认；需沿条目的 `task role status`
 读取指针检查。
+`task role status <task> <role>` 默认 `--view current`：保留同一计算结果的
+健康度、Host、投递/重试、清理与配置漂移观察，以 Run/WorkItem 身份和准确详情命令
+替代输入、报告及历史正文。重试诊断仍通过当前 retry 详情读取；期望配置与实际配置
+仍可见，未知证据不升级为成功。这是默认嵌套 JSON 契约变化；需要原有完整记录的
+调用者使用 `--view full`，分页续读保留该选项。底层状态投影及 Web 数据不变。
 Context 列表还暴露候选、Review、Job、Project Knowledge、工作区等获授权的记录。
 `--status`、`--after`、`--work-item` 缩小发现范围；续读必须保留过滤条件。
 Run 列表接受 Task 或 `task/work` 目标。
 
+`task run show <task>/<run> --view status` 返回身份、记录状态、delivery/retry
+观察、退役与结果可用性，不复制输入、启动配置或报告正文。重试观察使用与 Task Context
+相同的当前摘要，并提供准确 Session retry 命令取回原始诊断与历史，不直接携带其正文。
+它与默认 `--view full`
+共用授权检查；完整视图仍保留全部审计证据和文档分页。
+`--view result` 返回完整原始结果（包含失败与 Provider 字段）、Run 身份/状态、
+退役与执行观察，不携带提交输入和启动配置。没有结果时为 `null`，不代表成功。
+长报告仍需按同一视图续页；`reads.full` 提供完整审计入口，默认仍为 full。
+处置前须通过 Message、result 或
+完整 Run 视图读取原始结果；status 不是报告或验收。精确原文仍在当前上下文时，
+用 status 补充执行事实，避免再读一份报告；不引入读取回执或模型记忆缓存。
+
 当前 Context 的 `attention.messages` 排除明确 ack 或退役的 Message；投递成功不代表
 处理完成。精确 wake 回执必须覆盖最新原文版本。用 `--view current` 续读当前视图，
 默认分类列表仍保留完整历史。`collections` 计数与 `omitted` 明确表达发现不完整。抽样不能证明没有更早的待处理
 或相关输入。读取相关固定 wake 与原始 Message；更广的需求/历史审计使用分类发现。
 
+当前 Context 是工作索引，不是每轮重复的配置或需求全文。Task/Brief、Role、
+Project policy、工作区、交付和决策记录即使很小，也只返回摘要与确切引用；
+生命周期、执行权限、待处理数量和活跃执行／重试观察仍直接显示。
+在依据需求或权限行动前，用 `context inspect` 读取相关原件；
+`omitted: true` 不代表原件为空。每次读取仍重新计算当前身份并校验范围，
+没有增加模型记忆缓存、推断 ACK 或陈旧状态自动复用。
+当前工作区样本优先显示获授权的准确 Run 工作区投影，再显示 Task 主工作区，
+然后才是其他工作区，避免历史集成目录挤掉主工作区。显式完整家族查询保留原有
+排序、数量和记录；显示优先级不改变工作区权限，也不授予其他 Assignment 的访问权。
+
 ## 预算与续读
 
 - 发现页默认 20 条，可选 1–100，紧凑 JSON 预算 32 KiB，计入成功 envelope、
@@ -46,7 +73,10 @@ Run 列表接受 Task 或 `task/work` 目标。
   入口每个集合最多抽样八条。
 - Global 入口最多八条本轮/可用输入，保留效果未知项；历史缺回执单独计数，
   通过 `inbox list --view history` 显式发现，不把缺 ACK 当作未执行。
-  pending 页用 `role message list <role> --current --cursor` 续读；不重复 recent、
+  pending 页用 `role message list <role> --current --cursor` 续读。
+  托管自身读取另含 `currentOriginals`：本页中与精确当前 Turn 关联的完整记录，
+  每项至多 4 KiB、合计 8 KiB。未来队列、历史和超限记录仍只提供发现信息与
+  原有精确读取入口；检查调用不内联原文。读取不 claim、投递或 ACK。不重复 recent、
   Profile 正文、历史 Skill 包和累计 retry 详情。Profile 由 Manifest 精确指向。
 - `inbox list --view current|history|all` 优先展示精确本轮输入，与自动投递共用原始记录。
   `claim`、`ack` 接受 1–16 个精确 ID，分别返回结果。ACK 表示语义处置，
@@ -58,11 +88,19 @@ Run 列表接受 Task 或 `task/work` 目标。
   `pointerPage.nextCursor` 发现更多引用；`--view full` 显式读取完整冻结包。
   若 `input.directiveOmitted` 为 true，行动前用 `--view input` 全文读取分配指令；
   默认入口的指令摘要不是指令正文。
+  新冻结的 Task 消息指针在原有 summary 中提供 `Excerpt:` 原文摘录，
+  最多160 UTF-8字节，保留原 revision 和 digest。摘录只辅助选择相关原文，
+  不代表完整正文或授权；后续消息修改不会改变该 Run 已冻结的摘录，
+  也不重新生成既有 Snapshot。
+  有指针时，`reads.expand` 直接展示已有的批量原文展开语法。用相关冻结
+  指针替换占位符，并非默认读全量；既有1–8项选择上限、准确Snapshot
+  校验、完整原文及分页预算不变。
 - `session skills [--cursor ...]` 只检查当前元信息和可读性，不读技能正文；
   配置元信息过大时使用相同文档分页。
 - 不超过 16 KiB 的详情保持普通 JSON。更大详情返回 `contentPage`：确切来源、
   SHA-256 digest、JSON 字符偏移、总字节数/字符数、文本、完整性与下一游标。
-  每块最多 4096 个 UTF-16 单元，不拆代理对，转义后的输出低于 32 KiB。
+  每块长度按完整编码后的 32 KiB 响应预算调整，计入身份与游标，并为小型命令包装
+  预留 256 字节。不拆代理对，偏移仍以 UTF-16 单元计，已发出的旧游标仍可续读。
   不再因 4 MiB 上限而永久无法读取合法原文。
 - Task 元信息/next-action/remote-delivery、Brief、WorkItem、Message、Run、
   决策/里程碑/事件、Role show/status/Session 检查、wake 详情、InputRequest、
@@ -85,6 +123,27 @@ Session，也不授予外部效果权限。
 `text`，校验相同 source 与 digest，最后一次性解析 JSON。不要分别解析块，也不要把
 第一块当成完整报告。
 
+可复制的 Node.js 消费示例见
+[详情读取示例](cli-information-contract.md#copyable-detail-reading-example)：
+只对指定的 `task context inspect` 原文沿游标续读，验证 source/digest/连续 offset，
+直到 `complete: true` 才拼接解析一次；不是“两页读完”，也不自动重试拒绝或源变化。
+示例只读取，不代替 Agent 阅读、claim 或 ACK；大输出须保存在自有临时目录并分段读取。
+不要把半页 `text` 传给 `jq fromjson`，其错误可能回显整段长文。
+已获取页面的元数据可用
+`.data.contentPage | {offset,len:(.text|length),complete,nextCursor}` 查看，不必重取正文。
+此示例按需查阅，不是每次通知的新必读内容。
+
+同一 Task 中已经确定的 1–8 条独立原文可一次读取：
+`task context inspect <task> --refs '<发现结果中的 ref 对象 JSON 数组>'`。
+手写命令可改用重复的 `--context-ref <store/refId@digest>`，复用 dispatch
+的精确引用写法，避免 JSON 引号。两种选择格式不能混用，也不能混入单条选择参数。
+每条必须含 `store`、`refId`、`digest`；可选 `revision` 仅为发现元数据，
+不另作新鲜度校验。返回 `{taskId, items}`，每项与单条 inspect 相同。
+整批共用原有 32 KiB 预算；出现 `contentPage` 时保留相同顺序的引用并沿
+`--cursor` 续读。任一引用过期、重复、不可用或越权都拒绝整批读取。
+各原文独立绑定 digest，不建立跨记录原子快照，不自动选材，不 claim/ACK，
+也不扩大权限。只需一条时继续使用原有单条入口。
+
 列表包含 `items`、`total`、`complete`、`nextCursor`。计数、条目和游标校验处于同一
 授权范围。游标是不透明位置，不是通行令牌：每页重新授权。集合或文档改变时明确报错，
 重新读取，不混合版本；无需持久分页 Session。可变集合不保证并发写入期间无中断遍历。
@@ -136,7 +195,23 @@ Run 增量基于精确父 Snapshot，返回完整变更 `refs` 与 `removedRefs`
 ## 效果与例外
 
 Message send/queue/steer 回执保留身份、digest、正文字节数及原有提交/投递/control
-状态，不回显正文。Brief 更新返回 saved 引用。没有新增等待、重试、确认或审批阶段。
+状态，不回显正文。`operator submit --json`采用同一结构：
+`data.taskId`、`data.message`（有界消息回执）、`data.submission`（保存时的
+phase/planning/activation/delivery/next-step事实），不再只返回`output`字符串；
+普通文本输出不变。同key重试复现原提交反馈，不用Task后来的状态重新解释。
+回执不是原文，也不证明Leader已经完成。
+`task decision record|supersede --json`返回有界保存回执：`data.taskId`、`effect: "saved"`、
+`data.decision`（身份、状态、时间戳、整记录digest及rationale字节数）。
+完整保存记录的JSON不超过2048 UTF-8字节时，
+`decision`同时包含该记录全部字段，`contentOmitted: false`，可直接核对
+实际短值，不再附带`read`后续读取指针；更大记录设`contentOmitted: true`，
+附带准确`read`入口，省略标题、rationale及取代原因
+正文而不截断。digest始终对应完整原始记录，不包含回执额外字段；
+需要完整读取时仍用`decision show`。人类文本不变，
+JSON调用方改读`data`而非旧`output`字符串。
+这证明保存状态而非语义验收；丢失响应不授权重复record。
+Brief 更新返回 saved 引用。
+没有新增等待、重试、确认或审批阶段。
 重复读游标绝不能重放变更。
 
 激活、完成、集成和输入控制仍是完整事务业务操作，即使内部有多步工程机制。
@@ -148,6 +223,21 @@ Message send/queue/steer 回执保留身份、digest、正文字节数及原有
 读取仍有自己的用途契约；不宣称它们全部受 32 KiB 限制。Web 全详情投影是独立消费者，
 不会被 CLI 摘要悄悄替代。大 Project Knowledge 与 Task 证据用定向 Context 发现。
 
-典型通知读取一次当前 Context、一次固定 wake，再逐条读取相关原文（或其全部文档页）。
+典型通知读取当前 Context 和固定 wake，再补取尚未完整返回的相关原文及其全部文档页。
+聚焦 wake 的 JSON 对普通 Message 直接返回完整 `value`：每条最多 4 KiB，
+合计最多 8 KiB，标记 `contentOmitted: false` 并附当前版本的精确 `ref`。
+已有完整值可直接使用；长消息与结果报告保留读取入口，完成通知不替代报告。
+完整内联值的 `refreshRead` 仅用于按需刷新当前来源，不是必需的后续读取；
+只有原文省略时才返回 `read`。原先无条件跟随 `messages[].read` 的消费者应先检查
+`contentOmitted`，完整时使用 `value`。纯文本输出只展示摘要，因此仍保留原文链接。
+当前 Leader 的 `inbox show <wake>` 在 `originalContext` 返回相同聚焦原文；
+已有完整值无需再次 `wake show`。权限、外层分页、claim/ACK 边界不变。
+对已有 `wake-*` 的变更回执，导航字段由 `originals` 改为 `refreshOriginals`：
+仅在聚焦原文缺失、不完整或需要刷新时使用，不因 claim 本身重复读取。
+对 `pending-*` 的 claim（含相同请求的幂等重试）仍返回 `originals`，
+因为初次查看尚未提供固定窗口原文。这是 JSON 导航字段变化，消费者需区分两类入口；
+不记录读取历史，也不免除完整读取相关原文的要求。
+固定窗口选择的是身份，不是可变消息正文的历史快照；后来修改由精确引用区分。
+`--history` 不附带这些正文，claim 与 ACK 语义不变。
 不要为了入口故意省略的详情重复读聚合。只有原文超过内联预算才增加原文分页调用；
 摘要不能代替完整原文。

package/docs/managed-turn-and-session-runtime.md

@@ -29,9 +29,21 @@ submitting, unknown and interrupt-owned input still retain their handling path.
 scopes, phase/read costs and sampled event-loop lag are separate facts.
 Samples use a process-monotonic clock and hashed target/request labels, with
 at most 16 recent and 16 active samples plus the slowest completed sample.
-In-flight request count is not queue depth, and pre-routing wait is not
-measured. These observations neither identify an old incident retroactively
-nor establish quiescence; restarting a Controller does not refresh live Hosts.
+In-flight request count is not queue depth; total client-to-route wait is not
+measured by the server alone. These observations neither identify an old incident
+retroactively nor establish quiescence; restarting a Controller does not refresh live Hosts.
+
+`observations.commands.routes.transport` correlates socket accept-to-route,
+complete-frame receive-to-route and route-to-local-flush stages by the same
+request hash as route service time. A close before the response finishes is a
+failed transport observation, even if the business handler later succeeds.
+Client socket failures retain local monotonic connect/write/first-response/end
+timestamps in `details.diagnostic.controller.timing`; null means not observed.
+Match the request ID's SHA-256 prefix before comparing these with server stages.
+These are local events, not peer acknowledgement or pure kernel queue time.
+The interval before the server's accept callback includes unobserved socket and
+event-loop delay; sampled lag alone cannot attribute it to a scheduler phase.
+No timeout, coherence check, receipt, retry or stop/start policy is changed.
 
 `observations.persistence` separates main-thread database lock/body/commit
 costs from persistence-worker round trips, worker execution and worker reads.
@@ -54,6 +66,24 @@ admission and other lifecycle writes still require their own boundary analysis.
 Status responsiveness during these maintenance operations is not proof that
 every possible Controller stall has been eliminated.
 
+The worker-backed runtime drain reads its immutable inbox files asynchronously,
+as does native-Session discovery during launch. The 64-event fold limit is not
+a limit on the initial directory scan: a large retained backlog must not be
+read synchronously on the socket thread before that limit takes effect.
+Sorting, per-file validation, event identities, fold order and commit-before-ACK
+remain unchanged. This trades some backlog throughput for control responsiveness;
+it is not a bound on total backlog memory or every CPU operation. Synchronous
+producer deduplication and explicit worker-off drains still need separate
+boundary analysis.
+
+Controller stop retains the captured PID/start-generation fence through both
+graceful drain and physical recovery. If the ownership inventory is unreadable,
+a protected Home-validated discovery can retain that fence, but cannot authorize
+a signal. No physical match is not proof of exit: before allowing successor
+startup, the captured generation must be provably gone. A still-live generation
+times out; unavailable generation evidence refuses recovery. Explicit physical
+stop still revalidates UID, entrypoint, Home, PID and start identity before signalling.
+
 Idle Global inbox recovery and already-settled retry checks use read-only
 snapshots, without reserving SQLite's writer. Creating a recovery notice or
 settling an outstanding retry still rechecks the current Session/claim/input
@@ -85,12 +115,17 @@ pin a read snapshot, uncommitted writes cannot publish a reusable cache token,
 and only 16 recent Task projections are retained. Cache entries never authorize
 dispatch or replace exact mutation-time checks.
 
-A newly created global Operator conversation requests the native title
-`Yui · Operator · MMdd`, using Yui's configured time zone. The request is made
-only after the provider returns the exact new conversation identity; restore
-and reconnect paths never replay it. Providers without a post-create rename
-capability keep the usable Session and expose a diagnostic instead of treating
-metadata failure as Session-creation failure.
+Role instance codes and generated Session/planning titles are Yui presentation
+metadata, using Yui's configured time zone where a date is included.
+Managed Codex retains this launch title but does not submit native title
+synchronization, including on restore and reconnect. This intentional omission
+is logged locally, not emitted as a failed operation or recovery notification.
+An unsubmitted name is never persisted as an applied native title; the native
+conversation and business execution remain usable.
+The native title mutation has been observed to persist without replying and
+block later Goal/Turn requests, even with a separate metadata client. Automatic
+synchronization must not be restored merely by increasing a timeout or retrying
+an unknown write; it requires a verified nonblocking native path.
 
 ## Authority
 
@@ -177,14 +212,27 @@ continuations and the complete-original reading protocol.
 Run Context freezes Assignment, source references, effective configuration and
 workspace boundaries. A Role edit does not rewrite an existing Assignment.
 Reading either Context does not acknowledge input or create execution authority.
-Every managed input points to the exact Session Manifest and CLI entry. The
+Initial or changed managed input points to the exact Session Manifest and CLI entry. The
 Run Pack is a reference directory: read the relevant requirement and message
 bodies before acting, rather than treating a successful load as the deliverable.
 Planning Packs expose no Project write scope or Task-completion permission.
 
-The Manifest pointer is a recovery locator, not a read receipt. At the start of
-every turn run `yui session skills --json` through the Session's CLI/Home. It
-checks current paths, internal `VERSION` files and readability, without reading
+The Manifest pointer is a recovery locator, not a read receipt. The managed Host
+checks current paths, internal `VERSION` files and readability before submit/steer,
+including the native Operator TUI relay. Unchanged inputs carry a short check
+notice, not repeated Skill lists or a request for another Agent tool call.
+The ordinary notice is only a check result: it does not repeat compaction or
+loading procedures. Those belong to the launch contract and event-specific
+entry guidance. After lost context, reconstruct the current working set from
+the Runtime/Role entry points and references applicable to the next action;
+do not restore the union of every procedure used earlier in the conversation.
+This is instruction routing, not a claim that the Host detects compaction,
+can evict old text, or knows what the model remembers.
+First input, changed metadata and Host reattachment/recovery supply current pointers.
+Only confirmed Provider acceptance advances the Host-local notice state; failures
+and unknown submissions do not. This state is ephemeral, not a loading receipt.
+Unmediated clients retain `yui session skills --json` through their Session CLI/Home.
+The check operates without reading
 Skill bodies or walking/snapshotting resources. Builtins use the running
 installation's `skills/<id>` entry; configured Skills use `YUI_HOME/skills/<id>`.
 These paths do not contain a Session/content digest. After changing installation
@@ -200,6 +248,8 @@ compacted/uncertain context. Reuse only when versions are unchanged and the full
 instructions remain available now. Yui stores no "already read" state and does
 not claim to inspect the model's context. Historical packages remain audit only;
 missing/corrupt snapshots do not prevent valid Session resume or input delivery.
+Provider compaction is not reliably observable here: missing instructions still
+require Agent-directed reload even when engineering reports unchanged versions.
 Missing current files report their exact path and recovery action. Session
 identity, scope, writer fences and real CLI/Home incompatibility still reject.
 Always refresh dynamic facts. Leader notifications use
@@ -411,7 +461,7 @@ The three failure ingresses retain their native fencing/classification, while
 record creation and deduplication share one writer and supervisor notices use
 the existing event-routing boundary.
 
-Unknown Leader notifications preserve their wake and input window:
+Unknown or rejected Leader notifications preserve their wake and input window:
 
 ```sh
 yui task wake show <task> <wake>
@@ -419,14 +469,20 @@ yui task wake resolve <task> <wake> --reason <quiescence-evidence>
 ```
 
 Resolve releases the claim after native-effect fences are clear. It neither
-replays the notification nor invents acceptance or completion. Independent
+replays the notification nor invents acceptance or completion. A rejection,
+including one recorded after an unknown outcome, is not quiescence evidence.
+If an execution stop removed the operational mailbox, the exact durable
+notification attempt can still be explicitly released for inbox inspection
+and handling; a different current batch is never released. Missing delivery
+evidence is refused, not guessed. Original delivery events and handling claims
+remain unchanged; a repeated resolve adds no second disposition. Independent
 Role work and legal local facts are not a Task-wide recovery lock.
 
 Wake status records notification delivery, not Message implementation. For
 ordinary Leader notifications, `consumed` means native acceptance. Native Turn
 completion and Task delivery need their own runtime evidence and durable results.
-A rejected wake stays `dispatched` with its claim until explicit retry or Session
-replacement; an explicitly released historical wake can remain `dispatched`
+A rejected wake stays `dispatched` with its claim until explicit retry, no-replay
+resolve or Session replacement; an explicitly released historical wake can remain `dispatched`
 without a claim. Unknown acceptance cannot use `wake retry`.
 Session replacement preserves queued input for a new wake and current Context;
 it does not retroactively mark an old wake accepted. Late receipts cannot settle
@@ -725,10 +781,15 @@ Goal `stalled` alone neither establishes the cause nor warrants clearing Goal.
 
 In this candidate, `task wake retry` requires a proven-rejected, unconsumed
 exact claim, a corrected cause and no accepted/uncertain native execution.
-`task wake resolve` supports an unknown exact claim after shared-native
-quiescence; it releases scheduling without replay or semantic acknowledgement.
-Deferred delivery meets neither precondition. Do not assume another recovery
-package's extended behavior is installed. For Global Roles, this candidate
+As an alternative, not a sequence, `task wake resolve` supports an unknown or
+rejected exact notification attempt after shared-native/background/writer
+quiescence and persisted evidence; rejection (including after unknown) is not
+quiescence. It releases scheduling without replay or semantic acknowledgement.
+If the operational mailbox is absent, exact durable wake/attempt evidence is
+still required; another current batch is never released. Original claims,
+delivery events and saved alerts remain unchanged. Deferred delivery meets
+neither precondition. Refresh current installed capabilities before acting.
+For Global Roles, this candidate
 does not establish a dedicated targeted Host-stop command: inspect original
 input/control and `session retry <role> show`, then discover current authorized
 capabilities. There is no guessed Task equivalent or stop-all fallback.

package/docs/managed-turn-and-session-runtime.zh-CN.md

@@ -14,9 +14,20 @@ interrupt-owned 输入仍保留原处理路径。
 `controller status --json` 的 `identity.runtime.observations` 分别呈现已认证请求、
 调度待处理范围、阶段／读取成本及采样的事件循环延迟。样本使用进程单调时钟，
 目标／请求标签仅保存哈希；每组最多保留 16 个近期样本、16 个活动样本及最慢完成样本。
-in-flight 请求数不是排队数，路由前等待尚未测量。观测不能反推旧事故的唯一根因，
+in-flight 请求数不是排队数，服务端不能独自测量客户端到路由的完整等待。
+观测不能反推旧事故的唯一根因，
 也不构成静止证明；重启 Controller 不会刷新存活 Host。
 
+`observations.commands.routes.transport` 使用与 route service time 相同的请求哈希，
+分别关联 socket accept→route、完整帧 receive→route、route→本地 flush。
+响应完成前连接关闭会记录 transport 失败，即使业务 handler 随后成功。
+客户端 socket 失败在 `details.diagnostic.controller.timing` 保留单调时钟的
+connect／write／首个 response／end 时间戳；null 表示未观测到。
+比较服务端阶段前须匹配 request ID 的 SHA-256 前缀。这些是本地事件，
+不是对端确认或纯内核排队时间。服务端 accept callback 之前仍有未观测到的
+socket／事件循环延迟，不能仅凭采样 lag 归因到某个调度阶段。
+timeout、coherence、receipt、重试及 stop/start 策略均未改变。
+
 `observations.persistence` 将主线程数据库锁等待／事务体／提交成本，与持久化
 worker 的往返耗时、执行和读取成本分开。worker 摘要搭载既有响应，保留 worker
 实例标识；status 只读缓存观测，不另发诊断 RPC。比较往返和执行时间时须匹配
@@ -31,6 +42,18 @@ worker 的往返耗时、执行和读取成本分开。worker 摘要搭载既有
 隔离：启动准入、邮箱领取、到期 Job 准入及其他生命周期写入仍需分别分析边界。
 这些维护操作期间状态请求可响应，不代表 Controller 的所有长停顿都已消除。
 
+worker 模式的 runtime drain 改用异步读取不可变 inbox 文件，启动时的原生 Session
+发现也使用同一路径。64 条折叠上限不限制前置目录扫描，不能在该上限生效前，
+先在 socket 主线程同步读取整个积压。排序、逐文件校验、事件身份、折叠顺序及
+先提交后 ACK 保持不变。这以部分积压吞吐换取控制面响应，不构成总积压内存或
+全部 CPU 操作的上限；同步生产者去重及显式关闭 worker 的 drain 仍需分别分析。
+
+Controller stop 在优雅停止和物理恢复两条分支都保留所捕获的 PID／启动代次。
+所有权扫描不可读时，经权限及 Home 校验的 discovery 可以保留该代次约束，但
+不能据此发信号。未找到物理匹配不等于已退出：允许启动后继前，必须证明原代次
+已消失；仍活着则超时，代次证据不可读则拒绝恢复。显式物理停止在发信号前，
+仍复核 UID、入口、Home、PID 及启动代次。
+
 空闲 Global 收件箱恢复检查、已处分的重试检查使用只读快照，不申请 SQLite
 写锁。真正创建恢复通知或处分未完成重试时，仍在原写事务内复核当前
 Session／claim／输入。这消除的是空操作等锁，不是所有实际写入的竞争。
@@ -90,10 +113,13 @@ Provider binding，再结算执行占用。Global 停止证据保存为仅记录
 不触发新的原生输入。待投递通知不能重启已明确停止的 Session；普通 Host 脱离仍
 保留 active Session，可正常重连。部分切换失败后，仍须先结算旧输入再选择新会话。
 
-新建 global Operator 对话会按 Yui 当前配置时区请求原生标题
-`Yui · Operator · MMdd`。只有 Provider 返回新对话的确切身份后才执行该请求；
-恢复与重连路径不会重放。若 Provider 不支持创建后改名，已创建的 Session 仍保持
-可用，并留下诊断，而不会把元数据失败冒充为 Session 创建失败。
+Role 实例码及生成的 Session／规划标题属于 Yui 展示元数据；包含日期时采用当前
+配置时区。托管 Codex 保留 launch 标题，但不提交原生标题同步，恢复与重连也不提交。
+这一有意省略只写本地日志，不作为失败操作或恢复通知；未提交的标题不能记作已应用的
+原生标题，原生对话与业务执行保持可用。
+原生命名曾出现写入已生效却无回执、随后 Goal/Turn 请求阻塞的情况，独立元数据
+连接也未解决。恢复自动同步需要验证不会阻塞执行的原生路径，不能仅增加超时或重试
+结果未知的写入。
 
 ## 权威
 
@@ -137,8 +163,16 @@ Run Context 冻结 Assignment、来源引用、生效配置和工作区边界。
 和消息正文，而不是把加载成功当成交付物。规划 Pack 不暴露 Project 写范围或 Task 完成
 权限。
 
-Manifest 指针是恢复定位入口，不是已读凭据。每轮开始通过本 Session 的 CLI/Home 执行
-`yui session skills --json`，轻量检查当前路径、内部 `VERSION` 和文件可读性，不读取
+Manifest 指针是恢复定位入口，不是已读凭据。managed Host 在 submit/steer 前检查，
+原生 Operator TUI 代理也使用同一逻辑。普通未变化输入仅附短检查提示，不重复清单、
+不要求 Agent 再发工具调用；首次、元数据变化和 Host 重连／恢复才给当前入口。
+普通提示仅是工程检查结果，不逐轮重发压缩或加载操作说明；这些说明属于启动契约和
+事件触发的入口引导。丢失上下文后，从 Runtime／Role 入口和当前动作适用引用重建工作集，
+不恢复历史上用过的全部流程。这是指令路由，不声称 Host 能识别所有压缩、移除历史文本
+或判断模型记忆。任务原文和必要新鲜状态仍按业务需要读取。
+只有 Provider 明确接受才推进 Host 进程内的通知状态，失败与未知提交不推进；
+它不是持久化加载收据。不经过该 Host 的客户端仍通过本 Session CLI/Home 执行
+`yui session skills --json`。检查当前路径、内部 `VERSION` 和文件可读性，不读取
 正文或遍历/冻结资源。内置入口是当前安装目录的 `skills/<id>`，自定义入口是
 `YUI_HOME/skills/<id>`，不包含 Session/内容摘要；安装位置变化后由检查重新解析当前入口。
 Global Manifest 的 `skillCheckCommand` 使用自包含的 `session context <role>`，
@@ -147,6 +181,8 @@ Global Manifest 的 `skillCheckCommand` 使用自包含的 `session context <rol
 首次进入、版本变化、恢复，以及压缩后全文缺失或可用性不确定时，读取当前 Runtime、
 Role/custom Skills 全文及必要引用、Manifest 的 profile。只有版本未变且全文仍在当前
 上下文时才复用。系统不保存“已经读过”状态，也不声称检查了模型上下文。
+当前接口不能可靠观察 Provider 压缩；即使工程报告版本未变，Agent 发现指令缺失时
+仍须补读，不能将未发变化提示当作全文仍在的证明。
 历史冻结包仅作审计：缺失或损坏不阻止合法 Session 恢复与消息投递；当前文件缺失则
 报告具体路径和修复动作。身份、作用域、writer fence 与实际 CLI/Home 不兼容仍会拒绝。
 动态事实仍须刷新：
@@ -302,19 +338,23 @@ retry 把被拒绝批次及后续排队输入交回现有 mailbox，不把旧 wa
 工作区条目或当前 Session 引导协议。三类错误入口保留各自的原生身份检查与分类，
 错误创建、去重统一一个写入入口，上级通知统一使用事件路由边界。
 
-未知的 Leader 通知保留其唤醒和输入窗口：
+未知或被拒绝的 Leader 通知保留其唤醒和输入窗口：
 
 ```sh
 yui task wake show <task> <wake>
 yui task wake resolve <task> <wake> --reason <quiescence-evidence>
 ```
 
-resolve 在原生效果围栏清除后释放该认领。它既不重放通知，也不编造接受或完成。独立的
+resolve 在原生效果围栏清除后释放该认领。它既不重放通知，也不编造接受或完成。
+被拒绝（包括先 unknown 后 rejected）不等于已经静止。执行停止移除临时 mailbox 后，
+仍可依据该 wake 的精确持久投递 attempt 显式释放，以便在 inbox 检查和结清；
+不得释放另一当前批次。缺失投递证据时拒绝猜测。原始投递事件与处理认领保持不变，
+重复 resolve 不增加第二次处分。独立的
 Role 工作和合法的本地事实不是一把 Task 范围的恢复锁。
 
 wake 状态记录通知投递，不记录 Message 的实施结果。普通 Leader 通知的 `consumed`
 表示原生接受；原生 Turn 完成与 Task 交付应分别依据运行证据和持久结果判断。
-被拒绝的 wake 保持 `dispatched` 并保留 claim，直到显式重试或 Session 替换；
+被拒绝的 wake 保持 `dispatched` 并保留 claim，直到显式重试、无重放 resolve 或 Session 替换；
 已显式释放的历史 wake 可以保持 `dispatched` 而不占用 claim。
 接受状态未知的通知不能用 `wake retry` 重放。Session 替换把待投递输入
 保留给新 wake 与当前 Context，不会追溯把旧 wake 标成已接受；旧回执也不能结算
@@ -536,9 +576,12 @@ Host 中尚未持久化的事实。stop 请求保存不等于物理清理成功
 仅显示 Goal stalled 不能确定根因，也不能据此要求清 Goal。
 
 本候选的 `task wake retry` 仅适用已纠正原因、原准确 claim 仍未消费的明确 rejected，
-且不能存在已接受或不确定原生执行；`task wake resolve` 仅支持准确 unknown claim
-在共享原生静止证明后释放调度，不重放、不 ACK。deferred 不满足二者前提，不能假定
-其他恢复包的扩展行为已经安装。GlobalRole 未确认有专用准确 Host-stop 命令时，读取
+且不能存在已接受或不确定原生执行。另一可选动作是 `task wake resolve`：准确 unknown
+或 rejected 通知 attempt 在共享原生／后台／writer 静止及持久证据确认后释放调度，
+不重放、不 ACK。两者不是自动依次执行的步骤；rejected（包括 unknown 后的拒绝）
+不等于静止。operational mailbox 缺失时仍须精确持久 wake/attempt 证据，不能释放
+另一当前批次。原始处理认领、投递事件与已保存告警不改写。deferred 不满足二者前提，
+执行前刷新实际安装能力。GlobalRole 未确认有专用准确 Host-stop 命令时，读取
 原输入/control 和 `session retry <role> show`，再发现当前权限下的能力；不臆造
 Task 等价命令，也不退化为 stop-all。
 

package/docs/provider-retry.md

@@ -25,6 +25,17 @@ next input. Agents still own semantic recovery and acceptance.
   accepted failed Turn and original input. The error need not have qualified
   for automation; manual intent does not waive Session, authority, latest-Turn
   or background-quiescence checks.
+- A current-owner manual execution retry can recover that same failed Turn
+  across a message continuation and subsequent retries only when the durable
+  chain proves every intervening attempt was rejected before a Provider write.
+  Session, authority, Assignment, launch configuration and workspace must match.
+  It carries the current continuation input, not the earlier business directive,
+  and preserves the original automatic budget. Missing proof or any intervening
+  accepted/unknown input leaves ordinary admission fenced.
+- Once that exact recovery is accepted, its Agent can claim and acknowledge
+  the original continuation Message through the same verified lineage. This
+  is handling authority, not another delivery: recipient, continuation target,
+  prior claims and failure records stay unchanged; no Message is requeued.
 
 The records live on the existing Provider binding, with indexed pending-record
 reads and the existing Controller deadline timer. There is no retry Task status,

package/docs/release-workflow.md

@@ -51,6 +51,37 @@ merely to avoid a version decision. Package versions remain distinct from protoc
 and persistent-storage contracts: their compatibility checks and required migrations
 are unchanged, and the storage rules below do not authorize a package release.
 
+### 2.22.0 compatibility and migration notes
+
+Context reads now support bounded discovery, precise batched original retrieval,
+body transport receipts and focused notifications. Runtime/Role Skills organize
+required material around actions and recovery after compaction; pointers and
+transport receipts never prove semantic reading or acknowledge an input.
+Full originals remain available. Automated consumers must follow explicit
+pagination and retrieval references rather than assuming every default response
+contains every body. Help is focused by default; consumers needing the complete
+recursive command tree must explicitly request recursive help, including JSON
+consumers affected by the changed child projection.
+
+Host restoration and Controller scheduling/SQLite transaction boundaries are
+bounded without replaying unknown effects. Codex Host native title mutation is
+omitted where it could stall execution; Yui presentation retains Role instance
+codes and planning markers, but an unapplied native title is not recorded as
+success. Codex temporary-directory exclusion options are preserved end to end.
+
+Storage advances to **1.26** through the centralized **1.25 → 1.26** migration;
+the already-published 1.24 → 1.25 migration is unchanged. Back up the Home and
+use the normal upgrade/migration path; do not open a migrated Home with an older
+binary. Controller/Host protocols remain v1. Publishing this version does not
+update the global CLI, migrate a production Home or restart its services.
+
+The maintained evaluation entry is `scripts/eval/`, with shared infrastructure
+separate from context-specific logic. Context guidance and historical analyses
+live under `docs/evaluations/context/`; the old `scripts/collaboration-eval/`
+entry is retired. Engineering gathers measurements; Agents interpret actual
+experimental and production traces, including compaction boundaries and missing
+evidence. Local output reductions are not a claim of universal token savings.
+
 ### 2.21.0 compatibility and migration notes
 
 Ordinary Task, Assignment and frozen-context evidence reads now use the local
@@ -870,6 +901,12 @@ and timeout hierarchy. A no-target activation, help, `--json`, and every other
 command remain on the global CLI. Activation does not add another ordinary CLI
 routing path.
 
+Activation's two storage preflights use the verified target's existing read-only
+upgrade primitive in an isolated process, not its ordinary inactive CLI entry.
+The target must be installed in this Home with matching integrity and smoke
+evidence before each preflight. This neither migrates storage nor permits an
+inactive release or checkout CLI to read/write the Home through ordinary commands.
+
 ## Step catalog
 
 The plan is a fixed, predeclared subset of operations. Each plan entry has an

package/docs/release-workflow.zh-CN.md

@@ -36,6 +36,30 @@ Agent 选择一个预先声明的计划，设施从持久状态驱动该计划
 不能将不兼容冒称为兼容，也不为回避版本选择新增历史兼容机制。包版本与协议、
 持久存储契约仍然独立：兼容性检查和必要迁移要求不变，下文存储规则不授予发版权限。
 
+### 2.22.0 兼容性及迁移说明
+
+上下文读取增加有界发现、精确批量原文读取、正文传输回执及聚焦通知。
+Runtime／Role Skill 按动作组织必需材料，并明确上下文压缩后的恢复路径；
+指针和传输回执不证明语义阅读，也不自动 ACK。完整原文仍可获取。
+自动化调用方应遵循明确的分页和原文入口，不再假定默认返回包含全部正文。
+help 默认聚焦当前命令；需要完整递归命令树时须明确请求递归 help，
+使用 JSON 的调用方也应适配子命令投影变化。
+
+Host 恢复、Controller 调度及 SQLite 事务边界改为有界处理，不重放未知效果。
+Codex Host 在可能阻塞执行的路径省略原生标题变更；Yui 展示保留 Role 实例码及
+planning 标记，但不会将未应用的原生标题记为成功。Codex 临时目录排除选项
+贯穿配置及启动链路保留。
+
+存储通过集中式 **1.25 → 1.26** 迁移升级至 **1.26**；已发布的 1.24 → 1.25
+迁移不变。升级前备份 Home，并使用正常升级／迁移路径；不要用旧二进制打开
+已迁移的 Home。Controller/Host 协议仍为 v1。发布本版本本身不更新全局 CLI、
+不迁移生产 Home，也不重启服务。
+
+受维护的评测入口为 `scripts/eval/`，公共基础设施与上下文专属逻辑分离；
+上下文指导及历史分析位于 `docs/evaluations/context/`，旧
+`scripts/collaboration-eval/` 入口退役。工程负责数据统计，Agent 根据实验和
+线上实际轨迹分析，包括压缩边界及证据缺失；局部输出减量不代表普遍 token 收益。
+
 ### 2.21.0 兼容性及迁移说明
 
 普通 Task、Assignment 和冻结上下文证据读取改按本地资源边界处理，不再将 Task
@@ -647,6 +671,10 @@ CLI、Operator Session 和 Controller 替换保持兼容，而不必把每个命
 `dist/cli.js`。因此目标发布拥有完整的交接协议和超时层级。一次无目标的激活、help、
 `--json` 以及其他每个命令都留在全局 CLI 上。激活不新增另一条普通 CLI 路由路径。
 
+激活的两次存储预检在隔离子进程中调用已验证目标包现有的只读升级原语，不经过目标包
+尚未激活的普通 CLI 入口。每次预检前都要求目标已安装于此 Home，且完整性及冒烟回执
+匹配。这既不迁移存储，也不允许 inactive release 或源码 checkout 的普通命令读写 Home。
+
 ## 步骤目录
 
 计划是一个固定、预先声明的操作子集。每个计划条目有一个 id（工作流内唯一）、一个

package/docs/roles-and-configuration.md

@@ -155,6 +155,23 @@ different contracts. Provider bypass does not grant writes to another Project.
 Managed workspace owner, exact Assignment and resource grants enforce Yui
 operations; broad native permissions are not an OS sandbox.
 
+Codex configured permissions can explicitly exclude automatic writable temp roots:
+`--sandbox workspace-write --exclude-tmpdir-env-var true --exclude-slash-tmp true`.
+Each exclusion accepts `true` or `false`; `--clear-exclude-tmpdir-env-var` and
+`--clear-exclude-slash-tmp` remove the respective override. Omission preserves
+native defaults, not an implicit exclusion. Both fields require an explicit
+`workspace-write` sandbox and reject other adapters or conflicting strategies.
+Managed launches compile them into per-thread `sandbox_workspace_write`
+configuration on start/resume, never shared-daemon defaults or account files.
+Ordinary interactive launches use equivalent invocation-local structured options.
+The mapping follows the native
+[configuration reference](https://learn.chatgpt.com/docs/config-file/config-reference).
+These exclude automatic `$TMPDIR` and `/tmp` grants, not explicitly authorized
+writable roots within those paths. They do not establish read isolation or
+prevent effects through an authorized Controller RPC. Inspect the actual native
+receipt and validate enforcement in a separately authorized disposable fixture;
+accepting the configuration does not prove OS sandbox enforcement.
+
 A write-intent delivery Leader launched in its own Task-owned main workspace
 captures that workspace's bound writable Projects without needing an open
 WorkItem. Accepted results do not remove this direct-delivery scope. An explicit
@@ -236,12 +253,23 @@ yui config role show <global-role>
 yui config profile show <profile>
 yui task role add <task> <role> --profile <profile>
 yui task role show <task> <role>
+yui task role show <task> <role> --view full
 yui task role update <task> <role> --environment <preparation-id>
 yui task role update <task> <role> --managed-environment
 yui task role session inspect <task> <role>
 yui task role session new <task> <role> --reason "<why a fresh Session is useful>"
 ```
 
+`task role show` defaults to the complete desired Role configuration and its
+current recorded Session configuration, not historical Run snapshots. Recorded
+configuration and a retained control target are not live-state or stop evidence;
+use the returned status/session inspection commands for those questions.
+`--view full` retains the previous complete `role`, `sessions`, and `runs`
+document with bounded pagination. JSON consumers needing those historical
+fields must now request that view and retain it on cursor continuations.
+This changes the CLI default JSON view, not storage or the `task.role.show`
+configuration RPC used by the interactive wizard.
+
 The global query uses the calling process's default native context. Task-scoped
 queries use the Controller's native account environment and the selected Role
 configuration; they never forward the caller's credentials to another Provider.