@zqagent/core 0.2.14 → 0.2.16

package/dist/server/index.cjs

@@ -580,6 +580,7 @@ init_cjs_shims();
 var fs3 = __toESM(require("fs"), 1);
 var fsp = __toESM(require("fs/promises"), 1);
 var path4 = __toESM(require("path"), 1);
+var readline = __toESM(require("readline"), 1);
 var import_crypto = require("crypto");
 
 // src/server/dbgTrace.ts
@@ -1497,6 +1498,170 @@ var Store = class {
       }
     }
   }
+  /**
+   * 读取事件「一页」：从文件末尾向前，按字节预算取最近的事件。
+   *
+   * - `before` 省略：取最新的 maxBytes 字节
+   * - `before` 指定：只取 seq < before 的事件（向前翻页）
+   *
+   * 为什么不能复用 loadEventsTail：后者只能从文件末尾读固定窗口，
+   * 无法「向前翻页」，而控制台需要滚到顶部继续加载更早的对话。
+   * 这里按块从后往前扫，读到预算或文件头即停；翻了多页之后每次
+   * before 都紧邻上一页，实际只需读 1~2 块。
+   *
+   * 返回按 seq 升序；`hasMore` 表示本页最早一条之前还有更早的事件。
+   */
+  loadEventPage(tenantId, sessionId, opts) {
+    const p = path4.join(this.sessionDir(tenantId, sessionId), "events.jsonl");
+    const { before, maxBytes } = opts;
+    const __t0 = dbgNow();
+    let fd = null;
+    try {
+      const size = fs3.statSync(p).size;
+      if (size === 0) return { events: [], hasMore: false };
+      fd = fs3.openSync(p, "r");
+      const CHUNK = 256 * 1024;
+      let pos = size;
+      const kept = [];
+      let bytes = 0;
+      let hasMore = false;
+      let done = false;
+      while (pos > 0 && !done) {
+        const start = Math.max(0, pos - CHUNK);
+        const len = pos - start;
+        const buf = Buffer.allocUnsafe(len);
+        const read = fs3.readSync(fd, buf, 0, len, start);
+        const rows = buf.subarray(0, read).toString("utf-8").split("\n");
+        if (start > 0) rows.shift();
+        for (let i = rows.length - 1; i >= 0; i--) {
+          const line = rows[i];
+          if (!line) continue;
+          let entry;
+          try {
+            entry = JSON.parse(line);
+          } catch {
+            continue;
+          }
+          if (!Number.isFinite(Number(entry.seq))) continue;
+          if (before !== void 0 && Number(entry.seq) >= before) continue;
+          const sz = Buffer.byteLength(line, "utf-8") + 1;
+          if (bytes > 0 && bytes + sz > maxBytes) {
+            hasMore = true;
+            done = true;
+            break;
+          }
+          bytes += sz;
+          kept.unshift(entry);
+        }
+        pos = start;
+      }
+      dbgMs(
+        "store.loadEventPage",
+        __t0,
+        // [dbg]
+        `size=${size} before=${before ?? "-"} out=${kept.length} bytes\u2248${bytes} more=${hasMore}`
+      );
+      return { events: kept, hasMore };
+    } catch {
+      return { events: [], hasMore: false };
+    } finally {
+      if (fd !== null) {
+        try {
+          fs3.closeSync(fd);
+        } catch {
+        }
+      }
+    }
+  }
+  // ===================== 轮次索引 =====================
+  /** 轮次索引文件路径 */
+  turnsFile(tenantId, sessionId) {
+    return path4.join(this.sessionDir(tenantId, sessionId), "turns.ndjson");
+  }
+  /**
+   * 追加一轮的最新快照（同一 startSeq 后写者胜出）。
+   *
+   * 走与 session.json 相同的每文件写链：索引按「开轮 → 补充消息 → 收轮」
+   * 顺序追加，乱序会让列表读到旧的 running 版本。
+   */
+  appendTurnIndex(tenantId, sessionId, entry) {
+    const dir = this.sessionDir(tenantId, sessionId);
+    fs3.mkdirSync(dir, { recursive: true });
+    const file = this.turnsFile(tenantId, sessionId);
+    const line = JSON.stringify(entry) + "\n";
+    const prev = this.writeChains.get(file) ?? Promise.resolve();
+    const next = prev.then(() => fsp.appendFile(file, line, "utf-8")).catch((err) => {
+      console.error(`[store] appendTurnIndex \u5931\u8D25 ${sessionId}: ${String(err)}`);
+    });
+    this.writeChains.set(file, next);
+    return next;
+  }
+  /**
+   * 读取轮次索引（已按 startSeq 去重取最后一版，升序）。
+   *
+   * 文件很小（一轮约 0.5KB，1000 轮 ≈ 500KB），同步读即可，
+   * 会话详情打开路径不会因历史长度变慢。
+   */
+  loadTurnIndex(tenantId, sessionId) {
+    let raw;
+    try {
+      raw = fs3.readFileSync(this.turnsFile(tenantId, sessionId), "utf-8");
+    } catch {
+      return [];
+    }
+    const byStart = /* @__PURE__ */ new Map();
+    for (const line of raw.split("\n")) {
+      if (!line) continue;
+      try {
+        const e = JSON.parse(line);
+        if (!Number.isFinite(Number(e?.startSeq))) continue;
+        byStart.set(Number(e.startSeq), e);
+      } catch {
+      }
+    }
+    return [...byStart.values()].sort((a, b) => a.startSeq - b.startSeq);
+  }
+  /** 整文件替换轮次索引（重建用，tmp + rename 原子写） */
+  saveTurnIndex(tenantId, sessionId, entries) {
+    const dir = this.sessionDir(tenantId, sessionId);
+    fs3.mkdirSync(dir, { recursive: true });
+    const file = this.turnsFile(tenantId, sessionId);
+    const snapshot = entries.map((e) => JSON.stringify(e)).join("\n") + (entries.length ? "\n" : "");
+    const tmp = `${file}.${(0, import_crypto.randomUUID)()}.tmp`;
+    const prev = this.writeChains.get(file) ?? Promise.resolve();
+    const next = prev.then(() => fsp.writeFile(tmp, snapshot, "utf-8")).then(() => fsp.rename(tmp, file)).catch((err) => {
+      console.error(`[store] saveTurnIndex \u5931\u8D25 ${sessionId}: ${String(err)}`);
+      void fsp.rm(tmp, { force: true });
+    });
+    this.writeChains.set(file, next);
+    return next;
+  }
+  /**
+   * 流式读取整份事件日志（重建索引用）。
+   *
+   * 不能用 loadEvents（readFileSync + 逐行 JSON.parse）：大会话几十 MB，
+   * 会长时间阻塞事件循环，导致 SSE 心跳 / MQTT 保活断开。
+   */
+  async readEventsAsync(tenantId, sessionId) {
+    const p = path4.join(this.sessionDir(tenantId, sessionId), "events.jsonl");
+    const out = [];
+    try {
+      const rl = readline.createInterface({
+        input: fs3.createReadStream(p, { encoding: "utf-8" }),
+        crlfDelay: Infinity
+      });
+      for await (const line of rl) {
+        if (!line) continue;
+        try {
+          out.push(JSON.parse(line));
+        } catch {
+        }
+      }
+    } catch {
+      return out;
+    }
+    return out;
+  }
   // ===================== 节点身份 & 管理员密钥 =====================
   /** 节点稳定标识：{root}/node.json（首次启动生成后长期固定） */
   loadNodeId() {
@@ -1917,13 +2082,13 @@ function textOf(content) {
   }
   return content != null ? String(content) : "";
 }
-function extractUserMessages(span, clip = USER_MESSAGE_CLIP) {
+function extractUserMessages(span, clip2 = USER_MESSAGE_CLIP) {
   const out = [];
   for (const m of span) {
     if (m.role !== "user") continue;
     const text = textOf(m.content).replace(/\s+/g, " ").trim();
     if (!text) continue;
-    out.push(text.length > clip ? text.slice(0, clip - 1) + "\u2026" : text);
+    out.push(text.length > clip2 ? text.slice(0, clip2 - 1) + "\u2026" : text);
   }
   return out;
 }
@@ -2735,6 +2900,21 @@ var TurnEngine = class _TurnEngine {
   queueSteering(text) {
     this._steering.push(text);
   }
+  /**
+   * 撤销一条尚未注入的 steering。
+   *
+   * 按文本删第一条匹配项：调用方（SessionManager）已按索引删掉了自己那份队列，
+   * 这里只需保证引擎不再注入同样的内容。用文本而非索引，是因为引擎会在迭代
+   * 间隙批量清空 `_steering`，索引可能已经漂移；文本相同则删哪条都等价。
+   *
+   * @returns 是否真的删掉了（已注入的项返回 false，调用方据此提示用户）
+   */
+  removeSteering(text) {
+    const i = this._steering.indexOf(text);
+    if (i < 0) return false;
+    this._steering.splice(i, 1);
+    return true;
+  }
   // ===================== 主入口 =====================
   /**
    * 运行一轮 Turn
@@ -9276,6 +9456,19 @@ function addAgg(into, tokens, costUsd) {
 function utcDay(iso) {
   return iso.slice(0, 10);
 }
+function sumAgg(values) {
+  const out = zeroAgg();
+  for (const v of values) {
+    out.calls += v.calls;
+    out.input += v.input;
+    out.output += v.output;
+    out.cacheRead += v.cacheRead;
+    out.cacheWrite += v.cacheWrite;
+    out.costUsd += v.costUsd;
+    out.unpriced += v.unpriced;
+  }
+  return out;
+}
 function monthOf(iso) {
   return iso.slice(0, 7);
 }
@@ -9551,6 +9744,23 @@ var UsageLedger = class {
     }
     return all;
   }
+  /**
+   * 按「项目 × 天」聚合（供控制面把消耗拆到每个项目）。
+   *
+   * 汇总文件里只存了按项目、按天两个独立维度，拿不到交叉项，因此这里从
+   * 账本明细现算——调用方（节点上报）只取最近 40 天，读的是 2 个月文件，
+   * 5 分钟一次的成本可忽略。
+   */
+  projectByDay(opts) {
+    const out = {};
+    for (const rec of this.allRecords({ from: opts.from, to: opts.to })) {
+      const day = utcDay(rec.ts);
+      const days = out[rec.projectId] ?? (out[rec.projectId] = {});
+      const agg = days[day] ?? (days[day] = zeroAgg());
+      addAgg(agg, rec, rec.costUsd);
+    }
+    return out;
+  }
   summary(opts) {
     this.ensureInit();
     const currency = (opts.currency ?? "USD").toUpperCase();
@@ -9850,6 +10060,141 @@ var EVENT_BUFFER_MAX = 2e3;
 var EVENTS_ACK_MAX_BYTES = 512 * 1024;
 var APPROVAL_TIMEOUT_MS = (Number(process.env.APPROVAL_TIMEOUT_SECONDS) || 15 * 60) * 1e3;
 var LAST_USER_MESSAGE_MAX = 200;
+var TURN_TEXT_MAX = 500;
+var TURN_REPLY_MAX_BYTES = 256 * 1024;
+var TURN_REPLY_MAX_TEXT = 256 * 1024;
+var TURNS_DEFAULT_LIMIT = 20;
+function clip(text, max = LAST_USER_MESSAGE_MAX) {
+  const s = text ?? "";
+  return s.length > max ? `${s.slice(0, max)}\u2026` : s;
+}
+function asNum(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : 0;
+}
+function newTurnEntry(ev, input) {
+  return {
+    v: 1,
+    startSeq: ev.seq,
+    endSeq: ev.seq,
+    startedAt: ev.ts,
+    endedAt: null,
+    status: "running",
+    inputs: [{ seq: ev.seq, ts: ev.ts, text: clip(input, TURN_TEXT_MAX) }],
+    replyPreview: "",
+    producedFiles: [],
+    llmCalls: 0,
+    toolCalls: 0,
+    tokensIn: 0,
+    tokensOut: 0
+  };
+}
+function applyTurnEvent(turn, ev, toolSeen) {
+  const d = ev.data ?? {};
+  turn.endSeq = ev.seq;
+  switch (ev.type) {
+    case "queue_steering": {
+      turn.inputs.push({
+        seq: ev.seq,
+        ts: ev.ts,
+        text: clip(String(d["text"] ?? ""), TURN_TEXT_MAX)
+      });
+      break;
+    }
+    case "assistant_message": {
+      turn.llmCalls += 1;
+      const text = String(d["text"] ?? "");
+      if (text) {
+        turn.replyPreview = clip(text);
+        turn.replySeq = ev.seq;
+      }
+      const u = d["usage"];
+      if (u && typeof u === "object") {
+        const usage = u;
+        turn.tokensIn += asNum(usage["input"]);
+        turn.tokensOut += asNum(usage["output"]);
+      }
+      break;
+    }
+    case "tool_started":
+    case "tool_finished": {
+      const key = String(d["reqId"] ?? "") || `${String(d["name"] ?? "")}:${ev.seq}`;
+      if (!toolSeen.has(key)) {
+        toolSeen.add(key);
+        turn.toolCalls += 1;
+      }
+      break;
+    }
+    case "error": {
+      turn.error = clip(String(d["message"] ?? d["error"] ?? ""));
+      break;
+    }
+    default:
+      break;
+  }
+}
+function closeTurnEntry(turn, ev) {
+  const d = ev.data ?? {};
+  turn.endSeq = ev.seq;
+  turn.endedAt = ev.ts;
+  const status = String(d["status"] ?? "");
+  turn.status = ev.type === "interrupted" ? status || "interrupted" : status || "completed";
+  const files = d["produced_files"];
+  if (Array.isArray(files)) {
+    turn.producedFiles = files.map((x) => String(x ?? "")).filter(Boolean);
+  }
+  if (typeof d["iterations"] === "number") turn.iterations = d["iterations"];
+  const startMs = Date.parse(turn.startedAt);
+  const endMs = Date.parse(ev.ts);
+  if (Number.isFinite(startMs) && Number.isFinite(endMs) && endMs >= startMs) {
+    turn.durationMs = endMs - startMs;
+  }
+}
+function buildTurnIndex(events) {
+  const out = [];
+  let cur = null;
+  let toolSeen = /* @__PURE__ */ new Set();
+  for (const ev of events) {
+    if (ev.type === "turn_start") {
+      cur = newTurnEntry(ev, String(ev.data?.["input"] ?? ""));
+      toolSeen = /* @__PURE__ */ new Set();
+      out.push(cur);
+      continue;
+    }
+    if (!cur) continue;
+    if (ev.type === "turn_end" || ev.type === "interrupted") {
+      closeTurnEntry(cur, ev);
+      cur = null;
+      continue;
+    }
+    applyTurnEvent(cur, ev, toolSeen);
+  }
+  for (const t of out) {
+    if (!t.endedAt && t.error) t.status = "error";
+  }
+  return out;
+}
+function summaryFromEntry(t) {
+  return {
+    startSeq: t.startSeq,
+    endSeq: t.endSeq,
+    startedAt: t.startedAt,
+    endedAt: t.endedAt,
+    status: t.status,
+    input: t.inputs[0]?.text ?? "",
+    reply: t.replyPreview,
+    llmCalls: t.llmCalls,
+    toolCalls: t.toolCalls,
+    tokensIn: t.tokensIn,
+    tokensOut: t.tokensOut,
+    iterations: t.iterations,
+    durationMs: t.durationMs,
+    error: t.error,
+    inputs: t.inputs,
+    userCount: t.inputs.length,
+    replySeq: t.replySeq,
+    producedFiles: t.producedFiles
+  };
+}
 function isAffirmative(answer) {
   const a = answer.trim().toLowerCase();
   if (!a) return false;
@@ -9874,6 +10219,10 @@ var SessionManager = class {
   opts;
   runtimes = /* @__PURE__ */ new Map();
   // sessionId → runtime
+  /** 轮次索引的内存副本（运行中的轮比磁盘索引新；重启后为空） */
+  turnIndexCache = /* @__PURE__ */ new Map();
+  /** 进行中的索引重建任务（并发请求合并到同一个） */
+  turnIndexBuilds = /* @__PURE__ */ new Map();
   /** 全局通知 SSE 订阅者（控制台通知中心） */
   notificationSubs = /* @__PURE__ */ new Set();
   /**
@@ -9928,6 +10277,17 @@ var SessionManager = class {
     rt.status = status;
     this._emitNotify(rt, "session_status", this._statusData(rt));
   }
+  /**
+   * 通知里的「最近一条用户消息」：截断到 LAST_USER_MESSAGE_MAX。
+   *
+   * 三处共用（session_status / turn_completed / turn_stopped），避免各自写一遍
+   * 截断规则后长度不一致——控制台弹窗与任务列表会显示同一句话的两个版本。
+   */
+  _lastMessage(rt) {
+    const text = (rt.lastInput ?? "").trim();
+    if (!text) return null;
+    return text.length > LAST_USER_MESSAGE_MAX ? `${text.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : text;
+  }
   /**
    * session_status 通知载荷：状态 + 最近一条用户消息（截断）。
    *
@@ -9936,10 +10296,24 @@ var SessionManager = class {
    */
   _statusData(rt) {
     const data = { status: rt.status };
-    const text = (rt.lastInput ?? "").trim();
-    if (text) {
-      data.lastUserMessage = text.length > LAST_USER_MESSAGE_MAX ? `${text.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : text;
-    }
+    if (rt.lastStartedAt) data.lastStartedAt = rt.lastStartedAt;
+    const msg = this._lastMessage(rt);
+    if (msg) data.lastUserMessage = msg;
+    return data;
+  }
+  /**
+   * 任务结束类通知（完成 / 达到迭代上限）的载荷：在 turn_end 数据之外补上
+   * 「会话名 + 最后一条用户消息」。
+   *
+   * 控制台右下角的完成弹窗要说明「哪个会话、用户让它做了什么」。这些字段
+   * 以节点侧为准随通知一起下发，前端就不必依赖快照（nodeInfo / session_status）
+   * 是否已经到达——刚打开页面或通知乱序时才不会退化成只剩一句「任务已完成」。
+   */
+  _turnEndData(rt, eventData, extra) {
+    const data = { ...eventData, ...extra };
+    if (rt.name) data.sessionName = rt.name;
+    const msg = this._lastMessage(rt);
+    if (msg) data.lastUserMessage = msg;
     return data;
   }
   /** 触发通知回调（无 handler 时为空操作，异常隔离不冒泡） */
@@ -10096,6 +10470,7 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
       this.runtimes.delete(sessionId);
     }
     this.store.deleteSession(tenantId, sessionId);
+    this.turnIndexCache.delete(sessionId);
     this._publishNotify(tenantId, {
       kind: "session_status",
       sessionId,
@@ -10139,6 +10514,7 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
         throw new ApiError(409, "busy", "\u4F1A\u8BDD\u6B63\u5728\u8FD0\u884C\u4E2D");
       }
       rt.engine.queueSteering(input);
+      if (rt.pendingSteers.length === 0) rt.steerBaseInput = rt.lastInput;
       rt.pendingSteers.push(input);
       this._recordLastInput(rt, input);
       return "steered";
@@ -10171,9 +10547,42 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
     const rt = this._getOrLoadRuntime(tenant, sessionId);
     if (!rt.engine) throw new ApiError(409, "not_running", "\u4F1A\u8BDD\u672A\u5728\u8FD0\u884C\u4E2D");
     rt.engine.queueSteering(text);
+    if (rt.pendingSteers.length === 0) rt.steerBaseInput = rt.lastInput;
     rt.pendingSteers.push(text);
     this._recordLastInput(rt, text);
   }
+  /**
+   * 撤销一条尚未注入的补充信息（用户反悔）。
+   *
+   * 队列里的项还没进聊天流，此时只能靠中断整个任务来「收回」代价太大。
+   * index 取自 GET /state 的 pendingSteers（与前端展示顺序一致），两侧同时删：
+   * 只删前端那份，引擎下一迭代仍会把它注入对话；只删引擎那份，队列里会残留
+   * 一条永远不注入的条目。
+   *
+   * 若撤的正是「最近用户指令」，把它还原成队列里的上一条、或本轮被覆盖前的
+   * 指令——否则工作台还会显示这条已经被取消的内容。
+   *
+   * @returns 剩余待注入队列（前端据此刷新提示区）
+   */
+  unsteer(tenant, sessionId, index) {
+    const rt = this._getOrLoadRuntime(tenant, sessionId);
+    if (!rt.engine || !rt.runTask) {
+      throw new ApiError(409, "not_running", "\u4F1A\u8BDD\u672A\u5728\u8FD0\u884C\u4E2D");
+    }
+    if (!Number.isInteger(index) || index < 0 || index >= rt.pendingSteers.length) {
+      throw new ApiError(409, "already_injected", "\u8FD9\u6761\u8865\u5145\u4FE1\u606F\u5DF2\u8FDB\u5165\u5BF9\u8BDD\uFF0C\u65E0\u6CD5\u64A4\u9500");
+    }
+    const [removed] = rt.pendingSteers.splice(index, 1);
+    if (removed !== void 0) {
+      rt.engine.removeSteering(removed);
+      if (removed === rt.lastInput) {
+        rt.lastInput = rt.pendingSteers.length > 0 ? rt.pendingSteers[rt.pendingSteers.length - 1] : rt.steerBaseInput;
+        this._persist(rt);
+        this._emitNotify(rt, "session_status", this._statusData(rt));
+      }
+    }
+    return [...rt.pendingSteers];
+  }
   /**
    * 已提交、尚未注入当前任务的补充信息。
    *
@@ -10606,44 +11015,214 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
       status: rt.status
     };
   }
-  /** 增量事件（since 游标；无内存运行时则从磁盘读全量） */
-  eventsSince(tenantId, sessionId, since) {
+  /**
+   * 事件分页（向前 / 向后两种方向）。
+   *
+   * - `since`：取 seq > since（实时增量 / 重连补齐）
+   * - `before`：取 seq < before（控制台滚到顶部加载更早的对话）
+   * - `maxBytes`：单次回执的字节预算（默认沿用 EVENTS_ACK_MAX_BYTES）
+   *
+   * 两者同时给出时按 `since`（向后）处理。`hasMore` 只对向前翻页有意义：
+   * 表示本页最早一条之前还有更早的事件。
+   *
+   * 向前翻页一律走磁盘：内存缓冲只保留最近 EVENT_BUFFER_MAX 条，
+   * 更早的事件只在 events.jsonl 里。
+   */
+  eventsPage(tenantId, sessionId, opts = {}) {
     const __t0 = dbgNow();
+    const maxBytes = opts.maxBytes && opts.maxBytes > 0 ? opts.maxBytes : EVENTS_ACK_MAX_BYTES;
     const rt = this.runtimes.get(sessionId);
+    if (opts.before !== void 0) {
+      const since2 = opts.since ?? 0;
+      const page = this.store.loadEventPage(tenantId, sessionId, {
+        before: opts.before,
+        maxBytes
+      });
+      const ev2 = since2 > 0 ? page.events.filter((e) => e.seq > since2) : page.events;
+      dbgMs(
+        "session.eventsPage(before/\u78C1\u76D8)",
+        __t0,
+        // [dbg]
+        `sid=${sessionId.slice(0, 8)} since=${since2} before=${opts.before} out=${ev2.length} more=${page.hasMore}`
+      );
+      return {
+        events: ev2,
+        latestSeq: rt?.seq ?? page.events.at(-1)?.seq ?? 0,
+        earliestSeq: ev2[0]?.seq ?? 0,
+        hasMore: page.hasMore
+      };
+    }
+    const since = opts.since ?? 0;
     if (rt) {
-      const ev2 = this._boundedTail(rt.events.filter((e) => e.seq > since));
+      const ev2 = this._boundedTail(rt.events.filter((e) => e.seq > since), maxBytes);
       dbgMs(
-        "session.eventsSince(\u5185\u5B58)",
+        "session.eventsPage(\u5185\u5B58)",
         __t0,
         // [dbg]
         `sid=${sessionId.slice(0, 8)} since=${since} in=${rt.events.length} out=${ev2.length}`
       );
-      return { events: ev2, latestSeq: rt.seq };
+      return {
+        events: ev2,
+        latestSeq: rt.seq,
+        earliestSeq: ev2[0]?.seq ?? 0,
+        // 内存缓冲被截断（或 since 早于缓冲起点）时，磁盘上可能还有更早的
+        hasMore: !!ev2.length && ev2[0].seq > (rt.events[0]?.seq ?? 0)
+      };
     }
     const all = this.store.loadEventsTail(tenantId, sessionId, EVENTS_ACK_MAX_BYTES * 2);
-    const ev = this._boundedTail(all.filter((e) => e.seq > since));
+    const ev = this._boundedTail(
+      all.filter((e) => e.seq > since),
+      maxBytes
+    );
     dbgMs(
-      "session.eventsSince(\u78C1\u76D8)",
+      "session.eventsPage(\u78C1\u76D8)",
       __t0,
       // [dbg]
       `sid=${sessionId.slice(0, 8)} since=${since} loaded=${all.length} out=${ev.length}`
     );
     return {
       events: ev,
-      latestSeq: all.at(-1)?.seq ?? 0
+      latestSeq: all.at(-1)?.seq ?? 0,
+      earliestSeq: ev[0]?.seq ?? 0,
+      // 读的是文件尾部窗口：窗口已满说明更早的事件还在文件里
+      hasMore: all.length > 0 && ev.length > 0 && ev[0].seq > all[0].seq
     };
   }
+  /**
+   * 兼容旧调用：只按 since 取增量。
+   * @deprecated 新代码用 eventsPage（支持 before 向前翻页）
+   */
+  eventsSince(tenantId, sessionId, since) {
+    const r = this.eventsPage(tenantId, sessionId, { since });
+    return { events: r.events, latestSeq: r.latestSeq };
+  }
+  /**
+   * 「按 turn 汇总」的轻量列表：只回标题与统计，点开某一轮再单独拉该轮回复。
+   *
+   * 数据来自 turns.ndjson 索引（派生自事件流），读取成本与会话历史长度无关：
+   * 老会话首次访问时后台/本请求内重建一次，之后每页只读几 KB。
+   *
+   * - `before`：只返回 startSeq < before 的轮次（向前翻页）
+   * - `turns` 按时间升序；`hasMore` 表示更早还有轮次
+   */
+  async sessionTurns(tenantId, sessionId, opts = {}) {
+    const limit = Math.min(Math.max(opts.limit ?? TURNS_DEFAULT_LIMIT, 1), 100);
+    const entries = await this._ensureTurnIndex(tenantId, sessionId);
+    const before = opts.before;
+    const endIdx = before === void 0 ? entries.length : entries.findIndex((t) => t.startSeq >= before);
+    const end = endIdx < 0 ? entries.length : endIdx;
+    const start = Math.max(0, end - limit);
+    const picked = entries.slice(start, end);
+    return {
+      turns: picked.map(summaryFromEntry),
+      hasMore: start > 0,
+      earliestSeq: picked[0]?.startSeq ?? 0,
+      total: entries.length,
+      userTotal: entries.reduce((n, t) => n + t.inputs.length, 0)
+    };
+  }
+  /**
+   * 某一轮的用户消息与最终回复（含产出文件）。
+   *
+   * 只读两条索引记录 + 尾部一个事件页，不会因该轮工具输出很大而变慢：
+   * 回复正文紧邻 turn_end，按 replySeq 精确读即可。
+   */
+  async sessionTurnReply(tenantId, sessionId, startSeq) {
+    const entries = await this._ensureTurnIndex(tenantId, sessionId);
+    const turn = entries.find((t) => t.startSeq === startSeq);
+    if (!turn) throw new ApiError(404, "not_found", "\u8F6E\u6B21\u4E0D\u5B58\u5728");
+    let reply = null;
+    let truncated = false;
+    if (turn.replySeq !== void 0) {
+      const page = this.store.loadEventPage(tenantId, sessionId, {
+        before: turn.replySeq + 1,
+        maxBytes: TURN_REPLY_MAX_BYTES
+      });
+      const ev = page.events.find((e) => e.seq === turn.replySeq);
+      if (ev && ev.type === "assistant_message") {
+        const text = String(ev.data?.["text"] ?? "");
+        if (text.length > TURN_REPLY_MAX_TEXT) {
+          reply = { seq: ev.seq, ts: ev.ts, text: text.slice(0, TURN_REPLY_MAX_TEXT) };
+          truncated = true;
+        } else {
+          reply = { seq: ev.seq, ts: ev.ts, text };
+        }
+      }
+    }
+    return {
+      startSeq: turn.startSeq,
+      endSeq: turn.endSeq,
+      status: turn.status,
+      startedAt: turn.startedAt,
+      endedAt: turn.endedAt,
+      userMessages: turn.inputs,
+      reply,
+      truncated,
+      producedFiles: turn.producedFiles
+    };
+  }
+  /**
+   * 取轮次索引；缺失时从事件流重建（同一会话的并发请求共用一个重建任务）。
+   *
+   * 索引是派生数据：损坏/落后都只需重建，不影响会话本身。
+   */
+  /**
+   * 取轮次索引；缺失/落后时从事件流重建（同一会话的并发请求共用一个重建任务）。
+   *
+   * 索引是派生数据：损坏或落后都只需重建，不影响会话本身。
+   */
+  async _ensureTurnIndex(tenantId, sessionId) {
+    let entries = this._mergeTurnIndex(tenantId, sessionId);
+    if (entries.length > 0 && !this.runtimes.has(sessionId)) {
+      const last = entries[entries.length - 1];
+      const tail = this.store.loadEventsTail(tenantId, sessionId, 64 * 1024);
+      const newTurnStarted = tail.some((e) => e.type === "turn_start" && e.seq > last.endSeq);
+      if (newTurnStarted || last.status === "running") entries = [];
+    }
+    if (entries.length > 0) return entries;
+    const pending = this.turnIndexBuilds.get(sessionId);
+    if (pending) return pending;
+    const task = this._rebuildTurnIndex(tenantId, sessionId).finally(() => {
+      this.turnIndexBuilds.delete(sessionId);
+    });
+    this.turnIndexBuilds.set(sessionId, task);
+    return task;
+  }
+  /** 合并磁盘索引与内存索引（内存版本更新，同一 startSeq 以内存为准） */
+  _mergeTurnIndex(tenantId, sessionId) {
+    const byStart = /* @__PURE__ */ new Map();
+    for (const e of this.store.loadTurnIndex(tenantId, sessionId)) byStart.set(e.startSeq, e);
+    for (const e of this.turnIndexCache.get(sessionId) ?? []) byStart.set(e.startSeq, e);
+    return [...byStart.values()].sort((a, b) => a.startSeq - b.startSeq);
+  }
+  /** 从 events.jsonl 顺序流式重建轮次索引（一次性，之后增量维护） */
+  async _rebuildTurnIndex(tenantId, sessionId) {
+    const __t0 = dbgNow();
+    const events = await this.store.readEventsAsync(tenantId, sessionId);
+    const entries = buildTurnIndex(events);
+    if (entries.length > 0) {
+      await this.store.saveTurnIndex(tenantId, sessionId, entries);
+      if (this.runtimes.has(sessionId)) this.turnIndexCache.set(sessionId, entries);
+    }
+    dbgMs(
+      "session._rebuildTurnIndex",
+      __t0,
+      // [dbg]
+      `sid=${sessionId.slice(0, 8)} events=${events.length} turns=${entries.length}`
+    );
+    return entries;
+  }
   /**
    * 按字节预算截取事件「尾部」（至少保留最后一条），确保 MQTT 回执远小于单包上限。
    * 供 get_events 使用：会话历史可任意大，但 MQTT 链路不能承载大包。
    */
-  _boundedTail(events) {
+  _boundedTail(events, maxBytes = EVENTS_ACK_MAX_BYTES) {
     const __t0 = dbgNow();
     let total = 0;
     let i = events.length;
     while (i > 0) {
       const size = Buffer.byteLength(JSON.stringify(events[i - 1]));
-      if (total > 0 && total + size > EVENTS_ACK_MAX_BYTES) break;
+      if (total > 0 && total + size > maxBytes) break;
       total += size;
       i -= 1;
     }
@@ -10763,6 +11342,7 @@ data: ${JSON.stringify(entry.data)}
       nameSource: rec.nameSource,
       taskCount: rec.taskCount ?? 0,
       lastCompletedAt: rec.lastCompletedAt,
+      lastStartedAt: rec.lastStartedAt,
       naming: false,
       turnStartedAt: 0
     };
@@ -10780,10 +11360,11 @@ data: ${JSON.stringify(entry.data)}
   }
   /** 装配引擎并启动一轮 Turn（供 submitTurn / submitOrSteer 复用） */
   _startTurn(rt, input) {
+    const engine = this._buildEngine(rt.tenant, rt, true);
     rt.lastInput = input;
-    this._setStatus(rt, "running");
     rt.turnStartedAt = Date.now();
-    const engine = this._buildEngine(rt.tenant, rt, true);
+    rt.lastStartedAt = new Date(rt.turnStartedAt).toISOString();
+    this._setStatus(rt, "running");
     rt.engine = engine;
     this._persist(rt);
     rt.runTask = this._drive(rt, engine.run(input));
@@ -10842,18 +11423,18 @@ data: ${JSON.stringify(entry.data)}
                 this._setStatus(rt, "completed");
                 rt.taskCount += 1;
                 rt.lastCompletedAt = (/* @__PURE__ */ new Date()).toISOString();
-                this._emitNotify(rt, "turn_completed", {
-                  ...event.data,
-                  summary,
-                  durationMs
-                });
+                this._emitNotify(
+                  rt,
+                  "turn_completed",
+                  this._turnEndData(rt, event.data, { summary, durationMs })
+                );
               } else if (status === "max_iterations_exceeded") {
                 this._setStatus(rt, "stopped");
-                this._emitNotify(rt, "turn_stopped", {
-                  ...event.data,
-                  summary,
-                  durationMs
-                });
+                this._emitNotify(
+                  rt,
+                  "turn_stopped",
+                  this._turnEndData(rt, event.data, { summary, durationMs })
+                );
               }
               this._persist(rt);
               if (status === "completed" && engine && shouldAutoName(rt.taskCount, rt.nameSource)) {
@@ -10864,7 +11445,7 @@ data: ${JSON.stringify(entry.data)}
             case "error" /* ERROR */:
               this._setStatus(rt, "error");
               this._persist(rt);
-              this._emitNotify(rt, "error", event.data);
+              this._emitNotify(rt, "error", this._turnEndData(rt, event.data, {}));
               break;
             case "interrupted" /* INTERRUPTED */:
               this._setStatus(rt, "interrupted");
@@ -10890,9 +11471,17 @@ data: ${JSON.stringify(entry.data)}
       this._setStatus(rt, "error");
       this._persist(rt);
     } finally {
+      if (rt.turnIndex) {
+        const turn = rt.turnIndex;
+        if (!turn.endedAt && turn.error) turn.status = "error";
+        this._appendTurnIndex(rt, turn);
+        rt.turnIndex = void 0;
+        rt.turnToolKeys = void 0;
+      }
       rt.runTask = null;
       rt.engine = null;
       rt.pendingSteers = [];
+      rt.steerBaseInput = void 0;
     }
   }
   _buffer(rt, event) {
@@ -10905,6 +11494,7 @@ data: ${JSON.stringify(entry.data)}
     rt.events.push(entry);
     if (rt.events.length > EVENT_BUFFER_MAX) rt.events.shift();
     void this.store.appendEvent(rt.tenantId, rt.sessionId, entry);
+    this._trackTurnIndex(rt, entry);
     for (const res of rt.subscribers) this._sseSend(res, entry);
     this._broadcastSessionEvent(rt.tenantId, rt.sessionId, entry);
     try {
@@ -10912,6 +11502,42 @@ data: ${JSON.stringify(entry.data)}
     } catch {
     }
   }
+  /**
+   * 维护运行中轮次的索引（in-memory 记账 + 关键节点落盘）。
+   *
+   * 落盘只在「开轮 / 补充消息 / 收轮」发生，delta 事件仅推进 endSeq 与统计，
+   * 因此索引写入量是每轮 2~3 行，与会话事件量无关。
+   */
+  _trackTurnIndex(rt, ev) {
+    if (ev.type === "turn_start") {
+      const turn2 = newTurnEntry(ev, String(ev.data?.["input"] ?? ""));
+      rt.turnIndex = turn2;
+      rt.turnToolKeys = /* @__PURE__ */ new Set();
+      this._appendTurnIndex(rt, turn2);
+      return;
+    }
+    const turn = rt.turnIndex;
+    if (!turn) return;
+    if (ev.type === "turn_end" || ev.type === "interrupted") {
+      closeTurnEntry(turn, ev);
+      this._appendTurnIndex(rt, turn);
+      rt.turnIndex = void 0;
+      rt.turnToolKeys = void 0;
+      return;
+    }
+    if (!rt.turnToolKeys) rt.turnToolKeys = /* @__PURE__ */ new Set();
+    const inputsBefore = turn.inputs.length;
+    applyTurnEvent(turn, ev, rt.turnToolKeys);
+    if (turn.inputs.length !== inputsBefore) this._appendTurnIndex(rt, turn);
+  }
+  /** 写入一版轮次索引（内存副本 + 异步落盘） */
+  _appendTurnIndex(rt, turn) {
+    const cached3 = this.turnIndexCache.get(rt.sessionId) ?? [];
+    const i = cached3.findIndex((t) => t.startSeq === turn.startSeq);
+    const next = i >= 0 ? [...cached3.slice(0, i), turn, ...cached3.slice(i + 1)] : [...cached3, turn];
+    this.turnIndexCache.set(rt.sessionId, next);
+    void this.store.appendTurnIndex(rt.tenantId, rt.sessionId, turn);
+  }
   /** 回收内存 run 任务（释放引用交给 GC；磁盘状态保持不动） */
   _recycleRunTask(rt) {
     rt.runTask = null;
@@ -10949,6 +11575,7 @@ data: ${JSON.stringify(entry.data)}
       nameSource: rt.nameSource,
       taskCount: rt.taskCount,
       lastCompletedAt: rt.lastCompletedAt,
+      lastStartedAt: rt.lastStartedAt,
       modelOverridden: rt.modelOverridden,
       providerId: rt.providerId,
       permissionMode: rt.permissionMode,
@@ -11359,6 +11986,7 @@ function allSessionStates(store, manager) {
           name: s.name ?? null,
           status: s.status,
           lastUserMessage: lastUserMessage(s),
+          lastStartedAt: s.lastStartedAt ?? null,
           lastCompletedAt: lastCompletedAt(s)
         });
       }
@@ -11413,7 +12041,7 @@ function buildNodeInfo(store, opts) {
     nodeId: opts.nodeId ?? ensureNodeId(store),
     platform: process.platform,
     mode: process.env.NODE_MODE ?? "standalone",
-    version: "0.2.14",
+    version: "0.2.16",
     admin: opts.admin,
     projects: opts.projects
   };
@@ -11781,6 +12409,7 @@ var fs20 = __toESM(require("fs"), 1);
 var path23 = __toESM(require("path"), 1);
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 var MAX_DOWNLOAD_BYTES = 16 * 1024 * 1024;
+var MAX_BINARY_BYTES = 2.5 * 1024 * 1024;
 var MAX_ENTRIES2 = 2e3;
 function toPosix(p) {
   return p.split(path23.sep).join("/");
@@ -11928,6 +12557,26 @@ function writeProjectFile(workspaceRoot, relPath, content) {
   }
   return { path: toPosix(path23.relative(base, file)), size: buf.length };
 }
+function writeProjectFileBase64(workspaceRoot, relPath, base64) {
+  const base = projectRoot(workspaceRoot);
+  const rel = (relPath ?? "").trim();
+  if (!rel) throw new Error("\u6587\u4EF6\u8DEF\u5F84\u4E0D\u80FD\u4E3A\u7A7A");
+  const file = resolveWithin(base, rel);
+  const b64 = String(base64 ?? "").replace(/\s+/g, "");
+  if (!b64) throw new Error("\u5185\u5BB9\u4E0D\u80FD\u4E3A\u7A7A");
+  if (!/^[A-Za-z0-9+/]+={0,2}$/.test(b64)) throw new Error("\u5185\u5BB9\u4E0D\u662F\u5408\u6CD5\u7684 base64");
+  if (Math.floor(b64.length * 3 / 4) > MAX_BINARY_BYTES) {
+    throw new Error(`\u5185\u5BB9\u8D85\u8FC7 ${MAX_BINARY_BYTES / (1024 * 1024)}MB \u4E0A\u9650\uFF0C\u65E0\u6CD5\u4FDD\u5B58`);
+  }
+  const buf = Buffer.from(b64, "base64");
+  try {
+    fs20.mkdirSync(path23.dirname(file), { recursive: true });
+    fs20.writeFileSync(file, buf);
+  } catch (e) {
+    throw new Error(`\u5199\u5165\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+  }
+  return { path: toPosix(path23.relative(base, file)), size: buf.length };
+}
 function createProjectDir(workspaceRoot, relPath) {
   const base = projectRoot(workspaceRoot);
   const rel = (relPath ?? "").trim();
@@ -12001,6 +12650,42 @@ function searchProjectFiles(workspaceRoot, query) {
   walk(base, "");
   return out;
 }
+function deleteProjectPaths(workspaceRoot, relPaths) {
+  const base = projectRoot(workspaceRoot);
+  const out = { deleted: [], failed: [] };
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of relPaths ?? []) {
+    const rel = (raw ?? "").trim().replace(/^[/\\]+/, "");
+    if (!rel) {
+      out.failed.push({ path: String(raw ?? ""), error: "\u4E0D\u80FD\u5220\u9664\u9879\u76EE\u6839\u76EE\u5F55" });
+      continue;
+    }
+    if (seen.has(rel)) continue;
+    seen.add(rel);
+    let abs;
+    try {
+      abs = resolveWithin(base, rel);
+    } catch (e) {
+      out.failed.push({ path: rel, error: e instanceof Error ? e.message : String(e) });
+      continue;
+    }
+    if (path23.resolve(abs) === path23.resolve(base)) {
+      out.failed.push({ path: rel, error: "\u4E0D\u80FD\u5220\u9664\u9879\u76EE\u6839\u76EE\u5F55" });
+      continue;
+    }
+    if (!fs20.existsSync(abs)) {
+      out.failed.push({ path: rel, error: "\u6587\u4EF6\u4E0D\u5B58\u5728" });
+      continue;
+    }
+    try {
+      fs20.rmSync(abs, { recursive: true, force: true });
+      out.deleted.push(toPosix(path23.relative(base, abs)));
+    } catch (e) {
+      out.failed.push({ path: rel, error: e instanceof Error ? e.message : String(e) });
+    }
+  }
+  return out;
+}
 
 // src/server/projectOps.ts
 init_cjs_shims();
@@ -12406,7 +13091,7 @@ function buildNodeHost(store, manager, diskPath) {
     arch: process.arch,
     release: os6.release(),
     uptimeSec: Math.round(os6.uptime()),
-    version: "0.2.14",
+    version: "0.2.16",
     mode: process.env.NODE_MODE ?? "standalone",
     cpu: {
       count: cpus2.length,
@@ -12549,6 +13234,7 @@ function parseApprovalDecision(raw) {
 }
 function createApp(store, manager, opts = {}) {
   setupServerHandlers(manager);
+  const updater = opts.updater ?? null;
   const routes = [
     // ---------- 会话管理 ----------
     {
@@ -12690,6 +13376,18 @@ function createApp(store, manager, opts = {}) {
         ok(res, { accepted: true });
       }
     },
+    {
+      method: "POST",
+      pattern: ["sessions", ":id", "steer", "remove"],
+      // 撤销未注入的补充信息
+      fn: (_req, res, { tenant, params, body }) => {
+        const index = Number(body?.index);
+        if (!Number.isInteger(index))
+          throw new ApiError(400, "bad_request", "index \u5FC5\u987B\u662F\u6574\u6570");
+        const pendingSteers = manager.unsteer(tenant, params["id"], index);
+        ok(res, { accepted: true, pendingSteers });
+      }
+    },
     {
       method: "POST",
       pattern: ["sessions", ":id", "interrupt"],
@@ -13220,6 +13918,30 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    {
+      // 二进制写入（图片编辑保存）：body = { path, base64 }
+      method: "POST",
+      pattern: ["files", "binary"],
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        try {
+          ok(
+            res,
+            writeProjectFileBase64(
+              tenant.workspaceRoot ?? null,
+              String(raw.path ?? ""),
+              String(raw.base64 ?? "")
+            )
+          );
+        } catch (e) {
+          throw new ApiError(
+            400,
+            "bad_request",
+            e instanceof Error ? e.message : String(e)
+          );
+        }
+      }
+    },
     // ---------- 项目终端（在工作区执行命令） ----------
     {
       method: "POST",
@@ -13570,6 +14292,21 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    {
+      method: "POST",
+      pattern: ["files", "delete"],
+      // 删除文件 / 目录（目录递归）；逐条返回失败原因
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        const paths = Array.isArray(raw.paths) ? raw.paths.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        try {
+          ok(res, deleteProjectPaths(tenant.workspaceRoot ?? null, paths));
+        } catch (e) {
+          throw new ApiError(400, "bad_request", e instanceof Error ? e.message : String(e));
+        }
+      }
+    },
     {
       method: "POST",
       pattern: ["files", "create"],
@@ -13798,6 +14535,34 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    // ---------- 节点自更新（状态 / 检查 / 安装） ----------
+    // action=install 先回执、后台安装并退出进程（由服务管理器拉起新版本），
+    // 因此回执成功只代表「已受理」，是否升级成功要用 action=status 再确认。
+    {
+      method: "POST",
+      pattern: ["node", "self-update"],
+      projectOptional: true,
+      fn: async (req2, res, { body }) => {
+        const b = body ?? {};
+        const action = String(b.action ?? "status");
+        if (!updater) {
+          throw new ApiError(400, "bad_request", "\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A\u8282\u70B9\u672A\u4EE5 serve \u6A21\u5F0F\u8FD0\u884C");
+        }
+        if (action === "status") {
+          ok(res, updater.status());
+          return;
+        }
+        if (action === "check") {
+          ok(res, await updater.inspect());
+          return;
+        }
+        if (action === "install") {
+          ok(res, await updater.requestInstall(b.force === true));
+          return;
+        }
+        throw new ApiError(400, "bad_request", `\u672A\u77E5\u7684 action\uFF1A${action}\uFF08\u53EF\u9009 status / check / install\uFF09`);
+      }
+    },
     // ---------- 节点级会话状态（跨项目；只含标识与 status） ----------
     // 供节点首页 / 工作台建立初始视图，后续变化由 session_status 通知增量推送。
     {
@@ -13960,7 +14725,7 @@ function createApp(store, manager, opts = {}) {
             // 阻止反向代理（nginx 等）缓冲 SSE 流
             "X-Accel-Buffering": "no"
           });
-          const sinceRaw = new URL(
+          const sinceRaw2 = new URL(
             req2.url,
             "http://localhost"
           ).searchParams.get("since");
@@ -13968,19 +14733,51 @@ function createApp(store, manager, opts = {}) {
             tenant.id,
             params["id"],
             res,
-            sinceRaw ? Number(sinceRaw) : 0
+            sinceRaw2 ? Number(sinceRaw2) : 0
           );
           return;
         }
-        const since = Number(
-          new URL(req2.url, "http://localhost").searchParams.get("since") ?? 0
+        const q = new URL(req2.url, "http://localhost").searchParams;
+        const sinceRaw = q.get("since");
+        const beforeRaw = q.get("before");
+        const maxBytesRaw = q.get("maxBytes");
+        ok(
+          res,
+          manager.eventsPage(tenant.id, params["id"], {
+            since: sinceRaw === null ? void 0 : Number(sinceRaw) || 0,
+            before: beforeRaw === null ? void 0 : Number(beforeRaw) || 0,
+            maxBytes: maxBytesRaw === null ? void 0 : Number(maxBytesRaw) || void 0
+          })
         );
-        const { events, latestSeq } = manager.eventsSince(
-          tenant.id,
-          params["id"],
-          since
+      }
+    },
+    {
+      method: "GET",
+      pattern: ["sessions", ":id", "turns"],
+      // 轮次汇总（会话详情的列表）
+      fn: async (req2, res, { tenant, params }) => {
+        const q = new URL(req2.url, "http://localhost").searchParams;
+        const beforeRaw = q.get("before");
+        const limitRaw = q.get("limit");
+        ok(
+          res,
+          await manager.sessionTurns(tenant.id, params["id"], {
+            before: beforeRaw === null ? void 0 : Number(beforeRaw) || 0,
+            limit: limitRaw === null ? void 0 : Number(limitRaw) || void 0
+          })
         );
-        ok(res, { events, latestSeq });
+      }
+    },
+    {
+      method: "GET",
+      // 单轮详情：用户消息（含补充） + 最终回复 + 产出文件
+      pattern: ["sessions", ":id", "turns", ":seq", "reply"],
+      fn: async (req2, res, { tenant, params }) => {
+        const startSeq = Number(params["seq"]);
+        if (!Number.isFinite(startSeq) || startSeq <= 0) {
+          throw new ApiError(400, "bad_request", "\u65E0\u6548\u7684\u8F6E\u6B21\u5E8F\u53F7");
+        }
+        ok(res, await manager.sessionTurnReply(tenant.id, params["id"], startSeq));
       }
     }
   ];
@@ -14013,7 +14810,7 @@ function createApp(store, manager, opts = {}) {
       json(res, 200, {
         status: "ok",
         // 版本让运维/探针能确认线上跑的是哪个构建（更新与回滚据此判断）
-        version: "0.2.14",
+        version: "0.2.16",
         features: { mcp: hasServerMcpConfig() }
       });
       return;
@@ -14286,6 +15083,24 @@ async function dispatchFleetCommand(deps, env3) {
     switch (env3.type) {
       case "ping":
         return ok2({ pong: true, ts: Date.now() });
+      case "self_update": {
+        const updater = deps.getUpdater?.() ?? null;
+        if (!updater) {
+          return fail("\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A\u8282\u70B9\u672A\u4EE5 serve \u6A21\u5F0F\u8FD0\u884C\uFF08\u7F3A\u5C11\u66F4\u65B0\u63A7\u5236\u5668\uFF09");
+        }
+        const action = String(payload.action ?? "status");
+        if (action === "status") {
+          return ok2(updater.status());
+        }
+        if (action === "check") {
+          return ok2(await updater.inspect());
+        }
+        if (action === "install") {
+          const started = await updater.requestInstall(payload.force === true);
+          return ok2(started);
+        }
+        return fail(`\u672A\u77E5\u7684 action\uFF1A${action}\uFF08\u53EF\u9009 status / check / install\uFF09`);
+      }
       case "get_node_info":
         return ok2(
           buildNodeInfo(store, {
@@ -14408,8 +15223,22 @@ async function dispatchFleetCommand(deps, env3) {
         );
       }
       case "get_events": {
-        const since = Number(payload.since ?? 0) || 0;
-        return ok2(manager.eventsSince(project().id, sessionId(), since));
+        const since = payload.since === void 0 ? void 0 : Number(payload.since) || 0;
+        const before = payload.before === void 0 ? void 0 : Number(payload.before) || 0;
+        const maxBytes = Number(payload.maxBytes) || void 0;
+        return ok2(
+          manager.eventsPage(project().id, sessionId(), { since, before, maxBytes })
+        );
+      }
+      case "get_session_turns": {
+        const before = payload.before === void 0 ? void 0 : Number(payload.before) || 0;
+        const limit = Number(payload.limit) || void 0;
+        return ok2(await manager.sessionTurns(project().id, sessionId(), { before, limit }));
+      }
+      case "get_session_turn_reply": {
+        const startSeq = Number(payload.startSeq) || 0;
+        if (startSeq <= 0) throw new ApiError(400, "bad_request", "\u65E0\u6548\u7684\u8F6E\u6B21\u5E8F\u53F7");
+        return ok2(await manager.sessionTurnReply(project().id, sessionId(), startSeq));
       }
       case "get_config":
         return ok2(configView2(project()));
@@ -14470,6 +15299,16 @@ async function dispatchFleetCommand(deps, env3) {
           )
         );
       }
+      case "write_file_base64": {
+        const t = project();
+        return ok2(
+          writeProjectFileBase64(
+            t.workspaceRoot ?? null,
+            String(payload.path ?? ""),
+            String(payload.base64 ?? "")
+          )
+        );
+      }
       case "create_dir": {
         const t = project();
         return ok2(createProjectDir(t.workspaceRoot ?? null, String(payload.path ?? "")));
@@ -14484,6 +15323,13 @@ async function dispatchFleetCommand(deps, env3) {
           )
         );
       }
+      case "delete_files": {
+        const t = project();
+        const raw = payload.paths;
+        const paths = Array.isArray(raw) ? raw.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        return ok2(deleteProjectPaths(t.workspaceRoot ?? null, paths));
+      }
       case "search_files": {
         const t = project();
         return ok2(searchProjectFiles(t.workspaceRoot ?? null, String(payload.query ?? "")));
@@ -14710,6 +15556,13 @@ async function dispatchFleetCommand(deps, env3) {
         manager.steer(project(), sessionId(), text);
         return ok2({ accepted: true });
       }
+      case "unsteer": {
+        const index = Number(payload.index);
+        if (!Number.isInteger(index)) {
+          throw new ApiError(400, "bad_request", "index \u5FC5\u987B\u662F\u6574\u6570");
+        }
+        return ok2({ accepted: true, pendingSteers: manager.unsteer(project(), sessionId(), index) });
+      }
       case "interrupt":
         manager.interrupt(project(), sessionId());
         return ok2({ accepted: true });
@@ -15310,6 +16163,8 @@ var READONLY_CMD_TYPES = /* @__PURE__ */ new Set([
   "get_session_states",
   "get_state",
   "get_events",
+  "get_session_turns",
+  "get_session_turn_reply",
   "get_config",
   "list_models",
   "list_dirs",
@@ -15559,6 +16414,10 @@ var FleetNodeBridge = class {
   _dispatchEnvelope(env3) {
     const run = () => this._dispatch(env3);
     dbgMark(`recv:${env3.type}`, `reqId=${env3.reqId}`);
+    if (env3.type === "self_update" && String(env3.payload?.action ?? "status") !== "install") {
+      this._runReadonly(run);
+      return;
+    }
     if (READONLY_CMD_TYPES.has(env3.type) || this._isReadonlyBatch(env3)) {
       this._runReadonly(run);
       return;
@@ -15585,7 +16444,7 @@ var FleetNodeBridge = class {
   _invalidateSessionCache() {
     this.writeEpoch += 1;
     for (const key of [...this.cmdResultCache.keys()]) {
-      if (/^(get_state|get_events|list_sessions|get_session_states)\|/.test(key)) {
+      if (/^(get_state|get_events|get_session_turns|get_session_turn_reply|list_sessions|get_session_states)\|/.test(key)) {
         this.cmdResultCache.delete(key);
       }
     }
@@ -15721,11 +16580,17 @@ var FleetNodeBridge = class {
       label: this.opts.deps.store.loadNodeLabel() ?? void 0,
       platform: process.platform,
       mode: process.env.NODE_MODE ?? "standalone",
-      version: "0.2.14",
+      version: "0.2.16",
       ip: primaryIp()
     };
   }
-  /** 用量汇总（供控制面账户级聚合）：总量 + 最近 40 天按天 */
+  /**
+   * 用量汇总（供控制面账户级聚合）：总量 + 最近 40 天按天 + 最近 40 天按项目。
+   *
+   * 按项目这一维是为控制台「今日 / 最近 30 天消耗拆到每个项目」服务的：
+   * 账本里的汇总只存了按天、按项目两个独立维度，交叉项只能现算，因此这里
+   * 从明细聚合后随 info 一起上报（Hub 按 (节点, 项目, 天) 覆盖写入，天然幂等）。
+   */
   _usagePayload() {
     const ledger = this.opts.deps.manager.usageLedger();
     if (!ledger) return void 0;
@@ -15733,11 +16598,22 @@ var FleetNodeBridge = class {
     const days = {};
     const keys = Object.keys(r.byDay).sort().slice(-40);
     for (const k of keys) days[k] = r.byDay[k];
+    const from = keys[0] ?? "";
+    const to = keys[keys.length - 1] ?? "";
+    const projects = {};
+    if (from && to) {
+      for (const [projectId, byDay] of Object.entries(
+        ledger.projectByDay({ from, to })
+      )) {
+        projects[projectId] = { total: sumAgg(Object.values(byDay)), byDay };
+      }
+    }
     return {
       since: r.since,
       total: r.total,
       legacy: r.legacy ?? null,
-      byDay: days
+      byDay: days,
+      projects
     };
   }
   /**
@@ -15772,6 +16648,8 @@ var FleetNodeBridge = class {
             name: s.name ?? null,
             status: s.status,
             lastUserMessage: lastUserMessage(s),
+            // 控制面按它排「最近在跑什么」，运行中的长任务才不会被排到后面
+            lastStartedAt: s.lastStartedAt ?? null,
             // 控制面的聚合邮件靠它判断「这台机器最近有没有在干活」；
             // 状态跃迁可能被 info 节流跳过，完成时间不会。
             lastCompletedAt: s.lastCompletedAt ?? null
@@ -15800,7 +16678,7 @@ var FleetNodeBridge = class {
         label: this.opts.deps.store.loadNodeLabel() ?? void 0,
         platform: process.platform,
         mode: process.env.NODE_MODE ?? "standalone",
-        version: "0.2.14",
+        version: "0.2.16",
         ip: primaryIp(),
         projects,
         totals,
@@ -17429,7 +18307,7 @@ function verifySignature(data, signatureBase64, publicKey) {
 }
 
 // src/update/downloader.ts
-var MAX_BINARY_BYTES = 400 * 1024 * 1024;
+var MAX_BINARY_BYTES2 = 400 * 1024 * 1024;
 var MANIFEST_TIMEOUT_MS = 15e3;
 var DOWNLOAD_TIMEOUT_MS2 = 10 * 6e4;
 async function fetchManifest(url, publicKey, opts = {}) {
@@ -17475,7 +18353,7 @@ async function downloadBinary(bin, destPath, log = () => {
   if (!res.ok) return { error: `\u4E0B\u8F7D\u5931\u8D25 HTTP ${res.status}` };
   if (!res.body) return { error: "\u4E0B\u8F7D\u54CD\u5E94\u6CA1\u6709 body" };
   const expected = bin.size && bin.size > 0 ? bin.size : void 0;
-  const limit = expected ? Math.max(expected * 2, 1024 * 1024) : MAX_BINARY_BYTES;
+  const limit = expected ? Math.max(expected * 2, 1024 * 1024) : MAX_BINARY_BYTES2;
   const hash = (0, import_node_crypto5.createHash)("sha256");
   let bytes = 0;
   try {
@@ -17538,7 +18416,7 @@ var path29 = __toESM(require("path"), 1);
 var import_node_child_process5 = require("child_process");
 var import_node_module3 = require("module");
 function currentVersion() {
-  const injected = "0.2.14"?.trim();
+  const injected = "0.2.16"?.trim();
   if (injected) return injected;
   try {
     const req2 = (0, import_node_module3.createRequire)(importMetaUrl);
@@ -17852,6 +18730,31 @@ function nextIntervalMs() {
   const jitter = base * 0.15 * (Math.random() * 2 - 1);
   return Math.max(6e4, Math.round(base + jitter));
 }
+function evaluateManifest(base, manifest) {
+  if (!parseVersion(base.currentVersion) || compareVersions(manifest.version, base.currentVersion) <= 0) {
+    return {
+      ...base,
+      updateAvailable: false,
+      latestVersion: manifest.version,
+      reason: `\u5DF2\u662F\u6700\u65B0\u7248\u672C\uFF08v${base.currentVersion}\uFF09`
+    };
+  }
+  if (manifest.minimumVersion && compareVersions(base.currentVersion, manifest.minimumVersion) < 0) {
+    return {
+      ...base,
+      updateAvailable: false,
+      latestVersion: manifest.version,
+      manualUpgradeRequired: manifest.minimumVersion,
+      reason: `\u5F53\u524D\u7248\u672C\u8FC7\u4F4E\uFF0C\u9700\u624B\u52A8\u5347\u7EA7\u5230 >= ${manifest.minimumVersion}`
+    };
+  }
+  return {
+    ...base,
+    updateAvailable: true,
+    latestVersion: manifest.version,
+    ...manifest.notes ? { notes: manifest.notes } : {}
+  };
+}
 var UpdateController = class {
   constructor(opts, currentVersion2 = currentVersion()) {
     this.opts = opts;
@@ -17940,6 +18843,77 @@ var UpdateController = class {
     }
     this.schedule(nextIntervalMs());
   }
+  /**
+   * 只读检查：拉清单比对版本，不下载、不改 state。
+   *
+   * 供远端 `self_update --action check` 与 UI 展示用；与定时器 `check()` 不同，
+   * 这里不加 `checking` 锁、不写 `lastCheckAt`，因此不会干扰自动更新流程。
+   */
+  async inspect() {
+    const base = {
+      currentVersion: this.currentVersion,
+      channel: updaterChannel(),
+      manifestUrl: this.manifestUrl()
+    };
+    const key = this.publicKey;
+    const cap = selfUpdateCapability(Boolean(key));
+    if (!cap.ok) {
+      return { ...base, updateAvailable: false, reason: `\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A${cap.reason}` };
+    }
+    const res = await fetchManifest(base.manifestUrl, key, {
+      allowInsecureUrl: env("ZQAGENT_UPDATE_INSECURE") === "1"
+    });
+    if (!res.manifest) {
+      return {
+        ...base,
+        updateAvailable: false,
+        reason: `\u66F4\u65B0\u68C0\u67E5\u5931\u8D25\uFF1A${res.error ?? "\u6E05\u5355\u6821\u9A8C\u5931\u8D25"}`
+      };
+    }
+    return evaluateManifest(base, res.manifest);
+  }
+  /**
+   * 远端触发安装：先同步给出结论（受理/无需更新），安装本身在后台跑。
+   *
+   * 必须「先回执、后安装」：安装成功后进程会 `exit(70)` 交给 systemd 拉起新版本，
+   * 如果等到安装完成再回执，回执永远发不出去（表现为网关超时）。
+   *
+   * 复用定时器同一条 `check()` 路径：验签、下载、自检、失败计数、安装后自检与
+   * 回滚保护全都一致，只是把 `installMode` 设为 `force` 时不等待空闲。
+   */
+  async requestInstall(force = false) {
+    const fromVersion = this.currentVersion;
+    const cap = selfUpdateCapability(Boolean(this.publicKey));
+    if (!cap.ok) {
+      return { accepted: false, fromVersion, message: `\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A${cap.reason}` };
+    }
+    const info = await this.inspect();
+    if (!info.updateAvailable) {
+      return {
+        accepted: false,
+        fromVersion,
+        ...info.latestVersion ? { toVersion: info.latestVersion } : {},
+        message: info.reason ?? "\u5DF2\u662F\u6700\u65B0\u7248\u672C"
+      };
+    }
+    if (this.checking || this.installing) {
+      return {
+        accepted: true,
+        fromVersion,
+        toVersion: info.latestVersion,
+        message: `\u5DF2\u6709\u66F4\u65B0\u4EFB\u52A1\u5728\u8FDB\u884C\u4E2D\uFF08\u76EE\u6807 v${info.latestVersion}\uFF09\uFF0C\u53EF\u5728\u7A0D\u540E\u7528 status \u67E5\u770B\u7ED3\u679C`
+      };
+    }
+    void this.check(force, false, true).catch((err) => {
+      this.recordFailure(info.latestVersion, `\u5B89\u88C5\u5931\u8D25\uFF1A${err.message}`);
+    });
+    return {
+      accepted: true,
+      fromVersion,
+      toVersion: info.latestVersion,
+      message: force ? `\u5F00\u59CB\u5B89\u88C5 v${info.latestVersion}\uFF08\u7ACB\u5373\u91CD\u542F\uFF09` : `\u5F00\u59CB\u5B89\u88C5 v${info.latestVersion}\uFF08\u7B49\u5F85\u8282\u70B9\u7A7A\u95F2\u540E\u91CD\u542F\uFF09`
+    };
+  }
   /**
    * 检查并准备更新；`installMode` 为 true 时下载后立即安装（不再等空闲）。
    * 返回可读结论，供 CLI `update --check` 使用。
@@ -18339,6 +19313,7 @@ function startServer(opts = {}) {
   const notificationHub = createNotificationHub();
   let fleet = null;
   let fleetCred = null;
+  let updater = null;
   function connectFleet(cred) {
     const localId = ensureNodeId(store);
     const nodeId = (cred.nodeId ?? "").trim() || localId;
@@ -18356,6 +19331,8 @@ function startServer(opts = {}) {
       deps: {
         store,
         manager,
+        // 闭包推迟求值：桥先于 UpdateController 创建，指令到达时 updater 已就绪
+        getUpdater: () => updater,
         applyFleetCred: async (cred2) => {
           store.saveFleetCredential(cred2);
           setTimeout(() => connectFleet(cred2), 300);
@@ -18506,16 +19483,21 @@ function startServer(opts = {}) {
       scheduleFleetInfoRefresh();
     }
   });
+  updater = new UpdateController({
+    dataDir,
+    isIdle: () => manager.isIdle(),
+    prepareExit: closeServer
+  });
   const server = createApp(store, manager, {
     secretBox,
     notificationHub,
     qq,
     adminKey,
     fleet: fleetController,
-    host
+    host,
+    updater
   });
   let closed = false;
-  let updater = null;
   function closeServer() {
     if (closed) return;
     closed = true;
@@ -18548,13 +19530,6 @@ function startServer(opts = {}) {
   }
   process.on("SIGINT", () => shutdown("SIGINT"));
   process.on("SIGTERM", () => shutdown("SIGTERM"));
-  if (opts.autoUpdate) {
-    updater = new UpdateController({
-      dataDir,
-      isIdle: () => manager.isIdle(),
-      prepareExit: closeServer
-    });
-  }
   server.timeout = 0;
   server.keepAliveTimeout = 65e3;
   server.headersTimeout = 66e3;
@@ -18574,7 +19549,7 @@ function startServer(opts = {}) {
       } else {
         printReady(info, qq);
       }
-      updater?.start();
+      if (opts.autoUpdate) updater?.start();
       resolve20(info);
     }, reject);
   });
@@ -18615,7 +19590,7 @@ function printReady(info, qq) {
 // src/cli/account-enroll.ts
 init_cjs_shims();
 var path34 = __toESM(require("path"), 1);
-var readline = __toESM(require("readline/promises"), 1);
+var readline2 = __toESM(require("readline/promises"), 1);
 var SKIP_ANSWERS = /* @__PURE__ */ new Set(["-", "skip", "none", "no"]);
 function resolveDefaultHub(hubUrl2, env3 = process.env) {
   return (hubUrl2 ?? env3.HUB_URL ?? DEFAULT_HUB_URL).trim().replace(/\/$/, "");
@@ -18706,7 +19681,7 @@ async function maybeAccountEnroll(opts = {}) {
     cliErr(`\u63A5\u5165\u68C0\u67E5\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
     return;
   }
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
   try {
     await runWizard(rl, store, opts);
   } catch (e) {
@@ -18787,7 +19762,7 @@ async function askHidden(rl, prompt) {
 
 // src/cli/link.ts
 init_cjs_shims();
-var readline2 = __toESM(require("readline"), 1);
+var readline3 = __toESM(require("readline"), 1);
 
 // src/cli/serve-instances.ts
 init_cjs_shims();