@zqagent/core 0.2.15 → 0.2.20

package/dist/server/index.cjs

@@ -580,8 +580,18 @@ init_cjs_shims();
 var fs3 = __toESM(require("fs"), 1);
 var fsp = __toESM(require("fs/promises"), 1);
 var path4 = __toESM(require("path"), 1);
+var readline = __toESM(require("readline"), 1);
 var import_crypto = require("crypto");
 
+// src/server/llmIds.ts
+init_cjs_shims();
+var GLOBAL_PROVIDER_ID = "__env__";
+var BUILTIN_PROVIDER_ID = "__zqai__";
+function isBuiltinProvider(id) {
+  return id === BUILTIN_PROVIDER_ID;
+}
+var FALLBACK_MODEL = "gpt-4o";
+
 // src/server/dbgTrace.ts
 init_cjs_shims();
 var DBG_FLEET = (() => {
@@ -1497,6 +1507,170 @@ var Store = class {
       }
     }
   }
+  /**
+   * 读取事件「一页」：从文件末尾向前，按字节预算取最近的事件。
+   *
+   * - `before` 省略：取最新的 maxBytes 字节
+   * - `before` 指定：只取 seq < before 的事件（向前翻页）
+   *
+   * 为什么不能复用 loadEventsTail：后者只能从文件末尾读固定窗口，
+   * 无法「向前翻页」，而控制台需要滚到顶部继续加载更早的对话。
+   * 这里按块从后往前扫，读到预算或文件头即停；翻了多页之后每次
+   * before 都紧邻上一页，实际只需读 1~2 块。
+   *
+   * 返回按 seq 升序；`hasMore` 表示本页最早一条之前还有更早的事件。
+   */
+  loadEventPage(tenantId, sessionId, opts) {
+    const p = path4.join(this.sessionDir(tenantId, sessionId), "events.jsonl");
+    const { before, maxBytes } = opts;
+    const __t0 = dbgNow();
+    let fd = null;
+    try {
+      const size = fs3.statSync(p).size;
+      if (size === 0) return { events: [], hasMore: false };
+      fd = fs3.openSync(p, "r");
+      const CHUNK = 256 * 1024;
+      let pos = size;
+      const kept = [];
+      let bytes = 0;
+      let hasMore = false;
+      let done = false;
+      while (pos > 0 && !done) {
+        const start = Math.max(0, pos - CHUNK);
+        const len = pos - start;
+        const buf = Buffer.allocUnsafe(len);
+        const read = fs3.readSync(fd, buf, 0, len, start);
+        const rows = buf.subarray(0, read).toString("utf-8").split("\n");
+        if (start > 0) rows.shift();
+        for (let i = rows.length - 1; i >= 0; i--) {
+          const line = rows[i];
+          if (!line) continue;
+          let entry;
+          try {
+            entry = JSON.parse(line);
+          } catch {
+            continue;
+          }
+          if (!Number.isFinite(Number(entry.seq))) continue;
+          if (before !== void 0 && Number(entry.seq) >= before) continue;
+          const sz = Buffer.byteLength(line, "utf-8") + 1;
+          if (bytes > 0 && bytes + sz > maxBytes) {
+            hasMore = true;
+            done = true;
+            break;
+          }
+          bytes += sz;
+          kept.unshift(entry);
+        }
+        pos = start;
+      }
+      dbgMs(
+        "store.loadEventPage",
+        __t0,
+        // [dbg]
+        `size=${size} before=${before ?? "-"} out=${kept.length} bytes\u2248${bytes} more=${hasMore}`
+      );
+      return { events: kept, hasMore };
+    } catch {
+      return { events: [], hasMore: false };
+    } finally {
+      if (fd !== null) {
+        try {
+          fs3.closeSync(fd);
+        } catch {
+        }
+      }
+    }
+  }
+  // ===================== 轮次索引 =====================
+  /** 轮次索引文件路径 */
+  turnsFile(tenantId, sessionId) {
+    return path4.join(this.sessionDir(tenantId, sessionId), "turns.ndjson");
+  }
+  /**
+   * 追加一轮的最新快照（同一 startSeq 后写者胜出）。
+   *
+   * 走与 session.json 相同的每文件写链：索引按「开轮 → 补充消息 → 收轮」
+   * 顺序追加，乱序会让列表读到旧的 running 版本。
+   */
+  appendTurnIndex(tenantId, sessionId, entry) {
+    const dir = this.sessionDir(tenantId, sessionId);
+    fs3.mkdirSync(dir, { recursive: true });
+    const file = this.turnsFile(tenantId, sessionId);
+    const line = JSON.stringify(entry) + "\n";
+    const prev = this.writeChains.get(file) ?? Promise.resolve();
+    const next = prev.then(() => fsp.appendFile(file, line, "utf-8")).catch((err) => {
+      console.error(`[store] appendTurnIndex \u5931\u8D25 ${sessionId}: ${String(err)}`);
+    });
+    this.writeChains.set(file, next);
+    return next;
+  }
+  /**
+   * 读取轮次索引（已按 startSeq 去重取最后一版，升序）。
+   *
+   * 文件很小（一轮约 0.5KB，1000 轮 ≈ 500KB），同步读即可，
+   * 会话详情打开路径不会因历史长度变慢。
+   */
+  loadTurnIndex(tenantId, sessionId) {
+    let raw;
+    try {
+      raw = fs3.readFileSync(this.turnsFile(tenantId, sessionId), "utf-8");
+    } catch {
+      return [];
+    }
+    const byStart = /* @__PURE__ */ new Map();
+    for (const line of raw.split("\n")) {
+      if (!line) continue;
+      try {
+        const e = JSON.parse(line);
+        if (!Number.isFinite(Number(e?.startSeq))) continue;
+        byStart.set(Number(e.startSeq), e);
+      } catch {
+      }
+    }
+    return [...byStart.values()].sort((a, b) => a.startSeq - b.startSeq);
+  }
+  /** 整文件替换轮次索引（重建用，tmp + rename 原子写） */
+  saveTurnIndex(tenantId, sessionId, entries) {
+    const dir = this.sessionDir(tenantId, sessionId);
+    fs3.mkdirSync(dir, { recursive: true });
+    const file = this.turnsFile(tenantId, sessionId);
+    const snapshot = entries.map((e) => JSON.stringify(e)).join("\n") + (entries.length ? "\n" : "");
+    const tmp = `${file}.${(0, import_crypto.randomUUID)()}.tmp`;
+    const prev = this.writeChains.get(file) ?? Promise.resolve();
+    const next = prev.then(() => fsp.writeFile(tmp, snapshot, "utf-8")).then(() => fsp.rename(tmp, file)).catch((err) => {
+      console.error(`[store] saveTurnIndex \u5931\u8D25 ${sessionId}: ${String(err)}`);
+      void fsp.rm(tmp, { force: true });
+    });
+    this.writeChains.set(file, next);
+    return next;
+  }
+  /**
+   * 流式读取整份事件日志（重建索引用）。
+   *
+   * 不能用 loadEvents（readFileSync + 逐行 JSON.parse）：大会话几十 MB，
+   * 会长时间阻塞事件循环，导致 SSE 心跳 / MQTT 保活断开。
+   */
+  async readEventsAsync(tenantId, sessionId) {
+    const p = path4.join(this.sessionDir(tenantId, sessionId), "events.jsonl");
+    const out = [];
+    try {
+      const rl = readline.createInterface({
+        input: fs3.createReadStream(p, { encoding: "utf-8" }),
+        crlfDelay: Infinity
+      });
+      for await (const line of rl) {
+        if (!line) continue;
+        try {
+          out.push(JSON.parse(line));
+        } catch {
+        }
+      }
+    } catch {
+      return out;
+    }
+    return out;
+  }
   // ===================== 节点身份 & 管理员密钥 =====================
   /** 节点稳定标识：{root}/node.json（首次启动生成后长期固定） */
   loadNodeId() {
@@ -1555,7 +1729,23 @@ var Store = class {
       legacyFiles: [path4.join(this.root, "node-llm.json")]
     });
     const old = new Map(cur.providers.map((p) => [p.id, p]));
-    const providers = cfg.providers.map((p) => {
+    const src = [...cfg.providers];
+    const prevBuiltin = cur.providers.find((p) => p.id === BUILTIN_PROVIDER_ID);
+    if (prevBuiltin && !src.some((p) => p.id === BUILTIN_PROVIDER_ID)) {
+      src.unshift({
+        id: prevBuiltin.id,
+        name: prevBuiltin.name,
+        type: prevBuiltin.type,
+        baseURL: prevBuiltin.baseURL,
+        model: prevBuiltin.model,
+        apiKey: decryptKey(prevBuiltin.apiKeyEnc, file) ?? void 0,
+        reasoningEffort: prevBuiltin.reasoningEffort ?? null,
+        ...prevBuiltin.models ? { models: prevBuiltin.models } : {},
+        ...prevBuiltin.nonChat ? { nonChat: prevBuiltin.nonChat } : {},
+        ...prevBuiltin.modelMeta ? { modelMeta: prevBuiltin.modelMeta } : {}
+      });
+    }
+    const providers = src.map((p) => {
       const prev = old.get(p.id);
       const apiKeyEnc = p.apiKey ? encryptKey(p.apiKey, file) : prev?.apiKeyEnc ?? "";
       return {
@@ -1917,13 +2107,13 @@ function textOf(content) {
   }
   return content != null ? String(content) : "";
 }
-function extractUserMessages(span, clip = USER_MESSAGE_CLIP) {
+function extractUserMessages(span, clip2 = USER_MESSAGE_CLIP) {
   const out = [];
   for (const m of span) {
     if (m.role !== "user") continue;
     const text = textOf(m.content).replace(/\s+/g, " ").trim();
     if (!text) continue;
-    out.push(text.length > clip ? text.slice(0, clip - 1) + "\u2026" : text);
+    out.push(text.length > clip2 ? text.slice(0, clip2 - 1) + "\u2026" : text);
   }
   return out;
 }
@@ -2735,6 +2925,21 @@ var TurnEngine = class _TurnEngine {
   queueSteering(text) {
     this._steering.push(text);
   }
+  /**
+   * 撤销一条尚未注入的 steering。
+   *
+   * 按文本删第一条匹配项：调用方（SessionManager）已按索引删掉了自己那份队列，
+   * 这里只需保证引擎不再注入同样的内容。用文本而非索引，是因为引擎会在迭代
+   * 间隙批量清空 `_steering`，索引可能已经漂移；文本相同则删哪条都等价。
+   *
+   * @returns 是否真的删掉了（已注入的项返回 false，调用方据此提示用户）
+   */
+  removeSteering(text) {
+    const i = this._steering.indexOf(text);
+    if (i < 0) return false;
+    this._steering.splice(i, 1);
+    return true;
+  }
   // ===================== 主入口 =====================
   /**
    * 运行一轮 Turn
@@ -9068,7 +9273,6 @@ function registerMediaTool(registry, workspace, opts = {}) {
 
 // src/server/nodeLlm.ts
 init_cjs_shims();
-var GLOBAL_PROVIDER_ID = "__env__";
 function envProvider() {
   const apiKey = process.env.OPENAI_API_KEY;
   if (!apiKey) return null;
@@ -9111,19 +9315,26 @@ function nodeLlmView(cfg) {
         global: true
       }
     ] : [],
-    ...cfg.providers.map((p) => ({
-      id: p.id,
-      name: p.name,
-      type: p.type ?? "",
-      baseURL: p.baseURL,
-      model: p.model,
-      hasApiKey: Boolean(p.apiKey),
-      models: p.models ?? [],
-      nonChat: p.nonChat ?? [],
-      modelMeta: p.modelMeta ?? [],
-      reasoningEffort: p.reasoningEffort ?? null,
-      global: false
-    }))
+    ...cfg.providers.map((p) => {
+      const builtin = isBuiltinProvider(p.id);
+      return {
+        id: p.id,
+        name: p.name,
+        type: p.type ?? "",
+        baseURL: p.baseURL,
+        model: p.model,
+        hasApiKey: Boolean(p.apiKey),
+        models: p.models ?? [],
+        nonChat: p.nonChat ?? [],
+        modelMeta: p.modelMeta ?? [],
+        reasoningEffort: p.reasoningEffort ?? null,
+        global: false,
+        /** 平台内置（接入 Hub 后自动下发，用户不用关心 Key） */
+        builtin,
+        /** 不可编辑的字段：控制台据此把 baseURL / key 显示为只读 */
+        ...builtin ? { locked: ["baseURL", "apiKey"] } : {}
+      };
+    })
   ];
   return {
     defaultProviderId: cfg.defaultProviderId ?? null,
@@ -9136,27 +9347,42 @@ function applyNodeLlmPatch(cfg, raw) {
   const next = { providers: cfg.providers, defaultProviderId: cfg.defaultProviderId };
   if (Array.isArray(raw?.providers)) {
     const old = new Map(cfg.providers.map((p) => [p.id, p]));
-    next.providers = raw.providers.filter((x) => Boolean(x) && typeof x === "object").filter((x) => x.global !== true && String(x.id ?? "") !== GLOBAL_PROVIDER_ID).map((x) => {
-      const id = String(x.id ?? "").trim();
-      if (!id) throw new ApiError(400, "bad_request", "\u4F9B\u5E94\u5546 id \u4E0D\u80FD\u4E3A\u7A7A");
-      const prev = old.get(id);
-      const apiKey = String(x.apiKey ?? "").trim();
-      const models = normalizeModelList(x.models) ?? prev?.models;
-      const nonChat = normalizeModelList(x.nonChat) ?? prev?.nonChat;
-      const modelMeta = normalizeModelMeta(x.modelMeta) ?? prev?.modelMeta;
-      return {
-        id,
-        name: String(x.name ?? prev?.name ?? id).trim(),
-        type: x.type == null ? prev?.type : String(x.type),
-        baseURL: String(x.baseURL ?? prev?.baseURL ?? "").trim(),
-        model: String(x.model ?? prev?.model ?? "").trim(),
-        apiKey: apiKey || prev?.apiKey,
-        reasoningEffort: x.reasoningEffort === void 0 ? prev?.reasoningEffort ?? null : normReasoningEffort(x.reasoningEffort),
-        ...models ? { models } : {},
-        ...nonChat ? { nonChat } : {},
-        ...modelMeta ? { modelMeta } : {}
-      };
-    });
+    const incoming = raw.providers.filter((x) => Boolean(x) && typeof x === "object").filter((x) => x.global !== true && String(x.id ?? "") !== GLOBAL_PROVIDER_ID);
+    const prevBuiltin = cfg.providers.find((p) => isBuiltinProvider(p.id));
+    const builtinPatch = incoming.find((x) => isBuiltinProvider(String(x.id ?? "")));
+    const keptBuiltin = prevBuiltin ? [
+      {
+        ...prevBuiltin,
+        ...builtinPatch?.model != null ? { model: String(builtinPatch.model).trim() || prevBuiltin.model } : {},
+        ...normalizeModelList(builtinPatch?.models) ? { models: normalizeModelList(builtinPatch?.models) } : {},
+        ...builtinPatch?.reasoningEffort !== void 0 ? { reasoningEffort: normReasoningEffort(builtinPatch.reasoningEffort) } : {},
+        ...typeof builtinPatch?.name === "string" && builtinPatch.name.trim() ? { name: builtinPatch.name.trim() } : {}
+      }
+    ] : [];
+    next.providers = [
+      ...keptBuiltin,
+      ...incoming.filter((x) => !isBuiltinProvider(String(x.id ?? ""))).map((x) => {
+        const id = String(x.id ?? "").trim();
+        if (!id) throw new ApiError(400, "bad_request", "\u4F9B\u5E94\u5546 id \u4E0D\u80FD\u4E3A\u7A7A");
+        const prev = old.get(id);
+        const apiKey = String(x.apiKey ?? "").trim();
+        const models = normalizeModelList(x.models) ?? prev?.models;
+        const nonChat = normalizeModelList(x.nonChat) ?? prev?.nonChat;
+        const modelMeta = normalizeModelMeta(x.modelMeta) ?? prev?.modelMeta;
+        return {
+          id,
+          name: String(x.name ?? prev?.name ?? id).trim(),
+          type: x.type == null ? prev?.type : String(x.type),
+          baseURL: String(x.baseURL ?? prev?.baseURL ?? "").trim(),
+          model: String(x.model ?? prev?.model ?? "").trim(),
+          apiKey: apiKey || prev?.apiKey,
+          reasoningEffort: x.reasoningEffort === void 0 ? prev?.reasoningEffort ?? null : normReasoningEffort(x.reasoningEffort),
+          ...models ? { models } : {},
+          ...nonChat ? { nonChat } : {},
+          ...modelMeta ? { modelMeta } : {}
+        };
+      })
+    ];
   }
   if (typeof raw?.defaultProviderId === "string") {
     const id = raw.defaultProviderId.trim();
@@ -9176,6 +9402,9 @@ function nodeDefaultProvider(store) {
   if (cfg.providers.length === 0) return null;
   return cfg.providers.find((p) => p.id === cfg.defaultProviderId) ?? cfg.providers[0] ?? null;
 }
+function defaultTenantModel(store) {
+  return process.env.OPENAI_MODEL || process.env.MODEL || nodeDefaultProvider(store)?.model || FALLBACK_MODEL;
+}
 function resolveSessionProvider(store, tenant, providerId) {
   const own = tenant.provider ?? {};
   if (providerId) {
@@ -9205,6 +9434,208 @@ function resolveSessionProvider(store, tenant, providerId) {
   return { ...own, model: tenant.model };
 }
 
+// src/server/builtinLlm.ts
+init_cjs_shims();
+var FETCH_TIMEOUT_MS = 8e3;
+var RETRY_AFTER_MS = 5 * 6e4;
+function hubBase(cred) {
+  return (cred.hubUrl ?? "").replace(/\/+$/, "");
+}
+function asProvider(grant) {
+  const baseURL = String(grant.baseURL ?? "").trim();
+  const apiKey = String(grant.apiKey ?? "").trim();
+  const model = String(grant.model ?? "").trim();
+  if (!baseURL || !apiKey) return null;
+  return {
+    id: BUILTIN_PROVIDER_ID,
+    name: String(grant.name ?? "").trim() || "\u5FD7\u524D\u5927\u6A21\u578B\uFF08\u5185\u7F6E\uFF09",
+    type: "builtin",
+    baseURL,
+    model,
+    apiKey
+  };
+}
+async function enrichModels(p) {
+  try {
+    const r = await Promise.race([
+      fetchModels(p.baseURL, p.apiKey ?? "", p.model),
+      new Promise((resolve20) => {
+        const t = setTimeout(() => resolve20(null), FETCH_TIMEOUT_MS);
+        t.unref?.();
+      })
+    ]);
+    if (!r?.models?.length) return p;
+    return {
+      ...p,
+      // 控制面没给默认型号时，取供应商返回的第一个，避免模型为空让用户卡住
+      model: p.model || r.models[0],
+      models: r.models,
+      ...r.nonChat?.length ? { nonChat: r.nonChat } : {},
+      ...r.modelMeta?.length ? { modelMeta: r.modelMeta } : {}
+    };
+  } catch {
+    return p;
+  }
+}
+function saveBuiltin(store, provider) {
+  const cfg = store.loadNodeLlm();
+  const others = cfg.providers.filter((p) => p.id !== BUILTIN_PROVIDER_ID);
+  const prev = cfg.providers.find((p) => p.id === BUILTIN_PROVIDER_ID);
+  const merged = {
+    ...provider,
+    // 用户选过的型号/候选列表/推理强度/显示名都保留；只有托管字段（baseURL/key）强制以控制面为准
+    ...prev?.model ? { model: prev.model } : {},
+    ...prev?.models?.length ? { models: prev.models } : {},
+    ...prev?.reasoningEffort != null ? { reasoningEffort: prev.reasoningEffort } : {},
+    ...prev?.name ? { name: prev.name } : {}
+  };
+  store.saveNodeLlm({
+    providers: [merged, ...others],
+    // 之前没有默认且用户也没指定时，让内置模型成为默认——「开箱即用」
+    defaultProviderId: cfg.defaultProviderId ?? BUILTIN_PROVIDER_ID
+  });
+  adoptBuiltinModelForTenants(store, merged.model);
+}
+var LEGACY_DEFAULT_MODELS = /* @__PURE__ */ new Set([FALLBACK_MODEL, "deepseek-v4-flash"]);
+function adoptBuiltinModelForTenants(store, model) {
+  if (!model) return;
+  for (const id of store.listTenants()) {
+    const tenant = store.loadTenant(id);
+    if (!tenant || !LEGACY_DEFAULT_MODELS.has(tenant.model)) continue;
+    if (tenant.provider?.apiKey) continue;
+    tenant.model = model;
+    store.saveTenant(tenant);
+  }
+}
+async function ensureBuiltinProvider(store, opts = {}) {
+  const cred = store.loadFleetCredential();
+  if (!cred?.fleetToken || !cred.fleetSecret) {
+    return { status: "disabled", reason: "\u8282\u70B9\u672A\u63A5\u5165 Hub" };
+  }
+  const hub = hubBase(cred);
+  if (!hub) return { status: "disabled", reason: "\u7F3A\u5C11 Hub \u5730\u5740" };
+  const local = store.loadNodeLlm().providers.find((p) => p.id === BUILTIN_PROVIDER_ID);
+  if (local && !opts.force) {
+    adoptBuiltinModelForTenants(store, local.model);
+    return { status: "ready", provider: local, refreshed: false };
+  }
+  const cached3 = cred.builtinLlm ? asProvider(cred.builtinLlm) : null;
+  let res;
+  try {
+    res = await fetch(`${hub}/api/hub/node/builtin-llm`, {
+      headers: {
+        Authorization: `Bearer ${cred.fleetToken}`,
+        "X-Fleet-Secret": cred.fleetSecret,
+        "X-Node-Id": cred.nodeId
+      },
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+    });
+  } catch (e) {
+    if (cached3) {
+      const provider2 = await enrichModels(cached3);
+      saveBuiltin(store, provider2);
+      return { status: "ready", provider: provider2, refreshed: true };
+    }
+    return { status: "error", reason: `\u8FDE\u63A5 Hub \u5931\u8D25\uFF1A${e.message}` };
+  }
+  let body = null;
+  try {
+    body = await res.json();
+  } catch {
+  }
+  if (!res.ok) {
+    const msg = body?.error?.message ?? `HTTP ${res.status}`;
+    if (res.status === 401 || res.status === 403) {
+      return { status: "unavailable", reason: msg };
+    }
+    if (cached3) {
+      const provider2 = await enrichModels(cached3);
+      saveBuiltin(store, provider2);
+      return { status: "ready", provider: provider2, refreshed: true };
+    }
+    return { status: "error", reason: msg };
+  }
+  const grant = body?.data?.builtinLlm;
+  if (!grant) {
+    const why = String(body?.data?.reason ?? "").trim();
+    return { status: "unavailable", reason: why || "\u63A7\u5236\u9762\u672A\u4E0B\u53D1\u5185\u7F6E\u6A21\u578B" };
+  }
+  const parsed = asProvider(grant);
+  if (!parsed) return { status: "unavailable", reason: "\u5185\u7F6E\u6A21\u578B\u914D\u7F6E\u4E0D\u5B8C\u6574" };
+  const provider = await enrichModels(parsed);
+  saveBuiltin(store, provider);
+  return { status: "ready", provider, refreshed: true };
+}
+async function fetchLlmBalance(store) {
+  const cred = store.loadFleetCredential();
+  const hub = cred ? hubBase(cred) : "";
+  if (!cred?.fleetToken || !cred.fleetSecret || !hub) {
+    return { available: null, currency: "CNY", reason: "\u8282\u70B9\u672A\u63A5\u5165 Hub" };
+  }
+  try {
+    const res = await fetch(`${hub}/api/hub/node/balance`, {
+      headers: {
+        Authorization: `Bearer ${cred.fleetToken}`,
+        "X-Fleet-Secret": cred.fleetSecret,
+        "X-Node-Id": cred.nodeId
+      },
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+    });
+    const body = await res.json().catch(() => null);
+    if (!res.ok) {
+      return {
+        available: null,
+        currency: "CNY",
+        reason: body?.data ? "" : `HTTP ${res.status}`
+      };
+    }
+    const d = body?.data ?? {};
+    const available = typeof d.available === "number" ? d.available : null;
+    return {
+      available,
+      currency: typeof d.currency === "string" && d.currency ? d.currency : "CNY",
+      ...typeof d.reserved === "number" ? { reserved: d.reserved } : {},
+      // Hub 没配 HUB_PUBLIC_URL 时退回用接入时的 hubUrl
+      topupUrl: typeof d.topupUrl === "string" && d.topupUrl ? d.topupUrl : `${hub}/topup`,
+      ...available === null && typeof d.reason === "string" ? { reason: d.reason } : {}
+    };
+  } catch (e) {
+    return {
+      available: null,
+      currency: "CNY",
+      reason: `\u8FDE\u63A5 Hub \u5931\u8D25\uFF1A${e.message}`
+    };
+  }
+}
+var AUTH_RETRY_THROTTLE_MS = 6e4;
+var lastAuthRetryAt = 0;
+function healBuiltinOnAuthFailure(store, message) {
+  if (!/401|unauthorized|invalid[_\s]*api[_\s]*key|api[\s_-]*key\s*(?:无效|invalid)/i.test(message)) return;
+  if (!store.loadFleetCredential()) return;
+  if (!store.loadNodeLlm().providers.some((p) => p.id === BUILTIN_PROVIDER_ID)) return;
+  if (Date.now() - lastAuthRetryAt < AUTH_RETRY_THROTTLE_MS) return;
+  lastAuthRetryAt = Date.now();
+  void ensureBuiltinProvider(store, { force: true }).catch(() => {
+  });
+}
+var lastFailureAt = 0;
+function scheduleBuiltinProvider(store, log = () => {
+}) {
+  if (Date.now() - lastFailureAt < RETRY_AFTER_MS) return;
+  void ensureBuiltinProvider(store).then((r) => {
+    if (r.status === "ready") {
+      if (r.refreshed) log(`[builtin-llm] \u5DF2\u4E0B\u53D1\u5185\u7F6E\u6A21\u578B\uFF1A${r.provider.name}\uFF08${r.provider.model}\uFF09`);
+      return;
+    }
+    if (r.status === "disabled") return;
+    lastFailureAt = Date.now();
+    if (r.status === "unavailable") log(`[builtin-llm] \u6682\u65E0\u5185\u7F6E\u6A21\u578B\uFF1A${r.reason}`);
+    else log(`[builtin-llm] \u62C9\u53D6\u5185\u7F6E\u6A21\u578B\u5931\u8D25\uFF1A${r.reason}`);
+  }).catch(() => {
+    lastFailureAt = Date.now();
+  });
+}
+
 // src/server/usage.ts
 init_cjs_shims();
 var fs18 = __toESM(require("fs"), 1);
@@ -9276,6 +9707,19 @@ function addAgg(into, tokens, costUsd) {
 function utcDay(iso) {
   return iso.slice(0, 10);
 }
+function sumAgg(values) {
+  const out = zeroAgg();
+  for (const v of values) {
+    out.calls += v.calls;
+    out.input += v.input;
+    out.output += v.output;
+    out.cacheRead += v.cacheRead;
+    out.cacheWrite += v.cacheWrite;
+    out.costUsd += v.costUsd;
+    out.unpriced += v.unpriced;
+  }
+  return out;
+}
 function monthOf(iso) {
   return iso.slice(0, 7);
 }
@@ -9551,6 +9995,23 @@ var UsageLedger = class {
     }
     return all;
   }
+  /**
+   * 按「项目 × 天」聚合（供控制面把消耗拆到每个项目）。
+   *
+   * 汇总文件里只存了按项目、按天两个独立维度，拿不到交叉项，因此这里从
+   * 账本明细现算——调用方（节点上报）只取最近 40 天，读的是 2 个月文件，
+   * 5 分钟一次的成本可忽略。
+   */
+  projectByDay(opts) {
+    const out = {};
+    for (const rec of this.allRecords({ from: opts.from, to: opts.to })) {
+      const day = utcDay(rec.ts);
+      const days = out[rec.projectId] ?? (out[rec.projectId] = {});
+      const agg = days[day] ?? (days[day] = zeroAgg());
+      addAgg(agg, rec, rec.costUsd);
+    }
+    return out;
+  }
   summary(opts) {
     this.ensureInit();
     const currency = (opts.currency ?? "USD").toUpperCase();
@@ -9850,6 +10311,141 @@ var EVENT_BUFFER_MAX = 2e3;
 var EVENTS_ACK_MAX_BYTES = 512 * 1024;
 var APPROVAL_TIMEOUT_MS = (Number(process.env.APPROVAL_TIMEOUT_SECONDS) || 15 * 60) * 1e3;
 var LAST_USER_MESSAGE_MAX = 200;
+var TURN_TEXT_MAX = 500;
+var TURN_REPLY_MAX_BYTES = 256 * 1024;
+var TURN_REPLY_MAX_TEXT = 256 * 1024;
+var TURNS_DEFAULT_LIMIT = 20;
+function clip(text, max = LAST_USER_MESSAGE_MAX) {
+  const s = text ?? "";
+  return s.length > max ? `${s.slice(0, max)}\u2026` : s;
+}
+function asNum(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : 0;
+}
+function newTurnEntry(ev, input) {
+  return {
+    v: 1,
+    startSeq: ev.seq,
+    endSeq: ev.seq,
+    startedAt: ev.ts,
+    endedAt: null,
+    status: "running",
+    inputs: [{ seq: ev.seq, ts: ev.ts, text: clip(input, TURN_TEXT_MAX) }],
+    replyPreview: "",
+    producedFiles: [],
+    llmCalls: 0,
+    toolCalls: 0,
+    tokensIn: 0,
+    tokensOut: 0
+  };
+}
+function applyTurnEvent(turn, ev, toolSeen) {
+  const d = ev.data ?? {};
+  turn.endSeq = ev.seq;
+  switch (ev.type) {
+    case "queue_steering": {
+      turn.inputs.push({
+        seq: ev.seq,
+        ts: ev.ts,
+        text: clip(String(d["text"] ?? ""), TURN_TEXT_MAX)
+      });
+      break;
+    }
+    case "assistant_message": {
+      turn.llmCalls += 1;
+      const text = String(d["text"] ?? "");
+      if (text) {
+        turn.replyPreview = clip(text);
+        turn.replySeq = ev.seq;
+      }
+      const u = d["usage"];
+      if (u && typeof u === "object") {
+        const usage = u;
+        turn.tokensIn += asNum(usage["input"]);
+        turn.tokensOut += asNum(usage["output"]);
+      }
+      break;
+    }
+    case "tool_started":
+    case "tool_finished": {
+      const key = String(d["reqId"] ?? "") || `${String(d["name"] ?? "")}:${ev.seq}`;
+      if (!toolSeen.has(key)) {
+        toolSeen.add(key);
+        turn.toolCalls += 1;
+      }
+      break;
+    }
+    case "error": {
+      turn.error = clip(String(d["message"] ?? d["error"] ?? ""));
+      break;
+    }
+    default:
+      break;
+  }
+}
+function closeTurnEntry(turn, ev) {
+  const d = ev.data ?? {};
+  turn.endSeq = ev.seq;
+  turn.endedAt = ev.ts;
+  const status = String(d["status"] ?? "");
+  turn.status = ev.type === "interrupted" ? status || "interrupted" : status || "completed";
+  const files = d["produced_files"];
+  if (Array.isArray(files)) {
+    turn.producedFiles = files.map((x) => String(x ?? "")).filter(Boolean);
+  }
+  if (typeof d["iterations"] === "number") turn.iterations = d["iterations"];
+  const startMs = Date.parse(turn.startedAt);
+  const endMs = Date.parse(ev.ts);
+  if (Number.isFinite(startMs) && Number.isFinite(endMs) && endMs >= startMs) {
+    turn.durationMs = endMs - startMs;
+  }
+}
+function buildTurnIndex(events) {
+  const out = [];
+  let cur = null;
+  let toolSeen = /* @__PURE__ */ new Set();
+  for (const ev of events) {
+    if (ev.type === "turn_start") {
+      cur = newTurnEntry(ev, String(ev.data?.["input"] ?? ""));
+      toolSeen = /* @__PURE__ */ new Set();
+      out.push(cur);
+      continue;
+    }
+    if (!cur) continue;
+    if (ev.type === "turn_end" || ev.type === "interrupted") {
+      closeTurnEntry(cur, ev);
+      cur = null;
+      continue;
+    }
+    applyTurnEvent(cur, ev, toolSeen);
+  }
+  for (const t of out) {
+    if (!t.endedAt && t.error) t.status = "error";
+  }
+  return out;
+}
+function summaryFromEntry(t) {
+  return {
+    startSeq: t.startSeq,
+    endSeq: t.endSeq,
+    startedAt: t.startedAt,
+    endedAt: t.endedAt,
+    status: t.status,
+    input: t.inputs[0]?.text ?? "",
+    reply: t.replyPreview,
+    llmCalls: t.llmCalls,
+    toolCalls: t.toolCalls,
+    tokensIn: t.tokensIn,
+    tokensOut: t.tokensOut,
+    iterations: t.iterations,
+    durationMs: t.durationMs,
+    error: t.error,
+    inputs: t.inputs,
+    userCount: t.inputs.length,
+    replySeq: t.replySeq,
+    producedFiles: t.producedFiles
+  };
+}
 function isAffirmative(answer) {
   const a = answer.trim().toLowerCase();
   if (!a) return false;
@@ -9874,6 +10470,10 @@ var SessionManager = class {
   opts;
   runtimes = /* @__PURE__ */ new Map();
   // sessionId → runtime
+  /** 轮次索引的内存副本（运行中的轮比磁盘索引新；重启后为空） */
+  turnIndexCache = /* @__PURE__ */ new Map();
+  /** 进行中的索引重建任务（并发请求合并到同一个） */
+  turnIndexBuilds = /* @__PURE__ */ new Map();
   /** 全局通知 SSE 订阅者（控制台通知中心） */
   notificationSubs = /* @__PURE__ */ new Set();
   /**
@@ -9928,6 +10528,17 @@ var SessionManager = class {
     rt.status = status;
     this._emitNotify(rt, "session_status", this._statusData(rt));
   }
+  /**
+   * 通知里的「最近一条用户消息」：截断到 LAST_USER_MESSAGE_MAX。
+   *
+   * 三处共用（session_status / turn_completed / turn_stopped），避免各自写一遍
+   * 截断规则后长度不一致——控制台弹窗与任务列表会显示同一句话的两个版本。
+   */
+  _lastMessage(rt) {
+    const text = (rt.lastInput ?? "").trim();
+    if (!text) return null;
+    return text.length > LAST_USER_MESSAGE_MAX ? `${text.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : text;
+  }
   /**
    * session_status 通知载荷：状态 + 最近一条用户消息（截断）。
    *
@@ -9936,10 +10547,24 @@ var SessionManager = class {
    */
   _statusData(rt) {
     const data = { status: rt.status };
-    const text = (rt.lastInput ?? "").trim();
-    if (text) {
-      data.lastUserMessage = text.length > LAST_USER_MESSAGE_MAX ? `${text.slice(0, LAST_USER_MESSAGE_MAX)}\u2026` : text;
-    }
+    if (rt.lastStartedAt) data.lastStartedAt = rt.lastStartedAt;
+    const msg = this._lastMessage(rt);
+    if (msg) data.lastUserMessage = msg;
+    return data;
+  }
+  /**
+   * 任务结束类通知（完成 / 达到迭代上限）的载荷：在 turn_end 数据之外补上
+   * 「会话名 + 最后一条用户消息」。
+   *
+   * 控制台右下角的完成弹窗要说明「哪个会话、用户让它做了什么」。这些字段
+   * 以节点侧为准随通知一起下发，前端就不必依赖快照（nodeInfo / session_status）
+   * 是否已经到达——刚打开页面或通知乱序时才不会退化成只剩一句「任务已完成」。
+   */
+  _turnEndData(rt, eventData, extra) {
+    const data = { ...eventData, ...extra };
+    if (rt.name) data.sessionName = rt.name;
+    const msg = this._lastMessage(rt);
+    if (msg) data.lastUserMessage = msg;
     return data;
   }
   /** 触发通知回调（无 handler 时为空操作，异常隔离不冒泡） */
@@ -10096,6 +10721,7 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
       this.runtimes.delete(sessionId);
     }
     this.store.deleteSession(tenantId, sessionId);
+    this.turnIndexCache.delete(sessionId);
     this._publishNotify(tenantId, {
       kind: "session_status",
       sessionId,
@@ -10139,6 +10765,7 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
         throw new ApiError(409, "busy", "\u4F1A\u8BDD\u6B63\u5728\u8FD0\u884C\u4E2D");
       }
       rt.engine.queueSteering(input);
+      if (rt.pendingSteers.length === 0) rt.steerBaseInput = rt.lastInput;
       rt.pendingSteers.push(input);
       this._recordLastInput(rt, input);
       return "steered";
@@ -10171,9 +10798,42 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
     const rt = this._getOrLoadRuntime(tenant, sessionId);
     if (!rt.engine) throw new ApiError(409, "not_running", "\u4F1A\u8BDD\u672A\u5728\u8FD0\u884C\u4E2D");
     rt.engine.queueSteering(text);
+    if (rt.pendingSteers.length === 0) rt.steerBaseInput = rt.lastInput;
     rt.pendingSteers.push(text);
     this._recordLastInput(rt, text);
   }
+  /**
+   * 撤销一条尚未注入的补充信息（用户反悔）。
+   *
+   * 队列里的项还没进聊天流，此时只能靠中断整个任务来「收回」代价太大。
+   * index 取自 GET /state 的 pendingSteers（与前端展示顺序一致），两侧同时删：
+   * 只删前端那份，引擎下一迭代仍会把它注入对话；只删引擎那份，队列里会残留
+   * 一条永远不注入的条目。
+   *
+   * 若撤的正是「最近用户指令」，把它还原成队列里的上一条、或本轮被覆盖前的
+   * 指令——否则工作台还会显示这条已经被取消的内容。
+   *
+   * @returns 剩余待注入队列（前端据此刷新提示区）
+   */
+  unsteer(tenant, sessionId, index) {
+    const rt = this._getOrLoadRuntime(tenant, sessionId);
+    if (!rt.engine || !rt.runTask) {
+      throw new ApiError(409, "not_running", "\u4F1A\u8BDD\u672A\u5728\u8FD0\u884C\u4E2D");
+    }
+    if (!Number.isInteger(index) || index < 0 || index >= rt.pendingSteers.length) {
+      throw new ApiError(409, "already_injected", "\u8FD9\u6761\u8865\u5145\u4FE1\u606F\u5DF2\u8FDB\u5165\u5BF9\u8BDD\uFF0C\u65E0\u6CD5\u64A4\u9500");
+    }
+    const [removed] = rt.pendingSteers.splice(index, 1);
+    if (removed !== void 0) {
+      rt.engine.removeSteering(removed);
+      if (removed === rt.lastInput) {
+        rt.lastInput = rt.pendingSteers.length > 0 ? rt.pendingSteers[rt.pendingSteers.length - 1] : rt.steerBaseInput;
+        this._persist(rt);
+        this._emitNotify(rt, "session_status", this._statusData(rt));
+      }
+    }
+    return [...rt.pendingSteers];
+  }
   /**
    * 已提交、尚未注入当前任务的补充信息。
    *
@@ -10606,44 +11266,214 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
       status: rt.status
     };
   }
-  /** 增量事件（since 游标；无内存运行时则从磁盘读全量） */
-  eventsSince(tenantId, sessionId, since) {
+  /**
+   * 事件分页（向前 / 向后两种方向）。
+   *
+   * - `since`：取 seq > since（实时增量 / 重连补齐）
+   * - `before`：取 seq < before（控制台滚到顶部加载更早的对话）
+   * - `maxBytes`：单次回执的字节预算（默认沿用 EVENTS_ACK_MAX_BYTES）
+   *
+   * 两者同时给出时按 `since`（向后）处理。`hasMore` 只对向前翻页有意义：
+   * 表示本页最早一条之前还有更早的事件。
+   *
+   * 向前翻页一律走磁盘：内存缓冲只保留最近 EVENT_BUFFER_MAX 条，
+   * 更早的事件只在 events.jsonl 里。
+   */
+  eventsPage(tenantId, sessionId, opts = {}) {
     const __t0 = dbgNow();
+    const maxBytes = opts.maxBytes && opts.maxBytes > 0 ? opts.maxBytes : EVENTS_ACK_MAX_BYTES;
     const rt = this.runtimes.get(sessionId);
+    if (opts.before !== void 0) {
+      const since2 = opts.since ?? 0;
+      const page = this.store.loadEventPage(tenantId, sessionId, {
+        before: opts.before,
+        maxBytes
+      });
+      const ev2 = since2 > 0 ? page.events.filter((e) => e.seq > since2) : page.events;
+      dbgMs(
+        "session.eventsPage(before/\u78C1\u76D8)",
+        __t0,
+        // [dbg]
+        `sid=${sessionId.slice(0, 8)} since=${since2} before=${opts.before} out=${ev2.length} more=${page.hasMore}`
+      );
+      return {
+        events: ev2,
+        latestSeq: rt?.seq ?? page.events.at(-1)?.seq ?? 0,
+        earliestSeq: ev2[0]?.seq ?? 0,
+        hasMore: page.hasMore
+      };
+    }
+    const since = opts.since ?? 0;
     if (rt) {
-      const ev2 = this._boundedTail(rt.events.filter((e) => e.seq > since));
+      const ev2 = this._boundedTail(rt.events.filter((e) => e.seq > since), maxBytes);
       dbgMs(
-        "session.eventsSince(\u5185\u5B58)",
+        "session.eventsPage(\u5185\u5B58)",
         __t0,
         // [dbg]
         `sid=${sessionId.slice(0, 8)} since=${since} in=${rt.events.length} out=${ev2.length}`
       );
-      return { events: ev2, latestSeq: rt.seq };
+      return {
+        events: ev2,
+        latestSeq: rt.seq,
+        earliestSeq: ev2[0]?.seq ?? 0,
+        // 内存缓冲被截断（或 since 早于缓冲起点）时，磁盘上可能还有更早的
+        hasMore: !!ev2.length && ev2[0].seq > (rt.events[0]?.seq ?? 0)
+      };
     }
     const all = this.store.loadEventsTail(tenantId, sessionId, EVENTS_ACK_MAX_BYTES * 2);
-    const ev = this._boundedTail(all.filter((e) => e.seq > since));
+    const ev = this._boundedTail(
+      all.filter((e) => e.seq > since),
+      maxBytes
+    );
     dbgMs(
-      "session.eventsSince(\u78C1\u76D8)",
+      "session.eventsPage(\u78C1\u76D8)",
       __t0,
       // [dbg]
       `sid=${sessionId.slice(0, 8)} since=${since} loaded=${all.length} out=${ev.length}`
     );
     return {
       events: ev,
-      latestSeq: all.at(-1)?.seq ?? 0
+      latestSeq: all.at(-1)?.seq ?? 0,
+      earliestSeq: ev[0]?.seq ?? 0,
+      // 读的是文件尾部窗口：窗口已满说明更早的事件还在文件里
+      hasMore: all.length > 0 && ev.length > 0 && ev[0].seq > all[0].seq
+    };
+  }
+  /**
+   * 兼容旧调用：只按 since 取增量。
+   * @deprecated 新代码用 eventsPage（支持 before 向前翻页）
+   */
+  eventsSince(tenantId, sessionId, since) {
+    const r = this.eventsPage(tenantId, sessionId, { since });
+    return { events: r.events, latestSeq: r.latestSeq };
+  }
+  /**
+   * 「按 turn 汇总」的轻量列表：只回标题与统计，点开某一轮再单独拉该轮回复。
+   *
+   * 数据来自 turns.ndjson 索引（派生自事件流），读取成本与会话历史长度无关：
+   * 老会话首次访问时后台/本请求内重建一次，之后每页只读几 KB。
+   *
+   * - `before`：只返回 startSeq < before 的轮次（向前翻页）
+   * - `turns` 按时间升序；`hasMore` 表示更早还有轮次
+   */
+  async sessionTurns(tenantId, sessionId, opts = {}) {
+    const limit = Math.min(Math.max(opts.limit ?? TURNS_DEFAULT_LIMIT, 1), 100);
+    const entries = await this._ensureTurnIndex(tenantId, sessionId);
+    const before = opts.before;
+    const endIdx = before === void 0 ? entries.length : entries.findIndex((t) => t.startSeq >= before);
+    const end = endIdx < 0 ? entries.length : endIdx;
+    const start = Math.max(0, end - limit);
+    const picked = entries.slice(start, end);
+    return {
+      turns: picked.map(summaryFromEntry),
+      hasMore: start > 0,
+      earliestSeq: picked[0]?.startSeq ?? 0,
+      total: entries.length,
+      userTotal: entries.reduce((n, t) => n + t.inputs.length, 0)
+    };
+  }
+  /**
+   * 某一轮的用户消息与最终回复（含产出文件）。
+   *
+   * 只读两条索引记录 + 尾部一个事件页，不会因该轮工具输出很大而变慢：
+   * 回复正文紧邻 turn_end，按 replySeq 精确读即可。
+   */
+  async sessionTurnReply(tenantId, sessionId, startSeq) {
+    const entries = await this._ensureTurnIndex(tenantId, sessionId);
+    const turn = entries.find((t) => t.startSeq === startSeq);
+    if (!turn) throw new ApiError(404, "not_found", "\u8F6E\u6B21\u4E0D\u5B58\u5728");
+    let reply = null;
+    let truncated = false;
+    if (turn.replySeq !== void 0) {
+      const page = this.store.loadEventPage(tenantId, sessionId, {
+        before: turn.replySeq + 1,
+        maxBytes: TURN_REPLY_MAX_BYTES
+      });
+      const ev = page.events.find((e) => e.seq === turn.replySeq);
+      if (ev && ev.type === "assistant_message") {
+        const text = String(ev.data?.["text"] ?? "");
+        if (text.length > TURN_REPLY_MAX_TEXT) {
+          reply = { seq: ev.seq, ts: ev.ts, text: text.slice(0, TURN_REPLY_MAX_TEXT) };
+          truncated = true;
+        } else {
+          reply = { seq: ev.seq, ts: ev.ts, text };
+        }
+      }
+    }
+    return {
+      startSeq: turn.startSeq,
+      endSeq: turn.endSeq,
+      status: turn.status,
+      startedAt: turn.startedAt,
+      endedAt: turn.endedAt,
+      userMessages: turn.inputs,
+      reply,
+      truncated,
+      producedFiles: turn.producedFiles
     };
   }
+  /**
+   * 取轮次索引；缺失时从事件流重建（同一会话的并发请求共用一个重建任务）。
+   *
+   * 索引是派生数据：损坏/落后都只需重建，不影响会话本身。
+   */
+  /**
+   * 取轮次索引；缺失/落后时从事件流重建（同一会话的并发请求共用一个重建任务）。
+   *
+   * 索引是派生数据：损坏或落后都只需重建，不影响会话本身。
+   */
+  async _ensureTurnIndex(tenantId, sessionId) {
+    let entries = this._mergeTurnIndex(tenantId, sessionId);
+    if (entries.length > 0 && !this.runtimes.has(sessionId)) {
+      const last = entries[entries.length - 1];
+      const tail = this.store.loadEventsTail(tenantId, sessionId, 64 * 1024);
+      const newTurnStarted = tail.some((e) => e.type === "turn_start" && e.seq > last.endSeq);
+      if (newTurnStarted || last.status === "running") entries = [];
+    }
+    if (entries.length > 0) return entries;
+    const pending = this.turnIndexBuilds.get(sessionId);
+    if (pending) return pending;
+    const task = this._rebuildTurnIndex(tenantId, sessionId).finally(() => {
+      this.turnIndexBuilds.delete(sessionId);
+    });
+    this.turnIndexBuilds.set(sessionId, task);
+    return task;
+  }
+  /** 合并磁盘索引与内存索引（内存版本更新，同一 startSeq 以内存为准） */
+  _mergeTurnIndex(tenantId, sessionId) {
+    const byStart = /* @__PURE__ */ new Map();
+    for (const e of this.store.loadTurnIndex(tenantId, sessionId)) byStart.set(e.startSeq, e);
+    for (const e of this.turnIndexCache.get(sessionId) ?? []) byStart.set(e.startSeq, e);
+    return [...byStart.values()].sort((a, b) => a.startSeq - b.startSeq);
+  }
+  /** 从 events.jsonl 顺序流式重建轮次索引（一次性，之后增量维护） */
+  async _rebuildTurnIndex(tenantId, sessionId) {
+    const __t0 = dbgNow();
+    const events = await this.store.readEventsAsync(tenantId, sessionId);
+    const entries = buildTurnIndex(events);
+    if (entries.length > 0) {
+      await this.store.saveTurnIndex(tenantId, sessionId, entries);
+      if (this.runtimes.has(sessionId)) this.turnIndexCache.set(sessionId, entries);
+    }
+    dbgMs(
+      "session._rebuildTurnIndex",
+      __t0,
+      // [dbg]
+      `sid=${sessionId.slice(0, 8)} events=${events.length} turns=${entries.length}`
+    );
+    return entries;
+  }
   /**
    * 按字节预算截取事件「尾部」（至少保留最后一条），确保 MQTT 回执远小于单包上限。
    * 供 get_events 使用：会话历史可任意大，但 MQTT 链路不能承载大包。
    */
-  _boundedTail(events) {
+  _boundedTail(events, maxBytes = EVENTS_ACK_MAX_BYTES) {
     const __t0 = dbgNow();
     let total = 0;
     let i = events.length;
     while (i > 0) {
       const size = Buffer.byteLength(JSON.stringify(events[i - 1]));
-      if (total > 0 && total + size > EVENTS_ACK_MAX_BYTES) break;
+      if (total > 0 && total + size > maxBytes) break;
       total += size;
       i -= 1;
     }
@@ -10763,6 +11593,7 @@ data: ${JSON.stringify(entry.data)}
       nameSource: rec.nameSource,
       taskCount: rec.taskCount ?? 0,
       lastCompletedAt: rec.lastCompletedAt,
+      lastStartedAt: rec.lastStartedAt,
       naming: false,
       turnStartedAt: 0
     };
@@ -10780,10 +11611,11 @@ data: ${JSON.stringify(entry.data)}
   }
   /** 装配引擎并启动一轮 Turn（供 submitTurn / submitOrSteer 复用） */
   _startTurn(rt, input) {
+    const engine = this._buildEngine(rt.tenant, rt, true);
     rt.lastInput = input;
-    this._setStatus(rt, "running");
     rt.turnStartedAt = Date.now();
-    const engine = this._buildEngine(rt.tenant, rt, true);
+    rt.lastStartedAt = new Date(rt.turnStartedAt).toISOString();
+    this._setStatus(rt, "running");
     rt.engine = engine;
     this._persist(rt);
     rt.runTask = this._drive(rt, engine.run(input));
@@ -10842,18 +11674,18 @@ data: ${JSON.stringify(entry.data)}
                 this._setStatus(rt, "completed");
                 rt.taskCount += 1;
                 rt.lastCompletedAt = (/* @__PURE__ */ new Date()).toISOString();
-                this._emitNotify(rt, "turn_completed", {
-                  ...event.data,
-                  summary,
-                  durationMs
-                });
+                this._emitNotify(
+                  rt,
+                  "turn_completed",
+                  this._turnEndData(rt, event.data, { summary, durationMs })
+                );
               } else if (status === "max_iterations_exceeded") {
                 this._setStatus(rt, "stopped");
-                this._emitNotify(rt, "turn_stopped", {
-                  ...event.data,
-                  summary,
-                  durationMs
-                });
+                this._emitNotify(
+                  rt,
+                  "turn_stopped",
+                  this._turnEndData(rt, event.data, { summary, durationMs })
+                );
               }
               this._persist(rt);
               if (status === "completed" && engine && shouldAutoName(rt.taskCount, rt.nameSource)) {
@@ -10864,7 +11696,8 @@ data: ${JSON.stringify(entry.data)}
             case "error" /* ERROR */:
               this._setStatus(rt, "error");
               this._persist(rt);
-              this._emitNotify(rt, "error", event.data);
+              this._emitNotify(rt, "error", this._turnEndData(rt, event.data, {}));
+              healBuiltinOnAuthFailure(this.store, String(event.data["error"] ?? ""));
               break;
             case "interrupted" /* INTERRUPTED */:
               this._setStatus(rt, "interrupted");
@@ -10890,9 +11723,17 @@ data: ${JSON.stringify(entry.data)}
       this._setStatus(rt, "error");
       this._persist(rt);
     } finally {
+      if (rt.turnIndex) {
+        const turn = rt.turnIndex;
+        if (!turn.endedAt && turn.error) turn.status = "error";
+        this._appendTurnIndex(rt, turn);
+        rt.turnIndex = void 0;
+        rt.turnToolKeys = void 0;
+      }
       rt.runTask = null;
       rt.engine = null;
       rt.pendingSteers = [];
+      rt.steerBaseInput = void 0;
     }
   }
   _buffer(rt, event) {
@@ -10905,6 +11746,7 @@ data: ${JSON.stringify(entry.data)}
     rt.events.push(entry);
     if (rt.events.length > EVENT_BUFFER_MAX) rt.events.shift();
     void this.store.appendEvent(rt.tenantId, rt.sessionId, entry);
+    this._trackTurnIndex(rt, entry);
     for (const res of rt.subscribers) this._sseSend(res, entry);
     this._broadcastSessionEvent(rt.tenantId, rt.sessionId, entry);
     try {
@@ -10912,6 +11754,42 @@ data: ${JSON.stringify(entry.data)}
     } catch {
     }
   }
+  /**
+   * 维护运行中轮次的索引（in-memory 记账 + 关键节点落盘）。
+   *
+   * 落盘只在「开轮 / 补充消息 / 收轮」发生，delta 事件仅推进 endSeq 与统计，
+   * 因此索引写入量是每轮 2~3 行，与会话事件量无关。
+   */
+  _trackTurnIndex(rt, ev) {
+    if (ev.type === "turn_start") {
+      const turn2 = newTurnEntry(ev, String(ev.data?.["input"] ?? ""));
+      rt.turnIndex = turn2;
+      rt.turnToolKeys = /* @__PURE__ */ new Set();
+      this._appendTurnIndex(rt, turn2);
+      return;
+    }
+    const turn = rt.turnIndex;
+    if (!turn) return;
+    if (ev.type === "turn_end" || ev.type === "interrupted") {
+      closeTurnEntry(turn, ev);
+      this._appendTurnIndex(rt, turn);
+      rt.turnIndex = void 0;
+      rt.turnToolKeys = void 0;
+      return;
+    }
+    if (!rt.turnToolKeys) rt.turnToolKeys = /* @__PURE__ */ new Set();
+    const inputsBefore = turn.inputs.length;
+    applyTurnEvent(turn, ev, rt.turnToolKeys);
+    if (turn.inputs.length !== inputsBefore) this._appendTurnIndex(rt, turn);
+  }
+  /** 写入一版轮次索引（内存副本 + 异步落盘） */
+  _appendTurnIndex(rt, turn) {
+    const cached3 = this.turnIndexCache.get(rt.sessionId) ?? [];
+    const i = cached3.findIndex((t) => t.startSeq === turn.startSeq);
+    const next = i >= 0 ? [...cached3.slice(0, i), turn, ...cached3.slice(i + 1)] : [...cached3, turn];
+    this.turnIndexCache.set(rt.sessionId, next);
+    void this.store.appendTurnIndex(rt.tenantId, rt.sessionId, turn);
+  }
   /** 回收内存 run 任务（释放引用交给 GC；磁盘状态保持不动） */
   _recycleRunTask(rt) {
     rt.runTask = null;
@@ -10949,6 +11827,7 @@ data: ${JSON.stringify(entry.data)}
       nameSource: rt.nameSource,
       taskCount: rt.taskCount,
       lastCompletedAt: rt.lastCompletedAt,
+      lastStartedAt: rt.lastStartedAt,
       modelOverridden: rt.modelOverridden,
       providerId: rt.providerId,
       permissionMode: rt.permissionMode,
@@ -11249,7 +12128,6 @@ var path25 = __toESM(require("path"), 1);
 // src/server/projects.ts
 init_cjs_shims();
 var path21 = __toESM(require("path"), 1);
-var DEFAULT_MODEL = () => process.env.OPENAI_MODEL || process.env.MODEL || "gpt-4o";
 function toProjectSummary(store, tenant) {
   return {
     id: tenant.id,
@@ -11359,6 +12237,7 @@ function allSessionStates(store, manager) {
           name: s.name ?? null,
           status: s.status,
           lastUserMessage: lastUserMessage(s),
+          lastStartedAt: s.lastStartedAt ?? null,
           lastCompletedAt: lastCompletedAt(s)
         });
       }
@@ -11388,7 +12267,7 @@ function createProject(store, input) {
     id,
     name: explicitName || defaultName,
     apiKey: generateApiKey(),
-    model: typeof raw.model === "string" && raw.model.trim() ? raw.model.trim() : DEFAULT_MODEL(),
+    model: typeof raw.model === "string" && raw.model.trim() ? raw.model.trim() : defaultTenantModel(store),
     provider: {
       apiKey: typeof raw.providerApiKey === "string" && raw.providerApiKey.trim() ? raw.providerApiKey.trim() : void 0,
       baseURL: typeof raw.baseURL === "string" && raw.baseURL.trim() ? raw.baseURL.trim() : void 0
@@ -11413,7 +12292,7 @@ function buildNodeInfo(store, opts) {
     nodeId: opts.nodeId ?? ensureNodeId(store),
     platform: process.platform,
     mode: process.env.NODE_MODE ?? "standalone",
-    version: "0.2.15",
+    version: "0.2.20",
     admin: opts.admin,
     projects: opts.projects
   };
@@ -11779,9 +12658,133 @@ function makeDirIn(parentInput, name) {
 init_cjs_shims();
 var fs20 = __toESM(require("fs"), 1);
 var path23 = __toESM(require("path"), 1);
+
+// src/server/zipArchive.ts
+init_cjs_shims();
+var zlib = __toESM(require("zlib"), 1);
+var MAX_ZIP_ENTRIES = 2e4;
+var LOCAL_SIG = 67324752;
+var CENTRAL_SIG = 33639248;
+var EOCD_SIG = 101010256;
+var FLAG_UTF8 = 2048;
+var METHOD_STORE = 0;
+var METHOD_DEFLATE = 8;
+var CRC_TABLE = (() => {
+  const table = new Int32Array(256);
+  for (let n = 0; n < 256; n++) {
+    let c = n;
+    for (let k = 0; k < 8; k++) {
+      c = c & 1 ? 3988292384 ^ c >>> 1 : c >>> 1;
+    }
+    table[n] = c;
+  }
+  return table;
+})();
+function crc32(buf) {
+  let c = -1;
+  for (let i = 0; i < buf.length; i++) {
+    c = CRC_TABLE[(c ^ buf[i]) & 255] ^ c >>> 8;
+  }
+  return (c ^ -1) >>> 0;
+}
+function dosDateTime(d) {
+  const year = Math.max(1980, d.getFullYear());
+  return {
+    time: d.getHours() << 11 | d.getMinutes() << 5 | d.getSeconds() >> 1,
+    date: year - 1980 << 9 | d.getMonth() + 1 << 5 | d.getDate()
+  };
+}
+function buildZip(entries) {
+  if (entries.length > MAX_ZIP_ENTRIES) {
+    throw new Error(`\u5F52\u6863\u6761\u76EE\u8FC7\u591A\uFF08${entries.length} > ${MAX_ZIP_ENTRIES}\uFF09`);
+  }
+  const chunks = [];
+  const central = [];
+  let offset = 0;
+  for (const e of entries) {
+    const name = Buffer.from(e.name, "utf-8");
+    const isDir = e.name.endsWith("/");
+    const raw = isDir ? Buffer.alloc(0) : e.data ?? Buffer.alloc(0);
+    let method = METHOD_STORE;
+    let body = raw;
+    if (!isDir && raw.length > 0) {
+      const deflated = zlib.deflateRawSync(raw, { level: 6 });
+      if (deflated.length < raw.length) {
+        method = METHOD_DEFLATE;
+        body = deflated;
+      }
+    }
+    const crc = isDir ? 0 : crc32(raw);
+    const { time, date } = dosDateTime(e.mtime ?? /* @__PURE__ */ new Date());
+    const local = Buffer.alloc(30);
+    local.writeUInt32LE(LOCAL_SIG, 0);
+    local.writeUInt16LE(20, 4);
+    local.writeUInt16LE(FLAG_UTF8, 6);
+    local.writeUInt16LE(method, 8);
+    local.writeUInt16LE(time, 10);
+    local.writeUInt16LE(date, 12);
+    local.writeUInt32LE(crc, 14);
+    local.writeUInt32LE(body.length, 18);
+    local.writeUInt32LE(raw.length, 22);
+    local.writeUInt16LE(name.length, 26);
+    local.writeUInt16LE(0, 28);
+    chunks.push(local, name);
+    if (body.length > 0) chunks.push(body);
+    central.push({
+      name,
+      method,
+      crc,
+      csize: body.length,
+      usize: raw.length,
+      offset,
+      time,
+      date,
+      isDir
+    });
+    offset += local.length + name.length + body.length;
+  }
+  const cdStart = offset;
+  for (const c of central) {
+    const head = Buffer.alloc(46);
+    head.writeUInt32LE(CENTRAL_SIG, 0);
+    head.writeUInt16LE(20, 4);
+    head.writeUInt16LE(20, 6);
+    head.writeUInt16LE(FLAG_UTF8, 8);
+    head.writeUInt16LE(c.method, 10);
+    head.writeUInt16LE(c.time, 12);
+    head.writeUInt16LE(c.date, 14);
+    head.writeUInt32LE(c.crc, 16);
+    head.writeUInt32LE(c.csize, 20);
+    head.writeUInt32LE(c.usize, 24);
+    head.writeUInt16LE(c.name.length, 28);
+    head.writeUInt16LE(0, 30);
+    head.writeUInt16LE(0, 32);
+    head.writeUInt16LE(0, 34);
+    head.writeUInt16LE(0, 36);
+    head.writeUInt32LE(c.isDir ? 16 : 0, 38);
+    head.writeUInt32LE(c.offset, 42);
+    chunks.push(head, c.name);
+    offset += head.length + c.name.length;
+  }
+  const eocd = Buffer.alloc(22);
+  eocd.writeUInt32LE(EOCD_SIG, 0);
+  eocd.writeUInt16LE(0, 4);
+  eocd.writeUInt16LE(0, 6);
+  eocd.writeUInt16LE(central.length, 8);
+  eocd.writeUInt16LE(central.length, 10);
+  eocd.writeUInt32LE(offset - cdStart, 12);
+  eocd.writeUInt32LE(cdStart, 16);
+  eocd.writeUInt16LE(0, 20);
+  chunks.push(eocd);
+  return Buffer.concat(chunks);
+}
+
+// src/server/projectFiles.ts
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 var MAX_DOWNLOAD_BYTES = 16 * 1024 * 1024;
+var MAX_BINARY_BYTES = 2.5 * 1024 * 1024;
 var MAX_ENTRIES2 = 2e3;
+var MAX_ZIP_BYTES = 100 * 1024 * 1024;
 function toPosix(p) {
   return p.split(path23.sep).join("/");
 }
@@ -11928,6 +12931,26 @@ function writeProjectFile(workspaceRoot, relPath, content) {
   }
   return { path: toPosix(path23.relative(base, file)), size: buf.length };
 }
+function writeProjectFileBase64(workspaceRoot, relPath, base64) {
+  const base = projectRoot(workspaceRoot);
+  const rel = (relPath ?? "").trim();
+  if (!rel) throw new Error("\u6587\u4EF6\u8DEF\u5F84\u4E0D\u80FD\u4E3A\u7A7A");
+  const file = resolveWithin(base, rel);
+  const b64 = String(base64 ?? "").replace(/\s+/g, "");
+  if (!b64) throw new Error("\u5185\u5BB9\u4E0D\u80FD\u4E3A\u7A7A");
+  if (!/^[A-Za-z0-9+/]+={0,2}$/.test(b64)) throw new Error("\u5185\u5BB9\u4E0D\u662F\u5408\u6CD5\u7684 base64");
+  if (Math.floor(b64.length * 3 / 4) > MAX_BINARY_BYTES) {
+    throw new Error(`\u5185\u5BB9\u8D85\u8FC7 ${MAX_BINARY_BYTES / (1024 * 1024)}MB \u4E0A\u9650\uFF0C\u65E0\u6CD5\u4FDD\u5B58`);
+  }
+  const buf = Buffer.from(b64, "base64");
+  try {
+    fs20.mkdirSync(path23.dirname(file), { recursive: true });
+    fs20.writeFileSync(file, buf);
+  } catch (e) {
+    throw new Error(`\u5199\u5165\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+  }
+  return { path: toPosix(path23.relative(base, file)), size: buf.length };
+}
 function createProjectDir(workspaceRoot, relPath) {
   const base = projectRoot(workspaceRoot);
   const rel = (relPath ?? "").trim();
@@ -12001,6 +13024,170 @@ function searchProjectFiles(workspaceRoot, query) {
   walk(base, "");
   return out;
 }
+function deleteProjectPaths(workspaceRoot, relPaths) {
+  const base = projectRoot(workspaceRoot);
+  const out = { deleted: [], failed: [] };
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of relPaths ?? []) {
+    const rel = (raw ?? "").trim().replace(/^[/\\]+/, "");
+    if (!rel) {
+      out.failed.push({ path: String(raw ?? ""), error: "\u4E0D\u80FD\u5220\u9664\u9879\u76EE\u6839\u76EE\u5F55" });
+      continue;
+    }
+    if (seen.has(rel)) continue;
+    seen.add(rel);
+    let abs;
+    try {
+      abs = resolveWithin(base, rel);
+    } catch (e) {
+      out.failed.push({ path: rel, error: e instanceof Error ? e.message : String(e) });
+      continue;
+    }
+    if (path23.resolve(abs) === path23.resolve(base)) {
+      out.failed.push({ path: rel, error: "\u4E0D\u80FD\u5220\u9664\u9879\u76EE\u6839\u76EE\u5F55" });
+      continue;
+    }
+    if (!fs20.existsSync(abs)) {
+      out.failed.push({ path: rel, error: "\u6587\u4EF6\u4E0D\u5B58\u5728" });
+      continue;
+    }
+    try {
+      fs20.rmSync(abs, { recursive: true, force: true });
+      out.deleted.push(toPosix(path23.relative(base, abs)));
+    } catch (e) {
+      out.failed.push({ path: rel, error: e instanceof Error ? e.message : String(e) });
+    }
+  }
+  return out;
+}
+function formatBytes(n) {
+  if (n >= 1024 * 1024) return `${(n / (1024 * 1024)).toFixed(1)} MB`;
+  if (n >= 1024) return `${(n / 1024).toFixed(1)} KB`;
+  return `${n} B`;
+}
+function renameProjectPath(workspaceRoot, relPath, newName) {
+  const base = projectRoot(workspaceRoot);
+  const rel = (relPath ?? "").trim().replace(/^[/\\]+/, "");
+  if (!rel) throw new Error("\u4E0D\u80FD\u91CD\u547D\u540D\u9879\u76EE\u6839\u76EE\u5F55");
+  const abs = resolveWithin(base, rel);
+  const name = (newName ?? "").trim();
+  if (!name) throw new Error("\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
+  if (name === "." || name === "..") throw new Error("\u540D\u79F0\u975E\u6CD5");
+  if (/[/\\]/.test(name)) throw new Error("\u540D\u79F0\u4E0D\u80FD\u5305\u542B\u8DEF\u5F84\u5206\u9694\u7B26");
+  if (!fs20.existsSync(abs)) throw new Error("\u6587\u4EF6\u4E0D\u5B58\u5728");
+  const parent = path23.dirname(abs);
+  const target = path23.join(parent, name);
+  if (!isWithinRoot(base, target)) throw new Error("\u8DEF\u5F84\u8D8A\u754C\uFF08\u8D85\u51FA\u9879\u76EE\u5DE5\u4F5C\u533A\uFF09");
+  if (fs20.existsSync(target)) {
+    let same = false;
+    try {
+      const a = fs20.statSync(target);
+      const b = fs20.statSync(abs);
+      same = a.ino === b.ino && a.dev === b.dev;
+    } catch {
+      same = false;
+    }
+    if (!same) throw new Error(`\u5DF2\u5B58\u5728\u540C\u540D\u6587\u4EF6\u6216\u76EE\u5F55: ${name}`);
+  }
+  if (path23.resolve(target) === path23.resolve(abs)) {
+    return { from: toPosix(path23.relative(base, abs)), path: toPosix(path23.relative(base, abs)) };
+  }
+  try {
+    fs20.renameSync(abs, target);
+  } catch (e) {
+    throw new Error(`\u91CD\u547D\u540D\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+  }
+  return { from: toPosix(path23.relative(base, abs)), path: toPosix(path23.relative(base, target)) };
+}
+function zipProjectPaths(workspaceRoot, relPaths, opts = {}) {
+  const base = projectRoot(workspaceRoot);
+  const maxBytes = opts.maxBytes && opts.maxBytes > 0 ? opts.maxBytes : MAX_ZIP_BYTES;
+  const rels = (relPaths ?? []).map((x) => (x ?? "").trim().replace(/^[/\\]+/, ""));
+  if (rels.length === 0) throw new Error("\u8BF7\u9009\u62E9\u8981\u538B\u7F29\u7684\u6587\u4EF6\u6216\u76EE\u5F55");
+  if (rels.some((r) => !r)) throw new Error("\u4E0D\u80FD\u538B\u7F29\u9879\u76EE\u6839\u76EE\u5F55");
+  const targets = rels.map((rel) => ({ rel, abs: resolveWithin(base, rel) }));
+  const single = targets.length === 1 ? targets[0].abs : "";
+  const items = [];
+  let total = 0;
+  const overLimit = () => new Error(
+    `\u5171 ${formatBytes(total)}\uFF0C\u8D85\u8FC7 ${formatBytes(maxBytes)} \u4E0A\u9650\uFF0C\u4E0D\u652F\u6301\u538B\u7F29\u4E0B\u8F7D`
+  );
+  const walk = (absDir) => {
+    let dirents;
+    try {
+      dirents = fs20.readdirSync(absDir, { withFileTypes: true });
+    } catch {
+      return 0;
+    }
+    dirents.sort((a, b) => a.name.localeCompare(b.name));
+    let files = 0;
+    for (const d of dirents) {
+      if (d.isSymbolicLink()) continue;
+      const child = path23.join(absDir, d.name);
+      if (d.isDirectory()) {
+        files += walk(child);
+        continue;
+      }
+      if (!d.isFile()) continue;
+      let st;
+      try {
+        st = fs20.statSync(child);
+      } catch {
+        continue;
+      }
+      total += st.size;
+      if (total > maxBytes) throw overLimit();
+      if (items.length >= MAX_ZIP_ENTRIES) {
+        throw new Error(`\u5F52\u6863\u6761\u76EE\u8FC7\u591A\uFF08\u8D85\u8FC7 ${MAX_ZIP_ENTRIES} \u9879\uFF09\uFF0C\u8BF7\u7F29\u5C0F\u8303\u56F4\u540E\u518D\u8BD5`);
+      }
+      items.push({ abs: child, dir: false, size: st.size, mtime: st.mtime });
+      files++;
+    }
+    if (files === 0) {
+      let mtime = /* @__PURE__ */ new Date();
+      try {
+        mtime = fs20.statSync(absDir).mtime;
+      } catch {
+      }
+      items.push({ abs: absDir, dir: true, size: 0, mtime });
+    }
+    return files;
+  };
+  for (const t of targets) {
+    let st;
+    try {
+      st = fs20.statSync(t.abs);
+    } catch {
+      throw new Error(`\u6587\u4EF6\u4E0D\u5B58\u5728: ${t.rel}`);
+    }
+    if (st.isDirectory()) {
+      walk(t.abs);
+      continue;
+    }
+    total += st.size;
+    if (total > maxBytes) throw overLimit();
+    items.push({ abs: t.abs, dir: false, size: st.size, mtime: st.mtime });
+  }
+  const nameOf = (abs) => {
+    const rel = toPosix(path23.relative(single || base, abs));
+    return rel || path23.posix.basename(toPosix(abs));
+  };
+  const zipEntries = items.map((it) => {
+    const name2 = nameOf(it.abs);
+    if (it.dir) return { name: `${name2}/`, mtime: it.mtime };
+    return { name: name2, data: fs20.readFileSync(it.abs), mtime: it.mtime };
+  });
+  const buf = buildZip(zipEntries);
+  const first = targets[0].rel;
+  const name = single ? `${path23.posix.basename(toPosix(first))}.zip` : "archive.zip";
+  return {
+    name,
+    size: buf.length,
+    total,
+    entries: zipEntries.length,
+    base64: buf.toString("base64")
+  };
+}
 
 // src/server/projectOps.ts
 init_cjs_shims();
@@ -12330,6 +13517,7 @@ function projectStats(manager, tenantId) {
 
 // src/server/nodeHost.ts
 init_cjs_shims();
+var import_child_process = require("child_process");
 var fs21 = __toESM(require("fs"), 1);
 var os6 = __toESM(require("os"), 1);
 function diskInfo(pathStr) {
@@ -12344,6 +13532,64 @@ function diskInfo(pathStr) {
     return null;
   }
 }
+var PSEUDO_FS = /^(devfs|tmpfs|devtmpfs|proc|procfs|sysfs|none|udev|shm|mqueue|devpts|hugetlbfs|debugfs|tracefs|securityfs|pstore|bpf|configfs|fusectl|nsfs|autofs|efivarfs|ramfs|map)$/;
+function isInternalMount(mount) {
+  if (mount === "/") return false;
+  const prefixes = ["/proc", "/sys", "/run", "/snap"];
+  if (process.platform === "darwin") prefixes.push("/System/Volumes");
+  return prefixes.some((p) => mount === p || mount.startsWith(`${p}/`));
+}
+function readOnlyVolumes() {
+  const out = /* @__PURE__ */ new Set();
+  const res = (0, import_child_process.spawnSync)("mount", [], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] });
+  if (res.error || res.status !== 0 || !res.stdout) return out;
+  for (const line of res.stdout.split("\n")) {
+    const m = line.match(/^.+? on (.+?) \(([^)]*)\)$/);
+    if (!m || m[1] === "/") continue;
+    if (m[2].split(",").some((opt) => opt.trim() === "read-only")) out.add(m[1]);
+  }
+  return out;
+}
+function diskList(workspacePath) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  const push = (path36, total, free) => {
+    if (!path36 || seen.has(path36) || !Number.isFinite(total) || total <= 0) return;
+    seen.add(path36);
+    out.push({ path: path36, total, free });
+  };
+  if (process.platform === "win32") {
+    for (const letter of "CDEFGHIJKLMNOPQRSTUVWXYZ") {
+      const root = `${letter}:\\`;
+      const d = diskInfo(root);
+      if (d) push(root, d.total, d.free);
+    }
+  } else {
+    const readonly = process.platform === "darwin" ? readOnlyVolumes() : /* @__PURE__ */ new Set();
+    const res = (0, import_child_process.spawnSync)("df", ["-kP"], {
+      encoding: "utf-8",
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    if (!res.error && res.status === 0 && res.stdout) {
+      for (const line of res.stdout.split("\n").slice(1)) {
+        const m = line.trim().match(/^(\S+)\s+(\d+)\s+(\d+)\s+(\d+)\s+\d+%\s+(.+)$/);
+        if (!m || PSEUDO_FS.test(m[1])) continue;
+        if (/^\/dev\/loop\d+$/.test(m[1])) continue;
+        if (isInternalMount(m[5]) || readonly.has(m[5])) continue;
+        push(m[5], Number(m[2]) * 1024, Number(m[4]) * 1024);
+      }
+    }
+  }
+  const primary = diskInfo(workspacePath);
+  if (primary) {
+    const covered = out.some((d) => {
+      const root = d.path.endsWith("/") || d.path.endsWith("\\") ? d.path : `${d.path}/`;
+      return workspacePath === d.path || workspacePath.startsWith(root);
+    });
+    if (!covered) push(primary.path, primary.total, primary.free);
+  }
+  return out.sort((a, b) => b.total - a.total);
+}
 function networkInfo() {
   const out = [];
   const ifaces = os6.networkInterfaces();
@@ -12399,6 +13645,7 @@ function overview(store, manager) {
 function buildNodeHost(store, manager, diskPath) {
   const cpus2 = os6.cpus();
   const ov = overview(store, manager);
+  const disks = diskList(diskPath || process.cwd());
   return {
     nodeId: store.loadNodeId() ?? "",
     hostname: os6.hostname(),
@@ -12406,7 +13653,7 @@ function buildNodeHost(store, manager, diskPath) {
     arch: process.arch,
     release: os6.release(),
     uptimeSec: Math.round(os6.uptime()),
-    version: "0.2.15",
+    version: "0.2.20",
     mode: process.env.NODE_MODE ?? "standalone",
     cpu: {
       count: cpus2.length,
@@ -12416,6 +13663,7 @@ function buildNodeHost(store, manager, diskPath) {
     memory: { total: os6.totalmem(), free: os6.freemem() },
     network: networkInfo(),
     disk: diskInfo(diskPath || process.cwd()),
+    disks,
     ...ov
   };
 }
@@ -12549,6 +13797,7 @@ function parseApprovalDecision(raw) {
 }
 function createApp(store, manager, opts = {}) {
   setupServerHandlers(manager);
+  const updater = opts.updater ?? null;
   const routes = [
     // ---------- 会话管理 ----------
     {
@@ -12690,6 +13939,18 @@ function createApp(store, manager, opts = {}) {
         ok(res, { accepted: true });
       }
     },
+    {
+      method: "POST",
+      pattern: ["sessions", ":id", "steer", "remove"],
+      // 撤销未注入的补充信息
+      fn: (_req, res, { tenant, params, body }) => {
+        const index = Number(body?.index);
+        if (!Number.isInteger(index))
+          throw new ApiError(400, "bad_request", "index \u5FC5\u987B\u662F\u6574\u6570");
+        const pendingSteers = manager.unsteer(tenant, params["id"], index);
+        ok(res, { accepted: true, pendingSteers });
+      }
+    },
     {
       method: "POST",
       pattern: ["sessions", ":id", "interrupt"],
@@ -13220,6 +14481,30 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    {
+      // 二进制写入（图片编辑保存）：body = { path, base64 }
+      method: "POST",
+      pattern: ["files", "binary"],
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        try {
+          ok(
+            res,
+            writeProjectFileBase64(
+              tenant.workspaceRoot ?? null,
+              String(raw.path ?? ""),
+              String(raw.base64 ?? "")
+            )
+          );
+        } catch (e) {
+          throw new ApiError(
+            400,
+            "bad_request",
+            e instanceof Error ? e.message : String(e)
+          );
+        }
+      }
+    },
     // ---------- 项目终端（在工作区执行命令） ----------
     {
       method: "POST",
@@ -13570,6 +14855,21 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    {
+      method: "POST",
+      pattern: ["files", "delete"],
+      // 删除文件 / 目录（目录递归）；逐条返回失败原因
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        const paths = Array.isArray(raw.paths) ? raw.paths.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        try {
+          ok(res, deleteProjectPaths(tenant.workspaceRoot ?? null, paths));
+        } catch (e) {
+          throw new ApiError(400, "bad_request", e instanceof Error ? e.message : String(e));
+        }
+      }
+    },
     {
       method: "POST",
       pattern: ["files", "create"],
@@ -13589,6 +14889,41 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    {
+      method: "POST",
+      pattern: ["files", "rename"],
+      // 重命名（只改同目录下的名字）
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        try {
+          ok(
+            res,
+            renameProjectPath(
+              tenant.workspaceRoot ?? null,
+              String(raw.path ?? ""),
+              String(raw.name ?? "")
+            )
+          );
+        } catch (e) {
+          throw new ApiError(400, "bad_request", e instanceof Error ? e.message : String(e));
+        }
+      }
+    },
+    {
+      method: "POST",
+      pattern: ["files", "zip"],
+      // 压缩下载（多选一起打包；超上限由实现拒绝）
+      fn: (_req, res, { tenant, body }) => {
+        const raw = body ?? {};
+        const paths = Array.isArray(raw.paths) ? raw.paths.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        try {
+          ok(res, zipProjectPaths(tenant.workspaceRoot ?? null, paths));
+        } catch (e) {
+          throw new ApiError(400, "bad_request", e instanceof Error ? e.message : String(e));
+        }
+      }
+    },
     // ---------- 项目（= 租户）管理：控制台多项目视图 ----------
     // 仅管理员密钥可用；项目级与会话级接口仍用项目自己的 tenant API Key
     // （或管理员密钥 + X-Project-Id 头），互不暴露明文密钥。
@@ -13647,6 +14982,29 @@ function createApp(store, manager, opts = {}) {
         ok(res, nodeLlmView(next));
       }
     },
+    // 大模型账户余额（控制台「余额不足 → 查看余额并充值」用；由节点向 Hub 代查）
+    {
+      method: "GET",
+      pattern: ["node", "llm", "balance"],
+      adminOnly: true,
+      fn: async (_req, res) => {
+        ok(res, await fetchLlmBalance(store));
+      }
+    },
+    // 重新拉取平台内置模型凭据（用户点了「刷新内置模型」，或 Key 在控制台被重置）
+    {
+      method: "POST",
+      pattern: ["node", "llm", "builtin-refresh"],
+      adminOnly: true,
+      fn: async (_req, res) => {
+        const r = await ensureBuiltinProvider(store, { force: true });
+        if (r.status !== "ready") {
+          ok(res, { ok: false, reason: r.reason });
+          return;
+        }
+        ok(res, { ok: true, view: nodeLlmView(store.loadNodeLlm()) });
+      }
+    },
     // ---------- 用量（账本 + 汇总 + 价格） ----------
     {
       method: "GET",
@@ -13798,6 +15156,34 @@ function createApp(store, manager, opts = {}) {
         }
       }
     },
+    // ---------- 节点自更新（状态 / 检查 / 安装） ----------
+    // action=install 先回执、后台安装并退出进程（由服务管理器拉起新版本），
+    // 因此回执成功只代表「已受理」，是否升级成功要用 action=status 再确认。
+    {
+      method: "POST",
+      pattern: ["node", "self-update"],
+      projectOptional: true,
+      fn: async (req2, res, { body }) => {
+        const b = body ?? {};
+        const action = String(b.action ?? "status");
+        if (!updater) {
+          throw new ApiError(400, "bad_request", "\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A\u8282\u70B9\u672A\u4EE5 serve \u6A21\u5F0F\u8FD0\u884C");
+        }
+        if (action === "status") {
+          ok(res, updater.status());
+          return;
+        }
+        if (action === "check") {
+          ok(res, await updater.inspect());
+          return;
+        }
+        if (action === "install") {
+          ok(res, await updater.requestInstall(b.force === true));
+          return;
+        }
+        throw new ApiError(400, "bad_request", `\u672A\u77E5\u7684 action\uFF1A${action}\uFF08\u53EF\u9009 status / check / install\uFF09`);
+      }
+    },
     // ---------- 节点级会话状态（跨项目；只含标识与 status） ----------
     // 供节点首页 / 工作台建立初始视图，后续变化由 session_status 通知增量推送。
     {
@@ -13960,7 +15346,7 @@ function createApp(store, manager, opts = {}) {
             // 阻止反向代理（nginx 等）缓冲 SSE 流
             "X-Accel-Buffering": "no"
           });
-          const sinceRaw = new URL(
+          const sinceRaw2 = new URL(
             req2.url,
             "http://localhost"
           ).searchParams.get("since");
@@ -13968,19 +15354,51 @@ function createApp(store, manager, opts = {}) {
             tenant.id,
             params["id"],
             res,
-            sinceRaw ? Number(sinceRaw) : 0
+            sinceRaw2 ? Number(sinceRaw2) : 0
           );
           return;
         }
-        const since = Number(
-          new URL(req2.url, "http://localhost").searchParams.get("since") ?? 0
+        const q = new URL(req2.url, "http://localhost").searchParams;
+        const sinceRaw = q.get("since");
+        const beforeRaw = q.get("before");
+        const maxBytesRaw = q.get("maxBytes");
+        ok(
+          res,
+          manager.eventsPage(tenant.id, params["id"], {
+            since: sinceRaw === null ? void 0 : Number(sinceRaw) || 0,
+            before: beforeRaw === null ? void 0 : Number(beforeRaw) || 0,
+            maxBytes: maxBytesRaw === null ? void 0 : Number(maxBytesRaw) || void 0
+          })
         );
-        const { events, latestSeq } = manager.eventsSince(
-          tenant.id,
-          params["id"],
-          since
+      }
+    },
+    {
+      method: "GET",
+      pattern: ["sessions", ":id", "turns"],
+      // 轮次汇总（会话详情的列表）
+      fn: async (req2, res, { tenant, params }) => {
+        const q = new URL(req2.url, "http://localhost").searchParams;
+        const beforeRaw = q.get("before");
+        const limitRaw = q.get("limit");
+        ok(
+          res,
+          await manager.sessionTurns(tenant.id, params["id"], {
+            before: beforeRaw === null ? void 0 : Number(beforeRaw) || 0,
+            limit: limitRaw === null ? void 0 : Number(limitRaw) || void 0
+          })
         );
-        ok(res, { events, latestSeq });
+      }
+    },
+    {
+      method: "GET",
+      // 单轮详情：用户消息（含补充） + 最终回复 + 产出文件
+      pattern: ["sessions", ":id", "turns", ":seq", "reply"],
+      fn: async (req2, res, { tenant, params }) => {
+        const startSeq = Number(params["seq"]);
+        if (!Number.isFinite(startSeq) || startSeq <= 0) {
+          throw new ApiError(400, "bad_request", "\u65E0\u6548\u7684\u8F6E\u6B21\u5E8F\u53F7");
+        }
+        ok(res, await manager.sessionTurnReply(tenant.id, params["id"], startSeq));
       }
     }
   ];
@@ -14013,7 +15431,7 @@ function createApp(store, manager, opts = {}) {
       json(res, 200, {
         status: "ok",
         // 版本让运维/探针能确认线上跑的是哪个构建（更新与回滚据此判断）
-        version: "0.2.15",
+        version: "0.2.20",
         features: { mcp: hasServerMcpConfig() }
       });
       return;
@@ -14286,6 +15704,24 @@ async function dispatchFleetCommand(deps, env3) {
     switch (env3.type) {
       case "ping":
         return ok2({ pong: true, ts: Date.now() });
+      case "self_update": {
+        const updater = deps.getUpdater?.() ?? null;
+        if (!updater) {
+          return fail("\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A\u8282\u70B9\u672A\u4EE5 serve \u6A21\u5F0F\u8FD0\u884C\uFF08\u7F3A\u5C11\u66F4\u65B0\u63A7\u5236\u5668\uFF09");
+        }
+        const action = String(payload.action ?? "status");
+        if (action === "status") {
+          return ok2(updater.status());
+        }
+        if (action === "check") {
+          return ok2(await updater.inspect());
+        }
+        if (action === "install") {
+          const started = await updater.requestInstall(payload.force === true);
+          return ok2(started);
+        }
+        return fail(`\u672A\u77E5\u7684 action\uFF1A${action}\uFF08\u53EF\u9009 status / check / install\uFF09`);
+      }
       case "get_node_info":
         return ok2(
           buildNodeInfo(store, {
@@ -14335,6 +15771,22 @@ async function dispatchFleetCommand(deps, env3) {
         store.saveNodeLlm(next);
         return ok2(nodeLlmView(next));
       }
+      /*
+       * 重新拉取平台内置模型（志前 API）。
+       *
+       * 用途：用户在控制台点了「刷新」、或内置模型的 Key 在控制台被重置后需要换新。
+       * 走写链串行——它会改写 connections.json，不能与 update_node_llm 并发。
+       */
+      // 余额查询：只读、幂等，可进只读并发池
+      case "get_llm_balance":
+        return ok2(await fetchLlmBalance(store));
+      case "refresh_builtin_llm": {
+        const r = await ensureBuiltinProvider(store, { force: true });
+        if (r.status !== "ready") {
+          return ok2({ ok: false, reason: r.reason });
+        }
+        return ok2({ ok: true, view: nodeLlmView(store.loadNodeLlm()) });
+      }
       case "get_usage_summary": {
         const ledger = manager.usageLedger();
         if (!ledger) return ok2({ total: null, groups: [] });
@@ -14408,8 +15860,22 @@ async function dispatchFleetCommand(deps, env3) {
         );
       }
       case "get_events": {
-        const since = Number(payload.since ?? 0) || 0;
-        return ok2(manager.eventsSince(project().id, sessionId(), since));
+        const since = payload.since === void 0 ? void 0 : Number(payload.since) || 0;
+        const before = payload.before === void 0 ? void 0 : Number(payload.before) || 0;
+        const maxBytes = Number(payload.maxBytes) || void 0;
+        return ok2(
+          manager.eventsPage(project().id, sessionId(), { since, before, maxBytes })
+        );
+      }
+      case "get_session_turns": {
+        const before = payload.before === void 0 ? void 0 : Number(payload.before) || 0;
+        const limit = Number(payload.limit) || void 0;
+        return ok2(await manager.sessionTurns(project().id, sessionId(), { before, limit }));
+      }
+      case "get_session_turn_reply": {
+        const startSeq = Number(payload.startSeq) || 0;
+        if (startSeq <= 0) throw new ApiError(400, "bad_request", "\u65E0\u6548\u7684\u8F6E\u6B21\u5E8F\u53F7");
+        return ok2(await manager.sessionTurnReply(project().id, sessionId(), startSeq));
       }
       case "get_config":
         return ok2(configView2(project()));
@@ -14470,6 +15936,16 @@ async function dispatchFleetCommand(deps, env3) {
           )
         );
       }
+      case "write_file_base64": {
+        const t = project();
+        return ok2(
+          writeProjectFileBase64(
+            t.workspaceRoot ?? null,
+            String(payload.path ?? ""),
+            String(payload.base64 ?? "")
+          )
+        );
+      }
       case "create_dir": {
         const t = project();
         return ok2(createProjectDir(t.workspaceRoot ?? null, String(payload.path ?? "")));
@@ -14484,10 +15960,35 @@ async function dispatchFleetCommand(deps, env3) {
           )
         );
       }
+      case "delete_files": {
+        const t = project();
+        const raw = payload.paths;
+        const paths = Array.isArray(raw) ? raw.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        return ok2(deleteProjectPaths(t.workspaceRoot ?? null, paths));
+      }
       case "search_files": {
         const t = project();
         return ok2(searchProjectFiles(t.workspaceRoot ?? null, String(payload.query ?? "")));
       }
+      case "rename_path": {
+        const t = project();
+        return ok2(
+          renameProjectPath(
+            t.workspaceRoot ?? null,
+            String(payload.path ?? ""),
+            String(payload.name ?? "")
+          )
+        );
+      }
+      case "zip_download": {
+        const t = project();
+        const raw = payload.paths;
+        const paths = Array.isArray(raw) ? raw.map((x) => String(x)) : [];
+        if (paths.length === 0) throw new ApiError(400, "bad_request", "paths \u4E0D\u80FD\u4E3A\u7A7A");
+        const maxBytes = typeof payload.maxBytes === "number" ? payload.maxBytes : void 0;
+        return ok2(zipProjectPaths(t.workspaceRoot ?? null, paths, { maxBytes }));
+      }
       case "list_tools": {
         const t = project();
         return ok2(buildToolCatalog(t.workspaceRoot ?? process.cwd()));
@@ -14710,6 +16211,13 @@ async function dispatchFleetCommand(deps, env3) {
         manager.steer(project(), sessionId(), text);
         return ok2({ accepted: true });
       }
+      case "unsteer": {
+        const index = Number(payload.index);
+        if (!Number.isInteger(index)) {
+          throw new ApiError(400, "bad_request", "index \u5FC5\u987B\u662F\u6574\u6570");
+        }
+        return ok2({ accepted: true, pendingSteers: manager.unsteer(project(), sessionId(), index) });
+      }
       case "interrupt":
         manager.interrupt(project(), sessionId());
         return ok2({ accepted: true });
@@ -14833,6 +16341,22 @@ function toWireAck(ack) {
     data: ack.data === void 0 ? void 0 : utf8Encode(JSON.stringify(ack.data))
   };
 }
+var ACK_JSON_MAX_BYTES = MAX_FRAME_BYTES - 64 * 1024;
+function mb(bytes) {
+  return (bytes / (1024 * 1024)).toFixed(1);
+}
+function guardAckSize(ack, json2) {
+  if (!ack.ok || ack.data === void 0) return ack;
+  const bytes = Buffer.byteLength(json2, "utf8");
+  if (bytes <= ACK_JSON_MAX_BYTES) return ack;
+  return {
+    reqId: ack.reqId,
+    type: ack.type,
+    ok: false,
+    // 带上实际大小：用户据此能判断「差一点」还是「差很多」，而不是只看到「失败」
+    error: `\u7ED3\u679C\u8FC7\u5927\uFF08${mb(bytes)} MB\uFF09\uFF0C\u8D85\u8FC7\u5355\u5E27\u4F20\u8F93\u4E0A\u9650\uFF08${mb(ACK_JSON_MAX_BYTES)} MB\uFF09\uFF0C\u8BF7\u7F29\u5C0F\u8303\u56F4\u540E\u91CD\u8BD5`
+  };
+}
 function fromWireCommand(env3) {
   let payload = {};
   if (env3.payload && env3.payload.length > 0) {
@@ -15303,6 +16827,7 @@ var READONLY_CMD_TYPES = /* @__PURE__ */ new Set([
   "get_node_llm",
   "list_node_llm_models",
   "get_usage_summary",
+  "get_llm_balance",
   "get_usage_records",
   "get_usage_pricing",
   "list_projects",
@@ -15310,6 +16835,8 @@ var READONLY_CMD_TYPES = /* @__PURE__ */ new Set([
   "get_session_states",
   "get_state",
   "get_events",
+  "get_session_turns",
+  "get_session_turn_reply",
   "get_config",
   "list_models",
   "list_dirs",
@@ -15559,6 +17086,10 @@ var FleetNodeBridge = class {
   _dispatchEnvelope(env3) {
     const run = () => this._dispatch(env3);
     dbgMark(`recv:${env3.type}`, `reqId=${env3.reqId}`);
+    if (env3.type === "self_update" && String(env3.payload?.action ?? "status") !== "install") {
+      this._runReadonly(run);
+      return;
+    }
     if (READONLY_CMD_TYPES.has(env3.type) || this._isReadonlyBatch(env3)) {
       this._runReadonly(run);
       return;
@@ -15585,7 +17116,7 @@ var FleetNodeBridge = class {
   _invalidateSessionCache() {
     this.writeEpoch += 1;
     for (const key of [...this.cmdResultCache.keys()]) {
-      if (/^(get_state|get_events|list_sessions|get_session_states)\|/.test(key)) {
+      if (/^(get_state|get_events|get_session_turns|get_session_turn_reply|list_sessions|get_session_states)\|/.test(key)) {
         this.cmdResultCache.delete(key);
       }
     }
@@ -15721,11 +17252,17 @@ var FleetNodeBridge = class {
       label: this.opts.deps.store.loadNodeLabel() ?? void 0,
       platform: process.platform,
       mode: process.env.NODE_MODE ?? "standalone",
-      version: "0.2.15",
+      version: "0.2.20",
       ip: primaryIp()
     };
   }
-  /** 用量汇总（供控制面账户级聚合）：总量 + 最近 40 天按天 */
+  /**
+   * 用量汇总（供控制面账户级聚合）：总量 + 最近 40 天按天 + 最近 40 天按项目。
+   *
+   * 按项目这一维是为控制台「今日 / 最近 30 天消耗拆到每个项目」服务的：
+   * 账本里的汇总只存了按天、按项目两个独立维度，交叉项只能现算，因此这里
+   * 从明细聚合后随 info 一起上报（Hub 按 (节点, 项目, 天) 覆盖写入，天然幂等）。
+   */
   _usagePayload() {
     const ledger = this.opts.deps.manager.usageLedger();
     if (!ledger) return void 0;
@@ -15733,11 +17270,22 @@ var FleetNodeBridge = class {
     const days = {};
     const keys = Object.keys(r.byDay).sort().slice(-40);
     for (const k of keys) days[k] = r.byDay[k];
+    const from = keys[0] ?? "";
+    const to = keys[keys.length - 1] ?? "";
+    const projects = {};
+    if (from && to) {
+      for (const [projectId, byDay] of Object.entries(
+        ledger.projectByDay({ from, to })
+      )) {
+        projects[projectId] = { total: sumAgg(Object.values(byDay)), byDay };
+      }
+    }
     return {
       since: r.since,
       total: r.total,
       legacy: r.legacy ?? null,
-      byDay: days
+      byDay: days,
+      projects
     };
   }
   /**
@@ -15772,6 +17320,8 @@ var FleetNodeBridge = class {
             name: s.name ?? null,
             status: s.status,
             lastUserMessage: lastUserMessage(s),
+            // 控制面按它排「最近在跑什么」，运行中的长任务才不会被排到后面
+            lastStartedAt: s.lastStartedAt ?? null,
             // 控制面的聚合邮件靠它判断「这台机器最近有没有在干活」；
             // 状态跃迁可能被 info 节流跳过，完成时间不会。
             lastCompletedAt: s.lastCompletedAt ?? null
@@ -15800,7 +17350,7 @@ var FleetNodeBridge = class {
         label: this.opts.deps.store.loadNodeLabel() ?? void 0,
         platform: process.platform,
         mode: process.env.NODE_MODE ?? "standalone",
-        version: "0.2.15",
+        version: "0.2.20",
         ip: primaryIp(),
         projects,
         totals,
@@ -15962,7 +17512,13 @@ var FleetNodeBridge = class {
     const stamped = { ...ack, reqId: env3.reqId, type: env3.type };
     const json2 = JSON.stringify(stamped);
     const __t1 = dbgNow();
-    this._send({ kind: "ack", clientId: env3.clientId, ack: stamped });
+    const payload = guardAckSize(stamped, json2);
+    if (payload !== stamped) {
+      console.warn(
+        `[fleet] ${env3.type} \u56DE\u6267 ${(json2.length / 1024 / 1024).toFixed(1)}MB \u8D85\u8FC7\u5355\u5E27\u4E0A\u9650\uFF0C\u5DF2\u964D\u7EA7\u4E3A\u9519\u8BEF\u56DE\u6267`
+      );
+    }
+    this._send({ kind: "ack", clientId: env3.clientId, ack: payload });
     dbgMs(
       "publishAck",
       __t0,
@@ -17429,7 +18985,7 @@ function verifySignature(data, signatureBase64, publicKey) {
 }
 
 // src/update/downloader.ts
-var MAX_BINARY_BYTES = 400 * 1024 * 1024;
+var MAX_BINARY_BYTES2 = 400 * 1024 * 1024;
 var MANIFEST_TIMEOUT_MS = 15e3;
 var DOWNLOAD_TIMEOUT_MS2 = 10 * 6e4;
 async function fetchManifest(url, publicKey, opts = {}) {
@@ -17475,7 +19031,7 @@ async function downloadBinary(bin, destPath, log = () => {
   if (!res.ok) return { error: `\u4E0B\u8F7D\u5931\u8D25 HTTP ${res.status}` };
   if (!res.body) return { error: "\u4E0B\u8F7D\u54CD\u5E94\u6CA1\u6709 body" };
   const expected = bin.size && bin.size > 0 ? bin.size : void 0;
-  const limit = expected ? Math.max(expected * 2, 1024 * 1024) : MAX_BINARY_BYTES;
+  const limit = expected ? Math.max(expected * 2, 1024 * 1024) : MAX_BINARY_BYTES2;
   const hash = (0, import_node_crypto5.createHash)("sha256");
   let bytes = 0;
   try {
@@ -17538,7 +19094,7 @@ var path29 = __toESM(require("path"), 1);
 var import_node_child_process5 = require("child_process");
 var import_node_module3 = require("module");
 function currentVersion() {
-  const injected = "0.2.15"?.trim();
+  const injected = "0.2.20"?.trim();
   if (injected) return injected;
   try {
     const req2 = (0, import_node_module3.createRequire)(importMetaUrl);
@@ -17852,6 +19408,31 @@ function nextIntervalMs() {
   const jitter = base * 0.15 * (Math.random() * 2 - 1);
   return Math.max(6e4, Math.round(base + jitter));
 }
+function evaluateManifest(base, manifest) {
+  if (!parseVersion(base.currentVersion) || compareVersions(manifest.version, base.currentVersion) <= 0) {
+    return {
+      ...base,
+      updateAvailable: false,
+      latestVersion: manifest.version,
+      reason: `\u5DF2\u662F\u6700\u65B0\u7248\u672C\uFF08v${base.currentVersion}\uFF09`
+    };
+  }
+  if (manifest.minimumVersion && compareVersions(base.currentVersion, manifest.minimumVersion) < 0) {
+    return {
+      ...base,
+      updateAvailable: false,
+      latestVersion: manifest.version,
+      manualUpgradeRequired: manifest.minimumVersion,
+      reason: `\u5F53\u524D\u7248\u672C\u8FC7\u4F4E\uFF0C\u9700\u624B\u52A8\u5347\u7EA7\u5230 >= ${manifest.minimumVersion}`
+    };
+  }
+  return {
+    ...base,
+    updateAvailable: true,
+    latestVersion: manifest.version,
+    ...manifest.notes ? { notes: manifest.notes } : {}
+  };
+}
 var UpdateController = class {
   constructor(opts, currentVersion2 = currentVersion()) {
     this.opts = opts;
@@ -17940,6 +19521,77 @@ var UpdateController = class {
     }
     this.schedule(nextIntervalMs());
   }
+  /**
+   * 只读检查：拉清单比对版本，不下载、不改 state。
+   *
+   * 供远端 `self_update --action check` 与 UI 展示用；与定时器 `check()` 不同，
+   * 这里不加 `checking` 锁、不写 `lastCheckAt`，因此不会干扰自动更新流程。
+   */
+  async inspect() {
+    const base = {
+      currentVersion: this.currentVersion,
+      channel: updaterChannel(),
+      manifestUrl: this.manifestUrl()
+    };
+    const key = this.publicKey;
+    const cap = selfUpdateCapability(Boolean(key));
+    if (!cap.ok) {
+      return { ...base, updateAvailable: false, reason: `\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A${cap.reason}` };
+    }
+    const res = await fetchManifest(base.manifestUrl, key, {
+      allowInsecureUrl: env("ZQAGENT_UPDATE_INSECURE") === "1"
+    });
+    if (!res.manifest) {
+      return {
+        ...base,
+        updateAvailable: false,
+        reason: `\u66F4\u65B0\u68C0\u67E5\u5931\u8D25\uFF1A${res.error ?? "\u6E05\u5355\u6821\u9A8C\u5931\u8D25"}`
+      };
+    }
+    return evaluateManifest(base, res.manifest);
+  }
+  /**
+   * 远端触发安装：先同步给出结论（受理/无需更新），安装本身在后台跑。
+   *
+   * 必须「先回执、后安装」：安装成功后进程会 `exit(70)` 交给 systemd 拉起新版本，
+   * 如果等到安装完成再回执，回执永远发不出去（表现为网关超时）。
+   *
+   * 复用定时器同一条 `check()` 路径：验签、下载、自检、失败计数、安装后自检与
+   * 回滚保护全都一致，只是把 `installMode` 设为 `force` 时不等待空闲。
+   */
+  async requestInstall(force = false) {
+    const fromVersion = this.currentVersion;
+    const cap = selfUpdateCapability(Boolean(this.publicKey));
+    if (!cap.ok) {
+      return { accepted: false, fromVersion, message: `\u81EA\u66F4\u65B0\u4E0D\u53EF\u7528\uFF1A${cap.reason}` };
+    }
+    const info = await this.inspect();
+    if (!info.updateAvailable) {
+      return {
+        accepted: false,
+        fromVersion,
+        ...info.latestVersion ? { toVersion: info.latestVersion } : {},
+        message: info.reason ?? "\u5DF2\u662F\u6700\u65B0\u7248\u672C"
+      };
+    }
+    if (this.checking || this.installing) {
+      return {
+        accepted: true,
+        fromVersion,
+        toVersion: info.latestVersion,
+        message: `\u5DF2\u6709\u66F4\u65B0\u4EFB\u52A1\u5728\u8FDB\u884C\u4E2D\uFF08\u76EE\u6807 v${info.latestVersion}\uFF09\uFF0C\u53EF\u5728\u7A0D\u540E\u7528 status \u67E5\u770B\u7ED3\u679C`
+      };
+    }
+    void this.check(force, false, true).catch((err) => {
+      this.recordFailure(info.latestVersion, `\u5B89\u88C5\u5931\u8D25\uFF1A${err.message}`);
+    });
+    return {
+      accepted: true,
+      fromVersion,
+      toVersion: info.latestVersion,
+      message: force ? `\u5F00\u59CB\u5B89\u88C5 v${info.latestVersion}\uFF08\u7ACB\u5373\u91CD\u542F\uFF09` : `\u5F00\u59CB\u5B89\u88C5 v${info.latestVersion}\uFF08\u7B49\u5F85\u8282\u70B9\u7A7A\u95F2\u540E\u91CD\u542F\uFF09`
+    };
+  }
   /**
    * 检查并准备更新；`installMode` 为 true 时下载后立即安装（不再等空闲）。
    * 返回可读结论，供 CLI `update --check` 使用。
@@ -18168,7 +19820,9 @@ function seedDemoTenant(store) {
     // 未显式指定时随机生成：固定默认密钥一旦随 HOST=0.0.0.0 暴露到公网，等于公开凭据。
     // 只在首次创建时生成并落盘，后续启动沿用磁盘上的值（启动日志会打印完整密钥）。
     apiKey: env2("TENANT_API_KEY") ?? generateApiKey(),
-    model: env2("MODEL") ?? env2("OPENAI_MODEL") ?? "deepseek-v4-flash",
+    // 不再硬编码具体厂商型号：志前 API 只认 deepseek-flash，写死 deepseek-v4-flash
+    // 会让新装节点的第一次请求 404。默认值统一走 defaultTenantModel（见 nodeLlm.ts）。
+    model: defaultTenantModel(store),
     provider: {
       apiKey: env2("OPENAI_API_KEY"),
       baseURL: env2("OPENAI_BASE_URL")
@@ -18308,6 +19962,8 @@ function startServer(opts = {}) {
   const store = new Store(dataDir);
   const demo = seedDemoTenant(store);
   syncTenantModels(store);
+  const nodeModel = nodeDefaultProvider(store)?.model;
+  if (nodeModel) adoptBuiltinModelForTenants(store, nodeModel);
   const usageLedger = new UsageLedger(dataDir);
   usageLedger.init();
   const manager = new SessionManager(store, void 0, { usage: usageLedger });
@@ -18339,6 +19995,7 @@ function startServer(opts = {}) {
   const notificationHub = createNotificationHub();
   let fleet = null;
   let fleetCred = null;
+  let updater = null;
   function connectFleet(cred) {
     const localId = ensureNodeId(store);
     const nodeId = (cred.nodeId ?? "").trim() || localId;
@@ -18356,6 +20013,8 @@ function startServer(opts = {}) {
       deps: {
         store,
         manager,
+        // 闭包推迟求值：桥先于 UpdateController 创建，指令到达时 updater 已就绪
+        getUpdater: () => updater,
         applyFleetCred: async (cred2) => {
           store.saveFleetCredential(cred2);
           setTimeout(() => connectFleet(cred2), 300);
@@ -18448,8 +20107,12 @@ function startServer(opts = {}) {
   if (initialCred) {
     connectFleet(initialCred);
   } else if (opts.autoEnroll) {
-    void fleetController.enroll(opts.autoEnroll).then((st) => console.log(`[fleet] \u5DF2\u81EA\u52A8\u63A5\u5165\uFF0C\u8282\u70B9 ${st.nodeId}\uFF08${st.gatewayUrl}\uFF09`)).catch((e) => console.warn(`[fleet] \u81EA\u52A8\u63A5\u5165\u5931\u8D25\uFF08\u53EF\u7A0D\u540E /link \u91CD\u8BD5\uFF09: ${e instanceof Error ? e.message : e}`));
+    void fleetController.enroll(opts.autoEnroll).then((st) => {
+      console.log(`[fleet] \u5DF2\u81EA\u52A8\u63A5\u5165\uFF0C\u8282\u70B9 ${st.nodeId}\uFF08${st.gatewayUrl}\uFF09`);
+      scheduleBuiltinProvider(store, (m) => console.log(m));
+    }).catch((e) => console.warn(`[fleet] \u81EA\u52A8\u63A5\u5165\u5931\u8D25\uFF08\u53EF\u7A0D\u540E /link \u91CD\u8BD5\uFF09: ${e instanceof Error ? e.message : e}`));
   }
+  if (initialCred) scheduleBuiltinProvider(store, (m) => console.log(m));
   const pairingCodes = new PairingCodeStore();
   const qq = new QqManager({
     store,
@@ -18506,16 +20169,21 @@ function startServer(opts = {}) {
       scheduleFleetInfoRefresh();
     }
   });
+  updater = new UpdateController({
+    dataDir,
+    isIdle: () => manager.isIdle(),
+    prepareExit: closeServer
+  });
   const server = createApp(store, manager, {
     secretBox,
     notificationHub,
     qq,
     adminKey,
     fleet: fleetController,
-    host
+    host,
+    updater
   });
   let closed = false;
-  let updater = null;
   function closeServer() {
     if (closed) return;
     closed = true;
@@ -18548,13 +20216,6 @@ function startServer(opts = {}) {
   }
   process.on("SIGINT", () => shutdown("SIGINT"));
   process.on("SIGTERM", () => shutdown("SIGTERM"));
-  if (opts.autoUpdate) {
-    updater = new UpdateController({
-      dataDir,
-      isIdle: () => manager.isIdle(),
-      prepareExit: closeServer
-    });
-  }
   server.timeout = 0;
   server.keepAliveTimeout = 65e3;
   server.headersTimeout = 66e3;
@@ -18574,7 +20235,7 @@ function startServer(opts = {}) {
       } else {
         printReady(info, qq);
       }
-      updater?.start();
+      if (opts.autoUpdate) updater?.start();
       resolve20(info);
     }, reject);
   });
@@ -18615,7 +20276,7 @@ function printReady(info, qq) {
 // src/cli/account-enroll.ts
 init_cjs_shims();
 var path34 = __toESM(require("path"), 1);
-var readline = __toESM(require("readline/promises"), 1);
+var readline2 = __toESM(require("readline/promises"), 1);
 var SKIP_ANSWERS = /* @__PURE__ */ new Set(["-", "skip", "none", "no"]);
 function resolveDefaultHub(hubUrl2, env3 = process.env) {
   return (hubUrl2 ?? env3.HUB_URL ?? DEFAULT_HUB_URL).trim().replace(/\/$/, "");
@@ -18706,7 +20367,7 @@ async function maybeAccountEnroll(opts = {}) {
     cliErr(`\u63A5\u5165\u68C0\u67E5\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
     return;
   }
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
   try {
     await runWizard(rl, store, opts);
   } catch (e) {
@@ -18787,7 +20448,7 @@ async function askHidden(rl, prompt) {
 
 // src/cli/link.ts
 init_cjs_shims();
-var readline2 = __toESM(require("readline"), 1);
+var readline3 = __toESM(require("readline"), 1);
 
 // src/cli/serve-instances.ts
 init_cjs_shims();