ai_co_discuss 0.3.39 → 0.3.40

package/runner/free_runner.mjs

@@ -1,890 +1,907 @@
-/** Free-room delivery: one live execution per member, carrying all of that member's open requests. */
-import { spawnSync } from 'node:child_process';
-import { createHash, randomUUID } from 'node:crypto';
-import { appendFileSync, mkdirSync, readFileSync, statSync } from 'node:fs';
-import { basename, join, resolve } from 'node:path';
-import { adapter_of, BRANCHABLE_ADAPTERS, branch_session, capabilities_of, cleanup_room, deliver_task, delivery_receipt, session_exists, stored_delivery } from './adapters/index.mjs';
-import { api, read_rule } from './discussion_runner.mjs';
-import { SegmentLog } from './execution_progress.mjs';
-import { free_task_text, TASK_SUBCOMMANDS, with_expert_prompt } from './expert_prompts.mjs';
-import { atomic_json } from './files.mjs';
-import { SessionDriver } from './session_driver.mjs';
-import { DEFAULT_SCHEDULER_MODE, REVIEW_CONFIDENCE, REVIEW_PROMPT_VERSION, ROUTE_CONFIDENCE, ROUTE_CONTEXT_MESSAGES, ROUTE_PROMPT_VERSION, ROUTE_WIDE_CONFIDENCE, decide_group_order, decide_review_completion, route_free_message, route_prompt_version, scheduler_thresholds, some_members } from './scheduler.mjs';
-
-const PACKAGE_VERSION = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
-const RENEW_MS = 30_000;
-/** A changed phase is reported early, but no more often than this, since each report refreshes open pages. */
-const ACTIVITY_REPORT_MS = 10_000;
-/** Segments and progress notes are reported quietly, waking no page, so they may go every tick. */
-const PROGRESS_REPORT_MS = 2_000;
-const MAX_DELIVERY_ATTEMPTS = 3;
-// A manual member's session that refuses a delivery is retried in the same execution, after a wait the owner can cut short.
-const MAX_DELIVERY_RETRIES = 3;
-const RETRY_DELAY_SECONDS = 60;
-const MAX_RETRY_REASON = 500;
-const LIVE = ['reserving', 'delivering', 'sidecar_pending', 'running', 'retry_wait'];
-const MAX_HASHED_BYTES = 5 * 1024 * 1024;
-const GIT_TIMEOUT_MS = 15_000;
-
-/** Fingerprint configurations whose adapter can enforce project read-only access; no local paths leave this function. */
-export function review_capability_version(profile, member, config) {
-  if (!profile || profile.project_access !== 'read' || member.access !== 'runner' || member.session_mode !== 'new'
-    || !capabilities_of(profile.adapter).enforces_read_only || profile.adapter !== member.adapter
-    || !profile.cwd || profile.allowed_tools?.length) return '';
-  const project = cwd_key(profile.cwd), drafts = cwd_key(config.draft_directory || `${config.directory}-drafts`);
-  if (drafts === project || drafts.startsWith(`${project}/`)) return '';
-  const facts = [1, profile.adapter, profile.executable || '', cwd_key(profile.cwd), cwd_key(profile.workdir),
-    profile.project_id || '', profile.project_name || '', profile.session_id || '', drafts,
-    cwd_key(config.directory)];
-  return createHash('sha256').update(JSON.stringify(facts)).digest('hex');
-}
-
-/** Identify a working directory consistently, so executions in the same cwd can be compared. */
-export function cwd_key(directory) {
-  if (!directory) return '';
-  const path = resolve(directory).replaceAll('\\', '/');
-  return process.platform === 'win32' ? path.toLowerCase() : path;
-}
-
-/**
- * Record each changed or untracked file's Git status and content hash in a Git working tree.
- * Returns null outside Git: free rooms then provide no automatic overlap detection.
- */
-export function workspace_snapshot(directory) {
-  if (!directory) return null;
-  const result = spawnSync('git', ['-C', directory, 'status', '--porcelain=v1', '-z', '--untracked-files=all'],
-    { encoding: 'utf8', windowsHide: true, timeout: GIT_TIMEOUT_MS });
-  if (result.status !== 0) return null;
-  const entries = new Map();
-  const fields = result.stdout.split('\0').filter(Boolean);
-  for (let index = 0; index < fields.length; index++) {
-    const status = fields[index].slice(0, 2), path = fields[index].slice(3);
-    if (status[0] === 'R' || status[0] === 'C') index++; // The original path of a rename follows.
-    let content = 'missing';
-    try {
-      const file = join(directory, path);
-      const size = statSync(file).size;
-      content = size > MAX_HASHED_BYTES ? `size:${size}` : createHash('sha256').update(readFileSync(file)).digest('hex');
-    } catch { /* Deleted files keep the marker. */ }
-    entries.set(path, `${status}:${content}`);
-  }
-  return entries;
-}
-
-/** Paths whose status or content differ between two snapshots of one working tree. */
-export function changed_between(before, after) {
-  const paths = new Set([...before.keys(), ...after.keys()]);
-  return [...paths].filter(path => before.get(path) !== after.get(path)).sort();
-}
-
-/** Write a non-secret task and a member-only credential file for one execution. */
-export function free_task_files(config, member, execution, binding, { session = null, suggestions = [], reviews = [], stopped = [], process_access = true } = {}) {
-  const id = `free-${execution.id}`;
-  const draft_directory = config.draft_directory || `${config.directory}-drafts`;
-  mkdirSync(draft_directory, { recursive: true });
-  const access_path = join(config.directory, `${id}.access.json`);
-  const task_path = join(config.directory, `${id}.task.json`);
-  const profile = config.participants[member.name];
-  atomic_json(access_path, { site: config.site, room: config.room, member: member.name, token: config.members[member.name].token,
-    session_id: binding.session_id || '', execution_id: execution.id });
-  const adapter = adapter_of(profile.adapter);
-  const cli = process.platform === 'win32' ? adapter?.windows_command || 'codiscuss.cmd' : 'codiscuss';
-  const inbox = Boolean(adapter?.into_window?.(profile, binding));
-  const bound_access = process_access && !inbox && Boolean(adapter?.capabilities.access_env);
-  const messages = execution.requests.map(item => `#${item.message_id}`).join('、');
-  const requests = execution.requests || [];
-  const discussion_request = requests.find(item => item.session_request_id && ['discuss', 'discuss_host'].includes(item.purpose)) || null;
-  const direct_question = Boolean(session?.status === 'active' && requests.some(item => item.purpose === 'ask'));
-  const { instructions, prompt } = free_task_text({ name: member.label || member.name, role: member.role, discussion: direct_question,
-    discussion_request, profile, cli,
-    room: config.room, messages, read_after: execution.read_until, execution_id: execution.id, task_path,
-    access_file: bound_access ? '' : access_path, read_rule: read_rule(profile.adapter), inbox });
-  const skills = discussion_request || direct_question
-    ? ['discuss-participant/SKILL.md', 'discuss-participant/references/discussion.md',
-      ...member.role === 'host' ? ['discuss-host/SKILL.md', 'discuss-host/references/discussion.md'] : [],
-      ...direct_question ? ['discuss-participant/references/free.md'] : []]
-    : ['discuss-participant/SKILL.md', 'discuss-participant/references/free.md',
-      ...member.role === 'host' ? ['discuss-host/SKILL.md', 'discuss-host/references/free.md'] : []];
-  atomic_json(task_path, { site: config.site, room: config.room, mode: 'free', member: member.name,
-    execution_id: execution.id, requests, request_messages: execution.requests.map(item => item.message_id),
-    request_purposes: execution.requests.map(item => item.purpose || 'ask'),
-    ...(discussion_request ? { discussion_request } : {}),
-    ...(session ? { session: { id: session.id, status: session.status, phase: session.phase,
-      goal: session.goal, named_followup: session.named_followup } } : {}),
-    ...(suggestions.length ? { scheduler_suggestions: suggestions } : {}),
-    ...(reviews.length ? { review_handoffs: reviews } : {}),
-    ...(stopped.length ? { stopped_executions: stopped } : {}),
-    role: member.role || 'member',
-    read_after: execution.read_until, cwd: profile.cwd || null, project_access: profile.project_access, draft_directory,
-    skills: skills.map(file => join(config.project, '.agents/skills', file)),
-    cli, subcommands: TASK_SUBCOMMANDS,
-    ...(bound_access ? { access_env: 'DISCUSS_ACCESS_FILE' } : { access_file: access_path }), instructions });
-  return { id, participant: member.name, directory: config.directory, draft_directory,
-    skills_directory: join(config.project, '.agents', 'skills'), access_path, prompt: with_expert_prompt(prompt, profile), inbox };
-}
-
-
-/** What a scheduler can know about a member without a role field: its software, project access and the messages it is on. */
-function member_description(name, profile, work) {
-  const project = profile.project_name || (profile.cwd ? basename(profile.cwd) : '');
-  const access = !capabilities_of(profile.adapter).project ? '，只能读写房间消息' : profile.project_access === 'own' ? '，权限沿用其会话设置' : !profile.cwd ? '，未指定项目目录'
-    : profile.project_access === 'read' ? `，项目 ${project} 只读`
-      : `，可修改项目 ${project} 的文件${capabilities_of(profile.adapter).file_tools ? '（不能运行命令）' : '并运行命令'}`;
-  return `${name}（${adapter_of(profile.adapter)?.label || profile.adapter}${access}${work}）`;
-}
-
-/** The other messages a member is answering or has queued, so a correction can follow the message it corrects. */
-function member_work(requests, name, message_id) {
-  const open = requests.filter(item => item.member === name && item.message_id !== message_id);
-  const ids = status => [...new Set(open.filter(item => item.status === status).map(item => `#${item.message_id}`))].join('、');
-  return [ids('delivering') && `；正在处理 ${ids('delivering')}`, ids('pending') && `；待处理 ${ids('pending')}`].filter(Boolean).join('');
-}
-
-/** Why a message stayed with the host: the scheduler chose the host, or leaned elsewhere without enough certainty. */
-function route_host_label(decision, host, members) {
-  if (decision.choice === '__host__' || decision.confidence === null) return `交给主持人 ${host}`;
-  const group = some_members(decision.choice);
-  const lean = decision.choice === '__all__' ? '全体各自回应' : decision.choice === '__all_seq__' ? '全体依次回应' : decision.choice === '__none__' ? '无需回应' : group ? `请 ${group.join('、')} 各自回应`
-    : members.some(member => member.name === decision.choice) ? `请 ${decision.choice} 回答` : '';
-  return lean ? `倾向${lean}，把握不足，交给主持人 ${host}` : `交给主持人 ${host}`;
-}
-
-/** Delivers free-room requests through the same software adapters as discussions. */
-export class FreeRoomRunner {
-  constructor(config, store, deliver = deliver_task, log = () => {}, fetch_impl = fetch, session_driver = null) {
-    this.config = config;
-    this.store = store;
-    this.deliver = deliver;
-    this.log = log;
-    this.fetch = fetch_impl;
-    this.session_driver = session_driver || new SessionDriver(config, log, fetch_impl, store);
-    this.routed = new Set();
-    // Group requests (@全体成员) being arranged; a failed arrangement leaves the set so the next tick retries.
-    this.grouped = new Set();
-    this.decisions = new Set();
-    // Called when a scheduling decision settles; the service checks the room at once instead of waiting for the next poll.
-    this.on_decided = () => {};
-    // Routed requests whose decision is still pending: their host waits, so one pick replaces the host's start.
-    this.routing = new Set();
-    this.children = new Set();
-    this.members = new Map();
-    // An empty set proves every tracked handle for this execution closed; a missing set proves nothing after restart.
-    this.execution_processes = new Map();
-    // Execution id -> why its session ended on its own, such as a command refused in unattended mode ('' when unknown).
-    this.exited = new Map();
-    // Executions whose software failed before any turn ran, as its adapter reported; safe to deliver again.
-    this.not_started = new Set();
-    this.snapshots = new Map();
-    // Execution id -> { phase, at, sent_phase, sent_at }: what the member's software last showed it doing.
-    this.activity = new Map();
-    this.segments = new SegmentLog();
-    this.context_errors = new Map();
-    this.adopt(config);
-    this.store.db.exec(`CREATE TABLE IF NOT EXISTS free_deliveries(member TEXT PRIMARY KEY, client_id TEXT NOT NULL,
-      execution_id INTEGER NOT NULL DEFAULT 0, status TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0,
-      started INTEGER NOT NULL DEFAULT 0, last_renew INTEGER NOT NULL DEFAULT 0, error TEXT NOT NULL DEFAULT '')`);
-  }
-  /** Read this member's current local delivery record. */
-  row(name) { return this.store.db.prepare('SELECT * FROM free_deliveries WHERE member=?').get(name); }
-  /** Persist one member's delivery state; the client id makes a lost reserve response recoverable. */
-  save(name, fields) {
-    const current = this.row(name) || { member: name, client_id: '', execution_id: 0, status: 'idle', attempts: 0, started: 0, last_renew: 0, error: '' };
-    const next = { ...current, ...fields };
-    this.store.db.prepare(`INSERT INTO free_deliveries VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(member) DO UPDATE SET
-      client_id=excluded.client_id,execution_id=excluded.execution_id,status=excluded.status,attempts=excluded.attempts,
-      started=excluded.started,last_renew=excluded.last_renew,error=excluded.error`)
-      .run(name, next.client_id, next.execution_id, next.status, next.attempts, next.started, next.last_renew, next.error);
-    return next;
-  }
-  /**
-   * Take a changed configuration while running: new members are added, but a member whose
-   * project, cwd or bound session changed is blocked instead of silently reusing its conversation.
-   */
-  adopt(config) {
-    for (const [name, item] of Object.entries(config.participants)) {
-      const context = JSON.stringify([item.adapter, item.project_id || '', item.project_name || '', cwd_key(item.cwd), cwd_key(item.workdir), item.session_id || '']);
-      const key = `member-context:${name}`;
-      const previous = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
-      if (previous && !this.same_context(name, previous, context)) this.context_errors.set(name, `${name} 已绑定会话的项目、cwd 或接入方式发生变化；请移除后重新邀请`);
-      else this.store.db.prepare('INSERT INTO metadata VALUES (?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value').run(key, context);
-    }
-    this.config = { ...this.config, ...config, participants: config.participants, members: config.members };
-    this.session_driver.config = this.config;
-  }
-  /**
-   * A Codex member switched between App and CLI keeps its conversation: the two entries count as one, and the App's
-   * session may be filled in from the conversation this member is already bound to.
-   */
-  same_context(name, previous, current) {
-    const [before, after] = [JSON.parse(previous), JSON.parse(current)];
-    for (const context of [before, after]) context[0] = adapter_of(context[0])?.session_family || context[0];
-    const bound = this.store.binding(name).session_id;
-    if (before[5] !== after[5] && [before[5], after[5]].includes('') && [before[5], after[5]].includes(bound)) after[5] = before[5];
-    return JSON.stringify(before) === JSON.stringify(after);
-  }
-  /** One bounded iteration: reconcile live executions, then deliver idle members with open requests. */
-  async tick() {
-    let inbox; let room;
-    // Read one after another: Node's fetch keeps one warm connection per site, and a second parallel request would pay a new
-    // TLS handshake (measured 2 s against 0.4 s through a proxy to a hosted site).
-    try {
-      inbox = await api(this.config, '/inbox');
-      room = await api(this.config, '');
-    }
-    catch (error) {
-      if (error.message === 'HTTP 404: 房间不存在') cleanup_room(this.config.directory);
-      throw error;
-    }
-    if (!inbox.archived) await this.sync_review_capabilities(inbox);
-    if (!inbox.archived) await this.sync_member_capabilities(inbox);
-    if (!inbox.archived && room.session?.status === 'active'
-      && await this.session_driver.tick(room, inbox)) {
-      // A scheduled plan completes the pending host request and creates a speaker request.
-      inbox = await api(this.config, '/inbox');
-      room = await api(this.config, '');
-    }
-    // Smart scheduling runs beside delivery: the host waits for its answer (or failure) before starting, see `routing`.
-    if (this.config.scheduler && !inbox.archived) this.recommend_unnamed(inbox, room);
-    if (this.config.scheduler && !inbox.archived) this.schedule_reviews(inbox);
-    if (!inbox.archived) this.arrange_groups(inbox, room);
-    this.room_title = room.title;
-    this.room = room;
-    this.inbox = inbox;
-    const active = new Map(inbox.executions.map(item => [item.id, item]));
-    const present = new Set(inbox.members.map(member => member.name));
-    // A member sent away or removed no longer appears; its live work was already voided on the website.
-    for (const row of this.store.db.prepare('SELECT * FROM free_deliveries').all()) {
-      if (LIVE.includes(row.status) && !present.has(row.member)) { this.stop_member(row.member); this.save(row.member, { status: 'idle' }); }
-    }
-    await this.report_finished(active);
-    const pending_stops = await this.report_stops(active);
-    // Start in the room's speaking order: execution ids follow it, and the website lays out working cards by them.
-    const rank = (room.speaking_order?.items || []).map(item => item.name);
-    const place = name => rank.includes(name) ? rank.indexOf(name) : rank.length;
-    for (const member of [...inbox.members].sort((left, right) => place(left.name) - place(right.name))) {
-      const row = this.row(member.name);
-      if (row && LIVE.includes(row.status)) await this.reconcile(member, row, active);
-      // A member voided in a window or App the runner could not stop waits until that turn ends (`held_until`).
-      else if (!inbox.archived && member.pending.some(request => request.purpose !== 'group') && !this.members.get(member.name)?.size
-        && !pending_stops.has(member.name)
-        && !member.pending.some(request => this.routing.has(request.id)) && !(member.held_until * 1000 > Date.now())) await this.start(member, row);
-    }
-  }
-  /** Publish only changed local facts, using member revisions supplied by the owner's inbox. */
-  async sync_review_capabilities(inbox) {
-    for (const member of inbox.members) {
-      const current = member.review_capability;
-      if (!current) continue; // Older sites have no review protocol.
-      const version = this.context_errors.has(member.name) ? ''
-        : review_capability_version(this.config.participants[member.name], member, this.config);
-      if ((current.capability?.config_version || '') === version) continue;
-      try {
-        member.review_capability = await api(this.config, `/members/${member.id}/review-capability`, {
-          revision: current.revision, read_only: Boolean(version), ...(version ? { config_version: version } : {}),
-        });
-      } catch (error) { this.log(`只读评审能力未同步：${member.name}：${error.message}`); }
-    }
-  }
-  /** Tell the site what a rewind does to each member's session, as its adapter says; only a change is sent. */
-  async sync_member_capabilities(inbox) {
-    for (const member of inbox.members) {
-      const profile = this.config.participants[member.name];
-      // An older site lists no effect and takes no report.
-      if (member.rewind === undefined || !profile) continue;
-      const rewind = capabilities_of(profile.adapter).rewind;
-      if (member.rewind === rewind) continue;
-      try { await api(this.config, `/members/${member.id}/capabilities`, { rewind }); member.rewind = rewind; }
-      catch (error) { this.log(`成员会话能力未同步：${member.name}：${error.message}`); }
-    }
-  }
-  /** Hold only pending review handoffs while their preauthorized next step is judged. */
-  schedule_reviews(inbox) {
-    const host = inbox.members.find(member => member.role === 'host');
-    if (!host || !this.config.members[host.name]?.token || inbox.executions.some(item => item.member_id === host.id)
-      || LIVE.includes(this.row(host.name)?.status)) return;
-    for (const request of host.pending.filter(item => item.review?.phase === 'handoff')) {
-      const saved = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(`review-decision:${request.id}`)?.value;
-      if (this.routed.has(request.id) || (saved && JSON.parse(saved).done)) continue;
-      this.routed.add(request.id);
-      this.routing.add(request.id);
-      const pending = this.mark_routing(request.message_id, true).then(() => this.judge_review(host, request))
-        .catch(error => {
-          this.save_suggestion(request, { action: 'host', actual_action: 'host', applied: false,
-            model_judgment: false, reason: `没有模型判断：${error.message}` });
-          this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(`review-decision:${request.id}`, JSON.stringify({ done: true }));
-          this.log(`评审交接 #${request.message_id} 交给主持人：${error.message}`);
-        }).finally(() => { this.routing.delete(request.id); return this.mark_routing(request.message_id, false); });
-      this.decisions.add(pending);
-      pending.finally(() => { this.decisions.delete(pending); this.on_decided(); });
-    }
-  }
-  /** Persist the complete judgment and submission before any write, so restart recovery cannot double-dispatch. */
-  async judge_review(host, request) {
-    const key = `review-decision:${request.id}`;
-    const cached = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
-    let job = cached ? JSON.parse(cached) : null;
-    if (!job) {
-      const ready = await api(this.config, `/reviews/${request.review.batch_id}/ready`);
-      const decision = await decide_review_completion(this.config.api_home, this.config.scheduler, ready, this.fetch);
-      job = { decision, revision: ready.revision, submission_id: randomUUID(), profiles: JSON.stringify(this.config.participants) };
-      this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(key, JSON.stringify(job));
-    }
-    const { decision } = job;
-    this.save_suggestion(request, { action: decision.action, actual_action: 'unverified', applied: false,
-      model_judgment: Boolean(decision.detail), reason: '自动评审交接结果尚未核验' });
-    const outcome = decision.action === 'review' ? await this.apply_review(host, request, job)
-      : { applied: false, actual_action: 'host', reason: decision.label };
-    const label = outcome.applied ? decision.label : outcome.reason;
-    const record = decision.detail ? await this.record_decision(request.message_id, decision, label, outcome.applied,
-      { scene: 'review', prompt: REVIEW_PROMPT_VERSION, threshold: REVIEW_CONFIDENCE }) : null;
-    this.save_suggestion(request, { action: decision.action, actual_action: outcome.actual_action, applied: outcome.applied,
-      model_judgment: Boolean(decision.detail), ...(record?.id ? { decision_id: record.id } : {}), reason: label });
-    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(key, JSON.stringify({ ...job, done: true }));
-  }
-  /** Advance only the judged revision; inspect an uncertain write using its persisted submission id. */
-  async apply_review(host, request, job) {
-    if (job.profiles !== JSON.stringify(this.config.participants)) return { applied: false, actual_action: 'host', reason: '本机成员配置已变化，未自动交评审' };
-    try {
-      await api({ ...this.config, token: this.config.members[host.name].token }, '/reviews/advance', {
-        actor: host.name, batch_id: request.review.batch_id, revision: job.revision, submission_id: job.submission_id,
-      });
-      return { applied: true, actual_action: 'review' };
-    } catch (error) {
-      try {
-        const state = await api(this.config, `/reviews/${request.review.batch_id}/ready`);
-        if (state.plan.advance_submission === job.submission_id) return { applied: true, actual_action: 'review' };
-        return { applied: false, actual_action: 'host', reason: `未自动交评审：${error.message}` };
-      } catch { return { applied: false, actual_action: 'unverified', reason: `评审交接写入结果未核验：${error.message}` }; }
-    }
-  }
-  /**
-   * Whether the last tick left nothing in progress: no live delivery or process, no open request for a member this
-   * runner delivers to, no pending scheduling judgement and no running discussion. An idle room changes only through its
-   * website, so the service may wait for the website to report a change before ticking it again.
-   */
-  idle() {
-    const inbox = this.inbox;
-    if (!inbox || this.routing.size || [...this.members.values()].some(children => children.size)) return false;
-    if (this.room?.session?.status === 'active' || inbox.executions.length || inbox.members.some(member => member.pending.length)) return false;
-    return !this.store.db.prepare('SELECT status FROM free_deliveries').all().some(row => LIVE.includes(row.status));
-  }
-  /**
-   * Smart scheduling: for each new unnamed message routed to the host, ask the provider whether another woken
-   * member suits it better and apply a confident pick. The host waits for the answer (or its failure) before starting.
-   */
-  recommend_unnamed(inbox, room) {
-    // Manual members are listed apart; they are never delivered to but may host or be recommended.
-    const everyone = [...inbox.members, ...(inbox.observers || [])];
-    const host = everyone.find(member => member.role === 'host');
-    const waiting = host?.pending.filter(request => request.purpose === 'route' && !request.group_action
-      && !this.routed.has(request.id) && !this.saved_suggestion(request.id)) || [];
-    for (const request of waiting) {
-      this.routed.add(request.id);
-      if (everyone.length < 2) continue;
-      this.routing.add(request.id);
-      const decision = this.mark_routing(request.message_id, true)
-        .then(() => this.recommend(request, room, everyone))
-        .catch(error => {
-          if (!this.saved_suggestion(request.id)) this.save_suggestion(request, { action: 'host', actual_action: 'host',
-            applied: false, model_judgment: false, reason: `没有模型判断：${error.message}` });
-          this.log(`智能调度 #${request.message_id} 未给出推荐：${error.message}`);
-        })
-        .finally(() => { this.routing.delete(request.id); return this.mark_routing(request.message_id, false); });
-      this.decisions.add(decision);
-      decision.finally(() => { this.decisions.delete(decision); this.on_decided(); });
-    }
-  }
-  /** For each message naming everyone, have them answer at once, or one after another when smart scheduling says so. */
-  arrange_groups(inbox, room) {
-    const everyone = [...inbox.members, ...(inbox.observers || [])];
-    for (const request of everyone.flatMap(member => member.pending).filter(item => item.purpose === 'group' && !this.grouped.has(item.id))) {
-      this.grouped.add(request.id);
-      const arranged = (this.config.scheduler ? this.mark_routing(request.message_id, true).then(() => this.order_group(request, room))
-        .finally(() => this.mark_routing(request.message_id, false)) : this.order_group(request, room))
-        .catch(error => { this.grouped.delete(request.id); this.log(`全体成员 #${request.message_id} 未能安排：${error.message}`); });
-      this.decisions.add(arranged);
-      arranged.finally(() => { this.decisions.delete(arranged); this.on_decided(); });
-    }
-  }
-  /** Read and judge together; either kind of failure hands this one numbered group request back to its host. */
-  async judge_group(request, room) {
-    try {
-      const plan = await api(this.config, `/recommendations/${request.message_id}`);
-      const page = await api(this.config, `/messages?after=${Math.max(0, request.message_id - ROUTE_CONTEXT_MESSAGES)}`);
-      const message = page.messages.find(item => item.id === request.message_id);
-      if (!message) throw new Error('读取不到这条消息');
-      const descriptions = Object.fromEntries(plan.members.map(member => [member.name, member.description]));
-      const facts = this.route_members(plan.members, { ...room, descriptions }, message.id);
-      const profiles = JSON.stringify(this.config.participants);
-      const decision = await decide_group_order(this.config.api_home, this.config.scheduler,
-        { title: plan.title, goal: plan.goal, context: page.messages, message,
-          members: plan.members.map(member => member.name), descriptions: facts }, this.fetch);
-      return { decision, revision: plan.revision, profiles };
-    } catch (error) {
-      this.log(`智能调度 #${request.message_id} 未判断全体回答方式，交给主持人：${error.message}`);
-      return { decision: { action: 'host' } };
-    }
-  }
-  /** Persist a judgment before applying it: website retries and runner restarts must not ask the model again. */
-  async order_group(request, room) {
-    if (!this.config.scheduler) {
-      const plan = await api(this.config, `/recommendations/${request.message_id}`);
-      const result = await this.apply_group(request.message_id, { action: 'all' }, plan.revision);
-      if (!result.applied) throw new Error(result.error);
-      return;
-    }
-    const key = `group-decision:${request.id}`;
-    const saved = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
-    const judged = saved ? JSON.parse(saved) : await this.judge_group(request, room);
-    if (!saved) this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(key, JSON.stringify(judged));
-    const { decision, revision, profiles } = judged;
-    this.save_suggestion(request, { action: decision.action, actual_action: 'unverified', applied: false,
-      model_judgment: Boolean(decision.detail), reason: decision.detail ? '判断已产生，自动动作结果尚未核验' : '没有模型判断，交给主持人' });
-    const labels = { all: '请全体同时回答', sequential: '请全体按发言顺序依次回答', host: '交给主持人处理原消息' };
-    let result = profiles && profiles !== JSON.stringify(this.config.participants)
-      ? { status: 'changed', applied: false, error: '成员本机配置已变化' }
-      : await this.apply_group(request.message_id, decision, revision);
-    let actual_action = result.applied ? decision.action : 'unverified';
-    let label = labels[decision.action];
-    if (result.status === 'changed' && decision.action !== 'host') {
-      label += '（未生效，状态已变化）';
-      const fallback = await this.apply_group(request.message_id, { action: 'host' });
-      if (fallback.applied) actual_action = 'host';
-      if (fallback.status === 'failed') result = fallback;
-    }
-    let record;
-    if (decision.detail) {
-      if (result.status === 'failed') label += '（未生效，网站写入失败）';
-      // The @全体成员 question has one wording in every mode.
-      record = await this.record_decision(request.message_id, decision, label, result.applied && decision.action !== 'host', { prompt: ROUTE_PROMPT_VERSION, threshold: ROUTE_CONFIDENCE, wide_threshold: ROUTE_WIDE_CONFIDENCE });
-    }
-    this.save_suggestion(request, { action: decision.action, actual_action,
-      applied: result.applied && decision.action !== 'host', model_judgment: Boolean(decision.detail),
-      ...(record?.id ? { decision_id: record.id } : {}), reason: decision.detail ? label : '没有模型判断，交给主持人' });
-    if (result.status === 'failed') throw new Error(result.error);
-    this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
-  }
-  /** Apply once with the state that was judged; distinguish conflicts from failed writes and actual success. */
-  async apply_group(message_id, decision, revision) {
-    try {
-      await api(this.config, `/recommendations/${message_id}`, { action: decision.action, ...(revision ? { revision } : {}) });
-      this.log(`全体成员 #${message_id}：${{ all: '同时回答', sequential: '依次回答', host: '交给主持人' }[decision.action]}`);
-      return { status: 'applied', applied: true };
-    } catch (error) {
-      return { status: /HTTP (404|409)/.test(error.message) ? 'changed' : 'failed', applied: false, error: error.message };
-    }
-  }
-  /** Tell the website a message is being analysed so it can show the card; a failed mark never blocks routing. */
-  async mark_routing(message_id, active) {
-    try { await api(this.config, '/scheduler-routing', { message_id, active }); }
-    catch (error) { this.log(`智能调度 #${message_id} 分析状态未上报：${error.message}`); }
-  }
-  /** Describe each member as the scheduler sees it: software, project access and the other messages it is on. */
-  route_members(everyone, room, message_id) {
-    const requests = (room.free?.requests || []).filter(item => ['pending', 'delivering'].includes(item.status));
-    return everyone.map(member => {
-      const work = member_work(requests, member.name, message_id);
-      const profile = this.config.participants[member.name];
-      const described = room.descriptions?.[member.name] ? `；用户描述：${room.descriptions[member.name]}` : '';
-      // The model and the last finished message are only read by the guided wording.
-      const finished = (room.free?.requests || []).filter(item => item.member === member.name && item.status === 'completed' && item.message_id !== message_id).at(-1);
-      return { id: member.id, name: member.name, role: member.role, model: profile?.model || '', finished: finished ? `#${finished.message_id}` : '',
-        description: profile ? member_description(member.name, profile, `${work}${described}`)
-        : `${member.name}（手动接入，由用户代为触发${work}${described}）` };
-    });
-  }
-  /** Retain a request-bound handoff across retries and service restarts; never inline model probabilities. */
-  save_suggestion(request, suggestion) {
-    const entry = { request_id: request.id, message_id: request.source_message_id || request.message_id, ...suggestion };
-    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(`scheduler-suggestion:${request.id}`, JSON.stringify(entry));
-    return entry;
-  }
-  /** Recover the handoff for one exact request, independent of the room's recent decision window. */
-  saved_suggestion(request_id) {
-    const value = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(`scheduler-suggestion:${request_id}`)?.value;
-    return value ? JSON.parse(value) : null;
-  }
-  /** Save the website record id only after it is returned; failed logging never invents one. */
-  async record_route(request, decision, label, applied) {
-    const record = await this.record_decision(request.message_id, decision, label, applied);
-    this.save_suggestion(request, { action: decision.action, actual_action: applied ? decision.action : 'host', applied,
-      model_judgment: true, ...(record?.id ? { decision_id: record.id } : {}), reason: label });
-  }
-  /** Decide one message and apply a confident pick: one member, everyone, or no one; otherwise the host keeps it. */
-  async recommend(request, room, everyone) {
-    const page = await api(this.config, `/messages?after=${Math.max(0, request.message_id - ROUTE_CONTEXT_MESSAGES)}`);
-    const message = page.messages.find(item => item.id === request.message_id);
-    if (!message) throw new Error('读取不到这条消息');
-    const described = this.route_members(everyone, room, message.id);
-    const host = described.find(member => member.role === 'host');
-    const members = described.filter(member => member !== host);
-    const decision = await route_free_message(this.config.api_home, this.config.scheduler,
-      { title: room.title, goal: room.goal, context: page.messages, message, host, members }, this.fetch);
-    this.save_suggestion(request, { action: decision.action, actual_action: 'unverified', applied: false,
-      model_judgment: true, reason: '判断已产生，自动动作结果尚未核验' });
-    this.log(`智能调度 #${message.id}：${decision.action}${decision.member ? ` ${decision.member}` : ''}（选择 ${decision.choice ?? '-'}，置信度 ${decision.confidence ?? '-'}）`);
-    if (decision.action === 'host') return this.record_route(request, decision, route_host_label(decision, host.name, members), false);
-    if (decision.action !== 'member') {
-      // Everyone, the named few or no one replaces the host's request in one step; a host that already started keeps the message.
-      const applied = await api(this.config, `/recommendations/${message.id}`, { action: decision.action, ...(decision.members ? { members: decision.members } : {}) })
-        .then(() => true, error => { this.log(`智能调度 #${message.id} 未能改派：${error.message}`); return false; });
-      const names = described.map(member => member.name).join('、');
-      const label = decision.action === 'all' ? `请全体各自回应（${names}）` : decision.action === 'sequential' ? '请全体按发言顺序依次回应' : decision.action === 'some' ? `请 ${decision.members.join('、')} 各自回应` : '无需回应，未唤醒任何成员';
-      return this.record_route(request, decision, applied ? label : `${label}（未生效，仍由主持人处理）`, applied);
-    }
-    try {
-      await api(this.config, '/recommendations', { message_id: message.id, member_id: members.find(member => member.name === decision.member).id,
-        provider: this.config.scheduler.provider, confidence: decision.confidence });
-    } catch (error) {
-      await this.record_route(request, decision, `建议让 ${decision.member} 回答（推荐写入失败，未自动生效）`, false);
-      throw error;
-    }
-    // A confident pick is applied at once, interrupting the host; if that fails the recommendation stays for the user to adopt.
-    const adopted = await api(this.config, `/recommendations/${message.id}`, { action: 'adopt', mode: 'interrupt' })
-      .then(() => true, error => { this.log(`智能调度 #${message.id} 自动改派失败，保留推荐：${error.message}`); return false; });
-    await this.record_route(request, decision, adopted ? `改由 ${decision.member} 回答` : `建议让 ${decision.member} 回答（未能自动改派）`, adopted);
-  }
-  /** Show each judgment under its message so the user can rate it; a failed record never affects delivery. */
-  async record_decision(message_id, decision, label, applied, context = {}) {
-    const limits = scheduler_thresholds(this.config.scheduler.mode || DEFAULT_SCHEDULER_MODE);
-    try {
-      return await api(this.config, '/scheduler-decisions', { kind: 'interjection', label, confidence: decision.confidence ?? null,
-        applied, provider: this.config.scheduler.provider, after_message_id: message_id, detail: decision.detail, input: decision.input,
-        context: { model: this.config.scheduler.model, threshold: limits.member, wide_threshold: limits.wide,
-          mode: this.config.scheduler.mode || DEFAULT_SCHEDULER_MODE, prompt: route_prompt_version(this.config.scheduler.mode || DEFAULT_SCHEDULER_MODE), package: PACKAGE_VERSION, ...context } });
-    } catch (error) { this.log(`智能调度 #${message_id} 决策记录未保存：${error.message}`); }
-  }
-  /** Reserve with a persisted client id before invoking any software. */
-  async start(member, row) {
-    const record = this.save(member.name, { client_id: randomUUID(), execution_id: 0, status: 'reserving', error: '',
-      attempts: row?.attempts || 0 });
-    await this.reserve(member, record);
-  }
-  /** A retried client id returns the original execution; a finished or refused one just goes idle. */
-  async reserve(member, record) {
-    let execution;
-    const profile = this.config.participants[member.name];
-    const cwd = profile && !capabilities_of(profile.adapter).project ? '' : cwd_key(profile?.cwd || this.config.cwd);
-    try { execution = await api(this.config, '/executions', { member_id: member.id, client_id: record.client_id, cwd }); }
-    catch (error) {
-      if (/HTTP (404|409)/.test(error.message)) return this.save(member.name, { status: 'idle', error: '' });
-      throw error;
-    }
-    if (!['dispatched', 'started'].includes(execution.status)) return this.save(member.name, { status: 'idle' });
-    this.save(member.name, { execution_id: execution.id, status: 'delivering', started: Date.now(), last_renew: Date.now() });
-    await this.invoke(member, execution);
-  }
-  /** Hand the execution to the member's software; only proven non-delivery is released for retry. */
-  async invoke(member, execution) {
-    const adapter = this.config.participants[member.name];
-    const review_request = execution.requests?.find(request => request.review?.phase === 'review');
-    if (review_request) {
-      try { await this.check_review_delivery(member, review_request); }
-      catch (error) { return this.reject_review(member, execution, error.message); }
-    }
-    if (!adapter) return this.fail(member.name, execution.id, `未配置 ${member.name} 的本机接入`);
-    if (this.context_errors.has(member.name)) return this.fail(member.name, execution.id, this.context_errors.get(member.name));
-    const directory = capabilities_of(adapter.adapter).project ? adapter.cwd || this.config.cwd : undefined;
-    // A read-only member's software cannot write the project, so files changing meanwhile were written by someone else.
-    const before = adapter.project_access === 'read' ? null : workspace_snapshot(directory);
-    if (before) this.snapshots.set(execution.id, { member: member.name, directory, before });
-    const binding = this.store.binding(member.name);
-    // A member whose session a rewind restarted is bound to '' and must not fall back to the session it was invited with.
-    if (binding.session_id === undefined && adapter.session_id) binding.session_id = adapter.session_id;
-    let invoked = false;
-    try {
-      const warning = await this.cut_rewound(member.name, adapter, binding, execution);
-      const session_request = execution.requests?.find(item => item.session_request_id && ['discuss', 'discuss_host'].includes(item.purpose));
-      const session = this.room?.session ? { ...this.room.session } : null;
-      const scheduler_suggestions = !this.config.scheduler || member.role !== 'host' ? []
-        : session_request?.purpose === 'discuss_host' ? this.session_driver.take_suggestions(session_request.id)
-          : execution.requests.map(request => this.saved_suggestion(request.id)).filter(Boolean);
-      const review_handoffs = await this.review_handoffs(execution);
-      // Executions the user stopped that this session may still hold; a rewind already cut its own out, and a new session holds none.
-      const rewound = new Set(execution.rewound_executions || []);
-      const stopped = binding.session_id ? this.stopped_executions(member.name).filter(id => !rewound.has(id)) : [];
-      const task = free_task_files(this.config, member, execution, binding, {
-        session, suggestions: scheduler_suggestions, reviews: review_handoffs, stopped,
-      });
-      invoked = true;
-      this.segments.start(execution.id);
-      if (warning) this.note(execution.id, warning);
-      const result = await this.deliver(review_request ? structuredClone(adapter) : adapter, binding, { ...task, room_title: this.room_title,
-        ...(review_request ? { before_model_start: () => this.check_review_delivery(member, review_request) } : {}),
-        api_context: { site: this.config.site, room: this.config.room, token: this.config.members[member.name].token,
-          home: this.config.api_home, mode: 'free', role: member.role || 'member', execution_id: execution.id,
-          cwd: directory, project_access: adapter.project_access,
-          requests: execution.requests, read_after: execution.read_until, session, discussion_request: session_request,
-          scheduler_suggestions, review_handoffs },
-        on_binding: session => this.store.bind(member.name, session),
-        on_process: child => this.track(member.name, child, execution.id),
-        on_output: (path, chunk) => { appendFileSync(path, chunk, { mode: 0o600 }); this.touch(execution.id); this.segments.mark(execution.id); },
-        on_activity: (phase, tool) => { this.touch(execution.id, phase); this.segments.mark(execution.id, phase, tool); },
-        on_note: text => this.note(execution.id, text),
-        // A stopped process may report after the next execution started; only its own execution takes the result.
-        on_failure: (error, { not_started = false } = {}) => {
-          if (not_started) this.not_started.add(execution.id);
-          try { if (this.row(member.name)?.execution_id === execution.id) this.save(member.name, { error }); } catch { /* Store may already be closed at shutdown. */ }
-        },
-        on_exit: denial => this.exited.set(execution.id, denial || ''),
-        // Shown beside the answer or failure so the owner can allow them; a lost report only hides the list.
-        on_denials: denials => api(this.config, `/executions/${execution.id}`, { action: 'denials', denials }).catch(() => {}),
-      });
-      if (result.session_id) this.store.bind(member.name, result.session_id);
-      this.clear_stopped(member.name);
-      this.save(member.name, { status: result.status === 'sidecar_pending' ? 'sidecar_pending' : 'running', attempts: 0 });
-      await this.report_delivery(execution.id, result.capabilities || capabilities_of(adapter.adapter).delivery, member.name);
-    } catch (error) {
-      if (review_request && error.delivery_status === 'not_sent') return this.reject_review(member, execution, error.message);
-      if (adapter.project_access === 'own') return this.retry_or_fail(member.name, execution, `投递失败：${error.message}`);
-      const attempts = (this.row(member.name)?.attempts || 0) + 1;
-      if ((invoked && error.delivery_status !== 'not_sent') || attempts >= MAX_DELIVERY_ATTEMPTS) {
-        return this.fail(member.name, execution.id, `投递失败：${error.message}`);
-      }
-      await api(this.config, `/executions/${execution.id}`, { action: 'release', reason: `确认未送达：${error.message}` });
-      this.save(member.name, { status: 'idle', attempts, error: error.message });
-    }
-  }
-  /** Recheck local configuration and the site's identity binding before a review starts. */
-  async check_review_delivery(member, request) {
-    const proof = request.review;
-    const version = review_capability_version(this.config.participants[member.name], member, this.config);
-    if (!version || version !== proof.config_version || this.context_errors.has(member.name)) throw new Error('没有可核验只读的评审成员：本机配置与预授权能力版本不符');
-    const current = await api(this.config, `/members/${member.id}/review-capability`);
-    if (current.revision !== proof.member_revision || current.capability?.config_version !== version) throw new Error('评审者资格或能力版本已改变');
-  }
-  /** Cancel only this isolated review execution and leave a durable reason for its host. */
-  async reject_review(member, execution, reason) {
-    await api(this.config, `/executions/${execution.id}`, { action: 'reject_review', reason });
-    this.save(member.name, { status: 'idle', error: reason });
-    this.stop_member(member.name);
-  }
-  /** Attach status and read entry points, never inline the implementation context into a wake-up. */
-  async review_handoffs(execution) {
-    const reviews = [];
-    for (const request of execution.requests || []) {
-      if (request.review?.phase !== 'handoff') continue;
-      const batch_id = request.review.batch_id;
-      try {
-        const state = await api(this.config, `/reviews/${batch_id}/ready`);
-        reviews.push({ batch_id, request_id: request.id, ready: state.ready, reason: state.reason,
-          reviewer: state.plan.reviewer_name, scope: state.plan.scope });
-      } catch (error) { reviews.push({ batch_id, request_id: request.id, ready: false, reason: `无法读取评审推进状态：${error.message}` }); }
-    }
-    return reviews;
-  }
-  /**
-   * Before a member works again after a rewind, branch its session before the executions the rewind took back.
-   * A Claude fork happens on its next turn, so it stays pending until that session exists. Returns a warning when the
-   * session could not be cut and the member continues in the old one.
-   */
-  async cut_rewound(name, adapter, binding, execution) {
-    const key = `session-fork:${name}`;
-    const pending = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
-    if (pending && !session_exists(adapter.adapter, binding.session_id)) { binding.fork = JSON.parse(pending); return ''; }
-    if (pending) this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
-    if (!binding.session_id || !execution.rewound_executions?.length || !BRANCHABLE_ADAPTERS.includes(adapter.adapter)) return '';
-    try {
-      const cut = await branch_session(adapter, binding.session_id, execution.rewound_executions);
-      if (!cut) return '';
-      if (cut.fork) this.store.db.prepare('INSERT INTO metadata VALUES (?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value').run(key, JSON.stringify(cut.fork));
-      this.store.bind(name, cut.session_id);
-      Object.assign(binding, cut);
-      return '';
-    } catch (error) { return `会话未能回退（${error.message}），本次沿用原会话，它可能仍记得已回退的内容`; }
-  }
-  /** Follow the website's verdict; stop only this member's processes when its execution ends. */
-  async reconcile(member, row, active) {
-    if (row.status === 'reserving') return this.reserve(member, row);
-    if (row.status === 'sidecar_pending') {
-      const receipt = delivery_receipt(this.config.participants[member.name], `free-${row.execution_id}`);
-      if (receipt?.status === 'accepted' && receipt.session_id) {
-        this.store.bind(member.name, receipt.session_id);
-        this.save(member.name, { status: 'running' });
-      } else if (receipt && active.has(row.execution_id)) return this.retry_or_fail(member.name, active.get(row.execution_id), receipt.error || 'Sidecar 投递结果不明，请核对原会话');
-    }
-    const execution = active.get(row.execution_id);
-    if (!execution) {
-      this.activity.delete(row.execution_id);
-      await this.report_segments(row.execution_id, true);
-      this.stop_member(member.name);
-      return this.save(member.name, { status: 'idle', error: '' });
-    }
-    if (row.status === 'retry_wait') {
-      const retry = execution.retry;
-      if (retry?.stopped) return this.fail(member.name, execution.id, `${retry.reason}（已停止自动重试）`);
-      if (retry?.retry_at && Date.now() >= retry.retry_at * 1000) {
-        await api(this.config, `/executions/${execution.id}`, { action: 'retry_start' });
-        this.save(member.name, { status: 'delivering' });
-        return this.invoke(member, await api(this.config, `/executions/${execution.id}`));
-      }
-    }
-    // A restart between persisting and invoking cannot prove non-delivery, so it never resends.
-    if (row.status === 'delivering') return this.fail(member.name, execution.id, '上次投递结果不明，未自动重发；请核对原会话后重新发送');
-    if (row.error) return this.retry_or_fail(member.name, execution, row.error);
-    if (this.exited.has(execution.id)) {
-      const latest = await api(this.config, `/executions/${execution.id}`);
-      const denial = this.exited.get(execution.id);
-      if (['dispatched', 'started'].includes(latest.status)) return this.fail(member.name, execution.id, denial
-        ? `${member.name} ${denial}，未提交本次回答`
-        : `${member.name} 会话已结束，但未提交本次回答；请核对原会话确认是否已有内容`);
-      return this.save(member.name, { status: 'idle' });
-    }
-    // Segments and notes go first, quietly and often, so a renewal in the same tick already shows the notes it announces.
-    if (this.segments.due(execution.id, PROGRESS_REPORT_MS)) await this.report_segments(execution.id);
-    const activity = this.activity.get(execution.id);
-    const changed = activity && (activity.phase !== activity.sent_phase || activity.at !== activity.sent_at);
-    const elapsed = Date.now() - row.last_renew;
-    if (elapsed >= RENEW_MS || (changed && elapsed >= ACTIVITY_REPORT_MS)) {
-      await api(this.config, `/executions/${execution.id}`, { action: 'renew',
-        ...(activity ? { activity: activity.phase, activity_at: Math.floor(activity.at / 1000) } : {}) });
-      if (activity) Object.assign(activity, { sent_phase: activity.phase, sent_at: activity.at });
-      this.save(member.name, { last_renew: Date.now() });
-    }
-  }
-  /**
-   * Tell the site what this delivery can do, as the adapter reported it: whether the runner can stop it and see its
-   * progress. Kept locally until the execution ends so a restarted runner still knows whether it could stop it.
-   * A lost report is retained for the final stop result; sites and runners must use the same capability protocol.
-   */
-  async report_delivery(execution_id, { stoppable, progress }, member) {
-    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(`delivery:${execution_id}`, JSON.stringify({ stoppable, progress, member }));
-    await api(this.config, `/executions/${execution_id}`, { action: 'delivery', stoppable, progress })
-      .catch(error => this.log(`执行 #${execution_id} 的投递能力未能上报：${error.message}`));
-  }
-  /** Retry durable stop reports even after the member went idle, left, or started a later execution. */
-  async report_stops(active) {
-    const pending = new Set();
-    for (const { key, value } of this.store.db.prepare("SELECT key,value FROM metadata WHERE key LIKE 'delivery:%'").all()) {
-      const execution_id = Number(key.slice('delivery:'.length));
-      if (active.has(execution_id)) continue;
-      const delivery = stored_delivery(value);
-      const name = delivery.member || this.store.db.prepare('SELECT member FROM free_deliveries WHERE execution_id=?').get(execution_id)?.member;
-      if (!name) continue;
-      for (const child of this.execution_processes.get(execution_id) || []) this.request_stop(child);
-      try { await this.report_stop(name, execution_id); }
-      catch (error) { pending.add(name); this.log(`执行 #${execution_id} 的停止结果未能上报：${error.message}`); }
-    }
-    return pending;
-  }
-  /** Report observed termination, never infer it from a capability or a successfully sent kill signal. */
-  async report_stop(name, execution_id) {
-    const key = `delivery:${execution_id}`;
-    const value = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
-    if (!value) return;
-    const delivery = stored_delivery(value), processes = this.execution_processes.get(execution_id);
-    const ended = processes ? processes.size === 0 : this.exited.has(execution_id);
-    const result = delivery.pending_result && delivery.pending_result !== 'unconfirmed' ? delivery.pending_result
-      : !delivery.stoppable ? 'unstoppable' : ended ? 'stopped' : 'unconfirmed';
-    if (delivery.stop_result === result) return;
-    // Keep the observed outcome before sending: a restart after a lost response must retry the same fact.
-    this.store.db.prepare('UPDATE metadata SET value=? WHERE key=?')
-      .run(JSON.stringify({ ...delivery, member: name, pending_result: result }), key);
-    try { await api(this.config, `/executions/${execution_id}`, { action: 'stopped', result }); }
-    catch (error) {
-      if (!/HTTP 409:/.test(error.message)) throw error;
-      const latest = await api(this.config, `/executions/${execution_id}`);
-      // A conflict is not necessarily normal completion: keep cancelled reports until an idempotent receipt arrives.
-      if (!['completed', 'failed'].includes(latest.status)) throw error;
-      this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
-      this.execution_processes.delete(execution_id);
-      return;
-    }
-    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)')
-      .run(`stopped:${name}`, JSON.stringify([...new Set([...this.stopped_executions(name), execution_id])]));
-    if (result === 'unconfirmed') {
-      this.store.db.prepare('UPDATE metadata SET value=? WHERE key=?')
-        .run(JSON.stringify({ ...delivery, member: name, pending_result: result, stop_result: result }), key);
-      // The site's bounded hold now controls the next delivery; retain handles to observe and retry termination.
-      for (const child of processes || []) this.members.get(name)?.delete(child);
-    }
-    else { this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key); this.execution_processes.delete(execution_id); }
-  }
-  /** Once a new task received the stop reminders, retire acknowledged unconfirmed reports for its old turns. */
-  clear_stopped(name) {
-    for (const id of this.stopped_executions(name)) {
-      const key = `delivery:${id}`, value = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
-      if (value && stored_delivery(value).stop_result === 'unconfirmed') {
-        this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
-        this.execution_processes.delete(id);
-      }
-    }
-    this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(`stopped:${name}`);
-  }
-  /** Executions the user stopped since this member's last delivered task. */
-  stopped_executions(name) {
-    return JSON.parse(this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(`stopped:${name}`)?.value || '[]');
-  }
-  /** Send the execution's recorded segments and progress notes; `final` sends the rest once it has ended. */
-  report_segments(execution_id, final = false) {
-    return this.segments.report(execution_id, final, ({ segments, notes }) =>
-      api(this.config, `/executions/${execution_id}`, { action: 'segments', segments, ...(notes.length ? { notes } : {}) }));
-  }
-  /** Note that the software produced output now, and its phase when the output names one. */
-  touch(execution_id, phase) {
-    // Updated in place: a renewal in flight marks what it sent on this same record.
-    if (!this.activity.has(execution_id)) this.activity.set(execution_id, { phase: '' });
-    const current = this.activity.get(execution_id);
-    if (phase) current.phase = phase;
-    current.at = Date.now();
-  }
-  /** Queue one progress note for the next progress report; numbering makes a retried report harmless. */
-  note(execution_id, text) {
-    this.touch(execution_id);
-    this.segments.note(execution_id, text);
-  }
-  /** Report observed file changes once an execution has ended and its member's processes have exited. */
-  async report_finished(active) {
-    for (const [execution_id, snapshot] of this.snapshots) {
-      if (active.has(execution_id) || this.execution_processes.get(execution_id)?.size) continue;
-      this.snapshots.delete(execution_id);
-      const after = workspace_snapshot(snapshot.directory);
-      if (!after) continue;
-      const changes = changed_between(snapshot.before, after);
-      try { await api(this.config, `/executions/${execution_id}`, { action: 'report', changes: changes.slice(0, 200) }); }
-      catch (error) { if (!/HTTP (404|409)/.test(error.message)) throw error; }
-    }
-  }
-  /**
-   * A manual member's session refused the delivery, or the software failed before any turn ran: keep the execution and
-   * deliver again after a wait shown on the website, up to MAX_DELIVERY_RETRIES times; anything else, or the last
-   * attempt, fails as before.
-   */
-  async retry_or_fail(name, execution, reason) {
-    const attempt = (execution.retry?.attempt || 0) + 1;
-    const not_started = this.not_started.delete(execution.id);
-    if (this.config.participants[name]?.project_access !== 'own' && !not_started) return this.fail(name, execution.id, reason);
-    if (attempt > MAX_DELIVERY_RETRIES) return this.fail(name, execution.id, `${reason}（已自动重试 ${MAX_DELIVERY_RETRIES} 次）`);
-    this.stop_member(name);
-    this.exited.delete(execution.id);
-    await api(this.config, `/executions/${execution.id}`, { action: 'retry_wait', attempt,
-      retry_at: Math.floor(Date.now() / 1000) + RETRY_DELAY_SECONDS, reason: reason.slice(0, MAX_RETRY_REASON) });
-    this.save(name, { status: 'retry_wait', error: '' });
-  }
-  /** Record the cause on the website, then stop this member's own processes. */
-  async fail(name, execution_id, reason) {
-    this.activity.delete(execution_id);
-    this.not_started.delete(execution_id);
-    await this.report_segments(execution_id, true);
-    try { await api(this.config, `/executions/${execution_id}`, { action: 'fail', reason }); }
-    catch (error) { if (!/HTTP 409/.test(error.message)) throw error; }
-    this.save(name, { status: 'idle', error: reason });
-    this.stop_member(name);
-  }
-  /** Count live processes per member so one session never has two writers. */
-  track(name, child, execution_id = this.row(name)?.execution_id) {
-    this.children.add(child);
-    if (!this.members.has(name)) this.members.set(name, new Set());
-    this.members.get(name).add(child);
-    if (!this.execution_processes.has(execution_id)) this.execution_processes.set(execution_id, new Set());
-    const processes = this.execution_processes.get(execution_id);
-    processes.add(child);
-    child.once('close', () => { processes.delete(child); this.children.delete(child); this.members.get(name).delete(child); });
-  }
-  /** Request termination; only a later close event proves it happened. */
-  request_stop(child) { try { child.kill(); } catch { /* The stop report remains unconfirmed. */ } }
-  /** Stop one member's processes without touching other members or desktop apps. */
-  stop_member(name) { for (const child of this.members.get(name) || []) this.request_stop(child); }
-  /** Stop every process this runner created. */
-  stop_children() { for (const child of this.children) this.request_stop(child); }
-}
+/** Free-room delivery: one live execution per member, carrying all of that member's open requests. */
+import { spawnSync } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { appendFileSync, mkdirSync, readFileSync, statSync } from 'node:fs';
+import { basename, join, resolve } from 'node:path';
+import { adapter_of, BRANCHABLE_ADAPTERS, branch_session, capabilities_of, cleanup_room, deliver_task, delivery_receipt, session_exists, stored_delivery } from './adapters/index.mjs';
+import { api, read_rule } from './discussion_runner.mjs';
+import { SegmentLog } from './execution_progress.mjs';
+import { free_task_text, TASK_SUBCOMMANDS, with_expert_prompt } from './expert_prompts.mjs';
+import { atomic_json } from './files.mjs';
+import { SessionDriver } from './session_driver.mjs';
+import { effective_profile, load_room_workflow, workflow_task_field } from './workflows.mjs';
+import { DEFAULT_SCHEDULER_MODE, REVIEW_CONFIDENCE, REVIEW_PROMPT_VERSION, ROUTE_CONFIDENCE, ROUTE_CONTEXT_MESSAGES, ROUTE_PROMPT_VERSION, ROUTE_WIDE_CONFIDENCE, decide_group_order, decide_review_completion, route_free_message, route_prompt_version, scheduler_thresholds, some_members } from './scheduler.mjs';
+
+const PACKAGE_VERSION = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
+const RENEW_MS = 30_000;
+/** A changed phase is reported early, but no more often than this, since each report refreshes open pages. */
+const ACTIVITY_REPORT_MS = 10_000;
+/** Segments and progress notes are reported quietly, waking no page, so they may go every tick. */
+const PROGRESS_REPORT_MS = 2_000;
+const MAX_DELIVERY_ATTEMPTS = 3;
+// A manual member's session that refuses a delivery is retried in the same execution, after a wait the owner can cut short.
+const MAX_DELIVERY_RETRIES = 3;
+const RETRY_DELAY_SECONDS = 60;
+const MAX_RETRY_REASON = 500;
+const LIVE = ['reserving', 'delivering', 'sidecar_pending', 'running', 'retry_wait'];
+const MAX_HASHED_BYTES = 5 * 1024 * 1024;
+const GIT_TIMEOUT_MS = 15_000;
+
+/** Fingerprint configurations whose adapter can enforce project read-only access; no local paths leave this function. */
+export function review_capability_version(profile, member, config) {
+  if (!profile || profile.project_access !== 'read' || member.access !== 'runner' || member.session_mode !== 'new'
+    || !capabilities_of(profile.adapter).enforces_read_only || profile.adapter !== member.adapter
+    || !profile.cwd || profile.allowed_tools?.length) return '';
+  const project = cwd_key(profile.cwd), drafts = cwd_key(config.draft_directory || `${config.directory}-drafts`);
+  if (drafts === project || drafts.startsWith(`${project}/`)) return '';
+  const facts = [1, profile.adapter, profile.executable || '', cwd_key(profile.cwd), cwd_key(profile.workdir),
+    profile.project_id || '', profile.project_name || '', profile.session_id || '', drafts,
+    cwd_key(config.directory)];
+  return createHash('sha256').update(JSON.stringify(facts)).digest('hex');
+}
+
+/** Identify a working directory consistently, so executions in the same cwd can be compared. */
+export function cwd_key(directory) {
+  if (!directory) return '';
+  const path = resolve(directory).replaceAll('\\', '/');
+  return process.platform === 'win32' ? path.toLowerCase() : path;
+}
+
+/**
+ * Record each changed or untracked file's Git status and content hash in a Git working tree.
+ * Returns null outside Git: free rooms then provide no automatic overlap detection.
+ */
+export function workspace_snapshot(directory) {
+  if (!directory) return null;
+  const result = spawnSync('git', ['-C', directory, 'status', '--porcelain=v1', '-z', '--untracked-files=all'],
+    { encoding: 'utf8', windowsHide: true, timeout: GIT_TIMEOUT_MS });
+  if (result.status !== 0) return null;
+  const entries = new Map();
+  const fields = result.stdout.split('\0').filter(Boolean);
+  for (let index = 0; index < fields.length; index++) {
+    const status = fields[index].slice(0, 2), path = fields[index].slice(3);
+    if (status[0] === 'R' || status[0] === 'C') index++; // The original path of a rename follows.
+    let content = 'missing';
+    try {
+      const file = join(directory, path);
+      const size = statSync(file).size;
+      content = size > MAX_HASHED_BYTES ? `size:${size}` : createHash('sha256').update(readFileSync(file)).digest('hex');
+    } catch { /* Deleted files keep the marker. */ }
+    entries.set(path, `${status}:${content}`);
+  }
+  return entries;
+}
+
+/** Paths whose status or content differ between two snapshots of one working tree. */
+export function changed_between(before, after) {
+  const paths = new Set([...before.keys(), ...after.keys()]);
+  return [...paths].filter(path => before.get(path) !== after.get(path)).sort();
+}
+
+/** Write a non-secret task and a member-only credential file for one execution. */
+export function free_task_files(config, member, execution, binding, { session = null, suggestions = [], reviews = [], stopped = [], process_access = true,
+  workflow = null, room_members = [] } = {}) {
+  const id = `free-${execution.id}`;
+  const draft_directory = config.draft_directory || `${config.directory}-drafts`;
+  mkdirSync(draft_directory, { recursive: true });
+  const access_path = join(config.directory, `${id}.access.json`);
+  const task_path = join(config.directory, `${id}.task.json`);
+  // A workflow member's prompt is read from its card for this execution; everything else stays the room's setting.
+  const profile = effective_profile(config.participants[member.name], member.name, workflow);
+  const host_workflow = member.role === 'host' && workflow && !workflow.error ? workflow : null;
+  atomic_json(access_path, { site: config.site, room: config.room, member: member.name, token: config.members[member.name].token,
+    session_id: binding.session_id || '', execution_id: execution.id });
+  const adapter = adapter_of(profile.adapter);
+  const cli = process.platform === 'win32' ? adapter?.windows_command || 'codiscuss.cmd' : 'codiscuss';
+  const inbox = Boolean(adapter?.into_window?.(profile, binding));
+  const bound_access = process_access && !inbox && Boolean(adapter?.capabilities.access_env);
+  const messages = execution.requests.map(item => `#${item.message_id}`).join('、');
+  const requests = execution.requests || [];
+  const discussion_request = requests.find(item => item.session_request_id && ['discuss', 'discuss_host'].includes(item.purpose)) || null;
+  const direct_question = Boolean(session?.status === 'active' && requests.some(item => item.purpose === 'ask'));
+  const { instructions, prompt } = free_task_text({ name: member.label || member.name, role: member.role, discussion: direct_question,
+    discussion_request, profile, cli,
+    room: config.room, messages, read_after: execution.read_until, execution_id: execution.id, task_path,
+    access_file: bound_access ? '' : access_path, read_rule: read_rule(profile.adapter), inbox });
+  const skills = discussion_request || direct_question
+    ? ['discuss-participant/SKILL.md', 'discuss-participant/references/discussion.md',
+      ...member.role === 'host' ? ['discuss-host/SKILL.md', 'discuss-host/references/discussion.md'] : [],
+      ...direct_question ? ['discuss-participant/references/free.md'] : []]
+    : ['discuss-participant/SKILL.md', 'discuss-participant/references/free.md',
+      ...member.role === 'host' ? ['discuss-host/SKILL.md', 'discuss-host/references/free.md'] : []];
+  const skills_directory = join(config.project, '.agents', 'skills');
+  const workflow_field = host_workflow ? workflow_task_field(host_workflow, room_members, config.participants) : null;
+  atomic_json(task_path, { site: config.site, room: config.room, mode: 'free', member: member.name,
+    execution_id: execution.id, requests, request_messages: execution.requests.map(item => item.message_id),
+    request_purposes: execution.requests.map(item => item.purpose || 'ask'),
+    ...(discussion_request ? { discussion_request } : {}),
+    ...(session ? { session: { id: session.id, status: session.status, phase: session.phase,
+      goal: session.goal, named_followup: session.named_followup } } : {}),
+    ...(suggestions.length ? { scheduler_suggestions: suggestions } : {}),
+    ...(reviews.length ? { review_handoffs: reviews } : {}),
+    ...(stopped.length ? { stopped_executions: stopped } : {}),
+    role: member.role || 'member',
+    read_after: execution.read_until, cwd: profile.cwd || null, project_access: profile.project_access, draft_directory,
+    skills: [...skills.map(file => join(config.project, '.agents/skills', file)), ...(host_workflow ? [host_workflow.skill_path] : [])],
+    ...(workflow_field ? { workflow: workflow_field } : {}),
+    cli, subcommands: TASK_SUBCOMMANDS,
+    ...(bound_access ? { access_env: 'DISCUSS_ACCESS_FILE' } : { access_file: access_path }), instructions });
+  return { id, participant: member.name, directory: config.directory, draft_directory,
+    skill_directories: [skills_directory, ...(host_workflow ? [host_workflow.directory] : [])], access_path, prompt: with_expert_prompt(prompt, profile), inbox,
+    profile, ...(workflow_field ? { workflow: { ...workflow_field, skill: host_workflow.skill } } : {}) };
+}
+
+
+/** What a scheduler can know about a member without a role field: its software, project access and the messages it is on. */
+function member_description(name, profile, work) {
+  const project = profile.project_name || (profile.cwd ? basename(profile.cwd) : '');
+  const access = !capabilities_of(profile.adapter).project ? '，只能读写房间消息' : profile.project_access === 'own' ? '，权限沿用其会话设置' : !profile.cwd ? '，未指定项目目录'
+    : profile.project_access === 'read' ? `，项目 ${project} 只读`
+      : `，可修改项目 ${project} 的文件${capabilities_of(profile.adapter).file_tools ? '（不能运行命令）' : '并运行命令'}`;
+  return `${name}（${adapter_of(profile.adapter)?.label || profile.adapter}${access}${work}）`;
+}
+
+/** The other messages a member is answering or has queued, so a correction can follow the message it corrects. */
+function member_work(requests, name, message_id) {
+  const open = requests.filter(item => item.member === name && item.message_id !== message_id);
+  const ids = status => [...new Set(open.filter(item => item.status === status).map(item => `#${item.message_id}`))].join('、');
+  return [ids('delivering') && `；正在处理 ${ids('delivering')}`, ids('pending') && `；待处理 ${ids('pending')}`].filter(Boolean).join('');
+}
+
+/** Why a message stayed with the host: the scheduler chose the host, or leaned elsewhere without enough certainty. */
+function route_host_label(decision, host, members) {
+  if (decision.choice === '__host__' || decision.confidence === null) return `交给主持人 ${host}`;
+  const group = some_members(decision.choice);
+  const lean = decision.choice === '__all__' ? '全体各自回应' : decision.choice === '__all_seq__' ? '全体依次回应' : decision.choice === '__none__' ? '无需回应' : group ? `请 ${group.join('、')} 各自回应`
+    : members.some(member => member.name === decision.choice) ? `请 ${decision.choice} 回答` : '';
+  return lean ? `倾向${lean}，把握不足，交给主持人 ${host}` : `交给主持人 ${host}`;
+}
+
+/** Delivers free-room requests through the same software adapters as discussions. */
+export class FreeRoomRunner {
+  constructor(config, store, deliver = deliver_task, log = () => {}, fetch_impl = fetch, session_driver = null) {
+    this.config = config;
+    this.store = store;
+    this.deliver = deliver;
+    this.log = log;
+    this.fetch = fetch_impl;
+    this.session_driver = session_driver || new SessionDriver(config, log, fetch_impl, store);
+    this.routed = new Set();
+    // Group requests (@全体成员) being arranged; a failed arrangement leaves the set so the next tick retries.
+    this.grouped = new Set();
+    this.decisions = new Set();
+    // Called when a scheduling decision settles; the service checks the room at once instead of waiting for the next poll.
+    this.on_decided = () => {};
+    // Routed requests whose decision is still pending: their host waits, so one pick replaces the host's start.
+    this.routing = new Set();
+    this.children = new Set();
+    this.members = new Map();
+    // An empty set proves every tracked handle for this execution closed; a missing set proves nothing after restart.
+    this.execution_processes = new Map();
+    // Execution id -> why its session ended on its own, such as a command refused in unattended mode ('' when unknown).
+    this.exited = new Map();
+    // Executions whose software failed before any turn ran, as its adapter reported; safe to deliver again.
+    this.not_started = new Set();
+    // Executions whose software failed in a way a retry meets again (a used-up limit, a lost login), as its adapter reported.
+    this.not_retryable = new Set();
+    this.snapshots = new Map();
+    // Execution id -> { phase, at, sent_phase, sent_at }: what the member's software last showed it doing.
+    this.activity = new Map();
+    this.segments = new SegmentLog();
+    this.context_errors = new Map();
+    this.adopt(config);
+    this.store.db.exec(`CREATE TABLE IF NOT EXISTS free_deliveries(member TEXT PRIMARY KEY, client_id TEXT NOT NULL,
+      execution_id INTEGER NOT NULL DEFAULT 0, status TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0,
+      started INTEGER NOT NULL DEFAULT 0, last_renew INTEGER NOT NULL DEFAULT 0, error TEXT NOT NULL DEFAULT '')`);
+  }
+  /** Read this member's current local delivery record. */
+  row(name) { return this.store.db.prepare('SELECT * FROM free_deliveries WHERE member=?').get(name); }
+  /** Persist one member's delivery state; the client id makes a lost reserve response recoverable. */
+  save(name, fields) {
+    const current = this.row(name) || { member: name, client_id: '', execution_id: 0, status: 'idle', attempts: 0, started: 0, last_renew: 0, error: '' };
+    const next = { ...current, ...fields };
+    this.store.db.prepare(`INSERT INTO free_deliveries VALUES (?,?,?,?,?,?,?,?) ON CONFLICT(member) DO UPDATE SET
+      client_id=excluded.client_id,execution_id=excluded.execution_id,status=excluded.status,attempts=excluded.attempts,
+      started=excluded.started,last_renew=excluded.last_renew,error=excluded.error`)
+      .run(name, next.client_id, next.execution_id, next.status, next.attempts, next.started, next.last_renew, next.error);
+    return next;
+  }
+  /**
+   * Take a changed configuration while running: new members are added, but a member whose
+   * project, cwd or bound session changed is blocked instead of silently reusing its conversation.
+   */
+  adopt(config) {
+    for (const [name, item] of Object.entries(config.participants)) {
+      const context = JSON.stringify([item.adapter, item.project_id || '', item.project_name || '', cwd_key(item.cwd), cwd_key(item.workdir), item.session_id || '']);
+      const key = `member-context:${name}`;
+      const previous = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
+      if (previous && !this.same_context(name, previous, context)) this.context_errors.set(name, `${name} 已绑定会话的项目、cwd 或接入方式发生变化；请移除后重新邀请`);
+      else this.store.db.prepare('INSERT INTO metadata VALUES (?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value').run(key, context);
+    }
+    this.config = { ...this.config, ...config, participants: config.participants, members: config.members };
+    this.session_driver.config = this.config;
+  }
+  /**
+   * A Codex member switched between App and CLI keeps its conversation: the two entries count as one, and the App's
+   * session may be filled in from the conversation this member is already bound to.
+   */
+  same_context(name, previous, current) {
+    const [before, after] = [JSON.parse(previous), JSON.parse(current)];
+    for (const context of [before, after]) context[0] = adapter_of(context[0])?.session_family || context[0];
+    const bound = this.store.binding(name).session_id;
+    if (before[5] !== after[5] && [before[5], after[5]].includes('') && [before[5], after[5]].includes(bound)) after[5] = before[5];
+    return JSON.stringify(before) === JSON.stringify(after);
+  }
+  /** One bounded iteration: reconcile live executions, then deliver idle members with open requests. */
+  async tick() {
+    let inbox; let room;
+    // Read one after another: Node's fetch keeps one warm connection per site, and a second parallel request would pay a new
+    // TLS handshake (measured 2 s against 0.4 s through a proxy to a hosted site).
+    try {
+      inbox = await api(this.config, '/inbox');
+      room = await api(this.config, '');
+    }
+    catch (error) {
+      if (error.message === 'HTTP 404: 房间不存在') cleanup_room(this.config.directory);
+      throw error;
+    }
+    if (!inbox.archived) await this.sync_review_capabilities(inbox);
+    if (!inbox.archived) await this.sync_member_capabilities(inbox);
+    if (!inbox.archived && room.session?.status === 'active'
+      && await this.session_driver.tick(room, inbox)) {
+      // A scheduled plan completes the pending host request and creates a speaker request.
+      inbox = await api(this.config, '/inbox');
+      room = await api(this.config, '');
+    }
+    // Smart scheduling runs beside delivery: the host waits for its answer (or failure) before starting, see `routing`.
+    if (this.config.scheduler && !inbox.archived) this.recommend_unnamed(inbox, room);
+    if (this.config.scheduler && !inbox.archived) this.schedule_reviews(inbox);
+    if (!inbox.archived) this.arrange_groups(inbox, room);
+    this.room_title = room.title;
+    this.room = room;
+    this.inbox = inbox;
+    const active = new Map(inbox.executions.map(item => [item.id, item]));
+    const present = new Set(inbox.members.map(member => member.name));
+    // A member sent away or removed no longer appears; its live work was already voided on the website.
+    for (const row of this.store.db.prepare('SELECT * FROM free_deliveries').all()) {
+      if (LIVE.includes(row.status) && !present.has(row.member)) { this.stop_member(row.member); this.save(row.member, { status: 'idle' }); }
+    }
+    await this.report_finished(active);
+    const pending_stops = await this.report_stops(active);
+    // Start in the room's speaking order: execution ids follow it, and the website lays out working cards by them.
+    const rank = (room.speaking_order?.items || []).map(item => item.name);
+    const place = name => rank.includes(name) ? rank.indexOf(name) : rank.length;
+    for (const member of [...inbox.members].sort((left, right) => place(left.name) - place(right.name))) {
+      const row = this.row(member.name);
+      if (row && LIVE.includes(row.status)) await this.reconcile(member, row, active);
+      // A member voided in a window or App the runner could not stop waits until that turn ends (`held_until`).
+      else if (!inbox.archived && member.pending.some(request => request.purpose !== 'group') && !this.members.get(member.name)?.size
+        && !pending_stops.has(member.name)
+        && !member.pending.some(request => this.routing.has(request.id)) && !(member.held_until * 1000 > Date.now())) await this.start(member, row);
+    }
+  }
+  /** Publish only changed local facts, using member revisions supplied by the owner's inbox. */
+  async sync_review_capabilities(inbox) {
+    for (const member of inbox.members) {
+      const current = member.review_capability;
+      if (!current) continue; // Older sites have no review protocol.
+      const version = this.context_errors.has(member.name) ? ''
+        : review_capability_version(this.config.participants[member.name], member, this.config);
+      if ((current.capability?.config_version || '') === version) continue;
+      try {
+        member.review_capability = await api(this.config, `/members/${member.id}/review-capability`, {
+          revision: current.revision, read_only: Boolean(version), ...(version ? { config_version: version } : {}),
+        });
+      } catch (error) { this.log(`只读评审能力未同步：${member.name}：${error.message}`); }
+    }
+  }
+  /** Tell the site what a rewind does to each member's session, as its adapter says; only a change is sent. */
+  async sync_member_capabilities(inbox) {
+    for (const member of inbox.members) {
+      const profile = this.config.participants[member.name];
+      // An older site lists no effect and takes no report.
+      if (member.rewind === undefined || !profile) continue;
+      const rewind = capabilities_of(profile.adapter).rewind;
+      if (member.rewind === rewind) continue;
+      try { await api(this.config, `/members/${member.id}/capabilities`, { rewind }); member.rewind = rewind; }
+      catch (error) { this.log(`成员会话能力未同步：${member.name}：${error.message}`); }
+    }
+  }
+  /** Hold only pending review handoffs while their preauthorized next step is judged. */
+  schedule_reviews(inbox) {
+    const host = inbox.members.find(member => member.role === 'host');
+    if (!host || !this.config.members[host.name]?.token || inbox.executions.some(item => item.member_id === host.id)
+      || LIVE.includes(this.row(host.name)?.status)) return;
+    for (const request of host.pending.filter(item => item.review?.phase === 'handoff')) {
+      const saved = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(`review-decision:${request.id}`)?.value;
+      if (this.routed.has(request.id) || (saved && JSON.parse(saved).done)) continue;
+      this.routed.add(request.id);
+      this.routing.add(request.id);
+      const pending = this.mark_routing(request.message_id, true).then(() => this.judge_review(host, request))
+        .catch(error => {
+          this.save_suggestion(request, { action: 'host', actual_action: 'host', applied: false,
+            model_judgment: false, reason: `没有模型判断：${error.message}` });
+          this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(`review-decision:${request.id}`, JSON.stringify({ done: true }));
+          this.log(`评审交接 #${request.message_id} 交给主持人：${error.message}`);
+        }).finally(() => { this.routing.delete(request.id); return this.mark_routing(request.message_id, false); });
+      this.decisions.add(pending);
+      pending.finally(() => { this.decisions.delete(pending); this.on_decided(); });
+    }
+  }
+  /** Persist the complete judgment and submission before any write, so restart recovery cannot double-dispatch. */
+  async judge_review(host, request) {
+    const key = `review-decision:${request.id}`;
+    const cached = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
+    let job = cached ? JSON.parse(cached) : null;
+    if (!job) {
+      const ready = await api(this.config, `/reviews/${request.review.batch_id}/ready`);
+      const decision = await decide_review_completion(this.config.api_home, this.config.scheduler, ready, this.fetch);
+      job = { decision, revision: ready.revision, submission_id: randomUUID(), profiles: JSON.stringify(this.config.participants) };
+      this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(key, JSON.stringify(job));
+    }
+    const { decision } = job;
+    this.save_suggestion(request, { action: decision.action, actual_action: 'unverified', applied: false,
+      model_judgment: Boolean(decision.detail), reason: '自动评审交接结果尚未核验' });
+    const outcome = decision.action === 'review' ? await this.apply_review(host, request, job)
+      : { applied: false, actual_action: 'host', reason: decision.label };
+    const label = outcome.applied ? decision.label : outcome.reason;
+    const record = decision.detail ? await this.record_decision(request.message_id, decision, label, outcome.applied,
+      { scene: 'review', prompt: REVIEW_PROMPT_VERSION, threshold: REVIEW_CONFIDENCE }) : null;
+    this.save_suggestion(request, { action: decision.action, actual_action: outcome.actual_action, applied: outcome.applied,
+      model_judgment: Boolean(decision.detail), ...(record?.id ? { decision_id: record.id } : {}), reason: label });
+    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(key, JSON.stringify({ ...job, done: true }));
+  }
+  /** Advance only the judged revision; inspect an uncertain write using its persisted submission id. */
+  async apply_review(host, request, job) {
+    if (job.profiles !== JSON.stringify(this.config.participants)) return { applied: false, actual_action: 'host', reason: '本机成员配置已变化，未自动交评审' };
+    try {
+      await api({ ...this.config, token: this.config.members[host.name].token }, '/reviews/advance', {
+        actor: host.name, batch_id: request.review.batch_id, revision: job.revision, submission_id: job.submission_id,
+      });
+      return { applied: true, actual_action: 'review' };
+    } catch (error) {
+      try {
+        const state = await api(this.config, `/reviews/${request.review.batch_id}/ready`);
+        if (state.plan.advance_submission === job.submission_id) return { applied: true, actual_action: 'review' };
+        return { applied: false, actual_action: 'host', reason: `未自动交评审：${error.message}` };
+      } catch { return { applied: false, actual_action: 'unverified', reason: `评审交接写入结果未核验：${error.message}` }; }
+    }
+  }
+  /**
+   * Whether the last tick left nothing in progress: no live delivery or process, no open request for a member this
+   * runner delivers to, no pending scheduling judgement and no running discussion. An idle room changes only through its
+   * website, so the service may wait for the website to report a change before ticking it again.
+   */
+  idle() {
+    const inbox = this.inbox;
+    if (!inbox || this.routing.size || [...this.members.values()].some(children => children.size)) return false;
+    if (this.room?.session?.status === 'active' || inbox.executions.length || inbox.members.some(member => member.pending.length)) return false;
+    return !this.store.db.prepare('SELECT status FROM free_deliveries').all().some(row => LIVE.includes(row.status));
+  }
+  /**
+   * Smart scheduling: for each new unnamed message routed to the host, ask the provider whether another woken
+   * member suits it better and apply a confident pick. The host waits for the answer (or its failure) before starting.
+   */
+  recommend_unnamed(inbox, room) {
+    // Manual members are listed apart; they are never delivered to but may host or be recommended.
+    const everyone = [...inbox.members, ...(inbox.observers || [])];
+    const host = everyone.find(member => member.role === 'host');
+    const waiting = host?.pending.filter(request => request.purpose === 'route' && !request.group_action
+      && !this.routed.has(request.id) && !this.saved_suggestion(request.id)) || [];
+    for (const request of waiting) {
+      this.routed.add(request.id);
+      if (everyone.length < 2) continue;
+      this.routing.add(request.id);
+      const decision = this.mark_routing(request.message_id, true)
+        .then(() => this.recommend(request, room, everyone))
+        .catch(error => {
+          if (!this.saved_suggestion(request.id)) this.save_suggestion(request, { action: 'host', actual_action: 'host',
+            applied: false, model_judgment: false, reason: `没有模型判断：${error.message}` });
+          this.log(`智能调度 #${request.message_id} 未给出推荐：${error.message}`);
+        })
+        .finally(() => { this.routing.delete(request.id); return this.mark_routing(request.message_id, false); });
+      this.decisions.add(decision);
+      decision.finally(() => { this.decisions.delete(decision); this.on_decided(); });
+    }
+  }
+  /** For each message naming everyone, have them answer at once, or one after another when smart scheduling says so. */
+  arrange_groups(inbox, room) {
+    const everyone = [...inbox.members, ...(inbox.observers || [])];
+    for (const request of everyone.flatMap(member => member.pending).filter(item => item.purpose === 'group' && !this.grouped.has(item.id))) {
+      this.grouped.add(request.id);
+      const arranged = (this.config.scheduler ? this.mark_routing(request.message_id, true).then(() => this.order_group(request, room))
+        .finally(() => this.mark_routing(request.message_id, false)) : this.order_group(request, room))
+        .catch(error => { this.grouped.delete(request.id); this.log(`全体成员 #${request.message_id} 未能安排：${error.message}`); });
+      this.decisions.add(arranged);
+      arranged.finally(() => { this.decisions.delete(arranged); this.on_decided(); });
+    }
+  }
+  /** Read and judge together; either kind of failure hands this one numbered group request back to its host. */
+  async judge_group(request, room) {
+    try {
+      const plan = await api(this.config, `/recommendations/${request.message_id}`);
+      const page = await api(this.config, `/messages?after=${Math.max(0, request.message_id - ROUTE_CONTEXT_MESSAGES)}`);
+      const message = page.messages.find(item => item.id === request.message_id);
+      if (!message) throw new Error('读取不到这条消息');
+      const descriptions = Object.fromEntries(plan.members.map(member => [member.name, member.description]));
+      const facts = this.route_members(plan.members, { ...room, descriptions }, message.id);
+      const profiles = JSON.stringify(this.config.participants);
+      const decision = await decide_group_order(this.config.api_home, this.config.scheduler,
+        { title: plan.title, goal: plan.goal, context: page.messages, message,
+          members: plan.members.map(member => member.name), descriptions: facts }, this.fetch);
+      return { decision, revision: plan.revision, profiles };
+    } catch (error) {
+      this.log(`智能调度 #${request.message_id} 未判断全体回答方式，交给主持人：${error.message}`);
+      return { decision: { action: 'host' } };
+    }
+  }
+  /** Persist a judgment before applying it: website retries and runner restarts must not ask the model again. */
+  async order_group(request, room) {
+    if (!this.config.scheduler) {
+      const plan = await api(this.config, `/recommendations/${request.message_id}`);
+      const result = await this.apply_group(request.message_id, { action: 'all' }, plan.revision);
+      if (!result.applied) throw new Error(result.error);
+      return;
+    }
+    const key = `group-decision:${request.id}`;
+    const saved = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
+    const judged = saved ? JSON.parse(saved) : await this.judge_group(request, room);
+    if (!saved) this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(key, JSON.stringify(judged));
+    const { decision, revision, profiles } = judged;
+    this.save_suggestion(request, { action: decision.action, actual_action: 'unverified', applied: false,
+      model_judgment: Boolean(decision.detail), reason: decision.detail ? '判断已产生，自动动作结果尚未核验' : '没有模型判断，交给主持人' });
+    const labels = { all: '请全体同时回答', sequential: '请全体按发言顺序依次回答', host: '交给主持人处理原消息' };
+    let result = profiles && profiles !== JSON.stringify(this.config.participants)
+      ? { status: 'changed', applied: false, error: '成员本机配置已变化' }
+      : await this.apply_group(request.message_id, decision, revision);
+    let actual_action = result.applied ? decision.action : 'unverified';
+    let label = labels[decision.action];
+    if (result.status === 'changed' && decision.action !== 'host') {
+      label += '（未生效，状态已变化）';
+      const fallback = await this.apply_group(request.message_id, { action: 'host' });
+      if (fallback.applied) actual_action = 'host';
+      if (fallback.status === 'failed') result = fallback;
+    }
+    let record;
+    if (decision.detail) {
+      if (result.status === 'failed') label += '（未生效，网站写入失败）';
+      // The @全体成员 question has one wording in every mode.
+      record = await this.record_decision(request.message_id, decision, label, result.applied && decision.action !== 'host', { prompt: ROUTE_PROMPT_VERSION, threshold: ROUTE_CONFIDENCE, wide_threshold: ROUTE_WIDE_CONFIDENCE });
+    }
+    this.save_suggestion(request, { action: decision.action, actual_action,
+      applied: result.applied && decision.action !== 'host', model_judgment: Boolean(decision.detail),
+      ...(record?.id ? { decision_id: record.id } : {}), reason: decision.detail ? label : '没有模型判断，交给主持人' });
+    if (result.status === 'failed') throw new Error(result.error);
+    this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
+  }
+  /** Apply once with the state that was judged; distinguish conflicts from failed writes and actual success. */
+  async apply_group(message_id, decision, revision) {
+    try {
+      await api(this.config, `/recommendations/${message_id}`, { action: decision.action, ...(revision ? { revision } : {}) });
+      this.log(`全体成员 #${message_id}：${{ all: '同时回答', sequential: '依次回答', host: '交给主持人' }[decision.action]}`);
+      return { status: 'applied', applied: true };
+    } catch (error) {
+      return { status: /HTTP (404|409)/.test(error.message) ? 'changed' : 'failed', applied: false, error: error.message };
+    }
+  }
+  /** Tell the website a message is being analysed so it can show the card; a failed mark never blocks routing. */
+  async mark_routing(message_id, active) {
+    try { await api(this.config, '/scheduler-routing', { message_id, active }); }
+    catch (error) { this.log(`智能调度 #${message_id} 分析状态未上报：${error.message}`); }
+  }
+  /** Describe each member as the scheduler sees it: software, project access and the other messages it is on. */
+  route_members(everyone, room, message_id) {
+    const requests = (room.free?.requests || []).filter(item => ['pending', 'delivering'].includes(item.status));
+    return everyone.map(member => {
+      const work = member_work(requests, member.name, message_id);
+      const profile = this.config.participants[member.name];
+      const described = room.descriptions?.[member.name] ? `；用户描述：${room.descriptions[member.name]}` : '';
+      // The model and the last finished message are only read by the guided wording.
+      const finished = (room.free?.requests || []).filter(item => item.member === member.name && item.status === 'completed' && item.message_id !== message_id).at(-1);
+      return { id: member.id, name: member.name, role: member.role, model: profile?.model || '', finished: finished ? `#${finished.message_id}` : '',
+        description: profile ? member_description(member.name, profile, `${work}${described}`)
+        : `${member.name}（手动接入，由用户代为触发${work}${described}）` };
+    });
+  }
+  /** Retain a request-bound handoff across retries and service restarts; never inline model probabilities. */
+  save_suggestion(request, suggestion) {
+    const entry = { request_id: request.id, message_id: request.source_message_id || request.message_id, ...suggestion };
+    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(`scheduler-suggestion:${request.id}`, JSON.stringify(entry));
+    return entry;
+  }
+  /** Recover the handoff for one exact request, independent of the room's recent decision window. */
+  saved_suggestion(request_id) {
+    const value = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(`scheduler-suggestion:${request_id}`)?.value;
+    return value ? JSON.parse(value) : null;
+  }
+  /** Save the website record id only after it is returned; failed logging never invents one. */
+  async record_route(request, decision, label, applied) {
+    const record = await this.record_decision(request.message_id, decision, label, applied);
+    this.save_suggestion(request, { action: decision.action, actual_action: applied ? decision.action : 'host', applied,
+      model_judgment: true, ...(record?.id ? { decision_id: record.id } : {}), reason: label });
+  }
+  /** Decide one message and apply a confident pick: one member, everyone, or no one; otherwise the host keeps it. */
+  async recommend(request, room, everyone) {
+    const page = await api(this.config, `/messages?after=${Math.max(0, request.message_id - ROUTE_CONTEXT_MESSAGES)}`);
+    const message = page.messages.find(item => item.id === request.message_id);
+    if (!message) throw new Error('读取不到这条消息');
+    const described = this.route_members(everyone, room, message.id);
+    const host = described.find(member => member.role === 'host');
+    const members = described.filter(member => member !== host);
+    const decision = await route_free_message(this.config.api_home, this.config.scheduler,
+      { title: room.title, goal: room.goal, context: page.messages, message, host, members }, this.fetch);
+    this.save_suggestion(request, { action: decision.action, actual_action: 'unverified', applied: false,
+      model_judgment: true, reason: '判断已产生，自动动作结果尚未核验' });
+    this.log(`智能调度 #${message.id}：${decision.action}${decision.member ? ` ${decision.member}` : ''}（选择 ${decision.choice ?? '-'}，置信度 ${decision.confidence ?? '-'}）`);
+    if (decision.action === 'host') return this.record_route(request, decision, route_host_label(decision, host.name, members), false);
+    if (decision.action !== 'member') {
+      // Everyone, the named few or no one replaces the host's request in one step; a host that already started keeps the message.
+      const applied = await api(this.config, `/recommendations/${message.id}`, { action: decision.action, ...(decision.members ? { members: decision.members } : {}) })
+        .then(() => true, error => { this.log(`智能调度 #${message.id} 未能改派：${error.message}`); return false; });
+      const names = described.map(member => member.name).join('、');
+      const label = decision.action === 'all' ? `请全体各自回应（${names}）` : decision.action === 'sequential' ? '请全体按发言顺序依次回应' : decision.action === 'some' ? `请 ${decision.members.join('、')} 各自回应` : '无需回应，未唤醒任何成员';
+      return this.record_route(request, decision, applied ? label : `${label}（未生效，仍由主持人处理）`, applied);
+    }
+    try {
+      await api(this.config, '/recommendations', { message_id: message.id, member_id: members.find(member => member.name === decision.member).id,
+        provider: this.config.scheduler.provider, confidence: decision.confidence });
+    } catch (error) {
+      await this.record_route(request, decision, `建议让 ${decision.member} 回答（推荐写入失败，未自动生效）`, false);
+      throw error;
+    }
+    // A confident pick is applied at once, interrupting the host; if that fails the recommendation stays for the user to adopt.
+    const adopted = await api(this.config, `/recommendations/${message.id}`, { action: 'adopt', mode: 'interrupt' })
+      .then(() => true, error => { this.log(`智能调度 #${message.id} 自动改派失败，保留推荐：${error.message}`); return false; });
+    await this.record_route(request, decision, adopted ? `改由 ${decision.member} 回答` : `建议让 ${decision.member} 回答（未能自动改派）`, adopted);
+  }
+  /** Show each judgment under its message so the user can rate it; a failed record never affects delivery. */
+  async record_decision(message_id, decision, label, applied, context = {}) {
+    const limits = scheduler_thresholds(this.config.scheduler.mode || DEFAULT_SCHEDULER_MODE);
+    try {
+      return await api(this.config, '/scheduler-decisions', { kind: 'interjection', label, confidence: decision.confidence ?? null,
+        applied, provider: this.config.scheduler.provider, after_message_id: message_id, detail: decision.detail, input: decision.input,
+        context: { model: this.config.scheduler.model, threshold: limits.member, wide_threshold: limits.wide,
+          mode: this.config.scheduler.mode || DEFAULT_SCHEDULER_MODE, prompt: route_prompt_version(this.config.scheduler.mode || DEFAULT_SCHEDULER_MODE), package: PACKAGE_VERSION, ...context } });
+    } catch (error) { this.log(`智能调度 #${message_id} 决策记录未保存：${error.message}`); }
+  }
+  /** Reserve with a persisted client id before invoking any software. */
+  async start(member, row) {
+    const record = this.save(member.name, { client_id: randomUUID(), execution_id: 0, status: 'reserving', error: '',
+      attempts: row?.attempts || 0 });
+    await this.reserve(member, record);
+  }
+  /** A retried client id returns the original execution; a finished or refused one just goes idle. */
+  async reserve(member, record) {
+    let execution;
+    const profile = this.config.participants[member.name];
+    const cwd = profile && !capabilities_of(profile.adapter).project ? '' : cwd_key(profile?.cwd || this.config.cwd);
+    try { execution = await api(this.config, '/executions', { member_id: member.id, client_id: record.client_id, cwd }); }
+    catch (error) {
+      if (/HTTP (404|409)/.test(error.message)) return this.save(member.name, { status: 'idle', error: '' });
+      throw error;
+    }
+    if (!['dispatched', 'started'].includes(execution.status)) return this.save(member.name, { status: 'idle' });
+    this.save(member.name, { execution_id: execution.id, status: 'delivering', started: Date.now(), last_renew: Date.now() });
+    await this.invoke(member, execution);
+  }
+  /** Hand the execution to the member's software; only proven non-delivery is released for retry. */
+  async invoke(member, execution) {
+    const adapter = this.config.participants[member.name];
+    const review_request = execution.requests?.find(request => request.review?.phase === 'review');
+    if (review_request) {
+      try { await this.check_review_delivery(member, review_request); }
+      catch (error) { return this.reject_review(member, execution, error.message); }
+    }
+    if (!adapter) return this.fail(member.name, execution.id, `未配置 ${member.name} 的本机接入`);
+    if (this.context_errors.has(member.name)) return this.fail(member.name, execution.id, this.context_errors.get(member.name));
+    const directory = capabilities_of(adapter.adapter).project ? adapter.cwd || this.config.cwd : undefined;
+    // A read-only member's software cannot write the project, so files changing meanwhile were written by someone else.
+    const before = adapter.project_access === 'read' ? null : workspace_snapshot(directory);
+    if (before) this.snapshots.set(execution.id, { member: member.name, directory, before });
+    const binding = this.store.binding(member.name);
+    // A member whose session a rewind restarted is bound to '' and must not fall back to the session it was invited with.
+    if (binding.session_id === undefined && adapter.session_id) binding.session_id = adapter.session_id;
+    let invoked = false;
+    try {
+      const warning = await this.cut_rewound(member.name, adapter, binding, execution);
+      const session_request = execution.requests?.find(item => item.session_request_id && ['discuss', 'discuss_host'].includes(item.purpose));
+      const session = this.room?.session ? { ...this.room.session } : null;
+      const scheduler_suggestions = !this.config.scheduler || member.role !== 'host' ? []
+        : session_request?.purpose === 'discuss_host' ? this.session_driver.take_suggestions(session_request.id)
+          : execution.requests.map(request => this.saved_suggestion(request.id)).filter(Boolean);
+      const review_handoffs = await this.review_handoffs(execution);
+      // Executions the user stopped that this session may still hold; a rewind already cut its own out, and a new session holds none.
+      const rewound = new Set(execution.rewound_executions || []);
+      const stopped = binding.session_id ? this.stopped_executions(member.name).filter(id => !rewound.has(id)) : [];
+      const workflow = load_room_workflow(this.config);
+      // An unreadable workflow leaves members on their room settings; it is logged once per error, not every execution.
+      if (workflow?.error && this.workflow_error !== workflow.error) this.log(`工作流 ${workflow.id} 不可用：${workflow.error}`);
+      this.workflow_error = workflow?.error || '';
+      const task = free_task_files(this.config, member, execution, binding, {
+        session, suggestions: scheduler_suggestions, reviews: review_handoffs, stopped, workflow, room_members: this.room?.members,
+      });
+      invoked = true;
+      this.segments.start(execution.id);
+      if (warning) this.note(execution.id, warning);
+      const result = await this.deliver(review_request ? structuredClone(task.profile) : task.profile, binding, { ...task, room_title: this.room_title,
+        ...(review_request ? { before_model_start: () => this.check_review_delivery(member, review_request) } : {}),
+        api_context: { site: this.config.site, room: this.config.room, token: this.config.members[member.name].token,
+          home: this.config.api_home, mode: 'free', role: member.role || 'member', execution_id: execution.id,
+          cwd: directory, project_access: adapter.project_access,
+          requests: execution.requests, read_after: execution.read_until, session, discussion_request: session_request,
+          scheduler_suggestions, review_handoffs, ...(task.workflow ? { workflow: task.workflow } : {}) },
+        on_binding: session => this.store.bind(member.name, session),
+        on_process: child => this.track(member.name, child, execution.id),
+        on_output: (path, chunk) => { appendFileSync(path, chunk, { mode: 0o600 }); this.touch(execution.id); this.segments.mark(execution.id); },
+        on_activity: (phase, tool) => { this.touch(execution.id, phase); this.segments.mark(execution.id, phase, tool); },
+        on_note: text => this.note(execution.id, text),
+        // A stopped process may report after the next execution started; only its own execution takes the result.
+        on_failure: (error, { not_started = false, retryable = true } = {}) => {
+          if (not_started) this.not_started.add(execution.id);
+          if (!retryable) this.not_retryable.add(execution.id);
+          try { if (this.row(member.name)?.execution_id === execution.id) this.save(member.name, { error }); } catch { /* Store may already be closed at shutdown. */ }
+        },
+        on_exit: denial => this.exited.set(execution.id, denial || ''),
+        // Shown beside the answer or failure so the owner can allow them; a lost report only hides the list.
+        on_denials: denials => api(this.config, `/executions/${execution.id}`, { action: 'denials', denials }).catch(() => {}),
+      });
+      if (result.session_id) this.store.bind(member.name, result.session_id);
+      this.clear_stopped(member.name);
+      this.save(member.name, { status: result.status === 'sidecar_pending' ? 'sidecar_pending' : 'running', attempts: 0 });
+      await this.report_delivery(execution.id, result.capabilities || capabilities_of(adapter.adapter).delivery, member.name);
+    } catch (error) {
+      if (review_request && error.delivery_status === 'not_sent') return this.reject_review(member, execution, error.message);
+      if (adapter.project_access === 'own') return this.retry_or_fail(member.name, execution, `投递失败：${error.message}`);
+      const attempts = (this.row(member.name)?.attempts || 0) + 1;
+      if ((invoked && error.delivery_status !== 'not_sent') || attempts >= MAX_DELIVERY_ATTEMPTS) {
+        return this.fail(member.name, execution.id, `投递失败：${error.message}`);
+      }
+      await api(this.config, `/executions/${execution.id}`, { action: 'release', reason: `确认未送达：${error.message}` });
+      this.save(member.name, { status: 'idle', attempts, error: error.message });
+    }
+  }
+  /** Recheck local configuration and the site's identity binding before a review starts. */
+  async check_review_delivery(member, request) {
+    const proof = request.review;
+    const version = review_capability_version(this.config.participants[member.name], member, this.config);
+    if (!version || version !== proof.config_version || this.context_errors.has(member.name)) throw new Error('没有可核验只读的评审成员：本机配置与预授权能力版本不符');
+    const current = await api(this.config, `/members/${member.id}/review-capability`);
+    if (current.revision !== proof.member_revision || current.capability?.config_version !== version) throw new Error('评审者资格或能力版本已改变');
+  }
+  /** Cancel only this isolated review execution and leave a durable reason for its host. */
+  async reject_review(member, execution, reason) {
+    await api(this.config, `/executions/${execution.id}`, { action: 'reject_review', reason });
+    this.save(member.name, { status: 'idle', error: reason });
+    this.stop_member(member.name);
+  }
+  /** Attach status and read entry points, never inline the implementation context into a wake-up. */
+  async review_handoffs(execution) {
+    const reviews = [];
+    for (const request of execution.requests || []) {
+      if (request.review?.phase !== 'handoff') continue;
+      const batch_id = request.review.batch_id;
+      try {
+        const state = await api(this.config, `/reviews/${batch_id}/ready`);
+        reviews.push({ batch_id, request_id: request.id, ready: state.ready, reason: state.reason,
+          reviewer: state.plan.reviewer_name, scope: state.plan.scope });
+      } catch (error) { reviews.push({ batch_id, request_id: request.id, ready: false, reason: `无法读取评审推进状态：${error.message}` }); }
+    }
+    return reviews;
+  }
+  /**
+   * Before a member works again after a rewind, branch its session before the executions the rewind took back.
+   * A Claude fork happens on its next turn, so it stays pending until that session exists. Returns a warning when the
+   * session could not be cut and the member continues in the old one.
+   */
+  async cut_rewound(name, adapter, binding, execution) {
+    const key = `session-fork:${name}`;
+    const pending = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
+    if (pending && !session_exists(adapter.adapter, binding.session_id)) { binding.fork = JSON.parse(pending); return ''; }
+    if (pending) this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
+    if (!binding.session_id || !execution.rewound_executions?.length || !BRANCHABLE_ADAPTERS.includes(adapter.adapter)) return '';
+    try {
+      const cut = await branch_session(adapter, binding.session_id, execution.rewound_executions);
+      if (!cut) return '';
+      if (cut.fork) this.store.db.prepare('INSERT INTO metadata VALUES (?,?) ON CONFLICT(key) DO UPDATE SET value=excluded.value').run(key, JSON.stringify(cut.fork));
+      this.store.bind(name, cut.session_id);
+      Object.assign(binding, cut);
+      return '';
+    } catch (error) { return `会话未能回退（${error.message}），本次沿用原会话，它可能仍记得已回退的内容`; }
+  }
+  /** Follow the website's verdict; stop only this member's processes when its execution ends. */
+  async reconcile(member, row, active) {
+    if (row.status === 'reserving') return this.reserve(member, row);
+    if (row.status === 'sidecar_pending') {
+      const receipt = delivery_receipt(this.config.participants[member.name], `free-${row.execution_id}`);
+      if (receipt?.status === 'accepted' && receipt.session_id) {
+        this.store.bind(member.name, receipt.session_id);
+        this.save(member.name, { status: 'running' });
+      } else if (receipt && active.has(row.execution_id)) return this.retry_or_fail(member.name, active.get(row.execution_id), receipt.error || 'Sidecar 投递结果不明，请核对原会话');
+    }
+    const execution = active.get(row.execution_id);
+    if (!execution) {
+      this.activity.delete(row.execution_id);
+      await this.report_segments(row.execution_id, true);
+      this.stop_member(member.name);
+      return this.save(member.name, { status: 'idle', error: '' });
+    }
+    if (row.status === 'retry_wait') {
+      const retry = execution.retry;
+      if (retry?.stopped) return this.fail(member.name, execution.id, `${retry.reason}（已停止自动重试）`);
+      if (retry?.retry_at && Date.now() >= retry.retry_at * 1000) {
+        await api(this.config, `/executions/${execution.id}`, { action: 'retry_start' });
+        this.save(member.name, { status: 'delivering' });
+        return this.invoke(member, await api(this.config, `/executions/${execution.id}`));
+      }
+    }
+    // A restart between persisting and invoking cannot prove non-delivery, so it never resends.
+    if (row.status === 'delivering') return this.fail(member.name, execution.id, '上次投递结果不明，未自动重发；请核对原会话后重新发送');
+    if (row.error) return this.retry_or_fail(member.name, execution, row.error);
+    if (this.exited.has(execution.id)) {
+      const latest = await api(this.config, `/executions/${execution.id}`);
+      const denial = this.exited.get(execution.id);
+      if (['dispatched', 'started'].includes(latest.status)) return this.fail(member.name, execution.id, denial
+        ? `${member.name} ${denial}，未提交本次回答`
+        : `${member.name} 会话已结束，但未提交本次回答；请核对原会话确认是否已有内容`);
+      return this.save(member.name, { status: 'idle' });
+    }
+    // Segments and notes go first, quietly and often, so a renewal in the same tick already shows the notes it announces.
+    if (this.segments.due(execution.id, PROGRESS_REPORT_MS)) await this.report_segments(execution.id);
+    const activity = this.activity.get(execution.id);
+    const changed = activity && (activity.phase !== activity.sent_phase || activity.at !== activity.sent_at);
+    const elapsed = Date.now() - row.last_renew;
+    if (elapsed >= RENEW_MS || (changed && elapsed >= ACTIVITY_REPORT_MS)) {
+      await api(this.config, `/executions/${execution.id}`, { action: 'renew',
+        ...(activity ? { activity: activity.phase, activity_at: Math.floor(activity.at / 1000) } : {}) });
+      if (activity) Object.assign(activity, { sent_phase: activity.phase, sent_at: activity.at });
+      this.save(member.name, { last_renew: Date.now() });
+    }
+  }
+  /**
+   * Tell the site what this delivery can do, as the adapter reported it: whether the runner can stop it and see its
+   * progress. Kept locally until the execution ends so a restarted runner still knows whether it could stop it.
+   * A lost report is retained for the final stop result; sites and runners must use the same capability protocol.
+   */
+  async report_delivery(execution_id, { stoppable, progress }, member) {
+    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)').run(`delivery:${execution_id}`, JSON.stringify({ stoppable, progress, member }));
+    await api(this.config, `/executions/${execution_id}`, { action: 'delivery', stoppable, progress })
+      .catch(error => this.log(`执行 #${execution_id} 的投递能力未能上报：${error.message}`));
+  }
+  /** Retry durable stop reports even after the member went idle, left, or started a later execution. */
+  async report_stops(active) {
+    const pending = new Set();
+    for (const { key, value } of this.store.db.prepare("SELECT key,value FROM metadata WHERE key LIKE 'delivery:%'").all()) {
+      const execution_id = Number(key.slice('delivery:'.length));
+      if (active.has(execution_id)) continue;
+      const delivery = stored_delivery(value);
+      const name = delivery.member || this.store.db.prepare('SELECT member FROM free_deliveries WHERE execution_id=?').get(execution_id)?.member;
+      if (!name) continue;
+      for (const child of this.execution_processes.get(execution_id) || []) this.request_stop(child);
+      try { await this.report_stop(name, execution_id); }
+      catch (error) { pending.add(name); this.log(`执行 #${execution_id} 的停止结果未能上报：${error.message}`); }
+    }
+    return pending;
+  }
+  /** Report observed termination, never infer it from a capability or a successfully sent kill signal. */
+  async report_stop(name, execution_id) {
+    const key = `delivery:${execution_id}`;
+    const value = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
+    if (!value) return;
+    const delivery = stored_delivery(value), processes = this.execution_processes.get(execution_id);
+    const ended = processes ? processes.size === 0 : this.exited.has(execution_id);
+    const result = delivery.pending_result && delivery.pending_result !== 'unconfirmed' ? delivery.pending_result
+      : !delivery.stoppable ? 'unstoppable' : ended ? 'stopped' : 'unconfirmed';
+    if (delivery.stop_result === result) return;
+    // Keep the observed outcome before sending: a restart after a lost response must retry the same fact.
+    this.store.db.prepare('UPDATE metadata SET value=? WHERE key=?')
+      .run(JSON.stringify({ ...delivery, member: name, pending_result: result }), key);
+    try { await api(this.config, `/executions/${execution_id}`, { action: 'stopped', result }); }
+    catch (error) {
+      if (!/HTTP 409:/.test(error.message)) throw error;
+      const latest = await api(this.config, `/executions/${execution_id}`);
+      // A conflict is not necessarily normal completion: keep cancelled reports until an idempotent receipt arrives.
+      if (!['completed', 'failed'].includes(latest.status)) throw error;
+      this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
+      this.execution_processes.delete(execution_id);
+      return;
+    }
+    this.store.db.prepare('INSERT OR REPLACE INTO metadata VALUES (?,?)')
+      .run(`stopped:${name}`, JSON.stringify([...new Set([...this.stopped_executions(name), execution_id])]));
+    if (result === 'unconfirmed') {
+      this.store.db.prepare('UPDATE metadata SET value=? WHERE key=?')
+        .run(JSON.stringify({ ...delivery, member: name, pending_result: result, stop_result: result }), key);
+      // The site's bounded hold now controls the next delivery; retain handles to observe and retry termination.
+      for (const child of processes || []) this.members.get(name)?.delete(child);
+    }
+    else { this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key); this.execution_processes.delete(execution_id); }
+  }
+  /** Once a new task received the stop reminders, retire acknowledged unconfirmed reports for its old turns. */
+  clear_stopped(name) {
+    for (const id of this.stopped_executions(name)) {
+      const key = `delivery:${id}`, value = this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(key)?.value;
+      if (value && stored_delivery(value).stop_result === 'unconfirmed') {
+        this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(key);
+        this.execution_processes.delete(id);
+      }
+    }
+    this.store.db.prepare('DELETE FROM metadata WHERE key=?').run(`stopped:${name}`);
+  }
+  /** Executions the user stopped since this member's last delivered task. */
+  stopped_executions(name) {
+    return JSON.parse(this.store.db.prepare('SELECT value FROM metadata WHERE key=?').get(`stopped:${name}`)?.value || '[]');
+  }
+  /** Send the execution's recorded segments and progress notes; `final` sends the rest once it has ended. */
+  report_segments(execution_id, final = false) {
+    return this.segments.report(execution_id, final, ({ segments, notes }) =>
+      api(this.config, `/executions/${execution_id}`, { action: 'segments', segments, ...(notes.length ? { notes } : {}) }));
+  }
+  /** Note that the software produced output now, and its phase when the output names one. */
+  touch(execution_id, phase) {
+    // Updated in place: a renewal in flight marks what it sent on this same record.
+    if (!this.activity.has(execution_id)) this.activity.set(execution_id, { phase: '' });
+    const current = this.activity.get(execution_id);
+    if (phase) current.phase = phase;
+    current.at = Date.now();
+  }
+  /** Queue one progress note for the next progress report; numbering makes a retried report harmless. */
+  note(execution_id, text) {
+    this.touch(execution_id);
+    this.segments.note(execution_id, text);
+  }
+  /** Report observed file changes once an execution has ended and its member's processes have exited. */
+  async report_finished(active) {
+    for (const [execution_id, snapshot] of this.snapshots) {
+      if (active.has(execution_id) || this.execution_processes.get(execution_id)?.size) continue;
+      this.snapshots.delete(execution_id);
+      const after = workspace_snapshot(snapshot.directory);
+      if (!after) continue;
+      const changes = changed_between(snapshot.before, after);
+      try { await api(this.config, `/executions/${execution_id}`, { action: 'report', changes: changes.slice(0, 200) }); }
+      catch (error) { if (!/HTTP (404|409)/.test(error.message)) throw error; }
+    }
+  }
+  /**
+   * A manual member's session refused the delivery, or the software failed before any turn ran: keep the execution and
+   * deliver again after a wait shown on the website, up to MAX_DELIVERY_RETRIES times; anything else, or the last
+   * attempt, fails as before.
+   */
+  async retry_or_fail(name, execution, reason) {
+    const attempt = (execution.retry?.attempt || 0) + 1;
+    const not_started = this.not_started.delete(execution.id);
+    if (this.not_retryable.delete(execution.id)) return this.fail(name, execution.id, reason);
+    if (this.config.participants[name]?.project_access !== 'own' && !not_started) return this.fail(name, execution.id, reason);
+    if (attempt > MAX_DELIVERY_RETRIES) return this.fail(name, execution.id, `${reason}（已自动重试 ${MAX_DELIVERY_RETRIES} 次）`);
+    this.stop_member(name);
+    this.exited.delete(execution.id);
+    await api(this.config, `/executions/${execution.id}`, { action: 'retry_wait', attempt,
+      retry_at: Math.floor(Date.now() / 1000) + RETRY_DELAY_SECONDS, reason: reason.slice(0, MAX_RETRY_REASON) });
+    this.save(name, { status: 'retry_wait', error: '' });
+  }
+  /** Record the cause on the website, then stop this member's own processes. */
+  async fail(name, execution_id, reason) {
+    this.activity.delete(execution_id);
+    this.not_started.delete(execution_id);
+    this.not_retryable.delete(execution_id);
+    await this.report_segments(execution_id, true);
+    try { await api(this.config, `/executions/${execution_id}`, { action: 'fail', reason }); }
+    catch (error) { if (!/HTTP 409/.test(error.message)) throw error; }
+    this.save(name, { status: 'idle', error: reason });
+    this.stop_member(name);
+  }
+  /** Count live processes per member so one session never has two writers. */
+  track(name, child, execution_id = this.row(name)?.execution_id) {
+    this.children.add(child);
+    if (!this.members.has(name)) this.members.set(name, new Set());
+    this.members.get(name).add(child);
+    if (!this.execution_processes.has(execution_id)) this.execution_processes.set(execution_id, new Set());
+    const processes = this.execution_processes.get(execution_id);
+    processes.add(child);
+    child.once('close', () => { processes.delete(child); this.children.delete(child); this.members.get(name).delete(child); });
+  }
+  /** Request termination; only a later close event proves it happened. */
+  request_stop(child) { try { child.kill(); } catch { /* The stop report remains unconfirmed. */ } }
+  /** Stop one member's processes without touching other members or desktop apps. */
+  stop_member(name) { for (const child of this.members.get(name) || []) this.request_stop(child); }
+  /** Stop every process this runner created. */
+  stop_children() { for (const child of this.children) this.request_stop(child); }
+}