dsh-session-bridge 0.2.1 → 0.3.1

package/lib/index.js

@@ -4,7 +4,7 @@ import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { appendFileSync, mkdirSync } from "node:fs";
 import { randomUUID } from "node:crypto";
-//#region node_modules/.pnpm/@deepseek-ai+dsh-home-paths@0.1.2-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-in_163d6a248f48546c43609789e3a6f2aa/node_modules/@deepseek-ai/dsh-home-paths/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-home-paths@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-home-paths/lib/index.js
 /**
 * Shared filesystem path helpers for DeepSeek Harness user data.
 *
@@ -2200,7 +2200,7 @@ var Service = class Service {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-typert-protocol@0.1.2-alpha.5_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-typert-protocol/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-typert-protocol@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-typert-protocol/lib/index.js
 /** The one Remote failure class shared by owners, the Gateway, and consumers. */
 /**
 * One Remote call failure: a real Error carrying its stable code and typed
@@ -2345,7 +2345,7 @@ function validateName(subject, value) {
 	if (!isTypertRemoteSegment(value)) throw new TypeError(`typert-protocol: ${subject} must contain only RPC endpoint segment characters`);
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-util-values@0.1.2-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-i_4c434a1a30063a3cb77c280072a5c101/node_modules/@deepseek-ai/dsh-util-values/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-util-values@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-util-values/lib/index.js
 /** Duplicate-install-safe JSON and immutable-value helpers. @module @deepseek-ai/dsh-util-values */
 /**
 * Mark an unreachable closed-union branch.
@@ -2557,7 +2557,7 @@ function deepFreeze(value) {
 	return value;
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-util-crypto@0.1.2-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-i_8594a45cf8ae488dc1880a22a6864aa8/node_modules/@deepseek-ai/dsh-util-crypto/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-util-crypto@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-util-crypto/lib/index.js
 /**
 * Random v4 UUID, minted from `crypto.getRandomValues`.
 * @returns the UUID string.
@@ -2570,16 +2570,16 @@ function randomUUID$1() {
 	return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-brand@0.1.2-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-invaria_e2403996a25372848a6710513dd3725f/node_modules/@deepseek-ai/dsh-brand/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-brand@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-brand/lib/index.js
 /**
-* Duplicate-install-safe nominal string helpers.
+* Duplicate-install-safe nominal primitive helpers.
 *
-* A brand makes structurally-identical strings non-interchangeable at the type
-* level: a `SessionId` cannot be passed where a `ToolCallId` is expected, even
-* though both are plain strings at runtime. Comparison, logging, and
-* serialization all behave as ordinary strings.
+* A brand makes structurally identical strings or numbers non-interchangeable
+* at the type level: a `SessionId` cannot be passed where a `ToolCallId` is
+* expected, and an event sequence cannot be passed as a log offset. Comparison,
+* logging, and serialization retain the underlying primitive behavior.
 *
-* This package owns no concrete id and keeps no runtime identity or mutable
+* This package owns no concrete domain value and keeps no runtime identity or mutable
 * state, so independently installed copies produce interchangeable values.
 *
 * @module @deepseek-ai/dsh-brand
@@ -3187,11 +3187,19 @@ defineMethod("transform", [
 	"preserve"
 ], ({ inner }, isInner) => inner.toString(isInner));
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-timeout@0.1.2-alpha.5_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-timeout/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-timeout@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-timeout/lib/index.js
 /** Largest delay Node schedules without clamping it to one millisecond. */
 const MAX_TIMER_DELAY_MS = 2147483647;
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-llm@0.1.2-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-invariant_ba6560006b4459f1f9769001786a712b/node_modules/@deepseek-ai/dsh-llm/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-llm@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-llm/lib/index.js
+/**
+* Bound one `notice` summary to {@link CONTEXT_SUMMARY_MAX_CHARS}.
+* @param summary - the producer's one-line account, of any length.
+* @returns the account, ellipsized when it exceeds the bound.
+*/
+function boundContextSummary(summary) {
+	return summary.length <= 120 ? summary : `${summary.slice(0, 119)}…`;
+}
 /**
 * Detach and deep-freeze a message whose identity already exists.
 * @param message - complete message, including its stable identity.
@@ -3457,6 +3465,9 @@ function errorMessage$1(error) {
 function harnessErrorCode(error) {
 	return error instanceof HarnessError ? error.code : "UNKNOWN";
 }
+function quoted(value) {
+	return JSON.stringify(value);
+}
 /**
 * Stable text shown to a model that cannot accept one durable image reference.
 * @param ref - durable normalized attachment omitted from the request.
@@ -3476,6 +3487,76 @@ function textOnlyImageText(ref) {
 function contentHasImage(content) {
 	return content.some((block) => block.type === "image" || block.type === "tool-result" && contentHasImage(block.content));
 }
+/**
+* True when typed model content contains a file block, walking nested
+* tool-result content on the same recursion every file policy shares.
+* Reads current content on every call without retaining scan results.
+* @param content - typed model content blocks.
+* @returns whether any nested block is a file.
+*/
+function contentHasFile(content) {
+	for (const block of content) if (block.type === "file" || block.type === "tool-result" && contentHasFile(block.content)) return true;
+	return false;
+}
+/**
+* Stable model-facing handle for one durable file reference: the address of
+* the verbatim stored copy and the instruction to read it on demand. This is
+* the only representation a provider ever receives for a file.
+* @param ref - durable verbatim file reference.
+* @param readonlyPath - execution-world path of the stored copy, when resolvable.
+* @returns deterministic handle text naming the file, its size, and its address.
+*/
+function fileHandleText(ref, readonlyPath) {
+	const digest = String(ref.attachmentId).slice(7, 15);
+	const identity = `File ${quoted(ref.name)} (${ref.bytes} bytes, sha256:${digest})`;
+	if (readonlyPath === void 0) return `[${identity} was uploaded, but the current execution environment cannot access a readable path. Report that limitation if its contents are needed; do not claim to have read it.]`;
+	return `[${identity}: verbatim read-only copy saved at ${quoted(readonlyPath)}. Read that path with your file tools when its contents are needed; copy it to a writable location before modifying it. When delegating file work, include this saved path in the delegation prompt; only subagents sharing this execution environment can read it.]`;
+}
+/** Replace every file occurrence, including nested tool results, with handle text. */
+function replaceFilesWithHandles(blocks, resolvePath) {
+	let next;
+	for (const [index, block] of blocks.entries()) {
+		if (block.type === "file") {
+			next ??= blocks.slice(0, index);
+			next.push({
+				type: "text",
+				text: fileHandleText(block.attachment, resolvePath(block.attachment))
+			});
+			continue;
+		}
+		if (block.type === "tool-result") {
+			const content = replaceFilesWithHandles(block.content, resolvePath);
+			if (content !== block.content) {
+				next ??= blocks.slice(0, index);
+				next.push({
+					...block,
+					content
+				});
+				continue;
+			}
+		}
+		next?.push(block);
+	}
+	return next ?? blocks;
+}
+/**
+* Project durable file history into deterministic handle text for every model
+* route. Unlike images, no provider receives file blocks natively, so this
+* projection is unconditional in request assembly.
+* @param messages - complete request history.
+* @param resolvePath - resolve one reference's current execution-world read path.
+* @returns the original list without files, otherwise shallow message copies with handle text.
+*/
+function projectFilesToText(messages, resolvePath) {
+	if (!messages.some((message) => contentHasFile(message.content))) return messages;
+	return messages.map((message) => {
+		const content = replaceFilesWithHandles(message.content, resolvePath);
+		return content === message.content ? message : {
+			...message,
+			content
+		};
+	});
+}
 /** Replace every image occurrence, including nested tool results, for a text-only model. */
 function replaceImagesForTextModel(blocks) {
 	let next;
@@ -3916,6 +3997,15 @@ var LlmError = class extends HarnessError {
 		imageRequestPricing(provider, model) {
 			return this.adapters.get(provider)?.adapter.imageRequestPricing(provider, model);
 		}
+		/**
+		* Resolve the exact text one durable file occurrence contributes to every
+		* provider request in the current execution environment.
+		* @param ref - durable verbatim file reference from model history.
+		* @returns the same deterministic handle text used at adapter dispatch.
+		*/
+		fileRequestText(ref) {
+			return fileHandleText(ref, this.fileReadPath(ref));
+		}
 		/** Detach typed adapter-owned modality metadata. */
 		detachedModalities(modalities) {
 			return modalities === void 0 ? void 0 : [...modalities];
@@ -3965,6 +4055,8 @@ var LlmError = class extends HarnessError {
 			const context = resolved.context;
 			if (context !== void 0 && (!Number.isInteger(context.contextWindow) || context.contextWindow <= 0)) throw new LlmError(`adapter returned invalid context metadata for provider "${provider}" model "${model}"`, "INVALID_MODEL_CONTEXT");
 			const inputModalities = this.detachedModalities(resolved.inputModalities);
+			const systemPromptUpdate = resolved.systemPromptUpdate;
+			if (systemPromptUpdate !== void 0 && systemPromptUpdate !== "in-history") throw new LlmError(`adapter returned invalid system prompt update mode for provider "${provider}" model "${model}"`, "INVALID_MODEL_INFO");
 			const defaultMaxTokens = resolved.defaultMaxTokens;
 			if (defaultMaxTokens !== void 0 && (!Number.isSafeInteger(defaultMaxTokens) || defaultMaxTokens <= 0)) throw new LlmError(`adapter returned invalid default maxTokens for provider "${provider}" model "${model}"`, "INVALID_MODEL_MAX_TOKENS");
 			const info = {
@@ -3974,7 +4066,8 @@ var LlmError = class extends HarnessError {
 				...resolved.description === void 0 ? {} : { description: resolved.description },
 				...inputModalities === void 0 ? {} : { inputModalities },
 				...context === void 0 ? {} : { context: { contextWindow: context.contextWindow } },
-				...defaultMaxTokens === void 0 ? {} : { defaultMaxTokens }
+				...defaultMaxTokens === void 0 ? {} : { defaultMaxTokens },
+				...resolved.systemPromptUpdate === void 0 ? {} : { systemPromptUpdate: resolved.systemPromptUpdate }
 			};
 			const reasoning = resolved.reasoning;
 			if (reasoning === void 0) return info;
@@ -4068,6 +4161,7 @@ var LlmError = class extends HarnessError {
 				adapterDefaults,
 				...context === void 0 ? {} : { context },
 				...modelInfo.inputModalities === void 0 ? {} : { inputModalities: Object.freeze([...modelInfo.inputModalities]) },
+				...modelInfo.systemPromptUpdate === void 0 ? {} : { systemPromptUpdate: modelInfo.systemPromptUpdate },
 				stream: (options) => {
 					if (dispatched) throw new LlmError("a prepared LLM call can only be dispatched once", "INVALID_PREPARED_CALL");
 					if (!callConfigEquals(options, resolvedConfig)) throw new LlmError("prepared LLM call config changed before adapter dispatch", "INVALID_PREPARED_CALL");
@@ -4109,6 +4203,20 @@ var LlmError = class extends HarnessError {
 			return Object.isFrozen(options) ? deepFreeze(filtered) : filtered;
 		}
 		/**
+		* Resolve the current execution-world read path of one durable file
+		* reference through the mounted attachment and filesystem providers.
+		*/
+		fileReadPath(ref) {
+			let hostPath;
+			try {
+				hostPath = this.ctx.get("attachments")?.fileHostPath(ref);
+			} catch {
+				return;
+			}
+			if (hostPath === void 0) return void 0;
+			return this.ctx.get("fs")?.processPathFromHostPath(hostPath);
+		}
+		/**
 		* Final adapter boundary. Adapter selection, dispatch, iterator construction,
 		* and iteration failures become one terminal failure chunk. Middleware and
 		* downstream consumer failures remain thrown plugin or consumer errors.
@@ -4139,13 +4247,16 @@ var LlmError = class extends HarnessError {
 					...options,
 					...resolvedConfig
 				};
-				const projectedOptions = modelInfo.inputModalities !== void 0 && !modelInfo.inputModalities.includes("image") && resolvedOptions.messages.some((message) => contentHasImage(message.content)) ? Object.isFrozen(resolvedOptions) ? deepFreeze({
+				let projectedMessages = resolvedOptions.messages;
+				if (projectedMessages.some((message) => contentHasFile(message.content))) projectedMessages = projectFilesToText(projectedMessages, (ref) => this.fileReadPath(ref));
+				if (modelInfo.inputModalities !== void 0 && !modelInfo.inputModalities.includes("image") && projectedMessages.some((message) => contentHasImage(message.content))) projectedMessages = projectImagesForTextModel(projectedMessages);
+				const projectedOptions = projectedMessages === resolvedOptions.messages ? resolvedOptions : Object.isFrozen(resolvedOptions) ? deepFreeze({
 					...resolvedOptions,
-					messages: projectImagesForTextModel(resolvedOptions.messages)
+					messages: projectedMessages
 				}) : {
 					...resolvedOptions,
-					messages: projectImagesForTextModel(resolvedOptions.messages)
-				} : resolvedOptions;
+					messages: projectedMessages
+				};
 				iterator = dispatch(this.forAdapter(projectedOptions, adapter))[Symbol.asyncIterator]();
 			} catch (error) {
 				yield adapterFailureChunk(error, options.signal);
@@ -8966,7 +9077,7 @@ function superRefine(fn, params) {
 	return /* @__PURE__ */ _superRefine(fn, params);
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-storage@0.1.2-alpha.5_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-storage/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-storage@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2/node_modules/@deepseek-ai/dsh-storage/lib/index.js
 /**
 * Backend-facing vocabulary of the storage hub: a backend owns one medium
 * (a file-tree root, a database file) and exposes operation groups over it.
@@ -8977,7 +9088,7 @@ function superRefine(fn, params) {
 /** Allowed format for unit and table names: safe as a file name and as a SQL identifier segment without escaping. */
 const UNIT_NAME_RE = /^[a-z][a-z0-9_]*$/;
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-storage-domain@0.1.2-alpha.5_@deepseek-ai+cordis@4.0.2_@deepseek-ai+ds_045e358f2bf6c5fc406379121d884012/node_modules/@deepseek-ai/dsh-storage-domain/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-storage-domain@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+ds_8f094eabec231701d08ef59df76cca5d/node_modules/@deepseek-ai/dsh-storage-domain/lib/index.js
 /**
 * Domain declaration vocabulary. A spec object is the single source of a
 * domain's identity, layout, and record schemas: the owning package defines
@@ -9121,6 +9232,27 @@ function sessionEvents(session) {
 function asEventList(events) {
 	return Array.isArray(events) ? events : [];
 }
+/**
+* 读取一个持久化（离线）会话的事件日志与头部元数据。兼容两代 persistence API：
+* - 旧版：`sessionPersistence.inspect(id)` 直接返回 { events, meta }；
+* - dsh 0.1.5 之后：`inspect` 已删除，改用 `open(id, 'read')` → `handle.read()`
+*   （+ `handle.header`），读句柄不抢写所有权，读后必须 close()。
+* 会话不存在时两个 API 都抛错，调用方按原语义处理。
+*/
+async function inspectPersistedSession(ctx, id) {
+	const persistence = ctx.sessionPersistence;
+	if (typeof persistence.inspect === "function") return await persistence.inspect(id);
+	const handle = await persistence.open(id, "read");
+	try {
+		const { events } = await handle.read();
+		return {
+			events,
+			meta: handle.header
+		};
+	} finally {
+		await handle.close();
+	}
+}
 /** agent.followup / steer 接受的用户消息值。 */
 function userMessage(text) {
 	return {
@@ -9144,6 +9276,18 @@ function blockText(content) {
 	}
 	return parts.length === 0 ? void 0 : parts.join("\n");
 }
+/** 提取指定类型的 content block 文本（如 reasoning），用于从消息 content 里读出思维链。 */
+function blockTextByType(content, wantedType) {
+	if (!Array.isArray(content)) return void 0;
+	const parts = [];
+	for (const raw of content) {
+		const block = raw;
+		if (block !== null && typeof block === "object" && block.type === wantedType && typeof block.text === "string") {
+			if (block.text !== "") parts.push(block.text);
+		}
+	}
+	return parts.length === 0 ? void 0 : parts.join("\n");
+}
 function countImages(content) {
 	if (!Array.isArray(content)) return 0;
 	let n = 0;
@@ -9181,7 +9325,7 @@ function foldMessages(events) {
 	} else if (event.type === "assistant/message") {
 		const message = event.data.message;
 		const text = message === null ? void 0 : blockText(message.content);
-		const reasoning = message === null ? void 0 : blockText(message.reasoning);
+		const reasoning = message === null ? void 0 : blockTextByType(message.content, "reasoning") ?? blockText(message.reasoning);
 		const images = message === null ? 0 : countImages(message.content);
 		const toolCalls = message === null ? [] : toolNamesOf(message.toolCalls);
 		if (text === void 0 && reasoning === void 0 && toolCalls.length === 0) continue;
@@ -9198,6 +9342,143 @@ function foldMessages(events) {
 	}
 	return rows;
 }
+/** 按已完成输出段落折叠事件日志：每个 assistant/message 割一段，返回 sinceSeq 后的所有段落（事件序）。 */
+function segmentsSince(events, sinceSeq = 0) {
+	const list = asEventList(events);
+	const out = [];
+	let openTurn = false;
+	for (const event of list) {
+		if (event.type === "turn/start") {
+			openTurn = true;
+			continue;
+		}
+		if (event.type === "turn/end") {
+			openTurn = false;
+			continue;
+		}
+		if (event.type !== "assistant/message") continue;
+		if (event.seq <= sinceSeq) continue;
+		const message = event.data.message;
+		const text = message === null ? void 0 : blockText(message.content);
+		const reasoning = message === null ? void 0 : blockTextByType(message.content, "reasoning") ?? blockText(message.reasoning);
+		const toolCalls = message === null ? [] : toolNamesOf(message.toolCalls);
+		const turn = event.data?.turn;
+		const step = event.data?.step;
+		const seg = {
+			seq: event.seq,
+			time: event.time,
+			turn: typeof turn === "number" ? turn : 0,
+			step: typeof step === "number" ? step : 0,
+			toolCalls,
+			openTurn
+		};
+		if (text !== void 0) seg.text = text;
+		if (reasoning !== void 0) seg.reasoning = reasoning;
+		out.push(seg);
+	}
+	return out;
+}
+/** 取自 sinceSeq 之后最新一个已完成输出段落（无则 null）。 */
+function latestSegmentSince(events, sinceSeq = 0) {
+	const segs = segmentsSince(events, sinceSeq);
+	return segs.length === 0 ? null : segs[segs.length - 1] ?? null;
+}
+/**
+* 对一个 live 会话的事件日志折叠出其"最近推理/文本增量流"。兼容两代日志形状：
+* - dsh 0.1.5 之后：turn 内不再发布独立 chunk 事件，流式增量内嵌在已定型
+*   assistant/message（或未定型 assistant/attempt）事件的 `stream` 记录里
+*   （reasoning-chunks / text-chunks 批量段 + 原始 chunk：reasoning-delta / text-delta）；
+* - 0.1.2-rc 之前：独立的 assistant/chunk 事件（turn 中途即可见、增量，
+*   这正是旧版监控思维链并按规则提前终止所需的粒度）。
+* 两者兼读、取最新一份；无任何增量（会话空闲、或该 provider 不流式推理/无推理）
+* 返回 null，调用方应回落为 foldMessages 里已定型的 message.reasoning。
+* 纯读、无副作用；事件形状不做任何假设，缺失/异常一律安全处理。
+*/
+function liveReasoningSnapshot(events) {
+	const list = asEventList(events);
+	let lastFinalizedSeq = -1;
+	let reasoning = "";
+	let text = "";
+	let seq = -1;
+	let time = 0;
+	let turn = 0;
+	let step = 0;
+	let foundDelta = false;
+	for (const event of list) {
+		const type = event.type;
+		if (type === "assistant/message" || type === "assistant/attempt") {
+			const data = event.data;
+			if (data !== null && data !== void 0 && typeof data === "object" && Array.isArray(data.stream)) {
+				let r = "";
+				let t = "";
+				for (const raw of data.stream) {
+					const record = raw;
+					if (record === null || typeof record !== "object") continue;
+					if (record.type === "reasoning-chunks" && Array.isArray(record.texts)) {
+						for (const s of record.texts) if (typeof s === "string") r += s;
+					} else if (record.type === "text-chunks" && Array.isArray(record.texts)) {
+						for (const s of record.texts) if (typeof s === "string") t += s;
+					} else if (record.type === "chunk") {
+						const c = record.chunk;
+						if (c !== null && typeof c === "object" && typeof c.type === "string" && typeof c.text === "string") {
+							if (c.type === "reasoning-delta") r += c.text;
+							else if (c.type === "text-delta") t += c.text;
+						}
+					}
+				}
+				if (r !== "" || t !== "") {
+					if (typeof data.turn === "number") turn = data.turn;
+					if (typeof data.step === "number") step = data.step;
+					reasoning = r;
+					text = t;
+					seq = event.seq;
+					time = event.time;
+					foundDelta = true;
+				}
+			}
+			if (type === "assistant/message") lastFinalizedSeq = event.seq;
+			continue;
+		}
+		if (type !== "assistant/chunk") continue;
+		if (event.seq <= lastFinalizedSeq) continue;
+		const data = event.data;
+		if (data === null || data === void 0 || typeof data !== "object") continue;
+		const c = data.chunk;
+		if (c === null || typeof c !== "object" || typeof c.type !== "string") continue;
+		if (c.type === "reasoning-delta" || c.type === "text-delta") {
+			if (typeof c.text !== "string") continue;
+			if (c.type === "reasoning-delta") reasoning += c.text;
+			else text += c.text;
+			if (typeof data.turn === "number") turn = data.turn;
+			if (typeof data.step === "number") step = data.step;
+			foundDelta = true;
+			if (event.seq > seq) seq = event.seq;
+			if (event.time > time) time = event.time;
+		}
+	}
+	if (!foundDelta) return null;
+	return {
+		turn,
+		step,
+		reasoning,
+		text,
+		seq,
+		time
+	};
+}
+/** 思维链尾巴默认截断上限（字符）。 */
+const REASONING_TAIL_LIMIT = 4e3;
+/**
+* 组装一条受字符上限约束的"思维链尾巴"用于展示/摘要：
+* 优先进行中的 liveReasoning，否则最近已定型的 lastReasoning；
+* 超出上限时截断并附省略标记。两者皆无返回 undefined。
+*/
+function reasoningTailOf(liveReasoning, lastReasoning, limit = REASONING_TAIL_LIMIT) {
+	const source = liveReasoning ?? lastReasoning;
+	if (source === void 0 || source === "") return void 0;
+	if (source.length <= limit) return source;
+	return source.slice(0, limit) + "…";
+}
 /**
 * 会话标题：优先 session/title 事件（last-wins，与 UI 一致）；
 * 无标题事件时回落为第一条用户消息（截断 80 字符）。
@@ -9249,8 +9530,10 @@ async function waitForReply(opts) {
 	const started = Date.now();
 	const deadline = started + opts.timeoutMs;
 	const requireTurnEnd = opts.requireTurnEnd ?? false;
+	const waitForSegment = opts.waitForSegment ?? false;
 	let latest = null;
 	let textReply = null;
+	let segment = null;
 	let turnEnded = false;
 	for (;;) {
 		if (opts.signal !== void 0 && opts.signal.aborted) break;
@@ -9260,22 +9543,38 @@ async function waitForReply(opts) {
 			if (latest === null || row.seq > latest.seq) latest = row;
 			if (row.text !== void 0 && (textReply === null || row.seq > textReply.seq)) textReply = row;
 		}
+		if (waitForSegment) {
+			const seg = latestSegmentSince(events, opts.baselineSeq);
+			if (seg !== null && (segment === null || seg.seq > segment.seq)) segment = seg;
+		}
 		if (requireTurnEnd && latest !== null) {
 			for (const event of events) if (event.seq > latest.seq && event.type === "turn/end") {
 				turnEnded = true;
 				break;
 			}
 		}
-		if (requireTurnEnd ? latest !== null && turnEnded : textReply !== null) break;
+		let done;
+		if (requireTurnEnd) done = latest !== null && turnEnded;
+		else if (waitForSegment) done = segment !== null;
+		else done = textReply !== null;
+		if (done) break;
 		if (Date.now() >= deadline) break;
 		await sleep(100);
 	}
-	const message = textReply ?? latest;
+	let message = waitForSegment && segment !== null ? {
+		seq: segment.seq,
+		time: segment.time,
+		role: "assistant",
+		images: 0,
+		...segment.text !== void 0 ? { text: segment.text } : {},
+		...segment.reasoning !== void 0 ? { reasoning: segment.reasoning } : {},
+		...segment.toolCalls.length > 0 ? { toolCalls: segment.toolCalls } : {}
+	} : textReply ?? latest;
 	return {
 		message,
 		seq: message === null ? opts.baselineSeq : message.seq,
 		turnEnded,
-		timedOut: requireTurnEnd ? latest !== null && !turnEnded : textReply === null,
+		timedOut: requireTurnEnd ? latest !== null && !turnEnded : waitForSegment ? segment === null : textReply === null,
 		aborted: opts.signal !== void 0 && opts.signal.aborted,
 		waitedMs: Date.now() - started
 	};
@@ -9351,13 +9650,18 @@ function statusSnapshot(ctx, agent) {
 	}
 	const recent = rows.slice(-8);
 	let lastAssistantText;
+	let lastReasoning;
 	for (let i = rows.length - 1; i >= 0; i -= 1) {
 		const row = rows[i];
-		if (row !== void 0 && row.role === "assistant" && row.text !== void 0) {
-			lastAssistantText = row.text;
-			break;
+		if (row !== void 0 && row.role === "assistant") {
+			if (lastAssistantText === void 0 && row.text !== void 0) lastAssistantText = row.text;
+			if (lastReasoning === void 0 && row.reasoning !== void 0) lastReasoning = row.reasoning;
+			if (lastAssistantText !== void 0 && lastReasoning !== void 0) break;
 		}
 	}
+	const live = liveReasoningSnapshot(events);
+	const liveReasoning = live !== null && live.reasoning !== "" ? live.reasoning : void 0;
+	const reasoningTail = reasoningTailOf(liveReasoning, lastReasoning);
 	const inbox = agent.inbox;
 	const cwd = agent.session.header.cwd;
 	return {
@@ -9371,10 +9675,13 @@ function statusSnapshot(ctx, agent) {
 		lastTurn,
 		lastActivityAt,
 		stalledMs: lastActivityAt === null ? null : Date.now() - lastActivityAt,
-		pendingWork: inbox?.hasPending ?? false,
+		pendingWork: inbox?.hasPending === true || (inbox?.nextTurn?.length ?? 0) + (inbox?.nextStep?.length ?? 0) > 0,
 		nextTurnCount: inbox?.nextTurn?.length ?? 0,
 		nextStepCount: inbox?.nextStep?.length ?? 0,
 		...lastAssistantText === void 0 ? {} : { lastAssistantText },
+		...lastReasoning === void 0 ? {} : { lastReasoning },
+		...liveReasoning === void 0 ? {} : { liveReasoning },
+		...reasoningTail === void 0 ? {} : { reasoningTail },
 		messageCount: rows.length,
 		recent
 	};
@@ -9429,6 +9736,16 @@ var SessionMonitor = class {
 	start(config) {
 		const existing = this.entries.get(config.sessionId);
 		const now = Date.now();
+		const cotInit = { rules: (config.coTRules ?? []).reduce((acc, rule, index) => {
+			const key = String(index) + ":" + rule.match + ":" + rule.field + ":" + rule.value;
+			acc[key] = {
+				hits: 0,
+				lastFiredAt: null,
+				lastMatch: false,
+				lastSubject: ""
+			};
+			return acc;
+		}, {}) };
 		const entry = existing !== void 0 ? {
 			...existing,
 			config,
@@ -9442,8 +9759,10 @@ var SessionMonitor = class {
 			lastActionAt: null,
 			lastNote: "监控已启动",
 			done: false,
-			cycles: 0
+			cycles: 0,
+			cot: cotInit
 		};
+		if (entry.cot === void 0) entry.cot = cotInit;
 		this.entries.set(config.sessionId, entry);
 		this.ensureTimer();
 		this.log(entry, "monitor start session=" + config.sessionId + " interval=" + config.intervalMs + " stalled=" + String(config.stalledMs ?? 6e4) + " maxStuck=" + String(config.maxStuckCycles ?? 3));
@@ -9569,6 +9888,7 @@ var SessionMonitor = class {
 			this.log(entry, "STALL(#" + entry.stuckCount + ") → steer: " + steer);
 			return;
 		}
+		if (this.evaluateCoTRules(entry, snapshot, sessionId)) return;
 		if (entry.stuckCount !== 0) entry.stuckCount = 0;
 		entry.lastAction = "steady";
 		entry.lastActionAt = Date.now();
@@ -9593,6 +9913,76 @@ var SessionMonitor = class {
 		if (!text) return false;
 		return keywords.some((kw) => kw !== "" && text.includes(kw));
 	}
+	/**
+	* 评估思维链（CoT）规则。规则只对 live 会话有意义：running 时用进行中的
+	* reasoning-delta 流，空闲时回落到已定型 lastReasoning。not-contains 规则作用在
+	* reasoning 字段时，若该会话本就没有推理（非推理模型/尚未产出），不判定为命中，
+	* 避免误 cancel 一个根本不产生思维链的会话。
+	* @returns true 表示本 tick 已被某条规则触发并处理（steer/cancel），调用方应 return。
+	*/
+	evaluateCoTRules(entry, snapshot, sessionId) {
+		const rules = entry.config.coTRules ?? [];
+		if (rules.length === 0) return false;
+		const minHits = entry.config.cotMinHits ?? 1;
+		const hasLive = (snapshot.liveReasoning ?? "") !== "";
+		const subject = {
+			reasoning: snapshot.liveReasoning ?? snapshot.lastReasoning ?? "",
+			text: snapshot.lastAssistantText ?? "",
+			hasReasoning: hasLive || (snapshot.lastReasoning ?? "") !== ""
+		};
+		const now = Date.now();
+		const rulesState = entry.cot;
+		let engaged = false;
+		rules.forEach((rule, index) => {
+			if (engaged) return;
+			const key = String(index) + ":" + rule.match + ":" + rule.field + ":" + rule.value;
+			const st = rulesState.rules[key] ?? {
+				hits: 0,
+				lastFiredAt: null,
+				lastMatch: false
+			};
+			if (rule.field === "reasoning" && rule.match === "not-contains" && !subject.hasReasoning) {
+				st.lastMatch = false;
+				st.hits = 0;
+				return;
+			}
+			let hit;
+			if (rule.field === "reasoning") hit = rule.match === "contains" ? subject.reasoning.includes(rule.value) : !subject.reasoning.includes(rule.value);
+			else if (rule.field === "text") hit = rule.match === "contains" ? subject.text.includes(rule.value) : !subject.text.includes(rule.value);
+			else {
+				const reasonHas = subject.reasoning.includes(rule.value);
+				const textHas = subject.text.includes(rule.value);
+				hit = rule.match === "contains" ? reasonHas || textHas : !reasonHas && !textHas;
+			}
+			st.lastMatch = hit;
+			st.hits = hit ? st.hits + 1 : 0;
+			this.log(entry, "CoT rule " + key + " hit=" + String(hit) + " hits=" + String(st.hits) + "/" + String(minHits));
+			if (!(hit && st.hits >= minHits)) return;
+			const coolMs = Math.max(entry.config.intervalMs, 5e3) * 2;
+			if (st.lastFiredAt !== null && now - st.lastFiredAt < coolMs) return;
+			st.lastFiredAt = now;
+			if (rule.action === "cancel") {
+				const reason = "reasoning-rule:" + rule.value;
+				cancelLiveSession(this.ctx, sessionId, false, reason);
+				entry.lastAction = "cot-cancel";
+				entry.lastActionAt = Date.now();
+				entry.lastNote = "思维链规则触发 cancel: " + rule.value;
+				entry.stuckCount = 0;
+				this.log(entry, "COT-CANCEL session=" + sessionId + " rule=" + key + " value=" + rule.value);
+			} else {
+				const steer = rule.message !== void 0 && rule.message.trim() !== "" ? rule.message.trim() : "监控判定：思维链/回复匹配规则「" + rule.value + "」，请据此调整方向并继续推进任务。";
+				sendLiveMessage(this.ctx, sessionId, steer, "steer");
+				entry.lastAction = "cot-steer";
+				entry.lastActionAt = Date.now();
+				entry.lastNote = "思维链规则触发 steer: " + rule.value;
+				entry.stuckCount = 0;
+				this.log(entry, "COT-STEER session=" + sessionId + " rule=" + key + " steer=" + steer);
+			}
+			engaged = true;
+			st.hits = 0;
+		});
+		return engaged;
+	}
 	hasLlm() {
 		return this.ctx.llm !== void 0;
 	}
@@ -9648,7 +10038,7 @@ var SessionMonitor = class {
 	}
 };
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-scope@0.1.2-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-invaria_cc61ed22356bd3509f8221ef1e37b1c1/node_modules/@deepseek-ai/dsh-scope/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-scope@0.1.5-alpha.2_@deepseek-ai+cordis@4.0.2_@deepseek-ai+dsh-invaria_a35c65afc1061b4908fad5a531841731/node_modules/@deepseek-ai/dsh-scope/lib/index.js
 /**
 * Shared insertion-ordered storage and effect ownership for scope-aware registries.
 *
@@ -9927,7 +10317,7 @@ function scopeTarget(base, key) {
 	return carrier;
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-tools@0.1.2-alpha.2_3813614b220b461dfd055a6c3c46e93f/node_modules/@deepseek-ai/dsh-tools/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-tools@0.1.5-alpha.2_2b754afda902b21956a20e8a701ed6ef/node_modules/@deepseek-ai/dsh-tools/lib/index.js
 /**
 * Enforced JSON Schema subset shared by tool outputs, generated PTC mode
 * types, subagents, and workflows. The subset accepts any JSON root, an
@@ -11104,7 +11494,7 @@ function createRunCodeTool(registry, options) {
 				if (runOver()) throw new Error(`run_code run is over (${String(runController.signal.reason)}); ${name} not dispatched`);
 				const normalized = jsonNormalizeArgs(rawArgs);
 				const n = ++dispatches;
-				const subCallId = brandString(`${String(exec.callId)}:code:${n}`);
+				const subCallId = brandString(`${String(exec.callId)}:ptc:${n}`);
 				const input = {
 					callId: subCallId,
 					rootCallId: exec.rootCallId,
@@ -11136,7 +11526,7 @@ function createRunCodeTool(registry, options) {
 								isError: result.isError,
 								content: result.content
 							});
-							agent.session.append("tool/code-dispatch", {
+							agent.session.append("tool/ptc-dispatch", {
 								rootCallId: exec.rootCallId,
 								parentCallId: exec.callId,
 								subCallId,
@@ -11158,7 +11548,7 @@ function createRunCodeTool(registry, options) {
 							reject(/* @__PURE__ */ new Error(`run_code run is over (${String(runController.signal.reason)}); ${name} tool call abandoned`));
 						},
 						async start() {
-							exec.agent?.session.append("tool/code-dispatch-start", {
+							exec.agent?.session.append("tool/ptc-dispatch-start", {
 								rootCallId: exec.rootCallId,
 								parentCallId: exec.callId,
 								subCallId,
@@ -11192,7 +11582,7 @@ function createRunCodeTool(registry, options) {
 								content: result.content,
 								source: {
 									kind: "plugin",
-									plugin: "tools-code-mode"
+									plugin: "tools-ptc"
 								}
 							}));
 							for (const context of result.additionalContexts ?? []) exec.deferContext(context);
@@ -12596,8 +12986,7 @@ var ToolRuntime = class extends Service {
 	* reads return the same flavor — but a reload that swapped in a second
 	* language between them would hand a program written against one SDK to the
 	* other. Binding it is deferred until a second backend ships (the first
-	* point it is testable); rationale in the
-	* [language-dispatch note](../../../../.agents/notes/implemented/feature/2026-07-31-ptc-language-dispatch.md).
+	* point it is testable).
 	*/
 	requireCodeRuntime(mode) {
 		const runtime = this.ctx.get("codeRuntime");
@@ -12683,9 +13072,9 @@ var ToolRuntime = class extends Service {
 	* A restriction filters what a scope inherits — the global layer and every
 	* ancestor layer on its chain — and never what its OWN layer registers.
 	* That exemption is what a per-child capability filter has to keep intact:
-	* the delegation runtime registers a child's reporting and structured-output
-	* tools into the child's own layer, and a filter naming the capabilities the
-	* child may use must not strip the machinery it answers through.
+	* the delegation runtime registers a child's structured-output tool into the
+	* child's own layer, and a filter naming the capabilities the child may use
+	* must not strip the machinery it answers through.
 	*
 	* Reading the exempt set as "the global layer" instead of "not mine" held
 	* only while every model-facing tool sat in the host composition. Once
@@ -12803,7 +13192,7 @@ var ToolRuntime = class extends Service {
 	}
 	/**
 	* Run the `tools/ptc-dispatch-log` waterfall over one settled sub-dispatch
-	* and return the content the bridge should log on `tool/code-dispatch`.
+	* and return the content the bridge should log on `tool/ptc-dispatch`.
 	* Contained: when a listener throws, the method logs the original settled
 	* content; that failure must not fail the dispatch or omit the settle event. Private:
 	* the ONE consumer is the `run_code` bridge this registry constructs, which
@@ -13429,11 +13818,33 @@ function toolAbortedBeforeDispatchResult(prior) {
 	};
 }
 //#endregion
-//#region node_modules/.pnpm/@deepseek-ai+dsh-agent@0.1.2-alpha.2_58555bdbcb744cce566f3f4d16801116/node_modules/@deepseek-ai/dsh-agent/lib/index.js
+//#region node_modules/.pnpm/@deepseek-ai+dsh-agent@0.1.5-alpha.2_cfc1690176e5c008b05d52ad11161b75/node_modules/@deepseek-ai/dsh-agent/lib/index.js
 /**
 * Agent-scoped model selection shared by runtime entry points.
 * @module @deepseek-ai/dsh-agent/model-selection
 */
+function sameRoute(left, right) {
+	return left.provider === right.provider && left.model === right.model;
+}
+function routeLabel(route, other) {
+	return route.provider === other.provider ? route.model : `${route.provider}/${route.model}`;
+}
+function modelSwitchNotice(previous, selected) {
+	const from = routeLabel(previous, selected);
+	const to = routeLabel(selected, previous);
+	return createUserMessage({
+		content: [{
+			type: "text",
+			text: `[model changed: assistant turns above this point were generated by ${from}; the session continues with ${to}]`
+		}],
+		source: {
+			kind: "plugin",
+			plugin: "model-selection",
+			form: "notice",
+			summary: boundContextSummary(`${from} → ${to}`)
+		}
+	});
+}
 /**
 * Couple one mutable selection to Agent-scoped prompt assembly and request routing.
 * Prompt assembly snapshots the selected model before delegating, then applies
@@ -13442,9 +13853,15 @@ function toolAbortedBeforeDispatchResult(prior) {
 * surfaces. An absent selected effort clears any inherited effort, restoring
 * the selected model's provider/default behavior.
 *
+* A provider/model change appends a durable user-role notice to the next
+* admitted request. It compares the assembled selection with the latest
+* request header; effort-only changes and empty no-request decisions add no
+* notice. Failure before header persistence repeats the notice on the next
+* request.
+*
 * @param agentCtx - The selected Agent's scoped context.
 * @param selection - Mutable selection owned by the calling entry point.
-* @returns Disposer for both scoped waterfall listeners.
+* @returns Disposer for all scoped waterfall listeners.
 */
 function installModelSelection(agentCtx, selection) {
 	const disposeAssembly = agentCtx.on("system-prompt/assemble", async (_assembly, _context, next) => {
@@ -13473,9 +13890,22 @@ function installModelSelection(agentCtx, selection) {
 			...selected.reasoningEffort === void 0 ? {} : { reasoningEffort: selected.reasoningEffort }
 		};
 	});
+	const disposeNotice = agentCtx.on("agent/pre-step", async ({ agent, messages, signal, step }, next) => {
+		const decision = await next();
+		if (decision.kind === "reject" || signal.aborted) return decision;
+		if (decision.messages.length === 0 && (step === 1 || messages.length > 0)) return decision;
+		const selected = selection.assembled;
+		const previous = agent.session.requestHeader()?.config;
+		if (selected === void 0 || previous === void 0 || sameRoute(selected, previous)) return decision;
+		return {
+			...decision,
+			messages: [...decision.messages, modelSwitchNotice(previous, selected)]
+		};
+	}, { prepend: true });
 	return () => {
 		disposeAssembly();
 		disposeRequest();
+		disposeNotice();
 	};
 }
 //#endregion
@@ -13796,7 +14226,11 @@ function registerResume(env) {
 			}
 			let headers = [];
 			try {
-				headers = await env.ctx.sessionPersistence.list();
+				headers = (await env.ctx.sessionPersistence.list()).map((rec) => ({
+					id: rec.header.id,
+					...rec.header.cwd === void 0 ? {} : { cwd: rec.header.cwd },
+					createdAt: rec.header.createdAt
+				}));
 			} catch (error) {
 				throw new Error("session persistence unavailable: " + (error instanceof Error ? error.message : String(error)));
 			}
@@ -13831,7 +14265,7 @@ function registerResume(env) {
 function registerWait(env) {
 	env.ctx.tools.register(defineTool({
 		name: "session_bridge_wait",
-		description: "Wait for a session next assistant reply: blocks (polling the session log) until a NEW assistant text reply appears after sinceSeq (default: the latest seq at call time). Returns the reply summary, or timedOut/aborted when the deadline or caller cancellation ends the wait. Use it to consume a reply produced asynchronously by another session (e.g. a session you sent a message to, or one working on its own).",
+		description: "Wait for a session next assistant output: blocks (polling the session log) until a NEW assistant output appears after sinceSeq (default: the latest seq at call time). waitFor=reply returns as soon as a new assistant TEXT reply is readable; waitFor=segment returns as soon as any new COMPLETED output segment appears (an assistant/message step — text, reasoning, or tool-call turn), i.e. it does NOT wait for the whole turn, so you can observe the chain-of-thought/output paragraph by paragraph as it is produced. Returns the output summary, or timedOut/aborted when the deadline or caller cancellation ends the wait. Use it to consume output produced asynchronously by another session (e.g. a session you sent a message to, or one working on its own).",
 		parameters: {
 			sessionId: {
 				type: "string",
@@ -13849,6 +14283,11 @@ function registerWait(env) {
 			requireTurnEnd: {
 				type: "boolean",
 				description: "When true, wait for the reply turn/end to settle before returning (default false; false returns as soon as the reply text is readable)."
+			},
+			waitFor: {
+				type: "string",
+				enum: ["reply", "segment"],
+				description: "reply (default) waits for a new assistant TEXT reply; segment waits for any new completed output segment (an assistant/message step, incl. reasoning/tool turns) and returns it immediately, without waiting for the whole turn."
 			}
 		},
 		output: {
@@ -13877,9 +14316,13 @@ function registerWait(env) {
 			if (typeof args.sessionId !== "string" || args.sessionId.trim() === "") throw new Error("invalid sessionId: expected a non-empty string");
 			const agent = liveAgent(env, args.sessionId);
 			if (agent === void 0) throw new Error("session " + JSON.stringify(args.sessionId) + " is not live — call session_bridge_resume first (waiting requires a live session)");
+			const waitSegment = args.waitFor === "segment";
 			let baseline;
 			if (typeof args.sinceSeq === "number" && Number.isInteger(args.sinceSeq) && args.sinceSeq >= 0) baseline = args.sinceSeq;
-			else {
+			else if (waitSegment) {
+				const segs = segmentsSince(sessionEvents(agent.session));
+				baseline = segs.length === 0 ? -1 : segs[segs.length - 1]?.seq ?? -1;
+			} else {
 				let lastText = -1;
 				for (const row of foldMessages(sessionEvents(agent.session))) if (row.text !== void 0) lastText = row.seq;
 				baseline = lastText;
@@ -13889,7 +14332,8 @@ function registerWait(env) {
 				baselineSeq: baseline,
 				timeoutMs: clampTimeout(args.timeoutMs),
 				signal: exec.signal,
-				requireTurnEnd: args.requireTurnEnd === true
+				requireTurnEnd: args.requireTurnEnd === true,
+				...waitSegment ? { waitForSegment: true } : {}
 			});
 			env.registry.touch(args.sessionId);
 			return asJson({
@@ -13900,6 +14344,83 @@ function registerWait(env) {
 		}
 	}));
 }
+function registerSegments(env) {
+	env.ctx.tools.register(defineTool({
+		name: "session_bridge_segments",
+		description: "Read the completed output segments of a session incrementally - each finished assistant step (one assistant/message paragraph), without waiting for the whole turn. Pass sinceSeq to page forward. Use this to watch a session produce its chain-of-thought / output paragraph by paragraph as each step finishes.",
+		parameters: {
+			sessionId: {
+				type: "string",
+				required: true,
+				description: "Session id to read segments from (live or offline)."
+			},
+			sinceSeq: {
+				type: "number",
+				description: "Only return completed segments after this event seq (paging cursor)."
+			},
+			limit: {
+				type: "number",
+				description: "Maximum number of segments to return (default 10, max 50)."
+			}
+		},
+		output: {
+			schema: {
+				type: "object",
+				additionalProperties: true
+			},
+			render: (_args, value) => {
+				const segs = value.segments ?? [];
+				if (segs.length === 0) return [{
+					type: "text",
+					text: "(no completed segments)"
+				}];
+				return [{
+					type: "text",
+					text: segs.map((sg) => {
+						const head = "seg #" + String(sg.seq) + " (turn " + String(sg.turn) + " step " + String(sg.step) + ")";
+						const text = typeof sg.text === "string" ? sg.text : "";
+						const reason = typeof sg.reasoning === "string" && sg.reasoning !== "" ? " [reasoning " + sg.reasoning.length + " chars]" : "";
+						return head + (Array.isArray(sg.toolCalls) && sg.toolCalls.length > 0 ? " [tools: " + sg.toolCalls.join(",") + "]" : "") + reason + ": " + text.slice(0, 160);
+					}).join("\n")
+				}];
+			}
+		},
+		async execute(args) {
+			const agent = liveAgent(env, args.sessionId);
+			let events;
+			let live;
+			if (agent !== void 0) {
+				events = sessionEvents(agent.session);
+				live = true;
+			} else try {
+				events = (await inspectPersistedSession(env.ctx, args.sessionId)).events;
+				live = false;
+			} catch (error) {
+				throw new Error(String(error));
+			}
+			const sinceSeq = typeof args.sinceSeq === "number" && Number.isInteger(args.sinceSeq) && args.sinceSeq >= 0 ? args.sinceSeq : 0;
+			clampLimit(args.limit, 10, 50);
+			const segs = segmentsSince(events, sinceSeq);
+			env.registry.touch(args.sessionId);
+			const nextCursorSeq = segs.length === 0 ? sinceSeq : segs[segs.length - 1]?.seq ?? sinceSeq;
+			return asJson({
+				sessionId: args.sessionId,
+				live,
+				nextCursorSeq,
+				segments: segs.map((sg) => ({
+					seq: sg.seq,
+					time: sg.time,
+					turn: sg.turn,
+					step: sg.step,
+					openTurn: sg.openTurn,
+					...sg.text === void 0 ? {} : { text: sg.text },
+					...sg.reasoning === void 0 ? {} : { reasoning: sg.reasoning },
+					...sg.toolCalls.length > 0 ? { toolCalls: sg.toolCalls } : {}
+				}))
+			});
+		}
+	}));
+}
 function registerRead(env) {
 	env.ctx.tools.register(defineTool({
 		name: "session_bridge_read",
@@ -13966,7 +14487,7 @@ function registerRead(env) {
 			} else {
 				let inspection;
 				try {
-					inspection = await env.ctx.sessionPersistence.inspect(args.sessionId);
+					inspection = await inspectPersistedSession(env.ctx, args.sessionId);
 				} catch (error) {
 					throw new Error("cannot read session " + JSON.stringify(args.sessionId) + ": " + (error instanceof Error ? error.message : String(error)));
 				}
@@ -14090,7 +14611,8 @@ function registerFind(env) {
 			}
 			if (args.liveOnly !== true) try {
 				const persistence = env.ctx.sessionPersistence;
-				for (const header of await persistence.list()) {
+				for (const rec of await persistence.list()) {
+					const header = rec.header;
 					if (items.some((item) => item.sessionId === header.id)) continue;
 					items.push({
 						sessionId: header.id,
@@ -14126,13 +14648,12 @@ function registerFind(env) {
 			const wsFilter = typeof args.workspaceId === "string" ? args.workspaceId.trim() : "";
 			const cwdFilter = typeof args.cwd === "string" ? args.cwd.trim().toLowerCase() : "";
 			if (titleFilter !== "" || query !== "" && items.some((item) => !item.live)) {
-				const persistence = env.ctx.sessionPersistence;
 				let inspected = 0;
 				for (const item of items) {
 					if (inspected >= 30) break;
 					if (item.live || item.title !== void 0) continue;
 					try {
-						item.title = titleOf((await persistence.inspect(item.sessionId)).events);
+						item.title = titleOf((await inspectPersistedSession(env.ctx, item.sessionId)).events);
 						inspected += 1;
 					} catch {
 						inspected += 1;
@@ -14180,6 +14701,7 @@ function registerBridgeTools(env) {
 	registerSend(env);
 	registerResume(env);
 	registerWait(env);
+	registerSegments(env);
 	registerRead(env);
 	registerFind(env);
 	registerStatus(env);
@@ -14187,11 +14709,33 @@ function registerBridgeTools(env) {
 	registerMonitor(env);
 	registerArchive(env);
 }
+/** 校验并规范化 coRules 参数为 CoTRule[]；非法项抛清晰错误。 */
+function parseCoRules(raw) {
+	return raw.map((rule, index) => {
+		return {
+			match: rule.match === "contains" || rule.match === "not-contains" ? rule.match : (() => {
+				throw new Error("coRules[" + index + "].match must be \"contains\" or \"not-contains\"");
+			})(),
+			field: rule.field === "reasoning" || rule.field === "text" || rule.field === "both" ? rule.field : (() => {
+				throw new Error("coRules[" + index + "].field must be \"reasoning\", \"text\" or \"both\"");
+			})(),
+			action: rule.action === "steer" || rule.action === "cancel" ? rule.action : (() => {
+				throw new Error("coRules[" + index + "].action must be \"steer\" or \"cancel\"");
+			})(),
+			value: typeof rule.value === "string" && rule.value.trim() !== "" ? rule.value.trim() : (() => {
+				throw new Error("coRules[" + index + "].value must be a non-empty string");
+			})(),
+			...typeof rule.message === "string" && rule.message.trim() !== "" ? { message: rule.message.trim() } : {}
+		};
+	});
+}
 function renderMonitorState(entry) {
 	const lines = [];
 	lines.push(`monitoring ${entry.config.sessionId}${entry.config.label === void 0 ? "" : " (\"" + entry.config.label + "\")"}`);
 	lines.push(`interval: ${entry.config.intervalMs}ms | stalled: ${String(entry.config.stalledMs ?? 6e4)}ms | maxStuck: ${String(entry.config.maxStuckCycles ?? 3)}`);
 	lines.push(`cycles: ${entry.cycles} | stuck: ${entry.stuckCount} | lastAction: ${entry.lastAction}`);
+	const cotCount = (entry.config.coTRules ?? []).length;
+	if (cotCount > 0) lines.push(`coRules: ${cotCount} rule(s) (minHits ${String(entry.config.cotMinHits ?? 1)})`);
 	if (entry.lastNote !== "") lines.push(`note: ${entry.lastNote}`);
 	if (entry.done) lines.push("done: yes");
 	return lines;
@@ -14199,7 +14743,7 @@ function renderMonitorState(entry) {
 function registerMonitor(env) {
 	env.ctx.tools.register(defineTool({
 		name: "session_bridge_monitor_start",
-		description: "Start a background watchdog on a main session: poll its progress at an interval, and automatically schedule — steer the session when it stalls (or, with useLlm, when it drifts off-track), cancel it when it stays stuck past maxStuckCycles, and stop when a done keyword appears while idle. This is the \"monitor worker\" that watches a main task thread and corrects/stops it. Uses session_bridge_status-style facts; pass sessionId of a live session. Returns the watchdog state.",
+		description: "Start a background watchdog on a main session: poll its progress at an interval, and automatically schedule — steer the session when it stalls (or, with useLlm, when it drifts off-track), cancel it when it stays stuck past maxStuckCycles, and stop when a done keyword appears while idle. It can also enforce chain-of-thought rules via coRules: e.g. coRules=[{match:\"not-contains\",field:\"reasoning\",value:\"I'm\",action:\"cancel\"}] stops the session the moment its live reasoning stops containing I'm (evaluated on each poll while running). This is the \"monitor worker\" that watches a main task thread and corrects/stops it. Uses session_bridge_status-style facts; pass sessionId of a live session. Returns the watchdog state.",
 		parameters: {
 			sessionId: {
 				type: "string",
@@ -14238,6 +14782,51 @@ function registerMonitor(env) {
 			label: {
 				type: "string",
 				description: "Optional human label for logs/display."
+			},
+			coRules: {
+				type: "array",
+				items: {
+					type: "object",
+					additionalProperties: false,
+					properties: {
+						match: {
+							type: "string",
+							required: true,
+							enum: ["contains", "not-contains"],
+							description: "contains = must include value in the chosen field; not-contains = must NOT include it."
+						},
+						field: {
+							type: "string",
+							required: true,
+							enum: [
+								"reasoning",
+								"text",
+								"both"
+							],
+							description: "Match on reasoning (chain-of-thought), text (reply), or both (either)."
+						},
+						value: {
+							type: "string",
+							required: true,
+							description: "The substring to match (non-empty)."
+						},
+						action: {
+							type: "string",
+							required: true,
+							enum: ["steer", "cancel"],
+							description: "steer injects a guiding message; cancel terminates the session."
+						},
+						message: {
+							type: "string",
+							description: "Custom steer text (default is a guidance prompt)."
+						}
+					}
+				},
+				description: "Chain-of-thought rules: when a rule stays matched for cotMinHits consecutive polls (default 1), trigger its action. Example: [{match:\"not-contains\",field:\"reasoning\",value:\"I'm\",action:\"cancel\"}] stops the session the moment its live reasoning no longer contains I'm."
+			},
+			cotMinHits: {
+				type: "number",
+				description: "How many consecutive matched polls before a CoT rule fires (default 1 = immediately)."
 			}
 		},
 		output: {
@@ -14268,7 +14857,9 @@ function registerMonitor(env) {
 				...args.useLlm === true ? { useLlm: true } : {},
 				...typeof args.onStallSteer === "string" && args.onStallSteer.trim() !== "" ? { onStallSteer: args.onStallSteer.trim() } : {},
 				...typeof args.onOffTrackSteer === "string" && args.onOffTrackSteer.trim() !== "" ? { onOffTrackSteer: args.onOffTrackSteer.trim() } : {},
-				...typeof args.label === "string" && args.label.trim() !== "" ? { label: args.label.trim() } : {}
+				...typeof args.label === "string" && args.label.trim() !== "" ? { label: args.label.trim() } : {},
+				...Array.isArray(args.coRules) && args.coRules.length > 0 ? { coTRules: parseCoRules(args.coRules) } : {},
+				...typeof args.cotMinHits === "number" && Number.isInteger(args.cotMinHits) && args.cotMinHits >= 1 ? { cotMinHits: Math.floor(args.cotMinHits) } : {}
 			};
 			const entry = env.monitor.start(config);
 			env.registry.touch(args.sessionId);
@@ -14340,7 +14931,19 @@ function registerMonitor(env) {
 		}
 	}));
 }
-/** 渲染监控快照为一行摘要：运行态 + openTurn + 卡住/待处理 + 最新回复。 */
+/** 按 reasoning 选项裁剪快照里的思维链字段（避免入 token 时有 diff 语义差）。 */
+function pruneReasoning(snapshot, mode) {
+	if (mode === "tail") return snapshot;
+	const rest = { ...snapshot };
+	delete rest.reasoningTail;
+	if (mode === "none") {
+		delete rest.lastReasoning;
+		delete rest.liveReasoning;
+	} else if (mode === "last") delete rest.liveReasoning;
+	else delete rest.lastReasoning;
+	return rest;
+}
+/** 渲染监控快照为一行摘要：运行态 + openTurn + 卡住/待处理 + 最新回复(+ 思维链预览)。 */
 function renderStatus(snapshot, stalledMsThreshold) {
 	const lines = [];
 	const runLabel = snapshot.running === "running" ? "running" : "idle";
@@ -14353,12 +14956,16 @@ function renderStatus(snapshot, stalledMsThreshold) {
 	}
 	if (snapshot.pendingWork) lines.push(`pendingWork: ${snapshot.nextTurnCount} turn + ${snapshot.nextStepCount} step`);
 	if (snapshot.lastAssistantText !== void 0) lines.push(`lastReply: ${snapshot.lastAssistantText}`);
+	if (snapshot.reasoningTail !== void 0 && snapshot.reasoningTail !== "") {
+		const preview = snapshot.reasoningTail.length > 160 ? snapshot.reasoningTail.slice(0, 160) + "…" : snapshot.reasoningTail;
+		lines.push(`reasoning: ${preview}`);
+	}
 	return lines;
 }
 function registerStatus(env) {
 	env.ctx.tools.register(defineTool({
 		name: "session_bridge_status",
-		description: "Inspect a session's live progress for monitoring/scheduling. Returns running/idle, whether a turn is open, last turn number, time since the last event (for stall detection), pending queued work, and the latest text reply. When stalledMsThreshold is given, marks the session as stalled when the time since the last event exceeds it. Pass sessionId of a live session (use session_bridge_find to locate; session_bridge_resume to bring an offline one online). Use this as the \"observe\" step of a monitor→decide→steer/cancel loop.",
+		description: "Inspect a session's live progress for monitoring/scheduling. Returns running/idle, whether a turn is open, last turn number, time since the last event (for stall detection), pending queued work, and the latest text reply. It also surfaces the session's chain-of-thought: lastReasoning is the most recent finalized reasoning block, liveReasoning is the in-flight reasoning streamed for the current handled turn (reasoning-delta), and reasoningTail is a compact merged preview. reasoning=none drops all three to keep tokens small. When stalledMsThreshold is given, marks the session as stalled when the time since the last event exceeds it. Pass sessionId of a live session (use session_bridge_find to locate; session_bridge_resume to bring an offline one online). Use this as the \"observe\" step of a monitor→decide→steer/cancel loop.",
 		parameters: {
 			sessionId: {
 				type: "string",
@@ -14372,6 +14979,16 @@ function registerStatus(env) {
 			recent: {
 				type: "number",
 				description: "Number of recent messages to include in the snapshot (default 8, max 20)."
+			},
+			reasoning: {
+				type: "string",
+				enum: [
+					"none",
+					"last",
+					"live",
+					"tail"
+				],
+				description: "Which chain-of-thought fields to include: tail (default) returns lastReasoning/liveReasoning/reasoningTail; last only the finalized reasoning; live only the in-flight reasoning; none drops all reasoning fields."
 			}
 		},
 		output: {
@@ -14397,7 +15014,8 @@ function registerStatus(env) {
 			const agent = liveAgent(env, args.sessionId);
 			if (agent === void 0) throw new Error("session " + JSON.stringify(args.sessionId) + " is not live — call session_bridge_resume first (status requires a live session)");
 			const threshold = typeof args.stalledMsThreshold === "number" && Number.isFinite(args.stalledMsThreshold) && args.stalledMsThreshold >= 0 ? args.stalledMsThreshold : 6e4;
-			const snapshot = statusSnapshot(env.ctx, agent);
+			const reasoningMode = args.reasoning === "none" || args.reasoning === "last" || args.reasoning === "live" ? args.reasoning : "tail";
+			const snapshot = pruneReasoning(statusSnapshot(env.ctx, agent), reasoningMode);
 			const shown = typeof args.recent === "number" && Number.isInteger(args.recent) && args.recent >= 0 ? Math.min(args.recent, 20) : 8;
 			const envCwd = agent.session.header.cwd;
 			env.registry.touch(args.sessionId, {
@@ -14540,7 +15158,6 @@ function registerArchive(env) {
 		async execute(args) {
 			const items = env.ctx.workspaceRegistry.archivedSessionIds.map(String).map((id) => ({ sessionId: id }));
 			if (args.resolveTitles === true && items.length > 0) {
-				const persistence = env.ctx.sessionPersistence;
 				const registryTitles = /* @__PURE__ */ new Map();
 				try {
 					const records = await env.registry.all();
@@ -14552,7 +15169,7 @@ function registerArchive(env) {
 						continue;
 					}
 					try {
-						item.title = titleOf((await persistence.inspect(item.sessionId)).events);
+						item.title = titleOf((await inspectPersistedSession(env.ctx, item.sessionId)).events);
 					} catch {}
 				}
 			}