oasis_test 0.1.102 → 0.1.104

package/dist/index.js

@@ -387,7 +387,9 @@ function emptyReadModel() {
     gaps: /* @__PURE__ */ new Map(),
     escalations: /* @__PURE__ */ new Map(),
     pendingReviews: /* @__PURE__ */ new Map(),
-    pausedWorkorders: /* @__PURE__ */ new Set()
+    pausedWorkorders: /* @__PURE__ */ new Set(),
+    acceptBlockers: /* @__PURE__ */ new Map()
+    // 默认空 = 无挡板 = 历史行为；只有 bridge 从引擎快照刷新时才填
   };
 }
 function indexAdd(index, key, value) {
@@ -1513,6 +1515,15 @@ function stuckDiagnosis(model, id, opts) {
       handler: "none"
     });
   }
+  const blocker = model.acceptBlockers.get(id);
+  if (blocker) {
+    causes.push({
+      category: "accept-barrier",
+      source: "oplog",
+      detail: `\u4EA7\u51FA\u5DF2\u5C31\u7EEA\u4F46\u6536\u53E3\u88AB\u62E6\uFF08${blocker.code}\uFF09\uFF1A${blocker.detail}${blocker.overridable ? "\u2014\u2014\u4EBA\u53EF force-conclude \u7B7E\u5B57\u7A7F\u900F\uFF08\u7559 override \u75D5\u8FF9\uFF09" : "\u2014\u2014\u4E0D\u53EF\u7A7F\u900F\uFF0C\u6309\u4E0A\u9762\u7684\u539F\u56E0\u5148\u4FEE\u6B63\u76EE\u6807"}`,
+      handler: "human"
+    });
+  }
   const rt = opts.runtime;
   if (rt.queued) {
     causes.push({
@@ -4335,6 +4346,93 @@ var init_exit_classify = __esm({
   }
 });
 
+// ../core/src/produce-resume-fallback.ts
+function isSessionNotFound(info) {
+  return info.reason === "session-not-found";
+}
+function makeProduceResumeFallback(first, spawnFallback) {
+  const stableId2 = first.id;
+  const exitCbs = [];
+  const outCbs = [];
+  const telCbs = [];
+  const outBuf = [];
+  const telBuf = [];
+  let sawOutput = false;
+  let active = first;
+  let fellBack = false;
+  let terminal;
+  const fanOut = (chunk) => {
+    if (outCbs.length) for (const cb of outCbs) cb(chunk);
+    else outBuf.push(chunk);
+  };
+  const fanTel = (event) => {
+    if (telCbs.length) for (const cb of telCbs) cb(event);
+    else telBuf.push(event);
+  };
+  const wire = (s2) => {
+    s2.onOutput?.((c) => {
+      sawOutput = true;
+      fanOut(c);
+    });
+    s2.onTelemetry?.((e) => {
+      sawOutput = true;
+      fanTel(e);
+    });
+  };
+  const fireTerminal = (info) => {
+    if (terminal) return;
+    terminal = info;
+    for (const cb of exitCbs.splice(0)) cb(info);
+  };
+  wire(first);
+  first.onExit((info) => {
+    if (fellBack || sawOutput || !isSessionNotFound(info)) {
+      fireTerminal(info);
+      return;
+    }
+    fellBack = true;
+    void spawnFallback().then(
+      (second) => {
+        active = second;
+        wire(second);
+        second.onExit((info2) => fireTerminal(info2));
+      },
+      // 回落连 spawn 都起不来（节点掉线等）→ 把原始 session-not-found 如实上报，交常规重试兜底。
+      () => fireTerminal(info)
+    );
+  });
+  return {
+    get id() {
+      return stableId2;
+    },
+    kill: () => active.kill(),
+    onExit(cb) {
+      if (terminal) {
+        cb(terminal);
+        return;
+      }
+      exitCbs.push(cb);
+    },
+    onOutput(cb) {
+      for (const c of outBuf.splice(0)) cb(c);
+      outCbs.push(cb);
+    },
+    onTelemetry(cb) {
+      for (const e of telBuf.splice(0)) cb(e);
+      telCbs.push(cb);
+    },
+    appendInput: (input) => active.appendInput?.(input) ?? Promise.resolve({ accepted: false, reason: "unsupported" }),
+    get canAppendInput() {
+      return active.canAppendInput !== false && typeof active.appendInput === "function";
+    }
+  };
+}
+var init_produce_resume_fallback = __esm({
+  "../core/src/produce-resume-fallback.ts"() {
+    "use strict";
+  }
+});
+
 // ../timeout-policy/src/policy.ts
 function classify(actorId) {
   if (!actorId) return "unknown";
@@ -4801,6 +4899,7 @@ var init_dispatcher = __esm({
   "../core/src/dispatcher.ts"() {
     "use strict";
     import_node_crypto2 = require("node:crypto");
+    init_produce_resume_fallback();
     init_read_model();
     init_assembler();
     init_content_type_handler();
@@ -5574,7 +5673,10 @@ var init_dispatcher = __esm({
           action: "produce",
           ...args.part !== void 0 ? { part: args.part } : {},
           ...args.engineWorkId !== void 0 ? { engineWorkId: args.engineWorkId } : {},
-          ...args.engineCompanyId !== void 0 ? { engineCompanyId: args.engineCompanyId } : {}
+          ...args.engineCompanyId !== void 0 ? { engineCompanyId: args.engineCompanyId } : {},
+          // 工单 e4a43a42：只有短时重试（同一未收口任务）才接续旧会话；变更请求/gap/级联触发的返工
+          // 一律新会话（`resumeEligible: false`）——否则接续会把过时上下文和旧任务书一起拖进来。缺省=可续。
+          ...args.resumeEligible !== void 0 ? { resumeEligible: args.resumeEligible } : {}
         }, args.bypassScheduling === true, args.dispatchId);
       }
       /** 新引擎回信 work（设计-最终 §回信轮）的 effect 调到此——派发收容回信会话（唯一写动作 `oasis reply`）。
@@ -5820,7 +5922,8 @@ var init_dispatcher = __esm({
         const priorConsistent = prior !== void 0 && prior.nodeId === binding?.nodeId && prior.runtimeKind === binding?.runtimeKind;
         const retainedPartSession = spec.action === "produce" && spec.part !== void 0 && priorConsistent && !prior.sessionMissing ? prior.rtId : void 0;
         const retainedWholeSession = spec.action === "produce" && spec.part === void 0 && priorConsistent && !prior.sessionMissing ? this.resumableWholeSession(spec.artifactId, seqNow, prior.rtId) : void 0;
-        const retainedSession = retainedPartSession ?? retainedWholeSession;
+        const resumeEligible = spec.resumeEligible !== false;
+        const retainedSession = resumeEligible ? retainedPartSession ?? retainedWholeSession : void 0;
         const runtimeSessionId = retainedSession ?? (isProduceLike ? (0, import_node_crypto2.randomUUID)() : void 0);
         const resumeSession = retainedSession !== void 0;
         const retry = this.strikes.get(jobKey);
@@ -5938,7 +6041,8 @@ var init_dispatcher = __esm({
           // `handle.id` = `agent_runs.id` = token 的 dispatchId claim，三处同值。
           dispatchId: attempt
         };
-        const session = await this.opts.adapter.spawn(job);
+        const first = await this.opts.adapter.spawn(job);
+        const session = resumeSession ? makeProduceResumeFallback(first, () => this.opts.adapter.spawn({ ...job, resumeRuntimeSession: false })) : first;
         if (!this.isSpawnAttemptCurrent(jobKey, attempt)) {
           try {
             await session.kill();
@@ -6995,7 +7099,7 @@ function scan(state, ctx) {
     if (wstate === "success" && node.latestAcceptId !== lw.id) {
       const reqs = state.requirementsOf(node.id);
       if (reqs.length === 0) {
-        if (!businessHandoffBarrierSatisfied(state, node.id, lw.id)) continue;
+        if (acceptBlock(state, lw.id) !== null) continue;
         events.push({
           kind: "work.accept",
           workorderId: state.workorder.id,
@@ -7036,7 +7140,11 @@ function tryToRun(state, nodeId, ctx, events) {
     nodeId,
     workId,
     reasons: [],
-    continuesWorkId: null
+    continuesWorkId: null,
+    // 工单 e4a43a42（接续只对短时重试成立）：**已收口过的节点被重新激活 = 返工**（变更请求/驳回/上游
+    // 变更把已 accept 的节点重开）→ 起全新会话，别接续那场过时的旧对话；**从未收口的节点** = 首跑或
+    // 失败后重试，接续 WIP 是对的。判据 = 有没有 latest_accept。派发层据此决定 resumeSession。
+    resumeEligible: node.latestAcceptId == null
   });
 }
 function inputsMatch(state, node, latestWork2) {
@@ -7164,13 +7272,15 @@ function processCommentReplies(state, nodeId, ctx, events) {
   if (latest) {
     const s2 = workState(latest, hasOutput(latest, 0));
     if (s2 === "success" && latest.acceptanceState !== "accepted") {
-      events.push({
-        kind: "work.accept",
-        workorderId: state.workorder.id,
-        workId: latest.id,
-        by: "actor:system:engine",
-        override: null
-      });
+      if (acceptBlock(state, latest.id) === null) {
+        events.push({
+          kind: "work.accept",
+          workorderId: state.workorder.id,
+          workId: latest.id,
+          by: "actor:system:engine",
+          override: null
+        });
+      }
       return;
     }
   }
@@ -7254,9 +7364,9 @@ function checkTerminated(state) {
     if (!isBusinessDependencyEdge(state, edge)) continue;
     if (isEdgeInputUnobtainable(state, edge)) continue;
     const upstream = state.node(edge.fromNodeId);
-    if (!upstream?.latestWorkId || !businessHandoffBarrierSatisfied(state, upstream.id, upstream.latestWorkId)) return false;
+    if (!upstream?.latestAcceptId || !businessHandoffBarrierSatisfied(state, upstream.id, upstream.latestAcceptId)) return false;
   }
-  return live.every((n) => n.latestWorkId !== null && n.latestAcceptId === n.latestWorkId);
+  return live.every((n) => n.latestAcceptId !== null && (n.latestAcceptId === n.latestWorkId || n.latestAcceptId === n.latestSuccessWorkId));
 }
 function isEdgeInputUnobtainable(state, edge) {
   const upstream = state.node(edge.fromNodeId);
@@ -7267,12 +7377,61 @@ function isBusinessDependencyEdge(state, edge) {
   return edge.kind === "data" && edge.required && downstream?.fields?.[BUSINESS_HANDOFF_POLICY_FIELD] !== BUSINESS_HANDOFF_POLICY_EXEMPT;
 }
 function businessHandoffBarrierSatisfied(state, nodeId, workId) {
+  return handoffBlock(state, nodeId, workId) === null;
+}
+function acceptBlock(state, workId) {
+  const w2 = state.work(workId);
+  if (!w2) return { code: "work-missing", detail: `work \u4E0D\u5728\u518C\uFF1A${workId}`, overridable: false };
+  if (w2.deadAt) {
+    return {
+      code: "work-dead",
+      detail: `\u8FD9\u4E00\u7248\u5DF2\u4F5C\u5E9F\uFF08${w2.deadAt}${w2.rejectedReason ? `\uFF1A${w2.rejectedReason}` : ""}\uFF09\u2014\u2014\u4F5C\u5E9F\u7248\u4E0D\u80FD\u6536\u53E3\uFF0C\u6539\u5BF9\u6700\u65B0\u7248\u64CD\u4F5C\u6216\u5148\u91CD\u8DD1\u672C\u8282\u70B9`,
+      overridable: false
+    };
+  }
+  if (w2.acceptanceState === "accepted") {
+    return { code: "already-accepted", detail: `\u5DF2\u662F\u9A8C\u6536\u6001\uFF08${w2.acceptedAt ?? "?"}\uFF09\u2014\u2014\u65E0\u9700\u91CD\u590D\u6536\u53E3`, overridable: false };
+  }
+  const node = state.node(w2.nodeId);
+  if (!node) return { code: "node-missing", detail: `\u8282\u70B9\u4E0D\u5728\u518C\uFF1A${w2.nodeId}`, overridable: false };
+  if (!hasOutput(w2, state.artifactsOf(w2.id).length)) {
+    if (!w2.endedAt) {
+      return {
+        code: "work-in-flight",
+        detail: `\u8FD9\u4E00\u7248\u8FD8\u5728\u8DD1\u3001\u4E14\u8FD8\u6CA1\u6709\u4EFB\u4F55\u4EA7\u51FA\u2014\u2014\u7B49\u5B83\u4EA4\u7A3F\u540E\u518D\u6536\u53E3\uFF0C\u6216\u5148\u505C\u6389\uFF08hold\uFF09/ \u91CD\u8DD1`,
+        overridable: false
+      };
+    }
+    return {
+      code: "no-output",
+      detail: `\u8FD9\u4E00\u7248\u5DF2\u7ED3\u675F\u4F46\u6CA1\u6709\u4EFB\u4F55\u4EA7\u51FA\uFF08\u7A7A\u58F3\uFF09\u2014\u2014\u4E0D\u80FD\u628A\u6CA1\u6709\u5185\u5BB9\u7684\u7248\u672C\u6536\u53E3\u6210\u4EA4\u4ED8\u7248\u672C\uFF1B\u6539\u5BF9\u6700\u8FD1\u4E00\u7248\u6709\u4EA7\u51FA\u7684\u7248\u672C\u64CD\u4F5C\uFF0C\u6216\u91CD\u8DD1\u672C\u8282\u70B9`,
+      overridable: false
+    };
+  }
+  return handoffBlock(state, w2.nodeId, workId);
+}
+function handoffBlock(state, nodeId, workId) {
   const work = state.work(workId);
-  if (!requiresBusinessHandoff(state, nodeId, work)) return true;
+  if (!requiresBusinessHandoff(state, nodeId, work)) return null;
+  if (work?.acceptanceState === "accepted" && work.overrideBy) return null;
   const node = state.node(nodeId);
-  return node?.latestWorkId === workId && (work?.businessHandoffStatus === "delivered" || work?.status === "success" && work.agentHandoffAttemptId === null && work.businessHandoffStatus === null);
+  if (workId !== node?.latestWorkId && workId !== node?.latestSuccessWorkId) {
+    return {
+      code: "not-latest-work",
+      detail: `\u4E0D\u662F\u672C\u8282\u70B9\u6700\u65B0\u7248\uFF08\u6700\u65B0\u5C1D\u8BD5\uFF1A${node?.latestWorkId ?? "\u65E0"}\uFF1B\u6700\u65B0\u6709\u6548\u4EA7\u51FA\uFF1A${node?.latestSuccessWorkId ?? "\u65E0"}\uFF09\u2014\u2014\u6536\u53E3\u53EA\u8BA4\u6700\u65B0\u4E00\u7248\u6216\u6700\u65B0\u6709\u6548\u4EA7\u51FA`,
+      overridable: false
+    };
+  }
+  const delivered = work?.businessHandoffStatus === "delivered" || work?.status === "success" && work.agentHandoffAttemptId === null && work.businessHandoffStatus === null;
+  if (delivered) return null;
+  return {
+    code: "handoff-undeclared",
+    detail: `\u4E1A\u52A1\u4EA4\u63A5\u672A\u5B8C\u6210\uFF1Awork.status=${work?.status ?? "?"}\u3001handoff=${work?.businessHandoffStatus ?? "\u672A\u58F0\u660E"}${work?.agentHandoffAttemptId ? `\uFF08attempt ${work.agentHandoffAttemptId}\uFF09` : ""}\u2014\u2014\u7B49\u6267\u884C\u4EBA\u8865\u4EA4\u63A5\uFF0C\u6216\u7531\u4EBA force-conclude \u7B7E\u5B57\u7A7F\u900F`,
+    overridable: true
+  };
 }
 function requiresBusinessHandoff(state, nodeId, work) {
+  if (work?.replyToIssueId) return false;
   if (!state.edgesFrom(nodeId).some((edge) => isBusinessDependencyEdge(state, edge))) return false;
   if (typeof work?.assigneeActorId === "string" && work.assigneeActorId.startsWith("actor:human:")) return false;
   return true;
@@ -7352,6 +7511,7 @@ CREATE TABLE IF NOT EXISTS ${schema}.workflow_nodes (
   assignee_actor_id     text,
   assignee_role         text,
   latest_work_id        text,
+  latest_success_work_id text,
   latest_accept_id      text,
   is_final_output       boolean NOT NULL DEFAULT false,
   fields                jsonb,
@@ -7465,6 +7625,9 @@ CREATE TABLE IF NOT EXISTS ${schema}.issues (
   author_actor_id      text NOT NULL,
   hand_actor_id        text,
   raised_by_node_id    text,
+  -- \u2605 escalation \u66FF\u54EA\u6761 gap \u53D1\u8D77\uFF08\u88AB\u5F15\u7528 gap \u7684 issue id\uFF09\uFF1B\u4F9B issue.resolve \u7CBE\u786E\u8FDE\u5E26\u5173\u95ED
+  --   \uFF08ADR-0030 D1\uFF1Bwo-05dfbd6e \u8865\u9F50\u6865\u63A5\u8FC1\u79FB\u9057\u6F0F\uFF09\u3002\u975E escalation / \u672A\u5E26 --gap \u65F6\u4E3A NULL\u3002
+  gap_id               text,
   -- \u2605 ADR 0144\uFF1Ablocking / state \u5217\u5DF2\u5220\u9664\u2014\u2014\u5B58\u6D3B\u5224\u636E\u552F\u4E00\u5316\u4E3A resolved_at \u5224\u7A7A\uFF1B
   --   resolution \u627F\u63A5\u65E7\u4E09\u503C state \u7684 closed\uFF08=wontfix\uFF09\u8BED\u4E49\u3002\u7EA6\u675F\u7531\u8FC1\u79FB\u6BB5\u7EDF\u4E00\u52A0\uFF08\u540D\u5B57\u5316\u3001\u5E42\u7B49\uFF09\u3002
   proposed_resolution  text,
@@ -7589,6 +7752,8 @@ ALTER TABLE ${schema}.works   ADD COLUMN IF NOT EXISTS reply_to_issue_id text;
 --   \u968F\u540E state / blocking \u5217\u5220\u9664\uFF08\u4F9D\u8D56 state \u7684 CHECK \u4E0E\u4E09\u4E2A\u65E7\u90E8\u5206\u7D22\u5F15\u968F\u5217\u81EA\u52A8\u5220\u9664\uFF09\u3002
 --   \u56DE\u586B\u5FC5\u987B\u5728\u5220\u5217\u524D\u3001\u4E14\u53EA\u5728 state \u5217\u8FD8\u5B58\u5728\u65F6\u6267\u884C\uFF08DO \u5757\u5224 information_schema\uFF0C\u91CD\u590D\u542F\u52A8\u5E42\u7B49\uFF09\u3002
 ALTER TABLE ${schema}.issues ADD COLUMN IF NOT EXISTS resolution text;
+-- escalation\u2192gap \u7CBE\u786E\u5173\u8054\uFF08wo-05dfbd6e\uFF09\uFF1A\u4F9B issue.resolve \u8FDE\u5E26\u5173\u95ED\u5339\u914D escalation\uFF08ADR-0030 D1\uFF09\u3002
+ALTER TABLE ${schema}.issues ADD COLUMN IF NOT EXISTS gap_id text;
 DO $do$ BEGIN
   IF EXISTS (SELECT 1 FROM information_schema.columns
              WHERE table_schema = '${schema}' AND table_name = 'issues' AND column_name = 'state') THEN
@@ -7608,6 +7773,9 @@ CREATE INDEX IF NOT EXISTS issues_workorder_alive_idx ON ${schema}.issues (worko
 CREATE INDEX IF NOT EXISTS issues_about_alive_idx ON ${schema}.issues (about_node_id) WHERE resolved_at IS NULL;
 CREATE INDEX IF NOT EXISTS issues_raised_alive_idx ON ${schema}.issues (raised_by_node_id) WHERE resolved_at IS NULL;
 ALTER TABLE ${schema}.workflow_nodes ADD COLUMN IF NOT EXISTS fields jsonb;
+-- \u2605 \u6709\u6548\u4EA7\u51FA\u6307\u9488\uFF08ADR 0148\uFF09\uFF1Anode \u4E0A\u300C\u6700\u8FD1\u4E00\u6B21\u5C1D\u8BD5\u300D\uFF08latest_work_id\uFF09\u4E4B\u5916\u518D\u5B58\u300C\u6700\u8FD1\u4E00\u6B21\u6709\u6548\u4EA7\u51FA\u300D\uFF0C
+--   \u5931\u8D25\u7A7A\u6D3E\u53D1\u4E0D\u518D\u9876\u6389\u6210\u54C1\u3002\u56DE\u586B\u5728\u4E0B\u65B9 works.status \u56DE\u586B\u4E4B\u540E\u6267\u884C\uFF08\u4F9D\u8D56 status \u5DF2\u843D\u5E93\uFF09\u3002
+ALTER TABLE ${schema}.workflow_nodes ADD COLUMN IF NOT EXISTS latest_success_work_id text;
 -- \u2605 \u5148\u5220\u89C6\u56FE\u518D\u5220\u5217\uFF1Awork_view/node_view/workorder_view \u7528 SELECT *\uFF0C\u5BF9\u57FA\u8868\u5217\u6709\u4F9D\u8D56\u2014\u2014\u5B58\u91CF\u5E93\u4E0A
 -- DROP COLUMN \u4F1A\u62A5 "cannot drop column ... because other objects depend on it"\uFF0C\u4E14\u672C\u6BB5\u662F\u5355\u6761
 -- \u591A\u8BED\u53E5 Query\uFF08\u4E00\u4E2A\u9690\u5F0F\u4E8B\u52A1\uFF09\uFF0C\u4E00\u5904\u5931\u8D25\u5168\u6BB5\u56DE\u6EDA\u3001migrate \u629B\u9519 \u2192 serve \u8D77\u4E0D\u6765\u3002\u89C6\u56FE\u968F\u540E\u7531
@@ -7663,6 +7831,16 @@ UPDATE ${schema}.reviews SET status = CASE
   WHEN ended_at       IS NOT NULL THEN 'failed'
   ELSE 'running' END
 WHERE status IS NULL;
+-- \u2605 \u6709\u6548\u4EA7\u51FA\u6307\u9488\u56DE\u586B\uFF08ADR 0148\uFF09\uFF1Alatest_success_work_id = \u8BE5\u8282\u70B9\u6700\u8FD1\u4E00\u4E2A status=success \u7684**\u4E3B\u94FE** work
+--   \uFF08\u6392\u9664\u56DE\u4FE1 work reply_to_issue_id\uFF09\u3002\u5FC5\u987B\u5728\u4E0A\u9762 works.status \u56DE\u586B\u4E4B\u540E\uFF08\u4F9D\u8D56 status \u5DF2\u843D\u5E93\uFF09\u3002
+--   \u53EA\u586B\u5F53\u524D\u4E3A NULL \u7684\u884C \u2192 \u5E42\u7B49\uFF1A\u91CD\u542F\u65F6\u4E0D\u8986\u76D6 handler \u5DF2\u7EF4\u62A4\u7684\u503C\uFF1B\u4ECE\u672A\u6210\u529F\u8FC7\u7684\u8282\u70B9\u4FDD\u6301 NULL\u3002
+UPDATE ${schema}.workflow_nodes n SET latest_success_work_id = (
+  SELECT w.id FROM ${schema}.works w
+  WHERE w.node_id = n.id AND w.status = 'success' AND w.reply_to_issue_id IS NULL
+  ORDER BY w.created_at DESC, w.id DESC
+  LIMIT 1
+)
+WHERE n.latest_success_work_id IS NULL;
 `;
 }
 function ENGINE_VIEWS(schema) {
@@ -7678,20 +7856,25 @@ SELECT r.*, r.status AS state
 FROM ${schema}.reviews r;
 
 DROP VIEW IF EXISTS ${schema}.node_view;
+-- \u2605 ADR 0148\uFF1A\u4E3B\u6001\u6309 latest_success\uFF08\u6700\u8FD1\u4E00\u4E2A\u6709\u6548\u4EA7\u51FA\uFF09\u8D70\u2014\u2014\u300C\u5DF2\u4EA4\u4ED8 v3\u3001\u672B\u6B21\u5C1D\u8BD5 v4 \u5D29\u4E86\u300D\u663E\u793A\u5DF2\u5B8C\u6210\uFF0C
+--   \u672B\u6B21\u5931\u8D25\u53EA\u4F5C\u526F\u6807\u8BB0\uFF08\u7248\u672C\u5217\u8868\u91CC\u90A3\u6761 failed \u4ECD\u5728\uFF09\uFF0C\u4E0D\u518D\u51FA\u73B0\u300C\u56FE\u4E0A\u7EA2\u3001\u4E0B\u6E38\u5728\u8DD1\u300D\u7684\u5272\u88C2\u3002
+--   \u4E0E views.ts nodeState \u540C\u6E90\uFF1A\u5728\u8DD1\uFF08latest_work running\uFF09\u4F18\u5148\uFF1B\u5426\u5219\u6709 latest_success \u5C31\u6309\u5176\u9A8C\u6536\u4E0E\u5426\u5206
+--   \u5DF2\u5B8C\u6210/\u8BC4\u5BA1\u4E2D\uFF1B\u518D\u5426\u5219\u672B\u6B21\u5C1D\u8BD5\u5931\u8D25/dead \u2192 \u5361\u4F4F\u3002
 CREATE VIEW ${schema}.node_view AS
 SELECT n.*,
   CASE
     WHEN n.cancelled_at IS NOT NULL THEN 'dead'                    -- \u5DF2\u4F5C\u5E9F\uFF08\u79FB\u51FA\u8BA1\u5212\uFF09
     WHEN lw.id IS NULL THEN 'waiting'                              -- \u672A\u8FD0\u884C\uFF08latest_work \u4E3A\u7A7A\uFF09
     WHEN lw.status = 'retry' THEN 'waiting'                        -- \u672A\u8FD0\u884C\uFF08\u7528\u6237\u4ECB\u5165\u91CD\u8BD5\uFF0C\u7B49 try_to_run\uFF09
-    WHEN lw.status = 'running' THEN 'running'                      -- \u5728\u8FDB\u884C
-    WHEN lw.status = 'success' AND n.latest_accept_id IS DISTINCT FROM lw.id THEN 'reviewing'  -- \u8BC4\u5BA1\u4E2D
-    WHEN lw.status = 'success' AND n.latest_accept_id = lw.id THEN 'done'                     -- \u5DF2\u5B8C\u6210
-    WHEN lw.status IN ('failed','dead') THEN 'dead'                -- \u5361\u4F4F\u4E86
+    WHEN lw.status = 'running' THEN 'running'                      -- \u5728\u8FDB\u884C\uFF08\u91CD\u8DD1\u8FDB\u884C\u4E2D\u4E5F\u4F18\u5148\u663E\u793A\u5728\u8FDB\u884C\uFF09
+    WHEN ls.id IS NOT NULL AND n.latest_accept_id = ls.id THEN 'done'                     -- \u5DF2\u5B8C\u6210\uFF08\u6709\u6548\u4EA7\u51FA\u5DF2\u9A8C\u6536\uFF09
+    WHEN ls.id IS NOT NULL AND n.latest_accept_id IS DISTINCT FROM ls.id THEN 'reviewing' -- \u8BC4\u5BA1\u4E2D\uFF08\u6709\u6548\u4EA7\u51FA\u672A\u9A8C\u6536\uFF09
+    WHEN lw.status IN ('failed','dead') THEN 'dead'                -- \u4ECE\u672A\u4EA7\u51FA\u4E14\u672B\u6B21\u5C1D\u8BD5\u5931\u8D25 \u2192 \u5361\u4F4F\u4E86
     ELSE 'waiting'
   END AS state
 FROM ${schema}.workflow_nodes n
-LEFT JOIN ${schema}.works lw ON lw.id = n.latest_work_id;
+LEFT JOIN ${schema}.works lw ON lw.id = n.latest_work_id
+LEFT JOIN ${schema}.works ls ON ls.id = n.latest_success_work_id;
 
 DROP VIEW IF EXISTS ${schema}.workorder_view;
 CREATE VIEW ${schema}.workorder_view AS
@@ -12971,6 +13154,7 @@ var init_store_postgres = __esm({
             assigneeActorId: n.assignee_actor_id,
             assigneeRole: n.assignee_role,
             latestWorkId: n.latest_work_id,
+            latestSuccessWorkId: n.latest_success_work_id ?? null,
             latestAcceptId: n.latest_accept_id,
             isFinalOutput: n.is_final_output,
             cancelledAt: iso(n.cancelled_at),
@@ -13054,6 +13238,7 @@ var init_store_postgres = __esm({
             authorActorId: i.author_actor_id,
             handActorId: i.hand_actor_id,
             raisedByNodeId: i.raised_by_node_id,
+            gapId: i.gap_id ?? null,
             proposedResolution: i.proposed_resolution,
             proposedBy: i.proposed_by,
             proposedAt: iso(i.proposed_at),
@@ -13146,9 +13331,9 @@ var init_store_postgres = __esm({
               await this.c.query(
                 `INSERT INTO ${this.s}.workflow_nodes
              (id,workorder_id,type,title,spec,version,assignee_actor_id,assignee_role,
-              latest_work_id,latest_accept_id,is_final_output,
+              latest_work_id,latest_success_work_id,latest_accept_id,is_final_output,
               fields,cancelled_at,row_version,created_at,updated_at)
-             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16)
+             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17)
              ON CONFLICT (id) DO NOTHING`,
                 [
                   n.id,
@@ -13160,6 +13345,7 @@ var init_store_postgres = __esm({
                   n.assigneeActorId,
                   n.assigneeRole,
                   n.latestWorkId,
+                  n.latestSuccessWorkId,
                   n.latestAcceptId,
                   n.isFinalOutput,
                   n.fields ? JSON.stringify(n.fields) : null,
@@ -13288,9 +13474,9 @@ var init_store_postgres = __esm({
               await this.c.query(
                 `INSERT INTO ${this.s}.issues
              (id,workorder_id,kind,body,about_node_id,about_work_id,author_actor_id,hand_actor_id,
-              raised_by_node_id,proposed_resolution,proposed_by,proposed_at,
+              raised_by_node_id,gap_id,proposed_resolution,proposed_by,proposed_at,
               resolved_at,resolution,resolved_by,resolved_note,resolved_via_work_id,created_at)
-             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18)
+             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19)
              ON CONFLICT (id) DO NOTHING`,
                 [
                   i.id,
@@ -13302,6 +13488,7 @@ var init_store_postgres = __esm({
                   i.authorActorId,
                   i.handActorId,
                   i.raisedByNodeId,
+                  i.gapId,
                   i.proposedResolution,
                   i.proposedBy,
                   i.proposedAt,
@@ -13427,11 +13614,14 @@ var init_store_postgres = __esm({
        * `NOT EXISTS` 那一段是"我前面还有没跑完的兄弟就别动我"；`SKIP LOCKED` 是
        * "别的 worker 正在处理这张工单就跳过整张"。两者合起来 = 按工单分区的串行队列。
        */
-      async claimNextEvent(now) {
+      async claimNextEvent(now, recoverAppliedBefore) {
         const res = await this.c.query(
           `SELECT e.* FROM ${this.s}.events e
-        WHERE e.status = 'pending'
-          AND (e.available_at IS NULL OR e.available_at <= $1)
+        WHERE (
+                (e.status = 'pending' AND (e.available_at IS NULL OR e.available_at <= $1))
+                -- \u5D29\u6E83\u81EA\u6108\uFF1A\u5361\u5728 applied \u592A\u4E45\u7684\uFF08\u8FDB\u7A0B\u6B7B\u5728\u300C\u843D\u72B6\u6001\u300D\u4E0E\u300C\u6536\u5C3E\u300D\u4E4B\u95F4\uFF09\u4E5F\u56DE\u6536\u91CD\u8DD1
+                OR ($2::timestamptz IS NOT NULL AND e.status = 'applied' AND e.applied_at < $2::timestamptz)
+              )
           AND NOT EXISTS (
             SELECT 1 FROM ${this.s}.events p
              WHERE p.workorder_id = e.workorder_id
@@ -13440,7 +13630,7 @@ var init_store_postgres = __esm({
         ORDER BY e.seq
         FOR UPDATE OF e SKIP LOCKED
         LIMIT 1`,
-          [now]
+          [now, recoverAppliedBefore ?? null]
         );
         return res.rows[0] ? toRecord(res.rows[0]) : null;
       }
@@ -13481,10 +13671,14 @@ var init_store_postgres = __esm({
         );
         return (res.rowCount ?? 0) > 0;
       }
-      async claimAllPending(now) {
+      async claimAllPending(now, recoverAppliedBefore) {
         const res = await this.c.query(
           `SELECT e.* FROM ${this.s}.events e
-       WHERE e.status = 'pending' AND (e.available_at IS NULL OR e.available_at <= $1)
+       WHERE (
+               (e.status = 'pending' AND (e.available_at IS NULL OR e.available_at <= $1))
+               -- \u5D29\u6E83\u81EA\u6108\uFF1A\u89C1 claimNextEvent \u7684\u6CE8\u91CA
+               OR ($2::timestamptz IS NOT NULL AND e.status = 'applied' AND e.applied_at < $2::timestamptz)
+             )
          AND NOT EXISTS (SELECT 1 FROM ${this.s}.events p WHERE p.workorder_id = e.workorder_id
                           AND p.status IN ('pending','applied') AND p.seq < e.seq)
        -- \u2605 scan \u4E8B\u4EF6\u6392\u524D\u9762\uFF1Aorigin='apply' \u4E14\u65E0\u4E0A\u6E38\u4E8B\u4EF6\uFF08\u4E0D\u662F\u88AB\u5176\u4ED6\u4E8B\u4EF6\u89E6\u53D1\u7684\uFF09
@@ -13494,7 +13688,7 @@ var init_store_postgres = __esm({
          CASE WHEN e.origin = 'apply' AND e.caused_by_seq IS NULL THEN 0 ELSE 1 END,
          e.seq
        FOR UPDATE OF e SKIP LOCKED`,
-          [now]
+          [now, recoverAppliedBefore ?? null]
         );
         return res.rows.map(toRecord);
       }
@@ -13513,7 +13707,25 @@ var init_store_postgres = __esm({
       async lockWorkorder(workorderId) {
         await this.c.query(`SELECT 1 FROM ${this.s}.workorders WHERE id = $1 FOR UPDATE`, [workorderId]);
       }
-      async listEvents(workorderId, fromSeq = 0) {
+      async listEvents(workorderId, fromSeq = 0, limit, kinds) {
+        if (kinds && kinds.length > 0) {
+          const res2 = workorderId ? await this.c.query(
+            `SELECT * FROM ${this.s}.events WHERE workorder_id = $1 AND seq > $2 AND kind = ANY($3) ORDER BY seq${limit !== void 0 ? ` DESC LIMIT ${Number(limit)}` : ""}`,
+            [workorderId, fromSeq, [...kinds]]
+          ) : await this.c.query(
+            `SELECT * FROM ${this.s}.events WHERE seq > $1 AND kind = ANY($2) ORDER BY seq${limit !== void 0 ? ` DESC LIMIT ${Number(limit)}` : ""}`,
+            [fromSeq, [...kinds]]
+          );
+          const rows = res2.rows.map(toRecord);
+          return limit !== void 0 ? rows.reverse() : rows;
+        }
+        if (limit !== void 0) {
+          const res2 = workorderId ? await this.c.query(
+            `SELECT * FROM ${this.s}.events WHERE workorder_id = $1 AND seq > $2 ORDER BY seq DESC LIMIT $3`,
+            [workorderId, fromSeq, limit]
+          ) : await this.c.query(`SELECT * FROM ${this.s}.events WHERE seq > $1 ORDER BY seq DESC LIMIT $2`, [fromSeq, limit]);
+          return res2.rows.map(toRecord).reverse();
+        }
         const res = workorderId ? await this.c.query(
           `SELECT * FROM ${this.s}.events WHERE workorder_id = $1 AND seq > $2 ORDER BY seq`,
           [workorderId, fromSeq]
@@ -13633,6 +13845,7 @@ function newNode(id, workorderId, at, version2) {
     assigneeActorId: null,
     assigneeRole: null,
     latestWorkId: null,
+    latestSuccessWorkId: null,
     latestAcceptId: null,
     isFinalOutput: false,
     cancelledAt: null,
@@ -13961,6 +14174,10 @@ var init_workorder = __esm({
 });
 
 // ../engine/src/handlers/work.ts
+function latestSuccessOf(state, nodeId) {
+  const successes = state.worksOf(nodeId).filter((w2) => !w2.replyToIssueId && w2.status === "success").sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
+  return successes.length > 0 ? successes[successes.length - 1].id : null;
+}
 var workCreate, workKill, workResponse, workHandoffRecorded, workStart, workSubmitOutput, workTimeout;
 var init_work = __esm({
   "../engine/src/handlers/work.ts"() {
@@ -14064,7 +14281,7 @@ var init_work = __esm({
       // 回信 work 不杀前会话（apply 不 kill 主链，节点已完结、无在跑会话），只派发。
       async effect(e, ctx) {
         if (!e.replyToIssueId) await ctx.cancelPreviousWork(e.nodeId, e.workId);
-        await ctx.dispatchWork(e.workId);
+        await ctx.dispatchWork(e.workId, e.resumeEligible !== void 0 ? { resumeEligible: e.resumeEligible } : void 0);
       }
     };
     workKill = {
@@ -14090,6 +14307,12 @@ var init_work = __esm({
             ...w2.status !== "dead" ? { status: "dead" } : {}
           });
         }
+        if (node.latestSuccessWorkId) {
+          const ls = state.work(node.latestSuccessWorkId);
+          if (!ls || ls.status !== "success") {
+            state.updateNode(e.nodeId, { latestSuccessWorkId: latestSuccessOf(state, e.nodeId) });
+          }
+        }
         killNodeReviews(state, e.nodeId, ctx.at);
       },
       async effect(e, ctx) {
@@ -14123,6 +14346,9 @@ var init_work = __esm({
           outcomeDetail: businessFailed ? { ...e.detail ?? {}, reason: "agent business handoff not delivered" } : e.detail,
           status
         });
+        if (status === "success") {
+          state.updateNode(w2.nodeId, { latestSuccessWorkId: e.workId });
+        }
       }
     };
     workHandoffRecorded = {
@@ -14132,17 +14358,20 @@ var init_work = __esm({
         const w2 = state.work(e.workId);
         if (!w2 || e.producedBy !== "agent") return;
         if (w2.agentHandoffAttemptId && w2.agentHandoffAttemptId !== e.attemptId) return;
+        const flipsToFailed = e.status === "not_delivered" && w2.endedAt && !w2.deadAt;
         state.updateWork(e.workId, {
           agentHandoffAttemptId: e.attemptId,
           businessHandoffStatus: e.status,
           businessHandoffRecordedAt: ctx.at,
-          // handoff 可以在 work.response 后到达。明确未交付必须回到现有失败/重试路径。
-          ...e.status === "not_delivered" && w2.endedAt && !w2.deadAt ? {
+          ...flipsToFailed ? {
             status: "failed",
             outcome: "failed",
             outcomeDetail: { ...w2.outcomeDetail ?? {}, reason: "agent business handoff not delivered" }
           } : {}
         });
+        if (flipsToFailed && state.node(w2.nodeId)?.latestSuccessWorkId === e.workId) {
+          state.updateNode(w2.nodeId, { latestSuccessWorkId: latestSuccessOf(state, w2.nodeId) });
+        }
       }
     };
     workStart = {
@@ -14226,6 +14455,7 @@ var init_issue = __esm({
           authorActorId: e.authorActorId,
           handActorId: e.handActorId,
           raisedByNodeId: e.raisedByNodeId,
+          gapId: e.gapId ?? null,
           proposedResolution: null,
           proposedBy: null,
           proposedAt: null,
@@ -14291,6 +14521,22 @@ var init_issue = __esm({
           resolvedNote: e.note,
           resolvedViaWorkId: e.viaWorkId
         });
+        if (issue2.kind === "gap") {
+          for (const other of state.allIssues()) {
+            if (other.kind === "escalation" && other.resolvedAt === null && other.workorderId === issue2.workorderId && other.gapId === issue2.id) {
+              state.updateIssue(other.id, {
+                proposedResolution: null,
+                proposedBy: null,
+                proposedAt: null,
+                resolvedAt: ctx.at,
+                resolution: "resolved",
+                resolvedBy: "actor:system:engine",
+                resolvedNote: e.note,
+                resolvedViaWorkId: null
+              });
+            }
+          }
+        }
         if (issue2.kind === "gap" || issue2.kind === "escalation") {
           const nodeId = issue2.raisedByNodeId ?? issue2.aboutNodeId;
           if (nodeId) markNodeForRetry(state, nodeId, ctx.at);
@@ -14461,11 +14707,9 @@ var init_review = __esm({
       name: "work/accept",
       kind: "work.accept",
       apply(e, state, ctx) {
+        const block = acceptBlock(state, e.workId);
+        if (block && !(block.overridable && e.override)) return;
         const w2 = state.work(e.workId);
-        if (!w2 || w2.deadAt || w2.acceptanceState === "accepted") return;
-        const node = state.node(w2.nodeId);
-        if (!node) return;
-        if (!businessHandoffBarrierSatisfied(state, w2.nodeId, w2.id)) return;
         if (w2.replyToIssueId) {
           state.updateWork(e.workId, {
             acceptanceState: "accepted",
@@ -14673,7 +14917,7 @@ function emptySnapshotPlaceholder(record8) {
     reviews: []
   };
 }
-var SYSTEM_ACTOR2, NOOP_IO, SYSTEM_CLOCK, HandlerRegistry, EngineBus, ApplyFailure, sleep;
+var SYSTEM_ACTOR2, NOOP_IO, SYSTEM_CLOCK, HandlerRegistry, DEFAULT_STUCK_APPLIED_RECOVERY_MS, EngineBus, ApplyFailure, sleep;
 var init_bus = __esm({
   "../engine/src/bus.ts"() {
     "use strict";
@@ -14711,6 +14955,7 @@ var init_bus = __esm({
         return [...this.byKind.values()].flat();
       }
     };
+    DEFAULT_STUCK_APPLIED_RECOVERY_MS = 5 * 6e4;
     EngineBus = class {
       store;
       io;
@@ -14719,6 +14964,7 @@ var init_bus = __esm({
       policy;
       registry;
       maxEffectAttempts;
+      stuckAppliedRecoveryMs;
       running = false;
       /** 事件监听器（内存 pubsub）：每批事件处理完调用，供 /api/events SSE 推送（替代旧 oplog.subscribe）。 */
       eventListener = null;
@@ -14730,10 +14976,19 @@ var init_bus = __esm({
         this.policy = opts.policy ?? CODE_DEFAULT_POLICY;
         this.registry = new HandlerRegistry(opts.handlers);
         this.maxEffectAttempts = opts.maxEffectAttempts ?? 3;
+        this.stuckAppliedRecoveryMs = opts.stuckAppliedRecoveryMs ?? DEFAULT_STUCK_APPLIED_RECOVERY_MS;
       }
       setIO(io) {
         this.io = io;
       }
+      /**
+       * 崩溃自愈水位线：早于此刻仍停在 `applied` 的事件，认为是「进程死在落状态与收尾之间」的残留，
+       * 回收重跑。`stuckAppliedRecoveryMs <= 0` 时返回 undefined（= 关闭自愈，维持旧行为）。
+       */
+      recoverAppliedBefore() {
+        if (this.stuckAppliedRecoveryMs <= 0) return void 0;
+        return new Date(Date.parse(this.clock.now()) - this.stuckAppliedRecoveryMs).toISOString();
+      }
       /** 注册事件监听器——新事件处理完即回调（serve 桥接 SSE 实时推送，替代 oplog.subscribe）。返回退订。 */
       onEvent(fn) {
         this.eventListener = fn;
@@ -14742,8 +14997,10 @@ var init_bus = __esm({
         };
       }
       /** 读最近事件（/api/events 首次连接回放 / 调试视图），替代 oplog.read。 */
+      /** 最近 N 条事件（时间线/详情页用）。★ 2026-08-16：limit 以前**声明了但没传下去**——
+       *  百万级事件的病态工单一次性全量拉回内存，直接把 serve 打崩（ws:wo-18c2bc4b 实证）。 */
       recentEvents(workorderId, fromSeq, limit = 200) {
-        return this.store.transaction((tx) => tx.listEvents(workorderId, fromSeq));
+        return this.store.transaction((tx) => tx.listEvents(workorderId, fromSeq, limit));
       }
       /** 取存储引用——供 serve 层创建 IO 适配器时使用。 */
       getStore() {
@@ -14820,7 +15077,7 @@ var init_bus = __esm({
         let lastFullScan = 0;
         while (true) {
           try {
-            const batch = await this.store.transaction((tx) => tx.claimAllPending(this.clock.now()));
+            const batch = await this.store.transaction((tx) => tx.claimAllPending(this.clock.now(), this.recoverAppliedBefore()));
             const touched = /* @__PURE__ */ new Set();
             if (batch.length > 0) {
               for (const record8 of batch) {
@@ -15021,7 +15278,7 @@ var init_bus = __esm({
           eventSeq: record8.seq,
           actorId: record8.actorId,
           emit: (event, opts) => void buffered.push({ event, ...opts }),
-          dispatchWork: (id) => this.io.dispatchWork(id),
+          dispatchWork: (id, opts) => this.io.dispatchWork(id, opts),
           dispatchReview: (id, nodeId, reviewerActorId) => this.io.dispatchReview(id, nodeId, reviewerActorId),
           cancelSession: (ref2) => this.io.cancelSession(ref2),
           // ★ work.create 的「kill 旧会话」：apply 已把该节点上一个 latest_work 置 deadAt（会话可能还挂着），
@@ -15053,6 +15310,10 @@ var init_bus = __esm({
         };
         let ok = true;
         for (const h of handlers) {
+          const effectKey = `${h.name}#effect`;
+          if (record8.appliedAt && await this.store.transaction((tx) => tx.isHandlerDone(record8.seq, effectKey))) {
+            continue;
+          }
           let lastErr = "";
           for (let attempt = 1; attempt <= this.maxEffectAttempts; attempt++) {
             try {
@@ -15065,6 +15326,8 @@ var init_bus = __esm({
           }
           if (lastErr) {
             ok = false;
+          } else {
+            await this.store.transaction((tx) => tx.markHandlerDone(record8.seq, effectKey));
           }
         }
         await this.store.transaction(async (tx) => {
@@ -15123,7 +15386,7 @@ var init_bus = __esm({
       /* ═══════════════════════ 内部：旧 applyPhase（claim + apply 一体） ═══════════════════════ */
       async applyPhase() {
         return this.store.transaction(async (tx) => {
-          const record8 = await tx.claimNextEvent(this.clock.now());
+          const record8 = await tx.claimNextEvent(this.clock.now(), this.recoverAppliedBefore());
           if (!record8) return null;
           const snapshot = await tx.loadWorkorder(record8.workorderId);
           if (snapshot?.workorder.doneAt) {
@@ -15248,6 +15511,10 @@ function mapWorkStateToRevisionState(w2) {
       if (w2.acceptanceState === "rejected") return "rejected";
       return "proposed";
     // success but not yet judged
+    // ★ ADR 0148：failed 尝试没有对应的 RevisionState（枚举只有 working/proposed/merged/rejected/
+    //   superseded，改枚举会牵动契约与前端，见红线 4）——仍投影成 superseded 保持生命周期语义，但**内容
+    //   如实为 empty**（workToRevision 对无产出 work 给 contentKind="empty"）。读面（CLI 版本列表）据此把
+    //   「superseded + empty」如实标成「未产出」，不再让「这次失败了」被读成「被更好的版本取代」。
     case "failed":
       return "superseded";
     case "retry":
@@ -15491,6 +15758,18 @@ function bridgeLoadReadModel(input) {
       name: a.name
     })));
   }
+  const acceptBlockers = /* @__PURE__ */ new Map();
+  for (const snap of snapshots2) {
+    let state = null;
+    for (const node of snap.nodes) {
+      if (!node.latestWorkId || node.latestAcceptId === node.latestWorkId) continue;
+      const lw = snap.works.find((w2) => w2.id === node.latestWorkId);
+      if (!lw || !lw.endedAt || lw.deadAt) continue;
+      state ??= new WorkorderState(snap);
+      const block = acceptBlock(state, lw.id);
+      if (block) acceptBlockers.set(node.id, block);
+    }
+  }
   const artifactFiles = /* @__PURE__ */ new Map();
   for (const a of allArtifacts) {
     const list = artifactFiles.get(a.workId) ?? [];
@@ -15505,8 +15784,16 @@ function bridgeLoadReadModel(input) {
     const lw = node.latestWorkId ? workById.get(node.latestWorkId) : void 0;
     if (lw) {
       const st = lw.status ?? (lw.retryAt ? "retry" : lw.deadAt ? "dead" : lw.endedAt ? lw.outcome === "failed" ? "failed" : "success" : "running");
-      art.latestWorkState = st === "retry" ? null : st;
-      art.latestAccepted = node.latestAcceptId === node.latestWorkId;
+      let uiSt;
+      if (st === "retry") uiSt = null;
+      else if (st === "running") uiSt = "running";
+      else if (node.latestSuccessWorkId) uiSt = "success";
+      else uiSt = st;
+      art.latestWorkState = uiSt;
+      art.latestAccepted = node.latestSuccessWorkId !== null && node.latestAcceptId === node.latestSuccessWorkId;
+      if ((st === "failed" || st === "dead") && node.latestSuccessWorkId) {
+        art.currentRev = node.latestSuccessWorkId;
+      }
     } else {
       art.latestWorkState = null;
       art.latestAccepted = false;
@@ -15685,7 +15972,8 @@ function bridgeLoadReadModel(input) {
     pinMeta,
     gaps,
     escalations,
-    pendingReviews
+    pendingReviews,
+    acceptBlockers
   };
 }
 var init_bridge_readmodel = __esm({
@@ -15695,6 +15983,26 @@ var init_bridge_readmodel = __esm({
   }
 });
 
+// ../core/src/propose-guard.ts
+function proposeBlock(head, headArtifactCount) {
+  if (!head) return null;
+  const state = workState(head, hasOutput(head, headArtifactCount));
+  if (state === "dead") {
+    const why = head.rejectedReason ? `\uFF1A${head.rejectedReason}` : "";
+    return {
+      code: "head-dead",
+      detail: `\u8FD9\u4E00\u7248\uFF08${head.id}\uFF09\u5DF2\u88AB\u505C\u6389\uFF08${head.deadAt ?? "?"}${why}\uFF09\u2014\u2014\u4F5C\u5E9F\u7248\u4E4B\u4E0A\u4E0D\u80FD\u518D\u4EA4\u7A3F\u3002\u8981\u7EE7\u7EED\uFF0C\u5148\u91CD\u8DD1\u672C\u8282\u70B9\uFF08\u5728\u63A7\u5236\u53F0\u70B9\u300C\u91CD\u65B0\u8FD0\u884C\u300D\uFF0C\u6216\u8BA9\u7BA1\u7406\u8005\u91CD\u6D3E\uFF09\u62FF\u5230\u4E00\u4E2A\u53EF\u5199\u7684\u65B0\u7248\u672C\uFF0C\u518D propose\u3002`
+    };
+  }
+  return null;
+}
+var init_propose_guard = __esm({
+  "../core/src/propose-guard.ts"() {
+    "use strict";
+    init_src3();
+  }
+});
+
 // ../core/src/preview-intervention.ts
 function resolveOwner(type, typeDef, roleIndex, schemaSize) {
   if (!typeDef) {
@@ -16160,6 +16468,7 @@ var init_kernel_bridge = __esm({
     init_closure_gate();
     init_kernel();
     init_bridge_readmodel();
+    init_propose_guard();
     init_src3();
     init_src3();
     init_preview_intervention();
@@ -16490,8 +16799,14 @@ var init_kernel_bridge = __esm({
           }
         }
         if (!workId) {
-          const deadRev = [...this.model.revisions.values()].filter((r) => r.artifactId === args.artifactId && r.state === "superseded").sort((a, b2) => b2.createdAt.localeCompare(a.createdAt))[0];
-          if (deadRev) return deadRev;
+          const snap = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+          const headId = snap?.nodes.find((n) => n.id === args.artifactId)?.latestWorkId ?? null;
+          if (headId) {
+            const headWork = snap?.works.find((w2) => w2.id === headId);
+            const headOutputs = snap?.artifacts.filter((a) => a.workId === headId).length ?? 0;
+            const block = proposeBlock(headWork, headOutputs);
+            if (block) throw new KernelError(block.detail, block.code);
+          }
           const worksCount = [...this.model.revisions.values()].filter((r) => r.artifactId === args.artifactId).length;
           const revisionId = `wk:${args.artifactId}:${worksCount + 1}`;
           await this.commit({
@@ -16677,8 +16992,8 @@ var init_kernel_bridge = __esm({
         const pendingHead = pendingConcludeAttempt(this.model, args.artifactId)?.head;
         const targetWorkId = args.revisionId ?? (currentRev && currentRev.state === "proposed" ? currentRev.id : null) ?? pendingHead ?? concludedHead(this.model, args.artifactId);
         if (!targetWorkId) throw new Error("no concluded head to review");
-        let reviewId = null;
-        let reviewGroup = "default";
+        const verdict = args.verdict === "approve" ? "approve" : "request_changes";
+        let targets = [];
         if (args.reviewId !== void 0) {
           const snap = await this.store.transaction((tx) => tx.loadWorkorder(wid));
           const row = snap?.reviews.find((r) => r.id === args.reviewId) ?? null;
@@ -16698,32 +17013,67 @@ var init_kernel_bridge = __esm({
           if (row.verdict === null && (row.cancelledAt || row.endedAt)) {
             throw new Error(`review ${args.reviewId} is no longer open\uFF08\u8BE5\u8BC4\u5BA1\u884C\u5DF2\u8D85\u65F6\u5931\u8D25/\u88AB\u53D6\u6D88\uFF0C\u8FDF\u5230\u7968\u88AB\u62D2\uFF09`);
           }
-          reviewId = args.reviewId;
-          reviewGroup = row.reviewGroup;
-        } else if (!args.revisionId) {
+          targets = [{ id: row.id, group: row.reviewGroup }];
+        } else {
           const snap = await this.store.transaction((tx) => tx.loadWorkorder(wid));
-          const open2 = snap?.reviews.find((r) => r.targetWorkId === targetWorkId && r.reviewerActorId === args.actor && isReviewOpen(r));
-          reviewId = open2?.id ?? null;
-          if (open2) reviewGroup = open2.reviewGroup;
+          const rows = snap?.reviews.filter(
+            (r) => r.targetWorkId === targetWorkId && r.reviewerActorId === args.actor
+          ) ?? [];
+          const open2 = rows.filter((r) => isReviewOpen(r));
+          if (open2.length === 0) {
+            const decided = rows.filter((r) => r.verdict !== null);
+            if (decided.length > 0) {
+              if (decided.every((r) => r.verdict === verdict)) {
+                return { status: verdict === "approve" ? "satisfied" : "failed" };
+              }
+              throw new KernelError(
+                `\u4F60\u5DF2\u5BF9\u8FD9\u4E00\u7248\u6295\u8FC7\u300C${decided[0].verdict}\u300D\uFF08${args.artifactId} @ ${targetWorkId}\uFF09\u2014\u2014\u540C\u4E00\u7248\u4E0D\u63A5\u53D7\u6539\u5224\uFF0C\u8981\u91CD\u6295\u8BF7\u5148\u91CD\u65B0\u53D1\u8D77\u8BC4\u5BA1\uFF08oasis rereview / \u63A7\u5236\u53F0\u300C\u91CD\u65B0\u8BC4\u5BA1\u300D\uFF09\u3002`,
+                "review-already-decided"
+              );
+            }
+            const reqs = snap?.requirements.filter((r) => r.nodeId === args.artifactId) ?? [];
+            const mine = reqs.filter((r) => r.reviewerActorId === args.actor);
+            if (mine.length > 0) {
+              targets = [...new Set(mine.map((r) => r.reviewGroup))].map((group) => ({ id: null, group }));
+            } else {
+              const stale = (snap?.reviews ?? []).filter(
+                (r) => r.nodeId === args.artifactId && r.reviewerActorId === args.actor && r.targetWorkId !== targetWorkId
+              );
+              if (reqs.length === 0) {
+                throw new KernelError(
+                  `${args.artifactId} \u6CA1\u6709\u8BC4\u5BA1\u8981\u6C42\u2014\u2014\u8FD9\u4E2A\u8282\u70B9\u7684\u6536\u53E3\u4E0D\u9700\u8981\u6295\u7968\uFF0C\u4F60\u7684\u7968\u6CA1\u6709\u53EF\u843D\u7684\u884C\uFF08\u8981\u8D8A\u8FC7\u6D41\u7A0B\u76F4\u63A5\u6536\u53E3\u7528 force-conclude\uFF09\u3002`,
+                  "no-review-requirement"
+                );
+              }
+              throw new KernelError(
+                `\u8FD9\u4E00\u7248\u4E0A\u6CA1\u6709\u6D3E\u7ED9\u4F60\u7684\u8BC4\u5BA1\u884C\uFF08${args.artifactId} @ ${targetWorkId}\uFF09\uFF1A\u672C\u7248\u8BC4\u5BA1\u4EBA = [${[...new Set(reqs.map((r) => r.reviewerActorId))].join("\u3001")}]${stale.length > 0 ? `\uFF1B\u4F60\u5728\u65E7\u7248 ${stale[0].targetWorkId} \u4E0A\u6709\u4E00\u884C\uFF0C\u90A3\u4E00\u7248\u5DF2\u7ECF\u4E0D\u662F\u5F53\u524D\u5F85\u5BA1\u7248\u672C` : ""}\u2014\u2014\u7968\u6CA1\u6709\u843D\u8D26\uFF08\u4EE5\u524D\u8FD9\u91CC\u4F1A\u6084\u6084\u65B0\u5EFA\u4E00\u884C\u628A\u7968\u541E\u6389\uFF09\u3002`,
+                "review-row-not-found"
+              );
+            }
+          } else {
+            targets = open2.map((r) => ({ id: r.id, group: r.reviewGroup }));
+          }
         }
-        await this.commit({
-          companyId: "",
-          workorderId: wid,
-          actorId: args.actor,
-          handActorId: args.hand ?? null,
-          event: {
-            kind: "review.response",
+        for (const target of targets) {
+          await this.commit({
+            companyId: "",
             workorderId: wid,
-            reviewId,
-            // 有 open 行投它（保留 group）；无则让 handler 新建一行
-            targetWorkId,
-            reviewerActorId: args.actor,
-            reviewGroup,
-            verdict: args.verdict === "approve" ? "approve" : "request_changes",
-            note: args.note ?? null,
-            handActorId: args.hand ?? null
-          }
-        });
+            actorId: args.actor,
+            handActorId: args.hand ?? null,
+            event: {
+              kind: "review.response",
+              workorderId: wid,
+              reviewId: target.id,
+              // 有行投行；无行时带真实桶名建本人的行（不再是没人指的 default 幽灵行）
+              targetWorkId,
+              reviewerActorId: args.actor,
+              reviewGroup: target.group,
+              verdict,
+              note: args.note ?? null,
+              handActorId: args.hand ?? null
+            }
+          });
+        }
         const attempt = this.model.concludeAttempts.get(args.artifactId)?.at(-1);
         return attempt ? { status: args.verdict === "approve" ? "satisfied" : "failed" } : { status: "pending" };
       }
@@ -16731,8 +17081,18 @@ var init_kernel_bridge = __esm({
         const wid = this.wo(args.artifactId);
         const artifact = this.model.artifacts.get(args.artifactId);
         const currentRev = artifact?.currentRev ? this.model.revisions.get(artifact.currentRev) : void 0;
-        const head = (currentRev && currentRev.state === "proposed" ? currentRev.id : null) ?? concludedHead(this.model, args.artifactId);
-        if (!head) throw new Error("no head to force-conclude");
+        const snap = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+        const targetNode = snap?.nodes.find((n) => n.id === args.artifactId);
+        const head = (currentRev && currentRev.state === "proposed" ? currentRev.id : null) ?? concludedHead(this.model, args.artifactId) ?? (targetNode?.latestSuccessWorkId ?? targetNode?.latestWorkId ?? null);
+        if (!head) throw new KernelError(`force-conclude \u65E0\u4ECE\u4E0B\u624B\uFF08${args.artifactId}\uFF09\uFF1A\u672C\u8282\u70B9\u8FD8\u6CA1\u6709\u4EFB\u4F55\u4E00\u7248\u4EA7\u51FA`, "no-head");
+        const block = snap ? acceptBlock(new WorkorderState(snap), head) : null;
+        if (block?.code === "already-accepted") return;
+        if (block && !block.overridable) {
+          throw new KernelError(
+            `force-conclude \u672A\u6267\u884C\uFF08${args.artifactId} @ ${head}\uFF09\uFF1A${block.detail}`,
+            `accept-blocked:${block.code}`
+          );
+        }
         await this.commit({
           companyId: "",
           workorderId: wid,
@@ -16745,6 +17105,14 @@ var init_kernel_bridge = __esm({
             override: { by: args.actor, reason: args.reason ?? args.note ?? "force concluded" }
           }
         });
+        const after = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+        const accepted = after?.works.find((w2) => w2.id === head)?.acceptanceState === "accepted";
+        if (!accepted) {
+          throw new KernelError(
+            `force-conclude \u672A\u751F\u6548\uFF08${args.artifactId} @ ${head}\uFF09\uFF1Awork.accept \u4E8B\u4EF6\u5DF2\u5165 oplog\uFF0C\u4F46 apply \u672A\u6539\u53D8\u9A8C\u6536\u6001${block ? `\u2014\u2014\u4E8B\u524D\u5224\u636E\uFF1A${block.detail}` : "\u2014\u2014\u539F\u56E0\u672A\u77E5\uFF0C\u8BF7\u67E5 work/node \u73B0\u72B6"}`,
+            "accept-no-effect"
+          );
+        }
       }
       async groupCommit(args) {
         await this.merge({ artifactId: args.artifactId, actor: args.actor });
@@ -16953,6 +17321,7 @@ var init_kernel_bridge = __esm({
             issueId,
             issueKind: "escalation",
             body,
+            gapId: args.gapId,
             aboutNodeId: args.artifactId,
             aboutWorkId: null,
             // ★ 修复（实证 ws:wo-a558f8cc）：raisedByNodeId 只在 **agent/人自提**（/api/cmd escalate）时填节点——
@@ -17234,7 +17603,10 @@ var init_kernel_bridge = __esm({
         });
       }
       async bumpPin(args) {
-        console.warn(`[kernel] bumpPin \u5FFD\u7565\uFF08${args.artifactId} \u2192 ${args.to}@${args.pinned}\uFF09\uFF1A\u65B0\u5F15\u64CE pin \u7531 work.accept \u81EA\u52A8\u63A8\u8FDB`);
+        throw new KernelError(
+          `pin \u5DF2\u5E9F\u5F03\uFF08${args.artifactId} \u2192 ${args.to}@${args.pinned} \u672A\u6267\u884C\uFF09\uFF1A\u65B0\u5F15\u64CE\u7684\u4E0B\u6E38\u7248\u672C\u56FA\u5B9A\u7531 work.accept \u81EA\u52A8\u63A8\u8FDB\u2014\u2014\u8981\u8BA9\u4E0B\u6E38\u6362\u7248\uFF0C\u53BB\u9A8C\u6536\u4E0A\u6E38\u5BF9\u5E94\u7684\u90A3\u4E00\u7248\uFF08conclude / force-conclude\uFF09\u3002`,
+          "deprecated-op"
+        );
       }
       async recordToolCall(_args) {
       }
@@ -17331,6 +17703,7 @@ var init_kernel_bridge = __esm({
         }
         const wid = plan.workspace ?? plan.ops.find((o) => o.action === "spawn" && o.workspace)?.workspace ?? "ws:default";
         let applied = 0;
+        const unsupported = [];
         await this.ensureWorkorder(wid, "", _actor);
         for (const op of plan.ops) {
           switch (op.action) {
@@ -17469,6 +17842,7 @@ var init_kernel_bridge = __esm({
               break;
             }
             default:
+              unsupported.push(`${op.action}\uFF08${op.artifactId ?? "?"}\uFF09`);
               break;
           }
         }
@@ -17492,6 +17866,12 @@ var init_kernel_bridge = __esm({
           this.draftCards.delete(plan.resolvesProposal);
           await this.refreshModel();
         }
+        if (unsupported.length > 0) {
+          throw new KernelError(
+            `\u5DF2\u843D\u5730 ${applied} \u6761 op\uFF1B\u4EE5\u4E0B op \u672C\u5F15\u64CE\u4E0D\u652F\u6301\u3001\u672A\u6267\u884C\uFF1A${unsupported.join("\u3001")}\uFF08pin \u5DF2\u5E9F\u5F03\u2014\u2014\u4E0B\u6E38\u7248\u672C\u7531\u9A8C\u6536\u4E0A\u6E38\u81EA\u52A8\u63A8\u8FDB\uFF09`,
+            "unsupported-op"
+          );
+        }
         return { interventionId: `intervention:${(0, import_node_crypto3.randomUUID)()}`, applied };
       }
     };
@@ -17516,6 +17896,7 @@ var init_src4 = __esm({
     init_workorder_ledger();
     init_closure_gate();
     init_exit_classify();
+    init_produce_resume_fallback();
     init_dispatcher();
     init_session_limits();
     init_kernel_bridge();
@@ -160686,6 +161067,9 @@ ${task}` : task;
 });
 
 // ../adapters/src/_core/workdir-gc.ts
+function reclaimableBytes(c) {
+  return c.sizeBytes + (c.runtimeStateBytes ?? 0);
+}
 function idleMs(c, now) {
   const last = c.meta?.lastUsedAt ? Date.parse(c.meta.lastUsedAt) : NaN;
   return now - (Number.isFinite(last) ? last : c.mtimeMs);
@@ -160706,19 +161090,58 @@ function decideOne(c, policy, now) {
   }
   if (c.artifactState === void 0) return mk("keep", "artifact-unknown");
   if (c.artifactState === "active") {
-    if (c.meta.lastExit?.reason === "clean") return mk("delete", "settled-clean");
-    return c.meta.lastExit && idle > policy.abnormalGraceMs ? mk("delete", "one-shot-ttl") : mk("keep", "artifact-active");
+    return mk("keep", "artifact-active");
   }
-  if (c.meta.lastExit?.reason === "clean") return mk("delete", "settled-clean");
   return idle > policy.ttlMs ? mk("delete", "settled-ttl") : mk("keep", "within-ttl");
 }
 function planGc(candidates, policy, now) {
   const decisions = candidates.map((c) => decideOne(c, policy, now));
-  const { highWaterBytes, lowWaterBytes } = policy;
-  if (highWaterBytes === void 0) return decisions;
   const byDir = new Map(candidates.map((c) => [c.dir, c]));
+  applyRetentionBudget(decisions, byDir, policy, now);
+  applyHighWaterLru(decisions, byDir, policy, now);
+  return decisions;
+}
+function applyRetentionBudget(decisions, byDir, policy, now) {
+  const maxRounds = policy.maxRoundsPerArtifact;
+  const capBytes = policy.sessionStoreCapBytes;
+  const evictable = () => decisions.filter((d) => d.action === "keep").map((d) => ({ d, c: byDir.get(d.dir) })).filter(({ c }) => !c.live && (c.artifactState === "active" || c.artifactState === "settled"));
+  if (maxRounds !== void 0 && maxRounds >= 0) {
+    const byArtifact = /* @__PURE__ */ new Map();
+    for (const item of evictable()) {
+      const id = item.c.meta?.artifactId;
+      if (!id) continue;
+      (byArtifact.get(id) ?? byArtifact.set(id, []).get(id)).push(item);
+    }
+    for (const group of byArtifact.values()) {
+      if (group.length <= maxRounds) continue;
+      group.sort((a, b2) => idleMs(a.c, now) - idleMs(b2.c, now));
+      for (const { d } of group.slice(maxRounds)) {
+        d.action = "delete";
+        d.reason = "budget-rounds";
+      }
+    }
+  }
+  if (capBytes !== void 0) {
+    let remaining = decisions.filter((d) => d.action === "keep").reduce((sum, d) => sum + reclaimableBytes(byDir.get(d.dir)), 0);
+    if (remaining > capBytes) {
+      const tier = (c) => c.artifactState === "settled" ? 0 : 1;
+      const order = evictable().sort(
+        (a, b2) => tier(a.c) - tier(b2.c) || idleMs(b2.c, now) - idleMs(a.c, now)
+      );
+      for (const { d, c } of order) {
+        if (remaining <= capBytes) break;
+        d.action = "delete";
+        d.reason = "budget-cap";
+        remaining -= reclaimableBytes(c);
+      }
+    }
+  }
+}
+function applyHighWaterLru(decisions, byDir, policy, now) {
+  const { highWaterBytes, lowWaterBytes } = policy;
+  if (highWaterBytes === void 0) return;
   let remaining = decisions.filter((d) => d.action === "keep").reduce((sum, d) => sum + d.sizeBytes, 0);
-  if (remaining <= highWaterBytes) return decisions;
+  if (remaining <= highWaterBytes) return;
   const target = lowWaterBytes ?? highWaterBytes;
   const lru = decisions.filter((d) => d.action === "keep").map((d) => ({ d, c: byDir.get(d.dir) })).filter(({ c }) => !c.live && c.artifactState === "settled").sort((a, b2) => idleMs(b2.c, now) - idleMs(a.c, now));
   for (const { d } of lru) {
@@ -160727,17 +161150,23 @@ function planGc(candidates, policy, now) {
     d.reason = "high-water-lru";
     remaining -= d.sizeBytes;
   }
-  return decisions;
 }
-function gcAccounting(decisions, policy) {
-  const totalBytes = decisions.reduce((s2, d) => s2 + d.sizeBytes, 0);
-  const freedBytes = decisions.filter((d) => d.action === "delete").reduce((s2, d) => s2 + d.sizeBytes, 0);
+function gcAccounting(decisions, policy, candidates) {
+  const byDir = candidates ? new Map(candidates.map((c) => [c.dir, c])) : void 0;
+  const sizeOf = (d) => {
+    const c = byDir?.get(d.dir);
+    return c ? reclaimableBytes(c) : d.sizeBytes;
+  };
+  const totalBytes = decisions.reduce((s2, d) => s2 + sizeOf(d), 0);
+  const freedBytes = decisions.filter((d) => d.action === "delete").reduce((s2, d) => s2 + sizeOf(d), 0);
   const keptBytes = totalBytes - freedBytes;
+  const cap = policy.sessionStoreCapBytes;
   return {
     totalBytes,
     keptBytes,
     freedBytes,
-    overHighWater: policy.highWaterBytes !== void 0 && keptBytes > policy.highWaterBytes
+    // 高水位报警：旧 highWaterBytes 或新总量上限任一被突破都报（新上限缺省即开）。
+    overHighWater: policy.highWaterBytes !== void 0 && keptBytes > policy.highWaterBytes || cap !== void 0 && keptBytes > cap
   };
 }
 var DEFAULT_GC_POLICY;
@@ -160748,7 +161177,9 @@ var init_workdir_gc = __esm({
       orphanTtlMs: 24 * 36e5,
       ttlMs: 7 * 24 * 36e5,
       chatTtlMs: 14 * 24 * 36e5,
-      abnormalGraceMs: 24 * 36e5
+      abnormalGraceMs: 24 * 36e5,
+      maxRoundsPerArtifact: 3,
+      sessionStoreCapBytes: 2 * 1024 ** 3
     };
   }
 });
@@ -160819,14 +161250,20 @@ function kindFromPath(workRoot, dir) {
   if (parts[0] === "tmp" && parts[1]) return parts[1].replace(/-[^-]*$/, "");
   return void 0;
 }
-function observe(dir) {
+function observe(dir, workRoot, measureRuntimeState) {
   const meta = readMeta(dir);
   let mtimeMs = 0;
   try {
     mtimeMs = import_node_fs11.default.statSync(dir).mtimeMs;
   } catch {
   }
-  return { dir, meta, sizeBytes: dirSizeBytes(dir), mtimeMs, live: isWorkdirLive(dir) };
+  const runtimeKind = meta?.runtimeKind ?? kindFromPath(workRoot, dir);
+  let runtimeStateBytes = 0;
+  try {
+    runtimeStateBytes = measureRuntimeState?.(dir, runtimeKind) ?? 0;
+  } catch {
+  }
+  return { dir, meta, sizeBytes: dirSizeBytes(dir), runtimeStateBytes, mtimeMs, live: isWorkdirLive(dir) };
 }
 async function runGcSweep(deps) {
   const policy = { ...DEFAULT_GC_POLICY, ...deps.policy };
@@ -160834,7 +161271,7 @@ async function runGcSweep(deps) {
   const log3 = deps.log ?? (() => {
   });
   const dirs = listWorkdirs(deps.workRoot, deps.legacyRoot);
-  const candidates = dirs.map((d) => observe(d));
+  const candidates = dirs.map((d) => observe(d, deps.workRoot, deps.measureRuntimeState));
   const needStates = candidates.filter(
     (c) => c.meta?.artifactId && c.meta.kind !== "chat" && c.meta.kind !== "one-shot"
   );
@@ -160852,7 +161289,7 @@ async function runGcSweep(deps) {
     if (st) c.artifactState = st;
   }
   const decisions = planGc(candidates, policy, now);
-  const acct = gcAccounting(decisions, policy);
+  const acct = gcAccounting(decisions, policy, candidates);
   let deleted = 0;
   for (const d of decisions) {
     if (d.action !== "delete") continue;
@@ -164661,7 +165098,13 @@ async function startOasisServer(opts) {
           try {
             let companyId;
             if (companyCtx) {
-              if (companyCtx.kind === "not-found") throw new ApiError(404, "COMPANY_NOT_FOUND", "\u8BF7\u6C42\u6307\u5B9A\u7684\u516C\u53F8\u4E0D\u5B58\u5728");
+              if (companyCtx.kind === "not-found") {
+                throw companyCtx.selector ? new ApiError(404, "COMPANY_NOT_FOUND", `\u8BF7\u6C42\u6307\u5B9A\u7684\u516C\u53F8\u4E0D\u5B58\u5728\uFF1A${companyCtx.selector}`) : new ApiError(
+                  404,
+                  "COMPANY_UNRESOLVED",
+                  `\u65E0\u6CD5\u786E\u5B9A\u5F53\u524D\u516C\u53F8\uFF1A${actor} \u672A\u6307\u5B9A\u516C\u53F8\uFF08x-oasis-company\uFF09\uFF0C\u81EA\u8EAB\u4E5F\u4E0D\u5C5E\u4E8E\u4EFB\u4F55\u516C\u53F8\u3002agent \u4F1A\u8BDD\u5C5E\u4E8E\u5176\u88AB\u6D3E\u53D1\u7684\u90A3\u5BB6\u516C\u53F8\uFF0C\u5E94\u7531\u6D3E\u53D1\u65B9\u5728\u4F1A\u8BDD token \u91CC\u7B7E companyId\u2014\u2014\u6536\u5230\u672C\u9519\u8BEF\u901A\u5E38\u662F\u7B7E\u53D1\u4FA7\u6F0F\u7B7E\uFF0C\u800C\u975E\u516C\u53F8\u8BB0\u5F55\u6709\u95EE\u9898\u3002`
+                );
+              }
               if (companyCtx.kind === "forbidden") throw new ApiError(403, "NOT_A_MEMBER", "\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF0C\u8BBF\u95EE\u88AB\u62D2");
               if (companyCtx.kind === "ok") companyId = companyCtx.companyId;
             }
@@ -168146,6 +168589,7 @@ var init_service3 = __esm({
        * 队首若 stale（base ≠ 当前 head，文档层乱序 approve 会撞上）→ 内核拒绝并指 rebase/group-commit。
        */
       async mergeUpTo(artifactId, revisionId, actor) {
+        let voted = false;
         for (let guard = 0; guard < 1e3; guard++) {
           const target = this.kernel.model.revisions.get(revisionId);
           if (!target) throw new Error(`revision not found in kernel: ${revisionId}`);
@@ -168153,7 +168597,14 @@ var init_service3 = __esm({
           if (target.state === "working") {
             await this.kernel.merge({ artifactId, actor });
           } else if (target.state === "proposed") {
+            if (voted) {
+              const gate = pendingConcludeAttempt(this.kernel.model, artifactId)?.gate;
+              throw new Error(
+                `\u5DF2\u8BB0\u5F55\u4F60\u7684\u901A\u8FC7\u7968\uFF0C\u4F46\u8FD9\u4E00\u7248\u8FD8\u6CA1\u6536\u9F50\u8BC4\u5BA1${gate ? `\uFF08\u9700 ${gate.quorum} \u7968\uFF0C\u8BC4\u5BA1\u4EBA [${gate.eligible.join("\u3001")}]\uFF09` : ""}\u2014\u2014\u7B49\u5176\u4F59\u8BC4\u5BA1\u4EBA\u8868\u6001\u540E\u81EA\u52A8\u843D\u5730\u3002`
+              );
+            }
             await this.kernel.submitReview({ artifactId, actor, verdict: "approve", revisionId });
+            voted = true;
           } else {
             throw new Error(`revision not approvable (state=${target.state}): ${revisionId}`);
           }
@@ -180387,7 +180838,7 @@ function collabDomain(opts) {
       const resolveProject = await buildProjectResolver(artifacts);
       const dispatchPausedOf = await buildDispatchPausedResolver(kernel.model, artifacts);
       const wsArts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === req.params.id);
-      const coordinatorEvents = engineStore ? await engineStore.transaction((tx) => tx.listEvents(req.params.id)) : void 0;
+      const coordinatorEvents = engineStore ? await engineStore.transaction((tx) => tx.listEvents(req.params.id, 0, void 0, COORDINATOR_ACTIVITY_EVENT_KINDS)) : void 0;
       const signalsForThisCompany = opts.dispatcherSignalsOf ? (id) => opts.dispatcherSignalsOf(req.auth.companyId, id) : void 0;
       const roleDefsByName = opts.roles ? new Map((await opts.roles.list()).map((r) => [r.name, { label: r.label, defaultOwner: r.defaultOwner }])) : void 0;
       const roleDefaultOwnerOf = roleDefsByName ? (role) => {
@@ -180739,6 +181190,7 @@ function collabDomain(opts) {
     });
   };
 }
+var COORDINATOR_ACTIVITY_EVENT_KINDS;
 var init_collab = __esm({
   "../server/src/domains/collab/index.ts"() {
     "use strict";
@@ -180764,6 +181216,7 @@ var init_collab = __esm({
     init_organization_usage();
     init_planner();
     init_closure_report();
+    COORDINATOR_ACTIVITY_EVENT_KINDS = ["plan.changed", "issue.create", "issue.resolve"];
   }
 });
 
@@ -182041,6 +182494,7 @@ var init_service7 = __esm({
       onCheckpointState;
       readBundleFile;
       onAgentHandoffPersisted;
+      resolveNodeConclusions;
       constructor(opts) {
         this.store = opts.store;
         this.mode = opts.mode;
@@ -182051,6 +182505,7 @@ var init_service7 = __esm({
         this.onCheckpointState = opts.onCheckpointState;
         this.readBundleFile = opts.readBundleFile;
         this.onAgentHandoffPersisted = opts.onAgentHandoffPersisted;
+        this.resolveNodeConclusions = opts.resolveNodeConclusions;
       }
       assertWritable() {
         if (this.mode === "off") throw new Error("execution continuity is disabled");
@@ -182246,6 +182701,12 @@ var init_service7 = __esm({
       async coordinatorView(workOrderId, companyId) {
         const graph = await this.resolveGraph(workOrderId, companyId);
         if (graph.length === 0) return null;
+        let conclusions = {};
+        try {
+          conclusions = await this.resolveNodeConclusions?.(workOrderId, companyId) ?? {};
+        } catch (error2) {
+          console.warn(`[execution-continuity] conclusion \u8BFB\u53D6\u5931\u8D25\uFF08\u534F\u8C03\u8005\u89C6\u56FE\u7167\u5E38\u8FD4\u56DE\uFF09: ${String(error2)}`);
+        }
         const attempts = await this.store.listAttempts(workOrderId);
         const latest = latestAttemptByNode(attempts);
         const handoffs = /* @__PURE__ */ new Map();
@@ -182309,7 +182770,10 @@ var init_service7 = __esm({
               recoverability: checkpoint.recoverability,
               lastCheckpointAt: checkpoint.createdAt
             } } : {},
-            blockedBy: nodeState === "waiting" ? node.dependsOn.filter((id) => !DONE_STATES.has(stateByNode.get(id) ?? "waiting")) : []
+            blockedBy: nodeState === "waiting" ? node.dependsOn.filter((id) => !DONE_STATES.has(stateByNode.get(id) ?? "waiting")) : [],
+            // 纯透传（展示层兜底料源，见 CoordinatorNodeView.conclusion）。不参与本方法里任何
+            // nodeState / todo / dependencyBlocks / collaborationStatus 的派生。
+            ...conclusions[node.nodeId]?.trim() ? { conclusion: conclusions[node.nodeId].trim() } : {}
           };
         });
         const reverse = reverseEdges(graph);
@@ -182457,6 +182921,23 @@ var init_upstream_handoff_input = __esm({
   }
 });
 
+// ../server/src/domains/execution-continuity/node-conclusions.ts
+function nodeConclusionsFromSnapshot(snapshot) {
+  const workById = new Map(snapshot.works.map((work) => [work.id, work]));
+  const out = {};
+  for (const node of snapshot.nodes) {
+    const accepted = node.latestAcceptId ? workById.get(node.latestAcceptId) : void 0;
+    const conclusion = accepted?.conclusion?.trim() || snapshot.works.filter((work) => work.nodeId === node.id && work.status === "success" && work.conclusion?.trim()).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt)).at(-1)?.conclusion?.trim();
+    if (conclusion) out[node.id] = conclusion;
+  }
+  return out;
+}
+var init_node_conclusions = __esm({
+  "../server/src/domains/execution-continuity/node-conclusions.ts"() {
+    "use strict";
+  }
+});
+
 // ../server/src/domains/execution-continuity/index.ts
 function createExecutionContinuityDomain(opts) {
   const service = new ExecutionContinuityService(opts);
@@ -182471,6 +182952,7 @@ var init_execution_continuity2 = __esm({
     init_routes8();
     init_handoff_work_bridge();
     init_upstream_handoff_input();
+    init_node_conclusions();
   }
 });
 
@@ -186141,15 +186623,16 @@ var init_builtin_skills = __esm({
 
 // ../server/src/design/board-watch.ts
 function decideBoardLetter(c, nowMs, quietMs) {
+  if (c.hasOpenWatchLetter) return false;
+  if (c.freshTerminalRunId !== null) return true;
   if (c.boardMtime === null) return false;
   if (!c.hasRevision) return false;
   if (c.lastOpAtMs === null || c.boardMtime <= c.lastOpAtMs) return false;
   if (nowMs - c.boardMtime < quietMs) return false;
-  if (c.hasOpenWatchLetter) return false;
   if (c.lastWatchMtime !== null && c.boardMtime <= c.lastWatchMtime) return false;
   return true;
 }
-var MARKER_PREFIX, boardWatchMarker, parseMarker, BoardWatcher;
+var MARKER_PREFIX, boardWatchMarker, parseMarker, RUN_MARKER_PREFIX, boardWatchRunMarker, parseRunMarker, TERMINAL_RUN_STATUS, BoardWatcher;
 var init_board_watch = __esm({
   "../server/src/design/board-watch.ts"() {
     "use strict";
@@ -186162,6 +186645,17 @@ var init_board_watch = __esm({
       const n = Number.parseInt(body.slice(i + MARKER_PREFIX.length), 10);
       return Number.isFinite(n) ? n : null;
     };
+    RUN_MARKER_PREFIX = "[od-board-watch run:";
+    boardWatchRunMarker = (runId) => `${RUN_MARKER_PREFIX}${runId}]`;
+    parseRunMarker = (body) => {
+      const i = body.indexOf(RUN_MARKER_PREFIX);
+      if (i < 0) return null;
+      const j = body.indexOf("]", i + RUN_MARKER_PREFIX.length);
+      if (j < 0) return null;
+      const id = body.slice(i + RUN_MARKER_PREFIX.length, j);
+      return id.length > 0 ? id : null;
+    };
+    TERMINAL_RUN_STATUS = /* @__PURE__ */ new Set(["succeeded", "failed", "canceled", "cancelled"]);
     BoardWatcher = class {
       constructor(deps) {
         this.deps = deps;
@@ -186178,6 +186672,22 @@ var init_board_watch = __esm({
           return null;
         }
       }
+      /**
+       * 查一块板的 run 列表（`GET /api/runs?projectId=`，与 CLI `design status` 同源）。
+       * run 注册表是 od 的**内存态**——重启即空，查不到不代表没跑过；所以这里失败一律降级成空数组，
+       * 由板文件 mtime 那条慢路径兜底，绝不因为查不到 run 就压掉写信。
+       */
+      async boardRuns(boardKey) {
+        const fetchImpl = this.deps.fetchImpl ?? fetch;
+        try {
+          const res = await fetchImpl(`${this.deps.odBase}/api/runs?projectId=${encodeURIComponent(boardKey)}`);
+          if (!res.ok) return [];
+          const body = await res.json();
+          return (body.runs ?? []).map((r) => ({ runId: String(r["runId"] ?? r["id"] ?? ""), status: String(r["status"] ?? "unknown") })).filter((r) => r.runId.length > 0);
+        } catch {
+          return [];
+        }
+      }
       async tick(now = Date.now()) {
         const { kernel, boardKeyOf, log: log3 } = this.deps;
         const quietMs = this.deps.quietMs ?? 10 * 6e4;
@@ -186194,9 +186704,17 @@ var init_board_watch = __esm({
           }
           const boardKey = boardKeyOf(a.id);
           const files = await this.boardFiles(boardKey);
-          if (!files || files.length === 0) continue;
+          if (files === null) continue;
+          const runs = await this.boardRuns(boardKey);
+          if (files.length === 0 && runs.length === 0) continue;
           const boardMtime = files.reduce((mx, f2) => f2.mtime !== null && (mx === null || f2.mtime > mx) ? f2.mtime : mx, null);
-          const watchLetters = annotationsOf(model, a.id).filter((x2) => x2.author === actor && parseMarker(x2.body) !== null);
+          const watchLetters = annotationsOf(model, a.id).filter(
+            (x2) => x2.author === actor && (parseMarker(x2.body) !== null || parseRunMarker(x2.body) !== null)
+          );
+          const letteredRuns = new Set(
+            watchLetters.map((x2) => parseRunMarker(x2.body)).filter((s2) => s2 !== null)
+          );
+          const newestTerminalRun = runs.find((r) => TERMINAL_RUN_STATUS.has(r.status)) ?? null;
           const lastOpAt = model.lastOpAt.get(a.id);
           const candidate = {
             boardMtime,
@@ -186206,21 +186724,41 @@ var init_board_watch = __esm({
             lastWatchMtime: watchLetters.reduce((mx, x2) => {
               const m2 = parseMarker(x2.body);
               return m2 !== null && (mx === null || m2 > mx) ? m2 : mx;
-            }, null)
+            }, null),
+            freshTerminalRunId: newestTerminalRun !== null && !letteredRuns.has(newestTerminalRun.runId) ? newestTerminalRun.runId : null
           };
           if (!decideBoardLetter(candidate, now, quietMs)) continue;
-          const newest = files.filter((f2) => f2.mtime !== null && candidate.lastOpAtMs !== null && f2.mtime > candidate.lastOpAtMs).sort((x2, y) => (y.mtime ?? 0) - (x2.mtime ?? 0));
-          const listed = (newest.length > 0 ? newest : files).slice(0, 5).map((f2) => `- ${f2.path}\uFF08${f2.kind ?? "?"}\uFF09\xB7 ${f2.mtime ? new Date(f2.mtime).toISOString() : "?"}`).join("\n");
-          const body = [
-            boardWatchMarker(boardMtime),
-            `\u753B\u677F ${boardKey} \u4E0A\u6709 Oasis \u4E4B\u5916\u7684\u65B0\u52A8\u9759\uFF08\u4EBA\u5728\u677F\u4E0A\u5BF9\u8BDD/\u6539\u7A3F\uFF0C\u6216\u5F15\u64CE\u4EA7\u4E86\u6CA1\u4EBA\u6536\u7684\u65B0\u7248\uFF09\uFF0C\u6BD4\u672C\u4EA7\u7269\u6700\u8FD1\u4E00\u6B21\u64CD\u4F5C\uFF08${lastOpAt ?? "?"}\uFF09\u65B0\u3001\u4E14\u5DF2\u9759\u9ED8 ${Math.round(quietMs / 6e4)} \u5206\u949F\uFF1A`,
-            listed,
-            ``,
-            `\u8BF7\u53D6\u8D27\u6838\u5BF9\uFF1A\`oasis design status ${a.id} --pull\` \u2192 \u5185\u5BB9\u5408\u610F\u5C31 \`oasis propose ${a.id} --from-dir <\u76EE\u5F55> --reason "<\u6536\u5F55\u677F\u4E0A\u4EBA\u5DE5\u8FED\u4EE3>"\` \u6536\u5F55\u4E3A\u65B0\u7248\u672C\uFF1B\u4E0D\u5408\u610F/\u4E0D\u5FC5\u6536\u5F55\uFF0C\u56DE\u5E16\u8BF4\u660E\u540E\u6309 wontfix \u5904\u7406\u5373\u53EF\uFF08\u540C\u4E00\u7248\u4E0D\u4F1A\u518D\u6765\u4FE1\uFF09\u3002`
-          ].join("\n");
+          const fmt = (fs34) => fs34.slice(0, 5).map((f2) => `- ${f2.path}\uFF08${f2.kind ?? "?"}\uFF09\xB7 ${f2.mtime ? new Date(f2.mtime).toISOString() : "?"}`).join("\n");
+          let body;
+          let logLine;
+          if (candidate.freshTerminalRunId !== null) {
+            const status = newestTerminalRun.status;
+            const ok = status === "succeeded";
+            const listed = files.length > 0 ? fmt([...files].sort((x2, y) => (y.mtime ?? 0) - (x2.mtime ?? 0))) : "\uFF08\u677F\u4E0A\u6682\u65E0\u4EA4\u4ED8\u7269\uFF09";
+            body = [
+              // 两个 marker 都带：run marker 管快路径去重，mtime marker 顺手把慢路径也盖住——
+              // 否则这封信被 resolve 后，慢路径会就**同一批板内容**再写一封（两路去重各管各的）。
+              boardMtime !== null ? `${boardWatchRunMarker(candidate.freshTerminalRunId)} ${boardWatchMarker(boardMtime)}` : boardWatchRunMarker(candidate.freshTerminalRunId),
+              ok ? `\u753B\u677F ${boardKey} \u7684\u5F15\u64CE\u8DD1\u5B8C\u4E86\uFF08run ${candidate.freshTerminalRunId.slice(0, 8)} \u7EC8\u6001=${status}\uFF09\uFF0C\u8D27\u5728\u677F\u4E0A\u7B49\u4F60\u6536\uFF1A` : `\u753B\u677F ${boardKey} \u7684\u5F15\u64CE\u8FD9\u4E00\u8F6E**\u6CA1\u8DD1\u6210**\uFF08run ${candidate.freshTerminalRunId.slice(0, 8)} \u7EC8\u6001=${status}\uFF09\u3002\u677F\u4E0A\u5F53\u524D\u5185\u5BB9\uFF1A`,
+              listed,
+              ``,
+              ok ? `\u53D6\u8D27\u6838\u5BF9\uFF1A\`oasis design status ${a.id} --pull\` \u2192 \u5BF9\u7740 DESIGN_BRIEF.md \u4E0E inputs/ \u9010\u5B57\u6BB5\u6838\uFF08\u6570\u636E\u5BF9\u4E0D\u5BF9\u3001\u72B6\u6001\u5168\u4E0D\u5168\u3001\u6709\u6CA1\u6709\u7F16\u9020\uFF09\u3002\u591F\u597D\u5C31 \`oasis propose ${a.id} --from-dir <\u76EE\u5F55> --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"\`\uFF1B\u8981\u6539\u5C31\u56DE\u677F\u4E0A\u518D\u6765\u4E00\u8F6E \`oasis design chat ${a.id} --turn continue --message "<\u8981\u6539\u4EC0\u4E48>" --async\`\uFF08\u26D4 \u522B\u628A --pull \u4E0B\u6765\u7684\u6587\u4EF6\u5728\u672C\u5730\u624B\u6539\u540E propose\uFF09\u3002` : `\u5148 \`oasis design status ${a.id}\` \u770B\u677F\u4E0A\u6709\u6CA1\u6709\u53EF\u7528\u7684\u4E0A\u4E00\u7248\uFF1A\u6709\u5C31\u7167\u5E38\u53D6\u8D27\u6838\u5BF9\uFF1B\u6CA1\u6709\u5C31\u628A\u9700\u6C42\u4E0E\u771F\u5B9E\u6570\u636E\u9489\u5F97\u66F4\u6B7B\u540E\u91CD\u8D77\u4E00\u8F6E \`oasis design chat ${a.id} --message "<\u2026>" --async\`\uFF0C\u4ECD\u4E0D\u884C\u7528 \`oasis gap ${a.id} --desc "<\u5361\u5728\u54EA>"\` \u5192\u6CE1\u7ED9\u4EBA\u3002`
+            ].join("\n");
+            logLine = `[board-watch] ${a.id} \u2190 \u677F ${boardKey} \u5F15\u64CE\u6536\u5C3E\uFF08run ${candidate.freshTerminalRunId.slice(0, 8)} ${status}\uFF09\u2192 \u5DF2\u5199\u4FE1\u5524 owner`;
+          } else {
+            const newest = files.filter((f2) => f2.mtime !== null && candidate.lastOpAtMs !== null && f2.mtime > candidate.lastOpAtMs).sort((x2, y) => (y.mtime ?? 0) - (x2.mtime ?? 0));
+            body = [
+              boardWatchMarker(boardMtime),
+              `\u753B\u677F ${boardKey} \u4E0A\u6709 Oasis \u4E4B\u5916\u7684\u65B0\u52A8\u9759\uFF08\u4EBA\u5728\u677F\u4E0A\u5BF9\u8BDD/\u6539\u7A3F\uFF0C\u6216\u5F15\u64CE\u4EA7\u4E86\u6CA1\u4EBA\u6536\u7684\u65B0\u7248\uFF09\uFF0C\u6BD4\u672C\u4EA7\u7269\u6700\u8FD1\u4E00\u6B21\u64CD\u4F5C\uFF08${lastOpAt ?? "?"}\uFF09\u65B0\u3001\u4E14\u5DF2\u9759\u9ED8 ${Math.round(quietMs / 6e4)} \u5206\u949F\uFF1A`,
+              fmt(newest.length > 0 ? newest : files),
+              ``,
+              `\u8BF7\u53D6\u8D27\u6838\u5BF9\uFF1A\`oasis design status ${a.id} --pull\` \u2192 \u5185\u5BB9\u5408\u610F\u5C31 \`oasis propose ${a.id} --from-dir <\u76EE\u5F55> --reason "<\u6536\u5F55\u677F\u4E0A\u4EBA\u5DE5\u8FED\u4EE3>"\` \u6536\u5F55\u4E3A\u65B0\u7248\u672C\uFF1B\u4E0D\u5408\u610F/\u4E0D\u5FC5\u6536\u5F55\uFF0C\u56DE\u5E16\u8BF4\u660E\u540E\u6309 wontfix \u5904\u7406\u5373\u53EF\uFF08\u540C\u4E00\u7248\u4E0D\u4F1A\u518D\u6765\u4FE1\uFF09\u3002`
+            ].join("\n");
+            logLine = `[board-watch] ${a.id} \u2190 \u677F ${boardKey} \u6709\u65B0\u5185\u5BB9\uFF08mtime=${new Date(boardMtime).toISOString()}\uFF09\u2192 \u5DF2\u5199\u4FE1\u5524 owner`;
+          }
           await kernel.annotate({ artifactId: a.id, actor, body, kind: "comment" });
           written++;
-          log3?.(`[board-watch] ${a.id} \u2190 \u677F ${boardKey} \u6709\u65B0\u5185\u5BB9\uFF08mtime=${new Date(boardMtime).toISOString()}\uFF09\u2192 \u5DF2\u5199\u4FE1\u5524 owner`);
+          log3?.(logLine);
         }
       }
     };
@@ -192761,12 +193299,12 @@ function makeResumeRetryProxy(first, spawnFallback) {
     s2.onTelemetry?.((e) => fanTel(e));
   };
   wire(first);
-  const isSessionNotFound = (err) => {
+  const isSessionNotFound2 = (err) => {
     const chatExit = err instanceof Error ? err.chatExit : void 0;
     return chatExit?.reason === "session-not-found";
   };
   const done = first.done.catch(async (err) => {
-    if (sawOutput || !isSessionNotFound(err)) throw err;
+    if (sawOutput || !isSessionNotFound2(err)) throw err;
     const second = await spawnFallback();
     active = second;
     wire(second);
@@ -193440,6 +193978,16 @@ async function startServe(opts) {
         ...liveSchemaMap.get(artifact.type)?.ownerRole ? { assignedRole: liveSchemaMap.get(artifact.type).ownerRole } : {},
         dependsOn: artifact.inputs.map((edge) => edge.to)
       }));
+    },
+    // 业务交接的展示料源（见 CoordinatorNodeView.conclusion）：每个节点最近一版**已收口** Work 的
+    // conclusion。纯读、纯可选——读不到（无引擎 store / 工单不在库 / 任何异常）就返回空，
+    // 协调者视图照常工作。
+    resolveNodeConclusions: async (workOrderId, companyId) => {
+      const companyEngine = await getEngine(companyId ?? defaultCompanyId);
+      const store = companyEngine.kernel.getStore?.();
+      if (!store) return {};
+      const snap = await store.transaction((tx) => tx.loadWorkorder(workOrderId));
+      return snap ? nodeConclusionsFromSnapshot(snap) : {};
     }
   });
   console.log(`[serve] execution-continuity mode=${continuityMode}\uFF08record=\u5BF9\u7167\u7EC4\uFF0Cresume=\u6062\u590D\u5305\u5B9E\u9A8C\u7EC4\uFF09`);
@@ -193585,7 +194133,7 @@ async function startServe(opts) {
     const selector = typeof raw === "string" && raw ? raw : void 0;
     const me = await companies.currentUser({ actor }, headers);
     const ctx = await companies.service.resolveCurrentCompany(me.accountId, selector);
-    if (!ctx) return { kind: "not-found" };
+    if (!ctx) return { kind: "not-found", ...selector !== void 0 ? { selector } : {} };
     return ctx.isMember ? { kind: "ok", companyId: ctx.company.id } : { kind: "forbidden" };
   };
   const resolveActor = (token) => issuer.resolve(token) ?? (opts.allowSimpleTokens && token.startsWith("token:") ? token.slice("token:".length) : null);
@@ -193913,7 +194461,8 @@ async function startServe(opts) {
       const artifactId = `artifact:planner:${(0, import_node_crypto41.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
-        actorToken: issueSessionToken(planner.id, { artifactId, action: "plan-workorder", limits, binding }),
+        // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
+        actorToken: issueSessionToken(planner.id, { artifactId, action: "plan-workorder", limits, binding, companyId: defaultCompanyId }),
         artifactId,
         bundle: { files },
         ...actorCtx?.config?.prompt ? { systemPrompt: actorCtx.config.prompt } : {},
@@ -194926,7 +195475,7 @@ async function startServe(opts) {
         if (engStore) void rebuildDispatchMappings(engStore);
       }
       newKernel.setEngineIO({
-        async dispatchWork(workId) {
+        async dispatchWork(workId, opts2) {
           if (!newEngineProduce) return;
           if (dispatchedWorks.has(workId)) return;
           const kernel2 = newKernel;
@@ -194955,7 +195504,7 @@ async function startServe(opts) {
           }
           let result;
           try {
-            result = replyIssueId && newEngineReplyWork ? await newEngineReplyWork(rev.artifactId, rev.author, replyIssueId, ledgerId) : await newEngineProduce(rev.artifactId, rev.author, workId, ledgerId);
+            result = replyIssueId && newEngineReplyWork ? await newEngineReplyWork(rev.artifactId, rev.author, replyIssueId, ledgerId) : await newEngineProduce(rev.artifactId, rev.author, workId, ledgerId, opts2?.resumeEligible);
           } catch (err) {
             dispatchLedger.close(ledgerId, { outcome: "failed", reason: `dispatch error: ${err instanceof Error ? err.message : String(err)}` }).catch(ledgerWarn("close(error)"));
             console.log(`[new-engine] dispatchWork ${workId} \u6D3E\u53D1\u5F02\u5E38\uFF1A${String(err)} \u2192 \u7F6E work failed`);
@@ -195375,14 +195924,16 @@ async function startServe(opts) {
       });
       const slot = { dispatcher: d, logged: 0, ticking: false };
       dispatchers.set(companyId, slot);
-      newEngineProduce = async (artifactId, actorId, workId, dispatchId) => {
+      newEngineProduce = async (artifactId, actorId, workId, dispatchId, resumeEligible) => {
         const result = await d.requestProduce({
           artifactId,
           actor: actorId,
           bypassScheduling: true,
           engineWorkId: workId,
           engineCompanyId: companyId,
-          ...dispatchId !== void 0 ? { dispatchId } : {}
+          ...dispatchId !== void 0 ? { dispatchId } : {},
+          // 工单 e4a43a42：返工（已收口节点被重激活）→ resumeEligible=false → 派发层起全新会话。
+          ...resumeEligible !== void 0 ? { resumeEligible } : {}
         });
         return { kind: result.kind, dispatchId: result.kind === "dispatched" ? result.dispatchId : void 0 };
       };
@@ -195876,6 +196427,12 @@ ${st.detail}
           artifactId: ctx?.artifactId ?? "artifact:coordinator",
           action: ctx?.action ?? "coordinate",
           limits: ctx?.limits ?? { wallClockMs: wallClockForKind("coordinate") },
+          // CO-101 门禁要这个 claim 才认得出「这次请求属于哪家公司」。漏签的后果不是报错这么简单：
+          // 管理者的 roles / actors / workorders / inbox / session-log 会**全部** 404，而 status / ls /
+          // graph / content 照常（热路径回退默认公司），于是它只瞎一半——够它误诊成「平台名册服务挂了」，
+          // 再上报给人；未关的上报又会关掉自动重唤，把本可自愈的节点永久悬挂。2026-08-14 至少 3 张单
+          // 栽在这上面。协调者与 apply 同用默认公司 kernel（见下方 structuralBaselines 注释），故取默认公司。
+          companyId: defaultCompanyId,
           ...ctx?.binding !== void 0 ? { binding: ctx.binding } : {}
         });
         const ws = ctx?.artifactId ? kernel.model.artifacts.get(ctx.artifactId)?.workspace : void 0;
@@ -196846,6 +197403,33 @@ function reapClaudeProjects(workdir, runtimeKind) {
   } catch {
   }
 }
+function measureClaudeProjects(workdir, runtimeKind) {
+  if (runtimeKind !== "claude" && runtimeKind !== "claude-code") return 0;
+  const dir = import_node_path24.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
+  return dirSizeBytes2(dir);
+}
+function dirSizeBytes2(dir) {
+  let total = 0;
+  let entries;
+  try {
+    entries = import_node_fs20.default.readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return 0;
+  }
+  for (const e of entries) {
+    const p2 = import_node_path24.default.join(dir, e.name);
+    if (e.isSymbolicLink()) continue;
+    if (e.isDirectory()) {
+      total += dirSizeBytes2(p2);
+      continue;
+    }
+    try {
+      total += import_node_fs20.default.statSync(p2).size;
+    } catch {
+    }
+  }
+  return total;
+}
 
 // ../cli/src/node.ts
 init_src6();
@@ -196928,6 +197512,8 @@ async function startNode(opts) {
     ...process.env["OASIS_GC_INTERVAL_MS"] ? { intervalMs: Number(process.env["OASIS_GC_INTERVAL_MS"]) } : {},
     queryArtifactStates: (ids2) => client.queryArtifactStates(ids2),
     reapRuntimeState: reapClaudeProjects,
+    // 工单 e4a43a42：把连带的 claude 会话记录占用一并量进保留预算（比工作目录还大的那一坨）。
+    measureRuntimeState: measureClaudeProjects,
     log: (m2) => console.log(`[oasis node] ${m2}`)
   });
   if (opts.gcEnabled !== false) console.log(`[oasis node] \u5DE5\u4F5C\u533A\u56DE\u6536\u5668\uFF1A\u5DF2\u542F\u7528\uFF08\u6839 ${workRoot}\uFF09`);
@@ -201013,7 +201599,8 @@ ${res.warning}`);
           r.id === v2.artifact.currentRev ? "\u2190 current head" : "",
           r.id === v2.concludedHead ? "\u2190 \u5DF2\u4EA4\u4ED8" : ""
         ].filter(Boolean).join(" ");
-        println(`  ${r.id}  ${r.state}  by ${r.author}  "${r.reason}"${marks ? `  ${marks}` : ""}`);
+        const stateLabel = r.state === "superseded" && r.contentKind === "empty" ? "\u672A\u4EA7\u51FA" : r.state;
+        println(`  ${r.id}  ${stateLabel}  by ${r.author}  "${r.reason}"${marks ? `  ${marks}` : ""}`);
       }
       const NOTE_ABSTRACT = 150;
       const voteRows = [];
@@ -201302,7 +201889,7 @@ function syncRuntimeAssets(candidateRoots, binDir) {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.1.102" : "dev";
+var PKG_VERSION = true ? "0.1.104" : "dev";
 var OASIS_DIR = path26.join(os10.homedir(), ".oasis");
 var CONFIG_FILE = path26.join(OASIS_DIR, "node-config.json");
 var PID_FILE = path26.join(OASIS_DIR, "node.pid");