oasis_test 0.1.106 → 0.1.108

package/dist/index.js

@@ -993,20 +993,27 @@ function pinnedReviewerOf(model, artifactId, role) {
   }
   return best?.actor ?? null;
 }
+function latestAttempt(attempts) {
+  let best = null;
+  for (const a of attempts) {
+    if (best === null || a.at > best.at || a.at === best.at && a.seq >= best.seq) best = a;
+  }
+  return best;
+}
 function concludeMilestones(model, id) {
   return (model.concludeAttempts.get(id) ?? []).filter(
     (a) => attemptStatus(model, a) === "satisfied"
   );
 }
 function pendingConcludeAttempt(model, id) {
-  const last = model.concludeAttempts.get(id)?.at(-1);
+  const last = latestAttempt(model.concludeAttempts.get(id) ?? []);
   return last && attemptStatus(model, last) === "pending" ? last : null;
 }
 function isConcluded(model, id) {
   return concludeMilestones(model, id).length > 0;
 }
 function concludedHead(model, id) {
-  return concludeMilestones(model, id).at(-1)?.head ?? null;
+  return latestAttempt(concludeMilestones(model, id))?.head ?? null;
 }
 function revisionsOf(model, id) {
   return [...model.revisions.values()].filter((r) => r.artifactId === id);
@@ -3429,12 +3436,19 @@ async function assembleContext(args) {
   if (args.resolveUpstreamHandoff && artifact.workspace) {
     for (const edge of artifact.inputs) {
       if (edge.pinned === null) continue;
-      const content = await args.resolveUpstreamHandoff({
-        workOrderId: artifact.workspace,
-        downstreamNodeId: artifact.id,
-        upstreamNodeId: edge.to,
-        pinnedWorkId: edge.pinned
-      });
+      let content = null;
+      try {
+        content = await args.resolveUpstreamHandoff({
+          workOrderId: artifact.workspace,
+          downstreamNodeId: artifact.id,
+          upstreamNodeId: edge.to,
+          pinnedWorkId: edge.pinned
+        });
+      } catch (err) {
+        console.warn(
+          `[assemble] ${artifact.id} \u4E0A\u6E38 ${edge.to} \u4EA4\u63A5\u89E3\u6790\u5931\u8D25\uFF0C\u672C\u8F6E\u4E0D\u6CE8\u5165 _HANDOFF.md\uFF1A` + (err instanceof Error ? err.message : String(err))
+        );
+      }
       if (content) {
         const dir = `inputs/${slug2(edge.to)}@${edge.pinned.slice(9, 17)}`;
         upstreamHandoffFiles.set(`${dir}/${UPSTREAM_HANDOFF_BASENAME}`, content);
@@ -4061,6 +4075,25 @@ ${m2.spec.split("\n").map((l) => `  > ${l}`).join("\n")}`);
         });
       })()
     ),
+    // ★ 2026-08-18：交稿时把「系统看不出来的四件事」一并带上。
+    //
+    // 为什么必须写在**任务书**里：adapter 只把 TASK.md 当提示词喂给模型，其余 bundle 文件（包括
+    // execution/CONTINUITY.md）只是躺在工作目录里、没人读。`--reason` 之所以交付过的节点 100% 都有，
+    // 正因为它既进了任务书又是必填；这四项此前只活在 `oasis help propose` 里——next 上节点全部更新到
+    // 认得它们之后的 10 小时里，两次真实交付**一次都没带**（实测 0/2）。
+    //
+    // 给 `none` 出口是刻意的：逼着写自由文本只会得到「暂无」这种假保证，而「确认没有」与「没人写」
+    // 对下游是两条完全不同的信息（渲染侧据此分流，见 renderDeliveredWorkHandoff）。
+    ...args.action === "review" ? [] : [
+      ``,
+      `### \u4EA4\u7A3F\u65F6\u4E00\u5E76\u5E26\u4E0A\uFF1A\u4E0B\u6E38\u8981\u7528\u7684\u56DB\u4EF6\u4E8B`,
+      `\u8FD9\u56DB\u9879\u4F1A\u539F\u6837\u51FA\u73B0\u5728\u4E0B\u6E38\u8282\u70B9\u7684 \`inputs/<\u672C\u8282\u70B9>@<\u7248\u672C>/${UPSTREAM_HANDOFF_BASENAME}\` \u91CC\u3002\u5206\u53F7\u5206\u9694\uFF1B**\u786E\u5B9E\u6CA1\u6709\u5C31\u5199 \`none\`\uFF0C\u522B\u7F16\u300C\u6682\u65E0\u300D**\uFF1A`,
+      `- \`--gaps\` **\u4F60\u6CA1\u80FD\u6838\u9A8C\u7684\u90E8\u5206** \u2014\u2014 \u6700\u8981\u7D27\u7684\u4E00\u9879\u3002\u4E0B\u6E38\u9ED8\u8BA4\u300C\u4E0A\u6E38\u4EA4\u4E86\u5C31\u662F\u9A8C\u8FC7\u4E86\u300D\uFF0C\u4F60\u4E0D\u5199\uFF0C\u6CA1\u9A8C\u7684\u90A3\u5757\u5C31\u76F4\u63A5\u8FDB\u4E0B\u4E00\u73AF\u3002\u4F8B\uFF1A\`--gaps "\u6CA1\u505A\u538B\u6D4B;\u53EA\u5728 dev \u9A8C\u8FC7"\``,
+      `- \`--unresolved\` **\u4F60\u77E5\u9053\u4F46\u6CA1\u89E3\u51B3\u7684** \u2014\u2014 \u514D\u5F97\u4E0B\u6E38\u91CD\u590D\u8E29\u4F60\u5DF2\u7ECF\u8E29\u8FC7\u7684\u5751\u3002\u4F8B\uFF1A\`--unresolved "\u7EBF\u4E0A\u914D\u989D\u6CA1\u786E\u8BA4"\``,
+      `- \`--risks\` **\u4EA4\u4ED8\u7269\u672C\u8EAB\u6CA1\u9519\u3001\u4F46\u7528\u7684\u65F6\u5019\u8981\u5F53\u5FC3\u7684** \u2014\u2014 \u4F8B\uFF1A\`--risks "\u5E76\u53D1\u8C03\u7528\u53EF\u80FD\u89E6\u53D1\u9650\u6D41"\``,
+      `- \`--next\` **\u5EFA\u8BAE\u4E0B\u6E38\u5148\u505A\u54EA\u4E00\u6B65**\uFF08\u53EF\u9009\uFF09\u2014\u2014 \u4F8B\uFF1A\`--next "\u5148\u8DD1\u4E00\u6B21\u5C0F\u6D41\u91CF\u7070\u5EA6"\``,
+      `\u5199 \`none\` = \u300C\u6211\u786E\u8BA4\u6CA1\u6709\u300D\uFF1B\u4E0D\u5199 = \u300C\u6CA1\u4EBA\u5199\u8FC7\u300D\u3002**\u8FD9\u4E24\u4EF6\u4E8B\u5BF9\u4E0B\u6E38\u5B8C\u5168\u4E0D\u540C\uFF0C\u522B\u6DF7\u3002**`
+    ],
     // 兜底（§10）：上次失败了 → 明确告诉它发生了什么 + 怎么破（首选 add-revision 拆出去）
     ...args.lastFailure ? args.lastFailure.resumed ? [
       // 续跑分支：上文还在它眼前，别再说"没留下任何产出"（自相矛盾），改成"接着干 + 先核现场"。
@@ -6024,11 +6057,18 @@ var init_dispatcher = __esm({
           bundle.files["execution/CONTINUITY.md"] = this.opts.executionContinuityInstructions;
         }
         if (this.opts.resolveExecutionResumePack && (spec.action === "produce" || spec.action === "integrate") && continuityArtifact) {
-          const resumePack = await this.opts.resolveExecutionResumePack(
-            spec.artifactId,
-            continuityArtifact.workspace,
-            { jobKey, ...spec.part !== void 0 ? { part: spec.part } : {} }
-          );
+          let resumePack = null;
+          try {
+            resumePack = await this.opts.resolveExecutionResumePack(
+              spec.artifactId,
+              continuityArtifact.workspace,
+              { jobKey, ...spec.part !== void 0 ? { part: spec.part } : {} }
+            );
+          } catch (err) {
+            console.warn(
+              `[dispatch] ${spec.artifactId} \u6062\u590D\u5305\u89E3\u6790\u5931\u8D25\uFF0C\u672C\u8F6E\u6309\u9996\u6B21\u6267\u884C\u6D3E\u53D1\uFF08\u4E0D\u6CE8\u5165 execution/RESUME.md\uFF09\uFF1A` + (err instanceof Error ? err.message : String(err))
+            );
+          }
           if (resumePack) {
             bundle.files["execution/RESUME.md"] = resumePack;
             bundle.files["TASK.md"] += [
@@ -6700,6 +6740,15 @@ var init_session_limits = __esm({
 });
 
 // ../engine/src/model.ts
+function isMainWork(w2) {
+  return w2.lane === "main";
+}
+function isReplyWork(w2) {
+  return w2.lane === "reply";
+}
+function replyIssueIdOf(w2) {
+  return w2.lane === "reply" ? w2.replyToIssueId ?? null : null;
+}
 var BUSINESS_HANDOFF_POLICY_FIELD, BUSINESS_HANDOFF_POLICY_EXEMPT, DEFAULT_CONFIG, deriveWorkId, deriveReplyWorkId, deriveReviewId, deriveReplyId;
 var init_model = __esm({
   "../engine/src/model.ts"() {
@@ -6798,7 +6847,7 @@ function isReviewOpen(r) {
   return !r.cancelledAt && !r.endedAt && !r.verdict;
 }
 function countFailedForNode(works) {
-  const sorted = [...works].filter((w2) => !w2.replyToIssueId).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
+  const sorted = works.filter(isMainWork).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
   let count2 = 0;
   for (const w2 of sorted) {
     if (w2.retryAt) break;
@@ -6814,7 +6863,7 @@ function countFailedForNode(works) {
   return count2;
 }
 function countFailedForReplyRound(works) {
-  const sorted = works.filter((w2) => w2.replyToIssueId).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
+  const sorted = works.filter(isReplyWork).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
   let count2 = 0;
   for (const w2 of sorted) {
     if (w2.retryAt) break;
@@ -6858,6 +6907,7 @@ function findUnresolvedCRFromOthers(nodeId, issues) {
 var init_views2 = __esm({
   "../engine/src/views.ts"() {
     "use strict";
+    init_model();
   }
 });
 
@@ -6866,6 +6916,7 @@ var WorkorderState;
 var init_state = __esm({
   "../engine/src/state.ts"() {
     "use strict";
+    init_model();
     init_views2();
     WorkorderState = class {
       workorder;
@@ -6925,12 +6976,25 @@ var init_state = __esm({
       allWorks() {
         return [...this.workMap.values()];
       }
-      worksOf(nodeId) {
+      /**
+       * ★ 该节点的**全部** work——**主链与回信轮都在里面**（刺眼命名：调它 = 显式声明「我不按 lane 过滤」）。
+       * 只有确实需要「所有运行」的入口才用它（work 编号 = 现有数 +1、I1 占位判定、连败链计数——那些函数自己再按
+       * lane 分）。要主链就 {@link mainWorksOf}、要回信就 {@link replyWorksOf}，别在调用点手写 `!replyToIssueId`。
+       */
+      allWorksIncludingReplies(nodeId) {
         return this.allWorks().filter((w2) => w2.nodeId === nodeId);
       }
-      /** 该节点有没有还占着名额的运行（I1 判据的一半，另一半见 hasQueuedWorkFor）。 */
+      /** 该节点的**主链** work（派发/验收/发版本号那条道）。判据 = lane（{@link isMainWork}）。 */
+      mainWorksOf(nodeId) {
+        return this.allWorksIncludingReplies(nodeId).filter(isMainWork);
+      }
+      /** 该节点的**回信轮** work（对 comment 的答话那条道）。判据 = lane（{@link isReplyWork}）。 */
+      replyWorksOf(nodeId) {
+        return this.allWorksIncludingReplies(nodeId).filter(isReplyWork);
+      }
+      /** 该节点有没有还占着名额的运行（I1 判据的一半，另一半见 hasQueuedWorkFor）。主链或回信都占名额。 */
       openWorkOf(nodeId) {
-        return this.worksOf(nodeId).find(isWorkOpen);
+        return this.allWorksIncludingReplies(nodeId).find(isWorkOpen);
       }
       artifactsOf(workId) {
         return this.artifactList.filter((a) => a.workId === workId);
@@ -6972,7 +7036,7 @@ var init_state = __esm({
       }
       /** 本事务是否已对该节点的某个 work 排了 work.accept——activate 据此避让。 */
       hasAcceptedWorkFor(nodeId) {
-        const myWorks = new Set(this.worksOf(nodeId).map((w2) => w2.id));
+        const myWorks = new Set(this.allWorksIncludingReplies(nodeId).map((w2) => w2.id));
         return this.emittedList.some(
           (e) => e.kind === "work.accept" && myWorks.has(e.workId)
         );
@@ -7135,7 +7199,7 @@ function scan(state, ctx) {
       continue;
     }
     if (wstate === "failed") {
-      const cf = countFailedForNode(state.worksOf(node.id));
+      const cf = countFailedForNode(state.allWorksIncludingReplies(node.id));
       const overLimit = cf > (ctx.config?.maxRetries ?? DEFAULT_CONFIG.maxRetries);
       if (overLimit && classify(node.assigneeActorId) === "agent") {
         events.push({
@@ -7194,7 +7258,7 @@ function tryToRun(state, nodeId, ctx, events) {
     if (isBusinessDependencyEdge(state, e) && !businessHandoffBarrierSatisfied(state, upstream.id, upstream.latestAcceptId)) return;
   }
   if (state.hasQueuedWorkFor(nodeId)) return;
-  const workId = deriveWorkId(nodeId, state.worksOf(nodeId).length + 1);
+  const workId = deriveWorkId(nodeId, state.allWorksIncludingReplies(nodeId).length + 1);
   events.push({
     kind: "work.create",
     workorderId: state.workorder.id,
@@ -7318,7 +7382,7 @@ function processCommentReplies(state, nodeId, ctx, events) {
   const comments = state.allIssues().filter((i) => i.kind === "comment" && i.resolvedAt === null && i.aboutNodeId === nodeId).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
   if (comments.length === 0) return;
   if (state.hasQueuedWorkFor(nodeId)) return;
-  const replyWorks = state.worksOf(nodeId).filter((w2) => w2.replyToIssueId).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
+  const replyWorks = state.replyWorksOf(nodeId).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
   const inflight = replyWorks.find((w2) => !w2.endedAt && !w2.deadAt);
   if (inflight) {
     const start = inflight.startedAt ?? inflight.createdAt;
@@ -7483,16 +7547,24 @@ function handoffBlock(state, nodeId, workId) {
       overridable: false
     };
   }
-  const delivered = work?.businessHandoffStatus === "delivered" || work?.status === "success" && work.agentHandoffAttemptId === null && work.businessHandoffStatus === null;
-  if (delivered) return null;
-  return {
-    code: "handoff-undeclared",
-    detail: `\u4E1A\u52A1\u4EA4\u63A5\u672A\u5B8C\u6210\uFF1Awork.status=${work?.status ?? "?"}\u3001handoff=${work?.businessHandoffStatus ?? "\u672A\u58F0\u660E"}${work?.agentHandoffAttemptId ? `\uFF08attempt ${work.agentHandoffAttemptId}\uFF09` : ""}\u2014\u2014\u7B49\u6267\u884C\u4EBA\u8865\u4EA4\u63A5\uFF0C\u6216\u7531\u4EBA force-conclude \u7B7E\u5B57\u7A7F\u900F`,
-    overridable: true
-  };
+  if (work?.businessHandoffStatus === "not_delivered") {
+    return {
+      code: "handoff-undeclared",
+      detail: `\u6267\u884C\u4EBA\u660E\u786E\u58F0\u660E\u672C\u8F6E\u672A\u4EA4\u4ED8\uFF08not_delivered${work.agentHandoffAttemptId ? `\uFF0Cattempt ${work.agentHandoffAttemptId}` : ""}\uFF09\u2014\u2014\u7B49\u8FD9\u4E00\u7248\u91CD\u8DD1\u4EA4\u4ED8\uFF0C\u6216\u7531\u4EBA force-conclude \u7B7E\u5B57\u7A7F\u900F`,
+      overridable: true
+    };
+  }
+  if (work?.status !== "success" && work?.businessHandoffStatus !== "delivered") {
+    return {
+      code: "work-not-success",
+      detail: `\u8FD9\u4E00\u7248\u4E0D\u662F\u6709\u6548\u4EA7\u51FA\uFF08work.status=${work?.status ?? "?"}\uFF09\u2014\u2014\u6539\u5BF9\u6700\u8FD1\u4E00\u7248\u6210\u529F\u7684\u4EA7\u51FA\u6536\u53E3\uFF0C\u6216\u7531\u4EBA force-conclude \u7B7E\u5B57\u7A7F\u900F`,
+      overridable: true
+    };
+  }
+  return null;
 }
 function requiresBusinessHandoff(state, nodeId, work) {
-  if (work?.replyToIssueId) return false;
+  if (work && isReplyWork(work)) return false;
   if (!state.edgesFrom(nodeId).some((edge) => isBusinessDependencyEdge(state, edge))) return false;
   if (typeof work?.assigneeActorId === "string" && work.assigneeActorId.startsWith("actor:human:")) return false;
   return true;
@@ -7506,12 +7578,12 @@ function activate(state, nodeId, _ctx) {
   if (!node.assigneeActorId) return "no_assignee";
   if (state.openWorkOf(nodeId)) return "already_running";
   if (state.hasQueuedWorkFor(nodeId)) return "already_running";
-  if (state.worksOf(nodeId).some((w2) => w2.acceptanceState === "draft")) return "in_review";
+  if (state.allWorksIncludingReplies(nodeId).some((w2) => w2.acceptanceState === "draft")) return "in_review";
   const unresolvedSelf = findUnresolvedSelfIssue(nodeId, state.allIssues());
   if (unresolvedSelf) return unresolvedSelf.kind === "escalation" ? "failed" : "waiting_answer";
   const inbound = state.edgesInto(nodeId);
   if (inbound.some((e) => e.required && e.kind === "data" && !e.pinnedWorkId && !isEdgeInputUnobtainable(state, e))) return "upstream_not_ready";
-  if (inbound.some((e) => state.worksOf(e.fromNodeId).some(isWorkOpen))) return "upstream_unstable";
+  if (inbound.some((e) => state.allWorksIncludingReplies(e.fromNodeId).some(isWorkOpen))) return "upstream_unstable";
   return "dispatched";
 }
 function assessConvergence(state, ctx) {
@@ -7528,6 +7600,7 @@ var init_activate = __esm({
     "use strict";
     init_src2();
     init_model();
+    init_model();
     init_views2();
   }
 });
@@ -7626,7 +7699,10 @@ CREATE TABLE IF NOT EXISTS ${schema}.works (
   outcome_detail    jsonb,
   session_ref       text,
   continues_work_id text,
-  -- \u56DE\u4FE1 work\uFF08\u8BBE\u8BA1-\u6700\u7EC8 \xA7\u56DE\u4FE1\u8F6E\uFF09\uFF1A\u975E\u7A7A = \u5BF9\u8BE5 comment issue \u7684\u56DE\u4FE1\u8F6E\uFF0C\u4E0D\u8FDB\u8282\u70B9\u4E3B\u94FE
+  -- \u2605 work \u5C5E\u4E8E\u54EA\u6761\u9053\uFF08\u6B63\u5411\u3001\u663E\u5F0F\u4E8B\u5B9E\uFF09\uFF1A'main'=\u8282\u70B9\u4E3B\u94FE\u4EA7\u51FA / 'reply'=\u56DE\u4FE1\u8F6E\u3002\u53D6\u4EE3\u65E7\u7684\u5426\u5B9A\u5F0F\u5224\u636E
+  --   "reply_to_issue_id IS NULL"\u3002\u5B58\u91CF\u884C\u6309 reply_to_issue_id \u56DE\u586B\uFF08\u89C1\u4E0B\u65B9\u8FC1\u79FB\u6BB5\uFF09\u3002
+  lane              text CHECK (lane IN ('main','reply')),
+  -- \u56DE\u4FE1\u8F6E\u6307\u5411\u54EA\u6761 comment issue\uFF08**\u7EAF\u6570\u636E**\uFF1A\u975E\u7A7A\u4EC5\u8868\u793A\u300C\u7B54\u54EA\u6761\u4FE1\u300D\uFF0C\u662F\u4E0D\u662F\u56DE\u4FE1\u8F6E\u7531 lane \u5224\uFF09
   reply_to_issue_id text,
   output_version_no integer,
   conclusion        text,
@@ -7807,8 +7883,15 @@ ALTER TABLE ${schema}.works DROP CONSTRAINT IF EXISTS works_business_handoff_sta
 ALTER TABLE ${schema}.works ADD CONSTRAINT works_business_handoff_status_check
   CHECK (business_handoff_status IS NULL OR business_handoff_status IN ('delivered','not_delivered'));
 ALTER TABLE ${schema}.reviews ADD COLUMN IF NOT EXISTS status text;
--- \u56DE\u4FE1 work\uFF08\u8BBE\u8BA1-\u6700\u7EC8 \xA7\u56DE\u4FE1\u8F6E\uFF09\uFF1A\u975E\u7A7A = \u56DE\u4FE1\u8F6E\uFF08\u951A\u6700\u65E9\u672A\u89E3 comment\uFF09\uFF0C\u4E0D\u8FDB\u8282\u70B9\u4E3B\u94FE
+-- \u56DE\u4FE1\u8F6E\u6307\u5411\u54EA\u6761 comment issue\uFF08\u7EAF\u6570\u636E\uFF09
 ALTER TABLE ${schema}.works   ADD COLUMN IF NOT EXISTS reply_to_issue_id text;
+-- \u2605 work lane\uFF08\u6B63\u5411\u5224\u636E\uFF0C\u53D6\u4EE3 "reply_to_issue_id IS NULL"\uFF09\uFF1A\u5B58\u91CF\u884C\u6309\u6709\u65E0 reply_to_issue_id \u56DE\u586B\u3002
+--   \u53EA\u586B\u5F53\u524D\u4E3A NULL \u7684\u884C \u2192 \u5E42\u7B49\uFF08\u91CD\u542F\u4E0D\u8986\u76D6 handler \u5DF2\u5199\u7684\u503C\uFF09\u3002\u8BFB\u9762\u53E6\u6709\u515C\u5E95\uFF08store-postgres \u8BFB\u6620\u5C04\uFF09\u3002
+ALTER TABLE ${schema}.works   ADD COLUMN IF NOT EXISTS lane text;
+UPDATE ${schema}.works SET lane = CASE WHEN reply_to_issue_id IS NULL THEN 'main' ELSE 'reply' END
+  WHERE lane IS NULL;
+ALTER TABLE ${schema}.works DROP CONSTRAINT IF EXISTS works_lane_check;
+ALTER TABLE ${schema}.works ADD CONSTRAINT works_lane_check CHECK (lane IS NULL OR lane IN ('main','reply'));
 -- \u2605 issue \u5B58\u6D3B\u5224\u636E\u552F\u4E00\u5316\uFF08ADR 0144\uFF09\uFF1Aresolution \u627F\u63A5\u65E7 state \u7684 closed\uFF08=wontfix\uFF09\uFF1B
 --   \u968F\u540E state / blocking \u5217\u5220\u9664\uFF08\u4F9D\u8D56 state \u7684 CHECK \u4E0E\u4E09\u4E2A\u65E7\u90E8\u5206\u7D22\u5F15\u968F\u5217\u81EA\u52A8\u5220\u9664\uFF09\u3002
 --   \u56DE\u586B\u5FC5\u987B\u5728\u5220\u5217\u524D\u3001\u4E14\u53EA\u5728 state \u5217\u8FD8\u5B58\u5728\u65F6\u6267\u884C\uFF08DO \u5757\u5224 information_schema\uFF0C\u91CD\u590D\u542F\u52A8\u5E42\u7B49\uFF09\u3002
@@ -7937,14 +8020,13 @@ FROM ${schema}.workflow_nodes n
 LEFT JOIN ${schema}.works lw ON lw.id = n.latest_work_id
 LEFT JOIN ${schema}.works ls ON ls.id = n.latest_success_work_id;
 
+-- workorder_view \u5DF2\u4E0B\u7EBF\uFF08\u5DE5\u5355 1aa1f35b\uFF09\uFF1A\u5B83\u53EA\u989D\u5916\u7ED9\u51FA total_count / done_count \u4E24\u4E2A\u8FDB\u5EA6\u6570\uFF0C\u5168\u4ED3\u96F6\u6D88\u8D39\u65B9\uFF0C
+-- \u4E14\u53E3\u5F84\u4E0E\u540E\u7AEF\u771F\u6E90\uFF08server summaryOfWorkspace \u7684 progressExcludingBrief\uFF09\u4E0D\u540C\u2014\u2014total \u53EA\u6392 cancelled\u3001done \u7528
+-- latest_accept_id IS NOT NULL\uFF08\u66FE\u88AB\u9A8C\u6536\u8FC7\u81F3\u5C11\u4E00\u6B21\uFF09\uFF0C\u800C\u771F\u6E90\u6392\u9664 brief + \u5DF2\u4F5C\u5E9F\u3001\u6309\u300C\u9A8C\u6536\u843D\u5728\u5F53\u524D\u7248\u300D\u7B97\u3002
+-- \u4FDD\u7559\u4E00\u4EFD\u89C6\u56FE\u65E2\u6CA1\u4EBA\u8BFB\u3001\u53E3\u5F84\u53C8\u5BF9\u4E0D\u4E0A\uFF0C\u53EA\u4F1A\u662F\u7B2C\u4E09\u5904\u5BF9\u4E0D\u4E0A\u7684\u8FDB\u5EA6\u6570\u3002\u8FD9\u91CC\u4E0D\u518D CREATE\uFF1B\u4E0B\u9762\u7684 DROP \u8BA9\u5B58\u91CF\u5E93
+-- \u5728\u4E0B\u6B21 migrate \u65F6\u628A\u65E7\u89C6\u56FE\u5220\u6389\uFF08ENGINE_DDL \u6BB5\u4EA6\u6709\u4E00\u5904 DROP\uFF0C\u4E8C\u8005\u90FD\u7559\u4EE5\u9632\u91CD\u6392\uFF09\u3002\u5DE5\u5355\u8FDB\u5EA6\u7EDF\u4E00\u8D70\u540E\u7AEF\u8BFB\u6A21\u578B\uFF0C
+-- \u9700\u8981 SQL \u4FA7\u7EDF\u8BA1\u65F6\u53E6\u7ACB\u4E0E\u771F\u6E90\u540C\u53E3\u5F84\u7684\u89C6\u56FE\u5E76\u6CE8\u660E\u670D\u52A1\u5BF9\u8C61\uFF0C\u522B\u590D\u6D3B\u8FD9\u4E24\u4E2A\u6570\u3002
 DROP VIEW IF EXISTS ${schema}.workorder_view;
-CREATE VIEW ${schema}.workorder_view AS
-SELECT o.*,
-  (SELECT count(*) FROM ${schema}.workflow_nodes n
-    WHERE n.workorder_id = o.id AND n.cancelled_at IS NULL) AS total_count,
-  (SELECT count(*) FROM ${schema}.workflow_nodes n
-    WHERE n.workorder_id = o.id AND n.cancelled_at IS NULL AND n.latest_accept_id IS NOT NULL) AS done_count
-FROM ${schema}.workorders o;
 `;
 }
 var init_schema2 = __esm({
@@ -13158,7 +13240,10 @@ var init_store_postgres = __esm({
         JOIN ${this.s}.workflow_nodes n ON n.id = r.node_id WHERE n.workorder_id = $1`,
           [id]
         );
-        const works = await this.c.query(`SELECT * FROM ${this.s}.works WHERE workorder_id = $1`, [id]);
+        const works = await this.c.query(
+          `SELECT * FROM ${this.s}.works WHERE workorder_id = $1 ORDER BY created_at ASC, id ASC`,
+          [id]
+        );
         const arts = await this.c.query(
           `SELECT a.* FROM ${this.s}.work_artifacts a JOIN ${this.s}.works w ON w.id = a.work_id WHERE w.workorder_id = $1`,
           [id]
@@ -13259,6 +13344,9 @@ var init_store_postgres = __esm({
             outcomeDetail: w2.outcome_detail,
             sessionRef: w2.session_ref,
             continuesWorkId: w2.continues_work_id,
+            // ★ lane 兜底（存量行迁移前 / 迁移与回填之间的竞态窗）：无值时按 reply_to_issue_id 派生，
+            //   保证 TS 侧 `Work.lane` 恒非空。reply_to_issue_id 在读写映射层可直接读（护栏白名单）。
+            lane: w2.lane ?? (w2.reply_to_issue_id == null ? "main" : "reply"),
             replyToIssueId: w2.reply_to_issue_id ?? null,
             outputVersionNo: w2.output_version_no,
             conclusion: w2.conclusion,
@@ -13470,8 +13558,8 @@ var init_store_postgres = __esm({
              (id,workorder_id,node_id,assignee_actor_id,created_at,started_at,ended_at,dead_at,cancelled_at,retry_at,status,outcome,
               outcome_detail,session_ref,continues_work_id,reply_to_issue_id,output_version_no,
               node_version,conclusion,agent_handoff_attempt_id,business_handoff_status,business_handoff_recorded_at,
-              acceptance_state,accepted_at,accepted_by,rejected_reason,override_by,override_reason)
-             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25,$26,$27,$28)
+              acceptance_state,accepted_at,accepted_by,rejected_reason,override_by,override_reason,lane)
+             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25,$26,$27,$28,$29)
              ON CONFLICT (id) DO NOTHING`,
                 [
                   w2.id,
@@ -13501,7 +13589,8 @@ var init_store_postgres = __esm({
                   w2.acceptedBy,
                   w2.rejectedReason,
                   w2.overrideBy,
-                  w2.overrideReason
+                  w2.overrideReason,
+                  w2.lane
                 ]
               );
               break;
@@ -13935,7 +14024,7 @@ function markNodeForRetry(state, nodeId, at) {
     (i) => i.kind === "comment" && i.resolvedAt === null && i.aboutNodeId === nodeId
   );
   if (hasUnresolvedComment) {
-    const replyWorks = state.worksOf(nodeId).filter((w2) => w2.replyToIssueId).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
+    const replyWorks = state.replyWorksOf(nodeId).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
     const latest = replyWorks[replyWorks.length - 1];
     if (latest && latest.deadAt && workState(latest, hasOutput(latest, 0)) === "dead") {
       state.updateWork(latest.id, { retryAt: at, status: "retry" });
@@ -14002,6 +14091,11 @@ var init_plan = __esm({
         if (!node || node.cancelledAt) return;
         killLatestWork(state, e.nodeId, ctx.at);
         killNodeReviews(state, e.nodeId, ctx.at);
+        for (const issue2 of state.allIssues()) {
+          if (issue2.resolvedAt !== null) continue;
+          if (issue2.aboutNodeId !== e.nodeId && issue2.raisedByNodeId !== e.nodeId) continue;
+          state.updateIssue(issue2.id, { resolvedAt: ctx.at, resolution: "wontfix" });
+        }
         state.updateNode(e.nodeId, { cancelledAt: ctx.at, updatedAt: ctx.at });
         for (const edge of state.edgesFrom(e.nodeId)) {
           const dn = state.node(edge.toNodeId);
@@ -14236,7 +14330,7 @@ var init_workorder = __esm({
 
 // ../engine/src/handlers/work.ts
 function latestSuccessOf(state, nodeId) {
-  const successes = state.worksOf(nodeId).filter((w2) => !w2.replyToIssueId && w2.status === "success").sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
+  const successes = state.mainWorksOf(nodeId).filter((w2) => w2.status === "success").sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
   return successes.length > 0 ? successes[successes.length - 1].id : null;
 }
 var workCreate, workKill, workResponse, workHandoffRecorded, workStart, workSubmitOutput, workTimeout;
@@ -14245,6 +14339,7 @@ var init_work = __esm({
     "use strict";
     init_views2();
     init_kill();
+    init_model();
     workCreate = {
       name: "work/create",
       kind: "work.create",
@@ -14253,7 +14348,7 @@ var init_work = __esm({
         const node = state.node(e.nodeId);
         if (!node) return;
         if (e.replyToIssueId) {
-          if (state.worksOf(e.nodeId).some((w2) => !w2.endedAt && !w2.deadAt)) return;
+          if (state.allWorksIncludingReplies(e.nodeId).some((w2) => !w2.endedAt && !w2.deadAt)) return;
           state.insertWork({
             id: e.workId,
             workorderId: e.workorderId,
@@ -14265,6 +14360,7 @@ var init_work = __esm({
             deadAt: null,
             cancelledAt: null,
             status: "running",
+            lane: "reply",
             outcome: null,
             outcomeDetail: null,
             sessionRef: null,
@@ -14287,8 +14383,8 @@ var init_work = __esm({
         }
         supersedeLatestWork(state, e.nodeId, ctx.at);
         killNodeReviews(state, e.nodeId, ctx.at);
-        for (const w2 of state.worksOf(e.nodeId)) {
-          if (w2.replyToIssueId && !w2.endedAt && !w2.deadAt) killWorkRow(state, w2, ctx.at);
+        for (const w2 of state.replyWorksOf(e.nodeId)) {
+          if (!w2.endedAt && !w2.deadAt) killWorkRow(state, w2, ctx.at);
         }
         state.insertWork({
           id: e.workId,
@@ -14301,6 +14397,7 @@ var init_work = __esm({
           deadAt: null,
           cancelledAt: null,
           status: "running",
+          lane: "main",
           outcome: null,
           outcomeDetail: null,
           sessionRef: null,
@@ -14386,7 +14483,7 @@ var init_work = __esm({
       apply(e, state, ctx) {
         const w2 = state.work(e.workId);
         if (!w2 || w2.endedAt || w2.deadAt) return;
-        if (w2.replyToIssueId) {
+        if (isReplyWork(w2)) {
           const myReplies = state.allIssues().filter((i) => i.kind === "comment" && i.aboutNodeId === w2.nodeId).flatMap((i) => state.repliesOf(i.id)).filter((r) => r.authorActorId === w2.assigneeActorId && r.createdAt >= w2.createdAt).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
           const replied = myReplies.length > 0;
           const ok = e.outcome === "completed" && (replied || hasOutput(w2, 0));
@@ -14771,7 +14868,7 @@ var init_review = __esm({
         const block = acceptBlock(state, e.workId);
         if (block && !(block.overridable && e.override)) return;
         const w2 = state.work(e.workId);
-        if (w2.replyToIssueId) {
+        if (isReplyWork(w2)) {
           state.updateWork(e.workId, {
             acceptanceState: "accepted",
             acceptedAt: ctx.at,
@@ -14827,7 +14924,7 @@ var init_review = __esm({
           ...w2.endedAt ? {} : { endedAt: ctx.at, outcome: "completed" }
         });
         if (w2.outputVersionNo === null) {
-          const versions = state.worksOf(w2.nodeId).map((x2) => x2.outputVersionNo ?? 0);
+          const versions = state.allWorksIncludingReplies(w2.nodeId).map((x2) => x2.outputVersionNo ?? 0);
           state.updateWork(e.workId, { outputVersionNo: Math.max(0, ...versions) + 1 });
         }
         for (const r of state.openReviewsOf(e.workId)) {
@@ -15665,7 +15762,8 @@ function workToRevision(w2, workInputs, artifactFiles) {
     resolves: void 0
   };
   revision.rejectedReason = w2.rejectedReason;
-  revision.replyToIssueId = w2.replyToIssueId ?? null;
+  revision.lane = w2.lane;
+  revision.replyIssueId = replyIssueIdOf(w2);
   return revision;
 }
 function issueToAnnotation(issue2, replies, recipients) {
@@ -15780,7 +15878,7 @@ function workToConcludeAttempt(w2, requirements, reviews) {
       gate: buildGateFromRequirements(reqs)
     };
   }
-  if (w2.acceptanceState === "accepted") {
+  if (w2.acceptanceState === "accepted" && w2.outputVersionNo !== null) {
     const reqs = requirements.filter((r) => r.nodeId === w2.nodeId);
     return {
       head: w2.id,
@@ -15942,6 +16040,7 @@ function bridgeLoadReadModel(input) {
   const holds = /* @__PURE__ */ new Map();
   for (const node of allNodes) {
     if (!node.latestWorkId) continue;
+    if (node.cancelledAt) continue;
     const lw = allWorks.find((w2) => w2.id === node.latestWorkId);
     if (!lw || !lw.deadAt) continue;
     if (node.latestAcceptId === node.latestWorkId) continue;
@@ -16861,7 +16960,7 @@ var init_kernel_bridge = __esm({
         await this.refreshTracked();
         const wid = this.wo(args.artifactId);
         let workId;
-        const openWorks = [...this.model.revisions.values()].filter((r) => r.artifactId === args.artifactId && r.state === "working" && !r.replyToIssueId).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
+        const openWorks = [...this.model.revisions.values()].filter((r) => r.artifactId === args.artifactId && r.state === "working" && r.lane !== "reply").sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
         workId = openWorks[0]?.id;
         const artifact = this.model.artifacts.get(args.artifactId);
         if (!workId) {
@@ -130836,7 +130935,7 @@ function buildNodeTimeline(artifactId, snap, runIdByTarget) {
   const nodeWorkIds = /* @__PURE__ */ new Set();
   for (const w2 of snap.works) {
     if (w2.nodeId !== artifactId) continue;
-    if (w2.replyToIssueId) continue;
+    if (isReplyWork(w2)) continue;
     nodeWorkIds.add(w2.id);
     const status = w2.status ?? (w2.retryAt ? "retry" : w2.deadAt ? "dead" : w2.endedAt ? w2.outcome === "failed" ? "failed" : "success" : "running");
     items.push({
@@ -130904,6 +131003,7 @@ var TYPE_ORDER;
 var init_timeline = __esm({
   "../server/src/domains/collab/timeline.ts"() {
     "use strict";
+    init_src3();
     TYPE_ORDER = { work: 0, review: 1, issue: 2 };
   }
 });
@@ -149035,6 +149135,7 @@ function stallOf(model, id, runtime, dispatcherSignals) {
   if (gaps.length > 0) {
     return { kind: "waiting_human", action: "resolve_gap", detail: `\u5361\u5728\u7F3A\u53E3\u4E0A\u5F85\u4EBA\u8865\uFF1A${gaps[0].description}` };
   }
+  if (isDeliveredSettled(model, id)) return null;
   if (isHeld(model, id)) {
     const h = holdOf(model, id);
     return { kind: "held", action: "resume", detail: `\u5DF2\u6682\u505C\u6D3E\u53D1${h?.reason ? `\uFF1A${h.reason}` : ""}\u2014\u2014\u5F85\u6062\u590D`, ...h?.at ? { since: h.at } : {} };
@@ -149080,7 +149181,7 @@ function stallOf(model, id, runtime, dispatcherSignals) {
     if (dep) return { kind: "waiting_system", ref: dep.to, detail: `\u7B49\u4E0A\u6E38\u6536\u53E3\uFF1A${dep.to}` };
     return { kind: "waiting_system", detail: `\u963B\u585E\u4E2D\uFF1A${b2.reasons[0] ?? "\u5F85\u524D\u7F6E\u5C31\u7EEA"}` };
   }
-  const queueCause = lifecycleOf(model, id) === "active" ? queueBlockCauseOf(model, id) : null;
+  const queueCause = queueBlockCauseOf(model, id);
   if (queueCause !== null) {
     const pending = queueOf(model, id);
     const since = pending[0]?.createdAt;
@@ -149907,9 +150008,10 @@ function summaryOfWorkspace(model, workspace, arts, ref2, resolveProject, dispat
     owner: ref2(seed.owner),
     participants: participantIds.map(ref2),
     artifactCount: arts.length,
+    // 原始计数（含 brief、含已作废）——仅作旧客户端回退；界面真源是下面的 progressExcludingBrief。
     progress: { concluded, total: arts.length },
-    // ADR 0088 D1：两个派生位内联，前端不再按行拉详情。口径逐字对齐它替代的旧前端函数。
-    progressExcludingBrief: progressExcludingBrief(arts, members, { concluded, total: arts.length }),
+    // ADR 0088 D1：派生位内联，前端不再按行拉详情。这是进度的唯一真源（排除 brief + 已作废，见函数注释）。
+    progressExcludingBrief: progressExcludingBrief(arts, members),
     ...runtimeAlertOf(arts, members, runtimeOf) ?? {},
     updatedAt: lastOps[lastOps.length - 1] ?? "",
     projectId: resolveProject?.(workspace) ?? null,
@@ -149924,20 +150026,17 @@ function tagsOf(seed) {
   if (!Array.isArray(raw)) return [];
   return [...new Set(raw.map((v2) => typeof v2 === "string" ? v2.trim() : "").filter(Boolean))];
 }
-function progressExcludingBrief(arts, members, progress) {
-  let briefCount = 0;
-  let briefConcluded = 0;
+function progressExcludingBrief(arts, members) {
+  let total = 0;
+  let concluded = 0;
   for (let i = 0; i < arts.length; i++) {
-    if (arts[i].type !== "brief") continue;
-    briefCount++;
-    const s2 = deriveNodeStage(members[i]);
-    if (s2 === "concluded" || s2 === "sealed") briefConcluded++;
+    const info = members[i];
+    if (arts[i].type === "brief") continue;
+    if (info.sealed) continue;
+    total++;
+    if (info.concluded) concluded++;
   }
-  if (briefCount === 0) return progress;
-  return {
-    concluded: Math.max(0, progress.concluded - briefConcluded),
-    total: Math.max(0, progress.total - briefCount)
-  };
+  return { concluded, total };
 }
 function runtimeAlertOf(arts, members, runtimeOf) {
   if (!runtimeOf) return void 0;
@@ -157272,6 +157371,8 @@ function executionEnvHash(p2) {
     workRoot: p2.workRoot,
     home: p2.homeHostDir,
     bin: p2.binHostPath,
+    // 包根目录进哈希：它决定挂载形态（整包 vs 单文件），换了就得重建 persist 容器
+    binPkg: p2.binPackageDir ?? null,
     extraRo: [...p2.extraRoBindDirs ?? []].sort()
   });
   return (0, import_node_crypto13.createHash)("sha256").update(material).digest("hex").slice(0, 16);
@@ -157312,9 +157413,9 @@ function commonArgs(p2, name) {
     // 不变量 1：workdir 根同路径挂入（rw）
     "-v",
     `${p2.workRoot}:${p2.workRoot}`,
-    // 不变量 4：agent CLI 只读挂入
-    "-v",
-    `${p2.binHostPath}:${binMount}:ro`,
+    // 不变量 4：agent CLI 只读挂入。自包含二进制挂单文件到 /usr/local/bin/<name>；
+    // 脚本型 CLI 改挂整包（同路径），执行走 binHostPath 原路径——见 WrapParams.binPackageDir。
+    ...p2.binPackageDir ? ["-v", `${p2.binPackageDir}:${p2.binPackageDir}:ro`] : ["-v", `${p2.binHostPath}:${binMount}:ro`],
     // 不变量 5：HOME 持久
     "-v",
     `${p2.homeHostDir}:${CONTAINER_HOME}`
@@ -157338,7 +157439,7 @@ function envFlags(env) {
 }
 function wrapForContainer(p2) {
   const ee = p2.executionEnv;
-  const binInContainer = `/usr/local/bin/${p2.binName ?? path6.basename(p2.binHostPath)}`;
+  const binInContainer = p2.binPackageDir ? p2.binHostPath : `/usr/local/bin/${p2.binName ?? path6.basename(p2.binHostPath)}`;
   const eeHash = executionEnvHash(p2);
   if (ee.persist && p2.job.workdirKey) {
     const name2 = persistContainerName(p2.job.workdirKey);
@@ -157437,6 +157538,20 @@ function resolveBinHostPath(bin) {
   }
   throw new Error(`executionEnv\uFF1A\u5728 PATH \u4E0A\u627E\u4E0D\u5230\u53EF\u6267\u884C\u7684 ${bin}\uFF0C\u65E0\u6CD5\u6302\u5165\u5BB9\u5668`);
 }
+function resolveBinPackageDir(binHostPath) {
+  if (!/\.(js|mjs|cjs)$/i.test(binHostPath)) return null;
+  let dir = path7.dirname(binHostPath);
+  for (let i = 0; i < 8; i++) {
+    if (fs7.existsSync(path7.join(dir, "package.json"))) {
+      if (dir === "/" || dir === os3.tmpdir() || dir.split(path7.sep).length <= 2) return null;
+      return dir;
+    }
+    const parent = path7.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
 function containerHomeHostDir(workRoot) {
   const dir = path7.join(resolveWorkRoot(workRoot), "container-home");
   fs7.mkdirSync(dir, { recursive: true });
@@ -157525,10 +157640,13 @@ async function maybeContainerize(params) {
       return [];
     }
   }))];
+  const binHostPath = resolveBinHostPath(params.bin);
+  const binPackageDir = resolveBinPackageDir(binHostPath);
   const plan = wrapForContainer({
-    binHostPath: resolveBinHostPath(params.bin),
+    binHostPath,
     binName: path7.basename(params.bin),
     // realpath 前的名字（"claude"）——argv[0] 语义要保住
+    ...binPackageDir ? { binPackageDir } : {},
     args: params.args,
     cwd: params.cwd,
     env,
@@ -159291,6 +159409,7 @@ var init_codex = __esm({
   "../adapters/src/codex/index.ts"() {
     "use strict";
     import_node_child_process9 = require("node:child_process");
+    init_container_runtime();
     import_node_crypto15 = require("node:crypto");
     fs10 = __toESM(require("node:fs"), 1);
     os5 = __toESM(require("node:os"), 1);
@@ -159336,9 +159455,6 @@ var init_codex = __esm({
        */
       capabilities = { appendInput: false };
       async spawn(job) {
-        if (job.executionEnv) {
-          throw new Error("executionEnv\uFF1Acodex runtime \u5C1A\u672A\u652F\u6301\u5BB9\u5668\u5316\u6267\u884C\uFF08ADR-0147\uFF09\uFF0C\u8BF7\u6539\u6D3E claude-code \u5458\u5DE5\u6216\u53BB\u6389\u8BE5\u8282\u70B9\u7684 executionEnv \u58F0\u660E");
-        }
         const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
         const id = `codex-${slug6}-${(0, import_node_crypto15.randomUUID)().slice(0, 8)}`;
         const startedAtMs = Date.now();
@@ -159398,7 +159514,21 @@ var init_codex = __esm({
           ),
           promptViaStdin ? "-" : prompt
         ];
-        const child = (0, import_node_child_process9.spawn)(this.opts.codexBin ?? "codex", args, {
+        const containerized = await maybeContainerize({
+          bin: this.opts.codexBin ?? "codex",
+          args,
+          cwd: dir,
+          job,
+          ...this.opts.workRoot !== void 0 ? { workRoot: this.opts.workRoot } : {},
+          ...this.opts.env !== void 0 ? { extraEnvEarly: this.opts.env } : {}
+        });
+        const child = containerized ? (0, import_node_child_process9.spawn)(containerized.bin, containerized.args, {
+          cwd: dir,
+          env: scrubLeakyEnv(process.env),
+          // stdin 的开合口径与宿主分支一致：codex 只在走 stdin 时才该收到管道（见下方长注释）。
+          // 容器包装本身带 `-i`，podman 会把这条管道透传给容器内进程。
+          stdio: [promptViaStdin ? "pipe" : "ignore", "pipe", "pipe"]
+        }) : (0, import_node_child_process9.spawn)(this.opts.codexBin ?? "codex", args, {
           cwd: dir,
           env: {
             ...scrubLeakyEnv(process.env),
@@ -159513,6 +159643,7 @@ var init_codex = __esm({
         };
         const timer = setTimeout(() => {
           killReason ??= "timeout";
+          if (containerized) killContainerBestEffort(containerized.containerName, containerized.mode);
           child.kill("SIGKILL");
         }, job.limits.wallClockMs);
         child.on("error", () => {
@@ -159540,13 +159671,16 @@ var init_codex = __esm({
             ...telemetry.usage ? { usage: telemetry.usage } : {},
             ...model ? { model } : {},
             ...runtimeSessionId ? { runtimeSessionId } : {},
-            ...errorMessage ? { errorMessage } : {}
+            ...errorMessage ? { errorMessage } : {},
+            // 跑在哪个镜像上要落账：同一题换了镜像，分数就不可比（ADR-0147 M5）
+            ...containerized?.imageDigest ? { imageDigest: containerized.imageDigest } : {}
           });
         });
         return {
           id,
           async kill() {
             killReason ??= "cancelled";
+            if (containerized) killContainerBestEffort(containerized.containerName, containerized.mode);
             child.kill("SIGKILL");
           },
           onExit(cb) {
@@ -163799,14 +163933,36 @@ async function startOasisServer(opts) {
                 ...currentCompanyId !== void 0 ? { companyId: currentCompanyId } : {}
               }
             );
-            if (tokenClaims?.dispatchId && opts.onDispatchCommandCompleted) {
+            if (tokenClaims?.dispatchId && opts.onDispatchCommandCompleted && !READ_ONLY_COMMANDS.has(body.command)) {
               try {
+                const revision = body.command === "propose" || body.command === "integrate" ? result?.data : void 0;
+                const deliveredArtifactId = typeof revision?.artifactId === "string" ? revision.artifactId : tokenClaims.artifactId;
+                const listArg = (key) => {
+                  const raw = body.args?.[key];
+                  if (!Array.isArray(raw)) return void 0;
+                  const items = raw.filter((x2) => typeof x2 === "string" && x2.trim() !== "");
+                  return items.length > 0 ? items : void 0;
+                };
+                const delivered = revision && typeof revision.id === "string" && typeof revision.reason === "string" && revision.reason.trim() && deliveredArtifactId !== void 0 ? {
+                  summary: revision.reason,
+                  refs: [{
+                    kind: "artifact",
+                    id: deliveredArtifactId,
+                    version: revision.id,
+                    ...engine.kernel.model.artifacts.get(deliveredArtifactId)?.title ? { label: engine.kernel.model.artifacts.get(deliveredArtifactId).title } : {}
+                  }],
+                  ...listArg("unresolvedIssues") ? { unresolvedIssues: listArg("unresolvedIssues") } : {},
+                  ...listArg("risks") ? { risks: listArg("risks") } : {},
+                  ...listArg("nextActions") ? { nextActions: listArg("nextActions") } : {},
+                  ...listArg("verificationGaps") ? { verificationGaps: listArg("verificationGaps") } : {}
+                } : void 0;
                 await opts.onDispatchCommandCompleted({
                   dispatchId: tokenClaims.dispatchId,
                   command: body.command,
                   ...tokenClaims.artifactId !== void 0 ? { artifactId: tokenClaims.artifactId } : {},
                   durableRefs: tokenClaims.artifactId !== void 0 ? [{ kind: "artifact", id: tokenClaims.artifactId, label: body.command }] : [],
-                  at: (/* @__PURE__ */ new Date()).toISOString()
+                  at: (/* @__PURE__ */ new Date()).toISOString(),
+                  ...delivered ? { delivered } : {}
                 });
               } catch (error2) {
                 console.error(`[execution-continuity] important-output checkpoint failed for ${tokenClaims.dispatchId}:`, error2);
@@ -165650,7 +165806,7 @@ async function startOasisServer(opts) {
   await new Promise((resolve10) => httpServer.listen(opts.port ?? 0, "0.0.0.0", resolve10));
   const address = httpServer.address();
   if (address === null || typeof address === "string") throw new Error("listen failed");
-  const baseUrl = `http://0.0.0.0:${address.port}`;
+  const baseUrl = `http://127.0.0.1:${address.port}`;
   if (channelWsSupervisor) void channelWsSupervisor.start();
   return {
     baseUrl,
@@ -165662,7 +165818,7 @@ async function startOasisServer(opts) {
     })
   };
 }
-var http, githubAppPending, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, WILL_VERBS, GOVERNANCE_COMMANDS, isAgent, isHuman;
+var http, githubAppPending, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
@@ -165702,6 +165858,21 @@ var init_server3 = __esm({
     STREAMING_PATHS = ["/api/events", "/api/chat", "/api/trajectory/events", "/api/intervention/wait"];
     WILL_VERBS = /* @__PURE__ */ new Set(["annotate", "reply", "resolve", "review", "merge", "escalate", "hold", "release"]);
     GOVERNANCE_COMMANDS = /* @__PURE__ */ new Set(["seal", "assign", "promote", "forceConclude", "unlink", "gc", "requestChange", "resolveEscalation"]);
+    READ_ONLY_COMMANDS = /* @__PURE__ */ new Set([
+      "ls",
+      "show",
+      "timeline",
+      "content",
+      "queue",
+      "stale",
+      "blocked",
+      "graph",
+      "log",
+      "working",
+      "proposed",
+      "rejected",
+      "superseded"
+    ]);
     isAgent = (actor) => actor.startsWith("actor:agent:");
     isHuman = (actor) => actor.startsWith("actor:human:");
   }
@@ -166416,9 +166587,25 @@ function systemHandoffFor(run, checkpoint = null, effects = []) {
     createdAt: run.endedAt ?? run.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString()
   };
 }
+function mergeSystemHandoff(existing, reconstructed) {
+  if (!existing) return reconstructed;
+  const authored = (text) => text.trim() !== "" && !text.startsWith("[system_reconstructed]");
+  const keepList = (current, next) => current.length > 0 ? structuredClone(current) : structuredClone(next);
+  return {
+    ...reconstructed,
+    // outcome 描述这趟 Attempt 的命运（交稿后仍可能失败/超时）→ 以终态为准。
+    summary: authored(existing.summary) ? existing.summary : reconstructed.summary,
+    changedOutputs: keepList(existing.changedOutputs, reconstructed.changedOutputs),
+    unresolvedIssues: keepList(existing.unresolvedIssues, reconstructed.unresolvedIssues),
+    risks: keepList(existing.risks, reconstructed.risks),
+    nextActions: keepList(existing.nextActions, reconstructed.nextActions),
+    verificationGaps: keepList(existing.verificationGaps, reconstructed.verificationGaps),
+    userHandoff: existing.userHandoff ?? reconstructed.userHandoff,
+    createdAt: existing.createdAt
+  };
+}
 function validateHandoffInput(input, status) {
   if (!input.summary.trim()) throw new Error("handoff summary is required");
-  if ([...input.summary].length > 400) throw new Error("handoff summary exceeds 400 characters");
   if (isTerminalStatus(status) && input.outcome !== handoffOutcomeOf(status)) {
     throw new Error(`handoff outcome ${input.outcome} does not match attempt status ${status}`);
   }
@@ -166516,7 +166703,7 @@ var init_memory_trace_store = __esm({
           const existingHandoff = this.handoffs.get(id);
           const checkpoint = (this.checkpoints.get(id) ?? []).filter((item) => item.trigger !== "attempt_terminal").at(-1) ?? null;
           const effects = [...this.externalEffects.values()].filter((effect) => effect.attemptId === id);
-          const handoff = existingHandoff?.producedBy === "agent" ? existingHandoff : systemHandoffFor(merged, checkpoint, effects);
+          const handoff = existingHandoff?.producedBy === "agent" ? existingHandoff : mergeSystemHandoff(existingHandoff ?? null, systemHandoffFor(merged, checkpoint, effects));
           this.handoffs.set(id, handoff);
           merged.handoffId = handoff.handoffId;
         }
@@ -171891,21 +172078,38 @@ var init_sink = __esm({
         };
       }
       checkpointInput(st, previous, trigger, createdAt) {
+        const durableRefs = structuredClone(st.checkpointState.durableRefs ?? previous?.durableRefs ?? []);
         return {
           attemptId: st.runId,
           pendingSteps: [...st.checkpointState.pendingSteps ?? previous?.pendingSteps ?? []],
-          durableRefs: structuredClone(st.checkpointState.durableRefs ?? previous?.durableRefs ?? []),
+          durableRefs,
           completedStepIds: [...st.checkpointState.completedStepIds ?? previous?.completedStepIds ?? []],
-          recoverability: st.checkpointState.recoverability ?? previous?.recoverability ?? "none",
+          // recoverability 只有 Agent 自己说得准，但「一条持久化产出都没有」与「已经落了东西」这两种局面
+          // 系统分得清：有 durableRefs 就至少是 partial（下一趟能接着用这些产出），别一律记成 none——
+          // 那会让恢复包看起来「什么都没留下」，与账本里的 refs 自相矛盾。
+          recoverability: st.checkpointState.recoverability ?? previous?.recoverability ?? (durableRefs.length > 0 ? "partial" : "none"),
           trigger,
           createdAt
         };
       }
+      /**
+       * 两条 checkpoint 的内容是否一字不差（trigger/时间不算内容）——用于跳过无意义的重复写。
+       *
+       * refs 必须逐字段比，**不能 JSON.stringify 整个对象**：写进 PG 的 jsonb 读回来键序是重排过的
+       * （`{kind,id,version,label}` 回来是 `{id,kind,label,version}`），按字符串比会把「完全一样」判成
+       * 「变了」，去重直接失效——线上的表现就是每个工具结果照样灌一行。
+       */
+      sameCheckpointContent(input, previous) {
+        if (!previous) return false;
+        const refKeys = (refs) => refs.map((ref2) => `${ref2.kind}\0${ref2.id}\0${ref2.version ?? ""}\0${ref2.label ?? ""}`).join("
");
+        return JSON.stringify(input.pendingSteps) === JSON.stringify(previous.pendingSteps) && refKeys(input.durableRefs) === refKeys(previous.durableRefs) && JSON.stringify(input.completedStepIds) === JSON.stringify(previous.completedStepIds) && input.recoverability === previous.recoverability;
+      }
       clearObservedCheckpointState(st) {
         st.checkpointState = {};
       }
       async appendSystemCheckpoint(st, trigger, createdAt, appendDurableRefs = []) {
         if (!this.canCheckpoint()) return;
+        if (trigger === "tool_completed" && Object.keys(st.checkpointState).length === 0) return;
         const previous = await this.latestCheckpoint(st);
         const input = this.checkpointInput(st, previous, trigger, createdAt);
         if (appendDurableRefs.length > 0) {
@@ -171915,6 +172119,14 @@ var init_sink = __esm({
           }
           input.durableRefs = [...refs.values()];
         }
+        if (input.durableRefs.length > 0 && st.checkpointState.recoverability === void 0 && previous?.recoverability === void 0) {
+          input.recoverability = "partial";
+        }
+        const observedTrigger = trigger === "tool_completed" || trigger === "important_output";
+        if (observedTrigger && this.sameCheckpointContent(input, previous)) {
+          this.clearObservedCheckpointState(st);
+          return;
+        }
         await this.store.appendCheckpoint(input);
         this.clearObservedCheckpointState(st);
         this.scheduleCheckpointTimer(st);
@@ -171951,8 +172163,16 @@ var init_sink = __esm({
         if (!st || st.ending || !this.canCheckpoint()) return;
         this.enqueue(sessionId, async (current) => {
           if (signal.trigger === "important_output") {
-            const { durableRefs = [], ...state } = signal;
+            const { durableRefs = [], completedStepIds = [], ...state } = signal;
             this.mergeCheckpointState(current, state);
+            if (completedStepIds.length > 0) {
+              const previous = await this.latestCheckpoint(current);
+              const merged = /* @__PURE__ */ new Set([
+                ...current.checkpointState.completedStepIds ?? previous?.completedStepIds ?? [],
+                ...completedStepIds
+              ]);
+              current.checkpointState = { ...current.checkpointState, completedStepIds: [...merged] };
+            }
             await this.appendSystemCheckpoint(
               current,
               signal.trigger,
@@ -180335,7 +180555,7 @@ function collectWaitingRows(snapshots2, me) {
     const latestReply = /* @__PURE__ */ new Map();
     for (const w2 of snap.works) {
       if (w2.assigneeActorId !== me || cancelled.has(w2.nodeId)) continue;
-      latestBy(w2.replyToIssueId ? latestReply : latestMain, w2);
+      latestBy(isReplyWork(w2) ? latestReply : latestMain, w2);
     }
     for (const w2 of [...latestMain.values(), ...latestReply.values()]) {
       const st = workState(w2, hasOutput(w2, outputCountOf(w2.id)));
@@ -182982,7 +183202,9 @@ function renderCoordinatorView(view) {
     if (node.handoffProducer === "agent") {
       lines.push(`- Agent handoff: ${node.summary || "No summary"}`);
     } else if (node.handoffProducer === "system_reconstructed") {
-      lines.push(`- System reconstruction (not an Agent conclusion): ${node.summary || "No summary"}`);
+      lines.push(
+        node.summary.startsWith("[system_reconstructed]") ? `- System reconstruction (not an Agent conclusion): ${node.summary || "No summary"}` : `- Delivery note recorded at submit time (the executor's own wording, captured by the system): ${node.summary}`
+      );
     }
     for (const output of node.changedOutputs) {
       lines.push(`  - Durable output: ${output.kind}:${output.id}${output.version ? `@${output.version}` : ""}`);
@@ -183005,6 +183227,11 @@ function renderCoordinatorView(view) {
   return `${lines.join("\n")}
 `;
 }
+function shouldInjectResumePack(pack) {
+  const status = pack?.previousAttempt?.status;
+  if (!status) return false;
+  return status !== "succeeded" && status !== "no-output";
+}
 function renderContinuityProtocol() {
   return `# Execution continuity protocol
 
@@ -183016,8 +183243,13 @@ authoritative systems. Record only durable facts and stable references here.
 Run \`oasis continuity-checkpoint --trigger plan_completed\` after planning and
 \`oasis continuity-checkpoint --trigger stage_completed\` after a key stage so the system knows
 what remains, stable completed-step ids, recoverability, and only references that another agent can open.
-The system silently adds checkpoints after successful tool results, durable Oasis command writes,
-changed long-task state, and immediately before terminal status; do not emit timer-only checkpoints.
+Your explicit checkpoints are the only source of pendingSteps, completedStepIds and recoverability.
+The system appends checkpoints on its own after each successful tool result, after a durable Oasis
+command succeeds (carrying a coarse reference to the artifact you wrote), after a captured connector
+external effect settles, and once immediately before terminal status \u2014 but every one of those merely
+re-persists what you already declared plus references it can see; none of them can infer what remains
+to be done. If you never checkpoint, a later attempt on this node has nothing to resume from. Do not
+emit timer-only checkpoints.
 
 ## External effects
 
@@ -183028,30 +183260,35 @@ succeeds, use \`oasis continuity-effect\` with a stable key that the same node w
 
 ## Handoff
 
-Before terminal exit, run \`oasis continuity-handoff\` with a concise technical summary (maximum 400
-characters), changed durable outputs, unresolved issues, risks, next actions, and verification gaps.
-You must also provide \`--user-summary\` as short business-facing language for the people receiving
-the work. Say what you completed, what result you formed, and what downstream work can use; if not
-delivered, say only why and what must happen next. Use \`--user-next-step\` when downstream needs an
-instruction. List only openable business results in \`--user-deliverables\`; keep technical refs in
-\`--outputs\`, and never list conclude, gap, checkpoint, or op as a user deliverable. Do not use a
-generic success/output-count template or mention attempts, checkpoints, runtimes, recovery,
-infrastructure paths, or internal diagnostics there.
-The system reconstructs an internal handoff if the process dies first, but reconstructed content is
-never shown as a business handoff.
+Before terminal exit, run \`oasis continuity-handoff\` with a technical summary, changed durable
+outputs, unresolved issues, risks, next actions, and verification gaps. Submitting work already
+records the delivered revision and your \`--reason\` as this node's handoff summary, so the value you
+add here is what the system cannot observe: what is still unresolved, what is risky, what the next
+agent should do, and what you could not verify. You must also provide \`--user-summary\` as short
+business-facing language for the people receiving the work. Say what you completed, what result you
+formed, and what downstream work can use; if not delivered, say only why and what must happen next.
+Use \`--user-next-step\` when downstream needs an instruction. List only openable business results in
+\`--user-deliverables\`; keep technical refs in \`--outputs\`, and never list conclude, gap,
+checkpoint, or op as a user deliverable. Do not use a generic success/output-count template or
+mention attempts, checkpoints, runtimes, recovery, infrastructure paths, or internal diagnostics
+there. Only an explicit non-success outcome holds downstream work back; a missing handoff does not,
+so never claim non-delivery merely because you ran out of time to write one.
 `;
 }
 function renderBusinessHandoffProtocol() {
   return `# Business handoff protocol
 
-Before terminal exit, run \`oasis continuity-handoff\`. The NodeHandoff and its userHandoff are a
-required completion barrier for business downstream work. A successful handoff must use outcome
-\`succeeded\`, include a non-empty \`--user-summary\` saying what was done, what result was formed,
-and what downstream can use, and may have zero files. If the work cannot be delivered, submit a
-non-success outcome with a user summary explaining why delivery failed and \`--user-next-step\`;
-that records the handoff but does not release downstream work. List only openable business results
-in \`--user-deliverables\`. Never use a generic success/output-count template or expose attempts,
-checkpoints, runtimes, recovery, infrastructure paths, or internal diagnostics in userHandoff.
+Before terminal exit, run \`oasis continuity-handoff\`. Submitting work already records the delivered
+revision and your \`--reason\` as this node's handoff summary; this command adds what the system
+cannot observe \u2014 unresolved issues, risks, next actions, verification gaps \u2014 plus a business-facing
+\`--user-summary\`. A successful handoff must use outcome \`succeeded\`, include a non-empty
+\`--user-summary\` saying what was done, what result was formed, and what downstream can use, and may
+have zero files. If the work genuinely cannot be delivered, submit a non-success outcome with a user
+summary explaining why and \`--user-next-step\`: that is the one signal which holds downstream work
+back, so never use it just because you ran out of time to write a handoff. Omitting this command does
+not block downstream. List only openable business results in \`--user-deliverables\`. Never use a
+generic success/output-count template or expose attempts, checkpoints, runtimes, recovery,
+infrastructure paths, or internal diagnostics in userHandoff.
 `;
 }
 function emptyExternalEffectProjection() {
@@ -183225,7 +183462,6 @@ var init_service7 = __esm({
       async handoff(input) {
         if (!HANDOFF_OUTCOMES2.has(input.outcome)) throw new Error(`invalid handoff outcome: ${input.outcome}`);
         if (!input.summary.trim()) throw new Error("handoff summary is required");
-        if ([...input.summary].length > 400) throw new Error("handoff summary exceeds 400 characters");
         if (input.producedBy === "agent" && !input.userHandoff) {
           throw new Error("agent-authored handoff requires userHandoff");
         }
@@ -183288,7 +183524,7 @@ var init_service7 = __esm({
       }
       async recoveryView(attemptId, companyId) {
         const attempt = await this.store.getAttempt(attemptId);
-        if (!attempt?.workOrderId || !attempt.nodeId || attempt.continuityMode !== "resume") return null;
+        if (!attempt?.workOrderId || !attempt.nodeId || !attempt.continuityMode || attempt.continuityMode === "off") return null;
         const recoverySnapshot = this.readRecoverySnapshot(attempt);
         if (!recoverySnapshot) return null;
         const graph = await this.resolveGraph(attempt.workOrderId, companyId);
@@ -183322,7 +183558,7 @@ var init_service7 = __esm({
         return candidate ? { workOrderId: candidate.workOrderId, nodeId: candidate.nodeId, attemptId: candidate.attemptId } : null;
       }
       readRecoverySnapshot(attempt) {
-        if (!attempt.nodeId || attempt.continuityMode !== "resume") return null;
+        if (!attempt.nodeId || attempt.continuityMode === "off" || attempt.continuityMode === null) return null;
         const metadata = attempt.metadata;
         const manifest = metadata && typeof metadata === "object" && !Array.isArray(metadata) ? metadata["bundleManifest"] : null;
         const expectedHash = manifest && typeof manifest === "object" && !Array.isArray(manifest) ? manifest["execution/RESUME.md"] : null;
@@ -183475,11 +183711,20 @@ var init_handoff_work_bridge = __esm({
 
 // ../server/src/domains/execution-continuity/upstream-handoff-input.ts
 function renderRefs(refs) {
-  return refs.map(
-    (ref2) => `- ${ref2.kind}:${ref2.id}${ref2.version ? `@${ref2.version}` : ""}${ref2.label ? ` \u2014 ${ref2.label}` : ""}`
-  );
+  return refs.map((ref2) => {
+    const label = ref2.id.startsWith(`${ref2.kind}:`) ? ref2.id : `${ref2.kind}:${ref2.id}`;
+    return `- ${label}${ref2.version ? `@${ref2.version}` : ""}${ref2.label ? ` \u2014 ${ref2.label}` : ""}`;
+  });
+}
+function bounded(text) {
+  const t = text.trim();
+  return [...t].length <= INJECTED_TEXT_LIMIT ? t : `${[...t].slice(0, INJECTED_TEXT_LIMIT).join("")}\u2026\uFF08\u539F\u6587\u8FC7\u957F\uFF0C\u6B64\u5904\u622A\u65AD\uFF1B\u5B8C\u6574\u5185\u5BB9\u89C1\u8BE5\u4E0A\u6E38\u8282\u70B9\u7684\u4EA4\u4ED8\u8BF4\u660E\uFF09`;
+}
+function isExplicitNone(values) {
+  return values.length === 1 && NONE_TOKENS.has((values[0] ?? "").trim().toLowerCase());
 }
 function renderList(title, values) {
+  if (isExplicitNone(values)) return [`## ${title}`, "- \u6267\u884C\u4EBA\u786E\u8BA4\uFF1A\u65E0", ""];
   return [
     `## ${title}`,
     ...values.length > 0 ? values.map((value) => `- ${value}`) : ["- None"],
@@ -183504,8 +183749,9 @@ function renderUpstreamNodeHandoff(handoff, source) {
     `Created at: ${handoff.createdAt}`,
     "",
     "## Summary",
-    handoff.summary,
+    bounded(handoff.summary),
     "",
+    ...source.conclusion ? ["## Delivery note (upstream conclusion)", bounded(source.conclusion), ""] : [],
     "## Changed durable outputs",
     ...handoff.changedOutputs.length > 0 ? renderRefs(handoff.changedOutputs) : ["- None"],
     "",
@@ -183517,49 +183763,117 @@ function renderUpstreamNodeHandoff(handoff, source) {
     ""
   ].join("\n");
 }
+function renderDeliveredWorkHandoff(source) {
+  const authored = [
+    ...source.unresolvedIssues ?? [],
+    ...source.risks ?? [],
+    ...source.nextActions ?? [],
+    ...source.verificationGaps ?? []
+  ];
+  return [
+    "# Upstream NodeHandoff",
+    "",
+    `Upstream node: ${source.upstreamNodeId}${source.upstreamTitle ? `\uFF08${source.upstreamTitle}\uFF09` : ""}`,
+    `Pinned work: ${source.pinnedWorkId}`,
+    "Produced by: system\uFF08\u636E\u4E0A\u6E38\u4EA4\u4F5C\u4E1A\u4E8B\u5B9E\u751F\u6210\uFF0C\u975E Agent \u624B\u5199\u7684\u6280\u672F\u4EA4\u63A5\uFF09",
+    "",
+    "## Summary",
+    source.conclusion && source.conclusion.trim() ? bounded(source.conclusion) : "\u4E0A\u6E38\u672A\u7559\u6536\u5C3E\u7ED3\u8BBA\uFF1B\u4EE5\u672C\u76EE\u5F55\u4E2D\u9489\u4F4F\u7684\u4EA4\u4ED8\u7269\u5185\u5BB9\u4E3A\u51C6\u3002",
+    "",
+    "## Changed durable outputs",
+    ...source.changedOutputs.length > 0 ? renderRefs(source.changedOutputs) : ["- None"],
+    "",
+    ...renderList("Unresolved issues", [...source.unresolvedIssues ?? []]),
+    ...renderList("Risks", [...source.risks ?? []]),
+    ...renderList("Next actions", [...source.nextActions ?? []]),
+    ...renderList("Verification gaps", [...source.verificationGaps ?? []]),
+    authored.length > 0 ? "\u4EE5\u4E0A\u56DB\u8282\u662F\u4E0A\u6E38\u6267\u884C\u4EBA\u4EA4\u4F5C\u4E1A\u65F6\u81EA\u5DF1\u5199\u7684\u3002" : "\u4E0A\u6E38\u8FD9\u4E00\u8F6E\u6CA1\u5199\u672A\u51B3 / \u98CE\u9669 / \u4E0B\u4E00\u6B65 / \u6838\u9A8C\u7F3A\u53E3\u2014\u2014**\u7A7A\u4E0D\u7B49\u4E8E\u300C\u4E0A\u6E38\u786E\u8BA4\u65E0\u98CE\u9669\u300D**\uFF0C\u53EA\u7B49\u4E8E\u6CA1\u4EBA\u5199\u3002",
+    "\u4EE5\u672C\u76EE\u5F55\u4E2D\u9489\u4F4F\u7684\u90A3\u4E00\u7248\u4EA4\u4ED8\u7269\u4E3A\u51C6\uFF1B\u6709\u7591\u95EE\u56DE\u4E0A\u6E38\u8282\u70B9\u63D0\u56DE\u538B\uFF0C\u4E0D\u8981\u51ED\u672C\u6587\u4EF6\u63A8\u65AD\u672A\u5199\u660E\u7684\u4E8B\u3002",
+    ""
+  ].join("\n");
+}
 function createUpstreamHandoffInputResolver(opts) {
+  const warn = opts.warn ?? ((message) => console.warn(`[upstream-handoff] ${message}`));
   return async (input) => {
-    const snapshot = await opts.loadWorkorder(input.workOrderId);
-    if (!snapshot) throw new Error(`workorder not found while assembling upstream handoff: ${input.workOrderId}`);
-    const edge = snapshot.edges.find(
-      (candidate) => candidate.fromNodeId === input.upstreamNodeId && candidate.toNodeId === input.downstreamNodeId
-    );
-    const downstream = snapshot.nodes.find((node) => node.id === input.downstreamNodeId);
-    const businessEdge = edge?.kind === "data" && edge.required && downstream?.fields?.[BUSINESS_HANDOFF_POLICY_FIELD] !== BUSINESS_HANDOFF_POLICY_EXEMPT;
-    if (!businessEdge) return null;
-    if (edge.pinnedWorkId !== input.pinnedWorkId) {
-      throw new Error(
-        `upstream handoff pin drift for ${input.upstreamNodeId}\u2192${input.downstreamNodeId}: bundle=${input.pinnedWorkId}, edge=${edge.pinnedWorkId ?? "none"}`
+    try {
+      const snapshot = await opts.loadWorkorder(input.workOrderId);
+      if (!snapshot) {
+        warn(`\u5DE5\u5355\u5FEB\u7167\u8BFB\u4E0D\u5230\uFF0C\u8DF3\u8FC7\u4E0A\u6E38\u4EA4\u63A5\u6CE8\u5165\uFF1A${input.workOrderId}`);
+        return null;
+      }
+      const edge = snapshot.edges.find(
+        (candidate) => candidate.fromNodeId === input.upstreamNodeId && candidate.toNodeId === input.downstreamNodeId
       );
-    }
-    const work = snapshot.works.find(
-      (candidate) => candidate.id === input.pinnedWorkId && candidate.nodeId === input.upstreamNodeId
-    );
-    if (!work) throw new Error(`pinned upstream Work not found: ${input.pinnedWorkId}`);
-    if (typeof work.assigneeActorId === "string" && work.assigneeActorId.startsWith("actor:human:")) {
-      return null;
-    }
-    if (work.status === "success" && work.agentHandoffAttemptId === null && work.businessHandoffStatus === null) {
+      const downstream = snapshot.nodes.find((node) => node.id === input.downstreamNodeId);
+      const businessEdge = edge?.kind === "data" && edge.required && downstream?.fields?.[BUSINESS_HANDOFF_POLICY_FIELD] !== BUSINESS_HANDOFF_POLICY_EXEMPT;
+      if (!businessEdge) return null;
+      if (edge.pinnedWorkId !== input.pinnedWorkId) {
+        warn(
+          `pin \u6F02\u79FB\uFF0C\u8DF3\u8FC7\u6CE8\u5165 ${input.upstreamNodeId}\u2192${input.downstreamNodeId}\uFF1Abundle=${input.pinnedWorkId}\u3001edge=${edge.pinnedWorkId ?? "none"}`
+        );
+        return null;
+      }
+      const work = snapshot.works.find(
+        (candidate) => candidate.id === input.pinnedWorkId && candidate.nodeId === input.upstreamNodeId
+      );
+      if (!work) {
+        warn(`\u9489\u4F4F\u7684\u4E0A\u6E38 Work \u4E0D\u5728\u5FEB\u7167\u91CC\uFF0C\u8DF3\u8FC7\u6CE8\u5165\uFF1A${input.pinnedWorkId}`);
+        return null;
+      }
+      if (typeof work.assigneeActorId === "string" && work.assigneeActorId.startsWith("actor:human:")) {
+        return null;
+      }
+      const upstreamNode = snapshot.nodes.find((node) => node.id === input.upstreamNodeId);
+      const conclusion = typeof work.conclusion === "string" ? work.conclusion : null;
+      const changedOutputs = [{
+        kind: "artifact",
+        id: input.upstreamNodeId,
+        version: input.pinnedWorkId,
+        ...upstreamNode?.title ? { label: upstreamNode.title } : {}
+      }];
+      const deliveredRow = typeof work.sessionRef === "string" && work.sessionRef ? await opts.getHandoff(work.sessionRef).catch(() => null) : null;
+      const systemHandoff = () => renderDeliveredWorkHandoff({
+        upstreamNodeId: input.upstreamNodeId,
+        upstreamTitle: upstreamNode?.title,
+        pinnedWorkId: input.pinnedWorkId,
+        conclusion,
+        changedOutputs: (deliveredRow?.changedOutputs.length ?? 0) > 0 ? deliveredRow.changedOutputs : changedOutputs,
+        ...deliveredRow?.unresolvedIssues.length ? { unresolvedIssues: deliveredRow.unresolvedIssues } : {},
+        ...deliveredRow?.risks.length ? { risks: deliveredRow.risks } : {},
+        ...deliveredRow?.nextActions.length ? { nextActions: deliveredRow.nextActions } : {},
+        ...deliveredRow?.verificationGaps.length ? { verificationGaps: deliveredRow.verificationGaps } : {}
+      });
+      if (!work.agentHandoffAttemptId || work.businessHandoffStatus !== "delivered") {
+        return systemHandoff();
+      }
+      const handoff = await opts.getHandoff(work.agentHandoffAttemptId).catch((error2) => {
+        warn(`\u8BFB Agent NodeHandoff \u5931\u8D25\uFF0C\u964D\u7EA7\u4E3A\u7CFB\u7EDF\u751F\u6210\u7248\uFF1A${error2 instanceof Error ? error2.message : String(error2)}`);
+        return null;
+      });
+      if (!handoff || handoff.attemptId !== work.agentHandoffAttemptId || handoff.producedBy !== "agent" || handoff.outcome !== "succeeded" || handoff.userHandoff?.status !== "delivered") {
+        warn(
+          `Agent NodeHandoff \u4E0E\u6295\u5F71\u5BF9\u4E0D\u4E0A\uFF08work=${work.id}\u3001attempt=${work.agentHandoffAttemptId}\uFF09\uFF0C\u964D\u7EA7\u4E3A\u7CFB\u7EDF\u751F\u6210\u7248`
+        );
+        return systemHandoff();
+      }
+      return renderUpstreamNodeHandoff(handoff, {
+        upstreamNodeId: input.upstreamNodeId,
+        pinnedWorkId: input.pinnedWorkId,
+        conclusion
+      });
+    } catch (error2) {
+      warn(`\u4E0A\u6E38\u4EA4\u63A5\u89E3\u6790\u5F02\u5E38\uFF0C\u672C\u8F6E\u4E0D\u6CE8\u5165\uFF1A${error2 instanceof Error ? error2.message : String(error2)}`);
       return null;
     }
-    if (!work.agentHandoffAttemptId || work.businessHandoffStatus !== "delivered") {
-      throw new Error(`pinned upstream Work ${work.id} has no delivered Agent handoff projection`);
-    }
-    const handoff = await opts.getHandoff(work.agentHandoffAttemptId);
-    if (!handoff) throw new Error(`Agent NodeHandoff not found for Attempt ${work.agentHandoffAttemptId}`);
-    if (handoff.attemptId !== work.agentHandoffAttemptId || handoff.producedBy !== "agent" || handoff.outcome !== "succeeded" || handoff.userHandoff?.status !== "delivered") {
-      throw new Error(`invalid Agent NodeHandoff for pinned Work ${work.id}`);
-    }
-    return renderUpstreamNodeHandoff(handoff, {
-      upstreamNodeId: input.upstreamNodeId,
-      pinnedWorkId: input.pinnedWorkId
-    });
   };
 }
+var INJECTED_TEXT_LIMIT, NONE_TOKENS;
 var init_upstream_handoff_input = __esm({
   "../server/src/domains/execution-continuity/upstream-handoff-input.ts"() {
     "use strict";
     init_src3();
+    INJECTED_TEXT_LIMIT = 4e3;
+    NONE_TOKENS = /* @__PURE__ */ new Set(["none", "n/a", "na", "nil", "\u65E0", "\u6CA1\u6709", "\u6682\u65E0"]);
   }
 });
 
@@ -183580,6 +183894,51 @@ var init_node_conclusions = __esm({
   }
 });
 
+// ../server/src/domains/execution-continuity/delivered-handoff.ts
+function mergeRefs(primary, extra) {
+  const out = [...primary];
+  for (const ref2 of extra) {
+    if (!out.some((item) => item.kind === ref2.kind && item.id === ref2.id && item.version === ref2.version)) {
+      out.push(ref2);
+    }
+  }
+  return out;
+}
+async function recordDeliveredOutputHandoff(deps, facts) {
+  const warn = deps.warn ?? ((message) => console.warn(`[execution-continuity] ${message}`));
+  if (!facts.summary.trim() || facts.refs.length === 0) return null;
+  try {
+    if (deps.getAttempt) {
+      const attempt = await deps.getAttempt(facts.attemptId).catch(() => null);
+      if (!attempt?.nodeId) return null;
+    }
+    const existing = await deps.getHandoff(facts.attemptId).catch(() => null);
+    if (existing?.producedBy === "agent") return existing;
+    return await deps.handoff({
+      attemptId: facts.attemptId,
+      producedBy: "system_reconstructed",
+      outcome: "succeeded",
+      summary: facts.summary,
+      changedOutputs: mergeRefs(facts.refs, existing?.changedOutputs ?? []),
+      // 本次带来的优先；没带就把已有的机器派生内容原样带回——本次只补「交了什么」，
+      // 不该顺手抹掉终态触发器算出来的风险项。
+      unresolvedIssues: [...facts.unresolvedIssues ?? existing?.unresolvedIssues ?? []],
+      risks: [...facts.risks ?? existing?.risks ?? []],
+      nextActions: [...facts.nextActions ?? existing?.nextActions ?? []],
+      verificationGaps: [...facts.verificationGaps ?? existing?.verificationGaps ?? []],
+      ...facts.at ? { createdAt: facts.at } : {}
+    });
+  } catch (error2) {
+    warn(`\u4EA4\u4F5C\u4E1A\u4EA4\u63A5\u843D\u5E93\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u6B21\u4EA4\u7A3F\uFF09${facts.attemptId}: ${error2 instanceof Error ? error2.message : String(error2)}`);
+    return null;
+  }
+}
+var init_delivered_handoff = __esm({
+  "../server/src/domains/execution-continuity/delivered-handoff.ts"() {
+    "use strict";
+  }
+});
+
 // ../server/src/domains/execution-continuity/index.ts
 function createExecutionContinuityDomain(opts) {
   const service = new ExecutionContinuityService(opts);
@@ -183595,6 +183954,7 @@ var init_execution_continuity2 = __esm({
     init_handoff_work_bridge();
     init_upstream_handoff_input();
     init_node_conclusions();
+    init_delivered_handoff();
   }
 });
 
@@ -187121,13 +187481,24 @@ ${ctx.nodeFault}
           }
         }
         const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto38.randomUUID)();
+        const taskWithContext = coordinatorContext ? [
+          task,
+          ``,
+          `## \u5168\u5C40\u6267\u884C\u72B6\u6001\uFF08\u5148\u8BFB \`execution/COORDINATOR_VIEW.md\`\uFF09`,
+          `\u90A3\u4EFD\u6587\u4EF6\u662F\u672C\u5DE5\u5355**\u6240\u6709\u8282\u70B9**\u7684\u4E00\u6B21\u6027\u5FEB\u7167\uFF1A\u5404\u8282\u70B9\u72B6\u6001\u3001\u5361\u5728\u8C01\u8EAB\u4E0A\u3001\u5DF2\u4EA4\u4ED8\u7684\u8282\u70B9\u4EA4\u4E86\u4EC0\u4E48`,
+          `\uFF08Delivery note = \u6267\u884C\u4EBA\u4EA4\u4F5C\u4E1A\u65F6\u5199\u4E0B\u7684\u539F\u8BDD\uFF09\u3001\u52A8\u4E86\u54EA\u4E9B\u4EA7\u7269\u4E0E\u7248\u672C\u3001\u4EE5\u53CA\u672A\u51B3\u9879 / \u98CE\u9669 / \u6838\u9A8C\u7F3A\u53E3\u3002`,
+          `\u5224\u300C\u771F\u6B7B\u9501\u8FD8\u662F\u5065\u5EB7\u7B49\u5F85\u300D\u4E4B\u524D\u5148\u770B\u5B83\u2014\u2014\u53EA\u770B\u672C\u8282\u70B9\u90BB\u57DF\u5BB9\u6613\u628A\u300C\u4E0A\u6E38\u6B63\u5E38\u5728\u4EA7\u300D\u8BEF\u5224\u6210\u5361\u4F4F\u3002`,
+          `\u6CE8\u610F\u533A\u5206\u4E24\u79CD\u6458\u8981\uFF1A**Delivery note** \u662F\u6267\u884C\u4EBA\u81EA\u5DF1\u7684\u8BDD\uFF0C\u53EF\u4FE1\uFF1B**System reconstruction** \u662F\u8FDB\u7A0B`,
+          `\u7EC8\u6001\u62FC\u51FA\u6765\u7684\u673A\u5668\u4E32\uFF0C\u53EA\u8BF4\u660E\u4F1A\u8BDD\u600E\u4E48\u7ED3\u675F\u7684\uFF0C\u4E0D\u4EE3\u8868\u4E1A\u52A1\u7ED3\u8BBA\u3002`,
+          ``
+        ].join("\n") : task;
         const job = {
           actor: actorId,
           actorToken: token,
           artifactId,
           bundle: {
             files: {
-              "TASK.md": task,
+              "TASK.md": taskWithContext,
               ...coordinatorContext ? { "execution/COORDINATOR_VIEW.md": coordinatorContext } : {}
             }
           },
@@ -190284,7 +190655,7 @@ var init_postgres_trace = __esm({
         part              text,
         produced_by       text NOT NULL CHECK (produced_by IN ('agent','system_reconstructed')),
         outcome           text NOT NULL CHECK (outcome IN ('succeeded','no-output','failed','cancelled','timeout','orphaned')),
-        summary           text NOT NULL CHECK (char_length(summary) <= 400),
+        summary           text NOT NULL,
         changed_outputs   jsonb NOT NULL DEFAULT '[]'::jsonb,
         unresolved_issues jsonb NOT NULL DEFAULT '[]'::jsonb,
         risks             jsonb NOT NULL DEFAULT '[]'::jsonb,
@@ -190296,6 +190667,7 @@ var init_postgres_trace = __esm({
         await pool.query(`ALTER TABLE "${s2}".node_handoffs ADD COLUMN IF NOT EXISTS job_key text NOT NULL DEFAULT ''`);
         await pool.query(`ALTER TABLE "${s2}".node_handoffs ADD COLUMN IF NOT EXISTS part text`);
         await pool.query(`ALTER TABLE "${s2}".node_handoffs ADD COLUMN IF NOT EXISTS user_handoff jsonb`);
+        await pool.query(`ALTER TABLE "${s2}".node_handoffs DROP CONSTRAINT IF EXISTS node_handoffs_summary_check`);
         await pool.query(`
       UPDATE "${s2}".node_handoffs h
       SET job_key=COALESCE(NULLIF(h.job_key, ''), r.job_key, 'attempt:' || h.attempt_id), part=r.part
@@ -190423,6 +190795,15 @@ var init_postgres_trace = __esm({
            reconstructed_summary, NEW.output_refs, '[]'::jsonb, reconstructed_risks,
            COALESCE(latest_pending, '[]'::jsonb), reconstructed_gaps, NULL,
            COALESCE(NEW.ended_at, NEW.updated_at, NEW.started_at))
+        -- \u2605 2026-08-17\uFF1A\u7EC8\u6001\u91CD\u5EFA\u4ECE\u300C\u6574\u884C\u8986\u76D6\u300D\u6539\u6210\u300C**\u53EA\u586B\u7A7A**\u300D\u3002
+        --
+        -- \u75C5\u6839\uFF1A\u8FD9\u91CC\u539F\u672C\u5BF9\u4EFB\u4F55 produced_by <> 'agent' \u7684\u884C\u4E00\u5F8B\u7528 EXCLUDED \u8986\u76D6\u3002\u4EA4\u4F5C\u4E1A\u90A3\u4E00\u523B\u7531\u670D\u52A1\u7AEF
+        -- \u843D\u7684\u771F\u5B9E\u6458\u8981\uFF08work.conclusion\uFF09\u4E0E\u4EA4\u4ED8\u7248\u672C\uFF0C\u4F1A\u5728\u4F1A\u8BDD\u7EC8\u6001\u88AB\u6362\u6210
+        -- "[system_reconstructed] attempt=\u2026 reason=\u2026" \u8FD9\u4E32\u673A\u5668\u8BDD\u2014\u2014\u5199\u4E86\u7B49\u4E8E\u6CA1\u5199\u3002
+        --
+        -- \u65B0\u89C4\u5219\uFF1AAgent \u4EB2\u624B\u5199\u7684\u6700\u9AD8\u4F18\u5148\uFF08\u539F\u6837\u4FDD\u7559\uFF09\uFF1B\u7CFB\u7EDF\u884C\u53EA\u5728**\u8BE5\u5B57\u6BB5\u8FD8\u662F\u7A7A\u7684**\u65F6\u5019\u624D\u586B\uFF1B\u673A\u5668\u4E32
+        -- \uFF08\u4EE5 [system_reconstructed] \u5F00\u5934\uFF09\u89C6\u540C\u7A7A\uFF0C\u53EF\u88AB\u771F\u5B9E\u6458\u8981\u66FF\u6362\u3001\u4E5F\u53EF\u88AB\u65B0\u7684\u673A\u5668\u4E32\u5237\u65B0\u3002
+        -- outcome \u4F8B\u5916\uFF1A\u5B83\u63CF\u8FF0\u7684\u662F\u8FD9\u8D9F Attempt \u7684\u547D\u8FD0\uFF08\u53EF\u80FD\u5728\u4EA4\u7A3F\u540E\u624D\u5931\u8D25/\u8D85\u65F6\uFF09\uFF0C\u4EE5\u7EC8\u6001\u4E3A\u51C6\u3002
         ON CONFLICT (attempt_id) DO UPDATE SET
           produced_by=CASE
             WHEN current_handoff.produced_by = 'agent'
@@ -190434,29 +190815,46 @@ var init_postgres_trace = __esm({
           summary=CASE
             WHEN current_handoff.produced_by = 'agent'
               THEN current_handoff.summary
+            WHEN COALESCE(current_handoff.summary, '') <> ''
+              AND current_handoff.summary NOT LIKE '[system_reconstructed]%'
+              THEN current_handoff.summary
             ELSE EXCLUDED.summary
           END,
           changed_outputs=CASE
             WHEN current_handoff.produced_by = 'agent'
               THEN current_handoff.changed_outputs
+            WHEN jsonb_array_length(COALESCE(current_handoff.changed_outputs, '[]'::jsonb)) > 0
+              THEN current_handoff.changed_outputs
             ELSE EXCLUDED.changed_outputs
           END,
           unresolved_issues=CASE
             WHEN current_handoff.produced_by = 'agent'
-              THEN current_handoff.unresolved_issues ELSE EXCLUDED.unresolved_issues END,
+              THEN current_handoff.unresolved_issues
+            WHEN jsonb_array_length(COALESCE(current_handoff.unresolved_issues, '[]'::jsonb)) > 0
+              THEN current_handoff.unresolved_issues
+            ELSE EXCLUDED.unresolved_issues END,
           risks=CASE
             WHEN current_handoff.produced_by = 'agent'
-              THEN current_handoff.risks ELSE EXCLUDED.risks END,
+              THEN current_handoff.risks
+            WHEN jsonb_array_length(COALESCE(current_handoff.risks, '[]'::jsonb)) > 0
+              THEN current_handoff.risks
+            ELSE EXCLUDED.risks END,
           next_actions=CASE
             WHEN current_handoff.produced_by = 'agent'
-              THEN current_handoff.next_actions ELSE EXCLUDED.next_actions END,
+              THEN current_handoff.next_actions
+            WHEN jsonb_array_length(COALESCE(current_handoff.next_actions, '[]'::jsonb)) > 0
+              THEN current_handoff.next_actions
+            ELSE EXCLUDED.next_actions END,
           verification_gaps=CASE
             WHEN current_handoff.produced_by = 'agent'
-              THEN current_handoff.verification_gaps ELSE EXCLUDED.verification_gaps END,
+              THEN current_handoff.verification_gaps
+            WHEN jsonb_array_length(COALESCE(current_handoff.verification_gaps, '[]'::jsonb)) > 0
+              THEN current_handoff.verification_gaps
+            ELSE EXCLUDED.verification_gaps END,
           user_handoff=CASE
             WHEN current_handoff.produced_by = 'agent'
               THEN current_handoff.user_handoff
-            ELSE EXCLUDED.user_handoff
+            ELSE COALESCE(current_handoff.user_handoff, EXCLUDED.user_handoff)
           END;
         NEW.handoff_id := COALESCE(NEW.handoff_id, generated_handoff_id);
         RETURN NEW;
@@ -191259,7 +191657,6 @@ var init_postgres_trace = __esm({
       }
       async putHandoff(input) {
         if (!input.summary.trim()) throw new Error("handoff summary is required");
-        if ([...input.summary].length > 400) throw new Error("handoff summary exceeds 400 characters");
         const client = await this.pool.connect();
         try {
           await client.query("BEGIN");
@@ -194218,11 +194615,11 @@ async function startServe(opts) {
     fs28.writeFile(serverHeartbeatFile, JSON.stringify({ at: (/* @__PURE__ */ new Date()).toISOString(), pid: process.pid }) + "\n", () => {
     });
   };
+  const lock = path22.join(opts.dir, "serve.lock");
+  acquireServeLock(lock);
   writeServerHeartbeat();
   const serverHeartbeatTimer = setInterval(writeServerHeartbeat, 5e3);
   serverHeartbeatTimer.unref?.();
-  const lock = path22.join(opts.dir, "serve.lock");
-  acquireServeLock(lock);
   let activeTimeoutPolicy;
   try {
     activeTimeoutPolicy = loadPolicyFromFile(resolvePolicyFilePath());
@@ -194583,7 +194980,7 @@ async function startServe(opts) {
   const trajReader = new FsTrajectorySink(opts.dir);
   const trace = createTraceDomain({ store: traceStore, readBundleFile: (id, rel) => trajReader.readBundleFile(id, rel) });
   const traceHealth = createTraceHealth();
-  const continuityModeRaw = process.env["OASIS_EXECUTION_CONTINUITY_MODE"]?.trim() || "off";
+  const continuityModeRaw = process.env["OASIS_EXECUTION_CONTINUITY_MODE"]?.trim() || "record";
   if (!(continuityModeRaw === "off" || continuityModeRaw === "record" || continuityModeRaw === "resume")) {
     throw new Error(`OASIS_EXECUTION_CONTINUITY_MODE must be off|record|resume, received ${continuityModeRaw}`);
   }
@@ -194632,7 +195029,9 @@ async function startServe(opts) {
       return snap ? nodeConclusionsFromSnapshot(snap) : {};
     }
   });
-  console.log(`[serve] execution-continuity mode=${continuityMode}\uFF08record=\u5BF9\u7167\u7EC4\uFF0Cresume=\u6062\u590D\u5305\u5B9E\u9A8C\u7EC4\uFF09`);
+  console.log(
+    `[serve] execution-continuity mode=${continuityMode}\uFF08off=\u5168\u5173\uFF1Brecord/resume \u884C\u4E3A\u4E00\u81F4\uFF1A\u8BB0 checkpoint + \u4E2D\u65AD\u65F6\u6CE8\u6062\u590D\u5305\u3002A/B \u5B9E\u9A8C\u5DF2\u7ED3\u675F\uFF0Cresume \u4EC5\u4E3A\u517C\u5BB9\u4FDD\u7559\uFF09${process.env["OASIS_EXTERNAL_EFFECT_CAPTURE"] === "1" ? "\uFF1B\u5916\u90E8\u526F\u4F5C\u7528\u62E6\u622A\uFF1A\u5F00" : ""}`
+  );
   const automationStore = pgPool ? await PostgresAutomationStore.open(pgPool, pgSchema) : new MemoryAutomationStore();
   console.log(`[serve] \u81EA\u52A8\u5316\u4F53\u7CFB\uFF1A${pgPool ? `Postgres schema=${pgSchema}` : "\u5185\u5B58 dev store"}`);
   const automations = createAutomationsDomain({ store: automationStore, kernel });
@@ -195382,9 +195781,36 @@ async function startServe(opts) {
       ...await materializeSkillFiles({ service: actors.service, actorId, runtimeKind })
     }),
     uploadChatAttachment: async ({ contentBase64 }) => ({ blobRef: await assets.put(new Uint8Array(Buffer.from(contentBase64, "base64"))) }),
-    onDispatchCommandCompleted: async ({ dispatchId, durableRefs, at }) => {
-      traceStoreSink.checkpoint(dispatchId, { trigger: "important_output", durableRefs, at });
+    onDispatchCommandCompleted: async ({ dispatchId, command, durableRefs, at, delivered }) => {
+      traceStoreSink.checkpoint(dispatchId, {
+        trigger: "important_output",
+        // 交作业的那条命令带着版本号（`wk:<节点>:<n>`），比笼统的「动过这个产物」有用得多——
+        // 下一趟接手时据它知道上一趟已经交到哪一版。其余持久化命令仍记粗粒度引用。
+        durableRefs: delivered?.refs ?? durableRefs,
+        // 稳定步骤 id = 命令名：同一步骤重跑时 id 一致（checkpoint 契约对 stable id 的要求），
+        // 恢复时下一趟能看出「上一趟已经 propose 过 / 已经 gap 过」。
+        completedStepIds: [command],
+        at
+      });
       await traceStoreSink.flush(dispatchId);
+      if (!delivered) return;
+      await recordDeliveredOutputHandoff(
+        {
+          getAttempt: (attemptId) => traceStore.getAttempt(attemptId),
+          getHandoff: (attemptId) => traceStore.getHandoff(attemptId),
+          handoff: (input) => executionContinuity.service.handoff(input)
+        },
+        {
+          attemptId: dispatchId,
+          summary: delivered.summary,
+          refs: delivered.refs,
+          ...delivered.unresolvedIssues ? { unresolvedIssues: delivered.unresolvedIssues } : {},
+          ...delivered.risks ? { risks: delivered.risks } : {},
+          ...delivered.nextActions ? { nextActions: delivered.nextActions } : {},
+          ...delivered.verificationGaps ? { verificationGaps: delivered.verificationGaps } : {},
+          at
+        }
+      );
     },
     dispatchProduce: async ({ artifactId, actorId, part, companyId }) => {
       const d = dispatchers.get(companyId ?? defaultCompanyId);
@@ -196128,7 +196554,7 @@ async function startServe(opts) {
           const rev = kernelModel.revisions.get(workId);
           if (!rev) return;
           if (rev.state === "merged") return;
-          const replyIssueId = rev.replyToIssueId ?? null;
+          const replyIssueId = rev.replyIssueId ?? null;
           console.log(`[new-engine] dispatchWork ${workId} \u2192 ${rev.artifactId} / ${rev.author}${replyIssueId ? `\uFF08\u56DE\u4FE1 ${replyIssueId}\uFF09` : ""}`);
           const art = kernelModel.artifacts.get(rev.artifactId);
           const wid = art?.workspace ?? "";
@@ -196432,7 +196858,7 @@ async function startServe(opts) {
             artifactId ? await resolveDispatchScope(artifactId) : void 0,
             (key) => emitBrokerRefused(actorId, artifactId, key)
           );
-          return continuityMode === "off" ? provision : { ...provision, env: { ...provision.env, OASIS_EXTERNAL_EFFECT_CAPTURE: "1" } };
+          return process.env["OASIS_EXTERNAL_EFFECT_CAPTURE"] === "1" ? { ...provision, env: { ...provision.env, OASIS_EXTERNAL_EFFECT_CAPTURE: "1" } } : provision;
         },
         resolveActorContext: async (actorId) => buildActorContext((await runActors()).service, actorId),
         // 收尾评审的角色分工段（reviewer 此前彼此不知道对方存在 → 越界 / 重复劳动）。
@@ -196486,13 +196912,15 @@ async function startServe(opts) {
           getHandoff: (attemptId) => traceStore.getHandoff(attemptId)
         }),
         executionContinuityInstructions: continuityMode === "off" ? renderBusinessHandoffProtocol() : renderContinuityProtocol(),
-        ...continuityMode === "resume" ? {
+        // ★ 恢复包注入（2026-08-17）：从「只有 resume 实验组才给」改成「只要账本开着就给」——
+        // A/B 实验早已结束，record 与 resume 现在行为一致（resume 值保留只为兼容既有部署变量）。
+        ...continuityMode !== "off" ? {
           resolveExecutionResumePack: async (artifactId, workOrderId, scope) => {
             const pack = await executionContinuity.service.resumePack(workOrderId, artifactId, companyId, {
               jobKey: scope.jobKey,
               part: scope.part ?? null
             });
-            return pack ? renderResumePack(pack) : null;
+            return shouldInjectResumePack(pack) ? renderResumePack(pack) : null;
           }
         } : {},
         schema: liveSchemaMap,
@@ -198612,9 +199040,16 @@ var COMMAND_DECLS = {
       { name: "rebase-of", desc: "\u628A\u4E00\u6761 queued revision \u6539 base \u540E\u91CD\u6302" },
       { name: "checkpoint", desc: "\u65AD\u70B9\u7EED\u4F20\u6807\u8BB0" },
       { name: "continue", desc: "\u7EE7\u7EED\u4E0A\u6B21\u65AD\u70B9" },
-      { name: "resolves", desc: "\u672C\u7248\u663E\u5F0F\u7B54\u590D\u7684\u4FE1\uFF08\u9017\u53F7\u5206\u9694 annotationId\uFF09\u3002\u5E38\u89C4\u4E0D\u7528\u586B\u2014\u2014\u7CFB\u7EDF\u6309\u6D3E\u53D1\u70B9\u540D\u96C6\u81EA\u52A8\u76D6\u7AE0\uFF1B\u53EA\u5728\u4E2D\u9014\u7ECF status \u53D1\u73B0\u7684\u4FE1\u7B49\u7279\u4F8B\u7528" }
+      { name: "resolves", desc: "\u672C\u7248\u663E\u5F0F\u7B54\u590D\u7684\u4FE1\uFF08\u9017\u53F7\u5206\u9694 annotationId\uFF09\u3002\u5E38\u89C4\u4E0D\u7528\u586B\u2014\u2014\u7CFB\u7EDF\u6309\u6D3E\u53D1\u70B9\u540D\u96C6\u81EA\u52A8\u76D6\u7AE0\uFF1B\u53EA\u5728\u4E2D\u9014\u7ECF status \u53D1\u73B0\u7684\u4FE1\u7B49\u7279\u4F8B\u7528" },
+      { name: "unresolved", desc: "\u7559\u7ED9\u4E0B\u6E38\u7684\u672A\u51B3\u4E8B\u9879\uFF08\u5206\u53F7\u5206\u9694\uFF09\u3002\u5199\u8FDB\u672C\u8282\u70B9\u7684\u6280\u672F\u4EA4\u63A5\uFF0C\u4E0B\u6E38\u5F00\u5DE5\u524D\u4F1A\u8BFB\u5230" },
+      { name: "risks", desc: "\u4E0B\u6E38\u8BE5\u77E5\u9053\u7684\u98CE\u9669\uFF08\u5206\u53F7\u5206\u9694\uFF09" },
+      { name: "next", desc: "\u5EFA\u8BAE\u4E0B\u6E38\u63A5\u7740\u505A\u4EC0\u4E48\uFF08\u5206\u53F7\u5206\u9694\uFF09" },
+      { name: "gaps", desc: "\u4F60\u6CA1\u80FD\u6838\u9A8C\u7684\u90E8\u5206\uFF08\u5206\u53F7\u5206\u9694\uFF09\u2014\u2014\u522B\u8BA9\u4E0B\u6E38\u4EE5\u4E3A\u5DF2\u9A8C\u8FC7" }
     ],
-    examples: ['oasis propose artifact:dev:abc-123 --from-dir deliverable/ --reason "\u4FEE\u590D\u767B\u5F55\u9875\u767D\u5C4F"']
+    examples: [
+      'oasis propose artifact:dev:abc-123 --from-dir deliverable/ --reason "\u4FEE\u590D\u767B\u5F55\u9875\u767D\u5C4F"',
+      'oasis propose artifact:dev:abc-123 --reason "\u63A5\u53E3\u8054\u8C03\u5B8C\u6210" --unresolved "\u7EBF\u4E0A\u914D\u989D\u6CA1\u786E\u8BA4" --gaps "\u6CA1\u8DD1\u538B\u6D4B"'
+    ]
   },
   queue: {
     group: "\u7248\u672C\u673A\uFF08\xA75\uFF09",
@@ -199896,6 +200331,11 @@ function needPos(positional, i, usage) {
   if (v2 === void 0) throw new Error(`\u7528\u6CD5: ${usage}`);
   return v2;
 }
+function semicolonList(raw, field) {
+  if (raw === void 0) return {};
+  const items = raw.split(";").map((x2) => x2.trim()).filter(Boolean);
+  return items.length > 0 ? { [field]: items } : {};
+}
 async function readStdin() {
   if (process.stdin.isTTY) return "";
   const chunks = [];
@@ -201282,7 +201722,15 @@ ${res.warning}`);
         ...checkpoint ? { continuation: { checkpoint: true, continue: true } } : {},
         // 申报单（B 部）：显式增补"本版答复的信"（逗号分隔 annotationId）。常规不用填——系统按派发点名集
         // 自动盖章；只在中途经 status 发现的信等特例用。
-        ...flags.get("resolves") !== void 0 ? { resolves: flags.get("resolves").split(",").map((x2) => x2.trim()).filter(Boolean) } : {}
+        ...flags.get("resolves") !== void 0 ? { resolves: flags.get("resolves").split(",").map((x2) => x2.trim()).filter(Boolean) } : {},
+        // 技术交接的四项「系统看不见的东西」（2026-08-17）：交作业时顺手带上，服务端写进本节点的
+        // NodeHandoff。**不必再等会话终态另跑 `oasis continuity-handoff`**——那条命令的说明书在
+        // execution/CONTINUITY.md 里，而 adapter 只把 TASK.md 当提示词，线上因此只有 3.6% 的节点写到了。
+        // 分号分隔；一条都不填也完全正常（摘要与交付版本系统自己会记）。
+        ...semicolonList(flags.get("unresolved"), "unresolvedIssues"),
+        ...semicolonList(flags.get("risks"), "risks"),
+        ...semicolonList(flags.get("next"), "nextActions"),
+        ...semicolonList(flags.get("gaps"), "verificationGaps")
       });
       println(message);
       break;
@@ -202556,7 +203004,7 @@ function syncRuntimeAssets(candidateRoots, binDir) {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.1.106" : "dev";
+var PKG_VERSION = true ? "0.1.108" : "dev";
 var OASIS_DIR = path28.join(os11.homedir(), ".oasis");
 var CONFIG_FILE = path28.join(OASIS_DIR, "node-config.json");
 var PID_FILE = path28.join(OASIS_DIR, "node.pid");