oasis_test 0.1.121 → 0.1.122

package/dist/index.js

@@ -2877,11 +2877,18 @@ var init_execution_continuity = __esm({
 });
 
 // ../contract/src/automation.ts
-var AUTOMATION_EVENT_NAMES;
+function normalizeChatTarget(raw) {
+  if (raw?.mode === "existing_session" && typeof raw.sessionId === "string" && raw.sessionId) {
+    return { mode: "existing_session", sessionId: raw.sessionId };
+  }
+  return DEFAULT_CHAT_TARGET;
+}
+var AUTOMATION_EVENT_NAMES, DEFAULT_CHAT_TARGET;
 var init_automation = __esm({
   "../contract/src/automation.ts"() {
     "use strict";
     AUTOMATION_EVENT_NAMES = ["workorder.completed"];
+    DEFAULT_CHAT_TARGET = { mode: "new_session" };
   }
 });
 
@@ -2899,6 +2906,19 @@ var init_chat = __esm({
   }
 });
 
+// ../contract/src/chat-turn.ts
+function automationTurnSourceRunId(automationRunId) {
+  return `automation:${automationRunId}`;
+}
+function automationTurnMessageKey(automationRunId) {
+  return `automation-message:${automationRunId}`;
+}
+var init_chat_turn = __esm({
+  "../contract/src/chat-turn.ts"() {
+    "use strict";
+  }
+});
+
 // ../contract/src/knowledge.ts
 var init_knowledge = __esm({
   "../contract/src/knowledge.ts"() {
@@ -2952,6 +2972,7 @@ var init_src2 = __esm({
     init_automation();
     init_playbook();
     init_chat();
+    init_chat_turn();
     init_knowledge();
     init_http_api();
   }
@@ -18615,6 +18636,111 @@ var init_command_policy = __esm({
   }
 });
 
+// ../server/src/chat-turn-gate.ts
+function localTurnSourceRunId(source, turnId) {
+  return `${source}:${turnId}`;
+}
+function localTurnMessageKey(source, turnId) {
+  return `${source}-message:${turnId}`;
+}
+async function openChatTurn(args) {
+  const turns = args.turns;
+  if (!turns) return { ok: true, turn: null };
+  const nowIso = args.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+  const turnId = (args.newId ?? import_node_crypto4.randomUUID)();
+  const messageKey = localTurnMessageKey(args.source, turnId);
+  const claim = await turns.claimTurn({
+    turnId,
+    chatSessionId: args.chatSessionId,
+    source: args.source,
+    sourceRunId: localTurnSourceRunId(args.source, turnId),
+    messageKey,
+    reservedAt: nowIso()
+  });
+  if (claim.outcome === "busy") return { ok: false, activeTurn: claim.activeTurn };
+  const id = claim.turn.id;
+  let settled = false;
+  return {
+    ok: true,
+    turn: {
+      id,
+      messageKey: claim.turn.messageKey,
+      async start(handles) {
+        await turns.settleTurn(id, {
+          status: "running",
+          startedAt: nowIso(),
+          ...handles.assistantRunId ? { assistantRunId: handles.assistantRunId } : {},
+          ...handles.dispatchId ? { dispatchId: handles.dispatchId } : {}
+        }).catch((e) => args.log?.(`[chat-turn] \u8F6E\u6B21\u8F6C running \u5931\u8D25 ${id}: ${String(e)}`));
+      },
+      async settle(patch) {
+        if (settled) return;
+        settled = true;
+        await turns.settleTurn(id, patch).catch((e) => args.log?.(`[chat-turn] \u8F6E\u6B21\u6536\u53E3\u5931\u8D25 ${id}: ${String(e)}`));
+      }
+    }
+  };
+}
+async function reconcileChatTurn(turn, deps) {
+  if (deps.isOwned?.(turn)) return { settled: false, turnId: turn.id, reason: "owned" };
+  const grace = deps.noRunGraceMs ?? 10 * 6e4;
+  const age = deps.now - Date.parse(turn.reservedAt);
+  const runId = turn.assistantRunId ?? turn.dispatchId;
+  if (!runId) {
+    if (age < grace) return { settled: false, turnId: turn.id, reason: "in_grace" };
+    await deps.turns.settleTurn(turn.id, {
+      status: "orphaned",
+      completedAt: new Date(deps.now).toISOString(),
+      lastError: "\u5360\u4F4D\u540E\u672A\u63D0\u4EA4 runtime\uFF08\u8FDB\u7A0B\u4E2D\u65AD\uFF09\uFF0C\u8D85\u5BBD\u9650\u5224\u5B64\u513F\u5E76\u91CA\u653E\u4F1A\u8BDD\u69FD"
+    });
+    return { settled: true, turnId: turn.id, status: "orphaned", reason: "\u5360\u4F4D\u540E\u672A\u63D0\u4EA4 runtime" };
+  }
+  const run = await deps.getRun(runId).catch(() => null);
+  if (run && (run.status === "running" || run.status === "queued")) {
+    return { settled: false, turnId: turn.id, reason: "still_running" };
+  }
+  if (!run) {
+    if (age < grace) return { settled: false, turnId: turn.id, reason: "in_grace" };
+    await deps.turns.settleTurn(turn.id, {
+      status: "orphaned",
+      completedAt: new Date(deps.now).toISOString(),
+      lastError: `\u8D26\u672C\u67E5\u65E0 run ${runId}\uFF0C\u8D85\u5BBD\u9650\u5224\u5B64\u513F\u5E76\u91CA\u653E\u4F1A\u8BDD\u69FD`
+    });
+    return { settled: true, turnId: turn.id, status: "orphaned", reason: `\u8D26\u672C\u67E5\u65E0 run ${runId}` };
+  }
+  const status = run.status === "succeeded" ? "succeeded" : run.status === "cancelled" ? "cancelled" : "failed";
+  await deps.turns.settleTurn(turn.id, {
+    status,
+    completedAt: run.endedAt ?? new Date(deps.now).toISOString(),
+    ...status === "succeeded" ? {} : { lastError: `run ${runId} \u7EC8\u6001 ${run.status}\uFF08\u7531\u6062\u590D\u5668\u6536\u53E3\uFF09` }
+  });
+  return { settled: true, turnId: turn.id, status, reason: `run \u7EC8\u6001 ${run.status}` };
+}
+async function sweepStaleChatTurns(deps) {
+  const before = new Date(deps.now - (deps.staleAfterMs ?? 2 * 6e4)).toISOString();
+  const stale = await deps.turns.listStaleActiveTurns(before, deps.limit ?? 50);
+  const settled = [];
+  for (const turn of stale) {
+    const outcome = await reconcileChatTurn(turn, deps).catch((e) => {
+      deps.log?.(`[chat-turn-sweep] \u6838\u5B9E\u8F6E\u6B21 ${turn.id} \u5931\u8D25: ${String(e)}`);
+      return null;
+    });
+    if (!outcome?.settled) continue;
+    settled.push(outcome);
+    deps.log?.(
+      `[chat-turn-sweep] \u8F6E\u6B21 ${turn.id}\uFF08\u4F1A\u8BDD ${turn.chatSessionId}\uFF09\u6536\u53E3\u4E3A ${outcome.status}\uFF08${outcome.reason}\uFF09\uFF0C\u4F1A\u8BDD\u69FD\u5DF2\u91CA\u653E`
+    );
+  }
+  return settled;
+}
+var import_node_crypto4;
+var init_chat_turn_gate = __esm({
+  "../server/src/chat-turn-gate.ts"() {
+    "use strict";
+    import_node_crypto4 = require("node:crypto");
+  }
+});
+
 // ../channels/src/memory-store.ts
 var init_memory_store = __esm({
   "../channels/src/memory-store.ts"() {
@@ -18800,11 +18926,11 @@ var init_parse = __esm({
 
 // ../channels/src/feishu/crypto.ts
 function decryptFeishu(encrypt, encryptKey) {
-  const key = (0, import_node_crypto4.createHash)("sha256").update(encryptKey).digest();
+  const key = (0, import_node_crypto5.createHash)("sha256").update(encryptKey).digest();
   const data = Buffer.from(encrypt, "base64");
   const iv = data.subarray(0, 16);
   const ciphertext = data.subarray(16);
-  const decipher = (0, import_node_crypto4.createDecipheriv)("aes-256-cbc", key, iv);
+  const decipher = (0, import_node_crypto5.createDecipheriv)("aes-256-cbc", key, iv);
   decipher.setAutoPadding(true);
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
 }
@@ -18838,11 +18964,11 @@ function verifyToken(decoded, expected) {
   const token = headerToken ?? decoded["token"];
   return token === expected;
 }
-var import_node_crypto4;
+var import_node_crypto5;
 var init_crypto = __esm({
   "../channels/src/feishu/crypto.ts"() {
     "use strict";
-    import_node_crypto4 = require("node:crypto");
+    import_node_crypto5 = require("node:crypto");
   }
 });
 
@@ -18978,11 +19104,12 @@ var init_src6 = __esm({
 function errMsg(e) {
   return e instanceof Error ? e.message : String(e);
 }
-var import_node_crypto5, FEISHU, ChannelService, CardStreamer;
+var import_node_crypto6, FEISHU, ChannelService, CardStreamer;
 var init_service = __esm({
   "../server/src/channels/service.ts"() {
     "use strict";
-    import_node_crypto5 = require("node:crypto");
+    import_node_crypto6 = require("node:crypto");
+    init_chat_turn_gate();
     init_src6();
     FEISHU = "feishu";
     ChannelService = class {
@@ -19062,7 +19189,7 @@ var init_service = __esm({
             return existing.chatSessionId;
           }
         }
-        const id = (0, import_node_crypto5.randomUUID)();
+        const id = (0, import_node_crypto6.randomUUID)();
         const now = this.now();
         if (cs) {
           const rt = await this.deps.resolveRuntime?.(a.aiActorId).catch(() => null);
@@ -19098,8 +19225,20 @@ var init_service = __esm({
         if (cs) {
           const sess = await cs.getSession(intent.chatSessionId).catch(() => null);
           resumeRt = sess?.runtimeSessionId ?? void 0;
-          await cs.appendMessage({ id: (0, import_node_crypto5.randomUUID)(), sessionId: intent.chatSessionId, role: "user", content: intent.message, createdAt: this.now() }).catch(() => void 0);
+          await cs.appendMessage({ id: (0, import_node_crypto6.randomUUID)(), sessionId: intent.chatSessionId, role: "user", content: intent.message, createdAt: this.now() }).catch(() => void 0);
         }
+        const opened = await openChatTurn({
+          turns: this.deps.chatTurns,
+          chatSessionId: intent.chatSessionId,
+          source: "channel",
+          now: () => this.now(),
+          log: (m2) => this.log(m2)
+        });
+        if (!opened.ok) {
+          await client.sendText(intent.chatId, "\u23F3 \u4E0A\u4E00\u6761\u8FD8\u5728\u5904\u7406\u4E2D\uFF0C\u7B49\u5B83\u8DD1\u5B8C\u518D\u53D1\u8FD9\u6761\u5427\uFF08\u8FD9\u6B21\u6CA1\u6709\u6392\u961F\uFF09\u3002").catch(() => void 0);
+          return;
+        }
+        const held = opened.turn;
         let session;
         try {
           session = await this.deps.dispatchChat({
@@ -19109,18 +19248,21 @@ var init_service = __esm({
             ...resumeRt ? { sessionId: resumeRt } : {}
           });
         } catch (err) {
+          await held?.settle({ status: "failed", completedAt: this.now(), lastError: errMsg(err) });
           await client.sendText(intent.chatId, `\u26A0\uFE0F \u6682\u65F6\u65E0\u6CD5\u5904\u7406\uFF1A${errMsg(err)}`).catch(() => void 0);
           return;
         }
+        await held?.start({ assistantRunId: session.runId ?? null, dispatchId: session.runId ?? null });
         const streamer = new CardStreamer(client, intent.chatId, this.cardIntervalMs, this.log);
         session.onOutput((chunk) => streamer.push(chunk));
         void session.done.then(async () => {
+          await held?.settle({ status: "succeeded", completedAt: this.now() });
           await streamer.finalize();
           if (cs) {
             const reply = streamer.text();
             if (reply || session.runId) {
               await cs.appendMessage({
-                id: (0, import_node_crypto5.randomUUID)(),
+                id: (0, import_node_crypto6.randomUUID)(),
                 sessionId: intent.chatSessionId,
                 role: "assistant",
                 content: reply,
@@ -19137,6 +19279,7 @@ var init_service = __esm({
             }).catch(() => void 0);
           }
         }).catch(async (err) => {
+          await held?.settle({ status: "failed", completedAt: this.now(), lastError: errMsg(err) });
           await streamer.error(errMsg(err));
         });
       }
@@ -40197,7 +40340,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes9, createHash: createHash21 } = require("crypto");
+    var { randomBytes: randomBytes9, createHash: createHash22 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -40865,7 +41008,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash21("sha1").update(key + GUID).digest("base64");
+        const digest = createHash22("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -41234,7 +41377,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash21 } = require("crypto");
+    var { createHash: createHash22 } = require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -41541,7 +41684,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash21("sha1").update(key + GUID).digest("base64");
+        const digest = createHash22("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -149144,7 +149287,7 @@ function slug4(name) {
   return s2 || "user";
 }
 function short6() {
-  return (0, import_node_crypto6.randomBytes)(4).toString("hex").slice(0, 6);
+  return (0, import_node_crypto7.randomBytes)(4).toString("hex").slice(0, 6);
 }
 async function assertBindingWritePermission(caller, targetHumanId, deps) {
   if (caller === targetHumanId) return true;
@@ -149209,11 +149352,11 @@ async function resolveWorkorderPrincipals(caller, cliOverrides, deps) {
   }
   return { error: "UNBOUND_AGENT_NO_OWNER", message: `owner \u65E0\u6CD5\u89E3\u6790\uFF1A\u8C03\u7528\u65B9 ${caller} \u65E2\u975E\u5728\u5C97\u771F\u4EBA\u4E5F\u975E\u5DF2\u7ED1\u52A9\u7406` };
 }
-var import_node_crypto6, DEFAULT_ASSISTANT_PROMPT, DEFAULT_ASSISTANT_SKILLS, DEFAULT_ASSISTANT_RUNTIME_KIND, ASSISTANT_ARCHIVED_CODE, AssistantLazyCreateError, AssistantsService;
+var import_node_crypto7, DEFAULT_ASSISTANT_PROMPT, DEFAULT_ASSISTANT_SKILLS, DEFAULT_ASSISTANT_RUNTIME_KIND, ASSISTANT_ARCHIVED_CODE, AssistantLazyCreateError, AssistantsService;
 var init_assistants = __esm({
   "../server/src/domains/actors/assistants.ts"() {
     "use strict";
-    import_node_crypto6 = require("node:crypto");
+    import_node_crypto7 = require("node:crypto");
     init_src2();
     DEFAULT_ASSISTANT_PROMPT = "\u4F60\u662F\u8FD9\u540D\u771F\u4EBA\u5458\u5DE5\u7684\u4E13\u5C5E\u4E2A\u4EBA\u52A9\u7406\u3002\u4F60\u4EE5\u5176\u300C\u5DE5\u5355\u7BA1\u7406\u8005\u300D\u8EAB\u4EFD\u4EE3\u8DD1\uFF0C\u9075\u5FAA\u4E09\u6863\u6743\u9650\u6A21\u578B\uFF1A\u6863 A\uFF08\u52A0\u8FB9\u3001\u65B0\u5EFA\u8282\u70B9\u3001\u6539\u6807\u9898\u4E0E brief\u3001\u5E38\u89C4\u8BC4\u8BBA\u7B54\u7591\u3001\u63A8\u8FDB\u81EA\u5DF1\u63A5\u7684\u6D3B\uFF09\u53EF\u9006\u6539\u52A8\u76F4\u63A5\u751F\u6548\uFF1B\u6863 B\uFF08\u65AD\u8FB9\u3001\u5E9F\u8282\u70B9\u3001\u6539\u6D3E\u3001\u64A4\u90E8\u4EF6\uFF09\u9500\u6BC1\u6027\u6539\u52A8\u81EA\u52A8\u6253\u5305\u6210\u5F85\u786E\u8BA4\u63D0\u6848\uFF0C\u4EA4\u7531\u672C\u4EBA\u786E\u8BA4\u540E\u751F\u6548\uFF1B\u6863 C\uFF08force-conclude\u3001promote \u7B49\u6CBB\u7406\u547D\u4EE4\uFF09\u8D70\u4EBA\u5DE5\u6388\u6743\u5361\u3002\u4F60\u4E0D\u627F\u62C5\u4E1A\u52A1\u4E13\u4E1A\u5C97\u4F4D\u804C\u8D23\uFF0C\u53EA\u5728\u5176\u6388\u6743\u8303\u56F4\u5185\u534F\u52A9\u5EFA\u5355\u3001\u8DDF\u8FDB\u4E0E\u6C9F\u901A\u3002";
     DEFAULT_ASSISTANT_SKILLS = [];
@@ -151488,6 +151631,59 @@ var init_injected_context = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/continuation.ts
+function chatNodeChanged(recorded, current) {
+  const nodeChanged = Boolean(recorded?.nodeId && current?.nodeId && recorded.nodeId !== current.nodeId);
+  const kindChanged = Boolean(recorded?.runtimeKind && current?.runtimeKind && recorded.runtimeKind !== current.runtimeKind);
+  return nodeChanged || kindChanged;
+}
+function toHistory(messages, excludeMessageKey) {
+  return messages.filter((m2) => m2.role !== "system" && !(m2.role === "assistant" && m2.status === "running")).filter((m2) => !excludeMessageKey || m2.messageKey !== excludeMessageKey).map((m2) => ({
+    role: m2.role,
+    content: m2.role === "user" ? stripInjectedChatContext(m2.content) : m2.content
+  }));
+}
+async function planChatContinuation(input) {
+  const { session } = input;
+  const currentRuntimeId = input.currentRuntime?.nodeId ?? null;
+  const currentRuntimeKind = input.currentRuntime?.runtimeKind ?? null;
+  const runtimeChanged = chatNodeChanged(
+    { nodeId: session.runtimeId, runtimeKind: session.runtimeKind },
+    { nodeId: currentRuntimeId, runtimeKind: currentRuntimeKind }
+  );
+  const limit = input.historyLimit ?? 20;
+  const effectiveSessionId = runtimeChanged ? void 0 : session.runtimeSessionId ?? void 0;
+  const needsHistoryInjection = runtimeChanged || !session.runtimeSessionId;
+  const readHistory = async () => toHistory(await input.listMessages(session.id, limit), input.excludeMessageKey);
+  const history = needsHistoryInjection ? await readHistory() : [];
+  const runtimeMessage = buildRuntimeChatPrompt({
+    userMessage: input.userMessage,
+    ...history.length ? { history } : {},
+    ...input.draftWorkspace ? { draftWorkspace: input.draftWorkspace } : {}
+  });
+  const fallbackHistory = effectiveSessionId ? await readHistory() : [];
+  const fallbackMessage = fallbackHistory.length ? buildRuntimeChatPrompt({
+    userMessage: input.userMessage,
+    history: fallbackHistory,
+    ...input.draftWorkspace ? { draftWorkspace: input.draftWorkspace } : {}
+  }) : void 0;
+  return {
+    runtimeMessage,
+    ...fallbackMessage ? { fallbackMessage } : {},
+    ...effectiveSessionId ? { effectiveSessionId } : {},
+    runtimeChanged,
+    currentRuntimeId,
+    currentRuntimeKind,
+    injectedHistoryCount: history.length
+  };
+}
+var init_continuation = __esm({
+  "../server/src/domains/chat-sessions/continuation.ts"() {
+    "use strict";
+    init_injected_context();
+  }
+});
+
 // ../server/src/domains/knowledge/config-store.ts
 function normalizedHttpUrl(value, field, allowEmpty = false) {
   if (allowEmpty && (value === void 0 || value === null || value === "")) return "";
@@ -151637,11 +151833,11 @@ var init_config_store = __esm({
 function clone2(value) {
   return structuredClone(value);
 }
-var import_node_crypto7, import_promises2, import_node_path2, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
+var import_node_crypto8, import_promises2, import_node_path2, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
 var init_run_store = __esm({
   "../server/src/domains/knowledge/run-store.ts"() {
     "use strict";
-    import_node_crypto7 = require("node:crypto");
+    import_node_crypto8 = require("node:crypto");
     import_promises2 = require("node:fs/promises");
     import_node_path2 = require("node:path");
     MemoryKnowledgeRunStore = class {
@@ -151758,7 +151954,7 @@ var init_run_store = __esm({
       }
       async persist(runs) {
         const shape = { version: 1, runs };
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto7.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto8.randomUUID)()}.tmp`;
         try {
           await (0, import_promises2.writeFile)(temp, `${JSON.stringify(shape, null, 2)}
 `, { mode: 384 });
@@ -152301,11 +152497,11 @@ function retryableKnowledgeRun(record8) {
   const latestAnswerAttempt = [...record8.attempts ?? []].reverse().find((attempt) => attempt.kind !== "fast");
   return record8.status === "succeeded" && record8.request.action === "ask" && record8.executionHealth === "degraded" && latestAnswerAttempt?.status === "failed";
 }
-var import_node_crypto8, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
+var import_node_crypto9, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
 var init_service2 = __esm({
   "../server/src/domains/knowledge/service.ts"() {
     "use strict";
-    import_node_crypto8 = require("node:crypto");
+    import_node_crypto9 = require("node:crypto");
     init_src5();
     init_config_store();
     init_run_store();
@@ -152347,7 +152543,7 @@ var init_service2 = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-        this.id = options.id ?? import_node_crypto8.randomUUID;
+        this.id = options.id ?? import_node_crypto9.randomUUID;
         this.runStore = options.runStore ?? new MemoryKnowledgeRunStore();
         this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
         this.leaseMs = options.leaseMs ?? LEASE_MS;
@@ -153612,7 +153808,7 @@ function trustedKnowledgeInvocationId(body, turn) {
   if (body.action !== "ask") return void 0;
   const scope = turn?.artifactId ?? turn?.dispatchId;
   if (!scope) return void 0;
-  const fingerprint = (0, import_node_crypto9.createHash)("sha256").update(JSON.stringify({
+  const fingerprint = (0, import_node_crypto10.createHash)("sha256").update(JSON.stringify({
     action: body.action,
     message: body.message?.trim() ?? "",
     queryMode: body.queryMode === "deep" ? "deep" : "fast"
@@ -153711,11 +153907,11 @@ function knowledgeRoutes(service) {
     });
   };
 }
-var import_node_crypto9;
+var import_node_crypto10;
 var init_routes = __esm({
   "../server/src/domains/knowledge/routes.ts"() {
     "use strict";
-    import_node_crypto9 = require("node:crypto");
+    import_node_crypto10 = require("node:crypto");
     init_src5();
     init_router();
   }
@@ -154920,7 +155116,7 @@ function createAppJwt(appId, privateKeyPem, nowMs) {
     exp: nowSec + JWT_TTL_SEC,
     iss: appId
   }));
-  const signer = (0, import_node_crypto10.createSign)("RSA-SHA256");
+  const signer = (0, import_node_crypto11.createSign)("RSA-SHA256");
   signer.update(`${header}.${payload}`);
   signer.end();
   return `${header}.${payload}.${b64url(signer.sign(privateKeyPem))}`;
@@ -155024,11 +155220,11 @@ async function exchangeManifestCode(code, deps = {}) {
     ...typeof body["webhook_secret"] === "string" ? { webhookSecret: body["webhook_secret"] } : {}
   };
 }
-var import_node_crypto10, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
+var import_node_crypto11, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
 var init_app_auth = __esm({
   "../connectors/src/github/app-auth.ts"() {
     "use strict";
-    import_node_crypto10 = require("node:crypto");
+    import_node_crypto11 = require("node:crypto");
     GITHUB_API = "https://api.github.com";
     JWT_TTL_SEC = 9 * 60;
     JWT_IAT_SKEW_SEC = 60;
@@ -157288,7 +157484,7 @@ var init_readiness = __esm({
 function deriveBoardKey(artifactId) {
   const tail = artifactId.split(":").pop() ?? artifactId;
   const ascii = tail.replace(/[^a-zA-Z0-9-]+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "").slice(0, 24);
-  const sha8 = (0, import_node_crypto11.createHash)("sha256").update(artifactId).digest("hex").slice(0, 8);
+  const sha8 = (0, import_node_crypto12.createHash)("sha256").update(artifactId).digest("hex").slice(0, 8);
   return ascii ? `od-${ascii}-${sha8}` : `od-${sha8}`;
 }
 async function odApi(base, fetchImpl, method, p2, body) {
@@ -157331,7 +157527,7 @@ function materializeContext(resolvedDir, files) {
   }
 }
 async function putVisibleUserTurn(base, fetchImpl, args) {
-  const messageId = (0, import_node_crypto11.randomUUID)();
+  const messageId = (0, import_node_crypto12.randomUUID)();
   await odApi(
     base,
     fetchImpl,
@@ -157346,8 +157542,8 @@ async function startDesignRun(base, fetchImpl, args) {
     agentId: args.agentId,
     projectId: args.boardKey,
     conversationId: args.conversationId,
-    assistantMessageId: (0, import_node_crypto11.randomUUID)(),
-    clientRequestId: (0, import_node_crypto11.randomUUID)(),
+    assistantMessageId: (0, import_node_crypto12.randomUUID)(),
+    clientRequestId: (0, import_node_crypto12.randomUUID)(),
     message: args.message,
     // 提案 design-conversational-driving 坑②：systemPrompt 从写死改为可选——缺省用引擎侧默认，
     // 让设计意图由驱动方每轮的话（message）表达，而非焊死一句。
@@ -157528,11 +157724,11 @@ async function runDesignChatTurn(opts) {
   const { artifacts, fileCount } = await fetchResultPackage(opts.base, fetchImpl, runId);
   return { boardKey, conversationId, runId, userMessageId, artifacts, fileCount };
 }
-var import_node_crypto11, fs4, os, path3;
+var import_node_crypto12, fs4, os, path3;
 var init_driver = __esm({
   "../adapters/src/open-design/driver.ts"() {
     "use strict";
-    import_node_crypto11 = require("node:crypto");
+    import_node_crypto12 = require("node:crypto");
     fs4 = __toESM(require("node:fs"), 1);
     os = __toESM(require("node:os"), 1);
     path3 = __toESM(require("node:path"), 1);
@@ -157625,7 +157821,7 @@ function resolveWorkRoots(workRoot) {
 }
 function workdirSlug(workdirKey) {
   const safe = workdirKey.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 48);
-  const h = (0, import_node_crypto12.createHash)("sha256").update(workdirKey).digest("hex").slice(0, 8);
+  const h = (0, import_node_crypto13.createHash)("sha256").update(workdirKey).digest("hex").slice(0, 8);
   return `${safe}-${h}`;
 }
 function sessionDirFor(workRoot, runtimeKind, workdirKey) {
@@ -157757,11 +157953,11 @@ function prepareWorkdir(args) {
 function legacyChatSessionDir(workRoot, rtId) {
   return import_node_path13.default.join(resolveLegacyWorkRoot(workRoot), "oasis-chat-sessions", rtId.replace(/[^a-zA-Z0-9_-]+/g, "_"));
 }
-var import_node_crypto12, import_node_fs9, import_node_os6, import_node_path13, META_FILE, LOCK_FILE, NEW_WORK_ROOT, slug5, LEGACY_ROOTS, LEGACY_ONESHOT_PREFIX;
+var import_node_crypto13, import_node_fs9, import_node_os6, import_node_path13, META_FILE, LOCK_FILE, NEW_WORK_ROOT, slug5, LEGACY_ROOTS, LEGACY_ONESHOT_PREFIX;
 var init_session_paths = __esm({
   "../adapters/src/_core/session-paths.ts"() {
     "use strict";
-    import_node_crypto12 = require("node:crypto");
+    import_node_crypto13 = require("node:crypto");
     import_node_fs9 = __toESM(require("node:fs"), 1);
     import_node_os6 = __toESM(require("node:os"), 1);
     import_node_path13 = __toESM(require("node:path"), 1);
@@ -157789,7 +157985,7 @@ function executionEnvHash(p2) {
     binPkg: p2.binPackageDir ?? null,
     extraRo: [...p2.extraRoBindDirs ?? []].sort()
   });
-  return (0, import_node_crypto13.createHash)("sha256").update(material).digest("hex").slice(0, 16);
+  return (0, import_node_crypto14.createHash)("sha256").update(material).digest("hex").slice(0, 16);
 }
 function persistContainerName(workdirKey) {
   return `oasis-wd-${workdirSlug(workdirKey)}`;
@@ -157909,11 +158105,11 @@ function wrapForContainer(p2) {
 function killContainerArgs(containerName) {
   return ["kill", containerName];
 }
-var import_node_crypto13, path6, CONTAINER_DEFAULT_PATH, CONTAINER_HOME, EE_HASH_LABEL;
+var import_node_crypto14, path6, CONTAINER_DEFAULT_PATH, CONTAINER_HOME, EE_HASH_LABEL;
 var init_container_wrap = __esm({
   "../adapters/src/_core/container-wrap.ts"() {
     "use strict";
-    import_node_crypto13 = require("node:crypto");
+    import_node_crypto14 = require("node:crypto");
     path6 = __toESM(require("node:path"), 1);
     init_session_paths();
     CONTAINER_DEFAULT_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
@@ -158380,12 +158576,12 @@ function classifyExit(result) {
   if (status === 429 || status === 529) return "rate-limit";
   return "error";
 }
-var import_node_child_process7, import_node_crypto14, fs9, path8, readline, CLAUDE_BLOCKED_FLAGS, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
+var import_node_child_process7, import_node_crypto15, fs9, path8, readline, CLAUDE_BLOCKED_FLAGS, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
 var init_claude_code = __esm({
   "../adapters/src/claude-code/index.ts"() {
     "use strict";
     import_node_child_process7 = require("node:child_process");
-    import_node_crypto14 = require("node:crypto");
+    import_node_crypto15 = require("node:crypto");
     fs9 = __toESM(require("node:fs"), 1);
     path8 = __toESM(require("node:path"), 1);
     readline = __toESM(require("node:readline"), 1);
@@ -158455,7 +158651,7 @@ var init_claude_code = __esm({
       }
       async spawn(job) {
         const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-        const id = `claude-${slug6}-${(0, import_node_crypto14.randomUUID)().slice(0, 8)}`;
+        const id = `claude-${slug6}-${(0, import_node_crypto15.randomUUID)().slice(0, 8)}`;
         const dir = job.workdirKey ? prepareWorkdir({
           workRoot: this.opts.workRoot,
           runtimeKind: "claude",
@@ -159934,13 +160130,13 @@ function normalizeCodexConsoleLine(line, state = createCodexNormalizeState()) {
   tool.output.push(line);
   return [];
 }
-var import_node_child_process9, import_node_crypto15, fs10, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CodexAdapter;
+var import_node_child_process9, import_node_crypto16, fs10, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CodexAdapter;
 var init_codex = __esm({
   "../adapters/src/codex/index.ts"() {
     "use strict";
     import_node_child_process9 = require("node:child_process");
     init_container_runtime();
-    import_node_crypto15 = require("node:crypto");
+    import_node_crypto16 = require("node:crypto");
     fs10 = __toESM(require("node:fs"), 1);
     os5 = __toESM(require("node:os"), 1);
     path10 = __toESM(require("node:path"), 1);
@@ -159986,7 +160182,7 @@ var init_codex = __esm({
       capabilities = { appendInput: false };
       async spawn(job) {
         const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-        const id = `codex-${slug6}-${(0, import_node_crypto15.randomUUID)().slice(0, 8)}`;
+        const id = `codex-${slug6}-${(0, import_node_crypto16.randomUUID)().slice(0, 8)}`;
         const startedAtMs = Date.now();
         const dir = job.workdirKey ? prepareWorkdir({
           workRoot: this.opts.workRoot,
@@ -160775,7 +160971,7 @@ async function runACPSession(job, cfg) {
   }
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
   const binTag = path11.basename(cfg.bin).replace(/[^a-zA-Z0-9]/g, "").slice(0, 12) || "acp";
-  const id = `${binTag}-${slug6}-${(0, import_node_crypto16.randomUUID)().slice(0, 8)}`;
+  const id = `${binTag}-${slug6}-${(0, import_node_crypto17.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind ?? "subprocess",
@@ -161085,12 +161281,12 @@ ${task}` : task;
     }
   };
 }
-var import_node_child_process10, import_node_crypto16, fs11, path11, readline3, ACPClient, LEGACY_APPROVE_OPTION_ID;
+var import_node_child_process10, import_node_crypto17, fs11, path11, readline3, ACPClient, LEGACY_APPROVE_OPTION_ID;
 var init_acp = __esm({
   "../adapters/src/_core/acp.ts"() {
     "use strict";
     import_node_child_process10 = require("node:child_process");
-    import_node_crypto16 = require("node:crypto");
+    import_node_crypto17 = require("node:crypto");
     fs11 = __toESM(require("node:fs"), 1);
     path11 = __toESM(require("node:path"), 1);
     readline3 = __toESM(require("node:readline"), 1);
@@ -161588,7 +161784,7 @@ var init_reasonix = __esm({
 // ../adapters/src/_core/subprocess.ts
 async function materialize(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-  const id = `${slug6}-${(0, import_node_crypto17.randomUUID)().slice(0, 8)}`;
+  const id = `${slug6}-${(0, import_node_crypto18.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind ?? "subprocess",
@@ -161860,12 +162056,12 @@ async function runOneShotText(job, cfg) {
     }
   });
 }
-var import_node_child_process11, import_node_crypto17, fs12, path12, readline4;
+var import_node_child_process11, import_node_crypto18, fs12, path12, readline4;
 var init_subprocess = __esm({
   "../adapters/src/_core/subprocess.ts"() {
     "use strict";
     import_node_child_process11 = require("node:child_process");
-    import_node_crypto17 = require("node:crypto");
+    import_node_crypto18 = require("node:crypto");
     fs12 = __toESM(require("node:fs"), 1);
     path12 = __toESM(require("node:path"), 1);
     readline4 = __toESM(require("node:readline"), 1);
@@ -162312,11 +162508,11 @@ function normalizeOpenClaw(line) {
   }
   return [];
 }
-var import_node_crypto18, OpenClawAdapter;
+var import_node_crypto19, OpenClawAdapter;
 var init_openclaw = __esm({
   "../adapters/src/openclaw/index.ts"() {
     "use strict";
-    import_node_crypto18 = require("node:crypto");
+    import_node_crypto19 = require("node:crypto");
     init_subprocess();
     OpenClawAdapter = class {
       constructor(opts = {}) {
@@ -162334,7 +162530,7 @@ var init_openclaw = __esm({
 ---
 
 ${task}` : task;
-            const sessionId = job2.runtimeSessionId ?? `oasis-${(0, import_node_crypto18.randomUUID)().slice(0, 8)}`;
+            const sessionId = job2.runtimeSessionId ?? `oasis-${(0, import_node_crypto19.randomUUID)().slice(0, 8)}`;
             return [
               "agent",
               ...opts.mode !== "gateway" ? ["--local"] : [],
@@ -162818,11 +163014,6 @@ function resolveCallbackBase(supplied, requestHost) {
   }
   return `${parsed.origin}${parsed.pathname.replace(/\/+$/, "")}`;
 }
-function chatNodeChanged(recorded, current) {
-  const nodeChanged = Boolean(recorded?.nodeId && current?.nodeId && recorded.nodeId !== current.nodeId);
-  const kindChanged = Boolean(recorded?.runtimeKind && current?.runtimeKind && recorded.runtimeKind !== current.runtimeKind);
-  return nodeChanged || kindChanged;
-}
 function wantsChatParts(req) {
   const accept = req.headers.accept;
   return typeof accept === "string" && accept.includes("application/x-ndjson");
@@ -164266,12 +164457,12 @@ async function startOasisServer(opts) {
     if (!store || !dispatch) return;
     const session = await store.getSession(origin).catch(() => null);
     if (!session) return;
-    const { randomUUID: randomUUID30 } = await import("node:crypto");
+    const { randomUUID: randomUUID31 } = await import("node:crypto");
     const approved = resolution.status === "approved";
     const by = ctx.authorizedBy ?? "\u7BA1\u7406\u8005";
     const label = ctx.effectLabel || ctx.command || "";
     const statusText = approved ? `\u547D\u4EE4\u5DF2\u7531 ${by} \u6279\u51C6\u5E76\u4EE5\u5176\u540D\u4E49\u6267\u884C${label ? `\uFF1A${label}` : ""}\u3002` : `\u547D\u4EE4\u5DF2\u88AB ${by} \u9A73\u56DE${ctx.reason ? `\uFF1A${ctx.reason}` : ""}\u3002`;
-    await store.appendMessage({ id: randomUUID30(), sessionId: origin, role: "system", content: statusText, createdAt: (/* @__PURE__ */ new Date()).toISOString() }).catch(() => void 0);
+    await store.appendMessage({ id: randomUUID31(), sessionId: origin, role: "system", content: statusText, createdAt: (/* @__PURE__ */ new Date()).toISOString() }).catch(() => void 0);
     if (liveChat.isRunning(origin)) return;
     const prompt = approved ? `\u4E0A\u4E00\u6761\u5F85\u6388\u6743\u547D\u4EE4\u5DF2\u88AB ${by} \u6279\u51C6\u5E76\u4EE5\u5176\u540D\u4E49\u6267\u884C\uFF08\u547D\u4EE4\uFF1A${label}\uFF09\u3002\u8BF7\u7EE7\u7EED\u539F\u4EFB\u52A1\u3002` : `\u4E0A\u4E00\u6761\u5F85\u6388\u6743\u547D\u4EE4\u5DF2\u88AB ${by} \u9A73\u56DE${ctx.reason ? `\uFF08\u7406\u7531\uFF1A${ctx.reason}\uFF09` : ""}\u3002\u522B\u91CD\u8BD5\u540C\u4E00\u6761\u2014\u2014\u8BF7\u6539\u65B9\u6848\u6216\u5148\u5411\u53D1\u8D77\u4EBA\u95EE\u6E05\u695A\u3002`;
     let dispatched;
@@ -164292,7 +164483,7 @@ async function startOasisServer(opts) {
     void dispatched.done.then(async () => {
       if (text || dispatched.runId) {
         await store.appendMessage({
-          id: randomUUID30(),
+          id: randomUUID31(),
           sessionId: origin,
           role: "assistant",
           content: text,
@@ -164307,6 +164498,7 @@ async function startOasisServer(opts) {
     store: opts.channels.store,
     dispatchChat: (req) => opts.dispatchChat(req),
     chatSession: opts.chatSession,
+    chatTurns: opts.chatTurns,
     revealVar: (key, actorId) => opts.actors.service.revealResolvedVariable(key, actorId),
     // 决策 0080 第一期：探活成功时把 bot 的 app_name 落到连接器记录（account）供显示——
     // 此前名称在 botInfo 后被丢弃，前端身份位只能显示 App ID（cli_xxx）。
@@ -165097,11 +165289,11 @@ async function startOasisServer(opts) {
             const itemKey = `${baseItemKey}:${ctx.ownerId}`;
             let chatSessionId;
             if (chatStore) {
-              const { randomUUID: randomUUID30 } = await import("node:crypto");
+              const { randomUUID: randomUUID31 } = await import("node:crypto");
               const known = discussSessions.get(itemKey);
               if (known && await chatStore.getSession(known).catch(() => null)) chatSessionId = known;
               if (!chatSessionId) {
-                chatSessionId = randomUUID30();
+                chatSessionId = randomUUID31();
                 const now = (/* @__PURE__ */ new Date()).toISOString();
                 const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                 const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -165555,38 +165747,62 @@ async function startOasisServer(opts) {
               }
               const registry2 = engine.registry ?? opts.registry;
               const currentBinding = persistTarget && registry2 ? await registry2.getBinding(persistTarget.aiActorId).catch(() => null) : null;
-              const currentRuntimeId = currentBinding?.status === "active" ? currentBinding.nodeId : null;
-              const currentRuntimeKind = currentBinding?.status === "active" ? currentBinding.runtimeKind : null;
-              const runtimeChanged = chatNodeChanged(
-                { nodeId: persistTarget?.runtimeId, runtimeKind: persistTarget?.runtimeKind },
-                { nodeId: currentRuntimeId, runtimeKind: currentRuntimeKind }
-              );
               const persistedUserMessage = persistTarget ? stripInjectedChatContext(body.message) : body.message;
-              const needsHistoryInjection = Boolean(persistTarget && (runtimeChanged || !persistTarget.runtimeSessionId));
-              const history = needsHistoryInjection && chatStore && persistTarget ? (await chatStore.listMessages(persistTarget.id, 20)).filter((message) => message.role !== "system" && !(message.role === "assistant" && message.status === "running")).map((message) => ({
-                role: message.role,
-                content: message.role === "user" ? stripInjectedChatContext(message.content) : message.content
-              })) : [];
               const draft = persistTarget && opts.workorderDrafts ? await opts.workorderDrafts.forSession(persistTarget.id) : void 0;
               const draftWorkspace = draft && ![...engine.kernel.model.artifacts.values()].some((artifact) => artifact.workspace === draft.workspace) ? draft.workspace : void 0;
-              const runtimeMessage = buildRuntimeChatPrompt({
+              const plan = persistTarget && chatStore ? await planChatContinuation({
+                session: persistTarget,
+                userMessage: persistedUserMessage,
+                listMessages: (sid, limit) => chatStore.listMessages(sid, limit),
+                currentRuntime: currentBinding?.status === "active" ? { nodeId: currentBinding.nodeId, runtimeKind: currentBinding.runtimeKind } : null,
+                ...draftWorkspace ? { draftWorkspace } : {}
+              }) : null;
+              const currentRuntimeId = plan?.currentRuntimeId ?? null;
+              const currentRuntimeKind = plan?.currentRuntimeKind ?? null;
+              const runtimeMessage = plan ? plan.runtimeMessage : buildRuntimeChatPrompt({
                 userMessage: persistedUserMessage,
-                ...history.length ? { history } : {},
                 ...draftWorkspace ? { draftWorkspace } : {}
               });
-              const effectiveSessionId = persistTarget ? runtimeChanged ? void 0 : persistTarget.runtimeSessionId ?? void 0 : body.sessionId || void 0;
-              const resumeFallbackHistory = effectiveSessionId && chatStore && persistTarget ? (await chatStore.listMessages(persistTarget.id, 20)).filter((m2) => m2.role !== "system" && !(m2.role === "assistant" && m2.status === "running")).map((m2) => ({ role: m2.role, content: m2.role === "user" ? stripInjectedChatContext(m2.content) : m2.content })) : [];
-              const fallbackMessage = resumeFallbackHistory.length ? buildRuntimeChatPrompt({ userMessage: persistedUserMessage, history: resumeFallbackHistory, ...draftWorkspace ? { draftWorkspace } : {} }) : void 0;
-              const session = await opts.dispatchChat({
-                actorId: body.actorId,
-                message: runtimeMessage,
-                ...effectiveSessionId ? { sessionId: effectiveSessionId } : {},
-                ...fallbackMessage ? { fallbackMessage } : {},
-                ...body.chatSessionId ? { chatSessionId: body.chatSessionId } : {},
-                ...body.workspace ? { workspace: body.workspace } : {},
-                ...currentCompanyId !== void 0 ? { companyId: currentCompanyId } : {},
-                ...attachments.length ? { attachments } : {}
-              });
+              const effectiveSessionId = plan ? plan.effectiveSessionId : body.sessionId || void 0;
+              const fallbackMessage = plan?.fallbackMessage;
+              let heldTurn = null;
+              if (persistTarget) {
+                const opened = await openChatTurn({
+                  turns: opts.chatTurns,
+                  chatSessionId: persistTarget.id,
+                  source: "human",
+                  log: (m2) => console.warn(m2)
+                });
+                if (!opened.ok) {
+                  throw new ApiError(
+                    409,
+                    "CHAT_SESSION_BUSY",
+                    `\u8FD9\u4E2A\u4F1A\u8BDD\u6B63\u5728\u8DD1\u4E00\u8F6E\uFF0C\u8FD9\u53E5\u8BDD\u6CA1\u6709\u53D1\u51FA\u2014\u2014\u4E0D\u6392\u961F\u3001\u4E5F\u4E0D\u63D2\u8BDD\u3002\u7B49\u8FD9\u4E00\u8F6E\u8DD1\u5B8C\u518D\u53D1\uFF0C\u6216\u8005\u7528\u300C\u63D2\u5165\u300D\u628A\u5B83\u9001\u8FDB\u6B63\u5728\u8DD1\u7684\u90A3\u4E00\u8F6E\u3002\uFF08\u5360\u7740\u7684\u8F6E\u6B21 ${opened.activeTurn.id}\uFF0C\u6765\u6E90 ${opened.activeTurn.source}\uFF09`
+                  );
+                }
+                heldTurn = opened.turn;
+              }
+              let session;
+              try {
+                session = await opts.dispatchChat({
+                  actorId: body.actorId,
+                  message: runtimeMessage,
+                  ...effectiveSessionId ? { sessionId: effectiveSessionId } : {},
+                  ...fallbackMessage ? { fallbackMessage } : {},
+                  ...body.chatSessionId ? { chatSessionId: body.chatSessionId } : {},
+                  ...body.workspace ? { workspace: body.workspace } : {},
+                  ...currentCompanyId !== void 0 ? { companyId: currentCompanyId } : {},
+                  ...attachments.length ? { attachments } : {}
+                });
+              } catch (err) {
+                await heldTurn?.settle({
+                  status: "failed",
+                  completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+                  lastError: err instanceof Error ? err.message : String(err)
+                });
+                throw err;
+              }
+              await heldTurn?.start({ assistantRunId: session.runId ?? null, dispatchId: session.runId ?? null });
               if (chatStore && persistTarget) {
                 if (currentRuntimeId) {
                   await chatStore.updateSession(persistTarget.id, {
@@ -165596,14 +165812,14 @@ async function startOasisServer(opts) {
                     runtimeSessionId: session.nativeSessionId ?? session.id
                   }).catch(() => void 0);
                 }
-                const { randomUUID: randomUUID31 } = await import("node:crypto");
+                const { randomUUID: randomUUID32 } = await import("node:crypto");
                 const persistAttachments = attachments.map((a) => ({
                   name: a.name,
                   ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                   ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                 }));
                 await chatStore.appendMessage({
-                  id: randomUUID31(),
+                  id: randomUUID32(),
                   sessionId: persistTarget.id,
                   role: "user",
                   content: persistedUserMessage,
@@ -165613,8 +165829,8 @@ async function startOasisServer(opts) {
               }
               let assistantMsgId;
               if (chatStore && persistTarget) {
-                const { randomUUID: randomUUID31 } = await import("node:crypto");
-                const id = randomUUID31();
+                const { randomUUID: randomUUID32 } = await import("node:crypto");
+                const id = randomUUID32();
                 await chatStore.appendMessage({
                   id,
                   sessionId: persistTarget.id,
@@ -165650,9 +165866,9 @@ async function startOasisServer(opts) {
                   }).catch(() => void 0);
                 } else {
                   if (!assistantText && !session.runId && parts.length === 0) return;
-                  const { randomUUID: randomUUID31 } = await import("node:crypto");
+                  const { randomUUID: randomUUID32 } = await import("node:crypto");
                   await chatStore.appendMessage({
-                    id: randomUUID31(),
+                    id: randomUUID32(),
                     sessionId: persistTarget.id,
                     role: "assistant",
                     content: assistantText,
@@ -165663,6 +165879,12 @@ async function startOasisServer(opts) {
                     ...parts.length ? { parts } : {}
                   }).catch(() => void 0);
                 }
+                await heldTurn?.settle({
+                  status: status === "done" ? "succeeded" : "failed",
+                  completedAt: finishedAt,
+                  ...session.runId ? { assistantRunId: session.runId, dispatchId: session.runId } : {},
+                  ...status === "done" ? {} : { lastError: "\u8FD9\u4E00\u8F6E\u4EE5 error \u6536\u5C3E" }
+                });
                 await chatStore.updateSession(persistTarget.id, {
                   ...currentRuntimeId ? { runtimeId: currentRuntimeId } : {},
                   ...currentRuntimeKind ? { runtimeKind: currentRuntimeKind } : {},
@@ -165885,8 +166107,8 @@ async function startOasisServer(opts) {
               }
             }
             const { spawn: spawn9 } = await import("node:child_process");
-            const { randomUUID: randomUUID30 } = await import("node:crypto");
-            const sessionId = body.sessionId ?? randomUUID30();
+            const { randomUUID: randomUUID31 } = await import("node:crypto");
+            const sessionId = body.sessionId ?? randomUUID31();
             const args = [
               "-p",
               body.message,
@@ -166111,8 +166333,8 @@ async function startOasisServer(opts) {
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
               return;
             }
-            const { randomUUID: randomUUID30 } = await import("node:crypto");
-            const state = randomUUID30();
+            const { randomUUID: randomUUID31 } = await import("node:crypto");
+            const state = randomUUID31();
             const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
             const manifest = buildAppManifest({
               employeeSlug: nameSlug,
@@ -166563,8 +166785,11 @@ var init_server3 = __esm({
     init_planner();
     init_chat_parts();
     init_injected_context();
+    init_continuation();
+    init_chat_turn_gate();
     init_knowledge2();
     init_src8();
+    init_continuation();
     githubAppPending = new PendingAppCreations();
     defaultResolveActor = (token) => token.startsWith("token:") ? token.slice("token:".length) : null;
     enc = (s2) => new TextEncoder().encode(s2);
@@ -166662,7 +166887,7 @@ function createNodeTokenStore(file) {
   return {
     issue(nodeId) {
       const table = read();
-      const token = `ont_${(0, import_node_crypto19.randomBytes)(24).toString("base64url")}`;
+      const token = `ont_${(0, import_node_crypto20.randomBytes)(24).toString("base64url")}`;
       table[token] = nodeId;
       write(table);
       return token;
@@ -166704,7 +166929,7 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   return {
     issue(name, ttlMs = defaultTtlMs) {
       const m2 = prune();
-      const token = `ent_${(0, import_node_crypto19.randomBytes)(24).toString("base64url")}`;
+      const token = `ent_${(0, import_node_crypto20.randomBytes)(24).toString("base64url")}`;
       const expiresAt2 = Date.now() + ttlMs;
       m2.set(token, { name, expiresAt: expiresAt2 });
       write(m2);
@@ -166734,33 +166959,33 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto19, fs15, path15, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
+var import_node_crypto20, fs15, path15, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
-    import_node_crypto19 = require("node:crypto");
+    import_node_crypto20 = require("node:crypto");
     fs15 = __toESM(require("node:fs"), 1);
     path15 = __toESM(require("node:path"), 1);
     SESSION_TOKEN_PREFIX = "oat_v2_";
     b64url2 = (value) => Buffer.from(value).toString("base64url");
     fromB64url = (value) => Buffer.from(value, "base64url").toString("utf8");
     readOrCreateSecret = (file) => {
-      if (!file) return (0, import_node_crypto19.randomBytes)(32);
+      if (!file) return (0, import_node_crypto20.randomBytes)(32);
       try {
         const raw = fs15.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto19.randomBytes)(32);
+      const secret = (0, import_node_crypto20.randomBytes)(32);
       fs15.mkdirSync(path15.dirname(file), { recursive: true });
       fs15.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
-    sign = (secret, payload) => (0, import_node_crypto19.createHmac)("sha256", secret).update(payload).digest("base64url");
+    sign = (secret, payload) => (0, import_node_crypto20.createHmac)("sha256", secret).update(payload).digest("base64url");
     signatureMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto19.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto20.timingSafeEqual)(a, b2);
     };
     isTokenClaims = (value) => {
       if (value === null || typeof value !== "object") return false;
@@ -166807,31 +167032,31 @@ function createDataplaneTokenIssuer(opts = {}) {
     }
   };
 }
-var import_node_crypto20, fs16, path16, PREFIX, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims;
+var import_node_crypto21, fs16, path16, PREFIX, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims;
 var init_session_dataplane_token = __esm({
   "../server/src/session-dataplane-token.ts"() {
     "use strict";
-    import_node_crypto20 = require("node:crypto");
+    import_node_crypto21 = require("node:crypto");
     fs16 = __toESM(require("node:fs"), 1);
     path16 = __toESM(require("node:path"), 1);
     init_src2();
     PREFIX = "osd_";
     b64url3 = (v2) => Buffer.from(v2, "utf8").toString("base64url");
     fromB64url2 = (v2) => Buffer.from(v2, "base64url").toString("utf8");
-    sign2 = (secret, payload) => (0, import_node_crypto20.createHmac)("sha256", secret).update(payload).digest("base64url");
+    sign2 = (secret, payload) => (0, import_node_crypto21.createHmac)("sha256", secret).update(payload).digest("base64url");
     sigMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto20.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto21.timingSafeEqual)(a, b2);
     };
     readOrCreateSecret2 = (file) => {
-      if (!file) return (0, import_node_crypto20.randomBytes)(32);
+      if (!file) return (0, import_node_crypto21.randomBytes)(32);
       try {
         const raw = fs16.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto20.randomBytes)(32);
+      const secret = (0, import_node_crypto21.randomBytes)(32);
       fs16.mkdirSync(path16.dirname(file), { recursive: true });
       fs16.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
@@ -168195,7 +168420,9 @@ var init_memory_automation_store = __esm({
           collaborators: [],
           createdBy: input.createdBy ?? null,
           createdAt: now,
-          updatedAt: now
+          updatedAt: now,
+          chatTarget: input.chatTarget ?? null,
+          ownerHumanActorId: input.ownerHumanActorId ?? null
         };
         this.automations.set(id, structuredClone(a));
         if (input.triggers?.length) await this.replaceTriggers(id, input.triggers);
@@ -168678,11 +168905,11 @@ function onlyHits(pool, q) {
   if (!q.requireMatch || q.keywords.length === 0) return [...pool];
   return pool.filter((r) => memoryMatchScore(r, q.keywords) > 0);
 }
-var import_node_crypto21, MemoryActorMemoryStore, toIndexEntry;
+var import_node_crypto22, MemoryActorMemoryStore, toIndexEntry;
 var init_memory_actor_memory_store = __esm({
   "../testkit/src/memory-actor-memory-store.ts"() {
     "use strict";
-    import_node_crypto21 = require("node:crypto");
+    import_node_crypto22 = require("node:crypto");
     init_src2();
     MemoryActorMemoryStore = class {
       rows = /* @__PURE__ */ new Map();
@@ -168736,7 +168963,7 @@ var init_memory_actor_memory_store = __esm({
       async write(input, now) {
         if (input.memId === void 0) {
           const rec = {
-            memId: `mem:${(0, import_node_crypto21.randomUUID)()}`,
+            memId: `mem:${(0, import_node_crypto22.randomUUID)()}`,
             actorId: input.actorId,
             projectId: input.projectId,
             keywords: [...input.keywords],
@@ -170628,11 +170855,11 @@ var init_service3 = __esm({
 });
 
 // ../server/src/dev-store.ts
-var import_node_crypto22, fs17, path17, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileProjectDocumentStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto23, fs17, path17, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileProjectDocumentStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
-    import_node_crypto22 = require("node:crypto");
+    import_node_crypto23 = require("node:crypto");
     fs17 = __toESM(require("node:fs"), 1);
     path17 = __toESM(require("node:path"), 1);
     init_src2();
@@ -170686,7 +170913,7 @@ var init_dev_store = __esm({
         return path17.join(this.dir, hash);
       }
       async put(bytes) {
-        const hash = (0, import_node_crypto22.createHash)("sha256").update(bytes).digest("hex");
+        const hash = (0, import_node_crypto23.createHash)("sha256").update(bytes).digest("hex");
         const file = this.fileOf(hash);
         if (!fs17.existsSync(file)) fs17.writeFileSync(file, bytes);
         return hash;
@@ -171186,6 +171413,10 @@ var init_dev_store = __esm({
         this.sessionWorkOrders.delete(id);
       }
       async appendMessage(m2) {
+        if (m2.messageKey) {
+          const existing = await this.getMessageByKey(m2.messageKey);
+          if (existing) return existing;
+        }
         const list = this.messages.get(m2.sessionId) ?? [];
         const seq = (list.length ? Math.max(...list.map((x2) => x2.seq)) : 0) + 1;
         const record8 = { ...m2, seq };
@@ -171193,6 +171424,26 @@ var init_dev_store = __esm({
         this.messages.set(m2.sessionId, list);
         return record8;
       }
+      async getMessageByKey(messageKey) {
+        for (const list of this.messages.values()) {
+          const hit = list.find((x2) => x2.messageKey === messageKey);
+          if (hit) return hit;
+        }
+        return null;
+      }
+      async countMessages(sessionId) {
+        return (this.messages.get(sessionId) ?? []).length;
+      }
+      /** 选择器搜索（ADR 会话投递 D8）：与 PG 版同口径——三元组精确 + 标题/ID 前缀 + touchedAt 倒序。 */
+      async searchSessionsForTarget(q) {
+        const text = q.text?.trim().toLowerCase();
+        const all = [...this.sessions.values()].filter((s2) => (s2.companyId ?? null) === q.companyId && s2.humanActorId === q.humanActorId && s2.aiActorId === q.aiActorId && !s2.analyzedRunId && (!text || (s2.title ?? "").toLowerCase().includes(text) || s2.id.toLowerCase().startsWith(text))).sort((a, b2) => b2.touchedAt.localeCompare(a.touchedAt) || b2.id.localeCompare(a.id));
+        const page = all.slice(q.offset, q.offset + q.limit);
+        return {
+          items: page.map((s2) => ({ ...s2, messageCount: (this.messages.get(s2.id) ?? []).length })),
+          hasMore: q.offset + q.limit < all.length
+        };
+      }
       async updateMessage(id, patch) {
         for (const list of this.messages.values()) {
           const item = list.find((x2) => x2.id === id);
@@ -171277,6 +171528,94 @@ var init_dev_store = __esm({
         fs17.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
+    MemoryChatTurnStore = class {
+      turns = /* @__PURE__ */ new Map();
+      /** 同步临界区：故意不 await，保证 claim 是原子的。 */
+      claimSync(input) {
+        for (const t of this.turns.values()) {
+          if (t.source === input.source && t.sourceRunId === input.sourceRunId) return { outcome: "resumed", turn: t };
+        }
+        for (const t of this.turns.values()) {
+          if (t.chatSessionId === input.chatSessionId && (t.status === "reserved" || t.status === "running")) {
+            return { outcome: "busy", activeTurn: t };
+          }
+        }
+        const turn = {
+          id: input.turnId,
+          chatSessionId: input.chatSessionId,
+          source: input.source,
+          sourceRunId: input.sourceRunId,
+          messageKey: input.messageKey,
+          status: "reserved",
+          dispatchId: null,
+          assistantRunId: null,
+          reservedAt: input.reservedAt,
+          startedAt: null,
+          completedAt: null,
+          lastError: null
+        };
+        this.turns.set(turn.id, turn);
+        return { outcome: "claimed", turn };
+      }
+      async claimTurn(input) {
+        const claim = this.claimSync(input);
+        if (claim.outcome === "claimed") this.persist();
+        return claim;
+      }
+      async getTurn(turnId) {
+        return this.turns.get(turnId) ?? null;
+      }
+      async getTurnBySourceRun(source, sourceRunId) {
+        for (const t of this.turns.values()) if (t.source === source && t.sourceRunId === sourceRunId) return t;
+        return null;
+      }
+      async activeTurn(chatSessionId) {
+        for (const t of this.turns.values()) {
+          if (t.chatSessionId === chatSessionId && (t.status === "reserved" || t.status === "running")) return t;
+        }
+        return null;
+      }
+      async settleTurn(turnId, patch) {
+        const t = this.turns.get(turnId);
+        if (!t) return;
+        this.turns.set(turnId, {
+          ...t,
+          status: patch.status,
+          ...patch.dispatchId !== void 0 ? { dispatchId: patch.dispatchId } : {},
+          ...patch.assistantRunId !== void 0 ? { assistantRunId: patch.assistantRunId } : {},
+          ...patch.startedAt !== void 0 ? { startedAt: patch.startedAt } : {},
+          ...patch.completedAt !== void 0 ? { completedAt: patch.completedAt } : {},
+          ...patch.lastError !== void 0 ? { lastError: patch.lastError } : {}
+        });
+        this.persist();
+      }
+      async listStaleActiveTurns(reservedBefore, limit = 50) {
+        return [...this.turns.values()].filter((t) => (t.status === "reserved" || t.status === "running") && t.reservedAt < reservedBefore).sort((a, b2) => a.reservedAt.localeCompare(b2.reservedAt)).slice(0, limit);
+      }
+      /** 文件版覆写。内存版不落盘。 */
+      persist() {
+      }
+    };
+    FileChatTurnStore = class _FileChatTurnStore extends MemoryChatTurnStore {
+      constructor(file) {
+        super();
+        this.file = file;
+      }
+      static async open(file) {
+        const store = new _FileChatTurnStore(file);
+        if (fs17.existsSync(file)) {
+          const snap = JSON.parse(fs17.readFileSync(file, "utf8"));
+          for (const t of snap.turns ?? []) store.turns.set(t.id, t);
+        } else {
+          fs17.mkdirSync(path17.dirname(file), { recursive: true });
+          fs17.writeFileSync(file, JSON.stringify({ turns: [] }, null, 2));
+        }
+        return store;
+      }
+      persist() {
+        fs17.writeFileSync(this.file, JSON.stringify({ turns: [...this.turns.values()] }, null, 2));
+      }
+    };
     MemoryReadMarkerStore = class _MemoryReadMarkerStore {
       markers = /* @__PURE__ */ new Map();
       static key(actorId, scope) {
@@ -171461,11 +171800,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto23, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto24, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto23 = require("node:crypto");
+    import_node_crypto24 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -171592,7 +171931,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto23.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto24.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -171740,11 +172079,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto24, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto25, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto24 = require("node:crypto");
+    import_node_crypto25 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -171769,7 +172108,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto24.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto25.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -173747,7 +174086,7 @@ function wireRecoveredChatTurn(deps) {
       const segText = assistantText;
       const segParts = collectedParts();
       const closingId = currentMsgId;
-      const nextId = (0, import_node_crypto25.randomUUID)();
+      const nextId = (0, import_node_crypto26.randomUUID)();
       assistantText = "";
       currentMsgId = nextId;
       segmentBaseSeq = live.bufferedParts().reduce((max, p2) => p2.seq > max ? p2.seq : max, 0);
@@ -173760,7 +174099,7 @@ function wireRecoveredChatTurn(deps) {
           ...segParts.length ? { parts: segParts } : {}
         }).catch(() => void 0);
         await store.appendMessage({
-          id: (0, import_node_crypto25.randomUUID)(),
+          id: (0, import_node_crypto26.randomUUID)(),
           sessionId: plan.chatSessionId,
           role: "user",
           content: text,
@@ -173939,11 +174278,11 @@ async function reconcileChatExitFrame(deps) {
   }
   return false;
 }
-var import_node_crypto25, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
+var import_node_crypto26, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
 var init_chat_recovery = __esm({
   "../server/src/chat-recovery.ts"() {
     "use strict";
-    import_node_crypto25 = require("node:crypto");
+    import_node_crypto26 = require("node:crypto");
     init_chat_parts();
     init_sink();
     init_resilient_appender();
@@ -173970,8 +174309,8 @@ var init_chat_recovery = __esm({
 
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto26.randomBytes)(16);
-  const dk = (0, import_node_crypto26.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto27.randomBytes)(16);
+  const dk = (0, import_node_crypto27.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -173988,8 +174327,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto26.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto26.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto27.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto27.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value) {
   return Buffer.from(JSON.stringify(value)).toString("base64url");
@@ -173997,17 +174336,17 @@ function b64urlJson(value) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body = b64urlJson(claims);
-  const sig = (0, import_node_crypto26.createHmac)("sha256", secret).update(`${head}.${body}`).digest("base64url");
+  const sig = (0, import_node_crypto27.createHmac)("sha256", secret).update(`${head}.${body}`).digest("base64url");
   return `${head}.${body}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body, sig] = parts;
-  const expected = (0, import_node_crypto26.createHmac)("sha256", secret).update(`${head}.${body}`).digest("base64url");
+  const expected = (0, import_node_crypto27.createHmac)("sha256", secret).update(`${head}.${body}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto26.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto27.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body, "base64url").toString("utf8"));
@@ -174019,21 +174358,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto26.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto27.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code, secret) {
-  return (0, import_node_crypto26.createHmac)("sha256", secret).update(`code:${code}`).digest("base64url");
+  return (0, import_node_crypto27.createHmac)("sha256", secret).update(`code:${code}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto26.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto27.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto26, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto27, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto26 = require("node:crypto");
+    import_node_crypto27 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -174961,13 +175300,13 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto27.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto28.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
-var import_node_crypto27, REDACTED_MARKER, ActorsService, mask, changedKeys;
+var import_node_crypto28, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service4 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
-    import_node_crypto27 = require("node:crypto");
+    import_node_crypto28 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -175455,7 +175794,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path37, content, now) {
         const bytes = new TextEncoder().encode(content);
-        const blobHash = (0, import_node_crypto27.createHash)("sha256").update(bytes).digest("hex");
+        const blobHash = (0, import_node_crypto28.createHash)("sha256").update(bytes).digest("hex");
         return { skillId, path: path37, content, blobHash, size: bytes.length, updatedAt: now };
       }
       /**
@@ -175926,15 +176265,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto27.randomBytes)(12);
-        const cipher = (0, import_node_crypto27.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto28.randomBytes)(12);
+        const cipher = (0, import_node_crypto28.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc4 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc4.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto27.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto28.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -176898,7 +177237,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto28.createHash)("sha256");
+    const hasher = (0, import_node_crypto29.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -176923,11 +177262,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto28.createHash)("sha256");
+    const hasher = (0, import_node_crypto29.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto28.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto29.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -176948,11 +177287,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto28.createHash)("sha256");
+    const hasher = (0, import_node_crypto29.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto28.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto29.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -176972,7 +177311,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path37,
     content,
-    blobHash: (0, import_node_crypto28.createHash)("sha256").update(content).digest("hex"),
+    blobHash: (0, import_node_crypto29.createHash)("sha256").update(content).digest("hex"),
     size: Buffer.byteLength(content, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -176996,7 +177335,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto28.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto29.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -177029,7 +177368,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path37,
     content,
-    blobHash: (0, import_node_crypto28.createHash)("sha256").update(content).digest("hex"),
+    blobHash: (0, import_node_crypto29.createHash)("sha256").update(content).digest("hex"),
     size: Buffer.byteLength(content, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -177046,11 +177385,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto28;
+var import_node_crypto29;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto28 = require("node:crypto");
+    import_node_crypto29 = require("node:crypto");
   }
 });
 
@@ -178278,7 +178617,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto29.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto30.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -178320,11 +178659,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {} })
   };
 }
-var import_node_crypto29;
+var import_node_crypto30;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto29 = require("node:crypto");
+    import_node_crypto30 = require("node:crypto");
     init_service4();
     init_routes2();
     init_service4();
@@ -179432,11 +179771,11 @@ var init_projects = __esm({
 });
 
 // ../server/src/domains/companies/service.ts
-var import_node_crypto30, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto31, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, SLUG_RE, CompanyError, CompaniesService;
 var init_service5 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto30 = require("node:crypto");
+    import_node_crypto31 = require("node:crypto");
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
     INVITATION_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
@@ -179509,7 +179848,7 @@ var init_service5 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto30.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto31.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -179673,7 +180012,7 @@ var init_service5 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto30.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto31.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -180944,7 +181283,7 @@ function nodesDomain(deps) {
         nodeId = incomingNodeId;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto31.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto32.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -181080,11 +181419,11 @@ function nodesDomain(deps) {
     });
   };
 }
-var import_node_crypto31, import_node_fs14, import_node_url6, import_node_path18;
+var import_node_crypto32, import_node_fs14, import_node_url6, import_node_path18;
 var init_routes6 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
-    import_node_crypto31 = require("node:crypto");
+    import_node_crypto32 = require("node:crypto");
     import_node_fs14 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path18 = require("node:path");
@@ -182700,13 +183039,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs15, import_node_path19, import_node_crypto32, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs15, import_node_path19, import_node_crypto33, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs15 = __toESM(require("node:fs"), 1);
     import_node_path19 = __toESM(require("node:path"), 1);
-    import_node_crypto32 = __toESM(require("node:crypto"), 1);
+    import_node_crypto33 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -182724,7 +183063,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto32.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto33.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -183581,7 +183920,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes = fs23.statSync(absBundle).size;
-  const digest = (0, import_node_crypto33.createHash)("sha256").update(fs23.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto34.createHash)("sha256").update(fs23.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -183677,12 +184016,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process14, import_node_crypto33, fs23, os6, path21, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process14, import_node_crypto34, fs23, os6, path21, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process14 = require("node:child_process");
-    import_node_crypto33 = require("node:crypto");
+    import_node_crypto34 = require("node:crypto");
     fs23 = __toESM(require("node:fs"), 1);
     os6 = __toESM(require("node:os"), 1);
     path21 = __toESM(require("node:path"), 1);
@@ -183702,7 +184041,7 @@ var init_readonly_bundle = __esm({
 
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto34.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto35.randomUUID)().slice(0, 8)}`);
   return async (input) => {
     const workspace = input.idempotencyKey ? workspaceForKey(input.idempotencyKey) : genWorkspace();
     if (input.idempotencyKey) {
@@ -183788,7 +184127,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key) {
-  return `ws:wo-${(0, import_node_crypto34.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto35.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(kernel, workspace) {
   const arts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === workspace);
@@ -183801,11 +184140,11 @@ function existingWorkorder(kernel, workspace) {
     spawned: arts.map((a) => ({ id: a.id, type: a.type, owner: a.owner }))
   };
 }
-var import_node_crypto34, enc2;
+var import_node_crypto35, enc2;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto34 = require("node:crypto");
+    import_node_crypto35 = require("node:crypto");
     init_ephemeral_project();
     init_planner();
     enc2 = (s2) => new TextEncoder().encode(s2);
@@ -184996,12 +185335,12 @@ function todoAction(node) {
   if (node.progress.recoverability === "partial") return `\u8282\u70B9 ${node.nodeState}\uFF0Ccheckpoint \u90E8\u5206\u53EF\u6062\u590D\uFF0C\u9700\u5173\u6CE8\u5DF2\u6709\u4EA7\u51FA`;
   return `\u8282\u70B9 ${node.nodeState}\uFF0Ccheckpoint \u4E0D\u53EF\u6062\u590D`;
 }
-var import_node_crypto35, DONE_STATES, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, TODO_RANK, ExecutionContinuityService;
+var import_node_crypto36, DONE_STATES, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, TODO_RANK, ExecutionContinuityService;
 var init_service7 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src2();
-    import_node_crypto35 = require("node:crypto");
+    import_node_crypto36 = require("node:crypto");
     init_src5();
     DONE_STATES = /* @__PURE__ */ new Set(["succeeded", "no_change"]);
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
@@ -185231,7 +185570,7 @@ var init_service7 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto35.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto36.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -185732,7 +186071,7 @@ function createChatSessionsDomain(opts) {
       if (!text.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto36.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto37.randomUUID)()}`;
       drafts.set(id, { text, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -185765,7 +186104,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = await currentRuntimeId(body.aiActorId) ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto36.randomUUID)(),
+        id: (0, import_node_crypto37.randomUUID)(),
         humanActorId: req.auth.actor,
         aiActorId: body.aiActorId,
         runtimeId,
@@ -185838,7 +186177,7 @@ function createChatSessionsDomain(opts) {
       if (body.role !== "user" && body.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body.role;
       const msg = await store.appendMessage({
-        id: (0, import_node_crypto36.randomUUID)(),
+        id: (0, import_node_crypto37.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body.content) : body.content,
@@ -185848,6 +186187,47 @@ function createChatSessionsDomain(opts) {
       await store.updateSession(req.params.id, { touchedAt: (/* @__PURE__ */ new Date()).toISOString() });
       return { status: 201, body: msg };
     });
+    router.get("/api/chat-sessions/:id/turns/active", async (req) => {
+      if (!opts.chatTurns) throw new ApiError(404, "NOT_FOUND", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C");
+      const session = await store.getSession(req.params.id);
+      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const turn = await opts.chatTurns.activeTurn(req.params.id);
+      return { status: 200, body: { turn } };
+    });
+    router.post("/api/chat-sessions/:id/turns/:turnId/settle", async (req) => {
+      if (!opts.chatTurns) throw new ApiError(404, "NOT_FOUND", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C");
+      const session = await store.getSession(req.params.id);
+      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const turn = await opts.chatTurns.getTurn(req.params.turnId);
+      if (!turn || turn.chatSessionId !== req.params.id) throw new ApiError(404, "NOT_FOUND", "turn not found");
+      const body = req.body ?? {};
+      if (turn.status !== "reserved" && turn.status !== "running") {
+        return { status: 200, body: { settled: false, reason: "already_terminal", turn } };
+      }
+      if (body.force) {
+        await opts.chatTurns.settleTurn(turn.id, {
+          status: "cancelled",
+          completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+          lastError: `\u8FD0\u7EF4\u5F3A\u5236\u7F6E\u7EC8\u6001\uFF08${req.auth.actor}\uFF09\uFF1A${body.reason ?? "\u672A\u586B\u539F\u56E0"}`
+        });
+        return { status: 200, body: { settled: true, status: "cancelled", turn: await opts.chatTurns.getTurn(turn.id) } };
+      }
+      const outcome = await reconcileChatTurn(turn, {
+        turns: opts.chatTurns,
+        getRun: opts.getRun ?? (async () => null),
+        now: Date.now(),
+        // 运维入口不吃「宽限」——人是在明确要求现在就核实一次。
+        noRunGraceMs: 0
+      });
+      if (!outcome.settled) {
+        throw new ApiError(
+          409,
+          "CHAT_TURN_STILL_RUNNING",
+          `\u8FD9\u4E00\u8F6E\u5728\u8D26\u672C\u91CC\u4ECD\u662F\u6D3B\u7684\uFF08${outcome.reason}\uFF09\uFF0C\u4E0D\u80FD\u7F6E\u7EC8\u6001\u3002\u786E\u8BA4\u6267\u884C\u4EBA\u5DF2\u7ECF\u6B7B\u4E86\u518D\u52A0 force=true\u3002`
+        );
+      }
+      return { status: 200, body: { settled: true, status: outcome.status, reason: outcome.reason, turn: await opts.chatTurns.getTurn(turn.id) } };
+    });
     router.post("/api/chat-sessions/:id/work-orders", async (req) => {
       const session = await store.getSession(req.params.id);
       if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
@@ -185943,16 +186323,17 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto36, WORKDIR_READ_MAX_BYTES;
+var import_node_crypto37, WORKDIR_READ_MAX_BYTES;
 var init_chat_sessions = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
-    import_node_crypto36 = require("node:crypto");
+    import_node_crypto37 = require("node:crypto");
     init_chat_session();
     init_router();
     init_workorders();
     init_chat_parts();
     init_injected_context();
+    init_chat_turn_gate();
     init_project_bundle();
     WORKDIR_READ_MAX_BYTES = 2 * 1024 * 1024;
   }
@@ -186481,7 +186862,9 @@ var init_registry3 = __esm({
 
 // ../server/src/domains/automations/attribution.ts
 function automationSubstantiveChange(before, after) {
-  return before.executionMode !== after.executionMode || (before.agentId ?? null) !== (after.agentId ?? null) || (before.playbookRef ?? null) !== (after.playbookRef ?? null) || !jsonEq(before.payload, after.payload) || (before.titleTemplate ?? null) !== (after.titleTemplate ?? null) || before.dispatch !== after.dispatch || before.enabled !== after.enabled;
+  return before.executionMode !== after.executionMode || (before.agentId ?? null) !== (after.agentId ?? null) || (before.playbookRef ?? null) !== (after.playbookRef ?? null) || !jsonEq(before.payload, after.payload) || (before.titleTemplate ?? null) !== (after.titleTemplate ?? null) || before.dispatch !== after.dispatch || before.enabled !== after.enabled || // 目标会话策略（ADR 会话投递 D1）：改「发到哪儿」= 改怎么跑，问责随之转移。
+  // 归一后比较，`null` 与 `{mode:"new_session"}` 是同一件事，不该被判成变更。
+  !jsonEq(chatTargetKey(before), chatTargetKey(after)) || (before.ownerHumanActorId ?? null) !== (after.ownerHumanActorId ?? null);
 }
 function triggerSubstantiveChange(before, after) {
   if (before.enabled !== after.enabled) return true;
@@ -186500,13 +186883,20 @@ function configSummaryOf(a) {
     payload: a.payload ?? null,
     titleTemplate: a.titleTemplate ?? null,
     dispatch: a.dispatch,
-    enabled: a.enabled
+    enabled: a.enabled,
+    chatTarget: chatTargetKey(a),
+    ownerHumanActorId: a.ownerHumanActorId ?? null
   };
 }
+function chatTargetKey(a) {
+  const t = normalizeChatTarget(a.chatTarget);
+  return t.mode === "existing_session" ? { mode: t.mode, sessionId: t.sessionId } : { mode: "new_session" };
+}
 var jsonEq;
 var init_attribution = __esm({
   "../server/src/domains/automations/attribution.ts"() {
     "use strict";
+    init_src2();
     jsonEq = (a, b2) => JSON.stringify(a ?? null) === JSON.stringify(b2 ?? null);
   }
 });
@@ -187322,8 +187712,11 @@ var init_scheduler = __esm({
 });
 
 // ../server/src/domains/automations/service.ts
+function busyError(chatSessionId, blockedBy) {
+  return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
+}
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto37.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto38.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -187379,11 +187772,12 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto37, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto38, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service8 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto37 = require("node:crypto");
+    import_node_crypto38 = require("node:crypto");
+    init_src2();
     init_registry3();
     init_attribution();
     init_scheduler();
@@ -187391,12 +187785,14 @@ var init_service8 = __esm({
     AutomationsService = class {
       store;
       deps;
+      targets;
       genId;
       now;
       log;
       constructor(opts) {
         this.store = opts.store;
         this.deps = opts.fire;
+        if (opts.chatTargets) this.targets = opts.chatTargets;
         this.genId = opts.genId ?? ((p2) => `${p2}_${Math.random().toString(36).slice(2, 12)}`);
         this.now = opts.now ?? (() => /* @__PURE__ */ new Date());
         if (opts.log) this.log = opts.log;
@@ -187439,6 +187835,8 @@ var init_service8 = __esm({
           if (input.enabled !== before.enabled) patch.pauseReason = null;
         }
         if (input.subscribers !== void 0) patch.subscribers = input.subscribers;
+        if (input.chatTarget !== void 0) patch.chatTarget = input.chatTarget;
+        if (input.ownerHumanActorId !== void 0) patch.ownerHumanActorId = input.ownerHumanActorId;
         const updated = await this.store.updateAutomation(id, patch);
         let substantive = automationSubstantiveChange(before, updated);
         if (input.triggers !== void 0) {
@@ -187535,6 +187933,83 @@ var init_service8 = __esm({
           createdAt: this.now().toISOString()
         });
       }
+      /* ---------- 固定目标会话（ADR 会话投递 D1/D3/D8） ---------- */
+      /** 固定会话功能是否可用（接缝 + 轮次账本都在才算）。前端读能力位，不自己按部署形态猜。 */
+      chatTargetSupported() {
+        return Boolean(this.targets && this.deps.chatTurns);
+      }
+      /** 鉴权 actor → 人类归属者（D3）。 */
+      resolveOwnerHuman(actor) {
+        return this.targets ? this.targets.resolveOwnerHuman(actor) : Promise.resolve(null);
+      }
+      /**
+       * 保存期校验（D3）：目标必须当场可投递。返回 null = 通过，否则给出具体 issue。
+       * **不做任何自动修正**——不改绑会话的 AI 身份、不替换归属人、不回退成新会话。
+       */
+      async validateChatTarget(a, sessionId) {
+        if (!this.targets) return "session_missing";
+        const r = await this.targets.inspect({
+          companyId: a.companyId,
+          agentId: a.agentId,
+          ownerHumanActorId: a.ownerHumanActorId,
+          sessionId
+        });
+        return r.ok ? null : r.issue;
+      }
+      /** 详情/列表用的目标只读投影（含成本观测）。非固定会话返回 null。 */
+      async chatTargetView(a) {
+        const target = normalizeChatTarget(a.chatTarget);
+        if (target.mode !== "existing_session") return null;
+        if (!this.targets) {
+          return { sessionId: target.sessionId, available: false, issue: "session_missing", title: null, touchedAt: null, messageCount: null };
+        }
+        const r = await this.targets.inspect({
+          companyId: a.companyId,
+          agentId: a.agentId,
+          ownerHumanActorId: a.ownerHumanActorId,
+          sessionId: target.sessionId
+        });
+        if (r.ok) {
+          return { sessionId: target.sessionId, available: true, title: r.title, touchedAt: r.touchedAt, messageCount: r.messageCount };
+        }
+        return {
+          sessionId: target.sessionId,
+          available: false,
+          issue: r.issue,
+          title: r.title ?? null,
+          touchedAt: r.touchedAt ?? null,
+          messageCount: null
+        };
+      }
+      /** 选择器搜索（D8）。接缝缺省时给空集合而不是报错——前端展示「不可用」即可。 */
+      async searchChatTargets(args) {
+        if (!this.targets) return { items: [], hasMore: false };
+        return this.targets.search(args);
+      }
+      /**
+       * 「为这条自动化新建长期目标会话」的**服务端复合入口**（D1）：建会话 + 回填 chatTarget。
+       *
+       * 之所以不让前端拼「建会话 → 更新自动化」：后者中途失败会留下一个没有来源、谁也不认领的
+       * 孤儿会话。这里的补偿方向刻意选成「回填失败就把刚建的会话删掉」——宁可这次白建，
+       * 也不让一个自动化指着半个配置。
+       */
+      async createChatTargetSession(automation, editor) {
+        if (!this.targets) throw new Error("\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u76EE\u6807\u63A5\u7F1D");
+        if (automation.executionMode !== "chat" || !automation.agentId) throw new Error("\u53EA\u6709 chat \u6A21\u5F0F\u4E14\u5DF2\u8BBE\u6267\u884C\u4EBA\u7684\u81EA\u52A8\u5316\u624D\u80FD\u5EFA\u957F\u671F\u76EE\u6807\u4F1A\u8BDD");
+        if (!automation.ownerHumanActorId) throw new Error("\u8FD9\u6761\u81EA\u52A8\u5316\u6CA1\u6709\u53EF\u7528\u7684\u4EBA\u7C7B\u5F52\u5C5E\u8005\uFF0C\u65E0\u6CD5\u5EFA\u957F\u671F\u76EE\u6807\u4F1A\u8BDD");
+        const { sessionId } = await this.targets.createTargetSession({
+          companyId: automation.companyId,
+          agentId: automation.agentId,
+          ownerHumanActorId: automation.ownerHumanActorId,
+          title: `\u81EA\u52A8\u5316 \xB7 ${automation.name}`.slice(0, 80)
+        });
+        try {
+          return await this.updateAutomation(automation.id, { chatTarget: { mode: "existing_session", sessionId } }, editor);
+        } catch (e) {
+          await this.targets.deleteSession(sessionId).catch(() => void 0);
+          throw e;
+        }
+      }
       /* ---------- firing（ADR 0156 D1/D3） ---------- */
       /**
        * 触发一次协作。链路：幂等落 run(pending) → 准入检查 → 真剧本解析 → SeededWorkorderCreator 建单
@@ -187576,7 +188051,7 @@ var init_service8 = __esm({
        */
       async dispatchRun(automation, trigger, run, source, opts = {}) {
         const skip = await this.admissionSkip(automation, source);
-        if (skip) return this.settleSkip(run, skip.reasonCode, skip.error);
+        if (skip) return this.settleSkip(run, skip.reasonCode, skip.error, skip.result);
         if (automation.executionMode === "chat") {
           return this.fireChat(automation, trigger, run, opts);
         }
@@ -187719,7 +188194,10 @@ var init_service8 = __esm({
         if (!automation.enabled) return { reasonCode: "automation_paused", error: "\u81EA\u52A8\u5316\u5DF2\u6682\u505C" };
         if (automation.executionMode === "chat") {
           if (!automation.agentId) return { reasonCode: "config_error", error: "chat \u6A21\u5F0F\u7F3A\u5C11\u6267\u884C\u4EBA\uFF08agentId\uFF09" };
-          if (!this.deps.runChat) return { reasonCode: "config_error", error: "\u672C\u5B9E\u4F8B\u672A\u63A5 chat \u6267\u884C" };
+          if (!this.deps.chat) return { reasonCode: "config_error", error: "\u672C\u5B9E\u4F8B\u672A\u63A5 chat \u6267\u884C" };
+          if (!this.deps.chatTurns) {
+            return { reasonCode: "config_error", error: "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C\uFF08\u65E0\u6CD5\u5224\u5B9A\u76EE\u6807\u4F1A\u8BDD\u662F\u5426\u5728\u8DD1\uFF09" };
+          }
           if (source === "event" && !this.deps.chatSupportsIdempotency) {
             return { reasonCode: "config_error", error: "\u5BF9\u8BDD\u6267\u884C\u6682\u4E0D\u652F\u6301\u8BA2\u9605\u89E6\u53D1\uFF08chat \u9002\u914D\u5668\u7F3A\u6301\u4E45\u5E42\u7B49\u952E\uFF09" };
           }
@@ -187736,29 +188214,67 @@ var init_service8 = __esm({
           return { reasonCode: "config_error", error: `\u5267\u672C ${automation.playbookRef} \u4E0D\u652F\u6301\u5EFA\u5355` };
         }
         if (automation.projectId && this.deps.projectExists && !await this.deps.projectExists(automation.projectId)) {
-          return { reasonCode: "target_unavailable", error: `\u76EE\u6807\u9879\u76EE\u4E0D\u5B58\u5728\uFF1A${automation.projectId}` };
+          return {
+            reasonCode: "target_unavailable",
+            error: `\u76EE\u6807\u9879\u76EE\u4E0D\u5B58\u5728\uFF1A${automation.projectId}`,
+            result: { targetKind: "project", projectId: automation.projectId }
+          };
         }
         return null;
       }
       /**
-       * chat 模式执行（ADR 0159）：run 置 running（会话在途）→ 会话结束回调落 succeeded(+reply)/failed。
-       * 进程重启会丢回调——syncRuns 对超时 running 兜底回收（chat_lost）。
+       * chat 模式执行（ADR 0159 + 会话投递 D2）。三步各自可单测、职责不重叠：
+       *
+       *  1. **解析目标**（不写消息、不 dispatch）：`new_session` 由 run id 确定性映射出一个会话，
+       *     `existing_session` 读固定会话并复查 D3 五条。
+       *  2. **持久占位**：拿到 active slot 才有资格产生副作用；拿不到 = 别人在跑 → 本次触发丢弃。
+       *  3. **消费占位**：写确定性消息、真 dispatch、收流收口。
+       *
+       * 进程重启会丢 onDone 回调——syncRuns 对超时 running 兜底回收（chat_lost）。
        */
       async fireChat(automation, trigger, run, opts) {
         const now = this.now();
         const tz = trigger?.schedule?.tz;
         const title = automation.titleTemplate ? automation.titleTemplate.replace(DATE_TOKEN, renderDate(now, tz)) : `${automation.name} ${renderDate(now, tz)}`;
         const prompt = buildChatPrompt(automation, title, opts.envelope);
-        const human = automation.createdBy?.startsWith("actor:human:") ? automation.createdBy : null;
+        let target;
         try {
-          const { chatSessionId } = await this.deps.runChat(
-            { agentId: automation.agentId, humanActorId: human, title, prompt },
+          target = await this.deps.chat.resolveTarget({ automation, runId: run.id, title });
+        } catch (e) {
+          return this.failChatRun(run, e instanceof Error ? e.message : String(e));
+        }
+        if (!target.ok) return this.settleSkip(run, target.reasonCode, target.error, target.result);
+        const claim = await this.claimChatTurn(run, target.chatSessionId).catch((e) => e);
+        if (claim instanceof Error) return this.failChatRun(run, claim.message);
+        if (claim.outcome === "busy") {
+          await this.store.settleRun(run.id, {
+            status: "skipped",
+            reasonCode: "session_busy",
+            error: busyError(target.chatSessionId, claim.activeTurn.sourceRunId),
+            result: { chatSessionId: target.chatSessionId, blockedByTurnId: claim.activeTurn.id },
+            completedAt: this.now().toISOString()
+          });
+          this.log?.(`[automations] run ${run.id} \u8DF3\u8FC7\uFF1A\u76EE\u6807\u4F1A\u8BDD ${target.chatSessionId} \u6B63\u5FD9\uFF08active turn ${claim.activeTurn.id}\uFF09`);
+          return await this.store.getRun(run.id);
+        }
+        const turn = claim.turn;
+        const chatSessionId = target.chatSessionId;
+        try {
+          await this.deps.chat.dispatchTurn(
+            {
+              automation,
+              chatSessionId,
+              turnId: turn.id,
+              messageKey: turn.messageKey,
+              prompt,
+              runId: run.id
+            },
             async (out) => {
               try {
                 if (out.ok) {
                   await this.store.settleRun(run.id, {
                     status: "succeeded",
-                    result: { chatSessionId, ...out.reply ? { reply: clipReply(out.reply) } : {} },
+                    result: { chatSessionId, turnId: turn.id, ...out.reply ? { reply: clipReply(out.reply) } : {} },
                     completedAt: this.now().toISOString()
                   });
                 } else {
@@ -187766,7 +188282,7 @@ var init_service8 = __esm({
                     status: "failed",
                     error: out.error ?? "\u4F1A\u8BDD\u6267\u884C\u5931\u8D25",
                     reasonCode: "spawn_failed",
-                    result: { chatSessionId },
+                    result: { chatSessionId, turnId: turn.id },
                     completedAt: this.now().toISOString()
                   });
                 }
@@ -187777,26 +188293,56 @@ var init_service8 = __esm({
           );
           await this.store.settleRun(run.id, {
             status: "running",
-            result: { chatSessionId },
+            result: { chatSessionId, turnId: turn.id },
             completedAt: null
           });
           return await this.store.getRun(run.id);
         } catch (e) {
           const msg = e instanceof Error ? e.message : String(e);
-          await this.store.settleRun(run.id, {
-            status: "failed",
-            error: msg,
-            reasonCode: "spawn_failed",
-            completedAt: this.now().toISOString()
+          await this.deps.chatTurns.settleTurn(turn.id, { status: "failed", completedAt: this.now().toISOString(), lastError: msg }).catch((err) => this.log?.(`[automations] \u8F6E\u6B21\u6536\u53E3\u5931\u8D25 ${turn.id}: ${String(err)}`));
+          return this.failChatRun(run, msg, { chatSessionId, turnId: turn.id });
+        }
+      }
+      /**
+       * 占位（ADR 会话投递 D5）。存储层给了复合操作就走复合（claim 与 busy 落账同一事务）；
+       * 没给则退回两步——单进程内存实现语义等价，多实例部署一律有复合实现。
+       */
+      async claimChatTurn(run, chatSessionId) {
+        const input = {
+          turnId: this.genId("cturn"),
+          chatSessionId,
+          source: "automation",
+          sourceRunId: automationTurnSourceRunId(run.id),
+          messageKey: automationTurnMessageKey(run.id),
+          reservedAt: this.now().toISOString()
+        };
+        if (this.store.claimChatTurnForRun) {
+          return this.store.claimChatTurnForRun({
+            ...input,
+            automationRunId: run.id,
+            busyError: busyError(chatSessionId, ""),
+            now: this.now().toISOString()
           });
-          return await this.store.getRun(run.id);
         }
+        return this.deps.chatTurns.claimTurn(input);
+      }
+      /** chat 路径的失败收口（基础设施故障，非 event 源，ADR 会话投递 D7）。 */
+      async failChatRun(run, error2, result) {
+        await this.store.settleRun(run.id, {
+          status: "failed",
+          error: error2,
+          reasonCode: "spawn_failed",
+          ...result !== void 0 ? { result } : {},
+          completedAt: this.now().toISOString()
+        });
+        return await this.store.getRun(run.id);
       }
-      async settleSkip(run, reasonCode, error2) {
+      async settleSkip(run, reasonCode, error2, result) {
         await this.store.settleRun(run.id, {
           status: "skipped",
           reasonCode,
           error: error2,
+          ...result !== void 0 ? { result } : {},
           completedAt: this.now().toISOString()
         });
         return await this.store.getRun(run.id);
@@ -188035,11 +188581,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto38.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto39.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto38.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto39.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -188069,11 +188615,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto38, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto39, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto38 = require("node:crypto");
+    import_node_crypto39 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -188360,7 +188906,9 @@ function buildAutomationSummary(automation, triggers, recent, canWrite) {
     nextRunAt,
     recent: ordered.slice(0, RECENT_LIMIT).map(stripRunPayload),
     canWrite,
-    capabilities: { eventTrigger: { supported: true } }
+    capabilities: { eventTrigger: { supported: true } },
+    // 固定目标会话的只读投影要查会话表，纯派生函数够不着——路由层用 service.chatTargetView 覆盖。
+    chatTargetView: null
   };
 }
 function deriveNextRunAt(triggers) {
@@ -188474,6 +189022,23 @@ function assertModeConfig(mode, agentId, playbookRef) {
   if (!playbookRef?.trim()) throw new ApiError(400, "BAD_REQUEST", "workorder \u6A21\u5F0F\u7F3A\u5C11 playbookRef");
   assertPlaybook(playbookRef);
 }
+function validateChatTarget(raw, mode) {
+  if (raw === void 0) return void 0;
+  if (raw === null) return null;
+  if (mode !== "chat") throw new ApiError(400, "BAD_REQUEST", "chatTarget \u53EA\u5728\u5BF9\u8BDD\u6267\u884C\uFF08chat\uFF09\u6A21\u5F0F\u4E0B\u6709\u610F\u4E49");
+  const t = raw;
+  if (t?.mode === "new_session") {
+    if (t.sessionId !== void 0) throw new ApiError(400, "BAD_REQUEST", "chatTarget.mode=new_session \u65F6\u4E0D\u80FD\u5E26 sessionId");
+    return { mode: "new_session" };
+  }
+  if (t?.mode === "existing_session") {
+    if (typeof t.sessionId !== "string" || !t.sessionId.trim()) {
+      throw new ApiError(400, "BAD_REQUEST", "chatTarget.mode=existing_session \u9700\u8981 sessionId");
+    }
+    return { mode: "existing_session", sessionId: t.sessionId.trim() };
+  }
+  throw new ApiError(400, "BAD_REQUEST", "chatTarget.mode \u53EA\u80FD\u662F new_session \u6216 existing_session");
+}
 function assertTitleTemplate(tpl) {
   if (!tpl) return;
   const unknown2 = validateTitleTemplate(tpl);
@@ -188548,7 +189113,9 @@ function automationsDomain(opts) {
     return {
       ...buildAutomationSummary(automation, decorated, recent, canWrite),
       // 能力位服务端算（ADR 0163 §10）：前端只消费不推断，否则前后端两套规则必漂移。
-      capabilities: { eventTrigger: service.eventTriggerCapability(automation) }
+      capabilities: { eventTrigger: service.eventTriggerCapability(automation) },
+      // 固定目标会话的可用性同理：D3 五条只在服务端有真值，前端复制一份必然漂移。
+      chatTargetView: await service.chatTargetView(automation)
     };
   };
   const assertEventTriggerWritable = async (mode, cfg, existing, req) => {
@@ -188578,6 +189145,15 @@ function automationsDomain(opts) {
       throw new ApiError(400, "EVENT_TRIGGER_UNSUPPORTED", "\u8FD9\u6761\u81EA\u52A8\u5316\u6709\u8BA2\u9605\u89E6\u53D1\u5668\uFF0C\u6539\u6210\u5BF9\u8BDD\u6267\u884C\u4F1A\u5931\u53BB\u6301\u4E45\u5E42\u7B49\u4FDD\u8BC1\u2014\u2014\u8BF7\u5148\u5220\u9664\u8BA2\u9605\u89E6\u53D1\u5668");
     }
   };
+  const assertChatTargetUsable = async (a, target) => {
+    if (target?.mode !== "existing_session") return;
+    if (!service.chatTargetSupported()) {
+      throw new ApiError(400, "CHAT_TARGET_UNSUPPORTED", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C\uFF0C\u6682\u4E0D\u652F\u6301\u56FA\u5B9A\u76EE\u6807\u4F1A\u8BDD");
+    }
+    const issue2 = await service.validateChatTarget(a, target.sessionId);
+    if (issue2) throw new ApiError(400, "CHAT_TARGET_UNAVAILABLE", TARGET_ISSUE_MESSAGE[issue2]);
+  };
+  const resolveOwner2 = async (existing, req) => existing ?? await service.resolveOwnerHuman(req.auth.actor);
   return (router) => {
     router.get("/api/automations/templates", async () => {
       const body = { items: AUTOMATION_TEMPLATES };
@@ -188591,6 +189167,32 @@ function automationsDomain(opts) {
       const body = { next: cronNextN(expr, tz, 3) };
       return { status: 200, body };
     });
+    router.get("/api/automations/chat-session-options", async (req) => {
+      const agentId = req.query?.get("agentId") ?? "";
+      if (!agentId.startsWith("actor:agent:")) throw new ApiError(400, "BAD_REQUEST", "\u9700\u8981 agentId\uFF08actor:agent:*\uFF09");
+      if (!service.chatTargetSupported()) {
+        throw new ApiError(400, "CHAT_TARGET_UNSUPPORTED", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C\uFF0C\u6682\u4E0D\u652F\u6301\u56FA\u5B9A\u76EE\u6807\u4F1A\u8BDD");
+      }
+      const owner = await service.resolveOwnerHuman(req.auth.actor);
+      if (!owner) {
+        const empty = { items: [], hasMore: false };
+        return { status: 200, body: empty };
+      }
+      const limitRaw = Number(req.query?.get("limit"));
+      const offsetRaw = Number(req.query?.get("offset"));
+      const limit = Number.isInteger(limitRaw) && limitRaw > 0 ? Math.min(limitRaw, 50) : 20;
+      const offset = Number.isInteger(offsetRaw) && offsetRaw > 0 ? offsetRaw : 0;
+      const text = req.query?.get("q")?.trim();
+      const body = await service.searchChatTargets({
+        companyId: companyOf(req),
+        agentId,
+        ownerHumanActorId: owner,
+        ...text ? { text } : {},
+        limit,
+        offset
+      });
+      return { status: 200, body };
+    });
     router.get("/api/automations", async (req) => {
       const includeArchived = req.query.get("includeArchived") === "1";
       const automations = await service.listAutomations(companyOf(req), { includeArchived });
@@ -188644,12 +189246,30 @@ function automationsDomain(opts) {
       const subscribers = assertActorIds(b2.subscribers, "subscribers");
       const triggers = validateTriggers(b2.triggers);
       await assertEventTriggerInputs(mode, triggers, [], req);
+      const chatTarget = validateChatTarget(b2.chatTarget, mode);
+      const createTargetSession = Boolean(b2.createChatTargetSession);
+      if (createTargetSession) {
+        if (mode !== "chat") throw new ApiError(400, "BAD_REQUEST", "createChatTargetSession \u53EA\u5728\u5BF9\u8BDD\u6267\u884C\uFF08chat\uFF09\u6A21\u5F0F\u4E0B\u6709\u610F\u4E49");
+        if (chatTarget?.mode === "existing_session") {
+          throw new ApiError(400, "BAD_REQUEST", "createChatTargetSession \u4E0E chatTarget.existing_session \u4E92\u65A5");
+        }
+        if (!service.chatTargetSupported()) {
+          throw new ApiError(400, "CHAT_TARGET_UNSUPPORTED", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C\uFF0C\u6682\u4E0D\u652F\u6301\u56FA\u5B9A\u76EE\u6807\u4F1A\u8BDD");
+        }
+      }
+      const ownerHumanActorId = mode === "chat" ? await service.resolveOwnerHuman(req.auth.actor) : null;
+      if (mode === "chat" && !ownerHumanActorId && (chatTarget?.mode === "existing_session" || createTargetSession)) {
+        throw new ApiError(400, "CHAT_TARGET_NO_OWNER", "\u89E3\u6790\u4E0D\u5230\u4EBA\u7C7B\u5F52\u5C5E\u8005\uFF0C\u65E0\u6CD5\u914D\u7F6E\u56FA\u5B9A\u76EE\u6807\u4F1A\u8BDD");
+      }
+      await assertChatTargetUsable({ companyId: companyOf(req), agentId: b2.agentId ?? null, ownerHumanActorId }, chatTarget);
       const created = await service.createAutomation({
         companyId: companyOf(req),
         name: b2.name,
         ...b2.description !== void 0 ? { description: b2.description } : {},
         executionMode: mode,
         ...b2.agentId !== void 0 ? { agentId: b2.agentId } : {},
+        ...chatTarget !== void 0 ? { chatTarget } : {},
+        ...ownerHumanActorId ? { ownerHumanActorId } : {},
         ...b2.projectId !== void 0 ? { projectId: b2.projectId } : {},
         ...b2.playbookRef !== void 0 ? { playbookRef: b2.playbookRef } : {},
         ...b2.payload !== void 0 ? { payload: b2.payload } : {},
@@ -188661,7 +189281,8 @@ function automationsDomain(opts) {
         // 一律取鉴权身份，不收请求体（归属不可伪造）
         ...triggers !== void 0 ? { triggers } : {}
       });
-      return { status: 201, body: await summarize3(created, req) };
+      const withTarget = createTargetSession ? await service.createChatTargetSession(created, req.auth.actor) : created;
+      return { status: 201, body: await summarize3(withTarget, req) };
     });
     router.patch("/api/automations/:id", async (req) => {
       const automation = await mustGet(req);
@@ -188680,6 +189301,14 @@ function automationsDomain(opts) {
       const kept = triggers !== void 0 ? [] : (await service.listTriggers(automation.id)).filter((t) => t.kind === "event" && t.event).map((t) => t.event);
       await assertEventTriggerInputs(effMode, triggers, kept, req);
       if (triggers === void 0) await assertModeKeepsEventTriggers(automation, effMode);
+      const chatTarget = validateChatTarget(b2.chatTarget, effMode);
+      const effTarget = chatTarget !== void 0 ? chatTarget : automation.chatTarget;
+      const nextTarget = effMode === "workorder" ? null : effTarget;
+      const ownerHumanActorId = effMode === "chat" ? await resolveOwner2(automation.ownerHumanActorId, req) : null;
+      if (effMode === "chat" && nextTarget?.mode === "existing_session" && !ownerHumanActorId) {
+        throw new ApiError(400, "CHAT_TARGET_NO_OWNER", "\u89E3\u6790\u4E0D\u5230\u4EBA\u7C7B\u5F52\u5C5E\u8005\uFF0C\u65E0\u6CD5\u914D\u7F6E\u56FA\u5B9A\u76EE\u6807\u4F1A\u8BDD");
+      }
+      await assertChatTargetUsable({ companyId: automation.companyId, agentId: effAgent ?? null, ownerHumanActorId }, nextTarget);
       const updated = await service.updateAutomation(
         automation.id,
         {
@@ -188694,12 +189323,28 @@ function automationsDomain(opts) {
           ...b2.dispatch !== void 0 ? { dispatch: Boolean(b2.dispatch) } : {},
           ...b2.enabled !== void 0 ? { enabled: b2.enabled } : {},
           ...subscribers !== void 0 ? { subscribers } : {},
-          ...triggers !== void 0 ? { triggers } : {}
+          ...triggers !== void 0 ? { triggers } : {},
+          ...nextTarget !== automation.chatTarget ? { chatTarget: nextTarget } : {},
+          ...ownerHumanActorId !== automation.ownerHumanActorId ? { ownerHumanActorId } : {}
         },
         req.auth.actor
       );
       return { status: 200, body: await summarize3(updated, req) };
     });
+    router.post("/api/automations/:id/chat-target-session", async (req) => {
+      const automation = await mustGet(req);
+      await requireWrite(automation, req);
+      if (automation.executionMode !== "chat") throw new ApiError(400, "BAD_REQUEST", "\u53EA\u6709\u5BF9\u8BDD\u6267\u884C\uFF08chat\uFF09\u6A21\u5F0F\u624D\u6709\u76EE\u6807\u4F1A\u8BDD");
+      if (!automation.agentId) throw new ApiError(400, "BAD_REQUEST", "\u5148\u7ED9\u8FD9\u6761\u81EA\u52A8\u5316\u8BBE\u7F6E\u6267\u884C\u4EBA");
+      if (!service.chatTargetSupported()) {
+        throw new ApiError(400, "CHAT_TARGET_UNSUPPORTED", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C\uFF0C\u6682\u4E0D\u652F\u6301\u56FA\u5B9A\u76EE\u6807\u4F1A\u8BDD");
+      }
+      const owner = await resolveOwner2(automation.ownerHumanActorId, req);
+      if (!owner) throw new ApiError(400, "CHAT_TARGET_NO_OWNER", "\u89E3\u6790\u4E0D\u5230\u4EBA\u7C7B\u5F52\u5C5E\u8005\uFF0C\u65E0\u6CD5\u5EFA\u957F\u671F\u76EE\u6807\u4F1A\u8BDD");
+      const withOwner = automation.ownerHumanActorId ? automation : await service.updateAutomation(automation.id, { ownerHumanActorId: owner }, req.auth.actor);
+      const updated = await service.createChatTargetSession(withOwner, req.auth.actor);
+      return { status: 201, body: await summarize3(updated, req) };
+    });
     router.post("/api/automations/:id/enabled", async (req) => {
       const automation = await mustGet(req);
       await requireWrite(automation, req);
@@ -188847,7 +189492,7 @@ function automationsDomain(opts) {
     });
   };
 }
-var RECENT_LIMIT2;
+var RECENT_LIMIT2, TARGET_ISSUE_MESSAGE;
 var init_routes9 = __esm({
   "../server/src/domains/automations/routes.ts"() {
     "use strict";
@@ -188860,6 +189505,13 @@ var init_routes9 = __esm({
     init_registry3();
     init_migrate();
     RECENT_LIMIT2 = 5;
+    TARGET_ISSUE_MESSAGE = {
+      session_missing: "\u76EE\u6807\u4F1A\u8BDD\u4E0D\u5B58\u5728\u6216\u5DF2\u88AB\u5220\u9664",
+      cross_company: "\u76EE\u6807\u4F1A\u8BDD\u5C5E\u4E8E\u5176\u5B83\u516C\u53F8\uFF0C\u4E0D\u80FD\u8DE8\u516C\u53F8\u6295\u9012",
+      company_unknown: "\u8FD9\u6761\u5386\u53F2\u4F1A\u8BDD\u6CA1\u6709\u516C\u53F8\u5F52\u5C5E\uFF0C\u4E0D\u80FD\u4F5C\u4E3A\u56FA\u5B9A\u76EE\u6807\u2014\u2014\u8BF7\u65B0\u5EFA\u4E00\u4E2A\u957F\u671F\u4F1A\u8BDD",
+      owner_mismatch: "\u76EE\u6807\u4F1A\u8BDD\u4E0D\u5C5E\u4E8E\u8FD9\u6761\u81EA\u52A8\u5316\u7684\u5F52\u5C5E\u4EBA",
+      agent_mismatch: "\u76EE\u6807\u4F1A\u8BDD\u7684 AI \u8EAB\u4EFD\u4E0E\u6267\u884C\u4EBA\u4E0D\u4E00\u81F4\u2014\u2014\u8BF7\u6362\u4E00\u4E2A\u4F1A\u8BDD\u6216\u6539\u6267\u884C\u4EBA\uFF08\u4E0D\u4F1A\u81EA\u52A8\u6539\u7ED1\uFF09"
+    };
   }
 });
 
@@ -188932,6 +189584,7 @@ function createAutomationsDomain(opts) {
   const service = new AutomationsService({
     store: opts.store,
     fire: opts.fire,
+    ...opts.chatTargets ? { chatTargets: opts.chatTargets } : {},
     ...opts.genId ? { genId: opts.genId } : {},
     ...opts.now ? { now: opts.now } : {},
     ...opts.log ? { log: opts.log } : {}
@@ -189116,7 +189769,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto39.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto40.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -189133,11 +189786,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto39;
+var import_node_crypto40;
 var init_routes10 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto39 = require("node:crypto");
+    import_node_crypto40 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -189249,17 +189902,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto40.createHash)("sha256").update(canonical).digest("hex");
+  return (0, import_node_crypto41.createHash)("sha256").update(canonical).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto40.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto41.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto40, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto41, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto40 = require("node:crypto");
+    import_node_crypto41 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -189478,11 +190131,11 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     entry.appendWaiters.push({ resolve: resolve10, timer });
   });
 }
-var import_node_crypto41, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto42, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto41 = require("node:crypto");
+    import_node_crypto42 = require("node:crypto");
     init_src2();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 500;
@@ -189498,6 +190151,7 @@ var init_daemon_adapter = __esm({
         this.log = opts.log ?? ((m2) => console.warn(m2));
         this.health = opts.health;
         this.stashEnabled = opts.stashUnknownFrames ?? false;
+        this.onSettleWithoutFrame = opts.onSettleWithoutFrame;
         hub.addMessageListener((_daemonId, msg) => this.onDaemonMessage(msg));
         hub.addDisconnectListener((daemonId) => this.onNodeDown(daemonId));
         hub.addConnectListener((daemon) => this.onNodeUp(daemon));
@@ -189517,6 +190171,8 @@ var init_daemon_adapter = __esm({
       log;
       health;
       stashEnabled;
+      /** 服务端自判死时的回调（见 DaemonHubAdapterOptions.onSettleWithoutFrame）。 */
+      onSettleWithoutFrame;
       /** 未知会话帧暂存（stashUnknownFrames 开启时）：dispatchId → 断链/重启窗口补发上来的帧。 */
       stash = /* @__PURE__ */ new Map();
       /** 断联节点 → 收割定时器。重连取消；到期收割。 */
@@ -189558,7 +190214,15 @@ var init_daemon_adapter = __esm({
         }
       }
       /** 统一结算一次会话退出：清 ack 定时器、置 exited、触发回调、从 pending 摘除。幂等（已退出即跳过）。 */
-      settle(dispatchId, info) {
+      /**
+       * 收尾一次派发。
+       *
+       * `fromFrame` = 这次收尾是不是**节点报上来的真退出帧**触发的。false（默认）意味着服务端
+       * 自己判的死——存在性快照 / 会话失联收割 / socket 非 OPEN。那三条走不到 serve 挂在 hub
+       * message listener 上的 work.response 桥，引擎那条 work 会一直挂 running 直到 30 分钟超时，
+       * 所以这里要显式喊一声 `onSettleWithoutFrame`。**新增判死路径时默认值就是对的**，别顺手传 true。
+       */
+      settle(dispatchId, info, fromFrame = false) {
         const entry = this.pending.get(dispatchId);
         if (!entry || entry.exited) return;
         if (entry.ackTimer) {
@@ -189583,6 +190247,13 @@ var init_daemon_adapter = __esm({
             this.settledDispatchIds.delete(v2.value);
           }
         }
+        if (!fromFrame) {
+          try {
+            this.onSettleWithoutFrame?.(dispatchId, info);
+          } catch (e) {
+            this.log(`[dispatch-delivery] onSettleWithoutFrame \u629B\u9519\uFF08\u4E0D\u5F71\u54CD\u6536\u5C3E\uFF09\uFF1A${String(e)}`);
+          }
+        }
       }
       /** 当前在途（未退出）会话数；传 runtimeKind 时收窄到单个 runtime 实例。 */
       activeRunCount(nodeId, runtimeKind) {
@@ -189720,7 +190391,7 @@ var init_daemon_adapter = __esm({
           if (entry) this.health?.recordReachable(entry.nodeId);
         } else if (msg.type === "session_exited") {
           const info = msg.info.reason || msg.info.code !== null ? msg.info : { ...msg.info, reason: "error" };
-          if (this.pending.has(msg.dispatchId)) this.settle(msg.dispatchId, info);
+          if (this.pending.has(msg.dispatchId)) this.settle(msg.dispatchId, info, true);
           else if (this.stashEnabled) this.stashFrame(msg.dispatchId, { type: "exit", info });
         } else if (msg.type === "session_event") {
           this.confirmDelivery(msg.dispatchId, "started");
@@ -189744,7 +190415,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto41.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto42.randomUUID)()}`;
         const entry = {
           nodeId,
           ...job.binding?.runtimeKind ? { runtimeKind: job.binding.runtimeKind } : {},
@@ -189901,7 +190572,7 @@ var init_daemon_adapter = __esm({
         }));
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto41.randomUUID)();
+        const requestId = (0, import_node_crypto42.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve10) => {
@@ -190009,13 +190680,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body, updatedBy: page.updatedBy };
 }
-var import_node_crypto42, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto43, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto42 = require("node:crypto");
+    import_node_crypto43 = require("node:crypto");
     init_src2();
-    sha = (s2) => (0, import_node_crypto42.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto43.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc3 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -190222,11 +190893,11 @@ function humanExitCause(exit) {
   const base = (exit.reason ? label[exit.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit.errorMessage ? `${base}\uFF1A${exit.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto43, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto44, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
+    import_node_crypto44 = require("node:crypto");
     init_src5();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -190473,7 +191144,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint = (0, import_node_crypto43.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint = (0, import_node_crypto44.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint}`;
       }
       artifactEvidence(id) {
@@ -190850,8 +191521,8 @@ ${ctx.nodeFault}
             this.deps.log?.(`[coordinator] ${workspace} \u5168\u5C40\u4E0A\u4E0B\u6587\u8BFB\u53D6\u5931\u8D25\uFF0C\u7EE7\u7EED\u6CBF\u7528\u539F\u534F\u8C03\u8005\u4EFB\u52A1\uFF1A${String(error2)}`);
           }
         }
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto43.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto43.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto44.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto44.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           task,
           ``,
@@ -190892,7 +191563,7 @@ ${ctx.nodeFault}
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content]) => [name, (0, import_node_crypto43.createHash)("sha256").update(content).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content]) => [name, (0, import_node_crypto44.createHash)("sha256").update(content).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -191258,6 +191929,7 @@ var init_src10 = __esm({
     init_recovery_plan();
     init_live_chat();
     init_chat_recovery();
+    init_chat_turn_gate();
     init_crypto2();
     init_new_engine();
     init_daemon_hub();
@@ -191288,6 +191960,7 @@ var init_src10 = __esm({
     init_execution_continuity2();
     init_chat_sessions();
     init_dev_store();
+    init_continuation();
     init_knowledge2();
     init_automations();
     init_automations();
@@ -191315,11 +191988,11 @@ var init_src10 = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto44, ident3, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto45, ident3, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     init_esm();
     init_src2();
     ident3 = (s2) => {
@@ -191498,7 +192171,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes) {
-        const hash = (0, import_node_crypto44.createHash)("sha256").update(bytes).digest("hex");
+        const hash = (0, import_node_crypto45.createHash)("sha256").update(bytes).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash, Buffer.from(bytes), bytes.byteLength, sniffContentType(bytes) ?? null]
@@ -195766,6 +196439,144 @@ var init_postgres_trace = __esm({
   }
 });
 
+// ../storage/src/postgres-chat-turns.ts
+async function ensureChatTurnsTable(pool, schema = "public") {
+  const s2 = ident10(schema);
+  await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
+  await pool.query(`
+    CREATE TABLE IF NOT EXISTS "${s2}".chat_session_turns (
+      id               text PRIMARY KEY,
+      chat_session_id  text NOT NULL,
+      source           text NOT NULL,
+      source_run_id    text NOT NULL,
+      message_key      text NOT NULL,
+      status           text NOT NULL,
+      dispatch_id      text,
+      assistant_run_id text,
+      reserved_at      timestamptz NOT NULL,
+      started_at       timestamptz,
+      completed_at     timestamptz,
+      last_error       text
+    )`);
+  await pool.query(`CREATE UNIQUE INDEX IF NOT EXISTS chat_session_turns_source_uq ON "${s2}".chat_session_turns (source, source_run_id)`);
+  await pool.query(`CREATE UNIQUE INDEX IF NOT EXISTS chat_session_turns_msgkey_uq ON "${s2}".chat_session_turns (message_key)`);
+  await pool.query(`CREATE UNIQUE INDEX IF NOT EXISTS chat_session_turns_active_uq ON "${s2}".chat_session_turns (chat_session_id) WHERE status IN ('reserved','running')`);
+  await pool.query(`CREATE INDEX IF NOT EXISTS chat_session_turns_stale_idx ON "${s2}".chat_session_turns (reserved_at) WHERE status IN ('reserved','running')`);
+}
+var ident10, PostgresChatTurnStore, isUniqueViolation2, iso3, rowToTurn;
+var init_postgres_chat_turns = __esm({
+  "../storage/src/postgres-chat-turns.ts"() {
+    "use strict";
+    init_esm();
+    ident10 = (s2) => {
+      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      return s2;
+    };
+    PostgresChatTurnStore = class _PostgresChatTurnStore {
+      constructor(pool, schema) {
+        this.pool = pool;
+        this.s = `"${ident10(schema)}"`;
+      }
+      s;
+      static async open(pool, schema = "public") {
+        await ensureChatTurnsTable(pool, schema);
+        return new _PostgresChatTurnStore(pool, schema);
+      }
+      async claimTurn(input) {
+        try {
+          const r = await this.pool.query(
+            `INSERT INTO ${this.s}.chat_session_turns
+           (id, chat_session_id, source, source_run_id, message_key, status, reserved_at)
+         VALUES ($1,$2,$3,$4,$5,'reserved',$6)
+         RETURNING *`,
+            [input.turnId, input.chatSessionId, input.source, input.sourceRunId, input.messageKey, input.reservedAt]
+          );
+          return { outcome: "claimed", turn: rowToTurn(r.rows[0]) };
+        } catch (err) {
+          if (!isUniqueViolation2(err)) throw err;
+          const mine = await this.getTurnBySourceRun(input.source, input.sourceRunId);
+          if (mine) return { outcome: "resumed", turn: mine };
+          const active = await this.activeTurn(input.chatSessionId);
+          if (active) return { outcome: "busy", activeTurn: active };
+          throw err;
+        }
+      }
+      async getTurn(turnId) {
+        const r = await this.pool.query(`SELECT * FROM ${this.s}.chat_session_turns WHERE id = $1`, [turnId]);
+        return r.rows[0] ? rowToTurn(r.rows[0]) : null;
+      }
+      async getTurnBySourceRun(source, sourceRunId) {
+        const r = await this.pool.query(
+          `SELECT * FROM ${this.s}.chat_session_turns WHERE source = $1 AND source_run_id = $2`,
+          [source, sourceRunId]
+        );
+        return r.rows[0] ? rowToTurn(r.rows[0]) : null;
+      }
+      async activeTurn(chatSessionId) {
+        const r = await this.pool.query(
+          `SELECT * FROM ${this.s}.chat_session_turns
+        WHERE chat_session_id = $1 AND status IN ('reserved','running') LIMIT 1`,
+          [chatSessionId]
+        );
+        return r.rows[0] ? rowToTurn(r.rows[0]) : null;
+      }
+      async settleTurn(turnId, patch) {
+        const sets = [];
+        const args = [];
+        args.push(patch.status);
+        sets.push(`status = $${args.length}`);
+        if (patch.dispatchId !== void 0) {
+          args.push(patch.dispatchId);
+          sets.push(`dispatch_id = $${args.length}`);
+        }
+        if (patch.assistantRunId !== void 0) {
+          args.push(patch.assistantRunId);
+          sets.push(`assistant_run_id = $${args.length}`);
+        }
+        if (patch.startedAt !== void 0) {
+          args.push(patch.startedAt);
+          sets.push(`started_at = $${args.length}`);
+        }
+        if (patch.completedAt !== void 0) {
+          args.push(patch.completedAt);
+          sets.push(`completed_at = $${args.length}`);
+        }
+        if (patch.lastError !== void 0) {
+          args.push(patch.lastError);
+          sets.push(`last_error = $${args.length}`);
+        }
+        args.push(turnId);
+        await this.pool.query(`UPDATE ${this.s}.chat_session_turns SET ${sets.join(", ")} WHERE id = $${args.length}`, args);
+      }
+      async listStaleActiveTurns(reservedBefore, limit = 50) {
+        const r = await this.pool.query(
+          `SELECT * FROM ${this.s}.chat_session_turns
+        WHERE status IN ('reserved','running') AND reserved_at < $1
+        ORDER BY reserved_at ASC LIMIT $2`,
+          [reservedBefore, limit]
+        );
+        return r.rows.map(rowToTurn);
+      }
+    };
+    isUniqueViolation2 = (err) => Boolean(err && typeof err === "object" && err.code === "23505");
+    iso3 = (v2) => v2 != null ? new Date(v2).toISOString() : null;
+    rowToTurn = (row) => ({
+      id: row.id,
+      chatSessionId: row.chat_session_id,
+      source: row.source,
+      sourceRunId: row.source_run_id,
+      messageKey: row.message_key,
+      status: row.status,
+      dispatchId: row.dispatch_id ?? null,
+      assistantRunId: row.assistant_run_id ?? null,
+      reservedAt: iso3(row.reserved_at),
+      startedAt: iso3(row.started_at),
+      completedAt: iso3(row.completed_at),
+      lastError: row.last_error ?? null
+    });
+  }
+});
+
 // ../storage/src/postgres-automations.ts
 function storedEventConfig(t) {
   return {
@@ -195809,26 +196620,27 @@ function genWebhookToken2() {
   const b64 = btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
   return `owt_${b64}`;
 }
-var ident10, genId, iso3, PostgresAutomationStore, rowToAutomation, rowToTrigger, rowToRun2, rowToDelivery;
+var ident11, genId, iso4, PostgresAutomationStore, chatTurnIso, rowToChatTurn, rowToAutomation, normalizeStoredChatTarget, rowToTrigger, rowToRun2, rowToDelivery;
 var init_postgres_automations = __esm({
   "../storage/src/postgres-automations.ts"() {
     "use strict";
     init_esm();
+    init_postgres_chat_turns();
     init_src2();
-    ident10 = (s2) => {
+    ident11 = (s2) => {
       if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     genId = (prefix) => `${prefix}_${Math.random().toString(36).slice(2, 12)}`;
-    iso3 = (v2) => v2 != null ? new Date(v2).toISOString() : null;
+    iso4 = (v2) => v2 != null ? new Date(v2).toISOString() : null;
     PostgresAutomationStore = class _PostgresAutomationStore {
       constructor(pool, schema) {
         this.pool = pool;
-        this.s = `"${ident10(schema)}"`;
+        this.s = `"${ident11(schema)}"`;
       }
       s;
       static async open(pool, schema = "public") {
-        const s2 = ident10(schema);
+        const s2 = ident11(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".automations (
@@ -195853,7 +196665,11 @@ var init_postgres_automations = __esm({
           `ADD COLUMN IF NOT EXISTS pause_reason text`,
           `ADD COLUMN IF NOT EXISTS archived_at text`,
           `ADD COLUMN IF NOT EXISTS subscribers jsonb NOT NULL DEFAULT '[]'::jsonb`,
-          `ADD COLUMN IF NOT EXISTS collaborators jsonb NOT NULL DEFAULT '[]'::jsonb`
+          `ADD COLUMN IF NOT EXISTS collaborators jsonb NOT NULL DEFAULT '[]'::jsonb`,
+          // ADR 会话投递 D1：chat 模式的目标会话策略。NULL = 每次新开会话（存量零变化）。
+          `ADD COLUMN IF NOT EXISTS chat_target jsonb`,
+          // ADR 会话投递 D3：固定会话的人类归属者（进规则快照，不随触发漂移）。
+          `ADD COLUMN IF NOT EXISTS owner_human_actor_id text`
         ]) {
           await pool.query(`ALTER TABLE "${s2}".automations ${ddl}`);
         }
@@ -195944,6 +196760,7 @@ var init_postgres_automations = __esm({
         created_at        text NOT NULL
       )`);
         await pool.query(`CREATE INDEX IF NOT EXISTS automation_rule_versions_idx ON "${s2}".automation_rule_versions (automation_id, created_at DESC)`);
+        await ensureChatTurnsTable(pool, schema);
         return new _PostgresAutomationStore(pool, schema);
       }
       now() {
@@ -195972,13 +196789,15 @@ var init_postgres_automations = __esm({
           collaborators: [],
           createdBy: input.createdBy ?? null,
           createdAt: now,
-          updatedAt: now
+          updatedAt: now,
+          chatTarget: input.chatTarget ?? null,
+          ownerHumanActorId: input.ownerHumanActorId ?? null
         };
         await this.pool.query(
           `INSERT INTO ${this.s}.automations
          (id, company_id, name, description, execution_mode, agent_id, project_id, playbook_ref, payload, title_template, dispatch,
-          enabled, pause_reason, archived_at, subscribers, collaborators, created_by, created_at, updated_at)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10,$11,$12,$13,$14,$15::jsonb,$16::jsonb,$17,$18,$19)`,
+          enabled, pause_reason, archived_at, subscribers, collaborators, created_by, created_at, updated_at, chat_target, owner_human_actor_id)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9::jsonb,$10,$11,$12,$13,$14,$15::jsonb,$16::jsonb,$17,$18,$19,$20::jsonb,$21)`,
           [
             a.id,
             a.companyId,
@@ -195998,7 +196817,9 @@ var init_postgres_automations = __esm({
             JSON.stringify(a.collaborators),
             a.createdBy,
             a.createdAt,
-            a.updatedAt
+            a.updatedAt,
+            a.chatTarget !== null ? JSON.stringify(a.chatTarget) : null,
+            a.ownerHumanActorId
           ]
         );
         if (input.triggers?.length) await this.replaceTriggers(id, input.triggers);
@@ -196031,7 +196852,9 @@ var init_postgres_automations = __esm({
         pauseReason: { col: "pause_reason" },
         archivedAt: { col: "archived_at" },
         subscribers: { col: "subscribers", json: true },
-        collaborators: { col: "collaborators", json: true }
+        collaborators: { col: "collaborators", json: true },
+        chatTarget: { col: "chat_target", json: true },
+        ownerHumanActorId: { col: "owner_human_actor_id" }
       };
       async updateAutomation(id, patch) {
         const sets = [];
@@ -196419,7 +197242,7 @@ var init_postgres_automations = __esm({
         );
         return r.rows.map((row) => ({
           trigger: rowToTrigger(row),
-          plannedAt: iso3(row.planned_at_old)
+          plannedAt: iso4(row.planned_at_old)
         }));
       }
       async rescheduleTrigger(triggerId, nextRunAt, lastFiredAt) {
@@ -196475,7 +197298,83 @@ var init_postgres_automations = __esm({
         );
         return r.rows[0] ? rowToRun2(r.rows[0]) : null;
       }
+      /**
+       * 复合占位（ADR 会话投递 D5 第 4 步）。一个事务、三种出口：
+       *  - INSERT 成功            → `claimed`，调用方才可以开始产生副作用；
+       *  - 撞 `(source, source_run_id)` → `resumed`，同一触发重来，取回同一轮（**不是** busy，也不另落 run）；
+       *  - 撞每会话 active 唯一索引  → `busy`：**在同一事务里**把这条 automation run 落
+       *    `skipped/session_busy/completedAt`，然后提交。两件事一起成立或一起不成立，中间没有窗口。
+       *
+       * 触发幂等键（`planned_at` / `idempotency_key`）**照旧保留在行上不清空**——清了就等于允许
+       * 下一次重扫补跑这次已经明确丢弃的触发。
+       */
+      async claimChatTurnForRun(input) {
+        const client = await this.pool.connect();
+        try {
+          await client.query("BEGIN");
+          try {
+            const r = await client.query(
+              `INSERT INTO ${this.s}.chat_session_turns
+             (id, chat_session_id, source, source_run_id, message_key, status, reserved_at)
+           VALUES ($1,$2,$3,$4,$5,'reserved',$6)
+           RETURNING *`,
+              [input.turnId, input.chatSessionId, input.source, input.sourceRunId, input.messageKey, input.reservedAt]
+            );
+            await client.query("COMMIT");
+            return { outcome: "claimed", turn: rowToChatTurn(r.rows[0]) };
+          } catch (err) {
+            if (!isUniqueViolation2(err)) throw err;
+            await client.query("ROLLBACK");
+            await client.query("BEGIN");
+            const mine = await client.query(
+              `SELECT * FROM ${this.s}.chat_session_turns WHERE source = $1 AND source_run_id = $2`,
+              [input.source, input.sourceRunId]
+            );
+            if (mine.rows[0]) {
+              await client.query("COMMIT");
+              return { outcome: "resumed", turn: rowToChatTurn(mine.rows[0]) };
+            }
+            const active = await client.query(
+              `SELECT * FROM ${this.s}.chat_session_turns
+            WHERE chat_session_id = $1 AND status IN ('reserved','running') LIMIT 1`,
+              [input.chatSessionId]
+            );
+            if (!active.rows[0]) {
+              await client.query("ROLLBACK");
+              throw err;
+            }
+            await client.query(
+              `UPDATE ${this.s}.automation_runs
+              SET status = 'skipped', reason_code = 'session_busy', error = $2, completed_at = $3
+            WHERE id = $1`,
+              [input.automationRunId, input.busyError, input.now]
+            );
+            await client.query("COMMIT");
+            return { outcome: "busy", activeTurn: rowToChatTurn(active.rows[0]) };
+          }
+        } catch (e) {
+          await client.query("ROLLBACK").catch(() => void 0);
+          throw e;
+        } finally {
+          client.release();
+        }
+      }
     };
+    chatTurnIso = (v2) => v2 != null ? new Date(v2).toISOString() : null;
+    rowToChatTurn = (row) => ({
+      id: row.id,
+      chatSessionId: row.chat_session_id,
+      source: row.source,
+      sourceRunId: row.source_run_id,
+      messageKey: row.message_key,
+      status: row.status,
+      dispatchId: row.dispatch_id ?? null,
+      assistantRunId: row.assistant_run_id ?? null,
+      reservedAt: chatTurnIso(row.reserved_at),
+      startedAt: chatTurnIso(row.started_at),
+      completedAt: chatTurnIso(row.completed_at),
+      lastError: row.last_error ?? null
+    });
     rowToAutomation = (row) => ({
       id: row.id,
       companyId: row.company_id ?? "",
@@ -196495,8 +197394,19 @@ var init_postgres_automations = __esm({
       collaborators: row.collaborators ?? [],
       createdBy: row.created_by ?? null,
       createdAt: row.created_at,
-      updatedAt: row.updated_at
+      updatedAt: row.updated_at,
+      // NULL / 脏值一律读成「每次新开会话」——发布前后行为一致（ADR 会话投递 §6）。
+      chatTarget: normalizeStoredChatTarget(row.chat_target),
+      ownerHumanActorId: row.owner_human_actor_id ?? null
     });
+    normalizeStoredChatTarget = (raw) => {
+      const t = raw;
+      if (t?.mode === "existing_session" && typeof t.sessionId === "string" && t.sessionId) {
+        return { mode: "existing_session", sessionId: t.sessionId };
+      }
+      if (t?.mode === "new_session") return { mode: "new_session" };
+      return null;
+    };
     rowToTrigger = (row) => {
       const t = {
         id: row.id,
@@ -196510,9 +197420,9 @@ var init_postgres_automations = __esm({
         t.schedule = {
           cron: row.cron ?? "",
           tz: row.tz ?? "UTC",
-          nextRunAt: iso3(row.next_run_at),
+          nextRunAt: iso4(row.next_run_at),
           lastFiredAt: row.last_fired_at ?? null,
-          claimedAt: iso3(row.claimed_at)
+          claimedAt: iso4(row.claimed_at)
         };
       }
       if (t.kind === "webhook") {
@@ -196542,7 +197452,7 @@ var init_postgres_automations = __esm({
       status: row.status,
       spawnedWorkspaceId: row.spawned_workspace_id ?? null,
       spawnedArtifactId: row.spawned_artifact_id ?? null,
-      plannedAt: iso3(row.planned_at),
+      plannedAt: iso4(row.planned_at),
       deliveryId: row.delivery_id ?? null,
       idempotencyKey: row.idempotency_key ?? null,
       ruleVersionId: row.rule_version_id ?? null,
@@ -196574,24 +197484,24 @@ var init_postgres_automations = __esm({
 });
 
 // ../storage/src/postgres-chat-sessions.ts
-var ident11, PostgresChatSessionStore, rowToSession, rowToSessionWithQuality, rowToMessage;
+var ident12, PostgresChatSessionStore, rowToSession, rowToSessionWithQuality, rowToMessage;
 var init_postgres_chat_sessions = __esm({
   "../storage/src/postgres-chat-sessions.ts"() {
     "use strict";
     init_esm();
     init_chat_session();
-    ident11 = (s2) => {
+    ident12 = (s2) => {
       if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     PostgresChatSessionStore = class _PostgresChatSessionStore {
       constructor(pool, schema) {
         this.pool = pool;
-        this.s = `"${ident11(schema)}"`;
+        this.s = `"${ident12(schema)}"`;
       }
       s;
       static async open(pool, schema = "public") {
-        const s2 = ident11(schema);
+        const s2 = ident12(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".chat_sessions (
@@ -196634,6 +197544,10 @@ var init_postgres_chat_sessions = __esm({
       )
       UPDATE "${s2}".chat_messages m SET seq = ranked.rn FROM ranked WHERE m.id = ranked.id AND m.seq <> ranked.rn`);
         await pool.query(`CREATE UNIQUE INDEX IF NOT EXISTS chat_messages_session_seq_uq ON "${s2}".chat_messages (session_id, seq)`);
+        await pool.query(`ALTER TABLE "${s2}".chat_sessions ADD COLUMN IF NOT EXISTS company_id text`);
+        await pool.query(`CREATE INDEX IF NOT EXISTS chat_sessions_target_idx ON "${s2}".chat_sessions (company_id, human_actor_id, ai_actor_id, touched_at DESC)`);
+        await pool.query(`ALTER TABLE "${s2}".chat_messages ADD COLUMN IF NOT EXISTS message_key text`);
+        await pool.query(`CREATE UNIQUE INDEX IF NOT EXISTS chat_messages_key_uq ON "${s2}".chat_messages (message_key) WHERE message_key IS NOT NULL`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".chat_session_work_orders (
         session_id    text NOT NULL,
@@ -196645,9 +197559,9 @@ var init_postgres_chat_sessions = __esm({
       }
       async createSession(s2) {
         await this.pool.query(
-          `INSERT INTO ${this.s}.chat_sessions (id, human_actor_id, ai_actor_id, runtime_id, runtime_kind, runtime_session_id, title, touched_at, created_at, workspace, analyzed_run_id, project_id, escalation_id)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13)`,
-          [s2.id, s2.humanActorId, s2.aiActorId, s2.runtimeId, s2.runtimeKind ?? null, s2.runtimeSessionId ?? null, s2.title ?? null, s2.touchedAt, s2.createdAt, s2.workspace ?? null, s2.analyzedRunId ?? null, s2.projectId ?? null, s2.escalationId ?? null]
+          `INSERT INTO ${this.s}.chat_sessions (id, human_actor_id, ai_actor_id, runtime_id, runtime_kind, runtime_session_id, title, touched_at, created_at, workspace, analyzed_run_id, project_id, escalation_id, company_id)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14)`,
+          [s2.id, s2.humanActorId, s2.aiActorId, s2.runtimeId, s2.runtimeKind ?? null, s2.runtimeSessionId ?? null, s2.title ?? null, s2.touchedAt, s2.createdAt, s2.workspace ?? null, s2.analyzedRunId ?? null, s2.projectId ?? null, s2.escalationId ?? null, s2.companyId ?? null]
         );
       }
       async listSessions(humanActorId) {
@@ -196760,11 +197674,11 @@ var init_postgres_chat_sessions = __esm({
       async appendMessage(m2) {
         const insert = async () => {
           const r = await this.pool.query(
-            `INSERT INTO ${this.s}.chat_messages (id, session_id, role, content, seq, created_at, run_id, parts, attachments, status, completed_at)
-         SELECT $1,$2,$3,$4, COALESCE(MAX(seq),0)+1, $5,$6,$7,$8,$9,$10
+            `INSERT INTO ${this.s}.chat_messages (id, session_id, role, content, seq, created_at, run_id, parts, attachments, status, completed_at, message_key)
+         SELECT $1,$2,$3,$4, COALESCE(MAX(seq),0)+1, $5,$6,$7,$8,$9,$10,$11
          FROM ${this.s}.chat_messages WHERE session_id = $2
          RETURNING seq`,
-            [m2.id, m2.sessionId, m2.role, m2.content, m2.createdAt, m2.runId ?? null, m2.parts !== void 0 ? JSON.stringify(m2.parts) : null, m2.attachments !== void 0 ? JSON.stringify(m2.attachments) : null, m2.status ?? null, m2.completedAt ?? null]
+            [m2.id, m2.sessionId, m2.role, m2.content, m2.createdAt, m2.runId ?? null, m2.parts !== void 0 ? JSON.stringify(m2.parts) : null, m2.attachments !== void 0 ? JSON.stringify(m2.attachments) : null, m2.status ?? null, m2.completedAt ?? null, m2.messageKey ?? null]
           );
           return Number(r.rows[0].seq);
         };
@@ -196772,12 +197686,87 @@ var init_postgres_chat_sessions = __esm({
           try {
             return { ...m2, seq: await insert() };
           } catch (err) {
-            const isUniqueViolation2 = err && typeof err === "object" && err.code === "23505";
-            if (isUniqueViolation2 && attempt < 10) continue;
+            const isUniqueViolation3 = err && typeof err === "object" && err.code === "23505";
+            if (isUniqueViolation3 && m2.messageKey && String(err.constraint ?? "").includes("chat_messages_key_uq")) {
+              const existing = await this.getMessageByKey(m2.messageKey);
+              if (existing) return existing;
+            }
+            if (isUniqueViolation3 && attempt < 10) continue;
             throw err;
           }
         }
       }
+      /** 按幂等键取回消息（崩溃重放路径）。 */
+      async getMessageByKey(messageKey) {
+        const r = await this.pool.query(`SELECT * FROM ${this.s}.chat_messages WHERE message_key = $1`, [messageKey]);
+        return r.rows[0] ? rowToMessage(r.rows[0]) : null;
+      }
+      async countMessages(sessionId) {
+        const r = await this.pool.query(`SELECT count(*)::int AS n FROM ${this.s}.chat_messages WHERE session_id = $1`, [sessionId]);
+        return Number(r.rows[0]?.n ?? 0);
+      }
+      /**
+       * 选择器搜索（ADR 会话投递 D8）：`(company, human, ai)` 三元组精确圈定，标题 ILIKE **或** id 前缀命中。
+       * 分析会话排除在外（它们不进主聊天列表，更不该当自动化的长期目标）。
+       * 多取一条判 `hasMore`，避免再跑一次 count。
+       */
+      async searchSessionsForTarget(q) {
+        const args = [q.companyId, q.humanActorId, q.aiActorId];
+        let where = `s.company_id = $1 AND s.human_actor_id = $2 AND s.ai_actor_id = $3 AND s.analyzed_run_id IS NULL`;
+        const text = q.text?.trim();
+        if (text) {
+          const literal2 = text.replace(/[%_\\]/g, (c) => `\\${c}`);
+          args.push(`%${literal2}%`);
+          args.push(`${literal2}%`);
+          where += ` AND (s.title ILIKE $${args.length - 1} ESCAPE '\\' OR s.id LIKE $${args.length} ESCAPE '\\')`;
+        }
+        args.push(q.limit + 1, q.offset);
+        const r = await this.pool.query(
+          `SELECT s.*, (SELECT count(*)::int FROM ${this.s}.chat_messages m WHERE m.session_id = s.id) AS message_count
+         FROM ${this.s}.chat_sessions s
+        WHERE ${where}
+        ORDER BY s.touched_at DESC, s.id DESC
+        LIMIT $${args.length - 1} OFFSET $${args.length}`,
+          args
+        );
+        const hasMore = r.rows.length > q.limit;
+        const rows = hasMore ? r.rows.slice(0, q.limit) : r.rows;
+        return {
+          items: rows.map((row) => ({ ...rowToSession(row), messageCount: Number(row.message_count ?? 0) })),
+          hasMore
+        };
+      }
+      /**
+       * 存量会话的公司回填（一次性、幂等、**只填能唯一判定的行**）。
+       *
+       * 判据只认一种：会话归属人在 `company_members` 里**只出现在一家公司**（agent 不是账号、
+       * 不在这张表里，所以实际生效的是归属人这一条）。命中多家或一家都命不中 → 保持 NULL。
+       *
+       * 这不是保守过头——用「现在的成员关系」追认「过去的创建事实」，一个换过公司的人就能把旧会话
+       * 认到新公司名下，而那是跨公司泄漏。判不出来的代价只是「不能被自动化选作固定目标」，
+       * 用户新建一个长期会话即可。
+       *
+       * 返回真正回填的行数（稳态为 0）。表不存在（无控制面）时直接跳过。
+       */
+      async backfillCompanyIds() {
+        const exists = await this.pool.query(
+          `SELECT to_regclass($1) IS NOT NULL AS ok`,
+          [`${this.s}.company_members`.replace(/"/g, "")]
+        );
+        if (!exists.rows[0]?.ok) return 0;
+        const r = await this.pool.query(`
+      WITH candidate AS (
+        SELECT s.id, min(m.company_id) AS company_id, count(DISTINCT m.company_id) AS n
+          FROM ${this.s}.chat_sessions s
+          JOIN ${this.s}.company_members m ON m.actor_id IN (s.human_actor_id, s.ai_actor_id)
+         WHERE s.company_id IS NULL
+         GROUP BY s.id
+        HAVING count(DISTINCT m.company_id) = 1
+      )
+      UPDATE ${this.s}.chat_sessions s SET company_id = c.company_id
+        FROM candidate c WHERE s.id = c.id AND s.company_id IS NULL`);
+        return r.rowCount ?? 0;
+      }
       async updateMessage(id, patch) {
         const sets = [];
         const args = [];
@@ -196858,6 +197847,7 @@ var init_postgres_chat_sessions = __esm({
     };
     rowToSession = (row) => ({
       id: row.id,
+      companyId: row.company_id ?? null,
       humanActorId: row.human_actor_id,
       aiActorId: row.ai_actor_id,
       runtimeId: row.runtime_id,
@@ -196889,30 +197879,33 @@ var init_postgres_chat_sessions = __esm({
       ...row.parts != null ? { parts: row.parts } : {},
       ...row.attachments != null ? { attachments: row.attachments } : {},
       ...row.status != null ? { status: row.status } : {},
-      ...row.completed_at != null ? { completedAt: new Date(row.completed_at).toISOString() } : {}
+      ...row.completed_at != null ? { completedAt: new Date(row.completed_at).toISOString() } : {},
+      // 幂等键必须**读得回来**：写进去却映射不出来，等于这一列只对唯一索引有效，对代码不可见。
+      // 固定会话的续跑历史要按它把「本轮那条 user 消息」排掉，漏了它那条消息会既当历史又当正文。
+      ...row.message_key != null ? { messageKey: row.message_key } : {}
     });
   }
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto45, ident12, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto46, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_esm();
-    ident12 = (s2) => {
+    ident13 = (s2) => {
       if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     PostgresNodeStore = class _PostgresNodeStore {
       constructor(pool, schema) {
         this.pool = pool;
-        this.s = `"${ident12(schema)}"`;
+        this.s = `"${ident13(schema)}"`;
       }
       s;
       static async open(pool, schema = "public") {
-        const s2 = ident12(schema);
+        const s2 = ident13(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".nodes (
@@ -197034,12 +198027,12 @@ var init_postgres_nodes = __esm({
     PostgresNodeTokenStore = class _PostgresNodeTokenStore {
       constructor(pool, schema) {
         this.pool = pool;
-        this.s = `"${ident12(schema)}"`;
+        this.s = `"${ident13(schema)}"`;
       }
       s;
       cache = /* @__PURE__ */ new Map();
       static async open(pool, schema = "public") {
-        const s2 = ident12(schema);
+        const s2 = ident13(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`CREATE TABLE IF NOT EXISTS "${s2}".node_tokens (token text PRIMARY KEY, node_id text NOT NULL)`);
         const store = new _PostgresNodeTokenStore(pool, schema);
@@ -197048,7 +198041,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto45.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto46.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -197100,23 +198093,23 @@ function rowToPrice(row) {
     updatedAt: new Date(row["updated_at"]).toISOString()
   };
 }
-var ident13, PostgresModelPriceStore;
+var ident14, PostgresModelPriceStore;
 var init_postgres_model_prices = __esm({
   "../storage/src/postgres-model-prices.ts"() {
     "use strict";
     init_esm();
-    ident13 = (s2) => {
+    ident14 = (s2) => {
       if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     PostgresModelPriceStore = class _PostgresModelPriceStore {
       constructor(pool, schema) {
         this.pool = pool;
-        this.s = `"${ident13(schema)}"`;
+        this.s = `"${ident14(schema)}"`;
       }
       s;
       static async open(pool, schema = "public") {
-        const s2 = ident13(schema);
+        const s2 = ident14(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".model_prices (
@@ -197213,24 +198206,24 @@ async function backfillTypeRegistryFromFile(store, file) {
   console.log(`[type-registry-backfill] \u51B3\u7B56 0062 \u56DE\u586B\uFF1A${defs.length} \u4E2A\u4EA7\u7269\u7C7B\u578B\u5DF2\u8FC1\u5165 Postgres`);
   return { filled: defs.length };
 }
-var import_node_fs18, ident14, PostgresTypeRegistryStore;
+var import_node_fs18, ident15, PostgresTypeRegistryStore;
 var init_postgres_type_registry = __esm({
   "../storage/src/postgres-type-registry.ts"() {
     "use strict";
     import_node_fs18 = __toESM(require("node:fs"), 1);
     init_esm();
-    ident14 = (s2) => {
+    ident15 = (s2) => {
       if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     PostgresTypeRegistryStore = class _PostgresTypeRegistryStore {
       constructor(pool, schema) {
         this.pool = pool;
-        this.s = `"${ident14(schema)}"`;
+        this.s = `"${ident15(schema)}"`;
       }
       s;
       static async open(pool, schema = "public") {
-        const s2 = ident14(schema);
+        const s2 = ident15(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".artifact_types (
@@ -197260,14 +198253,14 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto46, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto47, matchClause, ident16, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto46 = require("node:crypto");
+    import_node_crypto47 = require("node:crypto");
     init_src2();
     matchClause = (q) => q.requireMatch && q.keywords.length > 0 ? " WHERE m > 0" : "";
-    ident15 = (s2) => {
+    ident16 = (s2) => {
       if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
@@ -197275,11 +198268,11 @@ var init_postgres_actor_memory = __esm({
       constructor(pool, schema, trigram) {
         this.pool = pool;
         this.trigram = trigram;
-        this.s = `"${ident15(schema)}"`;
+        this.s = `"${ident16(schema)}"`;
       }
       s;
       static async open(pool, schema = "public") {
-        const s2 = ident15(schema);
+        const s2 = ident16(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".actor_memories (
@@ -197469,7 +198462,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto46.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto47.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -197563,23 +198556,23 @@ var init_postgres_actor_memory = __esm({
 });
 
 // ../storage/src/postgres-inbox-read.ts
-var ident16, PostgresReadMarkerStore;
+var ident17, PostgresReadMarkerStore;
 var init_postgres_inbox_read = __esm({
   "../storage/src/postgres-inbox-read.ts"() {
     "use strict";
     init_esm();
-    ident16 = (s2) => {
+    ident17 = (s2) => {
       if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     PostgresReadMarkerStore = class _PostgresReadMarkerStore {
       constructor(pool, schema) {
         this.pool = pool;
-        this.s = `"${ident16(schema)}"`;
+        this.s = `"${ident17(schema)}"`;
       }
       s;
       static async open(pool, schema = "public") {
-        const s2 = ident16(schema);
+        const s2 = ident17(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".inbox_read_markers (
@@ -197657,18 +198650,18 @@ function rowToRecord2(r) {
     reason: r.reason
   };
 }
-var ident17, PostgresDispatchStore;
+var ident18, PostgresDispatchStore;
 var init_postgres_dispatches = __esm({
   "../storage/src/postgres-dispatches.ts"() {
     "use strict";
-    ident17 = (schema) => schema.replace(/[^a-zA-Z0-9_]/g, "");
+    ident18 = (schema) => schema.replace(/[^a-zA-Z0-9_]/g, "");
     PostgresDispatchStore = class _PostgresDispatchStore {
       constructor(pool, s2) {
         this.pool = pool;
         this.s = s2;
       }
       static async open(pool, schema = "public") {
-        const s2 = ident17(schema);
+        const s2 = ident18(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".dispatches (
@@ -197806,6 +198799,7 @@ __export(src_exports, {
   PostgresBlobStore: () => PostgresBlobStore,
   PostgresChannelStore: () => PostgresChannelStore,
   PostgresChatSessionStore: () => PostgresChatSessionStore,
+  PostgresChatTurnStore: () => PostgresChatTurnStore,
   PostgresControlPlaneStore: () => PostgresControlPlaneStore,
   PostgresDispatchStore: () => PostgresDispatchStore,
   PostgresHumanPrefsStore: () => PostgresHumanPrefsStore,
@@ -197822,8 +198816,10 @@ __export(src_exports, {
   buildTrigger: () => buildTrigger,
   createPgPool: () => createPgPool,
   dropSchemaIfExists: () => dropSchemaIfExists,
+  ensureChatTurnsTable: () => ensureChatTurnsTable,
   genWebhookToken: () => genWebhookToken2,
   hasPgUnstorable: () => hasPgUnstorable,
+  isUniqueViolation: () => isUniqueViolation2,
   scrubPgJson: () => scrubPgJson,
   scrubPgString: () => scrubPgString
 });
@@ -197841,6 +198837,7 @@ var init_src11 = __esm({
     init_pg_sanitize();
     init_postgres_automations();
     init_postgres_chat_sessions();
+    init_postgres_chat_turns();
     init_postgres_nodes();
     init_postgres_model_prices();
     init_postgres_type_registry();
@@ -197982,20 +198979,20 @@ var fs42 = __toESM(require("node:fs"));
 var os13 = __toESM(require("node:os"));
 var path36 = __toESM(require("node:path"));
 var import_node_child_process20 = require("node:child_process");
-var import_node_crypto53 = require("node:crypto");
+var import_node_crypto54 = require("node:crypto");
 
 // ../cli/src/cli.ts
 var fs37 = __toESM(require("node:fs"), 1);
 var os11 = __toESM(require("node:os"), 1);
 var path31 = __toESM(require("node:path"), 1);
-var import_node_crypto51 = require("node:crypto");
+var import_node_crypto52 = require("node:crypto");
 
 // ../cli/src/serve.ts
 var fs31 = __toESM(require("node:fs"), 1);
 var os7 = __toESM(require("node:os"), 1);
 var path25 = __toESM(require("node:path"), 1);
 var import_node_child_process15 = require("node:child_process");
-var import_node_crypto47 = require("node:crypto");
+var import_node_crypto48 = require("node:crypto");
 var import_node_url7 = require("node:url");
 init_src5();
 init_src10();
@@ -198259,6 +199256,14 @@ init_src10();
 init_src9();
 init_src2();
 init_trajectory();
+function deterministicUuid(seed) {
+  const h = (0, import_node_crypto48.createHash)("sha256").update(seed).digest();
+  const b2 = Buffer.from(h.subarray(0, 16));
+  b2[6] = b2[6] & 15 | 80;
+  b2[8] = b2[8] & 63 | 128;
+  const hex = b2.toString("hex");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
 function builtinSkillsDir() {
   const override = process.env["OASIS_BUILTIN_SKILLS_DIR"]?.trim();
   if (override) return override;
@@ -198886,11 +199891,19 @@ async function startServe(opts) {
   let projectStateStore;
   let artifactStateStore;
   let chatSessionStore;
+  let chatTurnStore;
   let readMarkerStore;
   if (pgDsn && pgPool) {
     projectStateStore = await PostgresProjectStateStore.open(pgPool, pgSchema);
     artifactStateStore = await PostgresArtifactStateStore.open(pgPool, pgSchema);
-    chatSessionStore = await PostgresChatSessionStore.open(pgPool, pgSchema);
+    const pgChatSessions = await PostgresChatSessionStore.open(pgPool, pgSchema);
+    chatSessionStore = pgChatSessions;
+    chatTurnStore = await PostgresChatTurnStore.open(pgPool, pgSchema);
+    const backfilled = await pgChatSessions.backfillCompanyIds().catch((e) => {
+      console.warn(`[serve] \u4F1A\u8BDD\u516C\u53F8\u5F52\u5C5E\u56DE\u586B\u8DF3\u8FC7\uFF1A${String(e)}`);
+      return 0;
+    });
+    if (backfilled > 0) console.log(`[serve] \u4F1A\u8BDD\u516C\u53F8\u5F52\u5C5E\uFF1A\u56DE\u586B ${backfilled} \u6761\uFF08\u552F\u4E00\u53EF\u5224\u5B9A\u7684\u5386\u53F2\u4F1A\u8BDD\uFF09`);
     const pgReadMarkers = await PostgresReadMarkerStore.open(pgPool, pgSchema);
     readMarkerStore = pgReadMarkers;
     const seeded = await pgReadMarkers.seedFromChatSessions();
@@ -198902,6 +199915,7 @@ async function startServe(opts) {
     projectStateStore = await FileProjectStateStore.open(path25.join(opts.dir, "artifact-document-projects.json"));
     artifactStateStore = await FileArtifactStateStore.open(path25.join(opts.dir, "artifact-document-state.json"));
     chatSessionStore = await FileChatSessionStore.open(path25.join(opts.dir, "chat-sessions.json"));
+    chatTurnStore = await FileChatTurnStore.open(path25.join(opts.dir, "chat-session-turns.json"));
     readMarkerStore = await FileReadMarkerStore.open(path25.join(opts.dir, "inbox-read-markers.json"));
     console.log("[serve] \u4EA4\u4ED8\u7269\u72B6\u6001\u4F53\u7CFB\uFF1A\u672C\u5730 JSON dev store");
     console.log("[serve] \u8282\u70B9/\u8FD0\u884C\u65F6\u4F53\u7CFB\uFF1A\u672C\u5730 JSON dev store");
@@ -199094,6 +200108,19 @@ async function startServe(opts) {
     }
   });
   let automationDispatchChat = null;
+  const inspectChatTarget = async (args) => {
+    const session = await chatSessionStore.getSession(args.sessionId).catch(() => null);
+    if (!session) return { ok: false, issue: "session_missing" };
+    const base = { title: session.title ?? null, touchedAt: session.touchedAt };
+    if (!session.companyId) return { ok: false, issue: "company_unknown", ...base };
+    if (session.companyId !== args.companyId) return { ok: false, issue: "cross_company", ...base };
+    if (!args.ownerHumanActorId || session.humanActorId !== args.ownerHumanActorId) {
+      return { ok: false, issue: "owner_mismatch", ...base };
+    }
+    if (!args.agentId || session.aiActorId !== args.agentId) return { ok: false, issue: "agent_mismatch", ...base };
+    const messageCount = chatSessionStore.countMessages ? await chatSessionStore.countMessages(args.sessionId).catch(() => 0) : (await chatSessionStore.listMessages(args.sessionId).catch(() => [])).length;
+    return { ok: true, title: session.title ?? null, touchedAt: session.touchedAt, messageCount };
+  };
   const automations = createAutomationsDomain({
     store: automationStore,
     fire: {
@@ -199117,48 +200144,131 @@ async function startServe(opts) {
       workorderState: makeAutomationWorkorderStateResolver(kernel),
       // 回复抓取（ADR 0157）：工单 done 时把最终交付物正文并进 run.result.reply，运行历史直接展示。
       workorderReply: makeAutomationReplyResolver(kernel, blobs),
-      // chat 执行（ADR 0159，≈ multica run_only）：照飞书渠道同一套路——建会话、落用户消息、
-      // dispatchChat 收流、done 后落助手消息并回报最终回复。会话在控制台 chat 页可回看。
-      runChat: async ({ agentId, humanActorId, title, prompt }, onDone) => {
-        if (!automationDispatchChat) throw new Error("chat \u6D3E\u53D1\u5C1A\u672A\u5C31\u7EEA\uFF08serve \u542F\u52A8\u4E2D\uFF09");
-        const chatSessionId = (0, import_node_crypto47.randomUUID)();
-        const nowIso = (/* @__PURE__ */ new Date()).toISOString();
-        await chatSessionStore.createSession({
-          id: chatSessionId,
-          humanActorId: humanActorId ?? agentId,
-          aiActorId: agentId,
-          runtimeId: "",
-          runtimeSessionId: null,
-          title: `\u81EA\u52A8\u5316 \xB7 ${title}`.slice(0, 80),
-          touchedAt: nowIso,
-          createdAt: nowIso
-        }).catch(() => void 0);
-        await chatSessionStore.appendMessage({ id: (0, import_node_crypto47.randomUUID)(), sessionId: chatSessionId, role: "user", content: prompt, createdAt: nowIso }).catch(() => void 0);
-        const session = await automationDispatchChat({ actorId: agentId, message: prompt, chatSessionId });
-        let buf = "";
-        session.onOutput((c) => {
-          buf += c;
-        });
-        void session.done.then(async () => {
-          if (buf || session.runId) {
-            await chatSessionStore.appendMessage({
-              id: (0, import_node_crypto47.randomUUID)(),
-              sessionId: chatSessionId,
-              role: "assistant",
-              content: buf,
-              createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-              ...session.runId ? { runId: session.runId } : {}
+      // 轮次账本（ADR 会话投递 D4）：busy 的唯一口径。
+      chatTurns: chatTurnStore,
+      // chat 执行（ADR 0159 + 会话投递 D2）：**建会话与派发已经拆开**。
+      //   resolveTarget —— 只决定「发到哪个会话」；
+      //   dispatchTurn  —— 只消费一条已经持久占位的 turn（写消息 + 真 dispatch + 收流）。
+      // 拆开之前这两件事挤在一个 runChat 里，于是「发到已有会话」无处插入、「会话在跑吗」无处判定。
+      chat: {
+        async resolveTarget({ automation, runId, title }) {
+          const target = normalizeChatTarget(automation.chatTarget);
+          const agentId = automation.agentId;
+          if (target.mode === "existing_session") {
+            const check2 = await inspectChatTarget({
+              companyId: automation.companyId,
+              agentId: automation.agentId,
+              ownerHumanActorId: automation.ownerHumanActorId,
+              sessionId: target.sessionId
+            });
+            if (!check2.ok) {
+              return {
+                ok: false,
+                reasonCode: "target_unavailable",
+                error: `\u56FA\u5B9A\u76EE\u6807\u4F1A\u8BDD\u4E0D\u53EF\u7528\uFF08${check2.issue}\uFF09\uFF1A${target.sessionId}`,
+                result: { targetKind: "chat_session", chatSessionId: target.sessionId, targetIssue: check2.issue }
+              };
+            }
+            return { ok: true, chatSessionId: target.sessionId };
+          }
+          const chatSessionId = deterministicUuid(`automation-chat-session:${runId}`);
+          const existing = await chatSessionStore.getSession(chatSessionId);
+          if (existing) return { ok: true, chatSessionId };
+          const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+          try {
+            await chatSessionStore.createSession({
+              id: chatSessionId,
+              companyId: automation.companyId,
+              humanActorId: automation.ownerHumanActorId ?? agentId,
+              aiActorId: agentId,
+              runtimeId: "",
+              runtimeSessionId: null,
+              title: `\u81EA\u52A8\u5316 \xB7 ${title}`.slice(0, 80),
+              touchedAt: nowIso,
+              createdAt: nowIso
+            });
+          } catch (e) {
+            if (!await chatSessionStore.getSession(chatSessionId)) throw e;
+          }
+          return { ok: true, chatSessionId };
+        },
+        async dispatchTurn({ automation, chatSessionId, turnId, messageKey, prompt }, onDone) {
+          if (!automationDispatchChat) throw new Error("chat \u6D3E\u53D1\u5C1A\u672A\u5C31\u7EEA\uFF08serve \u542F\u52A8\u4E2D\uFF09");
+          const agentId = automation.agentId;
+          const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+          await chatSessionStore.appendMessage({
+            id: deterministicUuid(`automation-chat-message:${messageKey}`),
+            sessionId: chatSessionId,
+            role: "user",
+            content: prompt,
+            createdAt: nowIso,
+            messageKey
+          });
+          await chatSessionStore.updateSession(chatSessionId, { touchedAt: nowIso }).catch(() => void 0);
+          const targetSession = await chatSessionStore.getSession(chatSessionId).catch(() => null);
+          const agentBinding = await registryStore.getBinding(agentId).catch(() => null);
+          const plan = targetSession ? await planChatContinuation({
+            session: targetSession,
+            userMessage: prompt,
+            listMessages: (sid, limit) => chatSessionStore.listMessages(sid, limit),
+            currentRuntime: agentBinding?.status === "active" ? { nodeId: agentBinding.nodeId, runtimeKind: agentBinding.runtimeKind } : null,
+            excludeMessageKey: messageKey
+          }) : null;
+          const session = await automationDispatchChat({
+            actorId: agentId,
+            message: plan?.runtimeMessage ?? prompt,
+            ...plan?.effectiveSessionId ? { sessionId: plan.effectiveSessionId } : {},
+            ...plan?.fallbackMessage ? { fallbackMessage: plan.fallbackMessage } : {},
+            chatSessionId,
+            companyId: automation.companyId
+          });
+          if (plan?.currentRuntimeId) {
+            await chatSessionStore.updateSession(chatSessionId, {
+              runtimeId: plan.currentRuntimeId,
+              ...plan.currentRuntimeKind ? { runtimeKind: plan.currentRuntimeKind } : {},
+              runtimeSessionId: session.nativeSessionId ?? session.id
             }).catch(() => void 0);
           }
-          await onDone({ ok: true, reply: buf });
-        }).catch(async (err) => {
-          await onDone({ ok: false, error: err instanceof Error ? err.message : String(err) });
-        });
-        return { chatSessionId };
+          await chatTurnStore.settleTurn(turnId, {
+            status: "running",
+            startedAt: (/* @__PURE__ */ new Date()).toISOString(),
+            ...session.runId ? { assistantRunId: session.runId, dispatchId: session.runId } : {}
+          }).catch((e) => console.warn(`[automations] \u8F6E\u6B21\u8F6C running \u5931\u8D25 ${turnId}: ${String(e)}`));
+          let buf = "";
+          session.onOutput((c) => {
+            buf += c;
+          });
+          void session.done.then(async () => {
+            const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
+            if (buf || session.runId) {
+              await chatSessionStore.appendMessage({
+                id: (0, import_node_crypto48.randomUUID)(),
+                sessionId: chatSessionId,
+                role: "assistant",
+                content: buf,
+                createdAt: finishedAt,
+                ...session.runId ? { runId: session.runId } : {}
+              }).catch(() => void 0);
+            }
+            await chatSessionStore.updateSession(chatSessionId, {
+              ...plan?.currentRuntimeId ? { runtimeId: plan.currentRuntimeId } : {},
+              ...plan?.currentRuntimeKind ? { runtimeKind: plan.currentRuntimeKind } : {},
+              runtimeSessionId: session.nativeSessionId ?? session.id,
+              touchedAt: finishedAt
+            }).catch(() => void 0);
+            await chatTurnStore.settleTurn(turnId, { status: "succeeded", completedAt: (/* @__PURE__ */ new Date()).toISOString() }).catch(() => void 0);
+            await onDone({ ok: true, reply: buf });
+          }).catch(async (err) => {
+            const msg = err instanceof Error ? err.message : String(err);
+            await chatTurnStore.settleTurn(turnId, { status: "failed", completedAt: (/* @__PURE__ */ new Date()).toISOString(), lastError: msg }).catch(() => void 0);
+            await onDone({ ok: false, error: msg });
+          });
+        }
       },
-      // 订阅触发 × chat 的 fail-closed 开关（ADR 0163 §4.4）。当前 runChat 每次 randomUUID 建会话、
-      // 没有任何持久去重：占位后崩溃重试会多开一个会话。**在 chat 适配器补上持久幂等键之前保持 false**，
-      // 由此 event+chat 在配置期就被拒（能力位 supported=false），而不是上线后偶发重复开会话。
+      // 订阅触发 × chat 的 fail-closed 开关（ADR 0163 §4.4 / 会话投递 §4）。
+      // 本次交付补齐了持久 messageKey、turn 占位与确定性 run→session 映射，但 §4.2 的 8 条
+      // 开闸条件里还有几条没有证据（真库并发、多进程崩溃点、dispatch 侧稳定幂等查询、指标告警），
+      // **本 ADR 明确不授权改这里**。放开是一次独立变更，须先补齐那些证据。
       chatSupportsIdempotency: false,
       // chat 准入（≈ multica AgentReadiness）：在岗 + 有 active runtime 绑定，注定失败的触发别去开会话。
       agentReady: async (agentId) => {
@@ -199173,6 +200283,51 @@ async function startServe(opts) {
         return { ok: true };
       }
     },
+    // 固定目标会话接缝（ADR 会话投递 D3/D8）：可用性判据、选择器搜索、长期会话创建三件事
+    // 一律在服务端，前端只消费结论。
+    chatTargets: {
+      inspect: inspectChatTarget,
+      createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
+        const sessionId = (0, import_node_crypto48.randomUUID)();
+        const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+        const binding = await registryStore.getBinding(agentId).catch(() => null);
+        await chatSessionStore.createSession({
+          id: sessionId,
+          companyId,
+          humanActorId: ownerHumanActorId,
+          aiActorId: agentId,
+          runtimeId: binding?.nodeId ?? "",
+          runtimeSessionId: null,
+          title,
+          touchedAt: nowIso,
+          createdAt: nowIso
+        });
+        return { sessionId };
+      },
+      search: async ({ companyId, agentId, ownerHumanActorId, text, limit, offset }) => {
+        if (!chatSessionStore.searchSessionsForTarget) return { items: [], hasMore: false };
+        const page = await chatSessionStore.searchSessionsForTarget({
+          companyId,
+          humanActorId: ownerHumanActorId,
+          aiActorId: agentId,
+          ...text ? { text } : {},
+          limit,
+          offset
+        });
+        return {
+          items: page.items.map((x2) => ({ id: x2.id, title: x2.title ?? null, touchedAt: x2.touchedAt, messageCount: x2.messageCount })),
+          hasMore: page.hasMore
+        };
+      },
+      deleteSession: async (sessionId) => {
+        await chatSessionStore.deleteSession(sessionId);
+      },
+      resolveOwnerHuman: async (actor) => {
+        if (actor.startsWith("actor:human:")) return actor;
+        const bound = await assistantBindStore.getByAgent(actor).catch(() => null);
+        return bound?.humanActorId ?? null;
+      }
+    },
     isAdmin: async (companyId, actor) => {
       const member = await controlPlaneStore.getMember(companyId, actor);
       return member?.role === "owner" || member?.role === "admin";
@@ -199607,7 +200762,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto47.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto48.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -199701,6 +200856,9 @@ async function startServe(opts) {
         store: chatSessionStore,
         registry: registryStore,
         trace: traceStore,
+        // 会话槽的观测与运维出口（ADR 会话投递 D4）：看这条会话占着哪一轮、把卡死的那一轮置终态。
+        chatTurns: chatTurnStore,
+        getRun: (id) => traceStore.getRun(id),
         kernel,
         artifactState: artifactStateStore,
         workdir: () => workdirBridge ?? void 0,
@@ -199711,6 +200869,8 @@ async function startServe(opts) {
     assistants: assistantsService,
     liveChat,
     ...chatSessionStore ? { chatSession: chatSessionStore } : {},
+    // ADR 会话投递 D4：/api/chat 与渠道入站据它占同一个会话槽（自动化侧经 automations 域接同一实例）。
+    chatTurns: chatTurnStore,
     knowledge: {
       configStore: knowledgeConfigStore,
       runStore: knowledgeRunStore,
@@ -200024,10 +201184,10 @@ async function startServe(opts) {
           { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
           { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
         ) : false;
-        const runtimeSessionId = sessionId ?? (0, import_node_crypto47.randomUUID)();
+        const runtimeSessionId = sessionId ?? (0, import_node_crypto48.randomUUID)();
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = `chat-run:${(0, import_node_crypto47.randomUUID)()}`;
-        const artifactId = `artifact:chat:${(0, import_node_crypto47.randomUUID)()}`;
+        const traceRunId = `chat-run:${(0, import_node_crypto48.randomUUID)()}`;
+        const artifactId = `artifact:chat:${(0, import_node_crypto48.randomUUID)()}`;
         const traceStartedAt = (/* @__PURE__ */ new Date()).toISOString();
         let lastProgressTouchMs = 0;
         const PROGRESS_TOUCH_THROTTLE_MS2 = 2e4;
@@ -200575,6 +201735,20 @@ async function startServe(opts) {
       chatSweepTimer.unref?.();
     }
   }
+  const chatTurnOrphanGraceMs = Number(process.env.OASIS_CHAT_TURN_ORPHAN_GRACE_MS ?? 10 * 6e4);
+  const chatTurnSweepTimer = setInterval(() => {
+    void sweepStaleChatTurns({
+      turns: chatTurnStore,
+      getRun: (id) => traceStore.getRun(id),
+      // 本进程在飞的轮不动——它自己的收尾路径会写终态（liveChat 只认人工/渠道那条，自动化轮
+      // 在 dispatch 后立刻有 assistantRunId、其 run 处于 running，走上面的权威判据同样保住）。
+      isOwned: (turn) => Boolean(turn.assistantRunId && liveChat.runFor(turn.chatSessionId) === turn.assistantRunId),
+      now: Date.now(),
+      noRunGraceMs: chatTurnOrphanGraceMs,
+      log: (m2) => console.log(m2)
+    }).catch((err) => console.error(`[chat-turn-sweep] tick \u5931\u8D25: ${String(err)}`));
+  }, 3e4);
+  chatTurnSweepTimer.unref?.();
   const hubAdapterOpts = {
     log: (m2) => console.warn(m2),
     health: nodeHealth,
@@ -200586,7 +201760,16 @@ async function startServe(opts) {
     }
   };
   chatRemoteAdapter = new DaemonHubAdapter(hub, { ...hubAdapterOpts, stashUnknownFrames: true });
-  dispatchRemoteAdapter = new DaemonHubAdapter(hub, { ...hubAdapterOpts, stashUnknownFrames: true });
+  dispatchRemoteAdapter = new DaemonHubAdapter(hub, {
+    ...hubAdapterOpts,
+    stashUnknownFrames: true,
+    // 服务端自判死（存在性快照 / 会话失联收割 / socket 非 OPEN）没有退出帧，走不到下面那个
+    // message listener 里的 work.response 桥 → work 空转到 30 分钟超时。这里补上同一半逻辑。
+    // 只挂 dispatch 路：chat 路的派发不对应 work，它自有 chat-recovery 收尾。
+    onSettleWithoutFrame: (dispatchId, info) => {
+      void bridgeServerSideExitToEngine(dispatchId, info);
+    }
+  });
   let newEngineProduce = null;
   let newEngineReplyWork = null;
   let newEngineReview = null;
@@ -200622,6 +201805,51 @@ async function startServe(opts) {
   const reviewToSession = /* @__PURE__ */ new Map();
   const dispatchToReview = /* @__PURE__ */ new Map();
   let busRef = null;
+  async function bridgeServerSideExitToEngine(dispatchId, info) {
+    const bus = busRef;
+    if (!bus) return;
+    const outcome = info.code === 0 ? "completed" : "failed";
+    const detail = {
+      reason: `server-side settle: ${info.reason ?? "unknown"}`,
+      ...info.errorMessage ? { errorMessage: info.errorMessage } : {}
+    };
+    try {
+      const mapping = dispatchToWork.get(dispatchId);
+      if (mapping) {
+        dispatchToWork.delete(dispatchId);
+        workToSession.delete(mapping.workId);
+        console.log(`[new-engine] \u670D\u52A1\u7AEF\u81EA\u5224\u6B7B\uFF08\u65E0\u9000\u51FA\u5E27\uFF09\uFF1A${dispatchId} \u2192 work.response(${outcome}) ${mapping.workId}`);
+        await bus.submit({
+          companyId: "",
+          workorderId: mapping.workorderId,
+          actorId: SYSTEM_ACTOR,
+          event: {
+            kind: "work.response",
+            workorderId: mapping.workorderId,
+            workId: mapping.workId,
+            outcome,
+            detail
+          }
+        });
+      } else {
+        await fallbackDispatchExitToWork({ dispatchId, info }, bus);
+      }
+      const revMapping = dispatchToReview.get(dispatchId);
+      if (revMapping) {
+        dispatchToReview.delete(dispatchId);
+        reviewToSession.delete(revMapping.reviewId);
+        console.log(`[new-engine] \u670D\u52A1\u7AEF\u81EA\u5224\u6B7B\uFF08\u65E0\u9000\u51FA\u5E27\uFF09\uFF1A${dispatchId} \u2192 review.timeout ${revMapping.reviewId}`);
+        await bus.submit({
+          companyId: "",
+          workorderId: revMapping.workorderId,
+          actorId: SYSTEM_ACTOR,
+          event: { kind: "review.timeout", workorderId: revMapping.workorderId, reviewId: revMapping.reviewId }
+        });
+      }
+    } catch (err) {
+      console.error(`[new-engine] \u670D\u52A1\u7AEF\u81EA\u5224\u6B7B\u6536\u53E3\u5931\u8D25 ${dispatchId}:`, err);
+    }
+  }
   async function fallbackDispatchExitToWork(msg, bus) {
     try {
       const entry = journalRing.find(
@@ -200695,7 +201923,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = `dispatch:${(0, import_node_crypto47.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto48.randomUUID)()}`;
           try {
             await dispatchLedger.insertOpen({
               id: ledgerId,
@@ -200771,7 +201999,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto47.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto48.randomUUID)()}`;
           try {
             await dispatchLedger.insertOpen({
               id: ledgerId,
@@ -201281,8 +202509,8 @@ async function startServe(opts) {
   const agentMs = opts.sla?.agentMs ?? 10 * 6e4;
   const quotaStarvationMs = opts.sla?.quotaStarvationMs ?? 6 * 36e5;
   const reviewStallMs = opts.sla?.reviewStallMs ?? 60 * 6e4;
-  const fmtSince = (iso4, now) => {
-    const min2 = Math.floor(Math.max(0, now - Date.parse(iso4)) / 6e4);
+  const fmtSince = (iso5, now) => {
+    const min2 = Math.floor(Math.max(0, now - Date.parse(iso5)) / 6e4);
     if (!Number.isFinite(min2)) return "\u521A\u624D";
     if (min2 < 1) return "\u4E0D\u5230 1 \u5206\u949F\u524D";
     if (min2 < 60) return `${min2} \u5206\u949F\u524D`;
@@ -202404,7 +203632,7 @@ var SessionProcessState = class {
 // ../cli/src/daemon/ws-client.ts
 init_wrapper();
 var import_node_os9 = require("node:os");
-var import_node_crypto48 = require("node:crypto");
+var import_node_crypto49 = require("node:crypto");
 init_src8();
 init_src7();
 
@@ -202739,8 +203967,21 @@ var DaemonWsClient = class {
   ws = null;
   pingTimer = null;
   stopped = false;
-  /** 收到 update 但有活跃会话时置真：延后到所有会话结束再自更新，避免打断执行中的 agent。 */
+  /** 收到 update 但本进程内还有活跃会话时置真：延后到全部结束再自更新，避免打断执行中的 agent。 */
   pendingUpdate = false;
+  /** 第一次延后这次更新的时刻。用于给「等空闲」封顶——否则长跑会话能把更新无限期挂住（ADR 0115 缺陷 3）。 */
+  pendingUpdateSince = null;
+  /** 「等空闲」的上限；到点就照做（会打断本进程内的会话）。env OASIS_UPDATE_DEFER_MAX_MS 可调。 */
+  updateDeferMaxMs = (() => {
+    const raw = Number(process.env["OASIS_UPDATE_DEFER_MAX_MS"]);
+    return Number.isFinite(raw) && raw >= 0 ? raw : 30 * 6e4;
+  })();
+  /** 记下首次延后时刻并回答「还在上限内吗」。 */
+  deferUpdateWithinLimit() {
+    this.pendingUpdate = true;
+    this.pendingUpdateSince ??= Date.now();
+    return Date.now() - this.pendingUpdateSince < this.updateDeferMaxMs;
+  }
   /** 停机排空中（见 {@link drain}）：不再接新派发、不再触发延后的自更新。 */
   draining = false;
   /** 已回 dispatch_received、尚未完成 runtime spawn 的派发；也随 hello 上报供重连对账。 */
@@ -203057,9 +204298,13 @@ var DaemonWsClient = class {
           break;
         }
         const active = this.sessions.activeCount();
-        if (active > 0) {
-          this.pendingUpdate = true;
-          log2("[node-cli]", `\u2190 update\uFF1A\u5F53\u524D\u6709 ${active} \u4E2A\u6267\u884C\u4E2D\u4F1A\u8BDD,\u5EF6\u540E\u5230\u5168\u90E8\u7ED3\u675F\u540E\u518D\u66F4\u65B0`);
+        if (active > 0 && this.deferUpdateWithinLimit()) {
+          log2("[node-cli]", `\u2190 update\uFF1A\u5F53\u524D\u6709 ${active} \u4E2A\u6267\u884C\u4E2D\u4F1A\u8BDD\uFF08\u672C\u8FDB\u7A0B\u5185\uFF09\uFF0C\u5EF6\u540E\u5230\u5168\u90E8\u7ED3\u675F\u6216 ${Math.round(this.updateDeferMaxMs / 6e4)} \u5206\u949F\u4E0A\u9650`);
+        } else if (active > 0) {
+          log2("[node-cli]", `\u2190 update\uFF1A\u5DF2\u5EF6\u540E ${Math.round((Date.now() - (this.pendingUpdateSince ?? Date.now())) / 6e4)} \u5206\u949F\u4ECD\u672A\u7A7A\u95F2\uFF0C\u8D85\u8FC7\u4E0A\u9650\uFF0C\u73B0\u5728\u5C31\u66F4\u65B0\uFF08\u4F1A\u6253\u65AD ${active} \u4E2A\u672C\u8FDB\u7A0B\u5185\u4F1A\u8BDD\uFF09`);
+          this.pendingUpdate = false;
+          this.pendingUpdateSince = null;
+          this.onUpdate();
         } else {
           log2("[node-cli]", "\u2190 update\uFF1A\u7A7A\u95F2,\u7ACB\u5373\u62C9\u53D6\u6700\u65B0\u7248\u672C\u5E76\u91CD\u542F");
           this.onUpdate();
@@ -203076,7 +204321,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto48.randomUUID)();
+    const requestId = (0, import_node_crypto49.randomUUID)();
     return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -203143,9 +204388,11 @@ var DaemonWsClient = class {
   }
   /** 会话结束后调用：若之前收到过 update 但因忙延后了,且现已空闲,则触发自更新。 */
   maybeRunPendingUpdate() {
+    if (!this.pendingUpdate) return;
     if (this.draining) return;
     if (this.pendingUpdate && this.sessions.activeCount() === 0) {
       this.pendingUpdate = false;
+      this.pendingUpdateSince = null;
       log2("[node-cli]", "\u6240\u6709\u4F1A\u8BDD\u5DF2\u7ED3\u675F,\u6267\u884C\u5EF6\u540E\u7684\u66F4\u65B0\uFF1A\u62C9\u53D6\u6700\u65B0\u7248\u672C\u5E76\u91CD\u542F");
       this.onUpdate?.();
     }
@@ -203420,7 +204667,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process18 = require("node:child_process");
 var import_node_fs21 = require("node:fs");
-var import_node_crypto49 = require("node:crypto");
+var import_node_crypto50 = require("node:crypto");
 var import_node_os12 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -203486,7 +204733,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto49.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto50.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -203750,18 +204997,19 @@ var COMMAND_DECLS = {
   "automation-get": {
     group: "\u81EA\u52A8\u5316",
     usage: "oasis automation-get <id>",
-    description: "\u81EA\u52A8\u5316\u8BE6\u60C5\uFF1A\u89C4\u5219 + \u89E6\u53D1\u5668 + \u6700\u8FD1\u8FD0\u884C\u6295\u5F71\u3002",
+    description: "\u81EA\u52A8\u5316\u8BE6\u60C5\uFF1A\u89C4\u5219 + \u89E6\u53D1\u5668 + \u6700\u8FD1\u8FD0\u884C\u6295\u5F71\u3002\u5BF9\u8BDD\u6267\u884C\u4F1A\u5E26 automation.chatTarget\uFF08\u76EE\u6807\u4F1A\u8BDD\u7B56\u7565\uFF09\u4E0E chatTargetView\uFF08\u56FA\u5B9A\u4F1A\u8BDD\u662F\u5426\u4ECD\u53EF\u6295\u9012\u3001\u6D88\u606F\u91CF\u3001\u6700\u8FD1\u6D3B\u52A8\uFF09\u3002",
     positional: [{ name: "<id>", required: true, desc: "\u81EA\u52A8\u5316 id" }],
     examples: ["oasis automation-get auto_abc123"]
   },
   "automation-create": {
     group: "\u81EA\u52A8\u5316",
-    usage: "oasis automation-create --name <\u540D> [--mode chat|workorder] [--agent <actorId>] [--playbook <ref>] [--payload '<JSON>'] [--cron '0 9 * * 1' --tz Asia/Shanghai] [--webhook generic|github] [--project <id>] [--title-template '\u6668\u62A5 {{date}}'] [--dispatch true] [--subscribers a,b]",
+    usage: "oasis automation-create --name <\u540D> [--mode chat|workorder] [--agent <actorId>] [--chat-target new|session:<\u4F1A\u8BDDid>|create] [--playbook <ref>] [--payload '<JSON>'] [--cron '0 9 * * 1' --tz Asia/Shanghai] [--webhook generic|github] [--project <id>] [--title-template '\u6668\u62A5 {{date}}'] [--dispatch true] [--subscribers a,b]",
     description: "\u65B0\u5EFA\u81EA\u52A8\u5316\u3002chat \u6A21\u5F0F\uFF08\u9ED8\u8BA4\u7ED9\u4E86 --agent \u5373\u662F\uFF09\uFF1A\u5F00\u4F1A\u8BDD\u628A\u4EFB\u52A1\u53D1\u7ED9\u6267\u884C\u4EBA\u3001\u56DE\u590D\u8FDB\u8FD0\u884C\u5386\u53F2\uFF1Bworkorder \u6A21\u5F0F\uFF1A\u6309\u5267\u672C\u5EFA\u5DE5\u5355\uFF08\u9ED8\u8BA4 dispatch-hold \u5F85\u4EBA\u653E\u884C\uFF09\u3002",
     flags: [
       { name: "name", desc: "\u663E\u793A\u540D", required: true },
       { name: "mode", desc: "chat|workorder\uFF08\u7F3A\u7701\uFF1A\u7ED9\u4E86 --agent \u4E3A chat\uFF0C\u5426\u5219 workorder\uFF09" },
       { name: "agent", desc: "\u6267\u884C\u4EBA agent actor id\uFF08chat \u6A21\u5F0F\u5FC5\u586B\uFF09" },
+      { name: "chat-target", desc: "\u5BF9\u8BDD\u6267\u884C\u7684\u76EE\u6807\u4F1A\u8BDD\uFF1Anew=\u6BCF\u6B21\u65B0\u5F00\uFF08\u7F3A\u7701\uFF09\uFF5Csession:<\u4F1A\u8BDDid>=\u56FA\u5B9A\u53D1\u5230\u8BE5\u4F1A\u8BDD\uFF5Ccreate=\u73B0\u5EFA\u4E00\u4E2A\u957F\u671F\u76EE\u6807\u4F1A\u8BDD\u5E76\u7ED1\u4E0A" },
       { name: "playbook", desc: "\u5267\u672C ref\uFF08workorder \u6A21\u5F0F\u5FC5\u586B\uFF1Boasis playbooks \u53EF\u67E5\uFF09" },
       { name: "payload", desc: "\u5267\u672C\u5165\u53C2\uFF08JSON\uFF0C\u5BF9\u5E94\u5267\u672C inputs\uFF09" },
       { name: "cron", desc: "5 \u5B57\u6BB5 cron\uFF08\u7ED9\u4E86\u5373\u5EFA schedule \u89E6\u53D1\u5668\uFF09" },
@@ -203776,13 +205024,14 @@ var COMMAND_DECLS = {
   },
   "automation-update": {
     group: "\u81EA\u52A8\u5316",
-    usage: "oasis automation-update <id> [--name <\u540D>] [--mode chat|workorder] [--agent <actorId>] [--playbook <ref>] [--payload '<JSON>'] [--project <id>] [--title-template <t>] [--dispatch true|false] [--enabled true|false] [--subscribers a,b]",
+    usage: "oasis automation-update <id> [--name <\u540D>] [--mode chat|workorder] [--agent <actorId>] [--chat-target new|session:<\u4F1A\u8BDDid>|create] [--playbook <ref>] [--payload '<JSON>'] [--project <id>] [--title-template <t>] [--dispatch true|false] [--enabled true|false] [--subscribers a,b]",
     description: "\u66F4\u65B0\u81EA\u52A8\u5316\u3002\u5B9E\u8D28\u53D8\u66F4\uFF08\u5267\u672C/\u5165\u53C2/\u6A21\u677F/dispatch/\u542F\u505C\uFF09\u4F1A\u628A\u95EE\u8D23\u8F6C\u79FB\u7ED9\u7F16\u8F91\u8005\uFF08\u5F52\u56E0\uFF09\u3002",
     positional: [{ name: "<id>", required: true, desc: "\u81EA\u52A8\u5316 id" }],
     flags: [
       { name: "name", desc: "\u663E\u793A\u540D" },
       { name: "mode", desc: "chat|workorder" },
       { name: "agent", desc: "\u6267\u884C\u4EBA agent actor id" },
+      { name: "chat-target", desc: "\u5BF9\u8BDD\u6267\u884C\u7684\u76EE\u6807\u4F1A\u8BDD\uFF1Anew=\u6BCF\u6B21\u65B0\u5F00\uFF5Csession:<\u4F1A\u8BDDid>=\u56FA\u5B9A\u53D1\u5230\u8BE5\u4F1A\u8BDD\uFF5Ccreate=\u73B0\u5EFA\u4E00\u4E2A\u957F\u671F\u76EE\u6807\u4F1A\u8BDD\u5E76\u7ED1\u4E0A\uFF08\u4E0D\u7ED9=\u4E0D\u52A8\uFF09" },
       { name: "playbook", desc: "\u5267\u672C ref" },
       { name: "payload", desc: "\u5267\u672C\u5165\u53C2\uFF08JSON\uFF09" },
       { name: "project", desc: "\u76EE\u6807\u9879\u76EE id" },
@@ -204376,6 +205625,30 @@ var COMMAND_DECLS = {
     description: "\u5B64\u513F blob \u56DE\u6536\uFF08mark-and-sweep\uFF1B\u64CD\u4F5C\u8005\u547D\u4EE4\uFF0CF1\uFF09\u3002",
     examples: ["oasis gc"]
   },
+  "chat-turn": {
+    group: "\u8FD0\u7EF4",
+    usage: "oasis chat-turn <\u4F1A\u8BDDid>",
+    description: "\u770B\u8FD9\u6761 chat \u4F1A\u8BDD\u5F53\u524D\u5360\u7740\u7684\u90A3\u4E00\u8F6E\uFF08\u8F6E\u6B21\u8D26\u672C\u7684 active \u884C\uFF09\u3002\u300C\u76EE\u6807\u4F1A\u8BDD\u6B63\u5FD9 / session_busy\u300D\u7684\u552F\u4E00\u53E3\u5F84\u5C31\u662F\u5B83\u2014\u2014\u6392\u67E5\u81EA\u52A8\u5316\u4E3A\u4EC0\u4E48\u4E00\u76F4\u88AB\u8DF3\u8FC7\u5148\u770B\u8FD9\u91CC\u3002",
+    positional: [{ name: "<\u4F1A\u8BDDid>", required: true, desc: "chat \u4F1A\u8BDD id" }],
+    examples: ["oasis chat-turn 84f48795-1c2d-4e5f-8a9b-0c1d2e3f4a5b"]
+  },
+  "chat-turn-settle": {
+    group: "\u8FD0\u7EF4",
+    usage: "oasis chat-turn-settle <\u4F1A\u8BDDid> <\u8F6E\u6B21id> [--force true] [--reason <\u8BF4\u660E>]",
+    description: "\u628A\u5361\u6B7B\u7684\u4E00\u8F6E\u7F6E\u7EC8\u6001\u3001\u653E\u5F00\u4F1A\u8BDD\u69FD\uFF08\u8FDB\u7A0B\u88AB\u6740\u7559\u4E0B\u7684 running \u884C\u4F1A\u8BA9\u4F1A\u8BDD\u6C38\u4E45\u5224\u5FD9\uFF09\u3002\u9ED8\u8BA4\u5148\u5411 trace \u8D26\u672C\u6838\u5B9E\uFF1A\u8FD8\u5728\u8DD1\u5C31\u62D2\u7EDD\uFF1B--force true \u662F\u660E\u786E\u7684\u4EBA\u5DE5\u63A8\u7FFB\uFF0C\u843D cancelled \u5E76\u8BB0\u4E0B\u539F\u56E0\u3002",
+    positional: [
+      { name: "<\u4F1A\u8BDDid>", required: true, desc: "chat \u4F1A\u8BDD id" },
+      { name: "<\u8F6E\u6B21id>", required: true, desc: "\u8F6E\u6B21 id\uFF08oasis chat-turn \u91CC\u7684 id\uFF0Crun.result.blockedByTurnId \u540C\u503C\uFF09" }
+    ],
+    flags: [
+      { name: "force", desc: "true=\u4E0D\u6838\u5B9E\u76F4\u63A5\u7F6E cancelled\uFF08\u786E\u8BA4\u6267\u884C\u4EBA\u771F\u7684\u6B7B\u4E86\u518D\u7528\uFF09" },
+      { name: "reason", desc: "\u5F3A\u5236\u7F6E\u7EC8\u6001\u7684\u539F\u56E0\uFF08\u4F1A\u8BB0\u8FDB\u8F6E\u6B21\u7684 lastError\uFF09" }
+    ],
+    examples: [
+      "oasis chat-turn-settle 84f48795-\u2026 cturn_nbgv5c7g8u",
+      'oasis chat-turn-settle 84f48795-\u2026 cturn_nbgv5c7g8u --force true --reason "\u8282\u70B9\u5DF2\u91CD\u88C5\uFF0C\u8FD9\u4E00\u8F6E\u7684\u8FDB\u7A0B\u4E0D\u5B58\u5728\u4E86"'
+    ]
+  },
   // —— 读产物 ——
   status: {
     group: "\u8BFB\u4EA7\u7269",
@@ -205103,13 +206376,13 @@ function ownFlagsFromDecl(command) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto50 = require("node:crypto");
+var import_node_crypto51 = require("node:crypto");
 var import_node_child_process19 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto50.createHash)("sha256").update(canonical).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto51.createHash)("sha256").update(canonical).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -205236,6 +206509,18 @@ function need(flags, name) {
   if (v2 === void 0) throw new Error(`\u7F3A\u5C11 --${name}\uFF08oasis \u4E0D\u5E26\u53C2\u6570\u53EF\u770B\u7528\u6CD5\uFF09`);
   return v2;
 }
+function parseChatTargetFlag(raw) {
+  if (raw === void 0) return {};
+  const v2 = raw.trim();
+  if (v2 === "new") return { chatTarget: { mode: "new_session" } };
+  if (v2 === "create") return { createChatTargetSession: true };
+  if (v2.startsWith("session:")) {
+    const sessionId = v2.slice("session:".length).trim();
+    if (!sessionId) throw new Error("--chat-target session:<\u4F1A\u8BDDid> \u7F3A\u5C11\u4F1A\u8BDD id");
+    return { chatTarget: { mode: "existing_session", sessionId } };
+  }
+  throw new Error(`--chat-target \u53EA\u80FD\u662F new | session:<\u4F1A\u8BDDid> | create\uFF08\u6536\u5230\uFF1A${raw}\uFF09`);
+}
 function needPos(positional, i, usage) {
   const v2 = positional[i];
   if (v2 === void 0) throw new Error(`\u7528\u6CD5: ${usage}`);
@@ -205704,7 +206989,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path31.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto51.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto52.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -206260,10 +207545,12 @@ ${p2.ref}  ${p2.name}`);
         triggers.push({ kind: "webhook", webhook: { provider: flags.get("webhook") || "generic" } });
       }
       const mode = flags.get("mode") ?? (flags.has("agent") ? "chat" : "workorder");
+      const chatTargetFlag = parseChatTargetFlag(flags.get("chat-target"));
       const result = await api.post("/api/automations", {
         name: need(flags, "name"),
         executionMode: mode,
         ...flags.has("agent") ? { agentId: flags.get("agent") } : {},
+        ...chatTargetFlag,
         ...mode === "workorder" ? { playbookRef: need(flags, "playbook") } : {},
         ...flags.has("payload") ? { payload: JSON.parse(flags.get("payload")) } : {},
         ...flags.has("project") ? { projectId: flags.get("project") } : {},
@@ -206277,8 +207564,14 @@ ${p2.ref}  ${p2.name}`);
     }
     case "automation-update": {
       const id = needPos(positional, 0, "oasis automation-update <id> [--name ...] [--enabled true|false] ...");
+      const chatTargetFlag = parseChatTargetFlag(flags.get("chat-target"));
+      if ("createChatTargetSession" in chatTargetFlag) {
+        println(JSON.stringify(await api.post(`/api/automations/${encodeURIComponent(id)}/chat-target-session`, {}), null, 2));
+        break;
+      }
       const result = await api.request("PATCH", `/api/automations/${encodeURIComponent(id)}`, {
         ...flags.has("name") ? { name: flags.get("name") } : {},
+        ...chatTargetFlag,
         ...flags.has("mode") ? { executionMode: flags.get("mode") } : {},
         ...flags.has("agent") ? { agentId: flags.get("agent") } : {},
         ...flags.has("playbook") ? { playbookRef: flags.get("playbook") } : {},
@@ -207622,6 +208915,34 @@ ${res.warning}`);
       println(message);
       break;
     }
+    case "chat-turn": {
+      const sid = needPos(positional, 0, "oasis chat-turn <\u4F1A\u8BDDid>");
+      const { turn } = await api.request(
+        "GET",
+        `/api/chat-sessions/${encodeURIComponent(sid)}/turns/active`
+      );
+      if (!turn) {
+        println("\u8FD9\u6761\u4F1A\u8BDD\u5F53\u524D\u7A7A\u95F2\uFF08\u6CA1\u6709 active \u8F6E\u6B21\uFF09\u3002");
+        break;
+      }
+      println(JSON.stringify(turn, null, 2));
+      println("");
+      println(`\u5361\u4F4F\u4E86\uFF1F\u5148\u6838\u5B9E\u6267\u884C\u4EBA\u6B7B\u6CA1\u6B7B\uFF0C\u518D \`oasis chat-turn-settle ${sid} ${String(turn["id"])}\`\u3002`);
+      break;
+    }
+    case "chat-turn-settle": {
+      const sid = needPos(positional, 0, "oasis chat-turn-settle <\u4F1A\u8BDDid> <\u8F6E\u6B21id>");
+      const turnId = needPos(positional, 1, "oasis chat-turn-settle <\u4F1A\u8BDDid> <\u8F6E\u6B21id>");
+      const res = await api.post(
+        `/api/chat-sessions/${encodeURIComponent(sid)}/turns/${encodeURIComponent(turnId)}/settle`,
+        {
+          ...flags.get("force") === "true" ? { force: true } : {},
+          ...flags.has("reason") ? { reason: flags.get("reason") } : {}
+        }
+      );
+      println(res.settled ? `\u5DF2\u7F6E\u7EC8\u6001\uFF1A${res.status}${res.reason ? `\uFF08${res.reason}\uFF09` : ""}\u2014\u2014\u4F1A\u8BDD\u69FD\u5DF2\u653E\u5F00\u3002` : `\u672A\u5904\u7F6E\uFF1A${res.reason ?? "\u8FD9\u4E00\u8F6E\u5DF2\u7ECF\u662F\u7EC8\u6001"}\u3002`);
+      break;
+    }
     case "queue": {
       const artifactId = needPos(positional, 0, "oasis queue <artifactId>");
       const { head, queue } = await api.view("queue", artifactId);
@@ -208250,12 +209571,12 @@ var LEGACY_SYSTEMD_UNIT = "oasis-node.service";
 var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 
 // src/install.ts
-var import_node_crypto52 = require("node:crypto");
+var import_node_crypto53 = require("node:crypto");
 var fs41 = __toESM(require("node:fs"));
 var path35 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir) {
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return pkgVersion;
-  const digest = (0, import_node_crypto52.createHash)("sha256").update(fs41.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto53.createHash)("sha256").update(fs41.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -208378,7 +209699,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.1.121" : "dev";
+var PKG_VERSION = true ? "0.1.122" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -208638,7 +209959,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto53.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto54.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }