oasis_test 0.1.137 → 0.1.138

package/dist/index.js

@@ -719,11 +719,16 @@ var init_link_windows = __esm({
       browserStaleAfterMs: 45e3,
       /**
        * 会话进程发完 `session_exited` 后等 ack 的时限（`session-process.ts`）。
-       * ⚠ ADR 0300 D7 已判定这个值偏小：实测一次 serve 重启停服 27.9 s，停服窗口内跑完的会话
-       * 其退出帧**必然**丢失。0300 止血 PR 0 会把它提到 ≥ 90 s 并让未回执的退出帧先落盘，
-       * 改的就是这一行——本次只收敛位置，不动值。
-       */
-      exitAckWaitMs: 1e4,
+       *
+       * ADR 0300 D7：取 90 s 覆盖一次 serve 重启（实测停服 27.6~27.9 s，数据面会话最慢 38.6 s 连回，
+       * 证据 C/D）。会话进程在这段时间里**不退出**、保持数据面重连；serve 回来后 `ws.on("open")` 会
+       * 重发 outbox 里未回执的 `session_exited`（`session-process.ts` 的 `for (const m of this.outbox)`），
+       * 服务端 `reconcileChatExitFrame` 按 `dispatchId` 幂等收口——退出帧不再随停服窗口蒸发、账本不再
+       * 停在 running 等时钟扫描判孤儿。仍小于会话自尽窗 `SESSION_LIMITS.suicideAfterUnreachableMs`（5 min），
+       * 等 ack 期间不会先自尽。**更狠的一层**（进程被 TTL/自尽强杀于窗口内时把未回执帧落 `exit.json`、
+       * 由 daemon 信使补发）属 D7 后续，另计。
+       */
+      exitAckWaitMs: 9e4,
       /** hub 对「暂无人认领」的会话在 serve 冷启动后挂起重判的宽限（`daemon-hub.ts`）。 */
       hubColdStartGraceMs: 9e4,
       /** orphan-sweep 判「账上在跑、四张认领表都不认」为孤儿的宽限（`serve.ts`）。 */
@@ -19191,7 +19196,9 @@ var init_kernel_bridge = __esm({
             handActorId: args.hand ?? null,
             ...args.intent !== void 0 ? { intent: args.intent } : {},
             ...args.source !== void 0 ? { source: args.source } : {},
-            recipients: [this.model.artifacts.get(args.artifactId)?.owner ?? ""],
+            // Escalation hands responsibility to the workorder owner; never address only the stalled executor.
+            // Human/team lead delivery additionally uses the same live recipient projection as the Inbox.
+            recipients: [...new Set([brief?.owner ?? art?.owner].filter((id) => !!id))],
             attachments: []
           }
         });
@@ -33366,14 +33373,14 @@ var require_axios = __commonJS({
       navigator: _navigator,
       origin
     });
-    var platform = {
+    var platform2 = {
       ...utils,
       ...platform$1
     };
     function toURLEncodedForm(data, options) {
-      return toFormData(data, new platform.classes.URLSearchParams(), {
+      return toFormData(data, new platform2.classes.URLSearchParams(), {
         visitor: function(value2, key, path40, helpers) {
-          if (platform.isNode && utils$1.isBuffer(value2)) {
+          if (platform2.isNode && utils$1.isBuffer(value2)) {
             this.append(key, value2.toString("base64"));
             return false;
           }
@@ -33526,8 +33533,8 @@ var require_axios = __commonJS({
       maxContentLength: -1,
       maxBodyLength: -1,
       env: {
-        FormData: platform.classes.FormData,
-        Blob: platform.classes.Blob
+        FormData: platform2.classes.FormData,
+        Blob: platform2.classes.Blob
       },
       validateStatus: function validateStatus(status) {
         return status >= 200 && status < 300;
@@ -33890,7 +33897,7 @@ var require_axios = __commonJS({
     }
     var DATA_URL_PATTERN = /^(?:([^;]+);)?(?:[^;]+;)?(base64|),([\s\S]*)$/;
     function fromDataURI(uri, asBlob, options) {
-      const _Blob = options && options.Blob || platform.classes.Blob;
+      const _Blob = options && options.Blob || platform2.classes.Blob;
       const protocol = parseProtocol(uri);
       if (asBlob === void 0 && _Blob) {
         asBlob = true;
@@ -34048,7 +34055,7 @@ var require_axios = __commonJS({
       }
     };
     var readBlob$1 = readBlob;
-    var BOUNDARY_ALPHABET = platform.ALPHABET.ALPHA_DIGIT + "-_";
+    var BOUNDARY_ALPHABET = platform2.ALPHABET.ALPHA_DIGIT + "-_";
     var textEncoder = typeof TextEncoder === "function" ? new TextEncoder() : new util__default["default"].TextEncoder();
     var CRLF = "\r\n";
     var CRLF_BYTES = textEncoder.encode(CRLF);
@@ -34094,7 +34101,7 @@ var require_axios = __commonJS({
       const {
         tag = "form-data-boundary",
         size = 25,
-        boundary = tag + "-" + platform.generateString(size, BOUNDARY_ALPHABET)
+        boundary = tag + "-" + platform2.generateString(size, BOUNDARY_ALPHABET)
       } = options || {};
       if (!utils$1.isFormData(form)) {
         throw TypeError("FormData instance required");
@@ -34323,7 +34330,7 @@ var require_axios = __commonJS({
     var isBrotliSupported = utils$1.isFunction(zlib__default["default"].createBrotliDecompress);
     var { http: httpFollow, https: httpsFollow } = followRedirects__default["default"];
     var isHttps = /https:?/;
-    var supportedProtocols = platform.protocols.map((protocol) => {
+    var supportedProtocols = platform2.protocols.map((protocol) => {
       return protocol + ":";
     });
     var flushOnFinish = (stream2, [throttled, flush]) => {
@@ -34575,7 +34582,7 @@ var require_axios = __commonJS({
           }
         });
         const fullPath = buildFullPath(config2.baseURL, config2.url, config2.allowAbsoluteUrls);
-        const parsed = new URL(fullPath, platform.hasBrowserEnv ? platform.origin : void 0);
+        const parsed = new URL(fullPath, platform2.hasBrowserEnv ? platform2.origin : void 0);
         const protocol = parsed.protocol || supportedProtocols[0];
         if (protocol === "data:") {
           if (config2.maxContentLength > -1) {
@@ -34983,14 +34990,14 @@ var require_axios = __commonJS({
         }
       });
     };
-    var isURLSameOrigin = platform.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin2, isMSIE) => (url2) => {
-      url2 = new URL(url2, platform.origin);
+    var isURLSameOrigin = platform2.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin2, isMSIE) => (url2) => {
+      url2 = new URL(url2, platform2.origin);
       return origin2.protocol === url2.protocol && origin2.host === url2.host && (isMSIE || origin2.port === url2.port);
     })(
-      new URL(platform.origin),
-      platform.navigator && /(msie|trident)/i.test(platform.navigator.userAgent)
+      new URL(platform2.origin),
+      platform2.navigator && /(msie|trident)/i.test(platform2.navigator.userAgent)
     ) : () => true;
-    var cookies = platform.hasStandardBrowserEnv ? (
+    var cookies = platform2.hasStandardBrowserEnv ? (
       // Standard browser envs support document.cookie
       {
         write(name, value2, expires, path40, domain2, secure, sameSite) {
@@ -35131,7 +35138,7 @@ var require_axios = __commonJS({
         );
       }
       if (utils$1.isFormData(data)) {
-        if (platform.hasStandardBrowserEnv || platform.hasStandardBrowserWebWorkerEnv) {
+        if (platform2.hasStandardBrowserEnv || platform2.hasStandardBrowserWebWorkerEnv) {
           headers.setContentType(void 0);
         } else if (utils$1.isFunction(data.getHeaders)) {
           const formHeaders = data.getHeaders();
@@ -35143,7 +35150,7 @@ var require_axios = __commonJS({
           });
         }
       }
-      if (platform.hasStandardBrowserEnv) {
+      if (platform2.hasStandardBrowserEnv) {
         withXSRFToken && utils$1.isFunction(withXSRFToken) && (withXSRFToken = withXSRFToken(newConfig));
         if (withXSRFToken || withXSRFToken !== false && isURLSameOrigin(newConfig.url)) {
           const xsrfValue = xsrfHeaderName && xsrfCookieName && cookies.read(xsrfCookieName);
@@ -35281,7 +35288,7 @@ var require_axios = __commonJS({
           }
         }
         const protocol = parseProtocol(_config.url);
-        if (protocol && platform.protocols.indexOf(protocol) === -1) {
+        if (protocol && platform2.protocols.indexOf(protocol) === -1) {
           reject(
             new AxiosError$1(
               "Unsupported protocol " + protocol + ":",
@@ -35441,7 +35448,7 @@ var require_axios = __commonJS({
       const encodeText = isFetchSupported && (typeof TextEncoder$1 === "function" ? /* @__PURE__ */ ((encoder) => (str2) => encoder.encode(str2))(new TextEncoder$1()) : async (str2) => new Uint8Array(await new Request(str2).arrayBuffer()));
       const supportsRequestStream = isRequestSupported && isReadableStreamSupported && test(() => {
         let duplexAccessed = false;
-        const hasContentType = new Request(platform.origin, {
+        const hasContentType = new Request(platform2.origin, {
           body: new ReadableStream$1(),
           method: "POST",
           get duplex() {
@@ -35478,7 +35485,7 @@ var require_axios = __commonJS({
           return body2.size;
         }
         if (utils$1.isSpecCompliantForm(body2)) {
-          const _request = new Request(platform.origin, {
+          const _request = new Request(platform2.origin, {
             method: "POST",
             body: body2
           });
@@ -150194,6 +150201,40 @@ var init_live_chat = __esm({
           }
         };
       }
+      /**
+       * serve 重启后**重挂**一个占位轮（ADR 0300 D4）。该会话在本进程注册表里已有轮（真轮或另一个占位轮）
+       * 则不动、返回 null——保证幂等且绝不覆盖真轮。占位轮 status=running、缓冲为空、句柄不带 appendInput
+       * （`canAppend` 因此为 false），`kill()` 走注入的 `onStop`（账本收口）并把本轮标 error 让在挂的观众
+       * 就地收到终止。节点重连时恢复路的 {@link start} 会替掉它。
+       */
+      reopenForRecovery(chatSessionId, opts) {
+        if (this.turns.has(chatSessionId)) return null;
+        let ctrl;
+        const handle = {
+          runtimeSessionId: opts.runtimeSessionId,
+          ...opts.runId ? { runId: opts.runId } : {},
+          canAppendInput: false,
+          kill: () => {
+            try {
+              opts.onStop?.();
+            } finally {
+              ctrl?.finish("error");
+            }
+          }
+        };
+        ctrl = this.start(chatSessionId, handle);
+        const turn = this.turns.get(chatSessionId);
+        if (turn) turn.recovering = true;
+        return ctrl;
+      }
+      /** 占位轮的最后一个观众断开即回收：没真 runtime 喂它，留着只会占内存、也会让 `isRunning` 恒真。 */
+      evictIfEmptyRecovering(chatSessionId, turn) {
+        if (!turn.recovering || turn.status !== "running") return;
+        if (turn.subscribers.size > 0 || turn.liveSubscribers.size > 0) return;
+        if (this.turns.get(chatSessionId) !== turn) return;
+        if (turn.evictTimer) clearTimeout(turn.evictTimer);
+        this.turns.delete(chatSessionId);
+      }
       emitLive(turn, event) {
         turn.liveTurnId = event.turnId;
         const mergeField = this.mergeableLiveField(event);
@@ -150267,6 +150308,7 @@ var init_live_chat = __esm({
           gap,
           detach: () => {
             turn.subscribers.delete(sub);
+            this.evictIfEmptyRecovering(chatSessionId, turn);
           }
         };
       }
@@ -150286,6 +150328,7 @@ var init_live_chat = __esm({
           epoch: turn.liveEpoch,
           detach: () => {
             turn.liveSubscribers.delete(sub);
+            this.evictIfEmptyRecovering(chatSessionId, turn);
           }
         };
       }
@@ -150409,7 +150452,9 @@ var init_live_chat = __esm({
        *  建单草案 submit 发生在这一轮内：用它给草案盖上「产出轮次」标记，供 friday 重进对话页把每版
        *  草案归位到产出它的那条助手消息（message.runId 对齐）。 */
       runFor(chatSessionId) {
-        return this.turns.get(chatSessionId)?.runId;
+        const turn = this.turns.get(chatSessionId);
+        if (!turn || turn.recovering) return void 0;
+        return turn.runId;
       }
       /**
        * 反查该会话当前驻留那一轮**这一段**的 assistant 行 id（无进行中/grace 轮、或还没落库时
@@ -150418,7 +150463,9 @@ var init_live_chat = __esm({
        * 两段共用同一个 runId，钉不出前后段的区别，而那正是本字段存在的理由。
        */
       messageFor(chatSessionId) {
-        return this.turns.get(chatSessionId)?.assistantMessageId;
+        const turn = this.turns.get(chatSessionId);
+        if (!turn || turn.recovering) return void 0;
+        return turn.assistantMessageId;
       }
       /** 测试/排障用：当前驻留的会话数。 */
       size() {
@@ -184602,16 +184649,16 @@ var init_tool_home = __esm({
 });
 
 // ../connectors/src/_base/install.ts
-function installPlan(cmd, platform, toolsPrefix) {
+function installPlan(cmd, platform2, toolsPrefix) {
   if (cmd === "lark-cli") {
-    const npm = platform === "win32" ? "npm.cmd" : "npm";
+    const npm = platform2 === "win32" ? "npm.cmd" : "npm";
     return [{ file: npm, args: ["install", "-g", "--prefix", toolsPrefix, "@larksuite/cli"], ensureDir: toolsPrefix }];
   }
   const pkg = cmd === "gh" ? { brew: "gh", apt: "gh", dnf: "gh", pacman: "github-cli", apk: "github-cli", winget: "GitHub.cli", choco: "gh", scoop: "gh" } : { brew: "git", apt: "git", dnf: "git", pacman: "git", apk: "git", winget: "Git.Git", choco: "git", scoop: "git" };
-  if (platform === "darwin") {
+  if (platform2 === "darwin") {
     return [{ file: "brew", args: ["install", pkg.brew], requires: "brew" }];
   }
-  if (platform === "win32") {
+  if (platform2 === "win32") {
     return [
       { file: "winget", args: ["install", "--silent", "--accept-package-agreements", "--accept-source-agreements", "-e", "--id", pkg.winget], requires: "winget" },
       { file: "choco", args: ["install", "-y", pkg.choco], requires: "choco" },
@@ -194314,6 +194361,35 @@ ${task}` : task;
   }
 });
 
+// ../adapters/src/_core/pdeathsig.ts
+function pdeathsigAvailable(probe = defaultProbe) {
+  if (cachedAvailable === void 0) cachedAvailable = probe();
+  return cachedAvailable;
+}
+function defaultProbe() {
+  if (os6.platform() !== "linux") return false;
+  try {
+    const help = (0, import_node_child_process13.execFileSync)("setpriv", ["--help"], { stdio: ["ignore", "pipe", "ignore"], timeout: 2e3 }).toString();
+    return help.includes("--pdeathsig");
+  } catch {
+    return false;
+  }
+}
+function pdeathsigWrap(bin, args) {
+  return { bin: "setpriv", args: ["--pdeathsig", "SIGKILL", "--", bin, ...args] };
+}
+function shouldBindRuntimePdeathsig() {
+  return process.env["OASIS_BIND_RUNTIME_PDEATHSIG"] === "1" && pdeathsigAvailable();
+}
+var import_node_child_process13, os6, cachedAvailable;
+var init_pdeathsig = __esm({
+  "../adapters/src/_core/pdeathsig.ts"() {
+    "use strict";
+    import_node_child_process13 = require("node:child_process");
+    os6 = __toESM(require("node:os"), 1);
+  }
+});
+
 // ../adapters/src/_core/subprocess.ts
 async function materialize(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
@@ -194416,11 +194492,12 @@ async function runStreamJson(job, cfg) {
     ...cfg.workRoot !== void 0 ? { workRoot: cfg.workRoot } : {},
     ...cfg.env !== void 0 ? { extraEnvEarly: cfg.env } : {}
   });
-  const child = containerized ? (0, import_node_child_process13.spawn)(containerized.bin, containerized.args, {
+  const direct = shouldBindRuntimePdeathsig() ? pdeathsigWrap(cfg.bin, args) : { bin: cfg.bin, args };
+  const child = containerized ? (0, import_node_child_process14.spawn)(containerized.bin, containerized.args, {
     cwd: dir,
     env: scrubLeakyEnv(process.env),
     stdio: ["ignore", "pipe", "pipe"]
-  }) : (0, import_node_child_process13.spawn)(cfg.bin, args, {
+  }) : (0, import_node_child_process14.spawn)(direct.bin, direct.args, {
     cwd: dir,
     env: buildEnv(job, cfg),
     stdio: ["ignore", "pipe", "pipe"]
@@ -194525,11 +194602,12 @@ async function runOneShotText(job, cfg) {
     ...cfg.workRoot !== void 0 ? { workRoot: cfg.workRoot } : {},
     ...cfg.env !== void 0 ? { extraEnvEarly: cfg.env } : {}
   });
-  const child = containerized ? (0, import_node_child_process13.spawn)(containerized.bin, containerized.args, {
+  const direct = shouldBindRuntimePdeathsig() ? pdeathsigWrap(cfg.bin, args) : { bin: cfg.bin, args };
+  const child = containerized ? (0, import_node_child_process14.spawn)(containerized.bin, containerized.args, {
     cwd: dir,
     env: scrubLeakyEnv(process.env),
     stdio: ["ignore", "pipe", "pipe"]
-  }) : (0, import_node_child_process13.spawn)(cfg.bin, args, {
+  }) : (0, import_node_child_process14.spawn)(direct.bin, direct.args, {
     cwd: dir,
     env: buildEnv(job, cfg),
     stdio: ["ignore", "pipe", "pipe"]
@@ -194608,11 +194686,11 @@ async function runOneShotText(job, cfg) {
     }
   });
 }
-var import_node_child_process13, import_node_crypto29, fs14, path16, readline4;
+var import_node_child_process14, import_node_crypto29, fs14, path16, readline4;
 var init_subprocess = __esm({
   "../adapters/src/_core/subprocess.ts"() {
     "use strict";
-    import_node_child_process13 = require("node:child_process");
+    import_node_child_process14 = require("node:child_process");
     import_node_crypto29 = require("node:crypto");
     fs14 = __toESM(require("node:fs"), 1);
     path16 = __toESM(require("node:path"), 1);
@@ -194625,6 +194703,7 @@ var init_subprocess = __esm({
     init_transcript();
     init_filter_extra_args();
     init_root_bypass();
+    init_pdeathsig();
   }
 });
 
@@ -198164,6 +198243,22 @@ async function startOasisServer(opts) {
             return;
           }
           const fromSeq = Math.max(0, Number(url.searchParams.get("fromSeq") ?? "0") || 0);
+          const reopenRecoveringTurn = async () => {
+            if (!opts.chatTurns) return;
+            const active = await opts.chatTurns.activeTurn(sid).catch(() => null);
+            if (!active || active.status !== "running") return;
+            liveChat.reopenForRecovery(sid, {
+              runtimeSessionId: cs.runtimeSessionId ?? active.dispatchId ?? "",
+              ...active.assistantRunId ? { runId: active.assistantRunId } : {},
+              onStop: () => {
+                void opts.chatTurns?.settleTurn(active.id, {
+                  status: "cancelled",
+                  completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+                  lastError: `\u7528\u6237\u5728 serve \u91CD\u542F\u6062\u590D\u7A97\u53E3\u5185\u505C\u6B62\uFF08\u8F6E ${active.id}\uFF09`
+                }).catch(() => void 0);
+              }
+            });
+          };
           const liveProtocol = url.searchParams.get("protocol") === "v2" || wantsLiveProtocol(req);
           if (liveProtocol) {
             const sub2 = (frame) => {
@@ -198172,7 +198267,11 @@ async function startOasisServer(opts) {
 `);
               if (frame.operation === "turn_completed" || frame.operation === "turn_failed") res.end();
             };
-            const att2 = liveChat.attachLive(sid, fromSeq, sub2);
+            let att2 = liveChat.attachLive(sid, fromSeq, sub2);
+            if (!att2) {
+              await reopenRecoveringTurn();
+              att2 = liveChat.attachLive(sid, fromSeq, sub2);
+            }
             if (!att2) {
               res.writeHead(204).end();
               return;
@@ -198199,9 +198298,10 @@ async function startOasisServer(opts) {
               res.end();
               return;
             }
+            const attached2 = att2;
             res.on("close", () => {
               stopKa2();
-              att2.detach();
+              attached2.detach();
             });
             return;
           }
@@ -198211,7 +198311,11 @@ async function startOasisServer(opts) {
 `);
             if (part.type === "done") res.end();
           };
-          const att = liveChat.attach(sid, fromSeq, sub);
+          let att = liveChat.attach(sid, fromSeq, sub);
+          if (!att) {
+            await reopenRecoveringTurn();
+            att = liveChat.attach(sid, fromSeq, sub);
+          }
           if (!att) {
             res.writeHead(204).end();
             return;
@@ -198237,9 +198341,10 @@ async function startOasisServer(opts) {
             res.end();
             return;
           }
+          const attached = att;
           res.on("close", () => {
             stopKa();
-            att.detach();
+            attached.detach();
           });
           return;
         }
@@ -205206,6 +205311,7 @@ async function sweepOrphanRuns(deps) {
   const inFlight = await deps.inFlightRunIds();
   const aliveArtifacts = await deps.aliveArtifactIds?.() ?? /* @__PURE__ */ new Set();
   const apiActive = await deps.apiActiveDispatchIds?.() ?? /* @__PURE__ */ new Set();
+  const liveSessions = await deps.liveSessionRunIds?.() ?? /* @__PURE__ */ new Set();
   const orphaned = [];
   const cappedOut = [];
   const rescued = [];
@@ -205231,7 +205337,7 @@ async function sweepOrphanRuns(deps) {
       }
       continue;
     }
-    const claimed = inFlight.has(run.id) || run.artifactId !== null && aliveArtifacts.has(run.artifactId) || apiActive.has(run.id);
+    const claimed = inFlight.has(run.id) || run.artifactId !== null && aliveArtifacts.has(run.artifactId) || apiActive.has(run.id) || liveSessions.has(run.id);
     if (!inFlight.has(run.id) && !(run.artifactId !== null && aliveArtifacts.has(run.artifactId)) && apiActive.has(run.id) && ageMs > deps.orphanGraceMs) {
       rescued.push(run.id);
       deps.log?.(
@@ -205268,7 +205374,7 @@ async function sweepDroppedDispatches(deps) {
   const result = {
     scanned: 0,
     redispatched: [],
-    skipped: { inFlight: 0, ledgerOpen: 0, backoff: 0, notAgent: 0, failed: 0 }
+    skipped: { inFlight: 0, ledgerOpen: 0, backoff: 0, notAgent: 0, blocked: 0, failed: 0 }
   };
   const createdBefore = new Date(deps.now - deps.graceMs).toISOString();
   const candidates = await deps.listNeverStarted(createdBefore, CANDIDATE_LIMIT);
@@ -205301,6 +205407,10 @@ async function sweepDroppedDispatches(deps) {
       continue;
     }
     try {
+      if (deps.beforeRedispatch && !await deps.beforeRedispatch(c)) {
+        result.skipped.blocked++;
+        continue;
+      }
       await deps.redispatch(c.workId, c.workorderId);
       result.redispatched.push(c.workId);
     } catch {
@@ -205354,6 +205464,35 @@ var init_dispatch_mapping_rebuild = __esm({
   }
 });
 
+// ../server/src/dispatch-binding-diagnosis.ts
+async function prepareDroppedDispatch(work, deps) {
+  const { kernel } = deps;
+  await kernel.refreshModel?.();
+  const node2 = kernel.model.artifacts.get(work.nodeId);
+  const snap = await kernel.getStore().transaction((tx) => tx.loadWorkorder(work.workorderId));
+  const current = snap?.works.find((w2) => w2.id === work.workId);
+  if (!snap || !current || current.status !== "running" || current.startedAt || current.sessionRef || current.endedAt || !snap.nodes.some((n) => n.id === work.nodeId && n.latestWorkId === current.id && !n.cancelledAt) || !node2 || node2.workspace !== work.workorderId || lifecycleOf(kernel.model, node2.id) !== "active" || kernel.model.pausedWorkorders.has(work.workorderId) || isHeld(kernel.model, node2.id)) return false;
+  if (snap.issues.some((i) => i.kind === "escalation" && i.aboutNodeId === node2.id && !i.resolvedAt && i.intent !== "advisory")) return false;
+  if (!work.assigneeActorId) return false;
+  const binding = await deps.bindingFor(work.assigneeActorId);
+  if (!binding?.nodeId) return true;
+  const runtimeNode = await deps.nodeFor(binding.nodeId);
+  if (runtimeNode && runtimeNode.status !== "deleted") return true;
+  await kernel.escalate({
+    artifactId: node2.id,
+    actor: SYSTEM_ACTOR,
+    source: "dispatch:missing-node",
+    reason: `\u8FD9\u4E00\u6B65\u8FD8\u6CA1\u6709\u542F\u52A8\uFF1A\u6267\u884C\u4EBA\u7684\u8FD0\u884C\u65F6\u7ED1\u5B9A\u6307\u5411${runtimeNode ? "\u5DF2\u5220\u9664" : "\u672A\u6CE8\u518C"}\u7684\u8282\u70B9 ${binding.nodeId}\u3002\u8BF7\u6062\u590D\u8BE5\u8282\u70B9\uFF0C\u6216\u4E3A\u6267\u884C\u4EBA ${work.assigneeActorId} \u9009\u62E9\u5DF2\u6709\u4E14\u914D\u7F6E\u6B63\u786E\u7684\u8282\u70B9\uFF1B\u4FEE\u590D\u540E\u5173\u95ED\u8FD9\u6761\u4E0A\u62A5\uFF0C\u6D41\u7A0B\u624D\u4F1A\u7EE7\u7EED\u3002\u672C\u6B21\u68C0\u67E5\u6CA1\u6709\u7EC8\u6B62\u4F1A\u8BDD\uFF0C\u4E5F\u6CA1\u6709\u6D88\u8017 work \u91CD\u8BD5\u6B21\u6570\u3002`
+  });
+  return false;
+}
+var init_dispatch_binding_diagnosis = __esm({
+  "../server/src/dispatch-binding-diagnosis.ts"() {
+    "use strict";
+    init_src5();
+  }
+});
+
 // ../server/src/zero-output-breaker.ts
 function absorb(b2, r, startedMs) {
   b2.count += 1;
@@ -205878,14 +206017,14 @@ function classifyDeployRun(facts) {
   if (facts.anyContainingInProgress) return { kind: "running", note: "\u627F\u8F7D\u672C\u6B21\u4EA4\u4ED8\u7684\u90E8\u7F72 run \u4ECD\u5728\u8FDB\u884C" };
   return { kind: "pending", note: "\u8FD8\u6CA1\u770B\u5230\u627F\u8F7D\u672C\u6B21\u4EA4\u4ED8\u7684\u90E8\u7F72 run" };
 }
-var import_node_child_process14, import_node_util5, execFile5, GhDeployProvider;
+var import_node_child_process15, import_node_util5, execFile5, GhDeployProvider;
 var init_deploy_provider = __esm({
   "../server/src/git/deploy-provider.ts"() {
     "use strict";
-    import_node_child_process14 = require("node:child_process");
+    import_node_child_process15 = require("node:child_process");
     import_node_util5 = require("node:util");
     init_remote_util();
-    execFile5 = (0, import_node_util5.promisify)(import_node_child_process14.execFile);
+    execFile5 = (0, import_node_util5.promisify)(import_node_child_process15.execFile);
     GhDeployProvider = class {
       constructor(opts = {}) {
         this.opts = opts;
@@ -206121,14 +206260,14 @@ function makeDefaultBranchResolver(opts) {
     }
   };
 }
-var import_node_child_process15, import_node_util6, execFile6;
+var import_node_child_process16, import_node_util6, execFile6;
 var init_default_branch = __esm({
   "../server/src/git/default-branch.ts"() {
     "use strict";
-    import_node_child_process15 = require("node:child_process");
+    import_node_child_process16 = require("node:child_process");
     import_node_util6 = require("node:util");
     init_remote_util();
-    execFile6 = (0, import_node_util6.promisify)(import_node_child_process15.execFile);
+    execFile6 = (0, import_node_util6.promisify)(import_node_child_process16.execFile);
   }
 });
 
@@ -207830,6 +207969,22 @@ var init_daemon_hub = __esm({
       hasSession(dispatchId) {
         return this.sessionSockets.get(dispatchId)?.readyState === import_websocket.default.OPEN;
       }
+      /**
+       * 当前持有**活着数据面连接**的全部 dispatchId（ADR-0300 D8：hub 有活连接即认领）。
+       *
+       * orphan-sweep 的认领来源此前只有 dispatcher 在途表、chat 在途表、节点 hello、HTTP 活性——
+       * 独立会话进程（协调者、D2′ 后搬出 daemon 的会话）**不在这四者里**，但它们自己握着一根到 hub 的
+       * 数据面 WS。这些会话 `run.id === dispatchId`（协调者：`job.dispatchId = coordinate:*`），
+       * 于是「hub 此刻还连着它」就是最直接的判活。不接这条线，7 天里 183 条协调者会话被误判孤儿闭合
+       * （ADR-0300 证据 E）。只增不减：命中只能**阻止**误闭合，永不会导致误闭合。
+       */
+      liveSessionDispatchIds() {
+        const ids2 = /* @__PURE__ */ new Set();
+        for (const [dispatchId, ws] of this.sessionSockets) {
+          if (ws.readyState === import_websocket.default.OPEN) ids2.add(dispatchId);
+        }
+        return ids2;
+      }
       /** 往会话进程直投一帧（kill / append_input / ping）。返回是否写进了 OPEN 的 socket。 */
       sendToSession(dispatchId, msg) {
         const ws = this.sessionSockets.get(dispatchId);
@@ -214668,6 +214823,7 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
     if (!isOwnerRecipient && !isLeadRecipient) continue;
     const gaps = unresolvedGapsOf(model, a.id);
     const escalations = unresolvedEscalationsOf(model, a.id);
+    const representedEscalations = /* @__PURE__ */ new Set();
     const who = isOwnerRecipient ? "\uFF08\u4F60\u662F\u5DE5\u5355\u5F52\u5C5E\u4EBA\uFF09" : "\uFF08\u4F60\u662F\u5361\u4F4F\u8282\u70B9 owner \u7684\u4E0A\u7EA7\uFF09";
     for (const gap of gaps) {
       const byGapId = escalations.filter((entry) => entry.gapId === gap.gapId);
@@ -214681,6 +214837,7 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
       const exactEscalation = byGapId.at(-1) ?? (samePartGaps.length === 1 ? samePartEscalations.at(-1) : void 0) ?? (gaps.length === 1 ? partlessEscalations.at(-1) : void 0);
       const gapSince = exactEscalation?.at ?? gap.lastReportedAt ?? model.lastOpAt.get(a.id) ?? "";
       const gapReportCount = gap.reportCount ?? 1;
+      if (exactEscalation) representedEscalations.add(exactEscalation.escalationId);
       gapItems.push({
         kind: "gap-escalation",
         artifactId: a.id,
@@ -214709,8 +214866,8 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
         }
       });
     }
-    if (gaps.length === 0 && escalations.length > 0) {
-      for (const e of escalations) {
+    if (escalations.length > 0) {
+      for (const e of escalations.filter((e2) => !representedEscalations.has(e2.escalationId))) {
         gapItems.push({
           kind: "gap-escalation",
           artifactId: a.id,
@@ -214961,6 +215118,152 @@ var init_inbox = __esm({
   }
 });
 
+// ../server/src/domains/collab/escalation-attention.ts
+function escalationDeliveryConfig(env) {
+  const positive = (key, fallback) => {
+    if (!env[key]) return fallback;
+    const n = Number(env[key]);
+    if (!Number.isFinite(n) || n <= 0) throw new Error(`${key} must be a positive number`);
+    return n;
+  };
+  const policy = {
+    reminderMs: positive("OASIS_ESCALATION_REMINDER_MS", DEFAULT_ESCALATION_REMINDERS.reminderMs),
+    acknowledgedReminderMs: positive("OASIS_ESCALATION_ACK_REMINDER_MS", DEFAULT_ESCALATION_REMINDERS.acknowledgedReminderMs)
+  };
+  const webhooks = /* @__PURE__ */ new Map();
+  if (env.OASIS_ESCALATION_WEBHOOKS) {
+    try {
+      const entries = JSON.parse(env.OASIS_ESCALATION_WEBHOOKS);
+      if (!entries || Array.isArray(entries) || typeof entries !== "object") throw new Error();
+      for (const [companyId, endpoint] of Object.entries(entries)) {
+        const url = new URL(endpoint.url);
+        if (!companyId || !["https:", "http:"].includes(url.protocol) || url.username || url.password || endpoint.token !== void 0 && typeof endpoint.token !== "string") throw new Error();
+        webhooks.set(companyId, endpoint);
+      }
+    } catch {
+      throw new Error("OASIS_ESCALATION_WEBHOOKS must map company IDs to { url, token? } endpoints");
+    }
+  }
+  return { policy, webhooks };
+}
+function withEscalationAttention(items, companyId, markers, now, policy = DEFAULT_ESCALATION_REMINDERS) {
+  const byScope = new Map(markers.map((m2) => [m2.scope, m2.readAt]));
+  return items.map((item) => {
+    if (item.kind !== "gap-escalation" || !item.escalationId) return item;
+    const start = Date.parse(item.since);
+    if (!Number.isFinite(start)) return item;
+    const ackAt = byScope.get(escalationAttentionScope(companyId, item.escalationId, "ack"));
+    const ack = ackAt ? Date.parse(ackAt) : NaN;
+    const acknowledged = Number.isFinite(ack) && ack >= start;
+    const firstDue = acknowledged ? ack + policy.acknowledgedReminderMs : start;
+    const due = now >= firstDue;
+    const step = Math.max(0, Math.floor((now - firstDue) / policy.reminderMs));
+    const dueAt = new Date(firstDue + step * policy.reminderMs).toISOString();
+    const deliveredAt = byScope.get(escalationAttentionScope(companyId, item.escalationId, "webhook"));
+    return { ...item, attention: {
+      reminderKey: `${item.escalationId}:${dueAt}`,
+      dueAt,
+      needsAcknowledgement: due,
+      ...acknowledged ? { acknowledgedAt: ackAt } : {},
+      ...deliveredAt ? { deliveredAt } : {}
+    } };
+  });
+}
+async function sendEscalationWebhook(url, token, batch, item, deliveryId) {
+  const response = await fetch(url, {
+    method: "POST",
+    redirect: "error",
+    signal: AbortSignal.timeout(1e4),
+    headers: { "content-type": "application/json", ...token ? { authorization: `Bearer ${token}` } : {} },
+    body: JSON.stringify({ deliveryId, companyId: batch.companyId, recipientActorId: batch.actorId, item })
+  });
+  await response.body?.cancel();
+  if (!response.ok) throw new Error(`Delivery HTTP ${response.status}`);
+}
+var escalationAttentionScope, DEFAULT_ESCALATION_REMINDERS, EscalationDeliveryWorker;
+var init_escalation_attention = __esm({
+  "../server/src/domains/collab/escalation-attention.ts"() {
+    "use strict";
+    escalationAttentionScope = (companyId, issueId, kind) => `escalation-${kind}:${JSON.stringify([companyId, issueId])}`;
+    DEFAULT_ESCALATION_REMINDERS = {
+      reminderMs: 15 * 6e4,
+      acknowledgedReminderMs: 4 * 60 * 6e4
+    };
+    EscalationDeliveryWorker = class {
+      constructor(deps) {
+        this.deps = deps;
+      }
+      running = false;
+      stopped = false;
+      cursor = "";
+      /** Already-started transport is bounded by its timeout; do not start new deliveries during shutdown. */
+      stop() {
+        this.stopped = true;
+      }
+      async tick() {
+        if (this.running || this.stopped) return;
+        this.running = true;
+        try {
+          const pending = [];
+          let attempts = 0;
+          for (const batch of await this.deps.batches()) {
+            if (this.stopped) return;
+            const markers = await this.deps.markers.listMarkers(batch.actorId);
+            const items = withEscalationAttention(
+              batch.items,
+              batch.companyId,
+              markers,
+              (this.deps.now ?? Date.now)(),
+              this.deps.policy
+            );
+            for (const item of items) {
+              const attention2 = item.attention;
+              if (!item.escalationId || !attention2?.needsAcknowledgement) continue;
+              if (attention2.deliveredAt && Date.parse(attention2.deliveredAt) >= Date.parse(attention2.dueAt)) continue;
+              pending.push({ batch, item, key: JSON.stringify([batch.companyId, batch.actorId, item.escalationId]) });
+            }
+          }
+          pending.sort((a, b2) => a.key < b2.key ? -1 : a.key > b2.key ? 1 : 0);
+          const afterCursor = pending.findIndex((p2) => p2.key > this.cursor);
+          const start = afterCursor < 0 ? 0 : afterCursor;
+          for (let offset = 0; offset < pending.length; offset++) {
+            if (this.stopped) break;
+            if (attempts++ >= (this.deps.maxPerTick ?? 20)) break;
+            const { batch, item: queued, key } = pending[(start + offset) % pending.length];
+            this.cursor = key;
+            try {
+              const current = this.deps.currentItem ? await this.deps.currentItem(batch, queued.escalationId) : queued;
+              if (!current) continue;
+              const item = withEscalationAttention(
+                [current],
+                batch.companyId,
+                await this.deps.markers.listMarkers(batch.actorId),
+                (this.deps.now ?? Date.now)(),
+                this.deps.policy
+              )[0];
+              const attention2 = item.attention;
+              if (this.stopped || !attention2.needsAcknowledgement || attention2.deliveredAt && Date.parse(attention2.deliveredAt) >= Date.parse(attention2.dueAt)) continue;
+              const id = JSON.stringify([batch.companyId, batch.actorId, attention2.reminderKey]);
+              await this.deps.send(batch, item, id);
+              await this.deps.markers.markRead(
+                batch.actorId,
+                escalationAttentionScope(batch.companyId, item.escalationId, "webhook"),
+                attention2.dueAt
+              );
+            } catch {
+              this.deps.log(`[escalation-delivery] delivery failed; retained for retry (${key})`);
+            }
+          }
+        } catch {
+          this.deps.log("[escalation-delivery] scan failed; will retry");
+        } finally {
+          this.running = false;
+        }
+      }
+    };
+  }
+});
+
 // ../server/src/domains/collab/inbox-chat.ts
 function mergeInbox(kernelItems, chatItems) {
   if (chatItems.length === 0) return kernelItems;
@@ -216408,7 +216711,23 @@ function collabDomain(opts) {
         const { reviews, works } = collectWaitingRows(snaps, me, policy);
         waitingItems = buildWaitingInbox(reviews, works, policy, (/* @__PURE__ */ new Date()).toISOString(), me);
       }
-      return { status: 200, body: { items: mergeInbox(kernelItems, [...chatItems, ...waitingItems]) } };
+      const items = mergeInbox(kernelItems, [...chatItems, ...waitingItems]);
+      return { status: 200, body: { items: opts.readMarkers ? withEscalationAttention(items, req.auth.companyId ?? opts.defaultCompanyId ?? "", markers, Date.now(), opts.escalationReminders) : items } };
+    });
+    router.post("/api/inbox/escalations/:id/acknowledge", async (req) => {
+      if (!opts.readMarkers) return { status: 503, body: { error: { code: "not_configured", message: "\u63A5\u624B\u8BB0\u5F55\u672A\u88C5\u914D" } } };
+      const { kernel, registry: registry2 } = await resolveCtx(req.auth.companyId);
+      await kernel.refreshModel?.();
+      const leadOf = await buildLeadResolver(registry2);
+      const item = buildInbox(kernel.model, req.auth.actor, leadOf).find((i) => i.escalationId === req.params.id);
+      if (!item?.escalationId) return { status: 404, body: { error: { code: "not_found", message: "\u5F85\u529E\u4E0D\u5B58\u5728\u6216\u4E0D\u5C5E\u4E8E\u4F60" } } };
+      const acknowledgedAt = (/* @__PURE__ */ new Date()).toISOString();
+      await opts.readMarkers.markRead(
+        req.auth.actor,
+        escalationAttentionScope(req.auth.companyId ?? opts.defaultCompanyId ?? "", item.escalationId, "ack"),
+        acknowledgedAt
+      );
+      return { status: 200, body: { acknowledgedAt } };
     });
     const companyOf = (req) => req.auth.companyId ?? "company:default";
     const noTagStore = { status: 501, body: { error: { code: "not_implemented", message: "\u672C\u90E8\u7F72\u672A\u542F\u7528\u5DE5\u5355\u6807\u7B7E" } } };
@@ -216647,6 +216966,7 @@ var init_collab = __esm({
     init_workorders();
     init_workorder_detail();
     init_inbox();
+    init_escalation_attention();
     init_inbox_chat();
     init_waiting_inbox();
     init_src3();
@@ -216660,6 +216980,7 @@ var init_collab = __esm({
     init_workorder_detail();
     init_workorder_metrics();
     init_inbox();
+    init_escalation_attention();
     init_letter_read_backfill();
     init_audit();
     init_dashboard();
@@ -216686,7 +217007,7 @@ function prepareReadonlyGitBundles(input) {
   if (repos.length === 0) return null;
   const targets = collectTargets(repos, input.pinnedRevisions);
   if (targets.length === 0) return null;
-  const bundleRoot = input.bundleRoot ?? os6.tmpdir();
+  const bundleRoot = input.bundleRoot ?? os7.tmpdir();
   fs23.mkdirSync(bundleRoot, { recursive: true });
   const root = fs23.mkdtempSync(path24.join(bundleRoot, "oasis-git-bundles-"));
   const files = {};
@@ -216833,7 +217154,7 @@ function createBundle(root, target, input) {
 function verifyBundleReadable(dir, bundlePath, _bundleRef, commit, expectedTree, env) {
   fs23.rmSync(dir, { recursive: true, force: true });
   try {
-    (0, import_node_child_process16.execFileSync)("git", ["clone", bundlePath, dir], { stdio: "ignore", ...env ? { env } : {} });
+    (0, import_node_child_process17.execFileSync)("git", ["clone", bundlePath, dir], { stdio: "ignore", ...env ? { env } : {} });
     git2(dir, ["cat-file", "-e", `${commit}^{commit}`], env, "COMMIT_NOT_FOUND");
     const head = git2(dir, ["rev-parse", "HEAD"], env, "COMMIT_NOT_FOUND").trim();
     if (head.toLowerCase() !== commit.toLowerCase()) {
@@ -216875,11 +217196,11 @@ function ensureSourceRepo(work, repo, commit, env) {
 function gitInitBare(dir, env) {
   if (fs23.existsSync(path24.join(dir, "objects"))) return;
   fs23.mkdirSync(dir, { recursive: true });
-  (0, import_node_child_process16.execFileSync)("git", ["init", "--bare", dir], { stdio: "ignore", ...env ? { env } : {} });
+  (0, import_node_child_process17.execFileSync)("git", ["init", "--bare", dir], { stdio: "ignore", ...env ? { env } : {} });
 }
 function git2(cwd, args, env, fallback, timeout) {
   try {
-    return (0, import_node_child_process16.execFileSync)("git", ["-C", cwd, ...args], {
+    return (0, import_node_child_process17.execFileSync)("git", ["-C", cwd, ...args], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"],
       ...timeout ? { timeout } : {},
@@ -216903,14 +217224,14 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process16, import_node_crypto45, fs23, os6, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto45, fs23, os7, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
-    import_node_child_process16 = require("node:child_process");
+    import_node_child_process17 = require("node:child_process");
     import_node_crypto45 = require("node:crypto");
     fs23 = __toESM(require("node:fs"), 1);
-    os6 = __toESM(require("node:os"), 1);
+    os7 = __toESM(require("node:os"), 1);
     path24 = __toESM(require("node:path"), 1);
     init_remote_util();
     GitReadonlyBundleError = class extends Error {
@@ -219417,7 +219738,9 @@ function createChatSessionsDomain(opts) {
     router.get("/api/chat-sessions/:id/turns/active", async (req) => {
       if (!opts.chatTurns) throw new ApiError(404, "NOT_FOUND", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C");
       const session = await store.getSession(req.params.id);
-      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      if (!session || session.humanActorId !== req.auth.actor && session.aiActorId !== req.auth.actor) {
+        throw new ApiError(404, "NOT_FOUND", "session not found");
+      }
       const turn = await opts.chatTurns.activeTurn(req.params.id);
       return { status: 200, body: { turn } };
     });
@@ -224127,11 +224450,11 @@ var init_engine = __esm({
       constructor(table = /* @__PURE__ */ new Map()) {
         this.table = table;
       }
-      set(platform, platformUserId, actor) {
-        this.table.set(`${platform}:${platformUserId}`, actor);
+      set(platform2, platformUserId, actor) {
+        this.table.set(`${platform2}:${platformUserId}`, actor);
       }
-      resolve(platform, platformUserId) {
-        return this.table.get(`${platform}:${platformUserId}`) ?? null;
+      resolve(platform2, platformUserId) {
+        return this.table.get(`${platform2}:${platformUserId}`) ?? null;
       }
     };
   }
@@ -224670,7 +224993,7 @@ ${HIGH_RISK_COMMANDS}`;
         const downstreams = consumersOf(m2, p2.id).map((a) => a.id);
         const task = [
           `## \u672C\u6B21\u4E3A\u4EC0\u4E48\u5524\u8D77\u4F60`,
-          `\u8282\u70B9 **${p2.id}**${brief ? `\uFF08${brief}\uFF09` : ""} \u5DF2\u963B\u585E\u7EA6 **${mins} \u5206\u949F**\u6CA1\u8FDB\u5C55\u3002\u7CFB\u7EDF\u5DF2\u673A\u68B0\u8BCA\u65AD\u3001\u786E\u8BA4**\u8FD9\u662F\u56FE\u75C5\u6216\u673A\u68B0\u5B9A\u4F4D\u4E0D\u5230\u7684\u6B8B\u5DEE**\uFF08\u8D44\u6E90 / \u4EBA / \u8FD0\u884C\u65F6\u7C7B\u75C5\u56E0\u5DF2\u6392\u9664\uFF09\u3002`,
+          `\u8282\u70B9 **${p2.id}**${brief ? `\uFF08${brief}\uFF09` : ""} \u5DF2\u963B\u585E\u7EA6 **${mins} \u5206\u949F**\u6CA1\u8FDB\u5C55\u3002\u673A\u68B0\u8BCA\u65AD\u5C06\u5176\u5F52\u5165**\u56FE\u75C5\u6216\u5C1A\u672A\u5B9A\u4F4D\u7684\u6B8B\u5DEE**\u3002\u672A\u53D1\u73B0\u5DF2\u77E5\u8FD0\u884C\u65F6\u4FE1\u53F7\u4E0D\u7B49\u4E8E\u6392\u9664\u4E86\u8FD0\u884C\u65F6\u6545\u969C\uFF1B\u6CA1\u6709\u5728\u8DD1\u4F1A\u8BDD\u65F6\uFF0C\u8BF7\u5148\u6838\u5BF9\u7ED1\u5B9A\u3001\u8282\u70B9\u6CE8\u518C\u72B6\u6001\u548C\u6D3E\u53D1\u9001\u8FBE\u60C5\u51B5\uFF0C\u518D\u51B3\u5B9A\u662F\u5426\u6539\u56FE\u3002`,
           ``,
           `## \u75C5\u5386\uFF08\u673A\u68B0\u8BCA\u65AD\uFF1B\u5148\u8BFB\u8FD9\u4E2A\uFF09`,
           caseFile,
@@ -225801,6 +226124,7 @@ var init_src10 = __esm({
     init_orphan_sweep();
     init_dispatch_drop_sweep();
     init_dispatch_mapping_rebuild();
+    init_dispatch_binding_diagnosis();
     init_zero_output_breaker();
     init_dispatch_exit_reconcile();
     init_session_exit_outcome();
@@ -225839,6 +226163,7 @@ var init_src10 = __esm({
     init_node_store();
     init_tokens();
     init_collab();
+    init_collab();
     init_closure_report();
     init_workorders();
     init_workorder_detail();
@@ -233741,22 +234066,22 @@ var init_trajectory = __esm({
 
 // src/index.ts
 var fs42 = __toESM(require("node:fs"));
-var os13 = __toESM(require("node:os"));
+var os14 = __toESM(require("node:os"));
 var path39 = __toESM(require("node:path"));
-var import_node_child_process22 = require("node:child_process");
+var import_node_child_process23 = require("node:child_process");
 var import_node_crypto66 = require("node:crypto");
 
 // ../cli/src/cli.ts
 var fs37 = __toESM(require("node:fs"), 1);
-var os11 = __toESM(require("node:os"), 1);
+var os12 = __toESM(require("node:os"), 1);
 var path34 = __toESM(require("node:path"), 1);
 var import_node_crypto64 = require("node:crypto");
 
 // ../cli/src/serve.ts
 var fs31 = __toESM(require("node:fs"), 1);
-var os7 = __toESM(require("node:os"), 1);
+var os8 = __toESM(require("node:os"), 1);
 var path28 = __toESM(require("node:path"), 1);
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var import_node_crypto60 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
@@ -234333,8 +234658,10 @@ var SESSION_TOKEN_GRACE_MS = 15 * 6e4;
 function makeResumeRetryProxy(first, spawnFallback) {
   const outCbs = [];
   const telCbs = [];
+  const liveCbs = [];
   const outBuf = [];
   const telBuf = [];
+  const liveBuf = [];
   let sawOutput = false;
   let active = first;
   const fanOut = (chunk) => {
@@ -234345,12 +234672,17 @@ function makeResumeRetryProxy(first, spawnFallback) {
     if (telCbs.length) for (const cb of telCbs) cb(e);
     else telBuf.push(e);
   };
+  const fanLive = (e) => {
+    if (liveCbs.length) for (const cb of liveCbs) cb(e);
+    else liveBuf.push(e);
+  };
   const wire = (s2) => {
     s2.onOutput((c) => {
       sawOutput = true;
       fanOut(c);
     });
     s2.onTelemetry?.((e) => fanTel(e));
+    s2.onLiveEvent?.((e) => fanLive(e));
   };
   wire(first);
   const isSessionNotFound2 = (err) => {
@@ -234382,6 +234714,10 @@ function makeResumeRetryProxy(first, spawnFallback) {
       for (const e of telBuf.splice(0)) cb(e);
       telCbs.push(cb);
     },
+    onLiveEvent(cb) {
+      for (const e of liveBuf.splice(0)) cb(e);
+      liveCbs.push(cb);
+    },
     done,
     kill: () => active.kill?.() ?? Promise.resolve(),
     // ADR-0093 chat 道：插入能力必须穿过这层代理，否则「带 sessionId 的 resume」这条**常路径**
@@ -234392,6 +234728,11 @@ function makeResumeRetryProxy(first, spawnFallback) {
     get canAppendInput() {
       return active.canAppendInput !== false && typeof active.appendInput === "function";
     },
+    // supportsLiveProtocol 恒读 active（兜底重派后 active 换成 second）：不能按 first 快照，否则回退会话的
+    // 能力位会指向已死的首次尝试。
+    get supportsLiveProtocol() {
+      return active.supportsLiveProtocol === true;
+    },
     get nativeSessionId() {
       return active.nativeSessionId;
     }
@@ -234452,15 +234793,15 @@ function oasisWrapperScript() {
   const main = path28.join(repoRoot, "packages/cli/src/main.ts");
   const key = (0, import_node_crypto60.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
-  const stable = path28.join(os7.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
+  const stable = path28.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
   let dir;
   try {
     fs31.mkdirSync(stable, { recursive: true, mode: 448 });
     const st = fs31.lstatSync(stable);
     const mine = st.isDirectory() && !st.isSymbolicLink() && (typeof process.getuid !== "function" || st.uid === process.getuid());
-    dir = mine ? stable : fs31.mkdtempSync(path28.join(os7.tmpdir(), "oasis-cli-"));
+    dir = mine ? stable : fs31.mkdtempSync(path28.join(os8.tmpdir(), "oasis-cli-"));
   } catch {
-    dir = fs31.mkdtempSync(path28.join(os7.tmpdir(), "oasis-cli-"));
+    dir = fs31.mkdtempSync(path28.join(os8.tmpdir(), "oasis-cli-"));
   }
   const wrapper = path28.join(dir, "oasis");
   fs31.writeFileSync(wrapper, `#!/usr/bin/env bash
@@ -234538,7 +234879,7 @@ async function runDeterministicKnowledgeLint(service, config2) {
     if (!wrapper) throw new Error(`\u8FDE\u63A5\u5668 ${config2.connectorSlug} \u5C1A\u672A\u914D\u7F6E\u6216 wrapper \u4E0D\u53EF\u7528`);
     const args = [...connector.knowledgeLintArgs({ libraryRef: config2.libraryRef, rootRef: config2.rootRef })];
     const result = await new Promise((resolveResult) => {
-      (0, import_node_child_process17.execFile)(wrapper, args, {
+      (0, import_node_child_process18.execFile)(wrapper, args, {
         env: { ...process.env, ...provision.env },
         timeout: 12e4,
         maxBuffer: 10 * 1024 * 1024
@@ -234808,7 +235149,7 @@ async function startServe(opts) {
   );
   const issuer = createTokenIssuer({ secretFile: path28.join(opts.dir, "session-token-secret") });
   const apiActivity = createApiActivityLedger();
-  const operatorActor = `actor:human:${os7.userInfo().username}`;
+  const operatorActor = `actor:human:${os8.userInfo().username}`;
   const operatorToken = issuer.issue(operatorActor);
   fs31.writeFileSync(path28.join(opts.dir, "operator-token"), operatorToken, { mode: 384 });
   let nodeTokens = createNodeTokenStore(path28.join(opts.dir, "node-tokens.json"));
@@ -234929,6 +235270,7 @@ async function startServe(opts) {
   let chatSessionStore;
   let chatTurnStore;
   let readMarkerStore;
+  const escalationDelivery = escalationDeliveryConfig(process.env);
   if (pgDsn && pgPool) {
     projectStateStore = await PostgresProjectStateStore.open(pgPool, pgSchema);
     artifactStateStore = await PostgresArtifactStateStore.open(pgPool, pgSchema);
@@ -235963,6 +236305,8 @@ async function startServe(opts) {
         chatSession: chatSessionStore,
         // ADR-0086：chat 知会条目（与 readMarkers 成对）
         readMarkers: readMarkerStore,
+        escalationReminders: escalationDelivery.policy,
+        defaultCompanyId,
         // 工单标签词表（组织级受控、旁账，与 playbook-overrides 同款侧存）。
         tags: workorderTagStore,
         ...opts.sla ? { sla: opts.sla } : {},
@@ -237504,6 +237848,8 @@ async function startServe(opts) {
             ledgerWarn("cancel(map-miss)")(err);
           }
         },
+        // Inbox is the notification contract (ADR 0090). Escalation delivery reconciles persisted Inbox
+        // items below; it must not depend on this one-shot effect or its legacy recipient list.
         async notify(_actorIds, _payload) {
         }
       };
@@ -237524,6 +237870,14 @@ async function startServe(opts) {
                 return live;
               },
               isAgent: async (actorId) => await executorKindOf(actorId) === "agent",
+              beforeRedispatch: async (work) => {
+                return prepareDroppedDispatch(work, {
+                  kernel: newKernel,
+                  // This sweep belongs to the default engine; legacy workorder.companyId is often empty.
+                  bindingFor: async (actorId) => (await actors.resolveCtx(defaultCompanyId)).service.resolveBinding()(actorId),
+                  nodeFor: (nodeId) => nodeStore.getNode(nodeId)
+                });
+              },
               // resumeEligible=false：补派一律起**全新会话**。引擎那次派发的取值是节点状态的函数
               //（activate.ts：`latestAcceptId == null && !lastProposedRejected`），本模块拿不到，
               // 而两个方向的代价不对称——该续没续只是少一点上下文，不该续却续了就把返工要隔离的
@@ -238371,7 +238725,45 @@ async function startServe(opts) {
     return { fused, starving, stuck, recovered };
   }
   const slaEscalating = /* @__PURE__ */ new Set();
+  const escalationDeliveryWorker = new EscalationDeliveryWorker({
+    markers: readMarkerStore,
+    policy: escalationDelivery.policy,
+    batches: async () => {
+      const batches = [];
+      for (const companyId of escalationDelivery.webhooks.keys()) {
+        const companyEngine = await getEngine(companyId);
+        await companyEngine.kernel.refreshModel();
+        const leadOf2 = await buildLeadResolver(companyEngine.registry);
+        const recipients = /* @__PURE__ */ new Set();
+        for (const node2 of companyEngine.kernel.model.artifacts.values()) {
+          recipients.add(node2.owner);
+          const lead = leadOf2?.(node2.owner);
+          if (lead) recipients.add(lead);
+        }
+        for (const actorId of recipients) {
+          const items = buildInbox(companyEngine.kernel.model, actorId, leadOf2).filter((item) => item.escalationId && item.artifactId && lifecycleOf(companyEngine.kernel.model, item.artifactId) === "active");
+          if (items.length) batches.push({ companyId, actorId, items });
+        }
+      }
+      return batches;
+    },
+    currentItem: async (batch, issueId) => {
+      const companyEngine = await getEngine(batch.companyId);
+      await companyEngine.kernel.refreshModel();
+      const leadOf2 = await buildLeadResolver(companyEngine.registry);
+      return buildInbox(companyEngine.kernel.model, batch.actorId, leadOf2).find((item) => item.escalationId === issueId && item.artifactId && lifecycleOf(companyEngine.kernel.model, item.artifactId) === "active");
+    },
+    send: async (batch, item, deliveryId) => {
+      const endpoint = escalationDelivery.webhooks.get(batch.companyId);
+      await sendEscalationWebhook(endpoint.url, endpoint.token, batch, item, deliveryId);
+    },
+    log: (message) => console.warn(message)
+  });
+  if (!escalationDelivery.webhooks.size) {
+    console.warn("[escalation-delivery] \u7AD9\u5916\u6E20\u9053\u672A\u914D\u7F6E\uFF1A\u5347\u7EA7\u5C06\u901A\u8FC7 Inbox \u5F39\u7A97\u548C\u50AC\u529E\u63D0\u9192\uFF1B\u6D4F\u89C8\u5668\u5173\u95ED\u65F6\u65E0\u6CD5\u7AD9\u5916\u9001\u8FBE\u3002\u914D\u7F6E OASIS_ESCALATION_WEBHOOKS \u53EF\u63A5\u90AE\u4EF6/IM \u7F51\u5173\u3002");
+  }
   const slaTimer = setInterval(() => {
+    void escalationDeliveryWorker.tick();
     void (async () => {
       const now = Date.now();
       for (const a of kernel.model.artifacts.values()) {
@@ -238683,6 +239075,7 @@ ${nodeFault}` : "");
         for (const c of chatLiveSessions.values()) ids2.add(c.sessionId);
         return ids2;
       };
+      const liveSessionRunIds = () => hub?.liveSessionDispatchIds() ?? /* @__PURE__ */ new Set();
       const aliveArtifactIds = () => {
         const ids2 = /* @__PURE__ */ new Set();
         for (const d of hub?.connectedDaemons() ?? []) {
@@ -238713,6 +239106,8 @@ ${nodeFault}` : "");
           aliveArtifactIds,
           apiActiveDispatchIds,
           // D1（ADR-0078）：判活第二条线
+          liveSessionRunIds,
+          // ADR-0300 D8：hub 活数据面连接（协调者/独立会话进程）
           closeRun,
           now: Date.now(),
           orphanGraceMs,
@@ -238892,6 +239287,7 @@ ${nodeFault}` : "");
     close: async () => {
       for (const timer of dispatchTimers) clearInterval(timer);
       clearInterval(slaTimer);
+      escalationDeliveryWorker.stop();
       if (mirrorTimer) clearInterval(mirrorTimer);
       if (gitTimer) clearInterval(gitTimer);
       if (coordTimer) clearInterval(coordTimer);
@@ -238991,7 +239387,7 @@ function log2(tag, msg, extra) {
 }
 
 // ../cli/src/daemon/session-lock.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var fs32 = __toESM(require("node:fs"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var flockAvailable = null;
@@ -238999,7 +239395,7 @@ function hasFlock() {
   if (flockAvailable !== null) return flockAvailable;
   if (process.platform !== "linux") return flockAvailable = false;
   try {
-    const r = (0, import_node_child_process18.spawnSync)("flock", ["--version"], { stdio: "ignore", timeout: 3e3 });
+    const r = (0, import_node_child_process19.spawnSync)("flock", ["--version"], { stdio: "ignore", timeout: 3e3 });
     flockAvailable = r.status === 0;
   } catch {
     flockAvailable = false;
@@ -239014,7 +239410,7 @@ function acquireSessionLock(lockPath) {
     fs32.unlinkSync(readyFile);
   } catch {
   }
-  const child = (0, import_node_child_process18.spawn)("flock", ["-n", lockPath, "-c", `printf ok > '${readyFile}'; exec cat`], {
+  const child = (0, import_node_child_process19.spawn)("flock", ["-n", lockPath, "-c", `printf ok > '${readyFile}'; exec cat`], {
     stdio: ["pipe", "ignore", "ignore"],
     detached: true
   });
@@ -239025,7 +239421,7 @@ function acquireSessionLock(lockPath) {
       ready = true;
       break;
     }
-    (0, import_node_child_process18.spawnSync)("sleep", ["0.02"], { stdio: "ignore" });
+    (0, import_node_child_process19.spawnSync)("sleep", ["0.02"], { stdio: "ignore" });
   }
   try {
     fs32.unlinkSync(readyFile);
@@ -239056,7 +239452,7 @@ function isSessionLocked(lockPath) {
   if (!hasFlock()) return false;
   if (!fs32.existsSync(lockPath)) return false;
   try {
-    const r = (0, import_node_child_process18.spawnSync)("flock", ["-n", lockPath, "-c", "true"], { stdio: "ignore", timeout: 3e3 });
+    const r = (0, import_node_child_process19.spawnSync)("flock", ["-n", lockPath, "-c", "true"], { stdio: "ignore", timeout: 3e3 });
     return r.status !== 0;
   } catch {
     return true;
@@ -239132,6 +239528,7 @@ var RECONNECT_MIN_MS = 1e3;
 var RECONNECT_MAX_MS = 3e4;
 var EXIT_ACK_WAIT_MS = LINK_WINDOWS.exitAckWaitMs;
 async function runSessionProcess(specFile, adapter) {
+  process.env["OASIS_BIND_RUNTIME_PDEATHSIG"] = "1";
   const spec = readSpec(specFile);
   const { dispatchId, job, auth, sessionDir } = spec;
   const lock = acquireSessionLock(path30.join(sessionDir, "lock"));
@@ -239395,7 +239792,7 @@ init_src8();
 init_src7();
 
 // ../cli/src/daemon/detect-adapters.ts
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 init_src7();
 var KNOWN2 = [
   { adapter: "claude-code", binary: "claude" },
@@ -239419,7 +239816,7 @@ var LIVE_PROTOCOL_RUNTIMES = /* @__PURE__ */ new Set(["claude-code"]);
 function resolveOnPath2(binary) {
   try {
     const cmd = process.platform === "win32" ? "where" : "which";
-    const out = (0, import_node_child_process19.execFileSync)(cmd, [binary], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    const out = (0, import_node_child_process20.execFileSync)(cmd, [binary], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     const first = out.split("\n")[0]?.trim();
     return first || binary;
   } catch {
@@ -239428,7 +239825,7 @@ function resolveOnPath2(binary) {
 }
 function versionOf(binary) {
   try {
-    return (0, import_node_child_process19.execFileSync)(binary, ["--version"], {
+    return (0, import_node_child_process20.execFileSync)(binary, ["--version"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 1500
@@ -240384,7 +240781,7 @@ async function startNode(opts) {
 }
 
 // ../cli/src/exec.ts
-var os10 = __toESM(require("node:os"), 1);
+var os11 = __toESM(require("node:os"), 1);
 var UnsafeExecArgvError = class extends Error {
   code = "ERR_UNSAFE_EXEC_ARGV";
   constructor(message) {
@@ -240421,7 +240818,7 @@ function planExec(opts) {
 function computeExitCode(code2, signal) {
   if (code2 !== null) return code2;
   if (signal) {
-    const num2 = os10.constants.signals[signal];
+    const num2 = os11.constants.signals[signal];
     return 128 + (typeof num2 === "number" ? num2 : 1);
   }
   return 1;
@@ -240445,7 +240842,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 }
 
 // ../cli/src/daemon/machine-id.ts
-var import_node_child_process20 = require("node:child_process");
+var import_node_child_process21 = require("node:child_process");
 var import_node_fs20 = require("node:fs");
 var import_node_crypto62 = require("node:crypto");
 var import_node_os12 = require("node:os");
@@ -240461,7 +240858,7 @@ function linuxMachineId() {
 }
 function macMachineId() {
   try {
-    const out = (0, import_node_child_process20.execFileSync)("ioreg", ["-rd1", "-c", "IOPlatformExpertDevice"], {
+    const out = (0, import_node_child_process21.execFileSync)("ioreg", ["-rd1", "-c", "IOPlatformExpertDevice"], {
       encoding: "utf8",
       timeout: 2e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -240474,7 +240871,7 @@ function macMachineId() {
 }
 function windowsMachineId() {
   try {
-    const out = (0, import_node_child_process20.execFileSync)("reg", [
+    const out = (0, import_node_child_process21.execFileSync)("reg", [
       "query",
       "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
       "/v",
@@ -242184,7 +242581,7 @@ function ownFlagsFromDecl(command) {
 
 // ../cli/src/connector-effect-runner.ts
 var import_node_crypto63 = require("node:crypto");
-var import_node_child_process21 = require("node:child_process");
+var import_node_child_process22 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
@@ -242243,7 +242640,7 @@ function productionApi() {
 }
 function execute(bin, args) {
   return new Promise((resolve10, reject) => {
-    const child = (0, import_node_child_process21.spawn)(bin, args, { stdio: "inherit", env: process.env });
+    const child = (0, import_node_child_process22.spawn)(bin, args, { stdio: "inherit", env: process.env });
     child.once("error", reject);
     child.once("exit", (code2, signal) => resolve10(code2 ?? (signal ? 128 : 1)));
   });
@@ -242673,7 +243070,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const res = await fetch(`${httpBase2}/api/nodes/exchange`, {
         method: "POST",
         headers: { "content-type": "application/json" },
-        body: JSON.stringify({ enrollToken, nodeId, hostname: os11.hostname() })
+        body: JSON.stringify({ enrollToken, nodeId, hostname: os12.hostname() })
       });
       if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
       const body2 = await res.json();
@@ -242706,7 +243103,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const binPath = path34.join(prefix, "bin", "oasis_test");
       const svcArgs = `node --server-ws ${serverUrl} --dir ${dir}${nodeName ? ` --name ${nodeName}` : ""}`;
       if (process.platform === "linux") {
-        const svcFile = path34.join(os11.homedir(), ".config/systemd/user/oasis-node.service");
+        const svcFile = path34.join(os12.homedir(), ".config/systemd/user/oasis-node.service");
         fs37.mkdirSync(path34.dirname(svcFile), { recursive: true });
         if (spawnSync3("systemctl", ["--user", "is-active", "--quiet", "oasis-node"], {}).status === 0)
           spawnSync3("systemctl", ["--user", "stop", "oasis-node"], { stdio: "inherit" });
@@ -242719,7 +243116,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
           `ExecStart=${binPath} ${svcArgs}`,
           // Carry the install-time PATH so the detached daemon detects CLIs in user dirs
           // (~/.npm-global/bin, ~/.local/bin) — systemd --user otherwise gives a minimal PATH.
-          `Environment=PATH=${process.env["PATH"] ?? ""}:${path34.join(os11.homedir(), ".npm-global/bin")}:${path34.join(os11.homedir(), ".local/bin")}:/usr/local/bin`,
+          `Environment=PATH=${process.env["PATH"] ?? ""}:${path34.join(os12.homedir(), ".npm-global/bin")}:${path34.join(os12.homedir(), ".local/bin")}:/usr/local/bin`,
           "Restart=on-failure",
           "RestartSec=5",
           "StandardOutput=journal",
@@ -242731,23 +243128,23 @@ async function runCli(argv, println = console.log, progressln = console.error) {
         ].join("\n"));
         spawnSync3("systemctl", ["--user", "daemon-reload"], { stdio: "inherit" });
         spawnSync3("systemctl", ["--user", "enable", "--now", "oasis-node"], { stdio: "inherit" });
-        spawnSync3("loginctl", ["enable-linger", os11.userInfo().username], { stdio: "ignore" });
+        spawnSync3("loginctl", ["enable-linger", os12.userInfo().username], { stdio: "ignore" });
         println("\u2713 Oasis node service started (systemd --user oasis-node)");
         println("  Status : systemctl --user status oasis-node");
         println("  Logs   : journalctl --user -u oasis-node -f");
         println("  Stop   : systemctl --user stop oasis-node");
       } else if (process.platform === "darwin") {
-        const plist = path34.join(os11.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
+        const plist = path34.join(os12.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
         fs37.mkdirSync(path34.dirname(plist), { recursive: true });
         spawnSync3("launchctl", ["unload", plist], { stdio: "ignore" });
         const argXml = [binPath, "node", "--server-ws", serverUrl, "--dir", dir, ...nodeName ? ["--name", nodeName] : []].map((a) => `<string>${a}</string>`).join("");
-        fs37.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os11.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os11.homedir()}/.oasis-node.err</string></dict></plist>`);
+        fs37.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os12.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os12.homedir()}/.oasis-node.err</string></dict></plist>`);
         spawnSync3("launchctl", ["load", plist], { stdio: "inherit" });
         println("\u2713 Oasis node service started (macOS LaunchAgent com.oasis.node)");
-        println(`  Logs : tail -f ${os11.homedir()}/.oasis-node.log`);
+        println(`  Logs : tail -f ${os12.homedir()}/.oasis-node.log`);
         println(`  Stop : launchctl unload ${plist}`);
       } else {
-        spawnSync3("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path34.join(os11.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
+        spawnSync3("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path34.join(os12.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
         println(`\u2713 Oasis node started in background (nohup). Logs: ~/.oasis-node.log`);
         println("  Note: no automatic restart on reboot in this environment.");
       }
@@ -242846,8 +243243,8 @@ async function runCli(argv, println = console.log, progressln = console.error) {
   if (command === "serve" && positional[0] === "install") {
     const absDir = path34.resolve(dir);
     const name = `oasis-serve-${path34.basename(absDir)}`;
-    const unitDir = flags.get("unit-dir") ?? path34.join(os11.homedir(), ".config", "systemd", "user");
-    const bin = flags.get("bin") ?? path34.join(os11.homedir(), ".local", "bin", "oasis");
+    const unitDir = flags.get("unit-dir") ?? path34.join(os12.homedir(), ".config", "systemd", "user");
+    const bin = flags.get("bin") ?? path34.join(os12.homedir(), ".local", "bin", "oasis");
     const port = flags.get("port") ?? "7320";
     const extra = (flags.get("dispatch") === "true" ? ` --dispatch true` : "") + (flags.has("model") ? ` --model ${flags.get("model")}` : "");
     const unit = [
@@ -243191,7 +243588,7 @@ Trace: ${run.traceRunId}`);
       if (plan.inject.mode === "env") {
         childEnv[plan.inject.envName] = value2;
       } else {
-        tmpDir = await fs37.promises.mkdtemp(path34.join(os11.tmpdir(), "oasis-var-exec-"));
+        tmpDir = await fs37.promises.mkdtemp(path34.join(os12.tmpdir(), "oasis-var-exec-"));
         const keyfile = path34.join(tmpDir, "value");
         await fs37.promises.writeFile(keyfile, value2, { mode: 384 });
         childEnv[plan.inject.fileEnv] = keyfile;
@@ -243965,7 +244362,7 @@ ${res.warning}`);
         for (const a of st.artifacts) println(`  - ${a.path}\uFF08${a.kind ?? "?"}\uFF09status=${a.status ?? "?"}${a.mtime ? ` \xB7 ${new Date(a.mtime).toISOString()}` : ""}`);
         if (flags.get("pull") === "true") {
           const odPublic2 = (flags.get("od-public-url") ?? process.env["OASIS_OPEN_DESIGN_PUBLIC_URL"] ?? "https://design.open-friday.com").replace(/\/$/, "");
-          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os11.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
+          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os12.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
           println(`[design] \u5DF2\u62C9\u5230\u672C\u5730\uFF1A${dir3}\uFF08\u5165\u53E3 ${entry2}\uFF09`);
           println(`[design] \u8BFB\u5B8C\u6EE1\u610F\u5373\u4EA4\u7A3F\uFF1Aoasis propose ${artifactId2} --from-dir ${dir3} --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"`);
         } else {
@@ -245335,10 +245732,10 @@ function runtimeAssetSourceRoots(input) {
 
 // src/paths.ts
 var fs40 = __toESM(require("node:fs"));
-var os12 = __toESM(require("node:os"));
+var os13 = __toESM(require("node:os"));
 var path37 = __toESM(require("node:path"));
 var DEFAULT_INSTANCE = "default";
-var home = () => os12.homedir();
+var home = () => os13.homedir();
 var oasisDir = () => path37.join(home(), ".oasis");
 var versionsDir = () => path37.join(oasisDir(), "versions");
 var versionDir = (label) => path37.join(versionsDir(), label);
@@ -245537,7 +245934,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.1.137" : "dev";
+var PKG_VERSION = true ? "0.1.138" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -245637,7 +246034,7 @@ function installSoftware(label) {
 function setupAutostart(name) {
   const inst = instancePaths(name);
   const cmd = `${process.execPath} "${inst.binFile}" --_daemon --instance ${name}`;
-  const home2 = os13.homedir();
+  const home2 = os14.homedir();
   const pnpmHome = process.env["PNPM_HOME"] || path39.join(home2, ".local", "share", "pnpm");
   const extraBins = [
     path39.join(home2, ".npm-global", "bin"),
@@ -245647,7 +246044,7 @@ function setupAutostart(name) {
   ];
   const daemonPath = sanitizeDaemonPath([process.env["PATH"] ?? "", ...extraBins].filter(Boolean).join(":"));
   if (process.platform === "linux") {
-    const unitDir = path39.join(os13.homedir(), ".config", "systemd", "user");
+    const unitDir = path39.join(os14.homedir(), ".config", "systemd", "user");
     fs42.mkdirSync(unitDir, { recursive: true });
     const unit = systemdUnitName(name);
     fs42.mkdirSync(path39.dirname(inst.logFile), { recursive: true });
@@ -245660,19 +246057,19 @@ function setupAutostart(name) {
     }));
     if (name === DEFAULT_INSTANCE) {
       try {
-        (0, import_node_child_process22.execSync)(`systemctl --user disable --now ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
+        (0, import_node_child_process23.execSync)(`systemctl --user disable --now ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
       } catch {
       }
     }
     try {
-      (0, import_node_child_process22.execSync)(`systemctl --user daemon-reload && systemctl --user enable --now ${unit}`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`systemctl --user daemon-reload && systemctl --user enable --now ${unit}`, { stdio: "ignore" });
       return true;
     } catch {
     }
     return false;
   } else if (process.platform === "darwin") {
     const label = launchdLabel(name);
-    const plist = path39.join(os13.homedir(), "Library", "LaunchAgents", `${label}.plist`);
+    const plist = path39.join(os14.homedir(), "Library", "LaunchAgents", `${label}.plist`);
     fs42.mkdirSync(path39.dirname(plist), { recursive: true });
     fs42.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -245685,7 +246082,7 @@ function setupAutostart(name) {
   <key>StandardErrorPath</key><string>${inst.logFile}</string>
 </dict></plist>`);
     try {
-      (0, import_node_child_process22.execSync)(`launchctl load "${plist}"`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`launchctl load "${plist}"`, { stdio: "ignore" });
       return true;
     } catch {
     }
@@ -245696,7 +246093,7 @@ function setupAutostart(name) {
 function spawnDaemon() {
   fs42.mkdirSync(path39.dirname(LOG_FILE), { recursive: true });
   const log3 = fs42.openSync(LOG_FILE, "a");
-  const child = (0, import_node_child_process22.spawn)(process.execPath, [INST.binFile, "--_daemon", "--instance", INSTANCE], {
+  const child = (0, import_node_child_process23.spawn)(process.execPath, [INST.binFile, "--_daemon", "--instance", INSTANCE], {
     detached: true,
     stdio: ["ignore", log3, log3],
     // 与 systemd unit 里那条 Environment 等价——detached 兜底路径不能少，否则同一实例在两条
@@ -245721,24 +246118,24 @@ function stopDaemon(name) {
   }
   if (process.platform === "linux") {
     try {
-      (0, import_node_child_process22.execSync)(`systemctl --user stop ${systemdUnitName(name)} 2>/dev/null`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`systemctl --user stop ${systemdUnitName(name)} 2>/dev/null`, { stdio: "ignore" });
     } catch {
     }
     if (name === DEFAULT_INSTANCE) {
       try {
-        (0, import_node_child_process22.execSync)(`systemctl --user stop ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
+        (0, import_node_child_process23.execSync)(`systemctl --user stop ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
       } catch {
       }
     }
   } else if (process.platform === "darwin") {
     const label = launchdLabel(name);
     try {
-      (0, import_node_child_process22.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${label}.plist" 2>/dev/null`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${label}.plist" 2>/dev/null`, { stdio: "ignore" });
     } catch {
     }
     if (name === DEFAULT_INSTANCE && label !== LEGACY_LAUNCHD_LABEL) {
       try {
-        (0, import_node_child_process22.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${LEGACY_LAUNCHD_LABEL}.plist" 2>/dev/null`, { stdio: "ignore" });
+        (0, import_node_child_process23.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${LEGACY_LAUNCHD_LABEL}.plist" 2>/dev/null`, { stdio: "ignore" });
       } catch {
       }
     }
@@ -245757,7 +246154,7 @@ function selfUpdate() {
   const inner = `{ echo "[oasis] self-update \u2192 ${PKG_NAME}@latest (registry ${OFFICIAL}, \u5931\u8D25\u56DE\u843D\u9ED8\u8BA4\u6E90)"; sleep 2; { ${installOfficial} || ${installFallback}; } && ${printVersion} && ${startCmd}; } >> '${LOG_FILE}' 2>&1`;
   const hasSystemd = process.platform === "linux" && (() => {
     try {
-      (0, import_node_child_process22.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -245765,13 +246162,13 @@ function selfUpdate() {
   })();
   const log3 = fs42.openSync(LOG_FILE, "a");
   if (hasSystemd) {
-    const child = (0, import_node_child_process22.spawn)("systemd-run", ["--user", "--scope", "--quiet", "sh", "-c", inner], {
+    const child = (0, import_node_child_process23.spawn)("systemd-run", ["--user", "--scope", "--quiet", "sh", "-c", inner], {
       detached: true,
       stdio: ["ignore", log3, log3]
     });
     child.unref();
   } else {
-    const child = (0, import_node_child_process22.spawn)("sh", ["-c", inner], { detached: true, stdio: ["ignore", log3, log3] });
+    const child = (0, import_node_child_process23.spawn)("sh", ["-c", inner], { detached: true, stdio: ["ignore", log3, log3] });
     child.unref();
   }
 }
@@ -245833,7 +246230,7 @@ async function startOneInstance(o) {
     const res = await fetch(`${httpBase(serverUrl)}/api/nodes/exchange`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os13.hostname() })
+      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os14.hostname() })
     });
     if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
     const body2 = await res.json();
@@ -245884,7 +246281,7 @@ function derivedNodeIdFor(name) {
   if (name === DEFAULT_INSTANCE) return resolveNodeId();
   const user = (() => {
     try {
-      return os13.userInfo().username;
+      return os14.userInfo().username;
     } catch {
       return process.env["USER"] ?? process.env["USERNAME"] ?? "unknown";
     }
@@ -245894,7 +246291,7 @@ function derivedNodeIdFor(name) {
 function userScopeAvailable() {
   if (process.platform !== "linux") return false;
   try {
-    (0, import_node_child_process22.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
+    (0, import_node_child_process23.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -245925,11 +246322,11 @@ function spawnSessionProcess(spec) {
     const logFd = fs42.openSync(path39.join(dir, "session.log"), "a");
     const argv = [INST.binFile, "--_session", specFile];
     const env = { ...process.env, OASIS_CLI_HOME: pinnedDir };
-    const child = userScopeAvailable() ? (0, import_node_child_process22.spawn)(
+    const child = userScopeAvailable() ? (0, import_node_child_process23.spawn)(
       "systemd-run",
       ["--user", "--scope", "--quiet", `--setenv=OASIS_CLI_HOME=${pinnedDir}`, process.execPath, ...argv],
       { detached: true, stdio: ["ignore", logFd, logFd], env }
-    ) : (0, import_node_child_process22.spawn)(process.execPath, argv, { detached: true, stdio: ["ignore", logFd, logFd], env });
+    ) : (0, import_node_child_process23.spawn)(process.execPath, argv, { detached: true, stdio: ["ignore", logFd, logFd], env });
     child.unref();
     return true;
   } catch (e) {