npm - oasis_test - Versions diffs - 0.1.137 → 0.1.139 - Mend

oasis_test 0.1.137 → 0.1.139

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/index.js +599 -135
package/package.json +2 -2

package/dist/index.js CHANGED Viewed

@@ -719,11 +719,16 @@ var init_link_windows = __esm({
       browserStaleAfterMs: 45e3,
       /**
        * 会话进程发完 `session_exited` 后等 ack 的时限（`session-process.ts`）。
-       * ⚠ ADR 0300 D7 已判定这个值偏小：实测一次 serve 重启停服 27.9 s，停服窗口内跑完的会话
-       * 其退出帧**必然**丢失。0300 止血 PR 0 会把它提到 ≥ 90 s 并让未回执的退出帧先落盘，
-       * 改的就是这一行——本次只收敛位置，不动值。
-       */
-      exitAckWaitMs: 1e4,
+       *
+       * ADR 0300 D7：取 90 s 覆盖一次 serve 重启（实测停服 27.6~27.9 s，数据面会话最慢 38.6 s 连回，
+       * 证据 C/D）。会话进程在这段时间里**不退出**、保持数据面重连；serve 回来后 `ws.on("open")` 会
+       * 重发 outbox 里未回执的 `session_exited`（`session-process.ts` 的 `for (const m of this.outbox)`），
+       * 服务端 `reconcileChatExitFrame` 按 `dispatchId` 幂等收口——退出帧不再随停服窗口蒸发、账本不再
+       * 停在 running 等时钟扫描判孤儿。仍小于会话自尽窗 `SESSION_LIMITS.suicideAfterUnreachableMs`（5 min），
+       * 等 ack 期间不会先自尽。**更狠的一层**（进程被 TTL/自尽强杀于窗口内时把未回执帧落 `exit.json`、
+       * 由 daemon 信使补发）属 D7 后续，另计。
+       */
+      exitAckWaitMs: 9e4,
       /** hub 对「暂无人认领」的会话在 serve 冷启动后挂起重判的宽限（`daemon-hub.ts`）。 */
       hubColdStartGraceMs: 9e4,
       /** orphan-sweep 判「账上在跑、四张认领表都不认」为孤儿的宽限（`serve.ts`）。 */
@@ -19191,7 +19196,9 @@ var init_kernel_bridge = __esm({
             handActorId: args.hand ?? null,
             ...args.intent !== void 0 ? { intent: args.intent } : {},
             ...args.source !== void 0 ? { source: args.source } : {},
-            recipients: [this.model.artifacts.get(args.artifactId)?.owner ?? ""],
+            // Escalation hands responsibility to the workorder owner; never address only the stalled executor.
+            // Human/team lead delivery additionally uses the same live recipient projection as the Inbox.
+            recipients: [...new Set([brief?.owner ?? art?.owner].filter((id) => !!id))],
             attachments: []
           }
         });
@@ -33366,14 +33373,14 @@ var require_axios = __commonJS({
       navigator: _navigator,
       origin
     });
-    var platform = {
+    var platform2 = {
       ...utils,
       ...platform$1
     };
     function toURLEncodedForm(data, options) {
-      return toFormData(data, new platform.classes.URLSearchParams(), {
+      return toFormData(data, new platform2.classes.URLSearchParams(), {
         visitor: function(value2, key, path40, helpers) {
-          if (platform.isNode && utils$1.isBuffer(value2)) {
+          if (platform2.isNode && utils$1.isBuffer(value2)) {
             this.append(key, value2.toString("base64"));
             return false;
           }
@@ -33526,8 +33533,8 @@ var require_axios = __commonJS({
       maxContentLength: -1,
       maxBodyLength: -1,
       env: {
-        FormData: platform.classes.FormData,
-        Blob: platform.classes.Blob
+        FormData: platform2.classes.FormData,
+        Blob: platform2.classes.Blob
       },
       validateStatus: function validateStatus(status) {
         return status >= 200 && status < 300;
@@ -33890,7 +33897,7 @@ var require_axios = __commonJS({
     }
     var DATA_URL_PATTERN = /^(?:([^;]+);)?(?:[^;]+;)?(base64|),([\s\S]*)$/;
     function fromDataURI(uri, asBlob, options) {
-      const _Blob = options && options.Blob || platform.classes.Blob;
+      const _Blob = options && options.Blob || platform2.classes.Blob;
       const protocol = parseProtocol(uri);
       if (asBlob === void 0 && _Blob) {
         asBlob = true;
@@ -34048,7 +34055,7 @@ var require_axios = __commonJS({
       }
     };
     var readBlob$1 = readBlob;
-    var BOUNDARY_ALPHABET = platform.ALPHABET.ALPHA_DIGIT + "-_";
+    var BOUNDARY_ALPHABET = platform2.ALPHABET.ALPHA_DIGIT + "-_";
     var textEncoder = typeof TextEncoder === "function" ? new TextEncoder() : new util__default["default"].TextEncoder();
     var CRLF = "\r\n";
     var CRLF_BYTES = textEncoder.encode(CRLF);
@@ -34094,7 +34101,7 @@ var require_axios = __commonJS({
       const {
         tag = "form-data-boundary",
         size = 25,
-        boundary = tag + "-" + platform.generateString(size, BOUNDARY_ALPHABET)
+        boundary = tag + "-" + platform2.generateString(size, BOUNDARY_ALPHABET)
       } = options || {};
       if (!utils$1.isFormData(form)) {
         throw TypeError("FormData instance required");
@@ -34323,7 +34330,7 @@ var require_axios = __commonJS({
     var isBrotliSupported = utils$1.isFunction(zlib__default["default"].createBrotliDecompress);
     var { http: httpFollow, https: httpsFollow } = followRedirects__default["default"];
     var isHttps = /https:?/;
-    var supportedProtocols = platform.protocols.map((protocol) => {
+    var supportedProtocols = platform2.protocols.map((protocol) => {
       return protocol + ":";
     });
     var flushOnFinish = (stream2, [throttled, flush]) => {
@@ -34575,7 +34582,7 @@ var require_axios = __commonJS({
           }
         });
         const fullPath = buildFullPath(config2.baseURL, config2.url, config2.allowAbsoluteUrls);
-        const parsed = new URL(fullPath, platform.hasBrowserEnv ? platform.origin : void 0);
+        const parsed = new URL(fullPath, platform2.hasBrowserEnv ? platform2.origin : void 0);
         const protocol = parsed.protocol || supportedProtocols[0];
         if (protocol === "data:") {
           if (config2.maxContentLength > -1) {
@@ -34983,14 +34990,14 @@ var require_axios = __commonJS({
         }
       });
     };
-    var isURLSameOrigin = platform.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin2, isMSIE) => (url2) => {
-      url2 = new URL(url2, platform.origin);
+    var isURLSameOrigin = platform2.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin2, isMSIE) => (url2) => {
+      url2 = new URL(url2, platform2.origin);
       return origin2.protocol === url2.protocol && origin2.host === url2.host && (isMSIE || origin2.port === url2.port);
     })(
-      new URL(platform.origin),
-      platform.navigator && /(msie|trident)/i.test(platform.navigator.userAgent)
+      new URL(platform2.origin),
+      platform2.navigator && /(msie|trident)/i.test(platform2.navigator.userAgent)
     ) : () => true;
-    var cookies = platform.hasStandardBrowserEnv ? (
+    var cookies = platform2.hasStandardBrowserEnv ? (
       // Standard browser envs support document.cookie
       {
         write(name, value2, expires, path40, domain2, secure, sameSite) {
@@ -35131,7 +35138,7 @@ var require_axios = __commonJS({
         );
       }
       if (utils$1.isFormData(data)) {
-        if (platform.hasStandardBrowserEnv || platform.hasStandardBrowserWebWorkerEnv) {
+        if (platform2.hasStandardBrowserEnv || platform2.hasStandardBrowserWebWorkerEnv) {
           headers.setContentType(void 0);
         } else if (utils$1.isFunction(data.getHeaders)) {
           const formHeaders = data.getHeaders();
@@ -35143,7 +35150,7 @@ var require_axios = __commonJS({
           });
         }
       }
-      if (platform.hasStandardBrowserEnv) {
+      if (platform2.hasStandardBrowserEnv) {
         withXSRFToken && utils$1.isFunction(withXSRFToken) && (withXSRFToken = withXSRFToken(newConfig));
         if (withXSRFToken || withXSRFToken !== false && isURLSameOrigin(newConfig.url)) {
           const xsrfValue = xsrfHeaderName && xsrfCookieName && cookies.read(xsrfCookieName);
@@ -35281,7 +35288,7 @@ var require_axios = __commonJS({
           }
         }
         const protocol = parseProtocol(_config.url);
-        if (protocol && platform.protocols.indexOf(protocol) === -1) {
+        if (protocol && platform2.protocols.indexOf(protocol) === -1) {
           reject(
             new AxiosError$1(
               "Unsupported protocol " + protocol + ":",
@@ -35441,7 +35448,7 @@ var require_axios = __commonJS({
       const encodeText = isFetchSupported && (typeof TextEncoder$1 === "function" ? /* @__PURE__ */ ((encoder) => (str2) => encoder.encode(str2))(new TextEncoder$1()) : async (str2) => new Uint8Array(await new Request(str2).arrayBuffer()));
       const supportsRequestStream = isRequestSupported && isReadableStreamSupported && test(() => {
         let duplexAccessed = false;
-        const hasContentType = new Request(platform.origin, {
+        const hasContentType = new Request(platform2.origin, {
           body: new ReadableStream$1(),
           method: "POST",
           get duplex() {
@@ -35478,7 +35485,7 @@ var require_axios = __commonJS({
           return body2.size;
         }
         if (utils$1.isSpecCompliantForm(body2)) {
-          const _request = new Request(platform.origin, {
+          const _request = new Request(platform2.origin, {
             method: "POST",
             body: body2
           });
@@ -150194,6 +150201,40 @@ var init_live_chat = __esm({
           }
         };
       }
+      /**
+       * serve 重启后**重挂**一个占位轮（ADR 0300 D4）。该会话在本进程注册表里已有轮（真轮或另一个占位轮）
+       * 则不动、返回 null——保证幂等且绝不覆盖真轮。占位轮 status=running、缓冲为空、句柄不带 appendInput
+       * （`canAppend` 因此为 false），`kill()` 走注入的 `onStop`（账本收口）并把本轮标 error 让在挂的观众
+       * 就地收到终止。节点重连时恢复路的 {@link start} 会替掉它。
+       */
+      reopenForRecovery(chatSessionId, opts) {
+        if (this.turns.has(chatSessionId)) return null;
+        let ctrl;
+        const handle = {
+          runtimeSessionId: opts.runtimeSessionId,
+          ...opts.runId ? { runId: opts.runId } : {},
+          canAppendInput: false,
+          kill: () => {
+            try {
+              opts.onStop?.();
+            } finally {
+              ctrl?.finish("error");
+            }
+          }
+        };
+        ctrl = this.start(chatSessionId, handle);
+        const turn = this.turns.get(chatSessionId);
+        if (turn) turn.recovering = true;
+        return ctrl;
+      }
+      /** 占位轮的最后一个观众断开即回收：没真 runtime 喂它，留着只会占内存、也会让 `isRunning` 恒真。 */
+      evictIfEmptyRecovering(chatSessionId, turn) {
+        if (!turn.recovering || turn.status !== "running") return;
+        if (turn.subscribers.size > 0 || turn.liveSubscribers.size > 0) return;
+        if (this.turns.get(chatSessionId) !== turn) return;
+        if (turn.evictTimer) clearTimeout(turn.evictTimer);
+        this.turns.delete(chatSessionId);
+      }
       emitLive(turn, event) {
         turn.liveTurnId = event.turnId;
         const mergeField = this.mergeableLiveField(event);
@@ -150267,6 +150308,7 @@ var init_live_chat = __esm({
           gap,
           detach: () => {
             turn.subscribers.delete(sub);
+            this.evictIfEmptyRecovering(chatSessionId, turn);
           }
         };
       }
@@ -150286,6 +150328,7 @@ var init_live_chat = __esm({
           epoch: turn.liveEpoch,
           detach: () => {
             turn.liveSubscribers.delete(sub);
+            this.evictIfEmptyRecovering(chatSessionId, turn);
           }
         };
       }
@@ -150409,7 +150452,9 @@ var init_live_chat = __esm({
        *  建单草案 submit 发生在这一轮内：用它给草案盖上「产出轮次」标记，供 friday 重进对话页把每版
        *  草案归位到产出它的那条助手消息（message.runId 对齐）。 */
       runFor(chatSessionId) {
-        return this.turns.get(chatSessionId)?.runId;
+        const turn = this.turns.get(chatSessionId);
+        if (!turn || turn.recovering) return void 0;
+        return turn.runId;
       }
       /**
        * 反查该会话当前驻留那一轮**这一段**的 assistant 行 id（无进行中/grace 轮、或还没落库时
@@ -150418,7 +150463,9 @@ var init_live_chat = __esm({
        * 两段共用同一个 runId，钉不出前后段的区别，而那正是本字段存在的理由。
        */
       messageFor(chatSessionId) {
-        return this.turns.get(chatSessionId)?.assistantMessageId;
+        const turn = this.turns.get(chatSessionId);
+        if (!turn || turn.recovering) return void 0;
+        return turn.assistantMessageId;
       }
       /** 测试/排障用：当前驻留的会话数。 */
       size() {
@@ -184602,16 +184649,16 @@ var init_tool_home = __esm({
 });
 // ../connectors/src/_base/install.ts
-function installPlan(cmd, platform, toolsPrefix) {
+function installPlan(cmd, platform2, toolsPrefix) {
   if (cmd === "lark-cli") {
-    const npm = platform === "win32" ? "npm.cmd" : "npm";
+    const npm = platform2 === "win32" ? "npm.cmd" : "npm";
     return [{ file: npm, args: ["install", "-g", "--prefix", toolsPrefix, "@larksuite/cli"], ensureDir: toolsPrefix }];
   }
   const pkg = cmd === "gh" ? { brew: "gh", apt: "gh", dnf: "gh", pacman: "github-cli", apk: "github-cli", winget: "GitHub.cli", choco: "gh", scoop: "gh" } : { brew: "git", apt: "git", dnf: "git", pacman: "git", apk: "git", winget: "Git.Git", choco: "git", scoop: "git" };
-  if (platform === "darwin") {
+  if (platform2 === "darwin") {
     return [{ file: "brew", args: ["install", pkg.brew], requires: "brew" }];
   }
-  if (platform === "win32") {
+  if (platform2 === "win32") {
     return [
       { file: "winget", args: ["install", "--silent", "--accept-package-agreements", "--accept-source-agreements", "-e", "--id", pkg.winget], requires: "winget" },
       { file: "choco", args: ["install", "-y", pkg.choco], requires: "choco" },
@@ -194314,6 +194361,35 @@ ${task}` : task;
   }
 });
+// ../adapters/src/_core/pdeathsig.ts
+function pdeathsigAvailable(probe = defaultProbe) {
+  if (cachedAvailable === void 0) cachedAvailable = probe();
+  return cachedAvailable;
+}
+function defaultProbe() {
+  if (os6.platform() !== "linux") return false;
+  try {
+    const help = (0, import_node_child_process13.execFileSync)("setpriv", ["--help"], { stdio: ["ignore", "pipe", "ignore"], timeout: 2e3 }).toString();
+    return help.includes("--pdeathsig");
+  } catch {
+    return false;
+  }
+}
+function pdeathsigWrap(bin, args) {
+  return { bin: "setpriv", args: ["--pdeathsig", "SIGKILL", "--", bin, ...args] };
+}
+function shouldBindRuntimePdeathsig() {
+  return process.env["OASIS_BIND_RUNTIME_PDEATHSIG"] === "1" && pdeathsigAvailable();
+}
+var import_node_child_process13, os6, cachedAvailable;
+var init_pdeathsig = __esm({
+  "../adapters/src/_core/pdeathsig.ts"() {
+    "use strict";
+    import_node_child_process13 = require("node:child_process");
+    os6 = __toESM(require("node:os"), 1);
+  }
+});
 // ../adapters/src/_core/subprocess.ts
 async function materialize(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
@@ -194416,11 +194492,12 @@ async function runStreamJson(job, cfg) {
     ...cfg.workRoot !== void 0 ? { workRoot: cfg.workRoot } : {},
     ...cfg.env !== void 0 ? { extraEnvEarly: cfg.env } : {}
   });
-  const child = containerized ? (0, import_node_child_process13.spawn)(containerized.bin, containerized.args, {
+  const direct = shouldBindRuntimePdeathsig() ? pdeathsigWrap(cfg.bin, args) : { bin: cfg.bin, args };
+  const child = containerized ? (0, import_node_child_process14.spawn)(containerized.bin, containerized.args, {
     cwd: dir,
     env: scrubLeakyEnv(process.env),
     stdio: ["ignore", "pipe", "pipe"]
-  }) : (0, import_node_child_process13.spawn)(cfg.bin, args, {
+  }) : (0, import_node_child_process14.spawn)(direct.bin, direct.args, {
     cwd: dir,
     env: buildEnv(job, cfg),
     stdio: ["ignore", "pipe", "pipe"]
@@ -194525,11 +194602,12 @@ async function runOneShotText(job, cfg) {
     ...cfg.workRoot !== void 0 ? { workRoot: cfg.workRoot } : {},
     ...cfg.env !== void 0 ? { extraEnvEarly: cfg.env } : {}
   });
-  const child = containerized ? (0, import_node_child_process13.spawn)(containerized.bin, containerized.args, {
+  const direct = shouldBindRuntimePdeathsig() ? pdeathsigWrap(cfg.bin, args) : { bin: cfg.bin, args };
+  const child = containerized ? (0, import_node_child_process14.spawn)(containerized.bin, containerized.args, {
     cwd: dir,
     env: scrubLeakyEnv(process.env),
     stdio: ["ignore", "pipe", "pipe"]
-  }) : (0, import_node_child_process13.spawn)(cfg.bin, args, {
+  }) : (0, import_node_child_process14.spawn)(direct.bin, direct.args, {
     cwd: dir,
     env: buildEnv(job, cfg),
     stdio: ["ignore", "pipe", "pipe"]
@@ -194608,11 +194686,11 @@ async function runOneShotText(job, cfg) {
     }
   });
 }
-var import_node_child_process13, import_node_crypto29, fs14, path16, readline4;
+var import_node_child_process14, import_node_crypto29, fs14, path16, readline4;
 var init_subprocess = __esm({
   "../adapters/src/_core/subprocess.ts"() {
     "use strict";
-    import_node_child_process13 = require("node:child_process");
+    import_node_child_process14 = require("node:child_process");
     import_node_crypto29 = require("node:crypto");
     fs14 = __toESM(require("node:fs"), 1);
     path16 = __toESM(require("node:path"), 1);
@@ -194625,6 +194703,7 @@ var init_subprocess = __esm({
     init_transcript();
     init_filter_extra_args();
     init_root_bypass();
+    init_pdeathsig();
   }
 });
@@ -198164,6 +198243,22 @@ async function startOasisServer(opts) {
             return;
           }
           const fromSeq = Math.max(0, Number(url.searchParams.get("fromSeq") ?? "0") || 0);
+          const reopenRecoveringTurn = async () => {
+            if (!opts.chatTurns) return;
+            const active = await opts.chatTurns.activeTurn(sid).catch(() => null);
+            if (!active || active.status !== "running") return;
+            liveChat.reopenForRecovery(sid, {
+              runtimeSessionId: cs.runtimeSessionId ?? active.dispatchId ?? "",
+              ...active.assistantRunId ? { runId: active.assistantRunId } : {},
+              onStop: () => {
+                void opts.chatTurns?.settleTurn(active.id, {
+                  status: "cancelled",
+                  completedAt: (/* @__PURE__ */ new Date()).toISOString(),
+                  lastError: `\u7528\u6237\u5728 serve \u91CD\u542F\u6062\u590D\u7A97\u53E3\u5185\u505C\u6B62\uFF08\u8F6E ${active.id}\uFF09`
+                }).catch(() => void 0);
+              }
+            });
+          };
           const liveProtocol = url.searchParams.get("protocol") === "v2" || wantsLiveProtocol(req);
           if (liveProtocol) {
             const sub2 = (frame) => {
@@ -198172,7 +198267,11 @@ async function startOasisServer(opts) {
 `);
               if (frame.operation === "turn_completed" || frame.operation === "turn_failed") res.end();
             };
-            const att2 = liveChat.attachLive(sid, fromSeq, sub2);
+            let att2 = liveChat.attachLive(sid, fromSeq, sub2);
+            if (!att2) {
+              await reopenRecoveringTurn();
+              att2 = liveChat.attachLive(sid, fromSeq, sub2);
+            }
             if (!att2) {
               res.writeHead(204).end();
               return;
@@ -198199,9 +198298,10 @@ async function startOasisServer(opts) {
               res.end();
               return;
             }
+            const attached2 = att2;
             res.on("close", () => {
               stopKa2();
-              att2.detach();
+              attached2.detach();
             });
             return;
           }
@@ -198211,7 +198311,11 @@ async function startOasisServer(opts) {
 `);
             if (part.type === "done") res.end();
           };
-          const att = liveChat.attach(sid, fromSeq, sub);
+          let att = liveChat.attach(sid, fromSeq, sub);
+          if (!att) {
+            await reopenRecoveringTurn();
+            att = liveChat.attach(sid, fromSeq, sub);
+          }
           if (!att) {
             res.writeHead(204).end();
             return;
@@ -198237,9 +198341,10 @@ async function startOasisServer(opts) {
             res.end();
             return;
           }
+          const attached = att;
           res.on("close", () => {
             stopKa();
-            att.detach();
+            attached.detach();
           });
           return;
         }
@@ -205206,6 +205311,7 @@ async function sweepOrphanRuns(deps) {
   const inFlight = await deps.inFlightRunIds();
   const aliveArtifacts = await deps.aliveArtifactIds?.() ?? /* @__PURE__ */ new Set();
   const apiActive = await deps.apiActiveDispatchIds?.() ?? /* @__PURE__ */ new Set();
+  const liveSessions = await deps.liveSessionRunIds?.() ?? /* @__PURE__ */ new Set();
   const orphaned = [];
   const cappedOut = [];
   const rescued = [];
@@ -205231,7 +205337,7 @@ async function sweepOrphanRuns(deps) {
       }
       continue;
     }
-    const claimed = inFlight.has(run.id) || run.artifactId !== null && aliveArtifacts.has(run.artifactId) || apiActive.has(run.id);
+    const claimed = inFlight.has(run.id) || run.artifactId !== null && aliveArtifacts.has(run.artifactId) || apiActive.has(run.id) || liveSessions.has(run.id);
     if (!inFlight.has(run.id) && !(run.artifactId !== null && aliveArtifacts.has(run.artifactId)) && apiActive.has(run.id) && ageMs > deps.orphanGraceMs) {
       rescued.push(run.id);
       deps.log?.(
@@ -205268,7 +205374,7 @@ async function sweepDroppedDispatches(deps) {
   const result = {
     scanned: 0,
     redispatched: [],
-    skipped: { inFlight: 0, ledgerOpen: 0, backoff: 0, notAgent: 0, failed: 0 }
+    skipped: { inFlight: 0, ledgerOpen: 0, backoff: 0, notAgent: 0, blocked: 0, failed: 0 }
   };
   const createdBefore = new Date(deps.now - deps.graceMs).toISOString();
   const candidates = await deps.listNeverStarted(createdBefore, CANDIDATE_LIMIT);
@@ -205301,6 +205407,10 @@ async function sweepDroppedDispatches(deps) {
       continue;
     }
     try {
+      if (deps.beforeRedispatch && !await deps.beforeRedispatch(c)) {
+        result.skipped.blocked++;
+        continue;
+      }
       await deps.redispatch(c.workId, c.workorderId);
       result.redispatched.push(c.workId);
     } catch {
@@ -205354,6 +205464,35 @@ var init_dispatch_mapping_rebuild = __esm({
   }
 });
+// ../server/src/dispatch-binding-diagnosis.ts
+async function prepareDroppedDispatch(work, deps) {
+  const { kernel } = deps;
+  await kernel.refreshModel?.();
+  const node2 = kernel.model.artifacts.get(work.nodeId);
+  const snap = await kernel.getStore().transaction((tx) => tx.loadWorkorder(work.workorderId));
+  const current = snap?.works.find((w2) => w2.id === work.workId);
+  if (!snap || !current || current.status !== "running" || current.startedAt || current.sessionRef || current.endedAt || !snap.nodes.some((n) => n.id === work.nodeId && n.latestWorkId === current.id && !n.cancelledAt) || !node2 || node2.workspace !== work.workorderId || lifecycleOf(kernel.model, node2.id) !== "active" || kernel.model.pausedWorkorders.has(work.workorderId) || isHeld(kernel.model, node2.id)) return false;
+  if (snap.issues.some((i) => i.kind === "escalation" && i.aboutNodeId === node2.id && !i.resolvedAt && i.intent !== "advisory")) return false;
+  if (!work.assigneeActorId) return false;
+  const binding = await deps.bindingFor(work.assigneeActorId);
+  if (!binding?.nodeId) return true;
+  const runtimeNode = await deps.nodeFor(binding.nodeId);
+  if (runtimeNode && runtimeNode.status !== "deleted") return true;
+  await kernel.escalate({
+    artifactId: node2.id,
+    actor: SYSTEM_ACTOR,
+    source: "dispatch:missing-node",
+    reason: `\u8FD9\u4E00\u6B65\u8FD8\u6CA1\u6709\u542F\u52A8\uFF1A\u6267\u884C\u4EBA\u7684\u8FD0\u884C\u65F6\u7ED1\u5B9A\u6307\u5411${runtimeNode ? "\u5DF2\u5220\u9664" : "\u672A\u6CE8\u518C"}\u7684\u8282\u70B9 ${binding.nodeId}\u3002\u8BF7\u6062\u590D\u8BE5\u8282\u70B9\uFF0C\u6216\u4E3A\u6267\u884C\u4EBA ${work.assigneeActorId} \u9009\u62E9\u5DF2\u6709\u4E14\u914D\u7F6E\u6B63\u786E\u7684\u8282\u70B9\uFF1B\u4FEE\u590D\u540E\u5173\u95ED\u8FD9\u6761\u4E0A\u62A5\uFF0C\u6D41\u7A0B\u624D\u4F1A\u7EE7\u7EED\u3002\u672C\u6B21\u68C0\u67E5\u6CA1\u6709\u7EC8\u6B62\u4F1A\u8BDD\uFF0C\u4E5F\u6CA1\u6709\u6D88\u8017 work \u91CD\u8BD5\u6B21\u6570\u3002`
+  });
+  return false;
+}
+var init_dispatch_binding_diagnosis = __esm({
+  "../server/src/dispatch-binding-diagnosis.ts"() {
+    "use strict";
+    init_src5();
+  }
+});
 // ../server/src/zero-output-breaker.ts
 function absorb(b2, r, startedMs) {
   b2.count += 1;
@@ -205878,14 +206017,14 @@ function classifyDeployRun(facts) {
   if (facts.anyContainingInProgress) return { kind: "running", note: "\u627F\u8F7D\u672C\u6B21\u4EA4\u4ED8\u7684\u90E8\u7F72 run \u4ECD\u5728\u8FDB\u884C" };
   return { kind: "pending", note: "\u8FD8\u6CA1\u770B\u5230\u627F\u8F7D\u672C\u6B21\u4EA4\u4ED8\u7684\u90E8\u7F72 run" };
 }
-var import_node_child_process14, import_node_util5, execFile5, GhDeployProvider;
+var import_node_child_process15, import_node_util5, execFile5, GhDeployProvider;
 var init_deploy_provider = __esm({
   "../server/src/git/deploy-provider.ts"() {
     "use strict";
-    import_node_child_process14 = require("node:child_process");
+    import_node_child_process15 = require("node:child_process");
     import_node_util5 = require("node:util");
     init_remote_util();
-    execFile5 = (0, import_node_util5.promisify)(import_node_child_process14.execFile);
+    execFile5 = (0, import_node_util5.promisify)(import_node_child_process15.execFile);
     GhDeployProvider = class {
       constructor(opts = {}) {
         this.opts = opts;
@@ -206121,14 +206260,14 @@ function makeDefaultBranchResolver(opts) {
     }
   };
 }
-var import_node_child_process15, import_node_util6, execFile6;
+var import_node_child_process16, import_node_util6, execFile6;
 var init_default_branch = __esm({
   "../server/src/git/default-branch.ts"() {
     "use strict";
-    import_node_child_process15 = require("node:child_process");
+    import_node_child_process16 = require("node:child_process");
     import_node_util6 = require("node:util");
     init_remote_util();
-    execFile6 = (0, import_node_util6.promisify)(import_node_child_process15.execFile);
+    execFile6 = (0, import_node_util6.promisify)(import_node_child_process16.execFile);
   }
 });
@@ -207463,6 +207602,14 @@ var init_daemon_hub = __esm({
       sessionMeta = /* @__PURE__ */ new Map();
       sessionConnectListeners = [];
       sessionDisconnectListeners = [];
+      // ── ADR 0300 D2「日志复制」：帧号 + 累积 ackSeq + 幂等摄入 ────────────────────────────
+      // 只对自报 supportsFrameSeq 的会话生效；老会话这三张表始终为空、逐字走原 outbox 语义。
+      /** 自报支持帧号的 dispatchId。 */
+      frameSeqSupported = /* @__PURE__ */ new Set();
+      /** 每 dispatch 已按序摄入的最高节点帧号（累积水位）。跨重连保留、`session_exited` 后延迟清。 */
+      frameWatermark = /* @__PURE__ */ new Map();
+      /** 每 dispatch 上次回 ackSeq 的时刻——把流式期间的回执节流到 ~250ms 一次。 */
+      lastAckSeqAt = /* @__PURE__ */ new Map();
       /**
        * 「这次派发归谁管、现在什么状态」的认领口。**必须由 hub 汇总，不能各 adapter 自己判**——
        * serve 里同时有两个 DaemonHubAdapter（chat 一个、dispatch 一个），一次派发只属于其中一个。
@@ -207697,12 +207844,33 @@ var init_daemon_hub = __esm({
               for (const l of this.sessionConnectListeners) l({ dispatchId, sessionId: msg.sessionId, nodeId });
               void this.judgeSession(dispatchId, ws);
             }
+            if (msg.supportsFrameSeq) {
+              this.frameSeqSupported.add(dispatchId);
+              this.sendAckSeq(ws, dispatchId, true);
+            }
             return;
           }
           if (!registered) {
             ws.close(1008, "session_hello required first");
             return;
           }
+          if (this.frameSeqSupported.has(dispatchId)) {
+            const seq = typeof msg.seq === "number" ? msg.seq : void 0;
+            if (seq !== void 0) {
+              const wm = this.frameWatermark.get(dispatchId) ?? 0;
+              if (seq <= wm) {
+                this.sendAckSeq(ws, dispatchId, false);
+                return;
+              }
+              this.frameWatermark.set(dispatchId, seq);
+            }
+            for (const listener of this.messageListeners) listener(nodeId, msg);
+            this.onMessage?.(nodeId, msg);
+            const isExit = msg.type === "session_exited";
+            this.sendAckSeq(ws, dispatchId, isExit);
+            if (isExit) this.scheduleFrameStateCleanup(dispatchId);
+            return;
+          }
           for (const listener of this.messageListeners) listener(nodeId, msg);
           this.onMessage?.(nodeId, msg);
           if (msg.type === "session_exited" && ws.readyState === import_websocket.default.OPEN) {
@@ -207718,6 +207886,23 @@ var init_daemon_hub = __esm({
         });
         ws.on("error", (err) => console.error(`[hub] session ${dispatchId} error:`, err.message));
       }
+      /** ADR 0300 D2：回带当前摄入水位的累积回执。流式期间节流到 ~250ms 一次，hello / 收尾帧立即回。 */
+      sendAckSeq(ws, dispatchId, force) {
+        if (ws.readyState !== import_websocket.default.OPEN) return;
+        const now = Date.now();
+        if (!force && now - (this.lastAckSeqAt.get(dispatchId) ?? 0) < 250) return;
+        this.lastAckSeqAt.set(dispatchId, now);
+        ws.send(JSON.stringify({ type: "ack", dispatchId, ackSeq: this.frameWatermark.get(dispatchId) ?? 0 }));
+      }
+      /** `session_exited` 后延迟清帧号状态：给重连重放的收尾帧留一个去重窗口，之后回收避免无界增长。 */
+      scheduleFrameStateCleanup(dispatchId) {
+        const t = setTimeout(() => {
+          this.frameSeqSupported.delete(dispatchId);
+          this.frameWatermark.delete(dispatchId);
+          this.lastAckSeqAt.delete(dispatchId);
+        }, 6e4);
+        t.unref?.();
+      }
       /**
        * 注册一个认领判断。返回：
        *   live    —— 这次派发在我这儿还活着（别动它）
@@ -207830,6 +208015,22 @@ var init_daemon_hub = __esm({
       hasSession(dispatchId) {
         return this.sessionSockets.get(dispatchId)?.readyState === import_websocket.default.OPEN;
       }
+      /**
+       * 当前持有**活着数据面连接**的全部 dispatchId（ADR-0300 D8：hub 有活连接即认领）。
+       *
+       * orphan-sweep 的认领来源此前只有 dispatcher 在途表、chat 在途表、节点 hello、HTTP 活性——
+       * 独立会话进程（协调者、D2′ 后搬出 daemon 的会话）**不在这四者里**，但它们自己握着一根到 hub 的
+       * 数据面 WS。这些会话 `run.id === dispatchId`（协调者：`job.dispatchId = coordinate:*`），
+       * 于是「hub 此刻还连着它」就是最直接的判活。不接这条线，7 天里 183 条协调者会话被误判孤儿闭合
+       * （ADR-0300 证据 E）。只增不减：命中只能**阻止**误闭合，永不会导致误闭合。
+       */
+      liveSessionDispatchIds() {
+        const ids2 = /* @__PURE__ */ new Set();
+        for (const [dispatchId, ws] of this.sessionSockets) {
+          if (ws.readyState === import_websocket.default.OPEN) ids2.add(dispatchId);
+        }
+        return ids2;
+      }
       /** 往会话进程直投一帧（kill / append_input / ping）。返回是否写进了 OPEN 的 socket。 */
       sendToSession(dispatchId, msg) {
         const ws = this.sessionSockets.get(dispatchId);
@@ -214668,6 +214869,7 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
     if (!isOwnerRecipient && !isLeadRecipient) continue;
     const gaps = unresolvedGapsOf(model, a.id);
     const escalations = unresolvedEscalationsOf(model, a.id);
+    const representedEscalations = /* @__PURE__ */ new Set();
     const who = isOwnerRecipient ? "\uFF08\u4F60\u662F\u5DE5\u5355\u5F52\u5C5E\u4EBA\uFF09" : "\uFF08\u4F60\u662F\u5361\u4F4F\u8282\u70B9 owner \u7684\u4E0A\u7EA7\uFF09";
     for (const gap of gaps) {
       const byGapId = escalations.filter((entry) => entry.gapId === gap.gapId);
@@ -214681,6 +214883,7 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
       const exactEscalation = byGapId.at(-1) ?? (samePartGaps.length === 1 ? samePartEscalations.at(-1) : void 0) ?? (gaps.length === 1 ? partlessEscalations.at(-1) : void 0);
       const gapSince = exactEscalation?.at ?? gap.lastReportedAt ?? model.lastOpAt.get(a.id) ?? "";
       const gapReportCount = gap.reportCount ?? 1;
+      if (exactEscalation) representedEscalations.add(exactEscalation.escalationId);
       gapItems.push({
         kind: "gap-escalation",
         artifactId: a.id,
@@ -214709,8 +214912,8 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
         }
       });
     }
-    if (gaps.length === 0 && escalations.length > 0) {
-      for (const e of escalations) {
+    if (escalations.length > 0) {
+      for (const e of escalations.filter((e2) => !representedEscalations.has(e2.escalationId))) {
         gapItems.push({
           kind: "gap-escalation",
           artifactId: a.id,
@@ -214961,6 +215164,152 @@ var init_inbox = __esm({
   }
 });
+// ../server/src/domains/collab/escalation-attention.ts
+function escalationDeliveryConfig(env) {
+  const positive = (key, fallback) => {
+    if (!env[key]) return fallback;
+    const n = Number(env[key]);
+    if (!Number.isFinite(n) || n <= 0) throw new Error(`${key} must be a positive number`);
+    return n;
+  };
+  const policy = {
+    reminderMs: positive("OASIS_ESCALATION_REMINDER_MS", DEFAULT_ESCALATION_REMINDERS.reminderMs),
+    acknowledgedReminderMs: positive("OASIS_ESCALATION_ACK_REMINDER_MS", DEFAULT_ESCALATION_REMINDERS.acknowledgedReminderMs)
+  };
+  const webhooks = /* @__PURE__ */ new Map();
+  if (env.OASIS_ESCALATION_WEBHOOKS) {
+    try {
+      const entries = JSON.parse(env.OASIS_ESCALATION_WEBHOOKS);
+      if (!entries || Array.isArray(entries) || typeof entries !== "object") throw new Error();
+      for (const [companyId, endpoint] of Object.entries(entries)) {
+        const url = new URL(endpoint.url);
+        if (!companyId || !["https:", "http:"].includes(url.protocol) || url.username || url.password || endpoint.token !== void 0 && typeof endpoint.token !== "string") throw new Error();
+        webhooks.set(companyId, endpoint);
+      }
+    } catch {
+      throw new Error("OASIS_ESCALATION_WEBHOOKS must map company IDs to { url, token? } endpoints");
+    }
+  }
+  return { policy, webhooks };
+}
+function withEscalationAttention(items, companyId, markers, now, policy = DEFAULT_ESCALATION_REMINDERS) {
+  const byScope = new Map(markers.map((m2) => [m2.scope, m2.readAt]));
+  return items.map((item) => {
+    if (item.kind !== "gap-escalation" || !item.escalationId) return item;
+    const start = Date.parse(item.since);
+    if (!Number.isFinite(start)) return item;
+    const ackAt = byScope.get(escalationAttentionScope(companyId, item.escalationId, "ack"));
+    const ack = ackAt ? Date.parse(ackAt) : NaN;
+    const acknowledged = Number.isFinite(ack) && ack >= start;
+    const firstDue = acknowledged ? ack + policy.acknowledgedReminderMs : start;
+    const due = now >= firstDue;
+    const step = Math.max(0, Math.floor((now - firstDue) / policy.reminderMs));
+    const dueAt = new Date(firstDue + step * policy.reminderMs).toISOString();
+    const deliveredAt = byScope.get(escalationAttentionScope(companyId, item.escalationId, "webhook"));
+    return { ...item, attention: {
+      reminderKey: `${item.escalationId}:${dueAt}`,
+      dueAt,
+      needsAcknowledgement: due,
+      ...acknowledged ? { acknowledgedAt: ackAt } : {},
+      ...deliveredAt ? { deliveredAt } : {}
+    } };
+  });
+}
+async function sendEscalationWebhook(url, token, batch, item, deliveryId) {
+  const response = await fetch(url, {
+    method: "POST",
+    redirect: "error",
+    signal: AbortSignal.timeout(1e4),
+    headers: { "content-type": "application/json", ...token ? { authorization: `Bearer ${token}` } : {} },
+    body: JSON.stringify({ deliveryId, companyId: batch.companyId, recipientActorId: batch.actorId, item })
+  });
+  await response.body?.cancel();
+  if (!response.ok) throw new Error(`Delivery HTTP ${response.status}`);
+}
+var escalationAttentionScope, DEFAULT_ESCALATION_REMINDERS, EscalationDeliveryWorker;
+var init_escalation_attention = __esm({
+  "../server/src/domains/collab/escalation-attention.ts"() {
+    "use strict";
+    escalationAttentionScope = (companyId, issueId, kind) => `escalation-${kind}:${JSON.stringify([companyId, issueId])}`;
+    DEFAULT_ESCALATION_REMINDERS = {
+      reminderMs: 15 * 6e4,
+      acknowledgedReminderMs: 4 * 60 * 6e4
+    };
+    EscalationDeliveryWorker = class {
+      constructor(deps) {
+        this.deps = deps;
+      }
+      running = false;
+      stopped = false;
+      cursor = "";
+      /** Already-started transport is bounded by its timeout; do not start new deliveries during shutdown. */
+      stop() {
+        this.stopped = true;
+      }
+      async tick() {
+        if (this.running || this.stopped) return;
+        this.running = true;
+        try {
+          const pending = [];
+          let attempts = 0;
+          for (const batch of await this.deps.batches()) {
+            if (this.stopped) return;
+            const markers = await this.deps.markers.listMarkers(batch.actorId);
+            const items = withEscalationAttention(
+              batch.items,
+              batch.companyId,
+              markers,
+              (this.deps.now ?? Date.now)(),
+              this.deps.policy
+            );
+            for (const item of items) {
+              const attention2 = item.attention;
+              if (!item.escalationId || !attention2?.needsAcknowledgement) continue;
+              if (attention2.deliveredAt && Date.parse(attention2.deliveredAt) >= Date.parse(attention2.dueAt)) continue;
+              pending.push({ batch, item, key: JSON.stringify([batch.companyId, batch.actorId, item.escalationId]) });
+            }
+          }
+          pending.sort((a, b2) => a.key < b2.key ? -1 : a.key > b2.key ? 1 : 0);
+          const afterCursor = pending.findIndex((p2) => p2.key > this.cursor);
+          const start = afterCursor < 0 ? 0 : afterCursor;
+          for (let offset = 0; offset < pending.length; offset++) {
+            if (this.stopped) break;
+            if (attempts++ >= (this.deps.maxPerTick ?? 20)) break;
+            const { batch, item: queued, key } = pending[(start + offset) % pending.length];
+            this.cursor = key;
+            try {
+              const current = this.deps.currentItem ? await this.deps.currentItem(batch, queued.escalationId) : queued;
+              if (!current) continue;
+              const item = withEscalationAttention(
+                [current],
+                batch.companyId,
+                await this.deps.markers.listMarkers(batch.actorId),
+                (this.deps.now ?? Date.now)(),
+                this.deps.policy
+              )[0];
+              const attention2 = item.attention;
+              if (this.stopped || !attention2.needsAcknowledgement || attention2.deliveredAt && Date.parse(attention2.deliveredAt) >= Date.parse(attention2.dueAt)) continue;
+              const id = JSON.stringify([batch.companyId, batch.actorId, attention2.reminderKey]);
+              await this.deps.send(batch, item, id);
+              await this.deps.markers.markRead(
+                batch.actorId,
+                escalationAttentionScope(batch.companyId, item.escalationId, "webhook"),
+                attention2.dueAt
+              );
+            } catch {
+              this.deps.log(`[escalation-delivery] delivery failed; retained for retry (${key})`);
+            }
+          }
+        } catch {
+          this.deps.log("[escalation-delivery] scan failed; will retry");
+        } finally {
+          this.running = false;
+        }
+      }
+    };
+  }
+});
 // ../server/src/domains/collab/inbox-chat.ts
 function mergeInbox(kernelItems, chatItems) {
   if (chatItems.length === 0) return kernelItems;
@@ -216408,7 +216757,23 @@ function collabDomain(opts) {
         const { reviews, works } = collectWaitingRows(snaps, me, policy);
         waitingItems = buildWaitingInbox(reviews, works, policy, (/* @__PURE__ */ new Date()).toISOString(), me);
       }
-      return { status: 200, body: { items: mergeInbox(kernelItems, [...chatItems, ...waitingItems]) } };
+      const items = mergeInbox(kernelItems, [...chatItems, ...waitingItems]);
+      return { status: 200, body: { items: opts.readMarkers ? withEscalationAttention(items, req.auth.companyId ?? opts.defaultCompanyId ?? "", markers, Date.now(), opts.escalationReminders) : items } };
+    });
+    router.post("/api/inbox/escalations/:id/acknowledge", async (req) => {
+      if (!opts.readMarkers) return { status: 503, body: { error: { code: "not_configured", message: "\u63A5\u624B\u8BB0\u5F55\u672A\u88C5\u914D" } } };
+      const { kernel, registry: registry2 } = await resolveCtx(req.auth.companyId);
+      await kernel.refreshModel?.();
+      const leadOf = await buildLeadResolver(registry2);
+      const item = buildInbox(kernel.model, req.auth.actor, leadOf).find((i) => i.escalationId === req.params.id);
+      if (!item?.escalationId) return { status: 404, body: { error: { code: "not_found", message: "\u5F85\u529E\u4E0D\u5B58\u5728\u6216\u4E0D\u5C5E\u4E8E\u4F60" } } };
+      const acknowledgedAt = (/* @__PURE__ */ new Date()).toISOString();
+      await opts.readMarkers.markRead(
+        req.auth.actor,
+        escalationAttentionScope(req.auth.companyId ?? opts.defaultCompanyId ?? "", item.escalationId, "ack"),
+        acknowledgedAt
+      );
+      return { status: 200, body: { acknowledgedAt } };
     });
     const companyOf = (req) => req.auth.companyId ?? "company:default";
     const noTagStore = { status: 501, body: { error: { code: "not_implemented", message: "\u672C\u90E8\u7F72\u672A\u542F\u7528\u5DE5\u5355\u6807\u7B7E" } } };
@@ -216647,6 +217012,7 @@ var init_collab = __esm({
     init_workorders();
     init_workorder_detail();
     init_inbox();
+    init_escalation_attention();
     init_inbox_chat();
     init_waiting_inbox();
     init_src3();
@@ -216660,6 +217026,7 @@ var init_collab = __esm({
     init_workorder_detail();
     init_workorder_metrics();
     init_inbox();
+    init_escalation_attention();
     init_letter_read_backfill();
     init_audit();
     init_dashboard();
@@ -216686,7 +217053,7 @@ function prepareReadonlyGitBundles(input) {
   if (repos.length === 0) return null;
   const targets = collectTargets(repos, input.pinnedRevisions);
   if (targets.length === 0) return null;
-  const bundleRoot = input.bundleRoot ?? os6.tmpdir();
+  const bundleRoot = input.bundleRoot ?? os7.tmpdir();
   fs23.mkdirSync(bundleRoot, { recursive: true });
   const root = fs23.mkdtempSync(path24.join(bundleRoot, "oasis-git-bundles-"));
   const files = {};
@@ -216833,7 +217200,7 @@ function createBundle(root, target, input) {
 function verifyBundleReadable(dir, bundlePath, _bundleRef, commit, expectedTree, env) {
   fs23.rmSync(dir, { recursive: true, force: true });
   try {
-    (0, import_node_child_process16.execFileSync)("git", ["clone", bundlePath, dir], { stdio: "ignore", ...env ? { env } : {} });
+    (0, import_node_child_process17.execFileSync)("git", ["clone", bundlePath, dir], { stdio: "ignore", ...env ? { env } : {} });
     git2(dir, ["cat-file", "-e", `${commit}^{commit}`], env, "COMMIT_NOT_FOUND");
     const head = git2(dir, ["rev-parse", "HEAD"], env, "COMMIT_NOT_FOUND").trim();
     if (head.toLowerCase() !== commit.toLowerCase()) {
@@ -216875,11 +217242,11 @@ function ensureSourceRepo(work, repo, commit, env) {
 function gitInitBare(dir, env) {
   if (fs23.existsSync(path24.join(dir, "objects"))) return;
   fs23.mkdirSync(dir, { recursive: true });
-  (0, import_node_child_process16.execFileSync)("git", ["init", "--bare", dir], { stdio: "ignore", ...env ? { env } : {} });
+  (0, import_node_child_process17.execFileSync)("git", ["init", "--bare", dir], { stdio: "ignore", ...env ? { env } : {} });
 }
 function git2(cwd, args, env, fallback, timeout) {
   try {
-    return (0, import_node_child_process16.execFileSync)("git", ["-C", cwd, ...args], {
+    return (0, import_node_child_process17.execFileSync)("git", ["-C", cwd, ...args], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"],
       ...timeout ? { timeout } : {},
@@ -216903,14 +217270,14 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process16, import_node_crypto45, fs23, os6, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto45, fs23, os7, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
-    import_node_child_process16 = require("node:child_process");
+    import_node_child_process17 = require("node:child_process");
     import_node_crypto45 = require("node:crypto");
     fs23 = __toESM(require("node:fs"), 1);
-    os6 = __toESM(require("node:os"), 1);
+    os7 = __toESM(require("node:os"), 1);
     path24 = __toESM(require("node:path"), 1);
     init_remote_util();
     GitReadonlyBundleError = class extends Error {
@@ -219417,7 +219784,9 @@ function createChatSessionsDomain(opts) {
     router.get("/api/chat-sessions/:id/turns/active", async (req) => {
       if (!opts.chatTurns) throw new ApiError(404, "NOT_FOUND", "\u672C\u5B9E\u4F8B\u672A\u63A5\u4F1A\u8BDD\u8F6E\u6B21\u8D26\u672C");
       const session = await store.getSession(req.params.id);
-      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      if (!session || session.humanActorId !== req.auth.actor && session.aiActorId !== req.auth.actor) {
+        throw new ApiError(404, "NOT_FOUND", "session not found");
+      }
       const turn = await opts.chatTurns.activeTurn(req.params.id);
       return { status: 200, body: { turn } };
     });
@@ -224127,11 +224496,11 @@ var init_engine = __esm({
       constructor(table = /* @__PURE__ */ new Map()) {
         this.table = table;
       }
-      set(platform, platformUserId, actor) {
-        this.table.set(`${platform}:${platformUserId}`, actor);
+      set(platform2, platformUserId, actor) {
+        this.table.set(`${platform2}:${platformUserId}`, actor);
       }
-      resolve(platform, platformUserId) {
-        return this.table.get(`${platform}:${platformUserId}`) ?? null;
+      resolve(platform2, platformUserId) {
+        return this.table.get(`${platform2}:${platformUserId}`) ?? null;
       }
     };
   }
@@ -224670,7 +225039,7 @@ ${HIGH_RISK_COMMANDS}`;
         const downstreams = consumersOf(m2, p2.id).map((a) => a.id);
         const task = [
           `## \u672C\u6B21\u4E3A\u4EC0\u4E48\u5524\u8D77\u4F60`,
-          `\u8282\u70B9 **${p2.id}**${brief ? `\uFF08${brief}\uFF09` : ""} \u5DF2\u963B\u585E\u7EA6 **${mins} \u5206\u949F**\u6CA1\u8FDB\u5C55\u3002\u7CFB\u7EDF\u5DF2\u673A\u68B0\u8BCA\u65AD\u3001\u786E\u8BA4**\u8FD9\u662F\u56FE\u75C5\u6216\u673A\u68B0\u5B9A\u4F4D\u4E0D\u5230\u7684\u6B8B\u5DEE**\uFF08\u8D44\u6E90 / \u4EBA / \u8FD0\u884C\u65F6\u7C7B\u75C5\u56E0\u5DF2\u6392\u9664\uFF09\u3002`,
+          `\u8282\u70B9 **${p2.id}**${brief ? `\uFF08${brief}\uFF09` : ""} \u5DF2\u963B\u585E\u7EA6 **${mins} \u5206\u949F**\u6CA1\u8FDB\u5C55\u3002\u673A\u68B0\u8BCA\u65AD\u5C06\u5176\u5F52\u5165**\u56FE\u75C5\u6216\u5C1A\u672A\u5B9A\u4F4D\u7684\u6B8B\u5DEE**\u3002\u672A\u53D1\u73B0\u5DF2\u77E5\u8FD0\u884C\u65F6\u4FE1\u53F7\u4E0D\u7B49\u4E8E\u6392\u9664\u4E86\u8FD0\u884C\u65F6\u6545\u969C\uFF1B\u6CA1\u6709\u5728\u8DD1\u4F1A\u8BDD\u65F6\uFF0C\u8BF7\u5148\u6838\u5BF9\u7ED1\u5B9A\u3001\u8282\u70B9\u6CE8\u518C\u72B6\u6001\u548C\u6D3E\u53D1\u9001\u8FBE\u60C5\u51B5\uFF0C\u518D\u51B3\u5B9A\u662F\u5426\u6539\u56FE\u3002`,
           ``,
           `## \u75C5\u5386\uFF08\u673A\u68B0\u8BCA\u65AD\uFF1B\u5148\u8BFB\u8FD9\u4E2A\uFF09`,
           caseFile,
@@ -225801,6 +226170,7 @@ var init_src10 = __esm({
     init_orphan_sweep();
     init_dispatch_drop_sweep();
     init_dispatch_mapping_rebuild();
+    init_dispatch_binding_diagnosis();
     init_zero_output_breaker();
     init_dispatch_exit_reconcile();
     init_session_exit_outcome();
@@ -225839,6 +226209,7 @@ var init_src10 = __esm({
     init_node_store();
     init_tokens();
     init_collab();
+    init_collab();
     init_closure_report();
     init_workorders();
     init_workorder_detail();
@@ -233741,22 +234112,22 @@ var init_trajectory = __esm({
 // src/index.ts
 var fs42 = __toESM(require("node:fs"));
-var os13 = __toESM(require("node:os"));
+var os14 = __toESM(require("node:os"));
 var path39 = __toESM(require("node:path"));
-var import_node_child_process22 = require("node:child_process");
+var import_node_child_process23 = require("node:child_process");
 var import_node_crypto66 = require("node:crypto");
 // ../cli/src/cli.ts
 var fs37 = __toESM(require("node:fs"), 1);
-var os11 = __toESM(require("node:os"), 1);
+var os12 = __toESM(require("node:os"), 1);
 var path34 = __toESM(require("node:path"), 1);
 var import_node_crypto64 = require("node:crypto");
 // ../cli/src/serve.ts
 var fs31 = __toESM(require("node:fs"), 1);
-var os7 = __toESM(require("node:os"), 1);
+var os8 = __toESM(require("node:os"), 1);
 var path28 = __toESM(require("node:path"), 1);
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var import_node_crypto60 = require("node:crypto");
 var import_node_url7 = require("node:url");
@@ -234333,8 +234704,10 @@ var SESSION_TOKEN_GRACE_MS = 15 * 6e4;
 function makeResumeRetryProxy(first, spawnFallback) {
   const outCbs = [];
   const telCbs = [];
+  const liveCbs = [];
   const outBuf = [];
   const telBuf = [];
+  const liveBuf = [];
   let sawOutput = false;
   let active = first;
   const fanOut = (chunk) => {
@@ -234345,12 +234718,17 @@ function makeResumeRetryProxy(first, spawnFallback) {
     if (telCbs.length) for (const cb of telCbs) cb(e);
     else telBuf.push(e);
   };
+  const fanLive = (e) => {
+    if (liveCbs.length) for (const cb of liveCbs) cb(e);
+    else liveBuf.push(e);
+  };
   const wire = (s2) => {
     s2.onOutput((c) => {
       sawOutput = true;
       fanOut(c);
     });
     s2.onTelemetry?.((e) => fanTel(e));
+    s2.onLiveEvent?.((e) => fanLive(e));
   };
   wire(first);
   const isSessionNotFound2 = (err) => {
@@ -234382,6 +234760,10 @@ function makeResumeRetryProxy(first, spawnFallback) {
       for (const e of telBuf.splice(0)) cb(e);
       telCbs.push(cb);
     },
+    onLiveEvent(cb) {
+      for (const e of liveBuf.splice(0)) cb(e);
+      liveCbs.push(cb);
+    },
     done,
     kill: () => active.kill?.() ?? Promise.resolve(),
     // ADR-0093 chat 道：插入能力必须穿过这层代理，否则「带 sessionId 的 resume」这条**常路径**
@@ -234392,6 +234774,11 @@ function makeResumeRetryProxy(first, spawnFallback) {
     get canAppendInput() {
       return active.canAppendInput !== false && typeof active.appendInput === "function";
     },
+    // supportsLiveProtocol 恒读 active（兜底重派后 active 换成 second）：不能按 first 快照，否则回退会话的
+    // 能力位会指向已死的首次尝试。
+    get supportsLiveProtocol() {
+      return active.supportsLiveProtocol === true;
+    },
     get nativeSessionId() {
       return active.nativeSessionId;
     }
@@ -234452,15 +234839,15 @@ function oasisWrapperScript() {
   const main = path28.join(repoRoot, "packages/cli/src/main.ts");
   const key = (0, import_node_crypto60.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
-  const stable = path28.join(os7.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
+  const stable = path28.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
   let dir;
   try {
     fs31.mkdirSync(stable, { recursive: true, mode: 448 });
     const st = fs31.lstatSync(stable);
     const mine = st.isDirectory() && !st.isSymbolicLink() && (typeof process.getuid !== "function" || st.uid === process.getuid());
-    dir = mine ? stable : fs31.mkdtempSync(path28.join(os7.tmpdir(), "oasis-cli-"));
+    dir = mine ? stable : fs31.mkdtempSync(path28.join(os8.tmpdir(), "oasis-cli-"));
   } catch {
-    dir = fs31.mkdtempSync(path28.join(os7.tmpdir(), "oasis-cli-"));
+    dir = fs31.mkdtempSync(path28.join(os8.tmpdir(), "oasis-cli-"));
   }
   const wrapper = path28.join(dir, "oasis");
   fs31.writeFileSync(wrapper, `#!/usr/bin/env bash
@@ -234538,7 +234925,7 @@ async function runDeterministicKnowledgeLint(service, config2) {
     if (!wrapper) throw new Error(`\u8FDE\u63A5\u5668 ${config2.connectorSlug} \u5C1A\u672A\u914D\u7F6E\u6216 wrapper \u4E0D\u53EF\u7528`);
     const args = [...connector.knowledgeLintArgs({ libraryRef: config2.libraryRef, rootRef: config2.rootRef })];
     const result = await new Promise((resolveResult) => {
-      (0, import_node_child_process17.execFile)(wrapper, args, {
+      (0, import_node_child_process18.execFile)(wrapper, args, {
         env: { ...process.env, ...provision.env },
         timeout: 12e4,
         maxBuffer: 10 * 1024 * 1024
@@ -234808,7 +235195,7 @@ async function startServe(opts) {
   );
   const issuer = createTokenIssuer({ secretFile: path28.join(opts.dir, "session-token-secret") });
   const apiActivity = createApiActivityLedger();
-  const operatorActor = `actor:human:${os7.userInfo().username}`;
+  const operatorActor = `actor:human:${os8.userInfo().username}`;
   const operatorToken = issuer.issue(operatorActor);
   fs31.writeFileSync(path28.join(opts.dir, "operator-token"), operatorToken, { mode: 384 });
   let nodeTokens = createNodeTokenStore(path28.join(opts.dir, "node-tokens.json"));
@@ -234929,6 +235316,7 @@ async function startServe(opts) {
   let chatSessionStore;
   let chatTurnStore;
   let readMarkerStore;
+  const escalationDelivery = escalationDeliveryConfig(process.env);
   if (pgDsn && pgPool) {
     projectStateStore = await PostgresProjectStateStore.open(pgPool, pgSchema);
     artifactStateStore = await PostgresArtifactStateStore.open(pgPool, pgSchema);
@@ -235963,6 +236351,8 @@ async function startServe(opts) {
         chatSession: chatSessionStore,
         // ADR-0086：chat 知会条目（与 readMarkers 成对）
         readMarkers: readMarkerStore,
+        escalationReminders: escalationDelivery.policy,
+        defaultCompanyId,
         // 工单标签词表（组织级受控、旁账，与 playbook-overrides 同款侧存）。
         tags: workorderTagStore,
         ...opts.sla ? { sla: opts.sla } : {},
@@ -237504,6 +237894,8 @@ async function startServe(opts) {
             ledgerWarn("cancel(map-miss)")(err);
           }
         },
+        // Inbox is the notification contract (ADR 0090). Escalation delivery reconciles persisted Inbox
+        // items below; it must not depend on this one-shot effect or its legacy recipient list.
         async notify(_actorIds, _payload) {
         }
       };
@@ -237524,6 +237916,14 @@ async function startServe(opts) {
                 return live;
               },
               isAgent: async (actorId) => await executorKindOf(actorId) === "agent",
+              beforeRedispatch: async (work) => {
+                return prepareDroppedDispatch(work, {
+                  kernel: newKernel,
+                  // This sweep belongs to the default engine; legacy workorder.companyId is often empty.
+                  bindingFor: async (actorId) => (await actors.resolveCtx(defaultCompanyId)).service.resolveBinding()(actorId),
+                  nodeFor: (nodeId) => nodeStore.getNode(nodeId)
+                });
+              },
               // resumeEligible=false：补派一律起**全新会话**。引擎那次派发的取值是节点状态的函数
               //（activate.ts：`latestAcceptId == null && !lastProposedRejected`），本模块拿不到，
               // 而两个方向的代价不对称——该续没续只是少一点上下文，不该续却续了就把返工要隔离的
@@ -238371,7 +238771,45 @@ async function startServe(opts) {
     return { fused, starving, stuck, recovered };
   }
   const slaEscalating = /* @__PURE__ */ new Set();
+  const escalationDeliveryWorker = new EscalationDeliveryWorker({
+    markers: readMarkerStore,
+    policy: escalationDelivery.policy,
+    batches: async () => {
+      const batches = [];
+      for (const companyId of escalationDelivery.webhooks.keys()) {
+        const companyEngine = await getEngine(companyId);
+        await companyEngine.kernel.refreshModel();
+        const leadOf2 = await buildLeadResolver(companyEngine.registry);
+        const recipients = /* @__PURE__ */ new Set();
+        for (const node2 of companyEngine.kernel.model.artifacts.values()) {
+          recipients.add(node2.owner);
+          const lead = leadOf2?.(node2.owner);
+          if (lead) recipients.add(lead);
+        }
+        for (const actorId of recipients) {
+          const items = buildInbox(companyEngine.kernel.model, actorId, leadOf2).filter((item) => item.escalationId && item.artifactId && lifecycleOf(companyEngine.kernel.model, item.artifactId) === "active");
+          if (items.length) batches.push({ companyId, actorId, items });
+        }
+      }
+      return batches;
+    },
+    currentItem: async (batch, issueId) => {
+      const companyEngine = await getEngine(batch.companyId);
+      await companyEngine.kernel.refreshModel();
+      const leadOf2 = await buildLeadResolver(companyEngine.registry);
+      return buildInbox(companyEngine.kernel.model, batch.actorId, leadOf2).find((item) => item.escalationId === issueId && item.artifactId && lifecycleOf(companyEngine.kernel.model, item.artifactId) === "active");
+    },
+    send: async (batch, item, deliveryId) => {
+      const endpoint = escalationDelivery.webhooks.get(batch.companyId);
+      await sendEscalationWebhook(endpoint.url, endpoint.token, batch, item, deliveryId);
+    },
+    log: (message) => console.warn(message)
+  });
+  if (!escalationDelivery.webhooks.size) {
+    console.warn("[escalation-delivery] \u7AD9\u5916\u6E20\u9053\u672A\u914D\u7F6E\uFF1A\u5347\u7EA7\u5C06\u901A\u8FC7 Inbox \u5F39\u7A97\u548C\u50AC\u529E\u63D0\u9192\uFF1B\u6D4F\u89C8\u5668\u5173\u95ED\u65F6\u65E0\u6CD5\u7AD9\u5916\u9001\u8FBE\u3002\u914D\u7F6E OASIS_ESCALATION_WEBHOOKS \u53EF\u63A5\u90AE\u4EF6/IM \u7F51\u5173\u3002");
+  }
   const slaTimer = setInterval(() => {
+    void escalationDeliveryWorker.tick();
     void (async () => {
       const now = Date.now();
       for (const a of kernel.model.artifacts.values()) {
@@ -238683,6 +239121,7 @@ ${nodeFault}` : "");
         for (const c of chatLiveSessions.values()) ids2.add(c.sessionId);
         return ids2;
       };
+      const liveSessionRunIds = () => hub?.liveSessionDispatchIds() ?? /* @__PURE__ */ new Set();
       const aliveArtifactIds = () => {
         const ids2 = /* @__PURE__ */ new Set();
         for (const d of hub?.connectedDaemons() ?? []) {
@@ -238713,6 +239152,8 @@ ${nodeFault}` : "");
           aliveArtifactIds,
           apiActiveDispatchIds,
           // D1（ADR-0078）：判活第二条线
+          liveSessionRunIds,
+          // ADR-0300 D8：hub 活数据面连接（协调者/独立会话进程）
           closeRun,
           now: Date.now(),
           orphanGraceMs,
@@ -238892,6 +239333,7 @@ ${nodeFault}` : "");
     close: async () => {
       for (const timer of dispatchTimers) clearInterval(timer);
       clearInterval(slaTimer);
+      escalationDeliveryWorker.stop();
       if (mirrorTimer) clearInterval(mirrorTimer);
       if (gitTimer) clearInterval(gitTimer);
       if (coordTimer) clearInterval(coordTimer);
@@ -238991,7 +239433,7 @@ function log2(tag, msg, extra) {
 }
 // ../cli/src/daemon/session-lock.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var fs32 = __toESM(require("node:fs"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var flockAvailable = null;
@@ -238999,7 +239441,7 @@ function hasFlock() {
   if (flockAvailable !== null) return flockAvailable;
   if (process.platform !== "linux") return flockAvailable = false;
   try {
-    const r = (0, import_node_child_process18.spawnSync)("flock", ["--version"], { stdio: "ignore", timeout: 3e3 });
+    const r = (0, import_node_child_process19.spawnSync)("flock", ["--version"], { stdio: "ignore", timeout: 3e3 });
     flockAvailable = r.status === 0;
   } catch {
     flockAvailable = false;
@@ -239014,7 +239456,7 @@ function acquireSessionLock(lockPath) {
     fs32.unlinkSync(readyFile);
   } catch {
   }
-  const child = (0, import_node_child_process18.spawn)("flock", ["-n", lockPath, "-c", `printf ok > '${readyFile}'; exec cat`], {
+  const child = (0, import_node_child_process19.spawn)("flock", ["-n", lockPath, "-c", `printf ok > '${readyFile}'; exec cat`], {
     stdio: ["pipe", "ignore", "ignore"],
     detached: true
   });
@@ -239025,7 +239467,7 @@ function acquireSessionLock(lockPath) {
       ready = true;
       break;
     }
-    (0, import_node_child_process18.spawnSync)("sleep", ["0.02"], { stdio: "ignore" });
+    (0, import_node_child_process19.spawnSync)("sleep", ["0.02"], { stdio: "ignore" });
   }
   try {
     fs32.unlinkSync(readyFile);
@@ -239056,7 +239498,7 @@ function isSessionLocked(lockPath) {
   if (!hasFlock()) return false;
   if (!fs32.existsSync(lockPath)) return false;
   try {
-    const r = (0, import_node_child_process18.spawnSync)("flock", ["-n", lockPath, "-c", "true"], { stdio: "ignore", timeout: 3e3 });
+    const r = (0, import_node_child_process19.spawnSync)("flock", ["-n", lockPath, "-c", "true"], { stdio: "ignore", timeout: 3e3 });
     return r.status !== 0;
   } catch {
     return true;
@@ -239131,7 +239573,10 @@ async function runSession(dispatchId, job, deps) {
 var RECONNECT_MIN_MS = 1e3;
 var RECONNECT_MAX_MS = 3e4;
 var EXIT_ACK_WAIT_MS = LINK_WINDOWS.exitAckWaitMs;
+var OUTBOX_MAX_FRAMES = 8e3;
+var isKeyFrame = (m2) => m2.type === "session_started" || m2.type === "session_exited";
 async function runSessionProcess(specFile, adapter) {
+  process.env["OASIS_BIND_RUNTIME_PDEATHSIG"] = "1";
   const spec = readSpec(specFile);
   const { dispatchId, job, auth, sessionDir } = spec;
   const lock = acquireSessionLock(path30.join(sessionDir, "lock"));
@@ -239185,6 +239630,10 @@ var SessionProcessState = class {
    * 而会话其实正在跑。
    */
   outbox = [];
+  /** ADR 0300 D2：每 dispatch 单调帧号，任何副作用之前分配。 */
+  frameSeq = 0;
+  /** 收到过带 `ackSeq` 的 ack = 本服务端会按帧号去重；只有它为真，重连才敢重放**全部**帧（含输出）。 */
+  serverSupportsDedup = false;
   /** append_input 串行链——保证回帧次序 = 到达次序（server 侧按 FIFO 认领等待者）。 */
   appendChain = Promise.resolve();
   async run() {
@@ -239250,9 +239699,12 @@ var SessionProcessState = class {
         daemonVersion: this.spec.daemonVersion,
         // 自报身份要够服务端对上账：chat 道的对账键是 artifactId（run.id=chat-run:* ≠ dispatchId），
         // 只报 dispatchId 的话 serve 重启后它认不出这是条活会话，会当成野进程 evict 掉。
-        ...this.spec.job.artifactId ? { jobArtifactId: this.spec.job.artifactId } : {}
+        ...this.spec.job.artifactId ? { jobArtifactId: this.spec.job.artifactId } : {},
+        // ADR 0300 D2：自报支持帧号；新服务端据此回带 ackSeq 的 hello-ack，届时才把 serverSupportsDedup 置真。
+        supportsFrameSeq: true
       });
-      for (const m2 of this.outbox) this.rawSend(m2);
+      const toResend = this.serverSupportsDedup ? this.outbox : this.outbox.filter(isKeyFrame);
+      for (const m2 of toResend) this.rawSend(m2);
     });
     ws.on("message", (raw) => {
       let msg;
@@ -239300,8 +239752,14 @@ var SessionProcessState = class {
       }
       case "ack":
         if (msg.dispatchId !== this.spec.dispatchId) return;
-        this.outbox.length = 0;
-        this.exitAckResolve?.();
+        if (typeof msg.ackSeq === "number") {
+          this.serverSupportsDedup = true;
+          const wm = msg.ackSeq;
+          this.outbox = this.outbox.filter((f2) => (f2.seq ?? 0) > wm);
+        } else {
+          this.outbox.length = 0;
+        }
+        if (this.outbox.length === 0) this.exitAckResolve?.();
         return;
       case "ping":
         this.rawSend({ type: "pong" });
@@ -239316,14 +239774,20 @@ var SessionProcessState = class {
     this.ws.send(JSON.stringify(msg));
     return true;
   }
-  /** 必达：先进 outbox 再尽力发；ack 到达才清。 */
+  /** ADR 0300 D2：给帧派单调 seq、进 outbox（超上限丢最老）、再尽力发。返回带 seq 的帧。 */
+  stampAndBuffer(msg) {
+    const framed = { ...msg, seq: ++this.frameSeq };
+    this.outbox.push(framed);
+    if (this.outbox.length > OUTBOX_MAX_FRAMES) this.outbox.splice(0, this.outbox.length - OUTBOX_MAX_FRAMES);
+    return framed;
+  }
+  /** 关键帧（started/exited）：必达，进 outbox，ack 到达（按 ackSeq 或整清）才删。 */
   sendKeyFrame(msg) {
-    this.outbox.push(msg);
-    this.rawSend(msg);
+    this.rawSend(this.stampAndBuffer(msg));
   }
-  /** 可丢：连着就发，断着就算了。输出流不值得为它攒内存——真需要补的是必达帧。 */
+  /** 输出/事件帧：ADR 0300 D2 起也进 outbox 带 seq——断线期不再丢；服务端按 ackSeq 累积回执后即从 outbox 排掉。 */
   sendStream(msg) {
-    this.rawSend(msg);
+    this.rawSend(this.stampAndBuffer(msg));
   }
   // ── 看门狗（D2′.5 防线 3 + 防线 1 后半）──────────────────────────────────
   startWatchdog() {
@@ -239348,7 +239812,7 @@ var SessionProcessState = class {
       await this.handle?.kill();
     } catch {
     }
-    this.rawSend({
+    this.sendKeyFrame({
       type: "session_exited",
       dispatchId: this.spec.dispatchId,
       sessionId: this.handle?.id ?? this.spec.dispatchId,
@@ -239395,7 +239859,7 @@ init_src8();
 init_src7();
 // ../cli/src/daemon/detect-adapters.ts
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 init_src7();
 var KNOWN2 = [
   { adapter: "claude-code", binary: "claude" },
@@ -239419,7 +239883,7 @@ var LIVE_PROTOCOL_RUNTIMES = /* @__PURE__ */ new Set(["claude-code"]);
 function resolveOnPath2(binary) {
   try {
     const cmd = process.platform === "win32" ? "where" : "which";
-    const out = (0, import_node_child_process19.execFileSync)(cmd, [binary], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    const out = (0, import_node_child_process20.execFileSync)(cmd, [binary], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     const first = out.split("\n")[0]?.trim();
     return first || binary;
   } catch {
@@ -239428,7 +239892,7 @@ function resolveOnPath2(binary) {
 }
 function versionOf(binary) {
   try {
-    return (0, import_node_child_process19.execFileSync)(binary, ["--version"], {
+    return (0, import_node_child_process20.execFileSync)(binary, ["--version"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 1500
@@ -240384,7 +240848,7 @@ async function startNode(opts) {
 }
 // ../cli/src/exec.ts
-var os10 = __toESM(require("node:os"), 1);
+var os11 = __toESM(require("node:os"), 1);
 var UnsafeExecArgvError = class extends Error {
   code = "ERR_UNSAFE_EXEC_ARGV";
   constructor(message) {
@@ -240421,7 +240885,7 @@ function planExec(opts) {
 function computeExitCode(code2, signal) {
   if (code2 !== null) return code2;
   if (signal) {
-    const num2 = os10.constants.signals[signal];
+    const num2 = os11.constants.signals[signal];
     return 128 + (typeof num2 === "number" ? num2 : 1);
   }
   return 1;
@@ -240445,7 +240909,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 }
 // ../cli/src/daemon/machine-id.ts
-var import_node_child_process20 = require("node:child_process");
+var import_node_child_process21 = require("node:child_process");
 var import_node_fs20 = require("node:fs");
 var import_node_crypto62 = require("node:crypto");
 var import_node_os12 = require("node:os");
@@ -240461,7 +240925,7 @@ function linuxMachineId() {
 }
 function macMachineId() {
   try {
-    const out = (0, import_node_child_process20.execFileSync)("ioreg", ["-rd1", "-c", "IOPlatformExpertDevice"], {
+    const out = (0, import_node_child_process21.execFileSync)("ioreg", ["-rd1", "-c", "IOPlatformExpertDevice"], {
       encoding: "utf8",
       timeout: 2e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -240474,7 +240938,7 @@ function macMachineId() {
 }
 function windowsMachineId() {
   try {
-    const out = (0, import_node_child_process20.execFileSync)("reg", [
+    const out = (0, import_node_child_process21.execFileSync)("reg", [
       "query",
       "HKLM\\SOFTWARE\\Microsoft\\Cryptography",
       "/v",
@@ -242184,7 +242648,7 @@ function ownFlagsFromDecl(command) {
 // ../cli/src/connector-effect-runner.ts
 var import_node_crypto63 = require("node:crypto");
-var import_node_child_process21 = require("node:child_process");
+var import_node_child_process22 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
@@ -242243,7 +242707,7 @@ function productionApi() {
 }
 function execute(bin, args) {
   return new Promise((resolve10, reject) => {
-    const child = (0, import_node_child_process21.spawn)(bin, args, { stdio: "inherit", env: process.env });
+    const child = (0, import_node_child_process22.spawn)(bin, args, { stdio: "inherit", env: process.env });
     child.once("error", reject);
     child.once("exit", (code2, signal) => resolve10(code2 ?? (signal ? 128 : 1)));
   });
@@ -242673,7 +243137,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const res = await fetch(`${httpBase2}/api/nodes/exchange`, {
         method: "POST",
         headers: { "content-type": "application/json" },
-        body: JSON.stringify({ enrollToken, nodeId, hostname: os11.hostname() })
+        body: JSON.stringify({ enrollToken, nodeId, hostname: os12.hostname() })
       });
       if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
       const body2 = await res.json();
@@ -242706,7 +243170,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const binPath = path34.join(prefix, "bin", "oasis_test");
       const svcArgs = `node --server-ws ${serverUrl} --dir ${dir}${nodeName ? ` --name ${nodeName}` : ""}`;
       if (process.platform === "linux") {
-        const svcFile = path34.join(os11.homedir(), ".config/systemd/user/oasis-node.service");
+        const svcFile = path34.join(os12.homedir(), ".config/systemd/user/oasis-node.service");
         fs37.mkdirSync(path34.dirname(svcFile), { recursive: true });
         if (spawnSync3("systemctl", ["--user", "is-active", "--quiet", "oasis-node"], {}).status === 0)
           spawnSync3("systemctl", ["--user", "stop", "oasis-node"], { stdio: "inherit" });
@@ -242719,7 +243183,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
           `ExecStart=${binPath} ${svcArgs}`,
           // Carry the install-time PATH so the detached daemon detects CLIs in user dirs
           // (~/.npm-global/bin, ~/.local/bin) — systemd --user otherwise gives a minimal PATH.
-          `Environment=PATH=${process.env["PATH"] ?? ""}:${path34.join(os11.homedir(), ".npm-global/bin")}:${path34.join(os11.homedir(), ".local/bin")}:/usr/local/bin`,
+          `Environment=PATH=${process.env["PATH"] ?? ""}:${path34.join(os12.homedir(), ".npm-global/bin")}:${path34.join(os12.homedir(), ".local/bin")}:/usr/local/bin`,
           "Restart=on-failure",
           "RestartSec=5",
           "StandardOutput=journal",
@@ -242731,23 +243195,23 @@ async function runCli(argv, println = console.log, progressln = console.error) {
         ].join("\n"));
         spawnSync3("systemctl", ["--user", "daemon-reload"], { stdio: "inherit" });
         spawnSync3("systemctl", ["--user", "enable", "--now", "oasis-node"], { stdio: "inherit" });
-        spawnSync3("loginctl", ["enable-linger", os11.userInfo().username], { stdio: "ignore" });
+        spawnSync3("loginctl", ["enable-linger", os12.userInfo().username], { stdio: "ignore" });
         println("\u2713 Oasis node service started (systemd --user oasis-node)");
         println("  Status : systemctl --user status oasis-node");
         println("  Logs   : journalctl --user -u oasis-node -f");
         println("  Stop   : systemctl --user stop oasis-node");
       } else if (process.platform === "darwin") {
-        const plist = path34.join(os11.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
+        const plist = path34.join(os12.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
         fs37.mkdirSync(path34.dirname(plist), { recursive: true });
         spawnSync3("launchctl", ["unload", plist], { stdio: "ignore" });
         const argXml = [binPath, "node", "--server-ws", serverUrl, "--dir", dir, ...nodeName ? ["--name", nodeName] : []].map((a) => `<string>${a}</string>`).join("");
-        fs37.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os11.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os11.homedir()}/.oasis-node.err</string></dict></plist>`);
+        fs37.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os12.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os12.homedir()}/.oasis-node.err</string></dict></plist>`);
         spawnSync3("launchctl", ["load", plist], { stdio: "inherit" });
         println("\u2713 Oasis node service started (macOS LaunchAgent com.oasis.node)");
-        println(`  Logs : tail -f ${os11.homedir()}/.oasis-node.log`);
+        println(`  Logs : tail -f ${os12.homedir()}/.oasis-node.log`);
         println(`  Stop : launchctl unload ${plist}`);
       } else {
-        spawnSync3("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path34.join(os11.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
+        spawnSync3("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path34.join(os12.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
         println(`\u2713 Oasis node started in background (nohup). Logs: ~/.oasis-node.log`);
         println("  Note: no automatic restart on reboot in this environment.");
       }
@@ -242846,8 +243310,8 @@ async function runCli(argv, println = console.log, progressln = console.error) {
   if (command === "serve" && positional[0] === "install") {
     const absDir = path34.resolve(dir);
     const name = `oasis-serve-${path34.basename(absDir)}`;
-    const unitDir = flags.get("unit-dir") ?? path34.join(os11.homedir(), ".config", "systemd", "user");
-    const bin = flags.get("bin") ?? path34.join(os11.homedir(), ".local", "bin", "oasis");
+    const unitDir = flags.get("unit-dir") ?? path34.join(os12.homedir(), ".config", "systemd", "user");
+    const bin = flags.get("bin") ?? path34.join(os12.homedir(), ".local", "bin", "oasis");
     const port = flags.get("port") ?? "7320";
     const extra = (flags.get("dispatch") === "true" ? ` --dispatch true` : "") + (flags.has("model") ? ` --model ${flags.get("model")}` : "");
     const unit = [
@@ -243191,7 +243655,7 @@ Trace: ${run.traceRunId}`);
       if (plan.inject.mode === "env") {
         childEnv[plan.inject.envName] = value2;
       } else {
-        tmpDir = await fs37.promises.mkdtemp(path34.join(os11.tmpdir(), "oasis-var-exec-"));
+        tmpDir = await fs37.promises.mkdtemp(path34.join(os12.tmpdir(), "oasis-var-exec-"));
         const keyfile = path34.join(tmpDir, "value");
         await fs37.promises.writeFile(keyfile, value2, { mode: 384 });
         childEnv[plan.inject.fileEnv] = keyfile;
@@ -243965,7 +244429,7 @@ ${res.warning}`);
         for (const a of st.artifacts) println(`  - ${a.path}\uFF08${a.kind ?? "?"}\uFF09status=${a.status ?? "?"}${a.mtime ? ` \xB7 ${new Date(a.mtime).toISOString()}` : ""}`);
         if (flags.get("pull") === "true") {
           const odPublic2 = (flags.get("od-public-url") ?? process.env["OASIS_OPEN_DESIGN_PUBLIC_URL"] ?? "https://design.open-friday.com").replace(/\/$/, "");
-          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os11.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
+          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os12.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
           println(`[design] \u5DF2\u62C9\u5230\u672C\u5730\uFF1A${dir3}\uFF08\u5165\u53E3 ${entry2}\uFF09`);
           println(`[design] \u8BFB\u5B8C\u6EE1\u610F\u5373\u4EA4\u7A3F\uFF1Aoasis propose ${artifactId2} --from-dir ${dir3} --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"`);
         } else {
@@ -245335,10 +245799,10 @@ function runtimeAssetSourceRoots(input) {
 // src/paths.ts
 var fs40 = __toESM(require("node:fs"));
-var os12 = __toESM(require("node:os"));
+var os13 = __toESM(require("node:os"));
 var path37 = __toESM(require("node:path"));
 var DEFAULT_INSTANCE = "default";
-var home = () => os12.homedir();
+var home = () => os13.homedir();
 var oasisDir = () => path37.join(home(), ".oasis");
 var versionsDir = () => path37.join(oasisDir(), "versions");
 var versionDir = (label) => path37.join(versionsDir(), label);
@@ -245537,7 +246001,7 @@ function shimScript() {
 }
 // src/index.ts
-var PKG_VERSION = true ? "0.1.137" : "dev";
+var PKG_VERSION = true ? "0.1.139" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -245637,7 +246101,7 @@ function installSoftware(label) {
 function setupAutostart(name) {
   const inst = instancePaths(name);
   const cmd = `${process.execPath} "${inst.binFile}" --_daemon --instance ${name}`;
-  const home2 = os13.homedir();
+  const home2 = os14.homedir();
   const pnpmHome = process.env["PNPM_HOME"] || path39.join(home2, ".local", "share", "pnpm");
   const extraBins = [
     path39.join(home2, ".npm-global", "bin"),
@@ -245647,7 +246111,7 @@ function setupAutostart(name) {
   ];
   const daemonPath = sanitizeDaemonPath([process.env["PATH"] ?? "", ...extraBins].filter(Boolean).join(":"));
   if (process.platform === "linux") {
-    const unitDir = path39.join(os13.homedir(), ".config", "systemd", "user");
+    const unitDir = path39.join(os14.homedir(), ".config", "systemd", "user");
     fs42.mkdirSync(unitDir, { recursive: true });
     const unit = systemdUnitName(name);
     fs42.mkdirSync(path39.dirname(inst.logFile), { recursive: true });
@@ -245660,19 +246124,19 @@ function setupAutostart(name) {
     }));
     if (name === DEFAULT_INSTANCE) {
       try {
-        (0, import_node_child_process22.execSync)(`systemctl --user disable --now ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
+        (0, import_node_child_process23.execSync)(`systemctl --user disable --now ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
       } catch {
       }
     }
     try {
-      (0, import_node_child_process22.execSync)(`systemctl --user daemon-reload && systemctl --user enable --now ${unit}`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`systemctl --user daemon-reload && systemctl --user enable --now ${unit}`, { stdio: "ignore" });
       return true;
     } catch {
     }
     return false;
   } else if (process.platform === "darwin") {
     const label = launchdLabel(name);
-    const plist = path39.join(os13.homedir(), "Library", "LaunchAgents", `${label}.plist`);
+    const plist = path39.join(os14.homedir(), "Library", "LaunchAgents", `${label}.plist`);
     fs42.mkdirSync(path39.dirname(plist), { recursive: true });
     fs42.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -245685,7 +246149,7 @@ function setupAutostart(name) {
   <key>StandardErrorPath</key><string>${inst.logFile}</string>
 </dict></plist>`);
     try {
-      (0, import_node_child_process22.execSync)(`launchctl load "${plist}"`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`launchctl load "${plist}"`, { stdio: "ignore" });
       return true;
     } catch {
     }
@@ -245696,7 +246160,7 @@ function setupAutostart(name) {
 function spawnDaemon() {
   fs42.mkdirSync(path39.dirname(LOG_FILE), { recursive: true });
   const log3 = fs42.openSync(LOG_FILE, "a");
-  const child = (0, import_node_child_process22.spawn)(process.execPath, [INST.binFile, "--_daemon", "--instance", INSTANCE], {
+  const child = (0, import_node_child_process23.spawn)(process.execPath, [INST.binFile, "--_daemon", "--instance", INSTANCE], {
     detached: true,
     stdio: ["ignore", log3, log3],
     // 与 systemd unit 里那条 Environment 等价——detached 兜底路径不能少，否则同一实例在两条
@@ -245721,24 +246185,24 @@ function stopDaemon(name) {
   }
   if (process.platform === "linux") {
     try {
-      (0, import_node_child_process22.execSync)(`systemctl --user stop ${systemdUnitName(name)} 2>/dev/null`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`systemctl --user stop ${systemdUnitName(name)} 2>/dev/null`, { stdio: "ignore" });
     } catch {
     }
     if (name === DEFAULT_INSTANCE) {
       try {
-        (0, import_node_child_process22.execSync)(`systemctl --user stop ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
+        (0, import_node_child_process23.execSync)(`systemctl --user stop ${LEGACY_SYSTEMD_UNIT} 2>/dev/null`, { stdio: "ignore" });
       } catch {
       }
     }
   } else if (process.platform === "darwin") {
     const label = launchdLabel(name);
     try {
-      (0, import_node_child_process22.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${label}.plist" 2>/dev/null`, { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${label}.plist" 2>/dev/null`, { stdio: "ignore" });
     } catch {
     }
     if (name === DEFAULT_INSTANCE && label !== LEGACY_LAUNCHD_LABEL) {
       try {
-        (0, import_node_child_process22.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${LEGACY_LAUNCHD_LABEL}.plist" 2>/dev/null`, { stdio: "ignore" });
+        (0, import_node_child_process23.execSync)(`launchctl unload "$HOME/Library/LaunchAgents/${LEGACY_LAUNCHD_LABEL}.plist" 2>/dev/null`, { stdio: "ignore" });
       } catch {
       }
     }
@@ -245757,7 +246221,7 @@ function selfUpdate() {
   const inner = `{ echo "[oasis] self-update \u2192 ${PKG_NAME}@latest (registry ${OFFICIAL}, \u5931\u8D25\u56DE\u843D\u9ED8\u8BA4\u6E90)"; sleep 2; { ${installOfficial} || ${installFallback}; } && ${printVersion} && ${startCmd}; } >> '${LOG_FILE}' 2>&1`;
   const hasSystemd = process.platform === "linux" && (() => {
     try {
-      (0, import_node_child_process22.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
+      (0, import_node_child_process23.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -245765,13 +246229,13 @@ function selfUpdate() {
   })();
   const log3 = fs42.openSync(LOG_FILE, "a");
   if (hasSystemd) {
-    const child = (0, import_node_child_process22.spawn)("systemd-run", ["--user", "--scope", "--quiet", "sh", "-c", inner], {
+    const child = (0, import_node_child_process23.spawn)("systemd-run", ["--user", "--scope", "--quiet", "sh", "-c", inner], {
       detached: true,
       stdio: ["ignore", log3, log3]
     });
     child.unref();
   } else {
-    const child = (0, import_node_child_process22.spawn)("sh", ["-c", inner], { detached: true, stdio: ["ignore", log3, log3] });
+    const child = (0, import_node_child_process23.spawn)("sh", ["-c", inner], { detached: true, stdio: ["ignore", log3, log3] });
     child.unref();
   }
 }
@@ -245833,7 +246297,7 @@ async function startOneInstance(o) {
     const res = await fetch(`${httpBase(serverUrl)}/api/nodes/exchange`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os13.hostname() })
+      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os14.hostname() })
     });
     if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
     const body2 = await res.json();
@@ -245884,7 +246348,7 @@ function derivedNodeIdFor(name) {
   if (name === DEFAULT_INSTANCE) return resolveNodeId();
   const user = (() => {
     try {
-      return os13.userInfo().username;
+      return os14.userInfo().username;
     } catch {
       return process.env["USER"] ?? process.env["USERNAME"] ?? "unknown";
     }
@@ -245894,7 +246358,7 @@ function derivedNodeIdFor(name) {
 function userScopeAvailable() {
   if (process.platform !== "linux") return false;
   try {
-    (0, import_node_child_process22.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
+    (0, import_node_child_process23.execSync)("systemd-run --user --scope --quiet -- true", { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -245925,11 +246389,11 @@ function spawnSessionProcess(spec) {
     const logFd = fs42.openSync(path39.join(dir, "session.log"), "a");
     const argv = [INST.binFile, "--_session", specFile];
     const env = { ...process.env, OASIS_CLI_HOME: pinnedDir };
-    const child = userScopeAvailable() ? (0, import_node_child_process22.spawn)(
+    const child = userScopeAvailable() ? (0, import_node_child_process23.spawn)(
       "systemd-run",
       ["--user", "--scope", "--quiet", `--setenv=OASIS_CLI_HOME=${pinnedDir}`, process.execPath, ...argv],
       { detached: true, stdio: ["ignore", logFd, logFd], env }
-    ) : (0, import_node_child_process22.spawn)(process.execPath, argv, { detached: true, stdio: ["ignore", logFd, logFd], env });
+    ) : (0, import_node_child_process23.spawn)(process.execPath, argv, { detached: true, stdio: ["ignore", logFd, logFd], env });
     child.unref();
     return true;
   } catch (e) {