oasis_test_v2 2.2.1 → 2.2.3

package/dist/index.js

@@ -1190,6 +1190,9 @@ function deriveLastTurnQuality(lastAssistant) {
   if (status === "error") return "abnormal";
   return lastAssistant && lastAssistant.content.trim().length > 0 ? "clean" : "abnormal";
 }
+function deriveSessionRunning(lastAssistant) {
+  return lastAssistant?.status === "running";
+}
 function windowMessagesByTurns(messages, turns) {
   if (turns <= 0) return { messages, hasMoreBefore: false };
   let seen = 0;
@@ -1340,11 +1343,39 @@ function collectDelegationArtifacts(roundSummaries) {
   const artifacts = /* @__PURE__ */ new Map();
   for (const round of roundSummaries) {
     for (const file of round.files ?? []) {
-      artifacts.set(file.name, { name: file.name, ...file.blobRef ? { blobRef: file.blobRef } : {}, round: round.round });
+      const seen = artifacts.get(file.name);
+      if (seen) {
+        if (!seen.blobRef && file.blobRef) seen.blobRef = file.blobRef;
+        continue;
+      }
+      artifacts.set(file.name, {
+        name: file.name,
+        ...file.blobRef ? { blobRef: file.blobRef } : {},
+        round: round.round,
+        // settledSeq 透传自这个名字**第一次出现**的那一轮。未收口的轮次（pending 续跑那一支）
+        // 与本字段落地前的存量行都没有值——前端凭 `settledSeq` 是否缺失走两条路径：
+        //   有 → 按 settledSeq 各自定位对应 `chat-msg:delegation-done|<id>:<seq>`；
+        //   无 → 该委派整条退回「单委派单锚点」降级（`ann:36bfa04b`）。
+        ...typeof round.settledSeq === "number" ? { settledSeq: round.settledSeq } : {}
+      });
     }
   }
   return [...artifacts.values()];
 }
+function delegationOutboxFingerprints(roundSummaries) {
+  const out = /* @__PURE__ */ new Map();
+  for (const round of roundSummaries) {
+    for (const file of round.files ?? []) {
+      if (typeof file.size !== "number" || !file.mtime) continue;
+      out.set(file.name, { size: file.size, mtime: file.mtime });
+    }
+  }
+  return out;
+}
+function touchAnchorMessageId(messageId) {
+  const hash2 = messageId.indexOf("#");
+  return hash2 >= 0 ? messageId.slice(0, hash2) : messageId;
+}
 var DelegationLabelConflictError, DELEGATION_FILE_LIMITS, DELEGATION_INBOUND_DIR, DELEGATION_OUTBOUND_DIR, DELEGATION_OUTPUTS_DIR, DELEGATION_RETURN_RECENT_ROUNDS;
 var init_delegation = __esm({
   "../contract/src/delegation.ts"() {
@@ -1537,6 +1568,16 @@ var init_http_api = __esm({
   }
 });
 
+// ../contract/src/file-preview.ts
+var OFFICE_PREVIEW_MAX_BYTES, FILE_CONTENT_MAX_BYTES;
+var init_file_preview = __esm({
+  "../contract/src/file-preview.ts"() {
+    "use strict";
+    OFFICE_PREVIEW_MAX_BYTES = 20 * 1024 * 1024;
+    FILE_CONTENT_MAX_BYTES = 50 * 1024 * 1024;
+  }
+});
+
 // ../contract/src/index.ts
 var init_src = __esm({
   "../contract/src/index.ts"() {
@@ -1596,6 +1637,7 @@ var init_src = __esm({
     init_knowledge();
     init_knowledge_governance();
     init_http_api();
+    init_file_preview();
   }
 });
 
@@ -4036,7 +4078,7 @@ var init_events = __esm({
 // ../engine/src/views.ts
 function workState(w2, hasOutput2) {
   if (w2.status) return w2.status;
-  if (w2.retryAt) return "retry";
+  if (w2.retryAt && w2.deadAt) return "retry";
   if (w2.deadAt) return "dead";
   if (w2.endedAt) {
     if (w2.outcome === "failed") return "failed";
@@ -4458,6 +4500,36 @@ function lastPostIsFromNode(state, issue2, node2) {
 function repliedInWork(state, work, issueId) {
   return repliesSorted(state, issueId).some((r) => r.createdAt >= REPLY_ORIGIN_SINCE ? r.viaWorkId === work.id : r.authorActorId === work.assigneeActorId && r.createdAt >= work.createdAt);
 }
+function recordHandledNotification(state, work, issue2, acknowledged = false) {
+  if (issue2.aboutNodeId !== work.nodeId || work.endedAt || work.deadAt) return;
+  const gap = issue2.gapId ? state.issue(issue2.gapId) : void 0;
+  const ids2 = [issue2.id, ...gap?.kind === "gap" && gap.resolvedAt && gap.raisedByNodeId === work.nodeId ? [gap.id] : []];
+  state.updateWork(work.id, {
+    frozenIssueIds: [.../* @__PURE__ */ new Set([...work.frozenIssueIds ?? [], ...ids2])],
+    ...acknowledged ? { handledIssueIds: [.../* @__PURE__ */ new Set([...work.handledIssueIds ?? [], ...ids2])] } : {}
+  });
+}
+function notificationsHandledInWork(state, work) {
+  if (work.conclusion != null) return false;
+  const node2 = state.node(work.nodeId);
+  const accepted = node2?.latestAcceptId ? state.work(node2.latestAcceptId) : void 0;
+  if (!node2 || !accepted || node2.latestAcceptId !== node2.latestProposedWorkId || accepted.nodeVersion !== work.nodeVersion) return false;
+  const previousInputs = new Set(state.workInputsOf(accepted.id).map((i) => i.upstreamWorkId));
+  const currentInputs = new Set(state.workInputsOf(work.id).map((i) => i.upstreamWorkId));
+  if (previousInputs.size !== currentInputs.size || [...currentInputs].some((id) => !previousInputs.has(id))) return false;
+  const ids2 = work.frozenIssueIds ?? [];
+  const handledNow = (work.handledIssueIds ?? []).length > 0 || ids2.some((id) => repliedInWork(state, work, id));
+  return handledNow && ids2.length > 0 && ids2.every((id) => {
+    const issue2 = state.issue(id);
+    if (!issue2) return false;
+    if (issue2.kind === "gap") return issue2.resolvedAt !== null && ((work.handledIssueIds ?? []).includes(id) || ids2.some((relatedId) => {
+      const related = state.issue(relatedId);
+      return related?.kind === "comment" && related.gapId === id && repliedInWork(state, work, relatedId) && lastPostIsFromNode(state, related, node2);
+    }) || state.mainWorksOf(work.nodeId).some((prior) => prior.id !== work.id && prior.status === "success" && ((prior.handledIssueIds ?? []).includes(id) || prior.acceptedAt && (prior.frozenIssueIds ?? []).includes(id))));
+    if (issue2.kind !== "comment" && issue2.kind !== "change_request") return false;
+    return issue2.resolvedAt !== null && (work.handledIssueIds ?? []).includes(id) || issue2.kind === "comment" && repliedInWork(state, work, id) && lastPostIsFromNode(state, issue2, node2);
+  });
+}
 function threadLength(state, issueId) {
   return state.repliesOf(issueId).length + 1;
 }
@@ -4559,6 +4631,7 @@ var init_kill = __esm({
 
 // ../engine/src/activate.ts
 function scan(state, ctx) {
+  if (state.workorder.dispatchPaused) return { events: [], terminated: false };
   const events = [];
   const now = ctx.at;
   const policy = ctx.policy ?? CODE_DEFAULT_POLICY;
@@ -5651,6 +5724,7 @@ ALTER TABLE ${q2}.works   ADD COLUMN IF NOT EXISTS last_activity_at timestamptz;
 -- \u2605 \u51BB\u7ED3\u6765\u4FE1\u96C6\u5408\uFF08\u8BA1\u5212 \xA76.5\uFF0C\u9636\u6BB5 E\uFF09\uFF1Awork.create \u6309 reasons \u7684 issue \u9879\u51BB\u7ED3\u7684 issue id \u6279\u6B21\uFF08jsonb \u6570\u7EC4\uFF09\u3002
 --   reply \u5F52\u5C5E/\u9500\u8D26/\u5BA1\u8BA1\u53EA\u8BA4\u5B83\uFF0C\u4E0D\u9760\u65F6\u95F4\u7A97\u731C\u6D4B\u3002\u5B58\u91CF\u4E3A NULL\uFF08\u65E0\u6279\u6B21\u8BED\u4E49\uFF09\u3002
 ALTER TABLE ${q2}.works   ADD COLUMN IF NOT EXISTS frozen_issue_ids jsonb;
+ALTER TABLE ${q2}.works   ADD COLUMN IF NOT EXISTS handled_issue_ids jsonb;
 -- \u56DE\u4FE1\u8F6E\u6307\u5411\u54EA\u6761 comment issue\uFF08\u7EAF\u6570\u636E\uFF09
 ALTER TABLE ${q2}.works   ADD COLUMN IF NOT EXISTS reply_to_issue_id text;
 -- \u2605 work lane\uFF08\u6B63\u5411\u5224\u636E\uFF0C\u53D6\u4EE3 "reply_to_issue_id IS NULL"\uFF09\uFF1A\u5B58\u91CF\u884C\u6309\u6709\u65E0 reply_to_issue_id \u56DE\u586B\u3002
@@ -5800,7 +5874,7 @@ ALTER TABLE ${q2}.workorders DROP COLUMN IF EXISTS resume_marker;
 ALTER TABLE ${q2}.events DROP COLUMN IF EXISTS effect_lease_until;
 -- \u5B58\u91CF\u56DE\u586B\uFF1Astatus \u5217=null \u7684\u884C\u6309\u65F6\u95F4\u6233/\u4EA7\u51FA\u56DE\u586B\uFF08\u4E0E views.ts \u56DE\u9000\u6D3E\u751F\u540C\u8BED\u4E49\uFF0C\u56DE\u586B\u540E\u72B6\u6001\u5373\u5B58\u50A8\u6001\uFF09
 UPDATE ${q2}.works SET status = CASE
-  WHEN retry_at IS NOT NULL THEN 'retry'
+  WHEN retry_at IS NOT NULL AND dead_at IS NOT NULL THEN 'retry'
   WHEN dead_at   IS NOT NULL THEN 'dead'
   WHEN ended_at  IS NOT NULL AND outcome = 'failed' THEN 'failed'
   WHEN ended_at  IS NOT NULL AND (conclusion IS NOT NULL OR
@@ -11107,13 +11181,22 @@ var init_store_postgres = __esm({
       async close() {
         await this.pool.end();
       }
+      /**
+       * ★ 与 {@link tx} 同一条纪律：schema 名进的是**标识符位**，必须 {@link quoteIdent}。
+       *
+       * 这两个直连 pool 的方法（本方法与 {@link listNeverStartedWorks}）是上一轮修连字符 schema 时
+       * 漏掉的两处——`tx()` 那条路已经引号化了，它们没有。表现不是「一读就 500」而是**两口钟在带
+       * 连字符的公司上永远转不动**：2026-09-09 v2 生产日志里 `[deadline-clock] [company:test-ryzs]`
+       * 与 `[dispatch-drop]` 每 5 秒 / 每分钟各报一次 `syntax error at or near "-"`，
+       * 一分钟约 50 行；也就是说这些公司的 deadline 最迟触发保证与丢单补派**从来没生效过**。
+       */
       async listOpenWorkDeadlines(opts) {
         const res = await this.pool.query(
           `SELECT workorder_id AS "workorderId",
               id AS "workId",
               assignee_actor_id AS "assigneeActorId",
               COALESCE(last_activity_at, started_at, created_at) AS "deadlineFrom"
-         FROM ${this.schema}.works
+         FROM ${quoteIdent(this.schema)}.works
         WHERE ended_at IS NULL AND dead_at IS NULL AND cancelled_at IS NULL
           AND ($1::text IS NULL OR id > $1)
         ORDER BY id
@@ -11134,7 +11217,7 @@ var init_store_postgres = __esm({
               node_id AS "nodeId",
               assignee_actor_id AS "assigneeActorId",
               created_at AS "createdAt"
-         FROM ${this.schema}.works
+         FROM ${quoteIdent(this.schema)}.works
         WHERE ended_at IS NULL AND dead_at IS NULL AND cancelled_at IS NULL
           AND started_at IS NULL AND session_ref IS NULL
           AND created_at < $1::timestamptz
@@ -11280,6 +11363,7 @@ var init_store_postgres = __esm({
             proposalReason: w2.proposal_reason ?? null,
             lastActivityAt: iso(w2.last_activity_at),
             frozenIssueIds: w2.frozen_issue_ids ?? null,
+            handledIssueIds: w2.handled_issue_ids ?? null,
             agentHandoffAttemptId: w2.agent_handoff_attempt_id ?? null,
             businessHandoffStatus: w2.business_handoff_status ?? null,
             businessHandoffRecordedAt: iso(w2.business_handoff_recorded_at),
@@ -11485,8 +11569,8 @@ var init_store_postgres = __esm({
              (id,workorder_id,node_id,assignee_actor_id,created_at,started_at,ended_at,dead_at,cancelled_at,retry_at,status,outcome,
               outcome_detail,session_ref,continues_work_id,parent_work_id,reply_to_issue_id,output_version_no,
               node_version,conclusion,proposal_reason,last_activity_at,frozen_issue_ids,agent_handoff_attempt_id,business_handoff_status,business_handoff_recorded_at,
-              acceptance_state,accepted_at,accepted_by,rejected_reason,override_by,override_reason,lane)
-             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25,$26,$27,$28,$29,$30,$31,$32,$33)
+              acceptance_state,accepted_at,accepted_by,rejected_reason,override_by,override_reason,lane,handled_issue_ids)
+             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25,$26,$27,$28,$29,$30,$31,$32,$33,$34)
              ON CONFLICT (id) DO NOTHING`,
                 [
                   w2.id,
@@ -11521,13 +11605,14 @@ var init_store_postgres = __esm({
                   w2.rejectedReason,
                   w2.overrideBy,
                   w2.overrideReason,
-                  w2.lane
+                  w2.lane,
+                  w2.handledIssueIds ? JSON.stringify(w2.handledIssueIds) : null
                 ]
               );
               break;
             }
             case "work.update":
-              await this.patch("works", "id", m2.id, m2.patch, { outcomeDetail: true });
+              await this.patch("works", "id", m2.id, m2.patch, { outcomeDetail: true, frozenIssueIds: true, handledIssueIds: true });
               break;
             case "artifact.replace":
               await this.c.query(`DELETE FROM ${this.s}.work_artifacts WHERE work_id = $1`, [m2.workId]);
@@ -11857,7 +11942,7 @@ function newNode(id, workorderId, at, version2) {
     updatedAt: at
   };
 }
-function markNodeForRetry(state, nodeId, at) {
+function markNodeForRetry(state, nodeId, at, resetRejectedBudget = false) {
   const node2 = state.node(nodeId);
   if (!node2) return;
   const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
@@ -11865,6 +11950,7 @@ function markNodeForRetry(state, nodeId, at) {
     state.updateWork(lw.id, { retryAt: at, status: "retry" });
   }
   if (lw && !lw.deadAt && workState(lw, hasOutput(lw, state.artifactsOf(lw.id).length)) === "success") {
+    if (resetRejectedBudget && lw.acceptanceState === "rejected") state.updateWork(lw.id, { retryAt: at });
     for (const req of state.requirementsOf(node2.id)) {
       if (!req.latestReviewId) continue;
       const r = state.review(req.latestReviewId);
@@ -11996,6 +12082,9 @@ var init_plan = __esm({
         const changed = node2.assigneeActorId !== e.assigneeActorId;
         const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
         const settled = lw !== null && lw !== void 0 && workState(lw, hasOutput(lw, state.artifactsOf(lw.id).length)) === "success";
+        if (changed && e.resetRejectedBudget === true && lw && !lw.deadAt && settled && lw.acceptanceState === "rejected") {
+          state.updateWork(lw.id, { retryAt: ctx.at });
+        }
         state.updateNode(e.nodeId, {
           assigneeActorId: e.assigneeActorId,
           assigneeRole: e.assigneeRole,
@@ -12025,7 +12114,7 @@ var init_plan = __esm({
       name: "plan/node-retry",
       kind: "plan.node_retry",
       apply(e, state, ctx) {
-        markNodeForRetry(state, e.nodeId, ctx.at);
+        markNodeForRetry(state, e.nodeId, ctx.at, e.resetRejectedBudget === true);
       }
     };
     planUpdateFields = {
@@ -12158,7 +12247,13 @@ var init_workorder = __esm({
       apply(e, state, ctx) {
         state.updateWorkorder({ dispatchPaused: false, pausedBy: null, pausedReason: null, updatedAt: ctx.at });
         for (const node2 of state.liveNodes()) {
-          planNodeRetry.apply({ kind: "plan.node_retry", workorderId: e.workorderId, nodeId: node2.id, by: e.by }, state, ctx);
+          planNodeRetry.apply({
+            kind: "plan.node_retry",
+            workorderId: e.workorderId,
+            nodeId: node2.id,
+            by: e.by,
+            resetRejectedBudget: e.resetRejectedBudget
+          }, state, ctx);
         }
       }
     };
@@ -12172,8 +12267,8 @@ var init_workorder = __esm({
 });
 
 // ../engine/src/handlers/work.ts
-function latestProposedOf(state, nodeId) {
-  const successes = state.mainWorksOf(nodeId).filter((w2) => w2.status === "success").sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
+function latestProposedOf(state, nodeId, deliveriesOnly) {
+  const successes = state.mainWorksOf(nodeId).filter((w2) => w2.status === "success" && (!deliveriesOnly || state.artifactsOf(w2.id).length > 0 || w2.conclusion != null)).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
   return successes.length > 0 ? successes[successes.length - 1].id : null;
 }
 var workCreate, workKill, workResponse, workHandoffRecorded, workStart, workSubmitOutput, workContentEdited, workConclude, nodeLatestProposedRebased, workTimeout;
@@ -12188,6 +12283,7 @@ var init_work = __esm({
       name: "work/create",
       kind: "work.create",
       apply(e, state, ctx) {
+        if (e.pauseGateVersion === 1 && state.workorder.dispatchPaused) return;
         if (state.work(e.workId)) return;
         const node2 = state.node(e.nodeId);
         if (!node2) return;
@@ -12213,6 +12309,7 @@ var init_work = __esm({
             replyToIssueId: e.replyToIssueId,
             outputVersionNo: null,
             conclusion: null,
+            handledIssueIds: null,
             agentHandoffAttemptId: null,
             businessHandoffStatus: null,
             businessHandoffRecordedAt: null,
@@ -12252,6 +12349,7 @@ var init_work = __esm({
           outputVersionNo: null,
           conclusion: null,
           frozenIssueIds: frozen.length > 0 ? frozen : null,
+          handledIssueIds: null,
           agentHandoffAttemptId: null,
           businessHandoffStatus: null,
           businessHandoffRecordedAt: null,
@@ -12286,6 +12384,7 @@ var init_work = __esm({
       // 会话侧也要杀（旧 agent 可能还挂着）。cancelPreviousWork 找不到/会话已退则 no-op。
       // 回信 work 不杀前会话（apply 不 kill 主链，节点已完结、无在跑会话），只派发。
       async effect(e, ctx) {
+        if (e.pauseGateVersion === 1 && !await ctx.canDispatchWork(e.workorderId, e.workId)) return;
         if (!e.replyToIssueId) await ctx.cancelPreviousWork(e.nodeId, e.workId);
         await ctx.dispatchWork(e.workId, e.resumeEligible !== void 0 ? { resumeEligible: e.resumeEligible } : void 0);
       }
@@ -12316,7 +12415,7 @@ var init_work = __esm({
         if (node2.latestProposedWorkId) {
           const ls = state.work(node2.latestProposedWorkId);
           if (!ls || ls.status !== "success") {
-            state.updateNode(e.nodeId, { latestProposedWorkId: latestProposedOf(state, e.nodeId) });
+            state.updateNode(e.nodeId, { latestProposedWorkId: latestProposedOf(state, e.nodeId, e.semanticsVersion === 2) });
           }
         }
         killNodeReviews(state, e.nodeId, ctx.at);
@@ -12346,17 +12445,34 @@ var init_work = __esm({
         }
         const businessFailed = w2.businessHandoffStatus === "not_delivered";
         const artifactCount = state.artifactsOf(e.workId).length;
-        const pureReply = e.semanticsVersion === 2 && artifactCount === 0 && (w2.conclusion === null || w2.conclusion === void 0) && (w2.frozenIssueIds ?? []).some((issueId) => state.issue(issueId)?.kind === "comment" && repliedInWork(state, w2, issueId));
-        const succeeded = e.outcome === "completed" && !businessFailed && (e.semanticsVersion === 2 ? artifactCount > 0 || pureReply : hasOutput(w2, artifactCount));
+        const pureReply = (e.semanticsVersion ?? 1) >= 2 && artifactCount === 0 && (w2.conclusion === null || w2.conclusion === void 0) && (w2.frozenIssueIds ?? []).some((issueId) => state.issue(issueId)?.kind === "comment" && repliedInWork(state, w2, issueId));
+        const succeeded = e.outcome === "completed" && !businessFailed && ((e.semanticsVersion ?? 1) >= 2 ? artifactCount > 0 || (e.semanticsVersion === 3 ? notificationsHandledInWork(state, w2) : pureReply) : hasOutput(w2, artifactCount));
         const status = succeeded ? "success" : "failed";
-        const zeroOutputReason = e.semanticsVersion === 2 && !succeeded && e.outcome === "completed" && !businessFailed ? artifactCount === 0 && w2.conclusion ? "conclusion without artifacts (invariant violation)" : "zero output" : null;
+        if (e.semanticsVersion === 3 && artifactCount === 0 && e.outcome === "completed") {
+          const node2 = state.node(w2.nodeId);
+          if (node2) for (const id of w2.frozenIssueIds ?? []) {
+            const issue2 = state.issue(id);
+            if (issue2?.kind === "comment" && !issue2.resolvedAt && repliedInWork(state, w2, id) && lastPostIsFromNode(state, issue2, node2)) {
+              state.emit({
+                kind: "issue.resolve",
+                workorderId: e.workorderId,
+                issueId: id,
+                state: "resolved",
+                by: w2.assigneeActorId,
+                note: null,
+                viaWorkId: w2.id
+              });
+            }
+          }
+        }
+        const zeroOutputReason = (e.semanticsVersion ?? 1) >= 2 && !succeeded && e.outcome === "completed" && !businessFailed ? artifactCount === 0 && w2.conclusion ? "conclusion without artifacts (invariant violation)" : e.semanticsVersion === 3 && (w2.frozenIssueIds ?? []).length > 0 ? "notifications incomplete or delivery requirements changed" : "zero output" : null;
         state.updateWork(e.workId, {
           endedAt: ctx.at,
           outcome: businessFailed ? "failed" : e.outcome,
           outcomeDetail: businessFailed ? { ...e.detail ?? {}, reason: "agent business handoff not delivered" } : zeroOutputReason ? { ...e.detail ?? {}, reason: e.detail?.reason ?? zeroOutputReason } : e.detail,
           status
         });
-        if (status === "success" && !(e.semanticsVersion === 2 && artifactCount === 0)) {
+        if (status === "success" && !((e.semanticsVersion ?? 1) >= 2 && artifactCount === 0)) {
           state.updateNode(w2.nodeId, { latestProposedWorkId: e.workId });
         }
       }
@@ -12380,7 +12496,7 @@ var init_work = __esm({
           } : {}
         });
         if (flipsToFailed && state.node(w2.nodeId)?.latestProposedWorkId === e.workId) {
-          state.updateNode(w2.nodeId, { latestProposedWorkId: latestProposedOf(state, w2.nodeId) });
+          state.updateNode(w2.nodeId, { latestProposedWorkId: latestProposedOf(state, w2.nodeId, e.semanticsVersion === 2) });
         }
       }
     };
@@ -12498,6 +12614,7 @@ var init_issue = __esm({
   "../engine/src/handlers/issue.ts"() {
     "use strict";
     init_plan();
+    init_letters();
     issueCreate = {
       name: "issue/create",
       kind: "issue.create",
@@ -12568,6 +12685,11 @@ var init_issue = __esm({
           // 缺失（人 / chat 会话 / 存量事件）落 null，判据按"不是节点发言"处理。
           viaWorkId: e.viaNodeId ? state.node(e.viaNodeId)?.latestWorkId ?? null : null
         });
+        const workId = e.viaNodeId ? state.node(e.viaNodeId)?.latestWorkId : null;
+        const work = workId ? state.work(workId) : void 0;
+        if (e.handlingVersion === 1 && work && work.assigneeActorId === e.authorActorId && ctx.actorId === e.authorActorId) {
+          recordHandledNotification(state, work, issue2);
+        }
       }
     };
     issueResolve = {
@@ -12575,7 +12697,13 @@ var init_issue = __esm({
       kind: "issue.resolve",
       apply(e, state, ctx) {
         const issue2 = state.issue(e.issueId);
-        if (!issue2 || issue2.resolvedAt !== null) return;
+        if (!issue2) return;
+        const workId = e.viaNodeId ? state.node(e.viaNodeId)?.latestWorkId : null;
+        const work = workId ? state.work(workId) : void 0;
+        if (e.acknowledged && work && work.assigneeActorId === e.by && ctx.actorId === e.by && e.note?.trim() && issue2.kind !== "escalation" && (issue2.kind !== "gap" || issue2.resolvedAt !== null)) {
+          recordHandledNotification(state, work, issue2, true);
+        }
+        if (issue2.resolvedAt !== null) return;
         const humanResolution = e.by.startsWith("actor:human:") && e.by === ctx.actorId;
         if (e.semanticsVersion === 2 && issue2.kind === "escalation" && !humanResolution) {
           throw new Error("\u5173\u95ED\u5347\u7EA7\u9700\u8981\u4EBA\u660E\u786E\u786E\u8BA4\uFF1Bagent \u8BF7\u63D0\u4EA4\u5173\u95ED\u6388\u6743\u7533\u8BF7");
@@ -12590,7 +12718,7 @@ var init_issue = __esm({
           resolvedNote: e.note,
           resolvedViaWorkId: e.viaWorkId
         });
-        if (issue2.kind === "gap" && (e.semanticsVersion !== 2 || humanResolution)) {
+        if (issue2.kind === "gap" && e.closeRelatedEscalations !== false && (e.semanticsVersion !== 2 || humanResolution)) {
           for (const other of state.allIssues()) {
             if (other.kind === "escalation" && other.resolvedAt === null && other.workorderId === issue2.workorderId && other.gapId === issue2.id) {
               state.updateIssue(other.id, {
@@ -12608,7 +12736,7 @@ var init_issue = __esm({
         }
         if (issue2.kind === "gap" || issue2.kind === "escalation") {
           const nodeId = issue2.raisedByNodeId ?? issue2.aboutNodeId;
-          if (nodeId) markNodeForRetry(state, nodeId, ctx.at);
+          if (nodeId) markNodeForRetry(state, nodeId, ctx.at, e.resetRejectedBudget === true);
         }
       }
     };
@@ -12646,6 +12774,7 @@ var init_review = __esm({
       name: "review/create",
       kind: "review.create",
       apply(e, state, ctx) {
+        if (e.pauseGateVersion === 1 && state.workorder.dispatchPaused) return;
         const work = state.work(e.targetWorkId);
         if (!work) return;
         const dup = state.reviewsOf(e.targetWorkId).some(
@@ -12681,6 +12810,7 @@ var init_review = __esm({
         }
       },
       async effect(e, ctx) {
+        if (e.pauseGateVersion === 1 && !await ctx.canDispatchReview(e.workorderId, e.reviewId)) return;
         if (e.reviewerIsAgent) await ctx.dispatchReview(e.reviewId, e.nodeId, e.reviewerActorId);
         else await ctx.notify([e.reviewerActorId], { kind: "review-requested", reviewId: e.reviewId });
       }
@@ -12987,11 +13117,28 @@ var init_handlers = __esm({
 });
 
 // ../engine/src/bus.ts
-function versionEscalationResolution(event) {
-  if (event.kind === "work.accept" || event.kind === "issue.resolve") {
-    return { ...event, semanticsVersion: 2 };
+function versionCommandEvent(event) {
+  if (event.kind === "work.create" || event.kind === "review.create") {
+    return { ...event, pauseGateVersion: 1 };
+  }
+  if (event.kind === "issue.reply") return { ...event, handlingVersion: 1 };
+  if (event.kind === "work.response" && event.semanticsVersion === 2) {
+    return { ...event, semanticsVersion: 3 };
+  }
+  switch (event.kind) {
+    case "work.accept":
+    case "work.kill":
+    case "work.handoff_recorded":
+      return { ...event, semanticsVersion: 2 };
+    case "issue.resolve":
+      return { ...event, semanticsVersion: 2, resetRejectedBudget: true };
+    case "plan.node_retry":
+    case "workorder.resumed":
+    case "plan.assign_actor":
+      return { ...event, resetRejectedBudget: true };
+    default:
+      return event;
   }
-  return event;
 }
 function emptySnapshotPlaceholder(record8) {
   return {
@@ -13199,7 +13346,7 @@ var init_bus = __esm({
             workorderId: input.workorderId,
             actorId: input.actorId,
             handActorId: input.handActorId ?? null,
-            event: versionEscalationResolution(input.event),
+            event: versionCommandEvent(input.event),
             causedBySeq: null,
             origin: "command",
             dedupKey: input.dedupKey ?? null,
@@ -13224,6 +13371,32 @@ var init_bus = __esm({
           }
         }
       }
+      /** 同一命令的一组最终修改一起入队。scan-on-empty 在末项之前始终看到 pending，不能派发中间状态。 */
+      async submitBatchAndProcess(inputs) {
+        if (!inputs.length) return;
+        const seqs = await this.store.transaction(async (tx) => {
+          for (const wid of [...new Set(inputs.map((i) => i.workorderId))].sort()) await tx.lockWorkorder(wid);
+          return tx.appendEvents(inputs.map((input) => ({
+            companyId: input.companyId,
+            workorderId: input.workorderId,
+            actorId: input.actorId,
+            handActorId: input.handActorId ?? null,
+            event: versionCommandEvent(input.event),
+            causedBySeq: null,
+            origin: "command",
+            dedupKey: input.dedupKey ?? null,
+            createdAt: this.clock.now(),
+            ...eventAnchors(input.event)
+          })));
+        });
+        if (this.running) {
+          const last = /* @__PURE__ */ new Map();
+          inputs.forEach((input, i) => last.set(input.workorderId, seqs[i]));
+          for (const [wid, seq] of last) await this.waitForSettled(wid, seq);
+        } else {
+          for (let i = 0; i < 2e3; i++) if (!await this.drainOne()) break;
+        }
+      }
       /* ═══════════════════════ 调度器主循环 ═══════════════════════ */
       /**
        * 启动调度器——永不返回。
@@ -13459,7 +13632,7 @@ var init_bus = __esm({
               workorderId: record8.workorderId,
               actorId: SYSTEM_ACTOR,
               handActorId: null,
-              event: versionEscalationResolution(event),
+              event: versionCommandEvent(event),
               causedBySeq: record8.seq,
               origin: "apply",
               dedupKey: null,
@@ -13490,6 +13663,18 @@ var init_bus = __esm({
           // ★ 注入 workorderId：派发侧读模型没追上时，据它指名重读那张工单（见 EngineIO.dispatchWork 注释）。
           dispatchWork: (id, opts) => this.io.dispatchWork(id, { ...opts, workorderId: record8.workorderId }),
           dispatchReview: (id, nodeId, reviewerActorId) => this.io.dispatchReview(id, nodeId, reviewerActorId),
+          canDispatchWork: async (workorderId, workId) => {
+            const snap = await this.store.transaction((tx) => tx.loadWorkorder(workorderId));
+            if (!snap || snap.workorder.dispatchPaused) return false;
+            const work = snap.works.find((row) => row.id === workId);
+            return work?.status === "running" && !work.deadAt && !work.endedAt;
+          },
+          canDispatchReview: async (workorderId, reviewId) => {
+            const snap = await this.store.transaction((tx) => tx.loadWorkorder(workorderId));
+            if (!snap || snap.workorder.dispatchPaused) return false;
+            const review = snap.reviews.find((row) => row.id === reviewId);
+            return review?.status === "running" && !review.cancelledAt && !review.endedAt;
+          },
           cancelSession: (ref2) => this.io.cancelSession(ref2),
           // ★ work.create 的「kill 旧会话」：apply 已把该节点上一个 latest_work 置 deadAt（会话可能还挂着），
           // 这里按 store 找它 cancel。找不到 / 不是刚被 kill / 会话已退 → no-op。这是设计「节点重新运行 = 自动
@@ -13556,7 +13741,7 @@ var init_bus = __esm({
               workorderId: record8.workorderId,
               actorId: b2.actorId ?? SYSTEM_ACTOR,
               handActorId: null,
-              event: versionEscalationResolution(b2.event),
+              event: versionCommandEvent(b2.event),
               causedBySeq: record8.seq,
               origin: "effect",
               dedupKey: b2.dedupKey ?? null,
@@ -13594,7 +13779,7 @@ var init_bus = __esm({
               workorderId,
               actorId: SYSTEM_ACTOR,
               handActorId: null,
-              event: versionEscalationResolution(event),
+              event: versionCommandEvent(event),
               causedBySeq: null,
               origin: "apply",
               dedupKey: null,
@@ -13646,7 +13831,7 @@ var init_bus = __esm({
               workorderId: record8.workorderId,
               actorId: SYSTEM_ACTOR,
               handActorId: null,
-              event: versionEscalationResolution(event),
+              event: versionCommandEvent(event),
               causedBySeq: record8.seq,
               origin: "apply",
               dedupKey: null,
@@ -14492,6 +14677,7 @@ async function assembleContext(args) {
   const siblingParts = args.part !== void 0 ? (artifact.parts ?? []).filter((p2) => p2.name !== args.part) : [];
   const consumers = consumersOf(model, artifactId).filter((c) => c.type !== DELIVERY_SUMMARY_ARTIFACT_TYPE);
   const staleSet = staleSetOf(model, artifactId);
+  const acceptedHead = concludedHead(model, artifactId);
   const head = artifact.currentRev;
   const headRev = head !== null ? model.revisions.get(head) : null;
   const headSpread = headRev !== null ? await spreadRevisionContent(blobs, headRev, files, "deliverable") : null;
@@ -14807,10 +14993,19 @@ ${manifestDiff(baseC, newC)}
     } else if (head === null) {
       whyLines.push(typeDef?.contentType === "code" ? `**\u672C\u4EA7\u7269\u5728 Oasis \u91CC\u8FD8\u6CA1\u6709\u5DF2\u4EA4\u4ED8\u7684\u7248\u672C**\u2014\u2014\u4F46**\u8FD9\u4E0D\u7B49\u4E8E git \u91CC\u6CA1\u6709\u4E1C\u897F**\uFF1A\u4E0A\u4E00\u8F6E\u53EF\u80FD\u63A8\u4E86\u5206\u652F\u5374\u6CA1\u6765\u5F97\u53CA\u4EA4\u4ED8\u3002**\u4EE5\u4F60 fetch \u5230\u7684\u5206\u652F\u5B9E\u51B5\u4E3A\u51C6**\uFF08\u89C1\u300C\u600E\u4E48\u63D0\u4EA4\u300D\u7B2C 1 \u6B65\uFF09\u3002` : canvasMode ? `**\u5168\u65B0\u4EA7\u7269**\uFF1A\u8FD9\u662F\u9996\u7248\u2014\u2014\u672C\u4EA7\u7269\u8FD8\u6CA1\u6709\u4EFB\u4F55\u63D0\u4EA4\uFF08\u600E\u4E48\u843D\u89C1\u300C\u600E\u4E48\u63D0\u4EA4\u300D\uFF09\u3002` : `**\u5168\u65B0\u4EA7\u7269**\uFF1A\`deliverable/\` \u4E3A\u7A7A\uFF0C\u8FD8\u6CA1\u6709\u4EFB\u4F55\u5185\u5BB9\u3002`);
       whatLines.push(typeDef?.contentType === "code" ? `\u6309\u300C\u600E\u4E48\u63D0\u4EA4\u300D\u7B2C 1 \u6B65\u843D\u5230\u5DE5\u5355\u5206\u652F\u3001**\u5148\u770B\u6E05\u5B83\u4E0A\u9762\u5DF2\u7ECF\u6709\u4EC0\u4E48**\uFF0C\u518D\u63A5\u7740\u505A\u5B8C\uFF08\u600E\u4E48\u843D\u89C1\u300C\u600E\u4E48\u63D0\u4EA4\u300D\uFF09\u3002` : `\u4EA7\u51FA**\u9996\u7248**\u5185\u5BB9\uFF08\u600E\u4E48\u843D\u89C1\u300C\u600E\u4E48\u63D0\u4EA4\u300D\uFF09\u3002`);
+    } else if (acceptedHead) {
+      whyLines.push("**\u672C\u8F6E\u5DE5\u4F5C**\uFF1A\u6309\u5F53\u524D\u4EFB\u52A1\u8981\u6C42\u3001\u901A\u77E5\u53CA\u6062\u590D\u8BF4\u660E\u6838\u5BF9\u5DF2\u6709\u4EA4\u4ED8\u3002");
+      whatLines.push("\u82E5\u6709\u771F\u5B9E\u7684\u65B0\u4FEE\u6539\u8981\u6C42\uFF0C\u5B8C\u6210\u4FEE\u6539\u540E\u518D\u4EA4\u4ED8\uFF1B\u82E5\u672C\u8F6E\u4EC5\u5904\u7406\u901A\u77E5\u4E14\u65E0\u9700\u6539\u7A3F\uFF0C\u9010\u6761\u660E\u786E\u6807\u8BB0\u5DF2\u5904\u7406\u540E\u6536\u5DE5\uFF0C\u4E0D\u5FC5\u91CD\u65B0 propose / conclude\u3002");
     } else {
       whyLines.push(`**\u7EE7\u7EED\u5B8C\u5584**\uFF1A\u4E0A\u6B21\u672A conclude\u3002`);
       whatLines.push(`**\u63A5\u7740\u628A\u5B83\u505A\u5B8C**\u3001\u771F\u6B63\u5B8C\u6574\u4E86\u518D conclude\uFF08\u600E\u4E48\u843D\u89C1\u300C\u600E\u4E48\u63D0\u4EA4\u300D\uFF09\u3002`);
     }
+    if (acceptedHead) {
+      whyLines.unshift(`**\u5DF2\u6709\u4EA4\u4ED8\u5DF2\u9A8C\u6536**\uFF1A${acceptedHead}\u3002\u6267\u884C\u8F6E\u6B21\u4E0E\u4EA4\u4ED8\u7248\u672C\u5206\u5F00\u8BA1\u6570\uFF0C\u672C\u8F6E\u88AB\u5524\u8D77\u4E0D\u4F1A\u64A4\u9500\u8BE5\u9A8C\u6536\u3002`);
+      for (const gap of freshGaps) {
+        whatLines.push(`\u6838\u5BF9\u7F3A\u53E3 ${gap.gapId} \u7684\u89E3\u6CD5\uFF1B\u786E\u8BA4\u65E0\u9700\u4FEE\u6539\u65F6\uFF1A\`oasis resolve ${gap.gapId} --as acknowledged --note "<\u6838\u5BF9\u4F9D\u636E\u53CA\u65E0\u9700\u4FEE\u6539\u7684\u539F\u56E0>"\`\u3002`);
+      }
+    }
     if (pendingConcludeAttempt(model, artifactId) !== null) {
       whyLines.push(
         ``,
@@ -18040,7 +18235,7 @@ function bridgeLoadReadModel(input) {
     const art = nodeToArtifact(node2, edgesByTarget.get(node2.id) ?? [], requirementsByNode.get(node2.id) ?? []);
     const lw = node2.latestWorkId ? workById.get(node2.latestWorkId) : void 0;
     if (lw) {
-      const st = lw.status ?? (lw.retryAt ? "retry" : lw.deadAt ? "dead" : lw.endedAt ? lw.outcome === "failed" ? "failed" : "success" : "running");
+      const st = lw.status ?? (lw.retryAt && lw.deadAt ? "retry" : lw.deadAt ? "dead" : lw.endedAt ? lw.outcome === "failed" ? "failed" : "success" : "running");
       const hasConclusionWithoutResponse = lw.conclusion !== null && lw.conclusion !== void 0 && st === "running" && !lw.endedAt;
       let uiSt;
       if (st === "retry") uiSt = null;
@@ -18543,22 +18738,18 @@ ${res.candidates.map((c) => `  - ${c.type}:${c.title ?? "(\u65E0title)"} \u2192
   return { ...plan, ops };
 }
 function buildConstituents(model, plan, schema, roleIndex) {
-  const already = new Set(
-    plan.ops.filter((o) => o.action === "unlink").map((o) => `${o.artifactId} ${o.to}`)
-  );
+  const inputs = new Map([...model.artifacts].map(([id, art]) => [id, new Set(art.inputs.map((i) => i.to))]));
   const out = [];
   for (const c of buildConstituentsRaw(model, plan, schema, roleIndex)) {
+    if (c.kind === "spawn_artifact") inputs.set(c.artifactId, new Set(c.payload.inputs.map((i) => i.to)));
+    if (c.kind === "link_input") inputs.get(c.artifactId)?.add(c.payload.to);
+    if (c.kind === "unlink_input") inputs.get(c.artifactId)?.delete(c.payload.to);
     if (c.kind === "seal" && c.payload.reason === "cancelled") {
-      for (const edge of edgesTouching(model, c.artifactId)) {
-        const key = `${edge.artifactId} ${edge.to}`;
-        if (already.has(key)) continue;
-        already.add(key);
-        out.push({
-          artifactId: edge.artifactId,
-          kind: "unlink_input",
-          target: edge.artifactId,
-          payload: { to: edge.to }
-        });
+      for (const [id, upstreams] of inputs) {
+        for (const to of upstreams) if (id === c.artifactId || to === c.artifactId) {
+          out.push({ artifactId: id, kind: "unlink_input", target: id, payload: { to } });
+          upstreams.delete(to);
+        }
       }
     }
     out.push(c);
@@ -18897,6 +19088,10 @@ function filterReadModelByWorkspace(model, workspace) {
     pinMeta: new Map([...model.pinMeta].filter(([artId]) => myArtIds.has(artId)))
   };
 }
+function assertWorkorderDispatchActive(snap) {
+  if (!snap?.workorder.dispatchPaused) return;
+  throw new KernelError("\u5DE5\u5355\u5DF2\u6682\u505C\u2014\u2014\u8BF7\u5148\u901A\u8FC7\u5DE5\u5355\u64CD\u4F5C\u6062\u590D\u8FD0\u884C\uFF0C\u518D\u6267\u884C\u8282\u70B9\u7EA7\u8C03\u5EA6\u64CD\u4F5C", "workorder-paused");
+}
 async function mapWithConcurrency(items, limit, fn) {
   if (items.length === 0) return [];
   const out = new Array(items.length);
@@ -19532,6 +19727,7 @@ var init_kernel_bridge = __esm({
         }
         if (!workId) {
           const snap = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+          assertWorkorderDispatchActive(snap);
           const nodeRow = snap?.nodes.find((n) => n.id === args.artifactId);
           const headId = nodeRow?.latestWorkId ?? null;
           if (headId) {
@@ -19953,6 +20149,30 @@ var init_kernel_bridge = __esm({
         });
       }
       async resolveAnnotation(args) {
+        if (args.resolution === "acknowledged" && args.viaNode) {
+          const gap = (this.model.gaps.get(args.viaNode) ?? []).find((g2) => g2.gapId === args.annotationId);
+          if (gap) {
+            if (!gap.resolved || !args.note?.trim()) throw new Error("\u53EA\u80FD\u786E\u8BA4\u5DF2\u89E3\u51B3\u7684\u7F3A\u53E3\uFF0C\u4E14\u9700\u8BF4\u660E\u4E3A\u4F55\u65E0\u9700\u6539\u7A3F");
+            const wid2 = this.wo(args.viaNode);
+            await this.commit({
+              companyId: "",
+              workorderId: wid2,
+              actorId: args.actor,
+              event: {
+                kind: "issue.resolve",
+                workorderId: wid2,
+                issueId: gap.gapId,
+                state: "resolved",
+                by: args.actor,
+                note: args.note,
+                viaWorkId: null,
+                viaNodeId: args.viaNode,
+                acknowledged: true
+              }
+            });
+            return;
+          }
+        }
         const ann = this.model.annotations.get(args.annotationId);
         if (!ann) throw new Error(`annotation not found: ${args.annotationId}`);
         if (isHumanChangeRequest(ann) && args.actor.startsWith("actor:agent:") && args.resolution === "resolved" && !args.via) {
@@ -19971,7 +20191,9 @@ var init_kernel_bridge = __esm({
             state: args.resolution === "wontfix" ? "closed" : "resolved",
             by: args.actor,
             note: args.note ?? null,
-            viaWorkId: args.via ?? null
+            viaWorkId: args.via ?? null,
+            ...args.viaNode ? { viaNodeId: args.viaNode } : {},
+            ...args.resolution === "acknowledged" ? { acknowledged: true } : {}
           }
         });
       }
@@ -20037,7 +20259,7 @@ var init_kernel_bridge = __esm({
         for (const [artifactId, gaps] of this.model.gaps) {
           if (gaps.some((g2) => g2.gapId === args.gapId && !g2.resolved)) {
             const wid = this.wo(artifactId);
-            await this.commit({
+            const events = [{
               companyId: "",
               workorderId: wid,
               actorId: args.actor,
@@ -20050,16 +20272,31 @@ var init_kernel_bridge = __esm({
                 note: args.note ?? null,
                 viaWorkId: null
               }
+            }];
+            if (args.rework) events.push({
+              companyId: "",
+              workorderId: wid,
+              actorId: args.actor,
+              event: {
+                kind: "issue.create",
+                workorderId: wid,
+                issueId: `ann:rework:${args.gapId}`,
+                issueKind: "comment",
+                body: args.note ?? "\u7F3A\u53E3\u5DF2\u89E3\u51B3\uFF0C\u8BF7\u6838\u5BF9\u89E3\u6CD5",
+                aboutNodeId: artifactId,
+                aboutWorkId: null,
+                raisedByNodeId: null,
+                authorActorId: args.actor,
+                handActorId: null,
+                recipients: [],
+                attachments: [],
+                gapId: args.gapId,
+                source: "gap-recovery"
+              }
             });
-            if (args.rework) {
-              await this.annotate({
-                artifactId,
-                actor: args.actor,
-                kind: "comment",
-                annotationId: `ann:rework:${args.gapId}`,
-                body: args.note ?? "\u7F3A\u53E3\u5DF2\u89E3\u51B3\uFF0C\u8BF7\u6309\u7B54\u590D\u91CD\u505A"
-              });
-            }
+            await this.bus.submitBatchAndProcess(events);
+            this.markWorkorderDirty(wid);
+            await this.refreshTracked();
             return;
           }
         }
@@ -20108,6 +20345,57 @@ var init_kernel_bridge = __esm({
           }
         });
       }
+      /** 人确认恢复卡后，只关闭卡中列出的缺口和关联上报。其他问题仍由各自责任人处理。 */
+      async resolveRecovery(args) {
+        if (!args.actor.startsWith("actor:human:")) throw new Error("\u6062\u590D\u51B3\u5B9A\u9700\u8981\u4EBA\u660E\u786E\u786E\u8BA4");
+        if (!args.reason.trim()) throw new Error("\u6062\u590D\u51B3\u5B9A\u5FC5\u987B\u8BF4\u660E\u91C7\u7528\u7684\u65B9\u6848");
+        const wid = this.wo(args.artifactId);
+        const snapshot = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+        const gap = snapshot?.issues.find((i) => i.id === args.gapId && i.kind === "gap" && i.aboutNodeId === args.artifactId);
+        const escalation = snapshot?.issues.find((i) => i.id === args.escalationId && i.kind === "escalation" && i.aboutNodeId === args.artifactId);
+        if (!gap || !escalation || escalation.gapId !== gap.id) throw new Error("\u6062\u590D\u5361\u7684\u7F3A\u53E3\u4E0E\u4E0A\u62A5\u5173\u8054\u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u786E\u8BA4");
+        const events = [];
+        for (const issue2 of [gap, escalation]) if (!issue2.resolvedAt) events.push({
+          companyId: "",
+          workorderId: wid,
+          actorId: args.actor,
+          event: {
+            kind: "issue.resolve",
+            workorderId: wid,
+            issueId: issue2.id,
+            state: "resolved",
+            by: args.actor,
+            note: args.reason,
+            viaWorkId: null,
+            closeRelatedEscalations: false
+          }
+        });
+        if (!gap.resolvedAt) events.push({
+          companyId: "",
+          workorderId: wid,
+          actorId: args.actor,
+          event: {
+            kind: "issue.create",
+            workorderId: wid,
+            issueId: `ann:recovery:${gap.id}`,
+            issueKind: "comment",
+            body: args.reason,
+            aboutNodeId: args.artifactId,
+            aboutWorkId: null,
+            raisedByNodeId: null,
+            authorActorId: args.actor,
+            handActorId: null,
+            recipients: [],
+            attachments: [],
+            gapId: gap.id,
+            source: "gap-recovery"
+          }
+        });
+        await this.bus.submitBatchAndProcess(events);
+        this.markWorkorderDirty(wid);
+        await this.refreshTracked();
+        await this.releaseIfStillHeld(args.artifactId, args.actor);
+      }
       async resolveEscalation(args) {
         if (!args.actor.startsWith("actor:human:")) {
           throw new Error("\u5173\u95ED\u5347\u7EA7\u9700\u8981\u4EBA\u660E\u786E\u786E\u8BA4\uFF1Bagent \u8BF7\u63D0\u4EA4\u5173\u95ED\u6388\u6743\u7533\u8BF7");
@@ -20312,6 +20600,7 @@ var init_kernel_bridge = __esm({
       async rerunNode(args) {
         const wid = this.wo(args.artifactId);
         const snap = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+        assertWorkorderDispatchActive(snap);
         const node2 = snap?.nodes.find((n) => n.id === args.artifactId);
         if (!node2 || node2.cancelledAt) throw new KernelError(`\u8282\u70B9\u4E0D\u5B58\u5728\u6216\u5DF2\u4F5C\u5E9F\uFF1A${args.artifactId}`, "not-found");
         if (!node2.assigneeActorId) throw new KernelError("\u8282\u70B9\u672A\u6307\u6D3E\u6267\u884C\u4EBA\u2014\u2014\u5148\u6307\u6D3E\u518D\u91CD\u65B0\u8FD0\u884C", "no-assignee");
@@ -20361,6 +20650,7 @@ var init_kernel_bridge = __esm({
       async rereviewNode(args) {
         const wid = this.wo(args.artifactId);
         const snap = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+        assertWorkorderDispatchActive(snap);
         const node2 = snap?.nodes.find((n) => n.id === args.artifactId);
         if (!node2 || node2.cancelledAt) throw new KernelError(`\u8282\u70B9\u4E0D\u5B58\u5728\u6216\u5DF2\u4F5C\u5E9F\uFF1A${args.artifactId}`, "not-found");
         const lw = node2.latestWorkId ? snap.works.find((w2) => w2.id === node2.latestWorkId) : null;
@@ -20563,12 +20853,9 @@ var init_kernel_bridge = __esm({
             throw new Error(`resolveEscalation \u6388\u6743\u5361\u7F3A escalationId\uFF1A${args.draftId}`);
           }
           const reason = typeof card2.commandArgs?.["reason"] === "string" ? card2.commandArgs["reason"] : void 0;
-          await this.resolveEscalation({
-            artifactId,
-            actor: args.actor,
-            escalationId,
-            ...reason !== void 0 ? { reason } : {}
-          });
+          const gapId = typeof card2.commandArgs?.["gapId"] === "string" ? card2.commandArgs["gapId"] : void 0;
+          if (gapId) await this.resolveRecovery({ artifactId, actor: args.actor, escalationId, gapId, reason: reason ?? "" });
+          else await this.resolveEscalation({ artifactId, actor: args.actor, escalationId, ...reason !== void 0 ? { reason } : {} });
         } else {
           throw new Error(`\u547D\u4EE4\u6388\u6743\uFF1A\u6682\u4E0D\u652F\u6301\u6267\u884C ${card2.command}`);
         }
@@ -20612,11 +20899,29 @@ var init_kernel_bridge = __esm({
         if (preview2.changeClass === "C" && !_actor.startsWith("actor:human:")) {
           throw new Error("C \u7C7B\u6539\u52A8\uFF08\u975E\u5355\u8C03\u6539\u56FE\uFF09\u5FC5\u987B\u7531\u4EBA\u786E\u8BA4\uFF0Cagent \u4E0D\u80FD\u76F4\u63A5\u843D\u5730\u2014\u2014\u8BF7\u8D70 preview \u2192 draft \u2192 \u4EBA apply-draft");
         }
-        const wid = plan.workspace ?? plan.ops.find((o) => o.action === "spawn" && o.workspace)?.workspace ?? "ws:default";
+        const wid = ws ?? plan.ops.find((o) => o.action === "spawn" && o.workspace)?.workspace ?? "ws:default";
         let applied = 0;
         const unsupported = [];
         const reviewerStaffing = [];
-        await this.ensureWorkorder(wid, "", _actor);
+        const events = [];
+        const artifacts = new Map([...this.model.artifacts].map(([id, art]) => [id, { ...art, fields: { ...art.fields }, inputs: [...art.inputs] }]));
+        const woFor = (id) => {
+          const art = artifacts.get(id);
+          if (!art) throw new Error(`artifact not found: ${id}`);
+          return art.workspace;
+        };
+        const queue = async (input) => {
+          if (input.event.kind === "plan.update_spec") {
+            const event = input.event;
+            const previous3 = events.find((e) => e.workorderId === input.workorderId && e.event.kind === "plan.update_spec" && e.event.nodeId === event.nodeId);
+            if (previous3?.event.kind === "plan.update_spec") {
+              previous3.event = { ...previous3.event, ...event };
+              return;
+            }
+          }
+          events.push(input);
+        };
+        const enqueue = async (event) => queue({ companyId: "", workorderId: event.workorderId, actorId: _actor, event });
         for (const op of plan.ops) {
           switch (op.action) {
             case "spawn": {
@@ -20648,7 +20953,7 @@ var init_kernel_bridge = __esm({
                 // ★ executionEnv 同走 fields jsonb（与路径 A 对称——两条 spawn 路径必须一致，前车之鉴：类型默认评审闸）。
                 ...op.executionEnv !== void 0 ? { executionEnv: op.executionEnv } : {}
               } : opFields;
-              await this.commit({
+              await queue({
                 companyId: "",
                 workorderId: wid,
                 actorId: _actor,
@@ -20678,27 +20983,64 @@ var init_kernel_bridge = __esm({
                   activateWorkorder: false
                 }
               });
+              artifacts.set(id, {
+                id,
+                type: op.type,
+                title: op.title ?? op.type,
+                description: op.description ?? "",
+                workspace: wid,
+                owner: spawnOwner,
+                fields: mergedFields ?? {},
+                reviewRoles: opReviewRoles,
+                reviewers: opReviewers ?? [],
+                inputs: (op.inputs ?? []).map((i) => ({ to: i.to, required: i.required ?? true, pinned: null }))
+              });
               applied++;
               break;
             }
-            case "link":
-              await this.linkInput({ artifactId: op.artifactId, to: op.to, actor: _actor });
+            case "link": {
+              await enqueue({ kind: "plan.add_edge", workorderId: woFor(op.artifactId), fromNodeId: op.to, toNodeId: op.artifactId, edgeKind: "data", required: op.required ?? true });
+              const art = artifacts.get(op.artifactId);
+              if (!art.inputs.some((i) => i.to === op.to)) art.inputs.push({ to: op.to, required: op.required ?? true, pinned: null });
               applied++;
               break;
-            case "unlink":
-              await this.unlinkInput({ artifactId: op.artifactId, to: op.to, actor: _actor });
+            }
+            case "unlink": {
+              await enqueue({ kind: "plan.delete_edge", workorderId: woFor(op.artifactId), fromNodeId: op.to, toNodeId: op.artifactId });
+              const art = artifacts.get(op.artifactId);
+              art.inputs = art.inputs.filter((i) => i.to !== op.to);
               applied++;
               break;
+            }
             case "assign":
-              await this.assignOwner({ artifactId: op.artifactId, owner: op.owner, actor: _actor });
+              await enqueue({ kind: "plan.assign_actor", workorderId: woFor(op.artifactId), nodeId: op.artifactId, assigneeActorId: op.owner, assigneeRole: null });
               applied++;
               break;
             case "seal":
-              await this.seal({ artifactId: op.artifactId, reason: op.reason, actor: _actor });
+              if (op.reason === "cancelled") for (const art of artifacts.values()) {
+                for (const edge of art.inputs.filter((i) => art.id === op.artifactId || i.to === op.artifactId)) {
+                  await enqueue({ kind: "plan.delete_edge", workorderId: woFor(art.id), fromNodeId: edge.to, toNodeId: art.id });
+                }
+                art.inputs = art.inputs.filter((i) => art.id !== op.artifactId && i.to !== op.artifactId);
+              }
+              await enqueue({ kind: "plan.delete_node", workorderId: woFor(op.artifactId), nodeId: op.artifactId, sealReason: op.reason });
               applied++;
               break;
             case "annotate":
-              await this.annotate({ artifactId: op.artifactId, body: op.body, actor: _actor });
+              await enqueue({
+                kind: "issue.create",
+                workorderId: woFor(op.artifactId),
+                issueId: `ann:${(0, import_node_crypto3.randomUUID)()}`,
+                issueKind: "comment",
+                body: op.body,
+                aboutNodeId: op.artifactId,
+                aboutWorkId: null,
+                raisedByNodeId: null,
+                authorActorId: _actor,
+                handActorId: null,
+                recipients: [],
+                attachments: []
+              });
               applied++;
               break;
             case "edit": {
@@ -20706,7 +21048,7 @@ var init_kernel_bridge = __esm({
               const opReviewers = op.reviewers;
               const editReviewRoles = op.reviewRoles;
               if (artId && (opReviewers || editReviewRoles !== void 0)) {
-                const art = this.model.artifacts.get(artId);
+                const art = artifacts.get(artId);
                 const effectiveRoles = editReviewRoles !== void 0 ? editReviewRoles === null ? void 0 : editReviewRoles : art?.reviewRoles;
                 const effectiveExplicit = opReviewers ?? (art?.reviewers ?? []).map((r) => ({ actor: r.actor, source: r.source }));
                 const { reviewers: nextReqs, staffingIssues } = resolveNodeReviewers({
@@ -20720,13 +21062,13 @@ var init_kernel_bridge = __esm({
                   reviewerStaffing.push({ nodeId: artId, type: art?.type ?? "", role: issue2.role, from: issue2.from });
                   console.warn(`[edit] ${artId} \u7684\u300C${issue2.role}\u300D\u8BC4\u5BA1\u95F8\u5728\u5185\u6838 roleIndex \u91CC\u6CA1\u6709\u6301\u6709\u8005\u2014\u2014\u8BE5\u6876\u6682\u7F3A\u3002`);
                 }
-                await this.commit({
+                await queue({
                   companyId: "",
-                  workorderId: this.wo(artId),
+                  workorderId: woFor(artId),
                   actorId: _actor,
                   event: {
                     kind: "plan.update_review_requirements",
-                    workorderId: this.wo(artId),
+                    workorderId: woFor(artId),
                     nodeId: artId,
                     reviewers: nextReqs
                   }
@@ -20735,15 +21077,15 @@ var init_kernel_bridge = __esm({
               const opTitle = op.title;
               const opDescription = op.description;
               if (artId && (opTitle !== void 0 || opDescription !== void 0)) {
-                await this.commit({
+                await queue({
                   companyId: "",
-                  workorderId: this.wo(artId),
+                  workorderId: woFor(artId),
                   actorId: _actor,
                   event: {
                     kind: "plan.update_spec",
-                    workorderId: this.wo(artId),
+                    workorderId: woFor(artId),
                     nodeId: artId,
-                    spec: opDescription ?? this.model.artifacts.get(artId)?.description ?? null,
+                    spec: opDescription ?? artifacts.get(artId)?.description ?? null,
                     ...opTitle !== void 0 ? { title: opTitle } : {},
                     policy: "auto"
                   }
@@ -20751,21 +21093,30 @@ var init_kernel_bridge = __esm({
               }
               const fields = op.fields;
               if (artId && fields) {
-                const editDef = this.schema.get(this.model.artifacts.get(artId)?.type ?? "");
+                const editDef = this.schema.get(artifacts.get(artId)?.type ?? "");
                 const validated = editDef?.fieldDefs ? validateArtifactFields(fields, editDef.fieldDefs, "edit") : fields;
-                await this.commit({
+                await queue({
                   companyId: "",
-                  workorderId: this.wo(artId),
+                  workorderId: woFor(artId),
                   actorId: _actor,
                   event: {
                     kind: "plan.update_fields",
-                    workorderId: this.wo(artId),
+                    workorderId: woFor(artId),
                     nodeId: artId,
                     fields: validated ?? {},
                     merge: true
                   }
                 });
               }
+              const previous3 = artifacts.get(artId);
+              if (previous3) artifacts.set(artId, {
+                ...previous3,
+                ...opTitle !== void 0 ? { title: opTitle } : {},
+                ...opDescription !== void 0 ? { description: opDescription } : {},
+                ...fields ? { fields: { ...previous3.fields, ...fields } } : {},
+                ...editReviewRoles !== void 0 ? { reviewRoles: editReviewRoles ?? void 0 } : {},
+                ...opReviewers ? { reviewers: opReviewers } : {}
+              });
               applied++;
               break;
             }
@@ -20774,11 +21125,16 @@ var init_kernel_bridge = __esm({
               if (!escOp.escalationId) {
                 throw new Error(`resolveEscalation op \u7F3A escalationId\uFF08${escOp.artifactId}\uFF09\u2014\u2014\u4E0D\u652F\u6301\u6574\u8282\u70B9\u5168\u6E05\uFF0C\u8BF7\u6307\u660E\u5173\u54EA\u4E00\u6761`);
               }
-              await this.resolveEscalation({
-                artifactId: escOp.artifactId,
-                actor: _actor,
-                escalationId: escOp.escalationId,
-                ...escOp.reason !== void 0 ? { reason: escOp.reason } : {}
+              const escalation = (this.model.escalations.get(escOp.artifactId) ?? []).find((e) => e.escalationId === escOp.escalationId);
+              if (!escalation) throw new Error(`escalation not found: ${escOp.escalationId}`);
+              await enqueue({
+                kind: "issue.resolve",
+                workorderId: woFor(escOp.artifactId),
+                issueId: escOp.escalationId,
+                state: "resolved",
+                by: _actor,
+                note: escOp.reason ?? null,
+                viaWorkId: null
               });
               applied++;
               break;
@@ -20788,7 +21144,7 @@ var init_kernel_bridge = __esm({
               break;
           }
         }
-        await this.commit({
+        await queue({
           companyId: "",
           workorderId: wid,
           actorId: _actor,
@@ -20803,17 +21159,22 @@ var init_kernel_bridge = __esm({
             activateWorkorder: true
           }
         });
+        if (unsupported.length) throw new KernelError(`\u6574\u6279\u672A\u843D\u5730\uFF1B\u4EE5\u4E0B op \u672C\u5F15\u64CE\u4E0D\u652F\u6301\uFF1A${unsupported.join("\u3001")}`, "unsupported-op");
+        await this.ensureWorkorder(wid, "", _actor);
+        await this.bus.submitBatchAndProcess(events);
+        for (const event of events) {
+          this.trackedWorkorders.add(event.workorderId);
+          this.markWorkorderDirty(event.workorderId);
+        }
+        await this.refreshTracked();
         await this.syncFromBus(wid);
+        for (const id of new Set(plan.ops.filter((op) => op.action === "resolveEscalation").map((op) => op.artifactId))) {
+          await this.releaseIfStillHeld(id, _actor);
+        }
         if (typeof plan.resolvesProposal === "string") {
           this.draftCards.delete(plan.resolvesProposal);
           await this.refreshModel();
         }
-        if (unsupported.length > 0) {
-          throw new KernelError(
-            `\u5DF2\u843D\u5730 ${applied} \u6761 op\uFF1B\u4EE5\u4E0B op \u672C\u5F15\u64CE\u4E0D\u652F\u6301\u3001\u672A\u6267\u884C\uFF1A${unsupported.join("\u3001")}\uFF08pin \u5DF2\u5E9F\u5F03\u2014\u2014\u4E0B\u6E38\u7248\u672C\u7531\u9A8C\u6536\u4E0A\u6E38\u81EA\u52A8\u63A8\u8FDB\uFF09`,
-            "unsupported-op"
-          );
-        }
         return {
           interventionId: `intervention:${(0, import_node_crypto3.randomUUID)()}`,
           applied,
@@ -20865,67 +21226,6 @@ var init_chat_system_message = __esm({
   }
 });
 
-// ../server/src/build-info.ts
-function findRepoRoot() {
-  let dir;
-  try {
-    dir = path.dirname((0, import_node_url2.fileURLToPath)(__esm_import_meta_url));
-  } catch {
-    return null;
-  }
-  for (let i = 0; i < 12; i++) {
-    if (fs.existsSync(path.join(dir, ".git"))) return dir;
-    const parent = path.dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return null;
-}
-function git(root, args) {
-  try {
-    const out = (0, import_node_child_process.execFileSync)("git", args, {
-      cwd: root,
-      encoding: "utf8",
-      timeout: 3e3,
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    const v2 = out.trim();
-    return v2 || null;
-  } catch {
-    return null;
-  }
-}
-function getBuildInfo() {
-  if (cached) return cached;
-  const envSha = process.env["OASIS_GIT_SHA"]?.trim();
-  const envBranch = process.env["OASIS_GIT_BRANCH"]?.trim();
-  let gitSha = envSha || null;
-  let gitBranch = envBranch || null;
-  if (!gitSha || !gitBranch) {
-    const root = findRepoRoot();
-    if (root) {
-      if (!gitSha) gitSha = git(root, ["rev-parse", "HEAD"]);
-      if (!gitBranch) {
-        const b2 = git(root, ["rev-parse", "--abbrev-ref", "HEAD"]);
-        gitBranch = b2 === "HEAD" ? null : b2;
-      }
-    }
-  }
-  cached = { gitSha, gitBranch, startedAt: STARTED_AT };
-  return cached;
-}
-var import_node_child_process, fs, path, import_node_url2, STARTED_AT, cached;
-var init_build_info = __esm({
-  "../server/src/build-info.ts"() {
-    "use strict";
-    import_node_child_process = require("node:child_process");
-    fs = __toESM(require("node:fs"), 1);
-    path = __toESM(require("node:path"), 1);
-    import_node_url2 = require("node:url");
-    STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
-  }
-});
-
 // ../server/src/facades/api/router.ts
 var ApiError, Router;
 var init_router = __esm({
@@ -21071,6 +21371,32 @@ async function saveArtifactContent(kernel, blobs, actor, input) {
   }
   return { ...view, contentRef, text: input.text };
 }
+async function readArtifactFile(kernel, blobs, artifactId, path41, expectedRef) {
+  await kernel.refreshModel();
+  const artifact = kernel.model.artifacts.get(artifactId);
+  const output = artifact?.currentRev ? kernel.model.revisions.get(artifact.currentRev) : void 0;
+  if (!artifact || !output) throw new ApiError(404, "NOT_FOUND", "\u6B64\u4EA7\u7269\u6CA1\u6709\u53EF\u4E0B\u8F7D\u7684\u539F\u6587\u4EF6");
+  if (expectedRef && output.contentRef !== expectedRef) throw new ApiError(409, "CONTENT_CONFLICT", "\u6587\u4EF6\u5DF2\u66F4\u65B0\uFF0C\u8BF7\u91CD\u65B0\u6253\u5F00");
+  let hash2 = output.contentRef;
+  let name = artifact.title || artifactId;
+  if (output.contentKind === "manifest") {
+    if (!path41) throw new ApiError(400, "PATH_REQUIRED", "\u8BF7\u9009\u62E9\u6587\u4EF6\u5939\u4E2D\u7684\u5177\u4F53\u6587\u4EF6");
+    const entry = parseManifest(await blobs.get(output.contentRef)).entries.find((e) => e.path === path41);
+    if (!entry) throw new ApiError(404, "NOT_FOUND", "\u5305\u5185\u6587\u4EF6\u4E0D\u5B58\u5728");
+    hash2 = entry.hash;
+    name = entry.path;
+    if (entry.size !== void 0 && entry.size > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", "\u6587\u4EF6\u8D85\u8FC7 50 MiB \u8BFB\u53D6\u9650\u5236");
+  } else if (output.contentKind !== "inline-blob") {
+    throw new ApiError(404, "NOT_FOUND", "\u6B64\u4EA7\u7269\u6CA1\u6709\u53EF\u4E0B\u8F7D\u7684\u539F\u6587\u4EF6");
+  }
+  const meta = await blobs.meta?.(hash2);
+  if (meta && meta.size > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", "\u6587\u4EF6\u8D85\u8FC7 50 MiB \u8BFB\u53D6\u9650\u5236");
+  try {
+    return { bytes: await blobs.get(hash2), name, contentType: meta?.contentType };
+  } catch {
+    throw new ApiError(404, "NOT_FOUND", "\u5F53\u524D\u516C\u53F8\u4E2D\u627E\u4E0D\u5230\u8BE5\u6587\u4EF6\u6B63\u6587");
+  }
+}
 var init_artifact_content2 = __esm({
   "../server/src/artifact-content.ts"() {
     "use strict";
@@ -21079,6 +21405,110 @@ var init_artifact_content2 = __esm({
   }
 });
 
+// ../server/src/file-http.ts
+async function serveFileRequest(req, res, url, engine) {
+  try {
+    if (req.method !== "GET" || url.pathname !== "/api/files/content") throw new ApiError(404, "NOT_FOUND", "\u6587\u4EF6\u63A5\u53E3\u4E0D\u5B58\u5728");
+    const { bytes: bytes2, name, contentType } = await readArtifactFile(
+      engine.kernel,
+      engine.blobs,
+      url.searchParams.get("artifact") ?? "",
+      url.searchParams.get("path"),
+      url.searchParams.get("ref")
+    );
+    if (bytes2.length > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", "\u6587\u4EF6\u8D85\u8FC7 50 MiB \u8BFB\u53D6\u9650\u5236");
+    res.writeHead(200, {
+      "content-type": contentType ?? sniffContentType(bytes2) ?? "application/octet-stream",
+      "content-length": String(bytes2.length),
+      "cache-control": "private, no-store",
+      "x-content-type-options": "nosniff",
+      "content-disposition": `attachment; filename*=UTF-8''${encodeURIComponent(name.split(/[\\/]/).pop() || "file").replace(/['()*]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`)}`
+    }).end(Buffer.from(bytes2));
+  } catch (error2) {
+    if (res.destroyed) return;
+    const status = error2 instanceof ApiError ? error2.status : 500;
+    if (!req.complete) {
+      res.setHeader("connection", "close");
+      req.resume();
+    }
+    res.writeHead(status, { "content-type": "application/json", "cache-control": "no-store" }).end(JSON.stringify({
+      error: {
+        code: error2 instanceof ApiError ? error2.code : "FILE_READ_FAILED",
+        message: error2 instanceof ApiError ? error2.message : "\u6587\u4EF6\u8BFB\u53D6\u5931\u8D25\uFF0C\u8BF7\u91CD\u8BD5"
+      }
+    }));
+  }
+}
+var init_file_http = __esm({
+  "../server/src/file-http.ts"() {
+    "use strict";
+    init_src();
+    init_artifact_content2();
+    init_router();
+  }
+});
+
+// ../server/src/build-info.ts
+function findRepoRoot() {
+  let dir;
+  try {
+    dir = path.dirname((0, import_node_url2.fileURLToPath)(__esm_import_meta_url));
+  } catch {
+    return null;
+  }
+  for (let i = 0; i < 12; i++) {
+    if (fs.existsSync(path.join(dir, ".git"))) return dir;
+    const parent = path.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+function git(root, args) {
+  try {
+    const out = (0, import_node_child_process.execFileSync)("git", args, {
+      cwd: root,
+      encoding: "utf8",
+      timeout: 3e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    const v2 = out.trim();
+    return v2 || null;
+  } catch {
+    return null;
+  }
+}
+function getBuildInfo() {
+  if (cached) return cached;
+  const envSha = process.env["OASIS_GIT_SHA"]?.trim();
+  const envBranch = process.env["OASIS_GIT_BRANCH"]?.trim();
+  let gitSha = envSha || null;
+  let gitBranch = envBranch || null;
+  if (!gitSha || !gitBranch) {
+    const root = findRepoRoot();
+    if (root) {
+      if (!gitSha) gitSha = git(root, ["rev-parse", "HEAD"]);
+      if (!gitBranch) {
+        const b2 = git(root, ["rev-parse", "--abbrev-ref", "HEAD"]);
+        gitBranch = b2 === "HEAD" ? null : b2;
+      }
+    }
+  }
+  cached = { gitSha, gitBranch, startedAt: STARTED_AT };
+  return cached;
+}
+var import_node_child_process, fs, path, import_node_url2, STARTED_AT, cached;
+var init_build_info = __esm({
+  "../server/src/build-info.ts"() {
+    "use strict";
+    import_node_child_process = require("node:child_process");
+    fs = __toESM(require("node:fs"), 1);
+    path = __toESM(require("node:path"), 1);
+    import_node_url2 = require("node:url");
+    STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
+  }
+});
+
 // ../server/src/command-policy.ts
 function classifyCommand(command) {
   return COMMAND_POLICY[command] ?? { risk: "direct" };
@@ -21105,7 +21535,7 @@ var init_command_policy = __esm({
         // 重复关同一条是幂等的（kernel.resolveEscalation 内部按 escalationId 去重）
         // 「关错=静默停摆」的唯一防线是人在卡上一眼看出「关的是哪一条」——escalationId 与 reason 摘要必须上卡。
         // a 里 escalationId/artifactId 由 server.ts 起草时冻进 commandArgs（已四级解析），保证是真值、非 `?`。
-        effect: (a) => `\u5173\u95ED\u4E0A\u62A5 ${shortId(a.escalationId)}\uFF08\u8282\u70B9 ${shortId(a.artifactId)}${typeof a.reason === "string" ? `\uFF0C\u7406\u7531\uFF1A${a.reason.slice(0, 60)}` : ""}\uFF09`
+        effect: (a) => typeof a.gapId === "string" ? `\u91C7\u7528\u65B9\u6848\uFF1A${String(a.reason ?? "")}\uFF1B\u89E3\u51B3\u7F3A\u53E3 ${a.gapId}\uFF1B\u5173\u95ED\u5173\u8054\u4E0A\u62A5 ${String(a.escalationId)}\uFF1B\u7EE7\u7EED\u6267\u884C\uFF1A\u662F\uFF08\u4ECD\u987B\u6EE1\u8DB3\u5176\u4ED6\u963B\u585E\u6761\u4EF6\uFF09` : `\u5173\u95ED\u4E0A\u62A5 ${shortId(a.escalationId)}\uFF08\u8282\u70B9 ${shortId(a.artifactId)}${typeof a.reason === "string" ? `\uFF0C\u7406\u7531\uFF1A${a.reason}` : ""}\uFF09`
       },
       gc: {
         risk: "forbidden",
@@ -28028,6 +28458,15 @@ var init_chat_item_ledger = __esm({
         this.messageId = deps.messageId ?? null;
         this.telemetryTextInContent = deps.telemetryTextInContent === true;
         this.persistEnabled = Boolean(deps.items) && chatItemsDoubleWriteEnabled();
+        this.clock = Math.max(0, deps.versionSeed ?? 0);
+        if (deps.versionSeed === void 0 && deps.items) {
+          void deps.items.sessionVersionCursor(deps.sessionId).then(
+            (seed) => {
+              if (seed > this.clock) this.clock = seed;
+            },
+            () => void 0
+          );
+        }
       }
       /** 账本轮次 id（`chat_session_turns.id`；未接账本时是 {@link fallbackTurnId}）。v3 wire 上 item 帧的 turnId 用它（ADR-0510 D1）。 */
       get turnId() {
@@ -28043,6 +28482,11 @@ var init_chat_item_ledger = __esm({
       /** 内存账本：itemId → 行。插入顺序即 seq 顺序。 */
       rows = /* @__PURE__ */ new Map();
       seqCounter = 0;
+      /**
+       * 会话逻辑时钟（ADR-0510 附录 A）。**一次写走一格**——不描述某条 item 改了第几次，描述
+       * 「这条会话被写了第几次」。于是「一次建行要发两帧」这个死结不存在：想发几帧就取几个号。
+       */
+      clock;
       segment = 0;
       messageId;
       /** 已排队但还没执行的那一次 `append_text`——排队期间到的片段合并进它（见 queueAppend）。 */
@@ -28055,6 +28499,18 @@ var init_chat_item_ledger = __esm({
       finished = false;
       /** 上一次见到的归一层 turnId——变了就清映射（provider 开了新 turn）。 */
       lastTurnId = null;
+      /** 会话逻辑时钟走一格。**唯一发号点**（ADR-0510 附录 A.4）——别在别处自己数。 */
+      tick() {
+        return ++this.clock;
+      }
+      /**
+       * 该 item 的服务端展示序；INSERT 还没返回（或没开双写）时是 undefined。
+       * 调用方（`emitV3`）拿不到就不在帧上带号——**不许自己编一个**。
+       */
+      ordFor(itemId) {
+        const ord = this.rows.get(itemId)?.ord;
+        return ord === null ? void 0 : ord;
+      }
       get failures() {
         return this.failureCount;
       }
@@ -28091,20 +28547,17 @@ var init_chat_item_ledger = __esm({
         if (event.type === "turn") {
           this.itemKeyMap.clear();
           this.lastTurnId = null;
-          return;
+          return null;
         }
         if (this.lastTurnId !== null && this.lastTurnId !== event.turnId) {
           this.itemKeyMap.clear();
         }
         this.lastTurnId = event.turnId;
         const existingId = this.itemKeyMap.get(event.providerItemKey);
-        if (existingId === void 0) {
-          this.createFrom(event);
-          return;
-        }
+        if (existingId === void 0) return this.createFrom(event);
         const row = this.rows.get(existingId);
-        if (!row) return;
-        this.applyOpTo(row, event);
+        if (!row) return null;
+        return this.applyOpTo(row, event);
       }
       // ── 非 provider 来源（服务端自己产的行）────────────────────────────────────
       /**
@@ -28299,34 +28752,49 @@ var init_chat_item_ledger = __esm({
           metadata: { [CHAT_ITEM_META_LEGACY_CONTENT]: inContent }
         });
         this.itemKeyMap.set(event.providerItemKey, id);
-        if (event.opShape.op === "set_status") this.applyOpTo(this.rows.get(id), event);
+        const row = this.rows.get(id);
+        const outcome = {
+          itemId: id,
+          version: row.wireVersion,
+          startedVersion: row.startedVersion,
+          ord: row.ord
+        };
+        if (event.opShape.op === "set_status") {
+          const followUp = this.applyOpTo(row, event);
+          if (followUp) outcome.version = followUp.version;
+        }
+        return outcome;
       }
       applyOpTo(row, event) {
         const op = event.opShape;
         if (event.attrs) row.attrs = { ...row.attrs, ...event.attrs };
         switch (op.op) {
           case "append_text":
-            if (op.text === "") return;
+            if (op.text === "") return null;
             row.text += op.text;
             this.queueAppend(row, op.text);
-            return;
+            return this.outcomeOf(row);
           case "set_text":
-            if (row.text === op.text) return;
+            if (row.text === op.text) return null;
             row.text = op.text;
             this.sealPendingAppend();
             this.persist(row, row.kind === "text" || row.kind === "thinking" ? { op: "set_text", text: op.text } : { op: "set_payload", payload: this.payloadOf(row) }, "set_text");
-            return;
+            return this.outcomeOf(row);
           case "patch_input":
             row.attrs = { ...row.attrs, input: op.input };
             this.persist(row, { op: "patch_input", input: op.input }, "patch_input");
-            return;
+            return this.outcomeOf(row);
           case "set_status":
-            if (row.status === op.status) return;
+            if (row.status === op.status) return null;
             row.status = op.status;
             this.persist(row, { op: "set_status", status: op.status }, "set_status");
-            return;
+            return this.outcomeOf(row);
         }
       }
+      /** 这一次写的回执。`persist` 已经在里面走过钟了，这里只是把读数带出去给 wire。 */
+      outcomeOf(row) {
+        return { itemId: row.id, version: row.wireVersion, ord: row.ord };
+      }
       /** 关掉所有还 streaming 的行（收尾/切段）。 */
       closeStreamingRows(status) {
         this.sealPendingAppend();
@@ -28361,9 +28829,14 @@ var init_chat_item_ledger = __esm({
       }
       insert(input) {
         const id = input.deterministicId ?? this.newId();
+        const startedVersion = this.tick();
+        const writeVersion = this.tick();
         const row = {
           id,
           seq: ++this.seqCounter,
+          ord: null,
+          wireVersion: writeVersion,
+          startedVersion,
           kind: input.kind,
           role: input.role,
           status: input.status,
@@ -28383,7 +28856,7 @@ var init_chat_item_ledger = __esm({
         const payload = input.payload ?? this.payloadOf(row);
         const metadata = input.metadata ?? { [CHAT_ITEM_META_LEGACY_CONTENT]: input.inContent };
         this.enqueue(async () => {
-          await this.deps.items.createItem({
+          const created = await this.deps.items.createItem({
             id,
             sessionId: this.deps.sessionId,
             messageId,
@@ -28395,8 +28868,20 @@ var init_chat_item_ledger = __esm({
             payload,
             metadata,
             providerItemKey: input.providerItemKey ?? null,
-            createdAt
+            createdAt,
+            version: writeVersion
           });
+          row.ord = created.ord;
+          try {
+            this.deps.onPersisted?.({
+              itemId: id,
+              ord: created.ord,
+              version: writeVersion,
+              role: input.role,
+              text: input.text
+            });
+          } catch {
+          }
         }, `create:${input.kind}`);
         return id;
       }
@@ -28405,6 +28890,7 @@ var init_chat_item_ledger = __esm({
        * 语义没变（`version` 数的是落库次数），投影是拼接，合不合并结果逐字相同。
        */
       queueAppend(row, text5) {
+        row.wireVersion = this.tick();
         if (!row.persist || !this.persistEnabled) return;
         const pending = this.pendingAppend;
         if (pending && pending.id === row.id) {
@@ -28418,7 +28904,11 @@ var init_chat_item_ledger = __esm({
           next.text = "";
           if (this.pendingAppend === next) this.pendingAppend = null;
           if (!merged) return;
-          const applied = await this.deps.items.applyOp(row.id, { op: "append_text", text: merged }, { at: this.now() });
+          const applied = await this.deps.items.applyOp(
+            row.id,
+            { op: "append_text", text: merged },
+            { at: this.now(), version: row.wireVersion }
+          );
           if (!applied) throw new Error(`item ${row.id} \u4E0D\u5B58\u5728\uFF08append_text \u843D\u7A7A\uFF09`);
         }, "append_text");
       }
@@ -28427,9 +28917,11 @@ var init_chat_item_ledger = __esm({
         this.pendingAppend = null;
       }
       persist(row, op, what) {
+        const version2 = this.tick();
+        row.wireVersion = version2;
         if (!row.persist || !this.persistEnabled) return;
         this.enqueue(async () => {
-          await this.deps.items.applyOp(row.id, op, { at: this.now() });
+          await this.deps.items.applyOp(row.id, op, { at: this.now(), version: version2 });
         }, what);
       }
       /** 串行链 + 失败吞掉计数。**串行是必须的**：append_text 依赖建行已经落地。 */
@@ -28518,17 +29010,21 @@ async function openAssistantRunningRow(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   if (typeof deps.chatStore.appendMessage !== "function") return void 0;
   const id = (0, import_node_crypto16.randomUUID)();
+  const at = now();
   try {
     await deps.chatStore.appendMessage({
       id,
       sessionId: deps.chatSessionId,
       role: "assistant",
       content: "",
-      createdAt: now(),
+      createdAt: at,
       status: "running",
       ...deps.runId ? { runId: deps.runId } : {},
       ...deps.turnId ? { turnId: deps.turnId } : {}
     });
+    if (typeof deps.chatStore.updateSession === "function") {
+      await deps.chatStore.updateSession(deps.chatSessionId, { touchedAt: at }).catch(() => void 0);
+    }
     return id;
   } catch {
     return void 0;
@@ -141732,7 +142228,7 @@ function buildNodeTimeline(artifactId, snap, runIdByTarget) {
     if (w2.nodeId !== artifactId) continue;
     if (isReplyWork(w2)) continue;
     nodeWorkIds.add(w2.id);
-    const status = w2.status ?? (w2.retryAt ? "retry" : w2.deadAt ? "dead" : w2.endedAt ? w2.outcome === "failed" ? "failed" : "success" : "running");
+    const status = w2.status ?? (w2.retryAt && w2.deadAt ? "retry" : w2.deadAt ? "dead" : w2.endedAt ? w2.outcome === "failed" ? "failed" : "success" : "running");
     items.push({
       type: "work",
       id: w2.id,
@@ -159267,13 +159763,15 @@ var init_live_chat = __esm({
        * 账本坏掉不影响对话；v3 emit 抛异常也不影响 v2 通路与账本落盘——两条独立通路。
        */
       applyNormalizedEvent(turn, event) {
+        let outcome = null;
         try {
-          turn.items?.apply(event);
+          outcome = turn.items?.apply(event) ?? null;
         } catch {
         }
         if (event.type === "turn") return;
+        if (!outcome) return;
         try {
-          this.emitV3(turn, event);
+          this.emitV3(turn, event, outcome);
         } catch {
         }
       }
@@ -159293,18 +159791,17 @@ var init_live_chat = __esm({
       wireTurnId(turn) {
         return turn.items?.turnId ?? turn.liveTurnId;
       }
-      emitV3(turn, event) {
+      emitV3(turn, event, outcome) {
         if (!turn.items) return;
-        const itemId = turn.items.itemIdForKey(event.providerItemKey);
-        if (!itemId) return;
+        const itemId = outcome.itemId;
         const itemType = normalizedKindToItemType(event.kind);
         const operation = normalizedOpToV3Op(event.opShape.op, event.kind);
         if (!operation) return;
-        const perItem = turn.v3Items.get(itemId) ?? { version: 0, textOffset: 0, started: false };
+        const perItem = turn.v3Items.get(itemId) ?? { textOffset: 0, started: false };
         const isTextual2 = event.kind === "text" || event.kind === "thinking";
         const opShape = event.opShape;
-        if (!perItem.started) {
-          perItem.version += 1;
+        const ord = turn.items.ordFor(itemId) ?? outcome.ord ?? void 0;
+        if (!perItem.started && outcome.startedVersion !== void 0) {
           const startedFrame = {
             protocolVersion: 3,
             streamId: turn.liveStreamId,
@@ -159312,7 +159809,8 @@ var init_live_chat = __esm({
             itemId,
             itemType,
             operation: "started",
-            itemVersion: perItem.version,
+            itemVersion: outcome.startedVersion,
+            ...ord !== void 0 ? { ord } : {},
             offset: 0,
             payload: v3StartedPayload(event.role, event.attrs, itemType, event.kind)
           };
@@ -159334,7 +159832,6 @@ var init_live_chat = __esm({
         } else if (opShape.op === "set_status") {
           if (opShape.status === "streaming") return;
         }
-        perItem.version += 1;
         turn.v3Items.set(itemId, perItem);
         const frame = {
           protocolVersion: 3,
@@ -159343,7 +159840,9 @@ var init_live_chat = __esm({
           itemId,
           itemType,
           operation,
-          itemVersion: perItem.version,
+          // 账本这一次写用掉的那一格钟——**库里那一行的 version 就是它**，快照与增量流同一套版本空间。
+          itemVersion: outcome.version,
+          ...ord !== void 0 ? { ord } : {},
           ...offset !== void 0 ? { offset } : {},
           ...payload !== void 0 ? { payload } : {}
         };
@@ -159369,6 +159868,7 @@ var init_live_chat = __esm({
           const payload = pending.frame.payload;
           pending.frame.payload = { ...payload, text: String(payload.text ?? "") + text5 };
           pending.frame.itemVersion = frame.itemVersion;
+          if (frame.ord !== void 0) pending.frame.ord = frame.ord;
           pending.chunks += 1;
           pending.chars += text5.length;
           return;
@@ -159409,6 +159909,58 @@ var init_live_chat = __esm({
           }
         }
       }
+      /**
+       * 把**用户自己那条消息**推上 v3 流（ADR-0510 D2 的收口）。
+       *
+       * ## 为什么需要
+       *
+       * 用户点发送时前端先画一条「乐观条」，它**没有服务端展示序**（D2：不许前端发明号），
+       * 渲染时钉在列表末尾。这条规矩对「刚发完、还没有任何回复」是对的。
+       *
+       * 但服务端落账本时**立刻**给了这条 user item 一个 ord（它是这一轮第一个建的行，号最小），
+       * 而这个号此前**只走快照**——`emitV3` 只服务 provider 事件（`server.ts` 那句注释：
+       * 「不走 v3 流帧（那条只服务 assistant）」）。于是有个几秒的窗口：
+       * agent 的正文带着更大的号从直播流到了、进入「有号」段，而用户那条还在「无号」段被钉在最后
+       * ⇒ **agent 的回复显示在用户消息上面**，等下一次快照才跳回去。
+       * 2026-09-09 用户现场原话：「过几秒钟页面刷新一下，agent 回复内容会回到用户消息下面」。
+       *
+       * 修法就是把这条也推上去：前端按 itemId（`oasis-user-optim:<csid>`，与乐观桶位同名）覆盖，
+       * 拿到真号立刻归位，窗口从「到下一次快照」压到「一次 INSERT 往返」。
+       *
+       * ## 为什么不在前端算
+       *
+       * 试过的三种都被证伪（见 `chat-items-merge.ts` 里那段注释）。这次也不能用「记下创建时的最大号」：
+       * 空对话首次发送时那个最大号是 0，随后到达的历史（号更大）会全部排到乐观条**后面**——
+       * 正是 ADR D9 点名必须验的「空桶先发送」那一档。号只能由服务端给。
+       *
+       * ## 拿不到轮就静默跳过
+       *
+       * 本方法由账本的落库链回调触发，而那一刻这条会话的 live 轮可能还没 `start`
+       * （`server.ts` 里 `recordUserSubmission` 在 `liveChat.start` 之前）。拿不到就不发——
+       * 前端退回「等下一次快照」，与修复前一致，不会更坏。
+       */
+      publishUserItem(chatSessionId, item) {
+        const turn = this.turns.get(chatSessionId);
+        if (!turn) return false;
+        const payload = { role: "user", text: item.text };
+        if (item.clientSubmitId) payload.clientSubmitId = item.clientSubmitId;
+        if (item.attachments?.length) payload.attachments = item.attachments;
+        const frame = {
+          protocolVersion: 3,
+          streamId: turn.liveStreamId,
+          turnId: this.wireTurnId(turn),
+          itemId: item.itemId,
+          itemType: "message",
+          operation: "set_text",
+          itemVersion: item.version,
+          ...item.ord !== null ? { ord: item.ord } : {},
+          offset: 0,
+          payload
+        };
+        this.flushPendingV3(turn);
+        this.publishV3(turn, this.assignV3Seq(turn, frame));
+        return true;
+      }
       emitV3TurnTerminal(turn, status) {
         if (status !== "done" && status !== "error") return;
         const operation = status === "done" ? "turn_completed" : "turn_failed";
@@ -160175,7 +160727,7 @@ var init_workorder_drafts = __esm({
       }
     };
     ident = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      if (!/^[A-Za-z0-9_][A-Za-z0-9_.-]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     seqNoOf = (id, fallback) => {
@@ -160433,7 +160985,7 @@ var init_workorder_draft_planner_issues = __esm({
       }
     };
     ident2 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      if (!/^[A-Za-z0-9_][A-Za-z0-9_.-]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
       return s2;
     };
     PostgresWorkorderDraftPlannerIssuesStore = class _PostgresWorkorderDraftPlannerIssuesStore extends MemoryWorkorderDraftPlannerIssuesStore {
@@ -194283,8 +194835,15 @@ function isTextual(contentType) {
   const t = contentType.toLowerCase();
   return t.startsWith("text/") || t.includes("json") || t.includes("xml") || t.includes("yaml") || t.includes("javascript");
 }
-function toPrepared(rel, source, read) {
-  const base = { rel, source, size: read.size, contentType: read.contentType };
+function toPrepared(rel, source, read, src) {
+  const base = {
+    rel,
+    source,
+    size: read.size,
+    contentType: read.contentType,
+    ...src ? { srcSize: src.size } : {},
+    ...src?.mtime ? { srcMtime: src.mtime } : {}
+  };
   if (!isTextual(read.contentType)) return { ...base, base64: read.contentBase64 };
   return { ...base, text: Buffer.from(read.contentBase64, "base64").toString("utf8") };
 }
@@ -194321,7 +194880,7 @@ async function collectInboundFiles(port, parent, paths, limits, lenient) {
     if (!lenient) throw error2;
     skipped.push({ source, code: error2.code, message: error2.message });
   };
-  if (wanted.length === 0) return { prepared: [], skipped, totalBytes: 0 };
+  if (wanted.length === 0) return { prepared: [], skipped, totalBytes: 0, unchanged: [] };
   if (!port) {
     const error2 = new DelegationFileError(
       "FILE_UNREADABLE",
@@ -194330,7 +194889,7 @@ async function collectInboundFiles(port, parent, paths, limits, lenient) {
     );
     if (!lenient) throw error2;
     for (const source of wanted) skipped.push({ source, code: error2.code, message: error2.message });
-    return { prepared: [], skipped, totalBytes: 0 };
+    return { prepared: [], skipped, totalBytes: 0, unchanged: [] };
   }
   let accepted = wanted;
   if (wanted.length > limits.maxFiles) {
@@ -194408,10 +194967,10 @@ async function collectInboundFiles(port, parent, paths, limits, lenient) {
     used.add(rel);
     prepared.push(toPrepared(rel, source, read));
   }
-  return { prepared, skipped, totalBytes };
+  return { prepared, skipped, totalBytes, unchanged: [] };
 }
-async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FILE_LIMITS) {
-  const out = { prepared: [], skipped: [], totalBytes: 0 };
+async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FILE_LIMITS, known) {
+  const out = { prepared: [], skipped: [], totalBytes: 0, unchanged: [] };
   if (!port) return out;
   if (port.locate) {
     const located = await port.locate(child).catch((err) => ({
@@ -194471,7 +195030,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     for (const entry of level.entries) {
       const childPath = `${dir}/${entry.name}`;
       if (entry.type === "dir") queue.push(childPath);
-      else files.push({ rel: childPath, size: entry.size });
+      else files.push({ rel: childPath, size: entry.size, ...entry.mtime ? { mtime: entry.mtime } : {} });
     }
   }
   for (const dir of queue) {
@@ -194487,6 +195046,12 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
       out.skipped.push({ source: file.rel, code: "PATH_REJECTED", message: "\u8DEF\u5F84\u4E0D\u5408\u6CD5\uFF0C\u6CA1\u642C" });
       continue;
     }
+    const target = `${DELEGATION_OUTBOUND_DIR}/${dirName}/${relative5}`;
+    const seen = known?.get(target);
+    if (seen && file.mtime && seen.size === file.size && seen.mtime === file.mtime) {
+      out.unchanged.push(target);
+      continue;
+    }
     if (out.prepared.length >= limits.maxFiles) {
       out.skipped.push({ source: file.rel, code: "FILE_QUOTA_EXCEEDED", message: `\u8D85\u8FC7\u4E00\u6B21 ${limits.maxFiles} \u4E2A\u7684\u4E0A\u9650\uFF0C\u6CA1\u642C` });
       continue;
@@ -194505,7 +195070,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
       continue;
     }
     out.totalBytes += read.size;
-    out.prepared.push(toPrepared(`${DELEGATION_OUTBOUND_DIR}/${dirName}/${relative5}`, file.rel, read));
+    out.prepared.push(toPrepared(target, file.rel, read, { size: file.size, ...file.mtime ? { mtime: file.mtime } : {} }));
   }
   return out;
 }
@@ -194562,6 +195127,31 @@ function digestOf(text5) {
   const line = text5.trim().replace(/\s+/g, " ");
   return line.length > DIGEST_CHARS ? `${line.slice(0, DIGEST_CHARS)}\u2026` : line;
 }
+function childRoundMessageIds(childSessionId, round) {
+  const suffix = round <= 1 ? "" : `:${round}`;
+  return {
+    inputId: deterministicUuid(`delegation-input:${childSessionId}${suffix}`),
+    placeholderId: deterministicUuid(`delegation-placeholder:${childSessionId}${suffix}`)
+  };
+}
+async function seedChildRoundRows(chatStore, childSessionId, round, prompt2, now) {
+  const ids2 = childRoundMessageIds(childSessionId, round);
+  await chatStore.appendMessageOnce({
+    id: ids2.inputId,
+    sessionId: childSessionId,
+    role: "user",
+    content: prompt2,
+    createdAt: now
+  });
+  await chatStore.appendMessageOnce({
+    id: ids2.placeholderId,
+    sessionId: childSessionId,
+    role: "assistant",
+    content: "",
+    status: "running",
+    createdAt: now
+  });
+}
 var import_node_crypto32, DelegationError, TITLE_TASK_CHARS, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, DelegationService;
 var init_service3 = __esm({
   "../server/src/domains/delegations/service.ts"() {
@@ -194987,21 +195577,7 @@ var init_service3 = __esm({
             createdAt: now
           });
         }
-        await chatStore.appendMessageOnce({
-          id: deterministicUuid(`delegation-input:${record8.childSessionId}`),
-          sessionId: record8.childSessionId,
-          role: "user",
-          content: task,
-          createdAt: now
-        });
-        await chatStore.appendMessageOnce({
-          id: deterministicUuid(`delegation-placeholder:${record8.childSessionId}`),
-          sessionId: record8.childSessionId,
-          role: "assistant",
-          content: "",
-          status: "running",
-          createdAt: now
-        });
+        await seedChildRoundRows(chatStore, record8.childSessionId, 1, task, now);
       }
       /**
        * 去程文件：读父会话工作区、翻成 §8.2 的同步错误码。
@@ -195161,7 +195737,7 @@ var init_service3 = __esm({
             settledAt: failedAt
           }).catch(() => null);
           const chatStore = await this.options.resolveChatSessions(companyId).catch(() => null);
-          await chatStore?.updateMessage(deterministicUuid(`delegation-placeholder:${record8.childSessionId}`), {
+          await chatStore?.updateMessage(childRoundMessageIds(record8.childSessionId, record8.roundSummaries.length + 1).placeholderId, {
             content: `\u6D3E\u53D1\u6CA1\u80FD\u8D77\u6765\uFF1A${message}`,
             status: "error",
             completedAt: failedAt
@@ -195210,7 +195786,7 @@ var init_service3 = __esm({
         const pending = await store.countPendingTouches(fresh.id).catch(() => 0);
         const stopLoss = consecutiveFails >= CONSECUTIVE_FAIL_LIMIT;
         const chatStore = await this.options.resolveChatSessions(companyId).catch(() => null);
-        await chatStore?.updateMessage(deterministicUuid(`delegation-placeholder:${fresh.childSessionId}`), {
+        await chatStore?.updateMessage(childRoundMessageIds(fresh.childSessionId, round).placeholderId, {
           content: text5 || (failureKind ? `\u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u5B8C\uFF1A${error2}` : ""),
           status: failureKind ? "error" : "done",
           completedAt: at
@@ -195222,11 +195798,13 @@ var init_service3 = __esm({
           });
           return;
         }
-        const settled = await store.appendRoundSummary(fresh.id, newSummary, {
+        const settledSeqAtRound = fresh.settledSeq + 1;
+        const settledSummary = { ...newSummary, settledSeq: settledSeqAtRound };
+        const settled = await store.appendRoundSummary(fresh.id, settledSummary, {
           consecutiveFails,
           state: failureKind ? "failed" : "done",
           failureKind: failureKind ?? null,
-          settledSeq: fresh.settledSeq + 1,
+          settledSeq: settledSeqAtRound,
           settledAt: at
         }).catch(() => null);
         if (settled) await this.notifySettled(settled, companyId);
@@ -195255,17 +195833,19 @@ var init_service3 = __esm({
         const record8 = await store.getByChildSession(childSessionId).catch(() => null);
         if (!record8 || record8.state !== "running") return record8;
         const at = this.now();
+        const settledSeqAtRound = record8.settledSeq + 1;
         const newSummary = {
           round: (record8.roundSummaries[record8.roundSummaries.length - 1]?.round ?? 0) + 1,
           text: `\u8FD9\u4E00\u8F6E\u88AB\u65F6\u949F\u95ED\u5408\uFF1A${reason}`,
-          at
+          at,
+          settledSeq: settledSeqAtRound
         };
         const settled = await store.appendRoundSummary(record8.id, newSummary, {
           state: "failed",
           // 退出帧丢失后被时钟闭合 = `interrupted`（§9），不是 `not-started`——它确实起来过。
           failureKind: "interrupted",
           consecutiveFails: record8.consecutiveFails + 1,
-          settledSeq: record8.settledSeq + 1,
+          settledSeq: settledSeqAtRound,
           settledAt: at
         }).catch(() => null);
         if (settled) await this.notifySettled(settled, companyId);
@@ -195351,6 +195931,15 @@ var init_service3 = __esm({
             onDispatched: async () => {
               await queue.confirm();
               await store.markTouchesConsumed(record8.id, touches.map((touch) => touch.messageId), this.now());
+              await seedChildRoundRows(
+                chatStore,
+                record8.childSessionId,
+                record8.roundSummaries.length + 1,
+                body2,
+                this.now()
+              ).catch((err) => {
+                console.warn(`[delegation] \u5B50\u4F1A\u8BDD\u8865\u8F6E\u6B21\u884C\u5931\u8D25\uFF08${record8.id} round=${record8.roundSummaries.length + 1}\uFF09: ${String(err)}`);
+              });
             },
             /**
              * **没送到就把正文放回可读态**（见 `dispatchExpert` 的 `onNotDispatched`）。
@@ -195449,6 +196038,10 @@ var init_service3 = __esm({
         const inbound = await this.readInboundFiles(parent, files);
         const inboundBundle = toBundleFiles(inbound.prepared);
         let delivered = false;
+        let deliveryReasonCode;
+        if (!this.options.appendToChild) {
+          deliveryReasonCode = "no-append-port";
+        }
         if (this.options.appendToChild) {
           const result = await this.options.appendToChild(record8.childSessionId, {
             // 文件是静默落盘的，append 这条路没有 TASK.md 可改——**必须自己在正文里说一声**，
@@ -195464,6 +196057,7 @@ ${inboundBundle.paths.map((path41) => `- ${path41}`).join("\n")}` : text5,
             ...Object.keys(inboundBundle.binaryFiles).length ? { binaryFiles: inboundBundle.binaryFiles } : {}
           }).catch(() => ({ accepted: false, reason: "append-threw" }));
           delivered = result.accepted === true;
+          if (!delivered) deliveryReasonCode = result.reason ?? "rejected";
         }
         if (!delivered) {
           if (chatStore.enqueuePendingMessage) {
@@ -195522,6 +196116,7 @@ ${inboundBundle.paths.map((path41) => `- ${path41}`).join("\n")}` : text5,
         }
         return {
           delivered,
+          ...delivered ? {} : { deliveryReasonCode: deliveryReasonCode ?? "rejected" },
           startedRound,
           pendingInputs: await this.pendingInputs(store, record8.id),
           // 起了新的一轮 = 快照与文件都随那一轮重新送过去了，没有「等下一轮再刷新」这回事。
@@ -195644,6 +196239,34 @@ ${inboundBundle.paths.map((path41) => `- ${path41}`).join("\n")}` : text5,
   }
 });
 
+// ../server/src/domains/delegations/continue-outcome.ts
+function describeContinueOutcome(input) {
+  if (input.delivered) return { outcome: "inserted" };
+  if (input.startedRound) return { outcome: "started-round" };
+  const code2 = input.deliveryReasonCode ?? "rejected";
+  return {
+    outcome: "queued",
+    // 认不出的码**原样带出来**，不折成「未知原因」——排障时那串字符本身就是线索。
+    reason: REASON_TEXT[code2] ?? `\u672A\u80FD\u63D2\u5165\uFF08${code2}\uFF09`,
+    reasonCode: code2
+  };
+}
+var REASON_TEXT;
+var init_continue_outcome = __esm({
+  "../server/src/domains/delegations/continue-outcome.ts"() {
+    "use strict";
+    REASON_TEXT = {
+      "no-live-turn": "\u4E13\u5BB6\u6B64\u523B\u6CA1\u6709\u6B63\u5728\u8DD1\u7684\u90A3\u4E00\u8F6E\uFF08\u591A\u534A\u662F\u521A\u6536\u5C3E\u3001\u4E0B\u4E00\u8F6E\u8FD8\u6CA1\u8D77\u6765\uFF09",
+      unsupported: "\u8FD9\u4E2A\u4E13\u5BB6\u7528\u7684\u6A21\u578B\u4E0D\u652F\u6301\u4E2D\u9014\u63D2\u8BDD\uFF08\u8981\u7B49\u5B83\u8FD9\u4E00\u8F6E\u8DD1\u5B8C\uFF09",
+      "session-closing": "\u4E13\u5BB6\u90A3\u4E00\u8F6E\u6B63\u5728\u6536\u5C3E\uFF0C\u8FD9\u53E5\u8BDD\u6765\u665A\u4E86\u4E00\u6B65",
+      "turn-finished": "\u6295\u9012\u8FC7\u7A0B\u4E2D\u4E13\u5BB6\u90A3\u4E00\u8F6E\u5DF2\u7ECF\u6536\u5C3E\u4E86",
+      rejected: "\u4E13\u5BB6\u90A3\u4E00\u4FA7\u62D2\u6536\u4E86\u8FD9\u6B21\u63D2\u5165",
+      "append-threw": "\u6295\u9012\u8FC7\u7A0B\u4E2D\u51FA\u9519\uFF08\u7F51\u7EDC\u6216\u8282\u70B9\u5F02\u5E38\uFF09",
+      "no-append-port": "\u8FD9\u5957\u90E8\u7F72\u6CA1\u6709\u63A5\u4E2D\u9014\u63D2\u5165\u901A\u9053"
+    };
+  }
+});
+
 // ../server/src/domains/delegations/routes.ts
 function trustedDelegationInvocationId(body2, turn) {
   const scope = turn?.artifactId ?? turn?.dispatchId;
@@ -195712,8 +196335,16 @@ function delegationRoutes(service) {
       const text5 = requireString(raw["text"], "--text");
       const files = requireStringArray(raw["files"], "--file");
       try {
-        await service.continueDelegation(req.params.id, text5, callerOf(req), files);
-        return { status: 204, body: void 0 };
+        const res = await service.continueDelegation(req.params.id, text5, callerOf(req), files);
+        const view = describeContinueOutcome(res);
+        const body2 = {
+          outcome: view.outcome,
+          ...view.reason ? { reason: view.reason } : {},
+          ...view.reasonCode ? { reasonCode: view.reasonCode } : {},
+          pendingInputs: res.pendingInputs,
+          ...res.attachedFiles.length ? { attachedFiles: res.attachedFiles } : {}
+        };
+        return { status: 200, body: body2 };
       } catch (error2) {
         rethrow(error2);
       }
@@ -195741,6 +196372,7 @@ var init_routes2 = __esm({
     "use strict";
     import_node_crypto33 = require("node:crypto");
     init_router();
+    init_continue_outcome();
     init_service3();
   }
 });
@@ -196112,6 +196744,9 @@ function delegationReturnText(terminal, opts) {
   if (opts.movedPaths.length > 0) {
     lines.push("", "\u4E13\u5BB6\u4EA4\u56DE\u7684\u6587\u4EF6\uFF08\u5DF2\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A", ...opts.movedPaths.map((p2) => `- ${p2}`));
   }
+  if ((opts.unchangedPaths?.length ?? 0) > 0) {
+    lines.push("", `\u53E6\u6709 ${opts.unchangedPaths.length} \u4E2A\u6587\u4EF6\u4E0E\u4E0A\u6B21\u4EA4\u56DE\u65F6\u9010\u5B57\u4E00\u81F4\uFF0C\u672C\u8F6E\u6CA1\u6709\u91CD\u4F20\uFF08\u4ECD\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u8DEF\u5F84\u4E0D\u53D8\uFF09\u3002`);
+  }
   const locationFailures = opts.skipped.filter((s2) => s2.code !== void 0 && isLocationFailureCode(s2.code));
   const contentSkipped = opts.skipped.filter((s2) => s2.code === void 0 || !isLocationFailureCode(s2.code));
   if (locationFailures.length > 0) {
@@ -196151,17 +196786,21 @@ async function deliverDelegationReturn(deps, terminal) {
     };
   }
   const dirName = delegationDirName(record8.label, record8.expertActorId, record8.id);
+  const known = delegationOutboxFingerprints(record8.roundSummaries);
   const outbound = await prepareOutboundFiles(
     deps.workdir,
     // 子会话与父会话同公司（§6.1.2 隔离二），所以这里的 companyId 取父会话那个。
     { chatSessionId: record8.childSessionId, ...parentSession.companyId ? { companyId: parentSession.companyId } : {} },
-    dirName
+    dirName,
+    void 0,
+    known
   ).catch((err) => {
     log3(`[delegation-return] \u4EA7\u7269\u642C\u8FD0\u5931\u8D25\uFF08delegation=${record8.id}\uFF09: ${String(err)}`);
     return {
       prepared: [],
       skipped: [{ source: "outputs/", code: "INTERNAL", message: "\u642C\u8FD0\u5931\u8D25" }],
       totalBytes: 0,
+      unchanged: [],
       listDirCode: "INTERNAL"
     };
   });
@@ -196181,8 +196820,18 @@ async function deliverDelegationReturn(deps, terminal) {
   const text5 = delegationReturnText(terminal, {
     movedPaths: bundleFiles.paths,
     skipped: outbound.skipped,
-    recentRounds: deps.recentRounds ?? DELEGATION_RETURN_RECENT_ROUNDS
+    recentRounds: deps.recentRounds ?? DELEGATION_RETURN_RECENT_ROUNDS,
+    unchangedPaths: outbound.unchanged
   });
+  const movedFileRefs = outbound.prepared.map((f2) => ({
+    name: f2.rel,
+    ...typeof f2.srcSize === "number" ? { size: f2.srcSize } : {},
+    ...f2.srcMtime ? { mtime: f2.srcMtime } : {}
+  }));
+  const fingerprints = {};
+  for (const f2 of movedFileRefs) {
+    if (typeof f2.size === "number" || f2.mtime) fingerprints[f2.name] = { ...typeof f2.size === "number" ? { size: f2.size } : {}, ...f2.mtime ? { mtime: f2.mtime } : {} };
+  }
   const source = delegationReturnSource(record8);
   const messageId = deriveSystemMessageId(source);
   let written;
@@ -196213,6 +196862,8 @@ async function deliverDelegationReturn(deps, terminal) {
   const bundle = bundleFiles.paths.length ? {
     files: bundleFiles.files,
     binaryFiles: bundleFiles.binaryFiles,
+    // queued 那一档要靠它把指纹带到 flush 落账那一刻（`PendingChatAttachment.srcSize`）。
+    fingerprints,
     taskLines: [
       "",
       "## \u4E13\u5BB6\u4EA4\u56DE\u7684\u6587\u4EF6",
@@ -196247,6 +196898,8 @@ async function deliverDelegationReturn(deps, terminal) {
     via: delivery.via,
     movedFiles: bundleFiles.paths.length,
     movedPaths: bundleFiles.paths,
+    movedFileRefs,
+    unchangedPaths: outbound.unchanged,
     skippedFiles: outbound.skipped.length
   };
 }
@@ -196258,6 +196911,7 @@ var init_return_flow = __esm({
     init_chat_system_message();
     init_chat_broadcast();
     init_files();
+    init_src();
   }
 });
 
@@ -196401,8 +197055,10 @@ function assembleDelegationsDomain(deps) {
       );
       const targetRound = record8.roundSummaries[record8.roundSummaries.length - 1]?.round;
       let movedPaths = null;
+      let movedRefs = [];
       if (outcome.status === "delivered" && (outcome.via === "turn" || outcome.via === "append") && outcome.movedPaths.length > 0) {
         movedPaths = outcome.movedPaths;
+        movedRefs = outcome.movedFileRefs;
       }
       if (movedPaths === null || targetRound === void 0) return;
       const store = await deps.resolveStore(companyId).catch(() => null);
@@ -196415,7 +197071,7 @@ function assembleDelegationsDomain(deps) {
           `[delegation-return] \u4EA7\u7269\u6E05\u5355\u843D\u8D26\u672A\u6210 (immediate) delegation=${record8.id} round=${targetRound} status=resolve-failed moved=${movedPaths.length} paths=${pathsField}`
         );
       } else {
-        outcomeCode = await registerRoundFiles(store, record8.id, targetRound, movedPaths);
+        outcomeCode = await registerRoundFiles(store, record8.id, targetRound, movedRefs.length ? movedRefs : movedPaths);
         if (outcomeCode === "ok") return;
         deps.metrics?.recordFilesRegisterFailure?.(outcomeCode);
         warn(
@@ -196429,6 +197085,11 @@ function assembleDelegationsDomain(deps) {
             chatSessionId: record8.parentSessionId,
             delegationRef: { delegationId: record8.id, round: targetRound },
             paths: movedPaths,
+            // 补账那一趟同样要带指纹，否则「首次登记失败 → 补账成功」的路径会留下无指纹条目。
+            fingerprints: Object.fromEntries(movedRefs.map((f2) => [f2.name, {
+              ...typeof f2.size === "number" ? { size: f2.size } : {},
+              ...f2.mtime ? { mtime: f2.mtime } : {}
+            }])),
             reason: `immediate-register-failed:${outcomeCode}`
           }).catch((err) => {
             warn(
@@ -196451,16 +197112,20 @@ async function registerDelegationFilesOnFlush(deps, row, companyId) {
   const warn = deps.log ?? ((m2) => console.warn(m2));
   const ref2 = row.delegationRef;
   if (!ref2) return "no-ref";
-  const paths = (row.attachments ?? []).map((a) => a.path).filter((p2) => !!p2);
-  if (paths.length === 0) return "no-files";
+  const rows = (row.attachments ?? []).filter((a) => !!a.path);
+  if (rows.length === 0) return "no-files";
   const store = await deps.resolveStore(companyId).catch(() => null);
   if (!store) return "failed";
-  const files = paths.map((name) => ({ name }));
+  const files = rows.map((a) => ({
+    name: a.path,
+    ...typeof a.srcSize === "number" ? { size: a.srcSize } : {},
+    ...a.srcMtime ? { mtime: a.srcMtime } : {}
+  }));
   const outcome = await registerRoundFiles(store, ref2.delegationId, ref2.round, files);
   if (outcome !== "ok") {
     deps.metrics?.recordFilesRegisterFailure?.(outcome);
     warn(
-      `[delegation-return] flush \u843D\u8D26\u672A\u6210 delegation=${ref2.delegationId} round=${ref2.round} status=${outcome} files=${paths.length}`
+      `[delegation-return] flush \u843D\u8D26\u672A\u6210 delegation=${ref2.delegationId} round=${ref2.round} status=${outcome} files=${files.length}`
     );
   }
   return outcome;
@@ -196483,6 +197148,31 @@ var init_assembly = __esm({
   }
 });
 
+// ../server/src/domains/delegations/child-live-turn.ts
+function registerDelegatedChildTurn(liveChat, childSessionId, session) {
+  const appendInput = session.appendInput;
+  if (typeof appendInput !== "function" || session.canAppendInput === false) return;
+  const ctrl = liveChat.start(childSessionId, {
+    runtimeSessionId: session.id,
+    ...session.runId ? { runId: session.runId } : {},
+    kill: () => {
+      void session.kill?.();
+    },
+    appendInput: (input) => appendInput.call(session, input),
+    // **每次现读**，不快照：一轮跑到收尾时 stdin 会先关，那之后 runtime 自己会回
+    // `session-closing`，判断权本就该留在它那儿（同 `/api/chat` 那条路的写法）。
+    get canAppendInput() {
+      return session.canAppendInput !== false;
+    }
+  });
+  void session.done.then(() => ctrl.finish("done"), () => ctrl.finish("error"));
+}
+var init_child_live_turn = __esm({
+  "../server/src/domains/delegations/child-live-turn.ts"() {
+    "use strict";
+  }
+});
+
 // ../connectors/src/_base/wrapper-assets.ts
 function isUsableWrapper(scriptPath) {
   if (!(0, import_node_fs7.existsSync)(scriptPath)) return false;
@@ -201232,7 +201922,7 @@ function authorizedCommandReceipt(command, args, actor) {
     case "promote":
       return { message: "promoted to persistent" };
     case "resolveEscalation":
-      return { message: `\u5DF2\u5173\u95ED\u8BE5\u6761\u4E0A\u62A5\uFF08${str(args, "escalationId")}\uFF09\u3002` };
+      return { message: optStr(args, "gapId") ? `\u5DF2\u786E\u8BA4\u6062\u590D\u65B9\u6848\uFF0C\u89E3\u51B3\u7F3A\u53E3 ${str(args, "gapId")}\u3001\u5173\u95ED\u5173\u8054\u4E0A\u62A5 ${str(args, "escalationId")}\uFF1B\u8C03\u5EA6\u5668\u5C06\u5728\u5176\u4ED6\u963B\u585E\u89E3\u9664\u540E\u7EE7\u7EED\u6267\u884C\u3002` : `\u5DF2\u5173\u95ED\u8BE5\u6761\u4E0A\u62A5\uFF08${str(args, "escalationId")}\uFF09\u3002` };
     default:
       throw new Error(`\u547D\u4EE4\u6388\u6743\uFF1A\u6682\u65E0\u56DE\u6267\u6784\u9020 ${command}`);
   }
@@ -201271,7 +201961,11 @@ async function runCommand(kernel, blobs, oplog, engineStore, actor, command, arg
           );
         }
       }
+      const linkedGapId = escalationById(kernel.model, escalationId)?.gapId;
+      const linkedGap = linkedGapId ? (kernel.model.gaps.get(artifactId) ?? []).find((g2) => g2.gapId === linkedGapId) : void 0;
+      if (linkedGap && !why?.trim()) throw new Error("\u8BF7\u8BF4\u660E\u91C7\u7528\u4EC0\u4E48\u6062\u590D\u65B9\u6848\uFF0C\u518D\u63D0\u4EA4\u7F3A\u53E3\u4E0E\u4E0A\u62A5\u7684\u8054\u5408\u786E\u8BA4");
       const normalizedArgs = {
+        ...linkedGap ? { gapId: linkedGap.gapId, continueExecution: true } : {},
         escalationId,
         // ← 已四级解析出的具体一条（绝非 undefined、绝非「全清」）
         artifactId,
@@ -201362,14 +202056,15 @@ async function runCommand(kernel, blobs, oplog, engineStore, actor, command, arg
       }
       const projectId2 = optStr(args, "project_id") ?? optStr(args, "projectId");
       const schemaForSeed = (createdViaArg ?? "manual-spawn") === "seed" ? ctx.schema : void 0;
+      const bindingState = ctx.workspaceBindingState ?? ctx.artifactState;
       if (projectId2 !== void 0) {
-        if (!ctx.projectState || !ctx.artifactState) {
+        if (!ctx.projectState || !bindingState) {
           throw new Error("spawn \u5E26 project_id \u9700\u8981\u670D\u52A1\u7AEF\u6CE8\u5165\u9879\u76EE\u5B58\u50A8\u4E0E\u5DE5\u5355\u7ED1\u5B9A\u5B58\u50A8");
         }
         const project = await ctx.projectState.getProject(projectId2);
         if (!project) throw new Error(`project not found: ${projectId2}`);
-        await ctx.artifactState.upsertWorkspaceBinding({ workOrderId: workspace, projectId: projectId2 });
-      } else if (createdViaArg === "seed" && ctx.projectState && ctx.artifactState) {
+        await bindingState.upsertWorkspaceBinding({ workOrderId: workspace, projectId: projectId2 });
+      } else if (createdViaArg === "seed" && ctx.projectState && bindingState) {
         await ensureWorkorderProject({
           workOrderId: workspace,
           ...optStr(args, "title") ? { title: optStr(args, "title") } : {},
@@ -201380,7 +202075,7 @@ async function runCommand(kernel, blobs, oplog, engineStore, actor, command, arg
           // 由读侧从工单 brief.owner 派生（service.resolveProjectCreator）。
           ...ctx.workorderInitiator?.humanActorId ? { createdBy: ctx.workorderInitiator.humanActorId } : !isAgent(actor) ? { createdBy: actor } : {},
           createProject: makeEnsureProjectFromStore(ctx.projectState),
-          upsertBinding: (b2) => ctx.artifactState.upsertWorkspaceBinding(b2),
+          upsertBinding: (b2) => bindingState.upsertWorkspaceBinding(b2),
           onWarn: (m2) => console.warn(m2)
         });
       }
@@ -201868,10 +202563,10 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}`] : []
       const note = optStr(args, "note");
       const via = optStr(args, "via");
       const target = kernel.model.annotations.get(annotationId);
-      if (target && target.state !== "open") {
+      if (target && target.state !== "open" && resolution !== "acknowledged") {
         return { message: `annotation \u5DF2\u5173\u95ED\uFF08${target.state}\uFF09\u2014\u2014\u65E0\u9700\u518D\u5904\u7406${isReactivatedLetter(target, kernel.model.convergenceUnified) ? "\uFF1B\u8FD9\u5C01\u4FE1\u5728\u590D\u6D3B\u4E2D\uFF0C\u56DE\u5E16\u7B54\u590D\u7528 `oasis reply`\uFF0C\u6216\u6539\u5185\u5BB9 propose\uFF08\u7533\u62A5\u4F1A\u5E26\u4E0A\u5B83\uFF09" : ""}` };
       }
-      await kernel.resolveAnnotation({ annotationId, actor, resolution, note, ...via !== void 0 ? { via } : {}, ...hand !== void 0 ? { hand } : {} });
+      await kernel.resolveAnnotation({ annotationId, actor, resolution, note, ...via !== void 0 ? { via } : {}, ...hand !== void 0 ? { hand } : {}, ...ctx.sessionArtifactId ? { viaNode: ctx.sessionArtifactId } : {} });
       return { message: `annotation \u2192 ${resolution}${via ? `\uFF08via ${via}\uFF09` : ""}${isAgent(actor) && target?.author.startsWith("actor:human:") ? "\uFF1B\u4F5C\u8005\u4F1A\u6536\u5230\u901A\u77E5\uFF0C\u82E5\u4E0D\u8BA4\u53EF\u4F1A\u5728\u4FE1\u91CC\u56DE\u5E16\u5524\u4F60" : ""}` };
     }
     case "gap": {
@@ -202422,7 +203117,15 @@ async function startOasisServer(opts) {
       resolveStore: opts.delegationStoreFor,
       resolveChatSessions: resolveChatSessionsForDelegation,
       resolveActors: async (companyId) => (await actorsDomain2.resolveCtx(companyId)).service,
-      dispatchChat,
+      // **派发完顺手把子会话这一轮登记进 live 注册表**（v2 bug 0088）。缺这一步时下面那行
+      // `appendToChild` 恒回 `no-live-turn`——注册表里从来没有以 `childSessionId` 为键的轮，
+      // 于是每一条 `--continue` 转达都落队列，专家要等本轮跑完才看见「手上这段作废」。
+      // 理由与两条纪律见 `child-live-turn.ts` 的文件头。
+      dispatchChat: async (request2) => {
+        const session = await dispatchChat(request2);
+        registerDelegatedChildTurn(liveChat, request2.chatSessionId, session);
+        return session;
+      },
       appendToChild: (childSessionId, text5, extra) => liveChat.append(childSessionId, text5, extra),
       // 用 lambda 转一层：`broadcastDepsFor` 在本文件里声明得更靠后（回流是异步发生的，
       // 那时它早就赋过值了）。直接把值递进去会撞 TDZ。
@@ -202663,16 +203366,25 @@ async function startOasisServer(opts) {
       ...store?.enqueuePendingMessage ? {
         enqueuePending: async (input) => {
           const bundle = input.bundle;
+          const fp = (p2) => {
+            const f2 = bundle?.fingerprints?.[p2];
+            return {
+              ...typeof f2?.size === "number" ? { srcSize: f2.size } : {},
+              ...f2?.mtime ? { srcMtime: f2.mtime } : {}
+            };
+          };
           const attachments = bundle ? [
             ...Object.entries(bundle.files ?? {}).map(([p2, text5]) => ({
               name: p2.slice(p2.lastIndexOf("/") + 1) || p2,
               text: text5,
-              path: p2
+              path: p2,
+              ...fp(p2)
             })),
             ...Object.entries(bundle.binaryFiles ?? {}).map(([p2, b64]) => ({
               name: p2.slice(p2.lastIndexOf("/") + 1) || p2,
               bytesBase64: b64,
-              path: p2
+              path: p2,
+              ...fp(p2)
             }))
           ] : [];
           const { randomUUID: randomUUID40 } = await import("node:crypto");
@@ -202702,7 +203414,15 @@ async function startOasisServer(opts) {
         // ——生产 `deliverToAgent:512` 会开轮/append，用户听到空消息且下一场 UPDATE 再把已完成
         // 的行改回 delivering，违背「只补账、不投递」语义。
         enqueueRegisterPending: async (input) => {
-          const attachments = input.paths.map((p2) => ({ name: p2.slice(p2.lastIndexOf("/") + 1) || p2, path: p2 }));
+          const attachments = input.paths.map((p2) => {
+            const f2 = input.fingerprints?.[p2];
+            return {
+              name: p2.slice(p2.lastIndexOf("/") + 1) || p2,
+              path: p2,
+              ...typeof f2?.size === "number" ? { srcSize: f2.size } : {},
+              ...f2?.mtime ? { srcMtime: f2.mtime } : {}
+            };
+          });
           const { randomUUID: randomUUID40 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
@@ -203136,6 +203856,22 @@ async function startOasisServer(opts) {
           }));
           return;
         }
+        if (url.pathname.startsWith("/api/files/")) {
+          const company = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname) : void 0;
+          if (company && company.kind !== "ok") {
+            res.writeHead(403, { "content-type": "application/json" }).end(JSON.stringify({
+              error: { code: "FORBIDDEN", message: "\u65E0\u6743\u8BFB\u53D6\u8BE5\u516C\u53F8\u7684\u6587\u4EF6" }
+            }));
+            return;
+          }
+          await serveFileRequest(
+            req,
+            res,
+            url,
+            await resolveEngine(company?.kind === "ok" ? company.companyId : void 0)
+          );
+          return;
+        }
         if (url.pathname === "/api/whoami" && req.method === "GET") {
           res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ actor }));
           return;
@@ -203175,6 +203911,7 @@ async function startOasisServer(opts) {
           }
         };
         const artifactStateNow = async () => opts.artifactStateFor ? await opts.artifactStateFor(currentCompanyId) : opts.artifactState;
+        const projectStateNow = async () => opts.projectStateFor ? await opts.projectStateFor(currentCompanyId) : opts.projectState;
         if (url.pathname.startsWith("/api/channels")) {
           const json = (status, body2) => {
             res.writeHead(status, { "content-type": "application/json" }).end(JSON.stringify(body2));
@@ -203273,6 +204010,10 @@ async function startOasisServer(opts) {
               }
             }
             const chatAnchorMessageId = await anchorMessageIdFor(chatOrigin, chatStoreNowOrNull);
+            const spawnArgs = body2.args;
+            const needsProject = body2.command === "spawn" && (spawnArgs?.["createdVia"] === "seed" || spawnArgs?.["project_id"] !== void 0 || spawnArgs?.["projectId"] !== void 0);
+            const commandProjects = needsProject ? await projectStateNow() : opts.projectState;
+            const commandBindings = needsProject && commandProjects ? await artifactStateNow() : void 0;
             const result = await runCommand(
               engine.kernel,
               engine.blobs,
@@ -203291,13 +204032,14 @@ async function startOasisServer(opts) {
                 ...chatOrigin !== void 0 ? { chatOrigin } : {},
                 ...chatAnchorMessageId !== void 0 ? { chatAnchorMessageId } : {},
                 ...sessionEscalationId !== void 0 ? { sessionEscalationId } : {},
-                ...opts.projectState ? { projectState: opts.projectState } : {},
+                ...commandProjects ? { projectState: commandProjects } : {},
+                ...commandBindings ? { workspaceBindingState: commandBindings } : {},
                 ...opts.artifactState ? { artifactState: opts.artifactState } : {},
                 ...opts.schema ? { schema: opts.schema } : {},
                 ...engine.registry ? { registry: engine.registry } : {},
                 ...opts.resolveAssignableRoles ? { resolveAssignableRoles: opts.resolveAssignableRoles } : {},
                 ...opts.planWorkorderWithAgent ? { planWorkorderWithAgent: opts.planWorkorderWithAgent } : {},
-                ...opts.resolveCodeRepo ? { resolveCodeRepo: opts.resolveCodeRepo } : {},
+                ...opts.resolveCodeRepo ? { resolveCodeRepo: (ws) => opts.resolveCodeRepo(ws, currentCompanyId) } : {},
                 ...opts.dispatchProduce ? { dispatchProduce: opts.dispatchProduce } : {},
                 ...wodrafts ? { workorderDrafts: wodrafts } : {},
                 workorderDraftPlannerIssues: wodraftPlannerIssues,
@@ -203585,6 +204327,7 @@ async function startOasisServer(opts) {
             }
             const resuming = resumeState.hasNodes;
             let sessionProjectId;
+            let sessionBindingState;
             if (body2.chatSessionId && opts.chatSession) {
               const applyChatStore = await chatStoreNow();
               const session = await applyChatStore.getSession(body2.chatSessionId);
@@ -203593,10 +204336,12 @@ async function startOasisServer(opts) {
               }
               sessionProjectId = session.projectId ?? void 0;
               if (sessionProjectId) {
-                if (!opts.projectState || !opts.artifactState) {
+                const projects = await projectStateNow();
+                sessionBindingState = await artifactStateNow();
+                if (!projects || !sessionBindingState) {
                   throw new Error("chat session \u5E26 projectId \u65F6\u9700\u8981\u670D\u52A1\u7AEF\u6CE8\u5165\u9879\u76EE\u5B58\u50A8\u4E0E\u5DE5\u5355\u7ED1\u5B9A\u5B58\u50A8");
                 }
-                const project = await opts.projectState.getProject(sessionProjectId);
+                const project = await projects.getProject(sessionProjectId);
                 if (!project) throw new Error(`project not found: ${sessionProjectId}`);
               }
             }
@@ -203646,7 +204391,7 @@ async function startOasisServer(opts) {
               return;
             }
             if (targetWs && sessionProjectId) {
-              await opts.artifactState.upsertWorkspaceBinding({ workOrderId: targetWs, projectId: sessionProjectId });
+              await sessionBindingState.upsertWorkspaceBinding({ workOrderId: targetWs, projectId: sessionProjectId });
             }
             const result = resuming ? { interventionId: "", applied: 0, resumed: true } : await engine.kernel.applyIntervention(body2.plan, body2.baseSeqs, actor);
             if (resuming) {
@@ -204829,8 +205574,26 @@ ${composed}`;
                 });
               }
               const itemStore = persistTarget ? opts.resolveChatItems ? await opts.resolveChatItems(currentCompanyId).catch(() => void 0) : opts.chatItems : void 0;
+              const versionSeed = itemStore ? await itemStore.sessionVersionCursor(persistTarget?.id ?? session.id).catch(() => 0) : 0;
               const itemLedger = new ChatItemLedger({
                 ...itemStore ? { items: itemStore } : {},
+                versionSeed,
+                /* 用户那条消息一落库就推上 v3 流（ADR-0510 D2 的收口）。
+                   不推的话：乐观条没有服务端号、被钉在列表末尾，而 agent 的正文带着更大的号从
+                   直播流到达、进「有号」段 ⇒ **回复显示在用户消息上面**，直到下一次快照才跳回去
+                   （2026-09-09 用户现场）。这里把窗口从「等下一次快照」压到「一次 INSERT 往返」。
+                   只推 user：assistant 的每一条本来就走 `emitV3`。 */
+                onPersisted: (info) => {
+                  if (info.role !== "user") return;
+                  opts.liveChat?.publishUserItem(persistTarget?.id ?? session.id, {
+                    itemId: info.itemId,
+                    ord: info.ord,
+                    version: info.version,
+                    text: info.text,
+                    ...clientSubmitId ? { clientSubmitId } : {},
+                    ...effectiveAttachments.length ? { attachments: effectiveAttachments } : {}
+                  });
+                },
                 sessionId: persistTarget?.id ?? session.id,
                 // 优先账本 id（`chat_session_turns.id`，跨进程唯一、重启不失忆）；账本没接入才兜底。
                 turnId: heldTurn?.id ?? fallbackTurnId(session.runId),
@@ -206141,6 +206904,7 @@ var init_server3 = __esm({
     init_src();
     init_src();
     init_src();
+    init_file_http();
     init_build_info();
     init_artifact_content2();
     init_command_policy();
@@ -206182,6 +206946,7 @@ var init_server3 = __esm({
     init_workorder_terminal();
     init_knowledge2();
     init_assembly();
+    init_child_live_turn();
     init_src8();
     init_continuation();
     githubAppPending = new PendingAppCreations();
@@ -206762,7 +207527,12 @@ var init_memory_registry_store = __esm({
       async putVariable(v2) {
         const mk = this._varKey(v2.key, v2.actorId, v2.projectId);
         const ex = this.variables.get(mk);
-        this.variables.set(mk, { ...v2, ...ex?.lastUsedAt !== void 0 ? { lastUsedAt: ex.lastUsedAt } : {} });
+        const keptName = v2.name ?? ex?.name;
+        this.variables.set(mk, {
+          ...v2,
+          ...ex?.lastUsedAt !== void 0 ? { lastUsedAt: ex.lastUsedAt } : {},
+          ...keptName ? { name: keptName } : {}
+        });
       }
       async touchVariableUsage(key, actorId, projectId2, when) {
         const mk = this._varKey(key, actorId, projectId2);
@@ -209263,6 +210033,30 @@ function foldSingleNodeTasks(items) {
   }
   return folded;
 }
+function fillFolderSizes(items) {
+  const folders = items.filter((i) => i.kind === "folder" && i.path);
+  if (folders.length === 0) return;
+  const files = items.filter((i) => i.kind !== "folder" && i.path);
+  for (const folder of folders) {
+    const prefix = `${folder.path}/`;
+    let sum = 0;
+    let seen = 0;
+    let complete = true;
+    for (const file of files) {
+      if (!file.path.startsWith(prefix)) continue;
+      seen += 1;
+      if (file.size == null) {
+        complete = false;
+        break;
+      }
+      sum += file.size;
+    }
+    folder.size = seen > 0 && complete ? sum : null;
+  }
+}
+function engineContentKind(k2) {
+  return k2 === "manifest" ? "manifest" : k2 === "external" ? "external-pin" : "inline-blob";
+}
 function namedError(name, message) {
   const err = new Error(message);
   err.name = name;
@@ -209484,6 +210278,13 @@ var init_service4 = __esm({
       async listProjects() {
         return [...this.projects.values()].map((project) => ({ ...project }));
       }
+      /** 与 Postgres 同语义：主记录 + 成员 + 上传文件 + 内容位置一并清掉；不存在的 id 幂等返回。 */
+      async deleteProject(id) {
+        this.projects.delete(id);
+        this.members.delete(id);
+        for (const [fileId, f2] of this.files) if (f2.projectId === id) this.files.delete(fileId);
+        for (const [locId, l] of this.contentLocations) if (l.projectId === id) this.contentLocations.delete(locId);
+      }
       async replaceProjectMembers(projectId2, members) {
         this.members.set(projectId2, new Map(members.map((member) => [member.actorId, cloneProjectMember(member)])));
       }
@@ -209629,6 +210430,7 @@ var init_service4 = __esm({
       }
       projectCreatedHandler;
       onProjectNameChanged;
+      onProjectDeleted;
       /**
        * Cross-domain follow-up for project-scoped resources. Project persistence stays authoritative:
        * a failed follow-up is reported but never turns an already-created project into a false 500.
@@ -209643,6 +210445,10 @@ var init_service4 = __esm({
       setOnProjectNameChanged(handler) {
         this.onProjectNameChanged = handler;
       }
+      /** 删项目后的跨域清理钩子（会话解绑 + 项目变量清理）。装配层注入；缺省 = 无副作用。 */
+      setOnProjectDeleted(handler) {
+        this.onProjectDeleted = handler;
+      }
       /** 工单→项目绑定查询（content-location add 的项目匹配守卫用）。 */
       async getWorkspaceBinding(workOrderId) {
         return this.artifacts.getWorkspaceBinding(workOrderId);
@@ -210031,6 +210837,60 @@ var init_service4 = __esm({
         await this.artifacts.upsertWorkspaceBinding(binding);
         return binding;
       }
+      /**
+       * 删除项目（帧 `444:1792` 三点菜单第二项，口径由发起人 2026-09-09 拍板）。
+       *
+       * **只删项目这个壳**——项目主记录 + 成员名单 + 上传文件记录 + 内容位置。任务和会话一条都不删：
+       *
+       * 1. 绑到本项目的工单**不管在跑还是没在跑**，一律 `unlinkWorkorder` 回落到自己的
+       *    `proj_tmp_<slug>`，也就是读侧的「无分类项目」。发起人明确不要「有任务在跑就不让删」
+       *    这道闸，所以这里没有任何在跑判断。
+       * 2. 搬工单的同时**把本项目的 git 类内容位置复制一份到每个工单的临时项目上**。
+       *    这条不是可选的：`git/resolve.ts` 的 `resolveCodeRepo` 是**派发时**沿
+       *    `binding → project → listContentLocations` 实时解的，不带过去的话，正在跑的任务
+       *    下一个节点就取不到代码仓——正是 `ephemeral-project.ts` 顶部那条五环事故链。
+       * 3. 会话的 `project_id` 置空、项目作用域的变量/密钥清理，走 {@link OnProjectDeleted} 钩子
+       *    （本 service 对会话域与凭据域零耦合，同 `onProjectNameChanged` 的注入模式）。
+       *
+       * 拒绝两类 id：`proj:uncategorized`（读侧虚拟卡，存储里没有真行）与 `proj_tmp_*`
+       * （工单的兜底归属，删掉等于把工单变成无绑定态——契约里 `Workspace.projectId` 必填）。
+       */
+      async deleteProject(id) {
+        const projectId2 = id?.trim();
+        if (!projectId2) throw new Error("project id is required");
+        if (isUncategorizedProjectId(projectId2)) throw new Error(`project not deletable: ${projectId2}`);
+        if (isEphemeralProject(projectId2)) throw new Error(`project not deletable: ${projectId2}`);
+        const project = await this.projects.getProject(projectId2);
+        if (!project) throw new Error(`project not found: ${projectId2}`);
+        const gitLocations = (await this.projects.listContentLocations(projectId2)).filter((loc) => loc.kind === "external-home" && loc.externalHome?.system === "git");
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        const bindings = await this.artifacts.listWorkspaceBindings();
+        const movedWorkOrderIds = [];
+        for (const binding of bindings) {
+          if (binding.projectId !== projectId2) continue;
+          const moved = await this.unlinkWorkorder(binding.workOrderId);
+          movedWorkOrderIds.push(binding.workOrderId);
+          for (const loc of gitLocations) {
+            await this.projects.addContentLocation({
+              ...loc,
+              projectId: moved.projectId,
+              // 派生 id：同一条位置搬到同一个临时项目永远算出同一个 id（addContentLocation 是
+              // upsert），重跑不会堆出重复的仓库行。
+              locationId: `pcl-${moved.projectId}-carried-${loc.locationId}`,
+              updatedAt: now
+            });
+          }
+        }
+        await this.projects.deleteProject(projectId2);
+        if (this.onProjectDeleted) {
+          try {
+            await this.onProjectDeleted({ projectId: projectId2, projectName: project.name });
+          } catch (error2) {
+            console.warn(`[projects] project-deleted follow-up failed for ${projectId2}: ${error2 instanceof Error ? error2.message : String(error2)}`);
+          }
+        }
+        return { projectId: projectId2, movedWorkOrderIds, carriedGitLocationCount: gitLocations.length };
+      }
       /**
        * 项目关联工单（帧 `1355:4918`）：把内部私有的 `listProjectWorkorders` 暴露给路由层。
        * `projectId="proj:uncategorized"` 时聚合所有 `proj_tmp_*` 绑定的工单。
@@ -210091,6 +210951,7 @@ var init_service4 = __esm({
         const projectByWorkOrder = new Map(bindings.map((b2) => [b2.workOrderId, b2.projectId]));
         const workorderSummaries = await this.listProjectWorkorders(projectId2);
         const workorderTitleById = new Map(workorderSummaries.map((w2) => [w2.id, w2.title]));
+        const workorderOwnerById = new Map(workorderSummaries.map((w2) => [w2.id, w2.owner?.id ?? null]));
         const engineRows = await this.collectEngineFilesForProject(
           projectId2,
           workorderSummaries.map((w2) => w2.id),
@@ -210109,6 +210970,8 @@ var init_service4 = __esm({
           const taskId = record8.createdFromWorkOrderId ?? artifact?.workspace ?? null;
           const taskTitle = taskId ? workorderTitleById.get(taskId) ?? null : null;
           const creatorId = revision.author || null;
+          const creatorKind = creatorId ? creatorId.startsWith("actor:human:") ? "human" : "agent" : null;
+          const creatorName = creatorId ? this.resolveActorName(creatorId) : null;
           const folderPath = taskId ? `wo:${taskId}/node:${record8.artifactId}` : null;
           if (folderPath) items.push({
             kind: "folder",
@@ -210121,13 +210984,14 @@ var init_service4 = __esm({
             size: null,
             taskId,
             taskTitle,
-            creatorKind: null,
-            creatorId: null,
-            creatorName: null,
+            creatorKind,
+            creatorId,
+            creatorName,
             updatedAt: record8.updatedAt
           });
           const content3 = revision.contentKind === "manifest" ? await this.readContentRefText(revision.contentRef) : null;
           const files2 = content3 !== null ? tryParseManifestFiles(content3) : void 0;
+          const wholeSize = files2?.length ? null : content3 !== null ? Buffer.byteLength(content3, "utf8") : await this.contentByteSize(revision.contentRef, revision.contentKind);
           for (const file of files2?.length ? files2 : [null]) {
             items.push({
               kind: "artifact",
@@ -210137,12 +211001,15 @@ var init_service4 = __esm({
               filePath: file?.path ?? null,
               depth: folderPath ? 2 : 0,
               type: record8.type,
-              size: file?.size ?? null,
+              size: file ? file.size ?? null : wholeSize,
               taskId,
               taskTitle,
-              creatorKind: creatorId ? creatorId.startsWith("actor:human:") ? "human" : "agent" : null,
+              // 内容形态/引用只挂在**整份产物**那一行；装箱单摊出来的成员行有自己的后缀，
+              // 按后缀走图标即可，挂上 manifest 反而会把 `Dockerfile` 这种无后缀成员画成压缩包。
+              ...file ? {} : { contentKind: revision.contentKind, contentRef: revision.contentRef },
+              creatorKind,
               creatorId,
-              creatorName: creatorId ? this.resolveActorName(creatorId) : null,
+              creatorName,
               updatedAt: record8.updatedAt
             });
           }
@@ -210154,6 +211021,7 @@ var init_service4 = __esm({
           if (foldedTasks.has(item.taskId)) continue;
           taskFolders.add(item.taskId);
           const path41 = `wo:${item.taskId}`;
+          const ownerId = workorderOwnerById.get(item.taskId) ?? null;
           items.push({
             kind: "folder",
             id: `folder:${path41}`,
@@ -210165,9 +211033,9 @@ var init_service4 = __esm({
             size: null,
             taskId: item.taskId,
             taskTitle: item.taskTitle,
-            creatorKind: null,
-            creatorId: null,
-            creatorName: null,
+            creatorKind: ownerId ? ownerId.startsWith("actor:human:") ? "human" : "agent" : null,
+            creatorId: ownerId,
+            creatorName: ownerId ? this.resolveActorName(ownerId) : null,
             updatedAt: item.updatedAt
           });
         }
@@ -210193,6 +211061,7 @@ var init_service4 = __esm({
             updatedAt: file.uploadedAt
           });
         }
+        fillFolderSizes(items);
         items.sort((a, b2) => {
           const pathA = a.path ?? "";
           const pathB = b2.path ?? "";
@@ -210236,6 +211105,9 @@ var init_service4 = __esm({
             const work = worksById.get(acceptedId);
             const folderPath = `wo:${workOrderId}/node:${node2.id}`;
             const folderUpdatedAt = work?.acceptedAt ?? work?.endedAt ?? work?.lastActivityAt ?? work?.createdAt ?? node2.updatedAt;
+            const creatorId = work?.assigneeActorId ?? null;
+            const creatorKind = creatorId ? creatorId.startsWith("actor:human:") ? "human" : "agent" : null;
+            const creatorName = creatorId ? this.resolveActorName(creatorId) : null;
             out.push({
               kind: "folder",
               id: `folder:${folderPath}`,
@@ -210247,14 +211119,11 @@ var init_service4 = __esm({
               size: null,
               taskId: workOrderId,
               taskTitle,
-              creatorKind: null,
-              creatorId: null,
-              creatorName: null,
+              creatorKind,
+              creatorId,
+              creatorName,
               updatedAt: folderUpdatedAt
             });
-            const creatorId = work?.assigneeActorId ?? null;
-            const creatorKind = creatorId ? creatorId.startsWith("actor:human:") ? "human" : "agent" : null;
-            const creatorName = creatorId ? this.resolveActorName(creatorId) : null;
             const sortedArts = arts.slice().sort((a, b2) => a.ordinal - b2.ordinal);
             for (const a of sortedArts) {
               const artifactId = node2.id;
@@ -210293,7 +211162,9 @@ var init_service4 = __esm({
                 filePath: null,
                 depth: 2,
                 type: artifactType || "",
-                size: null,
+                size: await this.contentByteSize(a.contentRef, engineContentKind(a.contentKind)),
+                contentKind: engineContentKind(a.contentKind),
+                ...a.contentRef ? { contentRef: a.contentRef } : {},
                 taskId: workOrderId,
                 taskTitle,
                 creatorKind,
@@ -210645,7 +211516,6 @@ var init_service4 = __esm({
         const worksById = new Map(snap.works.map((w2) => [w2.id, w2]));
         const binding = this.artifacts.getWorkspaceBinding ? await this.artifacts.getWorkspaceBinding(workOrderId).catch(() => null) : null;
         const projectId2 = binding?.projectId ?? ephemeralProjectIdFor(workOrderId);
-        const mapContentKind = (k2) => k2 === "manifest" ? "manifest" : k2 === "external" ? "external-pin" : "inline-blob";
         const out = [];
         for (const node2 of snap.nodes) {
           if (!node2.latestAcceptId) continue;
@@ -210665,7 +211535,7 @@ var init_service4 = __esm({
             contentRef: a.contentRef,
             title: node2.title || a.name,
             // 节点标题优先；否则用 engine artifact 的 "output" 兜底
-            contentKind: mapContentKind(a.contentKind)
+            contentKind: engineContentKind(a.contentKind)
           }));
           out.push({
             outputId: `engine:${acceptedId}`,
@@ -210711,6 +211581,19 @@ var init_service4 = __esm({
         }
         return { ...withKind, size: Buffer.byteLength(content3, "utf8") };
       }
+      /**
+       * 一份产物正文的字节数——**与任务页「相关产物」共用同一条判据**（见 {@link enrichNodeOutputDocument}）：
+       * 不看 `contentKind` 名义，只看正文能不能从 BlobStore 读到；读不到就是 null。
+       *
+       * 于是 git 提交号 / Figma version 这类真·外部钉、未纳管、`empty` 都诚实无大小（前端显「—」），
+       * 而 `inline-blob` 的任务书、PRD、ADR 会报出真实字节数——此前 files-view 这条路径**恒发 null**，
+       * 同一份任务书在任务页有 8.0 KB、在项目页却是「—」。
+       */
+      async contentByteSize(contentRef, contentKind) {
+        if (contentKind === "empty" || !contentRef?.trim()) return null;
+        const content3 = await this.readContentRefText(contentRef);
+        return content3 === null ? null : Buffer.byteLength(content3, "utf8");
+      }
       /** 正文读取的唯一入口：只认 BlobStore；没配 / 没纳管 / 读失败一律 null（调用方据此诚实缺 size）。 */
       async readContentRefText(contentRef) {
         if (!this.blobs) return null;
@@ -217718,6 +218601,8 @@ ${input.description}
         }
         await this.opts.store.putVariable({
           key: v2.key,
+          // 展示名（子 PRD《密钥管理》§2）。没传就不传下去——存储层按「不动」处理，不抹既有名字。
+          ...v2.name !== void 0 && v2.name !== "" ? { name: v2.name } : {},
           scope: v2.scope,
           ...v2.actorId !== void 0 ? { actorId: v2.actorId } : {},
           ...v2.projectId !== void 0 ? { projectId: v2.projectId } : {},
@@ -217786,6 +218671,7 @@ ${input.description}
           const isPlain = r.valueEncrypted.startsWith("plain:");
           return {
             key: r.key,
+            ...r.name !== void 0 ? { name: r.name } : {},
             scope: r.scope,
             ...r.actorId !== void 0 ? { actorId: r.actorId } : {},
             ...r.projectId !== void 0 ? { projectId: r.projectId } : {},
@@ -219613,6 +220499,8 @@ function actorsDomain(opts) {
         key: b2.key,
         value: b2.value,
         scope,
+        // 展示名（子 PRD《密钥管理》§2「名称」）；不传 = 不改既有名字。
+        ...typeof b2.name === "string" && b2.name.trim() ? { name: b2.name.trim() } : {},
         ...scope === "project" ? { projectId: b2.projectId } : {},
         ...b2.deliveryMode !== void 0 ? { deliveryMode: b2.deliveryMode } : {},
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
@@ -219684,6 +220572,8 @@ function actorsDomain(opts) {
         value: b2.value,
         actorId,
         scope: "personal",
+        // 展示名（同上）。组织页「添加密钥 → 新建」走的就是这条端点。
+        ...typeof b2.name === "string" && b2.name.trim() ? { name: b2.name.trim() } : {},
         ...b2.deliveryMode !== void 0 ? { deliveryMode: b2.deliveryMode } : {},
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
         ...b2.overrides !== void 0 ? { overrides: b2.overrides } : {},
@@ -220740,6 +221630,22 @@ function projectsDomain(opts) {
         throw mapProjectError(err);
       }
     });
+    router.delete("/api/projects/:id", async (req) => {
+      try {
+        const result = await (await svc(req)).deleteProject(req.params.id);
+        return {
+          status: 200,
+          body: {
+            ok: true,
+            project_id: result.projectId,
+            moved_work_order_ids: result.movedWorkOrderIds,
+            carried_git_location_count: result.carriedGitLocationCount
+          }
+        };
+      } catch (err) {
+        throw mapProjectError(err);
+      }
+    });
     router.get("/api/projects/:id/members", async (req) => {
       try {
         const members = await (await svc(req)).listProjectMembers(req.params.id);
@@ -221162,6 +222068,9 @@ function mapProjectError(err) {
   if (err instanceof Error && err.message.startsWith("project not found:")) {
     return new ApiError(404, "NOT_FOUND", err.message);
   }
+  if (err instanceof Error && err.message.startsWith("project not deletable:")) {
+    return new ApiError(400, "PROJECT_NOT_DELETABLE", err.message);
+  }
   if (err instanceof Error && err.message.startsWith("missing artifact revision registration:")) {
     return new ApiError(400, "MISSING_ARTIFACT_REVISION", err.message);
   }
@@ -221469,6 +222378,10 @@ function toApiProjectFilesView(view) {
       file_path: item.filePath ?? null,
       depth: item.depth,
       type: item.type,
+      // 内容形态 + 内容引用：前端名称列给**没有后缀**的行选图标用（正文→文本、git 提交→代码、
+      // 其它外部引用→链接）。交付物整份产物行才有，上传文件与文件夹为 null。
+      content_kind: item.contentKind ?? null,
+      content_ref: item.contentRef ?? null,
       size: item.size,
       task_id: item.taskId,
       task_title: item.taskTitle,
@@ -221524,6 +222437,10 @@ function createProjectsDomain(opts) {
       const handler = opts.onProjectNameChangedFor(companyId);
       if (handler) svc.setOnProjectNameChanged(handler);
     }
+    if (opts.onProjectDeletedFor) {
+      const handler = opts.onProjectDeletedFor(companyId);
+      if (handler) svc.setOnProjectDeleted(handler);
+    }
     return svc;
   };
   const service = build(void 0, void 0);
@@ -222349,8 +223266,8 @@ var init_offboarding = __esm({
         return { ownedAgents, inFlight };
       }
       /**
-       * 现在**能不能直接删**这个成员。DELETE 路由先问它：非空即 409 HANDOFF_REQUIRED。
-       * 这是「阻断直接移除」的唯一判据，DELETE 与 commit 共用它，不会两处各判一套。
+       * 现在**能不能直接删**这个成员。DELETE 与 commit 共用它，不会两处各判一套。
+       * 交接删掉之后这里只剩两条：不是成员（NOT_FOUND）、公司最后一位 owner（LAST_OWNER）。
        */
       async blockersForRemoval(companyId, accountId) {
         const blockers = [];
@@ -222533,6 +223450,15 @@ function companiesDomain(opts) {
     if (!agentCredentials) throw new ApiError(501, "NOT_IMPLEMENTED", "\u672C\u90E8\u7F72\u672A\u63A5\u5165 agent \u51ED\u8BC1");
     return agentCredentials;
   };
+  const syncActorNameToDisplayName = async (member, by) => {
+    if (!resolveActorsCtx) return;
+    const name = member.displayName?.trim();
+    if (!name) return;
+    const { service: actorsSvc } = await resolveActorsCtx(member.companyId);
+    const existing = await actorsSvc.getActor(member.actorId);
+    if (!existing || existing.name === name) return;
+    await actorsSvc.upsertActor({ ...existing, name }, by);
+  };
   const requireIfMatch = (req) => {
     const raw = req.raw.headers["if-match"];
     const text5 = (typeof raw === "string" ? raw : Array.isArray(raw) ? raw[0] : void 0)?.replace(/^"|"$/g, "");
@@ -222648,6 +223574,7 @@ function companiesDomain(opts) {
           throw new ApiError(400, "BAD_REQUEST", "displayName \u987B\u4E3A\u975E\u7A7A\u5B57\u7B26\u4E32");
         }
         member = await service.setMemberDisplayName(cid, aid, b2.displayName).catch(mapErr);
+        await syncActorNameToDisplayName(member, req.auth.actor);
       }
       return { status: 200, body: member };
     });
@@ -224606,6 +225533,146 @@ var init_node_store = __esm({
   }
 });
 
+// ../server/src/domains/collab/review-activity.ts
+function reviewCardId(targetWorkId, reviewerActorId) {
+  return `${REVIEW_CARD_PREFIX}${encodeURIComponent(targetWorkId)}:${encodeURIComponent(reviewerActorId)}`;
+}
+function activityReviews(snap, events) {
+  const rows = /* @__PURE__ */ new Map();
+  for (const r of snap.reviews) rows.set(r.id, { ...r });
+  const authoritative = new Set(snap.reviews.filter((r) => r.status).map((r) => r.id));
+  for (const rec of [...events].sort((a, b2) => a.seq - b2.seq)) {
+    const e = rec.event;
+    if (e.kind === "review.create" && !rows.has(e.reviewId)) {
+      rows.set(e.reviewId, {
+        id: e.reviewId,
+        workorderId: snap.workorder.id,
+        nodeId: e.nodeId,
+        targetWorkId: e.targetWorkId,
+        reviewerActorId: e.reviewerActorId,
+        reviewGroup: e.reviewGroup ?? e.reviewerActorId,
+        createdAt: rec.createdAt,
+        startedAt: null,
+        endedAt: null,
+        cancelledAt: null,
+        verdict: null,
+        note: null,
+        handActorId: null,
+        decidedAt: null,
+        sessionRef: null
+      });
+    }
+    if (e.kind === "review.create" && !authoritative.has(e.reviewId)) {
+      const r = rows.get(e.reviewId);
+      Object.assign(r, {
+        nodeId: e.nodeId,
+        targetWorkId: e.targetWorkId,
+        reviewerActorId: e.reviewerActorId,
+        reviewGroup: e.reviewGroup ?? r.reviewGroup ?? e.reviewerActorId,
+        createdAt: r.createdAt ?? rec.createdAt
+      });
+    }
+    if (!e.kind.startsWith("review.")) continue;
+    const candidates = "reviewId" in e && e.reviewId ? [rows.get(e.reviewId)] : e.kind === "review.response" ? [...rows.values()].filter((r) => r.targetWorkId === e.targetWorkId && r.reviewerActorId === e.reviewerActorId && (!e.reviewGroup || r.reviewGroup === e.reviewGroup)) : [];
+    const matches = e.kind === "review.response" && !e.reviewId ? latestActivityReviews(candidates.filter((r) => !!r && r.createdAt <= rec.createdAt), events.filter((r) => r.seq <= rec.seq)) : candidates;
+    for (const r of matches) {
+      if (!r || authoritative.has(r.id)) continue;
+      if (e.kind === "review.started") r.startedAt = rec.createdAt;
+      if (e.kind === "review.timeout") {
+        r.endedAt = rec.createdAt;
+      }
+      if (e.kind === "review.kill") r.cancelledAt = rec.createdAt;
+      if (e.kind === "review.response") {
+        r.verdict = e.verdict;
+        r.note = e.note ?? null;
+        r.decidedAt = rec.createdAt;
+        r.endedAt = rec.createdAt;
+        r.handActorId = e.handActorId ?? null;
+      }
+    }
+  }
+  const createdSeq = new Map(events.flatMap((r) => r.event.kind === "review.create" ? [[r.event.reviewId, r.seq]] : []));
+  return [...rows.values()].filter((r) => r.nodeId && r.targetWorkId && r.reviewerActorId && r.createdAt).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || (createdSeq.get(a.id) ?? 0) - (createdSeq.get(b2.id) ?? 0) || a.id.localeCompare(b2.id));
+}
+function reviewCardTarget(cardId, reviews) {
+  if (cardId.startsWith(REVIEW_CARD_PREFIX)) {
+    const encoded = cardId.slice(REVIEW_CARD_PREFIX.length);
+    const separator = encoded.indexOf(":");
+    if (separator < 1 || separator === encoded.length - 1) return void 0;
+    try {
+      return {
+        targetWorkId: decodeURIComponent(encoded.slice(0, separator)),
+        reviewerActorId: decodeURIComponent(encoded.slice(separator + 1))
+      };
+    } catch {
+      return void 0;
+    }
+  }
+  if (cardId.startsWith("review:")) {
+    const review = reviews.find((r) => r.id === cardId.slice(7));
+    if (review) return { targetWorkId: review.targetWorkId, reviewerActorId: review.reviewerActorId };
+  }
+  return void 0;
+}
+function latestActivityReviews(reviews, events) {
+  const createSeq = new Map(events.flatMap((r) => r.event.kind === "review.create" ? [[r.event.reviewId, r.seq]] : []));
+  const rows = [...reviews].sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || (createSeq.get(a.id) ?? 0) - (createSeq.get(b2.id) ?? 0) || a.id.localeCompare(b2.id));
+  const latest = /* @__PURE__ */ new Map();
+  for (const r of rows) latest.set(JSON.stringify([r.reviewGroup, r.reviewerActorId]), r);
+  return [...latest.values()];
+}
+function reviewLabel(r) {
+  const state = reviewState(r);
+  if (state === "accept") return "\u5BA1\u6838\u901A\u8FC7";
+  if (state === "reject") return "\u5BA1\u6838\u4E0D\u901A\u8FC7";
+  if (state === "dead") return "\u5BA1\u6838\u5DF2\u505C\u6B62";
+  if (state === "failed") return "\u5BA1\u6838\u8FD0\u884C\u5931\u8D25";
+  if (state === "retry") return "\u6B63\u5728\u91CD\u8BD5\u5BA1\u6838";
+  return r.reviewerActorId.startsWith("actor:human:") ? "\u5F85\u5BA1\u6838" : "\u6B63\u5728\u5BA1\u6838";
+}
+function reviewSummary(snap, reviews, events) {
+  const first = reviews[0];
+  const work = snap.works.find((w2) => w2.id === first.targetWorkId);
+  const node2 = snap.nodes.find((n) => n.id === first.nodeId);
+  const name = node2?.title ?? first.nodeId;
+  const latest = latestActivityReviews(reviews, events);
+  const requirements = snap.requirements.filter((r) => r.nodeId === first.nodeId && r.reviewerActorId === first.reviewerActorId);
+  const judgement = judgeWork({ requirements: requirements.length ? requirements : reviews, reviews });
+  const pending = latest.filter((r) => !r.cancelledAt && !r.verdict && reviewState(r) === "running");
+  if (work?.acceptanceState === "accepted" || work?.acceptedAt || work?.acceptanceState !== "rejected" && judgement === "passed") {
+    return { phase: "done", status: `\u300A${name}\u300B\u5BA1\u6838\u901A\u8FC7\u3002`, latest, pending: [] };
+  }
+  if (work?.acceptanceState === "rejected" || judgement === "rejected") {
+    return { phase: "done", status: "\u5BA1\u6838\u4E0D\u901A\u8FC7\u3002", latest, pending: [] };
+  }
+  const endedWork = !!(work?.cancelledAt || work?.deadAt);
+  if (endedWork && latest.every((r) => !!r.cancelledAt && reviewState(r) !== "retry")) {
+    return { phase: "done", status: `\u300A${name}\u300B\u7684\u672C\u6B21\u5BA1\u6838\u5DF2\u53D6\u6D88\u3002`, latest, pending: [] };
+  }
+  const interrupted = latest.some((r) => ["failed", "dead"].includes(reviewState(r)));
+  if (interrupted) return { phase: "stuck", status: latest.length === 1 ? reviewState(latest[0]) === "dead" ? events.some((r) => r.event.kind === "review.kill" && r.event.reviewId === latest[0].id) ? `\u300A${name}\u300B\u7684\u8BC4\u5BA1\u8FDE\u7EED\u5931\u8D25\uFF0C\u5DF2\u505C\u6B62\u3002` : `\u300A${name}\u300B\u7684\u5BA1\u6838\u5DF2\u505C\u6B62\u3002` : `\u300A${name}\u300B\u7684\u5BA1\u6838\u672A\u5728\u65F6\u9650\u5185\u5B8C\u6210\u3002` : `\u300A${name}\u300B\u7684\u90E8\u5206\u5BA1\u6838\u6267\u884C\u4E2D\u65AD\uFF0C\u5C1A\u672A\u5B8C\u6210\u5168\u90E8\u5BA1\u6838\u3002`, latest, pending };
+  if (latest.some((r) => r.reviewerActorId.startsWith("actor:agent:") && ["running", "retry"].includes(reviewState(r)))) {
+    return { phase: "running", status: `\u6B63\u5728\u5BA1\u6838 \u300A${name}\u300B\u3002`, latest, pending };
+  }
+  return { phase: "not_started", status: `\u8BF7\u786E\u8BA4\u300A${name}\u300B\u662F\u5426\u5BA1\u6838\u901A\u8FC7\u3002`, latest, pending };
+}
+var REVIEW_CARD_PREFIX, REVIEW_TRACE_EVENT_KINDS;
+var init_review_activity = __esm({
+  "../server/src/domains/collab/review-activity.ts"() {
+    "use strict";
+    init_src4();
+    REVIEW_CARD_PREFIX = "review-work:";
+    REVIEW_TRACE_EVENT_KINDS = [
+      "review.create",
+      "review.started",
+      "review.response",
+      "review.timeout",
+      "review.kill",
+      "plan.node_retry"
+    ];
+  }
+});
+
 // ../server/src/domains/collab/workorder-manager.ts
 function resolveWorkorderManager(snap) {
   const nodes = snap.nodes;
@@ -224644,8 +225711,29 @@ function buildWorkorderActivity(input) {
   if (!snap) return { workorderId, cards: [], truncated: false };
   const nodeById = new Map(snap.nodes.map((n) => [n.id, n]));
   const workById = new Map(snap.works.map((w2) => [w2.id, w2]));
-  const reviewById = new Map(snap.reviews.map((r) => [r.id, r]));
   const issueById = new Map(snap.issues.map((i) => [i.id, i]));
+  const activeWorks = /* @__PURE__ */ new Set();
+  const gapOrigins = /* @__PURE__ */ new Map();
+  const knownStarts = new Set(events.flatMap((r) => r.event.kind === "work.create" || r.event.kind === "work.started" ? [r.event.workId] : []));
+  for (const rec of events) {
+    const event = rec.event;
+    if (event.kind === "work.create" || event.kind === "work.started") activeWorks.add(event.workId);
+    if (event.kind === "work.response" || event.kind === "work.timeout" || event.kind === "work.kill") activeWorks.delete(event.workId);
+    if (event.kind !== "issue.create" || event.issueKind !== "gap") continue;
+    const nodeId = event.raisedByNodeId ?? event.aboutNodeId;
+    const matches = (id) => {
+      const work = workById.get(id);
+      return work?.nodeId === nodeId && work.assigneeActorId === event.authorActorId;
+    };
+    if (event.aboutWorkId && matches(event.aboutWorkId)) {
+      gapOrigins.set(event.issueId, [event.aboutWorkId]);
+    } else if (!event.aboutWorkId) {
+      const candidates = [...activeWorks].filter(matches);
+      const at = Date.parse(rec.createdAt);
+      const unobserved = snap.works.some((work) => !knownStarts.has(work.id) && matches(work.id) && Date.parse(work.createdAt) <= at && (!work.endedAt || Date.parse(work.endedAt) >= at) && (!work.deadAt || Date.parse(work.deadAt) >= at) && (!work.cancelledAt || Date.parse(work.cancelledAt) >= at));
+      if (candidates.length === 1 && !unobserved) gapOrigins.set(event.issueId, candidates);
+    }
+  }
   const nodesWithInEdges = new Set(snap.edges.map((e) => e.toNodeId));
   const rootBriefNodeIds = new Set(
     snap.nodes.filter((n) => n.type === "brief" && !nodesWithInEdges.has(n.id)).map((n) => n.id)
@@ -224696,8 +225784,9 @@ function buildWorkorderActivity(input) {
   const groupIndexOf = /* @__PURE__ */ new Map();
   const cardOfWork = /* @__PURE__ */ new Map();
   const groupKey = (nodeId) => `${nodeId}#${groupIndexOf.get(nodeId) ?? 0}`;
-  const reviewCards = /* @__PURE__ */ new Map();
   const issueCards = /* @__PURE__ */ new Map();
+  const workOfIssue = /* @__PURE__ */ new Map();
+  const plainCommentIssueIds = /* @__PURE__ */ new Set();
   const acceptCards = /* @__PURE__ */ new Map();
   const standalone = [];
   const touch = (d, rec) => {
@@ -224755,10 +225844,22 @@ function buildWorkorderActivity(input) {
         const executorId = w2?.assigneeActorId ?? rec.actorId;
         if (isPendingActor(executorId)) break;
         const status = reasonKinds.has("rework") ? ACTIVITY_COPY.reworking(nodeName(nodeId)) : reasonKinds.has("resumed") ? ACTIVITY_COPY.resumed(nameOf(executorId), nodeName(nodeId)) : reasonKinds.has("spec_changed") ? ACTIVITY_COPY.specChanged(nodeName(nodeId)) : reasonKinds.has("issue") ? ACTIVITY_COPY.issueDriven(nodeName(nodeId)) : ACTIVITY_COPY.working(nodeName(nodeId));
+        const drivingIssueId = str4(reasons.find((r) => r.kind === "issue")?.issueId);
+        if (drivingIssueId) {
+          workOfIssue.set(drivingIssueId, workId);
+          const ic = plainCommentIssueIds.has(drivingIssueId) ? issueCards.get(drivingIssueId) : void 0;
+          const commentAuthor = issueById.get(drivingIssueId)?.authorActorId;
+          if (ic && commentAuthor) {
+            touch(ic, rec);
+            ic.executorId = executorId;
+            ic.status = ACTIVITY_COPY.commentHandling(nameOf(executorId), nameOf(commentAuthor));
+          }
+        }
         const reworkReason = str4(reasons.find((r) => r.kind === "rework")?.reason);
         const key = groupKey(nodeId);
         const existingGroup = groupCards.get(key);
         if (existingGroup) {
+          if (!existingGroup.traceWorkIds.includes(workId)) existingGroup.traceWorkIds.push(workId);
           touch(existingGroup, rec);
           existingGroup.executorId = executorId;
           existingGroup.phase = "running";
@@ -224771,6 +225872,7 @@ function buildWorkorderActivity(input) {
         }
         const fresh = {
           id: `work:${workId}`,
+          traceWorkIds: [workId],
           seq: rec.seq,
           at: rec.createdAt,
           updatedAt: rec.createdAt,
@@ -224813,8 +225915,9 @@ function buildWorkorderActivity(input) {
           }
           break;
         }
+        const engineVerdict = workById.get(workId)?.status;
         touch(d, rec);
-        if (ev.outcome === "failed") {
+        if (ev.outcome === "failed" && engineVerdict !== "success") {
           d.phase = "stuck";
           d.stuckReason = "failed";
           d.status = ACTIVITY_COPY.failed(nameOf(d.executorId));
@@ -224902,72 +226005,6 @@ function buildWorkorderActivity(input) {
         }
         break;
       }
-      /* ── 审核（review）──────────────────────────────────────────── */
-      case "review.create": {
-        const reviewId = String(ev.reviewId ?? "");
-        const nodeId = String(ev.nodeId ?? "");
-        const targetWorkId = String(ev.targetWorkId ?? "");
-        const reviewerId = str4(ev.reviewerActorId) ?? rec.actorId;
-        const isAgent2 = ev.reviewerIsAgent === true;
-        const name = nodeName(nodeId);
-        reviewCards.set(reviewId, {
-          id: `review:${reviewId}`,
-          seq: rec.seq,
-          at: rec.createdAt,
-          updatedAt: rec.createdAt,
-          nodeId,
-          executorId: reviewerId,
-          ...rec.handActorId ? { handActorId: rec.handActorId } : {},
-          // agent 评审是「机器在跑」= 进行中；人审是待办 = 待开始（人没有「开始看了」这个事件）。
-          phase: isAgent2 ? "running" : "not_started",
-          status: isAgent2 ? ACTIVITY_COPY.reviewing(name) : ACTIVITY_COPY.reviewPending(name),
-          /* 挂上被审那一次交付的**全部产物**（发起人 2026-09-08 定）：要人点「通过/不通过」，
-             就得让他在同一张卡上看到到底在审什么。此前这里恒空，产物只挂在验收卡上——
-             而验收卡与审核卡是同一件事的两张（见下方 `acceptCards` 那段的跳过判据）。 */
-          artifacts: artifactsByWork.get(targetWorkId) ?? [],
-          // 人审才出底栏按钮；agent 审无按钮（原型同）。
-          actions: isAgent2 ? [] : [
-            { kind: "review", label: BUTTON.approve, target: nodeId, verdict: "approve" },
-            { kind: "review", label: BUTTON.reject, target: nodeId, verdict: "request_changes" }
-          ]
-        });
-        break;
-      }
-      case "review.started": {
-        const d = reviewCards.get(String(ev.reviewId ?? ""));
-        if (d) touch(d, rec);
-        break;
-      }
-      case "review.response": {
-        const reviewId = str4(ev.reviewId);
-        const targetWorkId = String(ev.targetWorkId ?? "");
-        const d = reviewId ? reviewCards.get(reviewId) : [...reviewCards.values()].find((c) => reviewById.get(c.id.slice("review:".length))?.targetWorkId === targetWorkId);
-        if (!d) break;
-        touch(d, rec);
-        d.phase = "done";
-        d.executorId = str4(ev.reviewerActorId) ?? d.executorId;
-        d.actions = [];
-        const nodeId = d.nodeId;
-        const name = nodeName(nodeId);
-        if (ev.verdict === "approve") {
-          d.status = ACTIVITY_COPY.reviewApproved(name);
-        } else {
-          d.status = ACTIVITY_COPY.reviewRejected;
-          const note = str4(ev.note);
-          if (note) d.detail = ACTIVITY_COPY.reviewRejectedDetail(note);
-        }
-        break;
-      }
-      case "review.timeout":
-      case "review.kill": {
-        const d = reviewCards.get(String(ev.reviewId ?? ""));
-        if (!d) break;
-        touch(d, rec);
-        d.phase = "stuck";
-        d.status = ev.kind === "review.kill" ? ACTIVITY_COPY.reviewKilled(nodeName(d.nodeId)) : ACTIVITY_COPY.reviewTimedOut(nodeName(d.nodeId));
-        d.actions = [];
-        break;
-      }
       /* ── 沟通与异常（issue）────────────────────────────────────── */
       case "issue.create": {
         const issueId = String(ev.issueId ?? "");
@@ -225046,6 +226083,7 @@ function buildWorkorderActivity(input) {
           });
           break;
         }
+        if (!isGap && !isEscalation && !isBackpressure) plainCommentIssueIds.add(issueId);
         const nodeAssignee = nodeId ? nodeById.get(nodeId)?.assigneeActorId : void 0;
         const commentCounterpart = nodeAssignee ?? ownerId;
         const commentTargetId = commentCounterpart && commentCounterpart !== authorId ? commentCounterpart : void 0;
@@ -225110,31 +226148,24 @@ function buildWorkorderActivity(input) {
         if (issue2?.kind === "escalation") {
           const linkedGap = str4(issue2.gapId);
           const stuckActor = (linkedGap ? issueById.get(linkedGap)?.authorActorId : void 0) ?? issue2.authorActorId;
+          touch(d, rec);
+          d.phase = "done";
+          d.executorId = resolverId;
+          d.handActorId = rec.handActorId ?? void 0;
+          d.status = ACTIVITY_COPY.handledEscalation(nameOf(stuckActor));
           d.actions = [];
           const raisedCard = issueCards.get(`${issueId}:raised`);
           if (raisedCard) raisedCard.actions = [];
-          standalone.push({
-            id: `issue:${issueId}:resolved`,
-            seq: rec.seq,
-            at: rec.createdAt,
-            updatedAt: rec.createdAt,
-            ...d.nodeId ? { nodeId: d.nodeId } : {},
-            executorId: resolverId,
-            ...rec.handActorId ? { handActorId: rec.handActorId } : {},
-            phase: "done",
-            /* 收口正文不上卡（与开口那一支同一条口径）：`ws:wo-635d7add` 的收口 note 是一整段
-               处置说明，铺回展开区又是一屏字。 */
-            status: ACTIVITY_COPY.handledEscalation(nameOf(stuckActor)),
-            artifacts: [],
-            actions: []
-          });
           break;
         }
         touch(d, rec);
         d.phase = "done";
         d.actions = [];
         d.executorId = resolverId;
-        d.status = ACTIVITY_COPY.commentResolved(nameOf(resolverId), nodeName(d.nodeId));
+        const drivenWorkId = workOfIssue.get(issueId);
+        const producedNewVersion = !!(drivenWorkId && workById.get(drivenWorkId)?.conclusion);
+        const commentAuthorId = issue2?.authorActorId;
+        d.status = producedNewVersion && commentAuthorId ? ACTIVITY_COPY.commentAddressed(nameOf(resolverId), nameOf(commentAuthorId), nodeName(d.nodeId)) : ACTIVITY_COPY.commentResolved(nameOf(resolverId), nodeName(d.nodeId));
         break;
       }
       case "plan.node_retry": {
@@ -225151,9 +226182,7 @@ function buildWorkorderActivity(input) {
         break;
     }
   }
-  const reviewedWorkIds = new Set(
-    [...reviewCards.keys()].map((rid) => reviewById.get(rid)?.targetWorkId).filter(Boolean)
-  );
+  const reviewedWorkIds = new Set([...snap.reviews, ...activityReviews(snap, events)].map((r) => r.targetWorkId));
   for (const w2 of snap.works) {
     if (acceptCards.has(w2.id)) continue;
     if (reviewedWorkIds.has(w2.id)) continue;
@@ -225177,23 +226206,104 @@ function buildWorkorderActivity(input) {
       status: ACTIVITY_COPY.acceptPending,
       artifacts: artifactsByWork.get(w2.id) ?? [],
       actions: [
-        { kind: "accept", label: BUTTON.acceptPass, target: node2.id, verdict: "approve" },
-        { kind: "accept", label: BUTTON.acceptFail, target: node2.id, verdict: "request_changes" }
+        { kind: "accept", label: BUTTON.acceptPass, target: node2.id, revisionId: w2.id, verdict: "approve" },
+        { kind: "accept", label: BUTTON.acceptFail, target: node2.id, revisionId: w2.id, verdict: "request_changes" }
       ]
     });
   }
+  const visibleReviews = /* @__PURE__ */ new Map();
+  const allReviews = activityReviews(snap, events);
+  const reviewWorks = /* @__PURE__ */ new Map();
+  const reviewCards = /* @__PURE__ */ new Map();
+  for (const r of allReviews) {
+    const rows = reviewWorks.get(r.targetWorkId) ?? [];
+    rows.push(r);
+    reviewWorks.set(r.targetWorkId, rows);
+    const cardId = reviewCardId(r.targetWorkId, r.reviewerActorId);
+    const group = reviewCards.get(cardId) ?? { workId: r.targetWorkId, reviewerId: r.reviewerActorId, reviews: [] };
+    group.reviews.push(r);
+    reviewCards.set(cardId, group);
+  }
+  for (const [cardId, { workId, reviewerId, reviews }] of reviewCards) {
+    const summary = reviewSummary(snap, reviews, events);
+    const first = reviews[0];
+    const ids2 = new Set(reviews.map((r) => r.id));
+    const created = events.filter((r) => r.event.kind === "review.create" && ids2.has(r.event.reviewId));
+    const dates = summary.latest.flatMap((r) => [r.createdAt, r.startedAt, r.endedAt, r.decidedAt, r.cancelledAt, r.retryAt].filter((v2) => !!v2));
+    const pending = summary.pending.filter((r) => r.reviewerActorId.startsWith("actor:human:") && (!input.viewerActorId || r.reviewerActorId === input.viewerActorId));
+    visibleReviews.set(cardId, {
+      id: cardId,
+      reviewWorkId: workId,
+      reviewerId,
+      reviewerIds: [reviewerId],
+      traceAvailable: true,
+      seq: created.length ? Math.min(...created.map((r) => r.seq)) : 0,
+      at: first.createdAt,
+      updatedAt: dates.sort().at(-1) ?? first.createdAt,
+      nodeId: first.nodeId,
+      executorId: reviewerId,
+      phase: summary.phase,
+      status: summary.status,
+      detail: summary.latest.length === 1 ? summary.latest[0].note ? `${summary.latest[0].verdict === "request_changes" ? "\u5BA1\u6838\u4E0D\u901A\u8FC7" : "\u5BA1\u6838\u610F\u89C1"}\uFF1A${summary.latest[0].note}` : void 0 : summary.latest.map((r) => `${nameOf(r.reviewerActorId)}\uFF08\u8BC4\u5BA1\u7EC4 ${[...new Set(summary.latest.map((r2) => r2.reviewGroup))].indexOf(r.reviewGroup) + 1}\uFF09\uFF1A${reviewLabel(r)}${r.note ? `
+${r.verdict === "request_changes" ? "\u5BA1\u6838\u4E0D\u901A\u8FC7" : "\u5BA1\u6838\u610F\u89C1"}\uFF1A${r.note}` : ""}`).join("\n\n"),
+      artifacts: artifactsByWork.get(workId) ?? [],
+      actions: pending.length ? [
+        { kind: "review", label: BUTTON.approve, target: first.nodeId, revisionId: workId, verdict: "approve" },
+        { kind: "review", label: BUTTON.reject, target: first.nodeId, revisionId: workId, verdict: "request_changes" }
+      ] : []
+    });
+  }
   const drafts = [
     ...standalone,
     ...groupCards.values(),
-    ...reviewCards.values(),
+    ...visibleReviews.values(),
     ...issueCards.values(),
     ...acceptCards.values()
   ].sort((a, b2) => a.updatedAt.localeCompare(b2.updatedAt) || a.seq - b2.seq || a.id.localeCompare(b2.id));
-  const runIdByTarget = input.runIdByTarget;
-  const runIdOfCard = (cardId) => {
-    if (!runIdByTarget) return void 0;
-    if (cardId.startsWith("work:")) return runIdByTarget.get(`work:${cardId.slice("work:".length)}`);
-    if (cardId.startsWith("review:")) return runIdByTarget.get(`review:${cardId.slice("review:".length)}`);
+  const issueWorks = /* @__PURE__ */ new Map();
+  const reasonIds = /* @__PURE__ */ new Map();
+  for (const rec of input.events) {
+    const ev = rec.event;
+    if (ev.kind === "work.create") reasonIds.set(
+      ev.workId,
+      ev.reasons.filter((r) => r.kind === "issue").map((r) => r.issueId)
+    );
+  }
+  for (const w2 of [...snap?.works ?? []].sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id))) {
+    const replyIssueId = replyIssueIdOf(w2);
+    for (const id of new Set(w2.frozenIssueIds ?? reasonIds.get(w2.id) ?? (replyIssueId ? [replyIssueId] : []))) {
+      const issue2 = issueById.get(id);
+      if (issue2?.kind !== "comment" && issue2?.kind !== "change_request") continue;
+      const ids2 = issueWorks.get(id) ?? [];
+      ids2.push(w2.id);
+      issueWorks.set(id, ids2);
+    }
+  }
+  for (const d of drafts) {
+    if (!d.id.startsWith("issue:")) continue;
+    const issueId = d.id.slice("issue:".length);
+    if (issueById.get(issueId)?.kind === "gap") {
+      d.traceAvailable = true;
+      d.traceWorkIds = gapOrigins.get(issueId);
+    } else {
+      d.traceWorkIds = issueWorks.get(issueId);
+    }
+  }
+  const runIdOfCard = (d) => {
+    const map = input.runIdByTarget;
+    if (d.traceWorkIds?.length) {
+      for (const id of [...d.traceWorkIds].reverse()) {
+        const run = map?.get(`work:${id}`);
+        if (run) return run;
+      }
+    }
+    if (d.reviewWorkId) {
+      for (const r of [...reviewWorks.get(d.reviewWorkId) ?? []].reverse()) {
+        if (d.reviewerId && r.reviewerActorId !== d.reviewerId) continue;
+        const run = map?.get(`review:${r.id}`);
+        if (run) return run;
+      }
+    }
     return void 0;
   };
   const cards = drafts.map((d) => ({
@@ -225203,13 +226313,16 @@ function buildWorkorderActivity(input) {
     updatedAt: d.updatedAt,
     ...d.nodeId ? { nodeId: d.nodeId, nodeTitle: nodeName(d.nodeId) } : {},
     executor: ref2(d.executorId),
+    ...d.reviewWorkId ? { reviewWorkId: d.reviewWorkId, reviewers: d.reviewerIds?.map(ref2) } : {},
     ...d.handActorId ? { handActor: ref2(d.handActorId) } : {},
     phase: d.phase,
     status: d.status,
     ...d.detail ? { detail: d.detail } : {},
     artifacts: d.artifacts,
     actions: d.actions,
-    .../* @__PURE__ */ ((r) => r ? { runId: r } : {})(runIdOfCard(d.id))
+    ...d.traceAvailable ? { traceAvailable: true } : {},
+    ...d.traceWorkIds?.length ? { traceWorkIds: d.traceWorkIds, traceAvailable: true } : {},
+    .../* @__PURE__ */ ((r) => r ? { runId: r, traceAvailable: true } : {})(runIdOfCard(d))
   }));
   return { workorderId, cards, truncated };
 }
@@ -225218,6 +226331,8 @@ var init_activity2 = __esm({
   "../server/src/domains/collab/activity.ts"() {
     "use strict";
     init_src();
+    init_src4();
+    init_review_activity();
     init_workorder_manager();
     ACTIVITY_EVENT_KINDS = [
       "plan.changed",
@@ -225347,6 +226462,14 @@ var init_activity2 = __esm({
        * 留言 / 回压收口——**同样一句索引**。收口 note 与开口正文同源、同样能长到几千字：
        * 全库实测 `ws:wo-56bba3c1` 那条收口后小状态仍是 **8096 字**。全文去留言线看。
        */
+      /** 有人接手这条留言、开工了——由 `work.create` 的 `reasons` 引用该 issueId 判定。 */
+      commentHandling: (executor, author) => `${executor} \u6B63\u5728\u5904\u7406\u6765\u81EA ${author} \u7684\u7559\u8A00\u3002`,
+      /**
+       * 处理完**并且真出了新一版**。
+       * ⚠ 只在那一轮真有 conclusion 时才说「更新了一版」——resolve 也可能是「看了但不改」，
+       * 那种情况说出了新版就是一句卡面兑现不了的断言（同「未经 X 确认」那一族）。
+       */
+      commentAddressed: (executor, author, node2) => `${executor} \u5DF2\u57FA\u4E8E ${author} \u7684\u7559\u8A00\u66F4\u65B0\u4E86\u4E00\u7248\u300A${node2}\u300B\u3002`,
       commentResolved: (by, node2) => `${by} \u5DF2\u5904\u7406\u300A${node2}\u300B\u7684\u7559\u8A00\u3002`,
       issueResolved: (note) => note
     };
@@ -225370,6 +226493,135 @@ function targetOf(cardId) {
   return null;
 }
 function buildWorkorderActivityTrace(input) {
+  const { workorderId, cardId, snap } = input;
+  const ref2 = input.ref ?? ((id) => ({ id }));
+  const empty2 = { workorderId, cardId, attempts: [] };
+  if (!snap) return empty2;
+  const reviews = activityReviews(snap, input.events ?? []);
+  const reviewTarget = reviewCardTarget(cardId, reviews);
+  if (reviewTarget) return buildReviewHistory(input, reviewTarget.targetWorkId, reviewTarget.reviewerActorId, reviews);
+  const card2 = input.events ? buildWorkorderActivity({
+    workorderId,
+    snap,
+    events: input.events,
+    ref: ref2
+  }).cards.find((c) => c.id === cardId) : void 0;
+  const gap = cardId.startsWith("issue:") ? snap.issues.find((i) => i.id === cardId.slice(6) && i.kind === "gap") : void 0;
+  if (gap && !card2?.traceWorkIds?.length) return {
+    ...empty2,
+    works: [],
+    notice: "\u7F3A\u53E3\u8BB0\u5F55\u6CA1\u6709\u660E\u786E\u5173\u8054\u5230\u67D0\u6B21\u6267\u884C\uFF0C\u6682\u65F6\u65E0\u6CD5\u786E\u8BA4\u8FD0\u884C\u8F68\u8FF9\u3002"
+  };
+  const workIds = card2?.traceWorkIds ?? (cardId.startsWith("work:") ? [cardId.slice(5)] : []);
+  if (workIds.length > 0) {
+    let firstBriefing;
+    const works = [];
+    for (const workId of workIds) {
+      const work = snap.works.find((w2) => w2.id === workId);
+      if (!work) continue;
+      const single = buildSingleTrace({ ...input, cardId: `work:${workId}` });
+      const briefing = single.briefing;
+      if (!briefing) continue;
+      firstBriefing ??= briefing;
+      const sources = sourcesOfWork(work, input, briefing);
+      const artifacts = single.attempts.at(-1)?.artifacts ?? artifactsOfWork(work, input);
+      works.push({
+        workId,
+        at: work.createdAt,
+        nodeTitle: briefing.nodeTitle,
+        ...briefing.spec ? { spec: briefing.spec } : {},
+        sources,
+        attempts: single.attempts,
+        ...work.conclusion?.trim() ? { conclusion: work.conclusion.trim() } : {},
+        artifacts,
+        ...single.attempts.length ? {} : { emptyReason: input.dispatches === void 0 ? "records_unavailable" : work.startedAt || work.endedAt || work.deadAt || work.cancelledAt || work.conclusion || work.status && work.status !== "running" ? "records_missing" : "not_dispatched" }
+      });
+    }
+    if (works.length) {
+      return {
+        workorderId,
+        cardId,
+        briefing: firstBriefing,
+        works,
+        ...gap && !gap.aboutWorkId ? { notice: "\u6839\u636E\u7F3A\u53E3\u63D0\u51FA\u65F6\u7684\u8BB0\u5F55\uFF0C\u5173\u8054\u5230\u8BE5\u8282\u70B9\u3001\u8BE5\u6267\u884C\u4EBA\u5F53\u65F6\u552F\u4E00\u7684\u6267\u884C\u3002" } : {},
+        attempts: works.flatMap((w2) => w2.attempts).sort((a, b2) => a.at.localeCompare(b2.at) || a.runId.localeCompare(b2.runId))
+      };
+    }
+  }
+  return buildSingleTrace(input);
+}
+function sourcesOfWork(work, input, briefing) {
+  const snap = input.snap;
+  const ref2 = input.ref ?? ((id) => ({ id }));
+  const created = input.events?.find((r) => r.event.kind === "work.create" && r.event.workId === work.id);
+  const event = created?.event;
+  const replyIssueId = replyIssueIdOf(work);
+  const ids2 = work.frozenIssueIds ?? (event?.kind === "work.create" ? event.reasons.filter((r) => r.kind === "issue").map((r) => r.issueId) : replyIssueId ? [replyIssueId] : void 0);
+  if (!ids2) return [{ kind: "unavailable", at: work.createdAt }];
+  const sources = [];
+  for (const issueId of new Set(ids2)) {
+    const issue2 = snap.issues.find((i) => i.id === issueId);
+    if (!issue2 || issue2.createdAt > work.createdAt) {
+      sources.push({ kind: "unavailable", at: work.createdAt, issueId });
+      continue;
+    }
+    if (issue2.kind !== "comment" && issue2.kind !== "change_request") continue;
+    const replySeq = (id) => input.events?.find((e) => e.event.kind === "issue.reply" && e.event.replyId === id)?.seq;
+    if (snap.issueReplies.some((r) => r.issueId === issueId && r.createdAt === work.createdAt && (!created || replySeq(r.id) === void 0))) {
+      sources.push({ kind: "unavailable", at: work.createdAt, issueId });
+      continue;
+    }
+    const replies = snap.issueReplies.filter((r) => {
+      if (r.issueId !== issueId || r.createdAt > work.createdAt) return false;
+      const seq = replySeq(r.id);
+      return created && seq !== void 0 ? seq < created.seq : r.createdAt < work.createdAt;
+    }).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || (replySeq(a.id) ?? 0) - (replySeq(b2.id) ?? 0) || a.id.localeCompare(b2.id));
+    const reply = replies.at(-1);
+    if (reply?.viaWorkId && snap.works.some((w2) => w2.id === reply.viaWorkId && w2.nodeId === work.nodeId)) {
+      sources.push({ kind: "unavailable", at: work.createdAt, issueId });
+      continue;
+    }
+    sources.push({
+      kind: issueId.startsWith("ann:rework:") ? "gap_resume" : "comment",
+      actor: ref2(reply?.authorActorId ?? issue2.authorActorId),
+      at: reply?.createdAt ?? issue2.createdAt,
+      content: reply?.body ?? issue2.body,
+      issueId,
+      ...reply ? { replyId: reply.id } : {}
+    });
+  }
+  return sources.length ? sources : [{
+    kind: "assignment",
+    actor: briefing.actor,
+    at: work.createdAt,
+    ...briefing.spec ? { content: briefing.spec } : {}
+  }];
+}
+function artifactsOfWork(work, input) {
+  const snap = input.snap;
+  const workId = work.id;
+  const nodeId = work.nodeId;
+  const node2 = snap.nodes.find((n) => n.id === nodeId);
+  const nodesWithInEdges = new Set(snap.edges.map((e) => e.toNodeId));
+  const isRootBrief = node2?.type === "brief" && !nodesWithInEdges.has(nodeId);
+  const list2 = [];
+  for (const a of snap.artifacts) {
+    if (a.workId !== workId) continue;
+    const artifactNodeId = a.nodeId;
+    const files = a.contentKind === "manifest" ? input.manifestFiles?.get(a.contentRef) : void 0;
+    if (files && files.length > 0) {
+      for (const path41 of files) {
+        list2.push({ id: a.id, name: path41.split("/").pop() || path41, path: path41, nodeId: artifactNodeId });
+      }
+    } else if (isRootBrief) {
+      list2.push({ id: a.id, name: "\u4EFB\u52A1\u76EE\u6807", path: "\u4EFB\u52A1\u76EE\u6807.md", nodeId: artifactNodeId });
+    } else {
+      list2.push({ id: a.id, name: a.name, nodeId: artifactNodeId });
+    }
+  }
+  return list2;
+}
+function buildSingleTrace(input) {
   const { workorderId, cardId, snap } = input;
   const ref2 = input.ref ?? ((id) => ({ id }));
   const empty2 = { workorderId, cardId, attempts: [] };
@@ -225382,26 +226634,6 @@ function buildWorkorderActivityTrace(input) {
   const nodeId = work?.nodeId ?? review?.nodeId;
   if (!nodeId) return empty2;
   const node2 = nodeById.get(nodeId);
-  const nodesWithInEdges = new Set(snap.edges.map((e) => e.toNodeId));
-  const isRootBrief = node2?.type === "brief" && !nodesWithInEdges.has(nodeId);
-  const artifactsOfWork = (workId) => {
-    const list2 = [];
-    for (const a of snap.artifacts) {
-      if (a.workId !== workId) continue;
-      const artifactNodeId = a.nodeId;
-      const files = a.contentKind === "manifest" ? input.manifestFiles?.get(a.contentRef) : void 0;
-      if (files && files.length > 0) {
-        for (const path41 of files) {
-          list2.push({ id: a.id, name: path41.split("/").pop() || path41, path: path41, nodeId: artifactNodeId });
-        }
-      } else if (isRootBrief) {
-        list2.push({ id: a.id, name: "\u4EFB\u52A1\u76EE\u6807", path: "\u4EFB\u52A1\u76EE\u6807.md", nodeId: artifactNodeId });
-      } else {
-        list2.push({ id: a.id, name: a.name, nodeId: artifactNodeId });
-      }
-    }
-    return list2;
-  };
   const managerId = resolveWorkorderManager(snap) ?? snap.workorder.ownerActorId;
   const startedAt = work?.createdAt ?? review?.createdAt;
   const spec = node2?.spec?.trim();
@@ -225411,25 +226643,115 @@ function buildWorkorderActivityTrace(input) {
     nodeTitle: node2?.title || nodeId.split(":").slice(2).join(":") || nodeId,
     ...spec ? { spec } : {}
   };
-  const rows = (input.dispatches ?? []).filter((d) => d.targetKind === target.kind && d.targetId === target.id).slice().sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
+  const rows = (input.dispatches ?? []).filter((d) => d.targetKind === target.kind && d.targetId === target.id).slice().sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id));
   const executorId = work?.assigneeActorId ?? review?.reviewerActorId;
   const conclusion = work?.conclusion?.trim() || review?.note?.trim() || void 0;
   const attempts = rows.map((d, i) => {
     const isLast = i === rows.length - 1;
-    const actorId = executorId ?? d.actorId;
+    const actorId = d.actorId ?? executorId;
     return {
       runId: d.id,
       at: d.createdAt,
       actor: ref2(actorId),
       ...isLast && conclusion ? { conclusion } : {},
-      artifacts: isLast && work ? artifactsOfWork(work.id) : []
+      artifacts: isLast && work ? artifactsOfWork(work, input) : []
     };
   });
   return { workorderId, cardId, briefing, attempts };
 }
+function buildReviewHistory(input, targetWorkId, reviewerActorId, allReviews) {
+  const { workorderId, cardId } = input;
+  const snap = input.snap;
+  const ref2 = input.ref ?? ((id) => ({ id }));
+  const rows = allReviews.filter((r) => r.targetWorkId === targetWorkId && r.reviewerActorId === reviewerActorId);
+  if (!rows.length) return { workorderId, cardId, attempts: [] };
+  const byId = new Map(rows.map((r) => [r.id, r]));
+  const current = new Set(latestActivityReviews(rows, input.events ?? []).map((r) => r.id));
+  const work = snap.works.find((w2) => w2.id === targetWorkId);
+  const nodeId = rows[0].nodeId;
+  const events = [];
+  for (const rec of [...input.events ?? []].sort((a, b2) => a.seq - b2.seq)) {
+    const e = rec.event;
+    const r = "reviewId" in e && e.reviewId ? byId.get(e.reviewId) : void 0;
+    const direct = e.kind === "review.response" && e.targetWorkId === targetWorkId && e.reviewerActorId === reviewerActorId;
+    let retry = false;
+    if (e.kind === "plan.node_retry" && e.nodeId === nodeId) {
+      const preceding = snap.works.filter((w2) => w2.nodeId === nodeId && w2.createdAt <= rec.createdAt).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
+      retry = preceding[0]?.id === targetWorkId && rows.some((r2) => r2.createdAt <= rec.createdAt);
+    }
+    if (!r && !direct && !retry) continue;
+    let label;
+    let detail;
+    switch (e.kind) {
+      case "review.create":
+        label = "\u521B\u5EFA\u5BA1\u6838";
+        break;
+      case "review.started":
+        label = "\u5F00\u59CB\u5BA1\u6838";
+        break;
+      case "review.timeout":
+        label = "\u5BA1\u6838\u6267\u884C\u8D85\u65F6 / \u5931\u8D25";
+        break;
+      case "review.kill":
+        label = "\u5BA1\u6838\u5DF2\u505C\u6B62";
+        detail = e.reason;
+        break;
+      case "review.response":
+        label = e.verdict === "approve" ? "\u5BA1\u6838\u901A\u8FC7" : "\u5BA1\u6838\u4E0D\u901A\u8FC7";
+        detail = e.note ?? void 0;
+        break;
+      case "plan.node_retry":
+        label = "\u4ECB\u5165\u91CD\u8BD5";
+        break;
+      default:
+        continue;
+    }
+    const actorId = e.kind === "plan.node_retry" ? e.by : "reviewerActorId" in e ? e.reviewerActorId : rec.actorId;
+    events.push({
+      seq: rec.seq,
+      at: rec.createdAt,
+      kind: e.kind,
+      label,
+      actor: ref2(actorId),
+      ...r ? { reviewId: r.id, reviewGroup: r.reviewGroup } : {},
+      ...detail ? { detail } : {}
+    });
+  }
+  const reviews = rows.map((r) => {
+    const single = buildSingleTrace({ ...input, snap: { ...snap, reviews: allReviews }, cardId: `review:${r.id}` });
+    return {
+      reviewId: r.id,
+      reviewGroup: r.reviewGroup,
+      actor: ref2(r.reviewerActorId),
+      at: r.createdAt,
+      ...r.endedAt ?? r.decidedAt ?? r.cancelledAt ? { endedAt: r.endedAt ?? r.decidedAt ?? r.cancelledAt } : {},
+      status: reviewLabel(r),
+      current: current.has(r.id),
+      ...r.note ? { note: r.note } : {},
+      attempts: single.attempts
+    };
+  });
+  return {
+    workorderId,
+    cardId,
+    attempts: reviews.flatMap((r) => r.attempts).sort((a, b2) => a.at.localeCompare(b2.at) || a.runId.localeCompare(b2.runId)),
+    reviewHistory: {
+      targetWorkId,
+      nodeTitle: snap.nodes.find((n) => n.id === nodeId)?.title ?? nodeId,
+      ...work?.outputVersionNo != null ? { outputVersionNo: work.outputVersionNo } : {},
+      artifacts: work ? artifactsOfWork(work, input) : [],
+      reviews,
+      events,
+      ...input.dispatches === void 0 ? { recordsUnavailable: true } : {}
+    }
+  };
+}
 var init_activity_trace = __esm({
   "../server/src/domains/collab/activity-trace.ts"() {
     "use strict";
+    init_src4();
+    init_review_activity();
+    init_activity2();
     init_workorder_manager();
   }
 });
@@ -227283,10 +228605,7 @@ function collabDomain(opts) {
     const hit = cache.get(companyId);
     if (hit) return hit;
     const e = await opts.resolveEngine(companyId);
-    if (e.kernel === opts.kernel) {
-      cache.set(companyId, defaultCtx);
-      return defaultCtx;
-    }
+    const artifacts = opts.resolveArtifacts ? await opts.resolveArtifacts(companyId) : e.kernel === opts.kernel ? opts.artifacts : void 0;
     const ctx = {
       kernel: e.kernel,
       oplog: e.oplog,
@@ -227296,7 +228615,7 @@ function collabDomain(opts) {
       // ★ 产物旁存也要按公司取（见 resolveArtifacts 的注释）：漏了这一行，非默认公司的
       //   `/api/workorders/:id/files` 与 node_output 清单恒空——写侧写对了、读侧根本没接线。
       //   抛出来就抛出来：宁可 500 说"这家公司的数据面解析不了"，也不能回落默认公司的库。
-      ...opts.resolveArtifacts ? { artifacts: await opts.resolveArtifacts(companyId) } : {}
+      ...artifacts ? { artifacts } : {}
     };
     cache.set(companyId, ctx);
     return ctx;
@@ -227517,6 +228836,7 @@ function collabDomain(opts) {
       return {
         status: 200,
         body: buildWorkorderActivity({
+          viewerActorId: req.auth.actor,
           workorderId,
           snap,
           events,
@@ -227550,7 +228870,15 @@ function collabDomain(opts) {
           ...extra?.avatar ? { avatar: extra.avatar } : {}
         };
       };
-      const snap = engineStore ? await engineStore.transaction((tx) => tx.loadWorkorder(workorderId)) : null;
+      const [snap, events] = engineStore ? await engineStore.transaction(async (tx) => [
+        await tx.loadWorkorder(workorderId),
+        await tx.listEvents(
+          workorderId,
+          0,
+          cardId.startsWith(REVIEW_CARD_PREFIX) || cardId.startsWith("review:") ? void 0 : ACTIVITY_EVENT_LIMIT,
+          cardId.startsWith(REVIEW_CARD_PREFIX) || cardId.startsWith("review:") ? REVIEW_TRACE_EVENT_KINDS : ACTIVITY_EVENT_KINDS
+        )
+      ]) : [null, []];
       const manifestFiles = snap ? await resolveActivityManifestFiles(snap.artifacts, blobs) : void 0;
       const dispatches = await listDispatchRows(workorderId, opts.dispatchesOfWorkorder);
       return {
@@ -227559,6 +228887,7 @@ function collabDomain(opts) {
           workorderId,
           cardId,
           snap,
+          events,
           ref: ref2,
           ...dispatches ? { dispatches } : {},
           ...manifestFiles ? { manifestFiles } : {}
@@ -227669,6 +228998,9 @@ function collabDomain(opts) {
       return { status: 201, body: { item } };
     });
     router.post("/api/workorders/:id/hold", async (req) => {
+      if (!isHumanActor(req.auth.actor)) {
+        return { status: 403, body: { error: { code: "forbidden", message: "\u6682\u505C\u6574\u4E2A\u5DE5\u5355\u662F\u6CBB\u7406\u64CD\u4F5C\uFF0C\u4EC5\u4EBA\u7C7B\u53EF\u6267\u884C" } } };
+      }
       const { kernel, artifacts } = await resolveCtx(req.auth.companyId);
       const ws = req.params.id;
       const exists = [...kernel.model.artifacts.values()].some((a) => a.workspace === ws);
@@ -227708,6 +229040,9 @@ function collabDomain(opts) {
       return { status: 200, body: { cancelled } };
     });
     router.post("/api/workorders/:id/dispatch", async (req) => {
+      if (!isHumanActor(req.auth.actor)) {
+        return { status: 403, body: { error: { code: "forbidden", message: "\u6062\u590D\u6574\u4E2A\u5DE5\u5355\u662F\u6CBB\u7406\u64CD\u4F5C\uFF0C\u4EC5\u4EBA\u7C7B\u53EF\u6267\u884C" } } };
+      }
       const { kernel, artifacts } = await resolveCtx(req.auth.companyId);
       const ws = req.params.id;
       const already = !kernel.model.pausedWorkorders.has(ws);
@@ -228033,6 +229368,7 @@ var init_collab = __esm({
     init_workorder_detail();
     init_workorders();
     init_activity2();
+    init_review_activity();
     init_activity_trace();
     init_inbox();
     init_escalation_attention();
@@ -231108,42 +232444,17 @@ function mapChatItemToSnapshotEntry(row) {
     itemType,
     role,
     status,
-    itemVersion: row.turnVersion,
+    // ADR-0510 附录 A：版本轴 = 会话逻辑时钟（`chat_items.version`）。
+    // 此前这里填的是 `turnVersion`（轮级 resync 游标），而增量流填的是进程内每 item 计数——
+    // 两套编号空间，一轮中途拉快照就把随后每一帧判 stale，进 resync 死循环。
+    itemVersion: row.version,
     seq: row.seq,
+    ord: row.ord,
     messageId: row.messageId,
     updatedAt: row.updatedAt,
     payload: row.payload
   };
 }
-function synthesizeMessageItem(msg, seq) {
-  const attachments = Array.isArray(msg.attachments) ? msg.attachments.map((a) => ({
-    name: a.name,
-    ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
-    ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
-  })) : void 0;
-  const clientSubmitId = msg.role === "user" ? msg.clientSubmitId ?? clientSubmitIdFromMessageKey(msg.messageKey) : void 0;
-  const role = msg.role === "user" || msg.role === "system" ? msg.role : "assistant";
-  const status = msg.status === "running" ? "streaming" : msg.status === "error" ? "failed" : "completed";
-  return {
-    // ADR-0510 D1：有 csid 就用**与账本 user item、前端乐观桶位同名**的身份；没有（历史行 / 老客户端）
-    // 才退回合成 id。三方同名，桶按 itemId 合并才闭环——否则同一条 user 消息画两个气泡。
-    itemId: clientSubmitId ? optimisticUserItemId(clientSubmitId) : `chat-message:${msg.id}`,
-    turnId: msg.runId ?? `chat-message-turn:${msg.id}`,
-    itemType: "message",
-    role,
-    status,
-    itemVersion: 0,
-    seq,
-    messageId: msg.id,
-    updatedAt: msg.completedAt ?? msg.createdAt,
-    payload: {
-      role,
-      text: msg.content ?? "",
-      ...attachments?.length ? { attachments } : {},
-      ...clientSubmitId ? { clientSubmitId } : {}
-    }
-  };
-}
 function throwWorkdirError(code2) {
   switch (code2) {
     case "PATH_ESCAPE":
@@ -231413,7 +232724,8 @@ function createChatSessionsDomain(opts) {
         ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: body2.projectId } : {},
         // 会话级模型覆盖：显式传 null / 空串 = 清除覆盖（回到旧解析）；不传这一项 = 不动它。
         ...Object.prototype.hasOwnProperty.call(body2, "model") ? { model: normalizeModel(body2.model) } : {},
-        touchedAt: body2.touchedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+        // 只有显式传了才写——改标题 / 换项目 / 换模型都不是「有新动静」，不该顶掉列表顺序与已读水位。
+        ...body2.touchedAt !== void 0 ? { touchedAt: body2.touchedAt } : {}
       });
       return { status: 200, body: await store2.getSession(req.params.id) };
     });
@@ -231505,57 +232817,50 @@ function createChatSessionsDomain(opts) {
       if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
       const chatSessionId = req.params.id;
       const sinceVersion = Math.max(0, Number(req.query?.get("sinceVersion") ?? "0") || 0);
+      const beforeOrdRaw = Number(req.query?.get("beforeOrd") ?? "0") || 0;
+      const beforeOrd = beforeOrdRaw > 0 ? beforeOrdRaw : void 0;
+      const limitRaw = Number(req.query?.get("limit") ?? "0") || 0;
+      const limit = limitRaw > 0 ? Math.min(limitRaw, MAX_SNAPSHOT_ITEMS) : DEFAULT_SNAPSHOT_ITEMS;
       const cursor = opts.liveChat?.cursorFor(chatSessionId) ?? null;
       let turnId = cursor?.turnId ?? null;
-      let inflightRunId = opts.liveChat?.runFor(chatSessionId) ?? null;
       if (!turnId) {
         const turns = await turnsFor(req);
         const active = turns ? await turns.activeTurn(chatSessionId).catch(() => null) : null;
         turnId = active?.id ?? null;
-        inflightRunId ??= active?.assistantRunId ?? null;
       }
       const snapshotEntries = [];
       let nextSinceVersion = sinceVersion;
-      if (turnId) {
-        const rows = await items.listItemsByTurn(chatSessionId, turnId, { sinceTurnVersion: sinceVersion }).catch(() => []);
+      let hasMoreBefore = false;
+      if (sinceVersion > 0) {
+        if (turnId) {
+          const rows = await items.listItemsByTurn(chatSessionId, turnId, { sinceTurnVersion: sinceVersion }).catch(() => []);
+          for (const row of rows) {
+            snapshotEntries.push(mapChatItemToSnapshotEntry(row));
+            if (row.turnVersion > nextSinceVersion) nextSinceVersion = row.turnVersion;
+          }
+        }
+      } else {
+        const rows = await items.listSessionItems(chatSessionId, {
+          limit,
+          ...beforeOrd !== void 0 ? { beforeOrd } : {}
+        }).catch(() => []);
+        hasMoreBefore = rows.length >= limit;
         for (const row of rows) {
           snapshotEntries.push(mapChatItemToSnapshotEntry(row));
           if (row.turnVersion > nextSinceVersion) nextSinceVersion = row.turnVersion;
         }
       }
-      const activeTurnItemIds = new Set(snapshotEntries.map((e) => e.itemId));
-      const HISTORY_TURNS = 12;
-      const historicalEntries = [];
-      if (sinceVersion === 0) {
-        const listRecentTurns2 = store2.listRecentTurns;
-        const messages = listRecentTurns2 ? (await listRecentTurns2.call(store2, chatSessionId, HISTORY_TURNS).catch(() => ({ messages: [], hasMoreBefore: false }))).messages : windowMessagesByTurns(await store2.listMessages(chatSessionId).catch(() => []), HISTORY_TURNS).messages;
-        let historySeq = 0;
-        for (const msg of messages) {
-          if (!msg.id) continue;
-          const rows = await items.listItemsByMessage(msg.id).catch(() => []);
-          const historical = turnId ? rows.filter((row) => row.turnId !== turnId) : rows;
-          if (rows.length > 0) {
-            for (const row of [...historical].sort((a, b2) => a.seq - b2.seq)) {
-              historySeq += 1;
-              historicalEntries.push({ ...mapChatItemToSnapshotEntry(row), seq: historySeq });
-            }
-            continue;
-          }
-          if (msg.role === "assistant" && msg.status === "running" && inflightRunId && msg.runId === inflightRunId) continue;
-          const synthesized = synthesizeMessageItem(msg, historySeq + 1);
-          if (activeTurnItemIds.has(synthesized.itemId)) continue;
-          historySeq += 1;
-          historicalEntries.push(synthesized);
-        }
-      }
+      const oldestOrd = snapshotEntries.find((e) => e.ord !== null)?.ord ?? null;
       const body2 = {
         chatSessionId,
         turnId,
-        // 历史合成条在前，active turn 的 chat_items 在后——顺序即桶排序，桶按 seq 单调排列。
-        items: [...historicalEntries, ...snapshotEntries],
+        // 已按 ord 升序——服务端给什么顺序，客户端就按 ord 排出什么顺序，两边同一把尺子。
+        items: snapshotEntries,
         nextSinceVersion,
         frameCursor: cursor ? { epoch: cursor.epoch, seq: cursor.seq } : { epoch: 0, seq: 0 },
-        canAppend: cursor?.canAppend ?? false
+        canAppend: cursor?.canAppend ?? false,
+        oldestOrd,
+        hasMoreBefore
       };
       return { status: 200, body: body2 };
     });
@@ -231639,7 +232944,11 @@ function createChatSessionsDomain(opts) {
           ...record8.label ? { label: record8.label } : {},
           ...record8.taskDigest ? { taskDigest: record8.taskDigest } : {},
           parentMessageId: record8.parentMessageId,
-          touches: touches.map((t) => ({ messageId: t.messageId, kind: t.kind, at: t.at })),
+          /* `messageId` 必须过 `touchAnchorMessageId`：流水行的主键是 `(delegation_id, message_id)`，
+             服务端为此在锚点后缀了一段随机 token（`DelegationService.touchAnchor`）。那段后缀是存储
+             的去重装置，直接发给前端等于给了一条 `messages[]` 里不存在的 id ——追加转达卡全部掉进
+             floating 堆在流末尾，同一条消息上的两条委派还会因后缀不同被拆成两张单专家卡。 */
+          touches: touches.map((t) => ({ messageId: touchAnchorMessageId(t.messageId), kind: t.kind, at: t.at })),
           artifacts: collectDelegationArtifacts(record8.roundSummaries),
           createdAt: record8.createdAt,
           ...record8.settledAt ? { settledAt: record8.settledAt } : {}
@@ -231908,7 +233217,7 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto59, WORKDIR_READ_MAX_BYTES;
+var import_node_crypto59, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS, WORKDIR_READ_MAX_BYTES;
 var init_chat_sessions = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
@@ -231929,6 +233238,8 @@ var init_chat_sessions = __esm({
     init_workorder_terminal();
     init_session_workdir();
     init_project_bundle();
+    DEFAULT_SNAPSHOT_ITEMS = 400;
+    MAX_SNAPSHOT_ITEMS = 1e3;
     WORKDIR_READ_MAX_BYTES = 2 * 1024 * 1024;
   }
 });
@@ -236591,6 +237902,9 @@ function makeStoreCodeRepoResolver(deps) {
     }
   };
 }
+function makeCompanyCodeRepoResolver(storesFor) {
+  return async (ws, companyId) => makeStoreCodeRepoResolver(await storesFor(companyId)).resolveCodeRepo(ws);
+}
 var init_resolve = __esm({
   "../server/src/git/resolve.ts"() {
     "use strict";
@@ -237541,16 +238855,28 @@ var init_fused_signal_router = __esm({
   }
 });
 
+// ../storage/src/pg-ident.ts
+function quoteIdent2(name) {
+  if (!/^[A-Za-z0-9_][A-Za-z0-9_.-]*$/.test(name)) throw new Error(`invalid schema name: ${name}`);
+  return `"${name}"`;
+}
+var init_pg_ident = __esm({
+  "../storage/src/pg-ident.ts"() {
+    "use strict";
+  }
+});
+
 // ../storage/src/postgres.ts
 var import_node_crypto67, ident3, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
     import_node_crypto67 = require("node:crypto");
+    init_pg_ident();
     init_esm();
     init_src();
     ident3 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema identifier: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     isUniqueViolation = (err) => typeof err === "object" && err !== null && err.code === "23505";
@@ -237772,7 +239098,9 @@ function rowToVariable(row) {
     updatedAt: new Date(row.updated_at).toISOString(),
     // ADR 凭据保险库补章 §D2.1：到期/取用时间戳（text 列存 ISO 字符串，原样带出；null/空 = undefined）。
     ...row.expires_at ? { expiresAt: row.expires_at } : {},
-    ...row.last_used_at ? { lastUsedAt: row.last_used_at } : {}
+    ...row.last_used_at ? { lastUsedAt: row.last_used_at } : {},
+    // 展示名（存量行没有 → 不带这一格，展示侧回落成 key）。
+    ...row.name ? { name: row.name } : {}
   };
 }
 var ident4, PostgresRegistryStore, rowToActor, rowToConfig, rowToAgentPrefs;
@@ -237780,9 +239108,10 @@ var init_postgres_registry = __esm({
   "../storage/src/postgres-registry.ts"() {
     "use strict";
     init_esm();
+    init_pg_ident();
     init_src();
     ident4 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     PostgresRegistryStore = class _PostgresRegistryStore {
@@ -237938,6 +239267,7 @@ var init_postgres_registry = __esm({
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS project_id text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS environment text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS delivery_mode text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS name text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS expires_at text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS last_used_at text`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_key_actor_uq"`);
@@ -238436,10 +239766,13 @@ var init_postgres_registry = __esm({
       /* ---------- 变量 ---------- */
       async putVariable(v2) {
         await this.pool.query(
-          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10)
+          /* `name` 走 COALESCE：**没传 = 不动**。连接器授权流程写变量时手上没有「名称」，
+             普通赋值会把人在密钥表单里填的名字抹掉——同 connectors.connected_by 那条。 */
+          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at, name)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11)
        ON CONFLICT (key, COALESCE(actor_id, ''), COALESCE(project_id, '')) DO UPDATE
-         SET scope=$2, actor_id=$3, project_id=$4, connector_id=$5, overrides=$6, delivery_mode=$7, value_encrypted=$8, updated_at=$9, expires_at=$10`,
+         SET scope=$2, actor_id=$3, project_id=$4, connector_id=$5, overrides=$6, delivery_mode=$7, value_encrypted=$8, updated_at=$9, expires_at=$10,
+             name=COALESCE($11, ${this.s}.variables.name)`,
           [
             v2.key,
             v2.scope,
@@ -238450,7 +239783,8 @@ var init_postgres_registry = __esm({
             v2.deliveryMode ?? null,
             v2.valueEncrypted,
             v2.updatedAt,
-            v2.expiresAt ?? null
+            v2.expiresAt ?? null,
+            v2.name ?? null
           ]
         );
       }
@@ -238546,17 +239880,6 @@ var init_postgres_registry = __esm({
   }
 });
 
-// ../storage/src/pg-ident.ts
-function quoteIdent2(name) {
-  if (!/^[A-Za-z0-9_][A-Za-z0-9_.-]*$/.test(name)) throw new Error(`invalid schema name: ${name}`);
-  return `"${name}"`;
-}
-var init_pg_ident = __esm({
-  "../storage/src/pg-ident.ts"() {
-    "use strict";
-  }
-});
-
 // ../storage/src/postgres-assistant-store.ts
 var ASSISTANT_LOCK_NAMESPACE, rowToBinding, rowToHistory, PostgresAssistantBindStore, PostgresHumanPrefsStore;
 var init_postgres_assistant_store = __esm({
@@ -238865,8 +240188,9 @@ var init_postgres_channels = __esm({
   "../storage/src/postgres-channels.ts"() {
     "use strict";
     init_esm();
+    init_pg_ident();
     ident5 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     PostgresChannelStore = class _PostgresChannelStore {
@@ -239140,6 +240464,24 @@ var init_postgres_projects = __esm({
         const r = await this.pool.query(`SELECT * FROM ${this.s}.projects ORDER BY created_at`);
         return r.rows.map(rowToProject);
       }
+      /** 主行 + 三张子表一并删，一个事务里做完——四张表之间没有外键，分开删失败一半就留孤儿行。 */
+      async deleteProject(id) {
+        const client = await this.pool.connect();
+        try {
+          await client.query("BEGIN");
+          await client.query(`DELETE FROM ${this.s}.project_members WHERE project_id = $1`, [id]);
+          await client.query(`DELETE FROM ${this.s}.project_files WHERE project_id = $1`, [id]);
+          await client.query(`DELETE FROM ${this.s}.project_content_locations WHERE project_id = $1`, [id]);
+          await client.query(`DELETE FROM ${this.s}.projects WHERE id = $1`, [id]);
+          await client.query("COMMIT");
+        } catch (e) {
+          await client.query("ROLLBACK").catch(() => {
+          });
+          throw e;
+        } finally {
+          client.release();
+        }
+      }
       async replaceProjectMembers(projectId2, members) {
         const client = await this.pool.connect();
         try {
@@ -239934,8 +241276,9 @@ var init_postgres_control_plane = __esm({
   "../storage/src/postgres-control-plane.ts"() {
     "use strict";
     init_esm();
+    init_pg_ident();
     ident7 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     PostgresControlPlaneStore = class _PostgresControlPlaneStore {
@@ -240860,11 +242203,12 @@ var ident8, mergeContinuityRefs3, PostgresTraceStore, rowToRun, terminalHandoffO
 var init_postgres_trace = __esm({
   "../storage/src/postgres-trace.ts"() {
     "use strict";
+    init_pg_ident();
     init_esm();
     init_src();
     init_pg_sanitize();
     ident8 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     mergeContinuityRefs3 = (...lists) => {
@@ -242849,10 +244193,11 @@ var init_postgres_automations = __esm({
   "../storage/src/postgres-automations.ts"() {
     "use strict";
     init_esm();
+    init_pg_ident();
     init_postgres_chat_turns();
     init_src();
     ident10 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     genId = (prefix) => `${prefix}_${Math.random().toString(36).slice(2, 12)}`;
@@ -244091,6 +245436,15 @@ var init_postgres_chat_sessions = __esm({
           args
         );
       }
+      /** 删项目时把本公司里绑到它的会话回落成「不指定项目」。会话一条都不删，只清 project_id。 */
+      async clearProjectBinding(projectId2) {
+        if (!projectId2) return 0;
+        const r = await this.pool.query(
+          `UPDATE ${this.s}.chat_sessions SET project_id = NULL WHERE project_id = $1 AND company_id = $2`,
+          [projectId2, this.companyId]
+        );
+        return r.rowCount ?? 0;
+      }
       async deleteSession(id) {
         if (!await this.scopedSessionExists(id)) return;
         await this.pool.query(`DELETE FROM ${this.s}.chat_messages WHERE session_id = $1`, [id]);
@@ -244100,6 +245454,64 @@ var init_postgres_chat_sessions = __esm({
       async appendMessage(m2, opts) {
         return (await this.appendMessageOnce(m2, opts)).message;
       }
+      /**
+       * 系统状态条的 `chat_items` 补行（ADR-0510 D3 的收口）。
+       *
+       * ## 为什么需要
+       *
+       * `role='system'` 的通告（委派回报「已完成 / 无法完成」、工单终态播报、授权卡状态条）走的是
+       * `appendChatMessageOnce` → 本 store 直写 `chat_messages` 这条路，**不经 `ChatItemLedger`**
+       * （`chat-system-message.ts` 文件头原话：「非 live 直写……不产生 chat_items」）。
+       *
+       * 在 D3 之前这没关系：`/items` 会给没有 item 行的消息合成一条快照条。D3 把历史收成
+       * **只从 `chat_items` 出**、删掉了那条合成路之后，这些通告就从对话页上**凭空消失**了。
+       *
+       * 后果不只是「少看见一条通告」——委派产物的附件卡是**锚在那条回报通告之后的第一条 assistant**
+       * 上的（ws:wo-4a2cd648 §①）。通告不在流里 ⇒ 找不到锚点 ⇒ 卡掉进 floating、渲染到末尾。
+       * 2026-09-09 用户现场：`--continue` 续跑两个子会话，回报通告写进了 `chat_messages`
+       * （07:29:56 / 07:30:12）但 `chat_items` 一行都没有，产物卡因此挂错位置。
+       *
+       * ## 为什么补在这一层
+       *
+       * `appendChatMessageOnce` 是所有系统消息的唯一入口，但那三个调用点（return-flow /
+       * chat-broadcast / server.ts 授权卡）**都拿不到 `ChatItemStore`**，从上面递下来要动三份 deps 契约。
+       * 而这里本来就握着同一个 schema 的连接池——把「用户能看见的消息必有 item 行」这条不变量
+       * 落在存储边界上，比在三个业务处各接一次线更难漏。
+       *
+       * ## 失败了怎么办：吞掉
+       *
+       * item 写失败**不许**把消息本身带走——消息已经 INSERT 成功、幂等键已经占住，抛出去会让调用方
+       * 当成「没写成」而重试，而重试会撞主键。所以这里只记日志。代价是那条通告在页面上仍然看不见，
+       * 与修复前一致，不会更坏。
+       */
+      async writeSystemMessageItem(m2) {
+        try {
+          await this.pool.query(
+            `INSERT INTO ${this.s}.chat_items
+           (id, session_id, message_id, turn_id, run_id, seq, kind, role, status,
+            version, turn_version, provider_item_key, payload, metadata,
+            created_at, updated_at, completed_at)
+         VALUES ($1, $2, $3, $4, NULL, 1, 'text', $5, 'completed',
+                 COALESCE((SELECT MAX(version) FROM ${this.s}.chat_items WHERE session_id = $2), 0) + 1,
+                 1, NULL, $6::jsonb, '{"legacyContent": false}'::jsonb,
+                 $7::timestamptz, $7::timestamptz, $7::timestamptz)
+         ON CONFLICT (id) DO NOTHING`,
+            [
+              // 与 D3 之前 `/items` 合成条、以及 backfill 补的行**同一套身份**：同一条消息永远只有
+              // 这一个 itemId，重复调用（幂等重写、backfill 再跑）不会造出第二条。
+              `chat-message:${m2.id}`,
+              m2.sessionId,
+              m2.id,
+              `chat-message-turn:${m2.id}`,
+              m2.role,
+              JSON.stringify({ role: m2.role, text: m2.content ?? "" }),
+              m2.createdAt
+            ]
+          );
+        } catch (err) {
+          console.warn(`[chat-items] \u7CFB\u7EDF\u72B6\u6001\u6761\u8865\u884C\u5931\u8D25\uFF08message=${m2.id} session=${m2.sessionId}\uFF09: ${String(err)}`);
+        }
+      }
       async appendMessageOnce(m2, opts) {
         await this.assertSessionInScope(m2.sessionId);
         const insert = async () => {
@@ -244116,7 +245528,9 @@ var init_postgres_chat_sessions = __esm({
         };
         for (let attempt = 0; ; attempt++) {
           try {
-            return { message: { ...m2, seq: await insert() }, inserted: true };
+            const written = { message: { ...m2, seq: await insert() }, inserted: true };
+            if ((opts?.source ?? "live") === "system") await this.writeSystemMessageItem(written.message);
+            return written;
           } catch (err) {
             const isUniqueViolation5 = err && typeof err === "object" && err.code === "23505";
             const constraint = String(err.constraint ?? "");
@@ -244768,11 +246182,17 @@ var init_postgres_chat_sessions = __esm({
       model: row.model ?? null
     });
     rowToSessionWithQuality = (row) => {
+      const status = row.last_assistant_status ?? void 0;
       const quality = deriveLastTurnQuality({
-        status: row.last_assistant_status ?? void 0,
+        status,
         content: row.last_assistant_content ?? ""
       });
-      return { ...rowToSession(row), ...quality ? { lastTurnQuality: quality } : {} };
+      const running = deriveSessionRunning({ status });
+      return {
+        ...rowToSession(row),
+        ...quality ? { lastTurnQuality: quality } : {},
+        ...running ? { running: true } : {}
+      };
     };
     rowToMessage = (row) => ({
       id: row.id,
@@ -244914,12 +246334,15 @@ var init_postgres_chat_items = __esm({
             const r = await this.pool.query(
               `INSERT INTO ${this.s}.chat_items
              (id, session_id, message_id, turn_id, run_id, seq, kind, role, status,
-              version, turn_version, provider_item_key, payload, metadata, created_at, updated_at, completed_at)
+              version, turn_version, provider_item_key, payload, metadata, created_at, updated_at, ord, completed_at)
            SELECT $1, $2, $3, $4, $5,
                   COALESCE(MAX(c.seq), 0) + 1,
-                  $6, $7, $8::text, 0,
+                  $6, $7, $8::text, COALESCE($13::bigint, 0),
                   COALESCE(MAX(c.turn_version), 0) + 1,
                   $9, $10::jsonb, $11::jsonb, $12::timestamptz, $12::timestamptz,
+                  -- ord\uFF1A\u8D26\u672C\u9884\u6D3E\u4E86\u5C31\u7528\u5B83\uFF08\u5EFA\u884C\u5373\u6709\u53F7\u3001\u7B2C\u4E00\u5E27\u5C31\u80FD\u5E26\u4E0A wire\uFF09\uFF1B\u6CA1\u7ED9\u624D\u8D70\u5217 DEFAULT
+                  -- \u7684 nextval\u2014\u2014\u4E24\u6761\u8DEF\u53D6\u7684\u662F\u540C\u4E00\u6761\u8868\u7EA7\u5E8F\u5217\uFF0C\u8BED\u4E49\u76F8\u540C\uFF0C\u53EA\u5DEE\u62FF\u53F7\u53D1\u751F\u5728\u54EA\u4E00\u4FA7\u3002
+                  COALESCE($14::bigint, nextval('${this.s}.chat_items_ord_seq'::regclass)),
                   -- $12/$8 \u4E09\u5904\u90FD\u663E\u5F0F\u8F6C\u578B\uFF1A\u4E0D\u8F6C\u7684\u8BDD PG \u4F1A\u5728\u540C\u4E00\u6761\u8BED\u53E5\u91CC\u7ED9\u540C\u4E00\u4E2A\u53C2\u6570\u63A8\u51FA\u4E0D\u540C\u7C7B\u578B
                   -- \uFF08\u5217\u4F4D\u662F timestamptz/text\u3001CASE \u91CC\u662F unknown\uFF09\uFF0C\u76F4\u63A5\u62A5
                   -- inconsistent types deduced for parameter $12\u3002
@@ -244939,7 +246362,9 @@ var init_postgres_chat_items = __esm({
                 scrubPgString(input.providerItemKey ?? null),
                 payload,
                 metadata,
-                at
+                at,
+                input.version ?? null,
+                input.ord ?? null
               ]
             );
             return rowToItem(r.rows[0]);
@@ -244977,10 +246402,13 @@ var init_postgres_chat_items = __esm({
             setExpr = `status = $3::text, completed_at = CASE WHEN $3 IN ('completed','failed','interrupted') THEN $2::timestamptz ELSE c.completed_at END`;
             break;
         }
+        const versionParamIndex = args.length + 1;
+        args.push(opts?.version ?? null);
         const r = await this.pool.query(
           `UPDATE ${this.s}.chat_items c
           SET ${setExpr},
-              version = c.version + 1,
+              version = CASE WHEN $${versionParamIndex}::bigint IS NULL THEN c.version + 1
+                             ELSE GREATEST(c.version, $${versionParamIndex}::bigint) END,
               turn_version = ${bumpTurnVersion},
               updated_at = $2
         WHERE c.id = $1
@@ -245028,6 +246456,49 @@ var init_postgres_chat_items = __esm({
         );
         return r.rows.map((row) => rowToItem(row));
       }
+      /**
+       * 一条会话的 item，按展示序升序（ADR-0510 D3：历史的唯一出口）。
+       *
+       * 排序键 `(ord IS NULL) DESC, ord DESC` 的意思是「取最新的一段」：带号的行按号从大到小、
+       * 没号的存量行排在最后（= 最老）。截断之后再翻回升序返回。
+       * 走索引 `chat_items_session_ord_idx (session_id, ord)`。
+       */
+      async listSessionItems(sessionId, opts) {
+        const limit = Math.max(1, Math.min(opts?.limit ?? 500, 2e3));
+        const before = opts?.beforeOrd;
+        const r = before === void 0 ? await this.pool.query(
+          `SELECT * FROM ${this.s}.chat_items WHERE session_id = $1
+          ORDER BY (ord IS NULL) ASC, ord DESC, seq DESC LIMIT $2`,
+          [sessionId, limit]
+        ) : await this.pool.query(
+          `SELECT * FROM ${this.s}.chat_items WHERE session_id = $1 AND ord IS NOT NULL AND ord < $2
+          ORDER BY ord DESC LIMIT $3`,
+          [sessionId, before, limit]
+        );
+        const rows = r.rows.map((row) => rowToItem(row));
+        rows.reverse();
+        return rows.sort((a, b2) => {
+          if (a.ord === null && b2.ord === null) return a.seq - b2.seq;
+          if (a.ord === null) return -1;
+          if (b2.ord === null) return 1;
+          return a.ord - b2.ord;
+        });
+      }
+      async sessionVersionCursor(sessionId) {
+        const r = await this.pool.query(
+          `SELECT COALESCE(MAX(version), 0) AS v FROM ${this.s}.chat_items WHERE session_id = $1`,
+          [sessionId]
+        );
+        return Number(r.rows[0]?.v ?? 0);
+      }
+      async reserveOrds(count2) {
+        const n = Math.max(1, Math.min(Math.floor(count2), 1e3));
+        const r = await this.pool.query(
+          `SELECT nextval('${this.s}.chat_items_ord_seq'::regclass) AS ord FROM generate_series(1, $1)`,
+          [n]
+        );
+        return r.rows.map((row) => Number(row.ord));
+      }
       async turnCursor(sessionId, turnId) {
         const r = await this.pool.query(
           `SELECT COALESCE(MAX(seq), 0) + 1 AS next_seq, COALESCE(MAX(turn_version), 0) + 1 AS next_turn_version
@@ -245364,8 +246835,14 @@ function planSessionOrd(sessionId, messages, items, turns, opts) {
 }
 async function listChatItemsSchemas(pool) {
   const r = await pool.query(
-    `SELECT n.nspname AS s FROM pg_class c JOIN pg_namespace n ON n.oid = c.relnamespace
-      WHERE c.relname = 'chat_items' AND c.relkind = 'r' ORDER BY 1`
+    `SELECT n.nspname AS s
+       FROM pg_class c
+       JOIN pg_namespace n ON n.oid = c.relnamespace
+      WHERE c.relname = 'chat_items' AND c.relkind = 'r'
+        AND (SELECT count(*) FROM information_schema.columns col
+              WHERE col.table_schema = n.nspname AND col.table_name = 'chat_items'
+                AND col.column_name IN ('session_id', 'turn_id', 'seq', 'kind', 'payload')) = 5
+      ORDER BY 1`
   );
   return r.rows.map((x2) => x2.s);
 }
@@ -245959,9 +247436,10 @@ var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
     import_node_crypto68 = require("node:crypto");
+    init_pg_ident();
     init_esm();
     ident12 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     PostgresNodeStore = class _PostgresNodeStore {
@@ -246226,8 +247704,9 @@ var init_postgres_model_prices = __esm({
   "../storage/src/postgres-model-prices.ts"() {
     "use strict";
     init_esm();
+    init_pg_ident();
     ident13 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     PostgresModelPriceStore = class _PostgresModelPriceStore {
@@ -246437,10 +247916,11 @@ var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
     import_node_crypto69 = require("node:crypto");
+    init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
     ident14 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     PostgresActorMemoryStore = class _PostgresActorMemoryStore {
@@ -246746,9 +248226,10 @@ var init_postgres_inbox_read = __esm({
   "../storage/src/postgres-inbox-read.ts"() {
     "use strict";
     init_esm();
+    init_pg_ident();
     SEED_MARKER_ACTOR = "actor:system";
     ident15 = (s2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(s2)) throw new Error(`invalid schema name: ${s2}`);
+      quoteIdent2(s2);
       return s2;
     };
     PostgresReadMarkerStore = class _PostgresReadMarkerStore {
@@ -252000,10 +253481,11 @@ var init_postgres_knowledge = __esm({
   "../storage/src/postgres-knowledge.ts"() {
     "use strict";
     init_esm();
+    init_pg_ident();
     init_pg_sanitize();
     init_knowledge_snapshot_crypto();
     ident17 = (value2) => {
-      if (!/^[a-z_][a-z0-9_]*$/.test(value2)) throw new Error(`invalid schema name: ${value2}`);
+      quoteIdent2(value2);
       return value2;
     };
     TABLES = [
@@ -255625,6 +257107,36 @@ async function startServe(opts) {
         projectId2,
         afterName
       );
+    },
+    /**
+     * 删项目后的跨域清理（发起人 2026-09-09 拍板的口径里，projects 域自己管不到的那两件）：
+     *   ① 绑到该项目的会话 `project_id` 置空 —— 会话一条都不删，回到「不指定项目」。不清的话
+     *      项目 chip 会按既定口径显示一串裸项目 id（`pages/chat/FRAME-DATA-MAP.md`）。
+     *   ② 该项目作用域下的变量/密钥删掉 —— 项目没了，`resolveProjectVariables` 再也解析不到它们，
+     *      留着只是一堆谁也读不到的明文凭据。
+     * 与改名钩子同款：`chatStoreFor` / `engineRouter` 的 const 都在本域构造之后，所以只能在
+     * handler 体内（删除发生时）解析，不能在工厂里提前引用——那会撞 TDZ。
+     */
+    onProjectDeletedFor: (companyId) => async ({ projectId: projectId2 }) => {
+      const failures = [];
+      try {
+        const sessions = await chatStoreFor(companyId);
+        if (sessions.clearProjectBinding) await sessions.clearProjectBinding(projectId2);
+        else failures.push("\u4F1A\u8BDD store \u4E0D\u652F\u6301 clearProjectBinding\uFF0C\u4F1A\u8BDD\u7684\u9879\u76EE\u7ED1\u5B9A\u672A\u6E05");
+      } catch (e) {
+        failures.push(`\u6E05\u4F1A\u8BDD\u9879\u76EE\u7ED1\u5B9A\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+      }
+      try {
+        const registry2 = companyId && pgPool ? (await engineRouter.getEngine(companyId)).registry : registryStore;
+        if (registry2.resolveProjectVariables) {
+          for (const row of await registry2.resolveProjectVariables(projectId2)) {
+            await registry2.deleteVariable(row.key, void 0, { projectId: projectId2 });
+          }
+        }
+      } catch (e) {
+        failures.push(`\u6E05\u9879\u76EE\u53D8\u91CF\u5931\u8D25\uFF1A${e instanceof Error ? e.message : String(e)}`);
+      }
+      if (failures.length) throw new Error(failures.join("\uFF1B"));
     }
   });
   const currentArtifactProjection = async () => {
@@ -256611,6 +258123,16 @@ async function startServe(opts) {
     if (!stores.artifacts) throw new Error(`[work-order-files] \u516C\u53F8 ${companyId} \u6CA1\u6709 artifacts store\uFF0C\u62D2\u7EDD\u56DE\u843D\u9ED8\u8BA4\u516C\u53F8`);
     return stores.artifacts;
   };
+  const projectStateFor = async (companyId) => {
+    if (!chatStoreRouter) return projectStateStore;
+    const stores = await chatStoreRouter.open(companyId, "work-order-projects");
+    if (!stores.projects) throw new Error(`[work-order-projects] \u516C\u53F8 ${companyId} \u6CA1\u6709 projects store\uFF0C\u62D2\u7EDD\u56DE\u843D\u9ED8\u8BA4\u516C\u53F8`);
+    return stores.projects;
+  };
+  const resolveCompanyCodeRepo = makeCompanyCodeRepoResolver(async (companyId) => ({
+    projects: await projectStateFor(companyId),
+    bindings: await artifactStateFor(companyId)
+  }));
   if (pgDsn && pgPool && chatStoreRouter) {
     const router = chatStoreRouter;
     void (async () => {
@@ -256799,7 +258321,6 @@ async function startServe(opts) {
     }
     return token;
   };
-  let resolveCodeRepoRef;
   let coordinatorRef = null;
   let coordinatorSpawnProbe = null;
   const dispatchTimers = /* @__PURE__ */ new Set();
@@ -256959,9 +258480,9 @@ async function startServe(opts) {
     port: opts.port ?? 7320,
     projectState: projectStateStore,
     artifactState: artifactStateStore,
-    // 建单交接的 `work_order_files` 按**当前公司**落库；与 collab 读侧 `resolveArtifacts` 同一个闭包。
+    // 建单的项目校验、绑定与输入文件按当前公司落库；与项目/任务读侧使用同一个 router。
     // 装了路由（有 PG）才给——dev 文件模式没有 schema 概念，沿用上面那个单实例。
-    ...chatStoreRouter ? { artifactStateFor } : {},
+    ...chatStoreRouter ? { artifactStateFor, projectStateFor } : {},
     schema,
     registry: registryStore,
     // 会话级模型覆盖的候选清单：与 `GET /api/runtimes/:id/models` **同一份**实现
@@ -257031,7 +258552,7 @@ async function startServe(opts) {
       });
       return { plannerActor: planner.id, text: chunks.join("") };
     },
-    resolveCodeRepo: (ws) => resolveCodeRepoRef?.(ws) ?? null,
+    resolveCodeRepo: resolveCompanyCodeRepo,
     // propose sha 校验兼镜像根：verifyExternalPinSha 在 ls-remote 未命中（祖先提交）时 `git fetch <remote> <sha>`
     // 进此目录留档（校验即留档，见 git/collect.ts）。目录按需 `init --bare`。（历史：曾是合并器/CI 闸的 git-mirrors 根，已删。）
     gitMirrorRoot: path29.join(opts.dir, "propose-mirrors"),
@@ -257108,8 +258629,8 @@ async function startServe(opts) {
       collabDomain({
         kernel: defaultCompanyKernel,
         oplog,
-        blobs,
-        // 诊断 3e3219e4-22bb19e4 §②：详情页取 seed brief head 正文作页头真源 + overview 写入口
+        blobs: engine.blobs,
+        // 页头正文读写与内容接口同源：默认公司的事实柜。
         // 资产柜：POST /api/workorders/:id/files 上传字节落这里（与 uploadChatAttachment 同一柜），
         // 再让 artifacts.addWorkOrderFile 写行——手动上传不进 oplog / events，删了不伤重放。
         assets,
@@ -259128,11 +260649,10 @@ async function startServe(opts) {
   for (const w2 of projectsCfg?.workspaces ?? []) {
     await artifactStateStore.upsertWorkspaceBinding({ workOrderId: w2.id, projectId: w2.projectId });
   }
-  const { resolveCodeRepo, resolveProject } = makeStoreCodeRepoResolver({
+  const { resolveProject } = makeStoreCodeRepoResolver({
     projects: projectStateStore,
     bindings: artifactStateStore
   });
-  resolveCodeRepoRef = resolveCodeRepo;
   if (opts.dispatch) {
     const startDispatcher = (companyId, companyEngine) => {
       if (dispatchers.has(companyId)) return;
@@ -259408,8 +260928,7 @@ async function startServe(opts) {
         } : {},
         schema: liveSchemaMap,
         // 活视图：类型目录变更后由 rebuildLiveSchema 原地重填（Dispatcher 每轮现读 opts.schema）
-        resolveCodeRepo,
-        // §4/C：异步从权威源（store）解析；dispatcher 装配前 await
+        resolveCodeRepo: (ws) => resolveCompanyCodeRepo(ws, companyId),
         // #2 派单开关：工单"待派发"（控制面旁存标 held）时不派其活。held 集通常空、表极小，每次查可接受。
         resolveDispatchHold: async (ws) => (await artifactStateStore.listWorkspaceDispatchHeld()).includes(ws),
         // §D3 评审人连续性：锁定审核人不可用（熔断/离岗）→ 系统身份幂等升级，交管理者改派（不静默换人）。
@@ -260631,7 +262150,7 @@ ${nodeFault}` : "");
       log: (m2) => console.log(m2),
       batchLimit: envNum("OASIS_AUTOMATION_EVENT_BATCH", 200),
       // 工单→项目绑定是合法薄旁存（B5），不是内核事实——列项目下的工单只认它。
-      listProjectWorkspaces: async ({ projectId: projectId2 }) => (await artifactStateStore.listWorkspaceBindings()).filter((b2) => b2.projectId === projectId2).map((b2) => b2.workOrderId),
+      listProjectWorkspaces: async ({ companyId, projectId: projectId2 }) => (await (await artifactStateFor(companyId)).listWorkspaceBindings()).filter((b2) => b2.projectId === projectId2).map((b2) => b2.workOrderId),
       // 完成判据必须复用 D3 resolver（不复制 deriveStage），且与成员快照同一次读取。
       // ensureTracked：内核跟踪集只在启动时装载一次、此后只随本进程写入增长——多实例部署下，
       // 另一实例建出来的工单在这里会被读成 unknown（既不触发也不留痕，QA OBS-1 实测）。
@@ -260642,7 +262161,7 @@ ${nodeFault}` : "");
         return makeAutomationWorkorderSnapshotResolver(engine2.kernel)(workspace);
       },
       // 触发时复查归因主体的项目读取权（与配置期同一口径）。
-      projectReadable: async ({ projectId: projectId2 }) => await projectStateStore.getProject(projectId2) !== null
+      projectReadable: async ({ companyId, projectId: projectId2 }) => await (await projectStateFor(companyId)).getProject(projectId2) !== null
     });
     automationEventTimer = setInterval(() => {
       void eventPoller.tick().catch((err) => console.error(`[project-event-poller] tick \u5931\u8D25: ${String(err)}`));
@@ -262581,7 +264100,7 @@ var COMMAND_DECLS = {
       { name: "as", desc: "\u7ED9\u8FD9\u6B21\u59D4\u6D3E\u8D77\u4E2A\u77ED\u540D\uFF0C\u4E4B\u540E\u7528\u5B83 --continue\uFF1B\u649E\u540D\u670D\u52A1\u7AEF\u81EA\u52A8\u52A0\u540E\u7F00\uFF0C**\u4EE5\u8F93\u51FA\u91CC\u90A3\u4E2A\u4E3A\u51C6**" },
       { name: "file", desc: "\u4E00\u8D77\u5E26\u8FC7\u53BB\u7684\u6587\u4EF6\uFF08\u4F60\u5DE5\u4F5C\u76EE\u5F55\u4E0B\u7684\u76F8\u5BF9\u8DEF\u5F84\uFF0C\u53EF\u7ED9\u591A\u6B21\uFF1B\u5355\u4E2A \u22642MB\u3001\u4E00\u6B21 \u226420 \u4E2A / 20MB\uFF09" },
       { name: "continue", desc: "\u5F80\u5DF2\u6709\u59D4\u6D3E\u91CC\u518D\u8F6C\u8FBE\u4E00\u53E5\uFF1A\u7ED9 label / \u4E13\u5BB6\u540D / delegationId \u524D\u7F00" },
-      { name: "text", desc: "\u8F6C\u8FBE\u5185\u5BB9\uFF08\u914D --continue\uFF09\u3002\u6539\u65B9\u5411\u5C31\u660E\u8BF4\u300C\u6539\u65B9\u5411\u300D\uFF0C\u4E13\u5BB6\u4F1A\u81EA\u5DF1\u5224\u65AD\u8981\u4E0D\u8981\u653E\u5F03\u624B\u4E0A\u90A3\u6BB5" },
+      { name: "text", desc: "\u8F6C\u8FBE\u5185\u5BB9\uFF08\u914D --continue\uFF09\u3002\u6539\u65B9\u5411\u5C31\u660E\u8BF4\u300C\u6539\u65B9\u5411\u300D\uFF0C\u4E13\u5BB6\u4F1A\u81EA\u5DF1\u5224\u65AD\u8981\u4E0D\u8981\u653E\u5F03\u624B\u4E0A\u90A3\u6BB5\u3002**\u770B\u56DE\u6267**\uFF1A\u63D2\u8FDB\u5728\u8DD1\u7684\u90A3\u4E00\u8F6E / \u8D77\u4E86\u65B0\u7684\u4E00\u8F6E / \u8FD8\u6392\u5728\u961F\u5217\u91CC\u2014\u2014\u6392\u961F\u65F6\u4E13\u5BB6\u8981\u7B49\u672C\u8F6E\u8DD1\u5B8C\u624D\u770B\u89C1\uFF0C\u8BE5\u8DDF\u7528\u6237\u8BF4\u4E00\u58F0" },
       { name: "status", desc: "\u770B\u4E00\u4E2A\u59D4\u6D3E\u7684\u8BE6\u60C5\uFF1A\u5168\u91CF\u5404\u8F6E\u5C0F\u7ED3 + \u4EA7\u7269\u6E05\u5355" },
       { name: "list", desc: "\u5217\u51FA\u8FD9\u6761\u5BF9\u8BDD\u6D3E\u51FA\u53BB\u7684\u6D3B\uFF1B\u9ED8\u8BA4\u53EA\u7ED9\u8FDB\u884C\u4E2D + \u6700\u8FD1 10 \u6761", boolean: true },
       { name: "all", desc: "\u914D --list\uFF1A\u8FDE\u5386\u53F2\u59D4\u6D3E\u4E00\u8D77\u5217", boolean: true },
@@ -265067,15 +266586,26 @@ ${round.text}`);
         const text5 = flags.get("text");
         if (!text5) throw new Error('--continue \u8981\u914D --text "<\u8981\u8F6C\u8FBE\u7684\u8BDD>"');
         const target = await resolveRef2(continueRef);
-        await api.post(
+        const outcome = await api.post(
           `/api/delegations/${encodeURIComponent(target.id)}/messages`,
           { text: text5, ...fileArgs.length ? { files: fileArgs } : {} }
         );
         if (asJson2) {
-          println(JSON.stringify({ delegationId: target.id, label: target.label, files: fileArgs }, null, 2));
+          println(JSON.stringify({ delegationId: target.id, label: target.label, files: fileArgs, ...outcome }, null, 2));
           break;
         }
-        println(`\u5DF2\u8F6C\u8FBE\u7ED9 ${target.expertName ?? target.expertActorId}\uFF08${target.label ?? target.id.slice(0, 8)}\uFF09\u3002`);
+        const who = `${target.expertName ?? target.expertActorId}\uFF08${target.label ?? target.id.slice(0, 8)}\uFF09`;
+        if (outcome?.outcome === "inserted") {
+          println(`\u5DF2\u63D2\u8FDB ${who} \u6B63\u5728\u8DD1\u7684\u90A3\u4E00\u8F6E\u2014\u2014\u5B83\u628A\u5F53\u524D\u8FD9\u4E00\u6B65\u7B54\u5B8C\u5C31\u4F1A\u770B\u5230\u3002`);
+        } else if (outcome?.outcome === "started-round") {
+          println(`\u5DF2\u8F6C\u8FBE\u7ED9 ${who}\uFF1A\u5B83\u4E0A\u4E00\u8F6E\u5DF2\u7ECF\u7ED3\u675F\uFF0C\u8FD9\u53E5\u8BDD\u5F53\u573A\u8D77\u4E86\u65B0\u7684\u4E00\u8F6E\u3002`);
+        } else if (outcome?.outcome === "queued") {
+          println(`\u5DF2\u6536\u4E0B\uFF0C\u4F46${who}**\u73B0\u5728\u8FD8\u770B\u4E0D\u5230**\uFF1A${outcome.reason ?? "\u63D2\u4E0D\u8FDB\u6B63\u5728\u8DD1\u7684\u90A3\u4E00\u8F6E"}\u3002`);
+          println(`  \u8FD9\u53E5\u8BDD\u6392\u5728\u5F85\u8F6C\u8FBE\u961F\u5217\u91CC\uFF08\u8FD8\u6709 ${outcome.pendingInputs} \u53E5\u6CA1\u9001\u5230\uFF09\uFF0C\u672C\u8F6E\u8DD1\u5B8C\u4F1A\u4F5C\u4E3A\u4E0B\u4E00\u8F6E\u53D1\u51FA\u3002`);
+          println("  \u5B83\u8FD9\u4E00\u8F6E\u53EF\u80FD\u8FD8\u5728\u6309\u65E7\u65B9\u5411\u505A\u2014\u2014\u8981\u4E0D\u8981\u5728\u8FD9\u6761\u5BF9\u8BDD\u91CC\u5148\u8DDF\u7528\u6237\u8BF4\u660E\uFF0C\u4F60\u81EA\u5DF1\u5224\u65AD\u3002");
+        } else {
+          println(`\u5DF2\u8F6C\u8FBE\u7ED9 ${who}\u3002`);
+        }
         if (fileArgs.length) println(`  \u4E00\u8D77\u5E26\u8FC7\u53BB\u7684\u6587\u4EF6\uFF1A${fileArgs.join("\u3001")}`);
         println("\u8FD9\u4E00\u8F6E\u5230\u6B64\u4E3A\u6B62\uFF1A\u7ED3\u679C\u4F1A\u81EA\u5DF1\u56DE\u5230\u8FD9\u6761\u5BF9\u8BDD\uFF0C\u4E0D\u8981\u5728\u8FD9\u91CC\u7B49\u3002");
         break;
@@ -267871,7 +269401,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.1" : "dev";
+var PKG_VERSION = true ? "2.2.3" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;