oasis_test_v2 2.2.18 → 2.2.20

package/dist/index.js

@@ -243,7 +243,7 @@ function rankMemories(items, terms) {
     (a, b2) => b2.score - a.score || b2.accessedAt.localeCompare(a.accessedAt) || a.memId.localeCompare(b2.memId)
   );
 }
-var ActorMemoryNotFoundError, ActorMemoryVersionConflictError, MEMORY_CONTENT_MAX_CHARS, MEMORY_KEYWORDS_MAX, MEMORY_KEYWORD_MAX_CHARS, MEMORY_PER_ACTOR_MAX, MEMORY_DIGEST_CHARS, MEMORY_INJECT_MAX, MEMORY_KEYWORD_WEIGHT, MEMORY_QUERY_TERMS_MAX, MEMORY_READ_MAX_IDS, MEMORY_NGRAM_SCAN_MAX_CHARS, CJK_RE, ASCII_WORD_RE;
+var ActorMemoryNotFoundError, ActorMemoryVersionConflictError, MEMORY_CONTENT_MAX_CHARS, MEMORY_KEYWORDS_MAX, MEMORY_KEYWORD_MAX_CHARS, MEMORY_PER_ACTOR_MAX, MEMORY_DIGEST_CHARS, MEMORY_INJECT_DIGEST_CHARS, MEMORY_INJECT_MAX, MEMORY_KEYWORD_WEIGHT, MEMORY_QUERY_TERMS_MAX, MEMORY_READ_MAX_IDS, MEMORY_NGRAM_SCAN_MAX_CHARS, CJK_RE, ASCII_WORD_RE;
 var init_actor_memory = __esm({
   "../contract/src/actor-memory.ts"() {
     "use strict";
@@ -268,7 +268,8 @@ var init_actor_memory = __esm({
     MEMORY_KEYWORDS_MAX = 16;
     MEMORY_KEYWORD_MAX_CHARS = 32;
     MEMORY_PER_ACTOR_MAX = 500;
-    MEMORY_DIGEST_CHARS = 80;
+    MEMORY_DIGEST_CHARS = 140;
+    MEMORY_INJECT_DIGEST_CHARS = 80;
     MEMORY_INJECT_MAX = 30;
     MEMORY_KEYWORD_WEIGHT = 3;
     MEMORY_QUERY_TERMS_MAX = 32;
@@ -1219,6 +1220,35 @@ var init_chat = __esm({
   }
 });
 
+// ../contract/src/session-outputs.ts
+function diffSessionOutputs(scanned, previous3) {
+  const prev = previous3 ?? {};
+  const changed = [];
+  const fingerprints = {};
+  for (const entry of [...scanned].sort((a, b2) => a.path.localeCompare(b2.path))) {
+    const { path: path41, size, mtime } = entry;
+    if (!path41) continue;
+    const usable = typeof size === "number" && Number.isFinite(size) && typeof mtime === "string" && mtime !== "";
+    if (usable) fingerprints[path41] = { size, mtime };
+    const before = prev[path41];
+    const unchanged = usable && before !== void 0 && before.size === size && before.mtime === mtime;
+    if (unchanged) continue;
+    changed.push({ path: path41, name: basenameOf(path41), size: size ?? null, mtime: mtime ?? null });
+  }
+  return { changed, fingerprints };
+}
+function basenameOf(path41) {
+  const i = path41.lastIndexOf("/");
+  return i >= 0 ? path41.slice(i + 1) : path41;
+}
+var SESSION_OUTPUTS_DIR;
+var init_session_outputs = __esm({
+  "../contract/src/session-outputs.ts"() {
+    "use strict";
+    SESSION_OUTPUTS_DIR = "outputs";
+  }
+});
+
 // ../contract/src/chat-session.ts
 function supportsChatModelOverride(runtimeKind) {
   return !!runtimeKind && CHAT_MODEL_OVERRIDE_RUNTIMES.includes(runtimeKind);
@@ -1409,10 +1439,11 @@ function touchAnchorMessageId(messageId) {
   const hash2 = messageId.indexOf("#");
   return hash2 >= 0 ? messageId.slice(0, hash2) : messageId;
 }
-var DelegationLabelConflictError, DELEGATION_FILE_LIMITS, DELEGATION_INBOUND_DIR, DELEGATION_OUTBOUND_DIR, DELEGATION_OUTPUTS_DIR, DELEGATION_RETURN_RECENT_ROUNDS;
+var DelegationLabelConflictError, DELEGATION_FILE_LIMITS, DELEGATION_INBOUND_DIR, DELEGATION_OUTBOUND_DIR, DELEGATION_RETURN_RECENT_ROUNDS;
 var init_delegation = __esm({
   "../contract/src/delegation.ts"() {
     "use strict";
+    init_session_outputs();
     DelegationLabelConflictError = class extends Error {
       constructor(parentSessionId, label) {
         super(`delegation label conflict in parent session: parent=${parentSessionId} label=${label ?? "<null>"}`);
@@ -1431,7 +1462,6 @@ var init_delegation = __esm({
     };
     DELEGATION_INBOUND_DIR = "inputs/attachments";
     DELEGATION_OUTBOUND_DIR = "delegations";
-    DELEGATION_OUTPUTS_DIR = "outputs";
     DELEGATION_RETURN_RECENT_ROUNDS = 3;
   }
 });
@@ -1452,6 +1482,8 @@ var init_delegation_prompts = __esm({
       "## \u5DE5\u4F5C\u533A\u7EA6\u5B9A",
       "",
       "- **\u4EA4\u4ED8\u7269\u653E `outputs/`**\uFF1A\u4F60\u8981\u4EA4\u56DE\u53BB\u7684\u6587\u4EF6\u653E\u5728\u8FD9\u4E2A\u76EE\u5F55\u4E0B\uFF0C\u4FDD\u7559\u4F60\u81EA\u5DF1\u7684\u5B50\u76EE\u5F55\u7ED3\u6784\u3002",
+      "  \u8FD9\u91CC\u7684\u6587\u4EF6\u65E2\u4F1A\u4EA4\u56DE\u534F\u8C03\u8005\uFF0C\u4E5F\u4F1A\u5728**\u4F60\u8FD9\u6761\u5B50\u4F1A\u8BDD\u7684\u9875\u9762\u4E0A**\u663E\u793A\u6210\u53EF\u70B9\u5F00\u7684\u6587\u4EF6\u5361\u7247\uFF1B",
+      "  \u4E2D\u95F4\u4EA7\u7269\u548C\u8349\u7A3F\u522B\u653E\u8FD9\u513F\u3002",
       `- \`${PARENT_CONVERSATION_PATH}\` \u5982\u679C\u5B58\u5728\uFF0C\u662F\u4E3B\u4F1A\u8BDD\u7684\u5BF9\u8BDD\u5FEB\u7167\uFF0C\u53EF\u4EE5\u67E5\u9605\u3002`,
       "  **\u5B83\u4E0D\u4FDD\u8BC1\u5B58\u5728**\uFF08\u4E3B\u4F1A\u8BDD\u6CA1\u6709\u53EF\u8F6C\u50A8\u7684\u5386\u53F2\u65F6\u5C31\u6CA1\u6709\u8FD9\u4E2A\u6587\u4EF6\uFF09\uFF0C\u522B\u628A\u5B83\u5F53\u524D\u63D0\u3002",
       "- \u534F\u8C03\u8005\u968F\u59D4\u6D3E\u5E26\u8FC7\u6765\u7684\u6587\u4EF6\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u4EFB\u52A1\u4E66\u91CC\u4F1A\u70B9\u540D\u3002",
@@ -1658,6 +1690,7 @@ var init_src = __esm({
     init_playbook();
     init_experiments();
     init_chat();
+    init_session_outputs();
     init_chat_session();
     init_chat_session();
     init_live_protocol();
@@ -14320,7 +14353,8 @@ function memoryIndexLines(entries) {
   const rows = entries.slice(0, MEMORY_INJECT_MAX).map((e) => {
     const tag = e.projectId === null ? "[actor]" : "[project]";
     const kw = e.keywords.length > 0 ? ` {${e.keywords.join(",")}}` : "";
-    return `- \`${e.memId}\` ${tag}${kw} ${e.digest}`;
+    const preview2 = e.digest.length > MEMORY_INJECT_DIGEST_CHARS ? `${e.digest.slice(0, MEMORY_INJECT_DIGEST_CHARS)}\u2026` : e.digest;
+    return `- \`${e.memId}\` ${tag}${kw} ${preview2}`;
   });
   return [
     ``,
@@ -22923,7 +22957,7 @@ function normalizeClaudeStreamLine(line) {
     for (const block of content3) {
       switch (block["type"]) {
         case "text":
-          out.push({ kind: "message", payload: { text: block["text"] } });
+          if (type === "assistant") out.push({ kind: "message", payload: { text: block["text"] } });
           break;
         case "thinking":
           out.push({ kind: "thought", payload: { text: block["thinking"] } });
@@ -23123,6 +23157,8 @@ var init_claude_code = __esm({
       // 同上
       ["--verbose", "boolean"],
       // 与 --output-format stream-json 配对；单独无意义、成对是重复
+      ["--replay-user-messages", "boolean"],
+      // Input consumption receipts are adapter-owned.
       ["--include-partial-messages", "boolean"]
       // 同上
     ]);
@@ -23211,7 +23247,7 @@ var init_claude_code = __esm({
           // 据此喂 onOutput 实现 chat 逐字流式（同时 telemetry 仍由整条 assistant 消息归一）。
           ...this.opts.streamJson ? ["--output-format", "stream-json", "--verbose", "--include-partial-messages"] : [],
           // ADR-0093：stream-json 输入模式——让 claude 逐条从 stdin 读 user 消息（支持多轮追加）。
-          ...appendMode ? ["--input-format", "stream-json"] : [],
+          ...appendMode ? ["--input-format", "stream-json", "--replay-user-messages"] : [],
           ...job.model ?? this.opts.model ? ["--model", job.model ?? this.opts.model] : [],
           // ADR「agent CLI 启动参数员工级可配置化」：员工配置 job.extraArgs（在前）+ opts.extraArgs（静态默认，在后），
           // 过 CLAUDE_BLOCKED_FLAGS 拦截打破协议契约的 flag（剔除 + warn），追加到 argv 末尾。
@@ -23279,10 +23315,11 @@ var init_claude_code = __esm({
             pendingClose = null;
           }
         };
-        const writeUserMessage = (text5) => {
+        const pendingInputReceipts = /* @__PURE__ */ new Map();
+        const writeUserMessage = (text5, uuid2) => {
           try {
             child.stdin.write(
-              JSON.stringify({ type: "user", message: { role: "user", content: [{ type: "text", text: text5 }] } }) + "\n"
+              JSON.stringify({ type: "user", ...uuid2 ? { uuid: uuid2 } : {}, message: { role: "user", content: [{ type: "text", text: text5 }] } }) + "\n"
             );
             writes++;
             cancelPendingClose();
@@ -23357,6 +23394,22 @@ var init_claude_code = __esm({
             out.write(line + "\n");
             try {
               const p2 = JSON.parse(line);
+              if (p2["type"] === "user" && p2["isReplay"] === true && !p2["parent_tool_use_id"] && typeof p2["uuid"] === "string") {
+                const key = pendingInputReceipts.get(p2["uuid"]);
+                if (key) {
+                  pendingInputReceipts.delete(p2["uuid"]);
+                  diag("input_consumed", { key, uuid: p2["uuid"] });
+                  for (const cb of liveEventCbs) cb({
+                    protocolVersion: 2,
+                    streamId: `claude-live:${id}`,
+                    turnId: id,
+                    itemId: `input:${p2["uuid"]}`,
+                    itemType: "control",
+                    operation: "completed",
+                    payload: { code: "input_consumed", clientMessageKey: key }
+                  });
+                }
+              }
               if (p2["type"] === "result") {
                 lastResult = p2;
                 results++;
@@ -23532,6 +23585,9 @@ var init_claude_code = __esm({
           }
         };
         function doAppend(input) {
+          if (input.requireConsumptionReceipt && (!input.clientMessageKey || !appendMode)) {
+            return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
+          }
           if (!appendMode) {
             diag("append_rejected", { reason: "unsupported", writes, results });
             return Promise.resolve({ accepted: false, reason: "unsupported", ...input.interrupt ? { interrupt: "unsupported" } : {} });
@@ -23545,9 +23601,12 @@ var init_claude_code = __esm({
           const outgoing = report.failed.length ? appendMaterializeWarning(input.text, report) : input.text;
           if (input.interrupt) writeInterrupt();
           diag("append_accepted", { writes, results, interrupt: !!input.interrupt, chars: input.text.length });
-          const ok3 = writeUserMessage(outgoing);
+          const receiptId = input.requireConsumptionReceipt ? (0, import_node_crypto8.randomUUID)() : void 0;
+          if (receiptId) pendingInputReceipts.set(receiptId, input.clientMessageKey);
+          const ok3 = writeUserMessage(outgoing, receiptId);
+          if (!ok3 && receiptId) pendingInputReceipts.delete(receiptId);
           if (!ok3) return Promise.resolve({ accepted: false, reason: "rejected", ...hasFiles ? { files: report } : {}, ...input.interrupt ? { interrupt: "unknown" } : {} });
-          return Promise.resolve({ accepted: true, ...hasFiles ? { files: report } : {}, interrupt: input.interrupt ? "interrupted" : "queued_at_boundary" });
+          return Promise.resolve({ accepted: true, ...receiptId ? { consumption: "pending" } : {}, ...hasFiles ? { files: report } : {}, interrupt: input.interrupt ? "interrupted" : "queued_at_boundary" });
         }
       }
     };
@@ -24872,6 +24931,8 @@ async function runProtocolSession(job, cfg) {
   const transcript = openTranscript(transcriptRef);
   const outputCbs = [];
   const telemetryCbs = [];
+  const liveCbs = [];
+  const appendByKey = /* @__PURE__ */ new Map();
   const exitCbs = [];
   const state = cfg.createState();
   const pending = /* @__PURE__ */ new Map();
@@ -24907,7 +24968,7 @@ async function runProtocolSession(job, cfg) {
     pending.clear();
   };
   const send = (command) => {
-    if (closing || child.stdin.destroyed || !child.stdin.writable) return Promise.reject(new Error("session stdin is not writable"));
+    if (closing || child.stdin.destroyed || !child.stdin.writable) return Promise.reject(new ProtocolSessionClosing("session stdin is not writable"));
     const idValue = command.id ?? `oasis_${++nextRequestId}`;
     const message = { ...command, id: idValue };
     const key = commandId(idValue);
@@ -24927,11 +24988,12 @@ async function runProtocolSession(job, cfg) {
     if (isResponse(message) && responseId !== void 0 && pending.has(responseId)) {
       const waiter = pending.get(responseId);
       pending.delete(responseId);
-      if (message.type === "response" && message.success === false) waiter.reject(new Error(String(message.error ?? "runtime rejected command")));
-      else if (Object.prototype.hasOwnProperty.call(message, "error")) waiter.reject(new Error(String(message.error?.message ?? message.error)));
+      if (message.type === "response" && message.success === false) waiter.reject(new ProtocolCommandRejected(String(message.error ?? "runtime rejected command")));
+      else if (Object.prototype.hasOwnProperty.call(message, "error")) waiter.reject(new ProtocolCommandRejected(String(message.error?.message ?? message.error)));
       else waiter.resolve(message.result ?? message);
       return;
     }
+    for (const event of cfg.liveEvents?.(message, state) ?? []) for (const cb of liveCbs) cb(event);
     for (const line of cfg.normalize(message, state)) {
       if (line.outputText) for (const cb of outputCbs) cb(line.outputText);
       const event = { kind: line.kind, payload: line.payload, seq: ++eventSeq, ts: (/* @__PURE__ */ new Date()).toISOString() };
@@ -25023,25 +25085,34 @@ async function runProtocolSession(job, cfg) {
     onTelemetry(cb) {
       telemetryCbs.push(cb);
     },
+    onLiveEvent(cb) {
+      liveCbs.push(cb);
+    },
     get canAppendInput() {
       return !closing && started && !exited;
     },
     appendInput(input) {
+      const key = input.clientMessageKey;
+      if (key && appendByKey.has(key)) return appendByKey.get(key);
+      if (input.requireConsumptionReceipt && !cfg.supportsInputConsumptionReceipts) return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
       appendChain = appendChain.then(async () => {
         if (exited || closing) return { accepted: false, reason: "session-closing" };
         const files = materializeFiles(dir, input.files, input.binaryFiles);
         try {
-          const result = await cfg.append(input, state, send);
-          return { ...result, ...files.written.length || files.failed.length ? { files } : {} };
-        } catch {
-          return { accepted: false, reason: "rejected", ...files.written.length || files.failed.length ? { files } : {} };
+          const result2 = await cfg.append(input, state, send);
+          return { ...result2, ...files.written.length || files.failed.length ? { files } : {} };
+        } catch (error2) {
+          const reason = error2 instanceof ProtocolSessionClosing ? "session-closing" : error2 instanceof ProtocolCommandRejected ? "rejected" : "unconfirmed";
+          return { accepted: false, reason, ...files.written.length || files.failed.length ? { files } : {} };
         }
       });
-      return appendChain;
+      const result = appendChain;
+      if (key) appendByKey.set(key, result);
+      return result;
     }
   };
 }
-var import_node_child_process6, import_node_crypto10, path9;
+var import_node_child_process6, import_node_crypto10, path9, ProtocolCommandRejected, ProtocolSessionClosing;
 var init_protocol_session = __esm({
   "../adapters/src/_core/protocol-session.ts"() {
     "use strict";
@@ -25057,6 +25128,10 @@ var init_protocol_session = __esm({
     init_transcript();
     init_filter_extra_args();
     init_root_bypass();
+    ProtocolCommandRejected = class extends Error {
+    };
+    ProtocolSessionClosing = class extends Error {
+    };
   }
 });
 
@@ -25569,11 +25644,13 @@ var init_codex = __esm({
           workRoot: this.opts.workRoot,
           env: this.opts.env,
           runtimeKind: "codex",
+          supportsInputConsumptionReceipts: true,
           syncSkills: this.opts.syncSkills,
           createState: () => ({
             threadId: void 0,
             turnId: void 0,
             active: false,
+            pendingInputs: /* @__PURE__ */ new Set(),
             codex: createCodexNormalizeState(),
             // 本次 run 的用量：逐轮累加 `thread/tokenUsage/updated` 的 `last`（见该解析函数注释）。
             usage: { input: 0, cacheRead: 0, cacheWrite: 0, output: 0 },
@@ -25617,6 +25694,34 @@ ${task}` : task;
             if (typeof turnId === "string" && turnId) state.turnId = turnId;
             if (!state.turnId) throw new Error("codex app-server returned no turn id");
           },
+          liveEvents(message, state) {
+            const params = message.params;
+            const method = message.method;
+            const turnId = typeof params?.turnId === "string" ? params.turnId : state.turnId ?? "codex-pending";
+            const base = { protocolVersion: 2, streamId: `codex:${state.threadId}`, turnId };
+            if (method === "item/agentMessage/delta" && typeof params?.itemId === "string" && typeof params.delta === "string") {
+              return [{ ...base, itemId: params.itemId, itemType: "message", operation: "append_text", payload: { text: params.delta } }];
+            }
+            if (method === "item/started" || method === "item/completed") {
+              const item = params?.item;
+              if (item?.type === "userMessage" && typeof item.clientId === "string" && state.pendingInputs.delete(item.clientId)) {
+                return [{
+                  ...base,
+                  itemId: `input:${item.clientId}`,
+                  itemType: "control",
+                  operation: "completed",
+                  payload: { code: "input_consumed", clientMessageKey: item.clientId }
+                }];
+              }
+              if (method === "item/completed" && item?.type === "agentMessage" && typeof item.id === "string") {
+                return [{ ...base, itemId: item.id, itemType: "message", operation: "completed", payload: { text: typeof item.text === "string" ? item.text : "" } }];
+              }
+            }
+            if (method === "turn/completed") {
+              return [{ ...base, itemId: "turn-end", itemType: "control", operation: "completed", payload: { code: "output_block_completed" } }];
+            }
+            return [];
+          },
           normalize(message, state) {
             const params = message.params;
             const method = typeof message.method === "string" ? message.method : "";
@@ -25675,7 +25780,7 @@ ${task}` : task;
             };
           },
           async append(input, state, send) {
-            if (!state.threadId || !state.turnId) return { accepted: false, reason: "rejected" };
+            if (!state.threadId || !state.turnId || !state.active) return { accepted: false, reason: "session-closing" };
             if (input.interrupt) {
               await send({ jsonrpc: "2.0", method: "turn/interrupt", params: { threadId: state.threadId, turnId: state.turnId } });
               const next = await send({ jsonrpc: "2.0", method: "turn/start", params: { threadId: state.threadId, input: [{ type: "text", text: input.text }] } });
@@ -25684,13 +25789,22 @@ ${task}` : task;
               state.active = true;
               return { accepted: true, interrupt: "unknown" };
             }
-            await send({ jsonrpc: "2.0", method: "turn/steer", params: {
-              threadId: state.threadId,
-              expectedTurnId: state.turnId,
-              ...input.clientMessageKey ? { clientUserMessageId: input.clientMessageKey } : {},
-              input: [{ type: "text", text: input.text }]
-            } });
-            return { accepted: true };
+            if (input.clientMessageKey) state.pendingInputs.add(input.clientMessageKey);
+            try {
+              await send({ jsonrpc: "2.0", method: "turn/steer", params: {
+                threadId: state.threadId,
+                expectedTurnId: state.turnId,
+                ...input.clientMessageKey ? { clientUserMessageId: input.clientMessageKey } : {},
+                input: [{ type: "text", text: input.text }]
+              } });
+            } catch (error2) {
+              if (input.clientMessageKey) state.pendingInputs.delete(input.clientMessageKey);
+              if (error2 instanceof ProtocolCommandRejected && /no active turn|not active|expected.*turn|turn.*mismatch/i.test(error2.message)) {
+                return { accepted: false, reason: "session-closing" };
+              }
+              throw error2;
+            }
+            return { accepted: true, consumption: "pending" };
           }
         });
       }
@@ -26566,6 +26680,7 @@ async function runACPSession(job, cfg) {
   const transcriptOut = openTranscript(transcriptRef);
   const outputCbs = [];
   const telemetryCbs = [];
+  const liveCbs = [];
   const exitCbs = [];
   let exited;
   let killReason = null;
@@ -26644,6 +26759,34 @@ ${note}` : note };
   });
   let lastRpcError;
   let streamingCurrentTurn = false;
+  const emitBoundary = () => {
+    for (const cb of liveCbs) cb({
+      protocolVersion: 2,
+      streamId: id,
+      turnId: id,
+      itemId: "prompt-boundary",
+      itemType: "control",
+      operation: "completed",
+      payload: { code: "output_block_completed" }
+    });
+  };
+  const confirmedInputs = /* @__PURE__ */ new Set();
+  const confirmAppendBatch = () => {
+    for (const input of inflightAppendBatch) {
+      const key = input.clientMessageKey;
+      if (!key || confirmedInputs.has(key)) continue;
+      confirmedInputs.add(key);
+      for (const cb of liveCbs) cb({
+        protocolVersion: 2,
+        streamId: id,
+        turnId: id,
+        itemId: `input:${key}`,
+        itemType: "control",
+        operation: "completed",
+        payload: { code: "input_consumed", clientMessageKey: key }
+      });
+    }
+  };
   const client = new ACPClient(
     (line) => {
       try {
@@ -26652,9 +26795,11 @@ ${note}` : note };
       }
     },
     (text5) => {
+      confirmAppendBatch();
       for (const cb of outputCbs) cb(text5);
     },
     (e) => {
+      if (["message", "thought", "tool_use", "tool_result"].includes(e.kind)) confirmAppendBatch();
       for (const cb of telemetryCbs) cb(e);
     },
     // runtime 自己用 stopReason=cancelled 收尾时也保留取消语义；此前误记成 error，
@@ -26788,9 +26933,11 @@ ${task}` : task;
         promptResult = await sendPrompt(userText);
       }
       while (!killReason && appendQueue.length > 0) {
+        emitBoundary();
         inflightAppendBatch = appendQueue.splice(0);
         const merged = inflightAppendBatch.map((i) => i.text).filter(Boolean).join("\n\n");
         promptResult = await sendPrompt(merged);
+        confirmAppendBatch();
         inflightAppendBatch = [];
       }
       closingForExit = true;
@@ -26829,6 +26976,9 @@ ${task}` : task;
     onTelemetry(cb) {
       telemetryCbs.push(cb);
     },
+    onLiveEvent(cb) {
+      liveCbs.push(cb);
+    },
     // ADR-0093 对话追加：入队一条 user 输入，drain 循环会把它发成同 session 的下一回合。
     // 已收尾/已退出则拒（session-closing），上层据此降级 kill+resume。
     get canAppendInput() {
@@ -26856,7 +27006,11 @@ ${task}` : task;
     const report = materializeFiles(dir, input.files, input.binaryFiles);
     const queued = report.failed.length ? { ...input, text: appendMaterializeWarning(input.text, report) } : input;
     appendQueue.push(queued);
-    const withFiles = (r) => report.written.length || report.failed.length ? { ...r, files: report } : r;
+    const withFiles = (r) => ({
+      ...r,
+      ...input.requireConsumptionReceipt && r.accepted ? { consumption: "pending" } : {},
+      ...report.written.length || report.failed.length ? { files: report } : {}
+    });
     if (!input.interrupt) return Promise.resolve(withFiles({ accepted: true, interrupt: "queued_at_boundary" }));
     const run = appendChain.then(async () => {
       const pending = inflightStopReason;
@@ -27610,12 +27764,13 @@ var init_pi = __esm({
             return ["--mode", "rpc", "--session", sessionFile, ...model ? ["--model", model] : []];
           },
           runtimeKind: "pi",
+          supportsInputConsumptionReceipts: true,
           workRoot: opts.workRoot,
           cleanupWorkdir: opts.cleanupWorkdir,
           env: opts.env,
           extraArgs: opts.extraArgs,
           blockedFlags: PI_BLOCKED_FLAGS,
-          createState: () => ({}),
+          createState: () => ({ pendingInputs: [] }),
           initialCommand(job2, _dir, task) {
             const prompt2 = job2.systemPrompt ? `${job2.systemPrompt}
 
@@ -27632,6 +27787,28 @@ ${task}` : task;
             } catch {
             }
           },
+          liveEvents(message, state) {
+            const base = { protocolVersion: 2, streamId: "pi-rpc", turnId: "pi-rpc" };
+            const raw = message.message;
+            if (message.type === "message_end" && raw?.role === "assistant") {
+              return [{ ...base, itemId: "message-end", itemType: "control", operation: "completed", payload: { code: "output_block_completed" } }];
+            }
+            if (message.type === "message_start" && raw?.role === "user") {
+              const text5 = typeof raw.content === "string" ? raw.content : Array.isArray(raw.content) ? raw.content.filter((p2) => p2.type === "text").map((p2) => p2.text).join("") : void 0;
+              const pending = state.pendingInputs[0];
+              if (pending && text5 === pending.text) {
+                state.pendingInputs.shift();
+                return [{
+                  ...base,
+                  itemId: `input:${pending.key}`,
+                  itemType: "control",
+                  operation: "completed",
+                  payload: { code: "input_consumed", clientMessageKey: pending.key }
+                }];
+              }
+            }
+            return [];
+          },
           normalize(message) {
             return normalizePi(JSON.stringify(message));
           },
@@ -27641,14 +27818,21 @@ ${task}` : task;
           runtimeSessionId(state) {
             return state.sessionId;
           },
-          async append(input, _state, send) {
-            if (input.interrupt) {
-              await send({ type: "abort" });
+          async append(input, state, send) {
+            const pending = input.clientMessageKey ? { key: input.clientMessageKey, text: input.text } : void 0;
+            if (pending) state.pendingInputs.push(pending);
+            try {
+              if (input.interrupt) {
+                await send({ type: "abort" });
+                await send({ type: "steer", message: input.text });
+                return { accepted: true, interrupt: "unknown" };
+              }
               await send({ type: "steer", message: input.text });
-              return { accepted: true, interrupt: "unknown" };
+              return { accepted: true, consumption: "pending" };
+            } catch (error2) {
+              if (pending) state.pendingInputs = state.pendingInputs.filter((p2) => p2 !== pending);
+              throw error2;
             }
-            await send({ type: "steer", message: input.text });
-            return { accepted: true };
           }
         });
       }
@@ -28458,10 +28642,13 @@ var init_normalizer = __esm({
       proseClaim = /* @__PURE__ */ new Map();
       /** 本 turn 内已经见过的 item 键——认领闸只拦「新起一段」，不拦已知 item 的后续 op。 */
       claimedKeys = /* @__PURE__ */ new Set();
+      closedKeys = /* @__PURE__ */ new Set();
       /** 见过 stdout 文本没有——见过就压掉 telemetry `message`（与 server.ts 原口径同款去重）。 */
       sawTextOutput = false;
       /** 本 turn 产出过 item op 没有。收尾时用来决定要不要发 turn 信号（见 turnFinished）。 */
       producedAny = false;
+      /** Receipts wait for a whole output block; they never split its bytes. */
+      pendingInputs = /* @__PURE__ */ new Map();
       constructor(opts) {
         this.providerName = opts.providerName;
         this.hasLiveProtocol = opts.hasLiveProtocol === true;
@@ -28505,8 +28692,17 @@ var init_normalizer = __esm({
       }
       /** 结构化实时事件（原生 Live Protocol v2）。 */
       onLiveEvent(event) {
-        this.turnId = event.turnId || this.turnId;
         const payload = event.payload && typeof event.payload === "object" && !Array.isArray(event.payload) ? event.payload : {};
+        if (event.itemType === "control" && payload.code === "input_consumed" && typeof payload.clientMessageKey === "string") {
+          this.pendingInputs.set(payload.clientMessageKey, event.itemId);
+          if (!this.open) this.flushInputs();
+          return;
+        }
+        if (event.itemType === "control" && payload.code === "output_block_completed") {
+          this.closeOpen("completed");
+          return;
+        }
+        this.turnId = event.turnId || this.turnId;
         if (event.operation === "turn_completed" || event.operation === "turn_failed") {
           this.turnFinished(event.operation === "turn_failed" ? "failed" : "completed");
           return;
@@ -28522,13 +28718,12 @@ var init_normalizer = __esm({
           }
           return;
         }
-        if (event.operation === "completed" && (event.itemType === "message" || event.itemType === "thinking") && typeof payload.text === "string") {
-          this.snapshotProse(
-            event.itemType === "message" ? "text" : "thinking",
-            payload.text,
-            "live",
-            providerItemKey(this.providerName, event.itemId)
-          );
+        if (event.operation === "completed" && (event.itemType === "message" || event.itemType === "thinking")) {
+          const key = providerItemKey(this.providerName, event.itemId);
+          if (typeof payload.text === "string") {
+            this.snapshotProse(event.itemType === "message" ? "text" : "thinking", payload.text, "live", key);
+          }
+          if (this.open?.key === key) this.closeOpen("completed");
           return;
         }
         if (event.operation === "started" && event.itemType === "tool") {
@@ -28553,6 +28748,7 @@ var init_normalizer = __esm({
         this.fallbackIndex.clear();
         this.proseClaim.clear();
         this.claimedKeys.clear();
+        this.closedKeys.clear();
         this.sawTextOutput = false;
         this.producedAny = false;
         if (!produced) return;
@@ -28576,6 +28772,10 @@ var init_normalizer = __esm({
         if (!known && !this.claim(kind, origin)) return;
         const key = explicitKey ?? (this.open && this.open.kind === kind ? this.open.key : this.nextFallbackKey(kind));
         this.claimedKeys.add(key);
+        if (known && this.closedKeys.has(key)) {
+          this.emitItem({ key, kind, role: "assistant", origin, opShape: { op: "append_text", text: text5 } });
+          return;
+        }
         if (!this.open || this.open.key !== key) {
           this.closeOpen("completed");
           this.open = { key, kind, origin };
@@ -28592,6 +28792,10 @@ var init_normalizer = __esm({
         if (!known && !this.claim(kind, origin)) return;
         const key = explicitKey ?? (this.open && this.open.kind === kind ? this.open.key : this.nextFallbackKey(kind));
         this.claimedKeys.add(key);
+        if (known && this.closedKeys.has(key)) {
+          this.emitItem({ key, kind, role: "assistant", origin, opShape: { op: "set_text", text: text5 } });
+          return;
+        }
         if (!this.open || this.open.key !== key) {
           this.closeOpen("completed");
           this.open = { key, kind, origin };
@@ -28610,8 +28814,23 @@ var init_normalizer = __esm({
       closeOpen(status) {
         const open3 = this.open;
         this.open = null;
-        if (!open3) return;
-        this.emitItem({ key: open3.key, kind: open3.kind, role: "assistant", origin: open3.origin, opShape: { op: "set_status", status } });
+        if (open3) this.closedKeys.add(open3.key);
+        if (open3) this.emitItem({ key: open3.key, kind: open3.kind, role: "assistant", origin: open3.origin, opShape: { op: "set_status", status } });
+        this.flushInputs();
+      }
+      flushInputs() {
+        const inputs = [...this.pendingInputs];
+        this.pendingInputs.clear();
+        for (const [clientMessageKey, id] of inputs) {
+          this.emitItem({
+            key: providerItemKey(this.providerName, id),
+            kind: "control",
+            role: "system",
+            origin: "live",
+            opShape: { op: "set_status", status: "completed" },
+            attrs: { code: "input_consumed", clientMessageKey }
+          });
+        }
       }
       toolCall(origin, id, name, input) {
         this.closeOpen("completed");
@@ -28831,7 +29050,7 @@ var init_chat_item_ledger = __esm({
       telemetryTextInContent;
       /** 本段的「无输出」注解已经提前落过（`closeSegmentBeforeUserInput`），`beginSegment` 别再落一条。 */
       segmentEndEmitted = false;
-      /** **不变量 1**：`providerItemKey → itemId`，本账本唯一持有。切段/收尾清空。 */
+      /** **不变量 1**：`providerItemKey → itemId`，本账本唯一持有。仅 runtime turn 结束/收尾清空，用户插入保留。 */
       itemKeyMap = /* @__PURE__ */ new Map();
       /** 内存账本：itemId → 行。插入顺序即 seq 顺序。 */
       rows = /* @__PURE__ */ new Map();
@@ -28922,7 +29141,7 @@ var init_chat_item_ledger = __esm({
         const payload = { role: "user", text: text5 };
         if (attachments?.length) payload.attachments = attachments;
         if (clientKeys?.length) payload.clientSubmitIds = clientKeys;
-        this.insert({
+        return this.insert({
           kind: "text",
           role: "user",
           status: "completed",
@@ -29010,7 +29229,7 @@ var init_chat_item_ledger = __esm({
           }
         });
         const row = this.rows.get(id);
-        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord };
+        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord, messageId: row.messageId };
       }
       /**
        * 回灌重启前已经落库的那段正文（`chat-recovery` 重挂 / 迟到对账用）。
@@ -29045,7 +29264,7 @@ var init_chat_item_ledger = __esm({
       // ── 段与归属 ──────────────────────────────────────────────────────────────
       /**
        * 切段（人中途插入）：此刻起建的 item 属于**下一条** assistant 行。
-       * 映射一并清空——新段是新行，复用旧 itemId 会把新文本写进上一条消息。
+       * 已有 provider item 保留身份与位置；新 item 才归下一段，迟到快照不能复制旧块。
        */
       beginSegment() {
         if (this.segmentEndEmitted) {
@@ -29054,8 +29273,6 @@ var init_chat_item_ledger = __esm({
           this.closeStreamingRows("completed");
           if (this.segmentItemCount === 0 && this.messageId) this.insertSegmentEnd();
         }
-        this.itemKeyMap.clear();
-        this.lastTurnId = null;
         this.messageId = null;
         this.segment += 1;
         this.segmentItemCount = 0;
@@ -29072,14 +29289,14 @@ var init_chat_item_ledger = __esm({
        * 返回落下的那一行（`null` = 本段有输出、或还没有 assistant 行可归属，不需要注解），
        * 调用方据它把这条推上 v3 流——不推的话它只在下一次快照才出现。
        */
-      closeSegmentBeforeUserInput() {
+      closeSegmentBeforeUserInput(allowUnboundSegment = false) {
         this.closeStreamingRows("completed");
         if (this.segmentEndEmitted) return null;
-        if (this.segmentItemCount !== 0 || !this.messageId) return null;
+        if (this.segmentItemCount !== 0 || !this.messageId && !allowUnboundSegment) return null;
         const id = this.insertSegmentEnd();
         this.segmentEndEmitted = true;
         const row = this.rows.get(id);
-        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord };
+        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord, messageId: row.messageId };
       }
       /** 零输出段兜底（S1 评审 B1）：那条 assistant 行库里已经在了，一条 item 都没有会被对账抓成假红。 */
       insertSegmentEnd() {
@@ -29098,6 +29315,9 @@ var init_chat_item_ledger = __esm({
       /** 行落库了，把本段还挂着 NULL 的 assistant item 认领回去，并让后续 item 直接带上它。 */
       bindMessage(messageId) {
         this.messageId = messageId;
+        for (const row of this.rows.values()) {
+          if (row.role === "assistant" && row.messageId === null) row.messageId = messageId;
+        }
         if (!this.persistEnabled) return;
         this.enqueue(async () => {
           await this.deps.items.bindMessage(this.deps.sessionId, this.deps.turnId, messageId);
@@ -29157,7 +29377,8 @@ var init_chat_item_ledger = __esm({
           itemId: id,
           version: row.wireVersion,
           startedVersion: row.startedVersion,
-          ord: row.ord
+          ord: row.ord,
+          messageId: row.messageId
         };
         if (event.opShape.op === "set_status") {
           const followUp = this.applyOpTo(row, event);
@@ -29193,7 +29414,7 @@ var init_chat_item_ledger = __esm({
       }
       /** 这一次写的回执。`persist` 已经在里面走过钟了，这里只是把读数带出去给 wire。 */
       outcomeOf(row) {
-        return { itemId: row.id, version: row.wireVersion, ord: row.ord };
+        return { itemId: row.id, version: row.wireVersion, ord: row.ord, messageId: row.messageId };
       }
       /** 关掉所有还 streaming 的行（收尾/切段）。 */
       closeStreamingRows(status) {
@@ -29245,13 +29466,16 @@ var init_chat_item_ledger = __esm({
           origin: input.origin,
           inContent: input.inContent,
           persist: input.persist,
-          segment: this.segment
+          segment: this.segment,
+          /* 归属在**建行那一刻**定死：链是异步的，等它执行时 this.messageId 可能已被切段改了。
+             记在行上而不是只记在入库那一步——wire 帧也要带它（2026-09-11），两边必须同一个值。 */
+          messageId: input.forceNullMessage ? null : this.messageId
         };
         this.rows.set(id, row);
         this.createdCount += 1;
         if (!input.forceNullMessage) this.segmentItemCount += 1;
         if (!input.persist || !this.persistEnabled) return id;
-        const messageId = input.forceNullMessage ? null : this.messageId;
+        const messageId = row.messageId;
         const createdAt = this.now();
         const payload = input.payload ?? this.payloadOf(row);
         const metadata = input.metadata ?? { [CHAT_ITEM_META_LEGACY_CONTENT]: input.inContent };
@@ -29434,6 +29658,7 @@ async function openAssistantRunningRow(deps) {
 async function finalizeAssistantRow(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   const finishedAt = now();
+  const parts = await appendOutputsPart(deps.parts, deps.outputsPart);
   if (deps.assistantMsgId) {
     if (typeof deps.chatStore.updateMessage !== "function") return;
     try {
@@ -29441,7 +29666,7 @@ async function finalizeAssistantRow(deps) {
         content: deps.content,
         status: deps.status,
         completedAt: finishedAt,
-        ...deps.parts.length ? { parts: deps.parts } : {},
+        ...parts.length ? { parts } : {},
         ...deps.runId ? { runId: deps.runId } : {},
         ...deps.turnId ? { turnId: deps.turnId } : {}
       });
@@ -29449,7 +29674,7 @@ async function finalizeAssistantRow(deps) {
     }
     return;
   }
-  if (!deps.content && !deps.runId && deps.parts.length === 0) return;
+  if (!deps.content && !deps.runId && parts.length === 0) return;
   if (typeof deps.chatStore.appendMessage !== "function") return;
   try {
     await deps.chatStore.appendMessage({
@@ -29462,11 +29687,18 @@ async function finalizeAssistantRow(deps) {
       status: deps.status,
       ...deps.runId ? { runId: deps.runId } : {},
       ...deps.turnId ? { turnId: deps.turnId } : {},
-      ...deps.parts.length ? { parts: deps.parts } : {}
+      ...parts.length ? { parts } : {}
     });
   } catch {
   }
 }
+async function appendOutputsPart(parts, provider) {
+  if (!provider) return parts;
+  const part = await provider().catch(() => null);
+  if (!part || !part.outputs?.length) return parts;
+  const maxSeq = parts.reduce((m2, p2) => typeof p2.seq === "number" && p2.seq > m2 ? p2.seq : m2, 0);
+  return [...parts, { ...part, seq: maxSeq + 1 }];
+}
 function runBackgroundAssistantChatTurn(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   const log3 = deps.log ?? ((m2) => console.warn(m2));
@@ -29635,6 +29867,7 @@ function runBackgroundAssistantChatTurn(deps) {
           parts,
           status,
           ...runId ? { runId } : {},
+          ...deps.outputsPart ? { outputsPart: deps.outputsPart } : {},
           now
         });
         if (typeof deps.chatStore.updateSession === "function") {
@@ -51507,7 +51740,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes13, createHash: createHash38 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash39 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -52175,7 +52408,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash38("sha1").update(key + GUID).digest("base64");
+        const digest = createHash39("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -52544,7 +52777,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash38 } = require("crypto");
+    var { createHash: createHash39 } = require("crypto");
     var extension3 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -52851,7 +53084,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash38("sha1").update(key + GUID).digest("base64");
+        const digest = createHash39("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -160057,7 +160290,8 @@ var init_live_chat = __esm({
           v3Seq: 0,
           v3Buffer: [],
           v3Subscribers: prev?.recovering ? prev.v3Subscribers : /* @__PURE__ */ new Set(),
-          v3Items: /* @__PURE__ */ new Map()
+          v3Items: /* @__PURE__ */ new Map(),
+          inputReceipts: /* @__PURE__ */ new Map()
         };
         this.turns.set(chatSessionId, turn);
         this.flushPendingUserItems(chatSessionId);
@@ -160111,6 +160345,8 @@ var init_live_chat = __esm({
             };
           },
           finish: (status) => {
+            for (const receipt of turn.inputReceipts.values()) receipt.abandon();
+            turn.inputReceipts.clear();
             try {
               turn.items?.finish(status === "error" ? "failed" : "completed");
             } catch {
@@ -160172,6 +160408,11 @@ var init_live_chat = __esm({
        * 账本坏掉不影响对话；v3 emit 抛异常也不影响 v2 通路与账本落盘——两条独立通路。
        */
       applyNormalizedEvent(turn, event) {
+        if (event.type === "item" && event.kind === "control" && event.attrs?.code === "input_consumed") {
+          const key = event.attrs.clientMessageKey;
+          if (key) turn.inputReceipts.get(key)?.consume();
+          return;
+        }
         let outcome = null;
         try {
           outcome = turn.items?.apply(event) ?? null;
@@ -160220,6 +160461,7 @@ var init_live_chat = __esm({
             operation: "started",
             itemVersion: outcome.startedVersion,
             ...ord !== void 0 ? { ord } : {},
+            ...outcome.messageId !== null ? { messageId: outcome.messageId } : {},
             offset: 0,
             payload: v3StartedPayload(event.role, event.attrs, itemType, event.kind)
           };
@@ -160253,6 +160495,11 @@ var init_live_chat = __esm({
           // 账本这一次写用掉的那一格钟——**库里那一行的 version 就是它**，快照与增量流同一套版本空间。
           itemVersion: outcome.version,
           ...ord !== void 0 ? { ord } : {},
+          /* 归属：账本写进 `chat_items.message_id` 的那个值，原样带出去（2026-09-11）。
+             此前只有快照带它，于是「面板挂载之后才生出来的 item」在客户端永远没有归属——
+             右侧子会话面板靠它把 DB 详情与实时桶合成一条，对不上号就把同一轮画两遍。
+             `null` 不上 wire（省字节）：客户端合并层本就按「帧不带 ⇒ 保留已有」处理。 */
+          ...outcome.messageId !== null ? { messageId: outcome.messageId } : {},
           ...offset !== void 0 ? { offset } : {},
           ...payload !== void 0 ? { payload } : {}
         };
@@ -160695,7 +160942,7 @@ var init_live_chat = __esm({
         if (turn.recovering) return say({ accepted: false, reason: "recovering" }, { recovering: true });
         const fn = turn.handle.appendInput;
         if (typeof fn !== "function") return say({ accepted: false, reason: "unsupported" });
-        const pendingItemId = !opts?.system && opts?.clientMessageKey ? `oasis-user:${opts.clientMessageKey}` : void 0;
+        const pendingItemId = !opts?.requireConsumptionReceipt && !opts?.system && opts?.clientMessageKey ? `oasis-user:${opts.clientMessageKey}` : void 0;
         const pendingAttachments = opts?.attachments?.map((a) => ({
           name: a.name,
           ...a.blobRef ? { blobRef: a.blobRef } : {},
@@ -160726,17 +160973,75 @@ var init_live_chat = __esm({
             payload: { role: "user" }
           });
         };
+        let confirmed2 = false;
+        let consumedItemId;
+        let receiptPromise;
+        const receiptKey = opts?.requireConsumptionReceipt && !opts.system ? opts.clientMessageKey : void 0;
+        if (opts?.requireConsumptionReceipt && !opts.system && !receiptKey) {
+          return say({ accepted: false, reason: "consumption-unsupported" });
+        }
+        if (receiptKey) {
+          const existing = turn.inputReceipts.get(receiptKey);
+          if (existing) {
+            const consumed = await existing.result;
+            await turn.items?.drain();
+            return consumed && existing.itemId && turn.items?.ordFor(existing.itemId) !== void 0 ? { accepted: true } : { accepted: false, reason: "unconfirmed" };
+          }
+          let resolveReceipt;
+          receiptPromise = new Promise((resolve10) => {
+            resolveReceipt = resolve10;
+          });
+          turn.inputReceipts.set(receiptKey, {
+            get itemId() {
+              return consumedItemId;
+            },
+            result: receiptPromise,
+            consume: () => {
+              if (confirmed2 || turn.status !== "running") return;
+              confirmed2 = true;
+              consumedItemId = this.commitUserInput(turn, text5, opts);
+              resolveReceipt(true);
+            },
+            abandon: () => {
+              resolveReceipt(false);
+            }
+          });
+        }
+        const clearReceipt = () => {
+          if (!receiptKey) return;
+          turn.inputReceipts.get(receiptKey)?.abandon();
+          turn.inputReceipts.delete(receiptKey);
+        };
         let res;
         try {
           res = await fn.call(turn.handle, {
             text: text5,
+            ...receiptKey ? { requireConsumptionReceipt: true } : {},
             ...opts?.clientMessageKey ? { clientMessageKey: opts.clientMessageKey } : {},
             ...opts?.files && Object.keys(opts.files).length ? { files: opts.files } : {},
             ...opts?.binaryFiles && Object.keys(opts.binaryFiles).length ? { binaryFiles: opts.binaryFiles } : {}
           });
         } catch (e) {
+          if (!receiptKey) clearReceipt();
           failPending();
-          return say({ accepted: false, reason: "rejected" }, { err: String(e) });
+          if (confirmed2) await turn.items?.drain();
+          confirmed2 = confirmed2 && !!consumedItemId && turn.items?.ordFor(consumedItemId) !== void 0;
+          return say({ accepted: confirmed2, ...!confirmed2 ? { reason: receiptKey ? "unconfirmed" : "rejected" } : {} }, { err: String(e) });
+        }
+        if (receiptPromise) {
+          const notSent = ["unsupported", "consumption-unsupported", "session-closing", "no-live-turn", "recovering"];
+          if (!confirmed2 && !res.accepted && notSent.includes(res.reason ?? "")) {
+            clearReceipt();
+            failPending();
+            return say(res);
+          }
+          if (!await receiptPromise) {
+            clearReceipt();
+            failPending();
+            return say({ accepted: false, reason: "unconfirmed" });
+          }
+          await turn.items?.drain();
+          return say(!consumedItemId || turn.items?.ordFor(consumedItemId) === void 0 ? { accepted: false, reason: "unconfirmed" } : { accepted: true });
         }
         if (!res.accepted) {
           failPending();
@@ -160747,6 +161052,10 @@ var init_live_chat = __esm({
           failPending();
           return say({ accepted: false, reason: "turn-finished" }, { turnStatus: turn.status, replaced: this.turns.get(chatSessionId) !== turn });
         }
+        this.commitUserInput(turn, text5, opts);
+        return { accepted: true };
+      }
+      commitUserInput(turn, text5, opts) {
         const shown = opts?.displayText ?? text5;
         const userPart = {
           type: "user",
@@ -160755,7 +161064,7 @@ var init_live_chat = __esm({
         };
         const segmentEnd = (() => {
           try {
-            return turn.items?.closeSegmentBeforeUserInput() ?? null;
+            return turn.items?.closeSegmentBeforeUserInput(!!opts?.requireConsumptionReceipt && !!turn.onUserInput) ?? null;
           } catch {
             return null;
           }
@@ -160771,8 +161080,9 @@ var init_live_chat = __esm({
             payload: { code: "segment_end", note: SEGMENT_END_NOTE }
           });
         }
+        let userItemId;
         try {
-          turn.items?.recordUserInput(shown, opts?.attachments, opts?.clientKeys);
+          userItemId = turn.items?.recordUserInput(shown, opts?.attachments, opts?.clientKeys);
         } catch {
         }
         const withSeq = { ...userPart, seq: ++turn.seq };
@@ -160806,7 +161116,7 @@ var init_live_chat = __esm({
           turn.onUserInput?.(shown, opts?.attachments);
         } catch {
         }
-        return { accepted: true };
+        return userItemId;
       }
       /** 反查该会话当前驻留那一轮的 runId（无进行中/grace 轮，或该轮无 runId 时 undefined）。
        *  建单草案 submit 发生在这一轮内：用它给草案盖上「产出轮次」标记，供 friday 重进对话页把每版
@@ -160952,18 +161262,32 @@ var init_chat_attachment_files = __esm({
 });
 
 // ../server/src/domains/chat-sessions/append-now.ts
-async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, attachments) {
+async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, attachments, retainLocallyOnFailure = false) {
   const newId = deps.newId ?? import_node_crypto20.randomUUID;
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  await deps.store.enqueuePendingMessage({
-    id: newId(),
+  if (!deps.store.claimPendingInsert) {
+    return { accepted: false, reason: "queue-unavailable", queued: false, delivered: "", batch: [] };
+  }
+  const { submitted, batch } = await deps.store.claimPendingInsert({
+    id: clientKey ? `append-request:${(0, import_node_crypto20.createHash)("sha256").update(JSON.stringify([chatSessionId, clientKey])).digest("hex")}` : newId(),
     chatSessionId,
     text: text5,
     ...attachments?.length ? { attachments } : {},
     ...clientKey ? { clientKey } : {},
     createdAt: now()
   });
-  const batch = await deps.store.listPendingMessages(chatSessionId);
+  if (!batch.length) {
+    const state = submitted.state ?? "queued";
+    const returned = state === "cancelled" && submitted.stateReason?.startsWith("client-retained:");
+    const reason = returned ? submitted.stateReason.slice("client-retained:".length) : "unconfirmed";
+    return {
+      accepted: state === "delivered",
+      ...state !== "delivered" ? { reason } : {},
+      queued: !returned,
+      delivered: "",
+      batch: [submitted]
+    };
+  }
   const prepared = await buildChatAttachmentFiles(
     batch.flatMap((m2) => m2.attachments ?? []),
     deps.readBlob ?? (async (ref2) => {
@@ -160979,7 +161303,6 @@ async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, atta
   })));
   const batchKey = `append:${chatSessionId}:${batch.map((m2) => m2.id).join(",")}`;
   const ids2 = batch.map((m2) => m2.id);
-  await deps.store.markPendingMessages?.(chatSessionId, ids2, "delivering").catch(() => void 0);
   const clientKeys = batch.map((m2) => m2.clientKey).filter((k2) => !!k2);
   const res = await deps.deliver(merged, batchKey, {
     ...clientKeys.length ? { clientKeys } : {},
@@ -160988,10 +161311,19 @@ async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, atta
     ...displayText !== merged ? { displayText } : {},
     ...attachmentRefs.length ? { attachments: attachmentRefs } : {}
   });
-  const DEFINITELY_NOT_DELIVERED = /* @__PURE__ */ new Set(["unsupported", "no-live-turn", "session-closing", "turn-finished", "recovering"]);
+  const DEFINITELY_NOT_DELIVERED = /* @__PURE__ */ new Set(["unsupported", "no-live-turn", "session-closing", "turn-finished", "recovering", "consumption-unsupported"]);
   const nextState = res.accepted ? "delivered" : DEFINITELY_NOT_DELIVERED.has(res.reason ?? "") ? "queued" : "unconfirmed";
-  await deps.store.markPendingMessages?.(chatSessionId, ids2, nextState, res.reason).catch(() => void 0);
-  return { ...res, queued: true, delivered: merged, batch, ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {} };
+  const returnToClient = retainLocallyOnFailure && !!clientKey && nextState === "queued";
+  if (returnToClient && deps.store.markPendingMessages) {
+    await deps.store.markPendingMessages(chatSessionId, [submitted.id], "cancelled", `client-retained:${res.reason}`);
+    await deps.store.markPendingMessages(chatSessionId, ids2.filter((id) => id !== submitted.id), nextState, res.reason);
+  } else {
+    const transition = deps.store.markPendingMessages?.(chatSessionId, ids2, nextState, res.reason);
+    if (retainLocallyOnFailure) await transition;
+    else await transition?.catch(() => void 0);
+    if (returnToClient) await deps.store.removePendingMessage(chatSessionId, submitted.id);
+  }
+  return { ...res, queued: !returnToClient, delivered: merged, batch, ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {} };
 }
 var import_node_crypto20;
 var init_append_now = __esm({
@@ -195639,7 +195971,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
       out.listDirCode = located.code;
       if (located.location) out.location = located.location;
       out.skipped.push({
-        source: `${DELEGATION_OUTPUTS_DIR}/`,
+        source: `${SESSION_OUTPUTS_DIR}/`,
         code: located.code,
         message: located.message ?? locationFailureMessage(located.code)
       });
@@ -195647,7 +195979,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     }
     out.location = located.location;
   }
-  const listing = await port.listDir(child, DELEGATION_OUTPUTS_DIR).catch((err) => ({
+  const listing = await port.listDir(child, SESSION_OUTPUTS_DIR).catch((err) => ({
     ok: false,
     code: "INTERNAL",
     message: err instanceof Error ? err.message : String(err)
@@ -195657,11 +195989,11 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     if (listing.code === "NOT_FOUND") return out;
     const code2 = listing.code;
     const message = isLocationFailureCode(code2) ? listing.message ?? locationFailureMessage(code2) : listing.message ?? code2;
-    out.skipped.push({ source: `${DELEGATION_OUTPUTS_DIR}/`, code: code2, message });
+    out.skipped.push({ source: `${SESSION_OUTPUTS_DIR}/`, code: code2, message });
     return out;
   }
   out.listDirCode = "OK";
-  const queue = [DELEGATION_OUTPUTS_DIR];
+  const queue = [SESSION_OUTPUTS_DIR];
   const files = [];
   let guard = 0;
   let hitFileCap = false;
@@ -195672,7 +196004,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     }
     guard += 1;
     const dir = queue.shift();
-    const level = dir === DELEGATION_OUTPUTS_DIR ? listing : await port.listDir(child, dir).catch(() => ({ ok: false, code: "INTERNAL" }));
+    const level = dir === SESSION_OUTPUTS_DIR ? listing : await port.listDir(child, dir).catch(() => ({ ok: false, code: "INTERNAL" }));
     if (!level.ok) {
       out.skipped.push({ source: `${dir}/`, code: level.code, message: level.code });
       continue;
@@ -195698,7 +196030,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     });
   }
   for (const file of files) {
-    const relative5 = normalizeRelPath(file.rel.slice(DELEGATION_OUTPUTS_DIR.length + 1));
+    const relative5 = normalizeRelPath(file.rel.slice(SESSION_OUTPUTS_DIR.length + 1));
     if (!relative5) {
       out.skipped.push({ source: file.rel, code: "PATH_REJECTED", message: "\u8DEF\u5F84\u4E0D\u5408\u6CD5\uFF0C\u6CA1\u642C" });
       continue;
@@ -203939,7 +204271,7 @@ async function startOasisServer(opts) {
   const leftWaiterIds = /* @__PURE__ */ new Map();
   const LEFT_WAITER_IDS_MAX_DRAFTS = 512;
   const terminalReviews = /* @__PURE__ */ new Map();
-  const notifyReviewResolved = (draftId, r, resume, storeFor) => {
+  const notifyReviewResolved = (draftId, r, resume, storeFor, companyId) => {
     if (terminalReviews.has(draftId)) return;
     terminalReviews.set(draftId, r);
     if (terminalReviews.size > 512) {
@@ -203959,7 +204291,7 @@ async function startOasisServer(opts) {
     leftWaiterIds.delete(draftId);
     if (resume?.origin) {
       const needsAgentDelivery = resume.kind === "command" && !hadWaiters;
-      void settleAuthorizationStatusLine(resume.origin, r, resume, draftId, needsAgentDelivery, storeFor);
+      void settleAuthorizationStatusLine(resume.origin, r, resume, draftId, needsAgentDelivery, storeFor, companyId);
     }
   };
   const resolveEngine = opts.resolveEngine ?? (async () => ({ kernel: opts.kernel, oplog: opts.oplog, blobs: opts.blobs, ...opts.registry ? { registry: opts.registry } : {} }));
@@ -204037,6 +204369,14 @@ async function startOasisServer(opts) {
     }
     return null;
   };
+  const outputsPartFor = (chatSessionId, companyId) => {
+    const scan2 = opts.sessionOutputsScan;
+    if (!scan2) return void 0;
+    return async () => {
+      const files = await scan2({ chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
+      return files && files.length > 0 ? { type: "outputs", seq: 0, outputs: files } : null;
+    };
+  };
   async function anchorMessageIdFor(origin, storeFor) {
     if (!origin) return void 0;
     const live = liveChat.messageFor(origin);
@@ -204053,7 +204393,7 @@ async function startOasisServer(opts) {
     }
     return void 0;
   }
-  const appendNowThroughQueue2 = async (sid, text5, clientKey, attachments, perCompanyStore) => {
+  const appendNowThroughQueue2 = async (sid, text5, clientKey, attachments, perCompanyStore, retainLocallyOnFailure = false) => {
     if (perCompanyStore === null) {
       throw new Error(
         `appendNowThroughQueue: per-company chat store unresolved (sid=${sid})`
@@ -204067,7 +204407,7 @@ async function startOasisServer(opts) {
       store,
       // ADR-0166 D9.1：附件与正文**同一次**送出——拆开就等于让 agent 拿着「见附件」而
       // 附件不存在的描述去干活。`files` 空时这次调用与从前逐字相同。
-      deliver: (merged, clientMessageKey, extra) => liveChat.append(sid, merged, { clientMessageKey, ...extra }),
+      deliver: (merged, clientMessageKey, extra) => liveChat.append(sid, merged, { clientMessageKey, ...extra, requireConsumptionReceipt: true }),
       // **先查资产柜再查事实柜**——chat 附件是 `uploadChatAttachment` 存进**资产柜**的
       // （serve 那侧 `assets.put`），两个柜是**物理隔离**的（「资产柜与事实柜分开」）。
       // 只查 `opts.blobs` 必然取不到，于是每张图都被报成「附件没能取回来」。
@@ -204082,8 +204422,8 @@ async function startOasisServer(opts) {
         }
         throw new Error(`blob ${blobRef} \u4E24\u4E2A\u67DC\u91CC\u90FD\u6CA1\u6709`);
       }
-    }, clientKey, attachments);
-    return { accepted: r.accepted, ...r.reason ? { reason: r.reason } : {}, queued: true };
+    }, clientKey, attachments, retainLocallyOnFailure);
+    return { accepted: r.accepted, ...r.reason ? { reason: r.reason } : {}, queued: r.queued };
   };
   const GRAPH_EDIT_SUMMARY_MAX = 60;
   const truncateSummary = (s2) => {
@@ -204101,7 +204441,7 @@ async function startOasisServer(opts) {
     const label = ctx.effectLabel || ctx.command || "";
     return approved ? `\u547D\u4EE4\u5DF2\u7531 ${by} \u6279\u51C6\u5E76\u4EE5\u5176\u540D\u4E49\u6267\u884C${label ? `\uFF1A${label}` : ""}\u3002` : `\u547D\u4EE4\u5DF2\u88AB ${by} \u9A73\u56DE${reason ? `\uFF1A${reason}` : ""}\u3002`;
   };
-  const settleAuthorizationStatusLine = async (origin, resolution, ctx, draftId, needsAgentDelivery, storeFor) => {
+  const settleAuthorizationStatusLine = async (origin, resolution, ctx, draftId, needsAgentDelivery, storeFor, companyId) => {
     const store = storeFor ? await storeFor().catch(() => null) : opts.chatSession;
     if (!store) return;
     const session = await store.getSession(origin).catch(() => null);
@@ -204174,10 +204514,12 @@ async function startOasisServer(opts) {
       ...dispatched.supportsLiveProtocol !== void 0 ? { supportsLiveProtocol: dispatched.supportsLiveProtocol } : {},
       done: dispatched.done
     };
+    const resumeOutputsPart = outputsPartFor(origin, companyId);
     runBackgroundAssistantChatTurn({
       chatStore: store,
       chatSessionId: origin,
-      session: bgSession
+      session: bgSession,
+      ...resumeOutputsPart ? { outputsPart: resumeOutputsPart } : {}
     });
     await markDelivered();
   };
@@ -204433,10 +204775,12 @@ async function startOasisServer(opts) {
           ...session.supportsLiveProtocol !== void 0 ? { supportsLiveProtocol: session.supportsLiveProtocol } : {},
           ...session.done ? { done: session.done } : {}
         };
+        const broadcastOutputsPart = outputsPartFor(sessionId, companyId);
         runBackgroundAssistantChatTurn({
           chatStore: store,
           chatSessionId: sessionId,
           session: bgSession,
+          ...broadcastOutputsPart ? { outputsPart: broadcastOutputsPart } : {},
           liveChat,
           liveHandle: {
             runtimeSessionId: session.id,
@@ -205414,7 +205758,8 @@ async function startOasisServer(opts) {
                 draftId,
                 { status: "approved", command, effectLabel: review.command.effectLabel, authorizedBy: actor, receipt },
                 { origin: review.origin, kind: "command", authorizedBy: actor, effectLabel: review.command.effectLabel, command },
-                chatStoreNowOrNull
+                chatStoreNowOrNull,
+                currentCompanyId
               );
               res.writeHead(200, { "content-type": "application/json" }).end(
                 JSON.stringify({ applied: 1, command, artifactId, draftId, draftedBy: review.proposedBy, authorizedBy: actor })
@@ -206240,9 +206585,11 @@ async function startOasisServer(opts) {
           let text5 = "";
           let clientKey;
           let insertAttachments = [];
+          let retainLocallyOnFailure = false;
           try {
             const b2 = JSON.parse(rawBody);
             text5 = String(b2.text ?? "").trim();
+            retainLocallyOnFailure = b2.retainLocallyOnFailure === true;
             if (typeof b2.clientKey === "string" && b2.clientKey) clientKey = b2.clientKey;
             insertAttachments = (Array.isArray(b2.attachments) ? b2.attachments : []).filter((a) => !!a && typeof a === "object" && typeof a["name"] === "string" && (typeof a["text"] === "string" || typeof a["blobRef"] === "string")).map((a) => ({
               name: a["name"],
@@ -206256,7 +206603,7 @@ async function startOasisServer(opts) {
             res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: "EMPTY_TEXT" }));
             return;
           }
-          const result = await appendNowThroughQueue2(sid, text5, clientKey, insertAttachments, perCompanyStore);
+          const result = await appendNowThroughQueue2(sid, text5, clientKey, insertAttachments, perCompanyStore, retainLocallyOnFailure);
           res.writeHead(result.accepted ? 200 : 409, { "content-type": "application/json" }).end(JSON.stringify(result));
           return;
         }
@@ -206600,6 +206947,7 @@ ${composed}`;
                 await checkpointChain.catch(() => void 0);
                 await itemLedger.drain();
                 const projectedContent = itemLedger.projectContent();
+                const chatOutputsPart = outputsPartFor(persistTarget.id, currentCompanyId);
                 await finalizeAssistantRow({
                   chatStore,
                   chatSessionId: persistTarget.id,
@@ -206609,6 +206957,7 @@ ${composed}`;
                   status,
                   ...session.runId ? { runId: session.runId } : {},
                   ...heldTurn ? { turnId: heldTurn.id } : {},
+                  ...chatOutputsPart ? { outputsPart: chatOutputsPart } : {},
                   now: () => finishedAt
                 });
                 await heldTurn?.settle({
@@ -213608,6 +213957,17 @@ var init_dev_store = __esm({
       /** ADR-0166 D6 待发队列（每会话一条，按 seq 升序 = 入队序）。 */
       pending = /* @__PURE__ */ new Map();
       pendingSeq = 0;
+      async claimPendingInsert(m2) {
+        const list2 = this.pending.get(m2.chatSessionId) ?? [];
+        const prior = list2.find((x2) => x2.id === m2.id) ?? list2.find((x2) => m2.clientKey && x2.clientKey === m2.clientKey && (x2.state ?? "queued") === "queued");
+        if (prior) return { submitted: prior, batch: [] };
+        const submitted = { ...m2, state: "queued", stateAt: m2.createdAt, seq: ++this.pendingSeq };
+        const all2 = [...list2, submitted];
+        const batch = all2.filter((x2) => (x2.state ?? "queued") === "queued");
+        this.pending.set(m2.chatSessionId, all2);
+        this.setState(m2.chatSessionId, new Set(batch.map((x2) => x2.id)), "delivering", "append-now");
+        return { submitted, batch };
+      }
       async enqueuePendingMessage(m2) {
         const list2 = this.pending.get(m2.chatSessionId) ?? [];
         if (m2.clientKey) {
@@ -213975,6 +214335,11 @@ var init_dev_store = __esm({
         return r;
       }
       // 待发队列也要落盘——它存在的全部理由就是"别只活在一处内存里"（ADR-0166 D6）。
+      async claimPendingInsert(m2) {
+        const result = await super.claimPendingInsert(m2);
+        this.save();
+        return result;
+      }
       async enqueuePendingMessage(m2) {
         const record8 = await super.enqueuePendingMessage(m2);
         this.save();
@@ -214822,6 +215187,74 @@ var init_company_scoped_registry = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/outputs-scan.ts
+function joinRel(dir, name) {
+  return dir ? `${dir}/${name}` : name;
+}
+async function scanSessionOutputs(bridge, loc, now = Date.now) {
+  const deadline = now() + BUDGET_MS;
+  const out = [];
+  let listCalls = 0;
+  const listDir = (path41) => {
+    listCalls += 1;
+    return bridge.list(loc.nodeId, {
+      workdirKey: loc.workdirKey,
+      runtimeKind: loc.runtimeKind,
+      rtId: loc.rtId,
+      path: path41
+    });
+  };
+  const root = await listDir(SESSION_OUTPUTS_DIR).catch(() => null);
+  if (!root) return null;
+  if (!root.ok) {
+    return root.code === "NOT_FOUND" ? [] : null;
+  }
+  let level = [{ path: SESSION_OUTPUTS_DIR, outcome: root }];
+  for (let depth = 0; depth <= MAX_DEPTH; depth += 1) {
+    const nextDirs = [];
+    for (const { path: dir, outcome } of level) {
+      if (!outcome.ok) continue;
+      for (const entry of outcome.entries) {
+        if (entry.type === "dir") {
+          nextDirs.push(joinRel(dir, entry.name));
+          continue;
+        }
+        if (out.length >= MAX_ENTRIES) continue;
+        out.push({ path: joinRel(dir, entry.name), size: entry.size, mtime: entry.mtime });
+      }
+    }
+    if (nextDirs.length === 0 || depth === MAX_DEPTH) break;
+    if (out.length >= MAX_ENTRIES || listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+    const batch = [];
+    for (const dir of nextDirs) {
+      if (listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+      const outcome = await listDir(dir).catch(() => null);
+      if (outcome) batch.push({ path: dir, outcome });
+    }
+    level = batch;
+  }
+  return out;
+}
+async function settleSessionOutputs(deps) {
+  const scanned = await scanSessionOutputs(deps.bridge, deps.loc, deps.now);
+  if (scanned === null) return null;
+  const previous3 = await deps.readFingerprints(deps.sessionId).catch(() => null);
+  const diff = diffSessionOutputs(scanned, previous3 ?? void 0);
+  await deps.writeFingerprints(deps.sessionId, diff.fingerprints).catch(() => void 0);
+  return diff;
+}
+var MAX_DEPTH, MAX_ENTRIES, MAX_LIST_CALLS, BUDGET_MS;
+var init_outputs_scan = __esm({
+  "../server/src/domains/chat-sessions/outputs-scan.ts"() {
+    "use strict";
+    init_src();
+    MAX_DEPTH = 3;
+    MAX_ENTRIES = 100;
+    MAX_LIST_CALLS = 12;
+    BUDGET_MS = 5e3;
+  }
+});
+
 // ../server/src/org-model-backfill.ts
 function resolveDisplayName(existing, humanActor, accountName) {
   const pick3 = existing?.trim() || humanActor?.name?.trim() || accountName?.trim();
@@ -218446,6 +218879,10 @@ var init_daemon_hub = __esm({
         this.onHandshakeRejected?.(rejection);
         cb(false, code2, message);
       }
+      /** Ask the running session: an upgrade leaves existing sessions alive. */
+      supportsInputConsumptionReceipts(dispatchId) {
+        return this.hasSession(dispatchId) && this.sessionMeta.get(dispatchId)?.supportsInputConsumptionReceipts === true;
+      }
       dispatch(daemonId, msg) {
         const daemon = this.daemons.get(daemonId);
         if (!daemon) return false;
@@ -218515,6 +218952,7 @@ var init_daemon_hub = __esm({
                 nodeId,
                 sessionId: msg.sessionId,
                 connectedAt: Date.now(),
+                supportsInputConsumptionReceipts: msg.supportsInputConsumptionReceipts === true,
                 ...msg.jobArtifactId ? { jobArtifactId: msg.jobArtifactId } : {}
               });
               for (const l of this.sessionConnectListeners) l({ dispatchId, sessionId: msg.sessionId, nodeId });
@@ -221241,11 +221679,11 @@ function aggregateUsageByActor(runs) {
 function weekWindow(now = /* @__PURE__ */ new Date()) {
   return { from: new Date(now.getTime() - 7 * 24 * 60 * 60 * 1e3).toISOString(), to: now.toISOString() };
 }
-async function listWeeklyUsageByActor(trace) {
+async function listWeeklyUsageByActor(trace, artifactIds) {
   if (!trace?.listUsageRuns) return null;
   const { from, to } = weekWindow();
   try {
-    return aggregateUsageByActor(await trace.listUsageRuns({ from, to }));
+    return aggregateUsageByActor(await trace.listUsageRuns({ from, to, ...artifactIds ? { artifactIds: [...artifactIds] } : {} }));
   } catch {
     return null;
   }
@@ -221847,9 +222285,15 @@ function actorsDomain(opts) {
   const revealLimiter = new RevealRateLimiter(revealLimits.perSession, revealLimits.perSessionPerKey);
   const consoleRevealLimits = opts.credentialRevealLimits?.console ?? { perSession: 60, perSessionPerKey: 10 };
   const consoleRevealLimiter = new RevealRateLimiter(consoleRevealLimits.perSession, consoleRevealLimits.perSessionPerKey);
+  async function usageFor(companyId, ctx) {
+    const source = opts.resolveTrace ? await opts.resolveTrace(companyId) : { store: opts.trace?.(), companyScoped: false };
+    const artifactIds = companyId && !source?.companyScoped ? new Set(ctx.getModel?.().artifacts.keys() ?? []) : void 0;
+    return { usage: source?.store, ...artifactIds ? { artifactIds } : {} };
+  }
   return (router) => {
     router.get("/api/actors", async (req) => {
-      const { service } = await resolveCtx(req.auth.companyId);
+      const ctx = await resolveCtx(req.auth.companyId);
+      const { service } = ctx;
       const filter = {};
       const kind = req.query.get("kind");
       const teamId = req.query.get("team_id");
@@ -221861,9 +222305,10 @@ function actorsDomain(opts) {
       const includeDeleted = req.query.get("include_deleted") === "1";
       const items = status || includeDeleted ? all2 : all2.filter((a) => a.kind !== "agent" || !isDeletedActor(a));
       const agentIds = items.filter((a) => a.kind === "agent").map((a) => a.id);
+      const usageSource = await usageFor(req.auth.companyId, ctx).catch(() => ({ usage: void 0, artifactIds: void 0 }));
       const [configs, usageByActor] = await Promise.all([
         service.latestConfigs(agentIds),
-        listWeeklyUsageByActor(opts.trace?.())
+        listWeeklyUsageByActor(usageSource.usage, usageSource.artifactIds)
       ]);
       return {
         status: 200,
@@ -222539,9 +222984,8 @@ function actorsDomain(opts) {
       return {
         status: 200,
         body: await actorStats(req.params.id, {
-          usage: req.auth.companyId && !model ? void 0 : opts.trace?.(),
-          model,
-          ...req.auth.companyId ? { artifactIds: new Set(model?.artifacts.keys() ?? []) } : {}
+          ...await usageFor(req.auth.companyId, ctx),
+          model
         })
       };
     });
@@ -223125,7 +223569,7 @@ function createActorsDomain(opts) {
   return {
     service: defaultCtx.service,
     resolveCtx,
-    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
+    register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
 var import_node_crypto49;
@@ -223300,6 +223744,16 @@ var init_assistant_tier_dispatch = __esm({
 // ../server/src/domains/projects/routes.ts
 function projectsDomain(opts) {
   const svc = async (req) => opts.resolveService ? opts.resolveService(req.auth.companyId) : opts.service;
+  const requireProjectManagePermission = async (req, projectId2, action) => {
+    if (!opts.resolveMemberRole) return;
+    if (isUncategorizedProjectId(projectId2)) return;
+    const project = await (await svc(req)).getProject(projectId2);
+    if (!project) throw new ApiError(404, "NOT_FOUND", `\u6CA1\u6709\u8FD9\u4E2A\u9879\u76EE\uFF1A${projectId2}`);
+    if (project.createdBy && project.createdBy.id === req.auth.actor) return;
+    const role = await opts.resolveMemberRole(req.auth.companyId, req.auth.actor);
+    if (role === "owner" || role === "admin") return;
+    throw new ApiError(403, action.code, `\u4F60\u6CA1\u6709${action.verb}\u8BE5\u9879\u76EE\u7684\u6743\u9650\uFF0C\u8BF7\u8054\u7CFB\u7EC4\u7EC7\u7BA1\u7406\u5458`);
+  };
   return (router) => {
     router.post("/api/projects", async (req) => {
       const body2 = req.body;
@@ -223341,6 +223795,7 @@ function projectsDomain(opts) {
       return { status: 200, body: toApiProject(project) };
     });
     router.patch("/api/projects/:id", async (req) => {
+      await requireProjectManagePermission(req, req.params.id, { verb: "\u7F16\u8F91", code: "PROJECT_EDIT_FORBIDDEN" });
       const body2 = req.body ?? {};
       for (const immutable of ["id", "project_id", "projectId", "createdBy", "created_by", "ownerId", "owner_id"]) {
         if (Object.prototype.hasOwnProperty.call(body2, immutable)) {
@@ -223360,6 +223815,7 @@ function projectsDomain(opts) {
       }
     });
     router.delete("/api/projects/:id", async (req) => {
+      await requireProjectManagePermission(req, req.params.id, { verb: "\u5220\u9664", code: "PROJECT_DELETE_FORBIDDEN" });
       try {
         const result = await (await svc(req)).deleteProject(req.params.id);
         return {
@@ -228356,7 +228812,7 @@ function reasonFromWorkdirCode(code2) {
       return "ERROR";
   }
 }
-function joinRel(dir, name) {
+function joinRel2(dir, name) {
   return dir ? `${dir}/${name}` : name;
 }
 async function collectWorkdirFiles(bridge, loc, now = Date.now) {
@@ -228389,14 +228845,14 @@ async function collectWorkdirFiles(bridge, loc, now = Date.now) {
       if (outcome.truncated) truncated = true;
       for (const entry of outcome.entries) {
         if (entry.type === "dir") {
-          nextDirs.push(joinRel(dir, entry.name));
+          nextDirs.push(joinRel2(dir, entry.name));
           continue;
         }
         if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
           truncated = true;
           continue;
         }
-        const rel = joinRel(dir, entry.name);
+        const rel = joinRel2(dir, entry.name);
         items.push({
           id: `workdir:${rel}`,
           name: entry.name,
@@ -228641,7 +229097,8 @@ function createProjectsDomain(opts) {
     register: projectsDomain({
       service,
       ...opts.resolveCompany ? { resolveService } : {},
-      ...opts.defaultBranchResolver ? { defaultBranchResolver: opts.defaultBranchResolver } : {}
+      ...opts.defaultBranchResolver ? { defaultBranchResolver: opts.defaultBranchResolver } : {},
+      ...opts.resolveMemberRole ? { resolveMemberRole: opts.resolveMemberRole } : {}
     }),
     ...opts.resolveCompany ? { resolveService } : {}
   };
@@ -231088,6 +231545,9 @@ function nodesDomain(deps) {
         const rts = runtimesByNode.get(n.id) ?? [];
         const daemonVersion = daemonVersionById.get(n.id);
         const connection = connectionById.get(n.id);
+        const nodeOffline = !onlineIds.has(n.id);
+        const lastDisconnectedAt = connection?.lastDisconnectedAt !== void 0 ? new Date(connection.lastDisconnectedAt).toISOString() : nodeOffline ? n.lastSeenAt : void 0;
+        const lastReconnectedAt = connection?.lastReconnectedAt !== void 0 ? new Date(connection.lastReconnectedAt).toISOString() : void 0;
         const activeRunCount = deps.activeRunCountOf?.(n.id) ?? 0;
         const updateStatus = reconcileNodeUpdate(n.id, daemonVersion, activeRunCount, healthNow);
         return {
@@ -231101,10 +231561,10 @@ function nodesDomain(deps) {
           ...sourceIpById.get(n.id) ? { sourceIp: sourceIpById.get(n.id) } : {},
           ...n.name ? { name: n.name } : {},
           ...updateStatus ? { updateStatus } : {},
-          ...connection ? {
+          ...lastDisconnectedAt || lastReconnectedAt ? {
             connection: {
-              ...connection.lastDisconnectedAt ? { lastDisconnectedAt: new Date(connection.lastDisconnectedAt).toISOString() } : {},
-              ...connection.lastReconnectedAt ? { lastReconnectedAt: new Date(connection.lastReconnectedAt).toISOString() } : {}
+              ...lastDisconnectedAt ? { lastDisconnectedAt } : {},
+              ...lastReconnectedAt ? { lastReconnectedAt } : {}
             }
           } : {},
           ...deps.nodeHealth ? {
@@ -239294,6 +239754,9 @@ function routeToSession(hub, nodeId, dispatchId, msg) {
 function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
   const unknownIfInterrupting = input.interrupt ? { interrupt: "unknown" } : {};
   if (entry.exited) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
+  if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
+    return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
+  }
   const requestId = (0, import_node_crypto65.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
@@ -239301,10 +239764,10 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     const timer = setTimeout(() => {
       const i = entry.appendWaiters.findIndex((w2) => w2.timer === timer);
       if (i >= 0) entry.appendWaiters.splice(i, 1);
-      resolve10({ accepted: false, reason: "unsupported", ...unknownIfInterrupting });
+      resolve10({ accepted: false, reason: input.requireConsumptionReceipt ? "unconfirmed" : "unsupported", ...unknownIfInterrupting });
     }, timeoutMs);
     timer.unref?.();
-    entry.appendWaiters.push({ requestId, resolve: resolve10, timer });
+    entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve10, timer });
   });
 }
 var import_node_crypto65, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
@@ -239451,7 +239914,7 @@ var init_daemon_adapter = __esm({
         entry.exited = info;
         for (const w2 of entry.appendWaiters.splice(0)) {
           clearTimeout(w2.timer);
-          w2.resolve({ accepted: false, reason: "session-closing" });
+          w2.resolve({ accepted: false, reason: w2.requireConsumptionReceipt ? "unconfirmed" : "session-closing" });
         }
         if (info.reason === "server-unreachable") this.health?.recordUnreachable(entry.nodeId, info.reason);
         else this.health?.recordReachable(entry.nodeId);
@@ -247505,6 +247968,7 @@ var init_postgres_chat_sessions = __esm({
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS escalation_id text`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS model text`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS visibility text`);
+        await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS outputs_fingerprints jsonb`);
         await pool.query(`
       WITH ranked AS (
         SELECT id, row_number() OVER (PARTITION BY session_id ORDER BY seq, created_at, id) AS rn
@@ -247735,6 +248199,23 @@ var init_postgres_chat_sessions = __esm({
           args
         );
       }
+      /**
+       * `outputs/` 跨轮指纹（2026-09-11 产出卡）。整表覆盖，不做增量合并——判据的真源永远是
+       * 最近一次扫描看到的现场；合并会让「文件被删掉」这件事永远留在表里。
+       */
+      async readOutputFingerprints(sessionId) {
+        const r = await this.pool.query(
+          `SELECT outputs_fingerprints FROM ${this.s}.chat_sessions WHERE id = $1 AND company_id = $2`,
+          [sessionId, this.companyId]
+        );
+        return r.rows[0]?.outputs_fingerprints ?? null;
+      }
+      async writeOutputFingerprints(sessionId, fingerprints) {
+        await this.pool.query(
+          `UPDATE ${this.s}.chat_sessions SET outputs_fingerprints = $1::jsonb WHERE id = $2 AND company_id = $3`,
+          [JSON.stringify(fingerprints), sessionId, this.companyId]
+        );
+      }
       /** 删项目时把本公司里绑到它的会话回落成「不指定项目」。会话一条都不删，只清 project_id。 */
       async clearProjectBinding(projectId2) {
         if (!projectId2) return 0;
@@ -248137,6 +248618,42 @@ var init_postgres_chat_sessions = __esm({
         return r.rows.map(rowToMessage);
       }
       // ── ADR-0166 D6 待发队列 ─────────────────────────────────────────────────
+      async claimPendingInsert(m2) {
+        const client = await this.pool.connect();
+        try {
+          await client.query("BEGIN");
+          const scope = await client.query(`SELECT id FROM ${this.s}.chat_sessions WHERE id=$1 AND company_id=$2 FOR UPDATE`, [m2.chatSessionId, this.companyId]);
+          if (!scope.rows.length) throw new ChatCompanyScopeError(this.companyId, m2.chatSessionId);
+          const ins = await client.query(
+            `INSERT INTO ${this.s}.chat_pending_messages (id, chat_session_id, text, attachments, client_key, created_at, flavour)
+         VALUES ($1,$2,$3,$4,$5,$6,$7) ON CONFLICT DO NOTHING RETURNING *`,
+            [m2.id, m2.chatSessionId, m2.text, m2.attachments ? JSON.stringify(m2.attachments) : null, m2.clientKey ?? null, m2.createdAt, m2.flavour ?? "user"]
+          );
+          if (!ins.rows.length) {
+            const prior = await client.query(
+              `SELECT * FROM ${this.s}.chat_pending_messages WHERE chat_session_id=$1
+           AND (id=$2 OR (client_key=$3 AND state='queued')) ORDER BY (id=$2) DESC LIMIT 1`,
+              [m2.chatSessionId, m2.id, m2.clientKey ?? null]
+            );
+            if (!prior.rows[0]) throw new Error("claimPendingInsert: conflicting submission unavailable");
+            await client.query("COMMIT");
+            return { submitted: rowToPending(prior.rows[0]), batch: [] };
+          }
+          const claimed = await client.query(
+            `UPDATE ${this.s}.chat_pending_messages SET state='delivering', state_at=now(), state_reason='append-now'
+         WHERE chat_session_id=$1 AND state='queued' RETURNING *`,
+            [m2.chatSessionId]
+          );
+          await client.query("COMMIT");
+          return { submitted: rowToPending(ins.rows[0]), batch: claimed.rows.map(rowToPending).sort((a, b2) => a.seq - b2.seq) };
+        } catch (error2) {
+          await client.query("ROLLBACK").catch(() => {
+          });
+          throw error2;
+        } finally {
+          client.release();
+        }
+      }
       async enqueuePendingMessage(m2) {
         await this.assertSessionInScope(m2.chatSessionId);
         const initialState = m2.state;
@@ -253339,6 +253856,17 @@ var init_cutover_aware_dispatches = __esm({
         if (row.state === "frozen") throw new BundleFrozenError("dispatch");
         return this.o.cutover.readsCompanySchema(row) ? this.o.owned : this.o.legacy;
       }
+      /**
+       * 这家公司的派发台账当前**物理落在哪**：切走了就是它自己的引擎 schema，没切走就是那个
+       * 所有未切公司共用的 legacy 台账。
+       *
+       * 给 {@link FanOutDispatchLedger} 去重用。判据**不在调用方重算**——就是 {@link pick}
+       * 那一条（`cutover.get` + `readsCompanySchema`）。与 `CutoverAwareTraceStore.storageKey` 同构。
+       */
+      async storageKey() {
+        const row = await this.o.cutover.get(this.o.companyId, "dispatch");
+        return this.o.cutover.readsCompanySchema(row) ? `owned:${this.o.companyId}` : "legacy";
+      }
       async insertOpen(rec) {
         return (await this.pickWritable()).insertOpen(rec);
       }
@@ -253374,11 +253902,48 @@ var init_cutover_aware_dispatches = __esm({
       constructor(o) {
         this.o = o;
       }
-      async each(op, fn) {
+      /**
+       * 本次要作用的物理落点清单——**同一个台账只出现一次**。
+       *
+       * 为什么必须去重：`dispatch` 是按 (公司, bundle) 逐个切的，没切走的公司**全部共用同一个
+       * legacy 台账**（读写同一张 `public.dispatches`）。此前 `each` 直接按公司逐家来，于是同一张
+       * 表被访问 N 次（N = 未切走的公司数）：
+       *
+       *   - **纯读直接出重复行**（`listOpen` / `listByWorkorder` / `findOpenByTarget`）。
+       *     2026-09-11 v2 生产实证（`ws:wo-9f4652cd`）：35 家公司、其中 33 家 dispatch 未切走，
+       *     `listByWorkorder` 返回 33 份同一条派发，动态卡「执行轨迹」抽屉里同一轮 attempt
+       *     就出现 33 次（`attempts` 由它喂，见 server 的 `activity-trace.ts`）。
+       *   - 写侧**没有被放大**，但原因是运气好而不是设计：`markStarted` / `close` 是同值 UPDATE；
+       *     `closeStaleNeverStarted` / `closeOpenByTarget` 的 WHERE 带 `ended_at IS NULL`，
+       *     第一遍改完第二遍就匹配不上，返回 0，`reduce` 出来仍是真实值。
+       *   - 无论读写，同一条 SQL 都实打实打了 N 遍。
+       *
+       * 去重键由台账自己报，不在这里按 cutover 状态重算（见 `storageKey` 的注释）。也不能按
+       * `ledgerFor` 返回的对象做身份去重：每家各有一个 `CutoverAwareDispatchStore` 包装实例，
+       * N 个不同对象包着同一个 legacy 台账。
+       */
+      async targets(op) {
         const out = [];
+        const seen = /* @__PURE__ */ new Set();
         for (const cid of await this.o.listCompanies()) {
           try {
-            out.push(await fn(await this.o.ledgerFor(cid)));
+            if (this.o.storageKeyFor) {
+              const key = await this.o.storageKeyFor(cid);
+              if (seen.has(key)) continue;
+              seen.add(key);
+            }
+            out.push({ cid, ledger: await this.o.ledgerFor(cid) });
+          } catch (err) {
+            this.o.onError?.(cid, op, err);
+          }
+        }
+        return out;
+      }
+      async each(op, fn) {
+        const out = [];
+        for (const { cid, ledger } of await this.targets(op)) {
+          try {
+            out.push(await fn(ledger));
           } catch (err) {
             this.o.onError?.(cid, op, err);
           }
@@ -253505,9 +254070,19 @@ var init_cutover_aware_trace = __esm({
       constructor(o) {
         this.o = o;
       }
-      async pick() {
+      /** Resolve store and isolation together, from one cutover snapshot. Read-only consumers
+       * must not infer company isolation merely from having a companyId. */
+      async readTarget() {
         const row = await this.o.cutover.get(this.o.companyId, "trace");
-        return this.o.cutover.readsCompanySchema(row) ? this.o.owned : this.o.legacy;
+        const companyScoped = this.o.cutover.readsCompanySchema(row);
+        return { store: companyScoped ? this.o.owned : this.o.legacy, companyScoped };
+      }
+      /** Expose only usage reads: callers cannot bypass the frozen-write fence. */
+      async resolveUsageReadTarget() {
+        return this.readTarget();
+      }
+      async pick() {
+        return (await this.readTarget()).store;
       }
       async pickWritable() {
         const row = await this.o.cutover.get(this.o.companyId, "trace");
@@ -257791,6 +258366,7 @@ var init_src11 = __esm({
     init_tenancy_move_verify();
     init_company_scoped_registry();
     init_session_workdir();
+    init_outputs_scan();
     init_org_model_backfill();
     init_types_admin();
     init_roles_admin();
@@ -258200,6 +258776,13 @@ init_src11();
 init_src();
 var BRAINSTORM_LEGACY_LINE = "\u8BF7\u76F4\u63A5\u56DE\u7B54\u7528\u6237\u95EE\u9898\u3002\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539 artifact\u3002";
 var BRAINSTORM_ARTIFACT_GUARD = "\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539 artifact\u3002";
+var OUTPUTS_CONVENTION = [
+  "## \u4EA7\u51FA\u653E\u54EA",
+  "",
+  "\u8981\u7ED9\u7528\u6237\u770B\u7684\u6210\u54C1\u6587\u4EF6\uFF0C**\u653E\u8FDB\u5DE5\u4F5C\u76EE\u5F55\u4E0B\u7684 `outputs/`**\uFF08\u53EF\u4EE5\u6709\u5B50\u76EE\u5F55\uFF0C\u7ED3\u6784\u81EA\u5DF1\u5B9A\uFF09\u3002",
+  "\u53EA\u6709\u8FD9\u4E2A\u76EE\u5F55\u91CC\u7684\u6587\u4EF6\u4F1A\u5728\u5BF9\u8BDD\u91CC\u663E\u793A\u6210\u53EF\u70B9\u5F00\u7684\u6587\u4EF6\u5361\u7247\uFF1B\u5199\u5728\u522B\u5904\u7684\u7528\u6237\u770B\u4E0D\u89C1\u3002",
+  "\u4E2D\u95F4\u4EA7\u7269\u3001\u4E34\u65F6\u811A\u672C\u3001\u8349\u7A3F\u4E0D\u8981\u653E\u8FD9\u91CC\u2014\u2014\u653E\u8FDB\u53BB\u5C31\u4F1A\u6446\u5230\u7528\u6237\u9762\u524D\u3002"
+].join("\n");
 function buildChatTaskHeader(input) {
   if (input.kind === "isolated-knowledge") {
     return {
@@ -258220,7 +258803,9 @@ function buildChatTaskHeader(input) {
         `your_actor_id: ${input.actorId}`,
         `workspace: ${input.workspace}`,
         "",
-        CONVERSATIONAL_MANAGER_BODY
+        CONVERSATIONAL_MANAGER_BODY,
+        "",
+        OUTPUTS_CONVENTION
       ]
     };
   }
@@ -258232,7 +258817,9 @@ function buildChatTaskHeader(input) {
       input.sessionLine,
       `your_actor_id: ${input.actorId}`,
       "",
-      routed ? BRAINSTORM_ARTIFACT_GUARD : BRAINSTORM_LEGACY_LINE
+      routed ? BRAINSTORM_ARTIFACT_GUARD : BRAINSTORM_LEGACY_LINE,
+      // 子会话那一段由 EXPERT_DELEGATION_SYSTEM_PROMPT 讲，这里不重复（见 OUTPUTS_CONVENTION 注释）。
+      ...input.delegatedChildTurn ? [] : ["", OUTPUTS_CONVENTION]
     ],
     ...routed ? { routingSystemPrompt: EXECUTION_ROUTING_BODY } : {}
   };
@@ -259407,6 +259994,12 @@ async function startServe(opts) {
     kernel: defaultCompanyKernel,
     blobs: assets,
     trace: () => traceStoreForActors,
+    // Same current-company ledger as chat/dispatch writes (PR #1223). Resolve the
+    // physical read target and its isolation together; never treat legacy as owned.
+    resolveTrace: async (cid) => {
+      const store = await traceStoreFor(cid);
+      return store instanceof CutoverAwareTraceStore ? store.resolveUsageReadTarget() : { store, companyScoped: !pgPool };
+    },
     audit: registryAudit,
     // ADR 凭据保险库 §4.5/§4.7 / ADR 0125：reveal 判权的项目解析 + 凭据读取审计读写。
     resolveDispatchScope: resolveDispatchScope2,
@@ -259595,6 +260188,14 @@ async function startServe(opts) {
     actorDirectory: registryStore,
     // 与 collab 同源；闭包避开下方 listCompanyMembers 声明的 TDZ，实际请求时才读取。
     listMembers: (companyId) => listCompanyMembers(companyId),
+    // 改/删项目的门禁判据之一（另一半是项目创建人）——见 domains/projects/routes.ts 的
+    // `requireProjectManagePermission`。同样用闭包避开 listCompanyMembers 的 TDZ。
+    // 成员表按 company_id 有索引、量级几十行，与 `listMembers` 同一次读的成本量级；
+    // 只在 PATCH/DELETE 这两个低频写端点上调，不在任何读热路径上。
+    resolveMemberRole: async (companyId, actorId) => {
+      const members = await listCompanyMembers(companyId);
+      return members.find((m2) => m2.actorId === actorId)?.role;
+    },
     resolveActorContext: (actorId) => buildActorContext(actors.service, actorId),
     defaultBranchResolver,
     // 展示：GET content-locations 给 git 仓补 resolvedDefaultBranch
@@ -260611,6 +261212,15 @@ async function startServe(opts) {
     // 只扫 active 的公司：停用公司的台账不该再被兜底扫改写（与本文件其它按公司扇出的地方同口径）。
     listCompanies: async () => (await controlPlaneStore.listCompanies()).filter((c) => c.status === "active").map((c) => c.id),
     ledgerFor: (cid) => dispatchLedgerFor(cid),
+    /**
+     * 去重键：`dispatch` 未切走的公司全部共用同一张 legacy 台账，扇出只该作用一次。
+     * 由台账自己报落点，这里不按 cutover 状态重算（见 FanOutDispatchLedger.targets 的注释）。
+     * 非 PG / 非 cutover-aware 的路径没有这个方法 ⇒ 退回按公司逐家来，行为不变。
+     */
+    storageKeyFor: async (cid) => {
+      const l = await dispatchLedgerFor(cid);
+      return typeof l.storageKey === "function" ? l.storageKey() : cid;
+    },
     onError: (cid, op, err) => console.warn(`[dispatch-ledger] ${cid} \u7684 ${op} \u5931\u8D25\uFF08\u5176\u4F59\u516C\u53F8\u7EE7\u7EED\uFF09\uFF1A${String(err)}`)
   }) : dispatchLedger;
   const companyRegistryFor = async (companyId) => pgPool ? (await openCompanyPlane(companyId)).overlay : scopedRegistryFor(companyId);
@@ -261408,6 +262018,39 @@ async function startServe(opts) {
     // 三个方法的组合规则住在 `createDelegationWorkdirPort`（`@oasis/server`）——评审
     // wo:acfee725 blocker ② 回归防线：**serve.ts 与单测走同一处**，那样「装配层退回全局 binding」
     // 这类事故在单测里就能被复现。绝不许在这里再写一份。
+    /**
+     * 会话产出扫描（2026-09-11 产出卡）：轮次收尾扫这条会话的 `outputs/`，交出「这一轮变了哪些」。
+     *
+     * 复用 `delegationWorkdirLocator`（与派发、回流、chat 域**同一个 binding resolver 实例**）——
+     * 委派回程读的就是子会话的 `outputs/`，主会话这条只是把同一套读口用到了自己身上。
+     *
+     * 三处 fail-closed，都返回 `null`（= 这一轮没有产出卡），一处都不猜：
+     *  · 桥还没建好 / 会话没绑定 / 节点离线 → 拿不到工作区；
+     *  · store 没有指纹方法（老 store / 文件态装配）→ 没地方记「上一轮长什么样」，
+     *    硬扫会把整个 `outputs/` 每轮都当成新增，一口气刷几十张卡；
+     *  · 解析不出公司 → **绝不回落默认公司**（否则会去别家公司的库里读写指纹）。
+     */
+    sessionOutputsScan: async ({ chatSessionId, companyId }) => {
+      const bridge = workdirBridge;
+      if (!bridge) return null;
+      const store = chatStoreRouter ? await chatStoreFor(companyId).catch(() => null) : chatSessionStore;
+      const read = store?.readOutputFingerprints?.bind(store);
+      const write = store?.writeOutputFingerprints?.bind(store);
+      if (!read || !write) return null;
+      const located = await locateSessionWorkdir(delegationWorkdirLocator, {
+        chatSessionId,
+        ...companyId !== void 0 ? { companyId } : {}
+      });
+      if (!located.ok) return null;
+      const diff = await settleSessionOutputs({
+        bridge,
+        loc: located.loc,
+        sessionId: chatSessionId,
+        readFingerprints: read,
+        writeFingerprints: write
+      }).catch(() => null);
+      return diff?.changed ?? null;
+    },
     delegationWorkdir: createDelegationWorkdirPort({
       locator: delegationWorkdirLocator,
       // 桥在 hub 建好后（本函数尾部）才赋值 → getter 每次调用时读最新值；早于此处的构造时 `workdirBridge`
@@ -265093,6 +265736,7 @@ async function runSession(dispatchId, job, deps) {
     const cancelledBeforeStart = deps.wasCancelled?.() ?? false;
     const normalizer = new ProviderStreamNormalizer({
       providerName: job.binding?.runtimeKind ?? "runtime",
+      hasLiveProtocol: handle.supportsLiveProtocol === true,
       fallbackTurnId: `oasis-turn:${handle.id}`,
       emit: (event) => deps.sink.stream({ type: "session_normalized_event", dispatchId, event })
     });
@@ -265262,7 +265906,8 @@ var SessionProcessState = class {
         // 只报 dispatchId 的话 serve 重启后它认不出这是条活会话，会当成野进程 evict 掉。
         ...this.spec.job.artifactId ? { jobArtifactId: this.spec.job.artifactId } : {},
         // ADR 0300 D2：自报支持帧号；新服务端据此回带 ackSeq 的 hello-ack，届时才把 serverSupportsDedup 置真。
-        supportsFrameSeq: true
+        supportsFrameSeq: true,
+        supportsInputConsumptionReceipts: true
       });
       const toResend = this.serverSupportsDedup ? this.outbox : this.outbox.filter(isKeyFrame);
       for (const m2 of toResend) this.rawSend(m2);
@@ -272184,7 +272829,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.18" : "dev";
+var PKG_VERSION = true ? "2.2.20" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;