oasis_test_v2 2.2.19 → 2.2.21

package/dist/index.js

@@ -243,7 +243,7 @@ function rankMemories(items, terms) {
     (a, b2) => b2.score - a.score || b2.accessedAt.localeCompare(a.accessedAt) || a.memId.localeCompare(b2.memId)
   );
 }
-var ActorMemoryNotFoundError, ActorMemoryVersionConflictError, MEMORY_CONTENT_MAX_CHARS, MEMORY_KEYWORDS_MAX, MEMORY_KEYWORD_MAX_CHARS, MEMORY_PER_ACTOR_MAX, MEMORY_DIGEST_CHARS, MEMORY_INJECT_MAX, MEMORY_KEYWORD_WEIGHT, MEMORY_QUERY_TERMS_MAX, MEMORY_READ_MAX_IDS, MEMORY_NGRAM_SCAN_MAX_CHARS, CJK_RE, ASCII_WORD_RE;
+var ActorMemoryNotFoundError, ActorMemoryVersionConflictError, MEMORY_CONTENT_MAX_CHARS, MEMORY_KEYWORDS_MAX, MEMORY_KEYWORD_MAX_CHARS, MEMORY_PER_ACTOR_MAX, MEMORY_DIGEST_CHARS, MEMORY_INJECT_DIGEST_CHARS, MEMORY_INJECT_MAX, MEMORY_KEYWORD_WEIGHT, MEMORY_QUERY_TERMS_MAX, MEMORY_READ_MAX_IDS, MEMORY_NGRAM_SCAN_MAX_CHARS, CJK_RE, ASCII_WORD_RE;
 var init_actor_memory = __esm({
   "../contract/src/actor-memory.ts"() {
     "use strict";
@@ -268,7 +268,8 @@ var init_actor_memory = __esm({
     MEMORY_KEYWORDS_MAX = 16;
     MEMORY_KEYWORD_MAX_CHARS = 32;
     MEMORY_PER_ACTOR_MAX = 500;
-    MEMORY_DIGEST_CHARS = 80;
+    MEMORY_DIGEST_CHARS = 140;
+    MEMORY_INJECT_DIGEST_CHARS = 80;
     MEMORY_INJECT_MAX = 30;
     MEMORY_KEYWORD_WEIGHT = 3;
     MEMORY_QUERY_TERMS_MAX = 32;
@@ -1219,6 +1220,35 @@ var init_chat = __esm({
   }
 });
 
+// ../contract/src/session-outputs.ts
+function diffSessionOutputs(scanned, previous3) {
+  const prev = previous3 ?? {};
+  const changed = [];
+  const fingerprints = {};
+  for (const entry of [...scanned].sort((a, b2) => a.path.localeCompare(b2.path))) {
+    const { path: path41, size, mtime } = entry;
+    if (!path41) continue;
+    const usable = typeof size === "number" && Number.isFinite(size) && typeof mtime === "string" && mtime !== "";
+    if (usable) fingerprints[path41] = { size, mtime };
+    const before = prev[path41];
+    const unchanged = usable && before !== void 0 && before.size === size && before.mtime === mtime;
+    if (unchanged) continue;
+    changed.push({ path: path41, name: basenameOf(path41), size: size ?? null, mtime: mtime ?? null });
+  }
+  return { changed, fingerprints };
+}
+function basenameOf(path41) {
+  const i = path41.lastIndexOf("/");
+  return i >= 0 ? path41.slice(i + 1) : path41;
+}
+var SESSION_OUTPUTS_DIR;
+var init_session_outputs = __esm({
+  "../contract/src/session-outputs.ts"() {
+    "use strict";
+    SESSION_OUTPUTS_DIR = "outputs";
+  }
+});
+
 // ../contract/src/chat-session.ts
 function supportsChatModelOverride(runtimeKind) {
   return !!runtimeKind && CHAT_MODEL_OVERRIDE_RUNTIMES.includes(runtimeKind);
@@ -1409,10 +1439,11 @@ function touchAnchorMessageId(messageId) {
   const hash2 = messageId.indexOf("#");
   return hash2 >= 0 ? messageId.slice(0, hash2) : messageId;
 }
-var DelegationLabelConflictError, DELEGATION_FILE_LIMITS, DELEGATION_INBOUND_DIR, DELEGATION_OUTBOUND_DIR, DELEGATION_OUTPUTS_DIR, DELEGATION_RETURN_RECENT_ROUNDS;
+var DelegationLabelConflictError, DELEGATION_FILE_LIMITS, DELEGATION_INBOUND_DIR, DELEGATION_OUTBOUND_DIR, DELEGATION_RETURN_RECENT_ROUNDS;
 var init_delegation = __esm({
   "../contract/src/delegation.ts"() {
     "use strict";
+    init_session_outputs();
     DelegationLabelConflictError = class extends Error {
       constructor(parentSessionId, label) {
         super(`delegation label conflict in parent session: parent=${parentSessionId} label=${label ?? "<null>"}`);
@@ -1431,7 +1462,6 @@ var init_delegation = __esm({
     };
     DELEGATION_INBOUND_DIR = "inputs/attachments";
     DELEGATION_OUTBOUND_DIR = "delegations";
-    DELEGATION_OUTPUTS_DIR = "outputs";
     DELEGATION_RETURN_RECENT_ROUNDS = 3;
   }
 });
@@ -1452,6 +1482,8 @@ var init_delegation_prompts = __esm({
       "## \u5DE5\u4F5C\u533A\u7EA6\u5B9A",
       "",
       "- **\u4EA4\u4ED8\u7269\u653E `outputs/`**\uFF1A\u4F60\u8981\u4EA4\u56DE\u53BB\u7684\u6587\u4EF6\u653E\u5728\u8FD9\u4E2A\u76EE\u5F55\u4E0B\uFF0C\u4FDD\u7559\u4F60\u81EA\u5DF1\u7684\u5B50\u76EE\u5F55\u7ED3\u6784\u3002",
+      "  \u8FD9\u91CC\u7684\u6587\u4EF6\u65E2\u4F1A\u4EA4\u56DE\u534F\u8C03\u8005\uFF0C\u4E5F\u4F1A\u5728**\u4F60\u8FD9\u6761\u5B50\u4F1A\u8BDD\u7684\u9875\u9762\u4E0A**\u663E\u793A\u6210\u53EF\u70B9\u5F00\u7684\u6587\u4EF6\u5361\u7247\uFF1B",
+      "  \u4E2D\u95F4\u4EA7\u7269\u548C\u8349\u7A3F\u522B\u653E\u8FD9\u513F\u3002",
       `- \`${PARENT_CONVERSATION_PATH}\` \u5982\u679C\u5B58\u5728\uFF0C\u662F\u4E3B\u4F1A\u8BDD\u7684\u5BF9\u8BDD\u5FEB\u7167\uFF0C\u53EF\u4EE5\u67E5\u9605\u3002`,
       "  **\u5B83\u4E0D\u4FDD\u8BC1\u5B58\u5728**\uFF08\u4E3B\u4F1A\u8BDD\u6CA1\u6709\u53EF\u8F6C\u50A8\u7684\u5386\u53F2\u65F6\u5C31\u6CA1\u6709\u8FD9\u4E2A\u6587\u4EF6\uFF09\uFF0C\u522B\u628A\u5B83\u5F53\u524D\u63D0\u3002",
       "- \u534F\u8C03\u8005\u968F\u59D4\u6D3E\u5E26\u8FC7\u6765\u7684\u6587\u4EF6\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u4EFB\u52A1\u4E66\u91CC\u4F1A\u70B9\u540D\u3002",
@@ -1658,6 +1690,7 @@ var init_src = __esm({
     init_playbook();
     init_experiments();
     init_chat();
+    init_session_outputs();
     init_chat_session();
     init_chat_session();
     init_live_protocol();
@@ -4049,7 +4082,8 @@ var init_model = __esm({
     BUSINESS_HANDOFF_POLICY_FIELD = "businessHandoffPolicy";
     BUSINESS_HANDOFF_POLICY_EXEMPT = "exempt";
     DEFAULT_CONFIG = {
-      maxRetries: 3
+      maxRetries: 3,
+      maxStagnantCheckpoints: 3
     };
     deriveWorkId = (nodeId, version2) => `wk:${nodeId}:${version2}`;
     deriveReviewId = (workId, reviewer, group) => `rv:${workId}:${reviewer}:${group}`;
@@ -4057,6 +4091,101 @@ var init_model = __esm({
   }
 });
 
+// ../engine/src/closure-gate.ts
+function closureSlotOfFacts(facts) {
+  const report = facts.liveClosureReport();
+  if (report) return { kind: "closure-report", id: report.id };
+  const business = facts.liveBusinessNodes();
+  if (business.length === 1) return { kind: "sole-artifact", id: business[0].id };
+  if (business.length === 0) return { kind: "empty" };
+  return { kind: "missing", businessCount: business.length };
+}
+function humanGateActorsOfFacts(facts, artifactId) {
+  const slot = closureSlotOfFacts(facts);
+  if (slot.kind !== "closure-report" && slot.kind !== "sole-artifact") return [];
+  if (slot.id !== artifactId) return [];
+  const owner = facts.humanOwner();
+  return owner === null ? [] : [owner];
+}
+function closureReviewGroup(actor) {
+  return `closure:${actor}`;
+}
+function closureReviewerSpecs(closureActors) {
+  return closureActors.map((actor) => ({
+    reviewerActorId: actor,
+    reviewGroup: closureReviewGroup(actor),
+    source: "closure"
+  }));
+}
+function engineClosureFacts(state) {
+  return {
+    liveBusinessNodes: () => state.liveNodes().filter((n) => n.type !== BRIEF_TYPE && n.type !== DELIVERY_SUMMARY_TYPE).map((n) => ({ id: n.id, type: n.type })),
+    liveClosureReport: () => {
+      const r = state.liveNodes().find((n) => n.type === DELIVERY_SUMMARY_TYPE);
+      return r ? { id: r.id, type: r.type } : null;
+    },
+    humanOwner: () => {
+      const brief = state.liveNodes().find((n) => n.type === BRIEF_TYPE);
+      const owner = brief?.assigneeActorId;
+      if (!owner || !owner.startsWith(HUMAN_ACTOR_PREFIX)) return null;
+      return owner;
+    }
+  };
+}
+function engineWorkorderHumanOwner(state) {
+  return engineClosureFacts(state).humanOwner();
+}
+function engineHumanGateActors(state, nodeId) {
+  return humanGateActorsOfFacts(engineClosureFacts(state), nodeId);
+}
+var DELIVERY_SUMMARY_TYPE, BRIEF_TYPE, HUMAN_ACTOR_PREFIX;
+var init_closure_gate = __esm({
+  "../engine/src/closure-gate.ts"() {
+    "use strict";
+    DELIVERY_SUMMARY_TYPE = "delivery-summary";
+    BRIEF_TYPE = "brief";
+    HUMAN_ACTOR_PREFIX = "actor:human:";
+  }
+});
+
+// ../engine/src/continuation.ts
+function continuationApprover(state) {
+  const owner = engineWorkorderHumanOwner(state);
+  if (owner || state.liveNodes().some((node2) => node2.type === "brief")) return owner;
+  return state.workorder.ownerActorId.startsWith("actor:human:") ? state.workorder.ownerActorId : null;
+}
+function continuationUsedRounds(state, nodeId) {
+  const withOutput = new Set(state.artifactsOfNode(nodeId).map((a) => a.workId));
+  return state.mainWorksOf(nodeId).filter((w2) => w2.assigneeActorId.startsWith("actor:agent:") && (w2.startedAt || w2.sessionRef || w2.lastActivityAt || withOutput.has(w2.id))).length;
+}
+function continuationAwaitingStart(state, work) {
+  return work.status === "running" && !work.endedAt && !work.deadAt && !work.cancelledAt && !work.startedAt && !work.sessionRef && !work.lastActivityAt && state.artifactsOf(work.id).length === 0;
+}
+function continuationExhausted(state, node2) {
+  const budget = node2.continuationBudget;
+  return !!budget && (budget.request?.decision === "denied" || budget.request?.decision === "pending" || continuationUsedRounds(state, node2.id) >= budget.authorizedRounds);
+}
+function continuationRequestId(node2) {
+  return `continuation:${node2.id}:${node2.continuationBudget.requestGeneration + 1}`;
+}
+function continuationSummary(state, node2, rounds) {
+  const used = continuationUsedRounds(state, node2.id);
+  const latest = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
+  const output = node2.latestProposedWorkId ? state.work(node2.latestProposedWorkId) : latest;
+  const files = output ? state.artifactsOf(output.id) : [];
+  return `\u300A${node2.title}\u300B\u5C1A\u672A\u5B8C\u6210\uFF0C\u5DF2\u8FBE\u5230\u81EA\u52A8\u6D3E\u53D1\u4E0A\u9650\u3002\u7D2F\u8BA1\u5DF2\u8FD0\u884C ${used} \u8F6E\uFF0C\u5DF2\u6388\u6743 ${node2.continuationBudget.authorizedRounds} \u8F6E\u3002
+\u9636\u6BB5\u6210\u679C\uFF1A${files.length ? files.map((a) => a.logicalPath).join("\u3001") : "\u6682\u65E0\u5DF2\u63D0\u4EA4\u7684\u4EA4\u4ED8\u5185\u5BB9"}\u3002
+\u6700\u8FD1 checkpoint \u8BF4\u660E\uFF08\u6267\u884C\u4EBA\u539F\u6587\uFF09\uFF1A${output?.proposalReason || "\u672A\u77E5\uFF0C\u672A\u63D0\u4F9B"}
+\u5269\u4F59\u4E8B\u9879\u53CA\u4E0B\u4E00\u6279\u8BA1\u5212\uFF1A\u4EE5\u4EE5\u4E0A\u8BF4\u660E\u4E3A\u4F9D\u636E\uFF1B\u672A\u660E\u786E\u63D0\u4F9B\u7684\u90E8\u5206\u672A\u77E5\uFF0C\u9700\u4EBA\u5DE5\u786E\u8BA4\u3002
+\u540C\u610F\u540E\u6700\u591A\u518D\u8FD0\u884C ${rounds} \u8F6E\uFF1B\u62D2\u7EDD\u6216\u4E0D\u56DE\u590D\u5C06\u4FDD\u6301\u6682\u505C\u5E76\u4FDD\u7559\u6210\u679C\uFF0C\u4E0D\u81EA\u52A8\u5BA3\u544A\u5B8C\u6210\u3002`;
+}
+var init_continuation = __esm({
+  "../engine/src/continuation.ts"() {
+    "use strict";
+    init_closure_gate();
+  }
+});
+
 // ../engine/src/events.ts
 function eventAnchors(e) {
   switch (e.kind) {
@@ -4301,6 +4430,10 @@ var init_state = __esm({
       artifactsOf(workId) {
         return this.artifactList.filter((a) => a.workId === workId);
       }
+      /** 多批次分析一次读取本节点全部快照，避免每个 work 再扫整单产物。 */
+      artifactsOfNode(nodeId) {
+        return this.artifactList.filter((a) => a.nodeId === nodeId);
+      }
       workInputsOf(workId) {
         return this.workInputList.filter((i) => i.workId === workId);
       }
@@ -4458,60 +4591,6 @@ var init_state = __esm({
   }
 });
 
-// ../engine/src/closure-gate.ts
-function closureSlotOfFacts(facts) {
-  const report = facts.liveClosureReport();
-  if (report) return { kind: "closure-report", id: report.id };
-  const business = facts.liveBusinessNodes();
-  if (business.length === 1) return { kind: "sole-artifact", id: business[0].id };
-  if (business.length === 0) return { kind: "empty" };
-  return { kind: "missing", businessCount: business.length };
-}
-function humanGateActorsOfFacts(facts, artifactId) {
-  const slot = closureSlotOfFacts(facts);
-  if (slot.kind !== "closure-report" && slot.kind !== "sole-artifact") return [];
-  if (slot.id !== artifactId) return [];
-  const owner = facts.humanOwner();
-  return owner === null ? [] : [owner];
-}
-function closureReviewGroup(actor) {
-  return `closure:${actor}`;
-}
-function closureReviewerSpecs(closureActors) {
-  return closureActors.map((actor) => ({
-    reviewerActorId: actor,
-    reviewGroup: closureReviewGroup(actor),
-    source: "closure"
-  }));
-}
-function engineClosureFacts(state) {
-  return {
-    liveBusinessNodes: () => state.liveNodes().filter((n) => n.type !== BRIEF_TYPE && n.type !== DELIVERY_SUMMARY_TYPE).map((n) => ({ id: n.id, type: n.type })),
-    liveClosureReport: () => {
-      const r = state.liveNodes().find((n) => n.type === DELIVERY_SUMMARY_TYPE);
-      return r ? { id: r.id, type: r.type } : null;
-    },
-    humanOwner: () => {
-      const brief = state.liveNodes().find((n) => n.type === BRIEF_TYPE);
-      const owner = brief?.assigneeActorId;
-      if (!owner || !owner.startsWith(HUMAN_ACTOR_PREFIX)) return null;
-      return owner;
-    }
-  };
-}
-function engineHumanGateActors(state, nodeId) {
-  return humanGateActorsOfFacts(engineClosureFacts(state), nodeId);
-}
-var DELIVERY_SUMMARY_TYPE, BRIEF_TYPE, HUMAN_ACTOR_PREFIX;
-var init_closure_gate = __esm({
-  "../engine/src/closure-gate.ts"() {
-    "use strict";
-    DELIVERY_SUMMARY_TYPE = "delivery-summary";
-    BRIEF_TYPE = "brief";
-    HUMAN_ACTOR_PREFIX = "actor:human:";
-  }
-});
-
 // ../engine/src/letters.ts
 function repliesSorted(state, issueId) {
   return [...state.repliesOf(issueId)].sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
@@ -4668,6 +4747,26 @@ function scan(state, ctx) {
   const events = [];
   for (const node2 of state.liveNodes()) {
     const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
+    const continuationPolicy = node2.assigneeActorId ? ctx.continuationPolicies?.get(node2.assigneeActorId) : null;
+    if (!node2.continuationBudget && continuationPolicy) {
+      events.push({ kind: "continuation.initialized", workorderId: state.workorder.id, nodeId: node2.id, rounds: continuationPolicy.maxRounds });
+      continue;
+    }
+    const delivered = node2.latestProposedWorkId ? state.work(node2.latestProposedWorkId) : null;
+    const hasCurrentDelivery = delivered?.status === "success" && !delivered.deadAt && (delivered.conclusion != null || node2.latestAcceptId === delivered.id) && delivered.nodeVersion === node2.version && inputsMatch(state, node2, delivered);
+    if (node2.continuationBudget && continuationExhausted(state, node2) && !hasCurrentDelivery && (!lw || lw.endedAt || lw.deadAt || continuationAwaitingStart(state, lw))) {
+      const requestId = continuationRequestId(node2);
+      if (node2.continuationBudget.request?.decision !== "pending" && node2.continuationBudget.request?.decision !== "denied") {
+        events.push({
+          kind: "continuation.requested",
+          workorderId: state.workorder.id,
+          nodeId: node2.id,
+          requestId,
+          rounds: continuationPolicy?.maxRounds ?? node2.continuationBudget.roundsPerGrant
+        });
+      }
+      continue;
+    }
     if (!lw) {
       tryToRun(state, node2.id, ctx, events);
       continue;
@@ -4961,6 +5060,20 @@ function scanBlockersForNode(state, node2, latest) {
 function tryToRun(state, nodeId, ctx, events) {
   const node2 = state.node(nodeId);
   if (!node2) return;
+  if (continuationExhausted(state, node2)) {
+    const latest2 = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
+    const request2 = node2.continuationBudget?.request;
+    if ((!latest2 || latest2.endedAt || latest2.deadAt) && request2?.decision !== "pending" && request2?.decision !== "denied") {
+      events.push({
+        kind: "continuation.requested",
+        workorderId: state.workorder.id,
+        nodeId: node2.id,
+        requestId: continuationRequestId(node2),
+        rounds: (node2.assigneeActorId ? ctx.continuationPolicies?.get(node2.assigneeActorId)?.maxRounds : null) ?? node2.continuationBudget.roundsPerGrant
+      });
+    } else if (latest2 && !latest2.endedAt && !latest2.deadAt) checkRunningWorkTimeout(state, node2, latest2, ctx, events);
+    return;
+  }
   if (!node2.assigneeActorId) return;
   const latest = (node2.latestWorkId ? state.work(node2.latestWorkId) : null) ?? null;
   if (unexemptedVetoBlockers(scanBlockersForNode(state, node2, latest), "dispatch").length > 0) {
@@ -5059,19 +5172,34 @@ function findHumanRecoveryPost(state, node2, deadAt) {
   const first = candidates[0];
   return first ? { actorId: first.actorId, at: first.at } : null;
 }
-function countUnconcludedCheckpoints(state, nodeId) {
-  const works = state.mainWorksOf(nodeId).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt));
+function countStagnantCheckpoints(state, nodeId) {
+  const works = state.mainWorksOf(nodeId).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id, "en", { numeric: true }));
+  const contents = /* @__PURE__ */ new Map();
+  for (const a of state.artifactsOfNode(nodeId)) {
+    const parts = contents.get(a.workId) ?? [];
+    parts.push(JSON.stringify([a.logicalPath, a.contentKind, a.contentRef]));
+    contents.set(a.workId, parts);
+  }
+  const seen = /* @__PURE__ */ new Set();
   let count2 = 0;
+  let version2;
   for (const w2 of works) {
-    if (w2.retryAt) break;
-    if (w2.status === "success") {
-      if (w2.conclusion == null && state.artifactsOf(w2.id).length > 0) {
-        count2++;
-        continue;
-      }
-      break;
-    }
-    continue;
+    if (w2.retryAt || w2.status === "success" && w2.conclusion != null) {
+      seen.clear();
+      count2 = 0;
+      version2 = void 0;
+    }
+    if (w2.status !== "success") continue;
+    const parts = contents.get(w2.id);
+    if (!parts?.length) continue;
+    if (version2 !== void 0 && version2 !== w2.nodeVersion) {
+      seen.clear();
+      count2 = 0;
+    }
+    version2 = w2.nodeVersion;
+    const signature = JSON.stringify(parts.sort());
+    count2 = !w2.retryAt && w2.conclusion == null && seen.has(signature) ? count2 + 1 : 0;
+    seen.add(signature);
   }
   return count2;
 }
@@ -5090,8 +5218,8 @@ function countConsecutiveRejections(state, nodeId) {
   return count2;
 }
 function unconcludedCheckpointsExhausted(state, nodeId, ctx) {
-  const limit = ctx.config?.maxRetries ?? DEFAULT_CONFIG.maxRetries;
-  const rounds = countUnconcludedCheckpoints(state, nodeId);
+  const limit = ctx.config?.maxStagnantCheckpoints ?? DEFAULT_CONFIG.maxStagnantCheckpoints;
+  const rounds = countStagnantCheckpoints(state, nodeId);
   return rounds > limit ? { rounds, limit } : null;
 }
 function gateRejectionsExhausted(state, nodeId, ctx) {
@@ -5445,6 +5573,7 @@ function assessConvergence(state, ctx) {
 var init_activate = __esm({
   "../engine/src/activate.ts"() {
     "use strict";
+    init_continuation();
     init_src3();
     init_src2();
     init_model();
@@ -5499,6 +5628,7 @@ CREATE TABLE IF NOT EXISTS ${q2}.workflow_nodes (
   latest_accept_id      text,
   is_final_output       boolean NOT NULL DEFAULT false,
   fields                jsonb,
+  continuation_budget   jsonb,
   cancelled_at          timestamptz,
   -- \u5C01\u5B58\u539F\u56E0\uFF08accepted/cancelled/frozen\uFF09\u3002NULL = \u5B58\u91CF\u884C\uFF0C\u8BFB\u6A21\u578B\u6309 cancelled \u515C\u5E95\u3002
   seal_reason           text,
@@ -5506,6 +5636,7 @@ CREATE TABLE IF NOT EXISTS ${q2}.workflow_nodes (
   created_at            timestamptz NOT NULL,
   updated_at            timestamptz NOT NULL
 );
+ALTER TABLE ${q2}.workflow_nodes ADD COLUMN IF NOT EXISTS continuation_budget jsonb;
 CREATE INDEX IF NOT EXISTS nodes_workorder_idx ON ${q2}.workflow_nodes (workorder_id);
 
 CREATE TABLE IF NOT EXISTS ${q2}.workflow_edges (
@@ -11411,6 +11542,7 @@ var init_store_postgres = __esm({
             // NULL = 存量行（ADR 0137 迁移批量置的 cancelled_at）：按 cancelled 读，不追溯改写历史。
             sealReason: n.seal_reason ?? null,
             fields: n.fields ?? void 0,
+            continuationBudget: n.continuation_budget ?? null,
             rowVersion: n.row_version,
             createdAt: iso(n.created_at),
             updatedAt: iso(n.updated_at)
@@ -11592,8 +11724,8 @@ var init_store_postgres = __esm({
                 `INSERT INTO ${this.s}.workflow_nodes
              (id,workorder_id,type,title,spec,version,assignee_actor_id,assignee_role,
               latest_work_id,latest_proposed_work_id,latest_accept_id,is_final_output,
-              fields,cancelled_at,seal_reason,row_version,created_at,updated_at)
-             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18)
+              fields,cancelled_at,seal_reason,row_version,created_at,updated_at,continuation_budget)
+             VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19)
              ON CONFLICT (id) DO NOTHING`,
                 [
                   n.id,
@@ -11613,13 +11745,14 @@ var init_store_postgres = __esm({
                   n.sealReason ?? null,
                   n.rowVersion,
                   n.createdAt,
-                  n.updatedAt
+                  n.updatedAt,
+                  n.continuationBudget ? JSON.stringify(n.continuationBudget) : null
                 ]
               );
               break;
             }
             case "node.update":
-              await this.patch("workflow_nodes", "id", m2.id, m2.patch, { fields: true });
+              await this.patch("workflow_nodes", "id", m2.id, m2.patch, { fields: true, continuationBudget: true });
               break;
             case "edge.insert": {
               const e = m2.row;
@@ -12043,7 +12176,7 @@ function newNode(id, workorderId, at, version2) {
     updatedAt: at
   };
 }
-function markNodeForRetry(state, nodeId, at, resetRejectedBudget = false) {
+function markNodeForRetry(state, nodeId, at, resetRejectedBudget = false, resetCheckpointBudget = false) {
   const node2 = state.node(nodeId);
   if (!node2) return;
   const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
@@ -12052,6 +12185,9 @@ function markNodeForRetry(state, nodeId, at, resetRejectedBudget = false) {
   }
   if (lw && !lw.deadAt && workState(lw, hasOutput(lw, state.artifactsOf(lw.id).length)) === "success") {
     if (resetRejectedBudget && lw.acceptanceState === "rejected") state.updateWork(lw.id, { retryAt: at });
+    if (resetCheckpointBudget && lw.conclusion == null && state.artifactsOf(lw.id).length > 0) {
+      state.updateWork(lw.id, { retryAt: at });
+    }
     for (const req of state.requirementsOf(node2.id)) {
       if (!req.latestReviewId) continue;
       const r = state.review(req.latestReviewId);
@@ -12183,7 +12319,7 @@ var init_plan = __esm({
         const changed = node2.assigneeActorId !== e.assigneeActorId;
         const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
         const settled = lw !== null && lw !== void 0 && workState(lw, hasOutput(lw, state.artifactsOf(lw.id).length)) === "success";
-        if (changed && e.resetRejectedBudget === true && lw && !lw.deadAt && settled && lw.acceptanceState === "rejected") {
+        if (changed && lw && !lw.deadAt && settled && (e.resetRejectedBudget === true && lw.acceptanceState === "rejected" || e.resetCheckpointBudget === true && lw.conclusion == null && state.artifactsOf(lw.id).length > 0)) {
           state.updateWork(lw.id, { retryAt: ctx.at });
         }
         state.updateNode(e.nodeId, {
@@ -12258,7 +12394,7 @@ var init_plan = __esm({
       name: "plan/node-retry",
       kind: "plan.node_retry",
       apply(e, state, ctx) {
-        markNodeForRetry(state, e.nodeId, ctx.at, e.resetRejectedBudget === true);
+        markNodeForRetry(state, e.nodeId, ctx.at, e.resetRejectedBudget === true, e.resetCheckpointBudget === true);
       }
     };
     planUpdateFields = {
@@ -12396,7 +12532,8 @@ var init_workorder = __esm({
             workorderId: e.workorderId,
             nodeId: node2.id,
             by: e.by,
-            resetRejectedBudget: e.resetRejectedBudget
+            resetRejectedBudget: e.resetRejectedBudget,
+            resetCheckpointBudget: e.resetCheckpointBudget
           }, state, ctx);
         }
       }
@@ -12419,6 +12556,7 @@ var workCreate, workRedispatch, workSnapshotRecorded, workKill, workResponse, wo
 var init_work = __esm({
   "../engine/src/handlers/work.ts"() {
     "use strict";
+    init_continuation();
     init_views2();
     init_kill();
     init_letters();
@@ -12467,6 +12605,7 @@ var init_work = __esm({
           });
           return;
         }
+        if (e.continuationGateVersion === 1 && continuationExhausted(state, node2)) return;
         supersedeLatestWork(state, e.nodeId, ctx.at);
         killNodeReviews(state, e.nodeId, ctx.at);
         for (const w2 of state.replyWorksOf(e.nodeId)) {
@@ -12947,7 +13086,7 @@ var init_issue = __esm({
         }
         if (issue2.kind === "gap" || issue2.kind === "escalation") {
           const nodeId = issue2.raisedByNodeId ?? issue2.aboutNodeId;
-          if (nodeId) markNodeForRetry(state, nodeId, ctx.at, e.resetRejectedBudget === true);
+          if (nodeId) markNodeForRetry(state, nodeId, ctx.at, e.resetRejectedBudget === true, e.resetCheckpointBudget === true);
         }
       }
     };
@@ -13148,6 +13287,10 @@ var init_review = __esm({
           }
           return;
         }
+        const budget = state.node(w2.nodeId)?.continuationBudget;
+        if (budget?.request && (budget.request.decision === "pending" || budget.request.decision === "denied")) {
+          state.updateNode(w2.nodeId, { continuationBudget: { ...budget, request: { ...budget.request, decision: "completed" } } });
+        }
         state.updateNode(w2.nodeId, { latestAcceptId: e.workId, updatedAt: ctx.at });
         state.updateWork(e.workId, {
           acceptanceState: "accepted",
@@ -13267,6 +13410,67 @@ var init_review = __esm({
   }
 });
 
+// ../engine/src/handlers/continuation.ts
+var validRounds, continuationInitialize, continuationRequest, continuationDecide;
+var init_continuation2 = __esm({
+  "../engine/src/handlers/continuation.ts"() {
+    "use strict";
+    init_continuation();
+    validRounds = (n) => Number.isSafeInteger(n) && n >= 1 && n <= 100;
+    continuationInitialize = {
+      name: "continuation/initialize",
+      kind: "continuation.initialized",
+      apply(e, state) {
+        const node2 = state.node(e.nodeId);
+        if (!node2 || node2.continuationBudget || !validRounds(e.rounds)) return;
+        state.updateNode(node2.id, { continuationBudget: { authorizedRounds: e.rounds, requestGeneration: 0, roundsPerGrant: e.rounds, request: null } });
+      }
+    };
+    continuationRequest = {
+      name: "continuation/request",
+      kind: "continuation.requested",
+      apply(e, state, ctx) {
+        const node2 = state.node(e.nodeId);
+        if (!node2 || node2.cancelledAt || !node2.continuationBudget || !validRounds(e.rounds) || continuationRequestId(node2) !== e.requestId || !continuationExhausted(state, node2) || node2.continuationBudget.request?.decision === "pending" || node2.continuationBudget.request?.decision === "denied") return;
+        const latest = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
+        if (latest && !latest.endedAt && !latest.deadAt && !continuationAwaitingStart(state, latest)) return;
+        state.updateNode(node2.id, { continuationBudget: {
+          ...node2.continuationBudget,
+          requestGeneration: node2.continuationBudget.requestGeneration + 1,
+          request: {
+            id: e.requestId,
+            at: ctx.at,
+            rounds: e.rounds,
+            usedRounds: continuationUsedRounds(state, node2.id),
+            summary: continuationSummary(state, node2, e.rounds),
+            decision: "pending"
+          }
+        } });
+      }
+    };
+    continuationDecide = {
+      name: "continuation/decide",
+      kind: "continuation.decided",
+      apply(e, state, ctx) {
+        const node2 = state.node(e.nodeId);
+        const budget = node2?.continuationBudget;
+        const request2 = budget?.request;
+        if (!node2 || node2.cancelledAt || !budget || !request2 || request2.id !== e.requestId || request2.decision !== "pending" || !ctx.actorId.startsWith("actor:human:") || ctx.actorId !== continuationApprover(state)) return;
+        state.updateNode(node2.id, { continuationBudget: {
+          ...budget,
+          authorizedRounds: e.approve ? Math.max(budget.authorizedRounds, continuationUsedRounds(state, node2.id)) + request2.rounds : budget.authorizedRounds,
+          roundsPerGrant: request2.rounds,
+          request: { ...request2, decision: e.approve ? "approved" : "denied", decidedBy: ctx.actorId, decidedAt: ctx.at, reason: e.reason }
+        } });
+        const latest = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
+        if (e.approve && latest && continuationAwaitingStart(state, latest)) {
+          state.emit({ kind: "work.redispatch", workorderId: e.workorderId, workId: latest.id });
+        }
+      }
+    };
+  }
+});
+
 // ../engine/src/handlers/index.ts
 var HANDLERS;
 var init_handlers = __esm({
@@ -13278,6 +13482,7 @@ var init_handlers = __esm({
     init_work();
     init_review();
     init_issue();
+    init_continuation2();
     init_types();
     HANDLERS = [
       /* ── 工作区级（5）── */
@@ -13298,6 +13503,9 @@ var init_handlers = __esm({
       erase(planUpdateReviewRequirements),
       erase(planNodeRetry),
       erase(planUpdateFields),
+      erase(continuationInitialize),
+      erase(continuationRequest),
+      erase(continuationDecide),
       /* ── 节点级 work（7）── */
       erase(workCreate),
       erase(workRedispatch),
@@ -13332,7 +13540,7 @@ var init_handlers = __esm({
 // ../engine/src/bus.ts
 function versionCommandEvent(event) {
   if (event.kind === "work.create" || event.kind === "review.create") {
-    return { ...event, pauseGateVersion: 1 };
+    return { ...event, pauseGateVersion: 1, ...event.kind === "work.create" ? { continuationGateVersion: 1 } : {} };
   }
   if (event.kind === "issue.reply") return { ...event, handlingVersion: 1 };
   if (event.kind === "work.response" && event.semanticsVersion === 2) {
@@ -13346,11 +13554,11 @@ function versionCommandEvent(event) {
     case "work.handoff_recorded":
       return { ...event, semanticsVersion: 2 };
     case "issue.resolve":
-      return { ...event, semanticsVersion: 2, resetRejectedBudget: true };
+      return { ...event, semanticsVersion: 2, resetRejectedBudget: true, resetCheckpointBudget: true };
     case "plan.node_retry":
     case "workorder.resumed":
     case "plan.assign_actor":
-      return { ...event, resetRejectedBudget: true };
+      return { ...event, resetRejectedBudget: true, resetCheckpointBudget: true };
     default:
       return event;
   }
@@ -13396,6 +13604,7 @@ var init_bus = __esm({
     init_model();
     init_handlers();
     init_state();
+    init_continuation();
     SYSTEM_ACTOR = "actor:system:engine";
     NOOP_IO = {
       async dispatchWork() {
@@ -13882,6 +14091,21 @@ var init_bus = __esm({
             const snap = await this.store.transaction((tx) => tx.loadWorkorder(workorderId));
             if (!snap || snap.workorder.dispatchPaused) return false;
             const work = snap.works.find((row) => row.id === workId);
+            if (work && work.lane === "main" && !work.startedAt && !work.sessionRef && !work.lastActivityAt) {
+              const node2 = snap.nodes.find((row) => row.id === work.nodeId);
+              if (node2 && !node2.continuationBudget && this.io.continuationPolicy) {
+                const policy = await this.io.continuationPolicy(work.assigneeActorId);
+                if (policy) {
+                  if (!Number.isSafeInteger(policy.maxRounds) || policy.maxRounds < 1 || policy.maxRounds > 100) {
+                    throw new Error(`invalid continuation round limit for ${work.assigneeActorId}`);
+                  }
+                  buffered.push({ event: { kind: "continuation.initialized", workorderId, nodeId: node2.id, rounds: policy.maxRounds } });
+                  buffered.push({ event: { kind: "work.redispatch", workorderId, workId } });
+                  return false;
+                }
+              }
+              if (node2 && continuationExhausted(new WorkorderState(snap), node2)) return false;
+            }
             if (opts?.neverStarted && work) {
               const node2 = snap.nodes.find((row) => row.id === work.nodeId);
               if (work.startedAt || work.sessionRef || !node2 || node2.cancelledAt || node2.latestWorkId !== workId) return false;
@@ -13991,7 +14215,21 @@ var init_bus = __esm({
           if (!snapshot) return { emitted: 0, terminated: false };
           if (snapshot.workorder.lifecycle !== "active") return { emitted: 0, terminated: false };
           const state = new WorkorderState(snapshot);
-          const scanCtx = { at: this.clock.now(), actorId: SYSTEM_ACTOR, config: this.config, policy: this.policyOf() };
+          const continuationPolicies = /* @__PURE__ */ new Map();
+          if (this.io.continuationPolicy) {
+            for (const node2 of state.liveNodes()) {
+              const budget = node2.continuationBudget;
+              if (budget && (!continuationExhausted(state, node2) || budget.request?.decision === "pending" || budget.request?.decision === "denied")) continue;
+              if (node2.assigneeActorId && !continuationPolicies.has(node2.assigneeActorId)) {
+                const policy = await this.io.continuationPolicy(node2.assigneeActorId);
+                if (policy && (!Number.isSafeInteger(policy.maxRounds) || policy.maxRounds < 1 || policy.maxRounds > 100)) {
+                  throw new Error(`invalid continuation round limit for ${node2.assigneeActorId}`);
+                }
+                continuationPolicies.set(node2.assigneeActorId, policy);
+              }
+            }
+          }
+          const scanCtx = { continuationPolicies, at: this.clock.now(), actorId: SYSTEM_ACTOR, config: this.config, policy: this.policyOf() };
           const { events, terminated } = scan(state, scanCtx);
           await tx.applyMutations(workorderId, state.mutations);
           const allEvents = [...state.emitted, ...events];
@@ -14126,6 +14364,7 @@ var init_src4 = __esm({
   "../engine/src/index.ts"() {
     "use strict";
     init_model();
+    init_continuation();
     init_events();
     init_views2();
     init_state();
@@ -14320,7 +14559,8 @@ function memoryIndexLines(entries) {
   const rows = entries.slice(0, MEMORY_INJECT_MAX).map((e) => {
     const tag = e.projectId === null ? "[actor]" : "[project]";
     const kw = e.keywords.length > 0 ? ` {${e.keywords.join(",")}}` : "";
-    return `- \`${e.memId}\` ${tag}${kw} ${e.digest}`;
+    const preview2 = e.digest.length > MEMORY_INJECT_DIGEST_CHARS ? `${e.digest.slice(0, MEMORY_INJECT_DIGEST_CHARS)}\u2026` : e.digest;
+    return `- \`${e.memId}\` ${tag}${kw} ${preview2}`;
   });
   return [
     ``,
@@ -15262,6 +15502,7 @@ ${manifestDiff(baseC, newC)}
   let skillsLines = [];
   let identityNote = null;
   let batchedContinuation = false;
+  let continuationMaxRounds = 3;
   let memoryEnabled = true;
   let executorRole = null;
   const executionActor = args.actorId ?? artifact.owner;
@@ -15269,6 +15510,7 @@ ${manifestDiff(baseC, newC)}
     const actorCtx = await args.resolveActorContext(executionActor).catch(() => null);
     if (actorCtx) {
       batchedContinuation = actorCtx.config?.batchedContinuation === true;
+      continuationMaxRounds = actorCtx.config?.continuationMaxRounds ?? 3;
       memoryEnabled = actorCtx.memoryEnabled !== false;
       executorRole = actorCtx.roles?.[0] ?? null;
       if (actorCtx.config?.prompt) {
@@ -15640,7 +15882,7 @@ ${m2.spec.split("\n").map((l) => `  > ${l}`).join("\n")}`);
       `- \u7F3A\u4E00\u4E2A**\u8FD8\u4E0D\u5B58\u5728\u7684\u524D\u7F6E** \u2192 \`oasis gap\` \u4EA4\u4E0A\u53BB\uFF0C**\u522B\u786C\u7F16**\uFF1B\u5DF2\u505A\u5B8C\u7684\u90E8\u5206\u7167\u5E38 \`propose\`\uFF0C\u4F46\u8FD9\u4E00\u8F6E \`conclude\` \u4F1A\u88AB\u62D2\uFF0C\u63D0\u4EA4\u5B8C\u5373\u6536\u5DE5\u2014\u2014\u524D\u7F6E\u5C31\u7EEA\u540E\u7CFB\u7EDF\u4F1A\u5E26\u7740\u89E3\u6CD5\u8BF4\u660E\u91CD\u65B0\u5524\u8D77\u4F60\u3002`,
       `- \u5BF9**\u4E0A\u6E38**\u6709\u610F\u89C1\u2014\u2014\u6709\u7591\u95EE\u3001\u8981\u5B83\u6539\u3001\u5224\u5B83\u6CA1\u8FBE\u6807 \u2192 \`oasis annotate <\u4E0A\u6E38id> --body "<\u8BF4\u6E05\u695A>"\` \u540E**\u6536\u5DE5**\u3002\u5199\u7ED9\u4E0A\u6E38\u7684\u8BC4\u8BBA\u81EA\u52A8\u5E26\u963B\u585E\u529B\uFF1A**\u5B83\u7B54\u590D\u524D\u4E0D\u80FD\u6536\u5C3E**\uFF0C\u7B54\u590D\u540E\u7CFB\u7EDF\u91CD\u6D3E\u4F60\u3002`,
       ...args.part === void 0 ? [`- \u6D3B\u592A\u5927 / \u53EF\u5E76\u884C \u2192 \`oasis add-revision\` \u62C6\u6210\u5B50\u90E8\u4EF6\u6D3E\u51FA\u53BB\uFF0C\u522B\u4E00\u4EBA\u4E00\u4F1A\u8BDD\u786C\u625B\u3002`] : [],
-      ...batchedContinuation && args.part === void 0 ? [`- \u957F\u4EFB\u52A1\u5DF2\u5141\u8BB8\u5206\u6279\u7EED\u8DD1\uFF1A\u4E00\u6279\u6709\u8FDB\u5C55\u4F46\u6574\u4F53\u672A\u5B8C\u6210\u65F6\uFF0C\u6309\u300C\u600E\u4E48\u63D0\u4EA4\u300D\u91CC\u7684 propose \u547D\u4EE4\u8FFD\u52A0 \`--checkpoint --continue\`\uFF0Creason \u5199\u6E05\u672C\u6279\u5B8C\u6210\u4E86\u4EC0\u4E48\u3001\u5269\u4EC0\u4E48\u3001\u4E0B\u6279\u4ECE\u54EA\u7EE7\u7EED\uFF0C\u7136\u540E\u6536\u5DE5\uFF1B\u7CFB\u7EDF\u4F1A\u6D3E\u53D1\u4E0B\u4E00\u8F6E\u6B63\u5F0F session\u3002\u5168\u90E8\u5B8C\u6210\u65F6\u7167\u5E38 propose \u540E \`oasis conclude ${artifactId} --note "<\u4EA4\u4ED8\u7ED3\u8BBA>"\`\u3002`] : [],
+      ...batchedContinuation && args.part === void 0 ? [`- \u957F\u4EFB\u52A1\u5DF2\u5141\u8BB8\u5206\u6279\u7EED\u8DD1\uFF1A\u4E00\u6279\u6709\u8FDB\u5C55\u4F46\u6574\u4F53\u672A\u5B8C\u6210\u65F6\uFF0C\u6309\u300C\u600E\u4E48\u63D0\u4EA4\u300D\u91CC\u7684 propose \u547D\u4EE4\u8FFD\u52A0 \`--checkpoint --continue\`\uFF0Creason \u5199\u6E05\u672C\u6279\u5B8C\u6210\u4E86\u4EC0\u4E48\u3001\u5269\u4EC0\u4E48\u3001\u4E0B\u6279\u4ECE\u54EA\u7EE7\u7EED\uFF0C\u7136\u540E\u6536\u5DE5\uFF1B\u7CFB\u7EDF\u5728\u6BCF\u6B21\u6388\u6743\u7684 ${continuationMaxRounds} \u8F6E\u989D\u5EA6\u5185\u6D3E\u53D1\u4E0B\u4E00\u8F6E\u6B63\u5F0F session\uFF08\u9996\u6B21\u6267\u884C\u4E5F\u8BA1\u4E00\u8F6E\uFF09\uFF0C\u5230\u9650\u5C1A\u672A conclude \u65F6\u6682\u505C\u5E76\u7B49\u5F85\u4EBA\u5DE5\u5BA1\u6279\uFF0C\u540C\u610F\u540E\u8FFD\u52A0\u540C\u6837\u989D\u5EA6\u3002\u7A7A\u4EA7\u51FA\u6216\u8FDE\u7EED\u91CD\u590D\u5DF2\u6709\u5FEB\u7167\u4ECD\u4F1A\u63D0\u524D\u6682\u505C\uFF0C\u9047\u5230\u963B\u585E\u5E94\u5982\u5B9E\u4E0A\u62A5\u3002\u5168\u90E8\u5B8C\u6210\u65F6\u7167\u5E38 propose \u540E \`oasis conclude ${artifactId} --note "<\u4EA4\u4ED8\u7ED3\u8BBA>"\`\u3002`] : [],
       `- \u5199\u5165\u53EA\u8D70 \`oasis propose\`\uFF0C\u771F\u6B63\u5B8C\u6574\u4E86\u624D \`oasis conclude\`\uFF1B\u5361\u6CA1\u5361\u4F4F\u3001\u8FDB\u5EA6\u90FD\u662F\u7CFB\u7EDF\u7B97\u7684\uFF0C\u522B\u81EA\u5DF1\u7EF4\u62A4\u3002`,
       `- \u4F46**\u7B80\u5355\u3001\u81EA\u8DB3\u3001\u4E0D\u4F9D\u8D56\u672A\u5B9A\u51B3\u7B56\u7684\u4EFB\u52A1**\uFF08\u5982\u6539\u4E2A\u80CC\u666F\u8272\uFF09\u2192 \u76F4\u63A5\u505A\uFF0C\u5224\u65AD\u6743\u5728\u4F60\u3002`,
       ...typeDef?.recommendedInputs && typeDef.recommendedInputs.length > 0 ? [`- \u672C\u7C7B\u578B\u5E38\u89C1\u4E0A\u6E38\u4F9D\u8D56\uFF08\u63A8\u8350\uFF0C\u975E\u5F3A\u5236\uFF09\uFF1A${typeDef.recommendedInputs.join("\u3001")}\u2014\u2014\u4F9D\u8D56\u5176\u4E2D\u67D0\u4E2A\u800C\u5B83\u8FD8\u6CA1\u6709\uFF0C\u6309\u4E0A\u9762 gap \u89C4\u5219\u62A5\u7F3A\u53E3\u3002`] : []
@@ -18759,6 +19001,36 @@ function bridgeLoadReadModel(input) {
     pinMeta.set(edge.toNodeId, record8);
   }
   const pendingReviews = /* @__PURE__ */ new Map();
+  for (const snap of snapshots2) {
+    let approver;
+    for (const node2 of snap.nodes) {
+      const request2 = node2.continuationBudget?.request;
+      const latest = node2.latestWorkId ? workById.get(node2.latestWorkId) : void 0;
+      if (!request2 || node2.cancelledAt || latest && !latest.endedAt && !latest.deadAt && (latest.startedAt || latest.sessionRef || latest.lastActivityAt || snap.artifacts.some((a) => a.workId === latest.id))) continue;
+      if (request2.decision === "pending" || request2.decision === "denied") {
+        const artifact = artifacts.get(node2.id);
+        if (artifact) artifact.continuationPause = { decision: request2.decision, detail: request2.summary, at: request2.at };
+      }
+      if (request2.decision !== "pending") continue;
+      if (approver === void 0) approver = continuationApprover(new WorkorderState(snap));
+      pendingReviews.set(request2.id, {
+        draftId: request2.id,
+        continuation: { nodeId: node2.id, requestId: request2.id, approverActorId: approver },
+        plan: { workspace: snap.workorder.id, reason: request2.summary, ops: [] },
+        changeClass: "C",
+        nonMonotonicOps: [],
+        proposedBy: node2.assigneeActorId ?? snap.workorder.ownerActorId,
+        origin: null,
+        workspace: snap.workorder.id,
+        advisory: [],
+        downstreamClosure: [],
+        at: request2.at,
+        anchor: node2.id,
+        kind: "command",
+        command: { command: "continueBatch", args: { artifactId: node2.id, rounds: request2.rounds }, effectLabel: request2.summary }
+      });
+    }
+  }
   const pointedReviewIds = new Set(
     allRequirements.map((r) => r.latestReviewId).filter((x2) => x2 != null)
   );
@@ -19358,6 +19630,7 @@ var import_node_crypto3, PENDING_ROLE_PREFIX2, PENDING_UNASSIGNED2, EngineKernel
 var init_kernel_bridge = __esm({
   "../core/src/kernel-bridge.ts"() {
     "use strict";
+    init_src4();
     import_node_crypto3 = require("node:crypto");
     init_read_model();
     init_closure_gate2();
@@ -21149,7 +21422,35 @@ var init_kernel_bridge = __esm({
         await this.refreshModel();
         return { draftId };
       }
+      async decideContinuation(draftId, actor, approve, reason) {
+        const review = this.model.pendingReviews.get(draftId);
+        if (!review?.continuation || !review.workspace) throw new Error("\u7EED\u8DD1\u5BA1\u6279\u4E0D\u5B58\u5728\u6216\u5DF2\u5904\u7406");
+        const snapshot = await this.store.transaction((tx) => tx.loadWorkorder(review.workspace));
+        const node2 = snapshot?.nodes.find((n) => n.id === review.continuation.nodeId);
+        const request2 = node2?.continuationBudget?.request;
+        if (!actor.startsWith("actor:human:") || !snapshot || continuationApprover(new WorkorderState(snapshot)) !== actor) throw new Error("\u4EC5\u5DE5\u5355\u4EBA\u7C7B\u8D1F\u8D23\u4EBA\u53EF\u4EE5\u5BA1\u6279\u7EED\u8DD1\u989D\u5EA6");
+        if (!request2 || request2.id !== draftId || request2.decision !== "pending" || node2?.cancelledAt) throw new Error("\u7EED\u8DD1\u5BA1\u6279\u5DF2\u5904\u7406\u6216\u5931\u6548");
+        const expectedAuthorized = Math.max(
+          node2.continuationBudget.authorizedRounds,
+          continuationUsedRounds(new WorkorderState(snapshot), node2.id)
+        ) + request2.rounds;
+        await this.commit({
+          companyId: snapshot.workorder.companyId,
+          workorderId: snapshot.workorder.id,
+          actorId: actor,
+          event: { kind: "continuation.decided", workorderId: snapshot.workorder.id, nodeId: node2.id, requestId: draftId, approve, reason }
+        });
+        const after = await this.store.transaction((tx) => tx.loadWorkorder(snapshot.workorder.id));
+        const afterBudget = after?.nodes.find((n) => n.id === node2.id)?.continuationBudget;
+        const decided = afterBudget?.request;
+        const applied = approve ? (afterBudget?.authorizedRounds ?? 0) >= expectedAuthorized : decided?.id === draftId && (decided.decision === "denied" || decided.decision === "completed");
+        if (!applied) throw new Error("\u7EED\u8DD1\u5BA1\u6279\u53D1\u751F\u51B2\u7A81\uFF0C\u8BF7\u5237\u65B0\u540E\u67E5\u770B\u7ED3\u679C");
+        return node2.id;
+      }
       async applyAuthorizedCommand(args) {
+        if (this.model.pendingReviews.get(args.draftId)?.continuation) {
+          return { command: "continueBatch", artifactId: await this.decideContinuation(args.draftId, args.actor, true) };
+        }
         const card2 = this.draftCards.get(args.draftId);
         if (!card2 || card2.kind !== "command" || !card2.command) {
           throw new Error(`\u4E0D\u662F\u547D\u4EE4\u6388\u6743\u8BF7\u6C42\u6216\u5DF2\u5904\u7406\uFF1A${args.draftId}`);
@@ -21179,6 +21480,10 @@ var init_kernel_bridge = __esm({
         return { command: card2.command, artifactId };
       }
       async rejectIntervention(args) {
+        if (this.model.pendingReviews.get(args.draftId)?.continuation) {
+          await this.decideContinuation(args.draftId, args.actor, false, args.reason);
+          return;
+        }
         this.draftCards.delete(args.draftId);
         await this.forgetDraftCard(args.draftId);
         await this.refreshModel();
@@ -24897,6 +25202,8 @@ async function runProtocolSession(job, cfg) {
   const transcript = openTranscript(transcriptRef);
   const outputCbs = [];
   const telemetryCbs = [];
+  const liveCbs = [];
+  const appendByKey = /* @__PURE__ */ new Map();
   const exitCbs = [];
   const state = cfg.createState();
   const pending = /* @__PURE__ */ new Map();
@@ -24932,7 +25239,7 @@ async function runProtocolSession(job, cfg) {
     pending.clear();
   };
   const send = (command) => {
-    if (closing || child.stdin.destroyed || !child.stdin.writable) return Promise.reject(new Error("session stdin is not writable"));
+    if (closing || child.stdin.destroyed || !child.stdin.writable) return Promise.reject(new ProtocolSessionClosing("session stdin is not writable"));
     const idValue = command.id ?? `oasis_${++nextRequestId}`;
     const message = { ...command, id: idValue };
     const key = commandId(idValue);
@@ -24952,11 +25259,12 @@ async function runProtocolSession(job, cfg) {
     if (isResponse(message) && responseId !== void 0 && pending.has(responseId)) {
       const waiter = pending.get(responseId);
       pending.delete(responseId);
-      if (message.type === "response" && message.success === false) waiter.reject(new Error(String(message.error ?? "runtime rejected command")));
-      else if (Object.prototype.hasOwnProperty.call(message, "error")) waiter.reject(new Error(String(message.error?.message ?? message.error)));
+      if (message.type === "response" && message.success === false) waiter.reject(new ProtocolCommandRejected(String(message.error ?? "runtime rejected command")));
+      else if (Object.prototype.hasOwnProperty.call(message, "error")) waiter.reject(new ProtocolCommandRejected(String(message.error?.message ?? message.error)));
       else waiter.resolve(message.result ?? message);
       return;
     }
+    for (const event of cfg.liveEvents?.(message, state) ?? []) for (const cb of liveCbs) cb(event);
     for (const line of cfg.normalize(message, state)) {
       if (line.outputText) for (const cb of outputCbs) cb(line.outputText);
       const event = { kind: line.kind, payload: line.payload, seq: ++eventSeq, ts: (/* @__PURE__ */ new Date()).toISOString() };
@@ -25048,26 +25356,34 @@ async function runProtocolSession(job, cfg) {
     onTelemetry(cb) {
       telemetryCbs.push(cb);
     },
+    onLiveEvent(cb) {
+      liveCbs.push(cb);
+    },
     get canAppendInput() {
       return !closing && started && !exited;
     },
     appendInput(input) {
-      if (input.requireConsumptionReceipt) return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
+      const key = input.clientMessageKey;
+      if (key && appendByKey.has(key)) return appendByKey.get(key);
+      if (input.requireConsumptionReceipt && !cfg.supportsInputConsumptionReceipts) return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
       appendChain = appendChain.then(async () => {
         if (exited || closing) return { accepted: false, reason: "session-closing" };
         const files = materializeFiles(dir, input.files, input.binaryFiles);
         try {
-          const result = await cfg.append(input, state, send);
-          return { ...result, ...files.written.length || files.failed.length ? { files } : {} };
-        } catch {
-          return { accepted: false, reason: "rejected", ...files.written.length || files.failed.length ? { files } : {} };
+          const result2 = await cfg.append(input, state, send);
+          return { ...result2, ...files.written.length || files.failed.length ? { files } : {} };
+        } catch (error2) {
+          const reason = error2 instanceof ProtocolSessionClosing ? "session-closing" : error2 instanceof ProtocolCommandRejected ? "rejected" : "unconfirmed";
+          return { accepted: false, reason, ...files.written.length || files.failed.length ? { files } : {} };
         }
       });
-      return appendChain;
+      const result = appendChain;
+      if (key) appendByKey.set(key, result);
+      return result;
     }
   };
 }
-var import_node_child_process6, import_node_crypto10, path9;
+var import_node_child_process6, import_node_crypto10, path9, ProtocolCommandRejected, ProtocolSessionClosing;
 var init_protocol_session = __esm({
   "../adapters/src/_core/protocol-session.ts"() {
     "use strict";
@@ -25083,6 +25399,10 @@ var init_protocol_session = __esm({
     init_transcript();
     init_filter_extra_args();
     init_root_bypass();
+    ProtocolCommandRejected = class extends Error {
+    };
+    ProtocolSessionClosing = class extends Error {
+    };
   }
 });
 
@@ -25595,11 +25915,13 @@ var init_codex = __esm({
           workRoot: this.opts.workRoot,
           env: this.opts.env,
           runtimeKind: "codex",
+          supportsInputConsumptionReceipts: true,
           syncSkills: this.opts.syncSkills,
           createState: () => ({
             threadId: void 0,
             turnId: void 0,
             active: false,
+            pendingInputs: /* @__PURE__ */ new Set(),
             codex: createCodexNormalizeState(),
             // 本次 run 的用量：逐轮累加 `thread/tokenUsage/updated` 的 `last`（见该解析函数注释）。
             usage: { input: 0, cacheRead: 0, cacheWrite: 0, output: 0 },
@@ -25643,6 +25965,34 @@ ${task}` : task;
             if (typeof turnId === "string" && turnId) state.turnId = turnId;
             if (!state.turnId) throw new Error("codex app-server returned no turn id");
           },
+          liveEvents(message, state) {
+            const params = message.params;
+            const method = message.method;
+            const turnId = typeof params?.turnId === "string" ? params.turnId : state.turnId ?? "codex-pending";
+            const base = { protocolVersion: 2, streamId: `codex:${state.threadId}`, turnId };
+            if (method === "item/agentMessage/delta" && typeof params?.itemId === "string" && typeof params.delta === "string") {
+              return [{ ...base, itemId: params.itemId, itemType: "message", operation: "append_text", payload: { text: params.delta } }];
+            }
+            if (method === "item/started" || method === "item/completed") {
+              const item = params?.item;
+              if (item?.type === "userMessage" && typeof item.clientId === "string" && state.pendingInputs.delete(item.clientId)) {
+                return [{
+                  ...base,
+                  itemId: `input:${item.clientId}`,
+                  itemType: "control",
+                  operation: "completed",
+                  payload: { code: "input_consumed", clientMessageKey: item.clientId }
+                }];
+              }
+              if (method === "item/completed" && item?.type === "agentMessage" && typeof item.id === "string") {
+                return [{ ...base, itemId: item.id, itemType: "message", operation: "completed", payload: { text: typeof item.text === "string" ? item.text : "" } }];
+              }
+            }
+            if (method === "turn/completed") {
+              return [{ ...base, itemId: "turn-end", itemType: "control", operation: "completed", payload: { code: "output_block_completed" } }];
+            }
+            return [];
+          },
           normalize(message, state) {
             const params = message.params;
             const method = typeof message.method === "string" ? message.method : "";
@@ -25701,7 +26051,7 @@ ${task}` : task;
             };
           },
           async append(input, state, send) {
-            if (!state.threadId || !state.turnId) return { accepted: false, reason: "rejected" };
+            if (!state.threadId || !state.turnId || !state.active) return { accepted: false, reason: "session-closing" };
             if (input.interrupt) {
               await send({ jsonrpc: "2.0", method: "turn/interrupt", params: { threadId: state.threadId, turnId: state.turnId } });
               const next = await send({ jsonrpc: "2.0", method: "turn/start", params: { threadId: state.threadId, input: [{ type: "text", text: input.text }] } });
@@ -25710,13 +26060,22 @@ ${task}` : task;
               state.active = true;
               return { accepted: true, interrupt: "unknown" };
             }
-            await send({ jsonrpc: "2.0", method: "turn/steer", params: {
-              threadId: state.threadId,
-              expectedTurnId: state.turnId,
-              ...input.clientMessageKey ? { clientUserMessageId: input.clientMessageKey } : {},
-              input: [{ type: "text", text: input.text }]
-            } });
-            return { accepted: true };
+            if (input.clientMessageKey) state.pendingInputs.add(input.clientMessageKey);
+            try {
+              await send({ jsonrpc: "2.0", method: "turn/steer", params: {
+                threadId: state.threadId,
+                expectedTurnId: state.turnId,
+                ...input.clientMessageKey ? { clientUserMessageId: input.clientMessageKey } : {},
+                input: [{ type: "text", text: input.text }]
+              } });
+            } catch (error2) {
+              if (input.clientMessageKey) state.pendingInputs.delete(input.clientMessageKey);
+              if (error2 instanceof ProtocolCommandRejected && /no active turn|not active|expected.*turn|turn.*mismatch/i.test(error2.message)) {
+                return { accepted: false, reason: "session-closing" };
+              }
+              throw error2;
+            }
+            return { accepted: true, consumption: "pending" };
           }
         });
       }
@@ -26592,6 +26951,7 @@ async function runACPSession(job, cfg) {
   const transcriptOut = openTranscript(transcriptRef);
   const outputCbs = [];
   const telemetryCbs = [];
+  const liveCbs = [];
   const exitCbs = [];
   let exited;
   let killReason = null;
@@ -26670,6 +27030,34 @@ ${note}` : note };
   });
   let lastRpcError;
   let streamingCurrentTurn = false;
+  const emitBoundary = () => {
+    for (const cb of liveCbs) cb({
+      protocolVersion: 2,
+      streamId: id,
+      turnId: id,
+      itemId: "prompt-boundary",
+      itemType: "control",
+      operation: "completed",
+      payload: { code: "output_block_completed" }
+    });
+  };
+  const confirmedInputs = /* @__PURE__ */ new Set();
+  const confirmAppendBatch = () => {
+    for (const input of inflightAppendBatch) {
+      const key = input.clientMessageKey;
+      if (!key || confirmedInputs.has(key)) continue;
+      confirmedInputs.add(key);
+      for (const cb of liveCbs) cb({
+        protocolVersion: 2,
+        streamId: id,
+        turnId: id,
+        itemId: `input:${key}`,
+        itemType: "control",
+        operation: "completed",
+        payload: { code: "input_consumed", clientMessageKey: key }
+      });
+    }
+  };
   const client = new ACPClient(
     (line) => {
       try {
@@ -26678,9 +27066,11 @@ ${note}` : note };
       }
     },
     (text5) => {
+      confirmAppendBatch();
       for (const cb of outputCbs) cb(text5);
     },
     (e) => {
+      if (["message", "thought", "tool_use", "tool_result"].includes(e.kind)) confirmAppendBatch();
       for (const cb of telemetryCbs) cb(e);
     },
     // runtime 自己用 stopReason=cancelled 收尾时也保留取消语义；此前误记成 error，
@@ -26814,9 +27204,11 @@ ${task}` : task;
         promptResult = await sendPrompt(userText);
       }
       while (!killReason && appendQueue.length > 0) {
+        emitBoundary();
         inflightAppendBatch = appendQueue.splice(0);
         const merged = inflightAppendBatch.map((i) => i.text).filter(Boolean).join("\n\n");
         promptResult = await sendPrompt(merged);
+        confirmAppendBatch();
         inflightAppendBatch = [];
       }
       closingForExit = true;
@@ -26855,6 +27247,9 @@ ${task}` : task;
     onTelemetry(cb) {
       telemetryCbs.push(cb);
     },
+    onLiveEvent(cb) {
+      liveCbs.push(cb);
+    },
     // ADR-0093 对话追加：入队一条 user 输入，drain 循环会把它发成同 session 的下一回合。
     // 已收尾/已退出则拒（session-closing），上层据此降级 kill+resume。
     get canAppendInput() {
@@ -26878,12 +27273,15 @@ ${task}` : task;
     }
   };
   function doAppend(input) {
-    if (input.requireConsumptionReceipt) return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
     if (exited || closingForExit) return Promise.resolve({ accepted: false, reason: "session-closing" });
     const report = materializeFiles(dir, input.files, input.binaryFiles);
     const queued = report.failed.length ? { ...input, text: appendMaterializeWarning(input.text, report) } : input;
     appendQueue.push(queued);
-    const withFiles = (r) => report.written.length || report.failed.length ? { ...r, files: report } : r;
+    const withFiles = (r) => ({
+      ...r,
+      ...input.requireConsumptionReceipt && r.accepted ? { consumption: "pending" } : {},
+      ...report.written.length || report.failed.length ? { files: report } : {}
+    });
     if (!input.interrupt) return Promise.resolve(withFiles({ accepted: true, interrupt: "queued_at_boundary" }));
     const run = appendChain.then(async () => {
       const pending = inflightStopReason;
@@ -27637,12 +28035,13 @@ var init_pi = __esm({
             return ["--mode", "rpc", "--session", sessionFile, ...model ? ["--model", model] : []];
           },
           runtimeKind: "pi",
+          supportsInputConsumptionReceipts: true,
           workRoot: opts.workRoot,
           cleanupWorkdir: opts.cleanupWorkdir,
           env: opts.env,
           extraArgs: opts.extraArgs,
           blockedFlags: PI_BLOCKED_FLAGS,
-          createState: () => ({}),
+          createState: () => ({ pendingInputs: [] }),
           initialCommand(job2, _dir, task) {
             const prompt2 = job2.systemPrompt ? `${job2.systemPrompt}
 
@@ -27659,6 +28058,28 @@ ${task}` : task;
             } catch {
             }
           },
+          liveEvents(message, state) {
+            const base = { protocolVersion: 2, streamId: "pi-rpc", turnId: "pi-rpc" };
+            const raw = message.message;
+            if (message.type === "message_end" && raw?.role === "assistant") {
+              return [{ ...base, itemId: "message-end", itemType: "control", operation: "completed", payload: { code: "output_block_completed" } }];
+            }
+            if (message.type === "message_start" && raw?.role === "user") {
+              const text5 = typeof raw.content === "string" ? raw.content : Array.isArray(raw.content) ? raw.content.filter((p2) => p2.type === "text").map((p2) => p2.text).join("") : void 0;
+              const pending = state.pendingInputs[0];
+              if (pending && text5 === pending.text) {
+                state.pendingInputs.shift();
+                return [{
+                  ...base,
+                  itemId: `input:${pending.key}`,
+                  itemType: "control",
+                  operation: "completed",
+                  payload: { code: "input_consumed", clientMessageKey: pending.key }
+                }];
+              }
+            }
+            return [];
+          },
           normalize(message) {
             return normalizePi(JSON.stringify(message));
           },
@@ -27668,14 +28089,21 @@ ${task}` : task;
           runtimeSessionId(state) {
             return state.sessionId;
           },
-          async append(input, _state, send) {
-            if (input.interrupt) {
-              await send({ type: "abort" });
+          async append(input, state, send) {
+            const pending = input.clientMessageKey ? { key: input.clientMessageKey, text: input.text } : void 0;
+            if (pending) state.pendingInputs.push(pending);
+            try {
+              if (input.interrupt) {
+                await send({ type: "abort" });
+                await send({ type: "steer", message: input.text });
+                return { accepted: true, interrupt: "unknown" };
+              }
               await send({ type: "steer", message: input.text });
-              return { accepted: true, interrupt: "unknown" };
+              return { accepted: true, consumption: "pending" };
+            } catch (error2) {
+              if (pending) state.pendingInputs = state.pendingInputs.filter((p2) => p2 !== pending);
+              throw error2;
             }
-            await send({ type: "steer", message: input.text });
-            return { accepted: true };
           }
         });
       }
@@ -28485,10 +28913,13 @@ var init_normalizer = __esm({
       proseClaim = /* @__PURE__ */ new Map();
       /** 本 turn 内已经见过的 item 键——认领闸只拦「新起一段」，不拦已知 item 的后续 op。 */
       claimedKeys = /* @__PURE__ */ new Set();
+      closedKeys = /* @__PURE__ */ new Set();
       /** 见过 stdout 文本没有——见过就压掉 telemetry `message`（与 server.ts 原口径同款去重）。 */
       sawTextOutput = false;
       /** 本 turn 产出过 item op 没有。收尾时用来决定要不要发 turn 信号（见 turnFinished）。 */
       producedAny = false;
+      /** Receipts wait for a whole output block; they never split its bytes. */
+      pendingInputs = /* @__PURE__ */ new Map();
       constructor(opts) {
         this.providerName = opts.providerName;
         this.hasLiveProtocol = opts.hasLiveProtocol === true;
@@ -28532,20 +28963,17 @@ var init_normalizer = __esm({
       }
       /** 结构化实时事件（原生 Live Protocol v2）。 */
       onLiveEvent(event) {
-        this.turnId = event.turnId || this.turnId;
         const payload = event.payload && typeof event.payload === "object" && !Array.isArray(event.payload) ? event.payload : {};
         if (event.itemType === "control" && payload.code === "input_consumed" && typeof payload.clientMessageKey === "string") {
+          this.pendingInputs.set(payload.clientMessageKey, event.itemId);
+          if (!this.open) this.flushInputs();
+          return;
+        }
+        if (event.itemType === "control" && payload.code === "output_block_completed") {
           this.closeOpen("completed");
-          this.emitItem({
-            key: providerItemKey(this.providerName, event.itemId),
-            kind: "control",
-            role: "system",
-            origin: "live",
-            opShape: { op: "set_status", status: "completed" },
-            attrs: { code: "input_consumed", clientMessageKey: payload.clientMessageKey }
-          });
           return;
         }
+        this.turnId = event.turnId || this.turnId;
         if (event.operation === "turn_completed" || event.operation === "turn_failed") {
           this.turnFinished(event.operation === "turn_failed" ? "failed" : "completed");
           return;
@@ -28561,13 +28989,12 @@ var init_normalizer = __esm({
           }
           return;
         }
-        if (event.operation === "completed" && (event.itemType === "message" || event.itemType === "thinking") && typeof payload.text === "string") {
-          this.snapshotProse(
-            event.itemType === "message" ? "text" : "thinking",
-            payload.text,
-            "live",
-            providerItemKey(this.providerName, event.itemId)
-          );
+        if (event.operation === "completed" && (event.itemType === "message" || event.itemType === "thinking")) {
+          const key = providerItemKey(this.providerName, event.itemId);
+          if (typeof payload.text === "string") {
+            this.snapshotProse(event.itemType === "message" ? "text" : "thinking", payload.text, "live", key);
+          }
+          if (this.open?.key === key) this.closeOpen("completed");
           return;
         }
         if (event.operation === "started" && event.itemType === "tool") {
@@ -28592,6 +29019,7 @@ var init_normalizer = __esm({
         this.fallbackIndex.clear();
         this.proseClaim.clear();
         this.claimedKeys.clear();
+        this.closedKeys.clear();
         this.sawTextOutput = false;
         this.producedAny = false;
         if (!produced) return;
@@ -28615,6 +29043,10 @@ var init_normalizer = __esm({
         if (!known && !this.claim(kind, origin)) return;
         const key = explicitKey ?? (this.open && this.open.kind === kind ? this.open.key : this.nextFallbackKey(kind));
         this.claimedKeys.add(key);
+        if (known && this.closedKeys.has(key)) {
+          this.emitItem({ key, kind, role: "assistant", origin, opShape: { op: "append_text", text: text5 } });
+          return;
+        }
         if (!this.open || this.open.key !== key) {
           this.closeOpen("completed");
           this.open = { key, kind, origin };
@@ -28631,6 +29063,10 @@ var init_normalizer = __esm({
         if (!known && !this.claim(kind, origin)) return;
         const key = explicitKey ?? (this.open && this.open.kind === kind ? this.open.key : this.nextFallbackKey(kind));
         this.claimedKeys.add(key);
+        if (known && this.closedKeys.has(key)) {
+          this.emitItem({ key, kind, role: "assistant", origin, opShape: { op: "set_text", text: text5 } });
+          return;
+        }
         if (!this.open || this.open.key !== key) {
           this.closeOpen("completed");
           this.open = { key, kind, origin };
@@ -28649,8 +29085,23 @@ var init_normalizer = __esm({
       closeOpen(status) {
         const open3 = this.open;
         this.open = null;
-        if (!open3) return;
-        this.emitItem({ key: open3.key, kind: open3.kind, role: "assistant", origin: open3.origin, opShape: { op: "set_status", status } });
+        if (open3) this.closedKeys.add(open3.key);
+        if (open3) this.emitItem({ key: open3.key, kind: open3.kind, role: "assistant", origin: open3.origin, opShape: { op: "set_status", status } });
+        this.flushInputs();
+      }
+      flushInputs() {
+        const inputs = [...this.pendingInputs];
+        this.pendingInputs.clear();
+        for (const [clientMessageKey, id] of inputs) {
+          this.emitItem({
+            key: providerItemKey(this.providerName, id),
+            kind: "control",
+            role: "system",
+            origin: "live",
+            opShape: { op: "set_status", status: "completed" },
+            attrs: { code: "input_consumed", clientMessageKey }
+          });
+        }
       }
       toolCall(origin, id, name, input) {
         this.closeOpen("completed");
@@ -28870,7 +29321,7 @@ var init_chat_item_ledger = __esm({
       telemetryTextInContent;
       /** 本段的「无输出」注解已经提前落过（`closeSegmentBeforeUserInput`），`beginSegment` 别再落一条。 */
       segmentEndEmitted = false;
-      /** **不变量 1**：`providerItemKey → itemId`，本账本唯一持有。切段/收尾清空。 */
+      /** **不变量 1**：`providerItemKey → itemId`，本账本唯一持有。仅 runtime turn 结束/收尾清空，用户插入保留。 */
       itemKeyMap = /* @__PURE__ */ new Map();
       /** 内存账本：itemId → 行。插入顺序即 seq 顺序。 */
       rows = /* @__PURE__ */ new Map();
@@ -29049,7 +29500,7 @@ var init_chat_item_ledger = __esm({
           }
         });
         const row = this.rows.get(id);
-        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord };
+        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord, messageId: row.messageId };
       }
       /**
        * 回灌重启前已经落库的那段正文（`chat-recovery` 重挂 / 迟到对账用）。
@@ -29084,7 +29535,7 @@ var init_chat_item_ledger = __esm({
       // ── 段与归属 ──────────────────────────────────────────────────────────────
       /**
        * 切段（人中途插入）：此刻起建的 item 属于**下一条** assistant 行。
-       * 映射一并清空——新段是新行，复用旧 itemId 会把新文本写进上一条消息。
+       * 已有 provider item 保留身份与位置；新 item 才归下一段，迟到快照不能复制旧块。
        */
       beginSegment() {
         if (this.segmentEndEmitted) {
@@ -29093,8 +29544,6 @@ var init_chat_item_ledger = __esm({
           this.closeStreamingRows("completed");
           if (this.segmentItemCount === 0 && this.messageId) this.insertSegmentEnd();
         }
-        this.itemKeyMap.clear();
-        this.lastTurnId = null;
         this.messageId = null;
         this.segment += 1;
         this.segmentItemCount = 0;
@@ -29118,7 +29567,7 @@ var init_chat_item_ledger = __esm({
         const id = this.insertSegmentEnd();
         this.segmentEndEmitted = true;
         const row = this.rows.get(id);
-        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord };
+        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord, messageId: row.messageId };
       }
       /** 零输出段兜底（S1 评审 B1）：那条 assistant 行库里已经在了，一条 item 都没有会被对账抓成假红。 */
       insertSegmentEnd() {
@@ -29137,6 +29586,9 @@ var init_chat_item_ledger = __esm({
       /** 行落库了，把本段还挂着 NULL 的 assistant item 认领回去，并让后续 item 直接带上它。 */
       bindMessage(messageId) {
         this.messageId = messageId;
+        for (const row of this.rows.values()) {
+          if (row.role === "assistant" && row.messageId === null) row.messageId = messageId;
+        }
         if (!this.persistEnabled) return;
         this.enqueue(async () => {
           await this.deps.items.bindMessage(this.deps.sessionId, this.deps.turnId, messageId);
@@ -29196,7 +29648,8 @@ var init_chat_item_ledger = __esm({
           itemId: id,
           version: row.wireVersion,
           startedVersion: row.startedVersion,
-          ord: row.ord
+          ord: row.ord,
+          messageId: row.messageId
         };
         if (event.opShape.op === "set_status") {
           const followUp = this.applyOpTo(row, event);
@@ -29232,7 +29685,7 @@ var init_chat_item_ledger = __esm({
       }
       /** 这一次写的回执。`persist` 已经在里面走过钟了，这里只是把读数带出去给 wire。 */
       outcomeOf(row) {
-        return { itemId: row.id, version: row.wireVersion, ord: row.ord };
+        return { itemId: row.id, version: row.wireVersion, ord: row.ord, messageId: row.messageId };
       }
       /** 关掉所有还 streaming 的行（收尾/切段）。 */
       closeStreamingRows(status) {
@@ -29284,13 +29737,16 @@ var init_chat_item_ledger = __esm({
           origin: input.origin,
           inContent: input.inContent,
           persist: input.persist,
-          segment: this.segment
+          segment: this.segment,
+          /* 归属在**建行那一刻**定死：链是异步的，等它执行时 this.messageId 可能已被切段改了。
+             记在行上而不是只记在入库那一步——wire 帧也要带它（2026-09-11），两边必须同一个值。 */
+          messageId: input.forceNullMessage ? null : this.messageId
         };
         this.rows.set(id, row);
         this.createdCount += 1;
         if (!input.forceNullMessage) this.segmentItemCount += 1;
         if (!input.persist || !this.persistEnabled) return id;
-        const messageId = input.forceNullMessage ? null : this.messageId;
+        const messageId = row.messageId;
         const createdAt = this.now();
         const payload = input.payload ?? this.payloadOf(row);
         const metadata = input.metadata ?? { [CHAT_ITEM_META_LEGACY_CONTENT]: input.inContent };
@@ -29473,6 +29929,7 @@ async function openAssistantRunningRow(deps) {
 async function finalizeAssistantRow(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   const finishedAt = now();
+  const parts = await appendOutputsPart(deps.parts, deps.outputsPart);
   if (deps.assistantMsgId) {
     if (typeof deps.chatStore.updateMessage !== "function") return;
     try {
@@ -29480,7 +29937,7 @@ async function finalizeAssistantRow(deps) {
         content: deps.content,
         status: deps.status,
         completedAt: finishedAt,
-        ...deps.parts.length ? { parts: deps.parts } : {},
+        ...parts.length ? { parts } : {},
         ...deps.runId ? { runId: deps.runId } : {},
         ...deps.turnId ? { turnId: deps.turnId } : {}
       });
@@ -29488,7 +29945,7 @@ async function finalizeAssistantRow(deps) {
     }
     return;
   }
-  if (!deps.content && !deps.runId && deps.parts.length === 0) return;
+  if (!deps.content && !deps.runId && parts.length === 0) return;
   if (typeof deps.chatStore.appendMessage !== "function") return;
   try {
     await deps.chatStore.appendMessage({
@@ -29501,11 +29958,18 @@ async function finalizeAssistantRow(deps) {
       status: deps.status,
       ...deps.runId ? { runId: deps.runId } : {},
       ...deps.turnId ? { turnId: deps.turnId } : {},
-      ...deps.parts.length ? { parts: deps.parts } : {}
+      ...parts.length ? { parts } : {}
     });
   } catch {
   }
 }
+async function appendOutputsPart(parts, provider) {
+  if (!provider) return parts;
+  const part = await provider().catch(() => null);
+  if (!part || !part.outputs?.length) return parts;
+  const maxSeq = parts.reduce((m2, p2) => typeof p2.seq === "number" && p2.seq > m2 ? p2.seq : m2, 0);
+  return [...parts, { ...part, seq: maxSeq + 1 }];
+}
 function runBackgroundAssistantChatTurn(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   const log3 = deps.log ?? ((m2) => console.warn(m2));
@@ -29674,6 +30138,7 @@ function runBackgroundAssistantChatTurn(deps) {
           parts,
           status,
           ...runId ? { runId } : {},
+          ...deps.outputsPart ? { outputsPart: deps.outputsPart } : {},
           now
         });
         if (typeof deps.chatStore.updateSession === "function") {
@@ -51546,7 +52011,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes13, createHash: createHash38 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash39 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -52214,7 +52679,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash38("sha1").update(key + GUID).digest("base64");
+        const digest = createHash39("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -52583,7 +53048,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash38 } = require("crypto");
+    var { createHash: createHash39 } = require("crypto");
     var extension3 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -52890,7 +53355,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash38("sha1").update(key + GUID).digest("base64");
+        const digest = createHash39("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -142723,6 +143188,7 @@ function shortId2(id) {
 function stallOf(model, id, runtime, dispatcherSignals) {
   const a = model.artifacts.get(id);
   if (!a) return null;
+  if (a.continuationPause) return a.continuationPause.decision === "pending" ? { kind: "waiting_human", action: "discuss", ref: id, detail: a.continuationPause.detail, since: a.continuationPause.at } : { kind: "held", detail: "\u5DF2\u62D2\u7EDD\u8FFD\u52A0\u81EA\u52A8\u7EED\u8DD1\u989D\u5EA6\uFF0C\u8282\u70B9\u4FDD\u6301\u6682\u505C\uFF1B\u6210\u679C\u5DF2\u4FDD\u7559\u3002", since: a.continuationPause.at };
   const ownerIsAgent = a.owner.startsWith("actor:agent:");
   const escs = unresolvedEscalationsOf(model, id);
   if (escs.length > 0) {
@@ -142878,7 +143344,7 @@ function nodeInfo(model, a) {
   const hasUnproducedParts = (a.parts ?? []).some((p2) => !producedParts.has(p2.name));
   const blockedByIssue = unresolvedGapsOf(model, a.id).length > 0 || unresolvedEscalationsOf(model, a.id).length > 0;
   let mark;
-  if (!sealed && blockedByIssue) {
+  if (!sealed && (blockedByIssue || a.continuationPause)) {
     mark = "blocked";
   } else if (a.latestWorkState !== void 0) {
     const st = a.latestWorkState;
@@ -142935,6 +143401,7 @@ function deriveStage(members, opts) {
 }
 function nodeRunState(model, artifact, info, runtime, opts) {
   if (info.sealed) return void 0;
+  if (artifact.continuationPause) return artifact.continuationPause.decision === "pending" ? "pending" : "blocked";
   const id = artifact.id;
   const now = opts?.now ?? Date.now();
   const rt = runtime ?? {};
@@ -160267,6 +160734,7 @@ var init_live_chat = __esm({
             operation: "started",
             itemVersion: outcome.startedVersion,
             ...ord !== void 0 ? { ord } : {},
+            ...outcome.messageId !== null ? { messageId: outcome.messageId } : {},
             offset: 0,
             payload: v3StartedPayload(event.role, event.attrs, itemType, event.kind)
           };
@@ -160300,6 +160768,11 @@ var init_live_chat = __esm({
           // 账本这一次写用掉的那一格钟——**库里那一行的 version 就是它**，快照与增量流同一套版本空间。
           itemVersion: outcome.version,
           ...ord !== void 0 ? { ord } : {},
+          /* 归属：账本写进 `chat_items.message_id` 的那个值，原样带出去（2026-09-11）。
+             此前只有快照带它，于是「面板挂载之后才生出来的 item」在客户端永远没有归属——
+             右侧子会话面板靠它把 DB 详情与实时桶合成一条，对不上号就把同一轮画两遍。
+             `null` 不上 wire（省字节）：客户端合并层本就按「帧不带 ⇒ 保留已有」处理。 */
+          ...outcome.messageId !== null ? { messageId: outcome.messageId } : {},
           ...offset !== void 0 ? { offset } : {},
           ...payload !== void 0 ? { payload } : {}
         };
@@ -161065,15 +161538,29 @@ var init_chat_attachment_files = __esm({
 async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, attachments, retainLocallyOnFailure = false) {
   const newId = deps.newId ?? import_node_crypto20.randomUUID;
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  const submitted = await deps.store.enqueuePendingMessage({
-    id: newId(),
+  if (!deps.store.claimPendingInsert) {
+    return { accepted: false, reason: "queue-unavailable", queued: false, delivered: "", batch: [] };
+  }
+  const { submitted, batch } = await deps.store.claimPendingInsert({
+    id: clientKey ? `append-request:${(0, import_node_crypto20.createHash)("sha256").update(JSON.stringify([chatSessionId, clientKey])).digest("hex")}` : newId(),
     chatSessionId,
     text: text5,
     ...attachments?.length ? { attachments } : {},
     ...clientKey ? { clientKey } : {},
     createdAt: now()
   });
-  const batch = await deps.store.listPendingMessages(chatSessionId);
+  if (!batch.length) {
+    const state = submitted.state ?? "queued";
+    const returned = state === "cancelled" && submitted.stateReason?.startsWith("client-retained:");
+    const reason = returned ? submitted.stateReason.slice("client-retained:".length) : "unconfirmed";
+    return {
+      accepted: state === "delivered",
+      ...state !== "delivered" ? { reason } : {},
+      queued: !returned,
+      delivered: "",
+      batch: [submitted]
+    };
+  }
   const prepared = await buildChatAttachmentFiles(
     batch.flatMap((m2) => m2.attachments ?? []),
     deps.readBlob ?? (async (ref2) => {
@@ -161089,7 +161576,6 @@ async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, atta
   })));
   const batchKey = `append:${chatSessionId}:${batch.map((m2) => m2.id).join(",")}`;
   const ids2 = batch.map((m2) => m2.id);
-  await deps.store.markPendingMessages?.(chatSessionId, ids2, "delivering").catch(() => void 0);
   const clientKeys = batch.map((m2) => m2.clientKey).filter((k2) => !!k2);
   const res = await deps.deliver(merged, batchKey, {
     ...clientKeys.length ? { clientKeys } : {},
@@ -161102,7 +161588,7 @@ async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, atta
   const nextState = res.accepted ? "delivered" : DEFINITELY_NOT_DELIVERED.has(res.reason ?? "") ? "queued" : "unconfirmed";
   const returnToClient = retainLocallyOnFailure && !!clientKey && nextState === "queued";
   if (returnToClient && deps.store.markPendingMessages) {
-    await deps.store.markPendingMessages(chatSessionId, [submitted.id], "cancelled", "client-retained");
+    await deps.store.markPendingMessages(chatSessionId, [submitted.id], "cancelled", `client-retained:${res.reason}`);
     await deps.store.markPendingMessages(chatSessionId, ids2.filter((id) => id !== submitted.id), nextState, res.reason);
   } else {
     const transition = deps.store.markPendingMessages?.(chatSessionId, ids2, nextState, res.reason);
@@ -161323,6 +161809,17 @@ var init_workorder_drafts = __esm({
       async forWorkspace(workspace) {
         return [...this.drafts.values()].reverse().find((d) => d.workspace === workspace);
       }
+      /**
+       * 按 workspace + **版本号**取某一版（2026-09-11：对话流里一版一张卡，右侧面板也按版本定位，
+       * 于是「人在面板里改负责人/审核人再保存」这件事必须写回**他正在看的那一版**）。
+       *
+       * ⚠ 别用 `forWorkspace` 顶替它：那个取的是链上**最新**一版。看着 V1 改了一笔、却写进 V3，
+       * 等于用旧图把新图整个盖掉——V2/V3 的内容会无声消失（2026-09-11 发起人报的「节点图要隔离」）。
+       * 找不到那一版时回 undefined，由调用方判 404，不许静默回落到最新版。
+       */
+      async forWorkspaceVersion(workspace, version2) {
+        return [...this.drafts.values()].find((d) => d.workspace === workspace && d.version === version2);
+      }
       /** 按 chat 会话取最新一份：agent 不自带 ws（后端生成）时，friday 据本会话 id 取回它刚建的草案。 */
       async forSession(chatSessionId) {
         return [...this.drafts.values()].reverse().find((d) => d.chatSessionId === chatSessionId);
@@ -162369,8 +162866,8 @@ async function buildDynamicWorkorderPlan(input) {
       const explicit = node2.owner ? await validateExplicitOwner(input.registry, node2.owner, node2.type) : null;
       if (explicit?.issue) issues.push(explicit.issue);
       const owner = explicit?.actor ? { role: def.ownerRole ?? "", actor: explicit.actor } : def.ownerRole ? await resolveRole(def.ownerRole, node2.type) : null;
-      const staffed = owner?.actor && staffableTypes.has(node2.type);
-      if (enforceStaffing && def.ownerRole && !staffed && !input.retainUnstaffedNodes) continue;
+      const staffable = staffableTypes.has(node2.type);
+      if (enforceStaffing && def.ownerRole && !staffable && !input.retainUnstaffedNodes) continue;
       const ownerActor = owner?.actor ?? (def.ownerRole ? `pending:role:${def.ownerRole}` : PENDING_UNASSIGNED);
       availableNodes.push({
         type: node2.type,
@@ -162569,7 +163066,18 @@ async function validateExplicitOwner(registry2, owner, artifactType) {
   return { actor: owner };
 }
 function pickPreferred(actors) {
-  return [...actors].sort((a, b2) => a.kind !== b2.kind ? a.kind === "agent" ? -1 : 1 : a.id.localeCompare(b2.id))[0];
+  return actors.filter((a) => a.kind === "agent").sort((a, b2) => a.id.localeCompare(b2.id))[0];
+}
+async function autoAssignableRoles(registry2) {
+  const out = /* @__PURE__ */ new Set();
+  if (!registry2) return out;
+  for (const actor of await registry2.listActors({ status: "active" })) {
+    if (actor.kind !== "agent") continue;
+    const binding = await registry2.getBinding(actor.id);
+    if (!binding || binding.status !== "active") continue;
+    for (const role of actor.roles) out.add(role);
+  }
+  return out;
 }
 async function resolveActiveRole(registry2, role, artifactType, roles) {
   if (!registry2) {
@@ -162605,7 +163113,10 @@ async function resolveActiveRole(registry2, role, artifactType, roles) {
     };
   }
   const preferred = pickPreferred(actors);
+  const nodeWord = artifactType ? `${artifactType} \u8282\u70B9` : "\u5BF9\u5E94\u8282\u70B9";
   if (!preferred) {
+    const humans = actors.filter((a) => a.kind === "human");
+    const message = humans.length > 0 ? `${role} \u5C97\u4F4D\u5F53\u524D\u53EA\u6709\u771F\u4EBA\uFF08${humans.map((h) => h.name).join("\u3001")}\uFF09\u3001\u6CA1\u6709\u53EF\u81EA\u52A8\u63A5\u5355\u7684 agent\u2014\u2014${nodeWord}\u843D\u5F85\u5C97\uFF0C\u8BF7\u5728\u56FE\u4E0A\u6307\u5B9A\u8D1F\u8D23\u4EBA\uFF0C\u6216\u7ED9\u8BE5\u5C97\u4F4D\u914D\u4E00\u4E2A agent\u3002` : `\u7F3A\u5C11 active \u7684 ${role} \u5458\u5DE5\uFF0C${nodeWord}\u4E0D\u4F1A\u81EA\u52A8\u6D3E\u53D1\u3002`;
     return {
       role,
       actor: null,
@@ -162614,27 +163125,25 @@ async function resolveActiveRole(registry2, role, artifactType, roles) {
         severity: "blocking",
         role,
         ...artifactType ? { artifactType } : {},
-        message: `\u7F3A\u5C11 active \u7684 ${role} \u5458\u5DE5\uFF0C${artifactType ? `${artifactType} \u8282\u70B9` : "\u5BF9\u5E94\u8282\u70B9"}\u4E0D\u4F1A\u81EA\u52A8\u6D3E\u53D1\u3002`
+        message
       }
     };
   }
-  if (preferred.kind === "agent") {
-    const binding = await registry2.getBinding(preferred.id);
-    if (!binding || binding.status !== "active") {
-      return {
+  const binding = await registry2.getBinding(preferred.id);
+  if (!binding || binding.status !== "active") {
+    return {
+      role,
+      actor: null,
+      issue: {
+        code: "missing_binding",
+        severity: "blocking",
         role,
-        actor: null,
-        issue: {
-          code: "missing_binding",
-          severity: "blocking",
-          role,
-          ...artifactType ? { artifactType } : {},
-          // 措辞对两条路都成立：规则路会丢节点、agent/剧本路保留为待岗——**都是「暂不自动派发」**，
-          // 而非「暂不创建」（后者在保留待岗后就是假话）。
-          message: `${preferred.name}\uFF08${preferred.id}\uFF09\u7F3A\u5C11 active runtime \u7ED1\u5B9A\uFF0C${artifactType ? `${artifactType} \u8282\u70B9` : "\u5BF9\u5E94\u8282\u70B9"}\u6682\u4E0D\u81EA\u52A8\u6D3E\u53D1\uFF08\u5F85\u8865\u9F50\u540E\u81EA\u52A8\u63A5\u624B\uFF09\u3002`
-        }
-      };
-    }
+        ...artifactType ? { artifactType } : {},
+        // 措辞对两条路都成立：规则路会丢节点、agent/剧本路保留为待岗——**都是「暂不自动派发」**，
+        // 而非「暂不创建」（后者在保留待岗后就是假话）。
+        message: `${preferred.name}\uFF08${preferred.id}\uFF09\u7F3A\u5C11 active runtime \u7ED1\u5B9A\uFF0C${nodeWord}\u6682\u4E0D\u81EA\u52A8\u6D3E\u53D1\uFF08\u5F85\u8865\u9F50\u540E\u81EA\u52A8\u63A5\u624B\uFF09\u3002`
+      }
+    };
   }
   return { role, actor: preferred.id };
 }
@@ -163061,7 +163570,12 @@ function planningStatusOf(_model, arts, resolveRoleExecutor) {
     const role = a.owner.slice(PENDING_ROLE_PREFIX.length);
     if (seenRoles.has(role)) continue;
     seenRoles.add(role);
-    issues.push({ code: "missing_role", severity: "warning", role, message: `${role} \u89D2\u8272\u65E0 active \u5458\u5DE5\uFF0C\u76F8\u5173\u8282\u70B9\u5F85\u6D3E\u2014\u2014\u8BF7\u8865\u4EBA\u6216 assign\u3002` });
+    issues.push({
+      code: "missing_role",
+      severity: "warning",
+      role,
+      message: `${role} \u5C97\u4F4D\u6CA1\u6709\u53EF\u81EA\u52A8\u63A5\u5355\u7684 agent\uFF0C\u76F8\u5173\u8282\u70B9\u5F85\u6D3E\u2014\u2014\u8BF7 assign \u6307\u5B9A\u8D1F\u8D23\u4EBA\uFF0C\u6216\u7ED9\u8BE5\u5C97\u4F4D\u914D\u4E00\u4E2A agent\u3002`
+    });
   }
   if (resolveRoleExecutor) {
     for (const a of arts) {
@@ -163109,7 +163623,12 @@ function draftPlanningStatusOf(spawns, isRoleStaffed, extraBlockingIssues = [])
       if (isRoleStaffed(role)) continue;
       if (seenRoles.has(role)) continue;
       seenRoles.add(role);
-      issues.push({ code: "missing_role", severity: "warning", role, message: `${role} \u89D2\u8272\u65E0 active \u5458\u5DE5\uFF0C\u76F8\u5173\u8282\u70B9\u5F85\u6D3E\u2014\u2014\u8BF7\u8865\u4EBA\u6216 assign\u3002` });
+      issues.push({
+        code: "missing_role",
+        severity: "warning",
+        role,
+        message: `${role} \u5C97\u4F4D\u6CA1\u6709\u53EF\u81EA\u52A8\u63A5\u5355\u7684 agent\uFF0C\u76F8\u5173\u8282\u70B9\u5F85\u6D3E\u2014\u2014\u8BF7\u5728\u56FE\u4E0A\u6307\u5B9A\u8D1F\u8D23\u4EBA\uFF0C\u6216\u7ED9\u8BE5\u5C97\u4F4D\u914D\u4E00\u4E2A agent\u3002`
+      });
     }
   }
   for (const extra of extraBlockingIssues) {
@@ -164181,7 +164700,7 @@ async function planChatContinuation(input) {
   };
 }
 var UNFINISHED_OPEN, UNFINISHED_EMPTY;
-var init_continuation = __esm({
+var init_continuation3 = __esm({
   "../server/src/domains/chat-sessions/continuation.ts"() {
     "use strict";
     init_injected_context();
@@ -194775,6 +195294,7 @@ var init_curator_skill = __esm({
             skills,
             connectorIds,
             maxConcurrent: 4,
+            ...currentConfig?.continuationMaxRounds !== void 0 ? { continuationMaxRounds: currentConfig.continuationMaxRounds } : {},
             ...currentConfig?.batchedContinuation !== void 0 ? { batchedContinuation: currentConfig.batchedContinuation } : {}
           }, by);
         }
@@ -195758,7 +196278,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
       out.listDirCode = located.code;
       if (located.location) out.location = located.location;
       out.skipped.push({
-        source: `${DELEGATION_OUTPUTS_DIR}/`,
+        source: `${SESSION_OUTPUTS_DIR}/`,
         code: located.code,
         message: located.message ?? locationFailureMessage(located.code)
       });
@@ -195766,7 +196286,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     }
     out.location = located.location;
   }
-  const listing = await port.listDir(child, DELEGATION_OUTPUTS_DIR).catch((err) => ({
+  const listing = await port.listDir(child, SESSION_OUTPUTS_DIR).catch((err) => ({
     ok: false,
     code: "INTERNAL",
     message: err instanceof Error ? err.message : String(err)
@@ -195776,11 +196296,11 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     if (listing.code === "NOT_FOUND") return out;
     const code2 = listing.code;
     const message = isLocationFailureCode(code2) ? listing.message ?? locationFailureMessage(code2) : listing.message ?? code2;
-    out.skipped.push({ source: `${DELEGATION_OUTPUTS_DIR}/`, code: code2, message });
+    out.skipped.push({ source: `${SESSION_OUTPUTS_DIR}/`, code: code2, message });
     return out;
   }
   out.listDirCode = "OK";
-  const queue = [DELEGATION_OUTPUTS_DIR];
+  const queue = [SESSION_OUTPUTS_DIR];
   const files = [];
   let guard = 0;
   let hitFileCap = false;
@@ -195791,7 +196311,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     }
     guard += 1;
     const dir = queue.shift();
-    const level = dir === DELEGATION_OUTPUTS_DIR ? listing : await port.listDir(child, dir).catch(() => ({ ok: false, code: "INTERNAL" }));
+    const level = dir === SESSION_OUTPUTS_DIR ? listing : await port.listDir(child, dir).catch(() => ({ ok: false, code: "INTERNAL" }));
     if (!level.ok) {
       out.skipped.push({ source: `${dir}/`, code: level.code, message: level.code });
       continue;
@@ -195817,7 +196337,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
     });
   }
   for (const file of files) {
-    const relative5 = normalizeRelPath(file.rel.slice(DELEGATION_OUTPUTS_DIR.length + 1));
+    const relative5 = normalizeRelPath(file.rel.slice(SESSION_OUTPUTS_DIR.length + 1));
     if (!relative5) {
       out.skipped.push({ source: file.rel, code: "PATH_REJECTED", message: "\u8DEF\u5F84\u4E0D\u5408\u6CD5\uFF0C\u6CA1\u642C" });
       continue;
@@ -202567,33 +203087,13 @@ async function draftActorResolver(registry2) {
 }
 async function draftRoleStaffingResolver(registry2) {
   if (!registry2) return () => true;
-  const actors = await registry2.listActors();
-  const staffedRoles = /* @__PURE__ */ new Set();
-  for (const a of actors) if (a.status === "active") for (const r of a.roles) staffedRoles.add(r);
-  return (role) => staffedRoles.has(role);
+  const assignable = await autoAssignableRoles(registry2);
+  return (role) => assignable.has(role);
 }
 async function draftRolePlannableResolver(registry2) {
   if (!registry2) return async () => true;
-  const actors = await registry2.listActors();
-  const activeActorsByRole = /* @__PURE__ */ new Map();
-  for (const a of actors) {
-    if (a.status !== "active") continue;
-    for (const r of a.roles) {
-      const list2 = activeActorsByRole.get(r) ?? [];
-      list2.push(a);
-      activeActorsByRole.set(r, list2);
-    }
-  }
-  return async (role) => {
-    const list2 = activeActorsByRole.get(role);
-    if (!list2 || list2.length === 0) return false;
-    for (const a of list2) {
-      if (a.kind !== "agent") return true;
-      const binding = await registry2.getBinding(a.id);
-      if (binding && binding.status === "active") return true;
-    }
-    return false;
-  };
+  const assignable = await autoAssignableRoles(registry2);
+  return async (role) => assignable.has(role);
 }
 async function draftTypeReviewerResolver(schema, registry2) {
   if (!schema || !registry2) return void 0;
@@ -202905,6 +203405,8 @@ async function resolveProposeContent(kernel, blobs, args, artifactId, ctx) {
 }
 function authorizedCommandReceipt(command, args, actor) {
   switch (command) {
+    case "continueBatch":
+      return { message: `\u5DF2\u6388\u6743\u518D\u8FD0\u884C ${args.rounds} \u8F6E\uFF1B\u5176\u4ED6\u963B\u585E\u89E3\u9664\u540E\u7EE7\u7EED\u3002` };
     case "forceConclude":
       return { message: `force_conclude ${str(args, "artifactId")}\u2014\u2014\u91CC\u7A0B\u7891\u5E26 forced(by=${actor}) \u6807\u8BB0\uFF0C\u6D88\u8D39\u8005\u53EF\u89C1` };
     case "promote":
@@ -204058,7 +204560,7 @@ async function startOasisServer(opts) {
   const leftWaiterIds = /* @__PURE__ */ new Map();
   const LEFT_WAITER_IDS_MAX_DRAFTS = 512;
   const terminalReviews = /* @__PURE__ */ new Map();
-  const notifyReviewResolved = (draftId, r, resume, storeFor) => {
+  const notifyReviewResolved = (draftId, r, resume, storeFor, companyId) => {
     if (terminalReviews.has(draftId)) return;
     terminalReviews.set(draftId, r);
     if (terminalReviews.size > 512) {
@@ -204078,7 +204580,7 @@ async function startOasisServer(opts) {
     leftWaiterIds.delete(draftId);
     if (resume?.origin) {
       const needsAgentDelivery = resume.kind === "command" && !hadWaiters;
-      void settleAuthorizationStatusLine(resume.origin, r, resume, draftId, needsAgentDelivery, storeFor);
+      void settleAuthorizationStatusLine(resume.origin, r, resume, draftId, needsAgentDelivery, storeFor, companyId);
     }
   };
   const resolveEngine = opts.resolveEngine ?? (async () => ({ kernel: opts.kernel, oplog: opts.oplog, blobs: opts.blobs, ...opts.registry ? { registry: opts.registry } : {} }));
@@ -204156,6 +204658,14 @@ async function startOasisServer(opts) {
     }
     return null;
   };
+  const outputsPartFor = (chatSessionId, companyId) => {
+    const scan2 = opts.sessionOutputsScan;
+    if (!scan2) return void 0;
+    return async () => {
+      const files = await scan2({ chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
+      return files && files.length > 0 ? { type: "outputs", seq: 0, outputs: files } : null;
+    };
+  };
   async function anchorMessageIdFor(origin, storeFor) {
     if (!origin) return void 0;
     const live = liveChat.messageFor(origin);
@@ -204220,7 +204730,7 @@ async function startOasisServer(opts) {
     const label = ctx.effectLabel || ctx.command || "";
     return approved ? `\u547D\u4EE4\u5DF2\u7531 ${by} \u6279\u51C6\u5E76\u4EE5\u5176\u540D\u4E49\u6267\u884C${label ? `\uFF1A${label}` : ""}\u3002` : `\u547D\u4EE4\u5DF2\u88AB ${by} \u9A73\u56DE${reason ? `\uFF1A${reason}` : ""}\u3002`;
   };
-  const settleAuthorizationStatusLine = async (origin, resolution, ctx, draftId, needsAgentDelivery, storeFor) => {
+  const settleAuthorizationStatusLine = async (origin, resolution, ctx, draftId, needsAgentDelivery, storeFor, companyId) => {
     const store = storeFor ? await storeFor().catch(() => null) : opts.chatSession;
     if (!store) return;
     const session = await store.getSession(origin).catch(() => null);
@@ -204293,10 +204803,12 @@ async function startOasisServer(opts) {
       ...dispatched.supportsLiveProtocol !== void 0 ? { supportsLiveProtocol: dispatched.supportsLiveProtocol } : {},
       done: dispatched.done
     };
+    const resumeOutputsPart = outputsPartFor(origin, companyId);
     runBackgroundAssistantChatTurn({
       chatStore: store,
       chatSessionId: origin,
-      session: bgSession
+      session: bgSession,
+      ...resumeOutputsPart ? { outputsPart: resumeOutputsPart } : {}
     });
     await markDelivered();
   };
@@ -204552,10 +205064,12 @@ async function startOasisServer(opts) {
           ...session.supportsLiveProtocol !== void 0 ? { supportsLiveProtocol: session.supportsLiveProtocol } : {},
           ...session.done ? { done: session.done } : {}
         };
+        const broadcastOutputsPart = outputsPartFor(sessionId, companyId);
         runBackgroundAssistantChatTurn({
           chatStore: store,
           chatSessionId: sessionId,
           session: bgSession,
+          ...broadcastOutputsPart ? { outputsPart: broadcastOutputsPart } : {},
           liveChat,
           liveHandle: {
             runtimeSessionId: session.id,
@@ -205383,11 +205897,7 @@ async function startOasisServer(opts) {
                 return;
               }
             }
-            const staffedRoles = /* @__PURE__ */ new Set();
-            if (principalRegistry) {
-              const actorsForStaffing = await principalRegistry.listActors();
-              for (const a of actorsForStaffing) if (a.status === "active") for (const r of a.roles) staffedRoles.add(r);
-            }
+            const staffedRoles = await autoAssignableRoles(principalRegistry);
             const spawnedForPlanning = body2.plan.ops.filter((op) => op.action === "spawn").filter((op) => op.type !== DELIVERY_SUMMARY_ARTIFACT_TYPE).map((op) => {
               const title = op.title ?? op.description;
               return {
@@ -205533,7 +206043,8 @@ async function startOasisServer(opts) {
                 draftId,
                 { status: "approved", command, effectLabel: review.command.effectLabel, authorizedBy: actor, receipt },
                 { origin: review.origin, kind: "command", authorizedBy: actor, effectLabel: review.command.effectLabel, command },
-                chatStoreNowOrNull
+                chatStoreNowOrNull,
+                currentCompanyId
               );
               res.writeHead(200, { "content-type": "application/json" }).end(
                 JSON.stringify({ applied: 1, command, artifactId, draftId, draftedBy: review.proposedBy, authorizedBy: actor })
@@ -205795,7 +206306,7 @@ async function startOasisServer(opts) {
         }
         if (url.pathname === "/api/workorder/draft/plan" && req.method === "POST" && wodrafts) {
           try {
-            const { workspace, plan, holder } = JSON.parse(rawBody);
+            const { workspace, plan, holder, version: version2 } = JSON.parse(rawBody);
             if (!workspace || !plan || !Array.isArray(plan.ops)) throw new Error("\u9700\u8981 { workspace, plan:{ops:[]} }");
             const planLockedBy = wodrafts.editLockHolder(workspace);
             if (planLockedBy && planLockedBy !== holder) {
@@ -205804,9 +206315,10 @@ async function startOasisServer(opts) {
               );
               return;
             }
-            const draft = await wodrafts.forWorkspace(workspace);
+            const draft = version2 === void 0 ? await wodrafts.forWorkspace(workspace) : await wodrafts.forWorkspaceVersion(workspace, version2);
             if (!draft) {
-              res.writeHead(404, { "content-type": "application/json" }).end(JSON.stringify({ error: `no staged workorder draft for ${workspace}` }));
+              const what = version2 === void 0 ? workspace : `${workspace} v${version2}`;
+              res.writeHead(404, { "content-type": "application/json" }).end(JSON.stringify({ error: `no staged workorder draft for ${what}` }));
               return;
             }
             const pv = await engine.kernel.previewIntervention({ ...plan, reason: plan.reason || "(draft edit)" });
@@ -206076,7 +206588,7 @@ async function startOasisServer(opts) {
             if (viewName === "intervention-drafts") {
               const origin = url.searchParams.get("origin");
               const workspace = url.searchParams.get("workspace") ?? void 0;
-              const reviews = listPendingReviews(engine.kernel.model, origin === null ? workspace : void 0).filter((r) => origin === null ? true : r.origin === origin);
+              const reviews = listPendingReviews(engine.kernel.model, origin === null ? workspace : void 0).filter((r) => origin === null ? true : r.origin === origin).filter((r) => !r.continuation || r.continuation.approverActorId === actor);
               const data2 = reviews.map((r) => ({
                 id: r.draftId,
                 plan: r.plan,
@@ -206094,7 +206606,8 @@ async function startOasisServer(opts) {
                 anchor: r.anchor,
                 // 提案 coordinator-command-authorization：命令授权卡的种类 + 命令本体（前端据此渲成命令卡）。
                 ...r.kind !== void 0 ? { kind: r.kind } : {},
-                ...r.command !== void 0 ? { command: r.command } : {}
+                ...r.command !== void 0 ? { command: r.command } : {},
+                ...r.continuation ? { continuation: r.continuation } : {}
               }));
               res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ data: data2 }));
               return;
@@ -206721,6 +207234,7 @@ ${composed}`;
                 await checkpointChain.catch(() => void 0);
                 await itemLedger.drain();
                 const projectedContent = itemLedger.projectContent();
+                const chatOutputsPart = outputsPartFor(persistTarget.id, currentCompanyId);
                 await finalizeAssistantRow({
                   chatStore,
                   chatSessionId: persistTarget.id,
@@ -206730,6 +207244,7 @@ ${composed}`;
                   status,
                   ...session.runId ? { runId: session.runId } : {},
                   ...heldTurn ? { turnId: heldTurn.id } : {},
+                  ...chatOutputsPart ? { outputsPart: chatOutputsPart } : {},
                   now: () => finishedAt
                 });
                 await heldTurn?.settle({
@@ -208228,7 +208743,7 @@ var init_server3 = __esm({
     init_planner();
     init_chat_parts();
     init_injected_context();
-    init_continuation();
+    init_continuation3();
     init_chat_turn_gate();
     init_chat_workorder_files();
     init_chat_item_ledger();
@@ -208241,7 +208756,7 @@ var init_server3 = __esm({
     init_assembly();
     init_child_live_turn();
     init_src8();
-    init_continuation();
+    init_continuation3();
     githubAppPending = new PendingAppCreations();
     connectorAuthSnapshots = /* @__PURE__ */ new Map();
     CONNECTOR_AUTH_SNAPSHOT_TTL_MS = 30 * 60 * 1e3;
@@ -213729,6 +214244,17 @@ var init_dev_store = __esm({
       /** ADR-0166 D6 待发队列（每会话一条，按 seq 升序 = 入队序）。 */
       pending = /* @__PURE__ */ new Map();
       pendingSeq = 0;
+      async claimPendingInsert(m2) {
+        const list2 = this.pending.get(m2.chatSessionId) ?? [];
+        const prior = list2.find((x2) => x2.id === m2.id) ?? list2.find((x2) => m2.clientKey && x2.clientKey === m2.clientKey && (x2.state ?? "queued") === "queued");
+        if (prior) return { submitted: prior, batch: [] };
+        const submitted = { ...m2, state: "queued", stateAt: m2.createdAt, seq: ++this.pendingSeq };
+        const all2 = [...list2, submitted];
+        const batch = all2.filter((x2) => (x2.state ?? "queued") === "queued");
+        this.pending.set(m2.chatSessionId, all2);
+        this.setState(m2.chatSessionId, new Set(batch.map((x2) => x2.id)), "delivering", "append-now");
+        return { submitted, batch };
+      }
       async enqueuePendingMessage(m2) {
         const list2 = this.pending.get(m2.chatSessionId) ?? [];
         if (m2.clientKey) {
@@ -214096,6 +214622,11 @@ var init_dev_store = __esm({
         return r;
       }
       // 待发队列也要落盘——它存在的全部理由就是"别只活在一处内存里"（ADR-0166 D6）。
+      async claimPendingInsert(m2) {
+        const result = await super.claimPendingInsert(m2);
+        this.save();
+        return result;
+      }
       async enqueuePendingMessage(m2) {
         const record8 = await super.enqueuePendingMessage(m2);
         this.save();
@@ -214943,6 +215474,74 @@ var init_company_scoped_registry = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/outputs-scan.ts
+function joinRel(dir, name) {
+  return dir ? `${dir}/${name}` : name;
+}
+async function scanSessionOutputs(bridge, loc, now = Date.now) {
+  const deadline = now() + BUDGET_MS;
+  const out = [];
+  let listCalls = 0;
+  const listDir = (path41) => {
+    listCalls += 1;
+    return bridge.list(loc.nodeId, {
+      workdirKey: loc.workdirKey,
+      runtimeKind: loc.runtimeKind,
+      rtId: loc.rtId,
+      path: path41
+    });
+  };
+  const root = await listDir(SESSION_OUTPUTS_DIR).catch(() => null);
+  if (!root) return null;
+  if (!root.ok) {
+    return root.code === "NOT_FOUND" ? [] : null;
+  }
+  let level = [{ path: SESSION_OUTPUTS_DIR, outcome: root }];
+  for (let depth = 0; depth <= MAX_DEPTH; depth += 1) {
+    const nextDirs = [];
+    for (const { path: dir, outcome } of level) {
+      if (!outcome.ok) continue;
+      for (const entry of outcome.entries) {
+        if (entry.type === "dir") {
+          nextDirs.push(joinRel(dir, entry.name));
+          continue;
+        }
+        if (out.length >= MAX_ENTRIES) continue;
+        out.push({ path: joinRel(dir, entry.name), size: entry.size, mtime: entry.mtime });
+      }
+    }
+    if (nextDirs.length === 0 || depth === MAX_DEPTH) break;
+    if (out.length >= MAX_ENTRIES || listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+    const batch = [];
+    for (const dir of nextDirs) {
+      if (listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+      const outcome = await listDir(dir).catch(() => null);
+      if (outcome) batch.push({ path: dir, outcome });
+    }
+    level = batch;
+  }
+  return out;
+}
+async function settleSessionOutputs(deps) {
+  const scanned = await scanSessionOutputs(deps.bridge, deps.loc, deps.now);
+  if (scanned === null) return null;
+  const previous3 = await deps.readFingerprints(deps.sessionId).catch(() => null);
+  const diff = diffSessionOutputs(scanned, previous3 ?? void 0);
+  await deps.writeFingerprints(deps.sessionId, diff.fingerprints).catch(() => void 0);
+  return diff;
+}
+var MAX_DEPTH, MAX_ENTRIES, MAX_LIST_CALLS, BUDGET_MS;
+var init_outputs_scan = __esm({
+  "../server/src/domains/chat-sessions/outputs-scan.ts"() {
+    "use strict";
+    init_src();
+    MAX_DEPTH = 3;
+    MAX_ENTRIES = 100;
+    MAX_LIST_CALLS = 12;
+    BUDGET_MS = 5e3;
+  }
+});
+
 // ../server/src/org-model-backfill.ts
 function resolveDisplayName(existing, humanActor, accountName) {
   const pick3 = existing?.trim() || humanActor?.name?.trim() || accountName?.trim();
@@ -219694,6 +220293,7 @@ var init_service5 = __esm({
           connectorIds: patch.connectorIds ?? latest?.connectorIds ?? [],
           maxConcurrent: patch.maxConcurrent ?? latest?.maxConcurrent ?? 4,
           batchedContinuation: patch.batchedContinuation ?? latest?.batchedContinuation ?? false,
+          continuationMaxRounds: patch.continuationMaxRounds ?? latest?.continuationMaxRounds ?? 3,
           extraArgs: patch.extraArgs ?? latest?.extraArgs ?? [],
           createdBy: by,
           createdAt: this.now(),
@@ -219721,6 +220321,7 @@ var init_service5 = __esm({
           connectorIds: [...target.connectorIds],
           maxConcurrent: target.maxConcurrent,
           batchedContinuation: target.batchedContinuation ?? false,
+          continuationMaxRounds: target.continuationMaxRounds ?? 3,
           extraArgs: [...target.extraArgs ?? []],
           createdBy: by,
           createdAt: this.now(),
@@ -220609,12 +221210,13 @@ ${input.description}
     };
     mask = (plain) => plain.length <= 4 ? "\u2022\u2022\u2022\u2022" : `${"\u2022".repeat(4)}${plain.slice(-4)}`;
     changedKeys = (prev, next) => {
-      if (!prev) return ["prompt", "model", "skills", "connectorIds", "maxConcurrent", "batchedContinuation", "extraArgs"];
+      if (!prev) return ["prompt", "model", "skills", "connectorIds", "maxConcurrent", "batchedContinuation", "continuationMaxRounds", "extraArgs"];
       const keys = [];
       if (prev.prompt !== next.prompt) keys.push("prompt");
       if (prev.model !== next.model) keys.push("model");
       if (JSON.stringify(prev.skills) !== JSON.stringify(next.skills)) keys.push("skills");
       if (JSON.stringify(prev.connectorIds) !== JSON.stringify(next.connectorIds)) keys.push("connectorIds");
+      if ((prev.continuationMaxRounds ?? 3) !== (next.continuationMaxRounds ?? 3)) keys.push("continuationMaxRounds");
       if ((prev.batchedContinuation ?? false) !== (next.batchedContinuation ?? false)) keys.push("batchedContinuation");
       if (prev.maxConcurrent !== next.maxConcurrent) keys.push("maxConcurrent");
       if (JSON.stringify(prev.extraArgs ?? []) !== JSON.stringify(next.extraArgs ?? [])) keys.push("extraArgs");
@@ -221367,11 +221969,11 @@ function aggregateUsageByActor(runs) {
 function weekWindow(now = /* @__PURE__ */ new Date()) {
   return { from: new Date(now.getTime() - 7 * 24 * 60 * 60 * 1e3).toISOString(), to: now.toISOString() };
 }
-async function listWeeklyUsageByActor(trace) {
+async function listWeeklyUsageByActor(trace, artifactIds) {
   if (!trace?.listUsageRuns) return null;
   const { from, to } = weekWindow();
   try {
-    return aggregateUsageByActor(await trace.listUsageRuns({ from, to }));
+    return aggregateUsageByActor(await trace.listUsageRuns({ from, to, ...artifactIds ? { artifactIds: [...artifactIds] } : {} }));
   } catch {
     return null;
   }
@@ -221973,9 +222575,15 @@ function actorsDomain(opts) {
   const revealLimiter = new RevealRateLimiter(revealLimits.perSession, revealLimits.perSessionPerKey);
   const consoleRevealLimits = opts.credentialRevealLimits?.console ?? { perSession: 60, perSessionPerKey: 10 };
   const consoleRevealLimiter = new RevealRateLimiter(consoleRevealLimits.perSession, consoleRevealLimits.perSessionPerKey);
+  async function usageFor(companyId, ctx) {
+    const source = opts.resolveTrace ? await opts.resolveTrace(companyId) : { store: opts.trace?.(), companyScoped: false };
+    const artifactIds = companyId && !source?.companyScoped ? new Set(ctx.getModel?.().artifacts.keys() ?? []) : void 0;
+    return { usage: source?.store, ...artifactIds ? { artifactIds } : {} };
+  }
   return (router) => {
     router.get("/api/actors", async (req) => {
-      const { service } = await resolveCtx(req.auth.companyId);
+      const ctx = await resolveCtx(req.auth.companyId);
+      const { service } = ctx;
       const filter = {};
       const kind = req.query.get("kind");
       const teamId = req.query.get("team_id");
@@ -221987,9 +222595,10 @@ function actorsDomain(opts) {
       const includeDeleted = req.query.get("include_deleted") === "1";
       const items = status || includeDeleted ? all2 : all2.filter((a) => a.kind !== "agent" || !isDeletedActor(a));
       const agentIds = items.filter((a) => a.kind === "agent").map((a) => a.id);
+      const usageSource = await usageFor(req.auth.companyId, ctx).catch(() => ({ usage: void 0, artifactIds: void 0 }));
       const [configs, usageByActor] = await Promise.all([
         service.latestConfigs(agentIds),
-        listWeeklyUsageByActor(opts.trace?.())
+        listWeeklyUsageByActor(usageSource.usage, usageSource.artifactIds)
       ]);
       return {
         status: 200,
@@ -222131,6 +222740,9 @@ function actorsDomain(opts) {
       checkStringArray("skills");
       checkStringArray("connectorIds");
       checkBoolean("batchedContinuation");
+      if (b2.continuationMaxRounds !== void 0 && (!Number.isSafeInteger(b2.continuationMaxRounds) || b2.continuationMaxRounds < 1 || b2.continuationMaxRounds > 100)) {
+        throw new ApiError(400, "BAD_REQUEST", "continuationMaxRounds \u5FC5\u987B\u662F 1\u2013100 \u7684\u6574\u6570");
+      }
       const rawExtra = b2.extraArgs;
       if (rawExtra !== void 0 && typeof rawExtra !== "string" && !(Array.isArray(rawExtra) && rawExtra.every((x2) => typeof x2 === "string"))) {
         throw new ApiError(400, "BAD_REQUEST", "extraArgs \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6216\u5B57\u7B26\u4E32\u6570\u7EC4");
@@ -222152,6 +222764,7 @@ function actorsDomain(opts) {
           ...b2.skills !== void 0 ? { skills: b2.skills } : {},
           ...b2.connectorIds !== void 0 ? { connectorIds: b2.connectorIds } : {},
           ...typeof b2.maxConcurrent === "number" ? { maxConcurrent: b2.maxConcurrent } : {},
+          ...b2.continuationMaxRounds !== void 0 ? { continuationMaxRounds: b2.continuationMaxRounds } : {},
           ...b2.batchedContinuation !== void 0 ? { batchedContinuation: b2.batchedContinuation } : {},
           ...extraArgs !== void 0 ? { extraArgs } : {}
         },
@@ -222665,9 +223278,8 @@ function actorsDomain(opts) {
       return {
         status: 200,
         body: await actorStats(req.params.id, {
-          usage: req.auth.companyId && !model ? void 0 : opts.trace?.(),
-          model,
-          ...req.auth.companyId ? { artifactIds: new Set(model?.artifacts.keys() ?? []) } : {}
+          ...await usageFor(req.auth.companyId, ctx),
+          model
         })
       };
     });
@@ -223251,7 +223863,7 @@ function createActorsDomain(opts) {
   return {
     service: defaultCtx.service,
     resolveCtx,
-    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
+    register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
 var import_node_crypto49;
@@ -225716,6 +226328,7 @@ var init_activity_trace = __esm({
 
 // ../server/src/domains/collab/inbox.ts
 function changeConfirmSummary(r) {
+  if (r.continuation) return `\u81EA\u52A8\u7EED\u8DD1\u5DF2\u5230\u9650\uFF0C\u7B49\u5F85\u4F60\u5BA1\u6838\uFF1A${r.plan.reason}`;
   const why = r.plan.reason.slice(0, 100);
   if (r.kind === "command" && r.command) {
     return `\u7BA1\u7406\u8005\u8BF7\u6C42\u6267\u884C\u4E00\u4E2A\u9AD8\u5371\u64CD\u4F5C\uFF0C\u7B49\u4F60\u6388\u6743\uFF1A${r.command.effectLabel}`;
@@ -225876,7 +226489,7 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
     const anchorOwner = model.artifacts.get(r.anchor)?.owner;
     const isOwnerRecipient = creatorOf.get(r.workspace) === me;
     const isLeadRecipient = !!anchorOwner && !!leadOf && leadOf(anchorOwner) === me;
-    if (!isOwnerRecipient && !isLeadRecipient) continue;
+    if (r.continuation ? r.continuation.approverActorId !== me : !isOwnerRecipient && !isLeadRecipient) continue;
     const anchorArt = model.artifacts.get(r.anchor);
     const opCount = r.plan.ops?.length ?? 0;
     out.push({
@@ -228494,7 +229107,7 @@ function reasonFromWorkdirCode(code2) {
       return "ERROR";
   }
 }
-function joinRel(dir, name) {
+function joinRel2(dir, name) {
   return dir ? `${dir}/${name}` : name;
 }
 async function collectWorkdirFiles(bridge, loc, now = Date.now) {
@@ -228527,14 +229140,14 @@ async function collectWorkdirFiles(bridge, loc, now = Date.now) {
       if (outcome.truncated) truncated = true;
       for (const entry of outcome.entries) {
         if (entry.type === "dir") {
-          nextDirs.push(joinRel(dir, entry.name));
+          nextDirs.push(joinRel2(dir, entry.name));
           continue;
         }
         if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
           truncated = true;
           continue;
         }
-        const rel = joinRel(dir, entry.name);
+        const rel = joinRel2(dir, entry.name);
         items.push({
           id: `workdir:${rel}`,
           name: entry.name,
@@ -231227,6 +231840,9 @@ function nodesDomain(deps) {
         const rts = runtimesByNode.get(n.id) ?? [];
         const daemonVersion = daemonVersionById.get(n.id);
         const connection = connectionById.get(n.id);
+        const nodeOffline = !onlineIds.has(n.id);
+        const lastDisconnectedAt = connection?.lastDisconnectedAt !== void 0 ? new Date(connection.lastDisconnectedAt).toISOString() : nodeOffline ? n.lastSeenAt : void 0;
+        const lastReconnectedAt = connection?.lastReconnectedAt !== void 0 ? new Date(connection.lastReconnectedAt).toISOString() : void 0;
         const activeRunCount = deps.activeRunCountOf?.(n.id) ?? 0;
         const updateStatus = reconcileNodeUpdate(n.id, daemonVersion, activeRunCount, healthNow);
         return {
@@ -231240,10 +231856,10 @@ function nodesDomain(deps) {
           ...sourceIpById.get(n.id) ? { sourceIp: sourceIpById.get(n.id) } : {},
           ...n.name ? { name: n.name } : {},
           ...updateStatus ? { updateStatus } : {},
-          ...connection ? {
+          ...lastDisconnectedAt || lastReconnectedAt ? {
             connection: {
-              ...connection.lastDisconnectedAt ? { lastDisconnectedAt: new Date(connection.lastDisconnectedAt).toISOString() } : {},
-              ...connection.lastReconnectedAt ? { lastReconnectedAt: new Date(connection.lastReconnectedAt).toISOString() } : {}
+              ...lastDisconnectedAt ? { lastDisconnectedAt } : {},
+              ...lastReconnectedAt ? { lastReconnectedAt } : {}
             }
           } : {},
           ...deps.nodeHealth ? {
@@ -241578,6 +242194,7 @@ var init_postgres_registry = __esm({
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS max_concurrent integer NOT NULL DEFAULT 4`);
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS reviewer_ids jsonb NOT NULL DEFAULT '[]'::jsonb`);
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS batched_continuation boolean NOT NULL DEFAULT false`);
+        await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS continuation_max_rounds integer NOT NULL DEFAULT 3 CHECK (continuation_max_rounds BETWEEN 1 AND 100)`);
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS extra_args jsonb NOT NULL DEFAULT '[]'::jsonb`);
         await pool.query(`ALTER TABLE "${s2}".actor_configs ADD COLUMN IF NOT EXISTS memory_enabled boolean NOT NULL DEFAULT true`);
         await pool.query(`
@@ -241829,8 +242446,8 @@ var init_postgres_registry = __esm({
         const r = await this.pool.query(
           // reviewer_ids 列保留（历史数据）但不再写入——决策 0029 删了 actor 级 reviewer override；列有 DEFAULT '[]' 自动填。
           `INSERT INTO ${this.s}.actor_configs
-         (actor_id, version, prompt, model, skills, connector_ids, max_concurrent, batched_continuation, extra_args, created_by, created_at, source, rolled_back_from)
-       SELECT $1,$2::int,$3,$4,$5::jsonb,$6::jsonb,$7::int,$8::boolean,$9::jsonb,$10,$11,$12,$13
+         (actor_id, version, prompt, model, skills, connector_ids, max_concurrent, batched_continuation, extra_args, created_by, created_at, source, rolled_back_from, continuation_max_rounds)
+       SELECT $1,$2::int,$3,$4,$5::jsonb,$6::jsonb,$7::int,$8::boolean,$9::jsonb,$10,$11,$12,$13,$14::int
        WHERE (SELECT COALESCE(MAX(version), 0) + 1 FROM ${this.s}.actor_configs WHERE actor_id = $1) = $2::int`,
           [
             c.actorId,
@@ -241845,7 +242462,8 @@ var init_postgres_registry = __esm({
             c.createdBy,
             c.createdAt,
             c.source,
-            c.rolledBackFrom ?? null
+            c.rolledBackFrom ?? null,
+            c.continuationMaxRounds ?? 3
           ]
         );
         if (r.rowCount !== 1) throw new Error(`config version conflict for ${c.actorId}: got ${c.version}`);
@@ -242297,6 +242915,7 @@ var init_postgres_registry = __esm({
       connectorIds: row.connector_ids,
       maxConcurrent: row.max_concurrent ?? 4,
       batchedContinuation: row.batched_continuation ?? false,
+      continuationMaxRounds: row.continuation_max_rounds ?? 3,
       extraArgs: row.extra_args ?? [],
       // 注意：memory_enabled 是死列，不映射进 ActorConfig——记忆开关在 agent_prefs。
       createdBy: row.created_by,
@@ -247647,6 +248266,7 @@ var init_postgres_chat_sessions = __esm({
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS escalation_id text`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS model text`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS visibility text`);
+        await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS outputs_fingerprints jsonb`);
         await pool.query(`
       WITH ranked AS (
         SELECT id, row_number() OVER (PARTITION BY session_id ORDER BY seq, created_at, id) AS rn
@@ -247877,6 +248497,23 @@ var init_postgres_chat_sessions = __esm({
           args
         );
       }
+      /**
+       * `outputs/` 跨轮指纹（2026-09-11 产出卡）。整表覆盖，不做增量合并——判据的真源永远是
+       * 最近一次扫描看到的现场；合并会让「文件被删掉」这件事永远留在表里。
+       */
+      async readOutputFingerprints(sessionId) {
+        const r = await this.pool.query(
+          `SELECT outputs_fingerprints FROM ${this.s}.chat_sessions WHERE id = $1 AND company_id = $2`,
+          [sessionId, this.companyId]
+        );
+        return r.rows[0]?.outputs_fingerprints ?? null;
+      }
+      async writeOutputFingerprints(sessionId, fingerprints) {
+        await this.pool.query(
+          `UPDATE ${this.s}.chat_sessions SET outputs_fingerprints = $1::jsonb WHERE id = $2 AND company_id = $3`,
+          [JSON.stringify(fingerprints), sessionId, this.companyId]
+        );
+      }
       /** 删项目时把本公司里绑到它的会话回落成「不指定项目」。会话一条都不删，只清 project_id。 */
       async clearProjectBinding(projectId2) {
         if (!projectId2) return 0;
@@ -248279,6 +248916,42 @@ var init_postgres_chat_sessions = __esm({
         return r.rows.map(rowToMessage);
       }
       // ── ADR-0166 D6 待发队列 ─────────────────────────────────────────────────
+      async claimPendingInsert(m2) {
+        const client = await this.pool.connect();
+        try {
+          await client.query("BEGIN");
+          const scope = await client.query(`SELECT id FROM ${this.s}.chat_sessions WHERE id=$1 AND company_id=$2 FOR UPDATE`, [m2.chatSessionId, this.companyId]);
+          if (!scope.rows.length) throw new ChatCompanyScopeError(this.companyId, m2.chatSessionId);
+          const ins = await client.query(
+            `INSERT INTO ${this.s}.chat_pending_messages (id, chat_session_id, text, attachments, client_key, created_at, flavour)
+         VALUES ($1,$2,$3,$4,$5,$6,$7) ON CONFLICT DO NOTHING RETURNING *`,
+            [m2.id, m2.chatSessionId, m2.text, m2.attachments ? JSON.stringify(m2.attachments) : null, m2.clientKey ?? null, m2.createdAt, m2.flavour ?? "user"]
+          );
+          if (!ins.rows.length) {
+            const prior = await client.query(
+              `SELECT * FROM ${this.s}.chat_pending_messages WHERE chat_session_id=$1
+           AND (id=$2 OR (client_key=$3 AND state='queued')) ORDER BY (id=$2) DESC LIMIT 1`,
+              [m2.chatSessionId, m2.id, m2.clientKey ?? null]
+            );
+            if (!prior.rows[0]) throw new Error("claimPendingInsert: conflicting submission unavailable");
+            await client.query("COMMIT");
+            return { submitted: rowToPending(prior.rows[0]), batch: [] };
+          }
+          const claimed = await client.query(
+            `UPDATE ${this.s}.chat_pending_messages SET state='delivering', state_at=now(), state_reason='append-now'
+         WHERE chat_session_id=$1 AND state='queued' RETURNING *`,
+            [m2.chatSessionId]
+          );
+          await client.query("COMMIT");
+          return { submitted: rowToPending(ins.rows[0]), batch: claimed.rows.map(rowToPending).sort((a, b2) => a.seq - b2.seq) };
+        } catch (error2) {
+          await client.query("ROLLBACK").catch(() => {
+          });
+          throw error2;
+        } finally {
+          client.release();
+        }
+      }
       async enqueuePendingMessage(m2) {
         await this.assertSessionInScope(m2.chatSessionId);
         const initialState = m2.state;
@@ -252201,6 +252874,7 @@ async function provisionCompanyDataPlaneSchema(pool, schema) {
       reviewer_ids           jsonb NOT NULL DEFAULT '[]'::jsonb,
       max_concurrent         integer NOT NULL DEFAULT 4,
       batched_continuation   boolean NOT NULL DEFAULT false,
+      continuation_max_rounds integer NOT NULL DEFAULT 3 CHECK (continuation_max_rounds BETWEEN 1 AND 100),
       extra_args             jsonb NOT NULL DEFAULT '[]'::jsonb,
       memory_enabled         boolean NOT NULL DEFAULT true,
       created_by             text NOT NULL REFERENCES ${s2}.actors(id) ON DELETE RESTRICT,
@@ -252209,6 +252883,7 @@ async function provisionCompanyDataPlaneSchema(pool, schema) {
       rolled_back_from       integer,
       PRIMARY KEY (actor_id, version)
     )`);
+  await pool.query(`ALTER TABLE ${s2}.actor_configs ADD COLUMN IF NOT EXISTS continuation_max_rounds integer NOT NULL DEFAULT 3 CHECK (continuation_max_rounds BETWEEN 1 AND 100)`);
   await pool.query(`
     CREATE TABLE IF NOT EXISTS ${s2}.agent_prefs (
       actor_id       text PRIMARY KEY REFERENCES ${s2}.actors(id) ON DELETE CASCADE,
@@ -252332,6 +253007,7 @@ function rowToConfig2(row) {
     connectorIds: row.connector_ids,
     maxConcurrent: row.max_concurrent,
     batchedContinuation: row.batched_continuation,
+    continuationMaxRounds: row.continuation_max_rounds ?? 3,
     extraArgs: row.extra_args ?? [],
     createdBy: row.created_by,
     createdAt: new Date(row.created_at).toISOString(),
@@ -252614,8 +253290,8 @@ var init_company_owned_registry_store = __esm({
       async appendConfig(c) {
         const r = await this.pool.query(
           `INSERT INTO ${this.s}.actor_configs
-         (actor_id, version, prompt, model, skills, connector_ids, max_concurrent, batched_continuation, extra_args, created_by, created_at, source, rolled_back_from)
-       SELECT $1,$2::int,$3,$4,$5::jsonb,$6::jsonb,$7::int,$8::boolean,$9::jsonb,$10,$11,$12,$13
+         (actor_id, version, prompt, model, skills, connector_ids, max_concurrent, batched_continuation, extra_args, created_by, created_at, source, rolled_back_from, continuation_max_rounds)
+       SELECT $1,$2::int,$3,$4,$5::jsonb,$6::jsonb,$7::int,$8::boolean,$9::jsonb,$10,$11,$12,$13,$14::int
        WHERE (SELECT COALESCE(MAX(version), 0) + 1 FROM ${this.s}.actor_configs WHERE actor_id = $1) = $2::int`,
           [
             c.actorId,
@@ -252630,7 +253306,8 @@ var init_company_owned_registry_store = __esm({
             c.createdBy,
             c.createdAt,
             c.source,
-            c.rolledBackFrom ?? null
+            c.rolledBackFrom ?? null,
+            c.continuationMaxRounds ?? 3
           ]
         );
         if (r.rowCount !== 1) throw new Error(`config version conflict for ${c.actorId}: got ${c.version}`);
@@ -253695,9 +254372,19 @@ var init_cutover_aware_trace = __esm({
       constructor(o) {
         this.o = o;
       }
-      async pick() {
+      /** Resolve store and isolation together, from one cutover snapshot. Read-only consumers
+       * must not infer company isolation merely from having a companyId. */
+      async readTarget() {
         const row = await this.o.cutover.get(this.o.companyId, "trace");
-        return this.o.cutover.readsCompanySchema(row) ? this.o.owned : this.o.legacy;
+        const companyScoped = this.o.cutover.readsCompanySchema(row);
+        return { store: companyScoped ? this.o.owned : this.o.legacy, companyScoped };
+      }
+      /** Expose only usage reads: callers cannot bypass the frozen-write fence. */
+      async resolveUsageReadTarget() {
+        return this.readTarget();
+      }
+      async pick() {
+        return (await this.readTarget()).store;
       }
       async pickWritable() {
         const row = await this.o.cutover.get(this.o.companyId, "trace");
@@ -254676,8 +255363,8 @@ async function runIdentityMigration(input) {
       const ins = await client.query(
         `INSERT INTO ${cs}.actor_configs
            (actor_id,version,prompt,model,skills,connector_ids,reviewer_ids,max_concurrent,
-            batched_continuation,extra_args,memory_enabled,created_by,created_at,source,rolled_back_from)
-         VALUES ($1,$2,$3,$4,$5::jsonb,$6::jsonb,$7::jsonb,$8,$9,$10::jsonb,$11,$12,$13,$14,$15)
+            batched_continuation,extra_args,memory_enabled,created_by,created_at,source,rolled_back_from,continuation_max_rounds)
+         VALUES ($1,$2,$3,$4,$5::jsonb,$6::jsonb,$7::jsonb,$8,$9,$10::jsonb,$11,$12,$13,$14,$15,$16)
          ON CONFLICT (actor_id, version) DO NOTHING`,
         [
           r.actor_id,
@@ -254694,7 +255381,8 @@ async function runIdentityMigration(input) {
           r.created_by,
           r.created_at,
           r.source,
-          r.rolled_back_from ?? null
+          r.rolled_back_from ?? null,
+          r.continuation_max_rounds ?? 3
         ]
       );
       plan.configRows += ins.rowCount ?? 0;
@@ -257034,6 +257722,9 @@ var init_cutover_aware_workorder_drafts = __esm({
       async forWorkspace(w2) {
         return (await this.pick()).forWorkspace(w2);
       }
+      async forWorkspaceVersion(w2, version2) {
+        return (await this.pick()).forWorkspaceVersion(w2, version2);
+      }
       async forSession(s2) {
         return (await this.pick()).forSession(s2);
       }
@@ -257981,6 +258672,7 @@ var init_src11 = __esm({
     init_tenancy_move_verify();
     init_company_scoped_registry();
     init_session_workdir();
+    init_outputs_scan();
     init_org_model_backfill();
     init_types_admin();
     init_roles_admin();
@@ -258045,7 +258737,7 @@ var init_src11 = __esm({
     init_execution_continuity2();
     init_chat_sessions();
     init_dev_store();
-    init_continuation();
+    init_continuation3();
     init_knowledge2();
     init_delegations();
     init_automations();
@@ -258390,6 +259082,13 @@ init_src11();
 init_src();
 var BRAINSTORM_LEGACY_LINE = "\u8BF7\u76F4\u63A5\u56DE\u7B54\u7528\u6237\u95EE\u9898\u3002\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539 artifact\u3002";
 var BRAINSTORM_ARTIFACT_GUARD = "\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539 artifact\u3002";
+var OUTPUTS_CONVENTION = [
+  "## \u4EA7\u51FA\u653E\u54EA",
+  "",
+  "\u8981\u7ED9\u7528\u6237\u770B\u7684\u6210\u54C1\u6587\u4EF6\uFF0C**\u653E\u8FDB\u5DE5\u4F5C\u76EE\u5F55\u4E0B\u7684 `outputs/`**\uFF08\u53EF\u4EE5\u6709\u5B50\u76EE\u5F55\uFF0C\u7ED3\u6784\u81EA\u5DF1\u5B9A\uFF09\u3002",
+  "\u53EA\u6709\u8FD9\u4E2A\u76EE\u5F55\u91CC\u7684\u6587\u4EF6\u4F1A\u5728\u5BF9\u8BDD\u91CC\u663E\u793A\u6210\u53EF\u70B9\u5F00\u7684\u6587\u4EF6\u5361\u7247\uFF1B\u5199\u5728\u522B\u5904\u7684\u7528\u6237\u770B\u4E0D\u89C1\u3002",
+  "\u4E2D\u95F4\u4EA7\u7269\u3001\u4E34\u65F6\u811A\u672C\u3001\u8349\u7A3F\u4E0D\u8981\u653E\u8FD9\u91CC\u2014\u2014\u653E\u8FDB\u53BB\u5C31\u4F1A\u6446\u5230\u7528\u6237\u9762\u524D\u3002"
+].join("\n");
 function buildChatTaskHeader(input) {
   if (input.kind === "isolated-knowledge") {
     return {
@@ -258410,7 +259109,9 @@ function buildChatTaskHeader(input) {
         `your_actor_id: ${input.actorId}`,
         `workspace: ${input.workspace}`,
         "",
-        CONVERSATIONAL_MANAGER_BODY
+        CONVERSATIONAL_MANAGER_BODY,
+        "",
+        OUTPUTS_CONVENTION
       ]
     };
   }
@@ -258422,7 +259123,9 @@ function buildChatTaskHeader(input) {
       input.sessionLine,
       `your_actor_id: ${input.actorId}`,
       "",
-      routed ? BRAINSTORM_ARTIFACT_GUARD : BRAINSTORM_LEGACY_LINE
+      routed ? BRAINSTORM_ARTIFACT_GUARD : BRAINSTORM_LEGACY_LINE,
+      // 子会话那一段由 EXPERT_DELEGATION_SYSTEM_PROMPT 讲，这里不重复（见 OUTPUTS_CONVENTION 注释）。
+      ...input.delegatedChildTurn ? [] : ["", OUTPUTS_CONVENTION]
     ],
     ...routed ? { routingSystemPrompt: EXECUTION_ROUTING_BODY } : {}
   };
@@ -258571,9 +259274,9 @@ function render(reason, facts) {
   switch (reason.kind) {
     case "checkpoints-exhausted":
       return {
-        headline: `\u8FD9\u4E00\u6B65**\u4EA4\u4E86 ${reason.rounds} \u7248\u7A3F\uFF0C\u6BCF\u4E00\u7248\u90FD\u6CA1\u8D70\u6536\u53E3**\u2014\u2014\u5F15\u64CE\u5DF2\u7ECF\u81EA\u5DF1\u91CD\u8BD5\u4E86 ${reason.rounds} \u8F6E\uFF08\u4E0A\u9650 ${reason.limit}\uFF09\uFF0C\u73B0\u5728\u505C\u4E0B\u7B49\u4EBA\u3002`,
+        headline: `\u8FD9\u4E00\u6B65**\u8FDE\u7EED ${reason.rounds} \u8F6E\u6CA1\u6709\u65B0\u589E\u4EA4\u4ED8\u5185\u5BB9**\uFF0C\u91CD\u590D\u63D0\u4EA4\u5DF2\u6709\u5FEB\u7167\u4E14\u672A\u6536\u53E3\uFF08\u65E0\u8FDB\u5C55\u4E0A\u9650 ${reason.limit}\uFF09\u2014\u2014\u5F15\u64CE\u5DF2\u6682\u505C\u81EA\u52A8\u7EED\u8DD1\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406\u3002`,
         detail: facts,
-        action: "\u9700\u8981\u4F60\u5904\u7406\uFF1A\u76F4\u63A5\u5F3A\u5236\u6536\u53E3\uFF0C\u6216\u91CD\u8DD1\u672C\u8282\u70B9\uFF08\u91CD\u8DD1\u4F1A\u91CD\u7F6E\u8FD9\u4E2A\u8BA1\u6570\uFF09\u3002"
+        action: "\u9700\u8981\u4F60\u5904\u7406\uFF1A\u68C0\u67E5\u6700\u8FD1\u5FEB\u7167\u548C\u5269\u4F59\u5DE5\u4F5C\uFF0C\u8865\u5145\u6267\u884C\u65B9\u5411\u540E\u91CD\u8DD1\u672C\u8282\u70B9\uFF08\u91CD\u7F6E\u65E0\u8FDB\u5C55\u8BA1\u6570\uFF09\uFF1B\u5982\u679C\u5DF2\u7ECF\u5B8C\u6210\uFF0C\u8BA9\u6267\u884C\u4EBA\u63D0\u4EA4\u5B8C\u6574\u5FEB\u7167\u5E76 conclude\u3002"
       };
     case "gate-rejections-exhausted":
       return {
@@ -259597,6 +260300,12 @@ async function startServe(opts) {
     kernel: defaultCompanyKernel,
     blobs: assets,
     trace: () => traceStoreForActors,
+    // Same current-company ledger as chat/dispatch writes (PR #1223). Resolve the
+    // physical read target and its isolation together; never treat legacy as owned.
+    resolveTrace: async (cid) => {
+      const store = await traceStoreFor(cid);
+      return store instanceof CutoverAwareTraceStore ? store.resolveUsageReadTarget() : { store, companyScoped: !pgPool };
+    },
     audit: registryAudit,
     // ADR 凭据保险库 §4.5/§4.7 / ADR 0125：reveal 判权的项目解析 + 凭据读取审计读写。
     resolveDispatchScope: resolveDispatchScope2,
@@ -261615,6 +262324,39 @@ async function startServe(opts) {
     // 三个方法的组合规则住在 `createDelegationWorkdirPort`（`@oasis/server`）——评审
     // wo:acfee725 blocker ② 回归防线：**serve.ts 与单测走同一处**，那样「装配层退回全局 binding」
     // 这类事故在单测里就能被复现。绝不许在这里再写一份。
+    /**
+     * 会话产出扫描（2026-09-11 产出卡）：轮次收尾扫这条会话的 `outputs/`，交出「这一轮变了哪些」。
+     *
+     * 复用 `delegationWorkdirLocator`（与派发、回流、chat 域**同一个 binding resolver 实例**）——
+     * 委派回程读的就是子会话的 `outputs/`，主会话这条只是把同一套读口用到了自己身上。
+     *
+     * 三处 fail-closed，都返回 `null`（= 这一轮没有产出卡），一处都不猜：
+     *  · 桥还没建好 / 会话没绑定 / 节点离线 → 拿不到工作区；
+     *  · store 没有指纹方法（老 store / 文件态装配）→ 没地方记「上一轮长什么样」，
+     *    硬扫会把整个 `outputs/` 每轮都当成新增，一口气刷几十张卡；
+     *  · 解析不出公司 → **绝不回落默认公司**（否则会去别家公司的库里读写指纹）。
+     */
+    sessionOutputsScan: async ({ chatSessionId, companyId }) => {
+      const bridge = workdirBridge;
+      if (!bridge) return null;
+      const store = chatStoreRouter ? await chatStoreFor(companyId).catch(() => null) : chatSessionStore;
+      const read = store?.readOutputFingerprints?.bind(store);
+      const write = store?.writeOutputFingerprints?.bind(store);
+      if (!read || !write) return null;
+      const located = await locateSessionWorkdir(delegationWorkdirLocator, {
+        chatSessionId,
+        ...companyId !== void 0 ? { companyId } : {}
+      });
+      if (!located.ok) return null;
+      const diff = await settleSessionOutputs({
+        bridge,
+        loc: located.loc,
+        sessionId: chatSessionId,
+        readFingerprints: read,
+        writeFingerprints: write
+      }).catch(() => null);
+      return diff?.changed ?? null;
+    },
     delegationWorkdir: createDelegationWorkdirPort({
       locator: delegationWorkdirLocator,
       // 桥在 hub 建好后（本函数尾部）才赋值 → getter 每次调用时读最新值；早于此处的构造时 `workdirBridge`
@@ -263235,6 +263977,10 @@ async function startServe(opts) {
         return false;
       });
       const engineIO = {
+        async continuationPolicy(actorId) {
+          const config2 = await (await companyRegistryFor(companyId)).latestConfig(actorId);
+          return config2?.batchedContinuation ? { maxRounds: config2.continuationMaxRounds ?? 3 } : null;
+        },
         async dispatchWork(workId, opts2) {
           if (engineDispatchBridges.size === 0) {
             console.warn(`[new-engine] dispatchWork ${workId} \u8DF3\u8FC7\uFF1A\u672C\u8FDB\u7A0B\u4E00\u5BB6\u516C\u53F8\u7684\u6D3E\u53D1\u6865\u90FD\u6CA1\u6709\uFF08--dispatch \u672A\u5F00\uFF1F\uFF09`);
@@ -265300,6 +266046,7 @@ async function runSession(dispatchId, job, deps) {
     const cancelledBeforeStart = deps.wasCancelled?.() ?? false;
     const normalizer = new ProviderStreamNormalizer({
       providerName: job.binding?.runtimeKind ?? "runtime",
+      hasLiveProtocol: handle.supportsLiveProtocol === true,
       fallbackTurnId: `oasis-turn:${handle.id}`,
       emit: (event) => deps.sink.stream({ type: "session_normalized_event", dispatchId, event })
     });
@@ -272392,7 +273139,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.19" : "dev";
+var PKG_VERSION = true ? "2.2.21" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;