oasis_test_v2 2.2.23 → 2.2.24

package/dist/index.js

@@ -4370,19 +4370,19 @@ var init_state = __esm({
       reviewMap = /* @__PURE__ */ new Map();
       mutationList = [];
       emittedList = [];
-      constructor(snapshot) {
-        this.workorder = { ...snapshot.workorder };
-        for (const n of snapshot.nodes) this.nodeMap.set(n.id, { ...n });
-        this.edgeList = snapshot.edges.map((e) => ({ ...e }));
-        this.requirementList = snapshot.requirements.map((r) => ({ ...r }));
-        for (const w2 of snapshot.works) this.workMap.set(w2.id, { ...w2 });
-        this.artifactList = snapshot.artifacts.map((a) => ({ ...a }));
-        this.workInputList = snapshot.workInputs.map((i) => ({ ...i }));
-        for (const i of snapshot.issues) this.issueMap.set(i.id, { ...i });
-        this.recipientList = snapshot.issueRecipients.map((r) => ({ ...r }));
-        this.replyList = snapshot.issueReplies.map((r) => ({ ...r }));
-        this.attachmentList = snapshot.issueAttachments.map((a) => ({ ...a }));
-        for (const r of snapshot.reviews) this.reviewMap.set(r.id, { ...r });
+      constructor(snapshot2) {
+        this.workorder = { ...snapshot2.workorder };
+        for (const n of snapshot2.nodes) this.nodeMap.set(n.id, { ...n });
+        this.edgeList = snapshot2.edges.map((e) => ({ ...e }));
+        this.requirementList = snapshot2.requirements.map((r) => ({ ...r }));
+        for (const w2 of snapshot2.works) this.workMap.set(w2.id, { ...w2 });
+        this.artifactList = snapshot2.artifacts.map((a) => ({ ...a }));
+        this.workInputList = snapshot2.workInputs.map((i) => ({ ...i }));
+        for (const i of snapshot2.issues) this.issueMap.set(i.id, { ...i });
+        this.recipientList = snapshot2.issueRecipients.map((r) => ({ ...r }));
+        this.replyList = snapshot2.issueReplies.map((r) => ({ ...r }));
+        this.attachmentList = snapshot2.issueAttachments.map((a) => ({ ...a }));
+        for (const r of snapshot2.reviews) this.reviewMap.set(r.id, { ...r });
       }
       /* ── 读 ── */
       node(id) {
@@ -7761,15 +7761,15 @@ var require_pg_connection_string = __commonJS({
       if (config2.sslcert || config2.sslkey || config2.sslrootcert || config2.sslmode) {
         config2.ssl = {};
       }
-      const fs47 = config2.sslcert || config2.sslkey || config2.sslrootcert ? require("fs") : null;
+      const fs48 = config2.sslcert || config2.sslkey || config2.sslrootcert ? require("fs") : null;
       if (config2.sslcert) {
-        config2.ssl.cert = fs47.readFileSync(config2.sslcert).toString();
+        config2.ssl.cert = fs48.readFileSync(config2.sslcert).toString();
       }
       if (config2.sslkey) {
-        config2.ssl.key = fs47.readFileSync(config2.sslkey).toString();
+        config2.ssl.key = fs48.readFileSync(config2.sslkey).toString();
       }
       if (config2.sslrootcert) {
-        config2.ssl.ca = fs47.readFileSync(config2.sslrootcert).toString();
+        config2.ssl.ca = fs48.readFileSync(config2.sslrootcert).toString();
       }
       if (options.useLibpqCompat && config2.uselibpqcompat) {
         throw new Error("Both useLibpqCompat and uselibpqcompat are set. Please use only one of them.");
@@ -9706,15 +9706,15 @@ var require_lib = __commonJS({
   "../../node_modules/.pnpm/pgpass@1.0.5/node_modules/pgpass/lib/index.js"(exports2, module2) {
     "use strict";
     var path43 = require("path");
-    var fs47 = require("fs");
+    var fs48 = require("fs");
     var helper = require_helper();
     module2.exports = function(connInfo, cb) {
       var file = helper.getFileName();
-      fs47.stat(file, function(err, stat3) {
+      fs48.stat(file, function(err, stat3) {
         if (err || !helper.usePgPass(stat3, file)) {
           return cb(void 0);
         }
-        var st = fs47.createReadStream(file);
+        var st = fs48.createReadStream(file);
         helper.getPassword(connInfo, st, cb);
       });
     };
@@ -14048,8 +14048,8 @@ var init_bus = __esm({
        */
       async applyRecord(record8) {
         await this.store.transaction(async (tx) => {
-          const snapshot = await tx.loadWorkorder(record8.workorderId);
-          const state = new WorkorderState(snapshot ?? emptySnapshotPlaceholder(record8));
+          const snapshot2 = await tx.loadWorkorder(record8.workorderId);
+          const state = new WorkorderState(snapshot2 ?? emptySnapshotPlaceholder(record8));
           const ctx = {
             seq: record8.seq,
             at: record8.createdAt,
@@ -14223,10 +14223,10 @@ var init_bus = __esm({
           await tx.lockWorkorder(workorderId);
           if (await tx.hasPendingEvents(workorderId)) return { emitted: 0, terminated: false };
           settledAt = this.processedSeq.get(workorderId) ?? 0;
-          const snapshot = await tx.loadWorkorder(workorderId);
-          if (!snapshot) return { emitted: 0, terminated: false };
-          if (snapshot.workorder.lifecycle !== "active") return { emitted: 0, terminated: false };
-          const state = new WorkorderState(snapshot);
+          const snapshot2 = await tx.loadWorkorder(workorderId);
+          if (!snapshot2) return { emitted: 0, terminated: false };
+          if (snapshot2.workorder.lifecycle !== "active") return { emitted: 0, terminated: false };
+          const state = new WorkorderState(snapshot2);
           const continuationPolicies = /* @__PURE__ */ new Map();
           if (this.io.continuationPolicy) {
             for (const node2 of state.liveNodes()) {
@@ -14277,14 +14277,14 @@ var init_bus = __esm({
         return this.store.transaction(async (tx) => {
           const record8 = await tx.claimNextEvent(this.clock.now(), this.recoverAppliedBefore());
           if (!record8) return null;
-          const snapshot = await tx.loadWorkorder(record8.workorderId);
-          if (snapshot?.workorder.doneAt && record8.event.kind !== "work.content_edited") {
+          const snapshot2 = await tx.loadWorkorder(record8.workorderId);
+          if (snapshot2?.workorder.doneAt && record8.event.kind !== "work.content_edited") {
             await tx.applyMutations(record8.workorderId, [{
               t: "workorder.update",
               patch: { doneAt: null }
             }]);
           }
-          const state = new WorkorderState(snapshot ?? emptySnapshotPlaceholder(record8));
+          const state = new WorkorderState(snapshot2 ?? emptySnapshotPlaceholder(record8));
           const ctx = {
             seq: record8.seq,
             at: record8.createdAt,
@@ -14332,9 +14332,9 @@ var init_bus = __esm({
       /* ═══════════════════════ 收敛断言（测试用） ═══════════════════════ */
       async assertConvergence(workorderId) {
         return this.store.transaction(async (tx) => {
-          const snapshot = await tx.loadWorkorder(workorderId);
-          if (!snapshot) return { stuck: false, codes: [] };
-          return assessConvergence(new WorkorderState(snapshot), {
+          const snapshot2 = await tx.loadWorkorder(workorderId);
+          if (!snapshot2) return { stuck: false, codes: [] };
+          return assessConvergence(new WorkorderState(snapshot2), {
             seq: 0,
             at: this.clock.now(),
             actorId: SYSTEM_ACTOR,
@@ -16198,6 +16198,7 @@ function makeProduceResumeFallback(first, spawnFallback) {
   let active = first;
   let fellBack = false;
   let terminal;
+  let cancelled = false;
   const fanOut = (chunk) => {
     if (outCbs.length) for (const cb of outCbs) cb(chunk);
     else outBuf.push(chunk);
@@ -16242,7 +16243,7 @@ function makeProduceResumeFallback(first, spawnFallback) {
   };
   wire(first);
   first.onExit((info) => {
-    if (fellBack || sawOutput || !isSessionNotFound(info)) {
+    if (cancelled || fellBack || sawOutput || !isSessionNotFound(info)) {
       fireTerminal(info);
       return;
     }
@@ -16252,6 +16253,8 @@ function makeProduceResumeFallback(first, spawnFallback) {
         active = second;
         wire(second);
         second.onExit((info2) => fireTerminal(info2));
+        if (cancelled) void second.kill().catch(() => {
+        });
       },
       // 回落连 spawn 都起不来（节点掉线等）→ 把原始 session-not-found 如实上报，交常规重试兜底。
       () => fireTerminal(info)
@@ -16264,7 +16267,10 @@ function makeProduceResumeFallback(first, spawnFallback) {
       // 稳定关联 id：回落后底层会话换了，trace 仍以同一个 id 归一。
       id: stableId2,
       // 绑到**当下**的 active（回落后会换人），不能在构造时快照。
-      kill: () => active.kill(),
+      kill: () => {
+        cancelled = true;
+        return active.kill();
+      },
       // 四条流 + 退出走本代理的缓冲扇出：订阅者可能晚到、底层还会换人，都不能直接透传。
       onExit: (cb) => {
         if (terminal) {
@@ -17824,7 +17830,7 @@ ${supplemental.taskAppend.trim()}
           dispatchId: attempt
         };
         const first = await this.opts.adapter.spawn(job);
-        const session = resumeSession ? makeProduceResumeFallback(first, () => this.opts.adapter.spawn({ ...job, resumeRuntimeSession: false })) : first;
+        const session = resumeSession && !job.execution ? makeProduceResumeFallback(first, () => this.opts.adapter.spawn({ ...job, resumeRuntimeSession: false })) : first;
         if (!this.isSpawnAttemptCurrent(jobKey, attempt)) {
           try {
             await session.kill();
@@ -17948,7 +17954,8 @@ ${supplemental.taskAppend.trim()}
           const reason = classifyExitReason(args.info);
           return reason === args.info.reason ? args.info : { ...args.info, reason };
         })();
-        if (this.inFlight.get(jobKey) === session) {
+        const ownsSlot = this.inFlight.get(jobKey) === session;
+        if (ownsSlot) {
           this.inFlight.delete(jobKey);
           this.inFlightActor.delete(jobKey);
           this.inFlightStartedAt.delete(jobKey);
@@ -17963,7 +17970,7 @@ ${supplemental.taskAppend.trim()}
         }
         const seqAtExit = kernel.model.lastSeq.get(spec.artifactId) ?? 0;
         const exitSessionKey = this.produceSessionKeyFor(spec);
-        if (exitSessionKey) {
+        if (exitSessionKey && ownsSlot) {
           const prev = decodeProduceSession(this.produceSessions.get(exitSessionKey));
           if (prev) {
             const isWholeProduce = spec.action === "produce" && spec.part === void 0;
@@ -20943,9 +20950,9 @@ var init_kernel_bridge = __esm({
         if (!args.actor.startsWith("actor:human:")) throw new Error("\u6062\u590D\u51B3\u5B9A\u9700\u8981\u4EBA\u660E\u786E\u786E\u8BA4");
         if (!args.reason.trim()) throw new Error("\u6062\u590D\u51B3\u5B9A\u5FC5\u987B\u8BF4\u660E\u91C7\u7528\u7684\u65B9\u6848");
         const wid = this.wo(args.artifactId);
-        const snapshot = await this.store.transaction((tx) => tx.loadWorkorder(wid));
-        const gap = snapshot?.issues.find((i) => i.id === args.gapId && i.kind === "gap" && i.aboutNodeId === args.artifactId);
-        const escalation = snapshot?.issues.find((i) => i.id === args.escalationId && i.kind === "escalation" && i.aboutNodeId === args.artifactId);
+        const snapshot2 = await this.store.transaction((tx) => tx.loadWorkorder(wid));
+        const gap = snapshot2?.issues.find((i) => i.id === args.gapId && i.kind === "gap" && i.aboutNodeId === args.artifactId);
+        const escalation = snapshot2?.issues.find((i) => i.id === args.escalationId && i.kind === "escalation" && i.aboutNodeId === args.artifactId);
         if (!gap || !escalation || escalation.gapId !== gap.id) throw new Error("\u6062\u590D\u5361\u7684\u7F3A\u53E3\u4E0E\u4E0A\u62A5\u5173\u8054\u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u786E\u8BA4");
         const events = [];
         for (const issue2 of [gap, escalation]) if (!issue2.resolvedAt) events.push({
@@ -21437,22 +21444,22 @@ var init_kernel_bridge = __esm({
       async decideContinuation(draftId, actor, approve, reason) {
         const review = this.model.pendingReviews.get(draftId);
         if (!review?.continuation || !review.workspace) throw new Error("\u7EED\u8DD1\u5BA1\u6279\u4E0D\u5B58\u5728\u6216\u5DF2\u5904\u7406");
-        const snapshot = await this.store.transaction((tx) => tx.loadWorkorder(review.workspace));
-        const node2 = snapshot?.nodes.find((n) => n.id === review.continuation.nodeId);
+        const snapshot2 = await this.store.transaction((tx) => tx.loadWorkorder(review.workspace));
+        const node2 = snapshot2?.nodes.find((n) => n.id === review.continuation.nodeId);
         const request2 = node2?.continuationBudget?.request;
-        if (!actor.startsWith("actor:human:") || !snapshot || continuationApprover(new WorkorderState(snapshot)) !== actor) throw new Error("\u4EC5\u5DE5\u5355\u4EBA\u7C7B\u8D1F\u8D23\u4EBA\u53EF\u4EE5\u5BA1\u6279\u7EED\u8DD1\u989D\u5EA6");
+        if (!actor.startsWith("actor:human:") || !snapshot2 || continuationApprover(new WorkorderState(snapshot2)) !== actor) throw new Error("\u4EC5\u5DE5\u5355\u4EBA\u7C7B\u8D1F\u8D23\u4EBA\u53EF\u4EE5\u5BA1\u6279\u7EED\u8DD1\u989D\u5EA6");
         if (!request2 || request2.id !== draftId || request2.decision !== "pending" || node2?.cancelledAt) throw new Error("\u7EED\u8DD1\u5BA1\u6279\u5DF2\u5904\u7406\u6216\u5931\u6548");
         const expectedAuthorized = Math.max(
           node2.continuationBudget.authorizedRounds,
-          continuationUsedRounds(new WorkorderState(snapshot), node2.id)
+          continuationUsedRounds(new WorkorderState(snapshot2), node2.id)
         ) + request2.rounds;
         await this.commit({
-          companyId: snapshot.workorder.companyId,
-          workorderId: snapshot.workorder.id,
+          companyId: snapshot2.workorder.companyId,
+          workorderId: snapshot2.workorder.id,
           actorId: actor,
-          event: { kind: "continuation.decided", workorderId: snapshot.workorder.id, nodeId: node2.id, requestId: draftId, approve, reason }
+          event: { kind: "continuation.decided", workorderId: snapshot2.workorder.id, nodeId: node2.id, requestId: draftId, approve, reason }
         });
-        const after = await this.store.transaction((tx) => tx.loadWorkorder(snapshot.workorder.id));
+        const after = await this.store.transaction((tx) => tx.loadWorkorder(snapshot2.workorder.id));
         const afterBudget = after?.nodes.find((n) => n.id === node2.id)?.continuationBudget;
         const decided = afterBudget?.request;
         const applied = approve ? (afterBudget?.authorizedRounds ?? 0) >= expectedAuthorized : decided?.id === draftId && (decided.decision === "denied" || decided.decision === "completed");
@@ -23427,17 +23434,17 @@ function parseResultUsage(value2) {
     const oneHour = usageNum(cache["ephemeral_1h_input_tokens"]);
     return fiveMinute == null && oneHour == null ? void 0 : (fiveMinute ?? 0) + (oneHour ?? 0);
   })();
-  const snapshot = {
+  const snapshot2 = {
     input: usageNum(usage["input_tokens"]),
     output: usageNum(usage["output_tokens"]),
     cacheRead: usageNum(usage["cache_read_input_tokens"]),
     cacheCreation
   };
-  return Object.values(snapshot).some((v2) => v2 != null) ? snapshot : null;
+  return Object.values(snapshot2).some((v2) => v2 != null) ? snapshot2 : null;
 }
 function parseModelUsage(value2) {
   if (!value2 || typeof value2 !== "object" || Array.isArray(value2)) return null;
-  const snapshot = {};
+  const snapshot2 = {};
   const fields = [
     ["input", "inputTokens"],
     ["output", "outputTokens"],
@@ -23449,10 +23456,10 @@ function parseModelUsage(value2) {
     const usage = model;
     for (const [target, source] of fields) {
       const amount = usageNum(usage[source]);
-      if (amount != null) snapshot[target] = (snapshot[target] ?? 0) + amount;
+      if (amount != null) snapshot2[target] = (snapshot2[target] ?? 0) + amount;
     }
   }
-  return Object.values(snapshot).some((v2) => v2 != null) ? snapshot : null;
+  return Object.values(snapshot2).some((v2) => v2 != null) ? snapshot2 : null;
 }
 function mergeFinalUsage(primary, fallback) {
   if (!primary) return fallback;
@@ -25836,9 +25843,9 @@ function toolUseOnce(state, id, name, input) {
   state.toolUseIds.add(id);
   return [{ kind: "tool_use", payload: { id, name, input } }];
 }
-function remainderAfterStream(streamed, snapshot) {
-  if (!streamed) return snapshot;
-  return snapshot.startsWith(streamed) ? snapshot.slice(streamed.length) : "";
+function remainderAfterStream(streamed, snapshot2) {
+  if (!streamed) return snapshot2;
+  return snapshot2.startsWith(streamed) ? snapshot2.slice(streamed.length) : "";
 }
 function noteCodexAgentDelta(state, delta) {
   if (!delta) return [];
@@ -31378,9 +31385,9 @@ var init_service = __esm({
         if (this.sending || this.finalized || !this.dirty) return;
         this.sending = true;
         this.dirty = false;
-        const snapshot = this.buf;
+        const snapshot2 = this.buf;
         try {
-          const card2 = buildTextCard(snapshot, { footer: "\u25CF \u751F\u6210\u4E2D\u2026" });
+          const card2 = buildTextCard(snapshot2, { footer: "\u25CF \u751F\u6210\u4E2D\u2026" });
           if (!this.messageId) {
             this.messageId = (await this.client.sendCard(this.chatId, card2)).messageId;
           } else {
@@ -41387,7 +41394,7 @@ var require_form_data = __commonJS({
     var http2 = require("http");
     var https = require("https");
     var parseUrl = require("url").parse;
-    var fs47 = require("fs");
+    var fs48 = require("fs");
     var Stream = require("stream").Stream;
     var crypto4 = require("crypto");
     var mime = require_mime_types();
@@ -41457,7 +41464,7 @@ var require_form_data = __commonJS({
         if (value2.end != void 0 && value2.end != Infinity && value2.start != void 0) {
           callback(null, value2.end + 1 - (value2.start ? value2.start : 0));
         } else {
-          fs47.stat(value2.path, function(err, stat3) {
+          fs48.stat(value2.path, function(err, stat3) {
             if (err) {
               callback(err);
               return;
@@ -52184,7 +52191,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes13, createHash: createHash41 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash42 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -52852,7 +52859,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash41("sha1").update(key + GUID).digest("base64");
+        const digest = createHash42("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -53221,7 +53228,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash41 } = require("crypto");
+    var { createHash: createHash42 } = require("crypto");
     var extension3 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -53528,7 +53535,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash41("sha1").update(key + GUID).digest("base64");
+        const digest = createHash42("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -56032,7 +56039,7 @@ var require_lib4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var axios = require_axios();
-    var fs47 = require("fs");
+    var fs48 = require("fs");
     var path43 = require("path");
     var crypto4 = require("crypto");
     var qs = require_lib3();
@@ -56050,7 +56057,7 @@ var require_lib4 = __commonJS({
       return e && typeof e === "object" && "default" in e ? e : { "default": e };
     }
     var axios__default = /* @__PURE__ */ _interopDefaultLegacy(axios);
-    var fs__default = /* @__PURE__ */ _interopDefaultLegacy(fs47);
+    var fs__default = /* @__PURE__ */ _interopDefaultLegacy(fs48);
     var path__default = /* @__PURE__ */ _interopDefaultLegacy(path43);
     var crypto__default = /* @__PURE__ */ _interopDefaultLegacy(crypto4);
     var identity__default = /* @__PURE__ */ _interopDefaultLegacy(identity);
@@ -140031,8 +140038,8 @@ var require_lib4 = __commonJS({
           while (this.content.length > this.maxChars) {
             yield this.rollover();
           }
-          const snapshot = this.content || "...";
-          yield this.sender.updateCardElementContent(this.cardId, ELEMENT_ID, snapshot, ++this.sequence);
+          const snapshot2 = this.content || "...";
+          yield this.sender.updateCardElementContent(this.cardId, ELEMENT_ID, snapshot2, ++this.sequence);
         });
       }
       /**
@@ -140175,9 +140182,9 @@ var require_lib4 = __commonJS({
         return __awaiter(this, void 0, void 0, function* () {
           if (!this._messageId)
             return;
-          const snapshot = this._current;
+          const snapshot2 = this._current;
           yield this.queue.enqueue(() => __awaiter(this, void 0, void 0, function* () {
-            yield this.sender.patchCard(this._messageId, snapshot);
+            yield this.sender.patchCard(this._messageId, snapshot2);
           }));
         });
       }
@@ -160426,12 +160433,12 @@ var require_dist2 = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f2;
     };
-    function addFormats(ajv, list2, fs47, exportName) {
+    function addFormats(ajv, list2, fs48, exportName) {
       var _a;
       var _b;
       (_a = (_b = ajv.opts.code).formats) !== null && _a !== void 0 ? _a : _b.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f2 of list2)
-        ajv.addFormat(f2, fs47[f2]);
+        ajv.addFormat(f2, fs48[f2]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -167590,8 +167597,8 @@ var init_service2 = __esm({
             output += chunk;
             if (answerAttempt && (output.length - checkpointedChars >= 1024 || FINAL_ANSWER_MARKER.test(output))) {
               checkpointedChars = output.length;
-              const snapshot = output;
-              checkpointChain = checkpointChain.then(() => this.checkpointAnswerDraft(record8, answerAttempt.id, snapshot));
+              const snapshot2 = output;
+              checkpointChain = checkpointChain.then(() => this.checkpointAnswerDraft(record8, answerAttempt.id, snapshot2));
             }
           });
           dispatched.onTelemetry?.((event) => {
@@ -184561,14 +184568,14 @@ var require_parser2 = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs47 = this.flowScalar(this.type);
+              const fs48 = this.flowScalar(this.type);
               if (atNextItem || it.value) {
-                map.items.push({ start, key: fs47, sep: [] });
+                map.items.push({ start, key: fs48, sep: [] });
                 this.onKeyLine = true;
               } else if (it.sep) {
-                this.stack.push(fs47);
+                this.stack.push(fs48);
               } else {
-                Object.assign(it, { key: fs47, sep: [] });
+                Object.assign(it, { key: fs48, sep: [] });
                 this.onKeyLine = true;
               }
               return;
@@ -184696,13 +184703,13 @@ var require_parser2 = __commonJS({
             case "scalar":
             case "single-quoted-scalar":
             case "double-quoted-scalar": {
-              const fs47 = this.flowScalar(this.type);
+              const fs48 = this.flowScalar(this.type);
               if (!it || it.value)
-                fc.items.push({ start: [], key: fs47, sep: [] });
+                fc.items.push({ start: [], key: fs48, sep: [] });
               else if (it.sep)
-                this.stack.push(fs47);
+                this.stack.push(fs48);
               else
-                Object.assign(it, { key: fs47, sep: [] });
+                Object.assign(it, { key: fs48, sep: [] });
               return;
             }
             case "flow-map-end":
@@ -185291,10 +185298,10 @@ function durationMs2(startedAt, completedAt) {
   if (!startedAt || !completedAt) return void 0;
   return Math.max(0, Date.parse(completedAt) - Date.parse(startedAt));
 }
-function snapshotJson(snapshot, expectedHash) {
-  if (!snapshot || !expectedHash || snapshot.contentHash !== expectedHash || snapshot.contentHash !== sha256(snapshot.content)) return void 0;
+function snapshotJson(snapshot2, expectedHash) {
+  if (!snapshot2 || !expectedHash || snapshot2.contentHash !== expectedHash || snapshot2.contentHash !== sha256(snapshot2.content)) return void 0;
   try {
-    return JSON.parse(snapshot.content);
+    return JSON.parse(snapshot2.content);
   } catch {
     return void 0;
   }
@@ -185603,7 +185610,7 @@ var init_network_maintenance = __esm({
           store.list(scope, "snapshot")
         ]);
         const runTasks = tasks.filter((entry) => entry.maintenanceRunId === run.id).sort((left, right) => left.ordinal - right.ordinal);
-        const snapshotByRef = new Map(snapshots2.map((snapshot) => [snapshot.ref, snapshot]));
+        const snapshotByRef = new Map(snapshots2.map((snapshot2) => [snapshot2.ref, snapshot2]));
         return {
           run,
           tasks: runTasks,
@@ -185649,7 +185656,7 @@ var init_network_maintenance = __esm({
         const itemById = new Map(allItems.map((item) => [item.id, item]));
         const items = allItems.filter((item) => item.status === "active" && item.currentApprovedVersionId);
         const versions = new Map((await store.list(scope, "item_version")).map((version2) => [version2.id, version2]));
-        const snapshots2 = new Map((await store.list(scope, "snapshot")).map((snapshot) => [snapshot.ref, snapshot]));
+        const snapshots2 = new Map((await store.list(scope, "snapshot")).map((snapshot2) => [snapshot2.ref, snapshot2]));
         const relations = await store.list(scope, "version_relation");
         const currentVersions = new Map(items.map((item) => [item.currentApprovedVersionId, { item, version: versions.get(item.currentApprovedVersionId) }]));
         const aiVisibleVersions = [...currentVersions.values()].filter((entry) => Boolean(entry.version) && entry.version.accessMode === "agent_and_human");
@@ -185679,11 +185686,11 @@ var init_network_maintenance = __esm({
         if (mode === "full") for (const entry of currentDerived) affectedVersionIds.add(entry.version.id);
         const settings = await store.get(scope, "maintenance_settings", `knmaintsettings_${sha256(`${ctx.organizationId}:${projectId2 ?? "org"}:${spaceId}`).slice(0, 24)}`) ?? this.defaultSettings(ctx, projectId2, spaceId);
         const approvedContent = (entry) => {
-          const snapshot = snapshots2.get(entry.version.contentSnapshotRef);
-          if (!snapshot || snapshot.contentHash !== sha256(snapshot.content)) {
+          const snapshot2 = snapshots2.get(entry.version.contentSnapshotRef);
+          if (!snapshot2 || snapshot2.contentHash !== sha256(snapshot2.content)) {
             return this.options.fail(409, "KNOWLEDGE_MAINTENANCE_SNAPSHOT_UNREADABLE", `\u6279\u51C6\u7248\u672C ${entry.version.id} \u7684\u4E0D\u53EF\u53D8\u5FEB\u7167\u4E0D\u53EF\u8BFB`);
           }
-          return snapshot.content;
+          return snapshot2.content;
         };
         const relevanceEntry = (entry) => ({
           itemId: entry.item.id,
@@ -185898,7 +185905,7 @@ var init_network_maintenance = __esm({
         const maintenanceInput = maintenanceInputFromSnapshot(inputSnapshot.content, run.mode, projectId2 ? "project" : "organization");
         let existingTasks = (await store.list(scope, "maintenance_task")).filter((task) => task.maintenanceRunId === run.id);
         const requestActor = await this.options.actor(ctx.actorId);
-        const taskSnapshots = new Map((await store.list(scope, "snapshot")).map((snapshot) => [snapshot.ref, snapshot]));
+        const taskSnapshots = new Map((await store.list(scope, "snapshot")).map((snapshot2) => [snapshot2.ref, snapshot2]));
         const completedTasks = [];
         for (const task of existingTasks.filter((entry) => entry.status === "succeeded")) {
           const resultSnapshot = task.resultSnapshotRef ? taskSnapshots.get(task.resultSnapshotRef) : void 0;
@@ -186036,9 +186043,9 @@ var init_network_maintenance = __esm({
               }
               if (puts.length > 0) await store.transact(scope, { puts });
             },
-            onTaskStarted: async (taskKey, sessionId) => {
-              const current = (await store.list(scope, "maintenance_task")).find((task) => task.maintenanceRunId === run.id && task.taskKey === taskKey);
-              if (!current) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey} \u5C1A\u672A\u6301\u4E45\u5316`, false);
+            onTaskStarted: async (taskKey2, sessionId) => {
+              const current = (await store.list(scope, "maintenance_task")).find((task) => task.maintenanceRunId === run.id && task.taskKey === taskKey2);
+              if (!current) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey2} \u5C1A\u672A\u6301\u4E45\u5316`, false);
               if (current.status === "succeeded") return;
               const now = this.iso();
               const running = {
@@ -186064,21 +186071,21 @@ var init_network_maintenance = __esm({
                 ],
                 puts: [put("maintenance_task", running)]
               });
-              if (!result2.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey} \u5DF2\u88AB\u5176\u4ED6 Worker \u9886\u53D6`, true);
+              if (!result2.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey2} \u5DF2\u88AB\u5176\u4ED6 Worker \u9886\u53D6`, true);
             },
-            onTaskSucceeded: async (taskKey, rawOutput, result2) => {
-              const current = (await store.list(scope, "maintenance_task")).find((task) => task.maintenanceRunId === run.id && task.taskKey === taskKey);
-              if (!current || current.status !== "running") throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey} \u4E0D\u5728\u8FD0\u884C\u6001`, false);
-              const currentInputSnapshot = (await store.list(scope, "snapshot")).find((snapshot) => snapshot.ref === current.inputSnapshotRef);
+            onTaskSucceeded: async (taskKey2, rawOutput, result2) => {
+              const current = (await store.list(scope, "maintenance_task")).find((task) => task.maintenanceRunId === run.id && task.taskKey === taskKey2);
+              if (!current || current.status !== "running") throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey2} \u4E0D\u5728\u8FD0\u884C\u6001`, false);
+              const currentInputSnapshot = (await store.list(scope, "snapshot")).find((snapshot2) => snapshot2.ref === current.inputSnapshotRef);
               if (!currentInputSnapshot || currentInputSnapshot.contentHash !== current.inputHash || currentInputSnapshot.contentHash !== sha256(currentInputSnapshot.content)) {
-                throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey} \u7684\u8F93\u5165\u5FEB\u7167\u4E0D\u53EF\u8BFB`, false);
+                throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey2} \u7684\u8F93\u5165\u5FEB\u7167\u4E0D\u53EF\u8BFB`, false);
               }
               const taskInput = JSON.parse(currentInputSnapshot.content);
               try {
                 validateMaintenanceTaskOperations(result2.operations, taskInput);
               } catch (error2) {
                 const validationError = error2 instanceof Error ? error2.message : String(error2);
-                const output2 = this.snapshot(ctx, "maintenance_task_output", stableJson(rawOutput), projectId2, run.spaceId, `snapshot:maintenance-task-output:${run.id}:${taskKey}:${current.retryCount}`);
+                const output2 = this.snapshot(ctx, "maintenance_task_output", stableJson(rawOutput), projectId2, run.spaceId, `snapshot:maintenance-task-output:${run.id}:${taskKey2}:${current.retryCount}`);
                 const now2 = this.iso();
                 const failed = {
                   ...current,
@@ -186101,11 +186108,11 @@ var init_network_maintenance = __esm({
                   ],
                   puts: [put("snapshot", output2, "error"), put("maintenance_task", failed)]
                 });
-                if (!rejected.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey} \u65E0\u6548\u7ED3\u679C\u72B6\u6001\u63D0\u4EA4\u51B2\u7A81`, true);
+                if (!rejected.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey2} \u65E0\u6548\u7ED3\u679C\u72B6\u6001\u63D0\u4EA4\u51B2\u7A81`, true);
                 throw new KnowledgeMaintenanceProcessingError(validationError, false);
               }
-              const output = this.snapshot(ctx, "maintenance_task_output", stableJson(rawOutput), projectId2, run.spaceId, `snapshot:maintenance-task-output:${run.id}:${taskKey}:${current.retryCount}`);
-              const normalized4 = this.snapshot(ctx, "maintenance_task_result", stableJson(result2), projectId2, run.spaceId, `snapshot:maintenance-task-result:${run.id}:${taskKey}:${current.retryCount}`);
+              const output = this.snapshot(ctx, "maintenance_task_output", stableJson(rawOutput), projectId2, run.spaceId, `snapshot:maintenance-task-output:${run.id}:${taskKey2}:${current.retryCount}`);
+              const normalized4 = this.snapshot(ctx, "maintenance_task_result", stableJson(result2), projectId2, run.spaceId, `snapshot:maintenance-task-result:${run.id}:${taskKey2}:${current.retryCount}`);
               const now = this.iso();
               const succeeded = {
                 ...current,
@@ -186128,14 +186135,14 @@ var init_network_maintenance = __esm({
                 ],
                 puts: [put("snapshot", output, "error"), put("snapshot", normalized4, "error"), put("maintenance_task", succeeded)]
               });
-              if (!saved.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey} \u7ED3\u679C\u68C0\u67E5\u70B9\u63D0\u4EA4\u51B2\u7A81`, true);
+              if (!saved.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey2} \u7ED3\u679C\u68C0\u67E5\u70B9\u63D0\u4EA4\u51B2\u7A81`, true);
             },
-            onTaskFailed: async (taskKey, failure) => {
-              const current = (await store.list(scope, "maintenance_task")).find((task) => task.maintenanceRunId === run.id && task.taskKey === taskKey);
+            onTaskFailed: async (taskKey2, failure) => {
+              const current = (await store.list(scope, "maintenance_task")).find((task) => task.maintenanceRunId === run.id && task.taskKey === taskKey2);
               if (!current || current.status === "succeeded") return;
               const retryable = failure.kind === "runtime" && isRetryableKnowledgeMaintenanceError(failure.cause ?? new Error(failure.message));
               const now = this.iso();
-              const output = failure.rawOutput ? this.snapshot(ctx, "maintenance_task_output", stableJson(failure.rawOutput), projectId2, run.spaceId, `snapshot:maintenance-task-output:${run.id}:${taskKey}:${current.retryCount}`) : void 0;
+              const output = failure.rawOutput ? this.snapshot(ctx, "maintenance_task_output", stableJson(failure.rawOutput), projectId2, run.spaceId, `snapshot:maintenance-task-output:${run.id}:${taskKey2}:${current.retryCount}`) : void 0;
               const failed = {
                 ...current,
                 ...failure.sessionId ? { sessionId: failure.sessionId } : {},
@@ -186152,7 +186159,7 @@ var init_network_maintenance = __esm({
                 checks: [{ kind: "maintenance_task", id: current.id, field: "status", equals: current.status }],
                 puts: [...output ? [put("snapshot", output, "error")] : [], put("maintenance_task", failed)]
               });
-              if (!saved.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey} \u5931\u8D25\u72B6\u6001\u63D0\u4EA4\u51B2\u7A81`, true);
+              if (!saved.committed) throw new KnowledgeMaintenanceProcessingError(`\u77E5\u8BC6\u7F51\u7EDC\u4EFB\u52A1 ${taskKey2} \u5931\u8D25\u72B6\u6001\u63D0\u4EA4\u51B2\u7A81`, true);
             }
           });
           const analyzer = await this.options.actor(analysis.analyzerActorId);
@@ -186252,7 +186259,7 @@ var init_network_maintenance = __esm({
               targetItems: previewTargets,
               sensitivityFindings: [...candidate.sensitivityFindings]
             };
-            const snapshot = this.snapshot(
+            const snapshot2 = this.snapshot(
               ctx,
               "approved_preview",
               stableJson(preview2),
@@ -186260,15 +186267,15 @@ var init_network_maintenance = __esm({
               run.spaceId,
               `snapshot:maintenance-preview:${candidate.id}:${candidate.candidateRevision}`
             );
-            approvedPreviewSnapshots.push(snapshot);
+            approvedPreviewSnapshots.push(snapshot2);
             approvedCandidates.push({
               ...candidate,
               decisionStatus: "approved",
               decisionAction: candidate.recommendedAction,
               decidedBy: ctx.actorId,
               decisionReason: "\u7CFB\u7EDF\u6700\u5C0F\u5B89\u5168\u6821\u9A8C\u901A\u8FC7\uFF0C\u81EA\u52A8\u8FDB\u5165\u53D1\u5E03",
-              approvedPreviewSnapshotRef: snapshot.ref,
-              approvedPreviewHash: snapshot.contentHash,
+              approvedPreviewSnapshotRef: snapshot2.ref,
+              approvedPreviewHash: snapshot2.contentHash,
               decidedAt: approvedAt,
               updatedAt: approvedAt
             });
@@ -186314,7 +186321,7 @@ var init_network_maintenance = __esm({
               { kind: "maintenance_run", id: run.id, field: "analysisAttemptId", equals: validating.analysisAttemptId }
             ],
             puts: [
-              ...approvedPreviewSnapshots.map((snapshot) => put("snapshot", snapshot, "error")),
+              ...approvedPreviewSnapshots.map((snapshot2) => put("snapshot", snapshot2, "error")),
               ...approvedCandidates.map((candidate) => put("candidate", candidate, "error")),
               ...created.targets.map((target) => put("candidate_target", target, "error")),
               ...approvedOperations.map((operation) => put("maintenance_operation", operation, "error")),
@@ -186671,11 +186678,11 @@ var init_network_maintenance = __esm({
         if (relevantTasks.length !== taskKeys.length || relevantTasks.some((task) => task.status !== "failed_deterministic" || task.retryCount < 1)) {
           return this.options.fail(409, "KNOWLEDGE_MAINTENANCE_GAP_RETRY_REQUIRED", "\u81F3\u5C11\u8BA9\u77E5\u8BC6\u7BA1\u7406\u5458\u6309\u6821\u9A8C\u610F\u89C1\u8FD4\u4FEE\u4E00\u6B21\uFF1B\u8FDE\u7EED\u5931\u8D25\u540E\u624D\u80FD\u8DF3\u8FC7\u76F8\u5173\u4E3B\u9898");
         }
-        const inputSnapshot = snapshots2.find((snapshot) => snapshot.ref === run.inputSnapshotRef);
+        const inputSnapshot = snapshots2.find((snapshot2) => snapshot2.ref === run.inputSnapshotRef);
         if (!inputSnapshot || inputSnapshot.contentHash !== run.inputHash || inputSnapshot.contentHash !== sha256(inputSnapshot.content)) {
           return this.options.fail(409, "KNOWLEDGE_MAINTENANCE_INPUT_CORRUPT", "\u7EF4\u62A4\u8F93\u5165\u5FEB\u7167\u4E0D\u53EF\u8BFB");
         }
-        const outputSnapshot = run.outputSnapshotRef ? snapshots2.find((snapshot) => snapshot.ref === run.outputSnapshotRef) : void 0;
+        const outputSnapshot = run.outputSnapshotRef ? snapshots2.find((snapshot2) => snapshot2.ref === run.outputSnapshotRef) : void 0;
         if (!outputSnapshot || outputSnapshot.contentHash !== sha256(outputSnapshot.content)) {
           return this.options.fail(409, "KNOWLEDGE_MAINTENANCE_OUTPUT_CORRUPT", "\u7EF4\u62A4\u8F93\u51FA\u5FEB\u7167\u4E0D\u53EF\u8BFB");
         }
@@ -186826,16 +186833,16 @@ var init_network_maintenance = __esm({
             targetItems: previewTargets,
             sensitivityFindings: [...candidate.sensitivityFindings]
           };
-          const snapshot = this.snapshot(ctx, "approved_preview", stableJson(preview2), projectId2, run.spaceId, `snapshot:maintenance-preview:${candidate.id}:${candidate.candidateRevision}`);
-          snapshots2.push(snapshot);
+          const snapshot2 = this.snapshot(ctx, "approved_preview", stableJson(preview2), projectId2, run.spaceId, `snapshot:maintenance-preview:${candidate.id}:${candidate.candidateRevision}`);
+          snapshots2.push(snapshot2);
           decidedCandidates.push({
             ...candidate,
             decisionStatus: "approved",
             decisionAction: candidate.recommendedAction,
             decidedBy: ctx.actorId,
             decisionReason: request2.reason.trim(),
-            approvedPreviewSnapshotRef: snapshot.ref,
-            approvedPreviewHash: snapshot.contentHash,
+            approvedPreviewSnapshotRef: snapshot2.ref,
+            approvedPreviewHash: snapshot2.contentHash,
             decidedAt: now,
             updatedAt: now
           });
@@ -186889,7 +186896,7 @@ var init_network_maintenance = __esm({
         const result = await store.transact(scope, {
           checks: [{ kind: "maintenance_run", id: run.id, field: "status", equals: "awaiting_review" }],
           puts: [
-            ...snapshots2.map((snapshot) => put("snapshot", snapshot, "error")),
+            ...snapshots2.map((snapshot2) => put("snapshot", snapshot2, "error")),
             ...decidedCandidates.map((candidate) => put("candidate", candidate)),
             ...nextOperations.map((operation) => put("maintenance_operation", operation)),
             put("maintenance_run", reviewed),
@@ -187279,7 +187286,7 @@ var init_network_maintenance = __esm({
             createdAt: now,
             updatedAt: now
           };
-          const snapshot = this.snapshot(ctx, "approved_content", normalizeKnowledgeContent(preview2.title, revision.content), run.projectId, run.spaceId, `snapshot:approved:${versionId}`);
+          const snapshot2 = this.snapshot(ctx, "approved_content", normalizeKnowledgeContent(preview2.title, revision.content), run.projectId, run.spaceId, `snapshot:approved:${versionId}`);
           const metadata = preview2.metadata;
           const version2 = {
             id: versionId,
@@ -187311,7 +187318,7 @@ var init_network_maintenance = __esm({
             semanticContentHash: semanticKnowledgeHash(preview2.title, revision.content),
             providerContentHash: revision.providerContentHash || providerKnowledgeHash(revision.content),
             contentNormalizerVersion: KNOWLEDGE_NORMALIZER_VERSION,
-            contentSnapshotRef: snapshot.ref,
+            contentSnapshotRef: snapshot2.ref,
             changeType: operation.action === "add" ? "initial" : operation.action,
             changeSummary: candidate.recommendedReason,
             approvedBy: candidate.decidedBy,
@@ -187320,7 +187327,7 @@ var init_network_maintenance = __esm({
           };
           finalItems.set(item.id, item);
           puts.push(
-            put("snapshot", snapshot, "error"),
+            put("snapshot", snapshot2, "error"),
             put("item", item, updatesExisting ? "replace" : "error"),
             put("item_version", version2, "error"),
             put("provider_mapping", this.providerMapping(ctx, version2, connection, space, revision), "error"),
@@ -187401,7 +187408,7 @@ var init_network_maintenance = __esm({
             title: version2.title,
             abstract: version2.abstract,
             logicalPath: item.logicalPath,
-            content: snapshot.content
+            content: snapshot2.content
           }).map((entry) => ({
             id: `${version2.id}:${entry.chunkId}:routing`,
             organizationId: ctx.organizationId,
@@ -187506,9 +187513,9 @@ var init_network_maintenance = __esm({
         const scope = recordScope(ctx.organizationId, projectId2, current.spaceId);
         const previous3 = await store.get(scope, "generation", current.previousGenerationId);
         if (!previous3?.manifestSnapshotRef || previous3.status !== "superseded") return this.options.fail(409, "KNOWLEDGE_GENERATION_PREVIOUS_UNAVAILABLE", "\u4E0A\u4E00 Generation \u4E0D\u53EF\u6062\u590D");
-        const snapshot = (await store.list(scope, "snapshot")).find((entry) => entry.ref === previous3.manifestSnapshotRef);
-        if (!snapshot || snapshot.contentHash !== previous3.manifestHash || snapshot.contentHash !== sha256(snapshot.content)) return this.options.fail(409, "KNOWLEDGE_GENERATION_MANIFEST_CORRUPT", "\u4E0A\u4E00 Generation Manifest \u4E0D\u53EF\u8BFB");
-        const manifest = JSON.parse(snapshot.content);
+        const snapshot2 = (await store.list(scope, "snapshot")).find((entry) => entry.ref === previous3.manifestSnapshotRef);
+        if (!snapshot2 || snapshot2.contentHash !== previous3.manifestHash || snapshot2.contentHash !== sha256(snapshot2.content)) return this.options.fail(409, "KNOWLEDGE_GENERATION_MANIFEST_CORRUPT", "\u4E0A\u4E00 Generation Manifest \u4E0D\u53EF\u8BFB");
+        const manifest = JSON.parse(snapshot2.content);
         const items = await store.list(scope, "item");
         const versions = new Map((await store.list(scope, "item_version")).map((entry) => [entry.id, entry]));
         const itemById = new Map(items.map((entry) => [entry.id, entry]));
@@ -188390,8 +188397,8 @@ var init_governance_service = __esm({
           for (const item of (await store.list(itemScope, "item")).filter((entry) => entry.currentApprovedVersionId)) {
             const version2 = versions.find((entry) => entry.id === item.currentApprovedVersionId);
             if (!version2) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_CONFIGURATION_VERSION_MISSING", `\u6B63\u5F0F\u77E5\u8BC6\u5F53\u524D\u7248\u672C\u4E0D\u5B58\u5728\uFF1A${item.id}`);
-            const snapshot = snapshots2.find((entry) => entry.ref === version2.contentSnapshotRef);
-            if (!snapshot || snapshot.contentHash !== sha256(snapshot.content)) {
+            const snapshot2 = snapshots2.find((entry) => entry.ref === version2.contentSnapshotRef);
+            if (!snapshot2 || snapshot2.contentHash !== sha256(snapshot2.content)) {
               throw new KnowledgeGovernanceError(409, "KNOWLEDGE_CONFIGURATION_SNAPSHOT_INVALID", `\u6B63\u5F0F\u77E5\u8BC6\u7F3A\u5C11\u53EF\u9A8C\u8BC1\u5FEB\u7167\uFF0C\u4E0D\u80FD\u5B89\u5168\u5207\u6362\u4F4D\u7F6E\uFF1A${item.id}`);
             }
             const targetSpace = {
@@ -188416,7 +188423,7 @@ var init_governance_service = __esm({
               libraryRef: binding.libraryRef,
               rootRef: binding.rootRef
             });
-            const approvedBody = approvedSnapshotBody(version2.title, snapshot.content);
+            const approvedBody = approvedSnapshotBody(version2.title, snapshot2.content);
             const written = await this.options.provider.writeApprovedDocument(connection, {
               jobId: `knowledge-cutover:${relocationKey}`,
               itemId: item.id,
@@ -189209,9 +189216,9 @@ var init_governance_service = __esm({
           const run = await store.get(scope, "discovery_run", runId);
           if (!run) continue;
           if (run.status !== "failed") throw new KnowledgeGovernanceError(409, "KNOWLEDGE_DISCOVERY_NOT_RETRYABLE", "\u53EA\u6709 failed Discovery Run \u53EF\u91CD\u8BD5");
-          const snapshot = (await store.list(scope, "snapshot")).find((entry) => entry.ref === run.analysisInputSnapshotRef);
-          if (!snapshot || snapshot.contentHash !== sha256(snapshot.content)) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_DISCOVERY_INPUT_UNREADABLE", "Discovery \u8F93\u5165\u5FEB\u7167\u4E0D\u53EF\u8BFB");
-          const input = JSON.parse(snapshot.content);
+          const snapshot2 = (await store.list(scope, "snapshot")).find((entry) => entry.ref === run.analysisInputSnapshotRef);
+          if (!snapshot2 || snapshot2.contentHash !== sha256(snapshot2.content)) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_DISCOVERY_INPUT_UNREADABLE", "Discovery \u8F93\u5165\u5FEB\u7167\u4E0D\u53EF\u8BFB");
+          const input = JSON.parse(snapshot2.content);
           const currentRuntime = await this.options.discoveryRuntime?.();
           if (!currentRuntime) throw new KnowledgeGovernanceError(503, "KNOWLEDGE_DISCOVERY_RUNTIME_UNAVAILABLE", "\u77E5\u8BC6\u53D1\u73B0\u6A21\u578B\u914D\u7F6E\u4E0D\u53EF\u7528");
           return this.enqueueDiscoveryEvent(ctx, {
@@ -189747,8 +189754,8 @@ var init_governance_service = __esm({
         const limit = sampleSize === void 0 ? snapshots2.length : Math.max(1, Math.min(Math.floor(sampleSize), snapshots2.length));
         const offset = snapshots2.length > 0 ? Math.floor(this.now().getTime() / 864e5) % snapshots2.length : 0;
         const selected = [...snapshots2.slice(offset), ...snapshots2.slice(0, offset)].slice(0, limit);
-        const corruptRefs = selected.filter((snapshot) => snapshot.contentHash !== sha256(snapshot.content)).map((snapshot) => snapshot.ref);
-        const existingRefs = new Set(snapshots2.map((snapshot) => snapshot.ref));
+        const corruptRefs = selected.filter((snapshot2) => snapshot2.contentHash !== sha256(snapshot2.content)).map((snapshot2) => snapshot2.ref);
+        const existingRefs = new Set(snapshots2.map((snapshot2) => snapshot2.ref));
         const referencedRefs = await this.snapshotReferences(store, scope);
         const missingRefs = [...referencedRefs].filter((ref2) => !existingRefs.has(ref2)).sort();
         const report = {
@@ -189780,19 +189787,19 @@ var init_governance_service = __esm({
         const snapshots2 = await store.list(scope, "snapshot");
         const referencedRefs = await this.snapshotReferences(store, scope);
         const now = this.now().getTime();
-        const expired = snapshots2.filter((snapshot) => snapshot.retentionUntil && Date.parse(snapshot.retentionUntil) <= now && !referencedRefs.has(snapshot.ref)).sort((left, right) => left.retentionUntil.localeCompare(right.retentionUntil) || left.ref.localeCompare(right.ref));
+        const expired = snapshots2.filter((snapshot2) => snapshot2.retentionUntil && Date.parse(snapshot2.retentionUntil) <= now && !referencedRefs.has(snapshot2.ref)).sort((left, right) => left.retentionUntil.localeCompare(right.retentionUntil) || left.ref.localeCompare(right.ref));
         if (expired.length > 0) {
           const result = await store.transact(scope, {
-            checks: expired.map((snapshot) => ({ kind: "snapshot", id: snapshot.id, field: "retentionUntil", equals: snapshot.retentionUntil })),
-            deletes: expired.map((snapshot) => ({ kind: "snapshot", id: snapshot.id })),
+            checks: expired.map((snapshot2) => ({ kind: "snapshot", id: snapshot2.id, field: "retentionUntil", equals: snapshot2.retentionUntil })),
+            deletes: expired.map((snapshot2) => ({ kind: "snapshot", id: snapshot2.id })),
             puts: [put2("audit_event", this.audit(ctx, "snapshot.retention_deleted", "snapshot", "expired", void 0, {
-              deletedRefs: expired.map((snapshot) => snapshot.ref),
-              deletedContentHashes: expired.map((snapshot) => snapshot.contentHash)
+              deletedRefs: expired.map((snapshot2) => snapshot2.ref),
+              deletedContentHashes: expired.map((snapshot2) => snapshot2.contentHash)
             }, projectId2), "error")]
           });
           if (!result.committed) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_SNAPSHOT_RETENTION_CONFLICT", "Snapshot \u4FDD\u7559\u6E05\u7406\u9047\u5230\u5E76\u53D1\u53D8\u66F4");
         }
-        return { inspected: snapshots2.length, deletedRefs: expired.map((snapshot) => snapshot.ref) };
+        return { inspected: snapshots2.length, deletedRefs: expired.map((snapshot2) => snapshot2.ref) };
       }
       async cancelPublishJob(ctx, jobId, projectId2) {
         if (projectId2) await this.authorizeProjectResource(ctx, projectId2, "review");
@@ -189845,7 +189852,7 @@ var init_governance_service = __esm({
         if (!candidate || candidate.decisionStatus !== "approved" || candidate.candidateRevision !== job.candidateRevision) {
           return this.failPublish(store, scope, job, "APPROVED_CANDIDATE_MISSING", true);
         }
-        const previewSnapshot = candidate.approvedPreviewSnapshotRef ? (await store.list(scope, "snapshot")).find((snapshot) => snapshot.ref === candidate.approvedPreviewSnapshotRef) : void 0;
+        const previewSnapshot = candidate.approvedPreviewSnapshotRef ? (await store.list(scope, "snapshot")).find((snapshot2) => snapshot2.ref === candidate.approvedPreviewSnapshotRef) : void 0;
         if (!previewSnapshot || previewSnapshot.contentHash !== job.previewHash || candidate.approvedPreviewHash !== job.previewHash) {
           return this.failPublish(store, scope, job, "APPROVED_PREVIEW_MISSING", true);
         }
@@ -189934,8 +189941,8 @@ var init_governance_service = __esm({
         if (!version2) throw new KnowledgeGovernanceError(404, "KNOWLEDGE_VERSION_NOT_FOUND", "\u77E5\u8BC6\u7248\u672C\u4E0D\u5B58\u5728");
         const item = await store.get(scope, "item", version2.knowledgeItemId);
         if (!item || item.currentApprovedVersionId !== version2.id) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_VERSION_NOT_CURRENT", "\u77E5\u8BC6\u7248\u672C\u4E0D\u662F\u5F53\u524D\u6279\u51C6\u7248\u672C");
-        const snapshot = (await store.list(scope, "snapshot")).find((entry) => entry.ref === version2.contentSnapshotRef);
-        if (!snapshot || snapshot.contentHash !== sha256(snapshot.content)) {
+        const snapshot2 = (await store.list(scope, "snapshot")).find((entry) => entry.ref === version2.contentSnapshotRef);
+        if (!snapshot2 || snapshot2.contentHash !== sha256(snapshot2.content)) {
           await this.setRuntimeState(store, scope, version2, "snapshot", "corrupt", "SNAPSHOT_HASH_MISMATCH");
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_SNAPSHOT_CORRUPT", "\u77E5\u8BC6\u5FEB\u7167\u635F\u574F");
         }
@@ -189946,7 +189953,7 @@ var init_governance_service = __esm({
           title: version2.title,
           abstract: version2.abstract,
           logicalPath: item.logicalPath,
-          content: snapshot.content
+          content: snapshot2.content
         }).map((entry) => ({
           id: `${version2.id}:${entry.chunkId}:${indexKind}`,
           organizationId: ctx.organizationId,
@@ -190050,7 +190057,7 @@ var init_governance_service = __esm({
           const activeGeneration = (await store.list(entry.scope, "generation")).find((generation) => generation.status === "active");
           const activeDerivedVersionIds = /* @__PURE__ */ new Set();
           if (activeGeneration?.manifestSnapshotRef) {
-            const manifest = (await store.list(entry.scope, "snapshot")).find((snapshot) => snapshot.ref === activeGeneration.manifestSnapshotRef);
+            const manifest = (await store.list(entry.scope, "snapshot")).find((snapshot2) => snapshot2.ref === activeGeneration.manifestSnapshotRef);
             if (!manifest || manifest.contentHash !== activeGeneration.manifestHash || manifest.contentHash !== sha256(manifest.content)) {
               warnings.push(`${entry.space.id}: active Generation Manifest \u4E0D\u53EF\u8BFB`);
             } else {
@@ -191279,7 +191286,7 @@ var init_governance_service = __esm({
         });
         const result = await store.transact(scope, {
           puts: [
-            ...snapshots2.map((snapshot) => put2("snapshot", snapshot, "error")),
+            ...snapshots2.map((snapshot2) => put2("snapshot", snapshot2, "error")),
             put2("context_pack", pack, "error"),
             ...entries.map((entry) => put2("context_pack_entry", entry, "error")),
             ...usageEvents.map((event) => put2("usage_event", event, "error")),
@@ -191304,7 +191311,7 @@ var init_governance_service = __esm({
           throw new KnowledgeGovernanceError(403, "KNOWLEDGE_PACK_FORBIDDEN", "\u65E0\u6743\u67E5\u770B\u8BE5 Context Pack");
         }
         const entries = (await store.list(scope, "context_pack_entry")).filter((entry) => entry.contextPackId === pack.id).sort((left, right) => left.ordinal - right.ordinal);
-        const rendered = pack.renderedSnapshotRef ? (await store.list(scope, "snapshot")).find((snapshot) => snapshot.ref === pack.renderedSnapshotRef) : void 0;
+        const rendered = pack.renderedSnapshotRef ? (await store.list(scope, "snapshot")).find((snapshot2) => snapshot2.ref === pack.renderedSnapshotRef) : void 0;
         if (rendered && rendered.contentHash !== sha256(rendered.content)) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_PACK_CORRUPT", "Context Pack \u6E32\u67D3\u5FEB\u7167 Hash \u4E0D\u4E00\u81F4");
         return { pack, entries, ...rendered ? { renderedContent: rendered.content } : {} };
       }
@@ -191537,9 +191544,9 @@ var init_governance_service = __esm({
           const current = await store.get(scope, "discovery_run", runId);
           if (!current) continue;
           if (current.status === "ready") return current;
-          const snapshot = (await store.list(scope, "snapshot")).find((entry) => entry.ref === current.analysisInputSnapshotRef);
-          if (!snapshot || snapshot.contentHash !== sha256(snapshot.content)) throw new Error("Discovery \u8F93\u5165\u5FEB\u7167\u4E0D\u53EF\u8BFB");
-          const input = JSON.parse(snapshot.content);
+          const snapshot2 = (await store.list(scope, "snapshot")).find((entry) => entry.ref === current.analysisInputSnapshotRef);
+          if (!snapshot2 || snapshot2.contentHash !== sha256(snapshot2.content)) throw new Error("Discovery \u8F93\u5165\u5FEB\u7167\u4E0D\u53EF\u8BFB");
+          const input = JSON.parse(snapshot2.content);
           const rule = input.rule;
           if (!rule || rule.id !== current.ruleId || rule.ruleVersion !== current.ruleVersion) throw new Error("Discovery \u6765\u6E90\u89C4\u5219\u5FEB\u7167\u4E0D\u53EF\u8BFB");
           if (space.status !== "active") throw new Error("Discovery Knowledge Space \u4E0D\u53EF\u7528");
@@ -192353,7 +192360,7 @@ var init_governance_service = __esm({
         const existing = await store.get(scope, "migration_batch", batchId);
         if (existing) {
           const entries2 = (await store.list(scope, "migration_entry")).filter((entry) => entry.batchId === existing.id);
-          const reportSnapshot2 = (await store.list(scope, "snapshot")).find((snapshot) => snapshot.ref === existing.reportSnapshotRef);
+          const reportSnapshot2 = (await store.list(scope, "snapshot")).find((snapshot2) => snapshot2.ref === existing.reportSnapshotRef);
           return { batch: existing, entries: entries2, report: reportSnapshot2 ? JSON.parse(reportSnapshot2.content) : { manifestHash } };
         }
         const report = {
@@ -192471,7 +192478,7 @@ var init_governance_service = __esm({
         const result = await store.transact(scope, {
           puts: [
             put2("migration_batch", batch, "error"),
-            ...snapshots2.map((snapshot) => put2("snapshot", snapshot, "error")),
+            ...snapshots2.map((snapshot2) => put2("snapshot", snapshot2, "error")),
             ...candidates.map((candidate) => put2("candidate", candidate, "error")),
             ...entries.map((entry) => put2("migration_entry", entry, "error")),
             put2("audit_event", this.audit(ctx, "migration.dry_run", "migration_batch", batch.id, void 0, { ...batch, manifestHash }, input.projectId), "error")
@@ -192539,7 +192546,7 @@ var init_governance_service = __esm({
         const connection = space ? await store.get(this.orgScope(ctx), "connector_connection", space.connectorConnectionId) : null;
         if (!space || !connection) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_MIGRATION_BINDING_MISSING", "\u8FC1\u79FB Space \u6216 Connection \u4E0D\u5B58\u5728");
         if (!batch.signatureSnapshotRef) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_MIGRATION_SIGNATURE_REQUIRED", "\u6CA1\u6709\u53EF\u5BA1\u8BA1\u7684 Hash \u6E05\u5355\u7B7E\u7F72");
-        const signature = (await store.list(scope, "snapshot")).find((snapshot) => snapshot.ref === batch.signatureSnapshotRef);
+        const signature = (await store.list(scope, "snapshot")).find((snapshot2) => snapshot2.ref === batch.signatureSnapshotRef);
         if (!signature || signature.contentHash !== sha256(signature.content)) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_MIGRATION_SIGNATURE_CORRUPT", "\u8FC1\u79FB\u7B7E\u7F72\u5FEB\u7167\u4E0D\u53EF\u8BFB");
         const signedManifest = JSON.parse(signature.content);
         if (signedManifest.batchId !== batch.id) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_MIGRATION_SIGNATURE_MISMATCH", "\u8FC1\u79FB\u7B7E\u7F72\u6279\u6B21\u4E0D\u5339\u914D");
@@ -192826,11 +192833,11 @@ var init_governance_service = __esm({
         if (!run || run.inputHash !== candidate.maintenanceInputHash) {
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_MAINTENANCE_INPUT_STALE", "\u7EF4\u62A4 Candidate \u5DF2\u8131\u79BB\u51BB\u7ED3\u8F93\u5165");
         }
-        const snapshot = (await store.list(scope, "snapshot")).find((entry) => entry.ref === run.inputSnapshotRef);
-        if (!snapshot || snapshot.contentHash !== sha256(snapshot.content) || snapshot.contentHash !== run.inputHash) {
+        const snapshot2 = (await store.list(scope, "snapshot")).find((entry) => entry.ref === run.inputSnapshotRef);
+        if (!snapshot2 || snapshot2.contentHash !== sha256(snapshot2.content) || snapshot2.contentHash !== run.inputHash) {
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_MAINTENANCE_INPUT_UNREADABLE", "\u7EF4\u62A4 Candidate \u7684\u51BB\u7ED3\u8F93\u5165\u4E0D\u53EF\u8BFB");
         }
-        const input = JSON.parse(snapshot.content);
+        const input = JSON.parse(snapshot2.content);
         const sourceById = new Map(input.currentApprovedSources.filter((source) => source.knowledgeRole === "source").map((source) => [source.versionId, source]));
         const derivedFromVersionIds = this.canonicalTargetIds(candidate.derivedFromVersionIds ?? []);
         const sources = derivedFromVersionIds.map((versionId) => sourceById.get(versionId));
@@ -193137,7 +193144,7 @@ var init_governance_service = __esm({
         const now = this.iso();
         const projectId2 = candidate.projectId;
         const normalizedContent = normalizeKnowledgeContent(preview2.title, approvedRevision.content);
-        const snapshot = this.snapshot(ctx, "approved_content", normalizedContent, projectId2, candidate.spaceId, `snapshot:approved:${job.allocatedVersionId}`);
+        const snapshot2 = this.snapshot(ctx, "approved_content", normalizedContent, projectId2, candidate.spaceId, `snapshot:approved:${job.allocatedVersionId}`);
         const primary = targets[0];
         const updatesExistingItem = Boolean(primary && job.action === "revise");
         const priorVersions = updatesExistingItem && primary ? (await store.list(scope, "item_version")).filter((version3) => version3.knowledgeItemId === primary.id) : [];
@@ -193195,7 +193202,7 @@ var init_governance_service = __esm({
           semanticContentHash: semanticKnowledgeHash(preview2.title, approvedRevision.content),
           providerContentHash: approvedRevision.providerContentHash || providerKnowledgeHash(approvedRevision.content),
           contentNormalizerVersion: KNOWLEDGE_NORMALIZER_VERSION,
-          contentSnapshotRef: snapshot.ref,
+          contentSnapshotRef: snapshot2.ref,
           changeType: job.action === "add" ? "initial" : job.action,
           changeSummary: candidate.recommendedReason,
           approvedBy: candidate.decidedBy,
@@ -193299,7 +193306,7 @@ var init_governance_service = __esm({
         const result = await store.transact(scope, {
           checks,
           puts: [
-            put2("snapshot", snapshot, "error"),
+            put2("snapshot", snapshot2, "error"),
             put2("item", item, updatesExistingItem ? "replace" : "error"),
             ...superseded.map((target) => put2("item", target)),
             put2("item_version", version2, "error"),
@@ -193397,12 +193404,12 @@ var init_governance_service = __esm({
             await this.setRuntimeState(store, scope, version2, "provider", "missing", "APPROVED_REVISION_UNREADABLE");
           }
         }
-        const snapshot = (await store.list(scope, "snapshot")).find((entry) => entry.ref === version2.contentSnapshotRef);
-        if (!snapshot || snapshot.contentHash !== sha256(snapshot.content)) {
-          await this.setRuntimeState(store, scope, version2, "snapshot", snapshot ? "corrupt" : "missing", snapshot ? "SNAPSHOT_HASH_MISMATCH" : "SNAPSHOT_MISSING");
+        const snapshot2 = (await store.list(scope, "snapshot")).find((entry) => entry.ref === version2.contentSnapshotRef);
+        if (!snapshot2 || snapshot2.contentHash !== sha256(snapshot2.content)) {
+          await this.setRuntimeState(store, scope, version2, "snapshot", snapshot2 ? "corrupt" : "missing", snapshot2 ? "SNAPSHOT_HASH_MISMATCH" : "SNAPSHOT_MISSING");
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_APPROVED_CONTENT_UNREADABLE", "\u6279\u51C6 Revision \u4E0E Snapshot \u5747\u4E0D\u53EF\u8BFB");
         }
-        return { content: snapshot.content, source: "snapshot" };
+        return { content: snapshot2.content, source: "snapshot" };
       }
       async findItemAndVersion(ctx, store, projectId2, itemId) {
         const scopes = [this.orgScope(ctx), ...projectId2 ? [this.projectScope(ctx, projectId2)] : []];
@@ -195489,36 +195496,36 @@ function keyBytes(key) {
   if (value2.length !== 32) throw new Error("knowledge snapshot key must be 32 bytes");
   return value2;
 }
-function aad(snapshot) {
+function aad(snapshot2) {
   return Buffer.from([
-    snapshot.organizationId,
-    snapshot.projectId ?? "organization",
-    snapshot.spaceId ?? "none",
-    snapshot.ref,
-    snapshot.contentHash
+    snapshot2.organizationId,
+    snapshot2.projectId ?? "organization",
+    snapshot2.spaceId ?? "none",
+    snapshot2.ref,
+    snapshot2.contentHash
   ].join("\0"), "utf8");
 }
-function sealKnowledgeSnapshot(snapshot, key) {
-  if (snapshot.content.startsWith(PREFIX)) return structuredClone(snapshot);
+function sealKnowledgeSnapshot(snapshot2, key) {
+  if (snapshot2.content.startsWith(PREFIX)) return structuredClone(snapshot2);
   const iv = (0, import_node_crypto29.randomBytes)(12);
   const cipher = (0, import_node_crypto29.createCipheriv)("aes-256-gcm", keyBytes(key), iv);
-  cipher.setAAD(aad(snapshot));
-  const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
+  cipher.setAAD(aad(snapshot2));
+  const encrypted = Buffer.concat([cipher.update(snapshot2.content, "utf8"), cipher.final()]);
   return {
-    ...structuredClone(snapshot),
+    ...structuredClone(snapshot2),
     content: `${PREFIX}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}`
   };
 }
-function openKnowledgeSnapshot(snapshot, key) {
-  if (!snapshot.content.startsWith(PREFIX)) return structuredClone(snapshot);
-  const packed = snapshot.content.slice(PREFIX.length).split(".");
-  if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
+function openKnowledgeSnapshot(snapshot2, key) {
+  if (!snapshot2.content.startsWith(PREFIX)) return structuredClone(snapshot2);
+  const packed = snapshot2.content.slice(PREFIX.length).split(".");
+  if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot2.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
   const decipher = (0, import_node_crypto29.createDecipheriv)("aes-256-gcm", keyBytes(key), Buffer.from(iv, "base64url"));
-  decipher.setAAD(aad(snapshot));
+  decipher.setAAD(aad(snapshot2));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   const content3 = Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8");
-  return { ...structuredClone(snapshot), content: content3 };
+  return { ...structuredClone(snapshot2), content: content3 };
 }
 var import_node_crypto29, PREFIX;
 var init_snapshot_crypto = __esm({
@@ -196265,9 +196272,9 @@ function parentConversationTaskLines() {
     `- ${PARENT_CONVERSATION_PATH}`
   ];
 }
-function delegationBundleAdditions(snapshot) {
-  if (!snapshot) return { files: {}, taskLines: [] };
-  return { files: { [PARENT_CONVERSATION_PATH]: snapshot }, taskLines: parentConversationTaskLines() };
+function delegationBundleAdditions(snapshot2) {
+  if (!snapshot2) return { files: {}, taskLines: [] };
+  return { files: { [PARENT_CONVERSATION_PATH]: snapshot2 }, taskLines: parentConversationTaskLines() };
 }
 var PARENT_CONVERSATION_RECENT_TURNS, FIRST_LINE_MAX, ROLE_LABEL;
 var init_parent_conversation = __esm({
@@ -196985,13 +196992,13 @@ var init_service3 = __esm({
           consumedAt: now,
           at: now
         });
-        const snapshot = buildParentConversationSnapshot(
+        const snapshot2 = buildParentConversationSnapshot(
           parentMessages,
           this.options.recentTurns === void 0 ? void 0 : { recentTurns: this.options.recentTurns }
         );
         const turns = await this.resolveTurns(companyId);
         const claimed = await this.claim(store, record8.id, now, Boolean(turns));
-        if (claimed) this.track(this.dispatchExpert(claimed, input.task, companyId, snapshot, turns, { inbound }));
+        if (claimed) this.track(this.dispatchExpert(claimed, input.task, companyId, snapshot2, turns, { inbound }));
         if (inserted) this.options.metrics?.recordCreated();
         return { record: record8, created: inserted };
       }
@@ -197025,10 +197032,10 @@ var init_service3 = __esm({
         const expert = { actorId: record8.expertActorId, name: named?.name ?? actorSlug(record8.expertActorId) };
         const now = this.now();
         await this.materializeChild({ record: record8, chatStore, parent, expert, task: input.task, companyId, now });
-        const snapshot = await this.parentSnapshot(chatStore, parent.id);
+        const snapshot2 = await this.parentSnapshot(chatStore, parent.id);
         const turns = await this.resolveTurns(companyId);
         const claimed = await this.claim(store, record8.id, now, Boolean(turns));
-        if (claimed) this.track(this.dispatchExpert(claimed, input.task, companyId, snapshot, turns, { inbound }));
+        if (claimed) this.track(this.dispatchExpert(claimed, input.task, companyId, snapshot2, turns, { inbound }));
         return { record: record8, created: false };
       }
       async materializeChild(args) {
@@ -197103,7 +197110,7 @@ var init_service3 = __esm({
        * 覆盖事实——而且是**不可逆的**：`failed` 之后租约回收再也不成立，那条既有 run 接不回来。
        * 那一类只释放派发所有权、其余原样留着，等账本恢复后由同一把稳定 dispatchId 接回去。
        */
-      async dispatchExpert(record8, task, companyId, snapshot, turns, opts) {
+      async dispatchExpert(record8, task, companyId, snapshot2, turns, opts) {
         const inbound = opts?.inbound;
         let outcomeSettled = false;
         const notDispatched = async (reason) => {
@@ -197160,7 +197167,7 @@ var init_service3 = __esm({
             chatSessionId: record8.childSessionId,
             dispatchId,
             ...companyId ? { companyId } : {},
-            ...snapshot ? { parentConversationSnapshot: snapshot } : {},
+            ...snapshot2 ? { parentConversationSnapshot: snapshot2 } : {},
             extraSystemPrompt: EXPERT_DELEGATION_SYSTEM_PROMPT,
             ..._DelegationService.inboundBundle(inbound) ? { workspaceBundle: _DelegationService.inboundBundle(inbound) } : {},
             /* 派发这一侧要拿它们建 `chat_items` 账本（见本文件 `DelegationDispatchRequest` 的注释）。
@@ -197445,7 +197452,7 @@ var init_service3 = __esm({
           },
           wantedFiles
         ) : void 0;
-        const snapshot = await this.parentSnapshot(chatStore, record8.parentSessionId).catch(() => null);
+        const snapshot2 = await this.parentSnapshot(chatStore, record8.parentSessionId).catch(() => null);
         const released = await store.patch(record8.id, {
           state: "running",
           failureKind: null,
@@ -197478,7 +197485,7 @@ var init_service3 = __esm({
             await restore();
             return false;
           }
-          this.track(this.dispatchExpert(claimed, body2, companyId, snapshot, turns, {
+          this.track(this.dispatchExpert(claimed, body2, companyId, snapshot2, turns, {
             ...inbound ? { inbound } : {},
             /**
              * **送到专家手上那一刻才算消费**（见 `dispatchExpert` 的 `onDispatched`）。
@@ -197586,7 +197593,7 @@ var init_service3 = __esm({
         const now = this.now();
         const messages = await this.parentMessages(chatStore, parent.id);
         const messageId = this.touchAnchor(_DelegationService.birthMessageId(messages) || record8.id);
-        const snapshot = buildParentConversationSnapshot(
+        const snapshot2 = buildParentConversationSnapshot(
           messages,
           this.options.recentTurns === void 0 ? void 0 : { recentTurns: this.options.recentTurns }
         );
@@ -197606,7 +197613,7 @@ var init_service3 = __esm({
 \u3010\u968F\u8FD9\u6761\u8F6C\u8FBE\u9644\u5E26\u7684\u6587\u4EF6\u3011\u5DF2\u653E\u8FDB\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF1A
 ${inboundBundle.paths.map((path43) => `- ${path43}`).join("\n")}` : text5,
             files: {
-              ...snapshot ? { [PARENT_CONVERSATION_PATH]: snapshot } : {},
+              ...snapshot2 ? { [PARENT_CONVERSATION_PATH]: snapshot2 } : {},
               ...inboundBundle.files
             },
             ...Object.keys(inboundBundle.binaryFiles).length ? { binaryFiles: inboundBundle.binaryFiles } : {}
@@ -197691,9 +197698,9 @@ ${inboundBundle.paths.map((path43) => `- ${path43}`).join("\n")}` : text5,
         const record8 = await store.get(delegationId);
         if (!record8) return null;
         const chatStore = await this.options.resolveChatSessions(companyId);
-        const snapshot = await this.parentSnapshot(chatStore, record8.parentSessionId);
+        const snapshot2 = await this.parentSnapshot(chatStore, record8.parentSessionId);
         return {
-          ...snapshot ? { parentConversationSnapshot: snapshot } : {},
+          ...snapshot2 ? { parentConversationSnapshot: snapshot2 } : {},
           extraSystemPrompt: EXPERT_DELEGATION_SYSTEM_PROMPT
         };
       }
@@ -198080,11 +198087,11 @@ var init_store2 = __esm({
         return store;
       }
       save() {
-        const snapshot = {
+        const snapshot2 = {
           delegations: [...this.rows.values()],
           touches: [...this.touches.values()]
         };
-        fs17.writeFileSync(this.file, JSON.stringify(snapshot, null, 2));
+        fs17.writeFileSync(this.file, JSON.stringify(snapshot2, null, 2));
       }
       async create(record8) {
         const r = await super.create(record8);
@@ -201415,8 +201422,8 @@ async function loadSnapshot(api, credentials, scope, force = false) {
   const now = Date.now();
   const entry = snapshots.get(key);
   if (force) {
-    const snapshot2 = await startSnapshotRefresh(api, credentials, scope);
-    return { snapshot: snapshot2, status: "refreshed", ageMs: Math.max(0, Date.now() - snapshot2.loadedAt) };
+    const snapshot3 = await startSnapshotRefresh(api, credentials, scope);
+    return { snapshot: snapshot3, status: "refreshed", ageMs: Math.max(0, Date.now() - snapshot3.loadedAt) };
   }
   if (entry?.value && entry.freshUntil > now) {
     return { snapshot: entry.value, status: "fresh", ageMs: Math.max(0, now - entry.value.loadedAt) };
@@ -201425,8 +201432,8 @@ async function loadSnapshot(api, credentials, scope, force = false) {
     void startSnapshotRefresh(api, credentials, scope).catch(() => void 0);
     return { snapshot: entry.value, status: "stale", ageMs: Math.max(0, now - entry.value.loadedAt) };
   }
-  const snapshot = await startSnapshotRefresh(api, credentials, scope);
-  return { snapshot, status: "miss", ageMs: Math.max(0, Date.now() - snapshot.loadedAt) };
+  const snapshot2 = await startSnapshotRefresh(api, credentials, scope);
+  return { snapshot: snapshot2, status: "miss", ageMs: Math.max(0, Date.now() - snapshot2.loadedAt) };
 }
 function invalidateOutlineKnowledgeCache(credentials, scope) {
   snapshots.delete(snapshotKey(credentials, scope));
@@ -201439,9 +201446,9 @@ function evidenceLevel2(path43) {
   if (["wiki/index", "wiki/overview", "wiki/sources"].includes(path43)) return "index";
   return "other";
 }
-function snapshotMatches(snapshot, plannedQueries) {
+function snapshotMatches(snapshot2, plannedQueries) {
   return plannedQueries.map((query) => {
-    const nodes = [...snapshot.byId.values()].filter((node2) => node2.path && node2.path !== "raw" && !node2.path.startsWith("raw/"));
+    const nodes = [...snapshot2.byId.values()].filter((node2) => node2.path && node2.path !== "raw" && !node2.path.startsWith("raw/"));
     const queryTerms = lexicalTerms(query.text);
     const titleScores = bm25Scores(queryTerms, nodes.map((node2) => node2.title));
     const pathScores = bm25Scores(queryTerms, nodes.map((node2) => node2.path));
@@ -201484,16 +201491,16 @@ function mergeSearchCandidates(apiResults, localResults) {
     return { status: "fulfilled", value: [...merged.values()] };
   });
 }
-function rankCandidates(results, snapshot, plannedQueries) {
+function rankCandidates(results, snapshot2, plannedQueries) {
   const merged = /* @__PURE__ */ new Map();
   results.forEach((result, queryIndex) => {
     if (result.status !== "fulfilled") return;
     result.value.forEach((document4, sourceIndex) => {
       const ref2 = string6(document4["id"]);
-      const node2 = ref2 ? snapshot.byId.get(ref2) : void 0;
+      const node2 = ref2 ? snapshot2.byId.get(ref2) : void 0;
       const title = string6(document4["title"]);
       const url = string6(document4["url"]) ?? "";
-      if (!ref2 || !node2 || !title || !snapshot.scopedIds.has(ref2) || node2.path === "raw" || node2.path.startsWith("raw/")) return;
+      if (!ref2 || !node2 || !title || !snapshot2.scopedIds.has(ref2) || node2.path === "raw" || node2.path.startsWith("raw/")) return;
       const sourceRank = sourceIndex + 1;
       const candidateSource = document4["candidateSource"] === "snapshot" ? "snapshot" : "api";
       const sources = document4["candidateSource"] === "hybrid" ? /* @__PURE__ */ new Set(["api", "snapshot"]) : /* @__PURE__ */ new Set([candidateSource]);
@@ -201558,7 +201565,7 @@ async function mapConcurrent(values, limit, mapper) {
   await Promise.all(workers);
   return results;
 }
-async function readCandidates(api, credentials, scope, snapshot, candidates, limit = MAX_READ_CANDIDATES) {
+async function readCandidates(api, credentials, scope, snapshot2, candidates, limit = MAX_READ_CANDIDATES) {
   let refreshed;
   const values = await mapConcurrent(candidates.slice(0, limit), READ_CONCURRENCY, async (candidate) => {
     try {
@@ -201570,7 +201577,7 @@ async function readCandidates(api, credentials, scope, snapshot, candidates, lim
       const parentDocumentId = string6(document4["parentDocumentId"]);
       if (collectionId !== scope.libraryRef || !url || !text5 || !updatedAt) return null;
       if (new URL(url).origin !== new URL(api.baseUrl).origin) return null;
-      let activeSnapshot = snapshot;
+      let activeSnapshot = snapshot2;
       const listed = activeSnapshot.byId.get(candidate.ref);
       if (!listed || listed.updatedAt !== updatedAt || listed.parentId !== parentDocumentId) {
         refreshed ??= loadSnapshot(api, credentials, scope, true).then((loaded) => loaded.snapshot);
@@ -201612,12 +201619,12 @@ function snapshotRankedCandidate(node2, queryIndexes, score) {
     evidenceLevel: evidenceLevel2(node2.path)
   };
 }
-function routingPageCandidates(snapshot, queryCount) {
+function routingPageCandidates(snapshot2, queryCount) {
   const paths = /* @__PURE__ */ new Set(["wiki/overview", "wiki/index"]);
-  return [...snapshot.byId.values()].filter((node2) => paths.has(node2.path.toLocaleLowerCase())).map((node2) => snapshotRankedCandidate(node2, new Set(Array.from({ length: queryCount }, (_2, index2) => index2)), 0.05));
+  return [...snapshot2.byId.values()].filter((node2) => paths.has(node2.path.toLocaleLowerCase())).map((node2) => snapshotRankedCandidate(node2, new Set(Array.from({ length: queryCount }, (_2, index2) => index2)), 0.05));
 }
-function linkedCandidates(documents, snapshot, queries, excludedRefs) {
-  const byPath = new Map([...snapshot.byId.values()].map((node2) => [node2.path.toLocaleLowerCase(), node2]));
+function linkedCandidates(documents, snapshot2, queries, excludedRefs) {
+  const byPath = new Map([...snapshot2.byId.values()].map((node2) => [node2.path.toLocaleLowerCase(), node2]));
   const ranked = /* @__PURE__ */ new Map();
   for (const document4 of documents) {
     for (const match of document4.text.matchAll(/\[([^\]]+)\]\(kb:\/\/([^\s)#]+)(?:#[^)]*)?\)/gu)) {
@@ -201834,35 +201841,35 @@ async function retrieveOutlineKnowledge(credentials, scope, request2) {
   const snapshotStartedAt = performance.now();
   let loadedSnapshot = await loadSnapshot(api, credentials, scope);
   request2.signal?.throwIfAborted();
-  let snapshot = loadedSnapshot.snapshot;
+  let snapshot2 = loadedSnapshot.snapshot;
   let snapshotMs = performance.now() - snapshotStartedAt;
   const searchStartedAt = performance.now();
   const searchResults = await Promise.allSettled(effectiveQueries.map((query) => api.searchDocuments(scope.libraryRef, query.text)));
   request2.signal?.throwIfAborted();
   const apiCandidateRefs = new Set(searchResults.flatMap((result) => result.status === "fulfilled" ? result.value.map((document4) => string6(document4["id"])).filter((ref2) => Boolean(ref2)) : []));
   const emptySearchCount = searchResults.filter((result) => result.status === "fulfilled" && result.value.length === 0).length;
-  let localResults = snapshotMatches(snapshot, effectiveQueries);
+  let localResults = snapshotMatches(snapshot2, effectiveQueries);
   let snapshotCandidateRefs = new Set(localResults.flatMap((documents2) => documents2.map((document4) => string6(document4["id"])).filter((ref2) => Boolean(ref2))));
-  let ranked = rankCandidates(mergeSearchCandidates(searchResults, localResults), snapshot, effectiveQueries);
+  let ranked = rankCandidates(mergeSearchCandidates(searchResults, localResults), snapshot2, effectiveQueries);
   let retrievalRounds = 1;
   let recoveryReason;
   if (ranked.length === 0) {
     const refreshStartedAt = performance.now();
     loadedSnapshot = await loadSnapshot(api, credentials, scope, true);
-    snapshot = loadedSnapshot.snapshot;
+    snapshot2 = loadedSnapshot.snapshot;
     snapshotMs += performance.now() - refreshStartedAt;
-    localResults = snapshotMatches(snapshot, effectiveQueries);
+    localResults = snapshotMatches(snapshot2, effectiveQueries);
     snapshotCandidateRefs = new Set(localResults.flatMap((documents2) => documents2.map((document4) => string6(document4["id"])).filter((ref2) => Boolean(ref2))));
-    ranked = rankCandidates(mergeSearchCandidates(searchResults, localResults), snapshot, effectiveQueries);
+    ranked = rankCandidates(mergeSearchCandidates(searchResults, localResults), snapshot2, effectiveQueries);
     retrievalRounds = 2;
     recoveryReason = "empty_candidates";
   }
   const searchMs = performance.now() - searchStartedAt;
   const readStartedAt = performance.now();
   request2.signal?.throwIfAborted();
-  let documents = await readCandidates(api, credentials, scope, snapshot, ranked, INITIAL_READ_CANDIDATES);
+  let documents = await readCandidates(api, credentials, scope, snapshot2, ranked, INITIAL_READ_CANDIDATES);
   if (documents.length === 0) {
-    const routingPages = await readCandidates(api, credentials, scope, snapshot, routingPageCandidates(snapshot, effectiveQueries.length), 2);
+    const routingPages = await readCandidates(api, credentials, scope, snapshot2, routingPageCandidates(snapshot2, effectiveQueries.length), 2);
     documents = routingPages;
     retrievalRounds = 2;
     recoveryReason ??= "insufficient_coverage";
@@ -201879,9 +201886,9 @@ async function retrieveOutlineKnowledge(credentials, scope, request2) {
   const needsRouting = initialSelection.items.length === 0 || initialSelection.items.every((item) => item.evidenceLevel === "index") || initialMissing.length > 0;
   if (needsRouting && documents.length < MAX_READ_CANDIDATES) {
     const existingRefs = new Set(documents.map((document4) => document4.ref));
-    const linked = linkedCandidates(documents, snapshot, effectiveQueries, existingRefs);
+    const linked = linkedCandidates(documents, snapshot2, effectiveQueries, existingRefs);
     const remaining = MAX_READ_CANDIDATES - documents.length;
-    const linkedDocuments = await readCandidates(api, credentials, scope, snapshot, linked, remaining);
+    const linkedDocuments = await readCandidates(api, credentials, scope, snapshot2, linked, remaining);
     if (linkedDocuments.length > 0) documents = [...documents, ...linkedDocuments];
     retrievalRounds = 2;
     recoveryReason ??= "insufficient_coverage";
@@ -201936,7 +201943,7 @@ async function retrieveOutlineKnowledge(credentials, scope, request2) {
 async function validateOutlineKnowledgeCitationsFast(credentials, scope, candidates) {
   if (candidates.length === 0) return [];
   const api = new OutlineKnowledgeApi(credentials);
-  let snapshot = (await loadSnapshot(api, credentials, scope)).snapshot;
+  let snapshot2 = (await loadSnapshot(api, credentials, scope)).snapshot;
   let refreshed;
   const seen = /* @__PURE__ */ new Set();
   const unique4 = candidates.filter((candidate) => {
@@ -201945,7 +201952,7 @@ async function validateOutlineKnowledgeCitationsFast(credentials, scope, candida
     return true;
   }).slice(0, 20);
   const validated = await mapConcurrent(unique4, READ_CONCURRENCY, async (candidate) => {
-    if (!snapshot.scopedIds.has(candidate.ref)) return null;
+    if (!snapshot2.scopedIds.has(candidate.ref)) return null;
     try {
       const document4 = await api.documentInfo(candidate.ref);
       const ref2 = string6(document4["id"]);
@@ -201956,12 +201963,12 @@ async function validateOutlineKnowledgeCitationsFast(credentials, scope, candida
       const parentDocumentId = string6(document4["parentDocumentId"]);
       if (!ref2 || !title || !url || collectionId !== scope.libraryRef) return null;
       if (new URL(url).origin !== new URL(api.baseUrl).origin) return null;
-      const listed = snapshot.byId.get(ref2);
+      const listed = snapshot2.byId.get(ref2);
       if (!listed || updatedAt && listed.updatedAt !== updatedAt || listed.parentId !== parentDocumentId) {
         refreshed ??= loadSnapshot(api, credentials, scope, true).then((loaded) => loaded.snapshot);
-        snapshot = await refreshed;
+        snapshot2 = await refreshed;
       }
-      if (!snapshot.scopedIds.has(ref2)) return null;
+      if (!snapshot2.scopedIds.has(ref2)) return null;
       return { ref: ref2, title, url, ...updatedAt ? { updatedAt } : {} };
     } catch {
       return null;
@@ -205576,6 +205583,26 @@ async function startOasisServer(opts) {
           );
           return;
         }
+        if (opts.isDispatchFenced && (req.method !== "GET" && req.method !== "HEAD" || url.pathname === "/api/whoami")) {
+          const token = (req.headers.authorization ?? "").replace(/^Bearer /, "");
+          const claims = opts.resolveTokenClaims?.(token);
+          let fenced = false;
+          if (claims?.dispatchId) {
+            try {
+              fenced = await opts.isDispatchFenced(claims.dispatchId);
+            } catch {
+              res.writeHead(503, { "content-type": "application/json" }).end(JSON.stringify({ error: {
+                code: "EXECUTION_STATE_UNAVAILABLE",
+                message: "\u6682\u65F6\u65E0\u6CD5\u786E\u8BA4\u5F53\u524D\u6267\u884C\u8F6E\u6B21\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002"
+              } }));
+              return;
+            }
+          }
+          if (fenced) {
+            res.writeHead(409, { "content-type": "application/json" }).end(JSON.stringify({ error: { code: "DISPATCH_FENCED", message: "\u672C\u8F6E\u6267\u884C\u5DF2\u5931\u6548\uFF0C\u8BF7\u505C\u6B62\u8FD0\u884C\uFF1B\u540C\u4E00\u4EFB\u52A1\u53EA\u6709\u6700\u65B0\u4E00\u8F6E\u53EF\u4EE5\u542F\u52A8\u548C\u63D0\u4EA4\u7ED3\u679C\u3002" } }));
+            return;
+          }
+        }
         if (url.pathname === "/api/whoami" && req.method === "GET") {
           res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ actor }));
           return;
@@ -205688,7 +205715,7 @@ async function startOasisServer(opts) {
             const bearerToken = (req.headers.authorization ?? "").startsWith("Bearer ") ? req.headers.authorization.slice("Bearer ".length) : "";
             const tokenClaims = bearerToken && opts.resolveTokenClaims ? opts.resolveTokenClaims(bearerToken) : null;
             if (opts.isDispatchFenced && tokenClaims?.dispatchId) {
-              const fenced = await opts.isDispatchFenced(tokenClaims.dispatchId).catch(() => false);
+              const fenced = await opts.isDispatchFenced(tokenClaims.dispatchId);
               if (fenced) {
                 throw new ApiError(
                   409,
@@ -207756,13 +207783,13 @@ ${composed}`;
               const actorCtx = await opts.resolveActorContext(body2.actorId).catch(() => null);
               if (actorCtx) {
                 const { mkdtempSync: mkdtempSync6, mkdirSync: mkdirSync27, writeFileSync: writeFileSync20 } = await import("node:fs");
-                const { join: join42, dirname: dirname38 } = await import("node:path");
+                const { join: join42, dirname: dirname37 } = await import("node:path");
                 const { tmpdir: tmpdir13 } = await import("node:os");
                 const dir = mkdtempSync6(join42(tmpdir13(), "oasis-chat-"));
                 if (actorCtx.config?.prompt) {
                   for (const [rel, content3] of Object.entries(splitIdentityFiles2(actorCtx.config.prompt))) {
                     const file = join42(dir, rel);
-                    mkdirSync27(dirname38(file), { recursive: true });
+                    mkdirSync27(dirname37(file), { recursive: true });
                     writeFileSync20(file, content3);
                   }
                 }
@@ -207779,7 +207806,7 @@ ${composed}`;
                   const skillFiles = await opts.materializeSkills(body2.actorId, "claude").catch(() => ({}));
                   for (const [rel, content3] of Object.entries(skillFiles)) {
                     const file = join42(dir, rel);
-                    mkdirSync27(dirname38(file), { recursive: true });
+                    mkdirSync27(dirname37(file), { recursive: true });
                     writeFileSync20(file, content3);
                   }
                 }
@@ -210215,8 +210242,8 @@ var init_memory_trace_store = __esm({
           handoffs: [...this.handoffs.values()].map((x2) => structuredClone(x2))
         };
       }
-      restoreContinuity(snapshot) {
-        for (const checkpoint of snapshot.checkpoints ?? []) {
+      restoreContinuity(snapshot2) {
+        for (const checkpoint of snapshot2.checkpoints ?? []) {
           const run = this.runs.get(checkpoint.attemptId);
           const list2 = this.checkpoints.get(checkpoint.attemptId) ?? [];
           list2.push(structuredClone({
@@ -210231,7 +210258,7 @@ var init_memory_trace_store = __esm({
           const n = Number(checkpoint.checkpointId.replace(/^checkpoint_/, ""));
           if (Number.isFinite(n)) this.checkpointIdCounter = Math.max(this.checkpointIdCounter, n);
         }
-        for (const effect of snapshot.externalEffects ?? []) {
+        for (const effect of snapshot2.externalEffects ?? []) {
           this.externalEffects.set(`${effect.nodeId}\0${effect.idempotencyKey}`, structuredClone({
             ...effect,
             status: effect.status ?? "succeeded",
@@ -210239,7 +210266,7 @@ var init_memory_trace_store = __esm({
             occurredAt: effect.occurredAt ?? null
           }));
         }
-        for (const handoff of snapshot.handoffs ?? []) {
+        for (const handoff of snapshot2.handoffs ?? []) {
           const run = this.runs.get(handoff.attemptId);
           this.handoffs.set(handoff.attemptId, structuredClone({
             ...handoff,
@@ -219218,6 +219245,7 @@ var init_daemon_hub = __esm({
       /** 外部可订阅的事件回调 */
       onDaemonConnected;
       onDaemonDisconnected;
+      executionIsCurrent;
       onMessage;
       messageListeners = /* @__PURE__ */ new Set();
       requireExecutionStopPersistence;
@@ -219247,6 +219275,13 @@ var init_daemon_hub = __esm({
           });
         });
       }
+      async acceptExecutionFrame(nodeId, msg) {
+        if (msg.type !== "session_started" && msg.type !== "dispatch_received" || !this.executionIsCurrent) return true;
+        if (await this.executionIsCurrent(msg.dispatchId)) return true;
+        const kill = { type: "kill", dispatchId: msg.dispatchId };
+        if (!this.sendToSession(msg.dispatchId, kill)) this.dispatch(nodeId, kill);
+        return false;
+      }
       async persistExecutionStop(nodeId, msg) {
         if (msg.type !== "session_exited" || msg.executionStopped !== true) return;
         if (this.requireExecutionStopPersistence && this.executionStopListeners.size === 0) throw new Error("\u505C\u6B62\u8BC1\u660E\u5B58\u50A8\u5668\u5C1A\u672A\u5C31\u7EEA");
@@ -219431,6 +219466,9 @@ var init_daemon_hub = __esm({
               ws.close(1008, "session identity mismatch");
               return;
             }
+            if (this.executionIsCurrent && !await this.executionIsCurrent(dispatchId)) {
+              ws.send(JSON.stringify({ type: "kill", dispatchId }));
+            }
             if (!registered) {
               registered = true;
               this.sessionSockets.set(dispatchId, ws);
@@ -219458,6 +219496,7 @@ var init_daemon_hub = __esm({
             ws.close(1008, "session identity mismatch");
             return;
           }
+          if (!await this.acceptExecutionFrame(nodeId, msg)) return;
           await this.persistExecutionStop(nodeId, msg);
           if (this.frameSeqSupported.has(dispatchId)) {
             const seq = typeof msg.seq === "number" ? msg.seq : void 0;
@@ -219732,6 +219771,7 @@ var init_daemon_hub = __esm({
               for (const listener of this.connectListeners) listener(daemon);
             }
           }
+          if (!await this.acceptExecutionFrame(daemonId, msg)) return;
           await this.persistExecutionStop(daemonId, msg);
           this.onMessage?.(daemonId, msg);
           for (const listener of this.messageListeners) listener(daemonId, msg);
@@ -221033,8 +221073,8 @@ ${input.description}
        * 密文原样搬运，不经解密再加密——少一次明文落到内存里，也不受密钥轮换影响。
        * 返回改了几行，调用方好把「回滚做了什么」如实说出来（回滚静默是上一版的毛病）。
        */
-      async restoreActorConnectorVars(actorId, connectorId, snapshot) {
-        const keep = new Map(snapshot.map((r) => [r.key, r]));
+      async restoreActorConnectorVars(actorId, connectorId, snapshot2) {
+        const keep = new Map(snapshot2.map((r) => [r.key, r]));
         const now = await this.snapshotActorConnectorVars(actorId, connectorId);
         let removed = 0;
         for (const row of now) {
@@ -225117,53 +225157,6 @@ var init_routes5 = __esm({
   }
 });
 
-// ../server/src/domains/collab/execution-stop-routes.ts
-function registerExecutionStopRoutes(router, options, context2) {
-  const fail = (status, message) => ({ status, body: { error: { code: "execution_stop_recovery", message } } });
-  router.get("/api/workorders/:id/execution-stops", async (req) => {
-    if (!(await context2(req)).exists) return fail(404, "\u5DE5\u5355\u4E0D\u5B58\u5728");
-    if (!options) return fail(503, "\u505C\u6B62\u8865\u8BC1\u670D\u52A1\u672A\u5C31\u7EEA");
-    const ledger = await options.ledgerFor(req.auth.companyId);
-    const rows = await ledger.listByWorkorder(req.params.id);
-    const body2 = { items: rows.filter((r) => r.cancelRequestedAt).map((r) => ({
-      dispatchId: r.id,
-      daemonId: r.daemonId,
-      createdAt: r.createdAt,
-      requestedAt: r.cancelRequestedAt,
-      stoppedAt: r.executionStoppedAt ?? null,
-      check: r.executionRecovery ?? null
-    })) };
-    return { status: 200, body: body2 };
-  });
-  router.post("/api/workorders/:id/execution-stops/:dispatchId/verify", async (req) => {
-    if (!isHumanActor(req.auth.actor)) return fail(403, "\u505C\u6B62\u8865\u8BC1\u662F\u6CBB\u7406\u64CD\u4F5C\uFF0C\u4EC5\u4EBA\u7C7B\u53EF\u6267\u884C");
-    const ctx = await context2(req);
-    if (!ctx.exists) return fail(404, "\u5DE5\u5355\u4E0D\u5B58\u5728");
-    if (!options) return fail(503, "\u505C\u6B62\u8865\u8BC1\u670D\u52A1\u672A\u5C31\u7EEA");
-    const ledger = await options.ledgerFor(req.auth.companyId);
-    const row = await ledger.getById(req.params.dispatchId);
-    if (!row || row.workorderId !== req.params.id) return fail(404, "\u8BE5\u5DE5\u5355\u6CA1\u6709\u6B64\u6D3E\u53D1\u8BB0\u5F55");
-    if (!row.cancelRequestedAt) return fail(409, "\u8BE5\u6267\u884C\u5C1A\u672A\u8BF7\u6C42\u53D6\u6D88\uFF0C\u8BF7\u5148\u6682\u505C\u5DE5\u5355");
-    const body2 = req.body;
-    let verification;
-    if (body2?.evidence !== void 0 || body2?.confirmed !== void 0) {
-      if (!ctx.paused) return fail(409, "\u4EBA\u5DE5\u8865\u8BC1\u524D\u8BF7\u5148\u6682\u505C\u5DE5\u5355\uFF1B\u6838\u9A8C\u5B8C\u6210\u540E\u624B\u52A8\u6062\u590D\u6D3E\u53D1");
-      if (body2.confirmed !== true || typeof body2.evidence !== "string" || body2.evidence.trim().length < 20 || body2.evidence.length > 4e3) {
-        return fail(400, "\u9700\u660E\u786E\u786E\u8BA4\u5DF2\u6838\u9A8C\u539F\u5B9E\u4F8B\u3001\u5B50\u8FDB\u7A0B\u3001\u5BB9\u5668\u548C\u5F85\u542F\u52A8\u5165\u53E3\uFF0C\u5E76\u586B\u5199 20\u20134000 \u5B57\u6838\u9A8C\u4F9D\u636E");
-      }
-      verification = { actor: req.auth.actor, evidence: body2.evidence.trim() };
-    }
-    const result = await options.verify(ledger, row.id, verification);
-    return { status: 200, body: result };
-  });
-}
-var init_execution_stop_routes = __esm({
-  "../server/src/domains/collab/execution-stop-routes.ts"() {
-    "use strict";
-    init_src5();
-  }
-});
-
 // ../server/src/domains/collab/activity-notice.ts
 var NOTICE_TITLE;
 var init_activity_notice = __esm({
@@ -226477,6 +226470,8 @@ function buildSingleTrace(input) {
     const actorId = d.actorId ?? executorId;
     return {
       runId: d.id,
+      ...d.outcome === "failed" && d.reason ? { dispatchError: d.reason } : {},
+      ...(input.dispatches ?? []).some((newer) => newer.jobKey && newer.jobKey === d.jobKey && (newer.executionGeneration ?? 0) > (d.executionGeneration ?? 0)) ? { superseded: true } : {},
       ...d.cancelRequestedAt ? { cancelRequestedAt: d.cancelRequestedAt } : {},
       ...d.executionStoppedAt ? { executionStoppedAt: d.executionStoppedAt } : {},
       at: d.createdAt,
@@ -228556,13 +228551,6 @@ function collabDomain(opts) {
   }
   const resolverFor = async (companyId, registry2) => buildResolver(registry2, await memberNameResolver(opts.listMembers, companyId));
   return (router) => {
-    registerExecutionStopRoutes(router, opts.executionStopRecovery, async (req) => {
-      const { kernel } = await resolveCtx(req.auth.companyId);
-      return {
-        exists: [...kernel.model.artifacts.values()].some((a) => a.workspace === req.params.id),
-        paused: kernel.model.pausedWorkorders.has(req.params.id)
-      };
-    });
     router.get("/api/organization/usage-summary", async (req) => {
       if (!opts.trace) {
         return { status: 503, body: { error: { code: "no_trace_store", message: "\u8FD0\u884C\u7528\u91CF\u6570\u636E\u6E90\u672A\u63A5\u5165" } } };
@@ -229326,7 +229314,6 @@ var init_collab = __esm({
     init_workorders();
     init_workorder_detail();
     init_workorders();
-    init_execution_stop_routes();
     init_activity2();
     init_review_activity();
     init_activity_trace();
@@ -234244,8 +234231,8 @@ function renderResumePack(pack) {
     const action = effect.status === "succeeded" ? "do not repeat" : effect.status === "pending" ? "execution uncertain; reconcile before retry" : "failed; retry allowed";
     lines.push(`- [${effect.status}/${effect.source}] ${effect.kind} \u2192 ${effect.target} (${action}; key ${effect.idempotencyKey})`);
   }
-  const snapshot = Buffer.from(JSON.stringify(pack), "utf8").toString("base64url");
-  lines.push("", `${RESUME_SNAPSHOT_PREFIX}${snapshot}${RESUME_SNAPSHOT_SUFFIX}`);
+  const snapshot2 = Buffer.from(JSON.stringify(pack), "utf8").toString("base64url");
+  lines.push("", `${RESUME_SNAPSHOT_PREFIX}${snapshot2}${RESUME_SNAPSHOT_SUFFIX}`);
   return `${lines.join("\n")}
 `;
 }
@@ -235034,12 +235021,12 @@ function createReworkHandoffInputResolver(opts) {
   const warn = opts.warn ?? ((message) => console.warn(`[rework-handoff] ${message}`));
   return async (input) => {
     try {
-      const snapshot = await opts.loadWorkorder(input.workOrderId);
-      if (!snapshot) {
+      const snapshot2 = await opts.loadWorkorder(input.workOrderId);
+      if (!snapshot2) {
         warn(`\u5DE5\u5355\u5FEB\u7167\u8BFB\u4E0D\u5230\uFF0C\u8DF3\u8FC7\u8FD4\u5DE5\u4EA4\u63A5\u6CE8\u5165\uFF1A${input.workOrderId}`);
         return null;
       }
-      const work = snapshot.works.find(
+      const work = snapshot2.works.find(
         (candidate) => candidate.id === input.workId && candidate.nodeId === input.nodeId
       );
       if (!work) {
@@ -235051,7 +235038,7 @@ function createReworkHandoffInputResolver(opts) {
       if (!handoff && work.agentHandoffAttemptId) {
         handoff = await opts.getHandoff(work.agentHandoffAttemptId).catch(() => null);
       }
-      const node2 = snapshot.nodes.find((candidate) => candidate.id === input.nodeId);
+      const node2 = snapshot2.nodes.find((candidate) => candidate.id === input.nodeId);
       return renderReworkNodeHandoff({
         nodeId: input.nodeId,
         nodeTitle: node2?.title,
@@ -235071,12 +235058,12 @@ function createUpstreamHandoffInputResolver(opts) {
   const warn = opts.warn ?? ((message) => console.warn(`[upstream-handoff] ${message}`));
   return async (input) => {
     try {
-      const snapshot = await opts.loadWorkorder(input.workOrderId);
-      if (!snapshot) {
+      const snapshot2 = await opts.loadWorkorder(input.workOrderId);
+      if (!snapshot2) {
         warn(`\u5DE5\u5355\u5FEB\u7167\u8BFB\u4E0D\u5230\uFF0C\u8DF3\u8FC7\u4E0A\u6E38\u4EA4\u63A5\u6CE8\u5165\uFF1A${input.workOrderId}`);
         return null;
       }
-      const edge = snapshot.edges.find(
+      const edge = snapshot2.edges.find(
         (candidate) => candidate.fromNodeId === input.upstreamNodeId && candidate.toNodeId === input.downstreamNodeId
       );
       const businessEdge = edge?.kind === "data" && edge.required;
@@ -235087,7 +235074,7 @@ function createUpstreamHandoffInputResolver(opts) {
         );
         return null;
       }
-      const work = snapshot.works.find(
+      const work = snapshot2.works.find(
         (candidate) => candidate.id === input.pinnedWorkId && candidate.nodeId === input.upstreamNodeId
       );
       if (!work) {
@@ -235097,7 +235084,7 @@ function createUpstreamHandoffInputResolver(opts) {
       if (typeof work.assigneeActorId === "string" && work.assigneeActorId.startsWith("actor:human:")) {
         return null;
       }
-      const upstreamNode = snapshot.nodes.find((node2) => node2.id === input.upstreamNodeId);
+      const upstreamNode = snapshot2.nodes.find((node2) => node2.id === input.upstreamNodeId);
       const conclusion = typeof work.conclusion === "string" ? work.conclusion : null;
       const changedOutputs = [{
         kind: "artifact",
@@ -235151,14 +235138,14 @@ var init_upstream_handoff_input = __esm({
 });
 
 // ../server/src/domains/execution-continuity/node-conclusions.ts
-function nodeCoordinatorFactsFromSnapshot(snapshot) {
-  const workById = new Map(snapshot.works.map((work) => [work.id, work]));
+function nodeCoordinatorFactsFromSnapshot(snapshot2) {
+  const workById = new Map(snapshot2.works.map((work) => [work.id, work]));
   const artifactCountByWork = /* @__PURE__ */ new Map();
-  for (const artifact of snapshot.artifacts) {
+  for (const artifact of snapshot2.artifacts) {
     artifactCountByWork.set(artifact.workId, (artifactCountByWork.get(artifact.workId) ?? 0) + 1);
   }
   const out = {};
-  for (const node2 of snapshot.nodes) {
+  for (const node2 of snapshot2.nodes) {
     const currentWorkId = node2.latestWorkId ?? null;
     const currentWork = currentWorkId ? workById.get(currentWorkId) : void 0;
     const work = {
@@ -235167,7 +235154,7 @@ function nodeCoordinatorFactsFromSnapshot(snapshot) {
       state: currentWorkId === null ? "not_started" : currentWork ? workState(currentWork, hasOutput(currentWork, artifactCountByWork.get(currentWork.id) ?? 0)) : "unavailable"
     };
     const accepted = node2.latestAcceptId ? workById.get(node2.latestAcceptId) : void 0;
-    const conclusion = accepted?.conclusion?.trim() || snapshot.works.filter((work2) => work2.nodeId === node2.id && work2.status === "success" && work2.conclusion?.trim()).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt)).at(-1)?.conclusion?.trim();
+    const conclusion = accepted?.conclusion?.trim() || snapshot2.works.filter((work2) => work2.nodeId === node2.id && work2.status === "success" && work2.conclusion?.trim()).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt)).at(-1)?.conclusion?.trim();
     const sealed = node2.cancelledAt ? { reason: node2.sealReason ?? "cancelled", at: node2.cancelledAt } : null;
     out[node2.id] = {
       work,
@@ -239719,8 +239706,8 @@ function makeAutomationWorkorderSnapshotResolver(kernel) {
   };
 }
 function makeAutomationWorkorderStateResolver(kernel) {
-  const snapshot = makeAutomationWorkorderSnapshotResolver(kernel);
-  return async (workspace) => (await snapshot(workspace)).state;
+  const snapshot2 = makeAutomationWorkorderSnapshotResolver(kernel);
+  return async (workspace) => (await snapshot2(workspace)).state;
 }
 function makeAutomationReplyResolver(kernel, blobs) {
   return async (workspace) => {
@@ -240124,8 +240111,8 @@ var init_project_event_poller = __esm({
       // 完成判据必须来自 D3 resolver（snapshot.state），不在这里复制 deriveStage。
       // active / unknown 是「还没完成」，cancelled 永不产生 completed——四态里只有 done 触发。
       "workorder.completed": {
-        matches: (snapshot) => snapshot.state === "done",
-        fingerprint: (workspace, snapshot) => completionFingerprint(workspace, snapshot.members)
+        matches: (snapshot2) => snapshot2.state === "done",
+        fingerprint: (workspace, snapshot2) => completionFingerprint(workspace, snapshot2.members)
       }
     };
     ProjectEventPoller = class {
@@ -240214,17 +240201,17 @@ var init_project_event_poller = __esm({
         for (const event of config2.events) {
           const handler = AUTOMATION_EVENT_HANDLERS[event];
           if (!handler) continue;
-          for (const { workspace, snapshot } of candidates) {
-            if (!handler.matches(snapshot)) continue;
+          for (const { workspace, snapshot: snapshot2 } of candidates) {
+            if (!handler.matches(snapshot2)) continue;
             if (used >= budget) return used;
-            const fingerprint2 = handler.fingerprint(workspace, snapshot);
+            const fingerprint2 = handler.fingerprint(workspace, snapshot2);
             const key = eventConsumptionKey({ triggerId: trigger.id, event, workspace, fingerprint: fingerprint2 });
             const envelope = {
               event,
               companyId: automation.companyId,
               projectId: config2.projectId,
               workspace,
-              rootArtifactId: snapshot.rootArtifactId,
+              rootArtifactId: snapshot2.rootArtifactId,
               completionFingerprint: fingerprint2,
               observedAt: this.now().toISOString(),
               ...await this.originAutomationOf(workspace)
@@ -240694,7 +240681,7 @@ var init_daemon_adapter = __esm({
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
         if (this.beforeDispatch) {
-          await this.beforeDispatch(dispatchId, nodeId);
+          await this.beforeDispatch(dispatchId, nodeId, job);
           if (job.dispatchId && this.pending.has(dispatchId)) return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
         const supportsLiveProtocol = this.daemonSupportsLiveProtocol(nodeId, job.binding?.runtimeKind);
@@ -240945,18 +240932,6 @@ function isExplicitlyDispatchFenced(run) {
   const fence = metadataObject(run.metadata).dispatchFence;
   return fence !== null && typeof fence === "object" && !Array.isArray(fence);
 }
-async function fenceDispatch(trace, dispatchId, reason, at = (/* @__PURE__ */ new Date()).toISOString()) {
-  const run = await trace.getRun(dispatchId);
-  if (!run) return false;
-  if (isExplicitlyDispatchFenced(run)) return true;
-  await trace.updateRun(dispatchId, {
-    metadata: {
-      ...metadataObject(run.metadata),
-      dispatchFence: { at, reason }
-    }
-  });
-  return true;
-}
 var metadataObject;
 var init_dispatch_fence = __esm({
   "../server/src/dispatch-fence.ts"() {
@@ -240966,14 +240941,14 @@ var init_dispatch_fence = __esm({
 });
 
 // ../server/src/execution-stop.ts
-function predecessorExecutions(rows, jobKey) {
-  return rows.filter((r) => r.jobKey === jobKey && !r.executionStoppedAt);
+async function acceptsExecutionOutcome(ledger, id) {
+  const row = await ledger.getById(id);
+  return !row || !row.cancelRequestedAt && await ledger.isExecutionLatest(id);
 }
-var STOP_CONFIRMATION_WAIT_MS, ExecutionStopBarrier;
+var ExecutionStopBarrier;
 var init_execution_stop = __esm({
   "../server/src/execution-stop.ts"() {
     "use strict";
-    STOP_CONFIRMATION_WAIT_MS = 15e3;
     ExecutionStopBarrier = class {
       constructor(o) {
         this.o = o;
@@ -240981,15 +240956,9 @@ var init_execution_stop = __esm({
           o.hub.addExecutionStopListener((nodeId, dispatchId) => this.confirm(dispatchId, nodeId)),
           o.hub.addSessionConnectListener(({ dispatchId }) => {
             void this.replay(dispatchId).catch((e) => o.log?.(`\u6062\u590D\u53D6\u6D88\u5931\u8D25 ${dispatchId}: ${String(e)}`));
-          }),
-          o.hub.addConnectListener(({ daemonId }) => {
-            for (const dispatchId of this.waiting.keys()) {
-              void this.replay(dispatchId, daemonId).catch((e) => o.log?.(`\u91CD\u9001\u53D6\u6D88\u5931\u8D25 ${dispatchId}: ${String(e)}`));
-            }
           })
         ];
       }
-      waiting = /* @__PURE__ */ new Map();
       unsubscribe;
       async confirm(dispatchId, nodeId) {
         const ledger = await this.o.ledgerFor(dispatchId);
@@ -240997,7 +240966,6 @@ var init_execution_stop = __esm({
         if (!row) return;
         if (row.daemonId && row.daemonId !== nodeId) throw new Error("\u505C\u6B62\u8BC1\u660E\u7684\u8282\u70B9\u8EAB\u4EFD\u4E0D\u5339\u914D");
         if (!await ledger.recordExecutionStop(dispatchId, "confirmed")) throw new Error("dispatch \u4E0D\u5B58\u5728");
-        this.waiting.get(dispatchId)?.resolve();
       }
       send(dispatchId, nodeId) {
         const msg = { type: "kill", dispatchId };
@@ -241014,113 +240982,10 @@ var init_execution_stop = __esm({
           throw new Error(`\u627E\u4E0D\u5230\u6D3E\u53D1\u884C ${dispatchId}\uFF0C\u505C\u6B62\u672A\u786E\u8BA4\uFF0C\u7981\u6B62\u66FF\u4EE3\u6267\u884C`);
         }
         const row = await ledger.getById(dispatchId);
-        if (row?.executionStoppedAt) return;
-        const existing = this.waiting.get(dispatchId);
-        if (existing) return existing.promise;
-        if (row?.executionRecovery?.retryAt && Date.parse(row.executionRecovery.retryAt) > Date.now()) {
-          throw new Error(`\u6267\u884C ${dispatchId} \u505C\u6B62\u672A\u786E\u8BA4\uFF1A${row.executionRecovery.detail}\uFF1B\u8BF7\u5728\u6267\u884C\u8F68\u8FF9\u5904\u7406\uFF0C\u81EA\u52A8\u6838\u9A8C\u65F6\u95F4 ${row.executionRecovery.retryAt}`);
-        }
-        let resolve10, reject;
-        const promise = new Promise((yes, no) => {
-          resolve10 = yes;
-          reject = no;
-        });
-        const timer = setTimeout(
-          () => reject(new Error(`\u6267\u884C ${dispatchId} \u505C\u6B62\u672A\u786E\u8BA4\uFF0C\u7981\u6B62\u66FF\u4EE3\u6267\u884C\uFF1B\u7B49\u5F85\u8282\u70B9\u91CD\u8FDE\u6216\u6838\u9A8C\u8FD0\u884C\u65F6\u9000\u51FA`)),
-          this.o.timeoutMs ?? STOP_CONFIRMATION_WAIT_MS
-        );
-        const entry = { promise, resolve: resolve10, reject };
-        this.waiting.set(dispatchId, entry);
-        try {
-          void promise.catch(() => {
-          });
-          if ((await ledger.getById(dispatchId))?.executionStoppedAt) resolve10();
-          else {
-            this.send(dispatchId, nodeId ?? row?.daemonId);
-            if (this.o.recover) {
-              const result = await this.o.recover(dispatchId);
-              if (result.state === "stopped" || (await ledger.getById(dispatchId))?.executionStoppedAt) resolve10();
-              else if (result.state === "needs_verification") throw new Error(`\u6267\u884C ${dispatchId} \u505C\u6B62\u672A\u786E\u8BA4\uFF1A${result.detail}\uFF1B\u8BF7\u5728\u6267\u884C\u8F68\u8FF9\u5904\u7406`);
-            }
-          }
-          await promise;
-        } finally {
-          clearTimeout(timer);
-          if (this.waiting.get(dispatchId) === entry) this.waiting.delete(dispatchId);
-        }
-      }
-      async releaseIfStopped(dispatchId) {
-        if ((await (await this.o.ledgerFor(dispatchId)).getById(dispatchId))?.executionStoppedAt) this.waiting.get(dispatchId)?.resolve();
+        if (!row?.executionStoppedAt) this.send(dispatchId, nodeId ?? row?.daemonId);
       }
       close() {
         for (const off of this.unsubscribe) off();
-        for (const entry of this.waiting.values()) entry.reject(new Error("\u670D\u52A1\u7AEF\u5173\u95ED\uFF0C\u505C\u6B62\u786E\u8BA4\u5C1A\u672A\u5B8C\u6210"));
-        this.waiting.clear();
-      }
-    };
-  }
-});
-
-// ../server/src/execution-stop-recovery.ts
-var import_node_crypto66, VERIFY_WAIT_MS, VERIFY_RETRY_MS, ExecutionStopRecovery;
-var init_execution_stop_recovery = __esm({
-  "../server/src/execution-stop-recovery.ts"() {
-    "use strict";
-    import_node_crypto66 = require("node:crypto");
-    VERIFY_WAIT_MS = 5e3;
-    VERIFY_RETRY_MS = 5 * 6e4;
-    ExecutionStopRecovery = class {
-      constructor(hub, timeoutMs = VERIFY_WAIT_MS) {
-        this.hub = hub;
-        this.timeoutMs = timeoutMs;
-      }
-      async verify(ledger, id, verification) {
-        const row = await ledger.getById(id);
-        if (!row) throw new Error("\u6D3E\u53D1\u884C\u4E0D\u5B58\u5728");
-        if (row.executionStoppedAt) return { state: "stopped", at: row.executionStoppedAt, detail: "\u6267\u884C\u505C\u6B62\u5DF2\u786E\u8BA4" };
-        if (!await ledger.recordExecutionStop(id, "requested")) throw new Error("\u53D6\u6D88\u610F\u56FE\u672A\u4FDD\u5B58");
-        const confirmed2 = await ledger.getById(id);
-        if (confirmed2?.executionStoppedAt) return { state: "stopped", at: confirmed2.executionStoppedAt, detail: "\u5DF2\u786E\u8BA4\u6267\u884C\u4ECE\u672A\u53D6\u5F97\u542F\u52A8\u8BB8\u53EF" };
-        const now = () => (/* @__PURE__ */ new Date()).toISOString();
-        const daemon = this.hub.connectedDaemons().find((d) => d.daemonId === row.daemonId);
-        let result;
-        if (!daemon?.meta.supportsExecutionStopRecovery) {
-          result = { state: "unavailable", at: now(), detail: daemon ? "\u8282\u70B9\u4E0D\u652F\u6301\u505C\u6B62\u8865\u8BC1\uFF0C\u8BF7\u5347\u7EA7\u8282\u70B9\u5305" : "\u539F\u8282\u70B9\u672A\u8FDE\u63A5\uFF1B\u8BF7\u6062\u590D\u539F\u8282\u70B9\u8FDE\u63A5\u540E\u6838\u9A8C" };
-        } else if (verification && this.hub.hasSession(id)) {
-          result = { state: "running", at: now(), detail: "\u539F\u4F1A\u8BDD\u4ECD\u4FDD\u6301\u8FDE\u63A5\uFF0C\u62D2\u7EDD\u4EBA\u5DE5\u786E\u8BA4\uFF1B\u8BF7\u5148\u505C\u6B62\u539F\u4F1A\u8BDD" };
-        } else {
-          const requestId = (0, import_node_crypto66.randomUUID)();
-          result = await new Promise((resolve10) => {
-            const finish = (check2) => {
-              clearTimeout(timer);
-              off();
-              resolve10(check2);
-            };
-            const off = this.hub.addMessageListener((node2, msg) => {
-              if (node2 !== row.daemonId || msg.type !== "execution_stop_result" || msg.requestId !== requestId || msg.dispatchId !== id) return;
-              const check2 = msg.result;
-              const proof = check2?.proof;
-              if (!check2 || !["stopped", "running", "needs_verification", "unavailable"].includes(check2.state) || typeof check2.detail !== "string" || check2.state === "stopped" && (!proof || !Number.isFinite(Date.parse(proof.at)) || proof.kind !== "runtime_exit" && proof.kind !== "operator_verified" || proof.kind === "operator_verified" && (!proof.actor?.startsWith("actor:human:") || !proof.evidence?.trim()))) {
-                finish({ state: "unavailable", at: now(), detail: "\u8282\u70B9\u8865\u8BC1\u683C\u5F0F\u65E0\u6548\uFF0C\u4FDD\u6301\u505C\u6B62\u672A\u786E\u8BA4" });
-              } else finish(check2);
-            });
-            const timer = setTimeout(() => finish({ state: "unavailable", at: now(), detail: "\u8282\u70B9\u6838\u9A8C\u8D85\u65F6\uFF1B\u53EF\u5728\u6267\u884C\u8F68\u8FF9\u4E2D\u91CD\u65B0\u6838\u9A8C" }), this.timeoutMs);
-            if (!this.hub.dispatch(daemon.daemonId, { type: "verify_execution_stop", requestId, dispatchId: id, ...verification ? { verification } : {} })) {
-              finish({ state: "unavailable", at: now(), detail: "\u6838\u9A8C\u671F\u95F4\u8282\u70B9\u65AD\u5F00\uFF0C\u8BF7\u6062\u590D\u8FDE\u63A5\u540E\u91CD\u65B0\u6838\u9A8C" });
-            }
-          });
-        }
-        if (!verification && result.state === "needs_verification" && this.hub.hasSession(id)) {
-          result = { state: "running", at: now(), detail: "\u539F\u4F1A\u8BDD\u4ECD\u8FDE\u63A5\uFF0C\u7B49\u5F85\u5176\u771F\u5B9E\u505C\u6B62\u56DE\u62A5" };
-        }
-        result = {
-          ...result,
-          at: now(),
-          ...row.daemonId ? { nodeId: row.daemonId } : {},
-          ...result.state !== "stopped" ? { retryAt: new Date(Date.now() + VERIFY_RETRY_MS).toISOString() } : {}
-        };
-        if (!await ledger.recordExecutionRecovery(id, row.daemonId, result)) throw new Error("\u505C\u6B62\u8865\u8BC1\u672A\u843D\u5E93\uFF0C\u4FDD\u6301\u963B\u585E");
-        return result;
       }
     };
   }
@@ -241177,13 +241042,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto67, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto66, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto67.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto66.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc3 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -241430,11 +241295,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto68, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto67, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_src5();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -241703,7 +241568,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto68.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto67.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -242082,8 +241947,8 @@ ${ctx.nodeFault}
             this.deps.log?.(`[coordinator] ${workspace} \u5168\u5C40\u4E0A\u4E0B\u6587\u8BFB\u53D6\u5931\u8D25\uFF0C\u7EE7\u7EED\u6CBF\u7528\u539F\u534F\u8C03\u8005\u4EFB\u52A1\uFF1A${String(error2)}`);
           }
         }
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto68.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto68.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto67.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto67.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           task,
           ``,
@@ -242127,7 +241992,7 @@ ${ctx.nodeFault}
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto68.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto67.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -242332,11 +242197,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto69, ident3, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto68, ident3, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -242516,7 +242381,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto69.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto68.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash2, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -250996,11 +250861,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto70, ident12, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto69, ident12, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident12 = (s2) => {
@@ -251210,7 +251075,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto70.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto69.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -251476,11 +251341,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto71, matchClause, ident14, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto70, matchClause, ident14, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -251690,7 +251555,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto71.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto70.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -251946,7 +251811,8 @@ function rowToRecord2(r) {
     outcome: r.outcome,
     exitCode: r.exit_code,
     reason: r.reason,
-    executionRecovery: r.execution_recovery ?? null,
+    executionGeneration: r.execution_generation == null ? null : Number(r.execution_generation),
+    executionPreparation: r.execution_preparation ?? null,
     executionReservedAt: r.execution_reserved_at ? new Date(r.execution_reserved_at).toISOString() : null,
     cancelRequestedAt: r.cancel_requested_at ? new Date(r.cancel_requested_at).toISOString() : null,
     executionStoppedAt: r.execution_stopped_at ? new Date(r.execution_stopped_at).toISOString() : null
@@ -251994,7 +251860,9 @@ var init_postgres_dispatches = __esm({
       )`);
         await pool.query(`CREATE INDEX IF NOT EXISTS dispatches_target_idx    ON "${s2}".dispatches (target_kind, target_id, created_at DESC)`);
         await pool.query(`CREATE INDEX IF NOT EXISTS dispatches_workorder_idx ON "${s2}".dispatches (workorder_id, created_at DESC)`);
-        await pool.query(`ALTER TABLE "${s2}".dispatches ADD COLUMN IF NOT EXISTS execution_reserved_at timestamptz, ADD COLUMN IF NOT EXISTS cancel_requested_at timestamptz, ADD COLUMN IF NOT EXISTS execution_stopped_at timestamptz, ADD COLUMN IF NOT EXISTS execution_recovery jsonb`);
+        await pool.query(`ALTER TABLE "${s2}".dispatches ADD COLUMN IF NOT EXISTS execution_reserved_at timestamptz, ADD COLUMN IF NOT EXISTS cancel_requested_at timestamptz, ADD COLUMN IF NOT EXISTS execution_stopped_at timestamptz`);
+        await pool.query(`ALTER TABLE "${s2}".dispatches ADD COLUMN IF NOT EXISTS execution_generation bigint, ADD COLUMN IF NOT EXISTS execution_preparation jsonb`);
+        await pool.query(`CREATE INDEX IF NOT EXISTS dispatches_execution_task_idx ON "${s2}".dispatches (workorder_id, job_key, execution_generation DESC) WHERE execution_generation IS NOT NULL`);
         return new _PostgresDispatchStore(pool, s2);
       }
       /** write-ahead：派发意图产生的那一刻落 open 行（提案 I-D1）。同 id 重放安全（ON CONFLICT DO NOTHING）。 */
@@ -252014,21 +251882,46 @@ var init_postgres_dispatches = __esm({
           ]
         );
       }
-      /** 数据库内原子占位，跨异步入口/服务进程也只能有一个未确认执行。 */
+      /** 每个任务只有最新一轮有效。首次升级汇总历史身份一次，后续只继承任务清场状态。 */
       async reserveExecution(rec) {
         if (!rec.jobKey || !rec.workorderId) throw new Error("\u6267\u884C\u5360\u4F4D\u7F3A\u5C11\u7A33\u5B9A\u4EFB\u52A1\u8EAB\u4EFD");
         const client = await this.pool.connect();
         try {
           await client.query("BEGIN");
           await client.query("SELECT pg_advisory_xact_lock(hashtextextended($1, 0))", [JSON.stringify([this.s, rec.workorderId, rec.jobKey])]);
-          const prior = await client.query(`SELECT id FROM "${this.s}".dispatches
-        WHERE workorder_id = $1 AND job_key = $2 AND execution_stopped_at IS NULL LIMIT 1`, [rec.workorderId, rec.jobKey]);
-          if (prior.rows.length) throw new Error(`\u505C\u6B62\u672A\u786E\u8BA4\uFF0C\u7981\u6B62\u5E76\u53D1\u6D3E\u53D1\uFF1A${prior.rows[0].id}`);
+          const latest = await client.query(`SELECT * FROM "${this.s}".dispatches WHERE workorder_id=$1 AND job_key=$2
+        AND execution_generation IS NOT NULL ORDER BY execution_generation DESC LIMIT 1 FOR UPDATE`, [rec.workorderId, rec.jobKey]);
+          const prior = latest.rows[0];
+          const generation = Number(prior?.execution_generation ?? 0) + 1;
+          let nodes, legacyDispatchIds, unassignedDispatchIds;
+          if (prior) {
+            nodes = prior.daemon_id && prior.execution_stopped_at ? [] : [.../* @__PURE__ */ new Set([...prior.execution_preparation?.nodes ?? [], ...prior.daemon_id ? [prior.daemon_id] : [], ...prior.execution_preparation?.targetNode ? [prior.execution_preparation.targetNode] : []])];
+            legacyDispatchIds = prior.execution_preparation?.legacyDispatchIds ?? [];
+            unassignedDispatchIds = prior.execution_preparation?.unassignedDispatchIds ?? [];
+          } else {
+            const legacy = await client.query(`SELECT id, daemon_id, execution_stopped_at, execution_reserved_at FROM "${this.s}".dispatches WHERE workorder_id=$1 AND job_key=$2`, [rec.workorderId, rec.jobKey]);
+            nodes = [...new Set(legacy.rows.flatMap((r) => r.daemon_id && !r.execution_stopped_at ? [r.daemon_id] : []))];
+            legacyDispatchIds = legacy.rows.map((r) => r.id);
+            unassignedDispatchIds = legacy.rows.filter((r) => !r.daemon_id && !r.execution_stopped_at && !r.execution_reserved_at).map((r) => r.id);
+          }
+          await client.query(`UPDATE "${this.s}".dispatches SET cancel_requested_at=COALESCE(cancel_requested_at,now()),
+        ended_at=now(), outcome='superseded', reason='newer-execution' WHERE workorder_id=$1 AND job_key=$2 AND ended_at IS NULL`, [rec.workorderId, rec.jobKey]);
           await client.query(
             `INSERT INTO "${this.s}".dispatches
-        (id, target_kind, target_id, workorder_id, node_id, actor_id, job_key, created_at, execution_reserved_at)
-        VALUES ($1,$2,$3,$4,$5,$6,$7,$8,now())`,
-            [rec.id, rec.targetKind, rec.targetId, rec.workorderId, rec.nodeId ?? null, rec.actorId, rec.jobKey, rec.at ?? (/* @__PURE__ */ new Date()).toISOString()]
+        (id,target_kind,target_id,workorder_id,node_id,actor_id,job_key,created_at,execution_reserved_at,execution_generation,execution_preparation)
+        VALUES ($1,$2,$3,$4,$5,$6,$7,$8,now(),$9,$10::jsonb)`,
+            [
+              rec.id,
+              rec.targetKind,
+              rec.targetId,
+              rec.workorderId,
+              rec.nodeId ?? null,
+              rec.actorId,
+              rec.jobKey,
+              rec.at ?? (/* @__PURE__ */ new Date()).toISOString(),
+              generation,
+              JSON.stringify({ generation, nodes, legacyDispatchIds, unassignedDispatchIds })
+            ]
           );
           await client.query("COMMIT");
         } catch (error2) {
@@ -252038,12 +251931,74 @@ var init_postgres_dispatches = __esm({
           client.release();
         }
       }
-      /** 真正发帧前抢占启动许可；取消、关闭和重复使用终结 dispatch 都不能越过。 */
+      async withCurrentExecution(id, fn) {
+        const client = await this.pool.connect();
+        try {
+          await client.query("BEGIN");
+          const found = await client.query(`SELECT workorder_id,job_key FROM "${this.s}".dispatches WHERE id=$1`, [id]);
+          const identity = found.rows[0];
+          if (!identity) throw new Error(`\u6267\u884C ${id} \u6CA1\u6709\u542F\u52A8\u8BB8\u53EF`);
+          await client.query("SELECT pg_advisory_xact_lock(hashtextextended($1, 0))", [JSON.stringify([this.s, identity.workorder_id, identity.job_key])]);
+          const latest = await client.query(`SELECT * FROM "${this.s}".dispatches WHERE workorder_id=$1 AND job_key=$2
+        AND execution_generation IS NOT NULL ORDER BY execution_generation DESC LIMIT 1 FOR UPDATE`, [identity.workorder_id, identity.job_key]);
+          const row = latest.rows[0];
+          if (row?.id !== id || row.ended_at || row.cancel_requested_at || row.execution_stopped_at) throw new Error(`\u6267\u884C ${id} \u6CA1\u6709\u542F\u52A8\u8BB8\u53EF\uFF1A\u5DF2\u88AB\u65B0\u8F6E\u66FF\u4EE3\u3001\u53D6\u6D88\u6216\u7ED3\u675F`);
+          const result = await fn(client, row);
+          await client.query("COMMIT");
+          return result;
+        } catch (error2) {
+          await client.query("ROLLBACK");
+          throw error2;
+        } finally {
+          client.release();
+        }
+      }
+      /** 先将目标机器纳入清场集合，再允许异步 RPC；并发换轮也不会漏掉正在准备的旧目标。 */
+      async prepareExecution(id, daemonId, locatedNodes) {
+        return this.withCurrentExecution(id, async (client, row) => {
+          if (row.daemon_id) throw new Error(`\u6267\u884C ${id} \u5DF2\u9886\u53D6\u542F\u52A8\u8BB8\u53EF`);
+          const plan = row.execution_preparation;
+          plan.nodes = [.../* @__PURE__ */ new Set([...plan.nodes, daemonId, ...locatedNodes ?? []])];
+          if (locatedNodes) plan.unassignedDispatchIds = [];
+          plan.targetNode = daemonId;
+          await client.query(`UPDATE "${this.s}".dispatches SET execution_preparation=$2::jsonb WHERE id=$1`, [id, JSON.stringify(plan)]);
+          return plan;
+        });
+      }
+      async confirmExecutionPrepared(id, daemonId, generation) {
+        await this.withCurrentExecution(id, async (client, row) => {
+          const plan = row.execution_preparation;
+          if (plan.generation !== generation) throw new Error("\u4EFB\u52A1\u6E05\u573A\u786E\u8BA4\u7684\u8F6E\u6B21\u4E0D\u5339\u914D");
+          plan.nodes = plan.nodes.filter((n) => n !== daemonId);
+          await client.query(`UPDATE "${this.s}".dispatches SET execution_preparation=$2::jsonb WHERE id=$1`, [id, JSON.stringify(plan)]);
+        });
+      }
+      /** 清场完成后原子领取许可；先来的清场回执不能放行已过期轮次。 */
       async claimExecution(id, daemonId) {
-        const result = await this.pool.query(`UPDATE "${this.s}".dispatches SET daemon_id = $2
-      WHERE id = $1 AND execution_reserved_at IS NOT NULL AND daemon_id IS NULL
-      AND cancel_requested_at IS NULL AND execution_stopped_at IS NULL AND ended_at IS NULL`, [id, daemonId]);
-        if (!result.rowCount) throw new Error(`\u6267\u884C ${id} \u6CA1\u6709\u542F\u52A8\u8BB8\u53EF\uFF1B\u53EF\u80FD\u5DF2\u53D6\u6D88\u3001\u5DF2\u6D3E\u53D1\u6216\u5DF2\u7ED3\u675F`);
+        await this.withCurrentExecution(id, async (client, row) => {
+          const plan = row.execution_preparation;
+          if (row.daemon_id || plan.nodes.length || plan.unassignedDispatchIds?.length || plan.targetNode !== daemonId) throw new Error(`\u6267\u884C ${id} \u6CA1\u6709\u542F\u52A8\u8BB8\u53EF\uFF1A\u4EFB\u52A1\u6E05\u573A\u5C1A\u672A\u5B8C\u6210\u6216\u5DF2\u6D3E\u53D1`);
+          await client.query(
+            `UPDATE "${this.s}".dispatches SET daemon_id=$2,execution_preparation=$3::jsonb WHERE id=$1`,
+            [id, daemonId, JSON.stringify({ generation: plan.generation, nodes: [daemonId], legacyDispatchIds: [] })]
+          );
+        });
+      }
+      /** 退出帧仍需归属当前轮次，但不能因为刚记录实际退出就拒绝其正常收尾。 */
+      async isExecutionLatest(id) {
+        return this.executionMatches(id, false);
+      }
+      /** 平台启动和写入只查询最新轮次；不依赖 trace 是否存在或旧 outcome 是否可信。 */
+      async isExecutionCurrent(id) {
+        return this.executionMatches(id, true);
+      }
+      async executionMatches(id, requireActive) {
+        const result = await this.pool.query(`SELECT d.* FROM "${this.s}".dispatches d WHERE id=$1
+      AND (NOT $2::boolean OR (ended_at IS NULL AND cancel_requested_at IS NULL AND execution_stopped_at IS NULL))
+      AND NOT EXISTS (SELECT 1 FROM "${this.s}".dispatches n WHERE n.workorder_id=d.workorder_id AND n.job_key=d.job_key
+        AND ((n.execution_generation IS NOT NULL AND (d.execution_generation IS NULL OR n.execution_generation>d.execution_generation))
+          OR (n.execution_generation IS NULL AND d.execution_generation IS NULL AND (n.created_at,n.id)>(d.created_at,d.id))))`, [id, requireActive]);
+        return result.rows.length > 0;
       }
       /** 取消意图与停止证据独立、幂等持久化；返回 false 表示根本没有该派发行。 */
       async recordExecutionStop(id, phase, at = (/* @__PURE__ */ new Date()).toISOString()) {
@@ -252055,18 +252010,6 @@ var init_postgres_dispatches = __esm({
         );
         return (result.rowCount ?? 0) > 0;
       }
-      /** 核验状态与补证审计同一次写；取消意图和节点归属必须仍匹配。 */
-      async recordExecutionRecovery(id, nodeId, check2) {
-        if (check2.state === "stopped" && !check2.proof) throw new Error("\u8865\u8BC1\u7F3A\u5C11\u6765\u6E90");
-        const result = await this.pool.query(
-          `UPDATE "${this.s}".dispatches
-      SET execution_recovery = CASE WHEN execution_stopped_at IS NULL THEN $3::jsonb ELSE execution_recovery END,
-          execution_stopped_at = COALESCE(execution_stopped_at, CASE WHEN $4 THEN now() ELSE NULL END)
-      WHERE id = $1 AND daemon_id IS NOT DISTINCT FROM $2 AND cancel_requested_at IS NOT NULL`,
-          [id, nodeId, JSON.stringify(check2), check2.state === "stopped"]
-        );
-        return (result.rowCount ?? 0) > 0;
-      }
       /** session_started 帧：回填 started_at / session_ref / daemon_id（幂等：只填第一次）。 */
       async markStarted(id, opts) {
         await this.pool.query(
@@ -253197,14 +253140,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto72.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto71.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto72, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto71, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -253278,7 +253221,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto72.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -253460,11 +253403,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto73, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto72, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -253544,11 +253487,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto74, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto73, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -253934,7 +253877,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto74.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto73.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -254674,15 +254617,24 @@ var init_cutover_aware_dispatches = __esm({
       async reserveExecution(rec) {
         return (await this.pickWritable()).reserveExecution(rec);
       }
+      async prepareExecution(id, nodeId, locatedNodes) {
+        return (await this.pickWritable()).prepareExecution(id, nodeId, locatedNodes);
+      }
+      async confirmExecutionPrepared(id, nodeId, generation) {
+        return (await this.pickWritable()).confirmExecutionPrepared(id, nodeId, generation);
+      }
+      async isExecutionCurrent(id) {
+        return (await this.pick()).isExecutionCurrent(id);
+      }
+      async isExecutionLatest(id) {
+        return (await this.pick()).isExecutionLatest(id);
+      }
       async claimExecution(id, daemonId) {
         return (await this.pickWritable()).claimExecution(id, daemonId);
       }
       async recordExecutionStop(id, phase, at) {
         return (await this.pickWritable()).recordExecutionStop(id, phase, at);
       }
-      async recordExecutionRecovery(...args) {
-        return (await this.pickWritable()).recordExecutionRecovery(...args);
-      }
       async close(id, opts) {
         return (await this.pickWritable()).close(id, opts);
       }
@@ -254775,24 +254727,36 @@ var init_cutover_aware_dispatches = __esm({
       async reserveExecution(_rec) {
         throw new Error("\u6267\u884C\u5360\u4F4D\u5FC5\u987B\u6307\u5B9A\u516C\u53F8");
       }
-      async claimExecution(id, daemonId) {
+      async ownerOf(id) {
         for (const cid of await this.o.listCompanies()) {
           const ledger = await this.o.ledgerFor(cid);
-          if (await ledger.getById(id)) return ledger.claimExecution(id, daemonId);
+          if (await ledger.getById(id)) return ledger;
         }
         throw new Error(`\u627E\u4E0D\u5230\u6267\u884C ${id}`);
       }
-      async recordExecutionStop(id, phase, at) {
+      async prepareExecution(id, nodeId, locatedNodes) {
+        return (await this.ownerOf(id)).prepareExecution(id, nodeId, locatedNodes);
+      }
+      async confirmExecutionPrepared(id, nodeId, generation) {
+        return (await this.ownerOf(id)).confirmExecutionPrepared(id, nodeId, generation);
+      }
+      async isExecutionCurrent(id) {
+        return (await this.ownerOf(id)).isExecutionCurrent(id);
+      }
+      async isExecutionLatest(id) {
+        return (await this.ownerOf(id)).isExecutionLatest(id);
+      }
+      async claimExecution(id, daemonId) {
         for (const cid of await this.o.listCompanies()) {
           const ledger = await this.o.ledgerFor(cid);
-          if (await ledger.getById(id)) return ledger.recordExecutionStop(id, phase, at);
+          if (await ledger.getById(id)) return ledger.claimExecution(id, daemonId);
         }
-        return false;
+        throw new Error(`\u627E\u4E0D\u5230\u6267\u884C ${id}`);
       }
-      async recordExecutionRecovery(...args) {
+      async recordExecutionStop(id, phase, at) {
         for (const cid of await this.o.listCompanies()) {
           const ledger = await this.o.ledgerFor(cid);
-          if (await ledger.getById(args[0])) return ledger.recordExecutionRecovery(...args);
+          if (await ledger.getById(id)) return ledger.recordExecutionStop(id, phase, at);
         }
         return false;
       }
@@ -256558,7 +256522,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto75.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto74.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -256946,11 +256910,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto75, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto74, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -257180,44 +257144,44 @@ var init_tenant_new_company_provision = __esm({
 });
 
 // ../storage/src/knowledge-snapshot-crypto.ts
-function sealSnapshot(snapshot, key) {
-  if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto76.randomBytes)(12);
-  const cipher = (0, import_node_crypto76.createCipheriv)("aes-256-gcm", bytes(key), iv);
-  cipher.setAAD(aad2(snapshot));
-  const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
-  return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
-}
-function openSnapshot(snapshot, key) {
-  if (!snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const packed = snapshot.content.slice(PREFIX3.length).split(".");
-  if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
+function sealSnapshot(snapshot2, key) {
+  if (snapshot2.content.startsWith(PREFIX3)) return structuredClone(snapshot2);
+  const iv = (0, import_node_crypto75.randomBytes)(12);
+  const cipher = (0, import_node_crypto75.createCipheriv)("aes-256-gcm", bytes(key), iv);
+  cipher.setAAD(aad2(snapshot2));
+  const encrypted = Buffer.concat([cipher.update(snapshot2.content, "utf8"), cipher.final()]);
+  return { ...structuredClone(snapshot2), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
+}
+function openSnapshot(snapshot2, key) {
+  if (!snapshot2.content.startsWith(PREFIX3)) return structuredClone(snapshot2);
+  const packed = snapshot2.content.slice(PREFIX3.length).split(".");
+  if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot2.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto76.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
-  decipher.setAAD(aad2(snapshot));
+  const decipher = (0, import_node_crypto75.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
+  decipher.setAAD(aad2(snapshot2));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
-    ...structuredClone(snapshot),
+    ...structuredClone(snapshot2),
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto76, PREFIX3, bytes, aad2;
+var import_node_crypto75, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key) => {
       const value2 = Buffer.from(key);
       if (value2.length !== 32) throw new Error("knowledge snapshot key must be 32 bytes");
       return value2;
     };
-    aad2 = (snapshot) => Buffer.from([
-      snapshot.organizationId,
-      snapshot.projectId ?? "organization",
-      snapshot.spaceId ?? "none",
-      snapshot.ref,
-      snapshot.contentHash
+    aad2 = (snapshot2) => Buffer.from([
+      snapshot2.organizationId,
+      snapshot2.projectId ?? "organization",
+      snapshot2.spaceId ?? "none",
+      snapshot2.ref,
+      snapshot2.contentHash
     ].join("\0"), "utf8");
   }
 });
@@ -258611,7 +258575,7 @@ var init_board_watch = __esm({
             freshTerminalRunId: newestTerminalRun !== null && !letteredRuns.has(newestTerminalRun.runId) ? newestTerminalRun.runId : null
           };
           if (!decideBoardLetter(candidate, now, quietMs)) continue;
-          const fmt = (fs47) => fs47.slice(0, 5).map((f2) => `- ${f2.path}\uFF08${f2.kind ?? "?"}\uFF09\xB7 ${f2.mtime ? new Date(f2.mtime).toISOString() : "?"}`).join("\n");
+          const fmt = (fs48) => fs48.slice(0, 5).map((f2) => `- ${f2.path}\uFF08${f2.kind ?? "?"}\uFF09\xB7 ${f2.mtime ? new Date(f2.mtime).toISOString() : "?"}`).join("\n");
           let body2;
           let logLine;
           if (candidate.freshTerminalRunId !== null) {
@@ -259192,6 +259156,58 @@ var init_read_model_clock = __esm({
   }
 });
 
+// ../server/src/task-replacement.ts
+var import_node_crypto76, TaskReplacementBarrier;
+var init_task_replacement = __esm({
+  "../server/src/task-replacement.ts"() {
+    "use strict";
+    import_node_crypto76 = require("node:crypto");
+    TaskReplacementBarrier = class {
+      constructor(hub, timeoutMs = 3e4, locateLegacy) {
+        this.hub = hub;
+        this.timeoutMs = timeoutMs;
+        this.locateLegacy = locateLegacy;
+      }
+      async prepare(ledger, dispatchId, nodeId, job, companyId = "") {
+        let plan = await ledger.prepareExecution(dispatchId, nodeId);
+        if (plan.unassignedDispatchIds?.length) {
+          if (!this.locateLegacy) throw new Error(`\u4EFB\u52A1 ${dispatchId} \u7684\u5386\u53F2\u6267\u884C\u7F3A\u5C11\u673A\u5668\u5F52\u5C5E\uFF0C\u4E0D\u80FD\u786E\u8BA4\u6E05\u573A`);
+          const nodes = await this.locateLegacy(plan.unassignedDispatchIds);
+          if (!nodes.length) throw new Error(`\u4EFB\u52A1 ${dispatchId} \u7684\u5386\u53F2\u6267\u884C\u673A\u5668\u672A\u5B9A\u4F4D\uFF0C\u4E0D\u80FD\u786E\u8BA4\u6E05\u573A`);
+          plan = await ledger.prepareExecution(dispatchId, nodeId, nodes);
+        }
+        const key = (0, import_node_crypto76.createHash)("sha256").update(JSON.stringify([job.server.url.replace(/\/+$/, ""), companyId, job.jobKey])).digest("hex");
+        job.execution = { key, generation: plan.generation };
+        const results = await Promise.allSettled(plan.nodes.map(async (node2) => {
+          await this.replace(node2, { requestId: (0, import_node_crypto76.randomUUID)(), dispatchId, key, generation: plan.generation, legacyDispatchIds: plan.legacyDispatchIds, usesContainers: Boolean(job.executionEnv), ...job.workdirKey ? { workdirKey: job.workdirKey } : {} });
+          await ledger.confirmExecutionPrepared(dispatchId, node2, plan.generation);
+        }));
+        const failures = results.flatMap((r, i) => r.status === "rejected" ? [`${plan.nodes[i]}\uFF1A${String(r.reason)}`] : []);
+        if (failures.length) throw new Error(`\u4EFB\u52A1\u5207\u6362\u5C1A\u672A\u5B8C\u6210\uFF08\u5F53\u524D\u6267\u884C ${dispatchId}\uFF09\uFF1A${failures.join("\uFF1B")}`);
+        await ledger.claimExecution(dispatchId, nodeId);
+      }
+      async replace(nodeId, request2) {
+        const node2 = this.hub.connectedDaemons().find((n) => n.daemonId === nodeId);
+        if (!node2) throw new Error("\u6267\u884C\u673A\u5668\u79BB\u7EBF\uFF0C\u8FDE\u63A5\u6062\u590D\u540E\u53EF\u7EE7\u7EED\u4EFB\u52A1\u5207\u6362");
+        if (!node2.meta.supportsTaskReplacement) throw new Error("\u6267\u884C\u673A\u5668\u9700\u5347\u7EA7\u5230\u652F\u6301\u4EFB\u52A1\u6362\u8F6E\u7684\u7248\u672C");
+        await new Promise((resolve10, reject) => {
+          const finish = (error2) => {
+            clearTimeout(timer);
+            off();
+            error2 ? reject(error2) : resolve10();
+          };
+          const off = this.hub.addMessageListener((sender, msg) => {
+            if (sender !== nodeId || msg.type !== "task_replaced" || msg.requestId !== request2.requestId || msg.dispatchId !== request2.dispatchId || msg.key !== request2.key || msg.generation !== request2.generation) return;
+            finish(msg.stopped ? void 0 : new Error(msg.detail ?? "\u65E7\u8FDB\u7A0B\u6E05\u7406\u5931\u8D25"));
+          });
+          const timer = setTimeout(() => finish(new Error("\u8282\u70B9\u5C1A\u672A\u5B8C\u6210\u65E7\u8FDB\u7A0B\u6E05\u7406\uFF0C\u8BF7\u68C0\u67E5\u8BE5\u8282\u70B9\u8FDE\u63A5\u4E0E\u8FDB\u7A0B\u6743\u9650")), this.timeoutMs);
+          if (!this.hub.dispatch(nodeId, { type: "replace_task", ...request2 })) finish(new Error("\u6E05\u573A\u547D\u4EE4\u672A\u9001\u8FBE\u8282\u70B9"));
+        });
+      }
+    };
+  }
+});
+
 // ../server/src/index.ts
 var init_src11 = __esm({
   "../server/src/index.ts"() {
@@ -259284,7 +259300,6 @@ var init_src11 = __esm({
     init_daemon_adapter();
     init_dispatch_fence();
     init_execution_stop();
-    init_execution_stop_recovery();
     init_node_health();
     init_side_map();
     init_engine();
@@ -259312,6 +259327,7 @@ var init_src11 = __esm({
     init_run_settlement_wiring();
     init_deadline_clock();
     init_read_model_clock();
+    init_task_replacement();
   }
 });
 
@@ -259443,15 +259459,15 @@ var init_trajectory = __esm({
 });
 
 // src/index.ts
-var fs46 = __toESM(require("node:fs"));
-var os15 = __toESM(require("node:os"));
+var fs47 = __toESM(require("node:fs"));
+var os16 = __toESM(require("node:os"));
 var path42 = __toESM(require("node:path"));
 var import_node_child_process20 = require("node:child_process");
 var import_node_crypto85 = require("node:crypto");
 
 // ../cli/src/cli.ts
-var fs41 = __toESM(require("node:fs"), 1);
-var os13 = __toESM(require("node:os"), 1);
+var fs42 = __toESM(require("node:fs"), 1);
+var os14 = __toESM(require("node:os"), 1);
 var path37 = __toESM(require("node:path"), 1);
 var import_node_crypto83 = require("node:crypto");
 
@@ -262663,14 +262679,6 @@ async function startServe(opts) {
         // 派发台账：动态卡的 runId 与「执行轨迹」抽屉靠它把 work/review 硬关联到 agent_runs.id。
         // 与上面 createServer 的 `dispatchesOfWorkorder`（timeline 用）是同一个闭包，别分叉。
         dispatchesOfWorkorder: (wid) => fanOutLedger.listByWorkorder(wid),
-        executionStopRecovery: {
-          ledgerFor: (cid) => dispatchLedgerFor(cid),
-          verify: async (ledger, id, verification) => {
-            const result = await executionStopRecovery.verify(ledger, id, verification);
-            if (result.state === "stopped") await executionStops.releaseIfStopped(id);
-            return result;
-          }
-        },
         // 组织汇总用——从 nodes 取 name（用户友好名），优先于 hostname 作为展示标签
         listNodes: () => nodeStore.listNodes(),
         // 诊断 92ac8f18-83e5fde6 §④ D-2：按**请求公司**取其 dispatcher 的 queued/backoff 信号。
@@ -263190,23 +263198,23 @@ async function startServe(opts) {
           }
         } catch (error2) {
           const rollbackErrors = [];
-          for (const snapshot of [...snapshots2].reverse()) {
+          for (const snapshot2 of [...snapshots2].reverse()) {
             try {
-              if (!snapshot.row || snapshot.previousValue === null) {
-                await actors.service.deleteVariable(snapshot.write.key, request2.actorId);
+              if (!snapshot2.row || snapshot2.previousValue === null) {
+                await actors.service.deleteVariable(snapshot2.write.key, request2.actorId);
               } else {
                 await actors.service.putVariable({
-                  key: snapshot.row.key,
-                  value: snapshot.previousValue,
-                  scope: snapshot.row.scope,
-                  ...snapshot.row.actorId ? { actorId: snapshot.row.actorId } : {},
-                  ...snapshot.row.connectorId ? { connectorId: snapshot.row.connectorId } : {},
-                  ...snapshot.row.overrides ? { overrides: snapshot.row.overrides } : {},
-                  encrypted: snapshot.row.encrypted
+                  key: snapshot2.row.key,
+                  value: snapshot2.previousValue,
+                  scope: snapshot2.row.scope,
+                  ...snapshot2.row.actorId ? { actorId: snapshot2.row.actorId } : {},
+                  ...snapshot2.row.connectorId ? { connectorId: snapshot2.row.connectorId } : {},
+                  ...snapshot2.row.overrides ? { overrides: snapshot2.row.overrides } : {},
+                  encrypted: snapshot2.row.encrypted
                 });
               }
             } catch (rollbackError) {
-              rollbackErrors.push(`${snapshot.write.key}: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);
+              rollbackErrors.push(`${snapshot2.write.key}: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);
             }
           }
           const detail = error2 instanceof Error ? error2.message : String(error2);
@@ -263412,7 +263420,9 @@ async function startServe(opts) {
      * 这正是 ADR 点名要求的「收割记录须持久化，否则重启后 fencing 静默失效」。
      */
     isDispatchFenced: async (dispatchId) => {
-      const r = await fanOutTrace.getRun(dispatchId).catch(() => null);
+      const ledger = await ledgerForDispatch(dispatchId);
+      if (await ledger.getById(dispatchId)) return !await ledger.isExecutionCurrent(dispatchId);
+      const r = await fanOutTrace.getRun(dispatchId);
       if (!r) return false;
       if (isExplicitlyDispatchFenced(r)) return true;
       if (r.status === "running") return false;
@@ -264174,9 +264184,10 @@ async function startServe(opts) {
               log: (m2) => console.log(m2)
             });
             if (!chatHandled) {
+              const acceptsOutcome = await acceptsExecutionOutcome(await ledgerForDispatch(msg.dispatchId), msg.dispatchId);
               const mapping = dispatchToWork.get(msg.dispatchId);
               const exitBus = mapping ? busForCompany(mapping.companyId) ?? busForWorkorder(mapping.workorderId) : null;
-              if (mapping && exitBus) {
+              if (acceptsOutcome && mapping && exitBus) {
                 exitBus.submit({
                   companyId: "",
                   workorderId: mapping.workorderId,
@@ -264190,13 +264201,13 @@ async function startServe(opts) {
                   }
                 }).catch((err) => console.error(`[new-engine] work.response submit \u5931\u8D25:`, err));
                 dispatchToWork.delete(msg.dispatchId);
-                if (mapping) workToSession.delete(mapping.workId);
-              } else if (!mapping) {
+                if (workToSession.get(mapping.workId)?.dispatchId === msg.dispatchId) workToSession.delete(mapping.workId);
+              } else if (acceptsOutcome && !mapping) {
                 await fallbackDispatchExitToWork(msg);
               }
               const revMapping = dispatchToReview.get(msg.dispatchId);
               const revExitBus = revMapping ? busForCompany(revMapping.companyId) ?? busForWorkorder(revMapping.workorderId) : null;
-              if (revMapping && revExitBus) {
+              if (acceptsOutcome && revMapping && revExitBus) {
                 revExitBus.submit({
                   companyId: "",
                   workorderId: revMapping.workorderId,
@@ -264208,7 +264219,13 @@ async function startServe(opts) {
                   }
                 }).catch((err) => console.error(`[new-engine] review.expired submit \u5931\u8D25:`, err));
                 dispatchToReview.delete(msg.dispatchId);
-                reviewToSession.delete(revMapping.reviewId);
+                if (reviewToSession.get(revMapping.reviewId)?.dispatchId === msg.dispatchId) reviewToSession.delete(revMapping.reviewId);
+              }
+              if (!acceptsOutcome) {
+                dispatchToWork.delete(msg.dispatchId);
+                dispatchToReview.delete(msg.dispatchId);
+                if (mapping && workToSession.get(mapping.workId)?.dispatchId === msg.dispatchId) workToSession.delete(mapping.workId);
+                if (revMapping && reviewToSession.get(revMapping.reviewId)?.dispatchId === msg.dispatchId) reviewToSession.delete(revMapping.reviewId);
               }
               await reconcileDispatchExitFrame({
                 dispatchId: msg.dispatchId,
@@ -264312,11 +264329,27 @@ async function startServe(opts) {
       gatewayUrl: opts.gatewayUrl ?? `ws://127.0.0.1:${opts.port ?? 7320}/node-gateway`
     }
   };
+  const taskReplacements = new TaskReplacementBarrier(hub, void 0, async (ids2) => {
+    const nodes = /* @__PURE__ */ new Set();
+    for (const id of ids2) {
+      const run = await fanOutTrace.getRun(id);
+      const instance = run?.runtimeInstanceId;
+      if (!instance?.startsWith("runtime:") || instance.lastIndexOf(":") <= 8) {
+        throw new Error("\u5386\u53F2\u4EFB\u52A1\u7684\u6267\u884C\u673A\u5668\u5F52\u5C5E\u7F3A\u5931\uFF0C\u65E0\u6CD5\u81EA\u52A8\u6E05\u573A\uFF1B\u8BF7\u6062\u590D\u8BE5\u4EFB\u52A1\u7684\u8282\u70B9\u767B\u8BB0\u548C\u8FD0\u884C\u8F68\u8FF9\u540E\u91CD\u8BD5");
+      }
+      nodes.add(instance.slice(8, instance.lastIndexOf(":")));
+    }
+    return [...nodes];
+  });
+  hub.executionIsCurrent = async (id) => {
+    const ledger = await ledgerForDispatch(id);
+    return !await ledger.getById(id) || ledger.isExecutionCurrent(id);
+  };
   chatRemoteAdapter = new DaemonHubAdapter(hub, { ...hubAdapterOpts, stashUnknownFrames: true });
   dispatchRemoteAdapter = new DaemonHubAdapter(hub, {
-    beforeDispatch: async (id, nodeId) => {
+    beforeDispatch: async (id, nodeId, job) => {
       const ledger = await ledgerForDispatch(id);
-      if (await ledger.getById(id)) await ledger.claimExecution(id, nodeId);
+      if (await ledger.getById(id)) await taskReplacements.prepare(ledger, id, nodeId, job, issuer.resolveClaims(job.actorToken)?.companyId);
     },
     onDispatchNotSent: async (id) => {
       const ledger = await ledgerForDispatch(id);
@@ -264364,13 +264397,7 @@ async function startServe(opts) {
     const cid = companyOfDispatch(dispatchId);
     return cid ? await dispatchLedgerFor(cid) : fanOutLedger;
   };
-  const executionStopRecovery = new ExecutionStopRecovery(hub);
-  const executionStops = new ExecutionStopBarrier({
-    hub,
-    ledgerFor: ledgerForDispatch,
-    log: console.warn,
-    recover: async (id) => executionStopRecovery.verify(await ledgerForDispatch(id), id)
-  });
+  const executionStops = new ExecutionStopBarrier({ hub, ledgerFor: ledgerForDispatch, log: console.warn });
   const traceStoreForDispatch = async (dispatchId) => {
     const cid = companyOfDispatch(dispatchId) ?? await fanOutTrace.companyOfRun(dispatchId).catch(() => null);
     return cid ? await traceStoreFor(cid) : void 0;
@@ -264580,12 +264607,7 @@ async function startServe(opts) {
           }
           const bridge = engineDispatchBridges.forArtifact(rev.artifactId, companyId);
           if (!bridge) return;
-          const jobKey = replyIssueId ? `reply::${replyIssueId}::${rev.author}` : `produce::${rev.artifactId}`;
           const ledger = await dispatchLedgerFor(companyId);
-          for (const old of predecessorExecutions(await ledger.listByWorkorder(wid), jobKey)) {
-            await fenceDispatch(await traceStoreFor(companyId), old.id, "successor-stop-barrier");
-            await executionStops.cancel(ledger, old.id, old.daemonId);
-          }
           const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).reserveExecution({
@@ -264606,6 +264628,7 @@ async function startServe(opts) {
             result = replyIssueId ? await bridge.replyWork(rev.artifactId, rev.author, replyIssueId, ledgerId) : await bridge.produce(rev.artifactId, rev.author, workId, ledgerId, opts2?.resumeEligible);
           } catch (err) {
             void dispatchLedgerFor(companyId).then((l) => l.close(ledgerId, { outcome: "failed", reason: `dispatch error: ${err instanceof Error ? err.message : String(err)}` })).catch(ledgerWarn("close(error)"));
+            if (!await ledger.isExecutionLatest(ledgerId)) return;
             console.log(`[new-engine] dispatchWork ${workId} \u6D3E\u53D1\u5F02\u5E38\uFF1A${String(err)} \u2192 \u7F6E work failed`);
             const failBus = busForCompany(companyId);
             if (failBus) {
@@ -264624,6 +264647,7 @@ async function startServe(opts) {
             }
             return;
           }
+          if (!await ledger.isExecutionLatest(ledgerId)) return;
           if (result?.dispatchId) {
             const delivery = dispatchRemoteAdapter?.deliveryStatus(result.dispatchId);
             dispatchToWork.set(result.dispatchId, {
@@ -264637,7 +264661,8 @@ async function startServe(opts) {
             if (delivery) workToSession.set(workId, { dispatchId: result.dispatchId, daemonId: delivery.nodeId });
             dispatchedWorks.add(workId);
           } else if (result?.kind === "spawn-failed" || result?.kind === "predispatch-timeout") {
-            void dispatchLedgerFor(companyId).then((l) => l.close(ledgerId, { outcome: "failed", reason: `dispatch ${result.kind}` })).catch(ledgerWarn("close(spawn-failed)"));
+            const failureReason = result.reason ?? `dispatch ${result.kind}`;
+            void ledger.close(ledgerId, { outcome: "failed", reason: failureReason }).catch(ledgerWarn("close(spawn-failed)"));
             console.log(`[new-engine] dispatchWork ${workId} \u6D3E\u53D1\u5931\u8D25\uFF08${result.kind}${result.reason ? `\uFF1A${result.reason}` : ""}\uFF09\u2192 \u7F6E work failed`);
             const failBus = busForCompany(companyId);
             if (failBus) {
@@ -264650,7 +264675,7 @@ async function startServe(opts) {
                   workorderId: wid,
                   workId,
                   outcome: "failed",
-                  detail: { reason: `dispatch ${result.kind}` }
+                  detail: { reason: failureReason }
                 }
               });
             }
@@ -264670,11 +264695,6 @@ async function startServe(opts) {
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
           const reviewLedger = await dispatchLedgerFor(companyId);
-          const reviewJobKey = `review::${nodeId}::${reviewerActorId}`;
-          for (const old of predecessorExecutions(await reviewLedger.listByWorkorder(revWid), reviewJobKey)) {
-            await fenceDispatch(await traceStoreFor(companyId), old.id, "review-successor-stop-barrier");
-            await executionStops.cancel(reviewLedger, old.id, old.daemonId);
-          }
           const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).reserveExecution({
@@ -264695,14 +264715,16 @@ async function startServe(opts) {
             result = await bridge.review(nodeId, reviewerActorId, ledgerId, reviewId);
           } catch (err) {
             void dispatchLedgerFor(companyId).then((l) => l.close(ledgerId, { outcome: "failed", reason: `dispatch error: ${err instanceof Error ? err.message : String(err)}` })).catch(ledgerWarn("close(review-error)"));
+            if (!await reviewLedger.isExecutionLatest(ledgerId)) return;
             throw err;
           }
+          if (!await reviewLedger.isExecutionLatest(ledgerId)) return;
           if (result?.dispatchId) {
             dispatchedReviews.add(reviewId);
             dispatchToReview.set(result.dispatchId, { reviewId, workorderId: revWid, nodeId, companyId });
             if (revWid) workorderCompany.set(revWid, companyId);
           } else if (result?.kind === "spawn-failed" || result?.kind === "predispatch-timeout") {
-            void dispatchLedgerFor(companyId).then((l) => l.close(ledgerId, { outcome: "failed", reason: `dispatch ${result.kind}` })).catch(ledgerWarn("close(review-spawn-failed)"));
+            void reviewLedger.close(ledgerId, { outcome: "failed", reason: result.reason ?? `dispatch ${result.kind}` }).catch(ledgerWarn("close(review-spawn-failed)"));
           } else if (result?.kind) {
             void dispatchLedgerFor(companyId).then((l) => l.close(ledgerId, { outcome: "superseded", reason: result.kind })).catch(ledgerWarn("close(review-skipped)"));
           }
@@ -264715,9 +264737,8 @@ async function startServe(opts) {
           const ids2 = new Map(rows.map((r) => [r.id, r.daemonId]));
           if (mapped) ids2.set(mapped.dispatchId, mapped.daemonId);
           for (const [dispatchId, daemonId] of ids2) {
-            await fenceDispatch(await traceStoreFor(companyId), dispatchId, "engine-cancel-before-successor");
             await executionStops.cancel(ledger, dispatchId, daemonId);
-            await ledger.close(dispatchId, { outcome: "cancelled", reason: "session-stop-confirmed" });
+            await ledger.close(dispatchId, { outcome: "cancelled", reason: "session-stop-requested" });
           }
           workToSession.delete(ref2);
           reviewToSession.delete(ref2);
@@ -266473,7 +266494,7 @@ var SessionManager = class {
 };
 
 // ../cli/src/daemon/session-process.ts
-var fs37 = __toESM(require("node:fs"), 1);
+var fs38 = __toESM(require("node:fs"), 1);
 var path33 = __toESM(require("node:path"), 1);
 init_wrapper();
 init_src();
@@ -266560,10 +266581,15 @@ function isSessionLocked(lockPath) {
   }
 }
 
-// ../cli/src/daemon/execution-recovery.ts
-var fs36 = __toESM(require("node:fs"), 1);
+// ../cli/src/daemon/session-runner.ts
+init_src();
+init_src6();
+init_src8();
+
+// ../cli/src/daemon/task-execution.ts
+var fs37 = __toESM(require("node:fs"), 1);
 var path32 = __toESM(require("node:path"), 1);
-var import_node_child_process16 = require("node:child_process");
+var os10 = __toESM(require("node:os"), 1);
 var import_node_crypto79 = require("node:crypto");
 
 // ../cli/src/daemon/execution-lock.ts
@@ -266577,38 +266603,6 @@ var ExecutionLockConflictError = class extends Error {
     this.conflictingDispatchId = conflictingDispatchId;
   }
 };
-function mutateLock(file, fn) {
-  const guard = `${file}.guard`;
-  fs35.mkdirSync(guard, { mode: 448 });
-  try {
-    return fn();
-  } finally {
-    fs35.rmdirSync(guard);
-  }
-}
-function releaseExecutionLocksForDispatch(dispatchId, root = path31.join(os9.tmpdir(), `oasis-execution-locks-${process.getuid?.() ?? "user"}`)) {
-  let names;
-  try {
-    names = fs35.readdirSync(root);
-  } catch (e) {
-    if (e.code === "ENOENT") return;
-    throw e;
-  }
-  for (const name of names) {
-    if (!/^[a-f0-9]{64}$/.test(name)) continue;
-    const file = path31.join(root, name);
-    try {
-      const before = JSON.parse(fs35.readFileSync(file, "utf8"));
-      if (before.dispatchId !== dispatchId) continue;
-      mutateLock(file, () => {
-        const held = JSON.parse(fs35.readFileSync(file, "utf8"));
-        if (held.dispatchId === dispatchId && held.owner) fs35.unlinkSync(file);
-      });
-    } catch (e) {
-      if (e.code !== "ENOENT") throw e;
-    }
-  }
-}
 function executionLockKey(job) {
   const key = job.workdirKey ?? job.jobKey;
   if (!key) return null;
@@ -266621,7 +266615,7 @@ function acquireExecutionLock(job, dispatchId, root = path31.join(os9.tmpdir(),
   const file = path31.join(root, key);
   const owner = (0, import_node_crypto78.randomUUID)();
   try {
-    mutateLock(file, () => fs35.writeFileSync(file, JSON.stringify({ owner, pid: process.pid, dispatchId }), { flag: "wx", mode: 384 }));
+    fs35.writeFileSync(file, JSON.stringify({ owner, pid: process.pid, dispatchId }), { flag: "wx", mode: 384 });
   } catch (e) {
     if (e.code === "EEXIST") {
       let conflictingDispatchId = null;
@@ -266636,121 +266630,343 @@ function acquireExecutionLock(job, dispatchId, root = path31.join(os9.tmpdir(),
   }
   return { path: file, release() {
     try {
-      mutateLock(file, () => {
-        if (JSON.parse(fs35.readFileSync(file, "utf8")).owner === owner) fs35.unlinkSync(file);
-      });
+      if (JSON.parse(fs35.readFileSync(file, "utf8")).owner === owner) fs35.unlinkSync(file);
     } catch {
     }
   } };
 }
+function clearStoppedExecutionLocks(dispatchIds, root = path31.join(os9.tmpdir(), `oasis-execution-locks-${process.getuid?.() ?? "user"}`)) {
+  const stopped2 = new Set(dispatchIds);
+  let files;
+  try {
+    files = fs35.readdirSync(root);
+  } catch (e) {
+    if (e.code === "ENOENT") return;
+    throw e;
+  }
+  for (const file of files) {
+    if (!/^[a-f0-9]{64}$/.test(file)) continue;
+    const target = path31.join(root, file);
+    let owner;
+    try {
+      owner = JSON.parse(fs35.readFileSync(target, "utf8"));
+    } catch {
+      continue;
+    }
+    if (!owner?.dispatchId || !stopped2.has(owner.dispatchId)) continue;
+    try {
+      fs35.unlinkSync(target);
+    } catch (e) {
+      if (e.code !== "ENOENT") throw new Error("\u65E0\u6CD5\u56DE\u6536\u65E7\u4EFB\u52A1\u76EE\u5F55\u9501");
+    }
+  }
+}
 
-// ../cli/src/daemon/execution-recovery.ts
+// ../cli/src/daemon/task-execution.ts
+init_src6();
+
+// ../cli/src/daemon/task-processes.ts
+var fs36 = __toESM(require("node:fs"), 1);
+var import_node_child_process16 = require("node:child_process");
+var psEnv = { ...process.env, LC_ALL: "C" };
 function processBirth(pid) {
-  const ps = (0, import_node_child_process16.spawnSync)("ps", ["-p", String(pid), "-o", "lstart="], { encoding: "utf8", timeout: 3e3, env: { ...process.env, LC_ALL: "C" } });
-  return ps.status === 0 && ps.stdout.trim() ? ps.stdout.trim() : null;
+  const p2 = (0, import_node_child_process16.spawnSync)("ps", ["-p", String(pid), "-o", "lstart="], { encoding: "utf8", env: psEnv, timeout: 3e3 });
+  if (p2.error) throw new Error("\u65E0\u6CD5\u8BFB\u53D6\u8FDB\u7A0B\u8EAB\u4EFD");
+  return p2.stdout.trim();
+}
+function snapshot() {
+  const p2 = (0, import_node_child_process16.spawnSync)("ps", ["-A", "-o", "pid=,ppid=,pgid=,stat=,lstart=,command="], { encoding: "utf8", env: psEnv, timeout: 3e3, maxBuffer: 16 * 1024 * 1024 });
+  if (p2.status !== 0) throw new Error("\u65E0\u6CD5\u6838\u9A8C\u8282\u70B9\u8FDB\u7A0B\u8868");
+  return p2.stdout.split("\n").flatMap((line) => {
+    const parts = line.trim().split(/\s+/);
+    return parts.length < 9 ? [] : [{ pid: Number(parts[0]), ppid: Number(parts[1]), pgid: Number(parts[2]), state: parts[3], birth: parts.slice(4, 9).join(" "), command: parts.slice(9).join(" ") }];
+  });
 }
-function durableWrite(file, value2, exclusive = false) {
-  const temp = exclusive ? file : `${file}.${(0, import_node_crypto79.randomUUID)()}.tmp`;
-  const fd = fs36.openSync(temp, "wx", 384);
-  try {
-    fs36.writeFileSync(fd, JSON.stringify(value2));
-    fs36.fsyncSync(fd);
-  } finally {
-    fs36.closeSync(fd);
-  }
-  if (!exclusive) fs36.renameSync(temp, file);
-  const dir = fs36.openSync(path32.dirname(file), "r");
-  try {
-    fs36.fsyncSync(dir);
-  } finally {
-    fs36.closeSync(dir);
+function executionIdentity(environment) {
+  const value2 = (name) => new RegExp(`(?:^|[\\s\\0])${name}=([^\\s\\0]+)`).exec(environment)?.[1];
+  let dispatchId = value2("OASIS_EXECUTION_DISPATCH_ID");
+  if (!dispatchId) {
+    const token = value2("OASIS_TOKEN");
+    if (token?.startsWith("ost_")) {
+      try {
+        const claims = JSON.parse(Buffer.from(token.slice(4).split(".")[0], "base64url").toString("utf8"));
+        if (typeof claims.dispatchId === "string") dispatchId = claims.dispatchId;
+      } catch {
+      }
+    }
   }
+  return { key: value2("OASIS_EXECUTION_KEY"), generation: Number(value2("OASIS_EXECUTION_GENERATION")), dispatchId };
 }
-var ExecutionRecovery = class {
-  constructor(sessionsRoot, lockRoot) {
-    this.sessionsRoot = sessionsRoot;
-    this.lockRoot = lockRoot;
+function environments(rows) {
+  if (process.platform === "linux") {
+    const out = /* @__PURE__ */ new Map();
+    for (const row of rows) {
+      try {
+        if (fs36.statSync(`/proc/${row.pid}`).uid !== process.getuid?.()) continue;
+        out.set(row.pid, fs36.readFileSync(`/proc/${row.pid}/environ`, "utf8"));
+      } catch (e) {
+        if (!["ENOENT", "ESRCH"].includes(e.code ?? "") && !row.state.startsWith("Z")) throw new Error(`\u65E0\u6CD5\u6838\u9A8C\u8FDB\u7A0B ${row.pid} \u7684\u4EFB\u52A1\u5F52\u5C5E`);
+      }
+    }
+    return out;
   }
-  dir(id) {
-    const dir = path32.join(`${this.sessionsRoot}.execution-stops`, (0, import_node_crypto79.createHash)("sha256").update(id).digest("hex"));
-    const created = fs36.mkdirSync(dir, { recursive: true, mode: 448 });
-    if (created) {
-      for (let current = dir; ; current = path32.dirname(current)) {
-        const fd = fs36.openSync(current, "r");
-        try {
-          fs36.fsyncSync(fd);
-        } finally {
-          fs36.closeSync(fd);
+  if (process.platform === "darwin") {
+    const p2 = (0, import_node_child_process16.spawnSync)("ps", ["eww", "-U", String(process.getuid?.()), "-o", "pid=,command="], { encoding: "utf8", env: psEnv, timeout: 3e3, maxBuffer: 32 * 1024 * 1024 });
+    if (p2.status !== 0) throw new Error("\u65E0\u6CD5\u6838\u9A8C\u8282\u70B9\u6267\u884C\u73AF\u5883");
+    return new Map(p2.stdout.split("\n").flatMap((line) => {
+      const m2 = /^\s*(\d+)\s+(.*)$/.exec(line);
+      return m2 ? [[Number(m2[1]), m2[2]]] : [];
+    }));
+  }
+  throw new Error("\u5F53\u524D\u8282\u70B9\u4E0D\u652F\u6301\u53EF\u9A8C\u8BC1\u7684\u4EFB\u52A1\u8FDB\u7A0B\u6811\u6E05\u573A");
+}
+async function stopTaskProcesses(scope) {
+  const ids2 = new Set(scope.legacyDispatchIds), safeIds = scope.legacyDispatchIds.map((id) => id.replace(/[^A-Za-z0-9._-]/g, "_"));
+  const captured = /* @__PURE__ */ new Map();
+  const deadline = Date.now() + 2e4;
+  const isOld = (identity) => identity.key === scope.key && identity.generation < scope.generation || Boolean(identity.dispatchId && ids2.has(identity.dispatchId));
+  const signal = (row, sig) => {
+    scope.assertCurrent();
+    if (row.pid === process.pid || row.pid <= 1 || row.birth !== processBirth(row.pid).replace(/\s+/g, " ")) return;
+    try {
+      process.kill(row.pid, sig);
+    } catch (e) {
+      if (e.code !== "ESRCH") throw new Error(`\u65E0\u6CD5\u505C\u6B62\u4EFB\u52A1\u8FDB\u7A0B ${row.pid}`);
+    }
+  };
+  const containers = new Set(scope.checkContainers === false ? [] : scope.containers);
+  const containerAbsent = (name) => {
+    const result = (0, import_node_child_process16.spawnSync)("podman", ["container", "exists", name], { timeout: 3e3 });
+    if (result.status === 1) return true;
+    if (result.status !== 0) throw new Error("\u5BB9\u5668\u505C\u6B62\u72B6\u6001\u65E0\u6CD5\u786E\u8BA4");
+    return false;
+  };
+  const discoverContainers = () => {
+    if (scope.checkContainers === false) return;
+    const podman = (0, import_node_child_process16.spawnSync)("podman", ["ps", "-a", "--format", "{{.Names}}"], { encoding: "utf8", timeout: 3e3 });
+    if (podman.error && podman.error.code !== "ENOENT") throw new Error("\u65E0\u6CD5\u6838\u9A8C\u4EFB\u52A1\u5BB9\u5668");
+    if (!podman.error && podman.status !== 0) throw new Error("\u5BB9\u5668\u5F15\u64CE\u4E0D\u53EF\u7528\uFF0C\u4EFB\u52A1\u5207\u6362\u7B49\u5F85\u8282\u70B9\u4FEE\u590D");
+    if (podman.error?.code === "ENOENT") containers.clear();
+    for (const name of (podman.stdout ?? "").split("\n").filter((n) => /^oasis-(job|wd)-[A-Za-z0-9_-]+$/.test(n))) {
+      const result = (0, import_node_child_process16.spawnSync)("podman", ["inspect", name], { encoding: "utf8", timeout: 3e3, maxBuffer: 8 * 1024 * 1024 });
+      if (result.status !== 0) {
+        if (containerAbsent(name)) {
+          containers.delete(name);
+          continue;
         }
-        if (current === path32.dirname(created)) break;
+        throw new Error("\u65E0\u6CD5\u6838\u9A8C\u4EFB\u52A1\u5BB9\u5668\u8EAB\u4EFD");
+      }
+      const config2 = JSON.parse(result.stdout)[0];
+      if (isOld(executionIdentity((config2?.Config?.Env ?? []).join("\0")))) containers.add(name);
+    }
+  };
+  do {
+    scope.assertCurrent();
+    discoverContainers();
+    const rows = snapshot().filter((r) => !r.state.startsWith("Z")), env = environments(rows);
+    const selected = new Set(rows.filter((r) => r.pid !== process.pid && (captured.get(r.pid) === r.birth || scope.owners.some((o) => o.pid === r.pid && o.birth.replace(/\s+/g, " ") === r.birth) || isOld(executionIdentity(env.get(r.pid) ?? r.command)) || r.command.includes("--_session ") && safeIds.some((id) => r.command.includes(`/sessions/${id}/spec.json`)))).map((r) => r.pid));
+    let grew;
+    do {
+      grew = false;
+      for (const row of rows) if (row.pid !== process.pid && selected.has(row.ppid) && !selected.has(row.pid)) {
+        selected.add(row.pid);
+        grew = true;
+      }
+    } while (grew);
+    for (const row of rows.filter((r) => selected.has(r.pid))) {
+      captured.set(row.pid, row.birth);
+      signal(row, "SIGSTOP");
+    }
+    if (selected.size) {
+      const frozen = snapshot().filter((r) => !r.state.startsWith("Z"));
+      do {
+        grew = false;
+        for (const row of frozen) if (row.pid !== process.pid && selected.has(row.ppid) && !selected.has(row.pid)) {
+          selected.add(row.pid);
+          captured.set(row.pid, row.birth);
+          signal(row, "SIGSTOP");
+          grew = true;
+        }
+      } while (grew);
+      for (const row of frozen.filter((r) => selected.has(r.pid))) signal(row, "SIGKILL");
+    }
+    for (const name of [...containers]) {
+      if (containerAbsent(name)) {
+        containers.delete(name);
+        continue;
+      }
+      const state = (0, import_node_child_process16.spawnSync)("podman", ["inspect", "--format", "{{.State.Running}}", name], { encoding: "utf8", timeout: 3e3 });
+      if (state.status !== 0) {
+        if (containerAbsent(name)) {
+          containers.delete(name);
+          continue;
+        }
+        throw new Error("\u5BB9\u5668\u505C\u6B62\u72B6\u6001\u65E0\u6CD5\u786E\u8BA4");
+      }
+      if (state.status === 0 && state.stdout.trim() === "false") {
+        containers.delete(name);
+        continue;
+      }
+      scope.assertCurrent();
+      const killed = (0, import_node_child_process16.spawnSync)("podman", ["kill", name], { timeout: 3e3 });
+      if (killed.status !== 0) {
+        if (containerAbsent(name)) {
+          containers.delete(name);
+          continue;
+        }
+        throw new Error("\u65E0\u6CD5\u7EC8\u6B62\u65E7\u4EFB\u52A1\u5BB9\u5668");
+      }
+    }
+    if (!selected.size && !containers.size && !scope.busy()) return;
+    await new Promise((resolve10) => setTimeout(resolve10, 50));
+  } while (Date.now() < deadline);
+  throw new Error("\u65E7\u4EFB\u52A1\u8FDB\u7A0B\u5C1A\u672A\u5168\u90E8\u505C\u6B62\uFF0C\u8BF7\u68C0\u67E5\u8282\u70B9\u8FDB\u7A0B\u6743\u9650\u6216\u4ECD\u5728\u8FDB\u884C\u7684\u542F\u52A8\u64CD\u4F5C");
+}
+
+// ../cli/src/daemon/task-execution.ts
+function taskKey(job) {
+  let companyId = "";
+  if (job.actorToken.startsWith("ost_")) {
+    try {
+      companyId = JSON.parse(Buffer.from(job.actorToken.slice(4).split(".")[0], "base64url").toString("utf8")).companyId ?? "";
+    } catch {
+    }
+  }
+  return (0, import_node_crypto79.createHash)("sha256").update(JSON.stringify([job.server.url.replace(/\/+$/, ""), companyId, job.jobKey])).digest("hex");
+}
+var TaskExecutions = class {
+  constructor(root = process.env["OASIS_TASK_EXECUTIONS_ROOT"] ?? path32.join(os10.homedir(), ".oasis", "task-executions")) {
+    this.root = root;
+  }
+  dir(key) {
+    if (!/^[a-f0-9]{64}$/.test(key)) throw new Error("\u4EFB\u52A1\u6267\u884C\u8EAB\u4EFD\u65E0\u6548");
+    return path32.join(this.root, key);
+  }
+  write(file, data) {
+    fs37.mkdirSync(path32.dirname(file), { recursive: true, mode: 448 });
+    const temporary = `${file}.${(0, import_node_crypto79.randomUUID)()}.tmp`;
+    const fd = fs37.openSync(temporary, "wx", 384);
+    try {
+      try {
+        fs37.writeFileSync(fd, JSON.stringify(data));
+        fs37.fsyncSync(fd);
+      } finally {
+        fs37.closeSync(fd);
       }
+      fs37.linkSync(temporary, file);
+    } finally {
+      fs37.unlinkSync(temporary);
+    }
+    const dir = fs37.openSync(path32.dirname(file), "r");
+    try {
+      fs37.fsyncSync(dir);
+    } finally {
+      fs37.closeSync(dir);
     }
-    return dir;
   }
-  read(id, file) {
+  generations(key) {
     try {
-      return JSON.parse(fs36.readFileSync(path32.join(this.dir(id), file), "utf8"));
+      return fs37.readdirSync(this.dir(key)).filter((n) => /^\d+\.json$/.test(n)).map((n) => Number(n.slice(0, -5)));
     } catch (e) {
-      if (e.code === "ENOENT") return null;
+      if (e.code === "ENOENT") return [];
       throw e;
     }
   }
-  fenced(id) {
-    return fs36.existsSync(path32.join(this.dir(id), "fence.json"));
+  current(key, generation) {
+    return this.generations(key).reduce((max, value2) => Math.max(max, value2), 0) === generation;
   }
-  fence(id) {
-    durableWrite(path32.join(this.dir(id), "fence.json"), { dispatchId: id });
-  }
-  begin(id) {
-    if (this.fenced(id)) throw new Error("\u65E7\u6D3E\u53D1\u5DF2\u5C01\u7981\uFF0C\u62D2\u7EDD\u8FDF\u5230\u542F\u52A8");
-    durableWrite(path32.join(this.dir(id), "owner.json"), { dispatchId: id, pid: process.pid, birth: processBirth(process.pid) }, true);
-    if (this.fenced(id)) throw new Error("\u65E7\u6D3E\u53D1\u5DF2\u5C01\u7981\uFF0C\u62D2\u7EDD\u8FDF\u5230\u542F\u52A8");
+  assertAllowed(dispatchId, job) {
+    if (!job.jobKey) return;
+    const key = taskKey(job), execution = job.execution;
+    if (!execution) {
+      if (this.generations(key).length) throw new Error("\u65E7\u8F6E\u6B21\u5DF2\u5931\u6548\uFF0C\u62D2\u7EDD\u65E0\u8F6E\u6B21\u8BB8\u53EF\u7684\u6267\u884C");
+      return;
+    }
+    if (execution.key !== key || !this.current(key, execution.generation)) throw new Error("\u65E7\u8F6E\u6B21\u5DF2\u5931\u6548\uFF0C\u62D2\u7EDD\u91CD\u65B0\u542F\u52A8");
+    const state = JSON.parse(fs37.readFileSync(path32.join(this.dir(key), `${execution.generation}.json`), "utf8"));
+    if (state.dispatchId !== dispatchId || !fs37.existsSync(path32.join(this.dir(key), `${execution.generation}.ready`))) throw new Error("\u4EFB\u52A1\u5C1A\u672A\u5B8C\u6210\u65E7\u8FDB\u7A0B\u6E05\u573A");
   }
-  stopped(id, proof = { kind: "runtime_exit", at: (/* @__PURE__ */ new Date()).toISOString() }) {
-    this.fence(id);
-    if (!this.read(id, "stopped.json")) durableWrite(path32.join(this.dir(id), "stopped.json"), proof);
+  begin(dispatchId, job, isolated = false) {
+    this.assertAllowed(dispatchId, job);
+    if (!job.execution) return;
+    this.write(
+      path32.join(this.dir(job.execution.key), `${job.execution.generation}.started`),
+      { dispatchId, pid: process.pid, birth: processBirth(process.pid), isolated }
+    );
+    try {
+      this.assertAllowed(dispatchId, job);
+    } catch (error2) {
+      this.finish(job);
+      throw error2;
+    }
   }
-  verify(id, busy, verification) {
-    const result = (state, detail, proof2) => ({ state, detail, at: (/* @__PURE__ */ new Date()).toISOString(), ...proof2 ? { proof: proof2 } : {} });
-    this.fence(id);
-    const proof = this.read(id, "stopped.json");
-    if (proof) {
-      if (!Number.isFinite(Date.parse(proof.at)) || !["runtime_exit", "operator_verified"].includes(proof.kind) || proof.kind === "operator_verified" && (!proof.actor?.startsWith("actor:human:") || !proof.evidence?.trim())) {
-        throw new Error("\u505C\u6B62\u6536\u636E\u635F\u574F\uFF0C\u4FDD\u6301\u4EFB\u52A1\u9501\uFF1B\u8BF7\u4FDD\u7559\u73B0\u573A\u5E76\u6838\u9A8C\u8BE5\u8BB0\u5F55");
-      }
-      releaseExecutionLocksForDispatch(id, this.lockRoot);
-      return result("stopped", "\u8282\u70B9\u5DF2\u6062\u590D\u6301\u4E45\u505C\u6B62\u6536\u636E", proof);
+  finish(job) {
+    if (!job.execution) return;
+    try {
+      this.write(path32.join(this.dir(job.execution.key), `${job.execution.generation}.finished`), {});
+    } catch (e) {
+      if (e.code !== "EEXIST") throw e;
     }
-    if (busy) return result("running", "\u8282\u70B9\u4ECD\u6709\u8FD0\u884C\u53E5\u67C4\u6216\u5F85\u542F\u52A8\u8BB0\u5F55\uFF0C\u7B49\u5F85\u771F\u5B9E\u9000\u51FA");
-    const owner = this.read(id, "owner.json");
-    if (owner) {
+  }
+  async replace(request2, local) {
+    if (!Number.isSafeInteger(request2.generation) || request2.generation < 1) throw new Error("\u4EFB\u52A1\u8F6E\u6B21\u65E0\u6548");
+    const dir = this.dir(request2.key), file = path32.join(dir, `${request2.generation}.json`);
+    try {
+      this.write(file, request2);
+    } catch (e) {
+      if (e.code !== "EEXIST") throw e;
+      const existing = JSON.parse(fs37.readFileSync(file, "utf8"));
+      if (existing.dispatchId !== request2.dispatchId) throw new Error("\u540C\u4E00\u4EFB\u52A1\u8F6E\u6B21\u8EAB\u4EFD\u51B2\u7A81");
+    }
+    const assertCurrent = () => {
+      if (!this.current(request2.key, request2.generation)) throw new Error("\u6E05\u573A\u8BF7\u6C42\u5DF2\u88AB\u66F4\u65B0\u8F6E\u6B21\u66FF\u4EE3");
+    };
+    assertCurrent();
+    if (fs37.existsSync(path32.join(dir, `${request2.generation}.started`))) throw new Error("\u672C\u8F6E\u5DF2\u7ECF\u542F\u52A8\uFF0C\u62D2\u7EDD\u91CD\u590D\u6E05\u573A\u6216\u542F\u52A8");
+    const ids2 = new Set(request2.legacyDispatchIds);
+    let checkContainers = ids2.size > 0;
+    const owners = [];
+    const pendingOwners = [];
+    for (const generation of this.generations(request2.key).filter((g2) => g2 < request2.generation).sort((a, b2) => b2 - a)) {
+      const older = JSON.parse(fs37.readFileSync(path32.join(dir, `${generation}.json`), "utf8"));
+      const prepared = fs37.existsSync(path32.join(dir, `${generation}.ready`));
+      checkContainers ||= older.usesContainers !== false || !prepared && older.legacyDispatchIds.length > 0;
+      ids2.add(older.dispatchId);
+      if (!prepared) for (const id of older.legacyDispatchIds) ids2.add(id);
       try {
-        if (!Number.isSafeInteger(owner.pid) || owner.pid <= 0) throw new Error("\u4F1A\u8BDD\u8FDB\u7A0B\u8EAB\u4EFD\u635F\u574F");
-        process.kill(owner.pid, 0);
-        const birth = processBirth(owner.pid);
-        if (!owner.birth || !birth || birth === owner.birth) return result("running", "\u4F1A\u8BDD\u5BBF\u4E3B\u8FDB\u7A0B\u4ECD\u5B58\u5728\u6216\u8EAB\u4EFD\u65E0\u6CD5\u6392\u9664\uFF0C\u4E0D\u80FD\u4EBA\u5DE5\u786E\u8BA4\u505C\u6B62");
+        const owner = JSON.parse(fs37.readFileSync(path32.join(dir, `${generation}.started`), "utf8"));
+        if (owner.isolated) owners.push(owner);
+        else pendingOwners.push({ ...owner, generation });
       } catch (e) {
-        if (e.code !== "ESRCH") return result("unavailable", "\u65E0\u6CD5\u6838\u9A8C\u4F1A\u8BDD\u5BBF\u4E3B\u8FDB\u7A0B");
+        if (e.code !== "ENOENT") throw e;
       }
+      if (prepared) break;
     }
-    const legacyDir = path32.join(this.sessionsRoot, id.replace(/[^A-Za-z0-9._-]/g, "_"));
-    if (fs36.existsSync(path32.join(legacyDir, "spec.json"))) return result("needs_verification", "\u4ECD\u6709\u5F85\u542F\u52A8 spec\uFF1B\u8BF7\u5728\u8282\u70B9\u6838\u9A8C\u5E76\u79FB\u9664\u8BE5\u65E7\u6D3E\u53D1\u7684\u5F85\u542F\u52A8\u6587\u4EF6");
-    const legacyLock = path32.join(legacyDir, "lock");
-    if (fs36.existsSync(legacyLock) && (!hasFlock() || isSessionLocked(legacyLock))) {
-      return result("running", "\u4F1A\u8BDD\u9501\u4ECD\u88AB\u5360\u7528\u6216\u65E0\u6CD5\u53EF\u9760\u6838\u9A8C");
+    const containers = request2.workdirKey ? [`oasis-wd-${workdirSlug(request2.workdirKey)}`] : [];
+    void local.cancel().catch(() => {
+    });
+    await stopTaskProcesses({
+      key: request2.key,
+      generation: request2.generation,
+      legacyDispatchIds: [...ids2],
+      owners,
+      containers,
+      checkContainers,
+      busy: () => local.busy() || pendingOwners.some((o) => !fs37.existsSync(path32.join(dir, `${o.generation}.finished`)) && processBirth(o.pid) === o.birth),
+      assertCurrent
+    });
+    assertCurrent();
+    clearStoppedExecutionLocks([...ids2]);
+    try {
+      this.write(path32.join(dir, `${request2.generation}.ready`), { at: (/* @__PURE__ */ new Date()).toISOString() });
+    } catch (e) {
+      if (e.code !== "EEXIST") throw e;
     }
-    if (!verification) return result("needs_verification", "\u7F3A\u5C11\u505C\u6B62\u6536\u636E\uFF1B\u9700\u9010\u6761\u6838\u9A8C\u65E7\u5B9E\u4F8B\u3001\u5B50\u8FDB\u7A0B\u3001\u5BB9\u5668\u548C\u5F85\u542F\u52A8\u5165\u53E3\uFF0C\u63D0\u4EA4\u4EBA\u5DE5\u6838\u9A8C\u4F9D\u636E");
-    const manual = { kind: "operator_verified", at: (/* @__PURE__ */ new Date()).toISOString(), ...verification };
-    this.stopped(id, manual);
-    releaseExecutionLocksForDispatch(id, this.lockRoot);
-    return result("stopped", "\u4EBA\u5DE5\u6838\u9A8C\u5DF2\u8BB0\u5F55\uFF0C\u8282\u70B9\u5DF2\u6301\u4E45\u5C01\u7981\u65E7\u6D3E\u53D1", manual);
   }
 };
 
 // ../cli/src/daemon/session-runner.ts
-init_src();
-init_src6();
-init_src8();
+init_src5();
 async function preflightOasisAccess(job) {
   const base = job.server.url.replace(/\/+$/, "");
   try {
@@ -266758,6 +266974,7 @@ async function preflightOasisAccess(job) {
       headers: { authorization: `Bearer ${job.actorToken}` },
       signal: AbortSignal.timeout(5e3)
     });
+    if (res.status === 409) return { code: null, reason: "cancelled" };
     if (res.status === 401 || res.status === 403) return { code: null, reason: "auth-error" };
     if (!res.ok) return { code: null, reason: "server-unreachable" };
     return null;
@@ -266767,49 +266984,50 @@ async function preflightOasisAccess(job) {
 }
 async function runSession(dispatchId, job, deps) {
   const t0 = Date.now();
-  const originalSink = deps.sink;
-  if (deps.recovery) {
-    const recovery = deps.recovery;
-    deps = { ...deps, sink: { ...originalSink, keyFrame: (msg) => {
-      if (msg.type !== "session_exited" || !msg.executionStopped) {
-        originalSink.keyFrame(msg);
-        return;
-      }
-      const persist = () => {
-        try {
-          recovery.stopped(dispatchId);
-        } catch (error2) {
-          log2("[node-cli]", `\u505C\u6B62\u6536\u636E\u5199\u76D8\u5931\u8D25 ${dispatchId}\uFF0C\u4FDD\u6301\u672A\u786E\u8BA4\uFF1A${String(error2)}`);
-          setTimeout(persist, 1e3);
-          return;
-        }
-        originalSink.keyFrame(msg);
-      };
-      persist();
-    } } };
-  }
+  const executions = new TaskExecutions();
+  const wasCancelled = () => {
+    if (deps.wasCancelled?.()) return true;
+    try {
+      executions.assertAllowed(dispatchId, job);
+      return false;
+    } catch {
+      return true;
+    }
+  };
   let handle;
   let lock = null;
   let cleanup;
   let exited = false;
   let admitted = false;
+  let began = false;
   const cancelledWithoutRuntime = () => {
+    executions.finish(job);
     lock?.release();
     deps.sink.keyFrame({ type: "session_exited", dispatchId, sessionId: "cancelled-before-spawn", executionStopped: true, info: { code: null, reason: "cancelled" } });
     deps.onFailure?.();
   };
   try {
-    deps.recovery?.begin(dispatchId);
+    executions.begin(dispatchId, job, deps.isolatedProcess);
+    began = true;
+    if (job.execution) {
+      job = { ...job, env: {
+        ...job.env,
+        OASIS_EXECUTION_KEY: job.execution.key,
+        OASIS_EXECUTION_GENERATION: String(job.execution.generation),
+        OASIS_EXECUTION_DISPATCH_ID: dispatchId
+      } };
+    }
     lock = acquireExecutionLock(job, dispatchId);
     admitted = true;
-    if (deps.wasCancelled?.() || deps.recovery?.fenced(dispatchId)) {
+    if (wasCancelled()) {
       cancelledWithoutRuntime();
       return;
     }
-    if (deps.preflight) {
+    if (deps.preflight || job.execution) {
       const preflightFailure = await preflightOasisAccess(job);
       if (preflightFailure) {
         log2("[node-cli]", `  preflight failed: ${preflightFailure.reason}`);
+        executions.finish(job);
         lock?.release();
         deps.sink.keyFrame({ type: "session_exited", dispatchId, sessionId: "preflight-failed", executionStopped: true, info: preflightFailure });
         deps.onFailure?.();
@@ -266822,19 +267040,25 @@ async function runSession(dispatchId, job, deps) {
     }
     const prepared = await prepareConnectorsForJob(job);
     cleanup = prepared.cleanup;
-    if (deps.wasCancelled?.() || deps.recovery?.fenced(dispatchId)) {
+    if (wasCancelled()) {
       await cleanup();
       cancelledWithoutRuntime();
       return;
     }
     handle = await deps.adapter.spawn(prepared.job);
+    if (job.execution && job.action === "produce" && job.resumeRuntimeSession) {
+      handle = makeProduceResumeFallback(handle, async () => {
+        if (wasCancelled()) throw new Error("\u65E7\u8F6E\u6B21\u5DF2\u5931\u6548\uFF0C\u62D2\u7EDD\u6062\u590D\u4F1A\u8BDD\u56DE\u843D");
+        return deps.adapter.spawn({ ...prepared.job, resumeRuntimeSession: false });
+      });
+    }
     const startedHandle = handle;
     startedHandle.onExit(() => {
       void prepared.cleanup().catch(() => {
       });
     });
     deps.onHandle?.(handle);
-    const cancelledBeforeStart = (deps.wasCancelled?.() || deps.recovery?.fenced(dispatchId)) ?? false;
+    const cancelledBeforeStart = wasCancelled();
     const normalizer = new ProviderStreamNormalizer({
       providerName: job.binding?.runtimeKind ?? "runtime",
       hasLiveProtocol: startedHandle.supportsLiveProtocol === true,
@@ -266856,6 +267080,7 @@ async function runSession(dispatchId, job, deps) {
     startedHandle.onExit((info) => {
       if (exited) return;
       exited = true;
+      executions.finish(job);
       lock?.release();
       normalizer.turnFinished(isHealthySessionExit(info) ? "completed" : "failed");
       log2("[node-cli]", `  \u25A0 session_exited  id=${startedHandle.id}  code=${info.code ?? "killed"}  total=${Date.now() - t0}ms`);
@@ -266873,6 +267098,7 @@ async function runSession(dispatchId, job, deps) {
     }
   } catch (err) {
     if (!admitted && !(err instanceof ExecutionLockConflictError && err.conflictingDispatchId && err.conflictingDispatchId !== dispatchId)) {
+      if (began) executions.finish(job);
       log2("[node-cli]", `\u6267\u884C ${dispatchId} \u505C\u6B62\u672A\u786E\u8BA4\uFF1A${String(err)}`);
       deps.onFailure?.(false);
       return;
@@ -266881,6 +267107,7 @@ async function runSession(dispatchId, job, deps) {
       log2("[node-cli]", `\u6267\u884C ${dispatchId} \u505C\u6B62\u672A\u786E\u8BA4\uFF1A${String(err)}`);
       return;
     }
+    executions.finish(job);
     lock?.release();
     await cleanup?.().catch(() => {
     });
@@ -266913,9 +267140,9 @@ async function runSessionProcess(specFile, adapter) {
   await state.run();
 }
 function readSpec(specFile) {
-  const spec = JSON.parse(fs37.readFileSync(specFile, "utf8"));
+  const spec = JSON.parse(fs38.readFileSync(specFile, "utf8"));
   try {
-    fs37.unlinkSync(specFile);
+    fs38.unlinkSync(specFile);
   } catch {
   }
   return spec;
@@ -266967,8 +267194,8 @@ var SessionProcessState = class {
       this.finish = resolve10;
     });
     await runSession(this.spec.dispatchId, this.spec.job, {
-      recovery: new ExecutionRecovery(path33.dirname(this.spec.sessionDir)),
       adapter: this.adapter,
+      isolatedProcess: true,
       preflight: this.spec.preflight,
       sink: {
         keyFrame: (m2) => this.sendKeyFrame(m2),
@@ -267521,7 +267748,6 @@ var DaemonWsClient = class {
     this.preflight = preflight;
     this.onUpdate = onUpdate;
     this.daemonVersion = daemonVersion;
-    this.recovery = opts.sessionsRoot ? new ExecutionRecovery(opts.sessionsRoot) : void 0;
     this.daemonPkg = opts.daemonPkg;
     this.spawnSessionProcess = opts.spawnSessionProcess;
     this.countDetachedSessions = opts.countDetachedSessions;
@@ -267559,9 +267785,10 @@ var DaemonWsClient = class {
   draining = false;
   /** 已回 dispatch_received、尚未完成 runtime spawn 的派发；也随 hello 上报供重连对账。 */
   pendingDispatchIds = /* @__PURE__ */ new Set();
+  dispatchJobs = /* @__PURE__ */ new Map();
+  taskExecutions = new TaskExecutions();
   /** setup 期间收到 kill 的派发。spawn 返回后先杀句柄，不得再宣告 session_started。 */
   cancelledPendingDispatchIds = /* @__PURE__ */ new Set();
-  recovery;
   spawnSessionProcess;
   countDetachedSessions;
   /**
@@ -267744,18 +267971,36 @@ var DaemonWsClient = class {
   }
   async handleMessage(msg) {
     switch (msg.type) {
+      case "replace_task": {
+        const matches = () => [...this.dispatchJobs].filter(([id, job]) => id !== msg.dispatchId && (taskKey(job) === msg.key || msg.legacyDispatchIds.includes(id)));
+        try {
+          await this.taskExecutions.replace(msg, {
+            cancel: async () => {
+              for (const [id] of matches()) this.cancelledPendingDispatchIds.add(id);
+              await Promise.all(matches().map(([id]) => this.sessions.kill(id)));
+            },
+            busy: () => matches().some(([id]) => this.pendingDispatchIds.has(id) || Boolean(this.sessions.get(id)))
+          });
+          for (const [id] of matches()) {
+            this.dispatchJobs.delete(id);
+            this.cancelledPendingDispatchIds.delete(id);
+          }
+          this.send({ type: "task_replaced", requestId: msg.requestId, dispatchId: msg.dispatchId, key: msg.key, generation: msg.generation, stopped: true });
+        } catch (e) {
+          this.send({ type: "task_replaced", requestId: msg.requestId, dispatchId: msg.dispatchId, key: msg.key, generation: msg.generation, stopped: false, detail: String(e) });
+        }
+        break;
+      }
       case "dispatch": {
         const { dispatchId, job } = msg;
+        const t0 = Date.now();
         try {
-          if (this.recovery?.fenced(dispatchId)) {
-            log2("[node-cli]", `\u62D2\u7EDD\u5DF2\u5C01\u7981\u6D3E\u53D1 ${dispatchId}`);
-            break;
-          }
-        } catch (error2) {
-          log2("[node-cli]", `\u65E0\u6CD5\u8BFB\u53D6\u6267\u884C\u5C01\u7981\uFF0C\u62D2\u7EDD\u542F\u52A8 ${dispatchId}\uFF1A${String(error2)}`);
+          this.taskExecutions.assertAllowed(dispatchId, job);
+        } catch {
+          log2("[node-cli]", `\u62D2\u7EDD\u5931\u6548\u8F6E\u6B21 ${dispatchId}`);
           break;
         }
-        const t0 = Date.now();
+        this.dispatchJobs.set(dispatchId, job);
         log2("[node-cli]", `\u2190 dispatch  ${dispatchId}  artifact=${job.artifactId}`);
         if (this.pendingDispatchIds.has(dispatchId) || this.sessions.get(dispatchId)) {
           this.send({ type: "dispatch_received", dispatchId });
@@ -267764,7 +268009,6 @@ var DaemonWsClient = class {
         if (this.draining) {
           log2("[node-cli]", `  \u62D2\u6536\uFF1A\u8282\u70B9\u6B63\u5728\u505C\u673A\u6392\u7A7A \u2192 \u56DE\u9000\u51FA\u5E27\uFF0C\u670D\u52A1\u7AEF\u53EF\u7ACB\u5373\u6539\u6D3E`);
           await runSession(dispatchId, job, {
-            recovery: this.recovery,
             adapter: this.sessions.getAdapter(),
             preflight: false,
             wasCancelled: () => true,
@@ -267785,7 +268029,6 @@ var DaemonWsClient = class {
           log2("[node-cli]", `  \u72EC\u7ACB\u4F1A\u8BDD\u8FDB\u7A0B\u672A\u63A5\u7BA1\uFF0C\u56DE\u843D\u672C\u8FDB\u7A0B\u8DD1 dispatch=${dispatchId}`);
         }
         await runSession(dispatchId, job, {
-          recovery: this.recovery,
           adapter: this.sessions.getAdapter(),
           preflight: this.preflight,
           sink: {
@@ -267804,37 +268047,20 @@ var DaemonWsClient = class {
           },
           wasCancelled: () => this.cancelledPendingDispatchIds.has(dispatchId),
           onExited: () => {
+            this.dispatchJobs.delete(dispatchId);
             this.cancelledPendingDispatchIds.delete(dispatchId);
             this.maybeRunPendingUpdate();
           },
           onFailure: () => {
+            this.dispatchJobs.delete(dispatchId);
             this.pendingDispatchIds.delete(dispatchId);
             this.cancelledPendingDispatchIds.delete(dispatchId);
           }
         });
         break;
       }
-      case "verify_execution_stop": {
-        let result;
-        try {
-          result = this.recovery ? this.recovery.verify(msg.dispatchId, this.pendingDispatchIds.has(msg.dispatchId) || !!this.sessions.get(msg.dispatchId), msg.verification) : { state: "unavailable", at: (/* @__PURE__ */ new Date()).toISOString(), detail: "\u8282\u70B9\u672A\u914D\u7F6E\u6301\u4E45\u4F1A\u8BDD\u76EE\u5F55\uFF0C\u8BF7\u5347\u7EA7\u8282\u70B9" };
-          if (result.state === "running") {
-            if (this.pendingDispatchIds.has(msg.dispatchId)) this.cancelledPendingDispatchIds.add(msg.dispatchId);
-            await this.sessions.kill(msg.dispatchId);
-          }
-        } catch (e) {
-          result = { state: "unavailable", at: (/* @__PURE__ */ new Date()).toISOString(), detail: `\u8282\u70B9\u6838\u9A8C\u5931\u8D25\uFF1A${String(e)}` };
-        }
-        this.send({ type: "execution_stop_result", requestId: msg.requestId, dispatchId: msg.dispatchId, result });
-        break;
-      }
       case "kill": {
         log2("[node-cli]", `\u2190 kill  dispatch=${msg.dispatchId}`);
-        try {
-          this.recovery?.fence(msg.dispatchId);
-        } catch (error2) {
-          log2("[node-cli]", `\u5C01\u7981\u5199\u76D8\u5931\u8D25 ${msg.dispatchId}\uFF0C\u4ECD\u8BF7\u6C42\u505C\u6B62\uFF1A${String(error2)}`);
-        }
         const killed = await this.sessions.kill(msg.dispatchId);
         if (!killed && this.pendingDispatchIds.has(msg.dispatchId)) {
           this.cancelledPendingDispatchIds.add(msg.dispatchId);
@@ -268060,7 +268286,6 @@ var DaemonWsClient = class {
       // probe honest. See DaemonMeta.runtimeCapabilities for the split rationale.
       runtimeCapabilities: this.runtimes,
       nodeVersion: process.version,
-      ...this.recovery ? { supportsExecutionStopRecovery: true } : {},
       ...this.daemonVersion ? { daemonVersion: this.daemonVersion } : {},
       ...this.daemonPkg ? { daemonPkg: this.daemonPkg } : {},
       connectorReadiness: inspectConnectorRuntimeReadiness(),
@@ -268071,6 +268296,7 @@ var DaemonWsClient = class {
       // **恒 true**——归一层在 `_core` 里、与具体 adapter 无关，装了这版 daemon 就一定发。
       // 服务端据此决定是用节点归一还是自己就地归一；判据取能力位而不是「见过帧没有」，
       // 否则首个 chunk 之前那段窗口两边都不归一，正文会静默丢一截。
+      supportsTaskReplacement: true,
       supportsNormalizedEvents: true,
       ...activeSessions.length > 0 ? { activeSessions } : {},
       // 始终带字段（空数组也带）作为新协议能力标志；服务端仅对支持该字段的节点做缺席确认。
@@ -268219,7 +268445,6 @@ async function startNode(opts) {
     ...opts.daemonPkg ? { daemonPkg: opts.daemonPkg } : {},
     // chat 文件浏览 handler 用它定位会话目录；production 不传 = 与 adapter 同款默认根（~/.oasis/work）。
     ...opts.workRoot !== void 0 ? { workRoot: opts.workRoot } : {},
-    ...opts.sessionsRoot ? { sessionsRoot: opts.sessionsRoot } : {},
     ...opts.spawnSessionProcess ? { spawnSessionProcess: opts.spawnSessionProcess } : {},
     ...opts.countDetachedSessions ? { countDetachedSessions: opts.countDetachedSessions } : {}
   });
@@ -268270,7 +268495,7 @@ async function startNode(opts) {
 }
 
 // ../cli/src/exec.ts
-var os12 = __toESM(require("node:os"), 1);
+var os13 = __toESM(require("node:os"), 1);
 var UnsafeExecArgvError = class extends Error {
   code = "ERR_UNSAFE_EXEC_ARGV";
   constructor(message) {
@@ -268307,7 +268532,7 @@ function planExec(opts) {
 function computeExitCode(code2, signal) {
   if (code2 !== null) return code2;
   if (signal) {
-    const num3 = os12.constants.signals[signal];
+    const num3 = os13.constants.signals[signal];
     return 128 + (typeof num3 === "number" ? num3 : 1);
   }
   return 1;
@@ -268410,7 +268635,7 @@ init_src5();
 init_src6();
 
 // ../cli/src/workorder-attachments.ts
-var fs40 = __toESM(require("node:fs"), 1);
+var fs41 = __toESM(require("node:fs"), 1);
 var path36 = __toESM(require("node:path"), 1);
 init_src();
 var MIME_BY_EXTENSION = {
@@ -268459,7 +268684,7 @@ function parseLocalWorkorderAttachments(argv) {
   return out;
 }
 function readLocalWorkorderAttachment(input) {
-  const stat3 = fs40.statSync(input.path);
+  const stat3 = fs41.statSync(input.path);
   if (!stat3.isFile()) throw new Error(`\u9644\u4EF6\u4E0D\u662F\u6587\u4EF6\uFF1A${input.path}`);
   if (stat3.size > WORKORDER_ATTACHMENT_MAX_BYTES) {
     throw new Error(`\u9644\u4EF6\u300C${path36.basename(input.path)}\u300D\u8D85\u8FC7 10MB`);
@@ -268467,7 +268692,7 @@ function readLocalWorkorderAttachment(input) {
   return {
     name: path36.basename(input.path),
     contentType: input.contentType ?? inferAttachmentContentType(input.path),
-    contentBase64: fs40.readFileSync(input.path).toString("base64")
+    contentBase64: fs41.readFileSync(input.path).toString("base64")
   };
 }
 
@@ -270569,7 +270794,7 @@ function fieldsFromFlags(flags, ownFlags) {
   }
   return Object.keys(fields).length > 0 ? fields : void 0;
 }
-function buildStageOp(cmd, flags, positional, readFile9 = (file) => fs41.readFileSync(file, "utf8")) {
+function buildStageOp(cmd, flags, positional, readFile9 = (file) => fs42.readFileSync(file, "utf8")) {
   switch (cmd) {
     case "link":
       return {
@@ -270703,43 +270928,43 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const nodeTokenFile = path37.join(dir, "node-token");
     const enrollTokenFile = path37.join(dir, "enroll-token");
     const reportMarkerFile = path37.join(dir, "report-runtimes");
-    const persistedNodeId = fs41.existsSync(nodeIdFile) ? fs41.readFileSync(nodeIdFile, "utf8").trim() : null;
+    const persistedNodeId = fs42.existsSync(nodeIdFile) ? fs42.readFileSync(nodeIdFile, "utf8").trim() : null;
     let nodeId = persistedNodeId || resolveNodeId();
     const explicitToken = flags.get("token") ?? process.env["OASIS_NODE_TOKEN"];
-    let token2 = explicitToken ?? (fs41.existsSync(nodeTokenFile) ? fs41.readFileSync(nodeTokenFile, "utf8").trim() : void 0);
-    const enrollToken = flags.get("enroll-token") ?? process.env["OASIS_ENROLL_TOKEN"] ?? (fs41.existsSync(enrollTokenFile) ? fs41.readFileSync(enrollTokenFile, "utf8").trim() : void 0);
+    let token2 = explicitToken ?? (fs42.existsSync(nodeTokenFile) ? fs42.readFileSync(nodeTokenFile, "utf8").trim() : void 0);
+    const enrollToken = flags.get("enroll-token") ?? process.env["OASIS_ENROLL_TOKEN"] ?? (fs42.existsSync(enrollTokenFile) ? fs42.readFileSync(enrollTokenFile, "utf8").trim() : void 0);
     let freshEnrollment = false;
     if (enrollToken && !explicitToken) {
       const httpBase2 = serverUrl.replace(/^ws(s?):\/\//, "http$1://").replace(/\/node-gateway.*$/, "");
       const res = await fetch(`${httpBase2}/api/nodes/exchange`, {
         method: "POST",
         headers: { "content-type": "application/json" },
-        body: JSON.stringify({ enrollToken, nodeId, hostname: os13.hostname(), serverUrl, ...companyId ? { companyId } : {} })
+        body: JSON.stringify({ enrollToken, nodeId, hostname: os14.hostname(), serverUrl, ...companyId ? { companyId } : {} })
       });
       if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
       const body2 = await res.json();
       nodeId = body2.nodeId;
       token2 = body2.token;
-      fs41.mkdirSync(dir, { recursive: true });
-      fs41.writeFileSync(nodeIdFile, nodeId);
-      fs41.writeFileSync(nodeTokenFile, token2, { mode: 384 });
+      fs42.mkdirSync(dir, { recursive: true });
+      fs42.writeFileSync(nodeIdFile, nodeId);
+      fs42.writeFileSync(nodeTokenFile, token2, { mode: 384 });
       try {
-        fs41.unlinkSync(enrollTokenFile);
+        fs42.unlinkSync(enrollTokenFile);
       } catch {
       }
       freshEnrollment = true;
     }
     if (!nodeId) throw new Error("no nodeId \u2014 provide --enroll-token <ent_...> on first run");
-    const scriptRun = freshEnrollment || fs41.existsSync(reportMarkerFile);
+    const scriptRun = freshEnrollment || fs42.existsSync(reportMarkerFile);
     if (flags.has("service")) {
       const { spawnSync: spawnSync5, execSync: execSync2 } = await import("node:child_process");
       if (token2) {
-        fs41.mkdirSync(dir, { recursive: true });
-        fs41.writeFileSync(nodeTokenFile, token2, { mode: 384 });
+        fs42.mkdirSync(dir, { recursive: true });
+        fs42.writeFileSync(nodeTokenFile, token2, { mode: 384 });
       }
       if (scriptRun) {
-        fs41.mkdirSync(dir, { recursive: true });
-        fs41.writeFileSync(reportMarkerFile, "");
+        fs42.mkdirSync(dir, { recursive: true });
+        fs42.writeFileSync(reportMarkerFile, "");
       }
       println("\u2192 Installing oasis_test globally...");
       spawnSync5("npm", ["install", "-g", "oasis_test@latest"], { stdio: "inherit" });
@@ -270747,11 +270972,11 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const binPath = path37.join(prefix, "bin", "oasis_test");
       const svcArgs = `node --server-ws ${serverUrl} --dir ${dir}${nodeName ? ` --name ${nodeName}` : ""}`;
       if (process.platform === "linux") {
-        const svcFile = path37.join(os13.homedir(), ".config/systemd/user/oasis-node.service");
-        fs41.mkdirSync(path37.dirname(svcFile), { recursive: true });
+        const svcFile = path37.join(os14.homedir(), ".config/systemd/user/oasis-node.service");
+        fs42.mkdirSync(path37.dirname(svcFile), { recursive: true });
         if (spawnSync5("systemctl", ["--user", "is-active", "--quiet", "oasis-node"], {}).status === 0)
           spawnSync5("systemctl", ["--user", "stop", "oasis-node"], { stdio: "inherit" });
-        fs41.writeFileSync(svcFile, [
+        fs42.writeFileSync(svcFile, [
           "[Unit]",
           "Description=Oasis Node Daemon",
           "After=network.target",
@@ -270760,7 +270985,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
           `ExecStart=${binPath} ${svcArgs}`,
           // Carry the install-time PATH so the detached daemon detects CLIs in user dirs
           // (~/.npm-global/bin, ~/.local/bin) — systemd --user otherwise gives a minimal PATH.
-          `Environment=PATH=${process.env["PATH"] ?? ""}:${path37.join(os13.homedir(), ".npm-global/bin")}:${path37.join(os13.homedir(), ".local/bin")}:/usr/local/bin`,
+          `Environment=PATH=${process.env["PATH"] ?? ""}:${path37.join(os14.homedir(), ".npm-global/bin")}:${path37.join(os14.homedir(), ".local/bin")}:/usr/local/bin`,
           "Restart=on-failure",
           "RestartSec=5",
           "StandardOutput=journal",
@@ -270772,31 +270997,31 @@ async function runCli(argv, println = console.log, progressln = console.error) {
         ].join("\n"));
         spawnSync5("systemctl", ["--user", "daemon-reload"], { stdio: "inherit" });
         spawnSync5("systemctl", ["--user", "enable", "--now", "oasis-node"], { stdio: "inherit" });
-        spawnSync5("loginctl", ["enable-linger", os13.userInfo().username], { stdio: "ignore" });
+        spawnSync5("loginctl", ["enable-linger", os14.userInfo().username], { stdio: "ignore" });
         println("\u2713 Oasis node service started (systemd --user oasis-node)");
         println("  Status : systemctl --user status oasis-node");
         println("  Logs   : journalctl --user -u oasis-node -f");
         println("  Stop   : systemctl --user stop oasis-node");
       } else if (process.platform === "darwin") {
-        const plist = path37.join(os13.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
-        fs41.mkdirSync(path37.dirname(plist), { recursive: true });
+        const plist = path37.join(os14.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
+        fs42.mkdirSync(path37.dirname(plist), { recursive: true });
         spawnSync5("launchctl", ["unload", plist], { stdio: "ignore" });
         const argXml = [binPath, "node", "--server-ws", serverUrl, "--dir", dir, ...nodeName ? ["--name", nodeName] : []].map((a) => `<string>${a}</string>`).join("");
-        fs41.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os13.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os13.homedir()}/.oasis-node.err</string></dict></plist>`);
+        fs42.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os14.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os14.homedir()}/.oasis-node.err</string></dict></plist>`);
         spawnSync5("launchctl", ["load", plist], { stdio: "inherit" });
         println("\u2713 Oasis node service started (macOS LaunchAgent com.oasis.node)");
-        println(`  Logs : tail -f ${os13.homedir()}/.oasis-node.log`);
+        println(`  Logs : tail -f ${os14.homedir()}/.oasis-node.log`);
         println(`  Stop : launchctl unload ${plist}`);
       } else {
-        spawnSync5("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path37.join(os13.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
+        spawnSync5("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path37.join(os14.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
         println(`\u2713 Oasis node started in background (nohup). Logs: ~/.oasis-node.log`);
         println("  Note: no automatic restart on reboot in this environment.");
       }
       return;
     }
-    if (fs41.existsSync(reportMarkerFile)) {
+    if (fs42.existsSync(reportMarkerFile)) {
       try {
-        fs41.unlinkSync(reportMarkerFile);
+        fs42.unlinkSync(reportMarkerFile);
       } catch {
       }
     }
@@ -270877,7 +271102,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const outFile = flags.get("out");
     const lines = samples.map((sample) => JSON.stringify(sample)).join("\n");
     if (outFile !== void 0) {
-      fs41.writeFileSync(outFile, lines + (lines ? "\n" : ""));
+      fs42.writeFileSync(outFile, lines + (lines ? "\n" : ""));
       println(`\u5DF2\u5BFC\u51FA ${samples.length} \u6761\u8F68\u8FF9\u6837\u672C \u2192 ${outFile}\uFF08approved/rejected \u6210\u5BF9\u5373\u504F\u597D\u5BF9\uFF09`);
     } else {
       println(lines);
@@ -270887,8 +271112,8 @@ async function runCli(argv, println = console.log, progressln = console.error) {
   if (command === "serve" && positional[0] === "install") {
     const absDir = path37.resolve(dir);
     const name = `oasis-serve-${path37.basename(absDir)}`;
-    const unitDir = flags.get("unit-dir") ?? path37.join(os13.homedir(), ".config", "systemd", "user");
-    const bin = flags.get("bin") ?? path37.join(os13.homedir(), ".local", "bin", "oasis");
+    const unitDir = flags.get("unit-dir") ?? path37.join(os14.homedir(), ".config", "systemd", "user");
+    const bin = flags.get("bin") ?? path37.join(os14.homedir(), ".local", "bin", "oasis");
     const port = flags.get("port") ?? "7320";
     const extra = (flags.get("dispatch") === "true" ? ` --dispatch true` : "") + (flags.has("model") ? ` --model ${flags.get("model")}` : "");
     const unit = [
@@ -270905,9 +271130,9 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       `WantedBy=default.target`,
       ``
     ].join("\n");
-    fs41.mkdirSync(unitDir, { recursive: true });
+    fs42.mkdirSync(unitDir, { recursive: true });
     const unitPath = path37.join(unitDir, `${name}.service`);
-    fs41.writeFileSync(unitPath, unit);
+    fs42.writeFileSync(unitPath, unit);
     println(`\u5DF2\u5199\u5165 ${unitPath}`);
     println(`\u542F\u7528\uFF1Asystemctl --user daemon-reload && systemctl --user enable --now ${name}`);
     println(`\u5F00\u673A\u81EA\u542F\uFF08\u542B\u672A\u767B\u5F55\uFF09\uFF1Aloginctl enable-linger $USER`);
@@ -270953,7 +271178,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
   }
   const base = flags.get("server") ?? process.env["OASIS_SERVER"] ?? "http://127.0.0.1:7320";
   const tokenFile = path37.join(dir, "operator-token");
-  const token = flags.get("token") ?? process.env["OASIS_TOKEN"] ?? (fs41.existsSync(tokenFile) ? fs41.readFileSync(tokenFile, "utf8").trim() : void 0);
+  const token = flags.get("token") ?? process.env["OASIS_TOKEN"] ?? (fs42.existsSync(tokenFile) ? fs42.readFileSync(tokenFile, "utf8").trim() : void 0);
   if (!token) {
     throw new Error(`\u65E0 token\uFF1A\u5148 oasis serve\uFF08\u4F1A\u751F\u6210 ${tokenFile}\uFF09\uFF0C\u6216\u663E\u5F0F --token / $OASIS_TOKEN`);
   }
@@ -270964,7 +271189,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     println(JSON.stringify({ mode: flags.get("execute") === "true" ? "execute" : "dry-run", count: rows.length, records: rows }, null, 2));
     return;
   }
-  const readFileArg = (file) => fs41.readFileSync(file, "utf8");
+  const readFileArg = (file) => fs42.readFileSync(file, "utf8");
   const parseJsonFlag = (value2, name) => {
     const parsed = JSON.parse(value2);
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -270980,11 +271205,11 @@ async function runCli(argv, println = console.log, progressln = console.error) {
   const readDirFiles = (root) => {
     const out = [];
     const walk = (abs, rel) => {
-      for (const name of fs41.readdirSync(abs)) {
+      for (const name of fs42.readdirSync(abs)) {
         const childAbs = path37.join(abs, name);
         const childRel = rel ? `${rel}/${name}` : name;
-        if (fs41.statSync(childAbs).isDirectory()) walk(childAbs, childRel);
-        else out.push({ path: childRel, contentBase64: fs41.readFileSync(childAbs).toString("base64") });
+        if (fs42.statSync(childAbs).isDirectory()) walk(childAbs, childRel);
+        else out.push({ path: childRel, contentBase64: fs42.readFileSync(childAbs).toString("base64") });
       }
     };
     walk(root, "");
@@ -271041,7 +271266,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     if (items.length > ATTACHMENT_MAX_COUNT) throw new Error(`\u9644\u4EF6\u6700\u591A ${ATTACHMENT_MAX_COUNT} \u4E2A`);
     const uploaded = [];
     for (const item of items) {
-      const st = fs41.statSync(item.file);
+      const st = fs42.statSync(item.file);
       if (!st.isFile()) throw new Error(`\u9644\u4EF6\u4E0D\u662F\u6587\u4EF6\uFF1A${item.file}`);
       if (st.size > ATTACHMENT_MAX_BYTES) throw new Error(`\u9644\u4EF6\u8D85\u8FC7 10MB\uFF1A${item.file}`);
       const contentType = item.contentType ?? mimeOf(item.file);
@@ -271049,7 +271274,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const res = await api.post("/api/chat/attachments", {
         name,
         contentType,
-        contentBase64: fs41.readFileSync(item.file).toString("base64")
+        contentBase64: fs42.readFileSync(item.file).toString("base64")
       });
       if (!res.blobRef) throw new Error(`\u9644\u4EF6\u4E0A\u4F20\u672A\u8FD4\u56DE blobRef\uFF1A${item.file}`);
       uploaded.push({ name, contentType, url: blobUrlOf(res.blobRef) });
@@ -271300,16 +271525,16 @@ Trace: ${run.traceRunId}`);
         const url = flags.get("url");
         if (Boolean(file) === Boolean(url)) throw new Error("oasis kb ingest \u5FC5\u987B\u4E14\u53EA\u80FD\u4F20 --file \u6216 --url");
         if (file) {
-          if (!fs41.existsSync(file) || !fs41.statSync(file).isFile()) throw new Error(`\u5165\u5E93\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${file}`);
+          if (!fs42.existsSync(file) || !fs42.statSync(file).isFile()) throw new Error(`\u5165\u5E93\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${file}`);
           const extension3 = path37.extname(file).toLowerCase();
           if (![".md", ".txt", ".pdf"].includes(extension3)) throw new Error("V1 \u53EA\u652F\u6301 Markdown\u3001TXT \u548C PDF \u6587\u4EF6");
-          if (fs41.statSync(file).size > ATTACHMENT_MAX_BYTES) throw new Error(`\u5165\u5E93\u6587\u4EF6\u8D85\u8FC7 10MB\uFF1A${file}`);
+          if (fs42.statSync(file).size > ATTACHMENT_MAX_BYTES) throw new Error(`\u5165\u5E93\u6587\u4EF6\u8D85\u8FC7 10MB\uFF1A${file}`);
           const name = path37.basename(file);
           const contentType = mimeOf(file);
           const uploaded = await api.post("/api/chat/attachments", {
             name,
             contentType,
-            contentBase64: fs41.readFileSync(file).toString("base64")
+            contentBase64: fs42.readFileSync(file).toString("base64")
           });
           if (!uploaded.blobRef) throw new Error("\u9644\u4EF6\u4E0A\u4F20\u672A\u8FD4\u56DE blobRef");
           request2 = { action: "ingest", attachmentRef: uploaded.blobRef, attachmentName: name, attachmentContentType: contentType };
@@ -271363,7 +271588,7 @@ Trace: ${run.traceRunId}`);
       const cleanup = async () => {
         if (tmpDir) {
           try {
-            await fs41.promises.rm(tmpDir, { recursive: true, force: true });
+            await fs42.promises.rm(tmpDir, { recursive: true, force: true });
           } catch {
           }
         }
@@ -271371,9 +271596,9 @@ Trace: ${run.traceRunId}`);
       if (plan.inject.mode === "env") {
         childEnv[plan.inject.envName] = value2;
       } else {
-        tmpDir = await fs41.promises.mkdtemp(path37.join(os13.tmpdir(), "oasis-var-exec-"));
+        tmpDir = await fs42.promises.mkdtemp(path37.join(os14.tmpdir(), "oasis-var-exec-"));
         const keyfile = path37.join(tmpDir, "value");
-        await fs41.promises.writeFile(keyfile, value2, { mode: 384 });
+        await fs42.promises.writeFile(keyfile, value2, { mode: 384 });
         childEnv[plan.inject.fileEnv] = keyfile;
       }
       const { spawn: spawn5 } = await import("node:child_process");
@@ -271689,7 +271914,7 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
       break;
     }
     case "create-workorder": {
-      const planRaw = flags.get("plan-file") !== void 0 ? fs41.readFileSync(flags.get("plan-file"), "utf8") : flags.get("plan");
+      const planRaw = flags.get("plan-file") !== void 0 ? fs42.readFileSync(flags.get("plan-file"), "utf8") : flags.get("plan");
       const acceptanceFlag = flags.get("acceptance");
       const type = need(flags, "type");
       const title = need(flags, "title");
@@ -271908,7 +272133,7 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         if (verb === "add") {
           const file = flags.get("file");
           if (file !== void 0) {
-            const bytes2 = fs41.readFileSync(file);
+            const bytes2 = fs42.readFileSync(file);
             const res = await api.request("POST", `/api/projects/${encodeURIComponent(projectId2)}/files`, {
               name: flags.get("name") ?? path37.basename(file),
               ...flags.has("path") ? { path: flags.get("path") } : {},
@@ -272082,14 +272307,14 @@ ${res.warning}`);
       const LEGACY_DESIGN_SYSTEM_PROMPT = "\u4F60\u662F\u8BBE\u8BA1\u5F15\u64CE\u4E2D\u7684\u754C\u9762\u8BBE\u8BA1\u5E08\u3002\u4EFB\u52A1\u4E66\u89C1\u672C\u6761\u6D88\u606F\uFF1B\u4E0A\u6E38\u8F93\u5165\u7B49\u4E0A\u4E0B\u6587\u6587\u4EF6\u5728\u9879\u76EE task-context/ \u76EE\u5F55\u3002\u6309\u4EFB\u52A1\u4E66\u7684\u300C\u600E\u4E48\u63D0\u4EA4\u300D\u534F\u8BAE\u5DE5\u4F5C\uFF1A\u4EA7\u51FA\u81EA\u5305\u542B HTML \u5165\u53E3\u7A3F\u4E0E acceptance.md\uFF0C\u5B8C\u6210\u5373\u7ED3\u675F\u56DE\u590D\uFF0C\u4EA4\u7A3F\u7531\u7CFB\u7EDF\u4EE3\u529E\u3002";
       if (sub === "chat") {
         const artifactId2 = needPos(positional, 1, "oasis design chat <artifactId> --message <t>");
-        const message2 = flags.get("message") ?? (["DESIGN_BRIEF.md", "TASK.md"].map((f2) => fs41.existsSync(f2) ? fs41.readFileSync(f2, "utf8") : "").find((s2) => s2.trim()) ?? "");
+        const message2 = flags.get("message") ?? (["DESIGN_BRIEF.md", "TASK.md"].map((f2) => fs42.existsSync(f2) ? fs42.readFileSync(f2, "utf8") : "").find((s2) => s2.trim()) ?? "");
         if (!message2.trim()) throw new Error("\u65E0\u5BF9\u8BDD\u5185\u5BB9\uFF1A\u7ED9 --message <text>\uFF0C\u6216\u5728\u5F53\u524D\u76EE\u5F55\u653E DESIGN_BRIEF.md / TASK.md");
         const odBase2 = (flags.get("od-url") ?? process.env["OASIS_OPEN_DESIGN_URL"] ?? "http://127.0.0.1:7457").replace(/\/$/, "");
         const isContinue = flags.get("turn") === "continue";
         const contextFiles2 = {};
         if (!isContinue) {
           contextFiles2["DESIGN_BRIEF.md"] = message2;
-          if (fs41.existsSync("inputs") && fs41.statSync("inputs").isDirectory()) {
+          if (fs42.existsSync("inputs") && fs42.statSync("inputs").isDirectory()) {
             for (const f2 of readDirFiles("inputs")) {
               contextFiles2[`inputs/${f2.path}`] = Buffer.from(f2.contentBase64, "base64").toString("utf8");
             }
@@ -272145,7 +272370,7 @@ ${res.warning}`);
         for (const a of st.artifacts) println(`  - ${a.path}\uFF08${a.kind ?? "?"}\uFF09status=${a.status ?? "?"}${a.mtime ? ` \xB7 ${new Date(a.mtime).toISOString()}` : ""}`);
         if (flags.get("pull") === "true") {
           const odPublic2 = (flags.get("od-public-url") ?? process.env["OASIS_OPEN_DESIGN_PUBLIC_URL"] ?? "https://design.open-friday.com").replace(/\/$/, "");
-          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os13.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
+          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os14.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
           println(`[design] \u5DF2\u62C9\u5230\u672C\u5730\uFF1A${dir3}\uFF08\u5165\u53E3 ${entry2}\uFF09`);
           println(`[design] \u8BFB\u5B8C\u6EE1\u610F\u5373\u4EA4\u7A3F\uFF1Aoasis propose ${artifactId2} --from-dir ${dir3} --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"`);
         } else {
@@ -272157,11 +272382,11 @@ ${res.warning}`);
       const artifactId = needPos(positional, 1, "oasis design run <artifactId>");
       const odBase = (flags.get("od-url") ?? process.env["OASIS_OPEN_DESIGN_URL"] ?? "http://127.0.0.1:7457").replace(/\/$/, "");
       const odPublic = (flags.get("od-public-url") ?? process.env["OASIS_OPEN_DESIGN_PUBLIC_URL"] ?? "https://design.open-friday.com").replace(/\/$/, "");
-      const briefFile = ["DESIGN_BRIEF.md", "TASK.md"].find((f2) => fs41.existsSync(f2));
-      const brief = flags.get("brief") ?? (briefFile ? fs41.readFileSync(briefFile, "utf8") : "");
+      const briefFile = ["DESIGN_BRIEF.md", "TASK.md"].find((f2) => fs42.existsSync(f2));
+      const brief = flags.get("brief") ?? (briefFile ? fs42.readFileSync(briefFile, "utf8") : "");
       if (!brief.trim()) throw new Error("\u65E0\u8BBE\u8BA1\u4EFB\u52A1\uFF1A\u7ED9 --brief <text>\uFF0C\u6216\u5728\u5F53\u524D\u76EE\u5F55\u653E DESIGN_BRIEF.md / TASK.md");
       const contextFiles = { "DESIGN_BRIEF.md": brief };
-      if (fs41.existsSync("inputs") && fs41.statSync("inputs").isDirectory()) {
+      if (fs42.existsSync("inputs") && fs42.statSync("inputs").isDirectory()) {
         for (const f2 of readDirFiles("inputs")) {
           contextFiles[`inputs/${f2.path}`] = Buffer.from(f2.contentBase64, "base64").toString("utf8");
         }
@@ -272675,22 +272900,22 @@ ${res.warning}`);
       }
       if (sub === "push") {
         const dir2 = needPos(positional, 1, "oasis skill push <\u76EE\u5F55> [--scope self|all|actors]");
-        if (!fs41.existsSync(dir2) || !fs41.statSync(dir2).isDirectory()) throw new Error(`\u6280\u80FD\u76EE\u5F55\u4E0D\u5B58\u5728\uFF1A${dir2}`);
+        if (!fs42.existsSync(dir2) || !fs42.statSync(dir2).isDirectory()) throw new Error(`\u6280\u80FD\u76EE\u5F55\u4E0D\u5B58\u5728\uFF1A${dir2}`);
         const SKIP2 = /* @__PURE__ */ new Set([".git", "node_modules", ".DS_Store"]);
         const MAX_FILE_BYTES5 = 1 << 20;
         const MAX_FILE_COUNT2 = 128;
         const local = {};
         const binary = [];
         const walk = (abs, rel) => {
-          for (const name2 of fs41.readdirSync(abs).sort()) {
+          for (const name2 of fs42.readdirSync(abs).sort()) {
             if (SKIP2.has(name2)) continue;
             const childAbs = path37.join(abs, name2);
             const childRel = rel ? `${rel}/${name2}` : name2;
-            if (fs41.statSync(childAbs).isDirectory()) {
+            if (fs42.statSync(childAbs).isDirectory()) {
               walk(childAbs, childRel);
               continue;
             }
-            const buf = fs41.readFileSync(childAbs);
+            const buf = fs42.readFileSync(childAbs);
             if (buf.length > MAX_FILE_BYTES5) throw new Error(`\u6280\u80FD\u6587\u4EF6\u8D85\u8FC7 1MiB\uFF1A${childRel}\uFF08${buf.length} \u5B57\u8282\uFF09`);
             if (buf.includes(0)) {
               binary.push(childRel);
@@ -273639,14 +273864,14 @@ ${res.warning}`);
 init_src8();
 
 // src/session-sweep.ts
-var fs42 = __toESM(require("node:fs"));
+var fs43 = __toESM(require("node:fs"));
 var path38 = __toESM(require("node:path"));
 function liveSessionPinnedLabels(sessionRoots2, deps) {
   const labels = /* @__PURE__ */ new Set();
   for (const root of sessionRoots2) {
     let dirs;
     try {
-      dirs = fs42.readdirSync(root);
+      dirs = fs43.readdirSync(root);
     } catch {
       continue;
     }
@@ -273655,7 +273880,7 @@ function liveSessionPinnedLabels(sessionRoots2, deps) {
       const live = deps.flockAvailable ? deps.isLocked(path38.join(sessionDir, "lock")) : true;
       if (!live) continue;
       try {
-        const label = fs42.readFileSync(path38.join(sessionDir, "pinned-version"), "utf8").trim();
+        const label = fs43.readFileSync(path38.join(sessionDir, "pinned-version"), "utf8").trim();
         if (label) labels.add(label);
       } catch {
       }
@@ -273671,7 +273896,7 @@ function sweepOrphanSessions(sessionRoots2, deps) {
   for (const root of sessionRoots2) {
     let dirs;
     try {
-      dirs = fs42.readdirSync(root);
+      dirs = fs43.readdirSync(root);
     } catch {
       continue;
     }
@@ -273679,12 +273904,12 @@ function sweepOrphanSessions(sessionRoots2, deps) {
       const sessionDir = path38.join(root, d);
       if (deps.isLocked(path38.join(sessionDir, "lock"))) continue;
       try {
-        if (now() - fs42.statSync(sessionDir).mtimeMs < minAgeMs) continue;
+        if (now() - fs43.statSync(sessionDir).mtimeMs < minAgeMs) continue;
       } catch {
         continue;
       }
       try {
-        fs42.rmSync(sessionDir, { recursive: true, force: true });
+        fs43.rmSync(sessionDir, { recursive: true, force: true });
         removed.push(sessionDir);
       } catch {
       }
@@ -273698,7 +273923,7 @@ function countLiveSessions(sessionRoots2, deps) {
   for (const root of sessionRoots2) {
     let dirs;
     try {
-      dirs = fs42.readdirSync(root);
+      dirs = fs43.readdirSync(root);
     } catch {
       continue;
     }
@@ -273711,7 +273936,7 @@ function countLiveSessions(sessionRoots2, deps) {
 init_src8();
 
 // src/runtime-assets.ts
-var fs43 = __toESM(require("node:fs"));
+var fs44 = __toESM(require("node:fs"));
 var path39 = __toESM(require("node:path"));
 var ASSET_EXTS = [".sh", ".mjs"];
 var SESSION_SCOPED_PREFIXES = ["oasis-conn-", "oasis-wrappers-", "oasis-cli-"];
@@ -273727,7 +273952,7 @@ function installRuntimeAssets(srcRoot, binDir) {
   let copied = 0;
   let entries;
   try {
-    entries = fs43.readdirSync(srcRoot, { withFileTypes: true });
+    entries = fs44.readdirSync(srcRoot, { withFileTypes: true });
   } catch {
     return 0;
   }
@@ -273736,24 +273961,24 @@ function installRuntimeAssets(srcRoot, binDir) {
     const srcDir = path39.join(srcRoot, entry.name);
     let files;
     try {
-      files = fs43.readdirSync(srcDir).filter((f2) => ASSET_EXTS.some((ext) => f2.endsWith(ext)));
+      files = fs44.readdirSync(srcDir).filter((f2) => ASSET_EXTS.some((ext) => f2.endsWith(ext)));
     } catch {
       continue;
     }
     if (files.length === 0) continue;
     const destDir = path39.join(binDir, entry.name);
-    fs43.mkdirSync(destDir, { recursive: true });
+    fs44.mkdirSync(destDir, { recursive: true });
     for (const f2 of files) {
       const dest = path39.join(destDir, f2);
-      fs43.copyFileSync(path39.join(srcDir, f2), dest);
-      fs43.chmodSync(dest, 493);
+      fs44.copyFileSync(path39.join(srcDir, f2), dest);
+      fs44.chmodSync(dest, 493);
       copied++;
     }
   }
   return copied;
 }
 function syncRuntimeAssets(candidateRoots, binDir) {
-  fs43.mkdirSync(binDir, { recursive: true });
+  fs44.mkdirSync(binDir, { recursive: true });
   for (const root of candidateRoots) {
     const copied = installRuntimeAssets(root, binDir);
     if (copied > 0) return { from: root, copied };
@@ -273764,7 +273989,7 @@ function runtimeAssetSourceRoots(input) {
   const roots = [];
   if (input.executingBundle) roots.push(path39.dirname(input.executingBundle));
   try {
-    roots.push(fs43.realpathSync(input.currentLink));
+    roots.push(fs44.realpathSync(input.currentLink));
   } catch {
   }
   roots.push(input.packageDist);
@@ -273772,11 +273997,11 @@ function runtimeAssetSourceRoots(input) {
 }
 
 // src/paths.ts
-var fs44 = __toESM(require("node:fs"));
-var os14 = __toESM(require("node:os"));
+var fs45 = __toESM(require("node:fs"));
+var os15 = __toESM(require("node:os"));
 var path40 = __toESM(require("node:path"));
 var DEFAULT_INSTANCE = "default";
-var home = () => os14.homedir();
+var home = () => os15.homedir();
 var oasisDir = () => path40.join(home(), ".oasis");
 var versionsDir = () => path40.join(oasisDir(), "versions");
 var versionDir = (label) => path40.join(versionsDir(), label);
@@ -273806,17 +274031,17 @@ function instancePaths(name) {
 }
 function listInstances() {
   const found = [];
-  if (fs44.existsSync(instancePaths(DEFAULT_INSTANCE).configFile)) found.push(DEFAULT_INSTANCE);
+  if (fs45.existsSync(instancePaths(DEFAULT_INSTANCE).configFile)) found.push(DEFAULT_INSTANCE);
   let entries = [];
   try {
-    entries = fs44.readdirSync(instancesRoot());
+    entries = fs45.readdirSync(instancesRoot());
   } catch {
     return found;
   }
   for (const name of entries.sort()) {
     if (name === DEFAULT_INSTANCE) continue;
     if (!isValidInstanceName(name)) continue;
-    if (fs44.existsSync(instancePaths(name).configFile)) found.push(name);
+    if (fs45.existsSync(instancePaths(name).configFile)) found.push(name);
   }
   return found;
 }
@@ -273824,7 +274049,7 @@ function referencedVersionLabels() {
   const labels = /* @__PURE__ */ new Set();
   for (const name of listInstances()) {
     try {
-      labels.add(path40.basename(fs44.realpathSync(instancePaths(name).currentLink)));
+      labels.add(path40.basename(fs45.realpathSync(instancePaths(name).currentLink)));
     } catch {
     }
   }
@@ -273849,12 +274074,12 @@ var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 
 // src/install.ts
 var import_node_crypto84 = require("node:crypto");
-var fs45 = __toESM(require("node:fs"));
+var fs46 = __toESM(require("node:fs"));
 var path41 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto84.createHash)("sha256").update(fs45.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto84.createHash)("sha256").update(fs46.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -273865,14 +274090,14 @@ function isFromNpmPrefix(sourceFile, npmPrefixDir) {
 var isLocalLabel = (label) => /(?:^|[+.])local\.[0-9a-f]{8}$/.test(label);
 function installBinaryAtomic(sourceFile, targetPath) {
   if (realpathOrSelf(sourceFile) === realpathOrSelf(targetPath)) return;
-  fs45.mkdirSync(path41.dirname(targetPath), { recursive: true });
+  fs46.mkdirSync(path41.dirname(targetPath), { recursive: true });
   const tmp = `${targetPath}.tmp.${process.pid}`;
   try {
-    fs45.copyFileSync(sourceFile, tmp);
-    fs45.renameSync(tmp, targetPath);
+    fs46.copyFileSync(sourceFile, tmp);
+    fs46.renameSync(tmp, targetPath);
   } catch (e) {
     try {
-      fs45.unlinkSync(tmp);
+      fs46.unlinkSync(tmp);
     } catch {
     }
     throw e;
@@ -273880,24 +274105,24 @@ function installBinaryAtomic(sourceFile, targetPath) {
 }
 var realpathOrSelf = (p2) => {
   try {
-    return fs45.realpathSync(p2);
+    return fs46.realpathSync(p2);
   } catch {
     return path41.resolve(p2);
   }
 };
 function pointCurrentAt(linkPath, targetDir) {
-  fs45.mkdirSync(path41.dirname(linkPath), { recursive: true });
+  fs46.mkdirSync(path41.dirname(linkPath), { recursive: true });
   const tmp = `${linkPath}.tmp.${process.pid}`;
   try {
-    fs45.unlinkSync(tmp);
+    fs46.unlinkSync(tmp);
   } catch {
   }
-  fs45.symlinkSync(targetDir, tmp, "dir");
+  fs46.symlinkSync(targetDir, tmp, "dir");
   try {
-    fs45.renameSync(tmp, linkPath);
+    fs46.renameSync(tmp, linkPath);
   } catch (e) {
     try {
-      fs45.unlinkSync(tmp);
+      fs46.unlinkSync(tmp);
     } catch {
     }
     throw new Error(`\u65E0\u6CD5\u628A ${linkPath} \u6307\u5411 ${targetDir}\uFF1A${String(e)}\uFF08\u82E5\u5B83\u662F\u771F\u76EE\u5F55\uFF0C\u5220\u6389\u540E\u91CD\u8DD1\uFF09`);
@@ -273910,14 +274135,14 @@ function gcVersions(versionsDirPath, opts) {
   const now = opts.now ?? Date.now();
   let entries;
   try {
-    entries = fs45.readdirSync(versionsDirPath);
+    entries = fs46.readdirSync(versionsDirPath);
   } catch {
     return [];
   }
   const candidates = entries.filter((name) => !keep.has(name) && !name.includes(".tmp.")).map((name) => {
     const full = path41.join(versionsDirPath, name);
     try {
-      const st = fs45.statSync(full);
+      const st = fs46.statSync(full);
       return st.isDirectory() ? { name, full, mtime: st.mtimeMs } : null;
     } catch {
       return null;
@@ -273927,7 +274152,7 @@ function gcVersions(versionsDirPath, opts) {
   for (const c of candidates.slice(keepSpare)) {
     if (now - c.mtime < minAgeMs) continue;
     try {
-      fs45.rmSync(c.full, { recursive: true, force: true });
+      fs46.rmSync(c.full, { recursive: true, force: true });
       deleted.push(c.name);
     } catch {
     }
@@ -273977,7 +274202,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.23" : "dev";
+var PKG_VERSION = true ? "2.2.24" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -274018,18 +274243,18 @@ var parseFlags = (argv) => {
 };
 var readConfig = () => {
   try {
-    return JSON.parse(fs46.readFileSync(CONFIG_FILE, "utf8"));
+    return JSON.parse(fs47.readFileSync(CONFIG_FILE, "utf8"));
   } catch {
     return null;
   }
 };
 var saveConfig = (c) => {
-  fs46.mkdirSync(INST.dir, { recursive: true });
-  fs46.writeFileSync(CONFIG_FILE, JSON.stringify(c), { mode: 384 });
+  fs47.mkdirSync(INST.dir, { recursive: true });
+  fs47.writeFileSync(CONFIG_FILE, JSON.stringify(c), { mode: 384 });
 };
 var readPidAt = (file) => {
   try {
-    const p2 = parseInt(fs46.readFileSync(file, "utf8").trim(), 10);
+    const p2 = parseInt(fs47.readFileSync(file, "utf8").trim(), 10);
     return isNaN(p2) ? null : p2;
   } catch {
     return null;
@@ -274038,7 +274263,7 @@ var readPidAt = (file) => {
 var readPid = () => readPidAt(PID_FILE);
 var readConfigAt = (file) => {
   try {
-    return JSON.parse(fs46.readFileSync(file, "utf8"));
+    return JSON.parse(fs47.readFileSync(file, "utf8"));
   } catch {
     return null;
   }
@@ -274073,8 +274298,8 @@ function installSoftware(label) {
   installBinaryAtomic(src, BIN_FILE);
   ensureRuntimeAssets(BIN_DIR);
   pointCurrentAt(INST.currentLink, vDir);
-  fs46.mkdirSync(path42.dirname(LOCAL_BIN), { recursive: true });
-  fs46.writeFileSync(LOCAL_BIN, shimScript(), { mode: 493 });
+  fs47.mkdirSync(path42.dirname(LOCAL_BIN), { recursive: true });
+  fs47.writeFileSync(LOCAL_BIN, shimScript(), { mode: 493 });
   const keep = [.../* @__PURE__ */ new Set([label, ...referencedVersionLabels(), ...liveSessionPinnedLabels(sessionRoots(), { isLocked: isSessionLocked, flockAvailable: hasFlock() })])];
   const removed = gcVersions(versionsDir(), { keep });
   if (removed.length) console.error(`[oasis] \u7248\u672C GC\uFF1A\u5220\u9664 ${removed.join(", ")}\uFF08\u5728\u7528\uFF1A${keep.join(", ")}\uFF09`);
@@ -274083,7 +274308,7 @@ function installSoftware(label) {
 function setupAutostart(name) {
   const inst = instancePaths(name);
   const cmd = `${process.execPath} "${inst.binFile}" --_daemon --instance ${name}`;
-  const home2 = os15.homedir();
+  const home2 = os16.homedir();
   const pnpmHome = process.env["PNPM_HOME"] || path42.join(home2, ".local", "share", "pnpm");
   const extraBins = [
     path42.join(home2, ".npm-global", "bin"),
@@ -274093,11 +274318,11 @@ function setupAutostart(name) {
   ];
   const daemonPath = sanitizeDaemonPath([process.env["PATH"] ?? "", ...extraBins].filter(Boolean).join(":"));
   if (process.platform === "linux") {
-    const unitDir = path42.join(os15.homedir(), ".config", "systemd", "user");
-    fs46.mkdirSync(unitDir, { recursive: true });
+    const unitDir = path42.join(os16.homedir(), ".config", "systemd", "user");
+    fs47.mkdirSync(unitDir, { recursive: true });
     const unit = systemdUnitName(name);
-    fs46.mkdirSync(path42.dirname(inst.logFile), { recursive: true });
-    fs46.writeFileSync(path42.join(unitDir, unit), systemdUnitText({
+    fs47.mkdirSync(path42.dirname(inst.logFile), { recursive: true });
+    fs47.writeFileSync(path42.join(unitDir, unit), systemdUnitText({
       name,
       cmd,
       daemonPath,
@@ -274118,9 +274343,9 @@ function setupAutostart(name) {
     return false;
   } else if (process.platform === "darwin") {
     const label = launchdLabel(name);
-    const plist = path42.join(os15.homedir(), "Library", "LaunchAgents", `${label}.plist`);
-    fs46.mkdirSync(path42.dirname(plist), { recursive: true });
-    fs46.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?>
+    const plist = path42.join(os16.homedir(), "Library", "LaunchAgents", `${label}.plist`);
+    fs47.mkdirSync(path42.dirname(plist), { recursive: true });
+    fs47.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0"><dict>
   <key>Label</key><string>${label}</string>
@@ -274140,8 +274365,8 @@ function setupAutostart(name) {
   return false;
 }
 function spawnDaemon() {
-  fs46.mkdirSync(path42.dirname(LOG_FILE), { recursive: true });
-  const log3 = fs46.openSync(LOG_FILE, "a");
+  fs47.mkdirSync(path42.dirname(LOG_FILE), { recursive: true });
+  const log3 = fs47.openSync(LOG_FILE, "a");
   const child = (0, import_node_child_process20.spawn)(process.execPath, [INST.binFile, "--_daemon", "--instance", INSTANCE], {
     detached: true,
     stdio: ["ignore", log3, log3],
@@ -274162,7 +274387,7 @@ function stopDaemon(name) {
     }
   }
   try {
-    fs46.unlinkSync(inst.pidFile);
+    fs47.unlinkSync(inst.pidFile);
   } catch {
   }
   if (process.platform === "linux") {
@@ -274228,7 +274453,7 @@ function selfUpdate(targetPkg) {
       return false;
     }
   })();
-  const log3 = fs46.openSync(LOG_FILE, "a");
+  const log3 = fs47.openSync(LOG_FILE, "a");
   if (hasSystemd) {
     const child = (0, import_node_child_process20.spawn)("systemd-run", ["--user", "--scope", "--quiet", "sh", "-c", inner], {
       detached: true,
@@ -274250,13 +274475,13 @@ function resolveInstance(explicit) {
 }
 function currentLabelOf(inst) {
   try {
-    return path42.basename(fs46.realpathSync(inst.currentLink));
+    return path42.basename(fs47.realpathSync(inst.currentLink));
   } catch {
     return null;
   }
 }
 function instanceHasSoftware(inst) {
-  return fs46.existsSync(inst.binFile) && currentLabelOf(inst) !== null;
+  return fs47.existsSync(inst.binFile) && currentLabelOf(inst) !== null;
 }
 function newInstanceName() {
   const existing = new Set(listInstances());
@@ -274269,7 +274494,7 @@ function newInstanceName() {
 function planStart(explicit, serverUrl, companyId) {
   if (explicit) {
     const name = resolveInstance(explicit);
-    return { mode: fs46.existsSync(instancePaths(name).configFile) ? "resume" : "new", names: [name] };
+    return { mode: fs47.existsSync(instancePaths(name).configFile) ? "resume" : "new", names: [name] };
   }
   const all2 = listInstances();
   if (all2.length === 0) return { mode: "new", names: [DEFAULT_INSTANCE] };
@@ -274300,7 +274525,7 @@ async function startOneInstance(o) {
     const res = await fetch(`${httpBase(serverUrl)}/api/nodes/exchange`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os15.hostname(), serverUrl, ...companyId ? { companyId } : {} })
+      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os16.hostname(), serverUrl, ...companyId ? { companyId } : {} })
     });
     if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
     const body2 = await res.json();
@@ -274340,8 +274565,8 @@ async function startOneInstance(o) {
     const cfgNow = readConfig();
     if (cfgNow && !cfgNow.pkgName) saveConfig({ ...cfgNow, pkgName: BUILT_PKG_NAME });
   } else {
-    fs46.mkdirSync(path42.dirname(LOCAL_BIN), { recursive: true });
-    fs46.writeFileSync(LOCAL_BIN, shimScript(), { mode: 493 });
+    fs47.mkdirSync(path42.dirname(LOCAL_BIN), { recursive: true });
+    fs47.writeFileSync(LOCAL_BIN, shimScript(), { mode: 493 });
   }
   const pidNow = readPid();
   const alive2 = !!pidNow && isRunning2(pidNow);
@@ -274365,7 +274590,7 @@ function derivedNodeIdFor(name) {
   if (name === DEFAULT_INSTANCE) return resolveNodeId();
   const user = (() => {
     try {
-      return os15.userInfo().username;
+      return os16.userInfo().username;
     } catch {
       return process.env["USER"] ?? process.env["USERNAME"] ?? "unknown";
     }
@@ -274385,10 +274610,10 @@ function spawnSessionProcess(spec) {
   try {
     const safe = spec.dispatchId.replace(/[^A-Za-z0-9._-]/g, "_");
     const dir = path42.join(INST.sessionsDir, safe);
-    fs46.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs47.mkdirSync(dir, { recursive: true, mode: 448 });
     const specFile = path42.join(dir, "spec.json");
     const cfg = readConfig();
-    fs46.writeFileSync(specFile, JSON.stringify({
+    fs47.writeFileSync(specFile, JSON.stringify({
       ...spec,
       sessionDir: dir,
       nodeId: cfg?.nodeId ?? INSTANCE,
@@ -274397,19 +274622,24 @@ function spawnSessionProcess(spec) {
     }), { mode: 384 });
     let pinnedDir = INST.currentLink;
     try {
-      pinnedDir = fs46.realpathSync(INST.currentLink);
+      pinnedDir = fs47.realpathSync(INST.currentLink);
     } catch {
     }
     try {
-      fs46.writeFileSync(path42.join(dir, "pinned-version"), path42.basename(pinnedDir));
+      fs47.writeFileSync(path42.join(dir, "pinned-version"), path42.basename(pinnedDir));
     } catch {
     }
-    const logFd = fs46.openSync(path42.join(dir, "session.log"), "a");
+    const logFd = fs47.openSync(path42.join(dir, "session.log"), "a");
     const argv = [INST.binFile, "--_session", specFile];
-    const env = { ...process.env, OASIS_CLI_HOME: pinnedDir };
+    const executionEnv = spec.job.execution ? {
+      OASIS_EXECUTION_KEY: spec.job.execution.key,
+      OASIS_EXECUTION_GENERATION: String(spec.job.execution.generation),
+      OASIS_EXECUTION_DISPATCH_ID: spec.dispatchId
+    } : {};
+    const env = { ...process.env, ...executionEnv, OASIS_CLI_HOME: pinnedDir };
     const child = userScopeAvailable() ? (0, import_node_child_process20.spawn)(
       "systemd-run",
-      ["--user", "--scope", "--quiet", `--setenv=OASIS_CLI_HOME=${pinnedDir}`, process.execPath, ...argv],
+      ["--user", "--scope", "--quiet", `--setenv=OASIS_CLI_HOME=${pinnedDir}`, ...Object.entries(executionEnv).map(([key, value2]) => `--setenv=${key}=${value2}`), process.execPath, ...argv],
       { detached: true, stdio: ["ignore", logFd, logFd], env }
     ) : (0, import_node_child_process20.spawn)(process.execPath, argv, { detached: true, stdio: ["ignore", logFd, logFd], env });
     child.unref();
@@ -274452,9 +274682,9 @@ void (async () => {
       process.exit(1);
     }
     try {
-      const fd = fs46.openSync(PID_FILE, "wx");
-      fs46.writeSync(fd, String(process.pid));
-      fs46.closeSync(fd);
+      const fd = fs47.openSync(PID_FILE, "wx");
+      fs47.writeSync(fd, String(process.pid));
+      fs47.closeSync(fd);
     } catch {
       const alivePid = readPid();
       if (alivePid && alivePid !== process.pid && isRunning2(alivePid)) {
@@ -274462,13 +274692,13 @@ void (async () => {
         process.exit(0);
       }
       try {
-        fs46.writeFileSync(PID_FILE, String(process.pid));
+        fs47.writeFileSync(PID_FILE, String(process.pid));
       } catch {
       }
     }
     const cleanup = () => {
       try {
-        if (fs46.readFileSync(PID_FILE, "utf8").trim() === String(process.pid)) fs46.unlinkSync(PID_FILE);
+        if (fs47.readFileSync(PID_FILE, "utf8").trim() === String(process.pid)) fs47.unlinkSync(PID_FILE);
       } catch {
       }
     };
@@ -274542,7 +274772,6 @@ void (async () => {
         drainNode = ctl.drain;
       },
       // 服务端下发了数据面通行证时，把会话交给独立进程跑（daemon 重启不再连坐它）。
-      sessionsRoot: INST.sessionsDir,
       spawnSessionProcess,
       countDetachedSessions: () => countLiveSessions(sessionRoots(), { isLocked: isSessionLocked, flockAvailable: hasFlock() })
     });