oasis_test_v2 2.2.33 → 2.2.35

package/dist/index.js

@@ -149,6 +149,9 @@ function normalizeGitRemote(remote) {
 function projectActorKind(actorId) {
   return actorId.startsWith("actor:human:") ? "human" : "agent";
 }
+function projectIdFromUuid(uuid2) {
+  return `proj_${uuid2.replace(/-/g, "").slice(0, 8)}`;
+}
 var init_project = __esm({
   "../contract/src/project.ts"() {
     "use strict";
@@ -370,10 +373,11 @@ function commentThreadSessionId(a, b2) {
 function reviewThreadSessionId(a, b2) {
   return `${REVIEW_THREAD_SESSION_PREFIX}${[a, b2].sort().join("|")}`;
 }
-var GAP_THREAD_SESSION_PREFIX, COMMENT_THREAD_SESSION_PREFIX, REVIEW_THREAD_SESSION_PREFIX;
+var WORKORDER_HOLD_AT_CREATE_REASON, GAP_THREAD_SESSION_PREFIX, COMMENT_THREAD_SESSION_PREFIX, REVIEW_THREAD_SESSION_PREFIX;
 var init_collab_view = __esm({
   "../contract/src/collab-view.ts"() {
     "use strict";
+    WORKORDER_HOLD_AT_CREATE_REASON = "\u5EFA\u5355\u65F6\u9009\u62E9\u7A0D\u540E\u6D3E\u53D1";
     GAP_THREAD_SESSION_PREFIX = "gapline:";
     COMMENT_THREAD_SESSION_PREFIX = "commentline:";
     REVIEW_THREAD_SESSION_PREFIX = "reviewline:";
@@ -406,9 +410,22 @@ var init_inbox_read = __esm({
 });
 
 // ../contract/src/notifications.ts
+var LEDGER_INBOX_KINDS;
 var init_notifications = __esm({
   "../contract/src/notifications.ts"() {
     "use strict";
+    LEDGER_INBOX_KINDS = /* @__PURE__ */ new Set([
+      "review-request",
+      "rework",
+      "stale",
+      "pushback",
+      "assigned",
+      "needs-staffing",
+      "gap-escalation",
+      "change-confirm",
+      "review-waiting",
+      "work-waiting"
+    ]);
   }
 });
 
@@ -1647,7 +1664,7 @@ var init_file_preview = __esm({
   "../contract/src/file-preview.ts"() {
     "use strict";
     OFFICE_PREVIEW_MAX_BYTES = 20 * 1024 * 1024;
-    FILE_CONTENT_MAX_BYTES = 50 * 1024 * 1024;
+    FILE_CONTENT_MAX_BYTES = 200 * 1024 * 1024;
   }
 });
 
@@ -21293,14 +21310,17 @@ var init_kernel_bridge = __esm({
           });
         }
       }
-      /** 工单级暂停：workorder.paused handler 杀全部在途会话 + 挡新派发。 */
-      async pauseWorkorder(workorderId, actor) {
+      /**
+       * 工单级暂停：workorder.paused handler 杀全部在途会话 + 挡新派发。
+       * `reason` 缺省「暂停派发」（人点暂停）；建单即挂起的入口传 `WORKORDER_HOLD_AT_CREATE_REASON`。
+       */
+      async pauseWorkorder(workorderId, actor, reason = "\u6682\u505C\u6D3E\u53D1") {
         this.trackedWorkorders.add(workorderId);
         await this.commit({
           companyId: "",
           workorderId,
           actorId: actor,
-          event: { kind: "workorder.paused", workorderId, by: actor, reason: "\u6682\u505C\u6D3E\u53D1" }
+          event: { kind: "workorder.paused", workorderId, by: actor, reason }
         });
       }
       /**
@@ -22033,12 +22053,12 @@ async function readArtifactFile(kernel, blobs, artifactId, path41, expectedRef,
     if (!entry) throw new ApiError(404, "NOT_FOUND", "\u5305\u5185\u6587\u4EF6\u4E0D\u5B58\u5728");
     hash2 = entry.hash;
     name = entry.path;
-    if (entry.size !== void 0 && entry.size > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", "\u6587\u4EF6\u8D85\u8FC7 50 MiB \u8BFB\u53D6\u9650\u5236");
+    if (entry.size !== void 0 && entry.size > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", `\u6587\u4EF6\u8D85\u8FC7 ${FILE_CONTENT_MAX_BYTES / 1024 / 1024} MiB \u8BFB\u53D6\u9650\u5236`);
   } else if (output.contentKind !== "inline-blob") {
     throw new ApiError(404, "NOT_FOUND", "\u6B64\u4EA7\u7269\u6CA1\u6709\u53EF\u4E0B\u8F7D\u7684\u539F\u6587\u4EF6");
   }
   const meta = await blobs.meta?.(hash2);
-  if (meta && meta.size > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", "\u6587\u4EF6\u8D85\u8FC7 50 MiB \u8BFB\u53D6\u9650\u5236");
+  if (meta && meta.size > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", `\u6587\u4EF6\u8D85\u8FC7 ${FILE_CONTENT_MAX_BYTES / 1024 / 1024} MiB \u8BFB\u53D6\u9650\u5236`);
   try {
     return { bytes: await blobs.get(hash2), name, contentType: meta?.contentType };
   } catch {
@@ -22065,7 +22085,7 @@ async function serveFileRequest(req, res, url, engine) {
       url.searchParams.get("ref"),
       url.searchParams.get("revisionId")
     );
-    if (bytes2.length > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", "\u6587\u4EF6\u8D85\u8FC7 50 MiB \u8BFB\u53D6\u9650\u5236");
+    if (bytes2.length > FILE_CONTENT_MAX_BYTES) throw new ApiError(413, "FILE_TOO_LARGE", `\u6587\u4EF6\u8D85\u8FC7 ${FILE_CONTENT_MAX_BYTES / 1024 / 1024} MiB \u8BFB\u53D6\u9650\u5236`);
     res.writeHead(200, {
       "content-type": contentType ?? sniffContentType(bytes2) ?? "application/octet-stream",
       "content-length": String(bytes2.length),
@@ -25413,7 +25433,7 @@ async function runProtocolSession(job, cfg) {
   let appendChain = Promise.resolve();
   let eventSeq = 0;
   let runtimeSessionId;
-  let turnCompletePending = false;
+  const pendingTurnMessages = [];
   const stderrTail = [];
   const finish = (info) => {
     if (exited) return;
@@ -25452,7 +25472,15 @@ async function runProtocolSession(job, cfg) {
       }
     });
   };
+  const completeTurn = (message) => {
+    if (exited || killReason) return;
+    const result = cfg.turnResult(message, state);
+    if (!result) return;
+    finish(result);
+    child.kill("SIGTERM");
+  };
   const handle = (message) => {
+    if (exited || killReason) return;
     const responseId = commandId(message.id);
     if (isResponse(message) && responseId !== void 0 && pending.has(responseId)) {
       const waiter = pending.get(responseId);
@@ -25468,13 +25496,15 @@ async function runProtocolSession(job, cfg) {
       const event = { kind: line.kind, payload: line.payload, seq: ++eventSeq, ts: (/* @__PURE__ */ new Date()).toISOString() };
       for (const cb of telemetryCbs) cb(event);
     }
-    if (cfg.isTurnComplete(message, state)) {
-      if (!started) {
-        turnCompletePending = true;
-      } else {
-        finish({ code: 0, reason: "clean", transcriptRef, ...runtimeSessionId ? { runtimeSessionId } : {} });
-        child.kill("SIGTERM");
-      }
+    if (!started) pendingTurnMessages.push(message);
+    else completeTurn(message);
+  };
+  const consumeLine = (line) => {
+    if (!line) return;
+    transcript.write(line + "\n");
+    try {
+      handle(JSON.parse(line));
+    } catch {
     }
   };
   let buffer = "";
@@ -25484,13 +25514,7 @@ async function runProtocolSession(job, cfg) {
     while (newline >= 0) {
       const line = buffer.slice(0, newline).replace(/\r$/, "");
       buffer = buffer.slice(newline + 1);
-      if (line) {
-        transcript.write(line + "\n");
-        try {
-          handle(JSON.parse(line));
-        } catch {
-        }
-      }
+      consumeLine(line);
       newline = buffer.indexOf("\n");
     }
   });
@@ -25504,12 +25528,23 @@ async function runProtocolSession(job, cfg) {
     killReason ??= "timeout";
     child.kill("SIGKILL");
   }, job.limits.wallClockMs);
-  child.on("error", (error2) => finish({ code: null, reason: "error", transcriptRef, errorMessage: error2.message }));
-  child.on("exit", (code2) => {
+  child.on("error", (error2) => {
+    clearTimeout(timer);
+    finish({ code: null, reason: "error", transcriptRef, errorMessage: error2.message });
+  });
+  child.on("close", (code2) => {
     clearTimeout(timer);
+    consumeLine(buffer.trim());
+    buffer = "";
+    transcript.end();
     if (!exited) {
       const reason = killReason ?? (code2 === 0 ? "clean" : "error");
-      finish({ code: killReason ? null : code2, reason, transcriptRef, ...reason === "error" && stderrTail.length ? { errorMessage: stderrTail.join("\n").slice(-4e3) } : {} });
+      const info = {
+        code: killReason ? null : code2,
+        reason,
+        ...reason === "error" && stderrTail.length ? { errorMessage: stderrTail.join("\n").slice(-4e3) } : {}
+      };
+      finish(!killReason && cfg.processExitInfo ? cfg.processExitInfo(info, state) : info);
     }
   });
   void (async () => {
@@ -25523,10 +25558,7 @@ async function runProtocolSession(job, cfg) {
       await cfg.start(send, job, dir, task, state);
       runtimeSessionId ??= cfg.runtimeSessionId?.(state);
       started = true;
-      if (turnCompletePending && !exited) {
-        finish({ code: 0, reason: "clean", transcriptRef, ...runtimeSessionId ? { runtimeSessionId } : {} });
-        child.kill("SIGTERM");
-      }
+      for (const message of pendingTurnMessages.splice(0)) completeTurn(message);
     } catch (error2) {
       if (!exited) {
         const msg = error2 instanceof Error ? error2.message : String(error2);
@@ -25735,7 +25767,7 @@ function codexSessionsRoot() {
 }
 function listRecentRollouts(root, sinceMs) {
   const margin = sinceMs - 6e4;
-  const found = [];
+  const found2 = [];
   const walk = (d) => {
     let ents;
     try {
@@ -25752,16 +25784,16 @@ function listRecentRollouts(root, sinceMs) {
           m2 = fs8.statSync(p2).mtimeMs;
         } catch {
         }
-        if (m2 >= margin) found.push({ f: p2, m: m2 });
+        if (m2 >= margin) found2.push({ f: p2, m: m2 });
       }
     }
   };
   walk(root);
-  return found.sort((a, b2) => b2.m - a.m).map((x2) => x2.f);
+  return found2.sort((a, b2) => b2.m - a.m).map((x2) => x2.f);
 }
 function findRolloutsBySessionId(root, sessionId) {
   const suffix = `-${sessionId}.jsonl`;
-  const found = [];
+  const found2 = [];
   const walk = (d) => {
     let ents;
     try {
@@ -25772,11 +25804,11 @@ function findRolloutsBySessionId(root, sessionId) {
     for (const ent of ents) {
       const p2 = path10.join(d, ent.name);
       if (ent.isDirectory()) walk(p2);
-      else if (ent.isFile() && ent.name.startsWith("rollout-") && ent.name.endsWith(suffix)) found.push(p2);
+      else if (ent.isFile() && ent.name.startsWith("rollout-") && ent.name.endsWith(suffix)) found2.push(p2);
     }
   };
   walk(root);
-  return found;
+  return found2;
 }
 function telemetryFromRolloutLines(lines, sinceMs) {
   const usage = parseCodexTokenUsage(lines, sinceMs);
@@ -26036,6 +26068,15 @@ function normalizeCodexConsoleLine(line, state = createCodexNormalizeState()) {
   tool.output.push(line);
   return [];
 }
+function codexTurnErrorMessage(value2) {
+  const error2 = record2(value2);
+  const code2 = error2?.codexErrorInfo;
+  const label = typeof code2 === "string" ? code2 : code2 ? JSON.stringify(code2) : "unknown";
+  const message = typeof error2?.message === "string" && error2.message.trim() ? error2.message.trim() : "Codex turn failed without error details";
+  const summary = code2 === "cyberPolicy" || code2 === "misalignmentPolicyViolation" ? `Codex \u5B89\u5168\u7B56\u7565\u62D2\u7EDD [${label}]\uFF1A${message}` : `Codex [${label}]: ${message}`;
+  const detail = typeof error2?.additionalDetails === "string" ? error2.additionalDetails.trim() : "";
+  return [summary, detail].filter(Boolean).join("\n").slice(0, 4e3);
+}
 var import_node_child_process7, import_node_crypto11, fs8, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CODEX_APP_SERVER_BLOCKED_FLAGS, CodexAdapter;
 var init_codex = __esm({
   "../adapters/src/codex/index.ts"() {
@@ -26119,6 +26160,7 @@ var init_codex = __esm({
             threadId: void 0,
             turnId: void 0,
             active: false,
+            errorsByTurn: /* @__PURE__ */ new Map(),
             pendingInputs: /* @__PURE__ */ new Set(),
             codex: createCodexNormalizeState(),
             // 本次 run 的用量：`thread/tokenUsage/updated` 的 `last`（见该解析函数注释）按轮次记下，
@@ -26202,6 +26244,9 @@ ${task}` : task;
               }
             }
             if (method === "turn/completed") {
+              const turn = record2(params?.turn);
+              const failure = typeof turn?.id === "string" ? state.errorsByTurn.get(turn.id) : void 0;
+              if (params?.threadId !== state.threadId || turn?.id !== state.turnId || turn?.status !== "completed" || turn.error || failure && !failure.willRetry) return [];
               return [{ ...base, itemId: "turn-end", itemType: "control", operation: "completed", payload: { code: "output_block_completed" } }];
             }
             return [];
@@ -26209,10 +26254,15 @@ ${task}` : task;
           normalize(message, state) {
             const params = message.params;
             const method = typeof message.method === "string" ? message.method : "";
+            if (method === "error" && params?.threadId === state.threadId && typeof params?.turnId === "string") {
+              state.errorsByTurn.set(params.turnId, { error: params.error, willRetry: params.willRetry === true });
+            }
             if (method === "thread/started") {
               const thread = params?.thread;
-              if (typeof thread?.id === "string") state.threadId = thread.id;
-              if (typeof thread?.path === "string") state.rolloutPath = thread.path;
+              if (typeof thread?.id === "string" && (!state.threadId || state.threadId === thread.id)) {
+                state.threadId = thread.id;
+                if (typeof thread.path === "string") state.rolloutPath = thread.path;
+              }
             }
             if (method === "thread/tokenUsage/updated") {
               const turn = parseCodexAppServerTurnUsage(params);
@@ -26220,7 +26270,7 @@ ${task}` : task;
             }
             if (method === "turn/started") {
               const turn = params?.turn;
-              if (typeof turn?.id === "string") {
+              if (params?.threadId === state.threadId && state.turnRequested && typeof turn?.id === "string" && (!state.turnId || state.turnId === turn.id)) {
                 state.turnId = turn.id;
                 state.active = true;
                 if (state.turnRequested) state.runTurnIds.add(turn.id);
@@ -26241,10 +26291,29 @@ ${task}` : task;
             }
             return [];
           },
-          isTurnComplete(message, state) {
-            if (message.method !== "turn/completed" || !state.active) return false;
+          turnResult(message, state) {
+            if (message.method !== "turn/completed" || !state.active) return void 0;
+            const params = record2(message.params);
+            const turn = record2(params?.turn);
+            if (params?.threadId !== state.threadId || !state.turnId || turn?.id !== state.turnId) return void 0;
             state.active = false;
-            return true;
+            if (turn.status === "interrupted") return { code: null, reason: "cancelled" };
+            const failure = state.errorsByTurn.get(state.turnId);
+            const error2 = turn.error ?? (turn.status === "failed" || !failure?.willRetry ? failure?.error : void 0);
+            if (turn.status === "completed" && !error2) return { code: 0, reason: "clean" };
+            return { code: 1, reason: "error", errorMessage: codexTurnErrorMessage(error2) };
+          },
+          processExitInfo(info, state) {
+            const error2 = state.turnId ? state.errorsByTurn.get(state.turnId)?.error : void 0;
+            return {
+              code: info.code === 0 ? 1 : info.code,
+              reason: "error",
+              errorMessage: [
+                error2 ? codexTurnErrorMessage(error2) : void 0,
+                info.errorMessage,
+                "Codex app-server exited before reporting a terminal result"
+              ].filter(Boolean).join("\n").slice(0, 4e3)
+            };
           },
           runtimeSessionId: (state) => state.threadId,
           exitExtras: (state) => {
@@ -28304,8 +28373,8 @@ ${task}` : task;
           normalize(message) {
             return normalizePi(JSON.stringify(message));
           },
-          isTurnComplete(message) {
-            return message.type === "agent_settled";
+          turnResult(message) {
+            return message.type === "agent_settled" ? { code: 0, reason: "clean" } : void 0;
           },
           runtimeSessionId(state) {
             return state.sessionId;
@@ -30815,8 +30884,26 @@ function runBackgroundAssistantChatTurn(deps) {
       }
     };
     void Promise.resolve(deps.session.done).then(() => finalize("done").catch(() => void 0)).catch((err) => {
+      const chatExit = err instanceof Error ? err.chatExit : void 0;
+      const text5 = chatExit?.summary ?? (err instanceof Error ? err.message : String(err));
+      const extra = {
+        ...chatExit?.reason ? { reason: chatExit.reason } : {},
+        ...chatExit?.detail ? { detail: chatExit.detail } : {}
+      };
+      const part = { type: "error", seq: ++localSeq, text: text5, ...extra };
+      localParts.push(part);
+      liveTurn?.emit(part);
       try {
-        itemLedger.recordError(err instanceof Error ? err.message : String(err));
+        const outcome = itemLedger.recordError(text5, extra);
+        liveTurn?.publishServerItem({
+          itemId: outcome.itemId,
+          itemType: "control",
+          startedVersion: outcome.startedVersion,
+          version: outcome.version,
+          ord: outcome.ord,
+          status: "failed",
+          payload: { code: "error", note: text5, ...extra }
+        });
       } catch {
       }
       return finalize("error").catch(() => void 0);
@@ -178838,14 +178925,14 @@ var require_Alias = __commonJS({
           if (ctx)
             ctx.aliasResolveCache = nodes;
         }
-        let found = void 0;
+        let found2 = void 0;
         for (const node2 of nodes) {
           if (node2 === this)
             break;
           if (node2.anchor === this.source)
-            found = node2;
+            found2 = node2;
         }
-        return found;
+        return found2;
       }
       toJSON(_arg, ctx) {
         if (!ctx)
@@ -181970,7 +182057,7 @@ var require_resolve_props = __commonJS({
       let tag = null;
       let newlineAfterProp = null;
       let comma = null;
-      let found = null;
+      let found2 = null;
       let start = null;
       for (const token of tokens) {
         if (reqSpace) {
@@ -182007,7 +182094,7 @@ var require_resolve_props = __commonJS({
             if (atNewline) {
               if (comment)
                 comment += token.source;
-              else if (!found || indicator !== "seq-item-ind")
+              else if (!found2 || indicator !== "seq-item-ind")
                 spaceBefore = true;
             } else
               commentSep += token.source;
@@ -182041,9 +182128,9 @@ var require_resolve_props = __commonJS({
           case indicator:
             if (anchor || tag)
               onError(token, "BAD_PROP_ORDER", `Anchors and tags must be after the ${token.source} indicator`);
-            if (found)
+            if (found2)
               onError(token, "UNEXPECTED_TOKEN", `Unexpected ${token.source} in ${flow3 ?? "collection"}`);
-            found = token;
+            found2 = token;
             atNewline = indicator === "seq-item-ind" || indicator === "explicit-key-ind";
             hasSpace = false;
             break;
@@ -182072,7 +182159,7 @@ var require_resolve_props = __commonJS({
         onError(tab, "TAB_AS_INDENT", "Tabs are not allowed as indentation");
       return {
         comma,
-        found,
+        found: found2,
         spaceBefore,
         comment,
         hasNewline,
@@ -201214,8 +201301,8 @@ async function resolveOutlineKnowledgeBinding(credentials, input) {
   const collections = (await api.listCollections()).filter(isWritableCollection);
   for (const collection of collections) {
     const documents = await api.listDocuments(collection["id"]);
-    const found = documents.find((document4) => string5(document4["url"]) === pasted);
-    if (found) return bindingFromDocument(api, found, collection, identity);
+    const found2 = documents.find((document4) => string5(document4["url"]) === pasted);
+    if (found2) return bindingFromDocument(api, found2, collection, identity);
   }
   throw new Error("\u627E\u4E0D\u5230\u8BE5\u6839\u6587\u6863\uFF0C\u6216\u5F53\u524D Token \u5BF9\u5176\u6240\u5728 Collection \u6CA1\u6709\u5199\u6743\u9650");
 }
@@ -204172,10 +204259,10 @@ async function runCommand(kernel, blobs, oplog, engineStore, actor, command, arg
       }
       let artifactId;
       if (escalationId !== void 0) {
-        const found = escalationById(kernel.model, escalationId);
-        if (!found) throw new Error(`\u4E0A\u62A5 ${escalationId} \u4E0D\u5B58\u5728\uFF08id \u89C1 \`oasis status <\u8282\u70B9>\` \u7684\u300C\u4E0A\u62A5\u300D\u6BB5\uFF09\u3002`);
-        if (found.resolved) throw new Error(`\u4E0A\u62A5 ${escalationId} \u5DF2\u7ECF\u5173\u95ED\uFF0C\u65E0\u9700\u518D\u5173\u3002`);
-        artifactId = found.artifactId;
+        const found2 = escalationById(kernel.model, escalationId);
+        if (!found2) throw new Error(`\u4E0A\u62A5 ${escalationId} \u4E0D\u5B58\u5728\uFF08id \u89C1 \`oasis status <\u8282\u70B9>\` \u7684\u300C\u4E0A\u62A5\u300D\u6BB5\uFF09\u3002`);
+        if (found2.resolved) throw new Error(`\u4E0A\u62A5 ${escalationId} \u5DF2\u7ECF\u5173\u95ED\uFF0C\u65E0\u9700\u518D\u5173\u3002`);
+        artifactId = found2.artifactId;
       } else {
         const argArtifactId = optStr(args, "artifactId");
         if (argArtifactId === void 0) {
@@ -204457,7 +204544,7 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}`] : []
         }
         if (args["dispatch"] === false) {
           await ctx.artifactState?.setWorkspaceDispatchHold(workspace, true);
-          await kernel.pauseWorkorder?.(workspace, actor);
+          await kernel.pauseWorkorder?.(workspace, actor, WORKORDER_HOLD_AT_CREATE_REASON);
         }
         return {
           message: planned.issues.length > 0 ? `planned ${workspace}: created ${planned.spawned.length} nodes\uFF0C${planned.issues.length} \u4E2A staffing \u63D0\u793A\u5DF2\u5199\u5165\u5DE5\u5355` : `planned ${workspace}: created ${planned.spawned.length} nodes`,
@@ -205650,10 +205737,10 @@ async function startOasisServer(opts) {
               ...fp(p2)
             }))
           ] : [];
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID42 } = await import("node:crypto");
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID42(),
               chatSessionId: input.chatSessionId,
               text: input.text,
               createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -205686,11 +205773,11 @@ async function startOasisServer(opts) {
               ...f2?.mtime ? { srcMtime: f2.mtime } : {}
             };
           });
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID42 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID42(),
               chatSessionId: input.chatSessionId,
               text: "",
               createdAt: nowIso,
@@ -206700,7 +206787,7 @@ async function startOasisServer(opts) {
             }
             if (body2.dispatch === false) {
               await opts.artifactState?.setWorkspaceDispatchHold(workspace, true);
-              await engine.kernel.pauseWorkorder?.(workspace, actor);
+              await engine.kernel.pauseWorkorder?.(workspace, actor, WORKORDER_HOLD_AT_CREATE_REASON);
             }
             await wodraftPlannerIssues.remove(workspace);
             if (opts.chatSession && body2.chatSessionId && workspace !== "ws:default") {
@@ -207018,7 +207105,7 @@ async function startOasisServer(opts) {
             const openRoom = async () => {
               let chatSessionId2;
               if (chatStore) {
-                const { randomUUID: randomUUID41 } = await import("node:crypto");
+                const { randomUUID: randomUUID42 } = await import("node:crypto");
                 const known = discussSessions.get(itemKey);
                 const knownSession = known ? await chatStore.getSession(known) : null;
                 if (knownSession && knownSession.workspace === ctx.workspace && knownSession.humanActorId === ctx.ownerId && (!body2.escalationId || knownSession.escalationId === body2.escalationId)) chatSessionId2 = known;
@@ -207027,7 +207114,7 @@ async function startOasisServer(opts) {
                   chatSessionId2 = existing[0]?.id;
                 }
                 if (!chatSessionId2) {
-                  chatSessionId2 = randomUUID41();
+                  chatSessionId2 = randomUUID42();
                   const now = (/* @__PURE__ */ new Date()).toISOString();
                   const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                   const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -207896,14 +207983,14 @@ ${composed}`;
                     runtimeSessionId: session.nativeSessionId ?? session.id
                   }).catch(() => void 0);
                 }
-                const { randomUUID: randomUUID42 } = await import("node:crypto");
+                const { randomUUID: randomUUID43 } = await import("node:crypto");
                 const persistAttachments = effectiveAttachments.map((a) => ({
                   name: a.name,
                   ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                   ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                 }));
                 await chatStore.appendMessage({
-                  id: randomUUID42(),
+                  id: randomUUID43(),
                   sessionId: persistTarget.id,
                   role: "user",
                   content: persistedUserMessage,
@@ -208378,8 +208465,8 @@ ${composed}`;
               }
             }
             const { spawn: spawn10 } = await import("node:child_process");
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const sessionId = body2.sessionId ?? randomUUID41();
+            const { randomUUID: randomUUID42 } = await import("node:crypto");
+            const sessionId = body2.sessionId ?? randomUUID42();
             const args = [
               "-p",
               body2.message,
@@ -208675,8 +208762,8 @@ ${composed}`;
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
               return;
             }
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const state = randomUUID41();
+            const { randomUUID: randomUUID42 } = await import("node:crypto");
+            const state = randomUUID42();
             const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
             const manifest = buildAppManifest({
               employeeSlug: nameSlug,
@@ -212740,6 +212827,19 @@ var init_stats = __esm({
   }
 });
 
+// ../server/src/domains/projects/project-id.ts
+function randomProjectId() {
+  return projectIdFromUuid((0, import_node_crypto41.randomUUID)());
+}
+var import_node_crypto41;
+var init_project_id = __esm({
+  "../server/src/domains/projects/project-id.ts"() {
+    "use strict";
+    import_node_crypto41 = require("node:crypto");
+    init_src();
+  }
+});
+
 // ../server/src/domains/projects/service.ts
 function sanitizeCreatorActorId(raw) {
   const id = raw?.trim();
@@ -212881,10 +212981,6 @@ function namedError(name, message) {
   err.name = name;
   return err;
 }
-function slugProjectId(name) {
-  const slug6 = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
-  return `proj_${slug6 || Date.now()}`;
-}
 function dirname24(path41) {
   const norm = path41.replace(/^\/+|\/+$/g, "");
   const idx = norm.lastIndexOf("/");
@@ -213081,6 +213177,7 @@ var init_service4 = __esm({
     init_uncategorized_project();
     init_workorders();
     init_stats();
+    init_project_id();
     init_node_state();
     DEFAULT_AGENT_ACTOR = "actor:agent:system";
     CHAT_FOLDER_TASK_LABEL = "\u5BF9\u8BDD";
@@ -213283,6 +213380,15 @@ var init_service4 = __esm({
       async getWorkspaceBinding(workOrderId) {
         return this.artifacts.getWorkspaceBinding(workOrderId);
       }
+      /**
+       * 工单负责人（改挂项目门禁的「条目本人」一支）。与列表「负责人」列**同一个出口**：
+       * `buildWorkorderSummaries` 的 `owner`（页头总纲根的 owner）——判权限与界面上显示的负责人不许是两套。
+       * 内核里没有这张工单 → null。
+       */
+      workorderOwnerOf(workOrderId) {
+        const summary = buildWorkorderSummaries(this.kernel.model).find((w2) => w2.id === workOrderId);
+        return summary?.owner.id ?? null;
+      }
       /** 上传一个项目普通文件：内容入 blob 库，记一条元信息旁存（非 oplog 事实）。 */
       async addProjectFile(input) {
         if (!this.blobs) throw new Error("\u9879\u76EE\u6587\u4EF6\u4E0A\u4F20\u9700\u8981 blob \u5E93\uFF08domain \u672A\u6CE8\u5165 blobs\uFF09");
@@ -213361,9 +213467,14 @@ var init_service4 = __esm({
       async createProject(input) {
         if (!input.name.trim()) throw new Error("project name is required");
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const id = input.id ?? slugProjectId(input.name);
-        const existing = await this.projects.getProject(id);
-        if (existing) return this.withProjectDerivedState(existing);
+        let id;
+        if (input.id !== void 0 && input.id.trim() !== "") {
+          id = input.id;
+          const existing = await this.projects.getProject(id);
+          if (existing) return this.withProjectDerivedState(existing);
+        } else {
+          id = await this.allocateProjectId();
+        }
         const createdById = sanitizeCreatorActorId(input.createdBy);
         const project = {
           id,
@@ -213399,6 +213510,14 @@ var init_service4 = __esm({
         }
         return await this.getProject(id) ?? project;
       }
+      /** 给「没带 id 的新建」挑一个本公司还没用过的随机 id（`randomProjectId`）；连撞几次说明生成器坏了，直接报错。 */
+      async allocateProjectId() {
+        for (let attempt = 0; attempt < 5; attempt++) {
+          const id = randomProjectId();
+          if (!await this.projects.getProject(id)) return id;
+        }
+        throw new Error("project id allocation failed: random ids kept colliding");
+      }
       async getProject(id) {
         if (isUncategorizedProjectId(id)) return this.buildUncategorizedProject();
         const project = await this.projects.getProject(id);
@@ -214741,12 +214860,12 @@ var init_service4 = __esm({
 });
 
 // ../server/src/dev-store.ts
-var import_node_crypto41, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto42, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
-    import_node_crypto41 = require("node:crypto");
+    import_node_crypto42 = require("node:crypto");
     fs20 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     init_src();
@@ -214800,7 +214919,7 @@ var init_dev_store = __esm({
         return path21.join(this.dir, hash2);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto41.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto42.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash2);
         if (!fs20.existsSync(file)) fs20.writeFileSync(file, bytes2);
         return hash2;
@@ -215385,6 +215504,10 @@ var init_dev_store = __esm({
       async listSessionsByWorkspace(workspace) {
         return [...this.sessions.values()].filter((s2) => s2.workspace === workspace && !s2.analyzedRunId && s2.visibility !== "internal").sort((a, b2) => b2.touchedAt.localeCompare(a.touchedAt)).map((s2) => this.withQuality(s2));
       }
+      /** 语义同 postgres 版：项目「关联对话」，不按人过滤；排除分析 / 内部 / 挂在任务上的会话，created_at 倒序。 */
+      async listSessionsByProject(projectId2) {
+        return [...this.sessions.values()].filter((s2) => (s2.projectId ?? null) === projectId2 && !s2.analyzedRunId && s2.visibility !== "internal" && !s2.workspace).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt) || a.id.localeCompare(b2.id));
+      }
       async listAllAnalysisSessions(opts = {}) {
         const limit = opts.limit ?? 100;
         const sorted = [...this.sessions.values()].filter((s2) => !!s2.analyzedRunId).sort((a, b2) => b2.touchedAt.localeCompare(a.touchedAt) || b2.id.localeCompare(a.id));
@@ -215996,7 +216119,7 @@ var init_company_engine_router = __esm({
 
 // ../server/src/skill-market-client.ts
 function digestOf2(bytes2) {
-  return `sha256:${(0, import_node_crypto42.createHash)("sha256").update(bytes2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto43.createHash)("sha256").update(bytes2).digest("hex")}`;
 }
 function createSkillMarketClientFromEnv(env = process.env) {
   const base = env["SKILL_MARKET_BASE_URL"];
@@ -216007,11 +216130,11 @@ function createSkillMarketClientFromEnv(env = process.env) {
 function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var import_node_crypto42, DisabledSkillMarketClient, HttpSkillMarketClient;
+var import_node_crypto43, DisabledSkillMarketClient, HttpSkillMarketClient;
 var init_skill_market_client = __esm({
   "../server/src/skill-market-client.ts"() {
     "use strict";
-    import_node_crypto42 = require("node:crypto");
+    import_node_crypto43 = require("node:crypto");
     init_src();
     DisabledSkillMarketClient = class {
       async listSkills(_input) {
@@ -216933,11 +217056,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto43, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto44, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
+    import_node_crypto44 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217064,7 +217187,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto43.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto44.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -217212,11 +217335,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto44, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto45, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217241,7 +217364,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto44.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto45.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -219169,7 +219292,9 @@ var init_sink = __esm({
           st.openTools.set(callId, {
             toolName: typeof p2["name"] === "string" ? p2["name"] : "tool",
             input: p2["input"] ?? null,
-            startedAt: event.ts
+            startedAt: event.ts,
+            // 子 Agent 里的调用：adapter 给 payload 标了派出它的那次调用（Claude 的 parent_tool_use_id）。
+            parentCallId: typeof p2["parentToolCallId"] === "string" ? p2["parentToolCallId"] : null
           });
           return;
         }
@@ -219185,7 +219310,7 @@ var init_sink = __esm({
             id: `tc_${st.runId}_${callId}`,
             runId: st.runId,
             callId,
-            parentCallId: null,
+            parentCallId: open3.parentCallId,
             toolName: open3.toolName,
             toolKind: toolKindOf(open3.toolName),
             status: isErr ? "failed" : "succeeded",
@@ -219490,7 +219615,7 @@ function wireRecoveredChatTurn(deps) {
       const segText = itemLedger.projectContent();
       const segParts = collectedParts();
       const closingId = currentMsgId;
-      const nextId = (0, import_node_crypto45.randomUUID)();
+      const nextId = (0, import_node_crypto46.randomUUID)();
       currentMsgId = nextId;
       itemLedger.beginSegment();
       live.setAssistantMessageId(nextId);
@@ -219504,7 +219629,7 @@ function wireRecoveredChatTurn(deps) {
           ...segParts.length ? { parts: segParts } : {}
         }).catch(() => void 0);
         await store.appendMessage({
-          id: (0, import_node_crypto45.randomUUID)(),
+          id: (0, import_node_crypto46.randomUUID)(),
           sessionId: plan.chatSessionId,
           role: "user",
           content: text5,
@@ -219943,11 +220068,11 @@ async function recoverChatTurnsAcrossCompanies(deps) {
   }
   return { ...result, recovered };
 }
-var import_node_crypto45, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
+var import_node_crypto46, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
 var init_chat_recovery = __esm({
   "../server/src/chat-recovery.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_chat_parts();
     init_sink();
     init_resilient_appender();
@@ -219965,6 +220090,7 @@ var init_chat_recovery = __esm({
       durationMs: Date.parse(endedAt) - Date.parse(startedAt),
       exitCode: info.code,
       exitReason: info.reason ?? null,
+      ...exitFailed(info) && info.reason !== "cancelled" ? { errorCode: info.reason ?? "error", errorMessage: formatExitError(info) } : {},
       transcriptRef: info.transcriptRef ?? null,
       usage: info.usage ?? null,
       // 重启前 create/dispatch 路已把 actor/runtime fallback 模型写进 run；退出帧没报 model 时必须保留，
@@ -219976,8 +220102,8 @@ var init_chat_recovery = __esm({
 
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto46.randomBytes)(16);
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto47.randomBytes)(16);
+  const dk = (0, import_node_crypto47.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -219994,8 +220120,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto46.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto47.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto47.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -220003,17 +220129,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto47.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto47.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto46.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto47.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -220025,21 +220151,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto46.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto47.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto46.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto47.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto46.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto47.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto46, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto47, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto46 = require("node:crypto");
+    import_node_crypto47 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -220262,6 +220388,9 @@ var init_daemon_hub = __esm({
         this.wss = new import_websocket_server.default({
           server,
           path: path41,
+          // workdir_read returns base64 plus a JSON envelope. ws defaults to 100 MiB,
+          // which would disconnect the node before a 200 MiB original reaches HTTP.
+          maxPayload: 4 * Math.ceil(FILE_CONTENT_MAX_BYTES / 3) + 64 * 1024,
           ...resolveNode ? {
             // 异步校验：verifyClient 允许延迟回调，故可在此 await 一次 DB 查询后再放行/拒绝。
             verifyClient: (info, cb) => {
@@ -221186,16 +221315,16 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto47.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto48.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto47, REDACTED_MARKER, ActorsService, mask, changedKeys;
+var import_node_crypto48, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
-    import_node_crypto47 = require("node:crypto");
+    import_node_crypto48 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -221759,7 +221888,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path41, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path41, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -222411,15 +222540,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto47.randomBytes)(12);
-        const cipher = (0, import_node_crypto47.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto48.randomBytes)(12);
+        const cipher = (0, import_node_crypto48.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc4 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc4.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto47.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto48.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -223037,7 +223166,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto49.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -223062,11 +223191,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto49.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto49.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223087,11 +223216,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto49.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto49.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223111,7 +223240,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto49.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223135,7 +223264,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto48.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto49.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -223168,7 +223297,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto49.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223185,11 +223314,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto48;
+var import_node_crypto49;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto48 = require("node:crypto");
+    import_node_crypto49 = require("node:crypto");
   }
 });
 
@@ -224700,7 +224829,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto49.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto50.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -224740,11 +224869,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
-var import_node_crypto49;
+var import_node_crypto50;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto49 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -224914,6 +225043,359 @@ var init_assistant_tier_dispatch = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/files-view.ts
+function reasonFromWorkdirCode(code2) {
+  switch (code2) {
+    case "NODE_OFFLINE":
+      return "NODE_OFFLINE";
+    case "TIMEOUT":
+      return "TIMEOUT";
+    default:
+      return "ERROR";
+  }
+}
+function joinRel2(dir, name) {
+  return dir ? `${dir}/${name}` : name;
+}
+function workdirFileItem(rel, name, size, mtime) {
+  return {
+    id: `workdir:${rel}`,
+    name,
+    kind: "file",
+    // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
+    // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
+    content_type: null,
+    size,
+    updated_at: mtime,
+    source: "workdir",
+    blob_ref: null,
+    path: rel,
+    message_id: null,
+    // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
+    // 这里是**按能力不渲染**的判据，不是置灰假钮。
+    editable: false
+  };
+}
+async function collectWorkdirFiles(bridge, loc, now = Date.now) {
+  const items = [];
+  if (typeof bridge.walk === "function") {
+    const walked = await bridge.walk(
+      loc.nodeId,
+      { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: "" },
+      WORKDIR_TREE_MAX_ENTRIES
+    );
+    if (walked.ok) {
+      let truncated2 = walked.truncated === true;
+      for (const entry of walked.entries) {
+        if (entry.type !== "file") continue;
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated2 = true;
+          break;
+        }
+        const slash = entry.path.lastIndexOf("/");
+        items.push(workdirFileItem(entry.path, entry.path.slice(slash + 1), entry.size, entry.mtime));
+      }
+      return { ok: true, items, truncated: truncated2 };
+    }
+    if (walked.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    if (walked.code !== "UNSUPPORTED") return { ok: false, reason: reasonFromWorkdirCode(walked.code) };
+  }
+  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
+  let listCalls = 0;
+  let truncated = false;
+  const listDir = (path41) => {
+    listCalls += 1;
+    return bridge.list(loc.nodeId, {
+      workdirKey: loc.workdirKey,
+      runtimeKind: loc.runtimeKind,
+      rtId: loc.rtId,
+      path: path41
+    });
+  };
+  const root = await listDir("");
+  if (!root.ok) {
+    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
+  }
+  let level = [{ path: "", outcome: root }];
+  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
+    const nextDirs = [];
+    for (const { path: dir, outcome } of level) {
+      if (!outcome.ok) {
+        truncated = true;
+        continue;
+      }
+      if (outcome.truncated) truncated = true;
+      for (const entry of outcome.entries) {
+        if (entry.type === "dir") {
+          nextDirs.push(joinRel2(dir, entry.name));
+          continue;
+        }
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated = true;
+          continue;
+        }
+        items.push(workdirFileItem(joinRel2(dir, entry.name), entry.name, entry.size, entry.mtime));
+      }
+    }
+    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
+      if (nextDirs.length > 0) truncated = true;
+      break;
+    }
+    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
+    if (budget <= 0 || now() >= deadline) {
+      truncated = true;
+      break;
+    }
+    const take = nextDirs.slice(0, budget);
+    if (take.length < nextDirs.length) truncated = true;
+    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
+    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
+  }
+  return { ok: true, items, truncated };
+}
+async function collectMessageFiles(messages, blobs) {
+  const rows = [];
+  for (const message of messages) {
+    if (!Array.isArray(message.attachments)) continue;
+    message.attachments.forEach((attachment, index2) => {
+      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
+      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
+      rows.push({
+        item: {
+          id: `msg:${message.id}:${index2}`,
+          name: attachment.name,
+          kind: "file",
+          updated_at: attachment.updatedAt ?? message.createdAt,
+          source: "message",
+          blob_ref: blobRef,
+          path: null,
+          message_id: message.id,
+          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
+          // contain `name`）——没有可写回的载体，一律不给编辑入口。
+          editable: blobRef !== null && isEditableFileName(attachment.name)
+        },
+        blobRef,
+        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
+      });
+    });
+  }
+  const metaCache = /* @__PURE__ */ new Map();
+  const metaOf = (ref2) => {
+    if (!blobs) return Promise.resolve(null);
+    let hit = metaCache.get(ref2);
+    if (!hit) {
+      hit = blobs.meta(ref2).catch(() => null);
+      metaCache.set(ref2, hit);
+    }
+    return hit;
+  };
+  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
+    const meta = blobRef ? await metaOf(blobRef) : null;
+    return {
+      ...item,
+      content_type: declaredType ?? meta?.contentType ?? null,
+      size: meta?.size ?? null
+    };
+  }));
+}
+function mergeChatSessionFiles(messageItems, workdirItems, materializedCopies = /* @__PURE__ */ new Set()) {
+  const out = [];
+  const seenMessageKeys = /* @__PURE__ */ new Set();
+  for (const item of [...messageItems].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at))) {
+    const key = `${item.name}\0${item.blob_ref ?? ""}`;
+    if (seenMessageKeys.has(key)) continue;
+    seenMessageKeys.add(key);
+    out.push(item);
+  }
+  const seenWorkdirPaths = /* @__PURE__ */ new Set();
+  for (const item of workdirItems) {
+    if (item.path && materializedCopies.has(item.path)) continue;
+    if (seenWorkdirPaths.has(item.id)) continue;
+    seenWorkdirPaths.add(item.id);
+    out.push(item);
+  }
+  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
+  return out;
+}
+async function findMaterializedAttachmentCopies(messageItems, workdirItems, read) {
+  const copies = /* @__PURE__ */ new Set();
+  const attachments = messageItems.filter((item) => item.blob_ref && /^[a-f0-9]{64}$/.test(item.blob_ref));
+  let budget = CHAT_ATTACHMENT_MAX_BYTES;
+  const deadline = Date.now() + WORKDIR_WALK_BUDGET_MS;
+  let reads = 0;
+  for (const file of workdirItems) {
+    const rootFile = file.path === file.name;
+    const inputFile = file.path?.startsWith("inputs/attachments/") && !file.path.slice("inputs/attachments/".length).includes("/");
+    if (!file.path || !rootFile && !inputFile) continue;
+    const candidates = attachments.filter((attachment) => {
+      const safe = safeAttachmentName(attachment.name);
+      const numbered = file.name.endsWith(`-${safe}`) && /^\d+$/.test(file.name.slice(0, -(safe.length + 1)));
+      return (rootFile ? file.name === attachment.name : file.name === safe || numbered) && attachment.size !== null && attachment.size === file.size;
+    });
+    if (Date.now() >= deadline) break;
+    if (!candidates.length || file.size === null || file.size > budget || reads >= 10) continue;
+    reads += 1;
+    budget -= file.size;
+    let timer;
+    try {
+      const result = await Promise.race([
+        read(file.path, file.size),
+        new Promise((resolve10) => {
+          timer = setTimeout(() => resolve10(null), Math.max(0, deadline - Date.now()));
+        })
+      ]);
+      if (!result?.ok) continue;
+      const bytes2 = Buffer.from(result.contentBase64, "base64");
+      if (bytes2.length !== file.size) continue;
+      const hash2 = (0, import_node_crypto51.createHash)("sha256").update(bytes2).digest("hex");
+      if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
+    } catch {
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
+  return copies;
+}
+var import_node_crypto51, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
+var init_files_view = __esm({
+  "../server/src/domains/chat-sessions/files-view.ts"() {
+    "use strict";
+    import_node_crypto51 = require("node:crypto");
+    init_chat_attachment_files();
+    init_src();
+    WORKDIR_WALK_MAX_DEPTH = 3;
+    WORKDIR_WALK_MAX_ENTRIES = 200;
+    WORKDIR_WALK_MAX_LIST_CALLS = 20;
+    WORKDIR_WALK_BUDGET_MS = 1e4;
+    WORKDIR_TREE_MAX_ENTRIES = 2e3;
+  }
+});
+
+// ../server/src/domains/projects/chat-files.ts
+function isProjectChatSession(session) {
+  if (session.visibility === "internal") return false;
+  if (session.analyzedRunId) return false;
+  if (session.workspace) return false;
+  return true;
+}
+function chatFolderTitle(session) {
+  const title = session.title?.trim();
+  return title ? title : "\u672A\u547D\u540D\u5BF9\u8BDD";
+}
+function outputDisplayName(path41) {
+  return path41.startsWith("outputs/") ? path41.slice("outputs/".length) : path41;
+}
+async function collectProjectChatFiles(chat, projectId2, meta, options = {}) {
+  const scope = isUncategorizedProjectId(projectId2) ? null : projectId2;
+  const [attachmentMessages, outputSessions] = await Promise.all([
+    chat.listAttachmentMessages ? chat.listAttachmentMessages(scope) : Promise.resolve([]),
+    chat.listOutputCopies ? chat.listOutputCopies(scope) : Promise.resolve([])
+  ]);
+  const sessionIds = [.../* @__PURE__ */ new Set([
+    ...attachmentMessages.map((m2) => m2.sessionId),
+    ...outputSessions.map((s2) => s2.sessionId)
+  ])];
+  const sessions = /* @__PURE__ */ new Map();
+  await Promise.all(sessionIds.map(async (id) => {
+    const session = await chat.getSession(id);
+    if (!session) return;
+    if ((session.projectId ?? null) !== scope) return;
+    if (!isProjectChatSession(session)) return;
+    if (options.isDelegationChild && await options.isDelegationChild(id).catch(() => false)) return;
+    sessions.set(id, session);
+  }));
+  const out = [];
+  const base = (session) => ({
+    projectId: projectId2,
+    chatSessionId: session.id,
+    chatTitle: chatFolderTitle(session),
+    chatOwnerId: session.humanActorId
+  });
+  const bySession = /* @__PURE__ */ new Map();
+  for (const message of attachmentMessages) {
+    if (!sessions.has(message.sessionId)) continue;
+    const list2 = bySession.get(message.sessionId) ?? [];
+    list2.push(message);
+    bySession.set(message.sessionId, list2);
+  }
+  for (const [sessionId, messages] of bySession) {
+    const session = sessions.get(sessionId);
+    const rows = await collectMessageFiles(messages.map((m2) => ({ ...m2, id: m2.messageId })), { meta });
+    for (const row of mergeChatSessionFiles(rows, [])) {
+      if (row.blob_ref === null) continue;
+      out.push({
+        ...base(session),
+        fileId: `chat:${sessionId}:${row.id}`,
+        name: row.name,
+        blobId: row.blob_ref,
+        ...row.content_type ? { contentType: row.content_type } : {},
+        size: row.size,
+        uploadedBy: session.humanActorId,
+        uploadedAt: row.updated_at,
+        chatSource: "attachment"
+      });
+    }
+  }
+  for (const record8 of outputSessions) {
+    const session = sessions.get(record8.sessionId);
+    if (!session) continue;
+    const seen = new Set(out.filter((file) => file.chatSessionId === session.id).map((file) => `${file.name}\0${file.blobId}`));
+    const copies = record8.copies ?? {};
+    for (const path41 of Object.keys(copies).sort((a, b2) => a.localeCompare(b2))) {
+      const copy = copies[path41];
+      if (!copy?.blobRef) continue;
+      if (seen.has(`${copy.name}\0${copy.blobRef}`)) continue;
+      out.push({
+        ...base(session),
+        fileId: `chat:${session.id}:out:${copy.path}`,
+        name: outputDisplayName(copy.path),
+        blobId: copy.blobRef,
+        ...copy.contentType ? { contentType: copy.contentType } : {},
+        size: copy.size,
+        uploadedBy: session.aiActorId,
+        uploadedAt: Number.isNaN(Date.parse(copy.mtime)) ? copy.copiedAt : new Date(copy.mtime).toISOString(),
+        chatSource: "output"
+      });
+    }
+  }
+  return out;
+}
+var init_chat_files2 = __esm({
+  "../server/src/domains/projects/chat-files.ts"() {
+    "use strict";
+    init_files_view();
+    init_uncategorized_project();
+  }
+});
+
+// ../server/src/domains/projects/chat-sessions.ts
+async function listProjectChatSessions(chat, projectId2, delegationChildIds) {
+  if (!chat.listSessionsByProject) return [];
+  const scope = isUncategorizedProjectId(projectId2) ? null : projectId2;
+  const sessions = (await chat.listSessionsByProject(scope)).filter((s2) => (s2.projectId ?? null) === scope && isProjectChatSession(s2));
+  const children = delegationChildIds && sessions.length > 0 ? await delegationChildIds(sessions.map((s2) => s2.id)).catch(() => /* @__PURE__ */ new Set()) : /* @__PURE__ */ new Set();
+  return sessions.filter((s2) => !children.has(s2.id)).map(toRow);
+}
+function toRow(s2) {
+  const title = s2.title?.trim();
+  return {
+    id: s2.id,
+    title: title ? title : null,
+    humanActorId: s2.humanActorId,
+    aiActorId: s2.aiActorId,
+    createdAt: s2.createdAt,
+    projectId: s2.projectId ?? null
+  };
+}
+var init_chat_sessions = __esm({
+  "../server/src/domains/projects/chat-sessions.ts"() {
+    "use strict";
+    init_chat_files2();
+    init_uncategorized_project();
+  }
+});
+
 // ../server/src/domains/projects/routes.ts
 function projectsDomain(opts) {
   const svc = async (req) => opts.resolveService ? opts.resolveService(req.auth.companyId) : opts.service;
@@ -224927,6 +225409,28 @@ function projectsDomain(opts) {
     if (role === "owner" || role === "admin") return;
     throw new ApiError(403, action.code, `\u4F60\u6CA1\u6709${action.verb}\u8BE5\u9879\u76EE\u7684\u6743\u9650\uFF0C\u8BF7\u8054\u7CFB\u7EC4\u7EC7\u7BA1\u7406\u5458`);
   };
+  const mayReassignProject = async (req, item) => {
+    if (item.actorId && item.actorId === req.auth.actor) return true;
+    if (item.currentProjectId && !isUncategorizedProjectId(item.currentProjectId)) {
+      const project = await (await svc(req)).getProject(item.currentProjectId);
+      if (project?.createdBy && project.createdBy.id === req.auth.actor) return true;
+    }
+    if (!opts.resolveMemberRole) return false;
+    const role = await opts.resolveMemberRole(req.auth.companyId, req.auth.actor);
+    return role === "owner" || role === "admin";
+  };
+  const requireWorkorderReassignPermission = async (req, workOrderId) => {
+    if (!opts.resolveMemberRole) return;
+    const service = await svc(req);
+    const binding = await service.getWorkspaceBinding(workOrderId).catch(() => null);
+    const allowed = await mayReassignProject(req, {
+      actorId: service.workorderOwnerOf(workOrderId),
+      currentProjectId: binding?.projectId ?? null
+    });
+    if (!allowed) {
+      throw new ApiError(403, "WORKORDER_REASSIGN_FORBIDDEN", "\u53EA\u6709\u4EFB\u52A1\u8D1F\u8D23\u4EBA\u3001\u9879\u76EE\u8D1F\u8D23\u4EBA\u6216\u7EC4\u7EC7\u7BA1\u7406\u5458\u53EF\u4EE5\u79FB\u52A8\u8FD9\u4E2A\u4EFB\u52A1");
+    }
+  };
   return (router) => {
     router.post("/api/projects", async (req) => {
       const body2 = req.body;
@@ -225044,6 +225548,45 @@ function projectsDomain(opts) {
       const items = await (await svc(req)).listWorkordersForProject(req.params.id);
       return { status: 200, body: { items } };
     });
+    router.get("/api/projects/:id/chat-sessions", async (req) => {
+      const project = await (await svc(req)).getProject(req.params.id);
+      if (!project) throw new ApiError(404, "NOT_FOUND", `\u6CA1\u6709\u8FD9\u4E2A\u9879\u76EE\uFF1A${req.params.id}`);
+      if (!opts.chatSessionsFor) return { status: 200, body: { items: [] } };
+      const companyId = req.auth.companyId;
+      const rows = await listProjectChatSessions(
+        await opts.chatSessionsFor(companyId),
+        req.params.id,
+        opts.delegationChildIds ? (ids2) => opts.delegationChildIds(companyId, ids2) : void 0
+      );
+      return { status: 200, body: { items: rows.map(toApiProjectChatSession) } };
+    });
+    router.patch("/api/chat-sessions/:id/project", async (req) => {
+      if (!opts.chatSessionsFor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const store = await opts.chatSessionsFor(req.auth.companyId);
+      const session = await store.getSession(req.params.id);
+      if (!session || !isProjectChatSession(session)) throw new ApiError(404, "NOT_FOUND", "session not found");
+      if (opts.delegationChildIds && (await opts.delegationChildIds(req.auth.companyId, [session.id])).has(session.id)) {
+        throw new ApiError(404, "NOT_FOUND", "session not found");
+      }
+      const allowed = await mayReassignProject(req, {
+        actorId: session.humanActorId,
+        currentProjectId: session.projectId ?? null
+      });
+      if (!allowed) {
+        throw new ApiError(403, "CHAT_SESSION_REASSIGN_FORBIDDEN", "\u53EA\u6709\u5BF9\u8BDD\u53D1\u8D77\u4EBA\u3001\u9879\u76EE\u8D1F\u8D23\u4EBA\u6216\u7EC4\u7EC7\u7BA1\u7406\u5458\u53EF\u4EE5\u79FB\u52A8\u8FD9\u4E2A\u5BF9\u8BDD");
+      }
+      const b2 = req.body ?? {};
+      if (!("project_id" in b2) && !("projectId" in b2)) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 project_id");
+      const raw = "project_id" in b2 ? b2.project_id : b2.projectId;
+      const target = raw === null || raw === "" || raw === "null" || typeof raw === "string" && isUncategorizedProjectId(raw) ? null : raw;
+      if (target !== null) {
+        if (typeof target !== "string") throw new ApiError(400, "BAD_REQUEST", "project_id \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6216 null");
+        const project = await (await svc(req)).getProject(target);
+        if (!project) throw new ApiError(404, "NOT_FOUND", `\u6CA1\u6709\u8FD9\u4E2A\u9879\u76EE\uFF1A${target}`);
+      }
+      await store.updateSession(session.id, { projectId: target });
+      return { status: 200, body: { chat_session_id: session.id, project_id: target } };
+    });
     router.post("/api/projects/:id/files", async (req) => {
       const b2 = req.body ?? {};
       const base642 = b2.content_base64 ?? b2.contentBase64;
@@ -225250,6 +225793,7 @@ ${errs.join("\n")}`);
       return { status: 200, body: toApiNodeOutputValidation(validation) };
     });
     router.patch("/api/work-orders/:workOrderId/project", async (req) => {
+      await requireWorkorderReassignPermission(req, req.params.workOrderId);
       const b2 = req.body ?? {};
       const nulledPatch = "project_id" in b2 && b2.project_id === null || "projectId" in b2 && b2.projectId === null || b2.project_id === "null" || b2.project_id === "" || b2.projectId === "null" || b2.projectId === "";
       if (nulledPatch) {
@@ -225270,6 +225814,7 @@ ${errs.join("\n")}`);
       }
     });
     router.delete("/api/work-orders/:workOrderId/project", async (req) => {
+      await requireWorkorderReassignPermission(req, req.params.workOrderId);
       try {
         await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
         return { status: 200, body: { work_order_id: req.params.workOrderId, project_id: null } };
@@ -225743,6 +226288,16 @@ function toApiWorkOrderDetail(detail) {
     }))
   };
 }
+function toApiProjectChatSession(row) {
+  return {
+    id: row.id,
+    title: row.title,
+    human_actor_id: row.humanActorId,
+    ai_actor_id: row.aiActorId,
+    created_at: row.createdAt,
+    project_id: row.projectId
+  };
+}
 function toApiProjectFilesView(view) {
   return {
     total: view.total,
@@ -225801,6 +226356,8 @@ var init_routes5 = __esm({
     "use strict";
     init_router();
     init_src();
+    init_chat_files2();
+    init_chat_sessions();
     init_uncategorized_project();
   }
 });
@@ -228095,11 +228652,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto50, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto52, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto50 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
     import_node_fs14 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -228132,7 +228689,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto50.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto52.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -228151,13 +228708,22 @@ var init_notification_store = __esm({
         this.rows.set(id, next);
         this.save();
       }
+      async rekey(id, sourceKey, patch, at) {
+        const r = this.rows.get(id);
+        if (!r || r.status !== "pending" || this.findLive(r.recipient, sourceKey, r.category)) return false;
+        this.rows.set(id, { ...r, sourceKey, ...patch.nodeId ? { nodeId: patch.nodeId } : {} });
+        await this.refresh(id, patch, at);
+        return true;
+      }
       async close(id, closure) {
         const r = this.rows.get(id);
         if (!r || r.status !== "pending") return false;
         const next = { ...r, status: closure.status, closedAt: closure.closedAt, updatedAt: closure.closedAt };
         if (closure.closedBy) next.closedBy = closure.closedBy;
-        if (closure.status === "handled") next.result = closure.result;
-        else next.invalidReason = closure.invalidReason;
+        if (closure.status === "handled") {
+          next.result = closure.result;
+          next.readAt ??= closure.closedAt;
+        } else next.invalidReason = closure.invalidReason;
         this.rows.set(id, next);
         this.save();
         return true;
@@ -228176,6 +228742,16 @@ var init_notification_store = __esm({
         }
         if (changed) this.save();
       }
+      async countUnread(recipient) {
+        let pending = 0;
+        let all2 = 0;
+        for (const r of this.rows.values()) {
+          if (r.recipient !== recipient || r.readAt) continue;
+          all2++;
+          if (r.status === "pending") pending++;
+        }
+        return { pending, all: all2 };
+      }
       async purgeBefore(cutoff) {
         let n = 0;
         for (const [id, r] of this.rows) {
@@ -228236,7 +228812,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto50.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto52.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -228289,9 +228865,34 @@ var init_notification_store = __esm({
           ]
         );
       }
+      async rekey(id, sourceKey, patch, at) {
+        try {
+          const r = await this.sql.query(
+            `UPDATE ${this.t} SET source_key = $2, node_id = COALESCE($3, node_id), title = $4, workspace_title = $5,
+           actor_id = $6, card_id = $7, item = $8, updated_at = $9
+         WHERE id = $1 AND status = 'pending'`,
+            [
+              id,
+              sourceKey,
+              patch.nodeId ?? null,
+              patch.title,
+              patch.workspaceTitle ?? null,
+              patch.actorId ?? null,
+              patch.cardId ?? null,
+              patch.item ? JSON.stringify(patch.item) : null,
+              at
+            ]
+          );
+          return (r.rowCount ?? 0) > 0;
+        } catch (err) {
+          if (err.code === "23505") return false;
+          throw err;
+        }
+      }
       async close(id, closure) {
         const r = await this.sql.query(
-          `UPDATE ${this.t} SET status = $2, closed_at = $3, closed_by = $4, result = $5, invalid_reason = $6, updated_at = $3
+          `UPDATE ${this.t} SET status = $2, closed_at = $3, closed_by = $4, result = $5, invalid_reason = $6, updated_at = $3,
+         read_at = CASE WHEN $2 = 'handled' THEN COALESCE(read_at, $3::timestamptz) ELSE read_at END
        WHERE id = $1 AND status = 'pending'`,
           [
             id,
@@ -228331,6 +228932,15 @@ var init_notification_store = __esm({
           [recipient, [...ids2], at]
         );
       }
+      async countUnread(recipient) {
+        const r = await this.sql.query(
+          `SELECT count(*) FILTER (WHERE status = 'pending')::int AS pending, count(*)::int AS "all"
+       FROM ${this.t} WHERE recipient = $1 AND read_at IS NULL`,
+          [recipient]
+        );
+        const row = r.rows[0] ?? {};
+        return { pending: Number(row["pending"] ?? 0), all: Number(row["all"] ?? 0) };
+      }
       async purgeBefore(cutoff) {
         const r = await this.sql.query(
           `DELETE FROM ${this.t}
@@ -229153,13 +229763,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs15, import_node_path20, import_node_crypto51, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs15, import_node_path20, import_node_crypto53, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs15 = __toESM(require("node:fs"), 1);
     import_node_path20 = __toESM(require("node:path"), 1);
-    import_node_crypto51 = __toESM(require("node:crypto"), 1);
+    import_node_crypto53 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -229177,7 +229787,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto51.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto53.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -230028,7 +230638,27 @@ function collabDomain(opts) {
         limit
       });
       const last = items.at(-1);
-      return { status: 200, body: { items, cursor: last && items.length === limit ? notificationCursor(last) : null } };
+      const unread = await store.countUnread(req.auth.actor);
+      const body2 = { items, cursor: last && items.length === limit ? notificationCursor(last) : null, unread };
+      return { status: 200, body: body2 };
+    });
+    router.post("/api/notifications/read", async (req) => {
+      if (!opts.resolveNotificationLedger) {
+        return { status: 501, body: { error: { code: "not_implemented", message: "\u672C\u90E8\u7F72\u672A\u542F\u7528\u901A\u77E5\u53F0\u8D26" } } };
+      }
+      const ids2 = req.body?.ids;
+      if (!Array.isArray(ids2) || ids2.length === 0 || ids2.length > 200 || !ids2.every((id) => typeof id === "string" && id.length > 0)) {
+        return { status: 400, body: { error: { code: "bad_request", message: "ids \u5FC5\u987B\u662F 1\u2013200 \u4E2A\u901A\u77E5 id" } } };
+      }
+      let store;
+      try {
+        store = await opts.resolveNotificationLedger(req.auth.companyId);
+      } catch (err) {
+        console.warn(`[notifications] \u65E0\u53EF\u4FE1\u516C\u53F8\u4E0A\u4E0B\u6587\uFF0C\u4E0D\u6807\u5DF2\u8BFB\uFF08\u4E0D\u56DE\u843D\u9ED8\u8BA4\u516C\u53F8\uFF09: ${String(err)}`);
+      }
+      if (!store) return { status: 503, body: { error: { code: "unavailable", message: "\u901A\u77E5\u53F0\u8D26\u6682\u4E0D\u53EF\u7528" } } };
+      await store.markRead(req.auth.actor, ids2, (/* @__PURE__ */ new Date()).toISOString());
+      return { status: 200, body: { ok: true } };
     });
     const companyOf = (req) => req.auth.companyId ?? "company:default";
     const noTagStore = { status: 501, body: { error: { code: "not_implemented", message: "\u672C\u90E8\u7F72\u672A\u542F\u7528\u5DE5\u5355\u6807\u7B7E" } } };
@@ -230316,326 +230946,6 @@ var init_collab = __esm({
   }
 });
 
-// ../server/src/domains/chat-sessions/files-view.ts
-function reasonFromWorkdirCode(code2) {
-  switch (code2) {
-    case "NODE_OFFLINE":
-      return "NODE_OFFLINE";
-    case "TIMEOUT":
-      return "TIMEOUT";
-    default:
-      return "ERROR";
-  }
-}
-function joinRel2(dir, name) {
-  return dir ? `${dir}/${name}` : name;
-}
-function workdirFileItem(rel, name, size, mtime) {
-  return {
-    id: `workdir:${rel}`,
-    name,
-    kind: "file",
-    // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
-    // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
-    content_type: null,
-    size,
-    updated_at: mtime,
-    source: "workdir",
-    blob_ref: null,
-    path: rel,
-    message_id: null,
-    // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
-    // 这里是**按能力不渲染**的判据，不是置灰假钮。
-    editable: false
-  };
-}
-async function collectWorkdirFiles(bridge, loc, now = Date.now) {
-  const items = [];
-  if (typeof bridge.walk === "function") {
-    const walked = await bridge.walk(
-      loc.nodeId,
-      { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: "" },
-      WORKDIR_TREE_MAX_ENTRIES
-    );
-    if (walked.ok) {
-      let truncated2 = walked.truncated === true;
-      for (const entry of walked.entries) {
-        if (entry.type !== "file") continue;
-        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
-          truncated2 = true;
-          break;
-        }
-        const slash = entry.path.lastIndexOf("/");
-        items.push(workdirFileItem(entry.path, entry.path.slice(slash + 1), entry.size, entry.mtime));
-      }
-      return { ok: true, items, truncated: truncated2 };
-    }
-    if (walked.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
-    if (walked.code !== "UNSUPPORTED") return { ok: false, reason: reasonFromWorkdirCode(walked.code) };
-  }
-  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
-  let listCalls = 0;
-  let truncated = false;
-  const listDir = (path41) => {
-    listCalls += 1;
-    return bridge.list(loc.nodeId, {
-      workdirKey: loc.workdirKey,
-      runtimeKind: loc.runtimeKind,
-      rtId: loc.rtId,
-      path: path41
-    });
-  };
-  const root = await listDir("");
-  if (!root.ok) {
-    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
-    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
-  }
-  let level = [{ path: "", outcome: root }];
-  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
-    const nextDirs = [];
-    for (const { path: dir, outcome } of level) {
-      if (!outcome.ok) {
-        truncated = true;
-        continue;
-      }
-      if (outcome.truncated) truncated = true;
-      for (const entry of outcome.entries) {
-        if (entry.type === "dir") {
-          nextDirs.push(joinRel2(dir, entry.name));
-          continue;
-        }
-        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
-          truncated = true;
-          continue;
-        }
-        items.push(workdirFileItem(joinRel2(dir, entry.name), entry.name, entry.size, entry.mtime));
-      }
-    }
-    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
-      if (nextDirs.length > 0) truncated = true;
-      break;
-    }
-    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
-    if (budget <= 0 || now() >= deadline) {
-      truncated = true;
-      break;
-    }
-    const take = nextDirs.slice(0, budget);
-    if (take.length < nextDirs.length) truncated = true;
-    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
-    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
-  }
-  return { ok: true, items, truncated };
-}
-async function collectMessageFiles(messages, blobs) {
-  const rows = [];
-  for (const message of messages) {
-    if (!Array.isArray(message.attachments)) continue;
-    message.attachments.forEach((attachment, index2) => {
-      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
-      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
-      rows.push({
-        item: {
-          id: `msg:${message.id}:${index2}`,
-          name: attachment.name,
-          kind: "file",
-          updated_at: attachment.updatedAt ?? message.createdAt,
-          source: "message",
-          blob_ref: blobRef,
-          path: null,
-          message_id: message.id,
-          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
-          // contain `name`）——没有可写回的载体，一律不给编辑入口。
-          editable: blobRef !== null && isEditableFileName(attachment.name)
-        },
-        blobRef,
-        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
-      });
-    });
-  }
-  const metaCache = /* @__PURE__ */ new Map();
-  const metaOf = (ref2) => {
-    if (!blobs) return Promise.resolve(null);
-    let hit = metaCache.get(ref2);
-    if (!hit) {
-      hit = blobs.meta(ref2).catch(() => null);
-      metaCache.set(ref2, hit);
-    }
-    return hit;
-  };
-  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
-    const meta = blobRef ? await metaOf(blobRef) : null;
-    return {
-      ...item,
-      content_type: declaredType ?? meta?.contentType ?? null,
-      size: meta?.size ?? null
-    };
-  }));
-}
-function mergeChatSessionFiles(messageItems, workdirItems, materializedCopies = /* @__PURE__ */ new Set()) {
-  const out = [];
-  const seenMessageKeys = /* @__PURE__ */ new Set();
-  for (const item of [...messageItems].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at))) {
-    const key = `${item.name}\0${item.blob_ref ?? ""}`;
-    if (seenMessageKeys.has(key)) continue;
-    seenMessageKeys.add(key);
-    out.push(item);
-  }
-  const seenWorkdirPaths = /* @__PURE__ */ new Set();
-  for (const item of workdirItems) {
-    if (item.path && materializedCopies.has(item.path)) continue;
-    if (seenWorkdirPaths.has(item.id)) continue;
-    seenWorkdirPaths.add(item.id);
-    out.push(item);
-  }
-  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
-  return out;
-}
-async function findMaterializedAttachmentCopies(messageItems, workdirItems, read) {
-  const copies = /* @__PURE__ */ new Set();
-  const attachments = messageItems.filter((item) => item.blob_ref && /^[a-f0-9]{64}$/.test(item.blob_ref));
-  let budget = CHAT_ATTACHMENT_MAX_BYTES;
-  const deadline = Date.now() + WORKDIR_WALK_BUDGET_MS;
-  let reads = 0;
-  for (const file of workdirItems) {
-    const rootFile = file.path === file.name;
-    const inputFile = file.path?.startsWith("inputs/attachments/") && !file.path.slice("inputs/attachments/".length).includes("/");
-    if (!file.path || !rootFile && !inputFile) continue;
-    const candidates = attachments.filter((attachment) => {
-      const safe = safeAttachmentName(attachment.name);
-      const numbered = file.name.endsWith(`-${safe}`) && /^\d+$/.test(file.name.slice(0, -(safe.length + 1)));
-      return (rootFile ? file.name === attachment.name : file.name === safe || numbered) && attachment.size !== null && attachment.size === file.size;
-    });
-    if (Date.now() >= deadline) break;
-    if (!candidates.length || file.size === null || file.size > budget || reads >= 10) continue;
-    reads += 1;
-    budget -= file.size;
-    let timer;
-    try {
-      const result = await Promise.race([
-        read(file.path, file.size),
-        new Promise((resolve10) => {
-          timer = setTimeout(() => resolve10(null), Math.max(0, deadline - Date.now()));
-        })
-      ]);
-      if (!result?.ok) continue;
-      const bytes2 = Buffer.from(result.contentBase64, "base64");
-      if (bytes2.length !== file.size) continue;
-      const hash2 = (0, import_node_crypto52.createHash)("sha256").update(bytes2).digest("hex");
-      if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
-    } catch {
-    } finally {
-      if (timer) clearTimeout(timer);
-    }
-  }
-  return copies;
-}
-var import_node_crypto52, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
-var init_files_view = __esm({
-  "../server/src/domains/chat-sessions/files-view.ts"() {
-    "use strict";
-    import_node_crypto52 = require("node:crypto");
-    init_chat_attachment_files();
-    init_src();
-    WORKDIR_WALK_MAX_DEPTH = 3;
-    WORKDIR_WALK_MAX_ENTRIES = 200;
-    WORKDIR_WALK_MAX_LIST_CALLS = 20;
-    WORKDIR_WALK_BUDGET_MS = 1e4;
-    WORKDIR_TREE_MAX_ENTRIES = 2e3;
-  }
-});
-
-// ../server/src/domains/projects/chat-files.ts
-function chatFolderTitle(session) {
-  const title = session.title?.trim();
-  return title ? title : "\u672A\u547D\u540D\u5BF9\u8BDD";
-}
-function outputDisplayName(path41) {
-  return path41.startsWith("outputs/") ? path41.slice("outputs/".length) : path41;
-}
-async function collectProjectChatFiles(chat, projectId2, meta, options = {}) {
-  const scope = isUncategorizedProjectId(projectId2) ? null : projectId2;
-  const [attachmentMessages, outputSessions] = await Promise.all([
-    chat.listAttachmentMessages ? chat.listAttachmentMessages(scope) : Promise.resolve([]),
-    chat.listOutputCopies ? chat.listOutputCopies(scope) : Promise.resolve([])
-  ]);
-  const sessionIds = [.../* @__PURE__ */ new Set([
-    ...attachmentMessages.map((m2) => m2.sessionId),
-    ...outputSessions.map((s2) => s2.sessionId)
-  ])];
-  const sessions = /* @__PURE__ */ new Map();
-  await Promise.all(sessionIds.map(async (id) => {
-    const session = await chat.getSession(id);
-    if (!session) return;
-    if ((session.projectId ?? null) !== scope) return;
-    if (session.visibility === "internal" || session.analyzedRunId) return;
-    if (options.isDelegationChild && await options.isDelegationChild(id).catch(() => false)) return;
-    sessions.set(id, session);
-  }));
-  const out = [];
-  const base = (session) => ({
-    projectId: projectId2,
-    chatSessionId: session.id,
-    chatTitle: chatFolderTitle(session),
-    chatOwnerId: session.humanActorId
-  });
-  const bySession = /* @__PURE__ */ new Map();
-  for (const message of attachmentMessages) {
-    if (!sessions.has(message.sessionId)) continue;
-    const list2 = bySession.get(message.sessionId) ?? [];
-    list2.push(message);
-    bySession.set(message.sessionId, list2);
-  }
-  for (const [sessionId, messages] of bySession) {
-    const session = sessions.get(sessionId);
-    const rows = await collectMessageFiles(messages.map((m2) => ({ ...m2, id: m2.messageId })), { meta });
-    for (const row of mergeChatSessionFiles(rows, [])) {
-      if (row.blob_ref === null) continue;
-      out.push({
-        ...base(session),
-        fileId: `chat:${sessionId}:${row.id}`,
-        name: row.name,
-        blobId: row.blob_ref,
-        ...row.content_type ? { contentType: row.content_type } : {},
-        size: row.size,
-        uploadedBy: session.humanActorId,
-        uploadedAt: row.updated_at,
-        chatSource: "attachment"
-      });
-    }
-  }
-  for (const record8 of outputSessions) {
-    const session = sessions.get(record8.sessionId);
-    if (!session) continue;
-    const seen = new Set(out.filter((file) => file.chatSessionId === session.id).map((file) => `${file.name}\0${file.blobId}`));
-    const copies = record8.copies ?? {};
-    for (const path41 of Object.keys(copies).sort((a, b2) => a.localeCompare(b2))) {
-      const copy = copies[path41];
-      if (!copy?.blobRef) continue;
-      if (seen.has(`${copy.name}\0${copy.blobRef}`)) continue;
-      out.push({
-        ...base(session),
-        fileId: `chat:${session.id}:out:${copy.path}`,
-        name: outputDisplayName(copy.path),
-        blobId: copy.blobRef,
-        ...copy.contentType ? { contentType: copy.contentType } : {},
-        size: copy.size,
-        uploadedBy: session.aiActorId,
-        uploadedAt: Number.isNaN(Date.parse(copy.mtime)) ? copy.copiedAt : new Date(copy.mtime).toISOString(),
-        chatSource: "output"
-      });
-    }
-  }
-  return out;
-}
-var init_chat_files2 = __esm({
-  "../server/src/domains/projects/chat-files.ts"() {
-    "use strict";
-    init_files_view();
-    init_uncategorized_project();
-  }
-});
-
 // ../server/src/domains/projects/index.ts
 function createProjectsDomain(opts) {
   const build = (companyId, deps) => {
@@ -230694,7 +231004,9 @@ function createProjectsDomain(opts) {
       service,
       ...opts.resolveCompany ? { resolveService } : {},
       ...opts.defaultBranchResolver ? { defaultBranchResolver: opts.defaultBranchResolver } : {},
-      ...opts.resolveMemberRole ? { resolveMemberRole: opts.resolveMemberRole } : {}
+      ...opts.resolveMemberRole ? { resolveMemberRole: opts.resolveMemberRole } : {},
+      ...opts.chatSessionsFor ? { chatSessionsFor: opts.chatSessionsFor } : {},
+      ...opts.delegationChildIds ? { delegationChildIds: opts.delegationChildIds } : {}
     }),
     ...opts.resolveCompany ? { resolveService } : {}
   };
@@ -230721,11 +231033,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto53, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto54, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -230817,7 +231129,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto54.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -231026,7 +231338,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto54.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -231157,7 +231469,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto53.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto54.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -231214,7 +231526,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto54.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -231452,11 +231764,11 @@ var init_service6 = __esm({
 });
 
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto54, MemberOffboardingService;
+var import_node_crypto55, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto55 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -231528,7 +231840,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto54.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto55.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -232038,18 +232350,18 @@ var init_routes6 = __esm({
 
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto55.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto56.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto55.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto56.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto55, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto56, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -232074,7 +232386,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto55.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto56.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -232494,7 +232806,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope = companyId?.trim();
-  const suffix = scope ? `c${(0, import_node_crypto56.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope ? `c${(0, import_node_crypto57.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -232823,12 +233135,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto56;
+var import_node_crypto57;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto56 = require("node:crypto");
+    import_node_crypto57 = require("node:crypto");
   }
 });
 
@@ -233389,7 +233701,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto57.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto58.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -233521,21 +233833,21 @@ function nodesDomain(deps) {
       return { status: 200, body: { override } };
     });
     router.get("/api/runtimes/:runtimeId/activity", async (req) => {
-      const found = await runtimeInScope(req);
-      if (found.denied) return found.denied;
+      const found2 = await runtimeInScope(req);
+      if (found2.denied) return found2.denied;
       const reader = await deps.runtimeRuns?.(req.auth.companyId);
-      const activity = reader ? await reader.runtimeRunActivity(found.runtimeId) : null;
+      const activity = reader ? await reader.runtimeRunActivity(found2.runtimeId) : null;
       return { status: 200, body: { activity } };
     });
     router.get("/api/runtimes/:runtimeId/usage", async (req) => {
-      const found = await runtimeInScope(req);
-      if (found.denied) return found.denied;
+      const found2 = await runtimeInScope(req);
+      if (found2.denied) return found2.denied;
       const granularity = req.query.get("granularity") === "day" ? "day" : "hour";
       const window2 = parseRuntimeUsageWindow(req.query, granularity, Date.now());
       if (typeof window2 === "string") return { status: 400, body: { error: window2 } };
       const reader = await deps.runtimeRuns?.(req.auth.companyId);
-      const runs = reader ? await reader.listRuntimeRuns(found.runtimeId, window2) : null;
-      return { status: 200, body: { items: bucketRuntimeRuns(found.runtimeId, runs ?? [], granularity) } };
+      const runs = reader ? await reader.listRuntimeRuns(found2.runtimeId, window2) : null;
+      return { status: 200, body: { items: bucketRuntimeRuns(found2.runtimeId, runs ?? [], granularity) } };
     });
     router.get("/api/runtimes/:runtimeId/config", async (req) => {
       const runtimeId = req.params["runtimeId"];
@@ -233572,13 +233884,13 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto57.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto58.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto57, import_node_fs16, import_node_url6, import_node_path21;
+var import_node_crypto58, import_node_fs16, import_node_url6, import_node_path21;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
     import_node_fs16 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path21 = require("node:path");
@@ -233931,9 +234243,56 @@ var init_node_store = __esm({
   }
 });
 
+// ../server/src/domains/collab/task-notices.ts
+function taskNoticeRecipients(model, workorderId, snapshot, members, trigger) {
+  const out = /* @__PURE__ */ new Set();
+  for (const a of model.artifacts.values()) {
+    if (a.workspace === workorderId && isHumanActorId(a.owner)) out.add(a.owner);
+  }
+  for (const r of snapshot?.requirements ?? []) if (isHumanActorId(r.reviewerActorId)) out.add(r.reviewerActorId);
+  for (const r of snapshot?.reviews ?? []) if (isHumanActorId(r.reviewerActorId)) out.add(r.reviewerActorId);
+  if (trigger) out.delete(trigger);
+  return [...out].filter((id) => members.has(id)).sort();
+}
+function settleTrigger(events, accept) {
+  const e = accept.event;
+  if (e.by && isHumanActorId(e.by)) return e.by;
+  const workId = e.workId;
+  const before = events.filter((x2) => x2.seq <= accept.seq);
+  for (let i = before.length - 1; i >= 0; i--) {
+    const x2 = before[i].event;
+    if (x2.kind === "review.response" && x2.targetWorkId === workId && x2.verdict === "approve" && x2.reviewerActorId && isHumanActorId(x2.reviewerActorId)) {
+      return x2.reviewerActorId;
+    }
+    if (x2.kind === "work.conclude" && x2.workId === workId && isHumanActorId(before[i].actorId)) return before[i].actorId;
+  }
+  return void 0;
+}
+function isCreationHold(paused) {
+  return paused.event.reason === WORKORDER_HOLD_AT_CREATE_REASON;
+}
+function endsCreationHold(pauses, resumed) {
+  let last;
+  for (const p2 of pauses) if (p2.seq < resumed.seq && p2.event.kind === "workorder.paused") last = p2;
+  return last !== void 0 && isCreationHold(last);
+}
+var TASK_NOTICE_TITLE;
+var init_task_notices = __esm({
+  "../server/src/domains/collab/task-notices.ts"() {
+    "use strict";
+    init_src();
+    TASK_NOTICE_TITLE = {
+      "workorder-settled": "\u4EFB\u52A1\u5DF2\u5B8C\u6210",
+      "workorder-cancelled": "\u4EFB\u52A1\u5DF2\u53D6\u6D88",
+      "workorder-paused": "\u4EFB\u52A1\u5DF2\u6682\u505C",
+      "workorder-resumed": "\u4EFB\u52A1\u5DF2\u6062\u590D"
+    };
+  }
+});
+
 // ../server/src/domains/collab/notification-ledger.ts
 function isLedgerItem(item) {
-  return item.actionRequired && LEDGER_KINDS.has(item.kind);
+  return item.actionRequired && LEDGER_INBOX_KINDS.has(item.kind);
 }
 function generationOf(model, item) {
   if (item.kind === "rework") return item.revisionId;
@@ -233943,7 +234302,17 @@ function generationOf(model, item) {
   }
   return void 0;
 }
+function staffingRoleOf(model, item) {
+  if (item.kind !== "needs-staffing" || !item.artifactId) return void 0;
+  const owner = model.artifacts.get(item.artifactId)?.owner;
+  return owner?.startsWith(PENDING_ROLE_PREFIX) ? owner.slice(PENDING_ROLE_PREFIX.length) : void 0;
+}
+function staffingRoleOfKey(sourceKey) {
+  return STAFFING_ROLE_KEY.exec(sourceKey)?.[1];
+}
 function notificationSourceKey(model, item) {
+  const role = staffingRoleOf(model, item);
+  if (role && item.workspace) return `needs-staffing:${item.workspace}:role:${role}`;
   const base = inboxItemKey(item);
   if (!base) return void 0;
   const gen = generationOf(model, item);
@@ -233953,6 +234322,10 @@ function generationOfKey(sourceKey) {
   const at = sourceKey.lastIndexOf("@");
   return at >= 0 ? sourceKey.slice(at + 1) : void 0;
 }
+function workNumber(workId) {
+  const m2 = /:(\d+)$/.exec(workId);
+  return m2 ? Number(m2[1]) : void 0;
+}
 function nodeOfWork(workId) {
   if (!workId.startsWith("wk:")) return null;
   const body2 = workId.slice(3);
@@ -233981,38 +234354,41 @@ function classifyClosure(row, facts) {
     const o = facts.draftOutcome;
     return o.by === me ? handled2(me, o.approved ? "\u5DF2\u786E\u8BA4" : "\u5DF2\u9A73\u56DE", facts.now) : invalidated("handled-by-other", facts.now, o.by);
   }
-  const mine = resolvedByMe(row, evs, me, onNode);
-  if (mine) return mine;
+  const evidence = [];
+  const add = (f2) => {
+    if (f2) evidence.push(f2);
+  };
+  add(resolvedByMe(row, evs, me, onNode));
   const sealCancel = evs.find((rec) => {
     const e = payload(rec, "plan.delete_node");
     return !!e && e.nodeId === node2 && e.sealReason === "cancelled";
   });
-  if (facts.workorderCancelled) return invalidated("workorder-cancelled", sealCancel ? at(sealCancel) : facts.now, sealCancel?.actorId);
-  if (sealCancel) return invalidated("node-cancelled", at(sealCancel), sealCancel.actorId);
+  if (sealCancel) add({ rec: sealCancel, closure: invalidated(facts.workorderCancelled ? "workorder-cancelled" : "node-cancelled", at(sealCancel), sealCancel.actorId) });
   const deleted = evs.find((rec) => {
     const e = payload(rec, "plan.delete_node");
-    return !!e && e.nodeId === node2 && e.sealReason !== "accepted";
+    return !!e && e.nodeId === node2 && e.sealReason !== "accepted" && e.sealReason !== "cancelled";
   });
-  if (deleted) return invalidated("node-cancelled", at(deleted), deleted.actorId);
-  const other = resolvedByOther(row, evs, me, onNode);
-  if (other) return other;
+  if (deleted) add({ rec: deleted, closure: invalidated("node-cancelled", at(deleted), deleted.actorId) });
+  add(resolvedByOther(row, evs, me, onNode));
   const gen = generationOfKey(row.sourceKey);
   if (gen) {
+    const genNo = workNumber(gen);
+    const isNewer = (workId) => workId !== gen && (genNo === void 0 || (workNumber(workId) ?? Number.POSITIVE_INFINITY) > genNo);
     const newer = evs.find((rec) => {
       const c = payload(rec, "work.create");
-      if (c && c.nodeId === node2 && c.workId !== gen) return true;
+      if (c && c.nodeId === node2 && isNewer(c.workId)) return true;
       const s2 = payload(rec, "work.submit_output");
-      return !!s2 && nodeOfWork(s2.workId) === node2 && s2.workId !== gen;
+      return !!s2 && nodeOfWork(s2.workId) === node2 && isNewer(s2.workId);
     });
-    if (newer) return invalidated("superseded", at(newer), newer.actorId);
+    if (newer) add({ rec: newer, closure: invalidated("superseded", at(newer), newer.actorId) });
   }
   const reassign = evs.find((rec) => {
     const a = payload(rec, "plan.assign_actor");
     if (a && a.nodeId === node2 && a.assigneeActorId !== me && ownerKinds.has(row.kind)) return true;
     const r = payload(rec, "plan.update_review_requirements");
-    return !!r && r.nodeId === node2 && reviewKinds.has(row.kind);
+    return !!r && r.nodeId === node2 && reviewKinds.has(row.kind) && !r.reviewers.some((x2) => x2.reviewerActorId === me);
   });
-  if (reassign) return invalidated("reassigned", at(reassign), reassign.actorId);
+  if (reassign) add({ rec: reassign, closure: invalidated("reassigned", at(reassign), reassign.actorId) });
   const myReviewPrefix = gen ? `rv:${gen}:${me}:` : void 0;
   const withdrawn = evs.find((rec) => {
     const k2 = payload(rec, "review.kill") ?? payload(rec, "review.timeout");
@@ -234020,9 +234396,15 @@ function classifyClosure(row, facts) {
     if (item?.waitingRowId !== void 0 && k2.reviewId === item.waitingRowId) return true;
     return row.kind === "review-request" && !!myReviewPrefix && k2.reviewId.startsWith(myReviewPrefix);
   });
-  if (withdrawn) return invalidated("source-changed", at(withdrawn), withdrawn.actorId);
+  if (withdrawn) add({ rec: withdrawn, closure: invalidated("source-changed", at(withdrawn), withdrawn.actorId) });
+  const first = evidence.reduce((best, f2) => !best || f2.rec.seq < best.rec.seq ? f2 : best, null);
+  if (first) return first.closure;
+  if (facts.workorderCancelled) return invalidated("workorder-cancelled", facts.now);
   return null;
 }
+function staffingNodeMatches(row, nodeId) {
+  return staffingRoleOfKey(row.sourceKey) !== void 0 || nodeId === row.nodeId;
+}
 function issueIdsOf(row) {
   const it = row.item;
   return new Set([it?.gap?.gapId, it?.escalationId, it?.annotationId].filter((x2) => !!x2));
@@ -234034,16 +234416,16 @@ function resolvedByMe(row, evs, me, onNode) {
     switch (row.kind) {
       case "review-request": {
         const v2 = payload(rec, "review.response");
-        if (v2 && v2.reviewerActorId === me && onNode(rec) && (!gen || v2.targetWorkId === gen)) return handled2(me, verdictWord(v2.verdict), rec.createdAt);
+        if (v2 && v2.reviewerActorId === me && onNode(rec) && (!gen || v2.targetWorkId === gen)) return found(rec, handled2(me, verdictWord(v2.verdict), rec.createdAt));
         const acc = payload(rec, "work.accept");
-        if (acc && acc.by === me && gen && acc.workId === gen) return handled2(me, "\u5DF2\u9A8C\u6536", rec.createdAt);
+        if (acc && acc.by === me && gen && acc.workId === gen) return found(rec, handled2(me, "\u5DF2\u9A8C\u6536", rec.createdAt));
         const rej = payload(rec, "work.reject");
-        if (rej && rej.by === me && gen && rej.workId === gen) return handled2(me, "\u5DF2\u6253\u56DE", rec.createdAt);
+        if (rej && rej.by === me && gen && rej.workId === gen) return found(rec, handled2(me, "\u5DF2\u6253\u56DE", rec.createdAt));
         break;
       }
       case "review-waiting": {
         const v2 = payload(rec, "review.response");
-        if (v2 && v2.reviewerActorId === me && item?.waitingRowId && v2.reviewId === item.waitingRowId) return handled2(me, verdictWord(v2.verdict), rec.createdAt);
+        if (v2 && v2.reviewerActorId === me && item?.waitingRowId && v2.reviewId === item.waitingRowId) return found(rec, handled2(me, verdictWord(v2.verdict), rec.createdAt));
         break;
       }
       case "work-waiting":
@@ -234051,24 +234433,24 @@ function resolvedByMe(row, evs, me, onNode) {
       case "rework":
       case "stale": {
         const s2 = payload(rec, "work.submit_output") ?? payload(rec, "work.conclude");
-        if (s2 && doerOf(rec) === me && onNode(rec) && !(row.kind === "rework" && s2.workId === gen)) return handled2(me, "\u5DF2\u63D0\u4EA4", rec.createdAt);
+        if (s2 && doerOf(rec) === me && onNode(rec) && !(row.kind === "rework" && s2.workId === gen)) return found(rec, handled2(me, "\u5DF2\u63D0\u4EA4", rec.createdAt));
         break;
       }
       case "pushback": {
         const r = payload(rec, "issue.resolve");
-        if (r && r.by === me && issueIdsOf(row).has(r.issueId)) return handled2(me, "\u5DF2\u5904\u7406", rec.createdAt);
+        if (r && r.by === me && issueIdsOf(row).has(r.issueId)) return found(rec, handled2(me, "\u5DF2\u5904\u7406", rec.createdAt));
         const s2 = payload(rec, "work.submit_output");
-        if (s2 && doerOf(rec) === me && onNode(rec)) return handled2(me, "\u5DF2\u63D0\u4EA4", rec.createdAt);
+        if (s2 && doerOf(rec) === me && onNode(rec)) return found(rec, handled2(me, "\u5DF2\u63D0\u4EA4", rec.createdAt));
         break;
       }
       case "gap-escalation": {
         const r = payload(rec, "issue.resolve");
-        if (r && r.by === me && issueIdsOf(row).has(r.issueId)) return handled2(me, "\u5DF2\u89E3\u51B3", rec.createdAt);
+        if (r && r.by === me && issueIdsOf(row).has(r.issueId)) return found(rec, handled2(me, "\u5DF2\u89E3\u51B3", rec.createdAt));
         break;
       }
       case "needs-staffing": {
         const a = payload(rec, "plan.assign_actor");
-        if (a && rec.actorId === me && a.nodeId === row.nodeId && a.assigneeActorId) return handled2(me, "\u5DF2\u6307\u6D3E", rec.createdAt);
+        if (a && rec.actorId === me && staffingNodeMatches(row, a.nodeId) && a.assigneeActorId) return found(rec, handled2(me, "\u5DF2\u6307\u6D3E", rec.createdAt));
         break;
       }
       default:
@@ -234085,21 +234467,25 @@ function resolvedByOther(row, evs, me, onNode) {
     switch (row.kind) {
       case "review-request":
       case "review-waiting": {
-        const v2 = payload(rec, "review.response");
-        if (v2 && onNode(rec) && (!gen || v2.targetWorkId === gen)) return invalidated("handled-by-other", rec.createdAt, who);
         const acc = payload(rec, "work.accept") ?? payload(rec, "work.reject");
-        if (acc && gen && acc.workId === gen) return invalidated("handled-by-other", rec.createdAt, who);
+        if (acc && gen && acc.workId === gen) {
+          const decider = evs.filter((x2) => x2.seq <= rec.seq).reverse().find((x2) => {
+            const vv = payload(x2, "review.response");
+            return !!vv && vv.targetWorkId === gen && vv.reviewerActorId !== me;
+          });
+          return found(rec, invalidated("handled-by-other", rec.createdAt, decider ? doerOf(decider) : who));
+        }
         break;
       }
       case "gap-escalation":
       case "pushback": {
         const r = payload(rec, "issue.resolve");
-        if (r && issueIdsOf(row).has(r.issueId)) return invalidated("handled-by-other", rec.createdAt, who);
+        if (r && issueIdsOf(row).has(r.issueId)) return found(rec, invalidated("handled-by-other", rec.createdAt, who));
         break;
       }
       case "needs-staffing": {
         const a = payload(rec, "plan.assign_actor");
-        if (a && a.nodeId === row.nodeId && a.assigneeActorId) return invalidated("handled-by-other", rec.createdAt, rec.actorId);
+        if (a && staffingNodeMatches(row, a.nodeId) && a.assigneeActorId) return found(rec, invalidated("handled-by-other", rec.createdAt, rec.actorId));
         break;
       }
       case "assigned":
@@ -234107,7 +234493,7 @@ function resolvedByOther(row, evs, me, onNode) {
       case "stale":
       case "work-waiting": {
         const acc = payload(rec, "work.accept");
-        if (acc && onNode(rec)) return invalidated("handled-by-other", rec.createdAt, who);
+        if (acc && onNode(rec)) return found(rec, invalidated("handled-by-other", rec.createdAt, who));
         break;
       }
       default:
@@ -234119,24 +234505,13 @@ function resolvedByOther(row, evs, me, onNode) {
 function needsGrace(missingSinceMs, nowMs, graceMs) {
   return nowMs - missingSinceMs < graceMs;
 }
-var LEDGER_KINDS, CLOSURE_EVENT_KINDS, payload, handled2, invalidated, ownerKinds, reviewKinds, verdictWord;
+var STAFFING_ROLE_KEY, CLOSURE_EVENT_KINDS, payload, handled2, invalidated, found, ownerKinds, reviewKinds, verdictWord;
 var init_notification_ledger = __esm({
   "../server/src/domains/collab/notification-ledger.ts"() {
     "use strict";
     init_src5();
     init_src();
-    LEDGER_KINDS = /* @__PURE__ */ new Set([
-      "review-request",
-      "rework",
-      "stale",
-      "pushback",
-      "assigned",
-      "needs-staffing",
-      "gap-escalation",
-      "change-confirm",
-      "review-waiting",
-      "work-waiting"
-    ]);
+    STAFFING_ROLE_KEY = /^needs-staffing:.+:role:([^:@]+)$/;
     CLOSURE_EVENT_KINDS = [
       "review.response",
       "review.kill",
@@ -234155,6 +234530,7 @@ var init_notification_ledger = __esm({
     payload = (rec, kind) => rec.event.kind === kind ? rec.event : null;
     handled2 = (closedBy, result, at) => ({ status: "handled", closedAt: at, closedBy, result });
     invalidated = (invalidReason, at, closedBy) => ({ status: "invalidated", closedAt: at, invalidReason, ...closedBy ? { closedBy } : {} });
+    found = (rec, closure) => ({ rec, closure });
     ownerKinds = /* @__PURE__ */ new Set(["assigned", "rework", "stale", "pushback", "work-waiting"]);
     reviewKinds = /* @__PURE__ */ new Set(["review-request", "review-waiting"]);
     verdictWord = (verdict) => verdict === "approve" ? "\u5BA1\u6838\u901A\u8FC7" : verdict === "request_changes" || verdict === "reject" ? "\u8981\u6C42\u4FEE\u6539" : "\u5DF2\u5BA1\u6838";
@@ -234218,15 +234594,18 @@ function displayOf(model, item, recipient, reviewOf) {
 function sameDisplay(row, d) {
   return row.title === d.title && row.workspaceTitle === d.workspaceTitle && row.actorId === d.actorId && row.cardId === d.cardId && JSON.stringify(row.item ?? null) === JSON.stringify(d.item ?? null);
 }
-var DAY2, EMPTY, EVENT_WINDOW_SLACK_MS, CLOSURE_EVENT_LIMIT, DRAFT_OUTCOME_TTL_MS, SLOW_RECONCILE_MS, rowKey, NotificationLedgerWorker;
+var DAY2, EMPTY, EVENT_WINDOW_SLACK_MS, CLOSURE_EVENT_LIMIT, DRAFT_OUTCOME_TTL_MS, SLOW_RECONCILE_MS, TASK_NOTICE_FRESH_MS, TASK_NOTICE_EVENT_LIMIT, rowKey, NotificationLedgerWorker;
 var init_notification_reconciler = __esm({
   "../server/src/domains/collab/notification-reconciler.ts"() {
     "use strict";
     init_src5();
+    init_src();
     init_inbox();
     init_waiting_inbox();
     init_node_state();
     init_review_activity();
+    init_workorder_terminal();
+    init_task_notices();
     init_notification_ledger();
     DAY2 = 24 * 36e5;
     EMPTY = { inserted: 0, refreshed: 0, closed: 0, pending: 0 };
@@ -234234,6 +234613,8 @@ var init_notification_reconciler = __esm({
     CLOSURE_EVENT_LIMIT = 400;
     DRAFT_OUTCOME_TTL_MS = 36e5;
     SLOW_RECONCILE_MS = 2e3;
+    TASK_NOTICE_FRESH_MS = 15 * 6e4;
+    TASK_NOTICE_EVENT_LIMIT = 500;
     rowKey = (recipient, sourceKey) => `${recipient}\0${sourceKey}`;
     NotificationLedgerWorker = class {
       constructor(deps) {
@@ -234256,7 +234637,7 @@ var init_notification_reconciler = __esm({
       state(companyId) {
         let st = this.states.get(companyId);
         if (!st) {
-          st = { running: false, rerun: false, lastRunAt: 0, snaps: /* @__PURE__ */ new Map(), lastSeenAt: /* @__PURE__ */ new Map(), missingSince: /* @__PURE__ */ new Map(), drafts: /* @__PURE__ */ new Map(), lastPurgeAt: 0, primed: false };
+          st = { running: false, rerun: false, lastRunAt: 0, snaps: /* @__PURE__ */ new Map(), lastSeenAt: /* @__PURE__ */ new Map(), missingSince: /* @__PURE__ */ new Map(), drafts: /* @__PURE__ */ new Map(), lastPurgeAt: 0, primed: false, terminals: /* @__PURE__ */ new Map(), noticeSeq: 0 };
           this.states.set(companyId, st);
         }
         return st;
@@ -234375,6 +234756,14 @@ var init_notification_reconciler = __esm({
         const pending = await ctx.store.listPending();
         const byKey = new Map(pending.map((r) => [rowKey(r.recipient, r.sourceKey), r]));
         const markersOf = /* @__PURE__ */ new Map();
+        const adopted = /* @__PURE__ */ new Set();
+        const roleOfRow = (r) => {
+          const fromKey = staffingRoleOfKey(r.sourceKey);
+          if (fromKey) return fromKey;
+          const owner = r.nodeId ? model.artifacts.get(r.nodeId)?.owner : void 0;
+          return owner?.startsWith(PENDING_ROLE_PREFIX) ? owner.slice(PENDING_ROLE_PREFIX.length) : void 0;
+        };
+        const staffingOrphans = pending.filter((r) => r.kind === "needs-staffing" && !current.has(rowKey(r.recipient, r.sourceKey)));
         for (const [k2, c] of current) {
           const display = displayOf(model, c.item, c.recipient, reviewOf);
           const row = byKey.get(k2);
@@ -234387,6 +234776,15 @@ var init_notification_reconciler = __esm({
             }
             continue;
           }
+          const role = staffingRoleOf(model, c.item);
+          const orphan = role ? staffingOrphans.find((r) => !adopted.has(r.id) && r.recipient === c.recipient && r.workorderId === c.item.workspace && roleOfRow(r) === role) : void 0;
+          if (orphan && await ctx.store.rekey(orphan.id, c.sourceKey, { ...display, ...c.item.artifactId ? { nodeId: c.item.artifactId } : {} }, nowIso)) {
+            adopted.add(orphan.id);
+            st.missingSince.delete(orphan.id);
+            st.lastSeenAt.set(orphan.id, nowIso);
+            stats.refreshed++;
+            continue;
+          }
           const readAt = st.primed ? void 0 : await this.alreadyReadAt(ctx, c.recipient, c.item, markersOf, nowIso);
           const sinceOk = Number.isFinite(Date.parse(c.item.since));
           const enteredAt = st.primed || !sinceOk ? nowIso : new Date(c.item.since).toISOString();
@@ -234409,7 +234807,7 @@ var init_notification_reconciler = __esm({
         const cancelledOf = /* @__PURE__ */ new Map();
         let waitingForGrace = false;
         for (const row of pending) {
-          if (current.has(rowKey(row.recipient, row.sourceKey))) continue;
+          if (current.has(rowKey(row.recipient, row.sourceKey)) || adopted.has(row.id)) continue;
           const closure = await this.judge(st, ctx, model, row, nowMs, nowIso, eventsOf, cancelledOf);
           if (!closure) {
             waitingForGrace = true;
@@ -234420,6 +234818,7 @@ var init_notification_reconciler = __esm({
           st.lastSeenAt.delete(row.id);
         }
         stats.pending = current.size;
+        stats.notices = await this.reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2);
         if (nowMs - st.lastPurgeAt > (this.deps.purgeEveryMs ?? 6 * 36e5)) {
           st.lastPurgeAt = nowMs;
           const purged = await ctx.store.purgeBefore(new Date(nowMs - (this.deps.retentionMs ?? 90 * DAY2)).toISOString());
@@ -234458,6 +234857,74 @@ var init_notification_reconciler = __esm({
         if (needsGrace(since, nowMs, this.graceMs)) return null;
         return { status: "invalidated", closedAt: nowIso, invalidReason: "source-changed" };
       }
+      /**
+       * 任务告知（第 2 步 B）。完成 / 取消从当前状态现算（与结案播报、任务列表同一判据），暂停 / 恢复读引擎事件。
+       *
+       * **不补历史**：进程第一次对账时（上线当天、重启后）只发最近 {@link TASK_NOTICE_FRESH_MS} 内发生的变化——
+       * 早就结束的任务不能在上线那一刻集体「任务已完成」一遍。之后每拍新看到的变化都发。
+       * 来源键 = `<种类>:<工单>@<那件事的 seq>`：同一件事重启后再算一遍撞唯一约束即收手；任务重开后再完成是新的一件事。
+       */
+      async reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2) {
+        const store = ctx.engineStore;
+        if (!store) return 0;
+        const members = new Set(ctx.humans);
+        const titleOf = workspaceTitleMap(model);
+        const fresh = (iso7) => nowMs - Date.parse(iso7) <= TASK_NOTICE_FRESH_MS;
+        let sent = 0;
+        const emit = async (workorderId, kind, rec, trigger) => {
+          const recipients = taskNoticeRecipients(model, workorderId, await loadSnapshot2(workorderId), members, trigger);
+          const title = titleOf.get(workorderId);
+          for (const recipient of recipients) {
+            await ctx.store.insert({
+              recipient,
+              category: "task-notice",
+              sourceKey: `${kind}:${workorderId}@${rec.seq}`,
+              kind,
+              workorderId,
+              title: TASK_NOTICE_TITLE[kind],
+              ...title ? { workspaceTitle: title } : {},
+              ...trigger ? { actorId: trigger } : {},
+              enteredAt: new Date(rec.createdAt).toISOString()
+            });
+            sent++;
+          }
+        };
+        const pauses = await store.transaction((tx) => tx.listEvents(void 0, st.noticeSeq, TASK_NOTICE_EVENT_LIMIT, ["workorder.paused", "workorder.resumed"]));
+        for (const rec of pauses) {
+          st.noticeSeq = Math.max(st.noticeSeq, rec.seq);
+          if (!st.primed && !fresh(rec.createdAt)) continue;
+          const e = rec.event;
+          const paused = e.kind === "workorder.paused";
+          if (paused ? isCreationHold(rec) : endsCreationHold(
+            await store.transaction((tx) => tx.listEvents(rec.workorderId, 0, TASK_NOTICE_EVENT_LIMIT, ["workorder.paused"])),
+            rec
+          )) continue;
+          await emit(rec.workorderId, paused ? "workorder-paused" : "workorder-resumed", rec, e.by ?? rec.actorId);
+        }
+        const terminals = computeWorkorderTerminals(model);
+        const now = /* @__PURE__ */ new Set();
+        for (const t of terminals) {
+          const kind = t.kind;
+          now.add(t.workOrderId);
+          if (st.terminals.get(t.workOrderId) === kind) continue;
+          st.terminals.set(t.workOrderId, kind);
+          if (!st.primed && !(t.terminalAt && fresh(t.terminalAt))) continue;
+          const cancelled = kind === "workorder-cancelled";
+          const evs = await store.transaction((tx) => tx.listEvents(
+            t.workOrderId,
+            0,
+            TASK_NOTICE_EVENT_LIMIT,
+            cancelled ? ["plan.delete_node"] : ["work.accept", "review.response", "work.conclude"]
+          ));
+          const decisive = [...evs].reverse().find((rec) => cancelled ? rec.event.sealReason === "cancelled" : rec.event.kind === "work.accept");
+          if (!decisive) continue;
+          if (!st.primed && !fresh(decisive.createdAt)) continue;
+          const trigger = cancelled ? decisive.actorId : settleTrigger(evs, decisive);
+          await emit(t.workOrderId, kind, decisive, trigger && !isSystemActorId(trigger) ? trigger : void 0);
+        }
+        for (const wid of [...st.terminals.keys()]) if (!now.has(wid)) st.terminals.delete(wid);
+        return sent;
+      }
       /** 台账上线前已经看过的待办不重新亮红点：沿用 `/api/inbox` 的未读判据（基线 + 逐条水位）。 */
       async alreadyReadAt(ctx, recipient, item, cache, nowIso) {
         if (!ctx.markers) return void 0;
@@ -234614,7 +235081,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs26.statSync(absBundle).size;
-  const digest = (0, import_node_crypto58.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto59.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -234710,12 +235177,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto58, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto59, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
     fs26 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path25 = __toESM(require("node:path"), 1);
@@ -234735,7 +235202,7 @@ var init_readonly_bundle = __esm({
 
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto59.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto60.randomUUID)().slice(0, 8)}`);
   return async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -234822,13 +235289,13 @@ function makeSeededWorkorderCreator(deps) {
     }
     if (input.dispatch === false && artifactState) {
       await artifactState.setWorkspaceDispatchHold(workspace, true);
-      await kernel.pauseWorkorder?.(workspace, input.actor);
+      await kernel.pauseWorkorder?.(workspace, input.actor, WORKORDER_HOLD_AT_CREATE_REASON);
     }
     return { workspace, rootArtifactId: briefId, spawned: planned.spawned };
   };
 }
 function workspaceForKey(key) {
-  return `ws:wo-${(0, import_node_crypto59.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto60.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(kernel, workspace) {
   const arts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === workspace);
@@ -234841,12 +235308,13 @@ function existingWorkorder(kernel, workspace) {
     spawned: arts.map((a) => ({ id: a.id, type: a.type, owner: a.owner }))
   };
 }
-var import_node_crypto59, enc2;
+var import_node_crypto60, enc2;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     init_uncategorized_project();
+    init_src();
     init_planner();
     enc2 = (s2) => new TextEncoder().encode(s2);
   }
@@ -235703,6 +236171,37 @@ var init_trace_health = __esm({
   }
 });
 
+// ../server/src/domains/trace/subagent-events.ts
+function subagentRunEventFromLive(event) {
+  if (event.itemType !== "control") return null;
+  const payload2 = event.payload && typeof event.payload === "object" && !Array.isArray(event.payload) ? event.payload : void 0;
+  if (payload2?.code !== SUBAGENT_TASK_CODE || typeof payload2.toolCallId !== "string") return null;
+  const raw = payload2.task;
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
+  const task = raw;
+  const cost = task.estimatedCostUsdMicros ?? estimateSubagentCostUsdMicros(task.usage);
+  const enriched = cost !== void 0 ? { ...task, estimatedCostUsdMicros: cost } : task;
+  const eventType = task.status === "running" ? "sub_agent.started" : "sub_agent.finished";
+  return {
+    eventType,
+    stream: "tool",
+    ...task.status === "failed" ? { level: "error" } : {},
+    ...task.description ? { message: task.description } : {},
+    payload: {
+      kind: "subagent_task",
+      raw: { code: SUBAGENT_TASK_CODE, toolCallId: payload2.toolCallId, task: enriched }
+    },
+    startedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+var init_subagent_events = __esm({
+  "../server/src/domains/trace/subagent-events.ts"() {
+    "use strict";
+    init_src();
+    init_subagent_cost();
+  }
+});
+
 // ../server/src/domains/trace/index.ts
 function createTraceDomain(opts) {
   const service = new TraceService({ store: opts.store });
@@ -235735,6 +236234,7 @@ var init_trace2 = __esm({
     init_chat_parts();
     init_trace_health();
     init_resilient_appender();
+    init_subagent_events();
   }
 });
 
@@ -236242,12 +236742,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto60, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto61, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service8 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
     init_src5();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -236478,7 +236978,7 @@ var init_service8 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto60.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto61.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -237385,7 +237885,12 @@ async function buildChatProjectBundle(projectId2, projects, readBlob) {
     "",
     "\u751F\u6210 Brief \u548C\u534F\u4F5C\u56FE\u524D\uFF0C\u5148\u9605\u8BFB\u672C\u6587\u4EF6\u5217\u51FA\u7684\u516C\u5F00\u8F93\u5165\u3002\u4E0D\u8981\u5047\u8BBE Benchmark \u4ED3\u5E93\u3001\u9690\u85CF\u6D4B\u8BD5\u3001Oracle \u6216\u53C2\u8003\u7B54\u6848\u53EF\u89C1\u3002"
   ].join("\n");
-  return { files, binaryFiles, contextLines };
+  return {
+    files,
+    binaryFiles,
+    contextLines,
+    project: { id: project.id, name: project.name, ...project.description ? { description: project.description } : {} }
+  };
 }
 var textFile, safeProjectPath;
 var init_project_bundle = __esm({
@@ -237400,6 +237905,10 @@ var init_project_bundle = __esm({
 });
 
 // ../server/src/domains/chat-sessions/index.ts
+function sessionProjectIdToStore(projectId2) {
+  if (typeof projectId2 !== "string" || projectId2.trim() === "") return null;
+  return isUncategorizedProjectId(projectId2) ? null : projectId2;
+}
 function parseDurationMs(raw) {
   if (!raw) return null;
   const m2 = /^(\d+)\s*(ms|s|m|h|d)?$/i.exec(raw.trim());
@@ -237573,7 +238082,7 @@ function createChatSessionsDomain(opts) {
       if (!text5.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto61.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto62.randomUUID)()}`;
       drafts.set(id, { text: text5, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -237625,7 +238134,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = await currentRuntimeId(body2.aiActorId) ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto62.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -237638,7 +238147,7 @@ function createChatSessionsDomain(opts) {
         // 决策 0030 缝合：绑定是会话的语义属性（工单频道/问题会话给、脑暴省略）——发消息端据它带 workspace，
         // 两个入口页面行为一致。区别于 linkWorkOrder（出处关联，建单脑暴也有、不构成绑定）。
         workspace: body2.workspace ?? null,
-        projectId: body2.projectId ?? null,
+        projectId: sessionProjectIdToStore(body2.projectId),
         // 会话级模型覆盖（口径 A）：建会话时就带上选择；空串/空白归 null = 沿用旧解析，不写员工全局配置。
         model: normalizeModel(body2.model),
         // ADR-0058：分析会话指向被分析 run；非空即"这是分析会话"（不进主聊天列表、进 trace 分析视图）。
@@ -237707,7 +238216,7 @@ function createChatSessionsDomain(opts) {
         ...body2.runtimeId !== void 0 ? { runtimeId: body2.runtimeId } : {},
         ...Object.prototype.hasOwnProperty.call(body2, "runtimeSessionId") ? { runtimeSessionId: body2.runtimeSessionId } : {},
         ...body2.title !== void 0 ? { title: body2.title } : {},
-        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: body2.projectId } : {},
+        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: sessionProjectIdToStore(body2.projectId) } : {},
         // 会话级模型覆盖：显式传 null / 空串 = 清除覆盖（回到旧解析）；不传这一项 = 不动它。
         ...Object.prototype.hasOwnProperty.call(body2, "model") ? { model: normalizeModel(body2.model) } : {},
         // 只有显式传了才写——改标题 / 换项目 / 换模型都不是「有新动静」，不该顶掉列表顺序与已读水位。
@@ -237731,7 +238240,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto62.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -237772,7 +238281,7 @@ function createChatSessionsDomain(opts) {
       const known = key ? cur.find((x2) => x2.clientKey === key) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store.enqueuePendingMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto62.randomUUID)(),
         chatSessionId: sid,
         text: text5,
         ...attachments.length ? { attachments } : {},
@@ -238095,7 +238604,7 @@ function createChatSessionsDomain(opts) {
       const outcome = await bridge.read(
         loc.nodeId,
         { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: req.query?.get("path") ?? "" },
-        WORKDIR_READ_MAX_BYTES
+        FILE_CONTENT_MAX_BYTES
       );
       if (outcome.ok) {
         const buf = Buffer.from(outcome.contentBase64, "base64");
@@ -238223,11 +238732,11 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto61, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS, WORKDIR_READ_MAX_BYTES;
-var init_chat_sessions = __esm({
+var import_node_crypto62, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
+var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     init_src();
     init_chat_session();
     init_files_view();
@@ -238244,10 +238753,10 @@ var init_chat_sessions = __esm({
     init_company_data_store_router();
     init_workorder_terminal();
     init_session_workdir();
+    init_uncategorized_project();
     init_project_bundle();
     DEFAULT_SNAPSHOT_ITEMS = 400;
     MAX_SNAPSHOT_ITEMS = 1e3;
-    WORKDIR_READ_MAX_BYTES = 2 * 1024 * 1024;
   }
 });
 
@@ -239632,7 +240141,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto62.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto63.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -239688,11 +240197,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto62, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto63, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service9 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -240506,11 +241015,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto63.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto64.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto63.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto64.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -240540,11 +241049,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto63, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto64, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -241140,11 +241649,11 @@ function automationsDomain(opts) {
     });
     router.get("/api/automations/:id/runs/:runId", async (req) => {
       const automation = await mustGet(req);
-      const found = await service.getRun(req.params.runId);
-      if (!found || found.automationId !== automation.id) {
+      const found2 = await service.getRun(req.params.runId);
+      if (!found2 || found2.automationId !== automation.id) {
         throw new ApiError(404, "NOT_FOUND", `\u6CA1\u6709\u8FD9\u6761\u8FD0\u884C\u8BB0\u5F55\uFF1A${req.params.runId}`);
       }
-      return { status: 200, body: found };
+      return { status: 200, body: found2 };
     });
     router.get("/api/automations/:id/deliveries", async (req) => {
       const automation = await mustGet(req);
@@ -241700,7 +242209,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto64.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto65.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -241717,11 +242226,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto64;
+var import_node_crypto65;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -241835,17 +242344,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto65.createHash)("sha256").update(canonical).digest("hex");
+  return (0, import_node_crypto66.createHash)("sha256").update(canonical).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto65.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto66.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto65, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto66, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -242056,7 +242565,7 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto66.randomUUID)();
+  const requestId = (0, import_node_crypto67.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve10) => {
@@ -242069,11 +242578,11 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve10, timer });
   });
 }
-var import_node_crypto66, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto67, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 500;
@@ -242423,7 +242932,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto66.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto67.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -242660,7 +243169,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto66.randomUUID)();
+        const requestId = (0, import_node_crypto67.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve10) => {
@@ -242768,13 +243277,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto67, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto68, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto67.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto68.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc3 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -243021,11 +243530,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto68, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto69, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_src5();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -243294,7 +243803,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto68.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto69.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -243673,8 +244182,8 @@ ${ctx.nodeFault}
             this.deps.log?.(`[coordinator] ${workspace} \u5168\u5C40\u4E0A\u4E0B\u6587\u8BFB\u53D6\u5931\u8D25\uFF0C\u7EE7\u7EED\u6CBF\u7528\u539F\u534F\u8C03\u8005\u4EFB\u52A1\uFF1A${String(error2)}`);
           }
         }
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto68.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto68.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto69.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto69.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           task,
           ``,
@@ -243718,7 +244227,7 @@ ${ctx.nodeFault}
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto68.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto69.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -243923,11 +244432,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto69, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto70, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -244107,7 +244616,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto69.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto70.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash2, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -250504,6 +251013,20 @@ var init_postgres_chat_sessions = __esm({
         );
         return r.rows.map(rowToSessionWithQuality);
       }
+      async listSessionsByProject(projectId2) {
+        const r = await this.pool.query(
+          `SELECT s.*
+         FROM ${this.s}.chat_sessions s
+        WHERE s.company_id = $2
+          AND s.project_id IS NOT DISTINCT FROM $1
+          AND s.analyzed_run_id IS NULL
+          AND s.visibility IS DISTINCT FROM 'internal'
+          AND COALESCE(s.workspace, '') = ''
+        ORDER BY s.created_at DESC, s.id`,
+          [projectId2, this.companyId]
+        );
+        return r.rows.map(rowToSession);
+      }
       async listSessionsByAnalyzedRun(analyzedRunId) {
         const r = await this.pool.query(
           `SELECT s.*, lm.status AS last_assistant_status, lm.content AS last_assistant_content
@@ -252720,11 +253243,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto70, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto71, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -252941,7 +253464,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto70.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto71.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -253207,11 +253730,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto71, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto72, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -253421,7 +253944,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto71.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto72.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -254868,14 +255391,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto72.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto73.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto72, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto73, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -254949,7 +255472,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto74.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -255131,11 +255654,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto73, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto74, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -255215,11 +255738,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto74, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto75, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -255605,7 +256128,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto74.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto75.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -258202,7 +258725,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto75.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto76.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -258590,11 +259113,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto75, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto76, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -258826,8 +259349,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto76.randomBytes)(12);
-  const cipher = (0, import_node_crypto76.createCipheriv)("aes-256-gcm", bytes(key), iv);
+  const iv = (0, import_node_crypto77.randomBytes)(12);
+  const cipher = (0, import_node_crypto77.createCipheriv)("aes-256-gcm", bytes(key), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -258837,7 +259360,7 @@ function openSnapshot(snapshot, key) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto76.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto77.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -258845,11 +259368,11 @@ function openSnapshot(snapshot, key) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto76, PREFIX3, bytes, aad2;
+var import_node_crypto77, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key) => {
       const value2 = Buffer.from(key);
@@ -260921,7 +261444,7 @@ var init_src11 = __esm({
     init_experiments2();
     init_trace2();
     init_execution_continuity2();
-    init_chat_sessions();
+    init_chat_sessions2();
     init_dev_store();
     init_continuation3();
     init_knowledge2();
@@ -261096,20 +261619,20 @@ var fs45 = __toESM(require("node:fs"));
 var os14 = __toESM(require("node:os"));
 var path40 = __toESM(require("node:path"));
 var import_node_child_process23 = require("node:child_process");
-var import_node_crypto83 = require("node:crypto");
+var import_node_crypto84 = require("node:crypto");
 
 // ../cli/src/cli.ts
 var fs40 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path35 = __toESM(require("node:path"), 1);
-var import_node_crypto81 = require("node:crypto");
+var import_node_crypto82 = require("node:crypto");
 
 // ../cli/src/serve.ts
 var fs34 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto77 = require("node:crypto");
+var import_node_crypto78 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
 // ../cli/src/artifact-discovery-source.ts
@@ -261326,6 +261849,54 @@ function buildChatTurnPrompts(input) {
   };
 }
 
+// ../cli/src/chat-task-md.ts
+var CHAT_PROJECT_SECTION_TITLE = "## \u5F53\u524D\u9879\u76EE\uFF08\u4EE5\u672C\u8F6E\u4E3A\u51C6\uFF09";
+var CHAT_PROJECT_INPUTS_POINTER = [
+  "",
+  "## \u5F53\u524D\u9879\u76EE\u516C\u5F00\u8F93\u5165",
+  "",
+  "\u751F\u6210 Brief \u524D\u5FC5\u987B\u5148\u8BFB\u53D6 `PROJECT_CONTEXT.md` \u53CA\u5176\u4E2D\u5217\u51FA\u7684 `project/` \u6587\u4EF6\uFF1B\u4ED3\u5E93\u7B49\u5916\u90E8\u4F4D\u7F6E\u4E5F\u8BB0\u5F55\u5728\u8BE5\u6587\u4EF6\u4E2D\u3002"
+];
+function buildChatProjectSection(project, opts) {
+  if (project.state === "unknown") return [];
+  if (project.state === "none") {
+    return opts.announceNone ? [CHAT_PROJECT_SECTION_TITLE, "", "\u672C\u5BF9\u8BDD\u672A\u5F52\u5C5E\u4EFB\u4F55\u9879\u76EE\u3002"] : [];
+  }
+  const description = project.description?.trim();
+  const descriptionLines = !description ? ["\u9879\u76EE\u63CF\u8FF0: \uFF08\u672A\u586B\u5199\uFF09"] : description.includes("\n") ? ["\u9879\u76EE\u63CF\u8FF0:", description] : [`\u9879\u76EE\u63CF\u8FF0: ${description}`];
+  return [
+    CHAT_PROJECT_SECTION_TITLE,
+    "",
+    `project_id: ${project.id}`,
+    `\u9879\u76EE\u540D\u79F0: ${project.name}`,
+    ...descriptionLines
+  ];
+}
+function buildChatTaskMd(p2) {
+  return [
+    ...p2.headerLines,
+    // 项目段紧跟抬头：这一轮在哪个项目里，是读后面所有内容的前提。
+    ...p2.projectSection.length ? ["", ...p2.projectSection] : [],
+    ...p2.attachmentPaths.length ? ["", "## \u7528\u6237\u9644\u4EF6", "", "\u7528\u6237\u968F\u6D88\u606F\u9644\u5E26\u4E86\u4EE5\u4E0B\u6587\u4EF6\uFF08\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A", ...p2.attachmentPaths.map((x2) => `- ${x2}`)] : [],
+    // 委派子会话的主会话对话快照（提案 §6.1.4）：一句固定说明 + 一份清单；没有这个文件时整段不拼。
+    // 指针与文件由 delegationBundleAdditions **一处**给出，拆开迟早漂成「有指针没文件」。
+    ...p2.parentConversationLines,
+    // 委派两条路搬过来的文件（去程 `--file` / 回程专家产物）：**不能复用「## 用户附件」的措辞**
+    // （专家的产物会被介绍成用户附带的）。
+    ...p2.workspaceLines,
+    ...p2.projectInputsPointer,
+    // 诊断 1be339c7：身份段紧贴在「## 用户消息」之前——让 agent 先知道「你在跟谁说话」，再读那条消息。
+    ...p2.whoLines.length ? ["", ...p2.whoLines] : [],
+    "",
+    "## \u7528\u6237\u6D88\u606F",
+    "",
+    p2.message,
+    ...p2.memoryLines,
+    // 压在最末：这条要盖住紧邻其上的「收工前想一下」，否则记忆写入就落到正文之后（见常量注释）。
+    ...p2.finalReplyLines
+  ].join("\n");
+}
+
 // ../cli/src/company-dispatch-bridge.ts
 var CompanyDispatchBridges = class {
   constructor(opts) {
@@ -261802,11 +262373,12 @@ init_src10();
 init_src11();
 init_src11();
 init_src11();
+init_src11();
 init_src9();
 init_src();
 init_trajectory();
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto77.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto78.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -262006,7 +262578,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path29.join(repoRoot, "node_modules/.bin/tsx");
   const main = path29.join(repoRoot, "packages/cli/src/main.ts");
-  const key = (0, import_node_crypto77.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key = (0, import_node_crypto78.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path29.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
   let dir;
@@ -262387,7 +262959,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto77.randomUUID)();
+    const requestId = (0, import_node_crypto78.randomUUID)();
     const task = new Promise((resolve10) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -262696,6 +263268,15 @@ async function startServe(opts) {
       const members = await listCompanyMembers(companyId);
       return members.find((m2) => m2.actorId === actorId)?.role;
     },
+    // 项目「关联对话」列表与对话改挂项目（2026-09-14）。闭包在请求时才读 chatStoreFor /
+    // delegationStoreFor，避开它们在下方声明的 TDZ（与 listChatFiles 同法）。
+    chatSessionsFor: (companyId) => chatStoreFor(companyId),
+    // 委派子会话不进项目（ADR 0555）；一次台账查询批量判，不逐条点查。
+    delegationChildIds: async (companyId, sessionIds) => {
+      const ledger = await delegationStoreFor(companyId).catch(() => null);
+      if (!ledger) return /* @__PURE__ */ new Set();
+      return new Set(await ledger.listChildSessionIds(sessionIds));
+    },
     resolveActorContext: (actorId) => buildActorContext(actors.service, actorId),
     defaultBranchResolver,
     // 展示：GET content-locations 给 git 仓补 resolvedDefaultBranch
@@ -263130,7 +263711,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto77.randomUUID)(),
+                id: (0, import_node_crypto78.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -263176,7 +263757,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto77.randomUUID)();
+        const sessionId = (0, import_node_crypto78.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -263651,6 +264232,7 @@ async function startServe(opts) {
   };
   const readMarkerStoreFor = async (companyId) => pgPool && companyId ? (await openCompanyPlane(companyId)).readMarkers : readMarkerStore;
   const fileNotificationStore = pgPool ? void 0 : new MemoryNotificationStore(path29.join(opts.dir, "notifications.json"));
+  const notificationLedgerEnabled = process.env["OASIS_NOTIFICATION_LEDGER"] !== "off";
   const notificationStoreFor = async (companyId) => pgPool ? (await openCompanyPlane(companyId ?? defaultCompanyId)).notifications : fileNotificationStore;
   const actorMemoryFor = async (companyId) => pgPool && companyId ? (await openCompanyPlane(companyId)).memory : actorMemoryService;
   const workorderDraftsFor = async (companyId) => pgPool && companyId ? (await openCompanyPlane(companyId)).drafts : workorderDrafts;
@@ -264220,7 +264802,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto77.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto78.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -264395,7 +264977,7 @@ async function startServe(opts) {
         readMarkers: readMarkerStore,
         // bundle=`inbox`：水位按当前公司取（与上面 resolveChatSession 成对）。
         ...pgPool ? { resolveReadMarkers: readMarkerStoreFor } : {},
-        resolveNotificationLedger: notificationStoreFor,
+        ...notificationLedgerEnabled ? { resolveNotificationLedger: notificationStoreFor } : {},
         escalationReminders: escalationDelivery.policy,
         defaultCompanyId,
         // 工单标签词表（组织级受控、旁账，与 playbook-overrides 同款侧存）。
@@ -265122,10 +265704,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto77.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto78.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto77.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto77.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto78.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto78.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           return {
@@ -265189,7 +265771,11 @@ async function startServe(opts) {
             }
           }
         }
-        const analyzedRunId = chatSessionId ? (await chatSessionStore.getSession(chatSessionId).catch(() => null))?.analyzedRunId ?? void 0 : void 0;
+        const turnChatStore = chatSessionId ? await chatStoreFor(runCompanyId).catch((err) => {
+          console.warn(`[chat] \u53D6\u516C\u53F8 ${runCompanyId} \u7684\u4F1A\u8BDD\u5B58\u50A8\u5931\u8D25\uFF08\u672C\u8F6E\u6309\u65E0\u4F1A\u8BDD\u8BB0\u5F55\u5904\u7406\uFF09: ${String(err)}`);
+          return null;
+        }) : null;
+        const analyzedRunId = chatSessionId ? (await turnChatStore?.getSession(chatSessionId).catch(() => null))?.analyzedRunId ?? void 0 : void 0;
         const actorConfigVersion = await actorService.latestConfig(actorId).then((c) => c?.version ?? null).catch(() => null);
         const candidateTraceStartedAt = (/* @__PURE__ */ new Date()).toISOString();
         const traceCreateInput = (target, startedAt) => ({
@@ -265243,7 +265829,7 @@ async function startServe(opts) {
             requireNodeConnectors();
           }
         }
-        const priorChatSession = chatSessionId ? await chatSessionStore?.getSession(chatSessionId).catch(() => null) : null;
+        const priorChatSession = chatSessionId ? await turnChatStore?.getSession(chatSessionId).catch(() => null) : null;
         const freshChatWorkdir = chatSessionId ? chatNodeChanged(
           { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
           { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
@@ -265301,17 +265887,19 @@ async function startServe(opts) {
         const attachmentFiles = { ...preparedAttachments.files };
         const attachmentBinary = { ...preparedAttachments.binaryFiles };
         const attachmentPaths = [...preparedAttachments.paths];
-        let projectContextLines = [];
+        let turnProject = priorChatSession ? { state: "none" } : { state: "unknown" };
         if (priorChatSession?.projectId) {
-          const projectBundle = await buildChatProjectBundle(
-            priorChatSession.projectId,
-            projectStateStore,
-            (blobId) => assets.get(blobId)
-          ).catch(() => null);
+          const projectId2 = priorChatSession.projectId;
+          const projectBundle = await projectStateFor(runCompanyId).then((projects) => buildChatProjectBundle(projectId2, projects, (blobId) => assets.get(blobId))).catch((err) => {
+            console.warn(`[chat] \u8BFB\u9879\u76EE ${projectId2} \u5931\u8D25\uFF08\u672C\u8F6E\u4E0D\u5199\u9879\u76EE\u6BB5\uFF09: ${String(err)}`);
+            return void 0;
+          });
           if (projectBundle) {
             Object.assign(attachmentFiles, projectBundle.files);
             Object.assign(attachmentBinary, projectBundle.binaryFiles);
-            projectContextLines = projectBundle.contextLines;
+            turnProject = { state: "bound", ...projectBundle.project };
+          } else if (projectBundle === void 0) {
+            turnProject = { state: "unknown" };
           }
         }
         const sessionLine = chatSessionId ? `chat_session_id: ${chatSessionId}` : `runtime_session_id: ${runtimeSessionId}`;
@@ -265334,29 +265922,21 @@ async function startServe(opts) {
         const chatMemoryLines = chatMemorySvc ? await chatMemorySvc.list({ actorId }, { scope: "all", keywords: ngramQueryTerms([message]), limit: MEMORY_INJECT_MAX, offset: 0 }).then((out) => [...memoryIndexLines(out.items), ...memoryHowToLines()]).catch(() => []) : [];
         const parentConversationBundle = delegationBundleAdditions(parentConversationSnapshot);
         const files = {
-          "TASK.md": [
-            ...taskHeader,
-            ...attachmentPaths.length ? ["", "## \u7528\u6237\u9644\u4EF6", "", "\u7528\u6237\u968F\u6D88\u606F\u9644\u5E26\u4E86\u4EE5\u4E0B\u6587\u4EF6\uFF08\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A", ...attachmentPaths.map((p2) => `- ${p2}`)] : [],
-            // 委派子会话的主会话对话快照（提案 §6.1.4）。形状照上面「用户附件」那一块：
-            // 一句固定说明 + 一份清单；**没有这个文件时整段不拼**（同一个条件块写法）——
-            // 主会话没有可转储的历史时就不该提它，专家不得假设它存在。
-            // 指针与文件由 delegationBundleAdditions **一处**给出：拆成两个 if 迟早会漂成
-            // 「有指针没文件」（专家照着去读一个不存在的路径，然后开始猜）。
-            ...parentConversationBundle.taskLines,
-            // 委派两条路搬过来的文件（去程 `--file` / 回程专家产物）：清单由调用方给全，
-            // **回程不能复用上面「## 用户附件」的措辞**（专家的产物会被介绍成用户附带的）。
-            ...workspaceBundle?.taskLines ?? [],
-            ...projectContextLines.length ? ["", "## \u5F53\u524D\u9879\u76EE\u516C\u5F00\u8F93\u5165", "", "\u751F\u6210 Brief \u524D\u5FC5\u987B\u5148\u8BFB\u53D6 `PROJECT_CONTEXT.md` \u53CA\u5176\u4E2D\u5217\u51FA\u7684 `project/` \u6587\u4EF6\uFF1B\u4ED3\u5E93\u7B49\u5916\u90E8\u4F4D\u7F6E\u4E5F\u8BB0\u5F55\u5728\u8BE5\u6587\u4EF6\u4E2D\u3002"] : [],
-            // 诊断 1be339c7：身份段紧贴在「## 用户消息」之前——让 agent 先知道「你在跟谁说话」，再读那条消息。
-            ...whoLines.length ? ["", ...whoLines] : [],
-            "",
-            "## \u7528\u6237\u6D88\u606F",
-            "",
+          "TASK.md": buildChatTaskMd({
+            headerLines: taskHeader,
+            // 「未归属」只对普通对话说：挂在工单上的对话（协调者 / 上报讨论房）项目看工单绑定，
+            // 委派子会话建出来本就不带项目；知识库单轮受限生成连抬头都是另一套。
+            projectSection: isolatedKnowledgeTurn ? [] : buildChatProjectSection(turnProject, { announceNone: !workspace && !delegatedChildTurn }),
+            attachmentPaths,
+            parentConversationLines: parentConversationBundle.taskLines,
+            workspaceLines: workspaceBundle?.taskLines ?? [],
+            // 项目公开输入指针：文字、位置、出现条件（查到了项目）都与改动前一致。
+            projectInputsPointer: turnProject.state === "bound" ? CHAT_PROJECT_INPUTS_POINTER : [],
+            whoLines,
             message,
-            ...chatMemoryLines,
-            // 压在最末：这条要盖住紧邻其上的「收工前想一下」，否则记忆写入就落到正文之后（见常量注释）。
-            ...isolatedKnowledgeTurn ? [] : chatFinalReplyRule({ memoryEnabled: chatMemoryEnabled })
-          ].join("\n")
+            memoryLines: chatMemoryLines,
+            finalReplyLines: isolatedKnowledgeTurn ? [] : chatFinalReplyRule({ memoryEnabled: chatMemoryEnabled })
+          })
         };
         Object.assign(files, attachmentFiles);
         Object.assign(files, parentConversationBundle.files);
@@ -265472,6 +266052,8 @@ async function startServe(opts) {
         handle.onLiveEvent?.((event) => {
           if (liveEventCbs.length === 0) bufferedLiveEvents.push(event);
           for (const cb of liveEventCbs) cb(event);
+          const subagentEvent = subagentRunEventFromLive(event);
+          if (subagentEvent) enqueueTrace(() => traceAppender.append([subagentEvent]).then(() => void 0));
         });
         let capturedNativeSessionId;
         const done = new Promise((resolve10, reject) => {
@@ -265498,6 +266080,7 @@ async function startServe(opts) {
                 durationMs: durationMs3,
                 exitCode: info.code,
                 exitReason: info.reason ?? null,
+                ...!isHealthySessionExit(info) && info.reason !== "cancelled" ? { errorCode: info.reason ?? "error", errorMessage: formatExitError(info) } : {},
                 transcriptRef: info.transcriptRef ?? null,
                 usage,
                 effectiveModel,
@@ -266251,7 +266834,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto78.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -266336,7 +266919,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto78.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -266714,7 +267297,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto77.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto78.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -267202,28 +267785,28 @@ async function startServe(opts) {
     const isDefault = cid === defaultCompanyId;
     const cacheKey = `${cid}::${workspace}`;
     if (initiatorCache.has(cacheKey)) return initiatorCache.get(cacheKey);
-    let found = null;
+    let found2 = null;
     const kernelToRead = engine2?.kernel ?? newEngine.kernel;
     const store = kernelToRead.getStore?.();
     if (store) {
       try {
         const events = await store.transaction((tx) => tx.listEvents(workspace));
         const spawn10 = events.find((e) => e.event.kind === "plan.changed");
-        found = spawn10?.actorId ?? null;
+        found2 = spawn10?.actorId ?? null;
       } catch {
       }
     }
-    if (found === null && isDefault) {
+    if (found2 === null && isDefault) {
       for await (const entry of oplog.readAll()) {
         const op = entry.op;
         if (op.kind === "spawn_artifact" && op.payload.workspace === workspace) {
-          found = op.actor;
+          found2 = op.actor;
           break;
         }
       }
     }
-    initiatorCache.set(cacheKey, found);
-    return found;
+    initiatorCache.set(cacheKey, found2);
+    return found2;
   };
   const leadOf = async (actor, registry2) => {
     const reg = registry2 ?? registryStore;
@@ -267407,7 +267990,7 @@ async function startServe(opts) {
     },
     log: (message) => console.warn(message)
   });
-  if (process.env["OASIS_NOTIFICATION_LEDGER"] !== "off") {
+  if (notificationLedgerEnabled) {
     const ledgerPeople = /* @__PURE__ */ new Map();
     const worker = new NotificationLedgerWorker({
       listCompanies: async () => engineRouter.liveEntries().map((e) => e.companyId),
@@ -268662,7 +269245,7 @@ var SessionProcessState = class {
 // ../cli/src/daemon/ws-client.ts
 init_wrapper();
 var import_node_os9 = require("node:os");
-var import_node_crypto78 = require("node:crypto");
+var import_node_crypto79 = require("node:crypto");
 init_src8();
 init_src6();
 
@@ -268731,7 +269314,7 @@ var import_node_fs20 = __toESM(require("node:fs"), 1);
 var import_node_path26 = __toESM(require("node:path"), 1);
 init_src6();
 init_src();
-var WORKDIR_READ_MAX_BYTES2 = 2 * 1024 * 1024;
+var WORKDIR_READ_MAX_BYTES = 2 * 1024 * 1024;
 var WORKDIR_LIST_MAX_ENTRIES = 500;
 var WORKDIR_WALK_MAX_ENTRIES2 = 1e4;
 var WORKDIR_WALK_BUDGET_MS2 = 1e4;
@@ -268909,7 +269492,7 @@ async function verifyOpenedFd(fh, base, fallback) {
   return { anchor: `/proc/self/fd/${fh.fd}` };
 }
 async function handleWorkdirRead(req) {
-  const maxBytes = req.maxBytes ?? WORKDIR_READ_MAX_BYTES2;
+  const maxBytes = req.maxBytes ?? WORKDIR_READ_MAX_BYTES;
   try {
     const resolved = await resolveWithinWorkdir(req);
     if (!resolved.ok) return resolved;
@@ -269434,7 +270017,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto78.randomUUID)();
+    const requestId = (0, import_node_crypto79.randomUUID)();
     return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -269836,7 +270419,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process21 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
-var import_node_crypto79 = require("node:crypto");
+var import_node_crypto80 = require("node:crypto");
 var import_node_os12 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -269902,7 +270485,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto79.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto80.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -270913,7 +271496,7 @@ var COMMAND_DECLS = {
     flags: [
       { name: "name", desc: "\u9879\u76EE\u540D", required: true },
       { name: "goal", desc: "\u9879\u76EE\u76EE\u6807" },
-      { name: "slug", desc: "URL slug" },
+      { name: "slug", desc: "\u81EA\u5B9A\u4E49\u9879\u76EE id\uFF08\u53EF\u9009\uFF09\u3002\u4E0D\u7ED9\u5219\u968F\u673A\u751F\u6210 proj_xxxxxxxx\uFF1B\u7ED9\u4E86\u4E14\u8BE5 id \u5DF2\u5B58\u5728\uFF0C\u8FD4\u56DE\u7684\u662F\u5DF2\u6709\u9879\u76EE\uFF08\u4F1A\u63D0\u793A\uFF09" },
       { name: "members", desc: "\u6210\u5458 JSON \u6570\u7EC4" }
     ],
     examples: ['oasis project create --name "My Project" --goal "\u6784\u5EFA\u534F\u4F5C\u5E73\u53F0"']
@@ -271673,13 +272256,13 @@ function ownFlagsFromDecl(command) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto80 = require("node:crypto");
+var import_node_crypto81 = require("node:crypto");
 var import_node_child_process22 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto80.createHash)("sha256").update(canonical).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto81.createHash)("sha256").update(canonical).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -271915,7 +272498,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto81.randomUUID)();
+  const waiterId = (0, import_node_crypto82.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -272338,7 +272921,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path35.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto81.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto82.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -273362,7 +273945,8 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         const name = need(flags, "name").trim();
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
-        const id = projectSlug(flags.get("slug") ?? name);
+        const slug6 = flags.get("slug");
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto82.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -273370,6 +273954,9 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
           ...flags.has("members") ? { member_ids: parseStringArrayFlag(flags.get("members"), "members") } : {}
         });
         println(JSON.stringify(result, null, 2));
+        if (typeof result?.name === "string" && result.name !== name) {
+          println(`\u26A0\uFE0F \u9879\u76EE id\u300C${result.project_id ?? id}\u300D\u5DF2\u88AB\u300C${result.name}\u300D\u5360\u7528\uFF0C\u4E0A\u9762\u8FD4\u56DE\u7684\u662F\u90A3\u4E2A\u5DF2\u6709\u9879\u76EE\uFF0C\u6CA1\u6709\u65B0\u5EFA\u3002\u6362\u4E00\u4E2A --slug \u6216\u53BB\u6389 --slug \u91CD\u8BD5\u3002`);
+        }
         break;
       }
       if (positional[0] === "member") {
@@ -275308,20 +275895,20 @@ function instancePaths(name) {
   };
 }
 function listInstances() {
-  const found = [];
-  if (fs43.existsSync(instancePaths(DEFAULT_INSTANCE).configFile)) found.push(DEFAULT_INSTANCE);
+  const found2 = [];
+  if (fs43.existsSync(instancePaths(DEFAULT_INSTANCE).configFile)) found2.push(DEFAULT_INSTANCE);
   let entries = [];
   try {
     entries = fs43.readdirSync(instancesRoot());
   } catch {
-    return found;
+    return found2;
   }
   for (const name of entries.sort()) {
     if (name === DEFAULT_INSTANCE) continue;
     if (!isValidInstanceName(name)) continue;
-    if (fs43.existsSync(instancePaths(name).configFile)) found.push(name);
+    if (fs43.existsSync(instancePaths(name).configFile)) found2.push(name);
   }
-  return found;
+  return found2;
 }
 function referencedVersionLabels() {
   const labels = /* @__PURE__ */ new Set();
@@ -275351,13 +275938,13 @@ var LEGACY_SYSTEMD_UNIT = "oasis-node.service";
 var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 
 // src/install.ts
-var import_node_crypto82 = require("node:crypto");
+var import_node_crypto83 = require("node:crypto");
 var fs44 = __toESM(require("node:fs"));
 var path39 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto82.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto83.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -275480,7 +276067,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.33" : "dev";
+var PKG_VERSION = true ? "2.2.35" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -275765,7 +276352,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto83.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto84.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }