npm - oasis_test_v2 - Versions diffs - 2.2.34 → 2.2.36 - Mend

oasis_test_v2 2.2.34 → 2.2.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/index.js +1148 -728
package/package.json +2 -2

package/dist/index.js CHANGED Viewed

@@ -149,6 +149,9 @@ function normalizeGitRemote(remote) {
 function projectActorKind(actorId) {
   return actorId.startsWith("actor:human:") ? "human" : "agent";
 }
+function projectIdFromUuid(uuid2) {
+  return `proj_${uuid2.replace(/-/g, "").slice(0, 8)}`;
+}
 var init_project = __esm({
   "../contract/src/project.ts"() {
     "use strict";
@@ -22500,6 +22503,43 @@ var init_sync_skills = __esm({
 // ../adapters/src/_core/materialize-bundle.ts
 function materializeBundle(dir, bundle) {
+  for (const [rel, entry] of Object.entries(bundle.restoreFiles ?? {})) {
+    try {
+      const parts = rel.split("/");
+      if (!rel || path3.isAbsolute(rel) || rel.includes("\\") || parts.some((p2) => !p2 || p2 === "." || p2 === "..")) {
+        throw new Error("\u975E\u6CD5\u76F8\u5BF9\u8DEF\u5F84");
+      }
+      let parent = fs3.realpathSync(dir);
+      for (const component of parts.slice(0, -1)) {
+        parent = path3.join(parent, component);
+        if (!fs3.existsSync(parent)) fs3.mkdirSync(parent);
+        const st = fs3.lstatSync(parent);
+        if (st.isSymbolicLink() || !st.isDirectory()) throw new Error("\u6062\u590D\u8DEF\u5F84\u5305\u542B\u975E\u76EE\u5F55\u6216\u8F6F\u94FE\u63A5");
+      }
+      const file = path3.join(parent, parts.at(-1));
+      let exists = false;
+      try {
+        const st = fs3.lstatSync(file);
+        if (!st.isFile() || st.isSymbolicLink()) throw new Error("\u6062\u590D\u76EE\u6807\u4E0D\u662F\u666E\u901A\u6587\u4EF6");
+        exists = true;
+      } catch (error2) {
+        if (error2.code !== "ENOENT") throw error2;
+      }
+      if (entry.requireExisting && !exists) throw new Error("\u4E0A\u6B21\u672A\u4FDD\u5B58\u7684\u6587\u4EF6\u5DF2\u4E0D\u5728\u672C\u8282\u70B9\uFF0C\u65E0\u6CD5\u6062\u590D\u6700\u65B0\u7248");
+      if (exists && !entry.overwrite) continue;
+      const bytes2 = Buffer.from(entry.contentBase64, "base64");
+      if ((0, import_node_crypto6.createHash)("sha256").update(bytes2).digest("hex") !== entry.sha256) throw new Error("\u5185\u5BB9\u6821\u9A8C\u5931\u8D25");
+      const temp = path3.join(parent, `.oasis-restore-${(0, import_node_crypto6.randomUUID)()}`);
+      try {
+        fs3.writeFileSync(temp, bytes2, { flag: "wx", mode: 384 });
+        fs3.renameSync(temp, file);
+      } finally {
+        fs3.rmSync(temp, { force: true });
+      }
+    } catch (error2) {
+      throw new BundleRestoreError(rel, error2 instanceof Error ? error2.message : String(error2));
+    }
+  }
   for (const [rel, content3] of Object.entries(bundle.files)) {
     const file = path3.join(dir, rel);
     fs3.mkdirSync(path3.dirname(file), { recursive: true });
@@ -22514,12 +22554,20 @@ function materializeBundle(dir, bundle) {
   if (!task) throw new Error("bundle \u7F3A TASK.md\uFF08\u88C5\u914D\u5668\u5951\u7EA6\uFF09");
   return task;
 }
-var fs3, path3;
+var fs3, path3, import_node_crypto6, BundleRestoreError;
 var init_materialize_bundle = __esm({
   "../adapters/src/_core/materialize-bundle.ts"() {
     "use strict";
     fs3 = __toESM(require("node:fs"), 1);
     path3 = __toESM(require("node:path"), 1);
+    import_node_crypto6 = require("node:crypto");
+    BundleRestoreError = class extends Error {
+      constructor(filePath, detail) {
+        super(`\u6587\u4EF6\u6062\u590D\u5931\u8D25 ${filePath}\uFF1A${detail}`);
+        this.filePath = filePath;
+        this.name = "BundleRestoreError";
+      }
+    };
   }
 });
@@ -22573,7 +22621,7 @@ function resolveWorkRoots(workRoot) {
 }
 function workdirSlug(workdirKey) {
   const safe = workdirKey.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 48);
-  const h = (0, import_node_crypto6.createHash)("sha256").update(workdirKey).digest("hex").slice(0, 8);
+  const h = (0, import_node_crypto7.createHash)("sha256").update(workdirKey).digest("hex").slice(0, 8);
   return `${safe}-${h}`;
 }
 function sessionDirFor(workRoot, runtimeKind, workdirKey) {
@@ -22705,11 +22753,11 @@ function prepareWorkdir(args) {
 function legacyChatSessionDir(workRoot, rtId) {
   return import_node_path.default.join(resolveLegacyWorkRoot(workRoot), "oasis-chat-sessions", rtId.replace(/[^a-zA-Z0-9_-]+/g, "_"));
 }
-var import_node_crypto6, import_node_fs2, import_node_os, import_node_path, META_FILE, LOCK_FILE, NEW_WORK_ROOT, slug3, LEGACY_ROOTS, LEGACY_ONESHOT_PREFIX;
+var import_node_crypto7, import_node_fs2, import_node_os, import_node_path, META_FILE, LOCK_FILE, NEW_WORK_ROOT, slug3, LEGACY_ROOTS, LEGACY_ONESHOT_PREFIX;
 var init_session_paths = __esm({
   "../adapters/src/_core/session-paths.ts"() {
     "use strict";
-    import_node_crypto6 = require("node:crypto");
+    import_node_crypto7 = require("node:crypto");
     import_node_fs2 = __toESM(require("node:fs"), 1);
     import_node_os = __toESM(require("node:os"), 1);
     import_node_path = __toESM(require("node:path"), 1);
@@ -22737,7 +22785,7 @@ function executionEnvHash(p2) {
     binPkg: p2.binPackageDir ?? null,
     extraRo: [...p2.extraRoBindDirs ?? []].sort()
   });
-  return (0, import_node_crypto7.createHash)("sha256").update(material).digest("hex").slice(0, 16);
+  return (0, import_node_crypto8.createHash)("sha256").update(material).digest("hex").slice(0, 16);
 }
 function persistContainerName(workdirKey) {
   return `oasis-wd-${workdirSlug(workdirKey)}`;
@@ -22857,11 +22905,11 @@ function wrapForContainer(p2) {
 function killContainerArgs(containerName) {
   return ["kill", containerName];
 }
-var import_node_crypto7, path5, CONTAINER_DEFAULT_PATH, CONTAINER_HOME, EE_HASH_LABEL;
+var import_node_crypto8, path5, CONTAINER_DEFAULT_PATH, CONTAINER_HOME, EE_HASH_LABEL;
 var init_container_wrap = __esm({
   "../adapters/src/_core/container-wrap.ts"() {
     "use strict";
-    import_node_crypto7 = require("node:crypto");
+    import_node_crypto8 = require("node:crypto");
     path5 = __toESM(require("node:path"), 1);
     init_session_paths();
     CONTAINER_DEFAULT_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
@@ -23589,12 +23637,12 @@ function classifyExit(result) {
   if (status === 429 || status === 529) return "rate-limit";
   return "error";
 }
-var import_node_child_process3, import_node_crypto8, fs7, path7, readline, CLAUDE_BLOCKED_FLAGS, SUBAGENT_TRANSCRIPT_MAX_BYTES, SUBAGENT_TERMINAL, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
+var import_node_child_process3, import_node_crypto9, fs7, path7, readline, CLAUDE_BLOCKED_FLAGS, SUBAGENT_TRANSCRIPT_MAX_BYTES, SUBAGENT_TERMINAL, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
 var init_claude_code = __esm({
   "../adapters/src/claude-code/index.ts"() {
     "use strict";
     import_node_child_process3 = require("node:child_process");
-    import_node_crypto8 = require("node:crypto");
+    import_node_crypto9 = require("node:crypto");
     fs7 = __toESM(require("node:fs"), 1);
     path7 = __toESM(require("node:path"), 1);
     readline = __toESM(require("node:readline"), 1);
@@ -23674,7 +23722,7 @@ var init_claude_code = __esm({
       }
       async spawn(job) {
         const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-        const id = `claude-${slug6}-${(0, import_node_crypto8.randomUUID)().slice(0, 8)}`;
+        const id = `claude-${slug6}-${(0, import_node_crypto9.randomUUID)().slice(0, 8)}`;
         const dir = job.workdirKey ? prepareWorkdir({
           workRoot: this.opts.workRoot,
           runtimeKind: "claude",
@@ -24087,7 +24135,7 @@ var init_claude_code = __esm({
           const outgoing = report.failed.length ? appendMaterializeWarning(input.text, report) : input.text;
           if (input.interrupt) writeInterrupt();
           diag("append_accepted", { writes, results, interrupt: !!input.interrupt, chars: input.text.length });
-          const receiptId = input.requireConsumptionReceipt ? (0, import_node_crypto8.randomUUID)() : void 0;
+          const receiptId = input.requireConsumptionReceipt ? (0, import_node_crypto9.randomUUID)() : void 0;
           if (receiptId) pendingInputReceipts.set(receiptId, input.clientMessageKey);
           const ok3 = writeUserMessage(outgoing, receiptId);
           if (!ok3 && receiptId) pendingInputReceipts.delete(receiptId);
@@ -24227,7 +24275,12 @@ function withResilience(inner, cfg = {}) {
           try {
             handle = await inner.spawn(job);
           } catch (err) {
-            finish({ code: null, reason: "error", errorMessage: errText(err) });
+            finish({
+              code: null,
+              reason: "error",
+              errorMessage: errText(err),
+              ...err instanceof BundleRestoreError ? { fileRestoreError: { path: err.filePath, message: err.message } } : {}
+            });
             return;
           }
           const { info, produced } = await runOnce(handle);
@@ -24301,6 +24354,7 @@ var RETRYABLE, sleep2;
 var init_resilient = __esm({
   "../adapters/src/_core/resilient.ts"() {
     "use strict";
+    init_materialize_bundle();
     init_src();
     RETRYABLE = /* @__PURE__ */ new Set(["rate-limit", "timeout", "server-unreachable"]);
     sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -24484,9 +24538,9 @@ function lockPathFor(cacheRoot, actorId) {
 }
 function aggregateSkillContentHash(files) {
   const sorted = [...files].sort((a, b2) => a.path.localeCompare(b2.path));
-  const hasher = (0, import_node_crypto9.createHash)("sha256");
+  const hasher = (0, import_node_crypto10.createHash)("sha256");
   for (const f2 of sorted) {
-    const blob = (0, import_node_crypto9.createHash)("sha256").update(f2.content).digest("hex");
+    const blob = (0, import_node_crypto10.createHash)("sha256").update(f2.content).digest("hex");
     hasher.update(f2.path);
     hasher.update("\0");
     hasher.update(blob);
@@ -24714,11 +24768,11 @@ async function verifyPendingLink(skillsDir, name, pend, log3) {
   }
   return true;
 }
-var import_node_crypto9, fsp, os4, path8, MANIFEST_SCHEMA_VERSION, STALE_LOCK_MS, LOCK_ACQUIRE_TIMEOUT_MS, LOCK_POLL_MS;
+var import_node_crypto10, fsp, os4, path8, MANIFEST_SCHEMA_VERSION, STALE_LOCK_MS, LOCK_ACQUIRE_TIMEOUT_MS, LOCK_POLL_MS;
 var init_skill_cache = __esm({
   "../adapters/src/_core/skill-cache.ts"() {
     "use strict";
-    import_node_crypto9 = require("node:crypto");
+    import_node_crypto10 = require("node:crypto");
     fsp = __toESM(require("node:fs/promises"), 1);
     os4 = __toESM(require("node:os"), 1);
     path8 = __toESM(require("node:path"), 1);
@@ -25367,7 +25421,7 @@ function isResponse(message) {
 }
 async function runProtocolSession(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-  const id = `${cfg.runtimeKind}-${slug6}-${(0, import_node_crypto10.randomUUID)().slice(0, 8)}`;
+  const id = `${cfg.runtimeKind}-${slug6}-${(0, import_node_crypto11.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind,
@@ -25610,12 +25664,12 @@ async function runProtocolSession(job, cfg) {
     }
   };
 }
-var import_node_child_process6, import_node_crypto10, path9, ProtocolCommandRejected, ProtocolSessionClosing;
+var import_node_child_process6, import_node_crypto11, path9, ProtocolCommandRejected, ProtocolSessionClosing;
 var init_protocol_session = __esm({
   "../adapters/src/_core/protocol-session.ts"() {
     "use strict";
     import_node_child_process6 = require("node:child_process");
-    import_node_crypto10 = require("node:crypto");
+    import_node_crypto11 = require("node:crypto");
     path9 = __toESM(require("node:path"), 1);
     init_claude_code();
     init_container_runtime();
@@ -26074,13 +26128,13 @@ function codexTurnErrorMessage(value2) {
   const detail = typeof error2?.additionalDetails === "string" ? error2.additionalDetails.trim() : "";
   return [summary, detail].filter(Boolean).join("\n").slice(0, 4e3);
 }
-var import_node_child_process7, import_node_crypto11, fs8, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CODEX_APP_SERVER_BLOCKED_FLAGS, CodexAdapter;
+var import_node_child_process7, import_node_crypto12, fs8, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CODEX_APP_SERVER_BLOCKED_FLAGS, CodexAdapter;
 var init_codex = __esm({
   "../adapters/src/codex/index.ts"() {
     "use strict";
     import_node_child_process7 = require("node:child_process");
     init_container_runtime();
-    import_node_crypto11 = require("node:crypto");
+    import_node_crypto12 = require("node:crypto");
     fs8 = __toESM(require("node:fs"), 1);
     os5 = __toESM(require("node:os"), 1);
     path10 = __toESM(require("node:path"), 1);
@@ -26368,7 +26422,7 @@ ${task}` : task;
       }
       async spawnExec(job) {
         const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-        const id = `codex-${slug6}-${(0, import_node_crypto11.randomUUID)().slice(0, 8)}`;
+        const id = `codex-${slug6}-${(0, import_node_crypto12.randomUUID)().slice(0, 8)}`;
         const startedAtMs = Date.now();
         const dir = job.workdirKey ? prepareWorkdir({
           workRoot: this.opts.workRoot,
@@ -27179,7 +27233,7 @@ async function runACPSession(job, cfg) {
   }
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
   const binTag = path11.basename(cfg.bin).replace(/[^a-zA-Z0-9]/g, "").slice(0, 12) || "acp";
-  const id = `${binTag}-${slug6}-${(0, import_node_crypto12.randomUUID)().slice(0, 8)}`;
+  const id = `${binTag}-${slug6}-${(0, import_node_crypto13.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind ?? "subprocess",
@@ -27592,12 +27646,12 @@ ${task}` : task;
     return run;
   }
 }
-var import_node_child_process8, import_node_crypto12, fs9, path11, readline3, ACPClient, LEGACY_APPROVE_OPTION_ID;
+var import_node_child_process8, import_node_crypto13, fs9, path11, readline3, ACPClient, LEGACY_APPROVE_OPTION_ID;
 var init_acp = __esm({
   "../adapters/src/_core/acp.ts"() {
     "use strict";
     import_node_child_process8 = require("node:child_process");
-    import_node_crypto12 = require("node:crypto");
+    import_node_crypto13 = require("node:crypto");
     fs9 = __toESM(require("node:fs"), 1);
     path11 = __toESM(require("node:path"), 1);
     readline3 = __toESM(require("node:readline"), 1);
@@ -28430,7 +28484,7 @@ var init_pdeathsig = __esm({
 // ../adapters/src/_core/subprocess.ts
 async function materialize(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-  const id = `${slug6}-${(0, import_node_crypto13.randomUUID)().slice(0, 8)}`;
+  const id = `${slug6}-${(0, import_node_crypto14.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind ?? "subprocess",
@@ -28723,12 +28777,12 @@ async function runOneShotText(job, cfg) {
     }
   });
 }
-var import_node_child_process10, import_node_crypto13, fs11, path13, readline4;
+var import_node_child_process10, import_node_crypto14, fs11, path13, readline4;
 var init_subprocess = __esm({
   "../adapters/src/_core/subprocess.ts"() {
     "use strict";
     import_node_child_process10 = require("node:child_process");
-    import_node_crypto13 = require("node:crypto");
+    import_node_crypto14 = require("node:crypto");
     fs11 = __toESM(require("node:fs"), 1);
     path13 = __toESM(require("node:path"), 1);
     readline4 = __toESM(require("node:readline"), 1);
@@ -28785,11 +28839,11 @@ function normalizeOpenClaw(line, state) {
   const text5 = (r.payloads ?? []).map((pl) => pl?.text ?? "").filter(Boolean).join("\n");
   return text5 ? [{ kind: "message", payload: { text: text5 }, outputText: text5 }] : [];
 }
-var import_node_crypto14, isTopLevelClose, OpenClawAdapter;
+var import_node_crypto15, isTopLevelClose, OpenClawAdapter;
 var init_openclaw = __esm({
   "../adapters/src/openclaw/index.ts"() {
     "use strict";
-    import_node_crypto14 = require("node:crypto");
+    import_node_crypto15 = require("node:crypto");
     init_subprocess();
     isTopLevelClose = (line) => line === "}" || line === "}\r";
     OpenClawAdapter = class {
@@ -28798,7 +28852,7 @@ var init_openclaw = __esm({
       }
       spawn(job) {
         const opts = this.opts;
-        const sessionId = job.runtimeSessionId ?? `oasis-${(0, import_node_crypto14.randomUUID)().slice(0, 8)}`;
+        const sessionId = job.runtimeSessionId ?? `oasis-${(0, import_node_crypto15.randomUUID)().slice(0, 8)}`;
         return runStreamJson(job, {
           model: job.model ?? opts.model,
           bin: opts.openClawBin ?? "openclaw",
@@ -29599,6 +29653,7 @@ var init_src6 = __esm({
     init_workdir_gc();
     init_gc_loop();
     init_normalizer2();
+    init_materialize_bundle();
   }
 });
@@ -29954,7 +30009,7 @@ function chatItemsDoubleWriteEnabled(env = process.env) {
   return raw !== "" && raw !== "0" && raw !== "false" && raw !== "off" && raw !== "no";
 }
 function fallbackTurnId(runId) {
-  return runId ? `chat-run-turn:${runId}` : `local-turn:${(0, import_node_crypto15.randomUUID)()}`;
+  return runId ? `chat-run-turn:${runId}` : `local-turn:${(0, import_node_crypto16.randomUUID)()}`;
 }
 async function resolveChatItemsTurnId(items, messageId, fallback) {
   const existing = await items.listItemsByMessage(messageId).catch(() => []);
@@ -29973,20 +30028,20 @@ function projectsIntoContent(kind, role, origin, telemetryTextInContent, attrs =
       return true;
   }
 }
-var import_node_crypto15, CHAT_ITEMS_DOUBLE_WRITE_ENV, SEGMENT_END_NOTE, ChatItemLedger;
+var import_node_crypto16, CHAT_ITEMS_DOUBLE_WRITE_ENV, SEGMENT_END_NOTE, ChatItemLedger;
 var init_chat_item_ledger = __esm({
   "../server/src/chat-item-ledger.ts"() {
     "use strict";
     init_src();
     init_subagent_cost();
     init_chat_item();
-    import_node_crypto15 = require("node:crypto");
+    import_node_crypto16 = require("node:crypto");
     CHAT_ITEMS_DOUBLE_WRITE_ENV = "OASIS_CHAT_ITEMS_DOUBLE_WRITE";
     SEGMENT_END_NOTE = "\u672C\u6BB5\u65E0\u8F93\u51FA\uFF08\u4EBA\u5728\u9996\u4E2A\u6B63\u6587\u4E4B\u524D\u63D2\u4E86\u8BDD\uFF09";
     ChatItemLedger = class {
       constructor(deps) {
         this.deps = deps;
-        this.newId = deps.newId ?? import_node_crypto15.randomUUID;
+        this.newId = deps.newId ?? import_node_crypto16.randomUUID;
         this.now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
         this.log = deps.log ?? ((m2) => console.warn(m2));
         this.messageId = deps.messageId ?? null;
@@ -30606,7 +30661,7 @@ var init_chat_parts = __esm({
 async function openAssistantRunningRow(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   if (typeof deps.chatStore.appendMessage !== "function") return void 0;
-  const id = (0, import_node_crypto16.randomUUID)();
+  const id = (0, import_node_crypto17.randomUUID)();
   const at = now();
   try {
     await deps.chatStore.appendMessage({
@@ -30650,7 +30705,7 @@ async function finalizeAssistantRow(deps) {
   if (typeof deps.chatStore.appendMessage !== "function") return;
   try {
     await deps.chatStore.appendMessage({
-      id: (0, import_node_crypto16.randomUUID)(),
+      id: (0, import_node_crypto17.randomUUID)(),
       sessionId: deps.chatSessionId,
       role: "assistant",
       content: deps.content,
@@ -30664,6 +30719,13 @@ async function finalizeAssistantRow(deps) {
   } catch {
   }
 }
+function outputsPartProvider(scan2, chatSessionId, companyId) {
+  if (!scan2) return void 0;
+  return async () => {
+    const files = await scan2({ chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
+    return files && files.length > 0 ? { type: "outputs", seq: 0, outputs: files } : null;
+  };
+}
 async function appendOutputsPart(parts, provider) {
   if (!provider) return parts;
   const part = await provider().catch(() => null);
@@ -30907,11 +30969,11 @@ function runBackgroundAssistantChatTurn(deps) {
     });
   })().catch(() => void 0);
 }
-var import_node_crypto16;
+var import_node_crypto17;
 var init_chat_assistant_turn = __esm({
   "../server/src/chat-assistant-turn.ts"() {
     "use strict";
-    import_node_crypto16 = require("node:crypto");
+    import_node_crypto17 = require("node:crypto");
     init_src6();
     init_chat_item_ledger();
     init_chat_parts();
@@ -30929,7 +30991,7 @@ async function openChatTurn(args) {
   const turns = args.turns;
   if (!turns) return { ok: true, turn: null };
   const nowIso = args.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  const turnId = (args.newId ?? import_node_crypto17.randomUUID)();
+  const turnId = (args.newId ?? import_node_crypto18.randomUUID)();
   const messageKey = localTurnMessageKey(args.source, turnId);
   const claim = await turns.claimTurn({
     turnId,
@@ -30963,7 +31025,7 @@ async function openChatTurn(args) {
     }
   };
 }
-function assistantRowRecovery(chatStore) {
+function assistantRowRecovery(chatStore, opts = {}) {
   const rowOf = async (turn) => {
     const runId = turn.assistantRunId;
     if (!runId) return null;
@@ -30979,20 +31041,27 @@ function assistantRowRecovery(chatStore) {
 ` : "";
       const content3 = patch.status === "error" ? `${partial2}${ORPHANED_TURN_ASSISTANT_NOTICE}` : row.content ?? "";
+      const outputsPart = opts.outputsPartFor?.(turn.chatSessionId);
       await finalizeAssistantRow({
         chatStore,
         chatSessionId: turn.chatSessionId,
         assistantMsgId: row.id,
         content: content3,
-        parts: [],
+        // 不扫产出时照旧传空：finalize 对空 parts 不写这一列，行上原有的 parts 不动。
+        // 要扫就必须带上原有 parts——否则扫到产出时写回去的只剩一张卡，这一轮的过程记录被冲掉。
+        parts: outputsPart ? existingParts(row.parts) : [],
         status: patch.status,
         ...turn.assistantRunId ? { runId: turn.assistantRunId } : {},
         turnId: turn.id,
-        now: () => patch.completedAt
+        now: () => patch.completedAt,
+        ...outputsPart ? { outputsPart } : {}
       });
     }
   };
 }
+function existingParts(parts) {
+  return Array.isArray(parts) ? parts.filter((p2) => p2 && typeof p2 === "object" && typeof p2.type === "string") : [];
+}
 async function reconcileChatTurn(turn, deps) {
   if (deps.isOwned?.(turn)) return { settled: false, turnId: turn.id, reason: "owned" };
   const rowStatus = deps.assistantRowStatus ? await deps.assistantRowStatus(turn).catch(() => null) : null;
@@ -31097,11 +31166,11 @@ async function sweepStaleChatTurnsAcrossCompanies(deps) {
   }
   return settled;
 }
-var import_node_crypto17, ORPHANED_TURN_ASSISTANT_NOTICE;
+var import_node_crypto18, ORPHANED_TURN_ASSISTANT_NOTICE;
 var init_chat_turn_gate = __esm({
   "../server/src/chat-turn-gate.ts"() {
     "use strict";
-    import_node_crypto17 = require("node:crypto");
+    import_node_crypto18 = require("node:crypto");
     init_chat_assistant_turn();
     ORPHANED_TURN_ASSISTANT_NOTICE = "\u8FD9\u4E00\u8F6E\u6CA1\u6709\u6B63\u5E38\u7ED3\u675F\uFF08\u670D\u52A1\u7AEF\u8FDB\u7A0B\u4E2D\u65AD\uFF09\uFF0C\u6CA1\u6709\u4EA7\u751F\u56DE\u590D\u3002\u4F60\u53EF\u4EE5\u518D\u95EE\u4E00\u6B21\u3002";
   }
@@ -31313,11 +31382,11 @@ var init_parse = __esm({
 // ../channels/src/feishu/crypto.ts
 function decryptFeishu(encrypt, encryptKey) {
-  const key = (0, import_node_crypto18.createHash)("sha256").update(encryptKey).digest();
+  const key = (0, import_node_crypto19.createHash)("sha256").update(encryptKey).digest();
   const data = Buffer.from(encrypt, "base64");
   const iv = data.subarray(0, 16);
   const ciphertext = data.subarray(16);
-  const decipher = (0, import_node_crypto18.createDecipheriv)("aes-256-cbc", key, iv);
+  const decipher = (0, import_node_crypto19.createDecipheriv)("aes-256-cbc", key, iv);
   decipher.setAutoPadding(true);
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
 }
@@ -31351,11 +31420,11 @@ function verifyToken(decoded, expected) {
   const token = headerToken ?? decoded["token"];
   return token === expected;
 }
-var import_node_crypto18;
+var import_node_crypto19;
 var init_crypto = __esm({
   "../channels/src/feishu/crypto.ts"() {
     "use strict";
-    import_node_crypto18 = require("node:crypto");
+    import_node_crypto19 = require("node:crypto");
   }
 });
@@ -31491,11 +31560,11 @@ var init_src7 = __esm({
 function errMsg(e) {
   return e instanceof Error ? e.message : String(e);
 }
-var import_node_crypto19, FEISHU, ChannelService, CardStreamer;
+var import_node_crypto20, FEISHU, ChannelService, CardStreamer;
 var init_service = __esm({
   "../server/src/channels/service.ts"() {
     "use strict";
-    import_node_crypto19 = require("node:crypto");
+    import_node_crypto20 = require("node:crypto");
     init_chat_turn_gate();
     init_deletion();
     init_src7();
@@ -31577,7 +31646,7 @@ var init_service = __esm({
             return existing.chatSessionId;
           }
         }
-        const id = (0, import_node_crypto19.randomUUID)();
+        const id = (0, import_node_crypto20.randomUUID)();
         const now = this.now();
         if (cs) {
           const rt = await this.deps.resolveRuntime?.(a.aiActorId).catch(() => null);
@@ -31613,7 +31682,7 @@ var init_service = __esm({
         if (cs) {
           const sess = await cs.getSession(intent.chatSessionId).catch(() => null);
           resumeRt = sess?.runtimeSessionId ?? void 0;
-          await cs.appendMessage({ id: (0, import_node_crypto19.randomUUID)(), sessionId: intent.chatSessionId, role: "user", content: intent.message, createdAt: this.now() }, { source: "channels" }).catch(() => void 0);
+          await cs.appendMessage({ id: (0, import_node_crypto20.randomUUID)(), sessionId: intent.chatSessionId, role: "user", content: intent.message, createdAt: this.now() }, { source: "channels" }).catch(() => void 0);
         }
         const opened = await openChatTurn({
           turns: this.deps.chatTurns,
@@ -31651,7 +31720,7 @@ var init_service = __esm({
             const reply = streamer.text();
             if (reply || session.runId) {
               await cs.appendMessage({
-                id: (0, import_node_crypto19.randomUUID)(),
+                id: (0, import_node_crypto20.randomUUID)(),
                 sessionId: intent.chatSessionId,
                 role: "assistant",
                 content: reply,
@@ -52730,7 +52799,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes13, createHash: createHash39 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash41 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -53398,7 +53467,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash39("sha1").update(key + GUID).digest("base64");
+        const digest = createHash41("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -53767,7 +53836,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash39 } = require("crypto");
+    var { createHash: createHash41 } = require("crypto");
     var extension3 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -54074,7 +54143,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash39("sha1").update(key + GUID).digest("base64");
+        const digest = createHash41("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -162288,13 +162357,13 @@ var init_chat_attachment_files = __esm({
 // ../server/src/domains/chat-sessions/append-now.ts
 async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, attachments, retainLocallyOnFailure = false) {
-  const newId = deps.newId ?? import_node_crypto20.randomUUID;
+  const newId = deps.newId ?? import_node_crypto21.randomUUID;
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   if (!deps.store.claimPendingInsert) {
     return { accepted: false, reason: "queue-unavailable", queued: false, delivered: "", batch: [] };
   }
   const { submitted, batch } = await deps.store.claimPendingInsert({
-    id: clientKey ? `append-request:${(0, import_node_crypto20.createHash)("sha256").update(JSON.stringify([chatSessionId, clientKey])).digest("hex")}` : newId(),
+    id: clientKey ? `append-request:${(0, import_node_crypto21.createHash)("sha256").update(JSON.stringify([chatSessionId, clientKey])).digest("hex")}` : newId(),
     chatSessionId,
     text: text5,
     ...attachments?.length ? { attachments } : {},
@@ -162350,11 +162419,11 @@ async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, atta
   }
   return { ...res, queued: !returnToClient, delivered: merged, batch, ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {} };
 }
-var import_node_crypto20;
+var import_node_crypto21;
 var init_append_now = __esm({
   "../server/src/domains/chat-sessions/append-now.ts"() {
     "use strict";
-    import_node_crypto20 = require("node:crypto");
+    import_node_crypto21 = require("node:crypto");
     init_chat_attachment_files();
   }
 });
@@ -163027,7 +163096,7 @@ function slug5(name) {
   return s2 || "user";
 }
 function short6() {
-  return (0, import_node_crypto21.randomBytes)(4).toString("hex").slice(0, 6);
+  return (0, import_node_crypto22.randomBytes)(4).toString("hex").slice(0, 6);
 }
 async function assertBindingWritePermission(caller, targetHumanId, deps) {
   if (caller === targetHumanId) return true;
@@ -163092,11 +163161,11 @@ async function resolveWorkorderPrincipals(caller, cliOverrides, deps) {
   }
   return { error: "UNBOUND_AGENT_NO_OWNER", message: `owner \u65E0\u6CD5\u89E3\u6790\uFF1A\u8C03\u7528\u65B9 ${caller} \u65E2\u975E\u5728\u5C97\u771F\u4EBA\u4E5F\u975E\u5DF2\u7ED1\u52A9\u7406` };
 }
-var import_node_crypto21, DEFAULT_ASSISTANT_PROMPT, DEFAULT_ASSISTANT_SKILLS, DEFAULT_ASSISTANT_RUNTIME_KIND, ASSISTANT_ARCHIVED_CODE, AssistantLazyCreateError, AssistantsService;
+var import_node_crypto22, DEFAULT_ASSISTANT_PROMPT, DEFAULT_ASSISTANT_SKILLS, DEFAULT_ASSISTANT_RUNTIME_KIND, ASSISTANT_ARCHIVED_CODE, AssistantLazyCreateError, AssistantsService;
 var init_assistants = __esm({
   "../server/src/domains/actors/assistants.ts"() {
     "use strict";
-    import_node_crypto21 = require("node:crypto");
+    import_node_crypto22 = require("node:crypto");
     init_src();
     DEFAULT_ASSISTANT_PROMPT = "\u4F60\u662F\u8FD9\u540D\u771F\u4EBA\u5458\u5DE5\u7684\u4E13\u5C5E\u4E2A\u4EBA\u52A9\u7406\u3002\u4F60\u4EE5\u5176\u300C\u5DE5\u5355\u7BA1\u7406\u8005\u300D\u8EAB\u4EFD\u4EE3\u8DD1\uFF0C\u9075\u5FAA\u4E09\u6863\u6743\u9650\u6A21\u578B\uFF1A\u6863 A\uFF08\u52A0\u8FB9\u3001\u65B0\u5EFA\u8282\u70B9\u3001\u6539\u6807\u9898\u4E0E brief\u3001\u5E38\u89C4\u8BC4\u8BBA\u7B54\u7591\u3001\u63A8\u8FDB\u81EA\u5DF1\u63A5\u7684\u6D3B\uFF09\u53EF\u9006\u6539\u52A8\u76F4\u63A5\u751F\u6548\uFF1B\u6863 B\uFF08\u65AD\u8FB9\u3001\u5E9F\u8282\u70B9\u3001\u6539\u6D3E\u3001\u64A4\u90E8\u4EF6\uFF09\u9500\u6BC1\u6027\u6539\u52A8\u81EA\u52A8\u6253\u5305\u6210\u5F85\u786E\u8BA4\u63D0\u6848\uFF0C\u4EA4\u7531\u672C\u4EBA\u786E\u8BA4\u540E\u751F\u6548\uFF1B\u6863 C\uFF08force-conclude\u3001promote \u7B49\u6CBB\u7406\u547D\u4EE4\uFF09\u8D70\u4EBA\u5DE5\u6388\u6743\u5361\u3002\u4F60\u4E0D\u627F\u62C5\u4E1A\u52A1\u4E13\u4E1A\u5C97\u4F4D\u804C\u8D23\uFF0C\u53EA\u5728\u5176\u6388\u6743\u8303\u56F4\u5185\u534F\u52A9\u5EFA\u5355\u3001\u8DDF\u8FDB\u4E0E\u6C9F\u901A\u3002";
     DEFAULT_ASSISTANT_SKILLS = [];
@@ -165506,7 +165575,7 @@ var init_continuation3 = __esm({
 // ../server/src/chat-workorder-files.ts
 function workOrderFileId(workOrderId, blobId, name) {
-  return `wof:${(0, import_node_crypto22.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
+  return `wof:${(0, import_node_crypto23.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
 }
 async function linkChatAttachmentsToWorkOrder(input) {
   const warnings = [];
@@ -165557,11 +165626,11 @@ async function linkChatAttachmentsToWorkOrder(input) {
   }
   return { linked, warnings };
 }
-var import_node_crypto22;
+var import_node_crypto23;
 var init_chat_workorder_files = __esm({
   "../server/src/chat-workorder-files.ts"() {
     "use strict";
-    import_node_crypto22 = require("node:crypto");
+    import_node_crypto23 = require("node:crypto");
   }
 });
@@ -166329,11 +166398,11 @@ var init_config_store = __esm({
 function clone2(value2) {
   return structuredClone(value2);
 }
-var import_node_crypto23, import_promises2, import_node_path5, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
+var import_node_crypto24, import_promises2, import_node_path5, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
 var init_run_store = __esm({
   "../server/src/domains/knowledge/run-store.ts"() {
     "use strict";
-    import_node_crypto23 = require("node:crypto");
+    import_node_crypto24 = require("node:crypto");
     import_promises2 = require("node:fs/promises");
     import_node_path5 = require("node:path");
     MemoryKnowledgeRunStore = class {
@@ -166450,7 +166519,7 @@ var init_run_store = __esm({
       }
       async persist(runs) {
         const shape = { version: 1, runs };
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto23.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto24.randomUUID)()}.tmp`;
         try {
           await (0, import_promises2.writeFile)(temp, `${JSON.stringify(shape, null, 2)}
 `, { mode: 384 });
@@ -167023,11 +167092,11 @@ function retryableKnowledgeRun(record8) {
   const latestAnswerAttempt = [...record8.attempts ?? []].reverse().find((attempt) => attempt.kind !== "fast");
   return record8.status === "succeeded" && record8.request.action === "ask" && record8.executionHealth === "degraded" && latestAnswerAttempt?.status === "failed";
 }
-var import_node_crypto24, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
+var import_node_crypto25, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
 var init_service2 = __esm({
   "../server/src/domains/knowledge/service.ts"() {
     "use strict";
-    import_node_crypto24 = require("node:crypto");
+    import_node_crypto25 = require("node:crypto");
     init_src5();
     init_config_store();
     init_run_store();
@@ -167070,7 +167139,7 @@ var init_service2 = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-        this.id = options.id ?? import_node_crypto24.randomUUID;
+        this.id = options.id ?? import_node_crypto25.randomUUID;
         this.runStore = options.runStore ?? new MemoryKnowledgeRunStore();
         this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
         this.leaseMs = options.leaseMs ?? LEASE_MS;
@@ -178017,7 +178086,7 @@ function stableJson(value2) {
   return JSON.stringify(stableValue(value2));
 }
 function sha256(value2) {
-  return (0, import_node_crypto25.createHash)("sha256").update(value2).digest("hex");
+  return (0, import_node_crypto26.createHash)("sha256").update(value2).digest("hex");
 }
 function normalizeKnowledgeContent(title, content3) {
   const body2 = content3.normalize("NFC").replace(/\r\n?/gu, "\n").replace(PUBLISH_MARKER, "\n").split("\n").map((line) => line.replace(/[\t ]+$/gu, "")).join("\n").replace(/\n{3,}/gu, "\n\n").trim();
@@ -178256,11 +178325,11 @@ function renderUntrustedKnowledgeFragment(input) {
     "</knowledge>"
   ].join("\n");
 }
-var import_node_crypto25, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
+var import_node_crypto26, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
 var init_governance_content = __esm({
   "../server/src/domains/knowledge/governance-content.ts"() {
     "use strict";
-    import_node_crypto25 = require("node:crypto");
+    import_node_crypto26 = require("node:crypto");
     init_mdast_util_from_markdown();
     init_mdast_util_gfm();
     init_micromark_extension_gfm();
@@ -188427,11 +188496,11 @@ function approvedSnapshotBody(title, content3) {
 function uniqueStrings(values) {
   return [...new Set(values)].sort();
 }
-var import_node_crypto26, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
+var import_node_crypto27, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
 var init_governance_service = __esm({
   "../server/src/domains/knowledge/governance-service.ts"() {
     "use strict";
-    import_node_crypto26 = require("node:crypto");
+    import_node_crypto27 = require("node:crypto");
     init_governance_content();
     init_knowledge_policy();
     init_network_maintenance();
@@ -188453,7 +188522,7 @@ var init_governance_service = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => /* @__PURE__ */ new Date());
-        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto26.randomUUID)()}`);
+        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto27.randomUUID)()}`);
         this.versionViewBaseUrl = (options.versionViewBaseUrl ?? "/api/knowledge/items").replace(/\/$/u, "");
         this.projectProvisionRetryDelayMs = Math.max(0, options.projectProvisionRetryDelayMs ?? 6e4);
         this.projectProvisionMaxRetryDelayMs = Math.max(this.projectProvisionRetryDelayMs, options.projectProvisionMaxRetryDelayMs ?? 36e5);
@@ -194144,7 +194213,7 @@ function trustedKnowledgeInvocationId(body2, turn) {
   if (body2.action !== "ask") return void 0;
   const scope = turn?.artifactId ?? turn?.dispatchId;
   if (!scope) return void 0;
-  const fingerprint2 = (0, import_node_crypto27.createHash)("sha256").update(JSON.stringify({
+  const fingerprint2 = (0, import_node_crypto28.createHash)("sha256").update(JSON.stringify({
     action: body2.action,
     message: body2.message?.trim() ?? "",
     queryMode: body2.queryMode === "deep" ? "deep" : "fast",
@@ -194299,11 +194368,11 @@ function knowledgeRoutes(service, options = {}) {
     });
   };
 }
-var import_node_crypto27, KNOWLEDGE_WORKORDER_ACTIONS;
+var import_node_crypto28, KNOWLEDGE_WORKORDER_ACTIONS;
 var init_routes = __esm({
   "../server/src/domains/knowledge/routes.ts"() {
     "use strict";
-    import_node_crypto27 = require("node:crypto");
+    import_node_crypto28 = require("node:crypto");
     init_src5();
     init_router();
     init_governance_service();
@@ -195930,7 +195999,7 @@ async function resolveChatAttachmentDiscoverySource(input) {
     sourceType: input.sourceType,
     sourceId: session.id,
     sourceVersionId: attachment.blobRef,
-    sourceFingerprint: (0, import_node_crypto28.createHash)("sha256").update(bytes2).digest("hex"),
+    sourceFingerprint: (0, import_node_crypto29.createHash)("sha256").update(bytes2).digest("hex"),
     sourceContent: new TextDecoder().decode(bytes2),
     sourceDisplayName: attachment.name,
     ...session.projectId ? { projectId: session.projectId } : {},
@@ -195941,11 +196010,11 @@ async function resolveChatAttachmentDiscoverySource(input) {
     }
   };
 }
-var import_node_crypto28, TEXT_CONTENT_TYPES;
+var import_node_crypto29, TEXT_CONTENT_TYPES;
 var init_chat_attachment_discovery = __esm({
   "../server/src/domains/knowledge/chat-attachment-discovery.ts"() {
     "use strict";
-    import_node_crypto28 = require("node:crypto");
+    import_node_crypto29 = require("node:crypto");
     TEXT_CONTENT_TYPES = /* @__PURE__ */ new Set([
       "application/json",
       "application/xml",
@@ -196122,8 +196191,8 @@ function aad(snapshot) {
 }
 function sealKnowledgeSnapshot(snapshot, key) {
   if (snapshot.content.startsWith(PREFIX)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto29.randomBytes)(12);
-  const cipher = (0, import_node_crypto29.createCipheriv)("aes-256-gcm", keyBytes(key), iv);
+  const iv = (0, import_node_crypto30.randomBytes)(12);
+  const cipher = (0, import_node_crypto30.createCipheriv)("aes-256-gcm", keyBytes(key), iv);
   cipher.setAAD(aad(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return {
@@ -196136,17 +196205,17 @@ function openKnowledgeSnapshot(snapshot, key) {
   const packed = snapshot.content.slice(PREFIX.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto29.createDecipheriv)("aes-256-gcm", keyBytes(key), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto30.createDecipheriv)("aes-256-gcm", keyBytes(key), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   const content3 = Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8");
   return { ...structuredClone(snapshot), content: content3 };
 }
-var import_node_crypto29, PREFIX;
+var import_node_crypto30, PREFIX;
 var init_snapshot_crypto = __esm({
   "../server/src/domains/knowledge/snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto29 = require("node:crypto");
+    import_node_crypto30 = require("node:crypto");
     PREFIX = "oasis-knowledge:v1:";
   }
 });
@@ -196229,11 +196298,11 @@ function uniquenessKeys(kind, record8) {
       return [];
   }
 }
-var import_node_crypto30, import_promises3, import_node_path6, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
+var import_node_crypto31, import_promises3, import_node_path6, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
 var init_governance_store = __esm({
   "../server/src/domains/knowledge/governance-store.ts"() {
     "use strict";
-    import_node_crypto30 = require("node:crypto");
+    import_node_crypto31 = require("node:crypto");
     import_promises3 = require("node:fs/promises");
     import_node_path6 = require("node:path");
     init_snapshot_crypto();
@@ -196451,7 +196520,7 @@ var init_governance_store = __esm({
         return result;
       }
       async persist(shape) {
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto30.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto31.randomUUID)()}.tmp`;
         try {
           await (0, import_promises3.writeFile)(temp, `${JSON.stringify(this.sealSnapshots(shape), null, 2)}
 `, { mode: 384 });
@@ -196487,7 +196556,7 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     if (error2.code !== "ENOENT") throw error2;
   }
   await (0, import_promises4.mkdir)((0, import_node_path7.dirname)(file), { recursive: true });
-  const generated = `oasis-${(0, import_node_crypto31.randomUUID)()}`;
+  const generated = `oasis-${(0, import_node_crypto32.randomUUID)()}`;
   try {
     await (0, import_promises4.writeFile)(file, `${generated}
 `, { encoding: "utf8", mode: 384, flag: "wx" });
@@ -196497,11 +196566,11 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     return readDeploymentId(file);
   }
 }
-var import_node_crypto31, import_promises4, import_node_path7, VALID_DEPLOYMENT_ID;
+var import_node_crypto32, import_promises4, import_node_path7, VALID_DEPLOYMENT_ID;
 var init_deployment_id = __esm({
   "../server/src/domains/knowledge/deployment-id.ts"() {
     "use strict";
-    import_node_crypto31 = require("node:crypto");
+    import_node_crypto32 = require("node:crypto");
     import_promises4 = require("node:fs/promises");
     import_node_path7 = require("node:path");
     VALID_DEPLOYMENT_ID = /^oasis-[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
@@ -197198,7 +197267,7 @@ var init_files = __esm({
 // ../server/src/domains/delegations/service.ts
 function deterministicUuid(seed) {
-  const h = (0, import_node_crypto32.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto33.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -197255,11 +197324,11 @@ async function seedChildRoundRows(chatStore, childSessionId, round, prompt2, now
     createdAt: now
   });
 }
-var import_node_crypto32, DelegationError, TITLE_TASK_CHARS, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, DelegationService;
+var import_node_crypto33, DelegationError, TITLE_TASK_CHARS, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, DelegationService;
 var init_service3 = __esm({
   "../server/src/domains/delegations/service.ts"() {
     "use strict";
-    import_node_crypto32 = require("node:crypto");
+    import_node_crypto33 = require("node:crypto");
     init_src();
     init_parent_conversation();
     init_deletion();
@@ -198461,7 +198530,7 @@ var init_continue_outcome = __esm({
 function trustedDelegationInvocationId(body2, turn) {
   const scope = turn?.artifactId ?? turn?.dispatchId;
   if (!scope) return void 0;
-  const fingerprint2 = (0, import_node_crypto33.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
+  const fingerprint2 = (0, import_node_crypto34.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
   return `dispatch:${scope}:delegation:${fingerprint2}`;
 }
 function callerOf(req, invocationId) {
@@ -198556,11 +198625,11 @@ function delegationRoutes(service) {
     });
   };
 }
-var import_node_crypto33;
+var import_node_crypto34;
 var init_routes2 = __esm({
   "../server/src/domains/delegations/routes.ts"() {
     "use strict";
-    import_node_crypto33 = require("node:crypto");
+    import_node_crypto34 = require("node:crypto");
     init_router();
     init_continue_outcome();
     init_service3();
@@ -200514,7 +200583,7 @@ function createAppJwt(appId, privateKeyPem, nowMs) {
     exp: nowSec + JWT_TTL_SEC,
     iss: appId
   }));
-  const signer = (0, import_node_crypto34.createSign)("RSA-SHA256");
+  const signer = (0, import_node_crypto35.createSign)("RSA-SHA256");
   signer.update(`${header}.${payload2}`);
   signer.end();
   try {
@@ -200677,11 +200746,11 @@ async function exchangeManifestCode(code2, deps = {}) {
     ...typeof body2["client_secret"] === "string" ? { clientSecret: body2["client_secret"] } : {}
   };
 }
-var import_node_crypto34, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
+var import_node_crypto35, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
 var init_app_auth = __esm({
   "../connectors/src/github/app-auth.ts"() {
     "use strict";
-    import_node_crypto34 = require("node:crypto");
+    import_node_crypto35 = require("node:crypto");
     GITHUB_API = "https://api.github.com";
     JWT_TTL_SEC = 9 * 60;
     JWT_IAT_SKEW_SEC = 60;
@@ -201606,11 +201675,11 @@ function extractOutlineKnowledgeCandidateDrafts(events) {
   }
   return [...drafts.values()];
 }
-var import_node_crypto35, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
+var import_node_crypto36, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
 var init_knowledge_api = __esm({
   "../connectors/src/outline/knowledge-api.ts"() {
     "use strict";
-    import_node_crypto35 = require("node:crypto");
+    import_node_crypto36 = require("node:crypto");
     REQUEST_TIMEOUT_MS = 2e4;
     WRITE_ENDPOINTS = /* @__PURE__ */ new Set(["collections.create", "documents.create", "documents.update", "documents.publish"]);
     DEFAULT_WRITE_INTERVAL_MS = process.env["NODE_ENV"] === "test" ? 0 : 250;
@@ -201637,7 +201706,7 @@ var init_knowledge_api = __esm({
         this.baseUrl = canonicalUrl(baseUrl);
         this.lastResponseBaseUrl = this.baseUrl;
         this.token = token;
-        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto35.createHash)("sha256").update(token).digest("hex")}`;
+        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto36.createHash)("sha256").update(token).digest("hex")}`;
         this.writeIntervalMs = Math.max(0, options.writeIntervalMs ?? DEFAULT_WRITE_INTERVAL_MS);
         this.maxRateLimitRetries = Math.max(0, options.maxRateLimitRetries ?? DEFAULT_RATE_LIMIT_RETRIES);
         this.maxRateLimitDelayMs = Math.max(0, options.maxRateLimitDelayMs ?? DEFAULT_MAX_RATE_LIMIT_DELAY_MS);
@@ -203045,15 +203114,15 @@ function classifyOutlineGovernedMigrationDocument(document4) {
   if (path41.startsWith("wiki/sources/")) return { mapping: "formal", metadata: legacyMetadata(document4, "source_note"), reason: "legacy_source_note" };
   return { mapping: "excluded", reason: "legacy_unmapped_path" };
 }
-var import_node_crypto36, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
+var import_node_crypto37, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
 var init_governed_knowledge = __esm({
   "../connectors/src/outline/governed-knowledge.ts"() {
     "use strict";
-    import_node_crypto36 = require("node:crypto");
+    import_node_crypto37 = require("node:crypto");
     init_knowledge_api();
     value = (input) => input && typeof input === "object" && !Array.isArray(input) ? input : null;
     text4 = (input) => typeof input === "string" && input.trim() ? input.trim() : null;
-    hash = (input) => (0, import_node_crypto36.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
+    hash = (input) => (0, import_node_crypto37.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
     REVISION_VISIBILITY_RETRY_DELAYS_MS = [0, 100, 250, 500, 1e3, 2e3];
     governedProvisionRuns = /* @__PURE__ */ new Map();
     PUBLISH_MARKER2 = /\n?<!--\s*oasis-publish:[\s\S]*?-->\n?/giu;
@@ -205488,14 +205557,7 @@ async function startOasisServer(opts) {
     }
     return null;
   };
-  const outputsPartFor = (chatSessionId, companyId) => {
-    const scan2 = opts.sessionOutputsScan;
-    if (!scan2) return void 0;
-    return async () => {
-      const files = await scan2({ chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
-      return files && files.length > 0 ? { type: "outputs", seq: 0, outputs: files } : null;
-    };
-  };
+  const outputsPartFor = (chatSessionId, companyId) => outputsPartProvider(opts.sessionOutputsScan, chatSessionId, companyId);
   async function anchorMessageIdFor(origin, storeFor) {
     if (!origin) return void 0;
     const live = liveChat.messageFor(origin);
@@ -205734,10 +205796,10 @@ async function startOasisServer(opts) {
               ...fp(p2)
             }))
           ] : [];
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID43 } = await import("node:crypto");
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID43(),
               chatSessionId: input.chatSessionId,
               text: input.text,
               createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -205770,11 +205832,11 @@ async function startOasisServer(opts) {
               ...f2?.mtime ? { srcMtime: f2.mtime } : {}
             };
           });
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID43 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID43(),
               chatSessionId: input.chatSessionId,
               text: "",
               createdAt: nowIso,
@@ -207021,7 +207083,7 @@ async function startOasisServer(opts) {
           entry = {
             // 旧 CLI 未带 waiterId 时给它塞一个服务端本地生成的——它绝不可能出现在 leave 上，
             // 也就绝不会误命中 leftWaiterIds、绝不会被别人的 leave 摘掉。行为与旧 CLI 相同。
-            waiterId: clientWaiterId ?? `server:${(0, import_node_crypto37.randomUUID)()}`,
+            waiterId: clientWaiterId ?? `server:${(0, import_node_crypto38.randomUUID)()}`,
             onResolve,
             expiresAt: expiresAt2,
             cleanup: () => clearTimeout(expiryTimer),
@@ -207102,7 +207164,7 @@ async function startOasisServer(opts) {
             const openRoom = async () => {
               let chatSessionId2;
               if (chatStore) {
-                const { randomUUID: randomUUID41 } = await import("node:crypto");
+                const { randomUUID: randomUUID43 } = await import("node:crypto");
                 const known = discussSessions.get(itemKey);
                 const knownSession = known ? await chatStore.getSession(known) : null;
                 if (knownSession && knownSession.workspace === ctx.workspace && knownSession.humanActorId === ctx.ownerId && (!body2.escalationId || knownSession.escalationId === body2.escalationId)) chatSessionId2 = known;
@@ -207111,7 +207173,7 @@ async function startOasisServer(opts) {
                   chatSessionId2 = existing[0]?.id;
                 }
                 if (!chatSessionId2) {
-                  chatSessionId2 = randomUUID41();
+                  chatSessionId2 = randomUUID43();
                   const now = (/* @__PURE__ */ new Date()).toISOString();
                   const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                   const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -207980,14 +208042,14 @@ ${composed}`;
                     runtimeSessionId: session.nativeSessionId ?? session.id
                   }).catch(() => void 0);
                 }
-                const { randomUUID: randomUUID42 } = await import("node:crypto");
+                const { randomUUID: randomUUID44 } = await import("node:crypto");
                 const persistAttachments = effectiveAttachments.map((a) => ({
                   name: a.name,
                   ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                   ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                 }));
                 await chatStore.appendMessage({
-                  id: randomUUID42(),
+                  id: randomUUID44(),
                   sessionId: persistTarget.id,
                   role: "user",
                   content: persistedUserMessage,
@@ -208462,8 +208524,8 @@ ${composed}`;
               }
             }
             const { spawn: spawn10 } = await import("node:child_process");
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const sessionId = body2.sessionId ?? randomUUID41();
+            const { randomUUID: randomUUID43 } = await import("node:crypto");
+            const sessionId = body2.sessionId ?? randomUUID43();
             const args = [
               "-p",
               body2.message,
@@ -208759,8 +208821,8 @@ ${composed}`;
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
               return;
             }
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const state = randomUUID41();
+            const { randomUUID: randomUUID43 } = await import("node:crypto");
+            const state = randomUUID43();
             const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
             const manifest = buildAppManifest({
               employeeSlug: nameSlug,
@@ -209536,12 +209598,12 @@ ${composed}`;
     }
   };
 }
-var http, import_node_crypto37, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
+var http, import_node_crypto38, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
     http = __toESM(require("node:http"), 1);
-    import_node_crypto37 = require("node:crypto");
+    import_node_crypto38 = require("node:crypto");
     init_chat_session();
     init_chat_system_message();
     init_src();
@@ -209700,7 +209762,7 @@ function createNodeTokenStore(file) {
   return {
     issue(nodeId) {
       const table = read();
-      const token = `ont_${(0, import_node_crypto38.randomBytes)(24).toString("base64url")}`;
+      const token = `ont_${(0, import_node_crypto39.randomBytes)(24).toString("base64url")}`;
       table[token] = nodeId;
       write(table);
       return token;
@@ -209742,7 +209804,7 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   return {
     issue(name, ttlMs = defaultTtlMs, companyId) {
       const m2 = prune();
-      const token = `ent_${(0, import_node_crypto38.randomBytes)(24).toString("base64url")}`;
+      const token = `ent_${(0, import_node_crypto39.randomBytes)(24).toString("base64url")}`;
       const expiresAt2 = Date.now() + ttlMs;
       m2.set(token, { name, expiresAt: expiresAt2, ...companyId !== void 0 ? { companyId } : {} });
       write(m2);
@@ -209791,33 +209853,33 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto38, fs18, path19, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
+var import_node_crypto39, fs18, path19, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
-    import_node_crypto38 = require("node:crypto");
+    import_node_crypto39 = require("node:crypto");
     fs18 = __toESM(require("node:fs"), 1);
     path19 = __toESM(require("node:path"), 1);
     SESSION_TOKEN_PREFIX = "oat_v2_";
     b64url2 = (value2) => Buffer.from(value2).toString("base64url");
     fromB64url = (value2) => Buffer.from(value2, "base64url").toString("utf8");
     readOrCreateSecret = (file) => {
-      if (!file) return (0, import_node_crypto38.randomBytes)(32);
+      if (!file) return (0, import_node_crypto39.randomBytes)(32);
       try {
         const raw = fs18.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto38.randomBytes)(32);
+      const secret = (0, import_node_crypto39.randomBytes)(32);
       fs18.mkdirSync(path19.dirname(file), { recursive: true });
       fs18.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
-    sign = (secret, payload2) => (0, import_node_crypto38.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign = (secret, payload2) => (0, import_node_crypto39.createHmac)("sha256", secret).update(payload2).digest("base64url");
     signatureMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto38.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto39.timingSafeEqual)(a, b2);
     };
     isTokenClaims = (value2) => {
       if (value2 === null || typeof value2 !== "object") return false;
@@ -209864,31 +209926,31 @@ function createDataplaneTokenIssuer(opts = {}) {
     }
   };
 }
-var import_node_crypto39, fs19, path20, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims;
+var import_node_crypto40, fs19, path20, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims;
 var init_session_dataplane_token = __esm({
   "../server/src/session-dataplane-token.ts"() {
     "use strict";
-    import_node_crypto39 = require("node:crypto");
+    import_node_crypto40 = require("node:crypto");
     fs19 = __toESM(require("node:fs"), 1);
     path20 = __toESM(require("node:path"), 1);
     init_src();
     PREFIX2 = "osd_";
     b64url3 = (v2) => Buffer.from(v2, "utf8").toString("base64url");
     fromB64url2 = (v2) => Buffer.from(v2, "base64url").toString("utf8");
-    sign2 = (secret, payload2) => (0, import_node_crypto39.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign2 = (secret, payload2) => (0, import_node_crypto40.createHmac)("sha256", secret).update(payload2).digest("base64url");
     sigMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto39.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto40.timingSafeEqual)(a, b2);
     };
     readOrCreateSecret2 = (file) => {
-      if (!file) return (0, import_node_crypto39.randomBytes)(32);
+      if (!file) return (0, import_node_crypto40.randomBytes)(32);
       try {
         const raw = fs19.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto39.randomBytes)(32);
+      const secret = (0, import_node_crypto40.randomBytes)(32);
       fs19.mkdirSync(path20.dirname(file), { recursive: true });
       fs19.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
@@ -212034,11 +212096,11 @@ function onlyHits(pool, q2) {
   if (!q2.requireMatch || q2.keywords.length === 0) return [...pool];
   return pool.filter((r) => memoryMatchScore(r, q2.keywords) > 0);
 }
-var import_node_crypto40, MemoryActorMemoryStore, toIndexEntry;
+var import_node_crypto41, MemoryActorMemoryStore, toIndexEntry;
 var init_memory_actor_memory_store = __esm({
   "../testkit/src/memory-actor-memory-store.ts"() {
     "use strict";
-    import_node_crypto40 = require("node:crypto");
+    import_node_crypto41 = require("node:crypto");
     init_src();
     MemoryActorMemoryStore = class {
       rows = /* @__PURE__ */ new Map();
@@ -212092,7 +212154,7 @@ var init_memory_actor_memory_store = __esm({
       async write(input, now) {
         if (input.memId === void 0) {
           const rec = {
-            memId: `mem:${(0, import_node_crypto40.randomUUID)()}`,
+            memId: `mem:${(0, import_node_crypto41.randomUUID)()}`,
             actorId: input.actorId,
             projectId: input.projectId,
             keywords: [...input.keywords],
@@ -212824,6 +212886,19 @@ var init_stats = __esm({
   }
 });
+// ../server/src/domains/projects/project-id.ts
+function randomProjectId() {
+  return projectIdFromUuid((0, import_node_crypto42.randomUUID)());
+}
+var import_node_crypto42;
+var init_project_id = __esm({
+  "../server/src/domains/projects/project-id.ts"() {
+    "use strict";
+    import_node_crypto42 = require("node:crypto");
+    init_src();
+  }
+});
 // ../server/src/domains/projects/service.ts
 function sanitizeCreatorActorId(raw) {
   const id = raw?.trim();
@@ -212884,7 +212959,7 @@ function creatorKindOf(actorId) {
   if (!actorId) return null;
   return actorId.startsWith("actor:human:") ? "human" : "agent";
 }
-function emitChatFolders(items, chatFiles, resolveName) {
+function emitChatFolders(items, chatFiles, resolveName, taskTitles = /* @__PURE__ */ new Map()) {
   const groups = /* @__PURE__ */ new Map();
   for (const file of chatFiles) {
     const list2 = groups.get(file.chatSessionId) ?? [];
@@ -212904,14 +212979,15 @@ function emitChatFolders(items, chatFiles, resolveName) {
       depth: 0,
       type: "folder",
       size: null,
-      taskId: null,
-      taskTitle: CHAT_FOLDER_TASK_LABEL,
+      taskId: head.taskId ?? null,
+      taskTitle: head.taskId ? taskTitles.get(head.taskId) ?? head.taskId : CHAT_FOLDER_TASK_LABEL,
       creatorKind: creatorKindOf(head.chatOwnerId),
       creatorId: head.chatOwnerId,
       creatorName: resolveName(head.chatOwnerId),
       updatedAt: latest,
       folderKind: "chat",
-      chatSessionId: sessionId
+      chatSessionId: sessionId,
+      ...head.fileIssues?.length ? { fileIssues: head.fileIssues } : {}
     });
     for (const file of group) {
       items.push({
@@ -212925,13 +213001,14 @@ function emitChatFolders(items, chatFiles, resolveName) {
         blobRef: file.blobId,
         contentType: file.contentType ?? null,
         size: file.size,
-        taskId: null,
-        taskTitle: CHAT_FOLDER_TASK_LABEL,
+        taskId: head.taskId ?? null,
+        taskTitle: head.taskId ? taskTitles.get(head.taskId) ?? head.taskId : CHAT_FOLDER_TASK_LABEL,
         creatorKind: creatorKindOf(file.uploadedBy),
         creatorId: file.uploadedBy ?? null,
         creatorName: file.uploadedBy ? resolveName(file.uploadedBy) : null,
         updatedAt: file.uploadedAt,
-        chatSessionId: sessionId
+        chatSessionId: sessionId,
+        ...head.fileIssues?.length ? { fileIssues: head.fileIssues } : {}
       });
     }
   }
@@ -212965,10 +213042,6 @@ function namedError(name, message) {
   err.name = name;
   return err;
 }
-function slugProjectId(name) {
-  const slug6 = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
-  return `proj_${slug6 || Date.now()}`;
-}
 function dirname24(path41) {
   const norm = path41.replace(/^\/+|\/+$/g, "");
   const idx = norm.lastIndexOf("/");
@@ -213165,6 +213238,7 @@ var init_service4 = __esm({
     init_uncategorized_project();
     init_workorders();
     init_stats();
+    init_project_id();
     init_node_state();
     DEFAULT_AGENT_ACTOR = "actor:agent:system";
     CHAT_FOLDER_TASK_LABEL = "\u5BF9\u8BDD";
@@ -213454,9 +213528,14 @@ var init_service4 = __esm({
       async createProject(input) {
         if (!input.name.trim()) throw new Error("project name is required");
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const id = input.id ?? slugProjectId(input.name);
-        const existing = await this.projects.getProject(id);
-        if (existing) return this.withProjectDerivedState(existing);
+        let id;
+        if (input.id !== void 0 && input.id.trim() !== "") {
+          id = input.id;
+          const existing = await this.projects.getProject(id);
+          if (existing) return this.withProjectDerivedState(existing);
+        } else {
+          id = await this.allocateProjectId();
+        }
         const createdById = sanitizeCreatorActorId(input.createdBy);
         const project = {
           id,
@@ -213492,6 +213571,14 @@ var init_service4 = __esm({
         }
         return await this.getProject(id) ?? project;
       }
+      /** 给「没带 id 的新建」挑一个本公司还没用过的随机 id（`randomProjectId`）；连撞几次说明生成器坏了，直接报错。 */
+      async allocateProjectId() {
+        for (let attempt = 0; attempt < 5; attempt++) {
+          const id = randomProjectId();
+          if (!await this.projects.getProject(id)) return id;
+        }
+        throw new Error("project id allocation failed: random ids kept colliding");
+      }
       async getProject(id) {
         if (isUncategorizedProjectId(id)) return this.buildUncategorizedProject();
         const project = await this.projects.getProject(id);
@@ -213983,7 +214070,7 @@ var init_service4 = __esm({
             updatedAt: file.uploadedAt
           });
         }
-        emitChatFolders(items, chatFiles, (actorId) => this.resolveActorName(actorId));
+        emitChatFolders(items, chatFiles, (actorId) => this.resolveActorName(actorId), workorderTitleById);
         fillFolderSizes(items);
         const chatFolderTime = new Map(items.filter((item) => item.folderKind === "chat" && item.chatSessionId).map((item) => [item.chatSessionId, item.updatedAt]));
         items.sort((a, b2) => {
@@ -214834,12 +214921,12 @@ var init_service4 = __esm({
 });
 // ../server/src/dev-store.ts
-var import_node_crypto41, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto43, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
-    import_node_crypto41 = require("node:crypto");
+    import_node_crypto43 = require("node:crypto");
     fs20 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     init_src();
@@ -214893,7 +214980,7 @@ var init_dev_store = __esm({
         return path21.join(this.dir, hash2);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto41.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto43.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash2);
         if (!fs20.existsSync(file)) fs20.writeFileSync(file, bytes2);
         return hash2;
@@ -215321,6 +215408,8 @@ var init_dev_store = __esm({
       pending = /* @__PURE__ */ new Map();
       /** `outputs/` 产出文件的服务端副本表（2026-09-14）：sessionId → 路径 → 副本。 */
       outputCopies = /* @__PURE__ */ new Map();
+      outputFingerprints = /* @__PURE__ */ new Map();
+      fileIssues = /* @__PURE__ */ new Map();
       pendingSeq = 0;
       async claimPendingInsert(m2) {
         const list2 = this.pending.get(m2.chatSessionId) ?? [];
@@ -215509,6 +215598,8 @@ var init_dev_store = __esm({
         this.sessionWorkOrders.delete(id);
         this.sessionWorkOrderKinds.delete(id);
         this.outputCopies.delete(id);
+        this.outputFingerprints.delete(id);
+        this.fileIssues.delete(id);
       }
       async appendMessage(m2) {
         return (await this.appendMessageOnce(m2)).message;
@@ -215637,6 +215728,22 @@ var init_dev_store = __esm({
         }
         return rows.sort((left, right) => left.createdAt.localeCompare(right.createdAt) || left.messageId.localeCompare(right.messageId));
       }
+      async readOutputFingerprints(sessionId) {
+        return this.outputFingerprints.get(sessionId) ?? null;
+      }
+      async writeOutputFingerprints(sessionId, fingerprints) {
+        if (this.sessions.has(sessionId)) this.outputFingerprints.set(sessionId, { ...fingerprints });
+      }
+      async readFileIssues(sessionId) {
+        return (this.fileIssues.get(sessionId) ?? []).map((issue2) => ({ ...issue2 }));
+      }
+      async writeFileIssues(sessionId, phase, issues) {
+        if (!this.sessions.has(sessionId)) return;
+        this.fileIssues.set(sessionId, [...(this.fileIssues.get(sessionId) ?? []).filter((i) => i.phase !== phase), ...issues]);
+      }
+      async listFileSessionsByWorkspaces(workspaces) {
+        return [...this.sessions.values()].filter((s2) => !!s2.workspace && workspaces.includes(s2.workspace) && s2.visibility !== "internal" && !s2.analyzedRunId).map((s2) => ({ ...s2 }));
+      }
       async readOutputCopies(sessionId) {
         const hit = this.outputCopies.get(sessionId);
         return hit ? { ...hit } : null;
@@ -215697,6 +215804,9 @@ var init_dev_store = __esm({
         const store = new _FileChatSessionStore(file);
         if (fs20.existsSync(file)) {
           const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+          for (const [sid, copies] of Object.entries(snap.outputCopies ?? {})) store.outputCopies.set(sid, copies);
+          for (const [sid, fps] of Object.entries(snap.outputFingerprints ?? {})) store.outputFingerprints.set(sid, fps);
+          for (const [sid, issues] of Object.entries(snap.fileIssues ?? {})) store.fileIssues.set(sid, issues);
           for (const s2 of snap.sessions ?? []) store.sessions.set(s2.id, s2);
           for (const [sid, list2] of Object.entries(snap.messages ?? {})) store.messages.set(sid, list2);
           for (const [sid, ids2] of Object.entries(snap.sessionWorkOrders ?? {})) store.sessionWorkOrders.set(sid, new Set(ids2));
@@ -215708,6 +215818,18 @@ var init_dev_store = __esm({
         }
         return store;
       }
+      async mergeOutputCopies(id, copies) {
+        await super.mergeOutputCopies(id, copies);
+        this.save();
+      }
+      async writeOutputFingerprints(id, fps) {
+        await super.writeOutputFingerprints(id, fps);
+        this.save();
+      }
+      async writeFileIssues(id, phase, issues) {
+        await super.writeFileIssues(id, phase, issues);
+        this.save();
+      }
       async createSession(s2) {
         await super.createSession(s2);
         this.save();
@@ -215773,6 +215895,9 @@ var init_dev_store = __esm({
       }
       save() {
         const snap = {
+          outputCopies: Object.fromEntries(this.outputCopies),
+          outputFingerprints: Object.fromEntries(this.outputFingerprints),
+          fileIssues: Object.fromEntries(this.fileIssues),
           sessions: [...this.sessions.values()],
           messages: Object.fromEntries(this.messages),
           sessionWorkOrders: Object.fromEntries([...this.sessionWorkOrders].map(([k2, v2]) => [k2, [...v2]])),
@@ -216093,7 +216218,7 @@ var init_company_engine_router = __esm({
 // ../server/src/skill-market-client.ts
 function digestOf2(bytes2) {
-  return `sha256:${(0, import_node_crypto42.createHash)("sha256").update(bytes2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto44.createHash)("sha256").update(bytes2).digest("hex")}`;
 }
 function createSkillMarketClientFromEnv(env = process.env) {
   const base = env["SKILL_MARKET_BASE_URL"];
@@ -216104,11 +216229,11 @@ function createSkillMarketClientFromEnv(env = process.env) {
 function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var import_node_crypto42, DisabledSkillMarketClient, HttpSkillMarketClient;
+var import_node_crypto44, DisabledSkillMarketClient, HttpSkillMarketClient;
 var init_skill_market_client = __esm({
   "../server/src/skill-market-client.ts"() {
     "use strict";
-    import_node_crypto42 = require("node:crypto");
+    import_node_crypto44 = require("node:crypto");
     init_src();
     DisabledSkillMarketClient = class {
       async listSkills(_input) {
@@ -216592,18 +216717,23 @@ async function scanSessionOutputs(bridge, loc, now = Date.now) {
     if (!walked) return null;
     if (walked.ok) {
       const files2 = walked.entries.filter((entry) => entry.type === "file").map((entry) => ({ path: entry.path, size: entry.size, mtime: entry.mtime }));
-      return { files: files2, via: "walk", tree: walked.entries };
+      return { files: files2, via: "walk", tree: walked.entries, ...walked.truncated ? { incomplete: true } : {} };
     }
     if (walked.code === "NOT_FOUND") return { files: [], via: "walk", tree: [] };
     if (walked.code !== "UNSUPPORTED") return null;
   }
+  let incomplete = false;
   const files = await scanLayered(
     (path41) => bridge.list(loc.nodeId, { ...locator, path: path41 }),
-    now
+    now,
+    () => {
+      incomplete = true;
+    }
   );
-  return files === null ? null : { files, via: "layered" };
+  return files === null ? null : { files, via: "layered", ...incomplete ? { incomplete: true } : {} };
 }
-async function scanLayered(list2, now) {
+async function scanLayered(list2, now, markIncomplete = () => {
+}) {
   const deadline = now() + BUDGET_MS;
   const out = [];
   let listCalls = 0;
@@ -216620,23 +216750,41 @@ async function scanLayered(list2, now) {
   for (let depth = 0; depth <= MAX_DEPTH; depth += 1) {
     const nextDirs = [];
     for (const { path: dir, outcome } of level) {
-      if (!outcome.ok) continue;
+      if (!outcome.ok) {
+        markIncomplete();
+        continue;
+      }
+      if (outcome.truncated) markIncomplete();
       for (const entry of outcome.entries) {
         if (entry.type === "dir") {
           nextDirs.push(joinRel(dir, entry.name));
           continue;
         }
-        if (out.length >= MAX_ENTRIES) continue;
+        if (out.length >= MAX_ENTRIES) {
+          markIncomplete();
+          continue;
+        }
         out.push({ path: joinRel(dir, entry.name), size: entry.size, mtime: entry.mtime });
       }
     }
-    if (nextDirs.length === 0 || depth === MAX_DEPTH) break;
-    if (out.length >= MAX_ENTRIES || listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+    if (nextDirs.length === 0) break;
+    if (depth === MAX_DEPTH) {
+      markIncomplete();
+      break;
+    }
+    if (out.length >= MAX_ENTRIES || listCalls >= MAX_LIST_CALLS || now() >= deadline) {
+      markIncomplete();
+      break;
+    }
     const batch = [];
     for (const dir of nextDirs) {
-      if (listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+      if (listCalls >= MAX_LIST_CALLS || now() >= deadline) {
+        markIncomplete();
+        break;
+      }
       const outcome = await listDir(dir).catch(() => null);
       if (outcome) batch.push({ path: dir, outcome });
+      else markIncomplete();
     }
     level = batch;
   }
@@ -216667,7 +216815,7 @@ async function settleSessionOutputs(deps) {
     diff.fingerprints[WALK_TABLE_MARK] = { size: 0, mtime: "" };
   }
   await deps.writeFingerprints(deps.sessionId, diff.fingerprints).catch(() => void 0);
-  return diff;
+  return { ...diff, ...scan2.incomplete || scan2.files.some((f2) => f2.size == null || !f2.mtime) ? { scanIncomplete: true } : {} };
 }
 var WALK_MAX_ENTRIES, MAX_DEPTH, MAX_ENTRIES, MAX_LIST_CALLS, BUDGET_MS, WALK_TABLE_MARK;
 var init_outputs_scan = __esm({
@@ -216722,11 +216870,17 @@ async function copySessionOutputs(deps) {
   try {
     existing = await deps.readCopies(deps.sessionId);
   } catch {
+    result.skipped = Object.keys(deps.fingerprints).filter(isOutputPath).map((path41) => ({ path: path41, code: "STORE_FAILED" }));
     return result;
   }
+  const deadline = Date.now() + 2e4;
   const plan = planOutputCopies(deps.fingerprints, existing, limits);
   result.skipped.push(...plan.skipped);
   for (const file of plan.toCopy) {
+    if (Date.now() >= deadline) {
+      result.skipped.push({ path: file.path, code: "BUDGET" });
+      continue;
+    }
     let read;
     try {
       read = await deps.bridge.read(
@@ -216743,6 +216897,14 @@ async function copySessionOutputs(deps) {
       continue;
     }
     const bytes2 = Buffer.from(read.contentBase64, "base64");
+    if (bytes2.length > limits.maxFileBytes) {
+      result.skipped.push({ path: file.path, code: "TOO_LARGE" });
+      continue;
+    }
+    if (bytes2.length !== file.size || read.mtime && read.mtime !== file.mtime) {
+      result.skipped.push({ path: file.path, code: "FILE_CHANGED" });
+      continue;
+    }
     let blobRef;
     try {
       blobRef = await deps.putBlob(new Uint8Array(bytes2));
@@ -216772,7 +216934,7 @@ async function copySessionOutputs(deps) {
   return result;
 }
 function createOutputCopyScheduler(deps) {
-  const inFlight = /* @__PURE__ */ new Set();
+  const inFlight = /* @__PURE__ */ new Map();
   return {
     schedule(args) {
       const { store, chatSessionId, companyId } = args;
@@ -216780,9 +216942,10 @@ function createOutputCopyScheduler(deps) {
       const mergeCopies = store.mergeOutputCopies?.bind(store);
       if (!readCopies || !mergeCopies) return Promise.resolve(null);
       const key = `${companyId ?? ""}|${chatSessionId}`;
-      if (inFlight.has(key)) return Promise.resolve(null);
-      inFlight.add(key);
-      return (async () => {
+      const prior = inFlight.get(key);
+      let pending;
+      pending = (async () => {
+        await prior;
         try {
           const session = await store.getSession(chatSessionId);
           if (!session || session.visibility === "internal" || session.analyzedRunId) return null;
@@ -216797,6 +216960,21 @@ function createOutputCopyScheduler(deps) {
             putBlob: deps.putBlob,
             ...deps.limits ? { limits: deps.limits } : {}
           });
+          const messages = {
+            TOO_LARGE: "\u8D85\u8FC7\u5355\u6587\u4EF6\u4FDD\u5B58\u4E0A\u9650 50 MiB",
+            BUDGET: "\u672C\u8F6E\u4FDD\u5B58\u989D\u5EA6\u5DF2\u7528\u5B8C\uFF0C\u4E0B\u4E00\u8F6E\u91CD\u8BD5",
+            READ_FAILED: "\u539F\u8282\u70B9\u6587\u4EF6\u8BFB\u53D6\u5931\u8D25",
+            STORE_FAILED: "\u670D\u52A1\u7AEF\u6587\u4EF6\u4FDD\u5B58\u5931\u8D25",
+            FILE_CHANGED: "\u8BFB\u53D6\u671F\u95F4\u6587\u4EF6\u53D1\u751F\u53D8\u5316\uFF0C\u8BF7\u91CD\u8BD5"
+          };
+          const previousIssues = await store.readFileIssues?.(chatSessionId) ?? [];
+          const settled = new Set(Object.keys(args.fingerprints));
+          const issues = [
+            ...previousIssues.filter((i) => i.phase === "save" && i.path !== "outputs/" && !settled.has(i.path)),
+            ...result.skipped.map((s2) => ({ phase: "save", path: s2.path, code: s2.code, message: messages[s2.code] }))
+          ];
+          if (args.scanIncomplete) issues.push({ phase: "save", path: "outputs/", code: "SCAN_INCOMPLETE", message: "\u4EA7\u51FA\u76EE\u5F55\u672A\u80FD\u5B8C\u6574\u626B\u63CF\uFF0C\u90E8\u5206\u6587\u4EF6\u53EF\u80FD\u5C1A\u672A\u4FDD\u5B58" });
+          await store.writeFileIssues?.(chatSessionId, "save", issues);
           if (result.skipped.length > 0) {
             const head = result.skipped.slice(0, 5).map((s2) => `${s2.path}:${s2.code}`).join(", ");
             deps.log?.(`[outputs-copy] ${chatSessionId}: \u590D\u5236 ${result.copied.length} \u4E2A\uFF0C\u8DF3\u8FC7 ${result.skipped.length} \u4E2A\uFF08${head}${result.skipped.length > 5 ? " \u2026" : ""}\uFF09`);
@@ -216804,11 +216982,14 @@ function createOutputCopyScheduler(deps) {
           return result;
         } catch (err) {
           deps.log?.(`[outputs-copy] ${chatSessionId}: ${err instanceof Error ? err.message : String(err)}`);
+          await store.writeFileIssues?.(chatSessionId, "save", [{ phase: "save", path: "outputs/", code: "STORE_FAILED", message: "\u4EA7\u51FA\u4FDD\u5B58\u672A\u5B8C\u6210\uFF0C\u8BF7\u91CD\u8BD5" }]).catch(() => void 0);
           return null;
         } finally {
-          inFlight.delete(key);
+          if (inFlight.get(key) === pending) inFlight.delete(key);
         }
       })();
+      inFlight.set(key, pending);
+      return pending;
     }
   };
 }
@@ -216818,9 +216999,9 @@ var init_outputs_copy = __esm({
     "use strict";
     init_src();
     OUTPUT_COPY_LIMITS = {
-      maxFileBytes: 2 * 1024 * 1024,
+      maxFileBytes: 50 * 1024 * 1024,
       maxFiles: 50,
-      maxTotalBytes: 50 * 1024 * 1024
+      maxTotalBytes: 100 * 1024 * 1024
     };
   }
 });
@@ -217030,11 +217211,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto43, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto45, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217161,7 +217342,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto43.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto45.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -217309,11 +217490,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto44, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto46, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217338,7 +217519,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto44.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto46.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -218667,6 +218848,373 @@ var init_recovery_plan = __esm({
   }
 });
+// ../server/src/domains/chat-sessions/files-view.ts
+function reasonFromWorkdirCode(code2) {
+  switch (code2) {
+    case "NODE_OFFLINE":
+      return "NODE_OFFLINE";
+    case "TIMEOUT":
+      return "TIMEOUT";
+    default:
+      return "ERROR";
+  }
+}
+function joinRel2(dir, name) {
+  return dir ? `${dir}/${name}` : name;
+}
+function workdirFileItem(rel, name, size, mtime) {
+  return {
+    id: `workdir:${rel}`,
+    name,
+    kind: "file",
+    // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
+    // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
+    content_type: null,
+    size,
+    updated_at: mtime,
+    source: "workdir",
+    blob_ref: null,
+    path: rel,
+    message_id: null,
+    // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
+    // 这里是**按能力不渲染**的判据，不是置灰假钮。
+    editable: false
+  };
+}
+async function collectWorkdirFiles(bridge, loc, now = Date.now) {
+  const items = [];
+  if (typeof bridge.walk === "function") {
+    const walked = await bridge.walk(
+      loc.nodeId,
+      { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: "" },
+      WORKDIR_TREE_MAX_ENTRIES
+    );
+    if (walked.ok) {
+      let truncated2 = walked.truncated === true;
+      for (const entry of walked.entries) {
+        if (entry.type !== "file") continue;
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated2 = true;
+          break;
+        }
+        const slash = entry.path.lastIndexOf("/");
+        items.push(workdirFileItem(entry.path, entry.path.slice(slash + 1), entry.size, entry.mtime));
+      }
+      return { ok: true, items, truncated: truncated2 };
+    }
+    if (walked.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    if (walked.code !== "UNSUPPORTED") return { ok: false, reason: reasonFromWorkdirCode(walked.code) };
+  }
+  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
+  let listCalls = 0;
+  let truncated = false;
+  const listDir = (path41) => {
+    listCalls += 1;
+    return bridge.list(loc.nodeId, {
+      workdirKey: loc.workdirKey,
+      runtimeKind: loc.runtimeKind,
+      rtId: loc.rtId,
+      path: path41
+    });
+  };
+  const root = await listDir("");
+  if (!root.ok) {
+    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
+  }
+  let level = [{ path: "", outcome: root }];
+  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
+    const nextDirs = [];
+    for (const { path: dir, outcome } of level) {
+      if (!outcome.ok) {
+        truncated = true;
+        continue;
+      }
+      if (outcome.truncated) truncated = true;
+      for (const entry of outcome.entries) {
+        if (entry.type === "dir") {
+          nextDirs.push(joinRel2(dir, entry.name));
+          continue;
+        }
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated = true;
+          continue;
+        }
+        items.push(workdirFileItem(joinRel2(dir, entry.name), entry.name, entry.size, entry.mtime));
+      }
+    }
+    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
+      if (nextDirs.length > 0) truncated = true;
+      break;
+    }
+    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
+    if (budget <= 0 || now() >= deadline) {
+      truncated = true;
+      break;
+    }
+    const take = nextDirs.slice(0, budget);
+    if (take.length < nextDirs.length) truncated = true;
+    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
+    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
+  }
+  return { ok: true, items, truncated };
+}
+async function collectMessageFiles(messages, blobs) {
+  const rows = [];
+  for (const message of messages) {
+    if (!Array.isArray(message.attachments)) continue;
+    message.attachments.forEach((attachment, index2) => {
+      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
+      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
+      rows.push({
+        item: {
+          id: `msg:${message.id}:${index2}`,
+          name: attachment.name,
+          kind: "file",
+          updated_at: attachment.updatedAt ?? message.createdAt,
+          source: "message",
+          blob_ref: blobRef,
+          path: null,
+          message_id: message.id,
+          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
+          // contain `name`）——没有可写回的载体，一律不给编辑入口。
+          editable: blobRef !== null && isEditableFileName(attachment.name)
+        },
+        blobRef,
+        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
+      });
+    });
+  }
+  const metaCache = /* @__PURE__ */ new Map();
+  const metaOf = (ref2) => {
+    if (!blobs) return Promise.resolve(null);
+    let hit = metaCache.get(ref2);
+    if (!hit) {
+      hit = blobs.meta(ref2).catch(() => null);
+      metaCache.set(ref2, hit);
+    }
+    return hit;
+  };
+  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
+    const meta = blobRef ? await metaOf(blobRef) : null;
+    return {
+      ...item,
+      content_type: declaredType ?? meta?.contentType ?? null,
+      size: meta?.size ?? null
+    };
+  }));
+}
+function mergeChatSessionFiles(messageItems, workdirItems, materializedCopies = /* @__PURE__ */ new Set()) {
+  const out = [];
+  const seenMessageKeys = /* @__PURE__ */ new Set();
+  for (const item of [...messageItems].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at))) {
+    const key = `${item.name}\0${item.blob_ref ?? ""}`;
+    if (seenMessageKeys.has(key)) continue;
+    seenMessageKeys.add(key);
+    out.push(item);
+  }
+  const seenWorkdirPaths = /* @__PURE__ */ new Set();
+  for (const item of workdirItems) {
+    if (item.path && materializedCopies.has(item.path)) continue;
+    if (seenWorkdirPaths.has(item.id)) continue;
+    seenWorkdirPaths.add(item.id);
+    out.push(item);
+  }
+  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
+  return out;
+}
+async function findMaterializedAttachmentCopies(messageItems, workdirItems, read) {
+  const copies = /* @__PURE__ */ new Set();
+  const attachments = messageItems.filter((item) => item.blob_ref && /^[a-f0-9]{64}$/.test(item.blob_ref));
+  let budget = CHAT_ATTACHMENT_MAX_BYTES;
+  const deadline = Date.now() + WORKDIR_WALK_BUDGET_MS;
+  let reads = 0;
+  for (const file of workdirItems) {
+    const rootFile = file.path === file.name;
+    const inputFile = file.path?.startsWith("inputs/attachments/") && !file.path.slice("inputs/attachments/".length).includes("/");
+    if (!file.path || !rootFile && !inputFile) continue;
+    const candidates = attachments.filter((attachment) => {
+      const safe = safeAttachmentName(attachment.name);
+      const numbered = file.name.endsWith(`-${safe}`) && /^\d+$/.test(file.name.slice(0, -(safe.length + 1)));
+      return (rootFile ? file.name === attachment.name : file.name === safe || numbered) && attachment.size !== null && attachment.size === file.size;
+    });
+    if (Date.now() >= deadline) break;
+    if (!candidates.length || file.size === null || file.size > budget || reads >= 10) continue;
+    reads += 1;
+    budget -= file.size;
+    let timer;
+    try {
+      const result = await Promise.race([
+        read(file.path, file.size),
+        new Promise((resolve10) => {
+          timer = setTimeout(() => resolve10(null), Math.max(0, deadline - Date.now()));
+        })
+      ]);
+      if (!result?.ok) continue;
+      const bytes2 = Buffer.from(result.contentBase64, "base64");
+      if (bytes2.length !== file.size) continue;
+      const hash2 = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
+      if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
+    } catch {
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
+  return copies;
+}
+var import_node_crypto47, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
+var init_files_view = __esm({
+  "../server/src/domains/chat-sessions/files-view.ts"() {
+    "use strict";
+    import_node_crypto47 = require("node:crypto");
+    init_chat_attachment_files();
+    init_src();
+    WORKDIR_WALK_MAX_DEPTH = 3;
+    WORKDIR_WALK_MAX_ENTRIES = 200;
+    WORKDIR_WALK_MAX_LIST_CALLS = 20;
+    WORKDIR_WALK_BUDGET_MS = 1e4;
+    WORKDIR_TREE_MAX_ENTRIES = 2e3;
+  }
+});
+// ../server/src/domains/chat-sessions/persistent-files.ts
+function outputDisplayName(path41) {
+  return path41.startsWith("outputs/") ? path41.slice("outputs/".length) : path41;
+}
+async function collectPersistentSessionFiles(messages, copies, blobs, includeOutputAliases = false) {
+  const attachments = mergeChatSessionFiles(await collectMessageFiles(messages, blobs), []);
+  const outputs = Object.values(copies ?? {}).filter((copy) => Boolean(copy.blobRef)).filter((copy) => includeOutputAliases || !attachments.some((a) => a.name === outputDisplayName(copy.path) && a.blob_ref === copy.blobRef)).map((copy) => ({
+    // 保留历史产出卡的 id；引用和读取来源升级为服务端副本。
+    id: `workdir:${copy.path}`,
+    name: outputDisplayName(copy.path),
+    kind: "file",
+    content_type: copy.contentType,
+    size: copy.size,
+    updated_at: Number.isNaN(Date.parse(copy.mtime)) ? copy.copiedAt : new Date(copy.mtime).toISOString(),
+    source: "output",
+    blob_ref: copy.blobRef,
+    path: copy.path,
+    message_id: null,
+    editable: false
+  }));
+  return [...attachments, ...outputs].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.id.localeCompare(b2.id));
+}
+async function readPersistentSessionFiles(store, sessionId, blobs, includeOutputAliases = false) {
+  const [messages, copies] = await Promise.all([
+    store.listSessionAttachmentMessages ? store.listSessionAttachmentMessages(sessionId) : store.listMessages(sessionId),
+    store.readOutputCopies?.(sessionId) ?? Promise.resolve(null)
+  ]);
+  return collectPersistentSessionFiles(messages, copies, blobs, includeOutputAliases);
+}
+var init_persistent_files = __esm({
+  "../server/src/domains/chat-sessions/persistent-files.ts"() {
+    "use strict";
+    init_files_view();
+  }
+});
+// ../server/src/domains/chat-sessions/file-restore.ts
+async function recordSessionFileRestoreExit(store, sessionId, info) {
+  if (info.fileRestoreError) await store.writeFileIssues?.(sessionId, "restore", [{
+    phase: "restore",
+    path: info.fileRestoreError.path,
+    code: "MATERIALIZE_FAILED",
+    message: info.fileRestoreError.message
+  }]);
+}
+function attachmentRestorePath(name, ref2) {
+  const key = (0, import_node_crypto48.createHash)("sha256").update(`${name}\0${ref2}`).digest("hex").slice(0, 12);
+  return `inputs/history/${key}/${safeAttachmentName(name)}`;
+}
+async function prepareSessionFileRestore(input) {
+  const issues = [];
+  const restoreFiles = {};
+  let items;
+  try {
+    items = await readPersistentSessionFiles(input.store, input.sessionId, void 0, true);
+  } catch {
+    const issue2 = { phase: "restore", path: "", code: "INDEX_UNAVAILABLE", message: "\u6587\u4EF6\u6E05\u5355\u8BFB\u53D6\u5931\u8D25\uFF0C\u8BF7\u91CD\u8BD5" };
+    await input.store.writeFileIssues?.(input.sessionId, "restore", [issue2]);
+    throw new ApiError(503, "CHAT_FILE_RESTORE_FAILED", issue2.message);
+  }
+  const saveIssues = (await input.store.readFileIssues?.(input.sessionId) ?? []).filter((i) => i.phase === "save");
+  const fingerprints = await input.store.readOutputFingerprints?.(input.sessionId) ?? {};
+  const copies = await input.store.readOutputCopies?.(input.sessionId) ?? {};
+  const outputPaths = new Set(Object.keys(fingerprints).filter((p2) => p2.startsWith("outputs/")));
+  for (const message of await input.store.listMessages(input.sessionId)) {
+    if (!Array.isArray(message.parts)) continue;
+    for (const part of message.parts) {
+      if (!part || typeof part !== "object" || Array.isArray(part) || part.type !== "outputs" || !Array.isArray(part.outputs)) continue;
+      for (const file of part.outputs) if (file && typeof file === "object" && !Array.isArray(file) && typeof file.path === "string" && file.path.startsWith("outputs/")) outputPaths.add(file.path);
+    }
+  }
+  for (const path41 of outputPaths) {
+    const copy = copies[path41], fp = fingerprints[path41];
+    if ((!copy || fp && (copy.size !== fp.size || copy.mtime !== fp.mtime)) && !saveIssues.some((i) => i.path === path41)) {
+      saveIssues.push({ phase: "save", path: path41, code: "UNSAVED_OUTPUT", message: "\u5386\u53F2\u4EA7\u51FA\u5C1A\u65E0\u6700\u65B0\u6301\u4E45\u526F\u672C\uFF0C\u8BF7\u5728\u539F\u8282\u70B9\u5B8C\u6210\u4FDD\u5B58\u540E\u518D\u5207\u6362" });
+    }
+  }
+  if (input.fresh) issues.push(...saveIssues.map((i) => ({ ...i, phase: "restore", message: `\u539F\u6587\u4EF6\u5C1A\u672A\u4FDD\u5B58\uFF1A${i.message}` })));
+  const lines = ["# \u4F1A\u8BDD\u6587\u4EF6", "", "\u4EE5\u4E0B\u6587\u4EF6\u6765\u81EA\u672C\u4F1A\u8BDD\u7684\u6301\u4E45\u8BB0\u5F55\u3002\u5386\u53F2\u8F93\u5165\u6309\u7248\u672C\u4FDD\u7559\uFF1Boutputs \u662F\u6700\u8FD1\u4FDD\u5B58\u7684\u4EA7\u51FA\u3002", ""];
+  let total = 0;
+  const seen = /* @__PURE__ */ new Set();
+  const add = async (name, ref2, path41, replace2) => {
+    if (seen.has(path41)) return;
+    seen.add(path41);
+    if (!ref2) {
+      issues.push({ phase: "restore", path: path41, code: "MISSING_REFERENCE", message: `${name} \u6CA1\u6709\u53EF\u6062\u590D\u7684\u539F\u4EF6\uFF0C\u8BF7\u91CD\u65B0\u4E0A\u4F20` });
+      return;
+    }
+    try {
+      if (Object.keys(restoreFiles).length >= RESTORE_MAX_FILES) throw new Error("\u8D85\u8FC7\u5355\u8F6E\u6062\u590D\u6587\u4EF6\u6570\u91CF\u4E0A\u9650");
+      const bytes2 = await input.readBlob(ref2);
+      if (total + bytes2.byteLength > RESTORE_MAX_BYTES) throw new Error("\u8D85\u8FC7\u5355\u8F6E\u6062\u590D\u603B\u91CF 100 MiB");
+      const hash2 = (0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex");
+      if (hash2 !== ref2.replace(/^blob:/, "")) throw new Error("\u539F\u4EF6\u5185\u5BB9\u6821\u9A8C\u5931\u8D25");
+      total += bytes2.byteLength;
+      restoreFiles[path41] = { contentBase64: Buffer.from(bytes2).toString("base64"), sha256: hash2, overwrite: replace2 };
+      lines.push(`- ${JSON.stringify(name)} \u2192 ${JSON.stringify(path41)}`);
+    } catch (error2) {
+      issues.push({ phase: "restore", path: path41, code: "FILE_UNAVAILABLE", message: `${name}\uFF1A${error2 instanceof Error ? error2.message : "\u8BFB\u53D6\u5931\u8D25"}` });
+    }
+  };
+  for (const item of items) {
+    const path41 = item.source === "output" ? item.path : attachmentRestorePath(item.name, item.blob_ref ?? item.id);
+    await add(item.name, item.blob_ref, path41, item.source === "message" || input.fresh);
+    if (item.source === "message") {
+      await add(item.name, item.blob_ref, `inputs/attachments/${safeAttachmentName(item.name)}`, true);
+    }
+  }
+  if (!input.fresh) for (const issue2 of saveIssues) {
+    if (!issue2.path.startsWith("outputs/")) continue;
+    restoreFiles[issue2.path] = { contentBase64: "", sha256: (0, import_node_crypto48.createHash)("sha256").update("").digest("hex"), overwrite: false, requireExisting: true };
+    lines.push(`- ${JSON.stringify(issue2.path)} \u5C1A\u672A\u4FDD\u5B58\uFF0C\u5FC5\u987B\u4FDD\u7559\u672C\u673A\u539F\u6587\u4EF6\uFF1A${issue2.message}`);
+  }
+  for (const attachment of input.attachments ?? []) {
+    if (attachment.blobRef && !attachment.path) {
+      await add(attachment.name, attachment.blobRef, attachmentRestorePath(attachment.name, attachment.blobRef), false);
+    }
+  }
+  if (input.supportsFileRestore === false && Object.keys(restoreFiles).length) {
+    issues.push({ phase: "restore", path: "", code: "NODE_UPGRADE_REQUIRED", message: "\u5F53\u524D\u8282\u70B9\u5C1A\u4E0D\u652F\u6301\u6587\u4EF6\u6062\u590D\uFF0C\u8BF7\u5347\u7EA7\u8282\u70B9\u540E\u91CD\u8BD5" });
+  }
+  await input.store.writeFileIssues?.(input.sessionId, "restore", issues);
+  if (issues.length) throw new ApiError(409, "CHAT_FILE_RESTORE_FAILED", `\u6587\u4EF6\u6062\u590D\u672A\u5B8C\u6210\uFF1A${issues.map((i) => i.message).join("\uFF1B")}`);
+  return { restoreFiles, index: lines.join("\n") };
+}
+var import_node_crypto48, RESTORE_MAX_BYTES, RESTORE_MAX_FILES;
+var init_file_restore = __esm({
+  "../server/src/domains/chat-sessions/file-restore.ts"() {
+    "use strict";
+    import_node_crypto48 = require("node:crypto");
+    init_chat_attachment_files();
+    init_router();
+    init_persistent_files();
+    RESTORE_MAX_BYTES = 100 * 1024 * 1024;
+    RESTORE_MAX_FILES = 500;
+  }
+});
 // ../server/src/domains/trace/resilient-appender.ts
 var ResilientTraceAppender;
 var init_resilient_appender = __esm({
@@ -219589,7 +220137,7 @@ function wireRecoveredChatTurn(deps) {
       const segText = itemLedger.projectContent();
       const segParts = collectedParts();
       const closingId = currentMsgId;
-      const nextId = (0, import_node_crypto45.randomUUID)();
+      const nextId = (0, import_node_crypto49.randomUUID)();
       currentMsgId = nextId;
       itemLedger.beginSegment();
       live.setAssistantMessageId(nextId);
@@ -219603,7 +220151,7 @@ function wireRecoveredChatTurn(deps) {
           ...segParts.length ? { parts: segParts } : {}
         }).catch(() => void 0);
         await store.appendMessage({
-          id: (0, import_node_crypto45.randomUUID)(),
+          id: (0, import_node_crypto49.randomUUID)(),
           sessionId: plan.chatSessionId,
           role: "user",
           content: text5,
@@ -219635,6 +220183,7 @@ function wireRecoveredChatTurn(deps) {
   const done = (async () => {
     const info = await new Promise((resolve10) => handle.onExit(resolve10));
     clearInterval(ckptTimer);
+    await recordSessionFileRestoreExit(chatStore, plan.chatSessionId, info);
     const failed = exitFailed(info);
     if (failed) {
       const errText2 = exitErrorText(info);
@@ -219664,11 +220213,12 @@ function wireRecoveredChatTurn(deps) {
       log3
     );
     for (const item of closedItems) liveChat.publishItemStatus(plan.chatSessionId, item);
+    const finalParts = await appendOutputsPart(parts, info.fileRestoreError ? void 0 : deps.outputsPart);
     await chatStore.updateMessage(currentMsgId, {
       content: itemLedger.projectContent(),
       status: failed ? "error" : "done",
       completedAt: finishedAt,
-      ...parts.length ? { parts } : {}
+      ...finalParts.length ? { parts: finalParts } : {}
     }).catch(() => void 0);
     const nextRuntimeSessionId = info.runtimeSessionId ?? plan.runtimeSessionId;
     await chatStore.updateSession(plan.chatSessionId, {
@@ -219742,10 +220292,11 @@ async function sweepDanglingChatTurns(deps) {
         text: "\u8FD9\u4E00\u8F6E\u5728\u6267\u884C\u4E2D\u88AB\u6253\u65AD\uFF08serve \u91CD\u542F\u6216\u8282\u70B9\u9000\u51FA\uFF09\uFF0C\u672A\u80FD\u5B8C\u6210\u2014\u2014\u4EE5\u4E0A\u4E3A\u4E2D\u65AD\u524D\u5DF2\u751F\u6210\u7684\u5185\u5BB9\u3002"
       });
     }
+    const finalParts = await appendOutputsPart(parts, deps.outputsPartFor?.(row.sessionId));
     await deps.updateMessage(row.id, {
       status,
       completedAt,
-      ...parts.length ? { parts } : {}
+      ...finalParts.length ? { parts: finalParts } : {}
     });
     closed.push(row.id);
     deps.log?.(`[chat-sweep] \u884C ${row.id}\uFF08\u4F1A\u8BDD ${row.sessionId}\uFF09\u6536\u655B\u4E3A ${status}\uFF08${reason}\uFF09`);
@@ -219767,6 +220318,7 @@ async function reconcileChatExitFrame(deps) {
     if (meta?.dispatchId !== deps.dispatchId) continue;
     if (deps.ownedRunId?.(row.sessionId) === row.runId) return false;
     const turn = await deps.getTurnForRun?.(row.sessionId, run.id);
+    const outputsPart = deps.info.fileRestoreError ? void 0 : deps.outputsPartFor?.(row.sessionId);
     if (turn && turn.status !== "reserved" && turn.status !== "running") {
       await reconcileSettledChatTurn({
         plan: {
@@ -219785,11 +220337,13 @@ async function reconcileChatExitFrame(deps) {
         chatStore: deps.chatStore,
         trace: deps.trace,
         ...deps.items ? { items: deps.items } : {},
+        ...outputsPart ? { outputsPart } : {},
         ...deps.log ? { log: deps.log } : {}
       });
       return true;
     }
     const { info } = deps;
+    await recordSessionFileRestoreExit(deps.chatStore, row.sessionId, info);
     const failed = exitFailed(info);
     const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     const stash = deps.drainStash(deps.dispatchId);
@@ -219837,11 +220391,12 @@ async function reconcileChatExitFrame(deps) {
       failed ? "failed" : "completed",
       deps.log ?? (() => void 0)
     );
+    const finalParts = await appendOutputsPart(parts, outputsPart);
     await deps.chatStore.updateMessage(row.id, {
       content: itemLedger.projectContent(),
       status: failed ? "error" : "done",
       completedAt: finishedAt,
-      ...parts.length ? { parts } : {}
+      ...finalParts.length ? { parts: finalParts } : {}
     });
     const metaRsid = typeof meta?.runtimeSessionId === "string" ? meta.runtimeSessionId : void 0;
     const nextRuntimeSessionId = info.runtimeSessionId ?? metaRsid;
@@ -219904,7 +220459,7 @@ async function planChatTurnRecoveryAcrossCompanies(deps) {
   return { groups, settled, scanned, skipped };
 }
 async function sweepDanglingChatTurnsAcrossCompanies(deps) {
-  const { listCompanies, storesFor, onCompanyError, onSessionClosed, log: log3, ...rest } = deps;
+  const { listCompanies, storesFor, onCompanyError, onSessionClosed, sessionOutputsScan, log: log3, ...rest } = deps;
   const closed = [];
   for (const companyId of await listCompanies()) {
     try {
@@ -219915,7 +220470,8 @@ async function sweepDanglingChatTurnsAcrossCompanies(deps) {
         listMessages: (sid) => stores.chatStore.listMessages(sid),
         updateMessage: (id, patch) => stores.chatStore.updateMessage(id, patch),
         ...log3 ? { log: (m2) => log3(companyId ? `${m2}\uFF3B${companyId}\uFF3D` : m2) } : {},
-        ...onSessionClosed ? { onSessionClosed: (sid, reason, messageId) => onSessionClosed(sid, reason, messageId, companyId) } : {}
+        ...onSessionClosed ? { onSessionClosed: (sid, reason, messageId) => onSessionClosed(sid, reason, messageId, companyId) } : {},
+        ...sessionOutputsScan ? { outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId) } : {}
       });
       closed.push(...ids2);
     } catch (err) {
@@ -219925,7 +220481,7 @@ async function sweepDanglingChatTurnsAcrossCompanies(deps) {
   return closed;
 }
 async function reconcileChatExitFrameAcrossCompanies(deps) {
-  const { listCompanies, storesFor, onCompanyError, log: log3, ...rest } = deps;
+  const { listCompanies, storesFor, onCompanyError, sessionOutputsScan, log: log3, ...rest } = deps;
   for (const companyId of await listCompanies()) {
     try {
       const stores = await storesFor(companyId);
@@ -219935,7 +220491,8 @@ async function reconcileChatExitFrameAcrossCompanies(deps) {
         chatStore: stores.chatStore,
         ...stores.getTurnForRun ? { getTurnForRun: stores.getTurnForRun } : {},
         ...stores.items ? { items: stores.items } : {},
-        ...log3 ? { log: (m2) => log3(companyId ? `${m2}\uFF3B${companyId}\uFF3D` : m2) } : {}
+        ...log3 ? { log: (m2) => log3(companyId ? `${m2}\uFF3B${companyId}\uFF3D` : m2) } : {},
+        ...sessionOutputsScan ? { outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId) } : {}
       });
       if (handled3) return true;
     } catch (err) {
@@ -219957,9 +220514,11 @@ async function reconcileSettledChatTurn(deps) {
     succeeded ? "completed" : "failed",
     deps.log ?? (() => void 0)
   );
+  const withOutputs = await appendOutputsPart(plan.seedParts, deps.outputsPart);
   await deps.chatStore.updateMessage(plan.assistantMsgId, {
     status: succeeded ? "done" : "error",
-    completedAt
+    completedAt,
+    ...withOutputs !== plan.seedParts ? { parts: withOutputs } : {}
   });
   const run = await deps.trace.getRun(plan.runId);
   if (run?.status === "running") {
@@ -219977,6 +220536,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
     const { plan, turn, companyId, stores } = hit;
     log3(`[chat-claim] company=${companyId ?? "<default>"} session=${plan.chatSessionId} run=${plan.runId} dispatch=${plan.dispatchId} \u7ED3\u8BBA=settled\uFF08\u4F9D\u636E\uFF1A\u540C\u516C\u53F8\u8F6E\u6B21 ${turn.id} \u5DF2 ${turn.status}\uFF0CcompletedAt=${turn.completedAt ?? "-"}\uFF09`);
     deps.evict(plan.dispatchId);
+    const outputsPart = outputsPartProvider(deps.sessionOutputsScan, plan.chatSessionId, companyId);
     try {
       await reconcileSettledChatTurn({
         plan,
@@ -219984,6 +220544,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
         chatStore: stores.chatStore,
         trace: deps.trace,
         ...stores.items ? { items: stores.items } : {},
+        ...outputsPart ? { outputsPart } : {},
         log: log3
       });
     } catch (err) {
@@ -220019,6 +220580,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
             ...companyId ? { companyId } : {}
           });
         } : void 0;
+        const outputsPart = outputsPartProvider(deps.sessionOutputsScan, plan.chatSessionId, companyId);
         const { done } = wireRecoveredChatTurn({
           plan,
           handle,
@@ -220029,6 +220591,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
           unregister: () => deps.unregister(plan),
           ...deps.traceHealth ? { traceHealth: deps.traceHealth } : {},
           ...onTurnSettled ? { onTurnSettled } : {},
+          ...outputsPart ? { outputsPart } : {},
           ...stores.items ? { items: stores.items, itemsTurnId } : {},
           log: log3
         });
@@ -220042,15 +220605,17 @@ async function recoverChatTurnsAcrossCompanies(deps) {
   }
   return { ...result, recovered };
 }
-var import_node_crypto45, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
+var import_node_crypto49, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
 var init_chat_recovery = __esm({
   "../server/src/chat-recovery.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    init_file_restore();
+    import_node_crypto49 = require("node:crypto");
     init_chat_parts();
     init_sink();
     init_resilient_appender();
     init_chat_item_ledger();
+    init_chat_assistant_turn();
     init_src6();
     init_session_exit_outcome();
     asObj3 = (v2) => v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
@@ -220076,8 +220641,8 @@ var init_chat_recovery = __esm({
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto46.randomBytes)(16);
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto50.randomBytes)(16);
+  const dk = (0, import_node_crypto50.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -220094,8 +220659,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto46.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto50.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto50.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -220103,17 +220668,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto50.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto50.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto46.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto50.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -220125,21 +220690,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto46.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto50.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto46.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto50.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto46.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto50.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto46, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto50, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto46 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -221289,16 +221854,16 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto47.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto51.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto47, REDACTED_MARKER, ActorsService, mask, changedKeys;
+var import_node_crypto51, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
-    import_node_crypto47 = require("node:crypto");
+    import_node_crypto51 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -221862,7 +222427,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path41, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto51.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path41, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -222514,15 +223079,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto47.randomBytes)(12);
-        const cipher = (0, import_node_crypto47.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto51.randomBytes)(12);
+        const cipher = (0, import_node_crypto51.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc4 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc4.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto47.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto51.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -223140,7 +223705,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto52.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -223165,11 +223730,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto52.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto52.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223190,11 +223755,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto52.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto52.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223214,7 +223779,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto52.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223238,7 +223803,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto48.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto52.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -223271,7 +223836,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto52.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223288,11 +223853,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto48;
+var import_node_crypto52;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto48 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
   }
 });
@@ -224803,7 +225368,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto49.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto53.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -224843,11 +225408,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
-var import_node_crypto49;
+var import_node_crypto53;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto49 = require("node:crypto");
+    import_node_crypto53 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -225017,235 +225582,6 @@ var init_assistant_tier_dispatch = __esm({
   }
 });
-// ../server/src/domains/chat-sessions/files-view.ts
-function reasonFromWorkdirCode(code2) {
-  switch (code2) {
-    case "NODE_OFFLINE":
-      return "NODE_OFFLINE";
-    case "TIMEOUT":
-      return "TIMEOUT";
-    default:
-      return "ERROR";
-  }
-}
-function joinRel2(dir, name) {
-  return dir ? `${dir}/${name}` : name;
-}
-function workdirFileItem(rel, name, size, mtime) {
-  return {
-    id: `workdir:${rel}`,
-    name,
-    kind: "file",
-    // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
-    // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
-    content_type: null,
-    size,
-    updated_at: mtime,
-    source: "workdir",
-    blob_ref: null,
-    path: rel,
-    message_id: null,
-    // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
-    // 这里是**按能力不渲染**的判据，不是置灰假钮。
-    editable: false
-  };
-}
-async function collectWorkdirFiles(bridge, loc, now = Date.now) {
-  const items = [];
-  if (typeof bridge.walk === "function") {
-    const walked = await bridge.walk(
-      loc.nodeId,
-      { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: "" },
-      WORKDIR_TREE_MAX_ENTRIES
-    );
-    if (walked.ok) {
-      let truncated2 = walked.truncated === true;
-      for (const entry of walked.entries) {
-        if (entry.type !== "file") continue;
-        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
-          truncated2 = true;
-          break;
-        }
-        const slash = entry.path.lastIndexOf("/");
-        items.push(workdirFileItem(entry.path, entry.path.slice(slash + 1), entry.size, entry.mtime));
-      }
-      return { ok: true, items, truncated: truncated2 };
-    }
-    if (walked.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
-    if (walked.code !== "UNSUPPORTED") return { ok: false, reason: reasonFromWorkdirCode(walked.code) };
-  }
-  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
-  let listCalls = 0;
-  let truncated = false;
-  const listDir = (path41) => {
-    listCalls += 1;
-    return bridge.list(loc.nodeId, {
-      workdirKey: loc.workdirKey,
-      runtimeKind: loc.runtimeKind,
-      rtId: loc.rtId,
-      path: path41
-    });
-  };
-  const root = await listDir("");
-  if (!root.ok) {
-    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
-    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
-  }
-  let level = [{ path: "", outcome: root }];
-  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
-    const nextDirs = [];
-    for (const { path: dir, outcome } of level) {
-      if (!outcome.ok) {
-        truncated = true;
-        continue;
-      }
-      if (outcome.truncated) truncated = true;
-      for (const entry of outcome.entries) {
-        if (entry.type === "dir") {
-          nextDirs.push(joinRel2(dir, entry.name));
-          continue;
-        }
-        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
-          truncated = true;
-          continue;
-        }
-        items.push(workdirFileItem(joinRel2(dir, entry.name), entry.name, entry.size, entry.mtime));
-      }
-    }
-    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
-      if (nextDirs.length > 0) truncated = true;
-      break;
-    }
-    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
-    if (budget <= 0 || now() >= deadline) {
-      truncated = true;
-      break;
-    }
-    const take = nextDirs.slice(0, budget);
-    if (take.length < nextDirs.length) truncated = true;
-    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
-    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
-  }
-  return { ok: true, items, truncated };
-}
-async function collectMessageFiles(messages, blobs) {
-  const rows = [];
-  for (const message of messages) {
-    if (!Array.isArray(message.attachments)) continue;
-    message.attachments.forEach((attachment, index2) => {
-      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
-      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
-      rows.push({
-        item: {
-          id: `msg:${message.id}:${index2}`,
-          name: attachment.name,
-          kind: "file",
-          updated_at: attachment.updatedAt ?? message.createdAt,
-          source: "message",
-          blob_ref: blobRef,
-          path: null,
-          message_id: message.id,
-          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
-          // contain `name`）——没有可写回的载体，一律不给编辑入口。
-          editable: blobRef !== null && isEditableFileName(attachment.name)
-        },
-        blobRef,
-        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
-      });
-    });
-  }
-  const metaCache = /* @__PURE__ */ new Map();
-  const metaOf = (ref2) => {
-    if (!blobs) return Promise.resolve(null);
-    let hit = metaCache.get(ref2);
-    if (!hit) {
-      hit = blobs.meta(ref2).catch(() => null);
-      metaCache.set(ref2, hit);
-    }
-    return hit;
-  };
-  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
-    const meta = blobRef ? await metaOf(blobRef) : null;
-    return {
-      ...item,
-      content_type: declaredType ?? meta?.contentType ?? null,
-      size: meta?.size ?? null
-    };
-  }));
-}
-function mergeChatSessionFiles(messageItems, workdirItems, materializedCopies = /* @__PURE__ */ new Set()) {
-  const out = [];
-  const seenMessageKeys = /* @__PURE__ */ new Set();
-  for (const item of [...messageItems].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at))) {
-    const key = `${item.name}\0${item.blob_ref ?? ""}`;
-    if (seenMessageKeys.has(key)) continue;
-    seenMessageKeys.add(key);
-    out.push(item);
-  }
-  const seenWorkdirPaths = /* @__PURE__ */ new Set();
-  for (const item of workdirItems) {
-    if (item.path && materializedCopies.has(item.path)) continue;
-    if (seenWorkdirPaths.has(item.id)) continue;
-    seenWorkdirPaths.add(item.id);
-    out.push(item);
-  }
-  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
-  return out;
-}
-async function findMaterializedAttachmentCopies(messageItems, workdirItems, read) {
-  const copies = /* @__PURE__ */ new Set();
-  const attachments = messageItems.filter((item) => item.blob_ref && /^[a-f0-9]{64}$/.test(item.blob_ref));
-  let budget = CHAT_ATTACHMENT_MAX_BYTES;
-  const deadline = Date.now() + WORKDIR_WALK_BUDGET_MS;
-  let reads = 0;
-  for (const file of workdirItems) {
-    const rootFile = file.path === file.name;
-    const inputFile = file.path?.startsWith("inputs/attachments/") && !file.path.slice("inputs/attachments/".length).includes("/");
-    if (!file.path || !rootFile && !inputFile) continue;
-    const candidates = attachments.filter((attachment) => {
-      const safe = safeAttachmentName(attachment.name);
-      const numbered = file.name.endsWith(`-${safe}`) && /^\d+$/.test(file.name.slice(0, -(safe.length + 1)));
-      return (rootFile ? file.name === attachment.name : file.name === safe || numbered) && attachment.size !== null && attachment.size === file.size;
-    });
-    if (Date.now() >= deadline) break;
-    if (!candidates.length || file.size === null || file.size > budget || reads >= 10) continue;
-    reads += 1;
-    budget -= file.size;
-    let timer;
-    try {
-      const result = await Promise.race([
-        read(file.path, file.size),
-        new Promise((resolve10) => {
-          timer = setTimeout(() => resolve10(null), Math.max(0, deadline - Date.now()));
-        })
-      ]);
-      if (!result?.ok) continue;
-      const bytes2 = Buffer.from(result.contentBase64, "base64");
-      if (bytes2.length !== file.size) continue;
-      const hash2 = (0, import_node_crypto50.createHash)("sha256").update(bytes2).digest("hex");
-      if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
-    } catch {
-    } finally {
-      if (timer) clearTimeout(timer);
-    }
-  }
-  return copies;
-}
-var import_node_crypto50, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
-var init_files_view = __esm({
-  "../server/src/domains/chat-sessions/files-view.ts"() {
-    "use strict";
-    import_node_crypto50 = require("node:crypto");
-    init_chat_attachment_files();
-    init_src();
-    WORKDIR_WALK_MAX_DEPTH = 3;
-    WORKDIR_WALK_MAX_ENTRIES = 200;
-    WORKDIR_WALK_MAX_LIST_CALLS = 20;
-    WORKDIR_WALK_BUDGET_MS = 1e4;
-    WORKDIR_TREE_MAX_ENTRIES = 2e3;
-  }
-});
 // ../server/src/domains/projects/chat-files.ts
 function isProjectChatSession(session) {
   if (session.visibility === "internal") return false;
@@ -225257,79 +225593,45 @@ function chatFolderTitle(session) {
   const title = session.title?.trim();
   return title ? title : "\u672A\u547D\u540D\u5BF9\u8BDD";
 }
-function outputDisplayName(path41) {
-  return path41.startsWith("outputs/") ? path41.slice("outputs/".length) : path41;
-}
 async function collectProjectChatFiles(chat, projectId2, meta, options = {}) {
   const scope = isUncategorizedProjectId(projectId2) ? null : projectId2;
-  const [attachmentMessages, outputSessions] = await Promise.all([
-    chat.listAttachmentMessages ? chat.listAttachmentMessages(scope) : Promise.resolve([]),
-    chat.listOutputCopies ? chat.listOutputCopies(scope) : Promise.resolve([])
+  const [attachmentMessages, outputSessions, taskSessions] = await Promise.all([
+    chat.listAttachmentMessages?.(scope) ?? [],
+    chat.listOutputCopies?.(scope) ?? [],
+    chat.listFileSessionsByWorkspaces?.(options.workOrderIds ?? []) ?? []
   ]);
-  const sessionIds = [.../* @__PURE__ */ new Set([
+  const ids2 = [.../* @__PURE__ */ new Set([
     ...attachmentMessages.map((m2) => m2.sessionId),
-    ...outputSessions.map((s2) => s2.sessionId)
+    ...outputSessions.map((s2) => s2.sessionId),
+    ...taskSessions.map((s2) => s2.id)
   ])];
-  const sessions = /* @__PURE__ */ new Map();
-  await Promise.all(sessionIds.map(async (id) => {
-    const session = await chat.getSession(id);
-    if (!session) return;
-    if ((session.projectId ?? null) !== scope) return;
-    if (!isProjectChatSession(session)) return;
-    if (options.isDelegationChild && await options.isDelegationChild(id).catch(() => false)) return;
-    sessions.set(id, session);
-  }));
   const out = [];
-  const base = (session) => ({
-    projectId: projectId2,
-    chatSessionId: session.id,
-    chatTitle: chatFolderTitle(session),
-    chatOwnerId: session.humanActorId
-  });
-  const bySession = /* @__PURE__ */ new Map();
-  for (const message of attachmentMessages) {
-    if (!sessions.has(message.sessionId)) continue;
-    const list2 = bySession.get(message.sessionId) ?? [];
-    list2.push(message);
-    bySession.set(message.sessionId, list2);
-  }
-  for (const [sessionId, messages] of bySession) {
-    const session = sessions.get(sessionId);
-    const rows = await collectMessageFiles(messages.map((m2) => ({ ...m2, id: m2.messageId })), { meta });
-    for (const row of mergeChatSessionFiles(rows, [])) {
-      if (row.blob_ref === null) continue;
-      out.push({
-        ...base(session),
-        fileId: `chat:${sessionId}:${row.id}`,
-        name: row.name,
-        blobId: row.blob_ref,
-        ...row.content_type ? { contentType: row.content_type } : {},
-        size: row.size,
-        uploadedBy: session.humanActorId,
-        uploadedAt: row.updated_at,
-        chatSource: "attachment"
-      });
-    }
-  }
-  for (const record8 of outputSessions) {
-    const session = sessions.get(record8.sessionId);
-    if (!session) continue;
-    const seen = new Set(out.filter((file) => file.chatSessionId === session.id).map((file) => `${file.name}\0${file.blobId}`));
-    const copies = record8.copies ?? {};
-    for (const path41 of Object.keys(copies).sort((a, b2) => a.localeCompare(b2))) {
-      const copy = copies[path41];
-      if (!copy?.blobRef) continue;
-      if (seen.has(`${copy.name}\0${copy.blobRef}`)) continue;
+  for (const id of ids2) {
+    const session = await chat.getSession(id);
+    if (!session || session.visibility === "internal" || session.analyzedRunId) continue;
+    if (session.workspace) {
+      if (!options.workOrderIds?.includes(session.workspace)) continue;
+    } else if ((session.projectId ?? null) !== scope || !isProjectChatSession(session)) continue;
+    if (options.isDelegationChild && await options.isDelegationChild(id)) continue;
+    const items = await readPersistentSessionFiles(chat, id, { meta });
+    const fileIssues = await chat.readFileIssues?.(id) ?? [];
+    for (const item of items) {
+      if (!item.blob_ref) continue;
       out.push({
-        ...base(session),
-        fileId: `chat:${session.id}:out:${copy.path}`,
-        name: outputDisplayName(copy.path),
-        blobId: copy.blobRef,
-        ...copy.contentType ? { contentType: copy.contentType } : {},
-        size: copy.size,
-        uploadedBy: session.aiActorId,
-        uploadedAt: Number.isNaN(Date.parse(copy.mtime)) ? copy.copiedAt : new Date(copy.mtime).toISOString(),
-        chatSource: "output"
+        projectId: projectId2,
+        ...fileIssues.length ? { fileIssues } : {},
+        chatSessionId: id,
+        chatTitle: chatFolderTitle(session),
+        chatOwnerId: session.humanActorId,
+        fileId: `chat:${id}:${item.id}`,
+        name: item.name,
+        blobId: item.blob_ref,
+        ...item.content_type ? { contentType: item.content_type } : {},
+        size: item.size,
+        uploadedBy: item.source === "output" ? session.aiActorId : session.humanActorId,
+        uploadedAt: item.updated_at,
+        chatSource: item.source === "output" ? "output" : "attachment",
+        ...session.workspace ? { taskId: session.workspace } : {}
       });
     }
   }
@@ -225338,7 +225640,8 @@ async function collectProjectChatFiles(chat, projectId2, meta, options = {}) {
 var init_chat_files2 = __esm({
   "../server/src/domains/projects/chat-files.ts"() {
     "use strict";
-    init_files_view();
+    init_persistent_files();
+    init_persistent_files();
     init_uncategorized_project();
   }
 });
@@ -226302,7 +226605,8 @@ function toApiProjectFilesView(view) {
       // 对话文件夹（`"chat"`）：前端据此换带对话气泡的文件夹图标。其余文件夹与文件行为 null。
       folder_kind: item.folderKind ?? null,
       // 对话文件夹及其子文件所属的对话；前端「所属任务」列的「对话」筛选档靠它。其余行为 null。
-      chat_session_id: item.chatSessionId ?? null
+      chat_session_id: item.chatSessionId ?? null,
+      ...item.fileIssues?.length ? { file_issues: item.fileIssues } : {}
     }))
   };
 }
@@ -228626,11 +228930,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto51, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto54, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
     import_node_fs14 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -228663,7 +228967,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto51.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto54.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -228786,7 +229090,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto51.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto54.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -229737,13 +230041,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs15, import_node_path20, import_node_crypto52, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs15, import_node_path20, import_node_crypto55, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs15 = __toESM(require("node:fs"), 1);
     import_node_path20 = __toESM(require("node:path"), 1);
-    import_node_crypto52 = __toESM(require("node:crypto"), 1);
+    import_node_crypto55 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -229761,7 +230065,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto52.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto55.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -231007,11 +231311,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto53, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto56, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -231103,7 +231407,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto56.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -231312,7 +231616,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto56.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -231443,7 +231747,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto53.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto56.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -231500,7 +231804,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto56.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -231738,11 +232042,11 @@ var init_service6 = __esm({
 });
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto54, MemberOffboardingService;
+var import_node_crypto57, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto57 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -231814,7 +232118,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto54.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto57.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -232324,18 +232628,18 @@ var init_routes6 = __esm({
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto55.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto58.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto55.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto58.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto55, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto58, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -232360,7 +232664,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto55.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto58.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -232780,7 +233084,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope = companyId?.trim();
-  const suffix = scope ? `c${(0, import_node_crypto56.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope ? `c${(0, import_node_crypto59.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -233109,12 +233413,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto56;
+var import_node_crypto59;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto56 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
   }
 });
@@ -233675,7 +233979,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto57.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto60.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -233858,13 +234162,13 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto57.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto60.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto57, import_node_fs16, import_node_url6, import_node_path21;
+var import_node_crypto60, import_node_fs16, import_node_url6, import_node_path21;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     import_node_fs16 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path21 = require("node:path");
@@ -235055,7 +235359,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs26.statSync(absBundle).size;
-  const digest = (0, import_node_crypto58.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto61.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -235151,12 +235455,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto58, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto61, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
     fs26 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path25 = __toESM(require("node:path"), 1);
@@ -235176,7 +235480,7 @@ var init_readonly_bundle = __esm({
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto59.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto62.randomUUID)().slice(0, 8)}`);
   return async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -235269,7 +235573,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key) {
-  return `ws:wo-${(0, import_node_crypto59.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto62.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(kernel, workspace) {
   const arts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === workspace);
@@ -235282,11 +235586,11 @@ function existingWorkorder(kernel, workspace) {
     spawned: arts.map((a) => ({ id: a.id, type: a.type, owner: a.owner }))
   };
 }
-var import_node_crypto59, enc2;
+var import_node_crypto62, enc2;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     init_uncategorized_project();
     init_src();
     init_planner();
@@ -236716,12 +237020,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto60, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto63, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service8 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     init_src5();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -236952,7 +237256,7 @@ var init_service8 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto60.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto63.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -237879,6 +238183,10 @@ var init_project_bundle = __esm({
 });
 // ../server/src/domains/chat-sessions/index.ts
+function sessionProjectIdToStore(projectId2) {
+  if (typeof projectId2 !== "string" || projectId2.trim() === "") return null;
+  return isUncategorizedProjectId(projectId2) ? null : projectId2;
+}
 function parseDurationMs(raw) {
   if (!raw) return null;
   const m2 = /^(\d+)\s*(ms|s|m|h|d)?$/i.exec(raw.trim());
@@ -238052,7 +238360,7 @@ function createChatSessionsDomain(opts) {
       if (!text5.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto61.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto64.randomUUID)()}`;
       drafts.set(id, { text: text5, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -238104,7 +238412,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = await currentRuntimeId(body2.aiActorId) ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto64.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -238117,7 +238425,7 @@ function createChatSessionsDomain(opts) {
         // 决策 0030 缝合：绑定是会话的语义属性（工单频道/问题会话给、脑暴省略）——发消息端据它带 workspace，
         // 两个入口页面行为一致。区别于 linkWorkOrder（出处关联，建单脑暴也有、不构成绑定）。
         workspace: body2.workspace ?? null,
-        projectId: body2.projectId ?? null,
+        projectId: sessionProjectIdToStore(body2.projectId),
         // 会话级模型覆盖（口径 A）：建会话时就带上选择；空串/空白归 null = 沿用旧解析，不写员工全局配置。
         model: normalizeModel(body2.model),
         // ADR-0058：分析会话指向被分析 run；非空即"这是分析会话"（不进主聊天列表、进 trace 分析视图）。
@@ -238186,7 +238494,7 @@ function createChatSessionsDomain(opts) {
         ...body2.runtimeId !== void 0 ? { runtimeId: body2.runtimeId } : {},
         ...Object.prototype.hasOwnProperty.call(body2, "runtimeSessionId") ? { runtimeSessionId: body2.runtimeSessionId } : {},
         ...body2.title !== void 0 ? { title: body2.title } : {},
-        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: body2.projectId } : {},
+        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: sessionProjectIdToStore(body2.projectId) } : {},
         // 会话级模型覆盖：显式传 null / 空串 = 清除覆盖（回到旧解析）；不传这一项 = 不动它。
         ...Object.prototype.hasOwnProperty.call(body2, "model") ? { model: normalizeModel(body2.model) } : {},
         // 只有显式传了才写——改标题 / 换项目 / 换模型都不是「有新动静」，不该顶掉列表顺序与已读水位。
@@ -238210,7 +238518,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto64.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -238251,7 +238559,7 @@ function createChatSessionsDomain(opts) {
       const known = key ? cur.find((x2) => x2.clientKey === key) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store.enqueuePendingMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto64.randomUUID)(),
         chatSessionId: sid,
         text: text5,
         ...attachments.length ? { attachments } : {},
@@ -238568,6 +238876,20 @@ function createChatSessionsDomain(opts) {
       return { status: 200, body: body2 };
     });
     router.get("/api/chat-sessions/:id/workdir/file", async (req) => {
+      const store2 = await storeFor(req);
+      const session = await store2.getSession(req.params.id);
+      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const copy = (await store2.readOutputCopies?.(session.id))?.[req.query?.get("path") ?? ""];
+      if (copy) {
+        const blobs = opts.resolveBlobs ? await opts.resolveBlobs(req.auth.companyId) : opts.blobs;
+        if (!blobs?.get) throw new ApiError(503, "BLOB_STORE_UNAVAILABLE", "\u6587\u4EF6\u5B58\u50A8\u6682\u4E0D\u53EF\u7528");
+        const bytes2 = Buffer.from(await blobs.get(copy.blobRef));
+        return { status: 200, body: bytes2, headers: {
+          "content-type": copy.contentType ?? "application/octet-stream",
+          "content-length": String(bytes2.length),
+          "cache-control": "no-store"
+        } };
+      }
       const bridge = opts.workdir?.();
       if (!bridge) throw new ApiError(404, "NOT_FOUND", "\u5DE5\u4F5C\u533A\u6587\u4EF6\u6D4F\u89C8\u672A\u542F\u7528");
       const loc = await locateWorkdir(await storeFor(req), req.auth.companyId, req.params.id, req.auth.actor);
@@ -238604,9 +238926,12 @@ function createChatSessionsDomain(opts) {
       const store2 = await storeFor(req);
       const session = await store2.getSession(req.params.id);
       if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
-      const attachmentRows = store2.listSessionAttachmentMessages ? await store2.listSessionAttachmentMessages(session.id) : await store2.listMessages(session.id);
       const blobAccess = opts.resolveBlobs ? await opts.resolveBlobs(req.auth?.companyId) : opts.blobs;
-      const messageItems = await collectMessageFiles(attachmentRows, blobAccess);
+      const persistentItems = await readPersistentSessionFiles(store2, session.id, blobAccess, true);
+      const messageItems = persistentItems.filter((item) => item.source === "message");
+      const allOutputs = persistentItems.filter((item) => item.source === "output");
+      const savedOutputs = allOutputs.filter((output) => !messageItems.some((m2) => m2.name === output.name && m2.blob_ref === output.blob_ref));
+      const fileIssues = await store2.readFileIssues?.(session.id) ?? [];
       let workdirItems = [];
       let materializedCopies = /* @__PURE__ */ new Set();
       let workdirAvailable = false;
@@ -238633,8 +238958,13 @@ function createChatSessionsDomain(opts) {
           }
         }
       }
-      const items = mergeChatSessionFiles(messageItems, workdirItems, materializedCopies);
+      const archivedPaths = new Set(allOutputs.map((item) => item.path));
+      const items = mergeChatSessionFiles(messageItems, [
+        ...savedOutputs,
+        ...workdirItems.filter((item) => !archivedPaths.has(item.path) && !item.path?.startsWith("inputs/history/"))
+      ], materializedCopies);
       const body2 = {
+        ...fileIssues.length ? { fileIssues } : {},
         total: items.length,
         items,
         workdirAvailable,
@@ -238702,13 +239032,14 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto61, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
+var import_node_crypto64, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
 var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     init_src();
     init_chat_session();
+    init_persistent_files();
     init_files_view();
     init_router();
     init_collab();
@@ -238723,6 +239054,7 @@ var init_chat_sessions2 = __esm({
     init_company_data_store_router();
     init_workorder_terminal();
     init_session_workdir();
+    init_uncategorized_project();
     init_project_bundle();
     DEFAULT_SNAPSHOT_ITEMS = 400;
     MAX_SNAPSHOT_ITEMS = 1e3;
@@ -240110,7 +240442,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto62.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto65.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -240166,11 +240498,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto62, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto65, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service9 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -240984,11 +241316,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto63.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto66.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto63.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto66.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -241018,11 +241350,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto63, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto66, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -242178,7 +242510,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto64.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto67.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -242195,11 +242527,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto64;
+var import_node_crypto67;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -242313,17 +242645,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto65.createHash)("sha256").update(canonical).digest("hex");
+  return (0, import_node_crypto68.createHash)("sha256").update(canonical).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto65.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto68.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto65, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto68, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -242534,7 +242866,7 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto66.randomUUID)();
+  const requestId = (0, import_node_crypto69.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve10) => {
@@ -242547,11 +242879,11 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve10, timer });
   });
 }
-var import_node_crypto66, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto69, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 500;
@@ -242901,7 +243233,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto66.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto69.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -243138,7 +243470,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto66.randomUUID)();
+        const requestId = (0, import_node_crypto69.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve10) => {
@@ -243246,13 +243578,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto67, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto70, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto67.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto70.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc3 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -243499,11 +243831,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto68, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto71, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_src5();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -243772,7 +244104,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto68.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto71.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -244151,8 +244483,8 @@ ${ctx.nodeFault}
             this.deps.log?.(`[coordinator] ${workspace} \u5168\u5C40\u4E0A\u4E0B\u6587\u8BFB\u53D6\u5931\u8D25\uFF0C\u7EE7\u7EED\u6CBF\u7528\u539F\u534F\u8C03\u8005\u4EFB\u52A1\uFF1A${String(error2)}`);
           }
         }
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto68.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto68.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto71.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto71.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           task,
           ``,
@@ -244196,7 +244528,7 @@ ${ctx.nodeFault}
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto68.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto71.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -244401,11 +244733,11 @@ var init_pg_ident = __esm({
 });
 // ../storage/src/postgres.ts
-var import_node_crypto69, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto72, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -244585,7 +244917,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto69.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto72.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash2, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -250858,6 +251190,7 @@ var init_postgres_chat_sessions = __esm({
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS visibility text`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS outputs_fingerprints jsonb`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS outputs_copies jsonb`);
+        await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS file_sync_issues jsonb`);
         await pool.query(`
       WITH ranked AS (
         SELECT id, row_number() OVER (PARTITION BY session_id ORDER BY seq, created_at, id) AS rn
@@ -251129,6 +251462,29 @@ var init_postgres_chat_sessions = __esm({
         );
         return r.rows[0]?.outputs_copies ?? null;
       }
+      async readFileIssues(sessionId) {
+        const r = await this.pool.query(
+          `SELECT file_sync_issues FROM ${this.s}.chat_sessions WHERE id = $1 AND company_id = $2`,
+          [sessionId, this.companyId]
+        );
+        return Object.values(r.rows[0]?.file_sync_issues ?? {}).flat();
+      }
+      async writeFileIssues(sessionId, phase, issues) {
+        await this.pool.query(
+          `UPDATE ${this.s}.chat_sessions SET file_sync_issues = COALESCE(file_sync_issues, '{}'::jsonb) || $1::jsonb
+       WHERE id = $2 AND company_id = $3`,
+          [JSON.stringify({ [phase]: issues }), sessionId, this.companyId]
+        );
+      }
+      async listFileSessionsByWorkspaces(workspaces) {
+        if (!workspaces.length) return [];
+        const r = await this.pool.query(
+          `SELECT * FROM ${this.s}.chat_sessions WHERE company_id = $1 AND workspace = ANY($2::text[])
+       AND visibility IS DISTINCT FROM 'internal' AND analyzed_run_id IS NULL ORDER BY id`,
+          [this.companyId, workspaces]
+        );
+        return r.rows.map(rowToSession);
+      }
       /**
        * 按路径**合并**写入：同一路径新副本覆盖旧副本，其余路径保留。合并在一条 UPDATE 里用 jsonb `||` 完成，
        * 不是读出来改完再整份写回——两次收尾的复制前后脚落库时，后写的不会把先写的吞掉。
@@ -253212,11 +253568,11 @@ var init_postgres_delegations = __esm({
 });
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto70, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto73, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -253433,7 +253789,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto70.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto73.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -253699,11 +254055,11 @@ var init_postgres_type_registry = __esm({
 });
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto71, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto74, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -253913,7 +254269,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto71.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto74.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -255360,14 +255716,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto72.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto75.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto72, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto75, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -255441,7 +255797,7 @@ var init_tenant_schema_mapping = __esm({
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto76.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -255623,11 +255979,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto73, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto76, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -255707,11 +256063,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto74, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto77, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -256097,7 +256453,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto74.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto77.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -258694,7 +259050,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto75.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto78.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -259082,11 +259438,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto75, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto78, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto78 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -259318,8 +259674,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto76.randomBytes)(12);
-  const cipher = (0, import_node_crypto76.createCipheriv)("aes-256-gcm", bytes(key), iv);
+  const iv = (0, import_node_crypto79.randomBytes)(12);
+  const cipher = (0, import_node_crypto79.createCipheriv)("aes-256-gcm", bytes(key), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -259329,7 +259685,7 @@ function openSnapshot(snapshot, key) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto76.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto79.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -259337,11 +259693,11 @@ function openSnapshot(snapshot, key) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto76, PREFIX3, bytes, aad2;
+var import_node_crypto79, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto79 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key) => {
       const value2 = Buffer.from(key);
@@ -261371,6 +261727,7 @@ var init_src11 = __esm({
     init_chat_recovery();
     init_chat_system_message();
     init_chat_turn_gate();
+    init_chat_assistant_turn();
     init_chat_workorder_files();
     init_chat_broadcast();
     init_workorder_terminal();
@@ -261453,6 +261810,7 @@ var init_src11 = __esm({
     init_run_settlement_wiring();
     init_deadline_clock();
     init_read_model_clock();
+    init_file_restore();
   }
 });
@@ -261588,20 +261946,20 @@ var fs45 = __toESM(require("node:fs"));
 var os14 = __toESM(require("node:os"));
 var path40 = __toESM(require("node:path"));
 var import_node_child_process23 = require("node:child_process");
-var import_node_crypto83 = require("node:crypto");
+var import_node_crypto86 = require("node:crypto");
 // ../cli/src/cli.ts
 var fs40 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path35 = __toESM(require("node:path"), 1);
-var import_node_crypto81 = require("node:crypto");
+var import_node_crypto84 = require("node:crypto");
 // ../cli/src/serve.ts
 var fs34 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto77 = require("node:crypto");
+var import_node_crypto80 = require("node:crypto");
 var import_node_url7 = require("node:url");
 // ../cli/src/artifact-discovery-source.ts
@@ -262347,7 +262705,7 @@ init_src9();
 init_src();
 init_trajectory();
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto77.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto80.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -262547,7 +262905,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path29.join(repoRoot, "node_modules/.bin/tsx");
   const main = path29.join(repoRoot, "packages/cli/src/main.ts");
-  const key = (0, import_node_crypto77.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key = (0, import_node_crypto80.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path29.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
   let dir;
@@ -262928,7 +263286,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto77.randomUUID)();
+    const requestId = (0, import_node_crypto80.randomUUID)();
     const task = new Promise((resolve10) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -263199,6 +263557,8 @@ async function startServe(opts) {
     listChatFiles: async (companyId, projectId2) => {
       const chat = await chatStoreFor(companyId);
       const facts = await blobStoreFor(companyId);
+      const taskBindings = await (await artifactStateFor(companyId)).listWorkspaceBindings();
+      const workOrderIds = taskBindings.filter((b2) => b2.projectId === projectId2 || isUncategorizedProjectId(projectId2) && !b2.projectId).map((b2) => b2.workOrderId);
       return collectProjectChatFiles(chat, projectId2, async (ref2) => {
         for (const cabinet of [assets, facts]) {
           try {
@@ -263209,6 +263569,7 @@ async function startServe(opts) {
         }
         return null;
       }, {
+        workOrderIds,
         // 委派子会话不进项目（ADR 0555：它的 outputs/ 是交给协调者的）。闭包在请求时才读
         // `delegationStoreFor`，避开它在下方声明的 TDZ。
         isDelegationChild: async (sessionId) => {
@@ -263680,7 +264041,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto77.randomUUID)(),
+                id: (0, import_node_crypto80.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -263726,7 +264087,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto77.randomUUID)();
+        const sessionId = (0, import_node_crypto80.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -264393,6 +264754,16 @@ async function startServe(opts) {
     delegationStores.set(id, store);
     return store;
   };
+  const readChatFileBlob = async (companyId, ref2) => {
+    const facts = await blobStoreFor(companyId);
+    for (const cabinet of [assets, facts]) {
+      try {
+        return await cabinet.get(ref2);
+      } catch {
+      }
+    }
+    throw new Error("\u6587\u4EF6\u539F\u4EF6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u91CD\u8BD5\u6216\u91CD\u65B0\u4E0A\u4F20");
+  };
   const outputCopyScheduler = createOutputCopyScheduler({
     putBlob: (bytes2) => assets.put(bytes2),
     isDelegationChild: async (companyId, sessionId) => {
@@ -264666,6 +265037,41 @@ async function startServe(opts) {
   const listCompanyMembers = (companyId) => controlPlaneStore.listMembers(companyId ?? defaultCompanyId);
   let notificationLedgerWorker;
   let notificationLedgerTimer;
+  const sessionOutputsScan = async ({ chatSessionId, companyId }) => {
+    const bridge = workdirBridge;
+    if (!bridge) return null;
+    const store = chatStoreRouter ? await chatStoreFor(companyId).catch(() => null) : chatSessionStore;
+    const read = store?.readOutputFingerprints?.bind(store);
+    const write = store?.writeOutputFingerprints?.bind(store);
+    if (!read || !write) return null;
+    const recorded = await store?.getSession(chatSessionId);
+    const located = recorded?.runtimeId && recorded.runtimeKind ? { ok: true, loc: {
+      nodeId: recorded.runtimeId,
+      runtimeKind: recorded.runtimeKind,
+      rtId: recorded.runtimeSessionId,
+      workdirKey: `chat:${chatSessionId}`
+    } } : await locateSessionWorkdir(delegationWorkdirLocator, { chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
+    if (located.ok && foreignNodeBlock(await nodeStore.getNode(located.loc.nodeId), companyId ?? defaultCompanyId)) return null;
+    if (!located.ok) return null;
+    const diff = await settleSessionOutputs({
+      bridge,
+      loc: located.loc,
+      sessionId: chatSessionId,
+      readFingerprints: read,
+      writeFingerprints: write
+    }).catch(() => null);
+    if (diff && store) await outputCopyScheduler.schedule({
+      store,
+      bridge,
+      loc: located.loc,
+      chatSessionId,
+      companyId,
+      fingerprints: diff.fingerprints,
+      scanIncomplete: diff.scanIncomplete
+    });
+    else await store?.writeFileIssues?.(chatSessionId, "save", [{ phase: "save", path: "outputs/", code: "SCAN_UNAVAILABLE", message: "\u539F\u8282\u70B9\u4EA7\u51FA\u76EE\u5F55\u8BFB\u53D6\u5931\u8D25\uFF0C\u672A\u80FD\u786E\u8BA4\u672C\u8F6E\u6587\u4EF6\u5DF2\u4FDD\u5B58" }]);
+    return diff?.changed ?? null;
+  };
   const server = await startOasisServer({
     deployTargets,
     onInterventionDraftResolved: (e) => notificationLedgerWorker?.draftResolved(e.companyId ?? defaultCompanyId, e.draftId, { by: e.by, approved: e.approved }),
@@ -264771,7 +265177,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto77.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto80.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -265003,6 +265409,7 @@ async function startServe(opts) {
         // （于是每一行的「大小」都空掉）。顺序与 `/api/blobs/:hash` 那条读路同源。
         // 写回也落资产柜，与附件上传同一个柜，否则新旧两版会分居两处。
         blobs: {
+          get: (ref2) => readChatFileBlob(void 0, ref2),
           meta: async (blobRef) => {
             for (const cabinet of [assets, blobs]) {
               try {
@@ -265021,6 +265428,7 @@ async function startServe(opts) {
           resolveBlobs: async (cid) => {
             const factCabinet = await blobStoreFor(cid);
             return {
+              get: (ref2) => readChatFileBlob(cid, ref2),
               meta: async (blobRef) => {
                 for (const cabinet of [assets, factCabinet]) {
                   try {
@@ -265108,40 +265516,8 @@ async function startServe(opts) {
     // 三个方法的组合规则住在 `createDelegationWorkdirPort`（`@oasis/server`）——评审
     // wo:acfee725 blocker ② 回归防线：**serve.ts 与单测走同一处**，那样「装配层退回全局 binding」
     // 这类事故在单测里就能被复现。绝不许在这里再写一份。
-    /**
-     * 会话产出扫描（2026-09-11 产出卡）：轮次收尾扫这条会话的 `outputs/`，交出「这一轮变了哪些」。
-     *
-     * 复用 `delegationWorkdirLocator`（与派发、回流、chat 域**同一个 binding resolver 实例**）——
-     * 委派回程读的就是子会话的 `outputs/`，主会话这条只是把同一套读口用到了自己身上。
-     *
-     * 三处 fail-closed，都返回 `null`（= 这一轮没有产出卡），一处都不猜：
-     *  · 桥还没建好 / 会话没绑定 / 节点离线 → 拿不到工作区；
-     *  · store 没有指纹方法（老 store / 文件态装配）→ 没地方记「上一轮长什么样」，
-     *    硬扫会把整个 `outputs/` 每轮都当成新增，一口气刷几十张卡；
-     *  · 解析不出公司 → **绝不回落默认公司**（否则会去别家公司的库里读写指纹）。
-     */
-    sessionOutputsScan: async ({ chatSessionId, companyId }) => {
-      const bridge = workdirBridge;
-      if (!bridge) return null;
-      const store = chatStoreRouter ? await chatStoreFor(companyId).catch(() => null) : chatSessionStore;
-      const read = store?.readOutputFingerprints?.bind(store);
-      const write = store?.writeOutputFingerprints?.bind(store);
-      if (!read || !write) return null;
-      const located = await locateSessionWorkdir(delegationWorkdirLocator, {
-        chatSessionId,
-        ...companyId !== void 0 ? { companyId } : {}
-      });
-      if (!located.ok) return null;
-      const diff = await settleSessionOutputs({
-        bridge,
-        loc: located.loc,
-        sessionId: chatSessionId,
-        readFingerprints: read,
-        writeFingerprints: write
-      }).catch(() => null);
-      if (diff && store) void outputCopyScheduler.schedule({ store, bridge, loc: located.loc, chatSessionId, companyId, fingerprints: diff.fingerprints });
-      return diff?.changed ?? null;
-    },
+    // 会话产出扫描：实现见上方 `sessionOutputsScan`。serve 重启前后的恢复收尾用的是同一个函数。
+    sessionOutputsScan,
     delegationWorkdir: createDelegationWorkdirPort({
       locator: delegationWorkdirLocator,
       // 桥在 hub 建好后（本函数尾部）才赋值 → getter 每次调用时读最新值；早于此处的构造时 `workdirBridge`
@@ -265673,10 +266049,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto77.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto80.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto77.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto77.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto80.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto80.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           return {
@@ -265740,10 +266116,7 @@ async function startServe(opts) {
             }
           }
         }
-        const turnChatStore = chatSessionId ? await chatStoreFor(runCompanyId).catch((err) => {
-          console.warn(`[chat] \u53D6\u516C\u53F8 ${runCompanyId} \u7684\u4F1A\u8BDD\u5B58\u50A8\u5931\u8D25\uFF08\u672C\u8F6E\u6309\u65E0\u4F1A\u8BDD\u8BB0\u5F55\u5904\u7406\uFF09: ${String(err)}`);
-          return null;
-        }) : null;
+        const turnChatStore = chatSessionId ? await chatStoreFor(runCompanyId) : null;
         const analyzedRunId = chatSessionId ? (await turnChatStore?.getSession(chatSessionId).catch(() => null))?.analyzedRunId ?? void 0 : void 0;
         const actorConfigVersion = await actorService.latestConfig(actorId).then((c) => c?.version ?? null).catch(() => null);
         const candidateTraceStartedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -265774,6 +266147,22 @@ async function startServe(opts) {
             ...analyzedRunId ? { analyzedRunId } : {}
           }
         });
+        const priorChatSession = chatSessionId ? await turnChatStore?.getSession(chatSessionId) : null;
+        let freshChatWorkdir = chatSessionId ? chatNodeChanged(
+          { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
+          { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
+        ) : false;
+        let restore = !isolatedKnowledgeTurn && chatSessionId && turnChatStore ? await prepareSessionFileRestore({
+          store: turnChatStore,
+          sessionId: chatSessionId,
+          readBlob: (ref2) => readChatFileBlob(runCompanyId, ref2),
+          attachments,
+          fresh: freshChatWorkdir,
+          supportsFileRestore: node2.meta.supportsFileRestore === true
+        }) : void 0;
+        const usedRel = /* @__PURE__ */ new Set();
+        const preparedAttachments = await buildChatAttachmentFiles(attachments, (ref2) => readChatFileBlob(runCompanyId, ref2), usedRel);
+        if (preparedAttachments.missing.length) throw new ApiError(409, "CHAT_FILE_RESTORE_FAILED", preparedAttachments.missing.map((m2) => `${m2.name}\uFF1A${m2.error}`).join("\uFF1B"));
         const stableTraceWasPresent = Boolean(stableDispatch);
         if (requestDispatchId && !stableDispatch) {
           stableDispatch = await resolveStableChatDispatch({
@@ -265796,13 +266185,20 @@ async function startServe(opts) {
             binding = { actorId, ...stableDispatch.target, status: "active" };
             node2 = await requireDispatchNode(binding);
             requireNodeConnectors();
+            freshChatWorkdir = chatNodeChanged(
+              { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
+              { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
+            );
+            restore = !isolatedKnowledgeTurn && chatSessionId && turnChatStore ? await prepareSessionFileRestore({
+              store: turnChatStore,
+              sessionId: chatSessionId,
+              readBlob: (ref2) => readChatFileBlob(runCompanyId, ref2),
+              attachments,
+              fresh: freshChatWorkdir,
+              supportsFileRestore: node2.meta.supportsFileRestore === true
+            }) : void 0;
           }
         }
-        const priorChatSession = chatSessionId ? await turnChatStore?.getSession(chatSessionId).catch(() => null) : null;
-        const freshChatWorkdir = chatSessionId ? chatNodeChanged(
-          { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
-          { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
-        ) : false;
         const existingTrace = stableDispatch?.run ?? null;
         const existingEvents = existingTrace ? await (await traceStoreFor(runCompanyId)).listEvents(traceRunId, {}).catch(() => []) : [];
         const traceStartedAt = existingTrace?.startedAt ?? candidateTraceStartedAt;
@@ -265848,18 +266244,13 @@ async function startServe(opts) {
         const chatResolvedModel = sessionModelOverride ?? actorCtx?.config?.model ?? void 0;
         const chatModel = chatResolvedModel ?? await registryStore.getRuntimeConfig(`runtime:${binding.nodeId}:${binding.runtimeKind}`).then((c) => c?.model).catch(() => void 0) ?? void 0;
         const chatModelSource = sessionModelOverride ? "session_override" : chatResolvedModel ? "actor_config" : chatModel ? "runtime_default" : null;
-        const usedRel = /* @__PURE__ */ new Set();
-        const preparedAttachments = await buildChatAttachmentFiles(attachments, (ref2) => assets.get(ref2), usedRel);
-        for (const miss of preparedAttachments.missing) {
-          console.warn(`[chat] \u9644\u4EF6 blob ${miss.blobRef} \u8BFB\u53D6\u5931\u8D25: ${miss.error}`);
-        }
-        const attachmentFiles = { ...preparedAttachments.files };
+        const attachmentFiles = { ...preparedAttachments.files, ...restore ? { "SESSION_FILES.md": restore.index } : {} };
         const attachmentBinary = { ...preparedAttachments.binaryFiles };
         const attachmentPaths = [...preparedAttachments.paths];
         let turnProject = priorChatSession ? { state: "none" } : { state: "unknown" };
         if (priorChatSession?.projectId) {
           const projectId2 = priorChatSession.projectId;
-          const projectBundle = await projectStateFor(runCompanyId).then((projects) => buildChatProjectBundle(projectId2, projects, (blobId) => assets.get(blobId))).catch((err) => {
+          const projectBundle = await projectStateFor(runCompanyId).then((projects) => buildChatProjectBundle(projectId2, projects, (blobId) => readChatFileBlob(runCompanyId, blobId))).catch((err) => {
             console.warn(`[chat] \u8BFB\u9879\u76EE ${projectId2} \u5931\u8D25\uFF08\u672C\u8F6E\u4E0D\u5199\u9879\u76EE\u6BB5\uFF09: ${String(err)}`);
             return void 0;
           });
@@ -265885,7 +266276,7 @@ async function startServe(opts) {
           ...actorCtx?.config?.prompt ? { personaPrompt: actorCtx.config.prompt } : {},
           ...extraSystemPrompt ? { expertSystemPrompt: extraSystemPrompt } : {}
         });
-        const taskHeader = chatPrompts.taskHeaderLines;
+        const taskHeader = [...chatPrompts.taskHeaderLines, ...restore ? ["\u672C\u4F1A\u8BDD\u7684\u5386\u53F2\u6587\u4EF6\u4E0E\u5DF2\u4FDD\u5B58\u4EA7\u51FA\u89C1 SESSION_FILES.md\uFF0C\u53EF\u6309\u5217\u51FA\u7684\u76F8\u5BF9\u8DEF\u5F84\u8BFB\u53D6\u3002"] : []];
         const chatMemoryEnabled = !isolatedKnowledgeTurn && actorCtx?.memoryEnabled !== false;
         const chatMemorySvc = chatMemoryEnabled ? await actorMemoryFor(runCompanyId).catch(() => void 0) : void 0;
         const chatMemoryLines = chatMemorySvc ? await chatMemorySvc.list({ actorId }, { scope: "all", keywords: ngramQueryTerms([message]), limit: MEMORY_INJECT_MAX, offset: 0 }).then((out) => [...memoryIndexLines(out.items), ...memoryHowToLines()]).catch(() => []) : [];
@@ -265930,7 +266321,7 @@ async function startServe(opts) {
           actor: actorId,
           actorToken: issueSessionToken(actorId, { artifactId, action: "chat", limits, binding, sessionId: runtimeSessionId, companyId: runCompanyId, ...requestDispatchId ? { dispatchId: requestDispatchId } : {}, ...chatSessionId !== void 0 ? { chatSessionId } : {} }),
           artifactId,
-          bundle: { files, ...Object.keys(attachmentBinary).length ? { binaryFiles: attachmentBinary } : {} },
+          bundle: { files, ...Object.keys(attachmentBinary).length ? { binaryFiles: attachmentBinary } : {}, ...restore ? { restoreFiles: restore.restoreFiles } : {} },
           // 人设在最前，固定规则接在它后面：助理那侧是分流正文（§6.5.3，只有普通脑暴那一支有），
           // 专家那侧是 `EXPERT_DELEGATION_SYSTEM_PROMPT`（§6.5.7）。**三者都走 systemPrompt**——
           // 放进 TASK.md 会随 `--resume` 每轮重复、O(N) 累积（§6.1.5）。
@@ -266063,10 +266454,11 @@ async function startServe(opts) {
               }
             });
             const failed = !isHealthySessionExit(info);
-            if (!failed) resolve10();
-            else {
-              reject(buildChatExitError(info));
-            }
+            const recordRestore = turnChatStore && chatSessionId ? recordSessionFileRestoreExit(turnChatStore, chatSessionId, info) : Promise.resolve();
+            void recordRestore.then(() => {
+              if (!failed) resolve10();
+              else reject(buildChatExitError(info));
+            }, (error2) => reject(error2));
           });
         });
         return {
@@ -266255,6 +266647,8 @@ async function startServe(opts) {
         onCompanyError: chatRecoveryCompanyWarn(opts2.label),
         // 重挂的那一轮收口时当场外报，与清扫拍同一个接收方（见 `notifyChatTurnSettled`）。
         onTurnSettled: (info) => notifyChatTurnSettled(info),
+        // 重挂 / 已收口两条路收尾时出产出卡（公司由扇出层按行绑）。
+        sessionOutputsScan,
         liveChat,
         trace: runRoutedTrace,
         traceHealth,
@@ -266410,6 +266804,7 @@ async function startServe(opts) {
               listCompanies: chatRecoveryCompanies,
               storesFor: chatRecoveryFor,
               onCompanyError: chatRecoveryCompanyWarn("exit \u5BF9\u8D26"),
+              sessionOutputsScan,
               drainStash: (id) => chatRemoteAdapter?.drainStash(id) ?? { frames: [] },
               log: (m2) => console.log(m2)
             });
@@ -266478,6 +266873,7 @@ async function startServe(opts) {
           listCompanies: chatRecoveryCompanies,
           storesFor: chatRecoveryFor,
           onCompanyError: chatRecoveryCompanyWarn("chat-sweep"),
+          sessionOutputsScan,
           getRun: (id) => fanOutTrace.getRun(id),
           ownedRunId: (sid) => liveChat.runFor(sid),
           now: Date.now(),
@@ -266510,7 +266906,12 @@ async function startServe(opts) {
       storesFor: async (companyId) => {
         const turns = await chatTurnsFor(companyId);
         const messages = await chatStoreFor(companyId);
-        return { turns, ...assistantRowRecovery(messages) };
+        return {
+          turns,
+          ...assistantRowRecovery(messages, {
+            outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId)
+          })
+        };
       },
       getRun: (id) => fanOutTrace.getRun(id),
       // 本进程在飞的轮不动——它自己的收尾路径会写终态（liveChat 只认人工/渠道那条，自动化轮
@@ -266803,7 +267204,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto80.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -266888,7 +267289,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto80.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -267266,7 +267667,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto77.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto80.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -268904,7 +269305,9 @@ async function runSession(dispatchId, job, deps) {
       deps.sink.stream({ type: "session_live_event", dispatchId, event });
       normalizer.onLiveEvent(event);
     });
+    let restoreFailedBeforeStart = false;
     handle.onExit((info) => {
+      if (info.fileRestoreError) restoreFailedBeforeStart = true;
       normalizer.turnFinished(isHealthySessionExit(info) ? "completed" : "failed");
       log2("[node-cli]", `  \u25A0 session_exited  id=${handle.id}  code=${info.code ?? "killed"}  total=${Date.now() - t0}ms`);
       if (info.transcriptRef) log2("[node-cli]", `  transcript: ${info.transcriptRef}`);
@@ -268914,7 +269317,7 @@ async function runSession(dispatchId, job, deps) {
     if (cancelledBeforeStart) {
       log2("[node-cli]", `  dispatch ${dispatchId} \u5728 setup \u671F\u95F4\u5DF2\u88AB fencing\uFF0Cspawn \u540E\u7ACB\u5373 kill`);
       await handle.kill();
-    } else {
+    } else if (!restoreFailedBeforeStart) {
       log2("[node-cli]", `  \u2192 session_started  id=${handle.id}  setup=${Date.now() - t0}ms`);
       deps.sink.keyFrame({ type: "session_started", dispatchId, sessionId: handle.id, jobArtifactId: job.artifactId });
     }
@@ -268922,7 +269325,12 @@ async function runSession(dispatchId, job, deps) {
     deps.onFailure?.();
     log2("[node-cli]", `  spawn failed: ${err}`);
     const errorMessage = String(err?.stack ?? err).slice(0, 8e3);
-    deps.sink.keyFrame({ type: "session_exited", dispatchId, sessionId: "spawn-failed", info: { code: null, reason: "error", errorMessage } });
+    deps.sink.keyFrame({ type: "session_exited", dispatchId, sessionId: "spawn-failed", info: {
+      code: null,
+      reason: "error",
+      errorMessage,
+      ...err instanceof BundleRestoreError ? { fileRestoreError: { path: err.filePath, message: err.message } } : {}
+    } });
   }
 }
@@ -269213,8 +269621,9 @@ var SessionProcessState = class {
 // ../cli/src/daemon/ws-client.ts
 init_wrapper();
+init_src();
 var import_node_os9 = require("node:os");
-var import_node_crypto78 = require("node:crypto");
+var import_node_crypto81 = require("node:crypto");
 init_src8();
 init_src6();
@@ -269495,10 +269904,15 @@ async function handleWorkdirRead(req) {
         const fresh = await fh.stat().catch(() => null);
         return { ok: false, code: "TOO_LARGE", size: Math.max(fresh?.size ?? 0, bytesRead), absPath: real };
       }
+      const afterRead = await fh.stat();
+      if (afterRead.size !== st.size || afterRead.mtimeMs !== st.mtimeMs) {
+        return { ok: false, code: "INTERNAL", message: "\u6587\u4EF6\u5728\u8BFB\u53D6\u671F\u95F4\u53D1\u751F\u53D8\u5316" };
+      }
       const bytes2 = buf.subarray(0, bytesRead);
       return {
         ok: true,
         contentBase64: bytes2.toString("base64"),
+        mtime: st.mtime.toISOString(),
         contentType: contentTypeFor(real, bytes2),
         size: bytes2.length
         // 以实际读到的字节数为准，不用任何可能已过时的 stat size
@@ -269751,6 +270165,7 @@ var DaemonWsClient = class {
   connect() {
     if (this.stopped) return;
     const ws = new import_websocket.default(this.serverUrl, {
+      maxPayload: 4 * Math.ceil(FILE_CONTENT_MAX_BYTES / 3) + 64 * 1024,
       headers: {
         "x-daemon-id": this.daemonId,
         // 经公网网关时鉴权靠它（对齐 multica：Authorization 头反代天然透传）；内网直连可空
@@ -269986,7 +270401,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto78.randomUUID)();
+    const requestId = (0, import_node_crypto81.randomUUID)();
     return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -270128,6 +270543,7 @@ var DaemonWsClient = class {
       supportsNormalizedEvents: true,
       // ADR 0554：本 daemon 认 `workdir_walk`。恒 true——handler 随包发，装了这版就一定有。
       supportsWorkdirWalk: true,
+      supportsFileRestore: true,
       ...activeSessions.length > 0 ? { activeSessions } : {},
       // 始终带字段（空数组也带）作为新协议能力标志；服务端仅对支持该字段的节点做缺席确认。
       pendingDispatchIds: [...this.pendingDispatchIds]
@@ -270388,7 +270804,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process21 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
-var import_node_crypto79 = require("node:crypto");
+var import_node_crypto82 = require("node:crypto");
 var import_node_os12 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -270454,7 +270870,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto79.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto82.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
@@ -271465,7 +271881,7 @@ var COMMAND_DECLS = {
     flags: [
       { name: "name", desc: "\u9879\u76EE\u540D", required: true },
       { name: "goal", desc: "\u9879\u76EE\u76EE\u6807" },
-      { name: "slug", desc: "URL slug" },
+      { name: "slug", desc: "\u81EA\u5B9A\u4E49\u9879\u76EE id\uFF08\u53EF\u9009\uFF09\u3002\u4E0D\u7ED9\u5219\u968F\u673A\u751F\u6210 proj_xxxxxxxx\uFF1B\u7ED9\u4E86\u4E14\u8BE5 id \u5DF2\u5B58\u5728\uFF0C\u8FD4\u56DE\u7684\u662F\u5DF2\u6709\u9879\u76EE\uFF08\u4F1A\u63D0\u793A\uFF09" },
       { name: "members", desc: "\u6210\u5458 JSON \u6570\u7EC4" }
     ],
     examples: ['oasis project create --name "My Project" --goal "\u6784\u5EFA\u534F\u4F5C\u5E73\u53F0"']
@@ -272225,13 +272641,13 @@ function ownFlagsFromDecl(command) {
 }
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto80 = require("node:crypto");
+var import_node_crypto83 = require("node:crypto");
 var import_node_child_process22 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto80.createHash)("sha256").update(canonical).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto83.createHash)("sha256").update(canonical).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -272467,7 +272883,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto81.randomUUID)();
+  const waiterId = (0, import_node_crypto84.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -272890,7 +273306,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path35.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto81.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto84.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -273914,7 +274330,8 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         const name = need(flags, "name").trim();
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
-        const id = projectSlug(flags.get("slug") ?? name);
+        const slug6 = flags.get("slug");
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto84.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -273922,6 +274339,9 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
           ...flags.has("members") ? { member_ids: parseStringArrayFlag(flags.get("members"), "members") } : {}
         });
         println(JSON.stringify(result, null, 2));
+        if (typeof result?.name === "string" && result.name !== name) {
+          println(`\u26A0\uFE0F \u9879\u76EE id\u300C${result.project_id ?? id}\u300D\u5DF2\u88AB\u300C${result.name}\u300D\u5360\u7528\uFF0C\u4E0A\u9762\u8FD4\u56DE\u7684\u662F\u90A3\u4E2A\u5DF2\u6709\u9879\u76EE\uFF0C\u6CA1\u6709\u65B0\u5EFA\u3002\u6362\u4E00\u4E2A --slug \u6216\u53BB\u6389 --slug \u91CD\u8BD5\u3002`);
+        }
         break;
       }
       if (positional[0] === "member") {
@@ -275903,13 +276323,13 @@ var LEGACY_SYSTEMD_UNIT = "oasis-node.service";
 var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 // src/install.ts
-var import_node_crypto82 = require("node:crypto");
+var import_node_crypto85 = require("node:crypto");
 var fs44 = __toESM(require("node:fs"));
 var path39 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto82.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto85.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -276032,7 +276452,7 @@ function shimScript() {
 }
 // src/index.ts
-var PKG_VERSION = true ? "2.2.34" : "dev";
+var PKG_VERSION = true ? "2.2.36" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -276317,7 +276737,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto83.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto86.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }