oasis_test_v2 2.2.34 → 2.2.36

package/dist/index.js

@@ -149,6 +149,9 @@ function normalizeGitRemote(remote) {
 function projectActorKind(actorId) {
   return actorId.startsWith("actor:human:") ? "human" : "agent";
 }
+function projectIdFromUuid(uuid2) {
+  return `proj_${uuid2.replace(/-/g, "").slice(0, 8)}`;
+}
 var init_project = __esm({
   "../contract/src/project.ts"() {
     "use strict";
@@ -22500,6 +22503,43 @@ var init_sync_skills = __esm({
 
 // ../adapters/src/_core/materialize-bundle.ts
 function materializeBundle(dir, bundle) {
+  for (const [rel, entry] of Object.entries(bundle.restoreFiles ?? {})) {
+    try {
+      const parts = rel.split("/");
+      if (!rel || path3.isAbsolute(rel) || rel.includes("\\") || parts.some((p2) => !p2 || p2 === "." || p2 === "..")) {
+        throw new Error("\u975E\u6CD5\u76F8\u5BF9\u8DEF\u5F84");
+      }
+      let parent = fs3.realpathSync(dir);
+      for (const component of parts.slice(0, -1)) {
+        parent = path3.join(parent, component);
+        if (!fs3.existsSync(parent)) fs3.mkdirSync(parent);
+        const st = fs3.lstatSync(parent);
+        if (st.isSymbolicLink() || !st.isDirectory()) throw new Error("\u6062\u590D\u8DEF\u5F84\u5305\u542B\u975E\u76EE\u5F55\u6216\u8F6F\u94FE\u63A5");
+      }
+      const file = path3.join(parent, parts.at(-1));
+      let exists = false;
+      try {
+        const st = fs3.lstatSync(file);
+        if (!st.isFile() || st.isSymbolicLink()) throw new Error("\u6062\u590D\u76EE\u6807\u4E0D\u662F\u666E\u901A\u6587\u4EF6");
+        exists = true;
+      } catch (error2) {
+        if (error2.code !== "ENOENT") throw error2;
+      }
+      if (entry.requireExisting && !exists) throw new Error("\u4E0A\u6B21\u672A\u4FDD\u5B58\u7684\u6587\u4EF6\u5DF2\u4E0D\u5728\u672C\u8282\u70B9\uFF0C\u65E0\u6CD5\u6062\u590D\u6700\u65B0\u7248");
+      if (exists && !entry.overwrite) continue;
+      const bytes2 = Buffer.from(entry.contentBase64, "base64");
+      if ((0, import_node_crypto6.createHash)("sha256").update(bytes2).digest("hex") !== entry.sha256) throw new Error("\u5185\u5BB9\u6821\u9A8C\u5931\u8D25");
+      const temp = path3.join(parent, `.oasis-restore-${(0, import_node_crypto6.randomUUID)()}`);
+      try {
+        fs3.writeFileSync(temp, bytes2, { flag: "wx", mode: 384 });
+        fs3.renameSync(temp, file);
+      } finally {
+        fs3.rmSync(temp, { force: true });
+      }
+    } catch (error2) {
+      throw new BundleRestoreError(rel, error2 instanceof Error ? error2.message : String(error2));
+    }
+  }
   for (const [rel, content3] of Object.entries(bundle.files)) {
     const file = path3.join(dir, rel);
     fs3.mkdirSync(path3.dirname(file), { recursive: true });
@@ -22514,12 +22554,20 @@ function materializeBundle(dir, bundle) {
   if (!task) throw new Error("bundle \u7F3A TASK.md\uFF08\u88C5\u914D\u5668\u5951\u7EA6\uFF09");
   return task;
 }
-var fs3, path3;
+var fs3, path3, import_node_crypto6, BundleRestoreError;
 var init_materialize_bundle = __esm({
   "../adapters/src/_core/materialize-bundle.ts"() {
     "use strict";
     fs3 = __toESM(require("node:fs"), 1);
     path3 = __toESM(require("node:path"), 1);
+    import_node_crypto6 = require("node:crypto");
+    BundleRestoreError = class extends Error {
+      constructor(filePath, detail) {
+        super(`\u6587\u4EF6\u6062\u590D\u5931\u8D25 ${filePath}\uFF1A${detail}`);
+        this.filePath = filePath;
+        this.name = "BundleRestoreError";
+      }
+    };
   }
 });
 
@@ -22573,7 +22621,7 @@ function resolveWorkRoots(workRoot) {
 }
 function workdirSlug(workdirKey) {
   const safe = workdirKey.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 48);
-  const h = (0, import_node_crypto6.createHash)("sha256").update(workdirKey).digest("hex").slice(0, 8);
+  const h = (0, import_node_crypto7.createHash)("sha256").update(workdirKey).digest("hex").slice(0, 8);
   return `${safe}-${h}`;
 }
 function sessionDirFor(workRoot, runtimeKind, workdirKey) {
@@ -22705,11 +22753,11 @@ function prepareWorkdir(args) {
 function legacyChatSessionDir(workRoot, rtId) {
   return import_node_path.default.join(resolveLegacyWorkRoot(workRoot), "oasis-chat-sessions", rtId.replace(/[^a-zA-Z0-9_-]+/g, "_"));
 }
-var import_node_crypto6, import_node_fs2, import_node_os, import_node_path, META_FILE, LOCK_FILE, NEW_WORK_ROOT, slug3, LEGACY_ROOTS, LEGACY_ONESHOT_PREFIX;
+var import_node_crypto7, import_node_fs2, import_node_os, import_node_path, META_FILE, LOCK_FILE, NEW_WORK_ROOT, slug3, LEGACY_ROOTS, LEGACY_ONESHOT_PREFIX;
 var init_session_paths = __esm({
   "../adapters/src/_core/session-paths.ts"() {
     "use strict";
-    import_node_crypto6 = require("node:crypto");
+    import_node_crypto7 = require("node:crypto");
     import_node_fs2 = __toESM(require("node:fs"), 1);
     import_node_os = __toESM(require("node:os"), 1);
     import_node_path = __toESM(require("node:path"), 1);
@@ -22737,7 +22785,7 @@ function executionEnvHash(p2) {
     binPkg: p2.binPackageDir ?? null,
     extraRo: [...p2.extraRoBindDirs ?? []].sort()
   });
-  return (0, import_node_crypto7.createHash)("sha256").update(material).digest("hex").slice(0, 16);
+  return (0, import_node_crypto8.createHash)("sha256").update(material).digest("hex").slice(0, 16);
 }
 function persistContainerName(workdirKey) {
   return `oasis-wd-${workdirSlug(workdirKey)}`;
@@ -22857,11 +22905,11 @@ function wrapForContainer(p2) {
 function killContainerArgs(containerName) {
   return ["kill", containerName];
 }
-var import_node_crypto7, path5, CONTAINER_DEFAULT_PATH, CONTAINER_HOME, EE_HASH_LABEL;
+var import_node_crypto8, path5, CONTAINER_DEFAULT_PATH, CONTAINER_HOME, EE_HASH_LABEL;
 var init_container_wrap = __esm({
   "../adapters/src/_core/container-wrap.ts"() {
     "use strict";
-    import_node_crypto7 = require("node:crypto");
+    import_node_crypto8 = require("node:crypto");
     path5 = __toESM(require("node:path"), 1);
     init_session_paths();
     CONTAINER_DEFAULT_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
@@ -23589,12 +23637,12 @@ function classifyExit(result) {
   if (status === 429 || status === 529) return "rate-limit";
   return "error";
 }
-var import_node_child_process3, import_node_crypto8, fs7, path7, readline, CLAUDE_BLOCKED_FLAGS, SUBAGENT_TRANSCRIPT_MAX_BYTES, SUBAGENT_TERMINAL, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
+var import_node_child_process3, import_node_crypto9, fs7, path7, readline, CLAUDE_BLOCKED_FLAGS, SUBAGENT_TRANSCRIPT_MAX_BYTES, SUBAGENT_TERMINAL, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
 var init_claude_code = __esm({
   "../adapters/src/claude-code/index.ts"() {
     "use strict";
     import_node_child_process3 = require("node:child_process");
-    import_node_crypto8 = require("node:crypto");
+    import_node_crypto9 = require("node:crypto");
     fs7 = __toESM(require("node:fs"), 1);
     path7 = __toESM(require("node:path"), 1);
     readline = __toESM(require("node:readline"), 1);
@@ -23674,7 +23722,7 @@ var init_claude_code = __esm({
       }
       async spawn(job) {
         const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-        const id = `claude-${slug6}-${(0, import_node_crypto8.randomUUID)().slice(0, 8)}`;
+        const id = `claude-${slug6}-${(0, import_node_crypto9.randomUUID)().slice(0, 8)}`;
         const dir = job.workdirKey ? prepareWorkdir({
           workRoot: this.opts.workRoot,
           runtimeKind: "claude",
@@ -24087,7 +24135,7 @@ var init_claude_code = __esm({
           const outgoing = report.failed.length ? appendMaterializeWarning(input.text, report) : input.text;
           if (input.interrupt) writeInterrupt();
           diag("append_accepted", { writes, results, interrupt: !!input.interrupt, chars: input.text.length });
-          const receiptId = input.requireConsumptionReceipt ? (0, import_node_crypto8.randomUUID)() : void 0;
+          const receiptId = input.requireConsumptionReceipt ? (0, import_node_crypto9.randomUUID)() : void 0;
           if (receiptId) pendingInputReceipts.set(receiptId, input.clientMessageKey);
           const ok3 = writeUserMessage(outgoing, receiptId);
           if (!ok3 && receiptId) pendingInputReceipts.delete(receiptId);
@@ -24227,7 +24275,12 @@ function withResilience(inner, cfg = {}) {
           try {
             handle = await inner.spawn(job);
           } catch (err) {
-            finish({ code: null, reason: "error", errorMessage: errText(err) });
+            finish({
+              code: null,
+              reason: "error",
+              errorMessage: errText(err),
+              ...err instanceof BundleRestoreError ? { fileRestoreError: { path: err.filePath, message: err.message } } : {}
+            });
             return;
           }
           const { info, produced } = await runOnce(handle);
@@ -24301,6 +24354,7 @@ var RETRYABLE, sleep2;
 var init_resilient = __esm({
   "../adapters/src/_core/resilient.ts"() {
     "use strict";
+    init_materialize_bundle();
     init_src();
     RETRYABLE = /* @__PURE__ */ new Set(["rate-limit", "timeout", "server-unreachable"]);
     sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
@@ -24484,9 +24538,9 @@ function lockPathFor(cacheRoot, actorId) {
 }
 function aggregateSkillContentHash(files) {
   const sorted = [...files].sort((a, b2) => a.path.localeCompare(b2.path));
-  const hasher = (0, import_node_crypto9.createHash)("sha256");
+  const hasher = (0, import_node_crypto10.createHash)("sha256");
   for (const f2 of sorted) {
-    const blob = (0, import_node_crypto9.createHash)("sha256").update(f2.content).digest("hex");
+    const blob = (0, import_node_crypto10.createHash)("sha256").update(f2.content).digest("hex");
     hasher.update(f2.path);
     hasher.update("\0");
     hasher.update(blob);
@@ -24714,11 +24768,11 @@ async function verifyPendingLink(skillsDir, name, pend, log3) {
   }
   return true;
 }
-var import_node_crypto9, fsp, os4, path8, MANIFEST_SCHEMA_VERSION, STALE_LOCK_MS, LOCK_ACQUIRE_TIMEOUT_MS, LOCK_POLL_MS;
+var import_node_crypto10, fsp, os4, path8, MANIFEST_SCHEMA_VERSION, STALE_LOCK_MS, LOCK_ACQUIRE_TIMEOUT_MS, LOCK_POLL_MS;
 var init_skill_cache = __esm({
   "../adapters/src/_core/skill-cache.ts"() {
     "use strict";
-    import_node_crypto9 = require("node:crypto");
+    import_node_crypto10 = require("node:crypto");
     fsp = __toESM(require("node:fs/promises"), 1);
     os4 = __toESM(require("node:os"), 1);
     path8 = __toESM(require("node:path"), 1);
@@ -25367,7 +25421,7 @@ function isResponse(message) {
 }
 async function runProtocolSession(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-  const id = `${cfg.runtimeKind}-${slug6}-${(0, import_node_crypto10.randomUUID)().slice(0, 8)}`;
+  const id = `${cfg.runtimeKind}-${slug6}-${(0, import_node_crypto11.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind,
@@ -25610,12 +25664,12 @@ async function runProtocolSession(job, cfg) {
     }
   };
 }
-var import_node_child_process6, import_node_crypto10, path9, ProtocolCommandRejected, ProtocolSessionClosing;
+var import_node_child_process6, import_node_crypto11, path9, ProtocolCommandRejected, ProtocolSessionClosing;
 var init_protocol_session = __esm({
   "../adapters/src/_core/protocol-session.ts"() {
     "use strict";
     import_node_child_process6 = require("node:child_process");
-    import_node_crypto10 = require("node:crypto");
+    import_node_crypto11 = require("node:crypto");
     path9 = __toESM(require("node:path"), 1);
     init_claude_code();
     init_container_runtime();
@@ -26074,13 +26128,13 @@ function codexTurnErrorMessage(value2) {
   const detail = typeof error2?.additionalDetails === "string" ? error2.additionalDetails.trim() : "";
   return [summary, detail].filter(Boolean).join("\n").slice(0, 4e3);
 }
-var import_node_child_process7, import_node_crypto11, fs8, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CODEX_APP_SERVER_BLOCKED_FLAGS, CodexAdapter;
+var import_node_child_process7, import_node_crypto12, fs8, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CODEX_APP_SERVER_BLOCKED_FLAGS, CodexAdapter;
 var init_codex = __esm({
   "../adapters/src/codex/index.ts"() {
     "use strict";
     import_node_child_process7 = require("node:child_process");
     init_container_runtime();
-    import_node_crypto11 = require("node:crypto");
+    import_node_crypto12 = require("node:crypto");
     fs8 = __toESM(require("node:fs"), 1);
     os5 = __toESM(require("node:os"), 1);
     path10 = __toESM(require("node:path"), 1);
@@ -26368,7 +26422,7 @@ ${task}` : task;
       }
       async spawnExec(job) {
         const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-        const id = `codex-${slug6}-${(0, import_node_crypto11.randomUUID)().slice(0, 8)}`;
+        const id = `codex-${slug6}-${(0, import_node_crypto12.randomUUID)().slice(0, 8)}`;
         const startedAtMs = Date.now();
         const dir = job.workdirKey ? prepareWorkdir({
           workRoot: this.opts.workRoot,
@@ -27179,7 +27233,7 @@ async function runACPSession(job, cfg) {
   }
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
   const binTag = path11.basename(cfg.bin).replace(/[^a-zA-Z0-9]/g, "").slice(0, 12) || "acp";
-  const id = `${binTag}-${slug6}-${(0, import_node_crypto12.randomUUID)().slice(0, 8)}`;
+  const id = `${binTag}-${slug6}-${(0, import_node_crypto13.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind ?? "subprocess",
@@ -27592,12 +27646,12 @@ ${task}` : task;
     return run;
   }
 }
-var import_node_child_process8, import_node_crypto12, fs9, path11, readline3, ACPClient, LEGACY_APPROVE_OPTION_ID;
+var import_node_child_process8, import_node_crypto13, fs9, path11, readline3, ACPClient, LEGACY_APPROVE_OPTION_ID;
 var init_acp = __esm({
   "../adapters/src/_core/acp.ts"() {
     "use strict";
     import_node_child_process8 = require("node:child_process");
-    import_node_crypto12 = require("node:crypto");
+    import_node_crypto13 = require("node:crypto");
     fs9 = __toESM(require("node:fs"), 1);
     path11 = __toESM(require("node:path"), 1);
     readline3 = __toESM(require("node:readline"), 1);
@@ -28430,7 +28484,7 @@ var init_pdeathsig = __esm({
 // ../adapters/src/_core/subprocess.ts
 async function materialize(job, cfg) {
   const slug6 = job.artifactId.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32);
-  const id = `${slug6}-${(0, import_node_crypto13.randomUUID)().slice(0, 8)}`;
+  const id = `${slug6}-${(0, import_node_crypto14.randomUUID)().slice(0, 8)}`;
   const dir = job.workdirKey ? prepareWorkdir({
     workRoot: cfg.workRoot,
     runtimeKind: cfg.runtimeKind ?? "subprocess",
@@ -28723,12 +28777,12 @@ async function runOneShotText(job, cfg) {
     }
   });
 }
-var import_node_child_process10, import_node_crypto13, fs11, path13, readline4;
+var import_node_child_process10, import_node_crypto14, fs11, path13, readline4;
 var init_subprocess = __esm({
   "../adapters/src/_core/subprocess.ts"() {
     "use strict";
     import_node_child_process10 = require("node:child_process");
-    import_node_crypto13 = require("node:crypto");
+    import_node_crypto14 = require("node:crypto");
     fs11 = __toESM(require("node:fs"), 1);
     path13 = __toESM(require("node:path"), 1);
     readline4 = __toESM(require("node:readline"), 1);
@@ -28785,11 +28839,11 @@ function normalizeOpenClaw(line, state) {
   const text5 = (r.payloads ?? []).map((pl) => pl?.text ?? "").filter(Boolean).join("\n");
   return text5 ? [{ kind: "message", payload: { text: text5 }, outputText: text5 }] : [];
 }
-var import_node_crypto14, isTopLevelClose, OpenClawAdapter;
+var import_node_crypto15, isTopLevelClose, OpenClawAdapter;
 var init_openclaw = __esm({
   "../adapters/src/openclaw/index.ts"() {
     "use strict";
-    import_node_crypto14 = require("node:crypto");
+    import_node_crypto15 = require("node:crypto");
     init_subprocess();
     isTopLevelClose = (line) => line === "}" || line === "}\r";
     OpenClawAdapter = class {
@@ -28798,7 +28852,7 @@ var init_openclaw = __esm({
       }
       spawn(job) {
         const opts = this.opts;
-        const sessionId = job.runtimeSessionId ?? `oasis-${(0, import_node_crypto14.randomUUID)().slice(0, 8)}`;
+        const sessionId = job.runtimeSessionId ?? `oasis-${(0, import_node_crypto15.randomUUID)().slice(0, 8)}`;
         return runStreamJson(job, {
           model: job.model ?? opts.model,
           bin: opts.openClawBin ?? "openclaw",
@@ -29599,6 +29653,7 @@ var init_src6 = __esm({
     init_workdir_gc();
     init_gc_loop();
     init_normalizer2();
+    init_materialize_bundle();
   }
 });
 
@@ -29954,7 +30009,7 @@ function chatItemsDoubleWriteEnabled(env = process.env) {
   return raw !== "" && raw !== "0" && raw !== "false" && raw !== "off" && raw !== "no";
 }
 function fallbackTurnId(runId) {
-  return runId ? `chat-run-turn:${runId}` : `local-turn:${(0, import_node_crypto15.randomUUID)()}`;
+  return runId ? `chat-run-turn:${runId}` : `local-turn:${(0, import_node_crypto16.randomUUID)()}`;
 }
 async function resolveChatItemsTurnId(items, messageId, fallback) {
   const existing = await items.listItemsByMessage(messageId).catch(() => []);
@@ -29973,20 +30028,20 @@ function projectsIntoContent(kind, role, origin, telemetryTextInContent, attrs =
       return true;
   }
 }
-var import_node_crypto15, CHAT_ITEMS_DOUBLE_WRITE_ENV, SEGMENT_END_NOTE, ChatItemLedger;
+var import_node_crypto16, CHAT_ITEMS_DOUBLE_WRITE_ENV, SEGMENT_END_NOTE, ChatItemLedger;
 var init_chat_item_ledger = __esm({
   "../server/src/chat-item-ledger.ts"() {
     "use strict";
     init_src();
     init_subagent_cost();
     init_chat_item();
-    import_node_crypto15 = require("node:crypto");
+    import_node_crypto16 = require("node:crypto");
     CHAT_ITEMS_DOUBLE_WRITE_ENV = "OASIS_CHAT_ITEMS_DOUBLE_WRITE";
     SEGMENT_END_NOTE = "\u672C\u6BB5\u65E0\u8F93\u51FA\uFF08\u4EBA\u5728\u9996\u4E2A\u6B63\u6587\u4E4B\u524D\u63D2\u4E86\u8BDD\uFF09";
     ChatItemLedger = class {
       constructor(deps) {
         this.deps = deps;
-        this.newId = deps.newId ?? import_node_crypto15.randomUUID;
+        this.newId = deps.newId ?? import_node_crypto16.randomUUID;
         this.now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
         this.log = deps.log ?? ((m2) => console.warn(m2));
         this.messageId = deps.messageId ?? null;
@@ -30606,7 +30661,7 @@ var init_chat_parts = __esm({
 async function openAssistantRunningRow(deps) {
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   if (typeof deps.chatStore.appendMessage !== "function") return void 0;
-  const id = (0, import_node_crypto16.randomUUID)();
+  const id = (0, import_node_crypto17.randomUUID)();
   const at = now();
   try {
     await deps.chatStore.appendMessage({
@@ -30650,7 +30705,7 @@ async function finalizeAssistantRow(deps) {
   if (typeof deps.chatStore.appendMessage !== "function") return;
   try {
     await deps.chatStore.appendMessage({
-      id: (0, import_node_crypto16.randomUUID)(),
+      id: (0, import_node_crypto17.randomUUID)(),
       sessionId: deps.chatSessionId,
       role: "assistant",
       content: deps.content,
@@ -30664,6 +30719,13 @@ async function finalizeAssistantRow(deps) {
   } catch {
   }
 }
+function outputsPartProvider(scan2, chatSessionId, companyId) {
+  if (!scan2) return void 0;
+  return async () => {
+    const files = await scan2({ chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
+    return files && files.length > 0 ? { type: "outputs", seq: 0, outputs: files } : null;
+  };
+}
 async function appendOutputsPart(parts, provider) {
   if (!provider) return parts;
   const part = await provider().catch(() => null);
@@ -30907,11 +30969,11 @@ function runBackgroundAssistantChatTurn(deps) {
     });
   })().catch(() => void 0);
 }
-var import_node_crypto16;
+var import_node_crypto17;
 var init_chat_assistant_turn = __esm({
   "../server/src/chat-assistant-turn.ts"() {
     "use strict";
-    import_node_crypto16 = require("node:crypto");
+    import_node_crypto17 = require("node:crypto");
     init_src6();
     init_chat_item_ledger();
     init_chat_parts();
@@ -30929,7 +30991,7 @@ async function openChatTurn(args) {
   const turns = args.turns;
   if (!turns) return { ok: true, turn: null };
   const nowIso = args.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  const turnId = (args.newId ?? import_node_crypto17.randomUUID)();
+  const turnId = (args.newId ?? import_node_crypto18.randomUUID)();
   const messageKey = localTurnMessageKey(args.source, turnId);
   const claim = await turns.claimTurn({
     turnId,
@@ -30963,7 +31025,7 @@ async function openChatTurn(args) {
     }
   };
 }
-function assistantRowRecovery(chatStore) {
+function assistantRowRecovery(chatStore, opts = {}) {
   const rowOf = async (turn) => {
     const runId = turn.assistantRunId;
     if (!runId) return null;
@@ -30979,20 +31041,27 @@ function assistantRowRecovery(chatStore) {
 
 ` : "";
       const content3 = patch.status === "error" ? `${partial2}${ORPHANED_TURN_ASSISTANT_NOTICE}` : row.content ?? "";
+      const outputsPart = opts.outputsPartFor?.(turn.chatSessionId);
       await finalizeAssistantRow({
         chatStore,
         chatSessionId: turn.chatSessionId,
         assistantMsgId: row.id,
         content: content3,
-        parts: [],
+        // 不扫产出时照旧传空：finalize 对空 parts 不写这一列，行上原有的 parts 不动。
+        // 要扫就必须带上原有 parts——否则扫到产出时写回去的只剩一张卡，这一轮的过程记录被冲掉。
+        parts: outputsPart ? existingParts(row.parts) : [],
         status: patch.status,
         ...turn.assistantRunId ? { runId: turn.assistantRunId } : {},
         turnId: turn.id,
-        now: () => patch.completedAt
+        now: () => patch.completedAt,
+        ...outputsPart ? { outputsPart } : {}
       });
     }
   };
 }
+function existingParts(parts) {
+  return Array.isArray(parts) ? parts.filter((p2) => p2 && typeof p2 === "object" && typeof p2.type === "string") : [];
+}
 async function reconcileChatTurn(turn, deps) {
   if (deps.isOwned?.(turn)) return { settled: false, turnId: turn.id, reason: "owned" };
   const rowStatus = deps.assistantRowStatus ? await deps.assistantRowStatus(turn).catch(() => null) : null;
@@ -31097,11 +31166,11 @@ async function sweepStaleChatTurnsAcrossCompanies(deps) {
   }
   return settled;
 }
-var import_node_crypto17, ORPHANED_TURN_ASSISTANT_NOTICE;
+var import_node_crypto18, ORPHANED_TURN_ASSISTANT_NOTICE;
 var init_chat_turn_gate = __esm({
   "../server/src/chat-turn-gate.ts"() {
     "use strict";
-    import_node_crypto17 = require("node:crypto");
+    import_node_crypto18 = require("node:crypto");
     init_chat_assistant_turn();
     ORPHANED_TURN_ASSISTANT_NOTICE = "\u8FD9\u4E00\u8F6E\u6CA1\u6709\u6B63\u5E38\u7ED3\u675F\uFF08\u670D\u52A1\u7AEF\u8FDB\u7A0B\u4E2D\u65AD\uFF09\uFF0C\u6CA1\u6709\u4EA7\u751F\u56DE\u590D\u3002\u4F60\u53EF\u4EE5\u518D\u95EE\u4E00\u6B21\u3002";
   }
@@ -31313,11 +31382,11 @@ var init_parse = __esm({
 
 // ../channels/src/feishu/crypto.ts
 function decryptFeishu(encrypt, encryptKey) {
-  const key = (0, import_node_crypto18.createHash)("sha256").update(encryptKey).digest();
+  const key = (0, import_node_crypto19.createHash)("sha256").update(encryptKey).digest();
   const data = Buffer.from(encrypt, "base64");
   const iv = data.subarray(0, 16);
   const ciphertext = data.subarray(16);
-  const decipher = (0, import_node_crypto18.createDecipheriv)("aes-256-cbc", key, iv);
+  const decipher = (0, import_node_crypto19.createDecipheriv)("aes-256-cbc", key, iv);
   decipher.setAutoPadding(true);
   return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
 }
@@ -31351,11 +31420,11 @@ function verifyToken(decoded, expected) {
   const token = headerToken ?? decoded["token"];
   return token === expected;
 }
-var import_node_crypto18;
+var import_node_crypto19;
 var init_crypto = __esm({
   "../channels/src/feishu/crypto.ts"() {
     "use strict";
-    import_node_crypto18 = require("node:crypto");
+    import_node_crypto19 = require("node:crypto");
   }
 });
 
@@ -31491,11 +31560,11 @@ var init_src7 = __esm({
 function errMsg(e) {
   return e instanceof Error ? e.message : String(e);
 }
-var import_node_crypto19, FEISHU, ChannelService, CardStreamer;
+var import_node_crypto20, FEISHU, ChannelService, CardStreamer;
 var init_service = __esm({
   "../server/src/channels/service.ts"() {
     "use strict";
-    import_node_crypto19 = require("node:crypto");
+    import_node_crypto20 = require("node:crypto");
     init_chat_turn_gate();
     init_deletion();
     init_src7();
@@ -31577,7 +31646,7 @@ var init_service = __esm({
             return existing.chatSessionId;
           }
         }
-        const id = (0, import_node_crypto19.randomUUID)();
+        const id = (0, import_node_crypto20.randomUUID)();
         const now = this.now();
         if (cs) {
           const rt = await this.deps.resolveRuntime?.(a.aiActorId).catch(() => null);
@@ -31613,7 +31682,7 @@ var init_service = __esm({
         if (cs) {
           const sess = await cs.getSession(intent.chatSessionId).catch(() => null);
           resumeRt = sess?.runtimeSessionId ?? void 0;
-          await cs.appendMessage({ id: (0, import_node_crypto19.randomUUID)(), sessionId: intent.chatSessionId, role: "user", content: intent.message, createdAt: this.now() }, { source: "channels" }).catch(() => void 0);
+          await cs.appendMessage({ id: (0, import_node_crypto20.randomUUID)(), sessionId: intent.chatSessionId, role: "user", content: intent.message, createdAt: this.now() }, { source: "channels" }).catch(() => void 0);
         }
         const opened = await openChatTurn({
           turns: this.deps.chatTurns,
@@ -31651,7 +31720,7 @@ var init_service = __esm({
             const reply = streamer.text();
             if (reply || session.runId) {
               await cs.appendMessage({
-                id: (0, import_node_crypto19.randomUUID)(),
+                id: (0, import_node_crypto20.randomUUID)(),
                 sessionId: intent.chatSessionId,
                 role: "assistant",
                 content: reply,
@@ -52730,7 +52799,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes13, createHash: createHash39 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash41 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -53398,7 +53467,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash39("sha1").update(key + GUID).digest("base64");
+        const digest = createHash41("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -53767,7 +53836,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash39 } = require("crypto");
+    var { createHash: createHash41 } = require("crypto");
     var extension3 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -54074,7 +54143,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash39("sha1").update(key + GUID).digest("base64");
+        const digest = createHash41("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -162288,13 +162357,13 @@ var init_chat_attachment_files = __esm({
 
 // ../server/src/domains/chat-sessions/append-now.ts
 async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, attachments, retainLocallyOnFailure = false) {
-  const newId = deps.newId ?? import_node_crypto20.randomUUID;
+  const newId = deps.newId ?? import_node_crypto21.randomUUID;
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   if (!deps.store.claimPendingInsert) {
     return { accepted: false, reason: "queue-unavailable", queued: false, delivered: "", batch: [] };
   }
   const { submitted, batch } = await deps.store.claimPendingInsert({
-    id: clientKey ? `append-request:${(0, import_node_crypto20.createHash)("sha256").update(JSON.stringify([chatSessionId, clientKey])).digest("hex")}` : newId(),
+    id: clientKey ? `append-request:${(0, import_node_crypto21.createHash)("sha256").update(JSON.stringify([chatSessionId, clientKey])).digest("hex")}` : newId(),
     chatSessionId,
     text: text5,
     ...attachments?.length ? { attachments } : {},
@@ -162350,11 +162419,11 @@ async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, atta
   }
   return { ...res, queued: !returnToClient, delivered: merged, batch, ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {} };
 }
-var import_node_crypto20;
+var import_node_crypto21;
 var init_append_now = __esm({
   "../server/src/domains/chat-sessions/append-now.ts"() {
     "use strict";
-    import_node_crypto20 = require("node:crypto");
+    import_node_crypto21 = require("node:crypto");
     init_chat_attachment_files();
   }
 });
@@ -163027,7 +163096,7 @@ function slug5(name) {
   return s2 || "user";
 }
 function short6() {
-  return (0, import_node_crypto21.randomBytes)(4).toString("hex").slice(0, 6);
+  return (0, import_node_crypto22.randomBytes)(4).toString("hex").slice(0, 6);
 }
 async function assertBindingWritePermission(caller, targetHumanId, deps) {
   if (caller === targetHumanId) return true;
@@ -163092,11 +163161,11 @@ async function resolveWorkorderPrincipals(caller, cliOverrides, deps) {
   }
   return { error: "UNBOUND_AGENT_NO_OWNER", message: `owner \u65E0\u6CD5\u89E3\u6790\uFF1A\u8C03\u7528\u65B9 ${caller} \u65E2\u975E\u5728\u5C97\u771F\u4EBA\u4E5F\u975E\u5DF2\u7ED1\u52A9\u7406` };
 }
-var import_node_crypto21, DEFAULT_ASSISTANT_PROMPT, DEFAULT_ASSISTANT_SKILLS, DEFAULT_ASSISTANT_RUNTIME_KIND, ASSISTANT_ARCHIVED_CODE, AssistantLazyCreateError, AssistantsService;
+var import_node_crypto22, DEFAULT_ASSISTANT_PROMPT, DEFAULT_ASSISTANT_SKILLS, DEFAULT_ASSISTANT_RUNTIME_KIND, ASSISTANT_ARCHIVED_CODE, AssistantLazyCreateError, AssistantsService;
 var init_assistants = __esm({
   "../server/src/domains/actors/assistants.ts"() {
     "use strict";
-    import_node_crypto21 = require("node:crypto");
+    import_node_crypto22 = require("node:crypto");
     init_src();
     DEFAULT_ASSISTANT_PROMPT = "\u4F60\u662F\u8FD9\u540D\u771F\u4EBA\u5458\u5DE5\u7684\u4E13\u5C5E\u4E2A\u4EBA\u52A9\u7406\u3002\u4F60\u4EE5\u5176\u300C\u5DE5\u5355\u7BA1\u7406\u8005\u300D\u8EAB\u4EFD\u4EE3\u8DD1\uFF0C\u9075\u5FAA\u4E09\u6863\u6743\u9650\u6A21\u578B\uFF1A\u6863 A\uFF08\u52A0\u8FB9\u3001\u65B0\u5EFA\u8282\u70B9\u3001\u6539\u6807\u9898\u4E0E brief\u3001\u5E38\u89C4\u8BC4\u8BBA\u7B54\u7591\u3001\u63A8\u8FDB\u81EA\u5DF1\u63A5\u7684\u6D3B\uFF09\u53EF\u9006\u6539\u52A8\u76F4\u63A5\u751F\u6548\uFF1B\u6863 B\uFF08\u65AD\u8FB9\u3001\u5E9F\u8282\u70B9\u3001\u6539\u6D3E\u3001\u64A4\u90E8\u4EF6\uFF09\u9500\u6BC1\u6027\u6539\u52A8\u81EA\u52A8\u6253\u5305\u6210\u5F85\u786E\u8BA4\u63D0\u6848\uFF0C\u4EA4\u7531\u672C\u4EBA\u786E\u8BA4\u540E\u751F\u6548\uFF1B\u6863 C\uFF08force-conclude\u3001promote \u7B49\u6CBB\u7406\u547D\u4EE4\uFF09\u8D70\u4EBA\u5DE5\u6388\u6743\u5361\u3002\u4F60\u4E0D\u627F\u62C5\u4E1A\u52A1\u4E13\u4E1A\u5C97\u4F4D\u804C\u8D23\uFF0C\u53EA\u5728\u5176\u6388\u6743\u8303\u56F4\u5185\u534F\u52A9\u5EFA\u5355\u3001\u8DDF\u8FDB\u4E0E\u6C9F\u901A\u3002";
     DEFAULT_ASSISTANT_SKILLS = [];
@@ -165506,7 +165575,7 @@ var init_continuation3 = __esm({
 
 // ../server/src/chat-workorder-files.ts
 function workOrderFileId(workOrderId, blobId, name) {
-  return `wof:${(0, import_node_crypto22.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
+  return `wof:${(0, import_node_crypto23.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
 }
 async function linkChatAttachmentsToWorkOrder(input) {
   const warnings = [];
@@ -165557,11 +165626,11 @@ async function linkChatAttachmentsToWorkOrder(input) {
   }
   return { linked, warnings };
 }
-var import_node_crypto22;
+var import_node_crypto23;
 var init_chat_workorder_files = __esm({
   "../server/src/chat-workorder-files.ts"() {
     "use strict";
-    import_node_crypto22 = require("node:crypto");
+    import_node_crypto23 = require("node:crypto");
   }
 });
 
@@ -166329,11 +166398,11 @@ var init_config_store = __esm({
 function clone2(value2) {
   return structuredClone(value2);
 }
-var import_node_crypto23, import_promises2, import_node_path5, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
+var import_node_crypto24, import_promises2, import_node_path5, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
 var init_run_store = __esm({
   "../server/src/domains/knowledge/run-store.ts"() {
     "use strict";
-    import_node_crypto23 = require("node:crypto");
+    import_node_crypto24 = require("node:crypto");
     import_promises2 = require("node:fs/promises");
     import_node_path5 = require("node:path");
     MemoryKnowledgeRunStore = class {
@@ -166450,7 +166519,7 @@ var init_run_store = __esm({
       }
       async persist(runs) {
         const shape = { version: 1, runs };
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto23.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto24.randomUUID)()}.tmp`;
         try {
           await (0, import_promises2.writeFile)(temp, `${JSON.stringify(shape, null, 2)}
 `, { mode: 384 });
@@ -167023,11 +167092,11 @@ function retryableKnowledgeRun(record8) {
   const latestAnswerAttempt = [...record8.attempts ?? []].reverse().find((attempt) => attempt.kind !== "fast");
   return record8.status === "succeeded" && record8.request.action === "ask" && record8.executionHealth === "degraded" && latestAnswerAttempt?.status === "failed";
 }
-var import_node_crypto24, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
+var import_node_crypto25, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
 var init_service2 = __esm({
   "../server/src/domains/knowledge/service.ts"() {
     "use strict";
-    import_node_crypto24 = require("node:crypto");
+    import_node_crypto25 = require("node:crypto");
     init_src5();
     init_config_store();
     init_run_store();
@@ -167070,7 +167139,7 @@ var init_service2 = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-        this.id = options.id ?? import_node_crypto24.randomUUID;
+        this.id = options.id ?? import_node_crypto25.randomUUID;
         this.runStore = options.runStore ?? new MemoryKnowledgeRunStore();
         this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
         this.leaseMs = options.leaseMs ?? LEASE_MS;
@@ -178017,7 +178086,7 @@ function stableJson(value2) {
   return JSON.stringify(stableValue(value2));
 }
 function sha256(value2) {
-  return (0, import_node_crypto25.createHash)("sha256").update(value2).digest("hex");
+  return (0, import_node_crypto26.createHash)("sha256").update(value2).digest("hex");
 }
 function normalizeKnowledgeContent(title, content3) {
   const body2 = content3.normalize("NFC").replace(/\r\n?/gu, "\n").replace(PUBLISH_MARKER, "\n").split("\n").map((line) => line.replace(/[\t ]+$/gu, "")).join("\n").replace(/\n{3,}/gu, "\n\n").trim();
@@ -178256,11 +178325,11 @@ function renderUntrustedKnowledgeFragment(input) {
     "</knowledge>"
   ].join("\n");
 }
-var import_node_crypto25, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
+var import_node_crypto26, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
 var init_governance_content = __esm({
   "../server/src/domains/knowledge/governance-content.ts"() {
     "use strict";
-    import_node_crypto25 = require("node:crypto");
+    import_node_crypto26 = require("node:crypto");
     init_mdast_util_from_markdown();
     init_mdast_util_gfm();
     init_micromark_extension_gfm();
@@ -188427,11 +188496,11 @@ function approvedSnapshotBody(title, content3) {
 function uniqueStrings(values) {
   return [...new Set(values)].sort();
 }
-var import_node_crypto26, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
+var import_node_crypto27, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
 var init_governance_service = __esm({
   "../server/src/domains/knowledge/governance-service.ts"() {
     "use strict";
-    import_node_crypto26 = require("node:crypto");
+    import_node_crypto27 = require("node:crypto");
     init_governance_content();
     init_knowledge_policy();
     init_network_maintenance();
@@ -188453,7 +188522,7 @@ var init_governance_service = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => /* @__PURE__ */ new Date());
-        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto26.randomUUID)()}`);
+        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto27.randomUUID)()}`);
         this.versionViewBaseUrl = (options.versionViewBaseUrl ?? "/api/knowledge/items").replace(/\/$/u, "");
         this.projectProvisionRetryDelayMs = Math.max(0, options.projectProvisionRetryDelayMs ?? 6e4);
         this.projectProvisionMaxRetryDelayMs = Math.max(this.projectProvisionRetryDelayMs, options.projectProvisionMaxRetryDelayMs ?? 36e5);
@@ -194144,7 +194213,7 @@ function trustedKnowledgeInvocationId(body2, turn) {
   if (body2.action !== "ask") return void 0;
   const scope = turn?.artifactId ?? turn?.dispatchId;
   if (!scope) return void 0;
-  const fingerprint2 = (0, import_node_crypto27.createHash)("sha256").update(JSON.stringify({
+  const fingerprint2 = (0, import_node_crypto28.createHash)("sha256").update(JSON.stringify({
     action: body2.action,
     message: body2.message?.trim() ?? "",
     queryMode: body2.queryMode === "deep" ? "deep" : "fast",
@@ -194299,11 +194368,11 @@ function knowledgeRoutes(service, options = {}) {
     });
   };
 }
-var import_node_crypto27, KNOWLEDGE_WORKORDER_ACTIONS;
+var import_node_crypto28, KNOWLEDGE_WORKORDER_ACTIONS;
 var init_routes = __esm({
   "../server/src/domains/knowledge/routes.ts"() {
     "use strict";
-    import_node_crypto27 = require("node:crypto");
+    import_node_crypto28 = require("node:crypto");
     init_src5();
     init_router();
     init_governance_service();
@@ -195930,7 +195999,7 @@ async function resolveChatAttachmentDiscoverySource(input) {
     sourceType: input.sourceType,
     sourceId: session.id,
     sourceVersionId: attachment.blobRef,
-    sourceFingerprint: (0, import_node_crypto28.createHash)("sha256").update(bytes2).digest("hex"),
+    sourceFingerprint: (0, import_node_crypto29.createHash)("sha256").update(bytes2).digest("hex"),
     sourceContent: new TextDecoder().decode(bytes2),
     sourceDisplayName: attachment.name,
     ...session.projectId ? { projectId: session.projectId } : {},
@@ -195941,11 +196010,11 @@ async function resolveChatAttachmentDiscoverySource(input) {
     }
   };
 }
-var import_node_crypto28, TEXT_CONTENT_TYPES;
+var import_node_crypto29, TEXT_CONTENT_TYPES;
 var init_chat_attachment_discovery = __esm({
   "../server/src/domains/knowledge/chat-attachment-discovery.ts"() {
     "use strict";
-    import_node_crypto28 = require("node:crypto");
+    import_node_crypto29 = require("node:crypto");
     TEXT_CONTENT_TYPES = /* @__PURE__ */ new Set([
       "application/json",
       "application/xml",
@@ -196122,8 +196191,8 @@ function aad(snapshot) {
 }
 function sealKnowledgeSnapshot(snapshot, key) {
   if (snapshot.content.startsWith(PREFIX)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto29.randomBytes)(12);
-  const cipher = (0, import_node_crypto29.createCipheriv)("aes-256-gcm", keyBytes(key), iv);
+  const iv = (0, import_node_crypto30.randomBytes)(12);
+  const cipher = (0, import_node_crypto30.createCipheriv)("aes-256-gcm", keyBytes(key), iv);
   cipher.setAAD(aad(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return {
@@ -196136,17 +196205,17 @@ function openKnowledgeSnapshot(snapshot, key) {
   const packed = snapshot.content.slice(PREFIX.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto29.createDecipheriv)("aes-256-gcm", keyBytes(key), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto30.createDecipheriv)("aes-256-gcm", keyBytes(key), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   const content3 = Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8");
   return { ...structuredClone(snapshot), content: content3 };
 }
-var import_node_crypto29, PREFIX;
+var import_node_crypto30, PREFIX;
 var init_snapshot_crypto = __esm({
   "../server/src/domains/knowledge/snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto29 = require("node:crypto");
+    import_node_crypto30 = require("node:crypto");
     PREFIX = "oasis-knowledge:v1:";
   }
 });
@@ -196229,11 +196298,11 @@ function uniquenessKeys(kind, record8) {
       return [];
   }
 }
-var import_node_crypto30, import_promises3, import_node_path6, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
+var import_node_crypto31, import_promises3, import_node_path6, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
 var init_governance_store = __esm({
   "../server/src/domains/knowledge/governance-store.ts"() {
     "use strict";
-    import_node_crypto30 = require("node:crypto");
+    import_node_crypto31 = require("node:crypto");
     import_promises3 = require("node:fs/promises");
     import_node_path6 = require("node:path");
     init_snapshot_crypto();
@@ -196451,7 +196520,7 @@ var init_governance_store = __esm({
         return result;
       }
       async persist(shape) {
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto30.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto31.randomUUID)()}.tmp`;
         try {
           await (0, import_promises3.writeFile)(temp, `${JSON.stringify(this.sealSnapshots(shape), null, 2)}
 `, { mode: 384 });
@@ -196487,7 +196556,7 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     if (error2.code !== "ENOENT") throw error2;
   }
   await (0, import_promises4.mkdir)((0, import_node_path7.dirname)(file), { recursive: true });
-  const generated = `oasis-${(0, import_node_crypto31.randomUUID)()}`;
+  const generated = `oasis-${(0, import_node_crypto32.randomUUID)()}`;
   try {
     await (0, import_promises4.writeFile)(file, `${generated}
 `, { encoding: "utf8", mode: 384, flag: "wx" });
@@ -196497,11 +196566,11 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     return readDeploymentId(file);
   }
 }
-var import_node_crypto31, import_promises4, import_node_path7, VALID_DEPLOYMENT_ID;
+var import_node_crypto32, import_promises4, import_node_path7, VALID_DEPLOYMENT_ID;
 var init_deployment_id = __esm({
   "../server/src/domains/knowledge/deployment-id.ts"() {
     "use strict";
-    import_node_crypto31 = require("node:crypto");
+    import_node_crypto32 = require("node:crypto");
     import_promises4 = require("node:fs/promises");
     import_node_path7 = require("node:path");
     VALID_DEPLOYMENT_ID = /^oasis-[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
@@ -197198,7 +197267,7 @@ var init_files = __esm({
 
 // ../server/src/domains/delegations/service.ts
 function deterministicUuid(seed) {
-  const h = (0, import_node_crypto32.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto33.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -197255,11 +197324,11 @@ async function seedChildRoundRows(chatStore, childSessionId, round, prompt2, now
     createdAt: now
   });
 }
-var import_node_crypto32, DelegationError, TITLE_TASK_CHARS, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, DelegationService;
+var import_node_crypto33, DelegationError, TITLE_TASK_CHARS, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, DelegationService;
 var init_service3 = __esm({
   "../server/src/domains/delegations/service.ts"() {
     "use strict";
-    import_node_crypto32 = require("node:crypto");
+    import_node_crypto33 = require("node:crypto");
     init_src();
     init_parent_conversation();
     init_deletion();
@@ -198461,7 +198530,7 @@ var init_continue_outcome = __esm({
 function trustedDelegationInvocationId(body2, turn) {
   const scope = turn?.artifactId ?? turn?.dispatchId;
   if (!scope) return void 0;
-  const fingerprint2 = (0, import_node_crypto33.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
+  const fingerprint2 = (0, import_node_crypto34.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
   return `dispatch:${scope}:delegation:${fingerprint2}`;
 }
 function callerOf(req, invocationId) {
@@ -198556,11 +198625,11 @@ function delegationRoutes(service) {
     });
   };
 }
-var import_node_crypto33;
+var import_node_crypto34;
 var init_routes2 = __esm({
   "../server/src/domains/delegations/routes.ts"() {
     "use strict";
-    import_node_crypto33 = require("node:crypto");
+    import_node_crypto34 = require("node:crypto");
     init_router();
     init_continue_outcome();
     init_service3();
@@ -200514,7 +200583,7 @@ function createAppJwt(appId, privateKeyPem, nowMs) {
     exp: nowSec + JWT_TTL_SEC,
     iss: appId
   }));
-  const signer = (0, import_node_crypto34.createSign)("RSA-SHA256");
+  const signer = (0, import_node_crypto35.createSign)("RSA-SHA256");
   signer.update(`${header}.${payload2}`);
   signer.end();
   try {
@@ -200677,11 +200746,11 @@ async function exchangeManifestCode(code2, deps = {}) {
     ...typeof body2["client_secret"] === "string" ? { clientSecret: body2["client_secret"] } : {}
   };
 }
-var import_node_crypto34, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
+var import_node_crypto35, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
 var init_app_auth = __esm({
   "../connectors/src/github/app-auth.ts"() {
     "use strict";
-    import_node_crypto34 = require("node:crypto");
+    import_node_crypto35 = require("node:crypto");
     GITHUB_API = "https://api.github.com";
     JWT_TTL_SEC = 9 * 60;
     JWT_IAT_SKEW_SEC = 60;
@@ -201606,11 +201675,11 @@ function extractOutlineKnowledgeCandidateDrafts(events) {
   }
   return [...drafts.values()];
 }
-var import_node_crypto35, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
+var import_node_crypto36, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
 var init_knowledge_api = __esm({
   "../connectors/src/outline/knowledge-api.ts"() {
     "use strict";
-    import_node_crypto35 = require("node:crypto");
+    import_node_crypto36 = require("node:crypto");
     REQUEST_TIMEOUT_MS = 2e4;
     WRITE_ENDPOINTS = /* @__PURE__ */ new Set(["collections.create", "documents.create", "documents.update", "documents.publish"]);
     DEFAULT_WRITE_INTERVAL_MS = process.env["NODE_ENV"] === "test" ? 0 : 250;
@@ -201637,7 +201706,7 @@ var init_knowledge_api = __esm({
         this.baseUrl = canonicalUrl(baseUrl);
         this.lastResponseBaseUrl = this.baseUrl;
         this.token = token;
-        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto35.createHash)("sha256").update(token).digest("hex")}`;
+        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto36.createHash)("sha256").update(token).digest("hex")}`;
         this.writeIntervalMs = Math.max(0, options.writeIntervalMs ?? DEFAULT_WRITE_INTERVAL_MS);
         this.maxRateLimitRetries = Math.max(0, options.maxRateLimitRetries ?? DEFAULT_RATE_LIMIT_RETRIES);
         this.maxRateLimitDelayMs = Math.max(0, options.maxRateLimitDelayMs ?? DEFAULT_MAX_RATE_LIMIT_DELAY_MS);
@@ -203045,15 +203114,15 @@ function classifyOutlineGovernedMigrationDocument(document4) {
   if (path41.startsWith("wiki/sources/")) return { mapping: "formal", metadata: legacyMetadata(document4, "source_note"), reason: "legacy_source_note" };
   return { mapping: "excluded", reason: "legacy_unmapped_path" };
 }
-var import_node_crypto36, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
+var import_node_crypto37, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
 var init_governed_knowledge = __esm({
   "../connectors/src/outline/governed-knowledge.ts"() {
     "use strict";
-    import_node_crypto36 = require("node:crypto");
+    import_node_crypto37 = require("node:crypto");
     init_knowledge_api();
     value = (input) => input && typeof input === "object" && !Array.isArray(input) ? input : null;
     text4 = (input) => typeof input === "string" && input.trim() ? input.trim() : null;
-    hash = (input) => (0, import_node_crypto36.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
+    hash = (input) => (0, import_node_crypto37.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
     REVISION_VISIBILITY_RETRY_DELAYS_MS = [0, 100, 250, 500, 1e3, 2e3];
     governedProvisionRuns = /* @__PURE__ */ new Map();
     PUBLISH_MARKER2 = /\n?<!--\s*oasis-publish:[\s\S]*?-->\n?/giu;
@@ -205488,14 +205557,7 @@ async function startOasisServer(opts) {
     }
     return null;
   };
-  const outputsPartFor = (chatSessionId, companyId) => {
-    const scan2 = opts.sessionOutputsScan;
-    if (!scan2) return void 0;
-    return async () => {
-      const files = await scan2({ chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
-      return files && files.length > 0 ? { type: "outputs", seq: 0, outputs: files } : null;
-    };
-  };
+  const outputsPartFor = (chatSessionId, companyId) => outputsPartProvider(opts.sessionOutputsScan, chatSessionId, companyId);
   async function anchorMessageIdFor(origin, storeFor) {
     if (!origin) return void 0;
     const live = liveChat.messageFor(origin);
@@ -205734,10 +205796,10 @@ async function startOasisServer(opts) {
               ...fp(p2)
             }))
           ] : [];
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID43 } = await import("node:crypto");
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID43(),
               chatSessionId: input.chatSessionId,
               text: input.text,
               createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -205770,11 +205832,11 @@ async function startOasisServer(opts) {
               ...f2?.mtime ? { srcMtime: f2.mtime } : {}
             };
           });
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID43 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID43(),
               chatSessionId: input.chatSessionId,
               text: "",
               createdAt: nowIso,
@@ -207021,7 +207083,7 @@ async function startOasisServer(opts) {
           entry = {
             // 旧 CLI 未带 waiterId 时给它塞一个服务端本地生成的——它绝不可能出现在 leave 上，
             // 也就绝不会误命中 leftWaiterIds、绝不会被别人的 leave 摘掉。行为与旧 CLI 相同。
-            waiterId: clientWaiterId ?? `server:${(0, import_node_crypto37.randomUUID)()}`,
+            waiterId: clientWaiterId ?? `server:${(0, import_node_crypto38.randomUUID)()}`,
             onResolve,
             expiresAt: expiresAt2,
             cleanup: () => clearTimeout(expiryTimer),
@@ -207102,7 +207164,7 @@ async function startOasisServer(opts) {
             const openRoom = async () => {
               let chatSessionId2;
               if (chatStore) {
-                const { randomUUID: randomUUID41 } = await import("node:crypto");
+                const { randomUUID: randomUUID43 } = await import("node:crypto");
                 const known = discussSessions.get(itemKey);
                 const knownSession = known ? await chatStore.getSession(known) : null;
                 if (knownSession && knownSession.workspace === ctx.workspace && knownSession.humanActorId === ctx.ownerId && (!body2.escalationId || knownSession.escalationId === body2.escalationId)) chatSessionId2 = known;
@@ -207111,7 +207173,7 @@ async function startOasisServer(opts) {
                   chatSessionId2 = existing[0]?.id;
                 }
                 if (!chatSessionId2) {
-                  chatSessionId2 = randomUUID41();
+                  chatSessionId2 = randomUUID43();
                   const now = (/* @__PURE__ */ new Date()).toISOString();
                   const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                   const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -207980,14 +208042,14 @@ ${composed}`;
                     runtimeSessionId: session.nativeSessionId ?? session.id
                   }).catch(() => void 0);
                 }
-                const { randomUUID: randomUUID42 } = await import("node:crypto");
+                const { randomUUID: randomUUID44 } = await import("node:crypto");
                 const persistAttachments = effectiveAttachments.map((a) => ({
                   name: a.name,
                   ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                   ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                 }));
                 await chatStore.appendMessage({
-                  id: randomUUID42(),
+                  id: randomUUID44(),
                   sessionId: persistTarget.id,
                   role: "user",
                   content: persistedUserMessage,
@@ -208462,8 +208524,8 @@ ${composed}`;
               }
             }
             const { spawn: spawn10 } = await import("node:child_process");
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const sessionId = body2.sessionId ?? randomUUID41();
+            const { randomUUID: randomUUID43 } = await import("node:crypto");
+            const sessionId = body2.sessionId ?? randomUUID43();
             const args = [
               "-p",
               body2.message,
@@ -208759,8 +208821,8 @@ ${composed}`;
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
               return;
             }
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const state = randomUUID41();
+            const { randomUUID: randomUUID43 } = await import("node:crypto");
+            const state = randomUUID43();
             const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
             const manifest = buildAppManifest({
               employeeSlug: nameSlug,
@@ -209536,12 +209598,12 @@ ${composed}`;
     }
   };
 }
-var http, import_node_crypto37, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
+var http, import_node_crypto38, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
     http = __toESM(require("node:http"), 1);
-    import_node_crypto37 = require("node:crypto");
+    import_node_crypto38 = require("node:crypto");
     init_chat_session();
     init_chat_system_message();
     init_src();
@@ -209700,7 +209762,7 @@ function createNodeTokenStore(file) {
   return {
     issue(nodeId) {
       const table = read();
-      const token = `ont_${(0, import_node_crypto38.randomBytes)(24).toString("base64url")}`;
+      const token = `ont_${(0, import_node_crypto39.randomBytes)(24).toString("base64url")}`;
       table[token] = nodeId;
       write(table);
       return token;
@@ -209742,7 +209804,7 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   return {
     issue(name, ttlMs = defaultTtlMs, companyId) {
       const m2 = prune();
-      const token = `ent_${(0, import_node_crypto38.randomBytes)(24).toString("base64url")}`;
+      const token = `ent_${(0, import_node_crypto39.randomBytes)(24).toString("base64url")}`;
       const expiresAt2 = Date.now() + ttlMs;
       m2.set(token, { name, expiresAt: expiresAt2, ...companyId !== void 0 ? { companyId } : {} });
       write(m2);
@@ -209791,33 +209853,33 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto38, fs18, path19, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
+var import_node_crypto39, fs18, path19, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
-    import_node_crypto38 = require("node:crypto");
+    import_node_crypto39 = require("node:crypto");
     fs18 = __toESM(require("node:fs"), 1);
     path19 = __toESM(require("node:path"), 1);
     SESSION_TOKEN_PREFIX = "oat_v2_";
     b64url2 = (value2) => Buffer.from(value2).toString("base64url");
     fromB64url = (value2) => Buffer.from(value2, "base64url").toString("utf8");
     readOrCreateSecret = (file) => {
-      if (!file) return (0, import_node_crypto38.randomBytes)(32);
+      if (!file) return (0, import_node_crypto39.randomBytes)(32);
       try {
         const raw = fs18.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto38.randomBytes)(32);
+      const secret = (0, import_node_crypto39.randomBytes)(32);
       fs18.mkdirSync(path19.dirname(file), { recursive: true });
       fs18.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
-    sign = (secret, payload2) => (0, import_node_crypto38.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign = (secret, payload2) => (0, import_node_crypto39.createHmac)("sha256", secret).update(payload2).digest("base64url");
     signatureMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto38.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto39.timingSafeEqual)(a, b2);
     };
     isTokenClaims = (value2) => {
       if (value2 === null || typeof value2 !== "object") return false;
@@ -209864,31 +209926,31 @@ function createDataplaneTokenIssuer(opts = {}) {
     }
   };
 }
-var import_node_crypto39, fs19, path20, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims;
+var import_node_crypto40, fs19, path20, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims;
 var init_session_dataplane_token = __esm({
   "../server/src/session-dataplane-token.ts"() {
     "use strict";
-    import_node_crypto39 = require("node:crypto");
+    import_node_crypto40 = require("node:crypto");
     fs19 = __toESM(require("node:fs"), 1);
     path20 = __toESM(require("node:path"), 1);
     init_src();
     PREFIX2 = "osd_";
     b64url3 = (v2) => Buffer.from(v2, "utf8").toString("base64url");
     fromB64url2 = (v2) => Buffer.from(v2, "base64url").toString("utf8");
-    sign2 = (secret, payload2) => (0, import_node_crypto39.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign2 = (secret, payload2) => (0, import_node_crypto40.createHmac)("sha256", secret).update(payload2).digest("base64url");
     sigMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto39.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto40.timingSafeEqual)(a, b2);
     };
     readOrCreateSecret2 = (file) => {
-      if (!file) return (0, import_node_crypto39.randomBytes)(32);
+      if (!file) return (0, import_node_crypto40.randomBytes)(32);
       try {
         const raw = fs19.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto39.randomBytes)(32);
+      const secret = (0, import_node_crypto40.randomBytes)(32);
       fs19.mkdirSync(path20.dirname(file), { recursive: true });
       fs19.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
@@ -212034,11 +212096,11 @@ function onlyHits(pool, q2) {
   if (!q2.requireMatch || q2.keywords.length === 0) return [...pool];
   return pool.filter((r) => memoryMatchScore(r, q2.keywords) > 0);
 }
-var import_node_crypto40, MemoryActorMemoryStore, toIndexEntry;
+var import_node_crypto41, MemoryActorMemoryStore, toIndexEntry;
 var init_memory_actor_memory_store = __esm({
   "../testkit/src/memory-actor-memory-store.ts"() {
     "use strict";
-    import_node_crypto40 = require("node:crypto");
+    import_node_crypto41 = require("node:crypto");
     init_src();
     MemoryActorMemoryStore = class {
       rows = /* @__PURE__ */ new Map();
@@ -212092,7 +212154,7 @@ var init_memory_actor_memory_store = __esm({
       async write(input, now) {
         if (input.memId === void 0) {
           const rec = {
-            memId: `mem:${(0, import_node_crypto40.randomUUID)()}`,
+            memId: `mem:${(0, import_node_crypto41.randomUUID)()}`,
             actorId: input.actorId,
             projectId: input.projectId,
             keywords: [...input.keywords],
@@ -212824,6 +212886,19 @@ var init_stats = __esm({
   }
 });
 
+// ../server/src/domains/projects/project-id.ts
+function randomProjectId() {
+  return projectIdFromUuid((0, import_node_crypto42.randomUUID)());
+}
+var import_node_crypto42;
+var init_project_id = __esm({
+  "../server/src/domains/projects/project-id.ts"() {
+    "use strict";
+    import_node_crypto42 = require("node:crypto");
+    init_src();
+  }
+});
+
 // ../server/src/domains/projects/service.ts
 function sanitizeCreatorActorId(raw) {
   const id = raw?.trim();
@@ -212884,7 +212959,7 @@ function creatorKindOf(actorId) {
   if (!actorId) return null;
   return actorId.startsWith("actor:human:") ? "human" : "agent";
 }
-function emitChatFolders(items, chatFiles, resolveName) {
+function emitChatFolders(items, chatFiles, resolveName, taskTitles = /* @__PURE__ */ new Map()) {
   const groups = /* @__PURE__ */ new Map();
   for (const file of chatFiles) {
     const list2 = groups.get(file.chatSessionId) ?? [];
@@ -212904,14 +212979,15 @@ function emitChatFolders(items, chatFiles, resolveName) {
       depth: 0,
       type: "folder",
       size: null,
-      taskId: null,
-      taskTitle: CHAT_FOLDER_TASK_LABEL,
+      taskId: head.taskId ?? null,
+      taskTitle: head.taskId ? taskTitles.get(head.taskId) ?? head.taskId : CHAT_FOLDER_TASK_LABEL,
       creatorKind: creatorKindOf(head.chatOwnerId),
       creatorId: head.chatOwnerId,
       creatorName: resolveName(head.chatOwnerId),
       updatedAt: latest,
       folderKind: "chat",
-      chatSessionId: sessionId
+      chatSessionId: sessionId,
+      ...head.fileIssues?.length ? { fileIssues: head.fileIssues } : {}
     });
     for (const file of group) {
       items.push({
@@ -212925,13 +213001,14 @@ function emitChatFolders(items, chatFiles, resolveName) {
         blobRef: file.blobId,
         contentType: file.contentType ?? null,
         size: file.size,
-        taskId: null,
-        taskTitle: CHAT_FOLDER_TASK_LABEL,
+        taskId: head.taskId ?? null,
+        taskTitle: head.taskId ? taskTitles.get(head.taskId) ?? head.taskId : CHAT_FOLDER_TASK_LABEL,
         creatorKind: creatorKindOf(file.uploadedBy),
         creatorId: file.uploadedBy ?? null,
         creatorName: file.uploadedBy ? resolveName(file.uploadedBy) : null,
         updatedAt: file.uploadedAt,
-        chatSessionId: sessionId
+        chatSessionId: sessionId,
+        ...head.fileIssues?.length ? { fileIssues: head.fileIssues } : {}
       });
     }
   }
@@ -212965,10 +213042,6 @@ function namedError(name, message) {
   err.name = name;
   return err;
 }
-function slugProjectId(name) {
-  const slug6 = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
-  return `proj_${slug6 || Date.now()}`;
-}
 function dirname24(path41) {
   const norm = path41.replace(/^\/+|\/+$/g, "");
   const idx = norm.lastIndexOf("/");
@@ -213165,6 +213238,7 @@ var init_service4 = __esm({
     init_uncategorized_project();
     init_workorders();
     init_stats();
+    init_project_id();
     init_node_state();
     DEFAULT_AGENT_ACTOR = "actor:agent:system";
     CHAT_FOLDER_TASK_LABEL = "\u5BF9\u8BDD";
@@ -213454,9 +213528,14 @@ var init_service4 = __esm({
       async createProject(input) {
         if (!input.name.trim()) throw new Error("project name is required");
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const id = input.id ?? slugProjectId(input.name);
-        const existing = await this.projects.getProject(id);
-        if (existing) return this.withProjectDerivedState(existing);
+        let id;
+        if (input.id !== void 0 && input.id.trim() !== "") {
+          id = input.id;
+          const existing = await this.projects.getProject(id);
+          if (existing) return this.withProjectDerivedState(existing);
+        } else {
+          id = await this.allocateProjectId();
+        }
         const createdById = sanitizeCreatorActorId(input.createdBy);
         const project = {
           id,
@@ -213492,6 +213571,14 @@ var init_service4 = __esm({
         }
         return await this.getProject(id) ?? project;
       }
+      /** 给「没带 id 的新建」挑一个本公司还没用过的随机 id（`randomProjectId`）；连撞几次说明生成器坏了，直接报错。 */
+      async allocateProjectId() {
+        for (let attempt = 0; attempt < 5; attempt++) {
+          const id = randomProjectId();
+          if (!await this.projects.getProject(id)) return id;
+        }
+        throw new Error("project id allocation failed: random ids kept colliding");
+      }
       async getProject(id) {
         if (isUncategorizedProjectId(id)) return this.buildUncategorizedProject();
         const project = await this.projects.getProject(id);
@@ -213983,7 +214070,7 @@ var init_service4 = __esm({
             updatedAt: file.uploadedAt
           });
         }
-        emitChatFolders(items, chatFiles, (actorId) => this.resolveActorName(actorId));
+        emitChatFolders(items, chatFiles, (actorId) => this.resolveActorName(actorId), workorderTitleById);
         fillFolderSizes(items);
         const chatFolderTime = new Map(items.filter((item) => item.folderKind === "chat" && item.chatSessionId).map((item) => [item.chatSessionId, item.updatedAt]));
         items.sort((a, b2) => {
@@ -214834,12 +214921,12 @@ var init_service4 = __esm({
 });
 
 // ../server/src/dev-store.ts
-var import_node_crypto41, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto43, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
-    import_node_crypto41 = require("node:crypto");
+    import_node_crypto43 = require("node:crypto");
     fs20 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     init_src();
@@ -214893,7 +214980,7 @@ var init_dev_store = __esm({
         return path21.join(this.dir, hash2);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto41.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto43.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash2);
         if (!fs20.existsSync(file)) fs20.writeFileSync(file, bytes2);
         return hash2;
@@ -215321,6 +215408,8 @@ var init_dev_store = __esm({
       pending = /* @__PURE__ */ new Map();
       /** `outputs/` 产出文件的服务端副本表（2026-09-14）：sessionId → 路径 → 副本。 */
       outputCopies = /* @__PURE__ */ new Map();
+      outputFingerprints = /* @__PURE__ */ new Map();
+      fileIssues = /* @__PURE__ */ new Map();
       pendingSeq = 0;
       async claimPendingInsert(m2) {
         const list2 = this.pending.get(m2.chatSessionId) ?? [];
@@ -215509,6 +215598,8 @@ var init_dev_store = __esm({
         this.sessionWorkOrders.delete(id);
         this.sessionWorkOrderKinds.delete(id);
         this.outputCopies.delete(id);
+        this.outputFingerprints.delete(id);
+        this.fileIssues.delete(id);
       }
       async appendMessage(m2) {
         return (await this.appendMessageOnce(m2)).message;
@@ -215637,6 +215728,22 @@ var init_dev_store = __esm({
         }
         return rows.sort((left, right) => left.createdAt.localeCompare(right.createdAt) || left.messageId.localeCompare(right.messageId));
       }
+      async readOutputFingerprints(sessionId) {
+        return this.outputFingerprints.get(sessionId) ?? null;
+      }
+      async writeOutputFingerprints(sessionId, fingerprints) {
+        if (this.sessions.has(sessionId)) this.outputFingerprints.set(sessionId, { ...fingerprints });
+      }
+      async readFileIssues(sessionId) {
+        return (this.fileIssues.get(sessionId) ?? []).map((issue2) => ({ ...issue2 }));
+      }
+      async writeFileIssues(sessionId, phase, issues) {
+        if (!this.sessions.has(sessionId)) return;
+        this.fileIssues.set(sessionId, [...(this.fileIssues.get(sessionId) ?? []).filter((i) => i.phase !== phase), ...issues]);
+      }
+      async listFileSessionsByWorkspaces(workspaces) {
+        return [...this.sessions.values()].filter((s2) => !!s2.workspace && workspaces.includes(s2.workspace) && s2.visibility !== "internal" && !s2.analyzedRunId).map((s2) => ({ ...s2 }));
+      }
       async readOutputCopies(sessionId) {
         const hit = this.outputCopies.get(sessionId);
         return hit ? { ...hit } : null;
@@ -215697,6 +215804,9 @@ var init_dev_store = __esm({
         const store = new _FileChatSessionStore(file);
         if (fs20.existsSync(file)) {
           const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+          for (const [sid, copies] of Object.entries(snap.outputCopies ?? {})) store.outputCopies.set(sid, copies);
+          for (const [sid, fps] of Object.entries(snap.outputFingerprints ?? {})) store.outputFingerprints.set(sid, fps);
+          for (const [sid, issues] of Object.entries(snap.fileIssues ?? {})) store.fileIssues.set(sid, issues);
           for (const s2 of snap.sessions ?? []) store.sessions.set(s2.id, s2);
           for (const [sid, list2] of Object.entries(snap.messages ?? {})) store.messages.set(sid, list2);
           for (const [sid, ids2] of Object.entries(snap.sessionWorkOrders ?? {})) store.sessionWorkOrders.set(sid, new Set(ids2));
@@ -215708,6 +215818,18 @@ var init_dev_store = __esm({
         }
         return store;
       }
+      async mergeOutputCopies(id, copies) {
+        await super.mergeOutputCopies(id, copies);
+        this.save();
+      }
+      async writeOutputFingerprints(id, fps) {
+        await super.writeOutputFingerprints(id, fps);
+        this.save();
+      }
+      async writeFileIssues(id, phase, issues) {
+        await super.writeFileIssues(id, phase, issues);
+        this.save();
+      }
       async createSession(s2) {
         await super.createSession(s2);
         this.save();
@@ -215773,6 +215895,9 @@ var init_dev_store = __esm({
       }
       save() {
         const snap = {
+          outputCopies: Object.fromEntries(this.outputCopies),
+          outputFingerprints: Object.fromEntries(this.outputFingerprints),
+          fileIssues: Object.fromEntries(this.fileIssues),
           sessions: [...this.sessions.values()],
           messages: Object.fromEntries(this.messages),
           sessionWorkOrders: Object.fromEntries([...this.sessionWorkOrders].map(([k2, v2]) => [k2, [...v2]])),
@@ -216093,7 +216218,7 @@ var init_company_engine_router = __esm({
 
 // ../server/src/skill-market-client.ts
 function digestOf2(bytes2) {
-  return `sha256:${(0, import_node_crypto42.createHash)("sha256").update(bytes2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto44.createHash)("sha256").update(bytes2).digest("hex")}`;
 }
 function createSkillMarketClientFromEnv(env = process.env) {
   const base = env["SKILL_MARKET_BASE_URL"];
@@ -216104,11 +216229,11 @@ function createSkillMarketClientFromEnv(env = process.env) {
 function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var import_node_crypto42, DisabledSkillMarketClient, HttpSkillMarketClient;
+var import_node_crypto44, DisabledSkillMarketClient, HttpSkillMarketClient;
 var init_skill_market_client = __esm({
   "../server/src/skill-market-client.ts"() {
     "use strict";
-    import_node_crypto42 = require("node:crypto");
+    import_node_crypto44 = require("node:crypto");
     init_src();
     DisabledSkillMarketClient = class {
       async listSkills(_input) {
@@ -216592,18 +216717,23 @@ async function scanSessionOutputs(bridge, loc, now = Date.now) {
     if (!walked) return null;
     if (walked.ok) {
       const files2 = walked.entries.filter((entry) => entry.type === "file").map((entry) => ({ path: entry.path, size: entry.size, mtime: entry.mtime }));
-      return { files: files2, via: "walk", tree: walked.entries };
+      return { files: files2, via: "walk", tree: walked.entries, ...walked.truncated ? { incomplete: true } : {} };
     }
     if (walked.code === "NOT_FOUND") return { files: [], via: "walk", tree: [] };
     if (walked.code !== "UNSUPPORTED") return null;
   }
+  let incomplete = false;
   const files = await scanLayered(
     (path41) => bridge.list(loc.nodeId, { ...locator, path: path41 }),
-    now
+    now,
+    () => {
+      incomplete = true;
+    }
   );
-  return files === null ? null : { files, via: "layered" };
+  return files === null ? null : { files, via: "layered", ...incomplete ? { incomplete: true } : {} };
 }
-async function scanLayered(list2, now) {
+async function scanLayered(list2, now, markIncomplete = () => {
+}) {
   const deadline = now() + BUDGET_MS;
   const out = [];
   let listCalls = 0;
@@ -216620,23 +216750,41 @@ async function scanLayered(list2, now) {
   for (let depth = 0; depth <= MAX_DEPTH; depth += 1) {
     const nextDirs = [];
     for (const { path: dir, outcome } of level) {
-      if (!outcome.ok) continue;
+      if (!outcome.ok) {
+        markIncomplete();
+        continue;
+      }
+      if (outcome.truncated) markIncomplete();
       for (const entry of outcome.entries) {
         if (entry.type === "dir") {
           nextDirs.push(joinRel(dir, entry.name));
           continue;
         }
-        if (out.length >= MAX_ENTRIES) continue;
+        if (out.length >= MAX_ENTRIES) {
+          markIncomplete();
+          continue;
+        }
         out.push({ path: joinRel(dir, entry.name), size: entry.size, mtime: entry.mtime });
       }
     }
-    if (nextDirs.length === 0 || depth === MAX_DEPTH) break;
-    if (out.length >= MAX_ENTRIES || listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+    if (nextDirs.length === 0) break;
+    if (depth === MAX_DEPTH) {
+      markIncomplete();
+      break;
+    }
+    if (out.length >= MAX_ENTRIES || listCalls >= MAX_LIST_CALLS || now() >= deadline) {
+      markIncomplete();
+      break;
+    }
     const batch = [];
     for (const dir of nextDirs) {
-      if (listCalls >= MAX_LIST_CALLS || now() >= deadline) break;
+      if (listCalls >= MAX_LIST_CALLS || now() >= deadline) {
+        markIncomplete();
+        break;
+      }
       const outcome = await listDir(dir).catch(() => null);
       if (outcome) batch.push({ path: dir, outcome });
+      else markIncomplete();
     }
     level = batch;
   }
@@ -216667,7 +216815,7 @@ async function settleSessionOutputs(deps) {
     diff.fingerprints[WALK_TABLE_MARK] = { size: 0, mtime: "" };
   }
   await deps.writeFingerprints(deps.sessionId, diff.fingerprints).catch(() => void 0);
-  return diff;
+  return { ...diff, ...scan2.incomplete || scan2.files.some((f2) => f2.size == null || !f2.mtime) ? { scanIncomplete: true } : {} };
 }
 var WALK_MAX_ENTRIES, MAX_DEPTH, MAX_ENTRIES, MAX_LIST_CALLS, BUDGET_MS, WALK_TABLE_MARK;
 var init_outputs_scan = __esm({
@@ -216722,11 +216870,17 @@ async function copySessionOutputs(deps) {
   try {
     existing = await deps.readCopies(deps.sessionId);
   } catch {
+    result.skipped = Object.keys(deps.fingerprints).filter(isOutputPath).map((path41) => ({ path: path41, code: "STORE_FAILED" }));
     return result;
   }
+  const deadline = Date.now() + 2e4;
   const plan = planOutputCopies(deps.fingerprints, existing, limits);
   result.skipped.push(...plan.skipped);
   for (const file of plan.toCopy) {
+    if (Date.now() >= deadline) {
+      result.skipped.push({ path: file.path, code: "BUDGET" });
+      continue;
+    }
     let read;
     try {
       read = await deps.bridge.read(
@@ -216743,6 +216897,14 @@ async function copySessionOutputs(deps) {
       continue;
     }
     const bytes2 = Buffer.from(read.contentBase64, "base64");
+    if (bytes2.length > limits.maxFileBytes) {
+      result.skipped.push({ path: file.path, code: "TOO_LARGE" });
+      continue;
+    }
+    if (bytes2.length !== file.size || read.mtime && read.mtime !== file.mtime) {
+      result.skipped.push({ path: file.path, code: "FILE_CHANGED" });
+      continue;
+    }
     let blobRef;
     try {
       blobRef = await deps.putBlob(new Uint8Array(bytes2));
@@ -216772,7 +216934,7 @@ async function copySessionOutputs(deps) {
   return result;
 }
 function createOutputCopyScheduler(deps) {
-  const inFlight = /* @__PURE__ */ new Set();
+  const inFlight = /* @__PURE__ */ new Map();
   return {
     schedule(args) {
       const { store, chatSessionId, companyId } = args;
@@ -216780,9 +216942,10 @@ function createOutputCopyScheduler(deps) {
       const mergeCopies = store.mergeOutputCopies?.bind(store);
       if (!readCopies || !mergeCopies) return Promise.resolve(null);
       const key = `${companyId ?? ""}|${chatSessionId}`;
-      if (inFlight.has(key)) return Promise.resolve(null);
-      inFlight.add(key);
-      return (async () => {
+      const prior = inFlight.get(key);
+      let pending;
+      pending = (async () => {
+        await prior;
         try {
           const session = await store.getSession(chatSessionId);
           if (!session || session.visibility === "internal" || session.analyzedRunId) return null;
@@ -216797,6 +216960,21 @@ function createOutputCopyScheduler(deps) {
             putBlob: deps.putBlob,
             ...deps.limits ? { limits: deps.limits } : {}
           });
+          const messages = {
+            TOO_LARGE: "\u8D85\u8FC7\u5355\u6587\u4EF6\u4FDD\u5B58\u4E0A\u9650 50 MiB",
+            BUDGET: "\u672C\u8F6E\u4FDD\u5B58\u989D\u5EA6\u5DF2\u7528\u5B8C\uFF0C\u4E0B\u4E00\u8F6E\u91CD\u8BD5",
+            READ_FAILED: "\u539F\u8282\u70B9\u6587\u4EF6\u8BFB\u53D6\u5931\u8D25",
+            STORE_FAILED: "\u670D\u52A1\u7AEF\u6587\u4EF6\u4FDD\u5B58\u5931\u8D25",
+            FILE_CHANGED: "\u8BFB\u53D6\u671F\u95F4\u6587\u4EF6\u53D1\u751F\u53D8\u5316\uFF0C\u8BF7\u91CD\u8BD5"
+          };
+          const previousIssues = await store.readFileIssues?.(chatSessionId) ?? [];
+          const settled = new Set(Object.keys(args.fingerprints));
+          const issues = [
+            ...previousIssues.filter((i) => i.phase === "save" && i.path !== "outputs/" && !settled.has(i.path)),
+            ...result.skipped.map((s2) => ({ phase: "save", path: s2.path, code: s2.code, message: messages[s2.code] }))
+          ];
+          if (args.scanIncomplete) issues.push({ phase: "save", path: "outputs/", code: "SCAN_INCOMPLETE", message: "\u4EA7\u51FA\u76EE\u5F55\u672A\u80FD\u5B8C\u6574\u626B\u63CF\uFF0C\u90E8\u5206\u6587\u4EF6\u53EF\u80FD\u5C1A\u672A\u4FDD\u5B58" });
+          await store.writeFileIssues?.(chatSessionId, "save", issues);
           if (result.skipped.length > 0) {
             const head = result.skipped.slice(0, 5).map((s2) => `${s2.path}:${s2.code}`).join(", ");
             deps.log?.(`[outputs-copy] ${chatSessionId}: \u590D\u5236 ${result.copied.length} \u4E2A\uFF0C\u8DF3\u8FC7 ${result.skipped.length} \u4E2A\uFF08${head}${result.skipped.length > 5 ? " \u2026" : ""}\uFF09`);
@@ -216804,11 +216982,14 @@ function createOutputCopyScheduler(deps) {
           return result;
         } catch (err) {
           deps.log?.(`[outputs-copy] ${chatSessionId}: ${err instanceof Error ? err.message : String(err)}`);
+          await store.writeFileIssues?.(chatSessionId, "save", [{ phase: "save", path: "outputs/", code: "STORE_FAILED", message: "\u4EA7\u51FA\u4FDD\u5B58\u672A\u5B8C\u6210\uFF0C\u8BF7\u91CD\u8BD5" }]).catch(() => void 0);
           return null;
         } finally {
-          inFlight.delete(key);
+          if (inFlight.get(key) === pending) inFlight.delete(key);
         }
       })();
+      inFlight.set(key, pending);
+      return pending;
     }
   };
 }
@@ -216818,9 +216999,9 @@ var init_outputs_copy = __esm({
     "use strict";
     init_src();
     OUTPUT_COPY_LIMITS = {
-      maxFileBytes: 2 * 1024 * 1024,
+      maxFileBytes: 50 * 1024 * 1024,
       maxFiles: 50,
-      maxTotalBytes: 50 * 1024 * 1024
+      maxTotalBytes: 100 * 1024 * 1024
     };
   }
 });
@@ -217030,11 +217211,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto43, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto45, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217161,7 +217342,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto43.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto45.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -217309,11 +217490,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto44, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto46, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217338,7 +217519,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto44.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto46.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -218667,6 +218848,373 @@ var init_recovery_plan = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/files-view.ts
+function reasonFromWorkdirCode(code2) {
+  switch (code2) {
+    case "NODE_OFFLINE":
+      return "NODE_OFFLINE";
+    case "TIMEOUT":
+      return "TIMEOUT";
+    default:
+      return "ERROR";
+  }
+}
+function joinRel2(dir, name) {
+  return dir ? `${dir}/${name}` : name;
+}
+function workdirFileItem(rel, name, size, mtime) {
+  return {
+    id: `workdir:${rel}`,
+    name,
+    kind: "file",
+    // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
+    // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
+    content_type: null,
+    size,
+    updated_at: mtime,
+    source: "workdir",
+    blob_ref: null,
+    path: rel,
+    message_id: null,
+    // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
+    // 这里是**按能力不渲染**的判据，不是置灰假钮。
+    editable: false
+  };
+}
+async function collectWorkdirFiles(bridge, loc, now = Date.now) {
+  const items = [];
+  if (typeof bridge.walk === "function") {
+    const walked = await bridge.walk(
+      loc.nodeId,
+      { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: "" },
+      WORKDIR_TREE_MAX_ENTRIES
+    );
+    if (walked.ok) {
+      let truncated2 = walked.truncated === true;
+      for (const entry of walked.entries) {
+        if (entry.type !== "file") continue;
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated2 = true;
+          break;
+        }
+        const slash = entry.path.lastIndexOf("/");
+        items.push(workdirFileItem(entry.path, entry.path.slice(slash + 1), entry.size, entry.mtime));
+      }
+      return { ok: true, items, truncated: truncated2 };
+    }
+    if (walked.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    if (walked.code !== "UNSUPPORTED") return { ok: false, reason: reasonFromWorkdirCode(walked.code) };
+  }
+  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
+  let listCalls = 0;
+  let truncated = false;
+  const listDir = (path41) => {
+    listCalls += 1;
+    return bridge.list(loc.nodeId, {
+      workdirKey: loc.workdirKey,
+      runtimeKind: loc.runtimeKind,
+      rtId: loc.rtId,
+      path: path41
+    });
+  };
+  const root = await listDir("");
+  if (!root.ok) {
+    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
+  }
+  let level = [{ path: "", outcome: root }];
+  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
+    const nextDirs = [];
+    for (const { path: dir, outcome } of level) {
+      if (!outcome.ok) {
+        truncated = true;
+        continue;
+      }
+      if (outcome.truncated) truncated = true;
+      for (const entry of outcome.entries) {
+        if (entry.type === "dir") {
+          nextDirs.push(joinRel2(dir, entry.name));
+          continue;
+        }
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated = true;
+          continue;
+        }
+        items.push(workdirFileItem(joinRel2(dir, entry.name), entry.name, entry.size, entry.mtime));
+      }
+    }
+    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
+      if (nextDirs.length > 0) truncated = true;
+      break;
+    }
+    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
+    if (budget <= 0 || now() >= deadline) {
+      truncated = true;
+      break;
+    }
+    const take = nextDirs.slice(0, budget);
+    if (take.length < nextDirs.length) truncated = true;
+    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
+    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
+  }
+  return { ok: true, items, truncated };
+}
+async function collectMessageFiles(messages, blobs) {
+  const rows = [];
+  for (const message of messages) {
+    if (!Array.isArray(message.attachments)) continue;
+    message.attachments.forEach((attachment, index2) => {
+      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
+      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
+      rows.push({
+        item: {
+          id: `msg:${message.id}:${index2}`,
+          name: attachment.name,
+          kind: "file",
+          updated_at: attachment.updatedAt ?? message.createdAt,
+          source: "message",
+          blob_ref: blobRef,
+          path: null,
+          message_id: message.id,
+          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
+          // contain `name`）——没有可写回的载体，一律不给编辑入口。
+          editable: blobRef !== null && isEditableFileName(attachment.name)
+        },
+        blobRef,
+        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
+      });
+    });
+  }
+  const metaCache = /* @__PURE__ */ new Map();
+  const metaOf = (ref2) => {
+    if (!blobs) return Promise.resolve(null);
+    let hit = metaCache.get(ref2);
+    if (!hit) {
+      hit = blobs.meta(ref2).catch(() => null);
+      metaCache.set(ref2, hit);
+    }
+    return hit;
+  };
+  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
+    const meta = blobRef ? await metaOf(blobRef) : null;
+    return {
+      ...item,
+      content_type: declaredType ?? meta?.contentType ?? null,
+      size: meta?.size ?? null
+    };
+  }));
+}
+function mergeChatSessionFiles(messageItems, workdirItems, materializedCopies = /* @__PURE__ */ new Set()) {
+  const out = [];
+  const seenMessageKeys = /* @__PURE__ */ new Set();
+  for (const item of [...messageItems].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at))) {
+    const key = `${item.name}\0${item.blob_ref ?? ""}`;
+    if (seenMessageKeys.has(key)) continue;
+    seenMessageKeys.add(key);
+    out.push(item);
+  }
+  const seenWorkdirPaths = /* @__PURE__ */ new Set();
+  for (const item of workdirItems) {
+    if (item.path && materializedCopies.has(item.path)) continue;
+    if (seenWorkdirPaths.has(item.id)) continue;
+    seenWorkdirPaths.add(item.id);
+    out.push(item);
+  }
+  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
+  return out;
+}
+async function findMaterializedAttachmentCopies(messageItems, workdirItems, read) {
+  const copies = /* @__PURE__ */ new Set();
+  const attachments = messageItems.filter((item) => item.blob_ref && /^[a-f0-9]{64}$/.test(item.blob_ref));
+  let budget = CHAT_ATTACHMENT_MAX_BYTES;
+  const deadline = Date.now() + WORKDIR_WALK_BUDGET_MS;
+  let reads = 0;
+  for (const file of workdirItems) {
+    const rootFile = file.path === file.name;
+    const inputFile = file.path?.startsWith("inputs/attachments/") && !file.path.slice("inputs/attachments/".length).includes("/");
+    if (!file.path || !rootFile && !inputFile) continue;
+    const candidates = attachments.filter((attachment) => {
+      const safe = safeAttachmentName(attachment.name);
+      const numbered = file.name.endsWith(`-${safe}`) && /^\d+$/.test(file.name.slice(0, -(safe.length + 1)));
+      return (rootFile ? file.name === attachment.name : file.name === safe || numbered) && attachment.size !== null && attachment.size === file.size;
+    });
+    if (Date.now() >= deadline) break;
+    if (!candidates.length || file.size === null || file.size > budget || reads >= 10) continue;
+    reads += 1;
+    budget -= file.size;
+    let timer;
+    try {
+      const result = await Promise.race([
+        read(file.path, file.size),
+        new Promise((resolve10) => {
+          timer = setTimeout(() => resolve10(null), Math.max(0, deadline - Date.now()));
+        })
+      ]);
+      if (!result?.ok) continue;
+      const bytes2 = Buffer.from(result.contentBase64, "base64");
+      if (bytes2.length !== file.size) continue;
+      const hash2 = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
+      if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
+    } catch {
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
+  return copies;
+}
+var import_node_crypto47, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
+var init_files_view = __esm({
+  "../server/src/domains/chat-sessions/files-view.ts"() {
+    "use strict";
+    import_node_crypto47 = require("node:crypto");
+    init_chat_attachment_files();
+    init_src();
+    WORKDIR_WALK_MAX_DEPTH = 3;
+    WORKDIR_WALK_MAX_ENTRIES = 200;
+    WORKDIR_WALK_MAX_LIST_CALLS = 20;
+    WORKDIR_WALK_BUDGET_MS = 1e4;
+    WORKDIR_TREE_MAX_ENTRIES = 2e3;
+  }
+});
+
+// ../server/src/domains/chat-sessions/persistent-files.ts
+function outputDisplayName(path41) {
+  return path41.startsWith("outputs/") ? path41.slice("outputs/".length) : path41;
+}
+async function collectPersistentSessionFiles(messages, copies, blobs, includeOutputAliases = false) {
+  const attachments = mergeChatSessionFiles(await collectMessageFiles(messages, blobs), []);
+  const outputs = Object.values(copies ?? {}).filter((copy) => Boolean(copy.blobRef)).filter((copy) => includeOutputAliases || !attachments.some((a) => a.name === outputDisplayName(copy.path) && a.blob_ref === copy.blobRef)).map((copy) => ({
+    // 保留历史产出卡的 id；引用和读取来源升级为服务端副本。
+    id: `workdir:${copy.path}`,
+    name: outputDisplayName(copy.path),
+    kind: "file",
+    content_type: copy.contentType,
+    size: copy.size,
+    updated_at: Number.isNaN(Date.parse(copy.mtime)) ? copy.copiedAt : new Date(copy.mtime).toISOString(),
+    source: "output",
+    blob_ref: copy.blobRef,
+    path: copy.path,
+    message_id: null,
+    editable: false
+  }));
+  return [...attachments, ...outputs].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.id.localeCompare(b2.id));
+}
+async function readPersistentSessionFiles(store, sessionId, blobs, includeOutputAliases = false) {
+  const [messages, copies] = await Promise.all([
+    store.listSessionAttachmentMessages ? store.listSessionAttachmentMessages(sessionId) : store.listMessages(sessionId),
+    store.readOutputCopies?.(sessionId) ?? Promise.resolve(null)
+  ]);
+  return collectPersistentSessionFiles(messages, copies, blobs, includeOutputAliases);
+}
+var init_persistent_files = __esm({
+  "../server/src/domains/chat-sessions/persistent-files.ts"() {
+    "use strict";
+    init_files_view();
+  }
+});
+
+// ../server/src/domains/chat-sessions/file-restore.ts
+async function recordSessionFileRestoreExit(store, sessionId, info) {
+  if (info.fileRestoreError) await store.writeFileIssues?.(sessionId, "restore", [{
+    phase: "restore",
+    path: info.fileRestoreError.path,
+    code: "MATERIALIZE_FAILED",
+    message: info.fileRestoreError.message
+  }]);
+}
+function attachmentRestorePath(name, ref2) {
+  const key = (0, import_node_crypto48.createHash)("sha256").update(`${name}\0${ref2}`).digest("hex").slice(0, 12);
+  return `inputs/history/${key}/${safeAttachmentName(name)}`;
+}
+async function prepareSessionFileRestore(input) {
+  const issues = [];
+  const restoreFiles = {};
+  let items;
+  try {
+    items = await readPersistentSessionFiles(input.store, input.sessionId, void 0, true);
+  } catch {
+    const issue2 = { phase: "restore", path: "", code: "INDEX_UNAVAILABLE", message: "\u6587\u4EF6\u6E05\u5355\u8BFB\u53D6\u5931\u8D25\uFF0C\u8BF7\u91CD\u8BD5" };
+    await input.store.writeFileIssues?.(input.sessionId, "restore", [issue2]);
+    throw new ApiError(503, "CHAT_FILE_RESTORE_FAILED", issue2.message);
+  }
+  const saveIssues = (await input.store.readFileIssues?.(input.sessionId) ?? []).filter((i) => i.phase === "save");
+  const fingerprints = await input.store.readOutputFingerprints?.(input.sessionId) ?? {};
+  const copies = await input.store.readOutputCopies?.(input.sessionId) ?? {};
+  const outputPaths = new Set(Object.keys(fingerprints).filter((p2) => p2.startsWith("outputs/")));
+  for (const message of await input.store.listMessages(input.sessionId)) {
+    if (!Array.isArray(message.parts)) continue;
+    for (const part of message.parts) {
+      if (!part || typeof part !== "object" || Array.isArray(part) || part.type !== "outputs" || !Array.isArray(part.outputs)) continue;
+      for (const file of part.outputs) if (file && typeof file === "object" && !Array.isArray(file) && typeof file.path === "string" && file.path.startsWith("outputs/")) outputPaths.add(file.path);
+    }
+  }
+  for (const path41 of outputPaths) {
+    const copy = copies[path41], fp = fingerprints[path41];
+    if ((!copy || fp && (copy.size !== fp.size || copy.mtime !== fp.mtime)) && !saveIssues.some((i) => i.path === path41)) {
+      saveIssues.push({ phase: "save", path: path41, code: "UNSAVED_OUTPUT", message: "\u5386\u53F2\u4EA7\u51FA\u5C1A\u65E0\u6700\u65B0\u6301\u4E45\u526F\u672C\uFF0C\u8BF7\u5728\u539F\u8282\u70B9\u5B8C\u6210\u4FDD\u5B58\u540E\u518D\u5207\u6362" });
+    }
+  }
+  if (input.fresh) issues.push(...saveIssues.map((i) => ({ ...i, phase: "restore", message: `\u539F\u6587\u4EF6\u5C1A\u672A\u4FDD\u5B58\uFF1A${i.message}` })));
+  const lines = ["# \u4F1A\u8BDD\u6587\u4EF6", "", "\u4EE5\u4E0B\u6587\u4EF6\u6765\u81EA\u672C\u4F1A\u8BDD\u7684\u6301\u4E45\u8BB0\u5F55\u3002\u5386\u53F2\u8F93\u5165\u6309\u7248\u672C\u4FDD\u7559\uFF1Boutputs \u662F\u6700\u8FD1\u4FDD\u5B58\u7684\u4EA7\u51FA\u3002", ""];
+  let total = 0;
+  const seen = /* @__PURE__ */ new Set();
+  const add = async (name, ref2, path41, replace2) => {
+    if (seen.has(path41)) return;
+    seen.add(path41);
+    if (!ref2) {
+      issues.push({ phase: "restore", path: path41, code: "MISSING_REFERENCE", message: `${name} \u6CA1\u6709\u53EF\u6062\u590D\u7684\u539F\u4EF6\uFF0C\u8BF7\u91CD\u65B0\u4E0A\u4F20` });
+      return;
+    }
+    try {
+      if (Object.keys(restoreFiles).length >= RESTORE_MAX_FILES) throw new Error("\u8D85\u8FC7\u5355\u8F6E\u6062\u590D\u6587\u4EF6\u6570\u91CF\u4E0A\u9650");
+      const bytes2 = await input.readBlob(ref2);
+      if (total + bytes2.byteLength > RESTORE_MAX_BYTES) throw new Error("\u8D85\u8FC7\u5355\u8F6E\u6062\u590D\u603B\u91CF 100 MiB");
+      const hash2 = (0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex");
+      if (hash2 !== ref2.replace(/^blob:/, "")) throw new Error("\u539F\u4EF6\u5185\u5BB9\u6821\u9A8C\u5931\u8D25");
+      total += bytes2.byteLength;
+      restoreFiles[path41] = { contentBase64: Buffer.from(bytes2).toString("base64"), sha256: hash2, overwrite: replace2 };
+      lines.push(`- ${JSON.stringify(name)} \u2192 ${JSON.stringify(path41)}`);
+    } catch (error2) {
+      issues.push({ phase: "restore", path: path41, code: "FILE_UNAVAILABLE", message: `${name}\uFF1A${error2 instanceof Error ? error2.message : "\u8BFB\u53D6\u5931\u8D25"}` });
+    }
+  };
+  for (const item of items) {
+    const path41 = item.source === "output" ? item.path : attachmentRestorePath(item.name, item.blob_ref ?? item.id);
+    await add(item.name, item.blob_ref, path41, item.source === "message" || input.fresh);
+    if (item.source === "message") {
+      await add(item.name, item.blob_ref, `inputs/attachments/${safeAttachmentName(item.name)}`, true);
+    }
+  }
+  if (!input.fresh) for (const issue2 of saveIssues) {
+    if (!issue2.path.startsWith("outputs/")) continue;
+    restoreFiles[issue2.path] = { contentBase64: "", sha256: (0, import_node_crypto48.createHash)("sha256").update("").digest("hex"), overwrite: false, requireExisting: true };
+    lines.push(`- ${JSON.stringify(issue2.path)} \u5C1A\u672A\u4FDD\u5B58\uFF0C\u5FC5\u987B\u4FDD\u7559\u672C\u673A\u539F\u6587\u4EF6\uFF1A${issue2.message}`);
+  }
+  for (const attachment of input.attachments ?? []) {
+    if (attachment.blobRef && !attachment.path) {
+      await add(attachment.name, attachment.blobRef, attachmentRestorePath(attachment.name, attachment.blobRef), false);
+    }
+  }
+  if (input.supportsFileRestore === false && Object.keys(restoreFiles).length) {
+    issues.push({ phase: "restore", path: "", code: "NODE_UPGRADE_REQUIRED", message: "\u5F53\u524D\u8282\u70B9\u5C1A\u4E0D\u652F\u6301\u6587\u4EF6\u6062\u590D\uFF0C\u8BF7\u5347\u7EA7\u8282\u70B9\u540E\u91CD\u8BD5" });
+  }
+  await input.store.writeFileIssues?.(input.sessionId, "restore", issues);
+  if (issues.length) throw new ApiError(409, "CHAT_FILE_RESTORE_FAILED", `\u6587\u4EF6\u6062\u590D\u672A\u5B8C\u6210\uFF1A${issues.map((i) => i.message).join("\uFF1B")}`);
+  return { restoreFiles, index: lines.join("\n") };
+}
+var import_node_crypto48, RESTORE_MAX_BYTES, RESTORE_MAX_FILES;
+var init_file_restore = __esm({
+  "../server/src/domains/chat-sessions/file-restore.ts"() {
+    "use strict";
+    import_node_crypto48 = require("node:crypto");
+    init_chat_attachment_files();
+    init_router();
+    init_persistent_files();
+    RESTORE_MAX_BYTES = 100 * 1024 * 1024;
+    RESTORE_MAX_FILES = 500;
+  }
+});
+
 // ../server/src/domains/trace/resilient-appender.ts
 var ResilientTraceAppender;
 var init_resilient_appender = __esm({
@@ -219589,7 +220137,7 @@ function wireRecoveredChatTurn(deps) {
       const segText = itemLedger.projectContent();
       const segParts = collectedParts();
       const closingId = currentMsgId;
-      const nextId = (0, import_node_crypto45.randomUUID)();
+      const nextId = (0, import_node_crypto49.randomUUID)();
       currentMsgId = nextId;
       itemLedger.beginSegment();
       live.setAssistantMessageId(nextId);
@@ -219603,7 +220151,7 @@ function wireRecoveredChatTurn(deps) {
           ...segParts.length ? { parts: segParts } : {}
         }).catch(() => void 0);
         await store.appendMessage({
-          id: (0, import_node_crypto45.randomUUID)(),
+          id: (0, import_node_crypto49.randomUUID)(),
           sessionId: plan.chatSessionId,
           role: "user",
           content: text5,
@@ -219635,6 +220183,7 @@ function wireRecoveredChatTurn(deps) {
   const done = (async () => {
     const info = await new Promise((resolve10) => handle.onExit(resolve10));
     clearInterval(ckptTimer);
+    await recordSessionFileRestoreExit(chatStore, plan.chatSessionId, info);
     const failed = exitFailed(info);
     if (failed) {
       const errText2 = exitErrorText(info);
@@ -219664,11 +220213,12 @@ function wireRecoveredChatTurn(deps) {
       log3
     );
     for (const item of closedItems) liveChat.publishItemStatus(plan.chatSessionId, item);
+    const finalParts = await appendOutputsPart(parts, info.fileRestoreError ? void 0 : deps.outputsPart);
     await chatStore.updateMessage(currentMsgId, {
       content: itemLedger.projectContent(),
       status: failed ? "error" : "done",
       completedAt: finishedAt,
-      ...parts.length ? { parts } : {}
+      ...finalParts.length ? { parts: finalParts } : {}
     }).catch(() => void 0);
     const nextRuntimeSessionId = info.runtimeSessionId ?? plan.runtimeSessionId;
     await chatStore.updateSession(plan.chatSessionId, {
@@ -219742,10 +220292,11 @@ async function sweepDanglingChatTurns(deps) {
         text: "\u8FD9\u4E00\u8F6E\u5728\u6267\u884C\u4E2D\u88AB\u6253\u65AD\uFF08serve \u91CD\u542F\u6216\u8282\u70B9\u9000\u51FA\uFF09\uFF0C\u672A\u80FD\u5B8C\u6210\u2014\u2014\u4EE5\u4E0A\u4E3A\u4E2D\u65AD\u524D\u5DF2\u751F\u6210\u7684\u5185\u5BB9\u3002"
       });
     }
+    const finalParts = await appendOutputsPart(parts, deps.outputsPartFor?.(row.sessionId));
     await deps.updateMessage(row.id, {
       status,
       completedAt,
-      ...parts.length ? { parts } : {}
+      ...finalParts.length ? { parts: finalParts } : {}
     });
     closed.push(row.id);
     deps.log?.(`[chat-sweep] \u884C ${row.id}\uFF08\u4F1A\u8BDD ${row.sessionId}\uFF09\u6536\u655B\u4E3A ${status}\uFF08${reason}\uFF09`);
@@ -219767,6 +220318,7 @@ async function reconcileChatExitFrame(deps) {
     if (meta?.dispatchId !== deps.dispatchId) continue;
     if (deps.ownedRunId?.(row.sessionId) === row.runId) return false;
     const turn = await deps.getTurnForRun?.(row.sessionId, run.id);
+    const outputsPart = deps.info.fileRestoreError ? void 0 : deps.outputsPartFor?.(row.sessionId);
     if (turn && turn.status !== "reserved" && turn.status !== "running") {
       await reconcileSettledChatTurn({
         plan: {
@@ -219785,11 +220337,13 @@ async function reconcileChatExitFrame(deps) {
         chatStore: deps.chatStore,
         trace: deps.trace,
         ...deps.items ? { items: deps.items } : {},
+        ...outputsPart ? { outputsPart } : {},
         ...deps.log ? { log: deps.log } : {}
       });
       return true;
     }
     const { info } = deps;
+    await recordSessionFileRestoreExit(deps.chatStore, row.sessionId, info);
     const failed = exitFailed(info);
     const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     const stash = deps.drainStash(deps.dispatchId);
@@ -219837,11 +220391,12 @@ async function reconcileChatExitFrame(deps) {
       failed ? "failed" : "completed",
       deps.log ?? (() => void 0)
     );
+    const finalParts = await appendOutputsPart(parts, outputsPart);
     await deps.chatStore.updateMessage(row.id, {
       content: itemLedger.projectContent(),
       status: failed ? "error" : "done",
       completedAt: finishedAt,
-      ...parts.length ? { parts } : {}
+      ...finalParts.length ? { parts: finalParts } : {}
     });
     const metaRsid = typeof meta?.runtimeSessionId === "string" ? meta.runtimeSessionId : void 0;
     const nextRuntimeSessionId = info.runtimeSessionId ?? metaRsid;
@@ -219904,7 +220459,7 @@ async function planChatTurnRecoveryAcrossCompanies(deps) {
   return { groups, settled, scanned, skipped };
 }
 async function sweepDanglingChatTurnsAcrossCompanies(deps) {
-  const { listCompanies, storesFor, onCompanyError, onSessionClosed, log: log3, ...rest } = deps;
+  const { listCompanies, storesFor, onCompanyError, onSessionClosed, sessionOutputsScan, log: log3, ...rest } = deps;
   const closed = [];
   for (const companyId of await listCompanies()) {
     try {
@@ -219915,7 +220470,8 @@ async function sweepDanglingChatTurnsAcrossCompanies(deps) {
         listMessages: (sid) => stores.chatStore.listMessages(sid),
         updateMessage: (id, patch) => stores.chatStore.updateMessage(id, patch),
         ...log3 ? { log: (m2) => log3(companyId ? `${m2}\uFF3B${companyId}\uFF3D` : m2) } : {},
-        ...onSessionClosed ? { onSessionClosed: (sid, reason, messageId) => onSessionClosed(sid, reason, messageId, companyId) } : {}
+        ...onSessionClosed ? { onSessionClosed: (sid, reason, messageId) => onSessionClosed(sid, reason, messageId, companyId) } : {},
+        ...sessionOutputsScan ? { outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId) } : {}
       });
       closed.push(...ids2);
     } catch (err) {
@@ -219925,7 +220481,7 @@ async function sweepDanglingChatTurnsAcrossCompanies(deps) {
   return closed;
 }
 async function reconcileChatExitFrameAcrossCompanies(deps) {
-  const { listCompanies, storesFor, onCompanyError, log: log3, ...rest } = deps;
+  const { listCompanies, storesFor, onCompanyError, sessionOutputsScan, log: log3, ...rest } = deps;
   for (const companyId of await listCompanies()) {
     try {
       const stores = await storesFor(companyId);
@@ -219935,7 +220491,8 @@ async function reconcileChatExitFrameAcrossCompanies(deps) {
         chatStore: stores.chatStore,
         ...stores.getTurnForRun ? { getTurnForRun: stores.getTurnForRun } : {},
         ...stores.items ? { items: stores.items } : {},
-        ...log3 ? { log: (m2) => log3(companyId ? `${m2}\uFF3B${companyId}\uFF3D` : m2) } : {}
+        ...log3 ? { log: (m2) => log3(companyId ? `${m2}\uFF3B${companyId}\uFF3D` : m2) } : {},
+        ...sessionOutputsScan ? { outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId) } : {}
       });
       if (handled3) return true;
     } catch (err) {
@@ -219957,9 +220514,11 @@ async function reconcileSettledChatTurn(deps) {
     succeeded ? "completed" : "failed",
     deps.log ?? (() => void 0)
   );
+  const withOutputs = await appendOutputsPart(plan.seedParts, deps.outputsPart);
   await deps.chatStore.updateMessage(plan.assistantMsgId, {
     status: succeeded ? "done" : "error",
-    completedAt
+    completedAt,
+    ...withOutputs !== plan.seedParts ? { parts: withOutputs } : {}
   });
   const run = await deps.trace.getRun(plan.runId);
   if (run?.status === "running") {
@@ -219977,6 +220536,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
     const { plan, turn, companyId, stores } = hit;
     log3(`[chat-claim] company=${companyId ?? "<default>"} session=${plan.chatSessionId} run=${plan.runId} dispatch=${plan.dispatchId} \u7ED3\u8BBA=settled\uFF08\u4F9D\u636E\uFF1A\u540C\u516C\u53F8\u8F6E\u6B21 ${turn.id} \u5DF2 ${turn.status}\uFF0CcompletedAt=${turn.completedAt ?? "-"}\uFF09`);
     deps.evict(plan.dispatchId);
+    const outputsPart = outputsPartProvider(deps.sessionOutputsScan, plan.chatSessionId, companyId);
     try {
       await reconcileSettledChatTurn({
         plan,
@@ -219984,6 +220544,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
         chatStore: stores.chatStore,
         trace: deps.trace,
         ...stores.items ? { items: stores.items } : {},
+        ...outputsPart ? { outputsPart } : {},
         log: log3
       });
     } catch (err) {
@@ -220019,6 +220580,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
             ...companyId ? { companyId } : {}
           });
         } : void 0;
+        const outputsPart = outputsPartProvider(deps.sessionOutputsScan, plan.chatSessionId, companyId);
         const { done } = wireRecoveredChatTurn({
           plan,
           handle,
@@ -220029,6 +220591,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
           unregister: () => deps.unregister(plan),
           ...deps.traceHealth ? { traceHealth: deps.traceHealth } : {},
           ...onTurnSettled ? { onTurnSettled } : {},
+          ...outputsPart ? { outputsPart } : {},
           ...stores.items ? { items: stores.items, itemsTurnId } : {},
           log: log3
         });
@@ -220042,15 +220605,17 @@ async function recoverChatTurnsAcrossCompanies(deps) {
   }
   return { ...result, recovered };
 }
-var import_node_crypto45, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
+var import_node_crypto49, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
 var init_chat_recovery = __esm({
   "../server/src/chat-recovery.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    init_file_restore();
+    import_node_crypto49 = require("node:crypto");
     init_chat_parts();
     init_sink();
     init_resilient_appender();
     init_chat_item_ledger();
+    init_chat_assistant_turn();
     init_src6();
     init_session_exit_outcome();
     asObj3 = (v2) => v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
@@ -220076,8 +220641,8 @@ var init_chat_recovery = __esm({
 
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto46.randomBytes)(16);
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto50.randomBytes)(16);
+  const dk = (0, import_node_crypto50.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -220094,8 +220659,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto46.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto50.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto50.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -220103,17 +220668,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto50.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto50.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto46.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto50.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -220125,21 +220690,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto46.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto50.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto46.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto50.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto46.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto50.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto46, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto50, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto46 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -221289,16 +221854,16 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto47.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto51.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto47, REDACTED_MARKER, ActorsService, mask, changedKeys;
+var import_node_crypto51, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
-    import_node_crypto47 = require("node:crypto");
+    import_node_crypto51 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -221862,7 +222427,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path41, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto51.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path41, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -222514,15 +223079,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto47.randomBytes)(12);
-        const cipher = (0, import_node_crypto47.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto51.randomBytes)(12);
+        const cipher = (0, import_node_crypto51.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc4 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc4.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto47.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto51.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -223140,7 +223705,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto52.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -223165,11 +223730,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto52.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto52.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223190,11 +223755,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto52.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto52.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223214,7 +223779,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto52.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223238,7 +223803,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto48.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto52.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -223271,7 +223836,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto52.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223288,11 +223853,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto48;
+var import_node_crypto52;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto48 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
   }
 });
 
@@ -224803,7 +225368,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto49.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto53.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -224843,11 +225408,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
-var import_node_crypto49;
+var import_node_crypto53;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto49 = require("node:crypto");
+    import_node_crypto53 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -225017,235 +225582,6 @@ var init_assistant_tier_dispatch = __esm({
   }
 });
 
-// ../server/src/domains/chat-sessions/files-view.ts
-function reasonFromWorkdirCode(code2) {
-  switch (code2) {
-    case "NODE_OFFLINE":
-      return "NODE_OFFLINE";
-    case "TIMEOUT":
-      return "TIMEOUT";
-    default:
-      return "ERROR";
-  }
-}
-function joinRel2(dir, name) {
-  return dir ? `${dir}/${name}` : name;
-}
-function workdirFileItem(rel, name, size, mtime) {
-  return {
-    id: `workdir:${rel}`,
-    name,
-    kind: "file",
-    // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
-    // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
-    content_type: null,
-    size,
-    updated_at: mtime,
-    source: "workdir",
-    blob_ref: null,
-    path: rel,
-    message_id: null,
-    // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
-    // 这里是**按能力不渲染**的判据，不是置灰假钮。
-    editable: false
-  };
-}
-async function collectWorkdirFiles(bridge, loc, now = Date.now) {
-  const items = [];
-  if (typeof bridge.walk === "function") {
-    const walked = await bridge.walk(
-      loc.nodeId,
-      { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: "" },
-      WORKDIR_TREE_MAX_ENTRIES
-    );
-    if (walked.ok) {
-      let truncated2 = walked.truncated === true;
-      for (const entry of walked.entries) {
-        if (entry.type !== "file") continue;
-        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
-          truncated2 = true;
-          break;
-        }
-        const slash = entry.path.lastIndexOf("/");
-        items.push(workdirFileItem(entry.path, entry.path.slice(slash + 1), entry.size, entry.mtime));
-      }
-      return { ok: true, items, truncated: truncated2 };
-    }
-    if (walked.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
-    if (walked.code !== "UNSUPPORTED") return { ok: false, reason: reasonFromWorkdirCode(walked.code) };
-  }
-  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
-  let listCalls = 0;
-  let truncated = false;
-  const listDir = (path41) => {
-    listCalls += 1;
-    return bridge.list(loc.nodeId, {
-      workdirKey: loc.workdirKey,
-      runtimeKind: loc.runtimeKind,
-      rtId: loc.rtId,
-      path: path41
-    });
-  };
-  const root = await listDir("");
-  if (!root.ok) {
-    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
-    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
-  }
-  let level = [{ path: "", outcome: root }];
-  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
-    const nextDirs = [];
-    for (const { path: dir, outcome } of level) {
-      if (!outcome.ok) {
-        truncated = true;
-        continue;
-      }
-      if (outcome.truncated) truncated = true;
-      for (const entry of outcome.entries) {
-        if (entry.type === "dir") {
-          nextDirs.push(joinRel2(dir, entry.name));
-          continue;
-        }
-        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
-          truncated = true;
-          continue;
-        }
-        items.push(workdirFileItem(joinRel2(dir, entry.name), entry.name, entry.size, entry.mtime));
-      }
-    }
-    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
-      if (nextDirs.length > 0) truncated = true;
-      break;
-    }
-    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
-    if (budget <= 0 || now() >= deadline) {
-      truncated = true;
-      break;
-    }
-    const take = nextDirs.slice(0, budget);
-    if (take.length < nextDirs.length) truncated = true;
-    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
-    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
-  }
-  return { ok: true, items, truncated };
-}
-async function collectMessageFiles(messages, blobs) {
-  const rows = [];
-  for (const message of messages) {
-    if (!Array.isArray(message.attachments)) continue;
-    message.attachments.forEach((attachment, index2) => {
-      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
-      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
-      rows.push({
-        item: {
-          id: `msg:${message.id}:${index2}`,
-          name: attachment.name,
-          kind: "file",
-          updated_at: attachment.updatedAt ?? message.createdAt,
-          source: "message",
-          blob_ref: blobRef,
-          path: null,
-          message_id: message.id,
-          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
-          // contain `name`）——没有可写回的载体，一律不给编辑入口。
-          editable: blobRef !== null && isEditableFileName(attachment.name)
-        },
-        blobRef,
-        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
-      });
-    });
-  }
-  const metaCache = /* @__PURE__ */ new Map();
-  const metaOf = (ref2) => {
-    if (!blobs) return Promise.resolve(null);
-    let hit = metaCache.get(ref2);
-    if (!hit) {
-      hit = blobs.meta(ref2).catch(() => null);
-      metaCache.set(ref2, hit);
-    }
-    return hit;
-  };
-  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
-    const meta = blobRef ? await metaOf(blobRef) : null;
-    return {
-      ...item,
-      content_type: declaredType ?? meta?.contentType ?? null,
-      size: meta?.size ?? null
-    };
-  }));
-}
-function mergeChatSessionFiles(messageItems, workdirItems, materializedCopies = /* @__PURE__ */ new Set()) {
-  const out = [];
-  const seenMessageKeys = /* @__PURE__ */ new Set();
-  for (const item of [...messageItems].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at))) {
-    const key = `${item.name}\0${item.blob_ref ?? ""}`;
-    if (seenMessageKeys.has(key)) continue;
-    seenMessageKeys.add(key);
-    out.push(item);
-  }
-  const seenWorkdirPaths = /* @__PURE__ */ new Set();
-  for (const item of workdirItems) {
-    if (item.path && materializedCopies.has(item.path)) continue;
-    if (seenWorkdirPaths.has(item.id)) continue;
-    seenWorkdirPaths.add(item.id);
-    out.push(item);
-  }
-  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
-  return out;
-}
-async function findMaterializedAttachmentCopies(messageItems, workdirItems, read) {
-  const copies = /* @__PURE__ */ new Set();
-  const attachments = messageItems.filter((item) => item.blob_ref && /^[a-f0-9]{64}$/.test(item.blob_ref));
-  let budget = CHAT_ATTACHMENT_MAX_BYTES;
-  const deadline = Date.now() + WORKDIR_WALK_BUDGET_MS;
-  let reads = 0;
-  for (const file of workdirItems) {
-    const rootFile = file.path === file.name;
-    const inputFile = file.path?.startsWith("inputs/attachments/") && !file.path.slice("inputs/attachments/".length).includes("/");
-    if (!file.path || !rootFile && !inputFile) continue;
-    const candidates = attachments.filter((attachment) => {
-      const safe = safeAttachmentName(attachment.name);
-      const numbered = file.name.endsWith(`-${safe}`) && /^\d+$/.test(file.name.slice(0, -(safe.length + 1)));
-      return (rootFile ? file.name === attachment.name : file.name === safe || numbered) && attachment.size !== null && attachment.size === file.size;
-    });
-    if (Date.now() >= deadline) break;
-    if (!candidates.length || file.size === null || file.size > budget || reads >= 10) continue;
-    reads += 1;
-    budget -= file.size;
-    let timer;
-    try {
-      const result = await Promise.race([
-        read(file.path, file.size),
-        new Promise((resolve10) => {
-          timer = setTimeout(() => resolve10(null), Math.max(0, deadline - Date.now()));
-        })
-      ]);
-      if (!result?.ok) continue;
-      const bytes2 = Buffer.from(result.contentBase64, "base64");
-      if (bytes2.length !== file.size) continue;
-      const hash2 = (0, import_node_crypto50.createHash)("sha256").update(bytes2).digest("hex");
-      if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
-    } catch {
-    } finally {
-      if (timer) clearTimeout(timer);
-    }
-  }
-  return copies;
-}
-var import_node_crypto50, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
-var init_files_view = __esm({
-  "../server/src/domains/chat-sessions/files-view.ts"() {
-    "use strict";
-    import_node_crypto50 = require("node:crypto");
-    init_chat_attachment_files();
-    init_src();
-    WORKDIR_WALK_MAX_DEPTH = 3;
-    WORKDIR_WALK_MAX_ENTRIES = 200;
-    WORKDIR_WALK_MAX_LIST_CALLS = 20;
-    WORKDIR_WALK_BUDGET_MS = 1e4;
-    WORKDIR_TREE_MAX_ENTRIES = 2e3;
-  }
-});
-
 // ../server/src/domains/projects/chat-files.ts
 function isProjectChatSession(session) {
   if (session.visibility === "internal") return false;
@@ -225257,79 +225593,45 @@ function chatFolderTitle(session) {
   const title = session.title?.trim();
   return title ? title : "\u672A\u547D\u540D\u5BF9\u8BDD";
 }
-function outputDisplayName(path41) {
-  return path41.startsWith("outputs/") ? path41.slice("outputs/".length) : path41;
-}
 async function collectProjectChatFiles(chat, projectId2, meta, options = {}) {
   const scope = isUncategorizedProjectId(projectId2) ? null : projectId2;
-  const [attachmentMessages, outputSessions] = await Promise.all([
-    chat.listAttachmentMessages ? chat.listAttachmentMessages(scope) : Promise.resolve([]),
-    chat.listOutputCopies ? chat.listOutputCopies(scope) : Promise.resolve([])
+  const [attachmentMessages, outputSessions, taskSessions] = await Promise.all([
+    chat.listAttachmentMessages?.(scope) ?? [],
+    chat.listOutputCopies?.(scope) ?? [],
+    chat.listFileSessionsByWorkspaces?.(options.workOrderIds ?? []) ?? []
   ]);
-  const sessionIds = [.../* @__PURE__ */ new Set([
+  const ids2 = [.../* @__PURE__ */ new Set([
     ...attachmentMessages.map((m2) => m2.sessionId),
-    ...outputSessions.map((s2) => s2.sessionId)
+    ...outputSessions.map((s2) => s2.sessionId),
+    ...taskSessions.map((s2) => s2.id)
   ])];
-  const sessions = /* @__PURE__ */ new Map();
-  await Promise.all(sessionIds.map(async (id) => {
-    const session = await chat.getSession(id);
-    if (!session) return;
-    if ((session.projectId ?? null) !== scope) return;
-    if (!isProjectChatSession(session)) return;
-    if (options.isDelegationChild && await options.isDelegationChild(id).catch(() => false)) return;
-    sessions.set(id, session);
-  }));
   const out = [];
-  const base = (session) => ({
-    projectId: projectId2,
-    chatSessionId: session.id,
-    chatTitle: chatFolderTitle(session),
-    chatOwnerId: session.humanActorId
-  });
-  const bySession = /* @__PURE__ */ new Map();
-  for (const message of attachmentMessages) {
-    if (!sessions.has(message.sessionId)) continue;
-    const list2 = bySession.get(message.sessionId) ?? [];
-    list2.push(message);
-    bySession.set(message.sessionId, list2);
-  }
-  for (const [sessionId, messages] of bySession) {
-    const session = sessions.get(sessionId);
-    const rows = await collectMessageFiles(messages.map((m2) => ({ ...m2, id: m2.messageId })), { meta });
-    for (const row of mergeChatSessionFiles(rows, [])) {
-      if (row.blob_ref === null) continue;
-      out.push({
-        ...base(session),
-        fileId: `chat:${sessionId}:${row.id}`,
-        name: row.name,
-        blobId: row.blob_ref,
-        ...row.content_type ? { contentType: row.content_type } : {},
-        size: row.size,
-        uploadedBy: session.humanActorId,
-        uploadedAt: row.updated_at,
-        chatSource: "attachment"
-      });
-    }
-  }
-  for (const record8 of outputSessions) {
-    const session = sessions.get(record8.sessionId);
-    if (!session) continue;
-    const seen = new Set(out.filter((file) => file.chatSessionId === session.id).map((file) => `${file.name}\0${file.blobId}`));
-    const copies = record8.copies ?? {};
-    for (const path41 of Object.keys(copies).sort((a, b2) => a.localeCompare(b2))) {
-      const copy = copies[path41];
-      if (!copy?.blobRef) continue;
-      if (seen.has(`${copy.name}\0${copy.blobRef}`)) continue;
+  for (const id of ids2) {
+    const session = await chat.getSession(id);
+    if (!session || session.visibility === "internal" || session.analyzedRunId) continue;
+    if (session.workspace) {
+      if (!options.workOrderIds?.includes(session.workspace)) continue;
+    } else if ((session.projectId ?? null) !== scope || !isProjectChatSession(session)) continue;
+    if (options.isDelegationChild && await options.isDelegationChild(id)) continue;
+    const items = await readPersistentSessionFiles(chat, id, { meta });
+    const fileIssues = await chat.readFileIssues?.(id) ?? [];
+    for (const item of items) {
+      if (!item.blob_ref) continue;
       out.push({
-        ...base(session),
-        fileId: `chat:${session.id}:out:${copy.path}`,
-        name: outputDisplayName(copy.path),
-        blobId: copy.blobRef,
-        ...copy.contentType ? { contentType: copy.contentType } : {},
-        size: copy.size,
-        uploadedBy: session.aiActorId,
-        uploadedAt: Number.isNaN(Date.parse(copy.mtime)) ? copy.copiedAt : new Date(copy.mtime).toISOString(),
-        chatSource: "output"
+        projectId: projectId2,
+        ...fileIssues.length ? { fileIssues } : {},
+        chatSessionId: id,
+        chatTitle: chatFolderTitle(session),
+        chatOwnerId: session.humanActorId,
+        fileId: `chat:${id}:${item.id}`,
+        name: item.name,
+        blobId: item.blob_ref,
+        ...item.content_type ? { contentType: item.content_type } : {},
+        size: item.size,
+        uploadedBy: item.source === "output" ? session.aiActorId : session.humanActorId,
+        uploadedAt: item.updated_at,
+        chatSource: item.source === "output" ? "output" : "attachment",
+        ...session.workspace ? { taskId: session.workspace } : {}
       });
     }
   }
@@ -225338,7 +225640,8 @@ async function collectProjectChatFiles(chat, projectId2, meta, options = {}) {
 var init_chat_files2 = __esm({
   "../server/src/domains/projects/chat-files.ts"() {
     "use strict";
-    init_files_view();
+    init_persistent_files();
+    init_persistent_files();
     init_uncategorized_project();
   }
 });
@@ -226302,7 +226605,8 @@ function toApiProjectFilesView(view) {
       // 对话文件夹（`"chat"`）：前端据此换带对话气泡的文件夹图标。其余文件夹与文件行为 null。
       folder_kind: item.folderKind ?? null,
       // 对话文件夹及其子文件所属的对话；前端「所属任务」列的「对话」筛选档靠它。其余行为 null。
-      chat_session_id: item.chatSessionId ?? null
+      chat_session_id: item.chatSessionId ?? null,
+      ...item.fileIssues?.length ? { file_issues: item.fileIssues } : {}
     }))
   };
 }
@@ -228626,11 +228930,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto51, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto54, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
     import_node_fs14 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -228663,7 +228967,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto51.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto54.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -228786,7 +229090,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto51.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto54.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -229737,13 +230041,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs15, import_node_path20, import_node_crypto52, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs15, import_node_path20, import_node_crypto55, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs15 = __toESM(require("node:fs"), 1);
     import_node_path20 = __toESM(require("node:path"), 1);
-    import_node_crypto52 = __toESM(require("node:crypto"), 1);
+    import_node_crypto55 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -229761,7 +230065,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto52.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto55.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -231007,11 +231311,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto53, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto56, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -231103,7 +231407,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto56.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -231312,7 +231616,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto56.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -231443,7 +231747,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto53.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto56.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -231500,7 +231804,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto56.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -231738,11 +232042,11 @@ var init_service6 = __esm({
 });
 
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto54, MemberOffboardingService;
+var import_node_crypto57, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto57 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -231814,7 +232118,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto54.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto57.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -232324,18 +232628,18 @@ var init_routes6 = __esm({
 
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto55.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto58.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto55.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto58.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto55, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto58, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -232360,7 +232664,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto55.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto58.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -232780,7 +233084,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope = companyId?.trim();
-  const suffix = scope ? `c${(0, import_node_crypto56.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope ? `c${(0, import_node_crypto59.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -233109,12 +233413,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto56;
+var import_node_crypto59;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto56 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
   }
 });
 
@@ -233675,7 +233979,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto57.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto60.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -233858,13 +234162,13 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto57.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto60.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto57, import_node_fs16, import_node_url6, import_node_path21;
+var import_node_crypto60, import_node_fs16, import_node_url6, import_node_path21;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     import_node_fs16 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path21 = require("node:path");
@@ -235055,7 +235359,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs26.statSync(absBundle).size;
-  const digest = (0, import_node_crypto58.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto61.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -235151,12 +235455,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto58, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto61, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
     fs26 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path25 = __toESM(require("node:path"), 1);
@@ -235176,7 +235480,7 @@ var init_readonly_bundle = __esm({
 
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto59.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto62.randomUUID)().slice(0, 8)}`);
   return async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -235269,7 +235573,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key) {
-  return `ws:wo-${(0, import_node_crypto59.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto62.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(kernel, workspace) {
   const arts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === workspace);
@@ -235282,11 +235586,11 @@ function existingWorkorder(kernel, workspace) {
     spawned: arts.map((a) => ({ id: a.id, type: a.type, owner: a.owner }))
   };
 }
-var import_node_crypto59, enc2;
+var import_node_crypto62, enc2;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     init_uncategorized_project();
     init_src();
     init_planner();
@@ -236716,12 +237020,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto60, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto63, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service8 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     init_src5();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -236952,7 +237256,7 @@ var init_service8 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto60.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto63.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -237879,6 +238183,10 @@ var init_project_bundle = __esm({
 });
 
 // ../server/src/domains/chat-sessions/index.ts
+function sessionProjectIdToStore(projectId2) {
+  if (typeof projectId2 !== "string" || projectId2.trim() === "") return null;
+  return isUncategorizedProjectId(projectId2) ? null : projectId2;
+}
 function parseDurationMs(raw) {
   if (!raw) return null;
   const m2 = /^(\d+)\s*(ms|s|m|h|d)?$/i.exec(raw.trim());
@@ -238052,7 +238360,7 @@ function createChatSessionsDomain(opts) {
       if (!text5.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto61.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto64.randomUUID)()}`;
       drafts.set(id, { text: text5, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -238104,7 +238412,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = await currentRuntimeId(body2.aiActorId) ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto64.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -238117,7 +238425,7 @@ function createChatSessionsDomain(opts) {
         // 决策 0030 缝合：绑定是会话的语义属性（工单频道/问题会话给、脑暴省略）——发消息端据它带 workspace，
         // 两个入口页面行为一致。区别于 linkWorkOrder（出处关联，建单脑暴也有、不构成绑定）。
         workspace: body2.workspace ?? null,
-        projectId: body2.projectId ?? null,
+        projectId: sessionProjectIdToStore(body2.projectId),
         // 会话级模型覆盖（口径 A）：建会话时就带上选择；空串/空白归 null = 沿用旧解析，不写员工全局配置。
         model: normalizeModel(body2.model),
         // ADR-0058：分析会话指向被分析 run；非空即"这是分析会话"（不进主聊天列表、进 trace 分析视图）。
@@ -238186,7 +238494,7 @@ function createChatSessionsDomain(opts) {
         ...body2.runtimeId !== void 0 ? { runtimeId: body2.runtimeId } : {},
         ...Object.prototype.hasOwnProperty.call(body2, "runtimeSessionId") ? { runtimeSessionId: body2.runtimeSessionId } : {},
         ...body2.title !== void 0 ? { title: body2.title } : {},
-        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: body2.projectId } : {},
+        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: sessionProjectIdToStore(body2.projectId) } : {},
         // 会话级模型覆盖：显式传 null / 空串 = 清除覆盖（回到旧解析）；不传这一项 = 不动它。
         ...Object.prototype.hasOwnProperty.call(body2, "model") ? { model: normalizeModel(body2.model) } : {},
         // 只有显式传了才写——改标题 / 换项目 / 换模型都不是「有新动静」，不该顶掉列表顺序与已读水位。
@@ -238210,7 +238518,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto64.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -238251,7 +238559,7 @@ function createChatSessionsDomain(opts) {
       const known = key ? cur.find((x2) => x2.clientKey === key) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store.enqueuePendingMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto64.randomUUID)(),
         chatSessionId: sid,
         text: text5,
         ...attachments.length ? { attachments } : {},
@@ -238568,6 +238876,20 @@ function createChatSessionsDomain(opts) {
       return { status: 200, body: body2 };
     });
     router.get("/api/chat-sessions/:id/workdir/file", async (req) => {
+      const store2 = await storeFor(req);
+      const session = await store2.getSession(req.params.id);
+      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const copy = (await store2.readOutputCopies?.(session.id))?.[req.query?.get("path") ?? ""];
+      if (copy) {
+        const blobs = opts.resolveBlobs ? await opts.resolveBlobs(req.auth.companyId) : opts.blobs;
+        if (!blobs?.get) throw new ApiError(503, "BLOB_STORE_UNAVAILABLE", "\u6587\u4EF6\u5B58\u50A8\u6682\u4E0D\u53EF\u7528");
+        const bytes2 = Buffer.from(await blobs.get(copy.blobRef));
+        return { status: 200, body: bytes2, headers: {
+          "content-type": copy.contentType ?? "application/octet-stream",
+          "content-length": String(bytes2.length),
+          "cache-control": "no-store"
+        } };
+      }
       const bridge = opts.workdir?.();
       if (!bridge) throw new ApiError(404, "NOT_FOUND", "\u5DE5\u4F5C\u533A\u6587\u4EF6\u6D4F\u89C8\u672A\u542F\u7528");
       const loc = await locateWorkdir(await storeFor(req), req.auth.companyId, req.params.id, req.auth.actor);
@@ -238604,9 +238926,12 @@ function createChatSessionsDomain(opts) {
       const store2 = await storeFor(req);
       const session = await store2.getSession(req.params.id);
       if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
-      const attachmentRows = store2.listSessionAttachmentMessages ? await store2.listSessionAttachmentMessages(session.id) : await store2.listMessages(session.id);
       const blobAccess = opts.resolveBlobs ? await opts.resolveBlobs(req.auth?.companyId) : opts.blobs;
-      const messageItems = await collectMessageFiles(attachmentRows, blobAccess);
+      const persistentItems = await readPersistentSessionFiles(store2, session.id, blobAccess, true);
+      const messageItems = persistentItems.filter((item) => item.source === "message");
+      const allOutputs = persistentItems.filter((item) => item.source === "output");
+      const savedOutputs = allOutputs.filter((output) => !messageItems.some((m2) => m2.name === output.name && m2.blob_ref === output.blob_ref));
+      const fileIssues = await store2.readFileIssues?.(session.id) ?? [];
       let workdirItems = [];
       let materializedCopies = /* @__PURE__ */ new Set();
       let workdirAvailable = false;
@@ -238633,8 +238958,13 @@ function createChatSessionsDomain(opts) {
           }
         }
       }
-      const items = mergeChatSessionFiles(messageItems, workdirItems, materializedCopies);
+      const archivedPaths = new Set(allOutputs.map((item) => item.path));
+      const items = mergeChatSessionFiles(messageItems, [
+        ...savedOutputs,
+        ...workdirItems.filter((item) => !archivedPaths.has(item.path) && !item.path?.startsWith("inputs/history/"))
+      ], materializedCopies);
       const body2 = {
+        ...fileIssues.length ? { fileIssues } : {},
         total: items.length,
         items,
         workdirAvailable,
@@ -238702,13 +239032,14 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto61, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
+var import_node_crypto64, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
 var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     init_src();
     init_chat_session();
+    init_persistent_files();
     init_files_view();
     init_router();
     init_collab();
@@ -238723,6 +239054,7 @@ var init_chat_sessions2 = __esm({
     init_company_data_store_router();
     init_workorder_terminal();
     init_session_workdir();
+    init_uncategorized_project();
     init_project_bundle();
     DEFAULT_SNAPSHOT_ITEMS = 400;
     MAX_SNAPSHOT_ITEMS = 1e3;
@@ -240110,7 +240442,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto62.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto65.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -240166,11 +240498,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto62, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto65, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service9 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -240984,11 +241316,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto63.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto66.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto63.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto66.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -241018,11 +241350,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto63, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto66, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -242178,7 +242510,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto64.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto67.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -242195,11 +242527,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto64;
+var import_node_crypto67;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -242313,17 +242645,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto65.createHash)("sha256").update(canonical).digest("hex");
+  return (0, import_node_crypto68.createHash)("sha256").update(canonical).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto65.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto68.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto65, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto68, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -242534,7 +242866,7 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto66.randomUUID)();
+  const requestId = (0, import_node_crypto69.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve10) => {
@@ -242547,11 +242879,11 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve10, timer });
   });
 }
-var import_node_crypto66, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto69, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 500;
@@ -242901,7 +243233,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto66.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto69.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -243138,7 +243470,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto66.randomUUID)();
+        const requestId = (0, import_node_crypto69.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve10) => {
@@ -243246,13 +243578,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto67, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto70, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto67.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto70.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc3 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -243499,11 +243831,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto68, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto71, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_src5();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -243772,7 +244104,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto68.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto71.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -244151,8 +244483,8 @@ ${ctx.nodeFault}
             this.deps.log?.(`[coordinator] ${workspace} \u5168\u5C40\u4E0A\u4E0B\u6587\u8BFB\u53D6\u5931\u8D25\uFF0C\u7EE7\u7EED\u6CBF\u7528\u539F\u534F\u8C03\u8005\u4EFB\u52A1\uFF1A${String(error2)}`);
           }
         }
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto68.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto68.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto71.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto71.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           task,
           ``,
@@ -244196,7 +244528,7 @@ ${ctx.nodeFault}
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto68.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto71.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -244401,11 +244733,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto69, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto72, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -244585,7 +244917,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto69.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto72.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash2, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -250858,6 +251190,7 @@ var init_postgres_chat_sessions = __esm({
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS visibility text`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS outputs_fingerprints jsonb`);
         await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS outputs_copies jsonb`);
+        await pool.query(`ALTER TABLE ${q2}.chat_sessions ADD COLUMN IF NOT EXISTS file_sync_issues jsonb`);
         await pool.query(`
       WITH ranked AS (
         SELECT id, row_number() OVER (PARTITION BY session_id ORDER BY seq, created_at, id) AS rn
@@ -251129,6 +251462,29 @@ var init_postgres_chat_sessions = __esm({
         );
         return r.rows[0]?.outputs_copies ?? null;
       }
+      async readFileIssues(sessionId) {
+        const r = await this.pool.query(
+          `SELECT file_sync_issues FROM ${this.s}.chat_sessions WHERE id = $1 AND company_id = $2`,
+          [sessionId, this.companyId]
+        );
+        return Object.values(r.rows[0]?.file_sync_issues ?? {}).flat();
+      }
+      async writeFileIssues(sessionId, phase, issues) {
+        await this.pool.query(
+          `UPDATE ${this.s}.chat_sessions SET file_sync_issues = COALESCE(file_sync_issues, '{}'::jsonb) || $1::jsonb
+       WHERE id = $2 AND company_id = $3`,
+          [JSON.stringify({ [phase]: issues }), sessionId, this.companyId]
+        );
+      }
+      async listFileSessionsByWorkspaces(workspaces) {
+        if (!workspaces.length) return [];
+        const r = await this.pool.query(
+          `SELECT * FROM ${this.s}.chat_sessions WHERE company_id = $1 AND workspace = ANY($2::text[])
+       AND visibility IS DISTINCT FROM 'internal' AND analyzed_run_id IS NULL ORDER BY id`,
+          [this.companyId, workspaces]
+        );
+        return r.rows.map(rowToSession);
+      }
       /**
        * 按路径**合并**写入：同一路径新副本覆盖旧副本，其余路径保留。合并在一条 UPDATE 里用 jsonb `||` 完成，
        * 不是读出来改完再整份写回——两次收尾的复制前后脚落库时，后写的不会把先写的吞掉。
@@ -253212,11 +253568,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto70, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto73, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -253433,7 +253789,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto70.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto73.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -253699,11 +254055,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto71, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto74, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -253913,7 +254269,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto71.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto74.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -255360,14 +255716,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto72.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto75.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto72, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto75, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -255441,7 +255797,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto76.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -255623,11 +255979,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto73, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto76, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -255707,11 +256063,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto74, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto77, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -256097,7 +256453,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto74.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto77.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -258694,7 +259050,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto75.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto78.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -259082,11 +259438,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto75, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto78, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto78 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -259318,8 +259674,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto76.randomBytes)(12);
-  const cipher = (0, import_node_crypto76.createCipheriv)("aes-256-gcm", bytes(key), iv);
+  const iv = (0, import_node_crypto79.randomBytes)(12);
+  const cipher = (0, import_node_crypto79.createCipheriv)("aes-256-gcm", bytes(key), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -259329,7 +259685,7 @@ function openSnapshot(snapshot, key) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto76.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto79.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -259337,11 +259693,11 @@ function openSnapshot(snapshot, key) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto76, PREFIX3, bytes, aad2;
+var import_node_crypto79, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto79 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key) => {
       const value2 = Buffer.from(key);
@@ -261371,6 +261727,7 @@ var init_src11 = __esm({
     init_chat_recovery();
     init_chat_system_message();
     init_chat_turn_gate();
+    init_chat_assistant_turn();
     init_chat_workorder_files();
     init_chat_broadcast();
     init_workorder_terminal();
@@ -261453,6 +261810,7 @@ var init_src11 = __esm({
     init_run_settlement_wiring();
     init_deadline_clock();
     init_read_model_clock();
+    init_file_restore();
   }
 });
 
@@ -261588,20 +261946,20 @@ var fs45 = __toESM(require("node:fs"));
 var os14 = __toESM(require("node:os"));
 var path40 = __toESM(require("node:path"));
 var import_node_child_process23 = require("node:child_process");
-var import_node_crypto83 = require("node:crypto");
+var import_node_crypto86 = require("node:crypto");
 
 // ../cli/src/cli.ts
 var fs40 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path35 = __toESM(require("node:path"), 1);
-var import_node_crypto81 = require("node:crypto");
+var import_node_crypto84 = require("node:crypto");
 
 // ../cli/src/serve.ts
 var fs34 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto77 = require("node:crypto");
+var import_node_crypto80 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
 // ../cli/src/artifact-discovery-source.ts
@@ -262347,7 +262705,7 @@ init_src9();
 init_src();
 init_trajectory();
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto77.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto80.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -262547,7 +262905,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path29.join(repoRoot, "node_modules/.bin/tsx");
   const main = path29.join(repoRoot, "packages/cli/src/main.ts");
-  const key = (0, import_node_crypto77.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key = (0, import_node_crypto80.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path29.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
   let dir;
@@ -262928,7 +263286,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto77.randomUUID)();
+    const requestId = (0, import_node_crypto80.randomUUID)();
     const task = new Promise((resolve10) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -263199,6 +263557,8 @@ async function startServe(opts) {
     listChatFiles: async (companyId, projectId2) => {
       const chat = await chatStoreFor(companyId);
       const facts = await blobStoreFor(companyId);
+      const taskBindings = await (await artifactStateFor(companyId)).listWorkspaceBindings();
+      const workOrderIds = taskBindings.filter((b2) => b2.projectId === projectId2 || isUncategorizedProjectId(projectId2) && !b2.projectId).map((b2) => b2.workOrderId);
       return collectProjectChatFiles(chat, projectId2, async (ref2) => {
         for (const cabinet of [assets, facts]) {
           try {
@@ -263209,6 +263569,7 @@ async function startServe(opts) {
         }
         return null;
       }, {
+        workOrderIds,
         // 委派子会话不进项目（ADR 0555：它的 outputs/ 是交给协调者的）。闭包在请求时才读
         // `delegationStoreFor`，避开它在下方声明的 TDZ。
         isDelegationChild: async (sessionId) => {
@@ -263680,7 +264041,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto77.randomUUID)(),
+                id: (0, import_node_crypto80.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -263726,7 +264087,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto77.randomUUID)();
+        const sessionId = (0, import_node_crypto80.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -264393,6 +264754,16 @@ async function startServe(opts) {
     delegationStores.set(id, store);
     return store;
   };
+  const readChatFileBlob = async (companyId, ref2) => {
+    const facts = await blobStoreFor(companyId);
+    for (const cabinet of [assets, facts]) {
+      try {
+        return await cabinet.get(ref2);
+      } catch {
+      }
+    }
+    throw new Error("\u6587\u4EF6\u539F\u4EF6\u4E0D\u53EF\u7528\uFF0C\u8BF7\u91CD\u8BD5\u6216\u91CD\u65B0\u4E0A\u4F20");
+  };
   const outputCopyScheduler = createOutputCopyScheduler({
     putBlob: (bytes2) => assets.put(bytes2),
     isDelegationChild: async (companyId, sessionId) => {
@@ -264666,6 +265037,41 @@ async function startServe(opts) {
   const listCompanyMembers = (companyId) => controlPlaneStore.listMembers(companyId ?? defaultCompanyId);
   let notificationLedgerWorker;
   let notificationLedgerTimer;
+  const sessionOutputsScan = async ({ chatSessionId, companyId }) => {
+    const bridge = workdirBridge;
+    if (!bridge) return null;
+    const store = chatStoreRouter ? await chatStoreFor(companyId).catch(() => null) : chatSessionStore;
+    const read = store?.readOutputFingerprints?.bind(store);
+    const write = store?.writeOutputFingerprints?.bind(store);
+    if (!read || !write) return null;
+    const recorded = await store?.getSession(chatSessionId);
+    const located = recorded?.runtimeId && recorded.runtimeKind ? { ok: true, loc: {
+      nodeId: recorded.runtimeId,
+      runtimeKind: recorded.runtimeKind,
+      rtId: recorded.runtimeSessionId,
+      workdirKey: `chat:${chatSessionId}`
+    } } : await locateSessionWorkdir(delegationWorkdirLocator, { chatSessionId, ...companyId !== void 0 ? { companyId } : {} });
+    if (located.ok && foreignNodeBlock(await nodeStore.getNode(located.loc.nodeId), companyId ?? defaultCompanyId)) return null;
+    if (!located.ok) return null;
+    const diff = await settleSessionOutputs({
+      bridge,
+      loc: located.loc,
+      sessionId: chatSessionId,
+      readFingerprints: read,
+      writeFingerprints: write
+    }).catch(() => null);
+    if (diff && store) await outputCopyScheduler.schedule({
+      store,
+      bridge,
+      loc: located.loc,
+      chatSessionId,
+      companyId,
+      fingerprints: diff.fingerprints,
+      scanIncomplete: diff.scanIncomplete
+    });
+    else await store?.writeFileIssues?.(chatSessionId, "save", [{ phase: "save", path: "outputs/", code: "SCAN_UNAVAILABLE", message: "\u539F\u8282\u70B9\u4EA7\u51FA\u76EE\u5F55\u8BFB\u53D6\u5931\u8D25\uFF0C\u672A\u80FD\u786E\u8BA4\u672C\u8F6E\u6587\u4EF6\u5DF2\u4FDD\u5B58" }]);
+    return diff?.changed ?? null;
+  };
   const server = await startOasisServer({
     deployTargets,
     onInterventionDraftResolved: (e) => notificationLedgerWorker?.draftResolved(e.companyId ?? defaultCompanyId, e.draftId, { by: e.by, approved: e.approved }),
@@ -264771,7 +265177,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto77.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto80.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -265003,6 +265409,7 @@ async function startServe(opts) {
         // （于是每一行的「大小」都空掉）。顺序与 `/api/blobs/:hash` 那条读路同源。
         // 写回也落资产柜，与附件上传同一个柜，否则新旧两版会分居两处。
         blobs: {
+          get: (ref2) => readChatFileBlob(void 0, ref2),
           meta: async (blobRef) => {
             for (const cabinet of [assets, blobs]) {
               try {
@@ -265021,6 +265428,7 @@ async function startServe(opts) {
           resolveBlobs: async (cid) => {
             const factCabinet = await blobStoreFor(cid);
             return {
+              get: (ref2) => readChatFileBlob(cid, ref2),
               meta: async (blobRef) => {
                 for (const cabinet of [assets, factCabinet]) {
                   try {
@@ -265108,40 +265516,8 @@ async function startServe(opts) {
     // 三个方法的组合规则住在 `createDelegationWorkdirPort`（`@oasis/server`）——评审
     // wo:acfee725 blocker ② 回归防线：**serve.ts 与单测走同一处**，那样「装配层退回全局 binding」
     // 这类事故在单测里就能被复现。绝不许在这里再写一份。
-    /**
-     * 会话产出扫描（2026-09-11 产出卡）：轮次收尾扫这条会话的 `outputs/`，交出「这一轮变了哪些」。
-     *
-     * 复用 `delegationWorkdirLocator`（与派发、回流、chat 域**同一个 binding resolver 实例**）——
-     * 委派回程读的就是子会话的 `outputs/`，主会话这条只是把同一套读口用到了自己身上。
-     *
-     * 三处 fail-closed，都返回 `null`（= 这一轮没有产出卡），一处都不猜：
-     *  · 桥还没建好 / 会话没绑定 / 节点离线 → 拿不到工作区；
-     *  · store 没有指纹方法（老 store / 文件态装配）→ 没地方记「上一轮长什么样」，
-     *    硬扫会把整个 `outputs/` 每轮都当成新增，一口气刷几十张卡；
-     *  · 解析不出公司 → **绝不回落默认公司**（否则会去别家公司的库里读写指纹）。
-     */
-    sessionOutputsScan: async ({ chatSessionId, companyId }) => {
-      const bridge = workdirBridge;
-      if (!bridge) return null;
-      const store = chatStoreRouter ? await chatStoreFor(companyId).catch(() => null) : chatSessionStore;
-      const read = store?.readOutputFingerprints?.bind(store);
-      const write = store?.writeOutputFingerprints?.bind(store);
-      if (!read || !write) return null;
-      const located = await locateSessionWorkdir(delegationWorkdirLocator, {
-        chatSessionId,
-        ...companyId !== void 0 ? { companyId } : {}
-      });
-      if (!located.ok) return null;
-      const diff = await settleSessionOutputs({
-        bridge,
-        loc: located.loc,
-        sessionId: chatSessionId,
-        readFingerprints: read,
-        writeFingerprints: write
-      }).catch(() => null);
-      if (diff && store) void outputCopyScheduler.schedule({ store, bridge, loc: located.loc, chatSessionId, companyId, fingerprints: diff.fingerprints });
-      return diff?.changed ?? null;
-    },
+    // 会话产出扫描：实现见上方 `sessionOutputsScan`。serve 重启前后的恢复收尾用的是同一个函数。
+    sessionOutputsScan,
     delegationWorkdir: createDelegationWorkdirPort({
       locator: delegationWorkdirLocator,
       // 桥在 hub 建好后（本函数尾部）才赋值 → getter 每次调用时读最新值；早于此处的构造时 `workdirBridge`
@@ -265673,10 +266049,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto77.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto80.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto77.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto77.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto80.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto80.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           return {
@@ -265740,10 +266116,7 @@ async function startServe(opts) {
             }
           }
         }
-        const turnChatStore = chatSessionId ? await chatStoreFor(runCompanyId).catch((err) => {
-          console.warn(`[chat] \u53D6\u516C\u53F8 ${runCompanyId} \u7684\u4F1A\u8BDD\u5B58\u50A8\u5931\u8D25\uFF08\u672C\u8F6E\u6309\u65E0\u4F1A\u8BDD\u8BB0\u5F55\u5904\u7406\uFF09: ${String(err)}`);
-          return null;
-        }) : null;
+        const turnChatStore = chatSessionId ? await chatStoreFor(runCompanyId) : null;
         const analyzedRunId = chatSessionId ? (await turnChatStore?.getSession(chatSessionId).catch(() => null))?.analyzedRunId ?? void 0 : void 0;
         const actorConfigVersion = await actorService.latestConfig(actorId).then((c) => c?.version ?? null).catch(() => null);
         const candidateTraceStartedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -265774,6 +266147,22 @@ async function startServe(opts) {
             ...analyzedRunId ? { analyzedRunId } : {}
           }
         });
+        const priorChatSession = chatSessionId ? await turnChatStore?.getSession(chatSessionId) : null;
+        let freshChatWorkdir = chatSessionId ? chatNodeChanged(
+          { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
+          { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
+        ) : false;
+        let restore = !isolatedKnowledgeTurn && chatSessionId && turnChatStore ? await prepareSessionFileRestore({
+          store: turnChatStore,
+          sessionId: chatSessionId,
+          readBlob: (ref2) => readChatFileBlob(runCompanyId, ref2),
+          attachments,
+          fresh: freshChatWorkdir,
+          supportsFileRestore: node2.meta.supportsFileRestore === true
+        }) : void 0;
+        const usedRel = /* @__PURE__ */ new Set();
+        const preparedAttachments = await buildChatAttachmentFiles(attachments, (ref2) => readChatFileBlob(runCompanyId, ref2), usedRel);
+        if (preparedAttachments.missing.length) throw new ApiError(409, "CHAT_FILE_RESTORE_FAILED", preparedAttachments.missing.map((m2) => `${m2.name}\uFF1A${m2.error}`).join("\uFF1B"));
         const stableTraceWasPresent = Boolean(stableDispatch);
         if (requestDispatchId && !stableDispatch) {
           stableDispatch = await resolveStableChatDispatch({
@@ -265796,13 +266185,20 @@ async function startServe(opts) {
             binding = { actorId, ...stableDispatch.target, status: "active" };
             node2 = await requireDispatchNode(binding);
             requireNodeConnectors();
+            freshChatWorkdir = chatNodeChanged(
+              { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
+              { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
+            );
+            restore = !isolatedKnowledgeTurn && chatSessionId && turnChatStore ? await prepareSessionFileRestore({
+              store: turnChatStore,
+              sessionId: chatSessionId,
+              readBlob: (ref2) => readChatFileBlob(runCompanyId, ref2),
+              attachments,
+              fresh: freshChatWorkdir,
+              supportsFileRestore: node2.meta.supportsFileRestore === true
+            }) : void 0;
           }
         }
-        const priorChatSession = chatSessionId ? await turnChatStore?.getSession(chatSessionId).catch(() => null) : null;
-        const freshChatWorkdir = chatSessionId ? chatNodeChanged(
-          { nodeId: priorChatSession?.runtimeId, runtimeKind: priorChatSession?.runtimeKind },
-          { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind }
-        ) : false;
         const existingTrace = stableDispatch?.run ?? null;
         const existingEvents = existingTrace ? await (await traceStoreFor(runCompanyId)).listEvents(traceRunId, {}).catch(() => []) : [];
         const traceStartedAt = existingTrace?.startedAt ?? candidateTraceStartedAt;
@@ -265848,18 +266244,13 @@ async function startServe(opts) {
         const chatResolvedModel = sessionModelOverride ?? actorCtx?.config?.model ?? void 0;
         const chatModel = chatResolvedModel ?? await registryStore.getRuntimeConfig(`runtime:${binding.nodeId}:${binding.runtimeKind}`).then((c) => c?.model).catch(() => void 0) ?? void 0;
         const chatModelSource = sessionModelOverride ? "session_override" : chatResolvedModel ? "actor_config" : chatModel ? "runtime_default" : null;
-        const usedRel = /* @__PURE__ */ new Set();
-        const preparedAttachments = await buildChatAttachmentFiles(attachments, (ref2) => assets.get(ref2), usedRel);
-        for (const miss of preparedAttachments.missing) {
-          console.warn(`[chat] \u9644\u4EF6 blob ${miss.blobRef} \u8BFB\u53D6\u5931\u8D25: ${miss.error}`);
-        }
-        const attachmentFiles = { ...preparedAttachments.files };
+        const attachmentFiles = { ...preparedAttachments.files, ...restore ? { "SESSION_FILES.md": restore.index } : {} };
         const attachmentBinary = { ...preparedAttachments.binaryFiles };
         const attachmentPaths = [...preparedAttachments.paths];
         let turnProject = priorChatSession ? { state: "none" } : { state: "unknown" };
         if (priorChatSession?.projectId) {
           const projectId2 = priorChatSession.projectId;
-          const projectBundle = await projectStateFor(runCompanyId).then((projects) => buildChatProjectBundle(projectId2, projects, (blobId) => assets.get(blobId))).catch((err) => {
+          const projectBundle = await projectStateFor(runCompanyId).then((projects) => buildChatProjectBundle(projectId2, projects, (blobId) => readChatFileBlob(runCompanyId, blobId))).catch((err) => {
             console.warn(`[chat] \u8BFB\u9879\u76EE ${projectId2} \u5931\u8D25\uFF08\u672C\u8F6E\u4E0D\u5199\u9879\u76EE\u6BB5\uFF09: ${String(err)}`);
             return void 0;
           });
@@ -265885,7 +266276,7 @@ async function startServe(opts) {
           ...actorCtx?.config?.prompt ? { personaPrompt: actorCtx.config.prompt } : {},
           ...extraSystemPrompt ? { expertSystemPrompt: extraSystemPrompt } : {}
         });
-        const taskHeader = chatPrompts.taskHeaderLines;
+        const taskHeader = [...chatPrompts.taskHeaderLines, ...restore ? ["\u672C\u4F1A\u8BDD\u7684\u5386\u53F2\u6587\u4EF6\u4E0E\u5DF2\u4FDD\u5B58\u4EA7\u51FA\u89C1 SESSION_FILES.md\uFF0C\u53EF\u6309\u5217\u51FA\u7684\u76F8\u5BF9\u8DEF\u5F84\u8BFB\u53D6\u3002"] : []];
         const chatMemoryEnabled = !isolatedKnowledgeTurn && actorCtx?.memoryEnabled !== false;
         const chatMemorySvc = chatMemoryEnabled ? await actorMemoryFor(runCompanyId).catch(() => void 0) : void 0;
         const chatMemoryLines = chatMemorySvc ? await chatMemorySvc.list({ actorId }, { scope: "all", keywords: ngramQueryTerms([message]), limit: MEMORY_INJECT_MAX, offset: 0 }).then((out) => [...memoryIndexLines(out.items), ...memoryHowToLines()]).catch(() => []) : [];
@@ -265930,7 +266321,7 @@ async function startServe(opts) {
           actor: actorId,
           actorToken: issueSessionToken(actorId, { artifactId, action: "chat", limits, binding, sessionId: runtimeSessionId, companyId: runCompanyId, ...requestDispatchId ? { dispatchId: requestDispatchId } : {}, ...chatSessionId !== void 0 ? { chatSessionId } : {} }),
           artifactId,
-          bundle: { files, ...Object.keys(attachmentBinary).length ? { binaryFiles: attachmentBinary } : {} },
+          bundle: { files, ...Object.keys(attachmentBinary).length ? { binaryFiles: attachmentBinary } : {}, ...restore ? { restoreFiles: restore.restoreFiles } : {} },
           // 人设在最前，固定规则接在它后面：助理那侧是分流正文（§6.5.3，只有普通脑暴那一支有），
           // 专家那侧是 `EXPERT_DELEGATION_SYSTEM_PROMPT`（§6.5.7）。**三者都走 systemPrompt**——
           // 放进 TASK.md 会随 `--resume` 每轮重复、O(N) 累积（§6.1.5）。
@@ -266063,10 +266454,11 @@ async function startServe(opts) {
               }
             });
             const failed = !isHealthySessionExit(info);
-            if (!failed) resolve10();
-            else {
-              reject(buildChatExitError(info));
-            }
+            const recordRestore = turnChatStore && chatSessionId ? recordSessionFileRestoreExit(turnChatStore, chatSessionId, info) : Promise.resolve();
+            void recordRestore.then(() => {
+              if (!failed) resolve10();
+              else reject(buildChatExitError(info));
+            }, (error2) => reject(error2));
           });
         });
         return {
@@ -266255,6 +266647,8 @@ async function startServe(opts) {
         onCompanyError: chatRecoveryCompanyWarn(opts2.label),
         // 重挂的那一轮收口时当场外报，与清扫拍同一个接收方（见 `notifyChatTurnSettled`）。
         onTurnSettled: (info) => notifyChatTurnSettled(info),
+        // 重挂 / 已收口两条路收尾时出产出卡（公司由扇出层按行绑）。
+        sessionOutputsScan,
         liveChat,
         trace: runRoutedTrace,
         traceHealth,
@@ -266410,6 +266804,7 @@ async function startServe(opts) {
               listCompanies: chatRecoveryCompanies,
               storesFor: chatRecoveryFor,
               onCompanyError: chatRecoveryCompanyWarn("exit \u5BF9\u8D26"),
+              sessionOutputsScan,
               drainStash: (id) => chatRemoteAdapter?.drainStash(id) ?? { frames: [] },
               log: (m2) => console.log(m2)
             });
@@ -266478,6 +266873,7 @@ async function startServe(opts) {
           listCompanies: chatRecoveryCompanies,
           storesFor: chatRecoveryFor,
           onCompanyError: chatRecoveryCompanyWarn("chat-sweep"),
+          sessionOutputsScan,
           getRun: (id) => fanOutTrace.getRun(id),
           ownedRunId: (sid) => liveChat.runFor(sid),
           now: Date.now(),
@@ -266510,7 +266906,12 @@ async function startServe(opts) {
       storesFor: async (companyId) => {
         const turns = await chatTurnsFor(companyId);
         const messages = await chatStoreFor(companyId);
-        return { turns, ...assistantRowRecovery(messages) };
+        return {
+          turns,
+          ...assistantRowRecovery(messages, {
+            outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId)
+          })
+        };
       },
       getRun: (id) => fanOutTrace.getRun(id),
       // 本进程在飞的轮不动——它自己的收尾路径会写终态（liveChat 只认人工/渠道那条，自动化轮
@@ -266803,7 +267204,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto80.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -266888,7 +267289,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto80.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -267266,7 +267667,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto77.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto80.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -268904,7 +269305,9 @@ async function runSession(dispatchId, job, deps) {
       deps.sink.stream({ type: "session_live_event", dispatchId, event });
       normalizer.onLiveEvent(event);
     });
+    let restoreFailedBeforeStart = false;
     handle.onExit((info) => {
+      if (info.fileRestoreError) restoreFailedBeforeStart = true;
       normalizer.turnFinished(isHealthySessionExit(info) ? "completed" : "failed");
       log2("[node-cli]", `  \u25A0 session_exited  id=${handle.id}  code=${info.code ?? "killed"}  total=${Date.now() - t0}ms`);
       if (info.transcriptRef) log2("[node-cli]", `  transcript: ${info.transcriptRef}`);
@@ -268914,7 +269317,7 @@ async function runSession(dispatchId, job, deps) {
     if (cancelledBeforeStart) {
       log2("[node-cli]", `  dispatch ${dispatchId} \u5728 setup \u671F\u95F4\u5DF2\u88AB fencing\uFF0Cspawn \u540E\u7ACB\u5373 kill`);
       await handle.kill();
-    } else {
+    } else if (!restoreFailedBeforeStart) {
       log2("[node-cli]", `  \u2192 session_started  id=${handle.id}  setup=${Date.now() - t0}ms`);
       deps.sink.keyFrame({ type: "session_started", dispatchId, sessionId: handle.id, jobArtifactId: job.artifactId });
     }
@@ -268922,7 +269325,12 @@ async function runSession(dispatchId, job, deps) {
     deps.onFailure?.();
     log2("[node-cli]", `  spawn failed: ${err}`);
     const errorMessage = String(err?.stack ?? err).slice(0, 8e3);
-    deps.sink.keyFrame({ type: "session_exited", dispatchId, sessionId: "spawn-failed", info: { code: null, reason: "error", errorMessage } });
+    deps.sink.keyFrame({ type: "session_exited", dispatchId, sessionId: "spawn-failed", info: {
+      code: null,
+      reason: "error",
+      errorMessage,
+      ...err instanceof BundleRestoreError ? { fileRestoreError: { path: err.filePath, message: err.message } } : {}
+    } });
   }
 }
 
@@ -269213,8 +269621,9 @@ var SessionProcessState = class {
 
 // ../cli/src/daemon/ws-client.ts
 init_wrapper();
+init_src();
 var import_node_os9 = require("node:os");
-var import_node_crypto78 = require("node:crypto");
+var import_node_crypto81 = require("node:crypto");
 init_src8();
 init_src6();
 
@@ -269495,10 +269904,15 @@ async function handleWorkdirRead(req) {
         const fresh = await fh.stat().catch(() => null);
         return { ok: false, code: "TOO_LARGE", size: Math.max(fresh?.size ?? 0, bytesRead), absPath: real };
       }
+      const afterRead = await fh.stat();
+      if (afterRead.size !== st.size || afterRead.mtimeMs !== st.mtimeMs) {
+        return { ok: false, code: "INTERNAL", message: "\u6587\u4EF6\u5728\u8BFB\u53D6\u671F\u95F4\u53D1\u751F\u53D8\u5316" };
+      }
       const bytes2 = buf.subarray(0, bytesRead);
       return {
         ok: true,
         contentBase64: bytes2.toString("base64"),
+        mtime: st.mtime.toISOString(),
         contentType: contentTypeFor(real, bytes2),
         size: bytes2.length
         // 以实际读到的字节数为准，不用任何可能已过时的 stat size
@@ -269751,6 +270165,7 @@ var DaemonWsClient = class {
   connect() {
     if (this.stopped) return;
     const ws = new import_websocket.default(this.serverUrl, {
+      maxPayload: 4 * Math.ceil(FILE_CONTENT_MAX_BYTES / 3) + 64 * 1024,
       headers: {
         "x-daemon-id": this.daemonId,
         // 经公网网关时鉴权靠它（对齐 multica：Authorization 头反代天然透传）；内网直连可空
@@ -269986,7 +270401,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto78.randomUUID)();
+    const requestId = (0, import_node_crypto81.randomUUID)();
     return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -270128,6 +270543,7 @@ var DaemonWsClient = class {
       supportsNormalizedEvents: true,
       // ADR 0554：本 daemon 认 `workdir_walk`。恒 true——handler 随包发，装了这版就一定有。
       supportsWorkdirWalk: true,
+      supportsFileRestore: true,
       ...activeSessions.length > 0 ? { activeSessions } : {},
       // 始终带字段（空数组也带）作为新协议能力标志；服务端仅对支持该字段的节点做缺席确认。
       pendingDispatchIds: [...this.pendingDispatchIds]
@@ -270388,7 +270804,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process21 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
-var import_node_crypto79 = require("node:crypto");
+var import_node_crypto82 = require("node:crypto");
 var import_node_os12 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -270454,7 +270870,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto79.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto82.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -271465,7 +271881,7 @@ var COMMAND_DECLS = {
     flags: [
       { name: "name", desc: "\u9879\u76EE\u540D", required: true },
       { name: "goal", desc: "\u9879\u76EE\u76EE\u6807" },
-      { name: "slug", desc: "URL slug" },
+      { name: "slug", desc: "\u81EA\u5B9A\u4E49\u9879\u76EE id\uFF08\u53EF\u9009\uFF09\u3002\u4E0D\u7ED9\u5219\u968F\u673A\u751F\u6210 proj_xxxxxxxx\uFF1B\u7ED9\u4E86\u4E14\u8BE5 id \u5DF2\u5B58\u5728\uFF0C\u8FD4\u56DE\u7684\u662F\u5DF2\u6709\u9879\u76EE\uFF08\u4F1A\u63D0\u793A\uFF09" },
       { name: "members", desc: "\u6210\u5458 JSON \u6570\u7EC4" }
     ],
     examples: ['oasis project create --name "My Project" --goal "\u6784\u5EFA\u534F\u4F5C\u5E73\u53F0"']
@@ -272225,13 +272641,13 @@ function ownFlagsFromDecl(command) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto80 = require("node:crypto");
+var import_node_crypto83 = require("node:crypto");
 var import_node_child_process22 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto80.createHash)("sha256").update(canonical).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto83.createHash)("sha256").update(canonical).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -272467,7 +272883,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto81.randomUUID)();
+  const waiterId = (0, import_node_crypto84.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -272890,7 +273306,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path35.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto81.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto84.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -273914,7 +274330,8 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         const name = need(flags, "name").trim();
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
-        const id = projectSlug(flags.get("slug") ?? name);
+        const slug6 = flags.get("slug");
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto84.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -273922,6 +274339,9 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
           ...flags.has("members") ? { member_ids: parseStringArrayFlag(flags.get("members"), "members") } : {}
         });
         println(JSON.stringify(result, null, 2));
+        if (typeof result?.name === "string" && result.name !== name) {
+          println(`\u26A0\uFE0F \u9879\u76EE id\u300C${result.project_id ?? id}\u300D\u5DF2\u88AB\u300C${result.name}\u300D\u5360\u7528\uFF0C\u4E0A\u9762\u8FD4\u56DE\u7684\u662F\u90A3\u4E2A\u5DF2\u6709\u9879\u76EE\uFF0C\u6CA1\u6709\u65B0\u5EFA\u3002\u6362\u4E00\u4E2A --slug \u6216\u53BB\u6389 --slug \u91CD\u8BD5\u3002`);
+        }
         break;
       }
       if (positional[0] === "member") {
@@ -275903,13 +276323,13 @@ var LEGACY_SYSTEMD_UNIT = "oasis-node.service";
 var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 
 // src/install.ts
-var import_node_crypto82 = require("node:crypto");
+var import_node_crypto85 = require("node:crypto");
 var fs44 = __toESM(require("node:fs"));
 var path39 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto82.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto85.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -276032,7 +276452,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.34" : "dev";
+var PKG_VERSION = true ? "2.2.36" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -276317,7 +276737,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto83.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto86.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }