oasis_test_v2 2.2.47 → 2.2.49

package/dist/index.js

@@ -440,6 +440,9 @@ function isUnread(eventAt, marker) {
   if (Number.isNaN(e) || Number.isNaN(m2)) return true;
   return e > m2;
 }
+function isChatSessionUnread(session, marker) {
+  return session.lastTurnQuality !== void 0 && isUnread(session.touchedAt, marker);
+}
 var chatScope, letterScope, INBOX_BASELINE_SCOPE;
 var init_inbox_read = __esm({
   "../contract/src/inbox-read.ts"() {
@@ -4185,7 +4188,7 @@ var init_claude_code = __esm({
             if (composed) errorParts.push(composed);
           }
           if (stderrTail2.length) errorParts.push(stderrTail2.join("\n").trim());
-          const errorMessage = isError ? errorParts.filter(Boolean).join("\n---\n").slice(-4e3).trim() || void 0 : void 0;
+          const errorMessage2 = isError ? errorParts.filter(Boolean).join("\n---\n").slice(-4e3).trim() || void 0 : void 0;
           exited = {
             code: killReason ? null : code2,
             ...reason ? { reason } : {},
@@ -4193,7 +4196,7 @@ var init_claude_code = __esm({
             workdirRef,
             ...usage ? { usage } : {},
             ...sessionModel ? { model: sessionModel } : {},
-            ...errorMessage ? { errorMessage } : {},
+            ...errorMessage2 ? { errorMessage: errorMessage2 } : {},
             // ADR-0147：容器化会话带上镜像 digest（可复现凭据，经 dispatcher 落 agent_runs.metadata）。
             ...containerized?.imageDigest ? { imageDigest: containerized.imageDigest } : {}
           };
@@ -5952,6 +5955,9 @@ var init_protocol_session = __esm({
 function codexNum(v2) {
   return typeof v2 === "number" && Number.isFinite(v2) ? v2 : 0;
 }
+function codexOutputTokens(output, reasoning) {
+  return Math.max(codexNum(output), codexNum(reasoning));
+}
 function parseCodexAppServerTurnUsage(params) {
   const p2 = params;
   const last = p2?.tokenUsage?.last;
@@ -5960,7 +5966,7 @@ function parseCodexAppServerTurnUsage(params) {
     input: codexNum(last["inputTokens"]),
     cacheRead: codexNum(last["cachedInputTokens"]),
     cacheWrite: codexNum(last["cacheWriteInputTokens"]),
-    output: codexNum(last["outputTokens"]) + codexNum(last["reasoningOutputTokens"])
+    output: codexOutputTokens(last["outputTokens"], last["reasoningOutputTokens"])
   };
 }
 function addCodexBuckets(acc, add) {
@@ -5992,8 +5998,8 @@ function bucketsOf(usage) {
     // cache 字段名跨版本有两种
     cacheRead: codexNum(usage["cached_input_tokens"]) || codexNum(usage["cache_read_input_tokens"]),
     cacheWrite: codexNum(usage["cache_write_input_tokens"]),
-    // reasoning 计入 output（对齐 Multica：codex 的 output_tokens 不含 reasoning）。
-    output: codexNum(usage["output_tokens"]) + codexNum(usage["reasoning_output_tokens"])
+    // output_tokens 已含 reasoning，见 codexOutputTokens。
+    output: codexOutputTokens(usage["output_tokens"], usage["reasoning_output_tokens"])
   };
 }
 function usageFromBuckets(b2) {
@@ -6903,7 +6909,7 @@ ${task}` : task;
           const runtimeSessionId = telemetry.sessionId ?? resumeSessionId;
           const sawStreamError = streamErrorMessages.length > 0;
           const isError = !killReason && (code2 !== 0 || sawStreamError);
-          const errorMessage = isError ? [...streamErrorMessages, ...stdoutErrorLines, ...stderrTail2].join("\n").trim().slice(-4e3) || void 0 : void 0;
+          const errorMessage2 = isError ? [...streamErrorMessages, ...stdoutErrorLines, ...stderrTail2].join("\n").trim().slice(-4e3) || void 0 : void 0;
           const sessionNotFound = !killReason && isResume && isSessionNotFoundError([...streamErrorMessages, ...stdoutErrorLines, ...stderrTail2].join("\n"));
           const reason = killReason ? killReason : sessionNotFound ? "session-not-found" : sawStreamError ? "error" : code2 === 0 ? "clean" : "error";
           finish({
@@ -6916,7 +6922,7 @@ ${task}` : task;
             ...telemetry.usage ? { usage: telemetry.usage } : {},
             ...model ? { model } : {},
             ...runtimeSessionId ? { runtimeSessionId } : {},
-            ...errorMessage ? { errorMessage } : {},
+            ...errorMessage2 ? { errorMessage: errorMessage2 } : {},
             // 跑在哪个镜像上要落账：同一题换了镜像，分数就不可比（ADR-0147 M5）
             ...containerized?.imageDigest ? { imageDigest: containerized.imageDigest } : {}
           });
@@ -8236,8 +8242,8 @@ function classifyHermesPromptFailure(turn) {
   if (errors.length === 0 && !failedSentence && !silent) return void 0;
   return failure(errors.length > 0 ? clip(errors.slice(-MAX_ERROR_RECORDS).join("\n")) : failedSentence ?? `hermes \u672C\u8F6E\u6CA1\u6709\u6B63\u5E38\u6536\u5C3E\uFF08\u54CD\u5E94\u4E0D\u5E26\u7528\u91CF\uFF09\uFF0C\u6CA1\u6709\u8F93\u51FA\uFF0Cstderr \u4E5F\u6CA1\u6709 ERROR \u65E5\u5FD7\u3002${stderrTail(turn.stderrLines)}`);
 }
-function failure(errorMessage) {
-  return { reason: QUOTA_RE.test(errorMessage) ? "rate-limit" : "error", errorMessage };
+function failure(errorMessage2) {
+  return { reason: QUOTA_RE.test(errorMessage2) ? "rate-limit" : "error", errorMessage: errorMessage2 };
 }
 function promptResultHasUsage(result) {
   if (typeof result !== "object" || result === null) return false;
@@ -9000,12 +9006,12 @@ async function runStreamJson(job, cfg) {
   child.on("exit", (code2) => {
     clearTimeout(timer);
     const isError = !killReason && typeof code2 === "number" && code2 !== 0;
-    const errorMessage = isError ? stderrTail2.join("\n").trim().slice(-4e3) || void 0 : void 0;
+    const errorMessage2 = isError ? stderrTail2.join("\n").trim().slice(-4e3) || void 0 : void 0;
     finish({
       code: killReason ? null : code2,
       reason: killReason ?? (code2 === 0 ? "clean" : "error"),
       transcriptRef: transcriptRefPtr.value,
-      ...errorMessage ? { errorMessage } : {},
+      ...errorMessage2 ? { errorMessage: errorMessage2 } : {},
       // ADR-0147：容器化会话带上镜像 digest（可复现凭据）。
       ...containerized?.imageDigest ? { imageDigest: containerized.imageDigest } : {}
     });
@@ -9103,12 +9109,12 @@ async function runOneShotText(job, cfg) {
   child.on("exit", (code2) => {
     clearTimeout(timer);
     const isError = !killReason && typeof code2 === "number" && code2 !== 0;
-    const errorMessage = isError ? stderrTail2.join("\n").trim().slice(-4e3) || void 0 : void 0;
+    const errorMessage2 = isError ? stderrTail2.join("\n").trim().slice(-4e3) || void 0 : void 0;
     finish({
       code: killReason ? null : code2,
       reason: killReason ?? (code2 === 0 ? "clean" : "error"),
       transcriptRef: transcriptRefPtr.value,
-      ...errorMessage ? { errorMessage } : {},
+      ...errorMessage2 ? { errorMessage: errorMessage2 } : {},
       // ADR-0147：容器化会话带上镜像 digest（可复现凭据）。
       ...containerized?.imageDigest ? { imageDigest: containerized.imageDigest } : {}
     });
@@ -10493,6 +10499,9 @@ var init_chat_item_ledger = __esm({
       finished = false;
       /** 上一次见到的归一层 turnId——变了就清映射（provider 开了新 turn）。 */
       lastTurnId = null;
+      /** 本账本已经落库的 user 行（按落库顺序）。{@link onUserItemPersisted} 的晚到订阅者从这里补。 */
+      persistedUserItems = [];
+      userItemListeners = /* @__PURE__ */ new Set();
       /** 会话逻辑时钟走一格。**唯一发号点**（ADR-0510 附录 A.4）——别在别处自己数。 */
       tick() {
         return ++this.clock;
@@ -10505,6 +10514,42 @@ var init_chat_item_ledger = __esm({
         const ord = this.rows.get(itemId)?.ord;
         return ord === null ? void 0 : ord;
       }
+      /** 展示时间与持久行同源；不以浏览器收到帧的时间代替。 */
+      timestampsFor(itemId) {
+        const row = this.rows.get(itemId);
+        return row ? { createdAt: row.createdAt, completedAt: row.completedAt } : void 0;
+      }
+      /**
+       * 订阅「本账本的 **user 行**真的落库了」（拿到服务端派的 `ord`、写号与这一行自己的 payload）。
+       * 订阅那一刻**已经**落库的先按落库顺序同步补一遍，之后的逐条到达。返回退订。
+       *
+       * ## 为什么是订阅而不是构造参数
+       *
+       * 唯一的消费者是 `LiveChatRegistry.start`：用户那条消息（首条提交 / 中途插话）落库即推上 v3 流。
+       * 此前这件事挂在 `server.ts` 构造账本时给的 {@link ChatItemLedgerDeps.onPersisted} 上，
+       * 于是**只有 `/api/chat` 那一条开轮入口**接了；后台自起轮（工单播报 / 委派回流 / 授权卡续跑）、
+       * serve 重启重挂、委派子会话三条入口建账本时都没给——插话已被 runtime 消费、库里也记了送达，
+       * 页面却收不到那一行，排队区一直转圈，直到本轮结束重拉快照才出现
+       * （2026-09-17 生产会话 `3b89b474`，子任务回传唤起的那一轮，插话晚显示约 4 分钟）。
+       * 挂到「有 live 轮就有」的那一处，新长出来的开轮入口不需要记得再接一次。
+       *
+       * ## 为什么要补发
+       *
+       * `/api/chat` 的首条提交在 `liveChat.start` **之前**就排进落库链，谁先完成纯看 INSERT 往返
+       * （2026-09-10「位置有时候变来变去」那场竞速）。补发让「落库早于开轮」与「开轮早于落库」同一个结果。
+       */
+      onUserItemPersisted(cb) {
+        for (const info of this.persistedUserItems.slice()) {
+          try {
+            cb(info);
+          } catch {
+          }
+        }
+        this.userItemListeners.add(cb);
+        return () => {
+          this.userItemListeners.delete(cb);
+        };
+      }
       get failures() {
         return this.failureCount;
       }
@@ -10708,6 +10753,8 @@ var init_chat_item_ledger = __esm({
           if (this.rows.has(row.id)) continue;
           const { text: text6, attrs } = restoredTextAndAttrs(row);
           const item = {
+            createdAt: row.createdAt,
+            completedAt: row.completedAt,
             id: row.id,
             seq: ++this.seqCounter,
             ord: row.ord,
@@ -10767,6 +10814,9 @@ var init_chat_item_ledger = __esm({
       /**
        * 切段（人中途插入）：此刻起建的 item 属于**下一条** assistant 行。
        * 已有 provider item 保留身份与位置；新 item 才归下一段，迟到快照不能复制旧块。
+       *
+       * 返回新段的段号。那条 assistant 行落库后回填归属时**必须带上它**（{@link bindMessage}）：
+       * 行是异步落库的，回填到达时后面可能已经又切过段。
        */
       beginSegment() {
         if (this.segmentEndEmitted) {
@@ -10778,6 +10828,7 @@ var init_chat_item_ledger = __esm({
         this.messageId = null;
         this.segment += 1;
         this.segmentItemCount = 0;
+        return this.segment;
       }
       /**
        * 人插话时，先把「这一段到此为止」落定；**必须在那条 user 行之前调用**。
@@ -10814,15 +10865,31 @@ var init_chat_item_ledger = __esm({
           payload: { code: "segment_end", note: SEGMENT_END_NOTE }
         });
       }
-      /** 行落库了，把本段还挂着 NULL 的 assistant item 认领回去，并让后续 item 直接带上它。 */
-      bindMessage(messageId) {
-        this.messageId = messageId;
+      /**
+       * 第 `segment` 段那条 assistant 行落库了：把**那一段**还挂着 NULL 的 assistant item 认领回去；
+       * 那一段仍是当前段时，后续 item 直接带上它。缺省段号 = 当前段。
+       *
+       * ## 为什么必须按段收窄（2026-09-17）
+       *
+       * 切段后新行的落库挂在调用方的 checkpoint 链上（先收口前段、再落 user 行、再落新 assistant 行），
+       * 回填要等这几次写都完成；而 runtime 的输出和第二次插话不等它。库慢一点时事件序可以是：
+       * 插话 1 切到第 1 段 → 第 1 段输出 → 插话 2 切到第 2 段 → 第 2 段输出 → 第 1 段的行才落库、回填到达。
+       * 此前回填把**全部** NULL 的 assistant item 认给这一行、并无条件把当前归属改成它：第 2 段的 item
+       * 被归到第 1 段那条消息上（库里与帧上都是），之后新建的 item 也跟着倒退到第 1 段，
+       * 直到第 2 段的回填到达也认领不回来（它们已经不是 NULL）。所以回填只认这一段、只认此刻在账本里的
+       * 那几条 item（store 侧按精确 id 更新），当前归属只在段号仍是当前段时才前进。
+       */
+      bindMessage(messageId, segment = this.segment) {
+        if (segment === this.segment) this.messageId = messageId;
+        const itemIds = [];
         for (const row of this.rows.values()) {
-          if (row.role === "assistant" && row.messageId === null) row.messageId = messageId;
+          if (row.role !== "assistant" || row.messageId !== null || row.segment !== segment) continue;
+          row.messageId = messageId;
+          if (row.persist) itemIds.push(row.id);
         }
-        if (!this.persistEnabled) return;
+        if (!this.persistEnabled || itemIds.length === 0) return;
         this.enqueue(async () => {
-          await this.deps.items.bindMessage(this.deps.sessionId, this.deps.turnId, messageId);
+          await this.deps.items.bindMessage(this.deps.sessionId, this.deps.turnId, messageId, itemIds);
         }, "bindMessage");
       }
       /**
@@ -10962,7 +11029,10 @@ var init_chat_item_ledger = __esm({
         const id = input.deterministicId ?? this.newId();
         const startedVersion = this.tick();
         const writeVersion = this.tick();
+        const createdAt = this.now();
         const row = {
+          createdAt,
+          completedAt: null,
           id,
           seq: ++this.seqCounter,
           ord: null,
@@ -10986,7 +11056,6 @@ var init_chat_item_ledger = __esm({
         if (!input.forceNullMessage) this.segmentItemCount += 1;
         if (!input.persist || !this.persistEnabled) return id;
         const messageId = row.messageId;
-        const createdAt = this.now();
         const payload2 = input.payload ?? this.payloadOf(row);
         const metadata = input.metadata ?? { [CHAT_ITEM_META_LEGACY_CONTENT]: input.inContent };
         this.enqueue(async () => {
@@ -11006,17 +11075,27 @@ var init_chat_item_ledger = __esm({
             version: writeVersion
           });
           row.ord = created.ord;
+          const info = {
+            itemId: id,
+            ord: created.ord,
+            version: writeVersion,
+            role: input.role,
+            text: input.text,
+            payload: payload2
+          };
           try {
-            this.deps.onPersisted?.({
-              itemId: id,
-              ord: created.ord,
-              version: writeVersion,
-              role: input.role,
-              text: input.text,
-              payload: payload2
-            });
+            this.deps.onPersisted?.(info);
           } catch {
           }
+          if (input.role === "user") {
+            this.persistedUserItems.push(info);
+            for (const cb of this.userItemListeners) {
+              try {
+                cb(info);
+              } catch {
+              }
+            }
+          }
         }, `create:${input.kind}`);
         return id;
       }
@@ -11054,9 +11133,11 @@ var init_chat_item_ledger = __esm({
       persist(row, op, what) {
         const version2 = this.tick();
         row.wireVersion = version2;
+        const at = this.now();
+        if (op.op === "set_status" && op.status !== "streaming") row.completedAt = at;
         if (!row.persist || !this.persistEnabled) return;
         this.enqueue(async () => {
-          await this.deps.items.applyOp(row.id, op, { at: this.now(), version: version2 });
+          await this.deps.items.applyOp(row.id, op, { at, version: version2 });
         }, what);
       }
       /** 串行链 + 失败吞掉计数。**串行是必须的**：append_text 依赖建行已经落地。 */
@@ -11202,6 +11283,46 @@ async function finalizeAssistantRow(deps) {
   } catch {
   }
 }
+function beginInsertedAssistantSegment(deps) {
+  const segText = deps.ledger.projectContent();
+  const nextId = (deps.newId ?? import_node_crypto14.randomUUID)();
+  const segment = deps.ledger.beginSegment();
+  deps.live.setAssistantMessageId(nextId);
+  const at = (deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()))();
+  const { chatStore, closingId, segParts } = deps;
+  const persist = async () => {
+    if (closingId) {
+      await chatStore.updateMessage(closingId, {
+        content: segText,
+        status: "done",
+        completedAt: at,
+        ...segParts.length ? { parts: segParts } : {}
+      }).catch(() => void 0);
+    }
+    await chatStore.appendMessage({
+      id: (0, import_node_crypto14.randomUUID)(),
+      sessionId: deps.chatSessionId,
+      role: "user",
+      content: deps.text,
+      createdAt: at,
+      // ADR-0166 D9.1：插入带的附件也落在**这条 user 行**上（同 `/api/chat` 那侧只存引用）。
+      ...deps.attachments?.length ? { attachments: deps.attachments } : {},
+      ...deps.turnId ? { turnId: deps.turnId } : {}
+      // 插话切段仍属同一轮（同 turnId）
+    }).catch(() => void 0);
+    await chatStore.appendMessage({
+      id: nextId,
+      sessionId: deps.chatSessionId,
+      role: "assistant",
+      content: "",
+      createdAt: at,
+      status: "running",
+      ...deps.runId ? { runId: deps.runId } : {},
+      ...deps.turnId ? { turnId: deps.turnId } : {}
+    }).then(() => deps.ledger.bindMessage(nextId, segment)).catch(() => void 0);
+  };
+  return { nextId, segText, persist };
+}
 function outputsPartProvider(scan2, chatSessionId, companyId) {
   if (!scan2) return void 0;
   return async () => {
@@ -11293,6 +11414,8 @@ function runBackgroundAssistantChatTurn(deps) {
       chatStore: deps.chatStore,
       chatSessionId: deps.chatSessionId,
       ...runId ? { runId } : {},
+      // 与 `/api/chat` 同口径（ADR 0300 I1）：消息行带这一轮的 `chat_session_turns.id`。此前后台轮不带。
+      ...deps.turnId ? { turnId: deps.turnId } : {},
       now
     });
     const itemLedger = new ChatItemLedger({
@@ -11325,9 +11448,34 @@ function runBackgroundAssistantChatTurn(deps) {
     );
     const localParts = [];
     let localSeq = 0;
-    const collectedParts = () => localParts.filter((p2) => p2.type !== "done" && p2.type !== "user");
+    let segmentBaseSeq = 0;
+    const collectedParts = () => localParts.filter((p2) => p2.type !== "done" && p2.type !== "user" && p2.seq > segmentBaseSeq);
+    let currentMsgId = assistantMsgId;
+    const closedSegmentsText = [];
     let checkpointChain = Promise.resolve();
     let ckptDirty = false;
+    if (liveTurn && typeof deps.chatStore.appendMessage === "function" && typeof deps.chatStore.updateMessage === "function") {
+      const live = liveTurn;
+      live.onUserInput((text6, attachments) => {
+        const split = beginInsertedAssistantSegment({
+          chatStore: deps.chatStore,
+          chatSessionId: deps.chatSessionId,
+          ledger: itemLedger,
+          live,
+          closingId: currentMsgId,
+          segParts: collectedParts(),
+          text: text6,
+          attachments,
+          ...runId ? { runId } : {},
+          turnId: deps.turnId,
+          now
+        });
+        closedSegmentsText.push(split.segText);
+        currentMsgId = split.nextId;
+        segmentBaseSeq = localSeq;
+        checkpointChain = checkpointChain.then(split.persist).catch(() => void 0);
+      });
+    }
     normalizedSource.onNormalizedProviderEvent((event) => {
       try {
         if (liveTurn) liveTurn.applyNormalizedEvent(event);
@@ -11355,11 +11503,12 @@ function runBackgroundAssistantChatTurn(deps) {
     let ckptTimer = null;
     if (checkpointMs > 0 && assistantMsgId) {
       ckptTimer = setInterval(() => {
-        if (!ckptDirty) return;
+        if (!ckptDirty || !currentMsgId) return;
         ckptDirty = false;
         const parts = collectedParts();
         const content3 = itemLedger.projectContent();
-        checkpointChain = checkpointChain.then(() => deps.chatStore.updateMessage(assistantMsgId, {
+        const target = currentMsgId;
+        checkpointChain = checkpointChain.then(() => deps.chatStore.updateMessage(target, {
           content: content3,
           status: "running",
           ...parts.length ? { parts } : {}
@@ -11379,11 +11528,13 @@ function runBackgroundAssistantChatTurn(deps) {
         await finalizeAssistantRow({
           chatStore: deps.chatStore,
           chatSessionId: deps.chatSessionId,
-          assistantMsgId,
+          // 插话切过段就收最后一段那一行；前面各段在切段时已转 done。
+          assistantMsgId: currentMsgId,
           content: projectedContent,
           parts,
           status,
           ...runId ? { runId } : {},
+          ...deps.turnId ? { turnId: deps.turnId } : {},
           ...deps.outputsPart ? { outputsPart: deps.outputsPart } : {},
           now
         });
@@ -11399,7 +11550,8 @@ function runBackgroundAssistantChatTurn(deps) {
           }
         }
         if (liveTurn) {
-          if (projectedContent) liveTurn.emit({ type: "text", text: projectedContent });
+          const turnText = [...closedSegmentsText, projectedContent].join("");
+          if (turnText) liveTurn.emit({ type: "text", text: turnText });
           liveTurn.emitLive({
             protocolVersion: 2,
             streamId: `background:${deps.chatSessionId}`,
@@ -11407,7 +11559,7 @@ function runBackgroundAssistantChatTurn(deps) {
             itemId: `background:${assistantMsgId ?? runId}`,
             itemType: "message",
             operation: "completed",
-            payload: { role: "assistant", text: projectedContent }
+            payload: { role: "assistant", text: turnText }
           });
         }
         try {
@@ -11881,11 +12033,11 @@ function decryptFeishu(encrypt, encryptKey) {
 function decodeBody(body2, encryptKey) {
   if (typeof body2 !== "object" || body2 === null) return null;
   const rec = body2;
-  const enc4 = rec["encrypt"];
-  if (typeof enc4 === "string") {
+  const enc3 = rec["encrypt"];
+  if (typeof enc3 === "string") {
     if (!encryptKey) return null;
     try {
-      const parsed = JSON.parse(decryptFeishu(enc4, encryptKey));
+      const parsed = JSON.parse(decryptFeishu(enc3, encryptKey));
       return typeof parsed === "object" && parsed !== null ? parsed : null;
     } catch {
       return null;
@@ -121002,11 +121154,11 @@ var require_lib2 = __commonJS({
     var DEFAULT_INITIAL = "Thinking...";
     var DEFAULT_EMPTY = "(no content)";
     var INITIAL_SUMMARY = "[Generating...]";
-    var SUMMARY_MAX_CHARS = 50;
+    var SUMMARY_MAX_CHARS2 = 50;
     var ERROR_FOOTER = "\n\n\u2014 _(Generation interrupted)_";
     var DEFAULT_MAX_ELEMENT_CHARS = 3e4;
     var ELEMENT_ID = "stream_md";
-    function truncateSummary(text6, max = SUMMARY_MAX_CHARS) {
+    function truncateSummary(text6, max = SUMMARY_MAX_CHARS2) {
       if (!text6)
         return "";
       const cleaned = text6.replace(/\s+/g, " ").trim();
@@ -125204,6 +125356,90 @@ var init_state = __esm({
   }
 });
 
+// ../engine/src/upstream-stability.ts
+function inputsMatch(state, node2, latestWork) {
+  const inbound = state.edgesInto(node2.id);
+  const currInputs = new Set(
+    inbound.filter((e) => e.kind === "data" && e.pinnedWorkId).map((e) => e.pinnedWorkId)
+  );
+  const latestInputs = new Set(state.workInputsOf(latestWork.id).map((i) => i.upstreamWorkId));
+  return currInputs.size === latestInputs.size && [...currInputs].every((x2) => latestInputs.has(x2));
+}
+function isEdgeInputUnobtainable(state, edge) {
+  const upstream = state.node(edge.fromNodeId);
+  return !!upstream?.cancelledAt && !upstream.latestAcceptId;
+}
+function concernsCurrentDelivery(state, node2, issue2) {
+  const targetNode = issue2.aboutNodeId ? state.node(issue2.aboutNodeId) : node2;
+  if (!issue2.aboutWorkId || issue2.aboutWorkId === targetNode?.latestAcceptId) return true;
+  const target = state.work(issue2.aboutWorkId);
+  return !target?.acceptedAt;
+}
+function hasDeliveryIssue(state, node2) {
+  return state.allIssues().some((issue2) => {
+    if (issue2.resolvedAt !== null || issue2.intent === "advisory" || !concernsCurrentDelivery(state, node2, issue2)) return false;
+    if (issue2.kind === "gap") return issue2.raisedByNodeId === node2.id;
+    if (issue2.kind === "escalation") return issue2.aboutNodeId === node2.id;
+    if (issue2.kind === "change_request") return issue2.aboutNodeId === node2.id || issue2.raisedByNodeId === node2.id;
+    return issue2.kind === "comment" && issue2.raisedByNodeId !== null && (issue2.aboutNodeId === node2.id || issue2.raisedByNodeId === node2.id);
+  });
+}
+function unsettledResolvedGap(state, nodeId) {
+  return findUndeliveredResolvedGap(nodeId, state.mainWorksOf(nodeId).filter((work) => workState(work, hasOutput(work, state.artifactsOf(work.id).length)) === "success" && (!!work.acceptedAt || !hasOutput(work, state.artifactsOf(work.id).length))), state.allIssues());
+}
+function hasOrdinaryNotificationBatch(state, nodeId, issueIds) {
+  return issueIds.some((id) => state.issue(id)?.kind === "comment") && issueIds.every((id) => {
+    const issue2 = state.issue(id);
+    return issue2?.kind === "comment" && issue2.aboutNodeId === nodeId && issue2.raisedByNodeId === null || issue2?.kind === "gap" && issue2.resolvedAt !== null && issue2.raisedByNodeId === nodeId;
+  });
+}
+function isNotificationDispatch(state, node2, issueIds) {
+  const accepted = node2.latestAcceptId ? state.work(node2.latestAcceptId) : void 0;
+  return !!accepted && accepted.nodeVersion === node2.version && inputsMatch(state, node2, accepted) && (node2.latestProposedWorkId === accepted.id || node2.latestWorkId === accepted.id) && !unsettledResolvedGap(state, node2.id) && hasOrdinaryNotificationBatch(state, node2.id, issueIds);
+}
+function isNotificationWork(state, node2, work) {
+  return isMainWork(work) && work.id !== node2.latestAcceptId && !hasOutput(work, state.artifactsOf(work.id).length) && work.nodeVersion === node2.version && inputsMatch(state, node2, work) && isNotificationDispatch(state, node2, work.frozenIssueIds ?? []);
+}
+function findUnstableRequiredUpstream(state, nodeId, pendingEvents = []) {
+  const memo = /* @__PURE__ */ new Map();
+  const visiting = /* @__PURE__ */ new Set();
+  const mayStillChange2 = (id) => {
+    const cached3 = memo.get(id);
+    if (cached3 !== void 0) return cached3;
+    if (visiting.has(id)) return true;
+    visiting.add(id);
+    const node2 = state.node(id);
+    let unstable = true;
+    if (node2?.cancelledAt && node2.latestAcceptId) {
+      unstable = false;
+    } else if (node2?.latestAcceptId) {
+      const accepted = state.work(node2.latestAcceptId);
+      const latest = node2.latestWorkId ? state.work(node2.latestWorkId) : void 0;
+      const acceptedIsCurrent = node2.latestAcceptId === node2.latestWorkId || node2.latestAcceptId === node2.latestProposedWorkId;
+      const latestHasOutput = latest ? hasOutput(latest, state.artifactsOf(latest.id).length) : false;
+      const latestState = latest ? workState(latest, latestHasOutput) : null;
+      const producing = latest && latest.id !== accepted?.id && isMainWork(latest) && !isNotificationWork(state, node2, latest) && (latestState === "running" || latestState === "retry" || latestHasOutput && latestState !== "dead");
+      const queued = [...state.emitted, ...pendingEvents].some((event) => event.kind === "work.create" && event.nodeId === id && !isNotificationDispatch(state, node2, event.reasons.filter((r) => r.kind === "issue").map((r) => r.issueId)));
+      unstable = !accepted || accepted.nodeVersion !== node2.version || !inputsMatch(state, node2, accepted) || !acceptedIsCurrent || !!producing || hasDeliveryIssue(state, node2) || !!unsettledResolvedGap(state, id) || queued;
+      if (!unstable) unstable = state.edgesInto(id).some((edge) => edge.kind === "data" && edge.required && !isEdgeInputUnobtainable(state, edge) && mayStillChange2(edge.fromNodeId));
+    }
+    visiting.delete(id);
+    memo.set(id, unstable);
+    return unstable;
+  };
+  for (const edge of state.edgesInto(nodeId)) {
+    if (edge.kind === "data" && edge.required && !isEdgeInputUnobtainable(state, edge) && mayStillChange2(edge.fromNodeId)) return edge.fromNodeId;
+  }
+  return null;
+}
+var init_upstream_stability = __esm({
+  "../engine/src/upstream-stability.ts"() {
+    "use strict";
+    init_model();
+    init_views2();
+  }
+});
+
 // ../engine/src/letters.ts
 function repliesSorted(state, issueId) {
   return [...state.repliesOf(issueId)].sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
@@ -125578,8 +125814,17 @@ function scan(state, ctx) {
       continue;
     }
   }
-  const terminated = events.length === 0 && checkTerminated(state);
-  return { events, terminated };
+  const admitted = events.filter((event) => {
+    if (event.kind !== "work.create") return true;
+    const node2 = state.node(event.nodeId);
+    return !!node2 && !dispatchBlock(state, node2, events, isNotificationDispatch(
+      state,
+      node2,
+      event.reasons.filter((r) => r.kind === "issue").map((r) => r.issueId)
+    ));
+  });
+  const terminated = admitted.length === 0 && checkTerminated(state);
+  return { events: admitted, terminated };
 }
 function checkRunningWorkTimeout(state, node2, work, ctx, events) {
   const start = work.lastActivityAt ?? work.startedAt ?? work.createdAt;
@@ -125670,6 +125915,18 @@ function scanBlockersForNode(state, node2, latest) {
   }
   return blockers;
 }
+function dispatchBlock(state, node2, pendingEvents = [], notification = false) {
+  if (!node2.assigneeActorId) return "no_assignee";
+  const latest = node2.latestWorkId ? state.work(node2.latestWorkId) ?? null : null;
+  if (unexemptedVetoBlockers(scanBlockersForNode(state, node2, latest), "dispatch").length > 0) return "issue";
+  if (notification) return null;
+  for (const edge of state.edgesInto(node2.id)) {
+    if (edge.kind !== "data" || !edge.required || isEdgeInputUnobtainable(state, edge)) continue;
+    const upstream = state.node(edge.fromNodeId);
+    if (!upstream?.latestAcceptId || isBusinessDependencyEdge(state, edge) && !businessHandoffBarrierSatisfied(state, upstream.id, upstream.latestAcceptId)) return "upstream_not_ready";
+  }
+  return findUnstableRequiredUpstream(state, node2.id, pendingEvents) ? "upstream_unstable" : null;
+}
 function tryToRun(state, nodeId, ctx, events) {
   const node2 = state.node(nodeId);
   if (!node2) return;
@@ -125695,15 +125952,6 @@ function tryToRun(state, nodeId, ctx, events) {
     }
     return;
   }
-  const inbound = state.edgesInto(nodeId);
-  for (const e of inbound) {
-    if (e.kind !== "data" || !e.required) continue;
-    if (isEdgeInputUnobtainable(state, e)) continue;
-    const upstream = state.node(e.fromNodeId);
-    if (!upstream?.latestAcceptId) return;
-    if (isBusinessDependencyEdge(state, e) && !businessHandoffBarrierSatisfied(state, upstream.id, upstream.latestAcceptId)) return;
-  }
-  if (findUnstableRequiredUpstream(state, nodeId, events)) return;
   if (state.hasQueuedWorkFor(nodeId)) return;
   const workId = deriveWorkId(nodeId, state.allWorksIncludingReplies(nodeId).length + 1);
   const letters = pendingLetters(state, node2);
@@ -125719,6 +125967,8 @@ function tryToRun(state, nodeId, ctx, events) {
     if (deliveredNow.has(g2.id)) continue;
     reasons.push({ kind: "issue", issueId: g2.id, issueKind: g2.kind });
   }
+  const notification = isNotificationDispatch(state, node2, reasons.filter((r) => r.kind === "issue").map((r) => r.issueId));
+  if (dispatchBlock(state, node2, events, notification)) return;
   events.push({
     kind: "work.create",
     workorderId: state.workorder.id,
@@ -125868,59 +126118,6 @@ function collectStallTrips(state, node2, ctx) {
   }
   return out;
 }
-function inputsMatch(state, node2, latestWork) {
-  const inbound = state.edgesInto(node2.id);
-  const currInputs = new Set(
-    inbound.filter((e) => e.kind === "data" && e.pinnedWorkId).map((e) => e.pinnedWorkId)
-  );
-  const latestInputs = new Set(state.workInputsOf(latestWork.id).map((i) => i.upstreamWorkId));
-  return currInputs.size === latestInputs.size && [...currInputs].every((x2) => latestInputs.has(x2));
-}
-function findUnstableRequiredUpstream(state, nodeId, pendingEvents = []) {
-  const memo = /* @__PURE__ */ new Map();
-  const visiting = /* @__PURE__ */ new Set();
-  const mayStillChange2 = (candidateId) => {
-    const cached3 = memo.get(candidateId);
-    if (cached3 !== void 0) return cached3;
-    if (visiting.has(candidateId)) return true;
-    visiting.add(candidateId);
-    const candidate = state.node(candidateId);
-    let unstable = false;
-    if (!candidate) {
-      unstable = true;
-    } else if (candidate.cancelledAt && candidate.latestAcceptId) {
-      unstable = false;
-    } else if (!candidate.latestAcceptId) {
-      unstable = true;
-    } else {
-      const accepted = state.work(candidate.latestAcceptId);
-      if (!accepted || accepted.nodeVersion !== candidate.version || !inputsMatch(state, candidate, accepted)) {
-        unstable = true;
-      } else {
-        const acceptedIsCurrent = candidate.latestAcceptId === candidate.latestWorkId || candidate.latestAcceptId === candidate.latestProposedWorkId;
-        const queuedThisScan = pendingEvents.some((event) => event.kind === "work.create" && event.nodeId === candidateId);
-        unstable = !acceptedIsCurrent || state.hasQueuedWorkFor(candidateId) || queuedThisScan;
-      }
-      if (!unstable) {
-        for (const edge of state.edgesInto(candidateId)) {
-          if (edge.kind !== "data" || !edge.required || isEdgeInputUnobtainable(state, edge)) continue;
-          if (mayStillChange2(edge.fromNodeId)) {
-            unstable = true;
-            break;
-          }
-        }
-      }
-    }
-    visiting.delete(candidateId);
-    memo.set(candidateId, unstable);
-    return unstable;
-  };
-  for (const edge of state.edgesInto(nodeId)) {
-    if (edge.kind !== "data" || !edge.required || isEdgeInputUnobtainable(state, edge)) continue;
-    if (mayStillChange2(edge.fromNodeId)) return edge.fromNodeId;
-  }
-  return null;
-}
 function reviewMaxRetriesOf(policy) {
   const act = policy.resolve({ executor: "agent", scenario: "review" }).timeoutAction;
   return act.kind === "kill-rebuild" ? act.maxRetries : AGENT_REVIEW_MAX_RETRIES;
@@ -126082,10 +126279,6 @@ function mergedClosureRequirements(state, nodeId, closureActors) {
   const kept = state.requirementsOf(nodeId).filter((r) => r.source !== "closure").map((r) => ({ reviewerActorId: r.reviewerActorId, reviewGroup: r.reviewGroup, source: r.source }));
   return [...kept, ...closureReviewerSpecs(wantedClosureActors(state, nodeId, closureActors))];
 }
-function isEdgeInputUnobtainable(state, edge) {
-  const upstream = state.node(edge.fromNodeId);
-  return !!upstream?.cancelledAt && !upstream.latestAcceptId;
-}
 function isBusinessDependencyEdge(state, edge) {
   const downstream = state.node(edge.toNodeId);
   return edge.kind === "data" && edge.required && downstream?.fields?.[BUSINESS_HANDOFF_POLICY_FIELD] !== BUSINESS_HANDOFF_POLICY_EXEMPT;
@@ -126192,6 +126385,8 @@ function assessConvergence(state, ctx) {
 var init_activate = __esm({
   "../engine/src/activate.ts"() {
     "use strict";
+    init_upstream_stability();
+    init_upstream_stability();
     init_continuation();
     init_src4();
     init_src5();
@@ -130083,7 +130278,7 @@ var require_split2 = __commonJS({
     var { StringDecoder } = require("string_decoder");
     var kLast = Symbol("last");
     var kDecoder = Symbol("decoder");
-    function transform2(chunk, enc4, cb) {
+    function transform2(chunk, enc3, cb) {
       let list2;
       if (this.overflow) {
         const buf = this[kDecoder].write(chunk);
@@ -132699,7 +132894,9 @@ var init_store_postgres = __esm({
         WHERE (
                 (e.status = 'pending' AND (e.available_at IS NULL OR e.available_at <= $1))
                 -- \u5D29\u6E83\u81EA\u6108\uFF1A\u5361\u5728 applied \u592A\u4E45\u7684\uFF08\u8FDB\u7A0B\u6B7B\u5728\u300C\u843D\u72B6\u6001\u300D\u4E0E\u300C\u6536\u5C3E\u300D\u4E4B\u95F4\uFF09\u4E5F\u56DE\u6536\u91CD\u8DD1
-                OR ($2::timestamptz IS NOT NULL AND e.status = 'applied' AND e.applied_at < $2::timestamptz)
+                OR (e.status = 'applied' AND (
+                  (e.available_at IS NOT NULL AND e.available_at <= $1)
+                  OR (e.available_at IS NULL AND $2::timestamptz IS NOT NULL AND e.applied_at < $2::timestamptz)))
               )
           AND NOT EXISTS (
             SELECT 1 FROM ${this.s}.events p
@@ -132716,13 +132913,23 @@ var init_store_postgres = __esm({
       async markEvent(seq, status, failedReason, at) {
         await this.c.query(
           `UPDATE ${this.s}.events
-          SET status = $2, failed_reason = $3,
+          SET status = $2, failed_reason = $3, available_at = NULL,
               applied_at = CASE WHEN $2 = 'applied' THEN $4::timestamptz ELSE applied_at END,
               done_at    = CASE WHEN $2 = 'done'    THEN $4::timestamptz ELSE done_at END
         WHERE seq = $1`,
           [seq, status, failedReason, at]
         );
       }
+      async getEvent(seq) {
+        const res = await this.c.query(`SELECT * FROM ${this.s}.events WHERE seq = $1`, [seq]);
+        return res.rows[0] ? toRecord(res.rows[0]) : null;
+      }
+      async deferEvent(seq, status, reason, availableAt) {
+        await this.c.query(
+          `UPDATE ${this.s}.events SET status = $2, failed_reason = $3, available_at = $4::timestamptz WHERE seq = $1`,
+          [seq, status, reason, availableAt]
+        );
+      }
       async isHandlerDone(seq, handlerName) {
         const res = await this.c.query(
           `SELECT 1 FROM ${this.s}.event_handler_log WHERE event_seq = $1 AND handler_name = $2`,
@@ -132756,7 +132963,9 @@ var init_store_postgres = __esm({
        WHERE (
                (e.status = 'pending' AND (e.available_at IS NULL OR e.available_at <= $1))
                -- \u5D29\u6E83\u81EA\u6108\uFF1A\u89C1 claimNextEvent \u7684\u6CE8\u91CA
-               OR ($2::timestamptz IS NOT NULL AND e.status = 'applied' AND e.applied_at < $2::timestamptz)
+               OR (e.status = 'applied' AND (
+                 (e.available_at IS NOT NULL AND e.available_at <= $1)
+                 OR (e.available_at IS NULL AND $2::timestamptz IS NOT NULL AND e.applied_at < $2::timestamptz)))
              )
          AND NOT EXISTS (SELECT 1 FROM ${this.s}.events p WHERE p.workorder_id = e.workorder_id
                           AND p.status IN ('pending','applied') AND p.seq < e.seq)
@@ -133139,12 +133348,29 @@ var init_plan = __esm({
 });
 
 // ../engine/src/handlers/workorder.ts
-var workorderCreate, workorderMeta, workorderPause, workorderResume, workorderPing;
+var workorderInitialize, workorderCreate, workorderMeta, workorderPause, workorderResume, workorderPing;
 var init_workorder = __esm({
   "../engine/src/handlers/workorder.ts"() {
     "use strict";
     init_kill();
     init_plan();
+    workorderInitialize = {
+      name: "workorder/initialize",
+      kind: "workorder.initialized",
+      retryFailedEffect: true,
+      apply(e, state, ctx) {
+        state.updateWorkorder({ lifecycle: "active", updatedAt: ctx.at });
+        if (!e.dispatch && !state.workorder.dispatchPaused) workorderPause.apply({
+          kind: "workorder.paused",
+          workorderId: e.workorderId,
+          by: ctx.actorId,
+          reason: e.reason ?? ""
+        }, state, ctx);
+      },
+      async effect(e, ctx) {
+        if (!e.dispatch) await ctx.cancelKilledSessions(e.workorderId);
+      }
+    };
     workorderCreate = {
       name: "workorder/create",
       kind: "workorder.created",
@@ -133181,6 +133407,7 @@ var init_workorder = __esm({
     workorderPause = {
       name: "workorder/pause",
       kind: "workorder.paused",
+      retryFailedEffect: true,
       apply(e, state, ctx) {
         state.updateWorkorder({ dispatchPaused: true, pausedBy: e.by, pausedReason: e.reason, updatedAt: ctx.at });
         killAllWorks(state, ctx.at);
@@ -133226,6 +133453,7 @@ var workCreate, workRedispatch, workSnapshotRecorded, workKill, workResponse, wo
 var init_work = __esm({
   "../engine/src/handlers/work.ts"() {
     "use strict";
+    init_upstream_stability();
     init_continuation();
     init_views2();
     init_kill();
@@ -133538,6 +133766,10 @@ var init_work = __esm({
       apply(e, state, ctx) {
         const w2 = state.work(e.workId);
         if (!w2 || w2.deadAt) return;
+        const node2 = state.node(w2.nodeId);
+        if (e.upstreamStabilityVersion === 1 && node2 && isMainWork(w2) && w2.id !== node2.latestAcceptId && !hasOutput(w2, state.artifactsOf(w2.id).length) && (e.artifacts.length > 0 || e.conclusion != null) && hasOrdinaryNotificationBatch(state, node2.id, w2.frozenIssueIds ?? []) && findUnstableRequiredUpstream(state, node2.id)) {
+          throw new Error("\u4E0A\u6E38\u4EA4\u4ED8\u5C1A\u672A\u7A33\u5B9A\uFF1A\u672C\u8F6E\u53EF\u7EE7\u7EED\u7B54\u590D\u901A\u77E5\uFF0C\u6682\u4E0D\u80FD\u63D0\u4EA4\u65B0\u4EA4\u4ED8\uFF1B\u8BF7\u5728\u4E0A\u6E38\u7A33\u5B9A\u540E\u91CD\u8BD5");
+        }
         if (e.artifacts.length === 0 && w2.acceptanceState === "accepted" && state.artifactsOf(e.workId).length > 0) {
           return;
         }
@@ -134150,8 +134382,9 @@ var init_handlers = __esm({
     init_continuation2();
     init_types();
     HANDLERS = [
-      /* ── 工作区级（5）── */
+      /* ── 工作区级（6）── */
       erase(workorderCreate),
+      erase(workorderInitialize),
       erase(workorderMeta),
       erase(workorderPause),
       erase(workorderResume),
@@ -134204,6 +134437,7 @@ var init_handlers = __esm({
 
 // ../engine/src/bus.ts
 function versionCommandEvent(event) {
+  if (event.kind === "work.submit_output") return { ...event, upstreamStabilityVersion: 1 };
   if (event.kind === "work.create" || event.kind === "review.create") {
     return { ...event, pauseGateVersion: 1, ...event.kind === "work.create" ? { continuationGateVersion: 1 } : {} };
   }
@@ -134228,6 +134462,9 @@ function versionCommandEvent(event) {
       return event;
   }
 }
+function errorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
 function emptySnapshotPlaceholder(record8) {
   return {
     workorder: {
@@ -134258,7 +134495,7 @@ function emptySnapshotPlaceholder(record8) {
     reviews: []
   };
 }
-var SYSTEM_ACTOR, NOOP_IO, SYSTEM_CLOCK, HandlerRegistry, DEFAULT_STUCK_APPLIED_RECOVERY_MS, SETTLE_FOREIGN_PROGRESS_FALLBACK_MS, EngineBus, ApplyFailure, sleep3;
+var SYSTEM_ACTOR, NOOP_IO, SYSTEM_CLOCK, HandlerRegistry, DEFAULT_STUCK_APPLIED_RECOVERY_MS, SETTLE_FOREIGN_PROGRESS_FALLBACK_MS, EVENT_RETRY_DELAY_MS, EngineBus, ApplyFailure, sleep3;
 var init_bus = __esm({
   "../engine/src/bus.ts"() {
     "use strict";
@@ -134268,6 +134505,7 @@ var init_bus = __esm({
     init_model();
     init_handlers();
     init_state();
+    init_upstream_stability();
     init_continuation();
     SYSTEM_ACTOR = "actor:system:engine";
     NOOP_IO = {
@@ -134299,6 +134537,7 @@ var init_bus = __esm({
     };
     DEFAULT_STUCK_APPLIED_RECOVERY_MS = 5 * 6e4;
     SETTLE_FOREIGN_PROGRESS_FALLBACK_MS = 200;
+    EVENT_RETRY_DELAY_MS = 1e3;
     EngineBus = class {
       store;
       io;
@@ -134458,6 +134697,7 @@ var init_bus = __esm({
             if (!await this.drainOne()) break;
           }
         }
+        await this.assertProcessed([seq]);
       }
       /** 同一命令的一组最终修改一起入队。scan-on-empty 在末项之前始终看到 pending，不能派发中间状态。 */
       async submitBatchAndProcess(inputs) {
@@ -134484,6 +134724,17 @@ var init_bus = __esm({
         } else {
           for (let i = 0; i < 2e3; i++) if (!await this.drainOne()) break;
         }
+        await this.assertProcessed(seqs);
+      }
+      async assertProcessed(seqs) {
+        await this.store.transaction(async (tx) => {
+          for (const seq of seqs) {
+            const record8 = await tx.getEvent(seq);
+            if (record8?.status !== "done" || record8.failedReason) {
+              throw new Error(`engine event ${seq} ${record8?.status ?? "missing"}: ${record8?.failedReason ?? "processing has not completed; retry later"}`);
+            }
+          }
+        });
       }
       /* ═══════════════════════ 调度器主循环 ═══════════════════════ */
       /**
@@ -134533,8 +134784,7 @@ var init_bus = __esm({
                 }
                 touched.add(record8.workorderId);
                 try {
-                  await this.applyRecord(record8);
-                  await this.effectRecord(record8);
+                  if (await this.applyRecord(record8)) await this.effectRecord(record8);
                 } catch (err) {
                   console.error(`[bus] event ${record8.seq} ${record8.event.kind}:`, err);
                 }
@@ -134665,9 +134915,10 @@ var init_bus = __esm({
       /* ═══════════════════════ 旧 drain（测试兼容） ═══════════════════════ */
       /** 取一条事件 apply+effect，然后 scan 其工单。仅测试用——生产代码走 run() 循环。 */
       async drainOne() {
-        const record8 = await this.applyPhase();
-        if (!record8) return false;
-        await this.effectPhase(record8);
+        const phase = await this.applyPhase();
+        if (!phase) return false;
+        const { record: record8, applied } = phase;
+        if (applied) await this.effectPhase(record8);
         this.emitEvents([record8]);
         try {
           const result = await this.scan(record8.workorderId);
@@ -134684,10 +134935,11 @@ var init_bus = __esm({
       async drain(limit = 1e3) {
         let processed = 0, failed = 0;
         for (let i = 0; i < limit; i++) {
-          const record8 = await this.applyPhase();
-          if (!record8) break;
+          const phase = await this.applyPhase();
+          if (!phase) break;
+          const { record: record8, applied } = phase;
           processed++;
-          const ok3 = await this.effectPhase(record8);
+          const ok3 = applied && await this.effectPhase(record8);
           if (!ok3) failed++;
           this.emitEvents([record8]);
         }
@@ -134699,7 +134951,7 @@ var init_bus = __esm({
        * 公开方法，供 kernel-bridge 和 run() 共用。
        */
       async applyRecord(record8) {
-        await this.store.transaction(async (tx) => {
+        const applied = await this.store.transaction(async (tx) => {
           const snapshot = await tx.loadWorkorder(record8.workorderId);
           const state = new WorkorderState(snapshot ?? emptySnapshotPlaceholder(record8));
           const ctx = {
@@ -134708,10 +134960,15 @@ var init_bus = __esm({
             actorId: record8.actorId,
             config: this.config
           };
+          const completedHandlers = [];
           for (const h of this.registry.for(record8.event.kind)) {
             if (await tx.isHandlerDone(record8.seq, h.name)) continue;
-            h.apply(record8.event, state, ctx);
-            await tx.markHandlerDone(record8.seq, h.name);
+            try {
+              h.apply(record8.event, state, ctx);
+            } catch (err) {
+              throw new ApplyFailure(record8, errorMessage(err));
+            }
+            completedHandlers.push(h.name);
           }
           await tx.applyMutations(record8.workorderId, state.mutations);
           if (state.emitted.length) {
@@ -134728,20 +134985,28 @@ var init_bus = __esm({
               ...eventAnchors(event)
             })));
           }
+          for (const name of completedHandlers) await tx.markHandlerDone(record8.seq, name);
           await tx.markEvent(record8.seq, "applied", null, this.clock.now());
+          return true;
         }).catch(async (err) => {
-          if (err instanceof ApplyFailure) {
-            await this.store.transaction(
-              (tx) => tx.markEvent(err.record.seq, "failed", err.reason, this.clock.now())
-            );
-            return;
-          }
-          throw err;
+          const permanent = !record8.appliedAt && (err instanceof ApplyFailure || /^(22|23)/.test(String(err?.code ?? "")));
+          const reason = errorMessage(err);
+          const retryStatus = record8.appliedAt ? "applied" : "pending";
+          await this.store.transaction((tx) => permanent ? tx.markEvent(record8.seq, "failed", reason, this.clock.now()) : tx.deferEvent(record8.seq, retryStatus, reason, this.retryAt()));
+          record8.status = permanent ? "failed" : retryStatus;
+          console.error(`[bus] apply ${record8.seq} ${record8.status}: ${reason}`);
+          return false;
         });
         this.emitApplied(record8.workorderId);
+        if (applied) record8.status = "applied";
+        return applied;
+      }
+      retryAt() {
+        return new Date(Date.parse(this.clock.now()) + EVENT_RETRY_DELAY_MS).toISOString();
       }
       /** 事务二：跑 IO + 收尾。 */
       async effectRecord(record8) {
+        if (record8.status !== "applied") return false;
         const handlers = this.registry.for(record8.event.kind).filter((h) => h.effect);
         const buffered = [];
         const ctx = {
@@ -134753,32 +135018,53 @@ var init_bus = __esm({
           dispatchReview: (id, nodeId, reviewerActorId) => this.io.dispatchReview(id, nodeId, reviewerActorId),
           canDispatchWork: async (workorderId, workId, opts) => {
             const snap = await this.store.transaction((tx) => tx.loadWorkorder(workorderId));
-            if (!snap || snap.workorder.dispatchPaused) return false;
+            if (!snap || snap.workorder.lifecycle !== "active" || snap.workorder.dispatchPaused) return false;
             const work = snap.works.find((row) => row.id === workId);
             if (work && work.lane === "main" && !work.startedAt && !work.sessionRef && !work.lastActivityAt) {
-              const node2 = snap.nodes.find((row) => row.id === work.nodeId);
-              if (node2 && !node2.continuationBudget && this.io.continuationPolicy) {
+              const node3 = snap.nodes.find((row) => row.id === work.nodeId);
+              if (node3 && !node3.continuationBudget && this.io.continuationPolicy) {
                 const policy = await this.io.continuationPolicy(work.assigneeActorId);
                 if (policy) {
                   if (!Number.isSafeInteger(policy.maxRounds) || policy.maxRounds < 1 || policy.maxRounds > 100) {
                     throw new Error(`invalid continuation round limit for ${work.assigneeActorId}`);
                   }
-                  buffered.push({ event: { kind: "continuation.initialized", workorderId, nodeId: node2.id, rounds: policy.maxRounds } });
+                  buffered.push({ event: { kind: "continuation.initialized", workorderId, nodeId: node3.id, rounds: policy.maxRounds } });
                   buffered.push({ event: { kind: "work.redispatch", workorderId, workId } });
                   return false;
                 }
               }
-              if (node2 && continuationExhausted(new WorkorderState(snap), node2)) return false;
+              if (node3 && continuationExhausted(new WorkorderState(snap), node3)) return false;
             }
             if (opts?.neverStarted && work) {
-              const node2 = snap.nodes.find((row) => row.id === work.nodeId);
-              if (work.startedAt || work.sessionRef || !node2 || node2.cancelledAt || node2.latestWorkId !== workId) return false;
+              const node3 = snap.nodes.find((row) => row.id === work.nodeId);
+              if (work.startedAt || work.sessionRef || !node3 || node3.cancelledAt || node3.latestWorkId !== workId) return false;
             }
-            return work?.status === "running" && !work.deadAt && !work.cancelledAt && !work.endedAt;
+            if (!work || work.status !== "running" || work.deadAt || work.cancelledAt || work.endedAt) return false;
+            const node2 = snap.nodes.find((row) => row.id === work.nodeId);
+            if (!node2 || node2.cancelledAt) return false;
+            const forced = record8.event.kind === "work.create" && record8.event.reasons.some((r) => r.kind === "forced");
+            if (work.lane === "main" && !forced && !work.startedAt && !work.sessionRef) {
+              if (node2.latestWorkId !== work.id) return false;
+              const state = new WorkorderState(snap);
+              const blocked = work.nodeVersion !== node2.version || !inputsMatch(state, node2, work) || dispatchBlock(state, node2, [], isNotificationWork(state, node2, work));
+              if (blocked) {
+                if (record8.event.kind === "work.create") await ctx.cancelPreviousWork(node2.id, work.id);
+                buffered.push({ event: {
+                  kind: "work.kill",
+                  workorderId,
+                  nodeId: node2.id,
+                  workId: work.id,
+                  reason: "\u6D3E\u53D1\u524D\u6761\u4EF6\u5DF2\u53D8\u5316\uFF0C\u7B49\u5F85\u4F9D\u8D56\u6216\u4E8B\u9879\u89E3\u9664\u540E\u91CD\u8BD5"
+                } });
+                buffered.push({ event: { kind: "plan.node_retry", workorderId, nodeId: node2.id, by: SYSTEM_ACTOR } });
+                return false;
+              }
+            }
+            return true;
           },
           canDispatchReview: async (workorderId, reviewId) => {
             const snap = await this.store.transaction((tx) => tx.loadWorkorder(workorderId));
-            if (!snap || snap.workorder.dispatchPaused) return false;
+            if (!snap || snap.workorder.lifecycle !== "active" || snap.workorder.dispatchPaused) return false;
             const review = snap.reviews.find((row) => row.id === reviewId);
             return review?.status === "running" && !review.cancelledAt && !review.endedAt;
           },
@@ -134795,19 +135081,14 @@ var init_bus = __esm({
           // apply 已把被杀 work/review 置 deadAt/cancelledAt，这里按 store 找它们仍挂着的会话 cancel
           //（deadAt 且 endedAt 未置 = 刚被杀未退出的在途会话）。没会话 / 已退 → no-op。
           cancelKilledSessions: async (_workorderId, reviewScope) => {
-            let snap;
-            try {
-              snap = await this.store.transaction((tx) => tx.loadWorkorder(record8.workorderId));
-            } catch (err) {
-              console.warn(`[bus] cancelKilledSessions ${record8.workorderId} \u8BFB\u5FEB\u7167\u5931\u8D25: ${String(err)}`);
-              return;
-            }
+            const snap = await this.store.transaction((tx) => tx.loadWorkorder(record8.workorderId));
             if (!snap) return;
+            const failures = [];
             const cancel = async (id, what) => {
               try {
                 await this.io.cancelSession(id);
               } catch (err) {
-                console.warn(`[bus] cancelKilledSessions ${what} ${id}: ${String(err)}`);
+                failures.push(`${what} ${id}: ${errorMessage(err)}`);
               }
             };
             for (const w2 of reviewScope === void 0 ? snap.works : []) {
@@ -134819,10 +135100,12 @@ var init_bus = __esm({
               ))) continue;
               if (r.cancelledAt && r.endedAt === null) await cancel(r.id, "review");
             }
+            if (failures.length) throw new Error(`session cancellation incomplete: ${failures.join("; ")}`);
           },
           notify: (ids2, payload2) => this.io.notify(ids2, payload2)
         };
         let ok3 = true;
+        let failureReason = null;
         for (const h of handlers) {
           const effectKey = `${h.name}#effect`;
           if (record8.appliedAt && await this.store.transaction((tx) => tx.isHandlerDone(record8.seq, effectKey))) {
@@ -134830,6 +135113,7 @@ var init_bus = __esm({
           }
           let lastErr = "";
           for (let attempt = 1; attempt <= this.maxEffectAttempts; attempt++) {
+            buffered.length = 0;
             try {
               await h.effect(record8.event, ctx);
               lastErr = "";
@@ -134840,27 +135124,30 @@ var init_bus = __esm({
           }
           if (lastErr) {
             ok3 = false;
+            if (h.retryFailedEffect) {
+              await this.store.transaction((tx) => tx.deferEvent(record8.seq, "applied", lastErr, this.retryAt()));
+              return false;
+            }
+            failureReason = lastErr;
           } else {
-            await this.store.transaction((tx) => tx.markHandlerDone(record8.seq, effectKey));
+            await this.store.transaction(async (tx) => {
+              if (buffered.length) await tx.appendEvents(buffered.map((b2) => ({
+                companyId: record8.companyId,
+                workorderId: record8.workorderId,
+                actorId: b2.actorId ?? SYSTEM_ACTOR,
+                handActorId: null,
+                event: versionCommandEvent(b2.event),
+                causedBySeq: record8.seq,
+                origin: "effect",
+                dedupKey: b2.dedupKey ?? null,
+                createdAt: this.clock.now(),
+                ...eventAnchors(b2.event)
+              })));
+              await tx.markHandlerDone(record8.seq, effectKey);
+            });
           }
         }
-        await this.store.transaction(async (tx) => {
-          if (buffered.length) {
-            await tx.appendEvents(buffered.map((b2) => ({
-              companyId: record8.companyId,
-              workorderId: record8.workorderId,
-              actorId: b2.actorId ?? SYSTEM_ACTOR,
-              handActorId: null,
-              event: versionCommandEvent(b2.event),
-              causedBySeq: record8.seq,
-              origin: "effect",
-              dedupKey: b2.dedupKey ?? null,
-              createdAt: this.clock.now(),
-              ...eventAnchors(b2.event)
-            })));
-          }
-          await tx.markEvent(record8.seq, "done", null, this.clock.now());
-        });
+        await this.store.transaction((tx) => tx.markEvent(record8.seq, "done", failureReason, this.clock.now()));
         return ok3;
       }
       /* ═══════════════════════ scan：唯一的调度入口 ═══════════════════════ */
@@ -134926,57 +135213,10 @@ var init_bus = __esm({
       }
       /* ═══════════════════════ 内部：旧 applyPhase（claim + apply 一体） ═══════════════════════ */
       async applyPhase() {
-        return this.store.transaction(async (tx) => {
-          const record8 = await tx.claimNextEvent(this.clock.now(), this.recoverAppliedBefore());
-          if (!record8) return null;
-          const snapshot = await tx.loadWorkorder(record8.workorderId);
-          if (snapshot?.workorder.doneAt && record8.event.kind !== "work.content_edited") {
-            await tx.applyMutations(record8.workorderId, [{
-              t: "workorder.update",
-              patch: { doneAt: null }
-            }]);
-          }
-          const state = new WorkorderState(snapshot ?? emptySnapshotPlaceholder(record8));
-          const ctx = {
-            seq: record8.seq,
-            at: record8.createdAt,
-            actorId: record8.actorId,
-            config: this.config
-          };
-          for (const h of this.registry.for(record8.event.kind)) {
-            if (await tx.isHandlerDone(record8.seq, h.name)) continue;
-            h.apply(record8.event, state, ctx);
-            await tx.markHandlerDone(record8.seq, h.name);
-          }
-          await tx.applyMutations(record8.workorderId, state.mutations);
-          if (state.emitted.length) {
-            await tx.appendEvents(state.emitted.map((event) => ({
-              companyId: record8.companyId,
-              workorderId: record8.workorderId,
-              actorId: SYSTEM_ACTOR,
-              handActorId: null,
-              event: versionCommandEvent(event),
-              causedBySeq: record8.seq,
-              origin: "apply",
-              dedupKey: null,
-              createdAt: record8.createdAt,
-              ...eventAnchors(event)
-            })));
-          }
-          await tx.markEvent(record8.seq, "applied", null, this.clock.now());
-          return record8;
-        }).catch(async (err) => {
-          if (err instanceof ApplyFailure) {
-            await this.store.transaction(
-              (tx) => tx.markEvent(err.record.seq, "failed", err.reason, this.clock.now())
-            );
-            return err.record;
-          }
-          throw err;
-        }).then((record8) => {
-          if (record8) this.emitApplied(record8.workorderId);
-          return record8;
-        });
+        const record8 = await this.store.transaction((tx) => tx.claimNextEvent(this.clock.now(), this.recoverAppliedBefore()));
+        if (!record8) return null;
+        if (record8.event.kind !== "work.content_edited") await this.unmarkDone(record8.workorderId);
+        return { record: record8, applied: await this.applyRecord(record8) };
       }
       async effectPhase(record8) {
         return this.effectRecord(record8);
@@ -134998,7 +135238,7 @@ var init_bus = __esm({
         const events = await this.store.transaction((tx) => tx.listEvents(workorderId));
         let state = null;
         for (const record8 of events) {
-          if (record8.origin === "effect") continue;
+          if (record8.status === "failed" || record8.status === "pending" || record8.origin === "effect") continue;
           if (!state) state = new WorkorderState(emptySnapshotPlaceholder(record8));
           for (const h of this.registry.for(record8.event.kind)) {
             h.apply(record8.event, state, {
@@ -138992,16 +139232,16 @@ function classifyExitReason(info) {
   if (AUTH_RE.test(msg)) return "auth-error";
   return info.reason;
 }
-function quotaResetHorizon(errorMessage) {
-  if (!errorMessage) return "unknown";
-  if (/\b(?:jan|feb|mar|apr|may|jun|jul|aug|sep|oct|nov|dec)[a-z]*\.?\s+\d{1,2}/i.test(errorMessage)) return "long";
-  if (/\d{4}-\d{2}-\d{2}/.test(errorMessage)) return "long";
-  if (/\b\d{1,2}(?::\d{2})?\s*(?:am|pm)\b/i.test(errorMessage)) return "short";
+function quotaResetHorizon(errorMessage2) {
+  if (!errorMessage2) return "unknown";
+  if (/\b(?:jan|feb|mar|apr|may|jun|jul|aug|sep|oct|nov|dec)[a-z]*\.?\s+\d{1,2}/i.test(errorMessage2)) return "long";
+  if (/\d{4}-\d{2}-\d{2}/.test(errorMessage2)) return "long";
+  if (/\b\d{1,2}(?::\d{2})?\s*(?:am|pm)\b/i.test(errorMessage2)) return "short";
   return "unknown";
 }
-function extractResetHint(errorMessage) {
-  if (!errorMessage) return void 0;
-  const m2 = /((?:resets?|try again at)\s+[^·。\n]{1,48})/i.exec(errorMessage);
+function extractResetHint(errorMessage2) {
+  if (!errorMessage2) return void 0;
+  const m2 = /((?:resets?|try again at)\s+[^·。\n]{1,48})/i.exec(errorMessage2);
   return m2?.[1]?.trim().replace(/[.,;]$/, "");
 }
 var QUOTA_RE2, UNREACHABLE_RE, AUTH_RE;
@@ -140312,7 +140552,7 @@ var init_dispatcher = __esm({
       assertSpawnAttemptCurrent(jobKey, attempt) {
         if (!this.isSpawnAttemptCurrent(jobKey, attempt)) throw new SpawnAttemptStale(jobKey);
       }
-      async recordSpawnFailure(jobKey, spec, reason, errorMessage, bypassScheduling = false) {
+      async recordSpawnFailure(jobKey, spec, reason, errorMessage2, bypassScheduling = false) {
         if (bypassScheduling) return;
         if (!this.strikeLedgerLive) return;
         const seqAtVerdict = this.opts.kernel.model.lastSeq.get(spec.artifactId) ?? 0;
@@ -140341,7 +140581,7 @@ var init_dispatcher = __esm({
           firstFailedAt: prev?.firstFailedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
           lastReason: reason,
           totalFailures: (prev?.totalFailures ?? prev?.count ?? 0) + 1,
-          ...errorMessage ? { lastErrorMessage: errorMessage.slice(0, 400) } : {},
+          ...errorMessage2 ? { lastErrorMessage: errorMessage2.slice(0, 400) } : {},
           // 半开一旦开启就**粘着**，直到真的成功（自己落了 op）才随整条记录清掉。
           // 不粘的话：试探失败却因自愈类/宽限期没能立刻回熔断时，标记会丢，等于白送回满血 3 次。
           ...prev?.halfOpen ? { halfOpen: true } : {},
@@ -142800,6 +143040,10 @@ var init_kernel_bridge = __esm({
        *   用来兜住"本进程没收到事件"的写入——多实例部署下别的实例改的工单就属于这种。
        */
       async refreshModel(opts) {
+        if (opts?.workorderId) {
+          this.trackedWorkorders.add(opts.workorderId);
+          this.markWorkorderDirty(opts.workorderId);
+        }
         if (opts?.resync) this.resyncRequested = true;
         await this.refreshTracked();
       }
@@ -144289,6 +144533,24 @@ var init_kernel_bridge = __esm({
           }
         });
       }
+      /** Durable creation receipt, separate from later pause/resume and work outcomes. */
+      async isWorkorderCreationComplete(workorderId) {
+        return this.store.transaction((tx) => tx.isEventDone(`workorder-initialized:${workorderId}`));
+      }
+      async completeWorkorderCreation(workorderId, actor, dispatch, reason = null) {
+        if (await this.isWorkorderCreationComplete(workorderId)) return;
+        if (!dispatch) {
+          const snap = await this.store.transaction((tx) => tx.loadWorkorder(workorderId));
+          if (snap && !snap.workorder.dispatchPaused) await this.pauseWorkorder(workorderId, actor, reason ?? "");
+        }
+        await this.commit({
+          companyId: "",
+          workorderId,
+          actorId: actor,
+          dedupKey: `workorder-initialized:${workorderId}`,
+          event: { kind: "workorder.initialized", workorderId, dispatch, reason }
+        });
+      }
       /** 工单级恢复：workorder.resumed handler 解冻全部节点 + scan 重建 work。 */
       async resumeWorkorder(workorderId, actor) {
         this.trackedWorkorders.add(workorderId);
@@ -144586,7 +144848,7 @@ var init_kernel_bridge = __esm({
         const scopedModel = ws ? filterReadModelByWorkspace(this.model, ws) : this.model;
         return previewIntervention(scopedModel, plan, { schema: this.schema, roleIndex: this.roleIndex });
       }
-      async applyIntervention(plan, _baseSeqs, _actor) {
+      async applyIntervention(plan, _baseSeqs, _actor, options = {}) {
         const ws = this.effectiveWorkspace(plan);
         const scopedModel = ws ? filterReadModelByWorkspace(this.model, ws) : this.model;
         plan = resolveInterventionRefs(scopedModel, plan, this.schema);
@@ -144835,7 +145097,7 @@ var init_kernel_bridge = __esm({
               break;
           }
         }
-        await queue({
+        if (!options.deferActivation) await queue({
           companyId: "",
           workorderId: wid,
           actorId: _actor,
@@ -145662,15 +145924,15 @@ var init_parseUtil = __esm({
           message: issueData.message
         };
       }
-      let errorMessage = "";
+      let errorMessage2 = "";
       const maps = errorMaps.filter((m2) => !!m2).slice().reverse();
       for (const map of maps) {
-        errorMessage = map(fullIssue, { data, defaultError: errorMessage }).message;
+        errorMessage2 = map(fullIssue, { data, defaultError: errorMessage2 }).message;
       }
       return {
         ...issueData,
         path: fullPath,
-        message: errorMessage
+        message: errorMessage2
       };
     };
     EMPTY_PATH = [];
@@ -162237,7 +162499,52 @@ var init_keyed_mutex = __esm({
   }
 });
 
+// ../server/src/domains/collab/initialize-workorder.ts
+async function seedWorkorderBrief(kernel, blobs, workspace, briefId, actor, text6) {
+  await kernel.refreshModel({ workorderId: workspace });
+  const snap = await kernel.getStore().transaction((tx) => tx.loadWorkorder(workspace));
+  const node2 = snap?.nodes.find((row) => row.id === briefId);
+  if (!node2) throw new Error(`\u5EFA\u5355\u6536\u5C3E\u627E\u4E0D\u5230\u603B\u7EB2\u8282\u70B9\uFF1A${briefId}`);
+  const work = snap.works.find((row) => row.id === node2.latestWorkId);
+  const hasBody = !!work && snap.artifacts.some((row) => row.workId === work.id);
+  if (hasBody && work?.status === "success" && work.endedAt && work.conclusion && !work.deadAt && !work.cancelledAt) return;
+  if (snap.workorder.dispatchPaused || node2.cancelledAt || work?.deadAt || work?.cancelledAt) {
+    throw new Error("\u5DE5\u5355\u5DF2\u88AB\u6682\u505C\u6216\u53D6\u6D88\uFF0C\u4E0D\u80FD\u901A\u8FC7\u91CD\u8BD5\u5EFA\u5355\u6062\u590D\u6267\u884C");
+  }
+  if (!text6.trim() && !hasBody) return;
+  if (!hasBody) {
+    const contentRef = await blobs.put(new TextEncoder().encode(text6));
+    await kernel.proposeRevision({ artifactId: briefId, actor, contentRef, reason: "\u5EFA\u5355\uFF1A\u843D\u5B9A brief \u9996\u7248" });
+  }
+  await kernel.advanceQueue(briefId, actor);
+  await kernel.conclude({ artifactId: briefId, actor, note: "\u5EFA\u5355\u65F6\u7531\u53D1\u8D77\u4EBA\u62CD\u677F\u5B9A\u7A3F" });
+}
+function legacyCreationComplete(snap, briefId) {
+  if (snap?.workorder.lifecycle !== "active") return false;
+  return snap.works.some((work) => work.nodeId === briefId && work.status === "success" && !!work.endedAt && !!work.conclusion && !work.deadAt && !work.cancelledAt && snap.artifacts.some((row) => row.workId === work.id));
+}
+var init_initialize_workorder = __esm({
+  "../server/src/domains/collab/initialize-workorder.ts"() {
+    "use strict";
+  }
+});
+
 // ../server/src/live-chat.ts
+function publishInputFromPersisted(info) {
+  const payload2 = info.payload && typeof info.payload === "object" && !Array.isArray(info.payload) ? info.payload : void 0;
+  const csid = typeof payload2?.["clientSubmitId"] === "string" ? payload2["clientSubmitId"] : void 0;
+  const csids = Array.isArray(payload2?.["clientSubmitIds"]) ? payload2["clientSubmitIds"].filter((v2) => typeof v2 === "string") : void 0;
+  const attachments = Array.isArray(payload2?.["attachments"]) ? payload2["attachments"] : void 0;
+  return {
+    itemId: info.itemId,
+    ord: info.ord,
+    version: info.version,
+    text: info.text,
+    ...csid ? { clientSubmitId: csid } : {},
+    ...csids?.length ? { clientSubmitIds: csids } : {},
+    ...attachments?.length ? { attachments } : {}
+  };
+}
 function normalizedKindToItemType(kind) {
   if (kind === "text") return "message";
   if (kind === "thinking") return "thinking";
@@ -162329,6 +162636,8 @@ var init_live_chat = __esm({
         };
         this.turns.set(chatSessionId, turn);
         this.flushPendingUserItems(chatSessionId);
+        const ledger = opts.items;
+        const stopUserItems = ledger && typeof ledger.onUserItemPersisted === "function" ? ledger.onUserItemPersisted((info) => this.publishPersistedUserItem(turn, info)) : void 0;
         const waiters = this.turnStartWaiters.get(chatSessionId);
         this.turnStartWaiters.delete(chatSessionId);
         for (const wake of waiters ?? []) {
@@ -162379,6 +162688,7 @@ var init_live_chat = __esm({
             };
           },
           finish: (status) => {
+            stopUserItems?.();
             for (const receipt of turn.inputReceipts.values()) receipt.abandon();
             turn.inputReceipts.clear();
             try {
@@ -162579,8 +162889,12 @@ var init_live_chat = __esm({
           payload: item.payload
         });
       }
-      assignV3Seq(turn, frame) {
-        return { ...frame, epoch: turn.liveEpoch, seq: ++turn.v3Seq };
+      assignV3Seq(turn, frame, times = turn.items?.timestampsFor(frame.itemId)) {
+        const payload2 = times ? {
+          ...frame.payload && typeof frame.payload === "object" && !Array.isArray(frame.payload) ? frame.payload : {},
+          ...times
+        } : frame.payload;
+        return { ...frame, ...payload2 !== void 0 ? { payload: payload2 } : {}, epoch: turn.liveEpoch, seq: ++turn.v3Seq };
       }
       /**
        * v3 帧的**唯一**发布出口：按 24ms 窗口合并同一 item 上相邻的 `append_text`，其余一律是顺序屏障。
@@ -162664,11 +162978,11 @@ var init_live_chat = __esm({
        * 空对话首次发送时那个最大号是 0，随后到达的历史（号更大）会全部排到乐观条**后面**——
        * 正是 ADR D9 点名必须验的「空桶先发送」那一档。号只能由服务端给。
        *
-       * ## 拿不到轮就静默跳过
+       * ## 谁来调
        *
-       * 本方法由账本的落库链回调触发，而那一刻这条会话的 live 轮可能还没 `start`
-       * （`server.ts` 里 `recordUserSubmission` 在 `liveChat.start` 之前）。拿不到就不发——
-       * 前端退回「等下一次快照」，与修复前一致，不会更坏。
+       * 生产上只有 {@link start} 订阅账本（`ChatItemLedger.onUserItemPersisted`）之后经
+       * {@link publishPersistedUserItem} 调，四条开轮入口一处接好；「落库早于开轮」由账本订阅时补发兜住。
+       * 下面按会话号暂存的那条路只服务直接调本方法、手上又没有轮的调用方。
        */
       /**
        * 「user item 已落库、但这条会话的 live 轮还没 start」时的暂存位（见 {@link publishUserItem}）。
@@ -162718,6 +163032,18 @@ var init_live_chat = __esm({
         this.publishV3(turn, this.assignV3Seq(turn, frame));
         return true;
       }
+      /**
+       * 账本订阅回来的 user 行 → 推给**持有这本账本的那一轮**（{@link start} 里订阅）。
+       *
+       * 只认这条轮本身，不按会话号重新查：这条会话若已经换了一轮（上一轮在 grace、新一轮已 start），
+       * 旧账本迟到的回执不许推进新一轮的流。收了尾的轮也不推——观众已散，页面收尾后会重读快照；
+       * 各入口都在 `finish` 之前抽干账本，已消费的插话在那之前就落了库、发了帧。
+       */
+      publishPersistedUserItem(turn, info) {
+        if (info.role !== "user") return;
+        if (this.turns.get(turn.chatSessionId) !== turn || turn.status !== "running") return;
+        this.publishUserItem(turn.chatSessionId, publishInputFromPersisted(info));
+      }
       /** 恢复路在 DB 收口旧 item 后，将同一身份/版本的终态发给已挂上的观众。 */
       publishItemStatus(chatSessionId, item) {
         const turn = this.turns.get(chatSessionId);
@@ -162733,7 +163059,7 @@ var init_live_chat = __esm({
           operation: item.status === "completed" ? "completed" : "failed",
           itemVersion: item.version,
           ...item.ord !== null ? { ord: item.ord } : {}
-        }));
+        }, { createdAt: item.createdAt, completedAt: item.completedAt }));
         return true;
       }
       emitV3TurnTerminal(turn, status) {
@@ -200837,7 +201163,34 @@ function registerDelegatedChildTurn(liveChat, childSessionId, session, deps = {}
     } catch {
     }
   });
-  const settle = async (signal) => {
+  const recordFailure = (err) => {
+    const chatExit = err instanceof Error ? err.chatExit : void 0;
+    const text6 = chatExit?.summary ?? (err instanceof Error ? err.message : String(err));
+    const extra = {
+      ...chatExit?.reason ? { reason: chatExit.reason } : {},
+      ...chatExit?.detail ? { detail: chatExit.detail } : {}
+    };
+    try {
+      ctrl.emit({ type: "error", text: text6, ...extra });
+    } catch {
+    }
+    try {
+      const outcome = ledger.recordError(text6, extra);
+      ctrl.publishServerItem({
+        itemId: outcome.itemId,
+        itemType: "control",
+        startedVersion: outcome.startedVersion,
+        version: outcome.version,
+        ord: outcome.ord,
+        status: "failed",
+        payload: { code: "error", note: text6, ...extra }
+      });
+    } catch (e) {
+      log3(`[delegation] \u5B50\u4F1A\u8BDD ${childSessionId} \u5931\u8D25\u539F\u56E0\u843D\u8D26\u5931\u8D25: ${String(e)}`);
+    }
+  };
+  const settle = async (signal, err) => {
+    if (signal === "failed") recordFailure(err);
     try {
       normalized4?.finishTurn(signal);
     } catch {
@@ -200845,12 +201198,12 @@ function registerDelegatedChildTurn(liveChat, childSessionId, session, deps = {}
     try {
       ledger.finish(signal);
       await ledger.drain();
-    } catch (err) {
-      log3(`[delegation] \u5B50\u4F1A\u8BDD ${childSessionId} \u8D26\u672C\u6536\u5C3E\u5931\u8D25: ${String(err)}`);
+    } catch (err2) {
+      log3(`[delegation] \u5B50\u4F1A\u8BDD ${childSessionId} \u8D26\u672C\u6536\u5C3E\u5931\u8D25: ${String(err2)}`);
     }
     ctrl.finish(signal === "completed" ? "done" : "error");
   };
-  void session.done.then(() => settle("completed"), () => settle("failed"));
+  void session.done.then(() => settle("completed"), (err) => settle("failed", err));
 }
 var init_child_live_turn = __esm({
   "../server/src/domains/delegations/child-live-turn.ts"() {
@@ -205328,15 +205681,6 @@ async function loadWorkorderSnapshot(kernel, workorderId) {
   if (!store) return null;
   return store.transaction((tx) => tx.loadWorkorder(workorderId));
 }
-function workorderCreationState(snap, briefArtifactId) {
-  const briefWorkIds = new Set(
-    snap.works.filter((w2) => w2.nodeId === briefArtifactId).map((w2) => w2.id)
-  );
-  return {
-    hasNodes: snap.nodes.length > 0,
-    briefHasBody: snap.artifacts.some((a) => briefWorkIds.has(a.workId))
-  };
-}
 function wantsChatParts(req) {
   const accept = req.headers.accept;
   return typeof accept === "string" && accept.includes("application/x-ndjson");
@@ -205985,18 +206329,12 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}`] : []
             }
           };
         }
-        const applied = await kernel.applyIntervention(planned.plan, preview2.baseSeqs, actor);
+        const applied = await kernel.applyIntervention(planned.plan, preview2.baseSeqs, actor, { deferActivation: true });
         const briefArtifactId = planned.rootArtifactId;
-        if (brief && brief.trim()) {
-          const briefRef = await blobs.put(enc(brief));
-          await kernel.proposeRevision({ artifactId: briefArtifactId, actor, contentRef: briefRef, reason: "\u5EFA\u5355\uFF1A\u843D\u5B9A\u53D1\u8D77\u4EBA\u6572\u5B9A\u7684 brief \u9996\u7248" });
-          await kernel.advanceQueue(briefArtifactId, actor);
-          await kernel.conclude({ artifactId: briefArtifactId, actor, note: "\u5EFA\u5355\u65F6\u7531\u53D1\u8D77\u4EBA\u62CD\u677F\u5B9A\u7A3F" });
-        }
-        if (args["dispatch"] === false) {
-          await ctx.artifactState?.setWorkspaceDispatchHold(workspace, true);
-          await kernel.pauseWorkorder?.(workspace, actor, WORKORDER_HOLD_AT_CREATE_REASON);
-        }
+        await seedWorkorderBrief(kernel, blobs, workspace, briefArtifactId, actor, brief ?? "");
+        const dispatch = args["dispatch"] !== false;
+        if (!dispatch) await ctx.artifactState?.setWorkspaceDispatchHold?.(workspace, true);
+        await kernel.completeWorkorderCreation(workspace, actor, dispatch, WORKORDER_HOLD_AT_CREATE_REASON);
         return {
           message: planned.issues.length > 0 ? `planned ${workspace}: created ${planned.spawned.length} nodes\uFF0C${planned.issues.length} \u4E2A staffing \u63D0\u793A\u5DF2\u5199\u5165\u5DE5\u5355` : `planned ${workspace}: created ${planned.spawned.length} nodes`,
           data: {
@@ -207246,10 +207584,10 @@ async function startOasisServer(opts) {
               ...fp(p2)
             }))
           ] : [];
-          const { randomUUID: randomUUID47 } = await import("node:crypto");
+          const { randomUUID: randomUUID46 } = await import("node:crypto");
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID47(),
+              id: randomUUID46(),
               chatSessionId: input.chatSessionId,
               text: input.text,
               createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -207282,11 +207620,11 @@ async function startOasisServer(opts) {
               ...f2?.mtime ? { srcMtime: f2.mtime } : {}
             };
           });
-          const { randomUUID: randomUUID47 } = await import("node:crypto");
+          const { randomUUID: randomUUID46 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID47(),
+              id: randomUUID46(),
               chatSessionId: input.chatSessionId,
               text: "",
               createdAt: nowIso,
@@ -208214,14 +208552,13 @@ async function startOasisServer(opts) {
                 }
               }
               const existingSnap = targetWs ? await loadWorkorderSnapshot(engine.kernel, targetWs) : null;
-              const resumeState = existingSnap ? workorderCreationState(existingSnap, body2.briefArtifactId) : { hasNodes: false, briefHasBody: false };
-              if (resumeState.hasNodes && resumeState.briefHasBody) {
+              if (targetWs && (await engine.kernel.isWorkorderCreationComplete(targetWs) || legacyCreationComplete(existingSnap, body2.briefArtifactId))) {
                 res.writeHead(409, { "content-type": "application/json" }).end(
                   JSON.stringify({ error: "WORKORDER_ALREADY_CREATED", message: "\u8BE5\u5DE5\u5355\u5DF2\u521B\u5EFA\uFF0C\u4E0D\u80FD\u91CD\u590D\u521B\u5EFA\uFF08\u53EF\u76F4\u63A5\u6253\u5F00\u5DF2\u521B\u5EFA\u7684\u5DE5\u5355\uFF09", workspace: targetWs })
                 );
                 return;
               }
-              const resuming = resumeState.hasNodes;
+              const resuming = (existingSnap?.nodes.length ?? 0) > 0;
               let sessionProjectId;
               let sessionBindingState;
               if (body2.chatSessionId && opts.chatSession) {
@@ -208285,10 +208622,7 @@ async function startOasisServer(opts) {
               if (targetWs && sessionProjectId) {
                 await sessionBindingState.upsertWorkspaceBinding({ workOrderId: targetWs, projectId: sessionProjectId });
               }
-              const result = resuming ? { interventionId: "", applied: 0, resumed: true } : await engine.kernel.applyIntervention(body2.plan, body2.baseSeqs, actor);
-              if (resuming) {
-                await engine.kernel.activateWorkorder?.(targetWs, actor);
-              }
+              const result = resuming ? { interventionId: "", applied: 0, resumed: true } : await engine.kernel.applyIntervention(body2.plan, body2.baseSeqs, actor, { deferActivation: true });
               const briefSpawn = body2.plan.ops.find(
                 (op) => op.action === "spawn" && op.id === body2.briefArtifactId
               );
@@ -208299,26 +208633,15 @@ async function startOasisServer(opts) {
                 throw new Error(`\u5EFA\u5355\u6536\u5C3E\u62FF\u4E0D\u5230 workspace\uFF08brief=${body2.briefArtifactId}\uFF09\u2014\u2014\u62D2\u7EDD\u62A5\u6210\u529F\uFF0C\u8BF7\u91CD\u8BD5`);
               }
               const warnings = [];
-              if (briefText) {
-                const briefRef = await engine.blobs.put(new TextEncoder().encode(briefText));
-                await engine.kernel.proposeRevision({ artifactId: body2.briefArtifactId, actor, contentRef: briefRef, reason: "\u5EFA\u5355\uFF1A\u843D\u5B9A\u53D1\u8D77\u4EBA\u6572\u5B9A\u7684 brief \u9996\u7248" });
-                await engine.kernel.advanceQueue(body2.briefArtifactId, actor);
-                await engine.kernel.conclude({ artifactId: body2.briefArtifactId, actor, note: "\u5EFA\u5355\u65F6\u7531\u53D1\u8D77\u4EBA\u62CD\u677F\u5B9A\u7A3F" });
-              } else {
-                warnings.push("\u5DE5\u5355\u603B\u7EB2\u6CA1\u6709\u6B63\u6587\uFF0C\u672A\u843D\u9996\u7248");
-              }
+              await seedWorkorderBrief(engine.kernel, engine.blobs, workspace, body2.briefArtifactId, actor, briefText);
+              if (!briefText) warnings.push("\u5DE5\u5355\u603B\u7EB2\u6CA1\u6709\u6B63\u6587\uFF0C\u672A\u843D\u9996\u7248");
               if (body2.dispatch === false) {
-                await opts.artifactState?.setWorkspaceDispatchHold(workspace, true);
-                await engine.kernel.pauseWorkorder?.(workspace, actor, WORKORDER_HOLD_AT_CREATE_REASON);
+                await (await artifactStateNow())?.setWorkspaceDispatchHold?.(workspace, true);
               }
               await wodraftPlannerIssues.remove(workspace);
               if (opts.chatSession && body2.chatSessionId && workspace !== "ws:default") {
                 const applyLinkStore = await chatStoreNow();
-                await applyLinkStore.linkWorkOrder(body2.chatSessionId, workspace, "origin").catch((err) => {
-                  const detail = err instanceof Error ? err.message : String(err);
-                  console.error(`[chat-session] Failed to link work order ${workspace} to session ${body2.chatSessionId}:`, err);
-                  warnings.push(`\u672A\u80FD\u628A\u5DE5\u5355\u5173\u8054\u56DE\u672C\u6B21\u5BF9\u8BDD\uFF1A${detail}`);
-                });
+                await applyLinkStore.linkWorkOrder(body2.chatSessionId, workspace, "origin");
                 const handoffArtifacts = await artifactStateNow();
                 if (handoffArtifacts?.addWorkOrderFile) {
                   const handoff = await linkChatAttachmentsToWorkOrder({
@@ -208348,6 +208671,7 @@ async function startOasisServer(opts) {
                 const missing = plannedSpawnIds.filter((id) => !present.has(id));
                 if (missing.length > 0) warnings.push(`\u534F\u4F5C\u56FE\u7F3A ${missing.length} \u4E2A\u8282\u70B9\u672A\u5EFA\u51FA\uFF1A${missing.join("\u3001")}`);
               }
+              await engine.kernel.completeWorkorderCreation(workspace, actor, body2.dispatch !== false, WORKORDER_HOLD_AT_CREATE_REASON);
               res.writeHead(200, { "content-type": "application/json" }).end(
                 JSON.stringify({
                   ...result,
@@ -208629,7 +208953,7 @@ async function startOasisServer(opts) {
               const openRoom = async () => {
                 let chatSessionId2;
                 if (chatStore) {
-                  const { randomUUID: randomUUID47 } = await import("node:crypto");
+                  const { randomUUID: randomUUID46 } = await import("node:crypto");
                   const known = discussSessions.get(itemKey);
                   const knownSession = known ? await chatStore.getSession(known) : null;
                   if (knownSession && knownSession.workspace === ctx.workspace && knownSession.humanActorId === ctx.ownerId && (!body2.escalationId || knownSession.escalationId === body2.escalationId)) chatSessionId2 = known;
@@ -208638,7 +208962,7 @@ async function startOasisServer(opts) {
                     chatSessionId2 = existing[0]?.id;
                   }
                   if (!chatSessionId2) {
-                    chatSessionId2 = randomUUID47();
+                    chatSessionId2 = randomUUID46();
                     const now = (/* @__PURE__ */ new Date()).toISOString();
                     const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                     const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -209537,7 +209861,7 @@ ${composed}`;
                         });
                         await rejectedLedger.drain();
                         if (rejectedLedger.failures === 0) {
-                          const { randomUUID: randomUUID48 } = await import("node:crypto");
+                          const { randomUUID: randomUUID47 } = await import("node:crypto");
                           const now = (/* @__PURE__ */ new Date()).toISOString();
                           const rejectedAttachments = effectiveAttachments.map((a) => ({
                             name: a.name,
@@ -209545,7 +209869,7 @@ ${composed}`;
                             ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                           }));
                           await chatStore.appendMessage({
-                            id: randomUUID48(),
+                            id: randomUUID47(),
                             sessionId: persistTarget.id,
                             role: "user",
                             content: persistedUserMessage,
@@ -209623,14 +209947,14 @@ ${composed}`;
                       runtimeSessionId: session.nativeSessionId ?? session.id
                     }).catch(() => void 0);
                   }
-                  const { randomUUID: randomUUID48 } = await import("node:crypto");
+                  const { randomUUID: randomUUID47 } = await import("node:crypto");
                   const persistAttachments = effectiveAttachments.map((a) => ({
                     name: a.name,
                     ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                     ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                   }));
                   await chatStore.appendMessage({
-                    id: randomUUID48(),
+                    id: randomUUID47(),
                     sessionId: persistTarget.id,
                     role: "user",
                     content: persistedUserMessage,
@@ -209656,27 +209980,10 @@ ${composed}`;
                 const itemLedger = new ChatItemLedger({
                   ...itemStore ? { items: itemStore } : {},
                   versionSeed,
-                  /* 用户那条消息一落库就推上 v3 流（ADR-0510 D2 的收口）。
-                     不推的话：乐观条没有服务端号、被钉在列表末尾，而 agent 的正文带着更大的号从
-                     直播流到达、进「有号」段 ⇒ **回复显示在用户消息上面**，直到下一次快照才跳回去
-                     （2026-09-09 用户现场）。这里把窗口从「等下一次快照」压到「一次 INSERT 往返」。
-                     只推 user：assistant 的每一条本来就走 `emitV3`。 */
-                  onPersisted: (info) => {
-                    if (info.role !== "user") return;
-                    const rowPayload = info.payload && typeof info.payload === "object" && !Array.isArray(info.payload) ? info.payload : void 0;
-                    const rowCsid = typeof rowPayload?.["clientSubmitId"] === "string" ? rowPayload["clientSubmitId"] : void 0;
-                    const rowCsids = Array.isArray(rowPayload?.["clientSubmitIds"]) ? rowPayload["clientSubmitIds"].filter((v2) => typeof v2 === "string") : void 0;
-                    const rowAttachments = Array.isArray(rowPayload?.["attachments"]) ? rowPayload["attachments"] : void 0;
-                    opts.liveChat?.publishUserItem(persistTarget?.id ?? session.id, {
-                      itemId: info.itemId,
-                      ord: info.ord,
-                      version: info.version,
-                      text: info.text,
-                      ...rowCsid ? { clientSubmitId: rowCsid } : {},
-                      ...rowCsids?.length ? { clientSubmitIds: rowCsids } : {},
-                      ...rowAttachments?.length ? { attachments: rowAttachments } : {}
-                    });
-                  },
+                  /* 用户那条消息（首条提交与中途插话）一落库就推上 v3 流（ADR-0510 D2 的收口）——
+                     **不在这里接**：`liveChat.start` 带着这本账本开轮时统一订阅
+                     （`LiveChatRegistry.start` → `ChatItemLedger.onUserItemPersisted`），开轮前已落库的会补发。
+                     四条开轮入口共用那一处；这里再接一次就是同一行两帧、同一版本号，客户端判 stale 并 resync。 */
                   sessionId: persistTarget?.id ?? session.id,
                   // 优先账本 id（`chat_session_turns.id`，跨进程唯一、重启不失忆）；账本没接入才兜底。
                   turnId: heldTurn?.id ?? fallbackTurnId(session.runId),
@@ -209778,52 +210085,27 @@ ${composed}`;
                   }, { items: itemLedger }) : null;
                   if (live && assistantMsgId) live.setAssistantMessageId(assistantMsgId);
                   if (live && chatStore && persistTarget) {
-                    const { randomUUID: newId } = await import("node:crypto");
                     const liveCtl = live;
                     const target = persistTarget;
                     const store = chatStore;
                     liveCtl.onUserInput((text6, insertedAttachments) => {
-                      const segText = itemLedger.projectContent();
                       const segParts = collectedParts();
-                      const closingId = assistantMsgId;
-                      const nextId = newId();
-                      assistantMsgId = nextId;
-                      itemLedger.beginSegment();
-                      liveCtl.setAssistantMessageId(nextId);
+                      const split = beginInsertedAssistantSegment({
+                        chatStore: store,
+                        chatSessionId: target.id,
+                        ledger: itemLedger,
+                        live: liveCtl,
+                        closingId: assistantMsgId,
+                        segParts,
+                        text: text6,
+                        attachments: insertedAttachments,
+                        ...session.runId ? { runId: session.runId } : {},
+                        turnId: heldTurn?.id
+                        // 插话切段仍属同一轮（同 turnId）
+                      });
+                      assistantMsgId = split.nextId;
                       segmentBaseSeq = liveCtl.bufferedParts().reduce((max, p2) => p2.seq > max ? p2.seq : max, 0);
-                      const at = (/* @__PURE__ */ new Date()).toISOString();
-                      checkpointChain = checkpointChain.then(async () => {
-                        if (closingId) {
-                          await store.updateMessage(closingId, {
-                            content: segText,
-                            status: "done",
-                            completedAt: at,
-                            ...segParts.length ? { parts: segParts } : {}
-                          }).catch(() => void 0);
-                        }
-                        await store.appendMessage({
-                          id: newId(),
-                          sessionId: target.id,
-                          role: "user",
-                          content: text6,
-                          createdAt: at,
-                          // ADR-0166 D9.1：插入带的附件也落在**这条 user 行**上——否则重载后这条气泡
-                          // 只剩一行字，而同样带图直接发送的那条有缩略图。同 `/api/chat` 那侧只存引用。
-                          ...insertedAttachments?.length ? { attachments: insertedAttachments } : {},
-                          ...heldTurn ? { turnId: heldTurn.id } : {}
-                          // 插话切段仍属同一轮（同 turnId）
-                        }).catch(() => void 0);
-                        await store.appendMessage({
-                          id: nextId,
-                          sessionId: target.id,
-                          role: "assistant",
-                          content: "",
-                          createdAt: at,
-                          status: "running",
-                          ...session.runId ? { runId: session.runId } : {},
-                          ...heldTurn ? { turnId: heldTurn.id } : {}
-                        }).then(() => itemLedger.bindMessage(nextId)).catch(() => void 0);
-                      }).catch(() => void 0);
+                      checkpointChain = checkpointChain.then(split.persist).catch(() => void 0);
                     });
                   }
                   let localSeq = 0;
@@ -210106,8 +210388,8 @@ ${composed}`;
                 }
               }
               const { spawn: spawn10 } = await import("node:child_process");
-              const { randomUUID: randomUUID47 } = await import("node:crypto");
-              const sessionId = body2.sessionId ?? randomUUID47();
+              const { randomUUID: randomUUID46 } = await import("node:crypto");
+              const sessionId = body2.sessionId ?? randomUUID46();
               const args = [
                 "-p",
                 body2.message,
@@ -210403,8 +210685,8 @@ ${composed}`;
                 res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
                 return;
               }
-              const { randomUUID: randomUUID47 } = await import("node:crypto");
-              const state = randomUUID47();
+              const { randomUUID: randomUUID46 } = await import("node:crypto");
+              const state = randomUUID46();
               const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
               const manifest = buildAppManifest({
                 employeeSlug: nameSlug,
@@ -211212,6 +211494,7 @@ var init_server3 = __esm({
     init_router();
     init_infra_error();
     init_keyed_mutex();
+    init_initialize_workorder();
     init_live_chat();
     init_chat_turn_wait();
     init_append_now();
@@ -220992,7 +221275,11 @@ function wireRecoveredChatTurn(deps) {
       void handle.kill();
     },
     // ADR-0093 chat 道：重挂的轮同样能被插入——否则「serve 重启过」会变成一条人看不见的能力差异。
-    ...typeof handle.appendInput === "function" ? { appendInput: (input) => handle.appendInput({ text: input.text }) } : {},
+    // **整份透传**（2026-09-17）：此前只转 `text`，插话链路要的消费回执（`requireConsumptionReceipt`）、
+    // 幂等键（`clientMessageKey`）与附件（`files` / `binaryFiles`）全被剥掉——runtime 照样读到了正文，
+    // 却回不了带键的 `input_consumed`，服务端等到本轮收尾判 `unconfirmed`：agent 处理了那句话，
+    // 对话流里从头到尾没有它，附件也没送到。
+    ...typeof handle.appendInput === "function" ? { appendInput: (input) => handle.appendInput(input) } : {},
     get canAppendInput() {
       return handle.canAppendInput !== false && typeof handle.appendInput === "function";
     }
@@ -221084,40 +221371,25 @@ function wireRecoveredChatTurn(deps) {
   let checkpointChain = Promise.resolve();
   {
     const store = deps.chatStore;
-    live.onUserInput((text6) => {
-      const segText = itemLedger.projectContent();
+    live.onUserInput((text6, attachments) => {
       const segParts = collectedParts();
-      const closingId = currentMsgId;
-      const nextId = (0, import_node_crypto49.randomUUID)();
-      currentMsgId = nextId;
-      itemLedger.beginSegment();
-      live.setAssistantMessageId(nextId);
+      const split = beginInsertedAssistantSegment({
+        chatStore: store,
+        chatSessionId: plan.chatSessionId,
+        ledger: itemLedger,
+        live,
+        closingId: currentMsgId,
+        segParts,
+        text: text6,
+        attachments,
+        runId: plan.runId,
+        // 账本那一轮的 `chat_session_turns.id`（与重启前 `/api/chat` 写在开轮行上的同一个）；不取 `itemsTurnId`——
+        // 那是 items 上接着写的键，没接轮次账本时是兜底串。
+        turnId: plan.turnId
+      });
+      currentMsgId = split.nextId;
       segmentBaseSeq = live.bufferedParts().reduce((max, p2) => p2.seq > max ? p2.seq : max, 0);
-      const at = (/* @__PURE__ */ new Date()).toISOString();
-      checkpointChain = checkpointChain.then(async () => {
-        await store.updateMessage(closingId, {
-          content: segText,
-          status: "done",
-          completedAt: at,
-          ...segParts.length ? { parts: segParts } : {}
-        }).catch(() => void 0);
-        await store.appendMessage({
-          id: (0, import_node_crypto49.randomUUID)(),
-          sessionId: plan.chatSessionId,
-          role: "user",
-          content: text6,
-          createdAt: at
-        }).catch(() => void 0);
-        await store.appendMessage({
-          id: nextId,
-          sessionId: plan.chatSessionId,
-          role: "assistant",
-          content: "",
-          createdAt: at,
-          status: "running",
-          runId: plan.runId
-        }).then(() => itemLedger.bindMessage(nextId)).catch(() => void 0);
-      }).catch(() => void 0);
+      checkpointChain = checkpointChain.then(split.persist).catch(() => void 0);
     });
   }
   const ckptTimer = setInterval(() => {
@@ -221589,12 +221861,11 @@ async function recoverChatTurnsAcrossCompanies(deps) {
   }
   return { ...result, recovered };
 }
-var import_node_crypto49, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
+var asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
 var init_chat_recovery = __esm({
   "../server/src/chat-recovery.ts"() {
     "use strict";
     init_file_restore();
-    import_node_crypto49 = require("node:crypto");
     init_chat_parts();
     init_sink();
     init_resilient_appender();
@@ -221625,8 +221896,8 @@ var init_chat_recovery = __esm({
 
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto50.randomBytes)(16);
-  const dk = (0, import_node_crypto50.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto49.randomBytes)(16);
+  const dk = (0, import_node_crypto49.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -221643,8 +221914,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto50.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto50.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto49.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto49.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -221652,17 +221923,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto50.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto49.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto50.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto49.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto50.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto49.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -221674,21 +221945,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto50.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto49.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto50.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto49.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto50.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto49.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto50, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto49, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto50 = require("node:crypto");
+    import_node_crypto49 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -222851,18 +223122,18 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto51.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto50.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto51, REDACTED_MARKER, ActorsService, mask, changedKeys;
+var import_node_crypto50, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
     init_file_limits2();
     init_keyed_mutex();
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -223430,7 +223701,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path40, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto51.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto50.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path40, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -224211,15 +224482,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto51.randomBytes)(12);
-        const cipher = (0, import_node_crypto51.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
-        const enc4 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
-        return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc4.toString("base64")].join(".");
+        const iv = (0, import_node_crypto50.randomBytes)(12);
+        const cipher = (0, import_node_crypto50.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const enc3 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
+        return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc3.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto51.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto50.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -224831,7 +225102,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto52.createHash)("sha256");
+    const hasher = (0, import_node_crypto51.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -224856,11 +225127,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto52.createHash)("sha256");
+    const hasher = (0, import_node_crypto51.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto52.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto51.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -224881,11 +225152,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto52.createHash)("sha256");
+    const hasher = (0, import_node_crypto51.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto52.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto51.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -224905,7 +225176,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path40,
     content: content3,
-    blobHash: (0, import_node_crypto52.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto51.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -224929,7 +225200,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto52.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto51.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -224962,7 +225233,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path40,
     content: content3,
-    blobHash: (0, import_node_crypto52.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto51.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -224979,11 +225250,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto52;
+var import_node_crypto51;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto52 = require("node:crypto");
+    import_node_crypto51 = require("node:crypto");
   }
 });
 
@@ -226551,7 +226822,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto53.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto52.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -226591,11 +226862,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
-var import_node_crypto53;
+var import_node_crypto52;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -228093,6 +228364,7 @@ function buildWorkorderActivity(input) {
     const nodeCancelledAt = node2?.cancelledAt ?? null;
     const name = nodeName(nodeId);
     let fold2 = null;
+    let handoverFold = null;
     for (const [idx, w2] of works.entries()) {
       const next = works[idx + 1];
       const artifacts = artifactsByWork.get(w2.id) ?? [];
@@ -228102,6 +228374,7 @@ function buildWorkorderActivity(input) {
       const reassigned = !!next && next.assigneeActorId !== w2.assigneeActorId;
       const killedByPlan = !!(w2.deadAt || w2.cancelledAt) && !!next && (reassigned || (next.nodeVersion ?? 0) > (w2.nodeVersion ?? 0));
       const failedRound = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && (!!w2.deadAt || !!w2.cancelledAt || st === "failed" || st === "retry");
+      const handedOverRound = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && !failedRound && st === "success" && !!w2.endedAt && !!next;
       if (failedRound && fold2) {
         fold2.traceWorkIds.push(w2.id);
         cardOfWork.set(w2.id, fold2);
@@ -228112,6 +228385,16 @@ function buildWorkorderActivity(input) {
         continue;
       }
       fold2 = null;
+      if (handedOverRound && handoverFold && handoverFold.executorId === w2.assigneeActorId) {
+        handoverFold.traceWorkIds.push(w2.id);
+        cardOfWork.set(w2.id, handoverFold);
+        handoverFold.updatedAt = lastStampOf(w2);
+        handoverFold.artifacts = artifacts;
+        handoverFold.foldedRounds = (handoverFold.foldedRounds ?? 1) + 1;
+        handoverFold.status = ACTIVITY_COPY.foldedStageHandedOver(name, handoverFold.foldedRounds);
+        continue;
+      }
+      handoverFold = null;
       const card2 = {
         /* 卡 id = 这一轮的 workId（连败折叠时取第一轮，React key 与滚动锚点因此稳定）。 */
         id: `work:${w2.id}`,
@@ -228159,6 +228442,10 @@ function buildWorkorderActivity(input) {
         card2.stuckReason = stuckKind;
         card2.status = w2.deadAt || w2.cancelledAt ? ACTIVITY_COPY.killed(name) : st === "retry" ? ACTIVITY_COPY.awaitingRedispatch(nameOf(card2.executorId), name) : stuckKind === "timeout" ? ACTIVITY_COPY.timedOut(nameOf(card2.executorId)) : ACTIVITY_COPY.failed(nameOf(card2.executorId));
         fold2 = card2;
+      } else if (handedOverRound) {
+        card2.phase = "done";
+        card2.status = ACTIVITY_COPY.stageHandedOver(name);
+        handoverFold = card2;
       } else if (w2.endedAt) {
         card2.phase = "running";
         card2.status = ACTIVITY_COPY.awaitingConclude(name);
@@ -228822,8 +229109,20 @@ var init_activity2 = __esm({
       /**
        * 引擎判卷 success、`endedAt` 也写了，却始终没有 `work.conclude`：**交了稿没收口**。
        * 如实说这一档，不冒充「正在处理」——后者把一轮早就结束的执行画成还在跑。
+       * 只剩**节点最新一轮**会落到这里；同节点已有下一轮接手的，见 {@link stageHandedOver}。
        */
       awaitingConclude: (node2) => `\u300A${node2}\u300B\u5DF2\u4EA4\u4ED8\uFF0C\u7B49\u5F85\u6536\u53E3\u3002`,
+      /**
+       * **阶段交付已被接手**：这一轮交了稿、没收口，同节点已经派出下一轮接着做（分批 `propose --checkpoint
+       * --continue`，或派活说明要求先别收口）。这一段到此已经交付——等收口的是接手的那一轮，不是它。
+       * 此前落在 {@link awaitingConclude}、永远「进行中」：生产 2026-09-17 近 7 天 40 张进行中卡全是僵尸，
+       * 38 张是这一档，`ws:wo-da302dca` 一个 QA 节点分批测就留下 24 张（Bug 0053）。
+       *
+       * 不说「已完成」：节点并没有完成，说了会让人以为这一步做完、在等审核。
+       */
+      stageHandedOver: (node2) => `\u300A${node2}\u300B\u5DF2\u63D0\u4EA4\u9636\u6BB5\u6210\u679C\uFF0C\u7531\u4E0B\u4E00\u8F6E\u7EE7\u7EED\u3002`,
+      /** 同一节点上紧挨着的阶段交付轮折成一张（与连败折叠同一套机制），批数写进句子。 */
+      foldedStageHandedOver: (node2, n) => `\u300A${node2}\u300B\u5DF2\u5206 ${n} \u6279\u63D0\u4EA4\u9636\u6BB5\u6210\u679C\uFF0C\u7531\u4E0B\u4E00\u8F6E\u7EE7\u7EED\u3002`,
       /** `works.status=retry`：这一轮没跑成，等引擎重派。谁按的重试由 `plan.node_retry` 补进这句。 */
       awaitingRedispatch: (executor, node2) => `${executor} \u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u6210\u300A${node2}\u300B\uFF0C\u7B49\u5F85\u91CD\u6D3E\u3002`,
       doneAwaitingReview: (name) => `\u300A${name}\u300B\u5DF2\u5B8C\u6210\uFF0C\u7B49\u5F85\u5BA1\u6838\u3002`,
@@ -229795,7 +230094,7 @@ async function buildChatPreview(chatStore, sessionId, who) {
 async function buildChatInbox(chatStore, markers, me, resolveActor, excludeChildSessions) {
   const sessions = await chatStore.listSessions(me);
   const byScope = new Map(markers.map((m2) => [m2.scope, m2]));
-  const unread = sessions.filter((s2) => s2.lastTurnQuality !== void 0 && isUnread(s2.touchedAt, byScope.get(chatScope(s2.id)))).sort((a, b2) => a.touchedAt < b2.touchedAt ? 1 : a.touchedAt > b2.touchedAt ? -1 : 0);
+  const unread = sessions.filter((s2) => isChatSessionUnread(s2, byScope.get(chatScope(s2.id)))).sort((a, b2) => a.touchedAt < b2.touchedAt ? 1 : a.touchedAt > b2.touchedAt ? -1 : 0);
   const excluded = excludeChildSessions ? new Set(await excludeChildSessions(unread.map((s2) => s2.id)).catch(() => [])) : /* @__PURE__ */ new Set();
   const out = [];
   let previewsFetched = 0;
@@ -230065,11 +230364,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto54, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto53, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto53 = require("node:crypto");
     import_node_fs14 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -230102,7 +230401,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto54.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto53.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -230225,7 +230524,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto54.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto53.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -231176,13 +231475,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs15, import_node_path21, import_node_crypto55, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs15, import_node_path21, import_node_crypto54, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs15 = __toESM(require("node:fs"), 1);
     import_node_path21 = __toESM(require("node:path"), 1);
-    import_node_crypto55 = __toESM(require("node:crypto"), 1);
+    import_node_crypto54 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -231200,7 +231499,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto55.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto54.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -232516,11 +232815,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto56, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto55, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto56 = require("node:crypto");
+    import_node_crypto55 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -232612,7 +232911,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto56.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto55.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -232821,7 +233120,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto56.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto55.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -232952,7 +233251,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto56.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto55.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -233009,7 +233308,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto56.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto55.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -233247,11 +233546,11 @@ var init_service6 = __esm({
 });
 
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto57, MemberOffboardingService;
+var import_node_crypto56, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -233323,7 +233622,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto57.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto56.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -233833,18 +234132,18 @@ var init_routes6 = __esm({
 
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto58.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto57.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto58.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto57.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto58, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto57, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto57 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -233869,7 +234168,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto58.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto57.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -234307,7 +234606,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope2 = companyId?.trim();
-  const suffix = scope2 ? `c${(0, import_node_crypto59.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope2 ? `c${(0, import_node_crypto58.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -234636,12 +234935,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto59;
+var import_node_crypto58;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
   }
 });
 
@@ -235248,7 +235547,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto60.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto59.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -235433,14 +235732,14 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto60.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto59.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto60, import_node_fs16, import_node_url6, import_node_path22;
+var import_node_crypto59, import_node_fs16, import_node_url6, import_node_path22;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
     init_runtime_status();
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
     import_node_fs16 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path22 = require("node:path");
@@ -236631,7 +236930,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs25.statSync(absBundle).size;
-  const digest = (0, import_node_crypto61.createHash)("sha256").update(fs25.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto60.createHash)("sha256").update(fs25.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -236727,12 +237026,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process16, import_node_crypto61, fs25, os7, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process16, import_node_crypto60, fs25, os7, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process16 = require("node:child_process");
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     fs25 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path24 = __toESM(require("node:path"), 1);
@@ -236752,8 +237051,9 @@ var init_readonly_bundle = __esm({
 
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto62.randomUUID)().slice(0, 8)}`);
-  return async (input) => {
+  const locks = createKeyedMutex();
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto61.randomUUID)().slice(0, 8)}`);
+  const create = async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
     const blobs = company?.blobs ?? deps.blobs;
@@ -236761,10 +237061,9 @@ function makeSeededWorkorderCreator(deps) {
     const artifactState = company ? company.artifactState : deps.artifactState;
     const workorderDrafts = company ? company.workorderDrafts : deps.workorderDrafts;
     const workspace = input.idempotencyKey ? workspaceForKey(input.idempotencyKey) : genWorkspace();
-    if (input.idempotencyKey) {
-      const existing = existingWorkorder(kernel, workspace);
-      if (existing) return existing;
-    }
+    const snapshot = input.idempotencyKey ? await kernel.getStore().transaction((tx) => tx.loadWorkorder(workspace)) : null;
+    const existing = existingWorkorder(snapshot, workspace, input.actor);
+    if (existing && (await kernel.isWorkorderCreationComplete(workspace) || legacyCreationComplete(snapshot, existing.rootArtifactId))) return existing;
     if (artifactState && input.projectId) {
       await bindWorkorderProject({
         workOrderId: workspace,
@@ -236773,6 +237072,13 @@ function makeSeededWorkorderCreator(deps) {
         ...deps.onWarn ? { onWarn: deps.onWarn } : {}
       });
     }
+    const finishCreation = async (result) => {
+      await seedWorkorderBrief(kernel, blobs, workspace, result.rootArtifactId, input.actor, input.brief);
+      if (input.dispatch === false) await artifactState?.setWorkspaceDispatchHold(workspace, true);
+      await kernel.completeWorkorderCreation(workspace, input.actor, input.dispatch !== false, WORKORDER_HOLD_AT_CREATE_REASON);
+      return result;
+    };
+    if (existing) return await finishCreation(existing);
     const planned = await buildDynamicWorkorderPlan({
       // requestedType 在 agentPlan 路仅用于兜底；给第一个节点类型即可，图仍以 plan 为准。
       requestedType: input.plan.nodes[0]?.type ?? "prd",
@@ -236829,44 +237135,41 @@ function makeSeededWorkorderCreator(deps) {
         }
       };
     }
-    await kernel.applyIntervention(planned.plan, preview2.baseSeqs, input.humanActorId ?? input.actor);
-    const briefId = planned.rootArtifactId;
-    if (input.brief.trim()) {
-      const ref2 = await blobs.put(enc2(input.brief));
-      await kernel.proposeRevision({ artifactId: briefId, actor: input.actor, contentRef: ref2, reason: "\u5267\u672C\u5EFA\u5355\uFF1A\u843D\u5B9A brief \u9996\u7248" });
-      await kernel.advanceQueue(briefId, input.actor);
-      await kernel.conclude({ artifactId: briefId, actor: input.actor, note: "\u5267\u672C\u5EFA\u5355\u65F6\u5B9A\u7A3F" });
-    }
-    if (input.dispatch === false && artifactState) {
-      await artifactState.setWorkspaceDispatchHold(workspace, true);
-      await kernel.pauseWorkorder?.(workspace, input.actor, WORKORDER_HOLD_AT_CREATE_REASON);
+    await kernel.applyIntervention(planned.plan, preview2.baseSeqs, input.humanActorId ?? input.actor, { deferActivation: true });
+    return await finishCreation({ workspace, rootArtifactId: planned.rootArtifactId, spawned: planned.spawned });
+  };
+  return async (input) => {
+    const release = await locks.acquire(`${input.companyId ?? ""}\0${input.idempotencyKey ?? (0, import_node_crypto61.randomUUID)()}`);
+    try {
+      return await create(input);
+    } finally {
+      release();
     }
-    return { workspace, rootArtifactId: briefId, spawned: planned.spawned };
   };
 }
 function workspaceForKey(key2) {
-  return `ws:wo-${(0, import_node_crypto62.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto61.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
 }
-function existingWorkorder(kernel, workspace) {
-  const arts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === workspace);
-  if (arts.length === 0) return null;
-  const seed = arts.find((a) => a.inputs.length === 0) ?? arts[0];
+function existingWorkorder(snapshot, workspace, actor) {
+  if (!snapshot?.nodes.length) return null;
+  const seed = snapshot.nodes.find((node2) => node2.type === "brief") ?? snapshot.nodes.find((node2) => !snapshot.edges.some((edge) => edge.toNodeId === node2.id));
+  if (!seed) throw new Error(`\u65E2\u6709\u5DE5\u5355\u7F3A\u5C11\u603B\u7EB2\u8282\u70B9\uFF1A${workspace}`);
   return {
     workspace,
     rootArtifactId: seed.id,
-    // role 取自 planner 的规划结果、不是 artifact 上的字段——重试路径拿不到也无所谓（可省）。
-    spawned: arts.map((a) => ({ id: a.id, type: a.type, owner: a.owner }))
+    spawned: snapshot.nodes.map((node2) => ({ id: node2.id, type: node2.type, owner: node2.assigneeActorId ?? actor }))
   };
 }
-var import_node_crypto62, enc2;
+var import_node_crypto61;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
     init_uncategorized_project();
     init_src();
     init_planner();
-    enc2 = (s2) => new TextEncoder().encode(s2);
+    init_keyed_mutex();
+    init_initialize_workorder();
   }
 });
 
@@ -238290,12 +238593,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto63, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto62, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service8 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     init_src7();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -238526,7 +238829,7 @@ var init_service8 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto63.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto62.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -239394,6 +239697,25 @@ var init_escalation_opening = __esm({
   }
 });
 
+// ../server/src/domains/delegations/reply-anchors.ts
+function delegationReplyAnchors(record8) {
+  const bySequence = /* @__PURE__ */ new Map();
+  for (const summary of record8.roundSummaries) {
+    const sequence = summary.settledSeq;
+    if (typeof sequence !== "number" || !Number.isSafeInteger(sequence) || sequence < 1 || !Number.isSafeInteger(summary.round) || summary.round < 1) continue;
+    const ids2 = bySequence.get(sequence) ?? /* @__PURE__ */ new Set();
+    ids2.add(childRoundMessageIds(record8.childSessionId, summary.round).placeholderId);
+    bySequence.set(sequence, ids2);
+  }
+  return [...bySequence].flatMap(([settledSeq, ids2]) => ids2.size === 1 ? [{ settledSeq, childMessageId: [...ids2][0] }] : []);
+}
+var init_reply_anchors = __esm({
+  "../server/src/domains/delegations/reply-anchors.ts"() {
+    "use strict";
+    init_service3();
+  }
+});
+
 // ../server/src/domains/chat-sessions/project-bundle.ts
 async function buildChatProjectBundle(projectId2, projects, readBlob) {
   const project = await projects.getProject(projectId2);
@@ -239493,7 +239815,11 @@ function mapChatItemToSnapshotEntry(row) {
     ord: row.ord,
     messageId: row.messageId,
     updatedAt: row.updatedAt,
-    payload: row.payload
+    payload: {
+      ...row.payload && typeof row.payload === "object" && !Array.isArray(row.payload) ? row.payload : {},
+      createdAt: row.createdAt,
+      completedAt: row.completedAt
+    }
   };
 }
 function throwWorkdirError(code2) {
@@ -239630,7 +239956,7 @@ function createChatSessionsDomain(opts) {
       if (!text6.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto64.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto63.randomUUID)()}`;
       drafts.set(id, { text: text6, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -239662,6 +239988,13 @@ function createChatSessionsDomain(opts) {
         ...runningParentIds.has(s2.id) ? { hasRunningDelegation: true } : {}
       }));
     }
+    async function markSessionUnread(sessions, actor, companyId) {
+      if (!opts.resolveReadMarkers || !isHumanActorId(actor) || sessions.length === 0) return sessions;
+      const markers = await opts.resolveReadMarkers(companyId).then((store2) => store2.listMarkers(actor)).catch(() => null);
+      if (!markers) return sessions;
+      const byScope = new Map(markers.map((m2) => [m2.scope, m2]));
+      return sessions.map((s2) => ({ ...s2, unread: isChatSessionUnread(s2, byScope.get(chatScope(s2.id))) }));
+    }
     router.get("/api/chat-sessions", async (req) => {
       const store2 = await storeFor(req);
       if (req.query?.get("analysis") === "all") {
@@ -239676,7 +240009,8 @@ function createChatSessionsDomain(opts) {
       }
       const analyzedRunId = req.query?.get("analyzedRunId") ?? void 0;
       const sessions = analyzedRunId ? await store2.listSessionsByAnalyzedRun(analyzedRunId) : await store2.listSessions(req.auth.actor);
-      const items = await markSessionDelegations(sessions, req.auth.companyId ?? void 0);
+      const marked = await markSessionDelegations(sessions, req.auth.companyId ?? void 0);
+      const items = analyzedRunId ? marked : await markSessionUnread(marked, req.auth.actor, req.auth.companyId ?? void 0);
       return { status: 200, body: { items } };
     });
     router.post("/api/chat-sessions", async (req) => {
@@ -239690,7 +240024,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = await currentRuntimeId(body2.aiActorId) ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto64.randomUUID)(),
+        id: (0, import_node_crypto63.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -239796,7 +240130,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto64.randomUUID)(),
+        id: (0, import_node_crypto63.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -239837,7 +240171,7 @@ function createChatSessionsDomain(opts) {
       const known = key2 ? cur.find((x2) => x2.clientKey === key2) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store.enqueuePendingMessage({
-        id: (0, import_node_crypto64.randomUUID)(),
+        id: (0, import_node_crypto63.randomUUID)(),
         chatSessionId: sid,
         text: text6,
         ...attachments.length ? { attachments } : {},
@@ -240015,6 +240349,7 @@ function createChatSessionsDomain(opts) {
           /* 与协调者读口**同一个函数**——两侧 artifacts 有「逐字同源」的既有断言。它顺带给每份产物
              填上 `childMessageId`（子会话面板把产出卡挂到产出它的那一轮下面要用）。 */
           artifacts: delegationArtifactsView(record8),
+          replyAnchors: delegationReplyAnchors(record8),
           createdAt: record8.createdAt,
           ...record8.settledAt ? { settledAt: record8.settledAt } : {}
         });
@@ -240385,12 +240720,12 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto64, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
+var import_node_crypto63, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
 var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
     init_file_limits2();
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     init_src();
     init_chat_session();
     init_persistent_files();
@@ -240402,6 +240737,7 @@ var init_chat_sessions2 = __esm({
     init_workorders();
     init_chat_parts();
     init_service3();
+    init_reply_anchors();
     init_injected_context();
     init_deletion();
     init_chat_turn_gate();
@@ -241780,7 +242116,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto65.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto64.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -241836,11 +242172,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto65, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto64, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service9 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -242654,11 +242990,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto66.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto65.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto66.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto65.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -242688,11 +243024,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto66, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto65, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -243840,7 +244176,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto67.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto66.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -243857,11 +244193,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto67;
+var import_node_crypto66;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -243990,17 +244326,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto68.createHash)("sha256").update(canonical2).digest("hex");
+  return (0, import_node_crypto67.createHash)("sha256").update(canonical2).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto68.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto67.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto68, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto67, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -244211,7 +244547,7 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto69.randomUUID)();
+  const requestId = (0, import_node_crypto68.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve10) => {
@@ -244224,11 +244560,11 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve10, timer });
   });
 }
-var import_node_crypto69, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto68, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 500;
@@ -244578,7 +244914,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto69.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto68.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -244821,7 +245157,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto69.randomUUID)();
+        const requestId = (0, import_node_crypto68.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve10) => {
@@ -244929,14 +245265,14 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto70, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto69, sha, enc2, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto70.createHash)("sha256").update(s2, "utf8").digest("hex");
-    enc3 = (s2) => new TextEncoder().encode(s2);
+    sha = (s2) => (0, import_node_crypto69.createHash)("sha256").update(s2, "utf8").digest("hex");
+    enc2 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
       constructor(deps) {
@@ -245010,7 +245346,7 @@ var init_engine = __esm({
             continue;
           }
           try {
-            const contentRef = await this.deps.blobs.put(enc3(cls.content));
+            const contentRef = await this.deps.blobs.put(enc2(cls.content));
             const rev = await this.deps.kernel.proposeRevision({
               artifactId,
               actor,
@@ -245196,11 +245532,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto71, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto70, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_src7();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -245470,7 +245806,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto71.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto70.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -245859,8 +246195,8 @@ ${ctx.nodeFault}
         const taskWithRejections = rejectedSection ? `${task}
 
 ${rejectedSection}` : task;
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto71.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto71.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto70.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto70.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           taskWithRejections,
           ``,
@@ -245904,7 +246240,7 @@ ${rejectedSection}` : task;
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto71.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto70.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -246110,11 +246446,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto72, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto71, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -246294,7 +246630,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash3 = (0, import_node_crypto72.createHash)("sha256").update(bytes2).digest("hex");
+        const hash3 = (0, import_node_crypto71.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash3, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -253965,14 +254301,22 @@ var init_postgres_chat_items = __esm({
        * ——此刻起的 chunk 已经算下一段，但那条行还不存在。先写 `message_id = NULL`、行落库后回填，
        * 比让写入等一次 DB 往返更安全（等 = 丢帧或阻塞流）。
        *
-       * `message_id IS NULL` 天然把上一段隔开：上一段的 item 在切段之前就已经绑好了。
+       * `message_id IS NULL` 只能把**已经绑好的**上一段隔开，隔不开**后面**的段：新行落库慢于下一次插话时，
+       * 后一段的 item 同样是 NULL。所以切段回填给 `itemIds`，只更新那一段自己的 item（2026-09-17）。
        * 回填**不动** `version`/`turn_version`——归属关系不是 item 内容的一次修订。
        */
-      async bindMessage(sessionId, turnId, messageId) {
-        const r = await this.pool.query(
+      async bindMessage(sessionId, turnId, messageId, itemIds) {
+        if (itemIds && itemIds.length === 0) return 0;
+        const r = itemIds ? await this.pool.query(
           `UPDATE ${this.s}.chat_items
-          SET message_id = $3
-        WHERE session_id = $1 AND turn_id = $2 AND message_id IS NULL AND role = 'assistant'`,
+            SET message_id = $3
+          WHERE session_id = $1 AND turn_id = $2 AND message_id IS NULL AND role = 'assistant'
+            AND id = ANY($4::text[])`,
+          [sessionId, turnId, messageId, [...itemIds]]
+        ) : await this.pool.query(
+          `UPDATE ${this.s}.chat_items
+            SET message_id = $3
+          WHERE session_id = $1 AND turn_id = $2 AND message_id IS NULL AND role = 'assistant'`,
           [sessionId, turnId, messageId]
         );
         return r.rowCount ?? 0;
@@ -254982,11 +255326,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto73, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto72, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -255203,7 +255547,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto73.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto72.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -255469,11 +255813,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto74, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto73, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -255683,7 +256027,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto74.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto73.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -257130,14 +257474,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto75.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto74.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto75, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto74, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -257211,7 +257555,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto76.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto75.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -257393,11 +257737,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto76, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto75, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -257477,11 +257821,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto77, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto76, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto77 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -257867,7 +258211,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto77.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto76.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -260467,7 +260811,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto78.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto77.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -260855,11 +261199,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto78, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto77, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto78 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -261091,8 +261435,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key2) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto79.randomBytes)(12);
-  const cipher = (0, import_node_crypto79.createCipheriv)("aes-256-gcm", bytes(key2), iv);
+  const iv = (0, import_node_crypto78.randomBytes)(12);
+  const cipher = (0, import_node_crypto78.createCipheriv)("aes-256-gcm", bytes(key2), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -261102,7 +261446,7 @@ function openSnapshot(snapshot, key2) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto79.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto78.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -261110,11 +261454,11 @@ function openSnapshot(snapshot, key2) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto79, PREFIX3, bytes, aad2;
+var import_node_crypto78, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto79 = require("node:crypto");
+    import_node_crypto78 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key2) => {
       const value2 = Buffer.from(key2);
@@ -263368,14 +263712,14 @@ init_src();
 var os14 = __toESM(require("node:os"));
 var path39 = __toESM(require("node:path"));
 var import_node_child_process22 = require("node:child_process");
-var import_node_crypto90 = require("node:crypto");
+var import_node_crypto89 = require("node:crypto");
 
 // ../cli/src/cli.ts
 init_src();
 var fs39 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path34 = __toESM(require("node:path"), 1);
-var import_node_crypto88 = require("node:crypto");
+var import_node_crypto87 = require("node:crypto");
 
 // ../cli/src/serve.ts
 init_src();
@@ -263384,11 +263728,11 @@ var fs33 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path28 = __toESM(require("node:path"), 1);
 var import_node_child_process17 = require("node:child_process");
-var import_node_crypto84 = require("node:crypto");
+var import_node_crypto83 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
 // ../cli/src/artifact-discovery-source.ts
-var import_node_crypto80 = require("node:crypto");
+var import_node_crypto79 = require("node:crypto");
 init_src7();
 var ArtifactDiscoverySourceUnreadableError = class extends Error {
   constructor(message) {
@@ -263418,7 +263762,7 @@ async function resolveArtifactDiscoverySourceContent(blobs, input) {
     throw new ArtifactDiscoverySourceUnreadableError(`Artifact Revision ${input.revisionId} \u7684 contentKind \u4E0D\u53D7\u652F\u6301\uFF1A${String(input.contentKind)}`);
   }
   const rootBytes = await blobs.get(input.contentRef);
-  const sourceFingerprint = (0, import_node_crypto80.createHash)("sha256").update(rootBytes).digest("hex");
+  const sourceFingerprint = (0, import_node_crypto79.createHash)("sha256").update(rootBytes).digest("hex");
   if (input.contentKind === "inline-blob") {
     const sourceContent = decodeText3(rootBytes);
     if (sourceContent === null) {
@@ -263442,7 +263786,7 @@ ${entry.text}`).join("\n\n"),
 }
 
 // ../server/src/domains/discussions/service.ts
-var import_node_crypto81 = require("node:crypto");
+var import_node_crypto80 = require("node:crypto");
 init_zod();
 
 // ../contract/src/discussions.ts
@@ -263479,7 +263823,7 @@ var generationSchema = external_exports.discriminatedUnion("result", [
   }).strict()
 ]);
 var entryId = (projectId2, id) => JSON.stringify([projectId2, id]);
-var hash2 = (s2) => (0, import_node_crypto81.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
+var hash2 = (s2) => (0, import_node_crypto80.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
 var canonical = (s2) => s2.normalize("NFKC").trim().toLocaleLowerCase();
 function decisionFingerprint(d) {
   return hash2(JSON.stringify([d.statement, d.rationale, d.alternatives]));
@@ -263634,7 +263978,7 @@ var DiscussionService = class {
           let id = t.topic_id;
           if (id.startsWith("new:")) {
             const existing = [...topicMap.values()].find((x2) => canonical(x2.title) === canonical(t.title));
-            id = existing?.topicId ?? `topic_${(0, import_node_crypto81.randomUUID)()}`;
+            id = existing?.topicId ?? `topic_${(0, import_node_crypto80.randomUUID)()}`;
           } else if (!topicMap.has(id)) invalid("topics.topic_id", `\u8BAE\u9898 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u8BAE\u9898\u4F7F\u7528 new: \u524D\u7F00`);
           topicAliases.set(t.topic_id, id);
           const value2 = { projectId: input.projectId, topicId: id, title: t.title };
@@ -263655,7 +263999,7 @@ var DiscussionService = class {
           if (id.startsWith("new:")) {
             const candidateKey = JSON.stringify([topicId, canonical(d.record.statement)]);
             const existing = [...decisionMap.values()].find((x2) => x2.topicId === topicId && canonical(x2.record.statement) === canonical(d.record.statement));
-            id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto81.randomUUID)()}`;
+            id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto80.randomUUID)()}`;
             candidateIds.set(candidateKey, id);
           } else if (!decisionMap.has(id)) invalid("decision_id", `\u51B3\u7B56 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u51B3\u7B56\u4F7F\u7528 new: \u524D\u7F00`);
           decisionAliases.set(d.decision_id, id);
@@ -263788,7 +264132,7 @@ var DiscussionService = class {
     });
   }
   async operation(tx, actorId, kind, id, from, to) {
-    await tx.put("operation", (0, import_node_crypto81.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
+    await tx.put("operation", (0, import_node_crypto80.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
   }
 };
 function pickDiscussionContent(d) {
@@ -263800,6 +264144,16 @@ function pickDecisionContent(d) {
 
 // ../server/src/domains/discussions/context.ts
 init_project_bundle();
+var decisionLabels = {
+  proposed: "\u63D0\u8BAE\u4E2D",
+  accepted: "\u5DF2\u786E\u8BA4",
+  rejected: "\u5DF2\u5426\u51B3",
+  superseded: "\u5DF2\u88AB\u66FF\u4EE3",
+  withdrawn: "\u5DF2\u64A4\u9500"
+};
+function listField(label, items) {
+  return items.length > 1 ? [`- ${label}\uFF1A`, ...items.map((item) => `  - ${item}`)] : [`- ${label}\uFF1A${items[0] ?? "\u65E0"}`];
+}
 function renderDiscussionContext(input) {
   const lines = [
     "# \u5F53\u524D\u4F1A\u8BDD\u4E0A\u4E0B\u6587",
@@ -263820,44 +264174,37 @@ function renderDiscussionContext(input) {
   if (!input.discussions.length) lines.push("\u5F53\u524D\u6682\u65E0\u5386\u53F2\u8BA8\u8BBA\u8BB0\u5F55\u3002", "");
   for (const row of input.discussions) {
     const d = row.value.record;
+    const topicNames = d.topics.map((t) => input.topics.find((topic) => topic.value.projectId === d.project_id && topic.value.topicId === t.topic_id)?.value.title ?? "\u8BAE\u9898\u540D\u79F0\u7F3A\u5931");
     lines.push(
-      `### ${d.session_id}\uFF1A${d.title}`,
-      `- \u9879\u76EE\u5F52\u5C5E\uFF1A${d.project_id ?? "\u975E\u9879\u76EE\u8BA8\u8BBA"}`,
-      `- \u53C2\u4E0E\u7528\u6237\uFF1A${d.participant_user}`,
-      `- \u53C2\u4E0E\u667A\u80FD\u4F53\uFF1A${d.participant_agent}`,
-      `- \u6700\u540E\u8986\u76D6\u7684\u5BF9\u8BDD\u65F6\u95F4\uFF1A${row.value.discussedAt}`,
-      `- \u6D88\u606F\u622A\u6B62\u70B9\uFF1A${d.source_cutoff}`,
+      `### ${d.title}`,
+      "",
+      ...!input.projectId ? [`- \u9879\u76EE\u5F52\u5C5E\uFF1A${d.project_id ?? "\u975E\u9879\u76EE\u8BA8\u8BBA"}`] : [],
+      `- \u8BA8\u8BBA\u65E5\u671F\uFF1A${row.value.discussedAt.slice(0, 10)}`,
       `- \u6458\u8981\uFF1A${d.summary}`,
-      "- \u6D89\u53CA\u8BAE\u9898\uFF1A",
-      ...d.topics.map((t) => `  - ${t.topic_id}\uFF1A${t.summary}`),
-      "- \u672A\u51B3\u95EE\u9898\uFF1A",
-      ...d.open_questions.map((q2) => `  - ${q2}`),
-      "- \u4E0B\u4E00\u6B65\uFF1A",
-      ...d.next_steps.map((n) => `  - ${n}`),
+      `- \u6D89\u53CA\u8BAE\u9898\uFF1A${topicNames.join("\u3001") || "\u65E0"}`,
+      ...listField("\u672A\u51B3\u95EE\u9898", d.open_questions),
+      ...listField("\u4E0B\u4E00\u6B65", d.next_steps),
       ""
     );
   }
   if (input.projectId) {
-    lines.push("## \u9879\u76EE\u8BAE\u9898\u4E0E\u51B3\u7B56", "", "\u4EC5 accepted \u8868\u793A\u5DF2\u786E\u8BA4\uFF1Bproposed \u5C1A\u672A\u786E\u8BA4\uFF1Brejected / withdrawn / superseded \u4E3A\u5931\u6548\u6216\u5386\u53F2\u65B9\u6848\u3002", "");
+    lines.push("## \u9879\u76EE\u8BAE\u9898\u4E0E\u51B3\u7B56", "", "\u4EC5\u201C\u5DF2\u786E\u8BA4\u201D\u8868\u793A\u5DF2\u786E\u8BA4\u65B9\u6848\uFF1B\u201C\u63D0\u8BAE\u4E2D\u201D\u5C1A\u672A\u786E\u8BA4\uFF1B\u201C\u5DF2\u5426\u51B3\u201D\u201C\u5DF2\u64A4\u9500\u201D\u201C\u5DF2\u88AB\u66FF\u4EE3\u201D\u4E3A\u5931\u6548\u6216\u5386\u53F2\u65B9\u6848\u3002", "");
     if (!input.topics.length) lines.push("\u5F53\u524D\u6682\u65E0\u9879\u76EE\u8BAE\u9898\u4E0E\u51B3\u7B56\u3002", "");
     for (const t of input.topics) {
-      lines.push(`### ${t.value.topicId}\uFF1A${t.value.title}`, "");
+      lines.push(`### \u8BAE\u9898\uFF1A${t.value.title}`, "");
       const decisions = input.decisions.filter((d) => d.value.topicId === t.value.topicId);
       if (!decisions.length) lines.push("\u6682\u65E0\u51B3\u7B56\u3002", "");
-      for (const d of decisions) {
+      for (const [index2, d] of decisions.entries()) {
         const r = d.value.record;
         lines.push(
-          `#### ${d.value.decisionId}`,
-          `- \u72B6\u6001\uFF1A${r.state}`,
-          `- \u65B9\u6848\uFF1A${r.statement}`,
-          `- \u539F\u56E0\uFF1A${r.rationale}`,
+          `#### \u51B3\u7B56 ${index2 + 1}\uFF1A${r.statement}`,
+          "",
+          `- \u72B6\u6001\uFF1A${decisionLabels[r.state]}`,
+          `- \u539F\u56E0\uFF1A${r.rationale || "\u672A\u8BF4\u660E"}`,
           `- \u786E\u8BA4\u4EBA\uFF1A${r.confirmer ?? "\u672A\u786E\u8BA4"}`,
-          "- \u5907\u9009\u65B9\u6848\u53CA\u7406\u7531\uFF1A",
-          ...r.alternatives.map((a) => `  - ${a.statement}\uFF1A${a.reason}`),
-          "- \u6D88\u606F\u6765\u6E90\uFF1A",
-          ...r.source_refs.map((s2) => `  - ${s2.session_id} / ${s2.message_id}\uFF1A${JSON.stringify(s2.content)}`),
-          `- \u66FF\u4EE3\u5173\u7CFB\uFF1A${r.supersedes.join("\u3001") || "\u65E0"}`,
-          `- \u6700\u8FD1\u66F4\u65B0\u65F6\u95F4\uFF1A${r.updated_at}`,
+          ...listField("\u5907\u9009\u65B9\u6848", r.alternatives.map((a) => `${a.statement}\uFF0C${a.reason || "\u672A\u8BF4\u660E\u539F\u56E0"}`)),
+          ...r.supersedes.length ? listField("\u66FF\u4EE3\u51B3\u7B56", r.supersedes.map((id) => input.decisions.find((other) => other.value.decisionId === id)?.value.record.statement ?? "\u672A\u627E\u5230\u5BF9\u5E94\u51B3\u7B56")) : [],
+          `- \u66F4\u65B0\u65F6\u95F4\uFF1A${r.updated_at.slice(0, 10)}`,
           ""
         );
       }
@@ -263890,7 +264237,12 @@ var DiscussionContext = class {
       let discussions = (await tx.list("discussion")).filter((r) => r.value.userId === session.humanActorId);
       discussions.sort((a, b2) => Date.parse(a.value.discussedAt) - Date.parse(b2.value.discussedAt) || a.id.localeCompare(b2.id));
       discussions = projectId2 ? discussions.filter((r) => r.value.record.project_id === projectId2) : discussions.slice(-10);
-      const view = projectId2 ? await this.service.view(projectId2, tx) : { topics: [], decisions: [] };
+      const discussionProjects = new Set(discussions.map((d) => d.value.record.project_id));
+      const view = projectId2 ? await this.service.view(projectId2, tx) : {
+        // Resolve names for the selected personal history without loading project decisions.
+        topics: (await tx.list("topic")).filter((t) => discussionProjects.has(t.value.projectId)),
+        decisions: []
+      };
       const markdown = renderDiscussionContext({
         userName,
         projectId: projectId2,
@@ -263926,7 +264278,7 @@ var DiscussionContext = class {
 };
 
 // ../server/src/domains/discussions/worker.ts
-var import_node_crypto82 = require("node:crypto");
+var import_node_crypto81 = require("node:crypto");
 var DISCUSSION_IDLE_MS = 15 * 6e4;
 var DISCUSSION_MAX_CORRECTIONS = 3;
 var DISCUSSION_LEASE_MS = 2 * 6e4;
@@ -263952,7 +264304,7 @@ var DiscussionWorker = class {
     if (await this.isReplying(sessionId)) return false;
     const cutoff = eligibleCutoff(await this.service.chat.listMessages(sessionId), this.service.now());
     if (!cutoff) return false;
-    const owner = (0, import_node_crypto82.randomUUID)();
+    const owner = (0, import_node_crypto81.randomUUID)();
     const claimed = await this.service.store.transaction(async (tx) => {
       const old = (await tx.get("job", sessionId))?.value;
       if (old?.status === "running" && (old.leaseUntil ?? 0) > this.service.now()) return null;
@@ -264385,7 +264737,7 @@ function createDiscussionRuntime(options) {
 }
 
 // ../server/src/domains/discussions/store.ts
-var import_node_crypto83 = require("node:crypto");
+var import_node_crypto82 = require("node:crypto");
 var import_promises16 = require("node:fs/promises");
 var import_node_path27 = require("node:path");
 var key = (kind, id) => JSON.stringify([kind, id]);
@@ -264423,7 +264775,7 @@ var MemoryDiscussionStore = class _MemoryDiscussionStore {
       if (changed) {
         if (this.filename) {
           await (0, import_promises16.mkdir)((0, import_node_path27.dirname)(this.filename), { recursive: true });
-          const temp = `${this.filename}.${(0, import_node_crypto83.randomUUID)()}.tmp`;
+          const temp = `${this.filename}.${(0, import_node_crypto82.randomUUID)()}.tmp`;
           await (0, import_promises16.writeFile)(temp, JSON.stringify(next), "utf8");
           await (0, import_promises16.rename)(temp, this.filename);
         }
@@ -264568,6 +264920,15 @@ function transcriptTail(ref2) {
     return "";
   }
 }
+var SUMMARY_MAX_CHARS = 500;
+function clipLine(line) {
+  return line.length > SUMMARY_MAX_CHARS ? `${line.slice(0, SUMMARY_MAX_CHARS)}\u2026` : line;
+}
+function providerMessage(line) {
+  const m2 = /['"]message['"]\s*:\s*(?:'((?:[^'\\]|\\.)*)'|"((?:[^"\\]|\\.)*)")/.exec(line);
+  const text6 = (m2?.[1] ?? m2?.[2])?.trim();
+  return text6 ? text6 : void 0;
+}
 function buildChatExitError(info) {
   const genericLine = `runtime exited with code ${info.code ?? "null"}${info.reason ? ` (${info.reason})` : ""}`;
   let detail = "";
@@ -264577,8 +264938,9 @@ function buildChatExitError(info) {
   }
   const firstDetailLine = detail.split("\n").map((line) => line.trim()).find(Boolean) ?? "";
   const firstErrorLine = info.errorMessage?.split("\n").map((line) => line.trim()).find(Boolean) ?? "";
+  const readableError = firstErrorLine ? clipLine(providerMessage(firstErrorLine) ?? firstErrorLine) : "";
   const fixed = info.reason ? SUMMARY_BY_REASON[info.reason] : void 0;
-  const summary = fixed ? firstErrorLine && info.reason !== "cancelled" && info.reason !== "timeout" ? `${fixed}\uFF1A${firstErrorLine.slice(0, 200)}` : fixed : firstDetailLine ? `\u5BF9\u8BDD\u5931\u8D25\uFF1A${firstDetailLine.slice(0, 200)}` : `\u5BF9\u8BDD\u5931\u8D25\uFF08${genericLine}\uFF09`;
+  const summary = fixed ? readableError && info.reason !== "cancelled" && info.reason !== "timeout" ? `${fixed}\uFF1A${readableError}` : fixed : readableError ? `\u5BF9\u8BDD\u5931\u8D25\uFF1A${readableError}` : firstDetailLine ? `\u5BF9\u8BDD\u5931\u8D25\uFF1A${clipLine(firstDetailLine)}` : `\u5BF9\u8BDD\u5931\u8D25\uFF08${genericLine}\uFF09`;
   const chatExit = {
     ...info.reason ? { reason: info.reason } : {},
     summary,
@@ -265181,7 +265543,7 @@ init_src9();
 init_src();
 init_trajectory();
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto84.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto83.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -265381,7 +265743,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path28.join(repoRoot, "node_modules/.bin/tsx");
   const main = path28.join(repoRoot, "packages/cli/src/main.ts");
-  const key2 = (0, import_node_crypto84.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key2 = (0, import_node_crypto83.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path28.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key2}`);
   let dir;
@@ -265767,7 +266129,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto84.randomUUID)();
+    const requestId = (0, import_node_crypto83.randomUUID)();
     const task = new Promise((resolve10) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -266535,7 +266897,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto84.randomUUID)(),
+                id: (0, import_node_crypto83.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -266581,7 +266943,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto84.randomUUID)();
+        const sessionId = (0, import_node_crypto83.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -267727,7 +268089,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto84.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto83.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -268023,7 +268385,9 @@ async function startServe(opts) {
         // v3 快照端点（ws:wo-81de04dc S3 恢复路径唯一入口）：`chat_items` 权威读口 +
         // live 注册表算 `frameCursor`。与 server.ts 的双写解析同一层，与 attach 路径共享 registry。
         resolveChatItems: (companyId) => chatItemsFor(companyId),
-        liveChat
+        liveChat,
+        // ADR-0587：列表行派生 `unread`，与 collab 域收件箱读同一份按公司的水位（无 PG 时闭包自己回落单实例）。
+        resolveReadMarkers: readMarkerStoreFor
       })] : []
     ],
     workorderDrafts,
@@ -268610,10 +268974,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto84.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto83.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto84.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto84.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto83.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto83.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           return {
@@ -269793,7 +270157,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = `dispatch:${(0, import_node_crypto84.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto83.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -269878,7 +270242,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto84.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto83.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -270252,7 +270616,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto84.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto83.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -270716,10 +271080,10 @@ async function startServe(opts) {
     if (h < 24) return `${h} \u5C0F\u65F6\u524D`;
     return `${Math.floor(h / 24)} \u5929\u524D`;
   };
-  const humanFailCause = (reason, errorMessage) => {
-    const quote = errorMessage?.trim().slice(0, 300);
+  const humanFailCause = (reason, errorMessage2) => {
+    const quote = errorMessage2?.trim().slice(0, 300);
     if (reason === "rate-limit") {
-      const hint = extractResetHint(errorMessage);
+      const hint = extractResetHint(errorMessage2);
       return `**\u5B83\u7684\u989D\u5EA6\u88AB\u6253\u6EE1\u4E86**${hint ? `\uFF08runtime \u539F\u8BDD\uFF1A\`${hint}\`\uFF09` : ""}\u2014\u2014\u989D\u5EA6\u5230\u70B9\u4F1A\u81EA\u5DF1\u6062\u590D\uFF0C**\u4E0D\u9700\u8981\u4F60\u4FEE\u4EFB\u4F55\u4E1C\u897F**\uFF1B\u4E0D\u60F3\u7B49\u5C31\u7ED9\u8FD9\u4E2A\u5458\u5DE5\u6362\u4E2A runtime\u3002` + (quote ? `
 > ${quote}` : "");
     }
@@ -271869,11 +272233,11 @@ async function runSession(dispatchId, job, deps) {
   } catch (err) {
     deps.onFailure?.();
     log2("[node-cli]", `  spawn failed: ${err}`);
-    const errorMessage = String(err?.stack ?? err).slice(0, 8e3);
+    const errorMessage2 = String(err?.stack ?? err).slice(0, 8e3);
     deps.sink.keyFrame({ type: "session_exited", dispatchId, sessionId: "spawn-failed", info: {
       code: null,
       reason: "error",
-      errorMessage,
+      errorMessage: errorMessage2,
       ...err instanceof BundleRestoreError ? { fileRestoreError: { path: err.filePath, message: err.message } } : {}
     } });
   }
@@ -271882,7 +272246,6 @@ async function runSession(dispatchId, job, deps) {
 // ../cli/src/daemon/session-process.ts
 var RECONNECT_MIN_MS = 1e3;
 var RECONNECT_MAX_MS = 3e4;
-var EXIT_ACK_WAIT_MS = LINK_WINDOWS.exitAckWaitMs;
 var OUTBOX_MAX_FRAMES = 8e3;
 var isKeyFrame = (m2) => m2.type === "session_started" || m2.type === "session_exited";
 async function runSessionProcess(specFile, adapter) {
@@ -271928,6 +272291,7 @@ var SessionProcessState = class {
     this.hardTtlMs = o.hardTtlMs ?? SESSION_LIMITS.hardTtlMs;
     this.suicideAfterUnreachableMs = o.suicideAfterUnreachableMs ?? SESSION_LIMITS.suicideAfterUnreachableMs;
     this.watchdogIntervalMs = o.watchdogIntervalMs ?? 3e4;
+    this.exitAckWaitMs = o.exitAckWaitMs ?? LINK_WINDOWS.exitAckWaitMs;
   }
   ws = null;
   connected = false;
@@ -271941,6 +272305,8 @@ var SessionProcessState = class {
   hardTtlMs;
   suicideAfterUnreachableMs;
   watchdogIntervalMs;
+  /** 发完 session_exited 后等 ack 的时限；等不到也退——outbox 那份由服务端 L3 时钟扫描兜底。 */
+  exitAckWaitMs;
   watchdog = null;
   exitAckResolve = null;
   /** 整个会话进程「可以退了」的信号：会话正常退出、或被 evict / TTL / 失联自尽。 */
@@ -272163,7 +272529,7 @@ var SessionProcessState = class {
         this.exitAckResolve = null;
         resolve10();
       };
-      const timer = setTimeout(finish, EXIT_ACK_WAIT_MS);
+      const timer = setTimeout(finish, this.exitAckWaitMs);
       this.exitAckResolve = finish;
     });
   }
@@ -272186,7 +272552,7 @@ var SessionProcessState = class {
 init_wrapper();
 init_src();
 var import_node_os9 = require("node:os");
-var import_node_crypto85 = require("node:crypto");
+var import_node_crypto84 = require("node:crypto");
 init_src8();
 init_src2();
 
@@ -272971,7 +273337,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto85.randomUUID)();
+    const requestId = (0, import_node_crypto84.randomUUID)();
     return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -273377,7 +273743,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process20 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
-var import_node_crypto86 = require("node:crypto");
+var import_node_crypto85 = require("node:crypto");
 var import_node_os12 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -273443,7 +273809,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto86.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto85.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -275214,13 +275580,13 @@ function ownFlagsFromDecl(command) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto87 = require("node:crypto");
+var import_node_crypto86 = require("node:crypto");
 var import_node_child_process21 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical2 = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto87.createHash)("sha256").update(canonical2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto86.createHash)("sha256").update(canonical2).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -275457,7 +275823,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto88.randomUUID)();
+  const waiterId = (0, import_node_crypto87.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -275885,7 +276251,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path34.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto88.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto87.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -276916,7 +277282,7 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
         const slug6 = flags.get("slug");
-        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto88.randomUUID)());
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto87.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -278908,13 +279274,13 @@ var LEGACY_SYSTEMD_UNIT = "oasis-node.service";
 var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 
 // src/install.ts
-var import_node_crypto89 = require("node:crypto");
+var import_node_crypto88 = require("node:crypto");
 var fs43 = __toESM(require("node:fs"));
 var path38 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto89.createHash)("sha256").update(fs43.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto88.createHash)("sha256").update(fs43.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -279037,7 +279403,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.47" : "dev";
+var PKG_VERSION = true ? "2.2.49" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -279322,7 +279688,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto90.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto89.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }