oasis_test_v2 2.2.58 → 2.2.60

package/dist/index.js

@@ -835,9 +835,11 @@ var init_avatar = __esm({
 });
 
 // ../contract/src/runtime.ts
+var SESSION_STARTUP_FAILED_PREFIX;
 var init_runtime = __esm({
   "../contract/src/runtime.ts"() {
     "use strict";
+    SESSION_STARTUP_FAILED_PREFIX = "\u8FD9\u4E00\u8F6E\u6CA1\u80FD\u5728\u8282\u70B9\u4E0A\u542F\u52A8\uFF1A";
   }
 });
 
@@ -10569,6 +10571,8 @@ function estimateUsageCostBreakdown(model, usage) {
     cacheMicros: Math.round(
       (cacheCreationTokens * price.inputPerMillion + cacheReadTokens * cacheReadPrice) / 1e6 * 1e6
     ),
+    cacheReadMicros: Math.round(cacheReadTokens * cacheReadPrice / 1e6 * 1e6),
+    cacheCreationMicros: Math.round(cacheCreationTokens * price.inputPerMillion / 1e6 * 1e6),
     outputMicros: Math.round(outputTokens * price.outputPerMillion / 1e6 * 1e6)
   };
 }
@@ -11281,8 +11285,8 @@ var init_chat_item_ledger = __esm({
             note: text6,
             ...extra?.reason ? { reason: extra.reason } : {},
             ...extra?.detail ? { detail: extra.detail } : {},
-            /* 「这一轮是用户点停止的」这一格（ADR 0600）：**持久的那一份归因就在这里**——
-               刷新 / 换设备读的是这一行，前端据它决定写「用户停止了输出」还是「对话已中断」。 */
+            /* 「这一轮是谁停的」这一格（ADR 0600）：**持久的那一份归因就在这里**——
+               刷新 / 换设备读的是这一行，前端据它决定提示条上那句话；缺省 = 认不出 = 「对话已中断」。 */
             ...extra?.cancelledBy ? { cancelledBy: extra.cancelledBy } : {}
           }
         });
@@ -11876,15 +11880,39 @@ var init_chat_item_ledger = __esm({
 });
 
 // ../server/src/chat-cancel-attribution.ts
-function attributeChatExit(text6, extra, stoppedByUser) {
-  if (!stoppedByUser || extra.reason !== "cancelled") return { text: text6, extra };
-  return { text: USER_STOPPED_OUTPUT_NOTE, extra: { ...extra, cancelledBy: "user" } };
+function hasCancelNote(by) {
+  return by !== void 0 && by in CHAT_CANCEL_NOTE;
 }
-var USER_STOPPED_OUTPUT_NOTE;
+function chatCancelNote(by) {
+  return hasCancelNote(by) ? CHAT_CANCEL_NOTE[by] : CHAT_CANCELLED_NOTE;
+}
+function cancelCauseFromExitMessage(errorMessage2) {
+  const line2 = errorMessage2?.trim();
+  if (!line2) return void 0;
+  return NODE_SHUTDOWN_EXIT_MARKERS.some((m2) => line2.includes(m2)) ? "system-restart" : void 0;
+}
+function attributeChatExit(text6, extra, cause) {
+  if (extra.reason !== "cancelled") return { text: text6, extra };
+  const by = cause ?? extra.cancelledBy;
+  if (!by) return { text: text6, extra };
+  return { text: chatCancelNote(by), extra: { ...extra, cancelledBy: by } };
+}
+var CHAT_CANCEL_NOTE, CHAT_CANCELLED_NOTE, USER_STOPPED_OUTPUT_NOTE, NODE_SHUTDOWN_EXIT_MARKERS;
 var init_chat_cancel_attribution = __esm({
   "../server/src/chat-cancel-attribution.ts"() {
     "use strict";
-    USER_STOPPED_OUTPUT_NOTE = "\u7528\u6237\u505C\u6B62\u4E86\u8F93\u51FA";
+    CHAT_CANCEL_NOTE = {
+      user: "\u7528\u6237\u505C\u6B62\u4E86\u8F93\u51FA",
+      "system-restart": "\u5BF9\u8BDD\u5DF2\u4E2D\u65AD\uFF1A\u7CFB\u7EDF\u66F4\u65B0\u91CD\u542F",
+      "node-disconnected": "\u5BF9\u8BDD\u5DF2\u4E2D\u65AD\uFF1A\u6267\u884C\u8FD9\u4E00\u8F6E\u7684\u673A\u5668\u65AD\u5F00\u4E86\u8FDE\u63A5",
+      runtime: "\u5BF9\u8BDD\u5DF2\u4E2D\u65AD\uFF1A\u6267\u884C\u7A0B\u5E8F\u4E2D\u9014\u53D6\u6D88\u4E86\u8FD9\u4E00\u8F6E"
+    };
+    CHAT_CANCELLED_NOTE = "\u5BF9\u8BDD\u5DF2\u4E2D\u65AD";
+    USER_STOPPED_OUTPUT_NOTE = CHAT_CANCEL_NOTE.user;
+    NODE_SHUTDOWN_EXIT_MARKERS = [
+      "\u8282\u70B9 daemon \u505C\u673A\uFF08",
+      "\u8282\u70B9\u6B63\u5728\u505C\u673A\u6392\u7A7A"
+    ];
   }
 });
 
@@ -12322,9 +12350,10 @@ function runBackgroundAssistantChatTurn(deps) {
         chatExit?.summary ?? (err instanceof Error ? err.message : String(err)),
         {
           ...chatExit?.reason ? { reason: chatExit.reason } : {},
-          ...chatExit?.detail ? { detail: chatExit.detail } : {}
+          ...chatExit?.detail ? { detail: chatExit.detail } : {},
+          ...chatExit?.cancelledBy ? { cancelledBy: chatExit.cancelledBy } : {}
         },
-        liveTurn?.stoppedByUser() ?? false
+        liveTurn?.cancelCause()
       );
       const part = { type: "error", seq: ++localSeq, text: text6, ...extra };
       localParts.push(part);
@@ -12385,6 +12414,73 @@ var init_stable_chat_dispatch_ids = __esm({
   }
 });
 
+// ../server/src/chat-interrupt-notice.ts
+function chatInterruptCauseOf(exitReason) {
+  if (exitReason === "sweep-orphan" || exitReason === "sweep-absolute-cap") return exitReason;
+  return "run-failed";
+}
+async function recordChatTurnInterruption(deps) {
+  const { items, sessionId, turnId } = deps;
+  if (!items || !chatItemsDoubleWriteEnabled()) return [];
+  const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+  const log3 = deps.log ?? (() => {
+  });
+  try {
+    const rows = await items.listItemsByTurn(sessionId, turnId);
+    const noticeId = chatInterruptItemId(turnId);
+    const existing = rows.find((r) => r.id === noticeId);
+    let version2 = await items.sessionVersionCursor(sessionId).catch(() => 0);
+    const touched = [];
+    const at = now();
+    for (const row of rows) {
+      if (row.status !== "streaming") continue;
+      const updated = await items.applyOp(row.id, { op: "set_status", status: "interrupted" }, { at, version: ++version2, sessionId });
+      if (updated) touched.push(updated);
+    }
+    const payload2 = deps.cause === "sweep-orphan" ? { code: "error", note: CHAT_INTERRUPT_NOTICE[deps.cause], reason: "cancelled", closedBy: deps.reason } : { code: "error", note: CHAT_INTERRUPT_NOTICE[deps.cause], reason: deps.reason };
+    if (existing) {
+      const updated = await items.applyOp(noticeId, { op: "set_payload", payload: payload2 }, { at, version: ++version2, sessionId });
+      if (updated) touched.push(updated);
+      return touched;
+    }
+    const created = await items.createItem({
+      id: noticeId,
+      sessionId,
+      turnId,
+      ...deps.messageId ? { messageId: deps.messageId } : {},
+      ...deps.runId ? { runId: deps.runId } : {},
+      kind: "control",
+      role: "assistant",
+      status: "failed",
+      payload: payload2,
+      // 这句话不进 `chat_messages.content`（那边由各自的收口路自己写），对账按这一位分流。
+      metadata: { [CHAT_ITEM_META_LEGACY_CONTENT]: false },
+      createdAt: at,
+      version: ++version2
+    });
+    touched.push(created);
+    return touched;
+  } catch (err) {
+    log3(`[chat-interrupt] items \u7ED3\u5C40\u9879\u5199\u5165\u5931\u8D25\uFF1Asession=${sessionId} turn=${turnId} ${String(err)}`);
+    return [];
+  }
+}
+var chatInterruptItemId, CHAT_INTERRUPT_NOTICE;
+var init_chat_interrupt_notice = __esm({
+  "../server/src/chat-interrupt-notice.ts"() {
+    "use strict";
+    init_chat_item();
+    init_chat_cancel_attribution();
+    init_chat_item_ledger();
+    chatInterruptItemId = (turnId) => `chat-interrupt:${turnId}`;
+    CHAT_INTERRUPT_NOTICE = {
+      "sweep-orphan": CHAT_CANCELLED_NOTE,
+      "sweep-absolute-cap": "\u8FD9\u4E00\u8F6E\u8FD0\u884C\u65F6\u95F4\u8D85\u8FC7\u4E86\u4E0A\u9650\uFF0C\u5DF2\u88AB\u7CFB\u7EDF\u7EC8\u6B62\u3002\u4E0A\u9762\u662F\u7EC8\u6B62\u524D\u5DF2\u7ECF\u751F\u6210\u7684\u5185\u5BB9\uFF0C\u53EF\u4EE5\u628A\u4EFB\u52A1\u62C6\u5C0F\u4E00\u4E9B\u518D\u53D1\u4E00\u6B21\u3002",
+      "run-failed": "\u8FD9\u4E00\u8F6E\u6CA1\u6709\u6B63\u5E38\u7ED3\u675F\uFF08\u8FD0\u884C\u88AB\u4E2D\u65AD\uFF09\uFF0C\u6CA1\u80FD\u8DD1\u5B8C\u3002\u4E0A\u9762\u662F\u4E2D\u65AD\u524D\u5DF2\u7ECF\u751F\u6210\u7684\u5185\u5BB9\uFF0C\u4F60\u53EF\u4EE5\u518D\u53D1\u4E00\u6B21\u3002"
+    };
+  }
+});
+
 // ../server/src/chat-turn-gate.ts
 function localTurnSourceRunId(source, turnId) {
   return `${source}:${turnId}`;
@@ -12540,6 +12636,19 @@ function assistantRowRecovery(chatStore, opts = {}) {
         now: () => patch.completedAt,
         ...outputsPart ? { outputsPart } : {}
       });
+      if (patch.status !== "error") return;
+      const items = opts.itemsFor?.(turn.chatSessionId);
+      if (!items) return;
+      await recordChatTurnInterruption({
+        items,
+        sessionId: turn.chatSessionId,
+        turnId: await resolveChatItemsTurnId(items, row.id, fallbackTurnId(turn.assistantRunId ?? void 0)),
+        runId: turn.assistantRunId ?? null,
+        messageId: row.id,
+        cause: patch.cause ?? "run-failed",
+        reason: patch.cause ?? "run-failed",
+        now: () => patch.completedAt
+      });
     }
   };
 }
@@ -12570,7 +12679,9 @@ async function reconcileChatTurn(turn, deps) {
     if (deps.settleAssistantRow) {
       await deps.settleAssistantRow(turn, {
         status: patch.status === "succeeded" ? "done" : "error",
-        completedAt: patch.completedAt
+        completedAt: patch.completedAt,
+        // 由头只在判死那一档有意义；`orphaned` 是本拍自己判的，其余按 run 的 exit_reason 走。
+        ...patch.status === "succeeded" ? {} : { cause: patch.cause ?? "run-failed" }
       }).catch((e) => deps.log?.(`[chat-turn] \u8F6E\u6B21 ${turn.id} \u7684 assistant \u884C\u6536\u53E3\u5931\u8D25\uFF08\u8F6E\u6B21\u7167\u5E38\u6536\u53E3\uFF09: ${String(e)}`));
     }
     return writeTurn(patch);
@@ -12616,7 +12727,9 @@ async function reconcileChatTurn(turn, deps) {
   const ok3 = await settleTurnAndRow({
     status,
     completedAt: run.endedAt ?? new Date(deps.now).toISOString(),
-    ...status === "succeeded" ? {} : { lastError: `run ${runId} \u7EC8\u6001 ${run.status}\uFF08\u7531\u6062\u590D\u5668\u6536\u53E3\uFF09` }
+    ...status === "succeeded" ? {} : { lastError: `run ${runId} \u7EC8\u6001 ${run.status}\uFF08\u7531\u6062\u590D\u5668\u6536\u53E3\uFF09` },
+    // Bug #0185：孤儿扫描 / 绝对上限关掉的轮，对话里那句话要说得出是哪一种。
+    ...status === "succeeded" ? {} : { cause: chatInterruptCauseOf(run.exitReason) }
   });
   if (!ok3) return raced;
   return { settled: true, turnId: turn.id, status, reason: `run \u7EC8\u6001 ${run.status}` };
@@ -12678,6 +12791,8 @@ var init_chat_turn_gate = __esm({
     import_node_crypto16 = require("node:crypto");
     init_chat_assistant_turn();
     init_stable_chat_dispatch_ids();
+    init_chat_item_ledger();
+    init_chat_interrupt_notice();
     DISPATCH_INTENT_PREFIX = "dispatch-intent:";
     DISPATCH_CLAIMED_PREFIX = "dispatch-claimed:";
     CHAT_TURN_ORPHAN_GRACE_MS = 10 * 6e4;
@@ -163715,7 +163830,8 @@ var init_live_chat = __esm({
               turn.v3Subscribers.delete(sub);
             };
           },
-          stoppedByUser: () => turn.stoppedByUser === true,
+          cancelCause: () => turn.cancelCause,
+          stoppedByUser: () => turn.cancelCause === "user",
           finish: (status) => {
             stopUserItems?.();
             for (const receipt of turn.inputReceipts.values()) receipt.abandon();
@@ -164290,7 +164406,7 @@ var init_live_chat = __esm({
           return { stopped: false, reason: "turn-changed" };
         }
         if (turn.status === "running") {
-          turn.stoppedByUser = true;
+          turn.cancelCause = "user";
           try {
             turn.handle.kill();
           } catch {
@@ -164298,6 +164414,17 @@ var init_live_chat = __esm({
         }
         return { stopped: true };
       }
+      /**
+       * 平台自己要停这一轮时的留痕（ADR 0600 扩档）：liveness 静默保险丝、hub 驱逐会话都经这里。
+       * 与 {@link stop} 同一条纪律——**写在真去 kill 之前**，且只写还在跑的那一轮；已经收尾的不改。
+       * 先到先赢：`/stop` 已经写过 `user` 的轮不被后来的系统原因盖掉。
+       */
+      markCancelCause(chatSessionId, cause) {
+        const turn = this.turns.get(chatSessionId);
+        if (!turn || turn.status !== "running" || turn.cancelCause) return false;
+        turn.cancelCause = cause;
+        return true;
+      }
       /** 该会话当前是否有一轮 running（供上层判断是否要挡并发发送）。 */
       isRunning(chatSessionId) {
         return this.turns.get(chatSessionId)?.status === "running";
@@ -166577,7 +166704,7 @@ async function validateExplicitOwner(registry2, owner, artifactType) {
     if (!b2 || b2.status !== "active") {
       return {
         actor: null,
-        issue: { code: "missing_binding", severity: "warning", artifactType, message: `\u6307\u5B9A\u7684\u8D1F\u8D23\u4EBA ${a.name}\uFF08${owner}\uFF09\u7F3A\u5C11 active runtime \u7ED1\u5B9A\uFF0C${artifactType} \u8282\u70B9\u9000\u56DE\u6309\u5C97\u4F4D\u89E3\u6790\u3002` }
+        issue: { code: "missing_binding", severity: "warning", artifactType, message: `\u6307\u5B9A\u7684\u8D1F\u8D23\u4EBA ${a.name}\uFF08${owner}\uFF09\u7F3A\u5C11\u53EF\u7528\u7684\u8FD0\u884C\u65F6\u7ED1\u5B9A\uFF0C${artifactType} \u8282\u70B9\u9000\u56DE\u6309\u5C97\u4F4D\u89E3\u6790\u3002` }
       };
     }
   }
@@ -166626,7 +166753,7 @@ async function resolveActiveRole(registry2, role, artifactType, roles) {
         severity: "warning",
         role,
         ...artifactType ? { artifactType } : {},
-        message: `\u5C97\u4F4D ${role} \u6307\u5B9A\u7684\u9ED8\u8BA4\u627F\u63A5\u4EBA ${declared} \u5F53\u524D\u4E0D\u53EF\u63A5\u5355\uFF08\u79BB\u5C97 / \u4E0D\u5728\u8BE5\u5C97\u4F4D / \u7F3A runtime \u7ED1\u5B9A\uFF09\uFF0C\u5DF2\u9000\u56DE\u6309\u89C4\u5219\u6311\u4EBA\u3002`
+        message: `\u5C97\u4F4D ${role} \u6307\u5B9A\u7684\u9ED8\u8BA4\u627F\u63A5\u4EBA ${declared} \u5F53\u524D\u4E0D\u53EF\u63A5\u5355\uFF08\u79BB\u5C97 / \u4E0D\u5728\u8BE5\u5C97\u4F4D / \u7F3A\u8FD0\u884C\u65F6\u7ED1\u5B9A\uFF09\uFF0C\u5DF2\u9000\u56DE\u6309\u89C4\u5219\u6311\u4EBA\u3002`
       }
     };
   }
@@ -166659,7 +166786,7 @@ async function resolveActiveRole(registry2, role, artifactType, roles) {
         ...artifactType ? { artifactType } : {},
         // 措辞对两条路都成立：规则路会丢节点、agent/剧本路保留为待岗——**都是「暂不自动派发」**，
         // 而非「暂不创建」（后者在保留待岗后就是假话）。
-        message: `${preferred.name}\uFF08${preferred.id}\uFF09\u7F3A\u5C11 active runtime \u7ED1\u5B9A\uFF0C${nodeWord}\u6682\u4E0D\u81EA\u52A8\u6D3E\u53D1\uFF08\u5F85\u8865\u9F50\u540E\u81EA\u52A8\u63A5\u624B\uFF09\u3002`
+        message: `${preferred.name}\uFF08${preferred.id}\uFF09\u7F3A\u5C11\u53EF\u7528\u7684\u8FD0\u884C\u65F6\u7ED1\u5B9A\uFF0C${nodeWord}\u6682\u4E0D\u81EA\u52A8\u6D3E\u53D1\uFF08\u5F85\u8865\u9F50\u540E\u81EA\u52A8\u63A5\u624B\uFF09\u3002`
       }
     };
   }
@@ -168631,7 +168758,19 @@ async function planChatContinuation(input) {
     fallbackInjectedMessageIds: fallbackMessage ? fallbackHistory.map((t) => t.id) : []
   };
 }
-var HISTORY_FETCH_SLACK, UNFINISHED_OPEN, UNFINISHED_EMPTY;
+function placeholderRuntimeSessionFlag(isPlaceholder) {
+  return isPlaceholder ? { [RUNTIME_SESSION_ID_PLACEHOLDER_KEY]: true } : {};
+}
+function nativeRuntimeSessionMetadata(metadata, reported) {
+  if (!reported) return void 0;
+  const base = metadata && typeof metadata === "object" && !Array.isArray(metadata) ? metadata : void 0;
+  if (!base) return void 0;
+  if (base[RUNTIME_SESSION_ID_PLACEHOLDER_KEY] !== true) return void 0;
+  if (typeof base["runtimeSessionId"] !== "string" || base["runtimeSessionId"] === reported) return void 0;
+  const { [RUNTIME_SESSION_ID_PLACEHOLDER_KEY]: _wasPlaceholder, ...rest } = base;
+  return { ...rest, runtimeSessionId: reported };
+}
+var HISTORY_FETCH_SLACK, UNFINISHED_OPEN, UNFINISHED_EMPTY, RUNTIME_SESSION_ID_PLACEHOLDER_KEY;
 var init_continuation3 = __esm({
   "../server/src/domains/chat-sessions/continuation.ts"() {
     "use strict";
@@ -168641,6 +168780,7 @@ var init_continuation3 = __esm({
     HISTORY_FETCH_SLACK = 2;
     UNFINISHED_OPEN = "\u3010\u4E0A\u4E00\u8F6E\u672A\u5B8C\u6210\u2014\u2014\u4EE5\u4E0B\u662F\u4E2D\u65AD\u524D\u5DF2\u4EA7\u51FA\u7684\u90E8\u5206\uFF0C\u4E0D\u662F\u5B8C\u6574\u4EA4\u4ED8\u3011";
     UNFINISHED_EMPTY = "\u3010\u4E0A\u4E00\u8F6E\u672A\u5B8C\u6210\u2014\u2014\u88AB\u4E2D\u65AD\u65F6\u8FD8\u6CA1\u6709\u4EA7\u51FA\u4EFB\u4F55\u6587\u5B57\u3011";
+    RUNTIME_SESSION_ID_PLACEHOLDER_KEY = "runtimeSessionIdIsPlaceholder";
   }
 });
 
@@ -170890,7 +171030,7 @@ var init_service2 = __esm({
         try {
           await this.live.get(chatSessionId)?.kill?.();
         } catch (error2) {
-          const warning = `\u53D6\u6D88\u4FE1\u53F7\u5DF2\u8BB0\u5F55\uFF0C\u4F46 Runtime \u7EC8\u6B62\u8C03\u7528\u5931\u8D25\uFF1A${error2 instanceof Error ? error2.message : String(error2)}`.slice(0, 1e3);
+          const warning = `\u53D6\u6D88\u4FE1\u53F7\u5DF2\u8BB0\u5F55\uFF0C\u4F46\u8FD0\u884C\u65F6\u7EC8\u6B62\u8C03\u7528\u5931\u8D25\uFF1A${error2 instanceof Error ? error2.message : String(error2)}`.slice(0, 1e3);
           await this.runStore.patchIfStatus(chatSessionId, ["interrupted"], {
             warnings: [...transitioned.warnings ?? [], warning],
             updatedAt: this.now()
@@ -171709,7 +171849,7 @@ var init_service2 = __esm({
             const executionHealth = runtimeError ? "degraded" : "healthy";
             const contentUsability = complete ? "usable" : "partial";
             const warnings = [
-              ...runtimeMessage ? [`Runtime \u5F02\u5E38\u9000\u51FA\uFF0C\u4F46\u5DF2\u4FDD\u7559\u6709\u5F15\u7528\u7684\u56DE\u7B54\uFF1A${runtimeMessage}`] : [],
+              ...runtimeMessage ? [`\u8FD0\u884C\u65F6\u5F02\u5E38\u9000\u51FA\uFF0C\u4F46\u5DF2\u4FDD\u7559\u6709\u5F15\u7528\u7684\u56DE\u7B54\uFF1A${runtimeMessage}`] : [],
               ...!complete ? ["\u77E5\u8BC6\u7BA1\u7406\u5458\u56DE\u7B54\u7F3A\u5C11\u5B8C\u6574\u5B8C\u6210\u6807\u8BB0\uFF0C\u6309\u90E8\u5206\u5185\u5BB9\u8FD4\u56DE\u3002"] : []
             ];
             if (answerAttempt) {
@@ -199493,7 +199633,7 @@ var init_curator_skill = __esm({
           throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5FC5\u987B\u662F\u5DF2\u6FC0\u6D3B\u7684 AI \u5458\u5DE5\uFF1A${config2.curatorActorId}`);
         }
         const binding = (await this.actors.listBindings()).find((item) => item.actorId === config2.curatorActorId && item.status === "active");
-        if (!binding) throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5C1A\u672A\u7ED1\u5B9A\u53EF\u7528 Runtime\uFF1A${config2.curatorActorId}`);
+        if (!binding) throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5C1A\u672A\u7ED1\u5B9A\u53EF\u7528\u8FD0\u884C\u65F6\uFF1A${config2.curatorActorId}`);
         const currentConfig = await this.actors.latestConfig(config2.curatorActorId);
         const prompt2 = currentConfig?.prompt ?? "";
         const model = currentConfig?.model ?? "";
@@ -202956,9 +203096,10 @@ function registerDelegatedChildTurn(liveChat, childSessionId, session, deps = {}
       chatExit?.summary ?? (err instanceof Error ? err.message : String(err)),
       {
         ...chatExit?.reason ? { reason: chatExit.reason } : {},
-        ...chatExit?.detail ? { detail: chatExit.detail } : {}
+        ...chatExit?.detail ? { detail: chatExit.detail } : {},
+        ...chatExit?.cancelledBy ? { cancelledBy: chatExit.cancelledBy } : {}
       },
-      ctrl.stoppedByUser()
+      ctrl.cancelCause()
     );
     try {
       ctrl.emit({ type: "error", text: text6, ...extra });
@@ -212311,9 +212452,10 @@ ${composed}`;
                       chatExit?.summary ?? (err instanceof Error ? err.message : String(err)),
                       {
                         ...chatExit?.reason ? { reason: chatExit.reason } : {},
-                        ...chatExit?.detail ? { detail: chatExit.detail } : {}
+                        ...chatExit?.detail ? { detail: chatExit.detail } : {},
+                        ...chatExit?.cancelledBy ? { cancelledBy: chatExit.cancelledBy } : {}
                       },
-                      live?.stoppedByUser() ?? false
+                      live?.cancelCause()
                     );
                     emit({ type: "error", text: errText2, ...errExtra });
                     const errorOutcome = itemLedger.recordError(errText2, errExtra);
@@ -212385,7 +212527,7 @@ ${composed}`;
                 return;
               }
               if (!opts.claudeBin) {
-                throw new ApiError(501, "CHAT_RUNTIME_NOT_CONFIGURED", "\u5373\u65F6\u5BF9\u8BDD\u672A\u63A5\u5165 actor runtime \u6D3E\u53D1\u94FE\u8DEF");
+                throw new ApiError(501, "CHAT_RUNTIME_NOT_CONFIGURED", "\u5373\u65F6\u5BF9\u8BDD\u672A\u63A5\u5165 actor \u8FD0\u884C\u65F6\u6D3E\u53D1\u94FE\u8DEF");
               }
               const env = body2.actorId && opts.resolveActorEnv ? await opts.resolveActorEnv(body2.actorId) : {};
               let spawnCwd;
@@ -224483,13 +224625,21 @@ function wireRecoveredChatTurn(deps) {
       log3(`[chat-recovery] \u4F1A\u8BDD ${plan.chatSessionId} \u91CD\u6302\uFF1A\u8865\u53D1\u6709 ${droppedFrames} \u5E27\u6CA1\u63A5\u4F4F\uFF08run ${plan.runId}\uFF09\uFF0C\u672C\u8F6E\u6309\u300C\u8F93\u51FA\u4E0D\u5B8C\u6574\u300D\u6536\u5C3E${exitIsFailure ? "\uFF08\u9000\u51FA\u5E27\u672C\u8EAB\u4E5F\u662F\u5931\u8D25\uFF09" : "\uFF0C\u4E0D\u8BB0\u6210\u6210\u529F"}`);
     }
     if (failed) {
+      const exitAttribution = exitIsFailure ? attributeChatExit(exitErrorText(info), {
+        ...info.reason ? { reason: info.reason } : {},
+        ...cancelCauseFromExitMessage(info.errorMessage) ? { cancelledBy: cancelCauseFromExitMessage(info.errorMessage) } : {}
+      }, live.cancelCause()) : void 0;
       const errText2 = [
-        exitIsFailure ? exitErrorText(info) : void 0,
+        exitAttribution?.text,
         droppedFrames > 0 ? outputGapNotice(droppedFrames) : void 0
       ].filter((t) => Boolean(t)).join("\n\n");
-      live.emit({ type: "error", text: errText2 });
+      live.emit({ type: "error", text: errText2, ...exitAttribution?.extra.cancelledBy ? { cancelledBy: exitAttribution.extra.cancelledBy } : {} });
       const errReason = exitIsFailure ? info.reason : OUTPUT_GAP_ERROR_CODE;
-      const errorOutcome = itemLedger.recordError(errText2, { ...errReason ? { reason: errReason } : {} });
+      const errExtra = {
+        ...errReason ? { reason: errReason } : {},
+        ...exitAttribution?.extra.cancelledBy ? { cancelledBy: exitAttribution.extra.cancelledBy } : {}
+      };
+      const errorOutcome = itemLedger.recordError(errText2, errExtra);
       live.publishServerItem({
         itemId: errorOutcome.itemId,
         itemType: "control",
@@ -224497,7 +224647,7 @@ function wireRecoveredChatTurn(deps) {
         version: errorOutcome.version,
         ord: errorOutcome.ord,
         status: "failed",
-        payload: { code: "error", note: errText2, ...errReason ? { reason: errReason } : {} }
+        payload: { code: "error", note: errText2, ...errExtra }
       });
     }
     const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -224545,6 +224695,10 @@ function wireRecoveredChatTurn(deps) {
     live.emit({ type: "done", ...plan.runtimeSessionId ? { sessionId: plan.runtimeSessionId } : {} });
     live.finish(failed ? "error" : "done");
     deps.unregister();
+    const nativeSessionMetadata = info.runtimeSessionId && info.runtimeSessionId !== plan.runtimeSessionId ? nativeRuntimeSessionMetadata(
+      (await trace.getRun(plan.runId).catch(() => null))?.metadata,
+      info.runtimeSessionId
+    ) : void 0;
     enqueueTrace(async () => {
       await appender.append([{
         eventType: "run.finished",
@@ -224556,7 +224710,9 @@ function wireRecoveredChatTurn(deps) {
         ...runTerminalPatch(info, plan.startedAt, finishedAt),
         // 运行时自己退干净了，但平台没把输出接全——运行记录不许写「成功」（Bug 0123）。
         // 退出帧本身已经是失败时保持它的归因，只补一句缺口说明。
-        ...outputGapRunPatch(droppedFrames, exitIsFailure, info)
+        ...outputGapRunPatch(droppedFrames, exitIsFailure, info),
+        // 首轮占位会话号 → runtime 报回的原生号（Bug 0171）。
+        ...nativeSessionMetadata ? { metadata: nativeSessionMetadata } : {}
       });
       if (info.usage) await settleRunUsage(trace, plan.runId);
     });
@@ -224573,12 +224729,14 @@ async function sweepDanglingChatTurns(deps) {
     let status;
     let completedAt;
     let reason;
+    let exitReason = null;
     if (row.runId) {
       const run = await deps.getRun(row.runId).catch(() => null);
       if (run && run.status === "running") continue;
       status = run?.status === "succeeded" ? "done" : "error";
       completedAt = run?.endedAt ?? new Date(deps.now).toISOString();
       reason = run ? `run \u7EC8\u6001 ${run.status}` : "run \u7F3A\u5931";
+      exitReason = run?.exitReason ?? null;
     } else {
       if (deps.now - Date.parse(row.createdAt) < (deps.noRunGraceMs ?? 10 * 6e4)) continue;
       status = "error";
@@ -224601,6 +224759,22 @@ async function sweepDanglingChatTurns(deps) {
       completedAt,
       ...finalParts.length ? { parts: finalParts } : {}
     });
+    if (status === "error") {
+      const items = deps.itemsFor?.(row.sessionId);
+      if (items) {
+        await recordChatTurnInterruption({
+          items,
+          sessionId: row.sessionId,
+          turnId: await resolveChatItemsTurnId(items, row.id, fallbackTurnId(row.runId)),
+          runId: row.runId,
+          messageId: row.id,
+          cause: chatInterruptCauseOf(exitReason),
+          reason: exitReason ?? reason,
+          now: () => completedAt,
+          ...deps.log ? { log: deps.log } : {}
+        });
+      }
+    }
     closed.push(row.id);
     deps.log?.(`[chat-sweep] \u884C ${row.id}\uFF08\u4F1A\u8BDD ${row.sessionId}\uFF09\u6536\u655B\u4E3A ${status}\uFF08${reason}\uFF09`);
   }
@@ -224617,6 +224791,8 @@ async function reconcileChatExitFrame(deps) {
     const meta = asObj3(run.metadata);
     if (meta?.dispatchId !== deps.dispatchId) continue;
     if (deps.ownedRunId?.(row.sessionId) === row.runId) return false;
+    const metaRsid = typeof meta?.runtimeSessionId === "string" ? meta.runtimeSessionId : void 0;
+    const nativeSessionMetadata = deps.info.runtimeSessionId && deps.info.runtimeSessionId !== metaRsid ? nativeRuntimeSessionMetadata(run.metadata, deps.info.runtimeSessionId) : void 0;
     const turn = await deps.getTurnForRun?.(row.sessionId, run.id);
     const outputsPart = deps.info.fileRestoreError ? void 0 : deps.outputsPartFor?.(row.sessionId);
     if (turn && turn.status !== "reserved" && turn.status !== "running") {
@@ -224638,6 +224814,9 @@ async function reconcileChatExitFrame(deps) {
         trace: deps.trace,
         ...deps.items ? { items: deps.items } : {},
         ...outputsPart ? { outputsPart } : {},
+        // 轮已被清扫拍/用户 stop 收掉、退出帧才补发上来：run 若还挂 running，这就是把原生号
+        // 写进运行记录的最后一次机会（这条路自己没有退出帧，所以由这里算好递进去）。
+        ...nativeSessionMetadata ? { runMetadata: nativeSessionMetadata } : {},
         ...deps.log ? { log: deps.log } : {}
       });
       return true;
@@ -224717,7 +224896,6 @@ async function reconcileChatExitFrame(deps) {
       completedAt: finishedAt,
       ...finalParts.length ? { parts: finalParts } : {}
     });
-    const metaRsid = typeof meta?.runtimeSessionId === "string" ? meta.runtimeSessionId : void 0;
     const nextRuntimeSessionId = info.runtimeSessionId ?? metaRsid;
     await deps.chatStore.updateSession(row.sessionId, {
       ...nextRuntimeSessionId ? { runtimeSessionId: nextRuntimeSessionId } : {},
@@ -224738,7 +224916,9 @@ async function reconcileChatExitFrame(deps) {
       await deps.trace.appendEvents(row.runId, seqless.map((e, i) => ({ ...e, seq: baseSeq + i + 1 })));
       await deps.trace.updateRun(row.runId, {
         ...runTerminalPatch(info, run.startedAt, finishedAt),
-        ...outputGapRunPatch(droppedFrames, exitIsFailure, info)
+        ...outputGapRunPatch(droppedFrames, exitIsFailure, info),
+        // 首轮占位会话号 → runtime 报回的原生号（Bug 0171，判据见本函数上方那一段）。
+        ...nativeSessionMetadata ? { metadata: nativeSessionMetadata } : {}
       });
       if (info.usage) await settleRunUsage(deps.trace, row.runId);
     } catch (err) {
@@ -224808,7 +224988,9 @@ async function sweepDanglingChatTurnsAcrossCompanies(deps) {
         listMessages: (sid) => stores.chatStore.listMessages(sid),
         updateMessage: (id, patch) => stores.chatStore.updateMessage(id, patch),
         ...log3 ? { log: (m2) => log3(companyId ? `${m2}\uFF3B${companyId}\uFF3D` : m2) } : {},
-        ...sessionOutputsScan ? { outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId) } : {}
+        ...sessionOutputsScan ? { outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId) } : {},
+        // Bug #0185：结局项要写进**这一家**的 `chat_items`（公司分 schema，写错家等于没写）。
+        ...stores.items ? { itemsFor: () => stores.items } : {}
       });
       closed.push(...ids2);
     } catch (err) {
@@ -224863,7 +225045,8 @@ async function reconcileSettledChatTurn(deps) {
   if (run?.status === "running") {
     await deps.trace.updateRun(plan.runId, {
       status: turn.status,
-      endedAt: completedAt
+      endedAt: completedAt,
+      ...deps.runMetadata ? { metadata: deps.runMetadata } : {}
     });
   }
 }
@@ -224958,14 +225141,17 @@ var init_chat_recovery = __esm({
   "../server/src/chat-recovery.ts"() {
     "use strict";
     init_file_restore();
+    init_continuation3();
     init_chat_parts();
     init_sink();
     init_resilient_appender();
     init_usage_ledger();
     init_chat_item_ledger();
+    init_chat_interrupt_notice();
     init_chat_assistant_turn();
     init_src2();
     init_session_exit_outcome();
+    init_chat_cancel_attribution();
     asObj3 = (v2) => v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
     partsOf = (parts) => Array.isArray(parts) ? parts.filter((p2) => p2 && typeof p2 === "object" && typeof p2.type === "string") : [];
     maxPartSeq = (parts) => parts.reduce((n, p2) => Math.max(n, typeof p2.seq === "number" ? p2.seq : 0), 0);
@@ -225259,6 +225445,7 @@ var init_daemon_hub = __esm({
       getNodeStatus;
       /** 握手被拒审计钩子。 */
       onHandshakeRejected;
+      onSessionEvicted;
       /** 握手失败限流器（改动 3）。 */
       throttle;
       /** 外部可订阅的事件回调 */
@@ -225291,6 +225478,7 @@ var init_daemon_hub = __esm({
         this.resolveDataplane = opts.resolveDataplane;
         this.coldStartGraceMs = opts.coldStartGraceMs ?? LINK_WINDOWS.hubColdStartGraceMs;
         this.onHandshakeRejected = opts.onHandshakeRejected;
+        this.onSessionEvicted = opts.onSessionEvicted;
         this.throttle = new HandshakeThrottle(opts.throttle);
         this.wss = new import_websocket_server.default({
           server,
@@ -225666,6 +225854,31 @@ var init_daemon_hub = __esm({
         }
         return ids2;
       }
+      /**
+       * 当前持有活数据面连接的会话**自报的 `jobArtifactId`**（Bug #0185）。
+       *
+       * 为什么 {@link liveSessionDispatchIds} 不够：那条线按 `dispatchId` 认领，而 **chat 道的运行账本
+       * 以 artifactId 为键**——`run.id = chat-run:*` ≠ dispatchId（见本文件顶上那段与 `orphan-sweep.ts`
+       * 的注释）。D2′ 之后 chat 会话搬进了独立会话进程：它不在 daemon 的 `activeSessions` 里
+       * （那份只列 daemon 自己那张表），也不在 serve 的在途表里（重启即空），于是 serve 重启后
+       * **四条认领线一条都不命中**，一条跑得好好的对话被 orphan-sweep 判孤儿闭合。
+       *
+       * 2026-09-21 生产（node-76fd271b454a，期间连续发版三次）：三轮 chat run 全部
+       * `status=orphaned / exitReason=sweep-orphan`，节点在线、会话进程还连着 hub。
+       *
+       * 会话在 `session_hello` 里已经把 `jobArtifactId` 报上来了（`session-process.ts` 那段注释写的
+       * 就是这件事），这里只是把它取出来。与节点 hello 那条线同形、同语义，**只增不减**：
+       * 命中只能阻止误闭合，永不导致误闭合。
+       */
+      liveSessionArtifactIds() {
+        const ids2 = /* @__PURE__ */ new Set();
+        for (const [dispatchId, ws] of this.sessionSockets) {
+          if (ws.readyState !== import_websocket.default.OPEN) continue;
+          const artifactId = this.sessionMeta.get(dispatchId)?.jobArtifactId;
+          if (artifactId) ids2.add(artifactId);
+        }
+        return ids2;
+      }
       /** 往会话进程直投一帧（kill / append_input / ping）。返回是否写进了 OPEN 的 socket。 */
       sendToSession(dispatchId, msg) {
         const ws = this.sessionSockets.get(dispatchId);
@@ -225680,7 +225893,13 @@ var init_daemon_hub = __esm({
       evictSession(dispatchId, reason) {
         const meta = this.sessionMeta.get(dispatchId);
         const sent = this.sendToSession(dispatchId, { type: "evict", sessionId: meta?.sessionId ?? dispatchId, reason });
-        if (sent) console.warn(`[hub] evict \u4F1A\u8BDD dispatch=${dispatchId} reason=${reason}`);
+        if (sent) {
+          console.warn(`[hub] evict \u4F1A\u8BDD dispatch=${dispatchId} reason=${reason}`);
+          try {
+            this.onSessionEvicted?.(dispatchId, reason);
+          } catch {
+          }
+        }
         return sent;
       }
       /**
@@ -225829,16 +226048,60 @@ var init_daemon_hub = __esm({
 });
 
 // ../server/src/domains/actors/skill-fetcher.ts
+function indentWidth(line2) {
+  return line2.length - line2.replace(/^[ \t]+/, "").length;
+}
+function scanFrontmatterEntries(fm) {
+  const lines = fm.split("\n");
+  const out = [];
+  for (let i = 0; i < lines.length; i += 1) {
+    const raw = lines[i];
+    const text6 = raw.trim();
+    if (!text6 || text6.startsWith("#")) continue;
+    if (indentWidth(raw) > 0) continue;
+    const colon = text6.indexOf(":");
+    if (colon < 0) continue;
+    const key2 = text6.slice(0, colon).trim();
+    const rest = text6.slice(colon + 1).trim();
+    if (BLOCK_SCALAR_HEAD.test(rest)) {
+      const body2 = [];
+      let j = i + 1;
+      for (; j < lines.length; j += 1) {
+        const next = lines[j];
+        if (next.trim() === "") {
+          body2.push("");
+          continue;
+        }
+        if (indentWidth(next) === 0) break;
+        body2.push(next);
+      }
+      i = j - 1;
+      out.push({ key: key2, value: foldBlockScalar(body2), line: raw, block: true });
+      continue;
+    }
+    out.push({ key: key2, value: unquoteScalar(rest), line: raw, block: false });
+  }
+  return out;
+}
+function unquoteScalar(value2) {
+  const q2 = value2[0];
+  if ((q2 === '"' || q2 === "'") && value2.length > 1 && value2.endsWith(q2)) return value2.slice(1, -1);
+  return value2;
+}
+function foldBlockScalar(body2) {
+  const widths = body2.filter((l) => l.trim()).map(indentWidth);
+  const base = widths.length ? Math.min(...widths) : 0;
+  return body2.map((l) => l.slice(base)).join(" ").replace(/[ \t\r\n]+/g, " ").trim();
+}
 function parseSkillFrontmatter(content3) {
   if (!content3.startsWith("---")) return { name: "", description: "" };
   const end = content3.indexOf("---", 3);
   if (end < 0) return { name: "", description: "" };
   let name = "";
   let description = "";
-  for (const line2 of content3.slice(3, end).split("\n")) {
-    const t = line2.trim();
-    if (t.startsWith("name:")) name = t.slice(5).trim().replace(/^["']|["']$/g, "");
-    else if (t.startsWith("description:")) description = t.slice(12).trim().replace(/^["']|["']$/g, "");
+  for (const entry of scanFrontmatterEntries(content3.slice(3, end))) {
+    if (entry.key === "name") name = entry.value;
+    else if (entry.key === "description") description = entry.value;
   }
   return { name, description };
 }
@@ -225851,15 +226114,13 @@ function validateSkillMd(content3) {
     return "frontmatter \u7684\u67D0\u4E2A\u503C\u91CC\u542B `---`\uFF0C\u4F1A\u88AB\u89E3\u6790\u5668\u8BEF\u5F53\u6210\u7ED3\u675F\u6807\u8BB0\uFF08\u591A\u534A\u662F\u628A\u6574\u4EFD\u6587\u4EF6\u5185\u5BB9\u5F53\u6210\u4E86\u5B57\u6BB5\u503C\uFF09";
   }
   const fm = content3.slice(3, strictEnd);
-  for (const raw of fm.split("\n")) {
-    const line2 = raw.trim();
-    if (!line2 || line2.startsWith("#")) continue;
-    const colon = line2.indexOf(":");
-    if (colon < 0) continue;
-    const value2 = line2.slice(colon + 1).trim();
-    const q2 = value2[0];
-    if ((q2 === '"' || q2 === "'") && !(value2.length > 1 && value2.endsWith(q2))) {
-      return `frontmatter \u7684 \`${line2.slice(0, colon).trim()}\` \u503C\u6709\u672A\u95ED\u5408\u7684\u5F15\u53F7\u2014\u2014\u591A\u534A\u662F\u628A\u6574\u4EFD\u6587\u4EF6\u5185\u5BB9\u5F53\u6210\u4E86\u5B57\u6BB5\u503C\uFF08description \u53EA\u5199\u4E00\u53E5\u8BDD\uFF0C\u6B63\u6587\u5199\u5728 frontmatter \u4E4B\u540E\uFF09`;
+  for (const entry of scanFrontmatterEntries(fm)) {
+    if (entry.block) continue;
+    const text6 = entry.line.trim();
+    const rawValue = text6.slice(text6.indexOf(":") + 1).trim();
+    const q2 = rawValue[0];
+    if ((q2 === '"' || q2 === "'") && !(rawValue.length > 1 && rawValue.endsWith(q2))) {
+      return `frontmatter \u7684 \`${entry.key}\` \u503C\u6709\u672A\u95ED\u5408\u7684\u5F15\u53F7\u2014\u2014\u591A\u534A\u662F\u628A\u6574\u4EFD\u6587\u4EF6\u5185\u5BB9\u5F53\u6210\u4E86\u5B57\u6BB5\u503C\uFF08description \u53EA\u5199\u4E00\u53E5\u8BDD\uFF0C\u6B63\u6587\u5199\u5728 frontmatter \u4E4B\u540E\uFF09`;
     }
   }
   const { name, description } = parseSkillFrontmatter(content3);
@@ -225876,7 +226137,7 @@ function toYamlDoubleQuoted(value2) {
 }
 async function fetchText(url, headers = {}) {
   const res = await fetch(url, { headers });
-  if (!res.ok) throw new Error(`HTTP ${res.status} fetching ${url}`);
+  if (!res.ok) throw new SkillFetchHttpError(res.status, url);
   const buf = await res.arrayBuffer();
   if (buf.byteLength > currentFileLimits().skillFileBytes) throw new Error(`File too large (>${currentFileLimits().skillFileBytes} bytes): ${url}`);
   return new TextDecoder().decode(buf);
@@ -225931,6 +226192,21 @@ async function fetchFromClawHub(sourceUrl) {
     files: bundle.files
   };
 }
+async function repoIsReadable(owner, repo) {
+  const url = `https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`;
+  try {
+    const res = await fetch(url, { headers: { ...githubHeaders(), Accept: "application/vnd.github+json" } });
+    return res.ok;
+  } catch {
+    return true;
+  }
+}
+async function skillMdMissingMessage(owner, repo, skillDir) {
+  if (await repoIsReadable(owner, repo)) {
+    return `SKILL.md not found in ${owner}/${repo} at ${skillDir || "root"}`;
+  }
+  return process.env["GITHUB_TOKEN"]?.trim() ? `\u65E0\u6743\u8BBF\u95EE\u4ED3\u5E93 ${owner}/${repo}\uFF1A\u670D\u52A1\u7AEF\u914D\u7F6E\u7684 GitHub \u51ED\u636E\u8BFB\u4E0D\u5230\u5B83\uFF08\u79C1\u6709\u4ED3\u5E93\u9700\u8981\u628A\u8BE5\u51ED\u636E\u52A0\u8FDB\u4ED3\u5E93\u534F\u4F5C\u8005\uFF0C\u6216\u4ED3\u5E93\u540D\u5199\u9519\u4E86\uFF09` : `\u65E0\u6743\u8BBF\u95EE\u4ED3\u5E93 ${owner}/${repo}\uFF1A\u5B83\u4E0D\u662F\u516C\u5F00\u4ED3\u5E93\uFF0C\u800C\u670D\u52A1\u7AEF\u6CA1\u6709\u914D\u7F6E GitHub \u8BBF\u95EE\u51ED\u636E\uFF08GITHUB_TOKEN\uFF09`;
+}
 async function getDefaultBranch(owner, repo) {
   const info = await fetchGitHubApi(`https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`).catch(() => null);
   return info?.default_branch ?? "main";
@@ -225951,7 +226227,7 @@ async function fetchSkillDir(owner, repo, dir, branch) {
   const skillMdUrl = `${rawPrefix}/${dir ? dir + "/" : ""}SKILL.md`;
   let skillMd;
   try {
-    skillMd = await fetchText(skillMdUrl);
+    skillMd = await fetchText(skillMdUrl, githubHeaders());
   } catch {
     return null;
   }
@@ -226033,7 +226309,7 @@ async function fetchFromGitHub(sourceUrl) {
     skillDir = segs.slice(2).join("/");
   }
   const result = await fetchSkillDir(owner, repo, skillDir, branch);
-  if (!result) throw new Error(`SKILL.md not found in ${owner}/${repo} at ${skillDir || "root"}`);
+  if (!result) throw new Error(await skillMdMissingMessage(owner, repo, skillDir));
   const fm = parseSkillFrontmatter(result.files["SKILL.md"] ?? "");
   const slugBase = skillDir ? skillDir.split("/").pop().replace(/[^a-z0-9-]/g, "-") : repo.replace(/[^a-z0-9-]/g, "-");
   return {
@@ -226055,12 +226331,20 @@ async function fetchSkillFromSource(sourceUrl, kind) {
       throw new Error(`Unknown import kind: ${kind}`);
   }
 }
-var SKILL_DESCRIPTION_MAX, Bundle;
+var BLOCK_SCALAR_HEAD, SKILL_DESCRIPTION_MAX, SkillFetchHttpError, Bundle;
 var init_skill_fetcher = __esm({
   "../server/src/domains/actors/skill-fetcher.ts"() {
     "use strict";
     init_file_limits2();
+    BLOCK_SCALAR_HEAD = /^[|>][0-9+-]{0,2}[ \t]*(?:#.*)?$/;
     SKILL_DESCRIPTION_MAX = 600;
+    SkillFetchHttpError = class extends Error {
+      constructor(status, url) {
+        super(`HTTP ${status} fetching ${url}`);
+        this.status = status;
+        this.name = "SkillFetchHttpError";
+      }
+    };
     Bundle = class {
       files = {};
       add(path42, content3) {
@@ -226703,6 +226987,37 @@ var init_service5 = __esm({
         await this.opts.store.removeBinding(actorId);
         await this.audit({ kind: "binding_change", actorId, by, at: this.now(), detail: { removed: true } });
       }
+      /**
+       * 运行时被删除时，把指向它的绑定一并撤掉（与 {@link dropRuntimeBindingOfDeletedAgent} 对称的另一头）。
+       *
+       * 为什么撤绑而不是把绑定留着标成失效（缺陷 0124，2026-09-21 R05 第 4 步实测）：
+       * 管理员删掉 `node-abe354908271` 上的 codex 后，绑在它上面的两个 Agent 的绑定行仍是
+       * `codex / active`，指着一条已经不存在的运行时——运行时页要靠「这行还在不在」去过滤它，
+       * 派单要靠 resolveBinding 去挡它，组织页要自己推「绑的那个还在不在」，**每个读者各挡一遍，
+       * 漏一处就复发**。绑定表是「此刻该派到哪」的唯一事实源，不是历史账本：历史在 agent_runs /
+       * traces / 审计里，撤绑一条都不动，所以 R05 要的「已有运行记录仍查得到」不受影响。
+       * `BindingStatus` 只有 `active | paused` 两个值，拿 `paused`（人工暂停、可恢复）表示
+       * 「目标没了」会让后来的读者误判，而加新值是 `packages/contract` 变更（红线 4）。
+       *
+       * 幂等：没有绑定就是空数组；`removeBinding` 对不存在的 actor 是 no-op。
+       * @returns 被撤绑的 actorId 列表（调用方用来回给界面：删完影响了谁）。
+       */
+      async releaseBindingsOnRuntime(target, by) {
+        const affected = (await this.opts.store.listBindings()).filter(
+          (b2) => b2.nodeId === target.nodeId && b2.runtimeKind === target.runtimeKind
+        );
+        for (const b2 of affected) {
+          await this.opts.store.removeBinding(b2.actorId);
+          await this.audit({
+            kind: "binding_change",
+            actorId: b2.actorId,
+            by,
+            at: this.now(),
+            detail: { removed: true, reason: "runtime_deleted", nodeId: b2.nodeId, runtimeKind: b2.runtimeKind }
+          });
+        }
+        return affected.map((b2) => b2.actorId);
+      }
       listBindings() {
         return this.opts.store.listBindings();
       }
@@ -227743,13 +228058,14 @@ ${input.description}
       }
       /**
        * 按绑定选出这个执行上下文里每个变量名用哪一条（替代旧路径的三层 for，规则逐条对齐）：
-       *   · 项目 ＞ 这位 Agent ＞ 全员；
+       *   · **这位 Agent ＞ 项目 ＞ 全员**（发起人 2026-09-21：项目是「小范围的组织默认值」，Agent 自己的配置最优先；
+       *     2026-09-16 的 #1820 曾把项目排在最前，这次改回来，旧路径与这里一起改）；
        *   · 连接器没启用的那一条不算，由下一层顶上（同旧路径 `put` 的早退）；
        *   · 放不进进程环境的名字跳过；
        *   · 选出的那条到期就整个不提供，**不回退**到下一层（PRD §7，同旧路径）。
        */
       async boundWinners(ctx, enabledConnectors) {
-        const rank = { all: 1, agent: 2, project: 3 };
+        const rank = { all: 1, project: 2, agent: 3 };
         const best = /* @__PURE__ */ new Map();
         for (const row of await this.opts.store.resolveBoundVariables(ctx)) {
           if (row.connectorId && !enabledConnectors.has(row.connectorId)) continue;
@@ -227908,11 +228224,11 @@ ${input.description}
       /**
        * ADR 凭据保险库 §4.3 / ADR 0125 / **决策 0565 D4（2026-09-16 修订）**：派单/reveal 用的**合并后**
        * 变量条目（明文 + deliveryMode）。
-       * 优先级低→高：**global < personal < project**（同 key 时高层覆盖低层，**项目变量最优先**）。
-       * 即发起人 2026-09-16 定的口径：**当前项目变量 > Agent 个人变量 > 对该 Agent 生效的组织变量**。
-       *   - 2026-09-16 之前是 `global < project < personal`（个人最优先）。改的是这三行 for 的先后，
-       *     不是 `put` 的条件——**显式空值照旧算「有值」**：高层写了空串就覆盖成空串，不回落低层
-       *     （`put` 无条件 `merged.set`，别顺手加 `if (value)`，那会把「这个项目刻意置空」变成「读到组织值」）。
+       * 优先级低→高：**global < project < personal**（同 key 时高层覆盖低层，**Agent 自己的那份最优先**）。
+       * 即发起人 2026-09-21 定的口径：**Agent 个人变量 > 当前项目变量 > 对该 Agent 生效的组织变量**
+       * （项目视为「一个小范围的组织」的默认值；2026-09-16 的 #1820 曾改成项目最优先，2026-09-21 改回来）。
+       *   - 改的是这三行 for 的先后，不是 `put` 的条件——**显式空值照旧算「有值」**：高层写了空串就覆盖成空串，
+       *     不回落低层（`put` 无条件 `merged.set`，别顺手加 `if (value)`，那会把「刻意置空」变成「读到下层值」）。
        *   - `opts.projectId` 给出时才叠加 project 层；缺省 = 只有 personal+global（存量行为）——
        *     没有项目上下文时这次改动不改变任何取值。
        * 连接器门禁与 resolveActorEnv 同源（未启用的连接器变量不注入）。
@@ -227960,12 +228276,12 @@ ${input.description}
         for (const row of rows) {
           if (row.scope === "global" && !row.actorId) put3(row);
         }
-        for (const row of rows) {
-          if (row.scope === "personal" && (!row.actorId || row.actorId === actorId)) put3(row);
-        }
         for (const row of projectRows) {
           if (row.scope === "project") put3(row);
         }
+        for (const row of rows) {
+          if (row.scope === "personal" && (!row.actorId || row.actorId === actorId)) put3(row);
+        }
         return [...merged.values()].filter((e) => !expiredWinner.get(e.key));
       }
       /**
@@ -233378,7 +233694,7 @@ var init_activity2 = __esm({
          也是引擎做的（`activate.ts` 的 `tryToRun`）——管理者根本不知道这两件事，此前却写成
          「{管理者}已主动介入」「{管理者}正在重试」，把系统干的事指名道姓按到人头上。
          「后来谁介入了」由 `plan.node_retry` 那张卡说，那里的主语是**真按下重试的人**，说的是事实。 */
-      timedOut: (executor) => `${executor} Runtime \u8D85\u65F6\u3002`,
+      timedOut: (executor) => `${executor} \u8FD0\u884C\u65F6\u8D85\u65F6\u3002`,
       failed: (executor) => `${executor} \u6267\u884C\u5931\u8D25\u3002`,
       /**
        * **零产出轮**：会话正常退出，一件东西都没交（引擎判卷不是 success）。与 {@link failed} 分开说——
@@ -233386,7 +233702,7 @@ var init_activity2 = __esm({
        */
       endedWithoutOutput: (executor, node2) => `${executor} \u672C\u8F6E\u7ED3\u675F\uFF0C\u6CA1\u6709\u4EA4\u51FA\u300A${node2}\u300B\u7684\u4EFB\u4F55\u6210\u679C\u3002`,
       /** 人点了重试——只在 `plan.node_retry` 用，`by` 是真按下重试的那个人。 */
-      retriedAfterTimeout: (executor, by) => `${executor} Runtime \u8D85\u65F6\uFF0C${by}\u5DF2\u4ECB\u5165\u91CD\u8BD5\u3002`,
+      retriedAfterTimeout: (executor, by) => `${executor} \u8FD0\u884C\u65F6\u8D85\u65F6\uFF0C${by}\u5DF2\u4ECB\u5165\u91CD\u8BD5\u3002`,
       retriedAfterFailure: (executor, by) => `${executor} \u6267\u884C\u5931\u8D25\uFF0C${by}\u5DF2\u4ECB\u5165\u91CD\u8BD5\u3002`,
       resumed: (executor, node2) => `${executor} \u5DF2\u6062\u590D\uFF0C\u7EE7\u7EED\u5904\u7406\u300A${node2}\u300B\u3002`,
       killed: (node2) => `\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u5DF2\u7EC8\u6B62\u3002`,
@@ -235790,6 +236106,22 @@ function distribute(total, weights) {
     return share;
   });
 }
+function splitSegmentCost(cost, model, d) {
+  if (cost === null) return null;
+  const zero = { input: 0, cacheRead: 0, cacheCreation: 0, output: 0, unsplit: 0 };
+  if (cost === 0) return zero;
+  const resolved = resolvedModel(model);
+  const est = resolved ? estimateUsageCostBreakdown(resolved, {
+    inputTokens: d.input,
+    outputTokens: d.output,
+    cacheReadTokens: d.cacheRead,
+    cacheCreationTokens: d.cacheCreation
+  }) : null;
+  const weights = est ? [est.inputMicros, est.cacheReadMicros, est.cacheCreationMicros, est.outputMicros] : [0, 0, 0, 0];
+  if (!weights.some((w2) => w2 > 0)) return { ...zero, unsplit: cost };
+  const [input, cacheRead, cacheCreation, output] = distribute(cost, weights);
+  return { input, cacheRead, cacheCreation, output, unsplit: 0 };
+}
 function unpricedSegmentCost(model) {
   return resolvedModel(model) === null ? 0 : null;
 }
@@ -235845,7 +236177,8 @@ function deriveRunSegments(run) {
     outputTokens: d.output,
     cacheReadTokens: d.cacheRead,
     cacheCreationTokens: d.cacheCreation,
-    costUsdMicros: costs[i] ?? null
+    costUsdMicros: costs[i] ?? null,
+    costParts: splitSegmentCost(costs[i] ?? null, point3.model ?? run.effectiveModel, d)
   }));
 }
 function deriveRounds(runs) {
@@ -236256,14 +236589,16 @@ function attributed(facts, relations) {
   const draftOf = (key2) => {
     let d = projectDrafts.get(key2);
     if (!d) {
-      d = { conv: new Cell(), tasks: [], unlinked: new Cell(), group: new Cell() };
+      d = { convs: [], tasks: [], unlinked: new Cell(), group: new Cell() };
       projectDrafts.set(key2, d);
     }
     return d;
   };
   for (const [rootId, bySession] of convSessionCells) {
-    const d = draftOf(projectKey(relations.sessions.get(rootId).projectId));
-    for (const cell of bySession.values()) d.conv.addCell(cell);
+    const rootCell = new Cell();
+    for (const cell of bySession.values()) rootCell.addCell(cell);
+    if (!rootCell.active) continue;
+    draftOf(projectKey(relations.sessions.get(rootId).projectId)).convs.push({ rootId, cell: rootCell });
   }
   for (const workorderId of taskAmount.keys()) {
     draftOf(projectKey(relations.workorders.get(workorderId).projectId)).tasks.push(workorderId);
@@ -236272,15 +236607,26 @@ function attributed(facts, relations) {
   const projects = [];
   for (const [projectId2, d] of projectDrafts) {
     const rows = [];
-    if (d.conv.active) {
-      d.group.addCell(d.conv);
-      rows.push({ kind: "conversations", workorderId: null, title: null, createdAt: null, amount: d.conv.amount.toAmount(), flags: d.conv.flags.toFlags() });
-    }
+    const convRows = d.convs.map(({ rootId, cell }) => {
+      d.group.addCell(cell);
+      const s2 = relations.sessions.get(rootId);
+      return {
+        kind: "conversation",
+        sessionId: rootId,
+        workorderId: null,
+        title: s2.title || UNTITLED_CONVERSATION,
+        createdAt: s2.createdAt,
+        amount: cell.amount.toAmount(),
+        flags: cell.flags.toFlags()
+      };
+    }).sort((a, b2) => byCreatedAt(a.createdAt, b2.createdAt) || (a.sessionId < b2.sessionId ? -1 : 1));
+    rows.push(...convRows);
     const taskRows = d.tasks.map((workorderId) => {
       d.group.addCell(taskCells.get(workorderId));
       const wo = relations.workorders.get(workorderId);
       return {
         kind: "task",
+        sessionId: null,
         workorderId,
         title: wo.title,
         createdAt: wo.createdAt,
@@ -236291,7 +236637,7 @@ function attributed(facts, relations) {
     rows.push(...taskRows);
     if (d.unlinked.active) {
       d.group.addCell(d.unlinked);
-      rows.push({ kind: "unlinked", workorderId: null, title: UNLINKED_ROW_TITLE, createdAt: null, amount: d.unlinked.amount.toAmount(), flags: d.unlinked.flags.toFlags() });
+      rows.push({ kind: "unlinked", sessionId: null, workorderId: null, title: UNLINKED_ROW_TITLE, createdAt: null, amount: d.unlinked.amount.toAmount(), flags: d.unlinked.flags.toFlags() });
     }
     if (!d.group.active) continue;
     projects.push({
@@ -236314,6 +236660,7 @@ var init_statistics = __esm({
     "use strict";
     init_src();
     init_uncategorized_project();
+    init_model_pricing();
     init_accounting();
     UNKNOWN_AGENT_NAME = "\u672A\u77E5 Agent";
     UNREGISTERED_RUNTIME_NAME = "\u672A\u767B\u8BB0\u8FD0\u884C\u65F6";
@@ -236323,38 +236670,60 @@ var init_statistics = __esm({
     BUCKET_KEYS = ["input", "output", "cacheRead", "cacheCreation"];
     AmountAcc = class {
       input = 0;
-      cache = 0;
+      cacheRead = 0;
+      cacheCreation = 0;
       output = 0;
       knownCost = 0;
+      costParts = { input: 0, cacheRead: 0, cacheCreation: 0, output: 0, unsplit: 0 };
       unknownTokens = 0;
       knownSegments = 0;
       unknownSegments = 0;
       addSegment(s2) {
-        const cache = s2.cacheReadTokens + s2.cacheCreationTokens;
         this.input += s2.inputTokens;
-        this.cache += cache;
+        this.cacheRead += s2.cacheReadTokens;
+        this.cacheCreation += s2.cacheCreationTokens;
         this.output += s2.outputTokens;
         if (s2.costUsdMicros === null) {
-          this.unknownTokens += s2.inputTokens + cache + s2.outputTokens;
+          this.unknownTokens += s2.inputTokens + s2.cacheReadTokens + s2.cacheCreationTokens + s2.outputTokens;
           this.unknownSegments += 1;
         } else {
           this.knownCost += s2.costUsdMicros;
+          if (s2.costParts) this.addParts(s2.costParts);
+          else this.costParts.unsplit += s2.costUsdMicros;
           this.knownSegments += 1;
         }
       }
       addAcc(o) {
         this.input += o.input;
-        this.cache += o.cache;
+        this.cacheRead += o.cacheRead;
+        this.cacheCreation += o.cacheCreation;
         this.output += o.output;
         this.knownCost += o.knownCost;
+        this.addParts(o.costParts);
         this.unknownTokens += o.unknownTokens;
         this.knownSegments += o.knownSegments;
         this.unknownSegments += o.unknownSegments;
       }
+      addParts(p2) {
+        this.costParts.input += p2.input;
+        this.costParts.cacheRead += p2.cacheRead;
+        this.costParts.cacheCreation += p2.cacheCreation;
+        this.costParts.output += p2.output;
+        this.costParts.unsplit += p2.unsplit;
+      }
       toAmount() {
+        const cache = this.cacheRead + this.cacheCreation;
         return {
-          tokens: { input: this.input, cache: this.cache, output: this.output, total: this.input + this.cache + this.output },
+          tokens: {
+            input: this.input,
+            cache,
+            cacheRead: this.cacheRead,
+            cacheCreation: this.cacheCreation,
+            output: this.output,
+            total: this.input + cache + this.output
+          },
           costUsdMicros: this.knownCost,
+          costParts: { ...this.costParts },
           costKnown: this.unknownSegments === 0 ? "full" : this.knownSegments === 0 ? "none" : "partial",
           costUnknownTokens: this.unknownTokens
         };
@@ -241008,8 +241377,9 @@ function nodesDomain(deps) {
       const runtime = (await deps.nodeStore.listRuntimes()).find((r) => r.id === runtimeId);
       const { nodeDeleted } = await deps.nodeStore.deleteRuntime(runtimeId);
       if (nodeDeleted && runtime) revokeNodeAccess(runtime.nodeId);
+      const releasedActorIds = runtime ? await deps.releaseBindingsOnRuntime?.(req.auth.companyId, { nodeId: runtime.nodeId, runtimeKind: runtime.kind }, req.auth.actor) ?? [] : [];
       deps.onStatusChange?.();
-      return { status: 200, body: { ok: true } };
+      return { status: 200, body: { ok: true, releasedActorIds } };
     });
     router.get("/api/runtimes/:runtimeId/models", async (req) => {
       const runtimeId = req.params["runtimeId"];
@@ -245325,7 +245695,7 @@ function throwWorkdirError(code2) {
     case "NODE_OFFLINE":
       throw new ApiError(503, "NODE_OFFLINE", "\u5DE5\u4F5C\u533A\u6240\u5728\u8282\u70B9\u5F53\u524D\u79BB\u7EBF\uFF0C\u65E0\u6CD5\u67E5\u770B\u6587\u4EF6");
     case "SESSION_NOT_BOUND":
-      throw new ApiError(503, "SESSION_NOT_BOUND", "\u8BE5 agent \u5F53\u524D\u672A\u7ED1\u5B9A runtime\uFF0C\u65E0\u5DE5\u4F5C\u533A\u53EF\u8BFB");
+      throw new ApiError(503, "SESSION_NOT_BOUND", "\u8BE5 agent \u5F53\u524D\u672A\u7ED1\u5B9A\u8FD0\u884C\u65F6\uFF0C\u65E0\u5DE5\u4F5C\u533A\u53EF\u8BFB");
     case "TIMEOUT":
       throw new ApiError(504, "TIMEOUT", "\u8BF7\u6C42\u8282\u70B9\u8D85\u65F6\uFF0C\u8BF7\u7A0D\u540E\u518D\u8BD5");
     case "NOT_FOUND":
@@ -245732,7 +246102,7 @@ function createChatSessionsDomain(opts) {
         }
         const startedAt = Date.parse(activeTurnRow.startedAt ?? activeTurnRow.reservedAt);
         const stale = Number.isFinite(startedAt) && Date.now() - startedAt >= LINK_WINDOWS.chatTurnPhaseStaleAfterMs;
-        return { turnId: activeTurnRow.id, phase: stale ? "interrupted" : "running" };
+        return { turnId: activeTurnRow.id, phase: stale ? "recovering" : "running" };
       })();
       const snapshotEntries = [];
       let nextSinceVersion = sinceVersion;
@@ -250901,7 +251271,7 @@ var init_daemon_adapter = __esm({
       }
       async spawn(job) {
         if (job.binding?.nodeId) return this.opts.remote.spawn(job);
-        const msg = `\u62D2\u7EDD\u6D3E\u53D1\uFF1A${job.actor} \u65E0 active runtime \u7ED1\u5B9A\u2014\u2014\u4E0D\u56DE\u843D\u672C\u5730\uFF08\u5148\u5728\u5E73\u53F0\u4E3A\u8BE5\u5458\u5DE5\u914D\u7F6E runtime\uFF09`;
+        const msg = `\u62D2\u7EDD\u6D3E\u53D1\uFF1A${job.actor} \u65E0\u53EF\u7528\u7684\u8FD0\u884C\u65F6\u7ED1\u5B9A\u2014\u2014\u4E0D\u56DE\u843D\u672C\u5730\uFF08\u5148\u5728\u5E73\u53F0\u4E3A\u8BE5\u5458\u5DE5\u914D\u7F6E\u8FD0\u884C\u65F6\uFF09`;
         console.warn(`[dispatch] ${msg}\uFF08artifact=${job.artifactId}\uFF09`);
         throw new Error(msg);
       }
@@ -271144,6 +271514,7 @@ __export(src_exports2, {
   BindingRouterAdapter: () => BindingRouterAdapter,
   BoardWatcher: () => BoardWatcher,
   CHAT_FOLDER_TASK_LABEL: () => CHAT_FOLDER_TASK_LABEL,
+  CHAT_INTERRUPT_NOTICE: () => CHAT_INTERRUPT_NOTICE,
   CHAT_ITEMS_DOUBLE_WRITE_ENV: () => CHAT_ITEMS_DOUBLE_WRITE_ENV,
   CHAT_TURN_ORPHAN_GRACE_MS: () => CHAT_TURN_ORPHAN_GRACE_MS,
   COMPANY_CROSS_TENANT_PREFIXES: () => COMPANY_CROSS_TENANT_PREFIXES,
@@ -271277,6 +271648,7 @@ __export(src_exports2, {
   REJECTED_PROPOSALS_IN_TASK: () => REJECTED_PROPOSALS_IN_TASK,
   RETIRED_CD_BOT_ACTOR: () => RETIRED_CD_BOT_ACTOR,
   RETIRED_CD_ROLE: () => RETIRED_CD_ROLE,
+  RUNTIME_SESSION_ID_PLACEHOLDER_KEY: () => RUNTIME_SESSION_ID_PLACEHOLDER_KEY,
   RUNTIME_START_FRAME_TYPES: () => RUNTIME_START_FRAME_TYPES,
   RUN_DEATH_PATHS: () => RUN_DEATH_PATHS,
   RUN_SETTLEMENT_CONVERGENCE_BUDGET_MS: () => RUN_SETTLEMENT_CONVERGENCE_BUDGET_MS,
@@ -271290,6 +271662,7 @@ __export(src_exports2, {
   SHARED_GRAPH_BODY: () => SHARED_GRAPH_BODY,
   SKILL_DESCRIPTION_MAX: () => SKILL_DESCRIPTION_MAX,
   STATUS_MARKER: () => STATUS_MARKER,
+  SkillFetchHttpError: () => SkillFetchHttpError,
   TenancyVisibilityInputError: () => TenancyVisibilityInputError,
   TraceService: () => TraceService,
   TraceStoreSink: () => TraceStoreSink,
@@ -271349,6 +271722,8 @@ __export(src_exports2, {
   chatBroadcastEnabledFromEnv: () => chatBroadcastEnabledFromEnv,
   chatDelegationEnabledFromEnv: () => chatDelegationEnabledFromEnv,
   chatDispatchScope: () => chatDispatchScope,
+  chatInterruptCauseOf: () => chatInterruptCauseOf,
+  chatInterruptItemId: () => chatInterruptItemId,
   chatItemsDoubleWriteEnabled: () => chatItemsDoubleWriteEnabled,
   chatNodeChanged: () => chatNodeChanged,
   chatRunLedgerFields: () => chatRunLedgerFields,
@@ -271539,6 +271914,7 @@ __export(src_exports2, {
   memberNameResolver: () => memberNameResolver,
   migrateDefaultCompany: () => migrateDefaultCompany,
   mirrorDirFor: () => mirrorDirFor,
+  nativeRuntimeSessionMetadata: () => nativeRuntimeSessionMetadata,
   needsClosureReport: () => needsClosureReport,
   nodeConclusionsFromSnapshot: () => nodeConclusionsFromSnapshot,
   nodeCoordinatorFactsFromSnapshot: () => nodeCoordinatorFactsFromSnapshot,
@@ -271565,6 +271941,7 @@ __export(src_exports2, {
   parseZhizengzengMarkdown: () => parseZhizengzengMarkdown,
   participatingTaskCount: () => participatingTaskCount,
   pickToolVersions: () => pickToolVersions,
+  placeholderRuntimeSessionFlag: () => placeholderRuntimeSessionFlag,
   planChatContinuation: () => planChatContinuation,
   planChatTurnRecovery: () => planChatTurnRecovery,
   planChatTurnRecoveryAcrossCompanies: () => planChatTurnRecoveryAcrossCompanies,
@@ -271601,6 +271978,7 @@ __export(src_exports2, {
   reconcileTerminalRuns: () => reconcileTerminalRuns,
   recordChatRuntimeIdentity: () => recordChatRuntimeIdentity,
   recordChatSessionExit: () => recordChatSessionExit,
+  recordChatTurnInterruption: () => recordChatTurnInterruption,
   recordDeliveredOutputHandoff: () => recordDeliveredOutputHandoff,
   recordFinalUsagePoint: () => recordFinalUsagePoint,
   recordOtlpUsageCheckpoint: () => recordOtlpUsageCheckpoint,
@@ -271645,6 +272023,7 @@ __export(src_exports2, {
   runtimeDriftBlock: () => runtimeDriftBlock,
   safeAttachmentName: () => safeAttachmentName,
   sanitizeSkillDir: () => sanitizeSkillDir,
+  scanFrontmatterEntries: () => scanFrontmatterEntries,
   scanSessionOutputs: () => scanSessionOutputs,
   scanZeroOutputBreaker: () => scanZeroOutputBreaker,
   scoreKnowledgeChunk: () => scoreKnowledgeChunk,
@@ -271741,6 +272120,7 @@ var init_src11 = __esm({
     init_recovery_plan();
     init_chat_attachment_files();
     init_live_chat();
+    init_chat_interrupt_notice();
     init_chat_recovery();
     init_chat_system_message();
     init_stable_chat_dispatch_ids();
@@ -272263,12 +272643,14 @@ var DiscussionService = class {
       decisions: []
     }));
   }
-  /** Chat title is a retryable projection of committed content, never of a model draft. */
+  /** Chat title is a retryable projection of committed content, never of a model draft.
+   * Projected once per conversation: later revisions (regeneration or page edits) keep the chat
+   * title stable so users can find the conversation again, and never overwrite a manual rename. */
   async syncDiscussionTitle(sessionId) {
     await this.store.transaction(async (tx) => {
       const discussion = await tx.get("discussion", sessionId);
       const job = await tx.get("job", sessionId);
-      if (!discussion || !job || job.value.titleSyncedRevision === discussion.revision) return;
+      if (!discussion || !job || job.value.titleSyncedRevision !== void 0) return;
       const session = await this.chat.getSession(sessionId);
       if (!session || projectScope(session) !== discussion.value.record.project_id || session.humanActorId !== discussion.value.userId || session.aiActorId !== discussion.value.agentId) return;
       if (session.title !== discussion.value.record.title) await this.chat.updateSession(sessionId, { title: discussion.value.record.title });
@@ -273401,7 +273783,9 @@ init_src4();
 
 // ../cli/src/chat-exit.ts
 var fs31 = __toESM(require("node:fs"), 1);
+init_src();
 init_src7();
+init_chat_cancel_attribution();
 function transcriptTail(ref2) {
   try {
     const stat4 = fs31.statSync(ref2);
@@ -273434,6 +273818,7 @@ var AUTH_RE2 = /\b401\b|\b403\b|unauthori[sz]ed|authenticat|oauth|invalid[_ -]?(
 var MODEL_RE = /\bmodel\b[^\n]{0,120}?\b(?:not found|not exist|does not exist|not available|not supported|unavailable|unknown)\b|\b(?:unknown|invalid|unsupported) model\b|model_not_found/i;
 var UNREACHABLE_RE2 = /不在线|socket 非 OPEN|帧未送达|失联/;
 function failureKind(reason, line2) {
+  if (line2.startsWith(SESSION_STARTUP_FAILED_PREFIX)) return "startup-failed";
   switch (reason) {
     case "auth-error":
       return "auth";
@@ -273476,6 +273861,8 @@ function failureSummary(kind, ctx) {
       return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD9\u4E2A\u8FD0\u884C\u65F6\u7528\u4E0D\u4E86\u5F53\u524D\u914D\u7F6E\u7684\u6A21\u578B\u3002\u8BF7${chatRebindHint("\u6362\u4E00\u4E2A\u53EF\u7528\u7684\u6A21\u578B")}\u540E\u518D\u53D1\u4E00\u6B21\u3002`;
     case "timeout":
       return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD9\u4E00\u8F6E\u8FD0\u884C\u8D85\u8FC7\u4E86\u65F6\u95F4\u4E0A\u9650\uFF0C\u5DF2\u88AB\u7EC8\u6B62\u3002\u53EF\u4EE5\u628A\u4EFB\u52A1\u62C6\u5C0F\u4E00\u4E9B\u518D\u53D1\u3002";
+    case "startup-failed":
+      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A${ctx.readable || SESSION_STARTUP_FAILED_PREFIX}\u3002\u8FD9\u4E00\u8F6E\u6CA1\u6709\u5F00\u59CB\u8FD0\u884C\uFF0C\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u591A\u534A\u662F\u90A3\u53F0\u8282\u70B9\u8D1F\u8F7D\u8FC7\u9AD8\uFF0C\u8BF7\u7BA1\u7406\u5458\u7ED9\u5B83\u51CF\u8D1F\u6216${chatRebindHint("\u6362\u4E00\u4E2A\u8FD0\u884C\u65F6")}\u3002`;
     case "output-limit":
       return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u6A21\u578B\u8F93\u51FA\u8D85\u51FA\u957F\u5EA6\u4E0A\u9650\uFF0C\u56DE\u590D\u88AB\u622A\u65AD\u4E86\u3002\u53EF\u4EE5\u8BA9\u5B83\u5206\u51E0\u6B21\u8F93\u51FA\uFF0C\u6216\u628A\u4EFB\u52A1\u62C6\u5C0F\u4E00\u4E9B\u518D\u53D1\u3002";
     case "unknown":
@@ -273493,8 +273880,10 @@ function buildChatExitError(info) {
     if (!detail && info.transcriptRef) detail = transcriptTail(info.transcriptRef);
   }
   let summary;
+  let cancelledBy;
   if (info.reason === "cancelled") {
-    summary = "\u5BF9\u8BDD\u5DF2\u4E2D\u65AD";
+    cancelledBy = cancelCauseFromExitMessage(info.errorMessage);
+    summary = chatCancelNote(cancelledBy);
   } else {
     const firstErrorLine = (info.errorMessage?.split("\n").map((line2) => line2.trim()).find(Boolean) ?? "").replace(INTERNAL_PREFIX_RE, "");
     const readable = firstErrorLine ? clipLine(providerMessage(firstErrorLine) ?? firstErrorLine) : "";
@@ -273508,6 +273897,7 @@ function buildChatExitError(info) {
   const chatExit = {
     ...info.reason ? { reason: info.reason } : {},
     summary,
+    ...cancelledBy ? { cancelledBy } : {},
     ...detail ? { detail: `${genericLine}
 
 ${detail}`.slice(0, 4200) } : {}
@@ -275525,7 +275915,7 @@ async function startServe(opts) {
         }
         const binding = await registryStore.getBinding(agentId);
         if (!binding || binding.status !== "active") {
-          return { ok: false, reason: "agent_runtime_required", error: `\u6267\u884C\u4EBA\u672A\u7ED1\u5B9A runtime\uFF1A${agentId}` };
+          return { ok: false, reason: "agent_runtime_required", error: `\u6267\u884C\u4EBA\u672A\u7ED1\u5B9A\u8FD0\u884C\u65F6\uFF1A${agentId}` };
         }
         return { ok: true };
       }
@@ -276354,10 +276744,10 @@ async function startServe(opts) {
   const preflightKnowledgeConnector = async (connectorSlug, actorId) => {
     const label = connectorDisplayName(connectorSlug);
     const binding = await actors.service.resolveBinding()(actorId);
-    if (!binding) throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5C1A\u672A\u7ED1\u5B9A\u53EF\u7528 Runtime\uFF1A${actorId}`);
+    if (!binding) throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5C1A\u672A\u7ED1\u5B9A\u53EF\u7528\u8FD0\u884C\u65F6\uFF1A${actorId}`);
     const node2 = hub?.connectedDaemons().find((item) => item.daemonId === binding.nodeId);
     if (!node2) throw new Error(`${label} Connector \u672A\u5C31\u7EEA\uFF1A\u77E5\u8BC6\u7BA1\u7406\u5458\u7ED1\u5B9A\u8282\u70B9 ${binding.nodeId} \u5F53\u524D\u4E0D\u5728\u7EBF`);
-    if (!node2.meta.adapters.includes(binding.runtimeKind)) throw new Error(`${label} Connector \u672A\u5C31\u7EEA\uFF1A\u8282\u70B9\u672A\u4E0A\u62A5 Runtime ${binding.runtimeKind}`);
+    if (!node2.meta.adapters.includes(binding.runtimeKind)) throw new Error(`${label} Connector \u672A\u5C31\u7EEA\uFF1A\u8282\u70B9\u672A\u4E0A\u62A5\u8FD0\u884C\u65F6 ${binding.runtimeKind}`);
     const readiness = node2.meta.connectorReadiness?.find((item) => item.slug === connectorSlug);
     if (!readiness?.ready) {
       throw new Error(`${label} Connector \u672A\u5C31\u7EEA\uFF1A${readiness?.error ?? "\u8282\u70B9\u672A\u4E0A\u62A5 wrapper/\u968F\u5305\u547D\u4EE4\u8D44\u4EA7\u81EA\u68C0\uFF0C\u8BF7\u5347\u7EA7\u5E76\u91CD\u542F node-daemon"}`);
@@ -276370,10 +276760,10 @@ async function startServe(opts) {
       throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5FC5\u987B\u662F\u5DF2\u6FC0\u6D3B\u7684 AI \u5458\u5DE5\uFF1A${actorId}`);
     }
     const binding = await actors.service.resolveBinding()(actorId);
-    if (!binding) throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5C1A\u672A\u7ED1\u5B9A\u53EF\u7528 Runtime\uFF1A${actorId}`);
+    if (!binding) throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u5C1A\u672A\u7ED1\u5B9A\u53EF\u7528\u8FD0\u884C\u65F6\uFF1A${actorId}`);
     const node2 = hub?.connectedDaemons().find((item) => item.daemonId === binding.nodeId);
     if (!node2) throw new Error(`\u77E5\u8BC6\u7BA1\u7406\u5458\u7ED1\u5B9A\u8282\u70B9 ${binding.nodeId} \u5F53\u524D\u4E0D\u5728\u7EBF`);
-    if (!node2.meta.adapters.includes(binding.runtimeKind)) throw new Error(`\u8282\u70B9\u672A\u4E0A\u62A5 Runtime ${binding.runtimeKind}`);
+    if (!node2.meta.adapters.includes(binding.runtimeKind)) throw new Error(`\u8282\u70B9\u672A\u4E0A\u62A5\u8FD0\u884C\u65F6 ${binding.runtimeKind}`);
     if (!chatRemoteAdapter) throw new Error("node-gateway \u5C1A\u672A\u5C31\u7EEA");
   };
   const knowledgeProvisioner = new KnowledgeCuratorProvisioner(actors.service, (connectorSlug, skillId) => createConnectorBySlug(connectorSlug)?.embeddedSkills?.find((skill) => skill.id === skillId) ?? null);
@@ -276843,6 +277233,12 @@ async function startServe(opts) {
           const [roster, bindings] = await Promise.all([service.listActors({ kind: "agent" }), service.listBindings()]);
           return { actors: roster, bindings };
         },
+        // 缺陷 0124：删掉运行时后，绑在它上面的 Agent 不该继续挂在一条已经不存在的运行时上。
+        // 与 actorBindings 同一条解析路径（按请求公司拿这家的员工域），写侧落审计。
+        releaseBindingsOnRuntime: async (companyId, target, by) => {
+          const { service } = await actors.resolveCtx(companyId ?? defaultCompanyId);
+          return service.releaseBindingsOnRuntime(target, by);
+        },
         nodeTokens,
         enrollTokens,
         nodeStore,
@@ -277736,6 +278132,11 @@ async function startServe(opts) {
           ...chatRunLedgerFields({ executionProfile, chatSessionId, chatTurnId }),
           metadata: {
             runtimeSessionId,
+            /* Bug 0102 / 0171：这个会话号是平台现编的占位 id 吗（首轮手里没有 runtime 的号）。
+               收尾时据它决定要不要换成 runtime 报回来的原生号——**正常收尾路与恢复路读的是同一位**：
+               恢复路由另一个进程收尾，`resumeRuntimeSession` 这个闭包变量随旧 serve 一起没了，
+               判据只能落在持久事实上（见 `placeholderRuntimeSessionFlag`）。 */
+            ...placeholderRuntimeSessionFlag(!resumeRuntimeSession),
             nodeId: target.nodeId,
             runtimeKind: target.runtimeKind,
             companyId: runCompanyId,
@@ -278001,7 +278402,15 @@ async function startServe(opts) {
           ...requiredConnectors.length > 0 ? { requiredConnectorSlugs: requiredConnectors } : {}
         });
         const chatJobKey = `chat::${artifactId}`;
-        chatLiveSessions.set(chatJobKey, { artifactId, sessionId: traceRunId, dispatchId: handle.id, kill: () => handle.kill() });
+        chatLiveSessions.set(chatJobKey, {
+          artifactId,
+          sessionId: traceRunId,
+          dispatchId: handle.id,
+          kill: () => handle.kill(),
+          ...chatSessionId ? { markCancelCause: (cause) => {
+            liveChat.markCancelCause(chatSessionId, cause);
+          } } : {}
+        });
         chatRunByDispatch.set(handle.id, { runId: traceRunId, companyId: runCompanyId });
         enqueueTrace(async () => {
           const ts3 = await traceStoreFor(runCompanyId);
@@ -278067,12 +278476,9 @@ async function startServe(opts) {
               const effectiveModel = info.model ?? chatModel ?? null;
               const modelSource = info.model ? "runtime" : chatModelSource;
               let nativeSessionMetadata;
-              if (!resumeRuntimeSession && info.runtimeSessionId && info.runtimeSessionId !== runtimeSessionId) {
+              if (info.runtimeSessionId && info.runtimeSessionId !== runtimeSessionId) {
                 const run = await (await traceStoreFor(runCompanyId)).getRun(traceRunId).catch(() => null);
-                const base = run?.metadata && typeof run.metadata === "object" && !Array.isArray(run.metadata) ? run.metadata : void 0;
-                if (base?.["runtimeSessionId"] === runtimeSessionId) {
-                  nativeSessionMetadata = { ...base, runtimeSessionId: info.runtimeSessionId };
-                }
+                nativeSessionMetadata = nativeRuntimeSessionMetadata(run?.metadata, info.runtimeSessionId);
               }
               await traceAppender.update({
                 status: classifySessionExitStatus(info),
@@ -278226,6 +278632,18 @@ async function startServe(opts) {
     // getNode 无 status 过滤，返回 deleted 行；查询失败时 verifyClient 侧默认拒绝（绝不放行）。
     getNodeStatus: async (nodeId) => (await nodeStore.getNode(nodeId))?.status ?? null,
     throttle: handshakeThrottleOpts,
+    /* 驱逐留痕（ADR 0600 扩档）：会话自尽后报回来的只是个光秃秃的 `cancelled`，
+       「这台机器上的这个会话被换下了」只有这一帧知道。chat 轮据此写「执行这一轮的机器断开了连接」。 */
+    onSessionEvicted: (dispatchId) => {
+      for (const c of chatLiveSessions.values()) {
+        if (c.dispatchId !== dispatchId) continue;
+        try {
+          c.markCancelCause?.("node-disconnected");
+        } catch {
+        }
+        break;
+      }
+    },
     // 改动 2/3 观测：deleted / unknown / status-error / rate-limited / invalid-token 分类可见，供事后归因。
     onHandshakeRejected: (rej) => {
       console.warn(
@@ -278551,10 +278969,12 @@ async function startServe(opts) {
     storesFor: async (companyId) => {
       const turns = await chatTurnsFor(companyId);
       const messages = await chatStoreFor(companyId);
+      const items = await chatItemsFor(companyId).catch(() => void 0);
       return {
         turns,
         ...assistantRowRecovery(messages, {
-          outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId)
+          outputsPartFor: (sid) => outputsPartProvider(sessionOutputsScan, sid, companyId),
+          ...items ? { itemsFor: () => items } : {}
         })
       };
     },
@@ -279857,7 +280277,7 @@ async function startServe(opts) {
     const quote = errorMessage2?.trim().slice(0, 300);
     if (reason === "rate-limit") {
       const hint = extractResetHint(errorMessage2);
-      return `**\u5B83\u7684\u989D\u5EA6\u88AB\u6253\u6EE1\u4E86**${hint ? `\uFF08runtime \u539F\u8BDD\uFF1A\`${hint}\`\uFF09` : ""}\u2014\u2014\u989D\u5EA6\u5230\u70B9\u4F1A\u81EA\u5DF1\u6062\u590D\uFF0C**\u4E0D\u9700\u8981\u4F60\u4FEE\u4EFB\u4F55\u4E1C\u897F**\uFF1B\u4E0D\u60F3\u7B49\u5C31\u7ED9\u8FD9\u4E2A\u5458\u5DE5\u6362\u4E2A runtime\u3002` + (quote ? `
+      return `**\u5B83\u7684\u989D\u5EA6\u88AB\u6253\u6EE1\u4E86**${hint ? `\uFF08\u8FD0\u884C\u65F6\u539F\u8BDD\uFF1A\`${hint}\`\uFF09` : ""}\u2014\u2014\u989D\u5EA6\u5230\u70B9\u4F1A\u81EA\u5DF1\u6062\u590D\uFF0C**\u4E0D\u9700\u8981\u4F60\u4FEE\u4EFB\u4F55\u4E1C\u897F**\uFF1B\u4E0D\u60F3\u7B49\u5C31\u7ED9\u8FD9\u4E2A\u5458\u5DE5\u6362\u4E2A\u8FD0\u884C\u65F6\u3002` + (quote ? `
 > ${quote}` : "");
     }
     const label = {
@@ -280226,7 +280646,7 @@ ${nodeFault}` : "");
         if (horizon === "short" && s2.sinceMs < quotaStarvationMs * 2) continue;
         const hours = Math.round(s2.sinceMs / 36e5);
         const hint = extractResetHint(s2.lastErrorMessage);
-        const when = hint ? `runtime \u539F\u8BDD\uFF1A\`${hint}\`` : "runtime \u6CA1\u8BF4\u4EC0\u4E48\u65F6\u5019\u6062\u590D";
+        const when = hint ? `\u8FD0\u884C\u65F6\u539F\u8BDD\uFF1A\`${hint}\`` : "\u8FD0\u884C\u65F6\u6CA1\u8BF4\u4EC0\u4E48\u65F6\u5019\u6062\u590D";
         const longNote = horizon === "long" ? "**\u770B\u65F6\u95F4\u662F\u8DE8\u5929\u7684\u989D\u5EA6\u7A97\u53E3\uFF0C\u7B49\u4E0D\u8D77**\u2014\u2014" : "";
         await escalateHold(
           s2.artifactId,
@@ -280471,7 +280891,13 @@ ${nodeFault}` : "");
           liveness: (sessionId) => probe.liveness(sessionId),
           kill: (jobKey) => {
             const c = chatLiveSessions.get(jobKey);
-            if (c) return Promise.resolve(c.kill()).then(() => true).catch(() => false);
+            if (c) {
+              try {
+                c.markCancelCause?.("no-output");
+              } catch {
+              }
+              return Promise.resolve(c.kill()).then(() => true).catch(() => false);
+            }
             return dispatcherByJob.get(jobKey)?.killSession(jobKey) ?? Promise.resolve(false);
           },
           // trace 写不进去的 run：冻结的事件钟是"观测降级"不是"真静默"，按"信息不足→不判"跳过、交 wallClock
@@ -280501,6 +280927,7 @@ ${nodeFault}` : "");
         for (const d of hub?.connectedDaemons() ?? []) {
           for (const a of d.meta.activeSessions ?? []) if (a.jobArtifactId) ids2.add(a.jobArtifactId);
         }
+        for (const a of hub?.liveSessionArtifactIds() ?? []) ids2.add(a);
         return ids2;
       };
       const apiSilenceMs = opts.apiSilenceMs ?? 6e5;
@@ -280940,6 +281367,10 @@ function log2(tag, msg, extra) {
 var import_node_child_process18 = require("node:child_process");
 var fs35 = __toESM(require("node:fs"), 1);
 var path29 = __toESM(require("node:path"), 1);
+var SESSION_LOCK_WAIT_MS = 1e4;
+var POLL_MS = 20;
+var PROBE_TIMES = 5;
+var PROBE_GAP_MS = 100;
 var flockAvailable = null;
 function hasFlock() {
   if (flockAvailable !== null) return flockAvailable;
@@ -280952,48 +281383,88 @@ function hasFlock() {
   }
   return flockAvailable;
 }
-function acquireSessionLock(lockPath) {
-  if (!hasFlock()) return null;
+function sleepSync(ms) {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+function acquireSessionLockAttempt(lockPath, opts = {}) {
+  if (!hasFlock()) return { outcome: "no-flock" };
+  const waitMs = opts.waitMs ?? SESSION_LOCK_WAIT_MS;
   fs35.mkdirSync(path29.dirname(lockPath), { recursive: true });
   const readyFile = `${lockPath}.ready.${process.pid}`;
-  try {
-    fs35.unlinkSync(readyFile);
-  } catch {
+  const heldFile = `${lockPath}.held.${process.pid}`;
+  for (const f2 of [readyFile, heldFile]) {
+    try {
+      fs35.unlinkSync(f2);
+    } catch {
+    }
   }
-  const child = (0, import_node_child_process18.spawn)("flock", ["-n", lockPath, "-c", `printf ok > '${readyFile}'; exec cat`], {
-    stdio: ["pipe", "ignore", "ignore"],
-    detached: true
-  });
-  const deadline = Date.now() + 2e3;
+  const child = (0, import_node_child_process18.spawn)(
+    "sh",
+    ["-c", 'flock -n "$1" -c "printf ok > \\"$2\\"; exec cat" || printf held > "$3"', "sh", lockPath, readyFile, heldFile],
+    { stdio: ["pipe", "ignore", "ignore"], detached: true }
+  );
+  const startedAt = Date.now();
+  const deadline = startedAt + waitMs;
   let ready = false;
-  while (Date.now() < deadline) {
+  let held = false;
+  for (; ; ) {
     if (fs35.existsSync(readyFile)) {
       ready = true;
       break;
     }
-    (0, import_node_child_process18.spawnSync)("sleep", ["0.02"], { stdio: "ignore" });
+    if (fs35.existsSync(heldFile)) {
+      held = true;
+      break;
+    }
+    if (Date.now() >= deadline) break;
+    sleepSync(POLL_MS);
   }
-  try {
-    fs35.unlinkSync(readyFile);
-  } catch {
+  for (const f2 of [readyFile, heldFile]) {
+    try {
+      fs35.unlinkSync(f2);
+    } catch {
+    }
   }
-  if (!ready) {
+  const killChild = () => {
+    try {
+      if (child.pid) process.kill(-child.pid, "SIGKILL");
+    } catch {
+    }
     try {
       child.kill("SIGKILL");
     } catch {
     }
-    return null;
+  };
+  if (held) {
+    killChild();
+    return { outcome: "held" };
   }
-  return {
-    path: lockPath,
-    release() {
-      try {
-        if (child.pid) process.kill(-child.pid, "SIGKILL");
-      } catch {
+  if (!ready) {
+    killChild();
+    let heldEverywhere = true;
+    for (let i = 0; i < PROBE_TIMES; i += 1) {
+      if (!isSessionLocked(lockPath)) {
+        heldEverywhere = false;
+        break;
       }
-      try {
-        child.stdin?.destroy();
-      } catch {
+      if (i + 1 < PROBE_TIMES) sleepSync(PROBE_GAP_MS);
+    }
+    if (heldEverywhere) return { outcome: "held" };
+    return { outcome: "undetermined", waitedMs: Date.now() - startedAt };
+  }
+  return {
+    outcome: "acquired",
+    lock: {
+      path: lockPath,
+      release() {
+        try {
+          if (child.pid) process.kill(-child.pid, "SIGKILL");
+        } catch {
+        }
+        try {
+          child.stdin?.destroy();
+        } catch {
+        }
       }
     }
   };
@@ -281322,14 +281793,21 @@ async function runSessionProcess(specFile, adapter) {
   process.env["OASIS_BIND_RUNTIME_PDEATHSIG"] = "1";
   const spec = await readSpec(specFile);
   const { dispatchId, job, auth, sessionDir } = spec;
-  const lock = acquireSessionLock(path31.join(sessionDir, "lock"));
-  if (!lock && hasFlock()) {
+  const attempt = acquireSessionLockAttempt(path31.join(sessionDir, "lock"));
+  if (attempt.outcome === "held") {
     log2("[session]", `${dispatchId}: \u4F1A\u8BDD\u9501\u5DF2\u88AB\u5360\u7528\uFF0C\u672C\u8FDB\u7A0B\u9000\u51FA\uFF08\u9632\u53CC\u8DD1\uFF09`);
     return;
   }
-  if (!hasFlock()) {
+  if (attempt.outcome === "no-flock") {
     log2("[session]", `${dispatchId}: \u672C\u673A\u65E0 flock(1)\uFF0C\u5B64\u513F\u5DE1\u68C0\u90A3\u9053\u9632\u7EBF\u4E0D\u53EF\u7528\uFF08\u53EA\u5269 evict + watchdog\uFF09`);
   }
+  const lock = attempt.outcome === "acquired" ? attempt.lock : null;
+  if (attempt.outcome === "undetermined") {
+    const detail = `\u4F1A\u8BDD\u9501\u5728 ${Math.round(attempt.waitedMs / 1e3)} \u79D2\u5185\u65E2\u6CA1\u62FF\u5230\u3001\u4E5F\u5224\u4E0D\u51FA\u88AB\u8C01\u5360\u7740\uFF08\u8282\u70B9\u8D1F\u8F7D\u8FC7\u9AD8\uFF0C\u7A97\u53E3 ${Math.round(SESSION_LOCK_WAIT_MS / 1e3)}s\uFF09`;
+    log2("[session]", `${dispatchId}: ${detail} \u2192 \u4E0D\u5F00\u5DE5\uFF0C\u628A\u5931\u8D25\u62A5\u7ED9\u670D\u52A1\u7AEF`);
+    await new SessionProcessState(spec, adapter, null).reportStartupFailure(`${SESSION_STARTUP_FAILED_PREFIX}${detail}`);
+    return;
+  }
   const state = new SessionProcessState(spec, adapter, lock);
   await state.run();
 }
@@ -281438,6 +281916,27 @@ var SessionProcessState = class {
     await done;
     this.teardown();
   }
+  /**
+   * 开工前就退出：连上服务端、把 `session_exited` 报出去、等一下 ack，然后收摊（Bug #0184 第 2 条）。
+   *
+   * 它和 {@link run} 的区别只有「不起 runtime」：帧走同一条必达路径（带 seq、进 outbox、重连重放），
+   * 所以新节点 + 老服务端也不会出错——老服务端收到的就是一条普通的 `session_exited`。
+   *
+   * `reason` 用既有的 `error` 而不是新增枚举值：退出归因是 contract 上的封闭值域，
+   * 加一个值会让**老服务端**读到不认识的 reason；真实原因放 `errorMessage`（那是自由文本，
+   * 两侧都已按"给人看的一句话"对待）。
+   */
+  async reportStartupFailure(errorMessage2) {
+    this.connect();
+    this.sendKeyFrame({
+      type: "session_exited",
+      dispatchId: this.spec.dispatchId,
+      sessionId: this.spec.dispatchId,
+      info: { code: null, reason: "error", errorMessage: errorMessage2 }
+    });
+    await this.waitExitAck();
+    this.teardown();
+  }
   /** 会话已退出：等 exit 帧的 ack（等不到也走，服务端有时钟扫描兜底），然后放行主流程。 */
   async afterSessionExit() {
     await this.waitExitAck();
@@ -285224,8 +285723,9 @@ function safeFileName(raw, fallback) {
   const cleaned = displayName2(raw).replace(/[\\/:*?"<>|-]+/g, "_").replace(/\s+/g, "_").replace(/^\.+/, "").replace(/_+/g, "_").replace(/^_|_$/g, "");
   return cleaned || fallback;
 }
-function resolveProjectFileOutPath(rawOut, fileName) {
-  const fallback = `${PROJECT_FILES_DIR}/${safeFileName(fileName, "file")}`;
+function resolveProjectFileOutPath(rawOut, fileName, contentType) {
+  const ext = sourceExtension(fileName, contentType);
+  const fallback = keepExtension(`${PROJECT_FILES_DIR}/${safeFileName(fileName, "file")}`, ext);
   if (rawOut === void 0 || rawOut.trim() === "") return fallback;
   const raw = rawOut.trim();
   if (path35.isAbsolute(raw) || /^[a-zA-Z]:[\\/]/.test(raw)) {
@@ -285244,7 +285744,38 @@ function resolveProjectFileOutPath(rawOut, fileName) {
   if (segments.length < 2 || segments[0] !== PROJECT_FILES_DIR) {
     throw new Error(`--out \u5FC5\u987B\u843D\u5728 ${PROJECT_FILES_DIR}/ \u4E0B\uFF08\u4F8B\uFF1A--out ${PROJECT_FILES_DIR}/${safeFileName(fileName, "file")}\uFF09`);
   }
-  return segments.join("/");
+  return keepExtension(segments.join("/"), ext);
+}
+var EXT_BY_MIME = {
+  "text/markdown": ".md",
+  "text/x-markdown": ".md",
+  "text/plain": ".txt",
+  "text/html": ".html",
+  "text/csv": ".csv",
+  "application/json": ".json",
+  "application/pdf": ".pdf",
+  "image/png": ".png",
+  "image/jpeg": ".jpg",
+  "image/gif": ".gif",
+  "image/webp": ".webp",
+  "image/svg+xml": ".svg",
+  "application/zip": ".zip"
+};
+function realExtension(name) {
+  const ext = path35.posix.extname(name);
+  return /^\.[A-Za-z0-9]{1,8}$/.test(ext) ? ext : "";
+}
+function sourceExtension(fileName, contentType) {
+  const own3 = realExtension(displayName2(fileName));
+  if (own3) return own3;
+  const mime = (contentType ?? "").split(";")[0].trim().toLowerCase();
+  return EXT_BY_MIME[mime] ?? "";
+}
+function keepExtension(rel, ext) {
+  if (!ext) return rel;
+  const current = realExtension(rel);
+  if (current.toLowerCase() === ext.toLowerCase()) return rel;
+  return `${current ? rel.slice(0, rel.length - current.length) : rel}${ext}`;
 }
 function isTextLike(name, contentType) {
   if (contentType) {
@@ -285532,7 +286063,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.58" ? "2.2.58" : "dev";
+var CLI_VERSION = "2.2.60" ? "2.2.60" : "dev";
 function apiHeaders(token, company) {
   const headers = {
     authorization: `Bearer ${token}`,
@@ -286953,7 +287484,7 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         );
         const row = findByBlobRef(view.items ?? [], ref2);
         const name = displayName2(row.name);
-        const rel = resolveProjectFileOutPath(flags.get("out"), name);
+        const rel = resolveProjectFileOutPath(flags.get("out"), name, row.content_type);
         const bytes2 = await api.bytes(`/api/blobs/${encodeURIComponent((row.blob_ref ?? "").replace(/^blob:/, ""))}`);
         const abs = path36.resolve(process.cwd(), rel);
         fs41.mkdirSync(path36.dirname(abs), { recursive: true });
@@ -289223,7 +289754,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.58" : "dev";
+var PKG_VERSION = true ? "2.2.60" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;