npm - oasis_test_v2 - Versions diffs - 2.2.68 → 2.2.70 - Mend

oasis_test_v2 2.2.68 → 2.2.70

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/index.js +1763 -545
package/package.json +2 -2

package/dist/index.js CHANGED Viewed

@@ -444,13 +444,14 @@ function isUnread(eventAt, marker) {
 function isChatSessionUnread(session, marker) {
   return session.lastTurnQuality !== void 0 && isUnread(session.touchedAt, marker);
 }
-var chatScope, letterScope, INBOX_BASELINE_SCOPE;
+var chatScope, letterScope, INBOX_BASELINE_SCOPE, INBOX_READ_ALL_SCOPE;
 var init_inbox_read = __esm({
   "../contract/src/inbox-read.ts"() {
     "use strict";
     chatScope = (sessionId) => `chat:${sessionId}`;
     letterScope = (annotationId) => `letter:${annotationId}`;
     INBOX_BASELINE_SCOPE = "inbox-baseline";
+    INBOX_READ_ALL_SCOPE = "inbox-read-all";
   }
 });
@@ -1464,6 +1465,22 @@ var init_chat = __esm({
 });
 // ../contract/src/session-outputs.ts
+function sessionOutputFilesOfParts(parts) {
+  if (!Array.isArray(parts)) return [];
+  const out = [];
+  for (const raw of parts) {
+    if (!raw || typeof raw !== "object") continue;
+    const p2 = raw;
+    if (p2.type !== "outputs" || !Array.isArray(p2.outputs)) continue;
+    for (const f2 of p2.outputs) {
+      if (!f2 || typeof f2 !== "object") continue;
+      const file = f2;
+      if (typeof file.path !== "string" || !file.path) continue;
+      out.push({ path: file.path, name: typeof file.name === "string" && file.name ? file.name : file.path });
+    }
+  }
+  return out;
+}
 function diffSessionOutputs(scanned, previous3) {
   const prev = previous3 ?? {};
   const changed = [];
@@ -1484,11 +1501,13 @@ function basenameOf(path44) {
   const i = path44.lastIndexOf("/");
   return i >= 0 ? path44.slice(i + 1) : path44;
 }
-var SESSION_OUTPUTS_DIR;
+var SESSION_OUTPUTS_DIR, SESSION_OUTPUTS_ITEM_CODE, sessionOutputsItemId;
 var init_session_outputs = __esm({
   "../contract/src/session-outputs.ts"() {
     "use strict";
     SESSION_OUTPUTS_DIR = "outputs";
+    SESSION_OUTPUTS_ITEM_CODE = "session_outputs";
+    sessionOutputsItemId = (messageId) => `oasis-outputs:${messageId}`;
   }
 });
@@ -1676,6 +1695,24 @@ var init_chat_turn = __esm({
 });
 // ../contract/src/delegation.ts
+function hasDelegationDelivery(ev) {
+  if (!ev) return false;
+  return (ev.movedFiles ?? 0) > 0 || (ev.unchangedFiles ?? 0) > 0 || (ev.artifacts ?? 0) > 0 || Boolean(ev.roundText?.trim());
+}
+function delegationEnding(record9, evidence) {
+  if (record9.state === "done") return "done";
+  if (record9.state !== "failed") return "done";
+  if (record9.failureKind !== "timeout") return "failed";
+  return hasDelegationDelivery(evidence) ? "timeout-delivered" : "timeout-empty";
+}
+function delegationEndingOfRecord(record9, artifacts = []) {
+  const last = record9.roundSummaries[record9.roundSummaries.length - 1];
+  const lastRound = last?.round;
+  return delegationEnding(record9, {
+    ...last?.text ? { roundText: last.text } : {},
+    artifacts: lastRound === void 0 ? 0 : artifacts.filter((a) => a.round === lastRound).length
+  });
+}
 function trimRoundSummariesForReturn(summaries, recentRounds = DELEGATION_RETURN_RECENT_ROUNDS) {
   const keep = Math.max(0, recentRounds);
   const cut = Math.max(0, summaries.length - keep);
@@ -2045,6 +2082,94 @@ var init_chunked_message = __esm({
   }
 });
+// ../contract/src/command-card-copy.ts
+function stripInternalIds(text7, placeholder = "\u2026") {
+  if (!text7) return text7;
+  let out = text7;
+  for (const re of [PREFIXED_ID_RE, UUID_RE, SHORT_ID_RE]) {
+    out = out.replace(re, placeholder);
+  }
+  return out.replace(new RegExp(`[ \\t]+${placeholder}`, "gu"), placeholder);
+}
+function firstSentenceSummary(text7, max = CARD_SUMMARY_MAX) {
+  const raw = (text7 ?? "").trim();
+  if (!raw) return "";
+  const cut = raw.split(/[。！？\n]|——/u)[0].trim() || raw.trim();
+  const clean = stripInternalIds(cut).trim();
+  const cps = [...clean];
+  return cps.length > max ? `${cps.slice(0, max).join("")}\u2026` : clean;
+}
+function nodePhrase(args, refs) {
+  const id = argStr(args, "artifactId");
+  const title = id ? refs.nodeTitle?.(id)?.trim() : void 0;
+  return title ? `\u300A${title}\u300B` : NEUTRAL_NODE;
+}
+function targetPhrase(naming, neutral) {
+  const summary = firstSentenceSummary(naming?.summary);
+  const nodeTitle = naming?.nodeTitle?.trim();
+  if (summary) {
+    return { phrase: nodeTitle && !summary.includes(nodeTitle) ? `\u300A${nodeTitle}\u300B\u2014\u2014${summary}` : summary, named: true };
+  }
+  if (nodeTitle) return { phrase: `\u300A${nodeTitle}\u300B\u4E0A\u7684${neutral}`, named: true };
+  return { phrase: neutral, named: false };
+}
+function escalationPhraseOf(refs, escalationId) {
+  return targetPhrase(escalationId ? refs.escalation?.(escalationId) : void 0, NEUTRAL_ESCALATION);
+}
+function gapPhraseOf(refs, gapId) {
+  return targetPhrase(gapId ? refs.gap?.(gapId) : void 0, NEUTRAL_GAP);
+}
+function actionPhrase(verb, noun, target, neutralVerb = verb) {
+  return target.named ? `${verb}${noun}\uFF1A${target.phrase}` : `${neutralVerb}${target.phrase}`;
+}
+function describeCommandForHuman(command2, args, refs = {}) {
+  const reason = argStr(args, "reason");
+  const reasonTail = reason ? `\uFF08\u7406\u7531\uFF1A${stripInternalIds(reason)}\uFF09` : "";
+  switch (command2) {
+    case "forceConclude":
+      return `\u5F3A\u5236\u6536\u53E3${nodePhrase(args, refs)}${reasonTail}\u2014\u2014\u7ED5\u8FC7\u8BC4\u5BA1\u76F4\u63A5\u76D6\u91CC\u7A0B\u7891\u3002`;
+    case "promote":
+      return `\u628A${nodePhrase(args, refs)}\u8F6C\u4E3A\u957F\u671F\u4FDD\u7559\u7684\u8282\u70B9\uFF08\u4E0D\u518D\u968F\u4EFB\u52A1\u7ED3\u675F\u56DE\u6536\uFF09\u3002`;
+    // continueBatch（续跑额度卡）**故意不在这里**：它的文案由引擎写好放在 `continuationBudget.request.summary`
+    // 里，本来就是「《节点名》尚未完成，已达到自动派发上限。累计已运行 N 轮…」这种名称式写法，没有 id。
+    // 重写一遍只会让同一句话有两个事实源，交给 {@link commandCardDisplayLabel} 的兜底清洗即可。
+    case "resolveEscalation": {
+      const escalation = escalationPhraseOf(refs, argStr(args, "escalationId"));
+      const gapId = argStr(args, "gapId");
+      if (!gapId) return `${actionPhrase("\u5173\u95ED", "\u6C42\u52A9", escalation)}${reasonTail}`;
+      return [
+        reason ? `\u91C7\u7528\u65B9\u6848\uFF1A${stripInternalIds(reason)}` : "\u786E\u8BA4\u6062\u590D\u65B9\u6848",
+        actionPhrase("\u89E3\u51B3", "\u7F3A\u53E3", gapPhraseOf(refs, gapId)),
+        actionPhrase("\u5173\u95ED\u5173\u8054", "\u6C42\u52A9", escalation, "\u5173\u95ED\u5173\u8054\u7684"),
+        "\u7EE7\u7EED\u6267\u884C\uFF1A\u662F\uFF08\u4ECD\u987B\u6EE1\u8DB3\u5176\u4ED6\u963B\u585E\u6761\u4EF6\uFF09"
+      ].join("\uFF1B");
+    }
+    default:
+      return void 0;
+  }
+}
+function commandCardDisplayLabel(command2, args, storedLabel, refs = {}) {
+  const described = command2 ? describeCommandForHuman(command2, args ?? {}, refs) : void 0;
+  return described ?? stripInternalIds(storedLabel ?? "");
+}
+var PREFIXED_ID_RE, UUID_RE, SHORT_ID_RE, CARD_SUMMARY_MAX, NEUTRAL_NODE, NEUTRAL_ESCALATION, NEUTRAL_GAP, argStr;
+var init_command_card_copy = __esm({
+  "../contract/src/command-card-copy.ts"() {
+    "use strict";
+    PREFIXED_ID_RE = /(?:artifact|esc|gap|wk|ws|actor|draft|issue|review|rev|work|node|company|chat|sess|int|blob|run|continuation)[:：][A-Za-z0-9][A-Za-z0-9:._#-]*/gu;
+    UUID_RE = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/giu;
+    SHORT_ID_RE = /\b(?=[0-9a-f-]*[0-9])(?=[0-9a-f-]*[a-f])[0-9a-f]{8,}(?:-[0-9a-f]{4,})*\b/giu;
+    CARD_SUMMARY_MAX = 48;
+    NEUTRAL_NODE = "\u8FD9\u4E00\u6B65";
+    NEUTRAL_ESCALATION = "\u8FD9\u6761\u6C42\u52A9";
+    NEUTRAL_GAP = "\u8FD9\u4E2A\u7F3A\u53E3";
+    argStr = (args, key2) => {
+      const v2 = args[key2];
+      return typeof v2 === "string" && v2.trim() ? v2.trim() : void 0;
+    };
+  }
+});
 // ../contract/src/index.ts
 var init_src = __esm({
   "../contract/src/index.ts"() {
@@ -2107,6 +2232,7 @@ var init_src = __esm({
     init_chat_turn();
     init_delegation();
     init_delegation();
+    init_delegation();
     init_delegation_prompts();
     init_knowledge();
     init_knowledge_governance();
@@ -2114,6 +2240,7 @@ var init_src = __esm({
     init_file_preview();
     init_file_limits();
     init_chunked_message();
+    init_command_card_copy();
   }
 });
@@ -2263,6 +2390,21 @@ function sessionRuntimeOverride(session) {
   if (!nodeId || !runtimeKind) return null;
   return { nodeId, runtimeKind };
 }
+function chatSessionInitialRuntime(input) {
+  const trimmed = (v2) => typeof v2 === "string" && v2.trim() ? v2.trim() : null;
+  const binding = input.binding?.nodeId && input.binding?.runtimeKind ? { nodeId: input.binding.nodeId, runtimeKind: input.binding.runtimeKind } : null;
+  const requestedOverride = input.requested?.override;
+  const picked = requestedOverride?.nodeId && requestedOverride?.runtimeKind ? { nodeId: requestedOverride.nodeId, runtimeKind: requestedOverride.runtimeKind } : null;
+  const target = picked ?? binding;
+  const followsAgentTarget = !picked || !!binding && picked.nodeId === binding.nodeId && picked.runtimeKind === binding.runtimeKind;
+  const requestedModel = input.requested?.model;
+  const model = requestedModel !== void 0 ? trimmed(requestedModel) : followsAgentTarget ? trimmed(input.agentModel) : null;
+  return {
+    overrideNodeId: target?.nodeId ?? null,
+    overrideRuntimeKind: target?.runtimeKind ?? null,
+    model
+  };
+}
 function sessionRuntimeOverrideChangesTarget(session, binding) {
   const override = sessionRuntimeOverride(session);
   if (!override) return false;
@@ -2322,7 +2464,7 @@ var init_session_runtime_target = __esm({
         this.name = "SessionRuntimeOverrideError";
       }
     };
-    CLEAR_SESSION_RUNTIME_HINT = "\u6E05\u9664\u8FD9\u6761\u4F1A\u8BDD\u7684\u8FD0\u884C\u65F6\u9009\u62E9\u5373\u53EF\u7EE7\u7EED\uFF08\u4F1A\u56DE\u5230\u8FD9\u4F4D Agent \u7684\u9ED8\u8BA4\u7ED1\u5B9A\uFF09\u3002";
+    CLEAR_SESSION_RUNTIME_HINT = "\u5728\u8FD0\u884C\u65F6\u9009\u62E9\u91CC\u70B9\u300C\u6062\u590D\u4E3A\u5458\u5DE5\u9ED8\u8BA4\u8FD0\u884C\u914D\u7F6E\u300D\u5373\u53EF\u7EE7\u7EED\uFF08\u4F1A\u628A\u8FD9\u4F4D Agent \u6B64\u523B\u7684\u9ED8\u8BA4\u914D\u7F6E\u6284\u8FDB\u8FD9\u6761\u4F1A\u8BDD\uFF09\u3002";
   }
 });
@@ -3904,9 +4046,57 @@ function newClaudeUsageAcc() {
     costUsd: null,
     messageUsageById: /* @__PURE__ */ new Map(),
     finalUsage: null,
+    restored: null,
     saw: false
   };
 }
+function findClaudeSessionFile(configDir, cwd, runtimeSessionId) {
+  const root = path7.join(configDir, "projects");
+  const name = `${runtimeSessionId}.jsonl`;
+  const direct = path7.join(root, cwd.replace(/[^a-zA-Z0-9]/g, "-"), name);
+  if (fs7.existsSync(direct)) return direct;
+  try {
+    for (const slug6 of fs7.readdirSync(root)) {
+      const candidate = path7.join(root, slug6, name);
+      if (fs7.existsSync(candidate)) return candidate;
+    }
+  } catch {
+  }
+  return void 0;
+}
+function readClaudeRestoredCost(sessionFile) {
+  try {
+    const stat4 = fs7.statSync(sessionFile);
+    if (!stat4.isFile() || stat4.size === 0) return null;
+    const length = Math.min(stat4.size, RESTORED_COST_TAIL_BYTES);
+    const buf = Buffer.alloc(length);
+    const fd = fs7.openSync(sessionFile, "r");
+    try {
+      fs7.readSync(fd, buf, 0, length, stat4.size - length);
+    } finally {
+      fs7.closeSync(fd);
+    }
+    const lines = buf.toString("utf8").split("\n");
+    for (let i = lines.length - 1; i >= 0; i--) {
+      const line2 = lines[i];
+      if (!line2.includes('"cost-state"')) continue;
+      let parsed;
+      try {
+        parsed = JSON.parse(line2);
+      } catch {
+        continue;
+      }
+      if (parsed["type"] !== "cost-state") continue;
+      const cost = parsed["totalCostUSD"];
+      return {
+        usage: parseModelUsage(parsed["modelUsage"]),
+        costUsd: typeof cost === "number" && Number.isFinite(cost) && cost >= 0 ? cost : null
+      };
+    }
+  } catch {
+  }
+  return null;
+}
 function usageNum(v2) {
   return typeof v2 === "number" && Number.isFinite(v2) && v2 >= 0 ? v2 : void 0;
 }
@@ -3980,14 +4170,34 @@ function accumulateClaudeUsage(acc, p2) {
       acc.saw = true;
     }
   } else if (type === "result") {
-    acc.finalUsage = mergeFinalUsage(parseModelUsage(p2["modelUsage"]), parseResultUsage(p2["usage"]));
     const c = p2["total_cost_usd"];
-    if (typeof c === "number" && Number.isFinite(c)) {
-      acc.costUsd = c;
+    const cost = typeof c === "number" && Number.isFinite(c) ? c : null;
+    const { usage: modelUsage, costUsd } = sinceRestored(acc.restored, parseModelUsage(p2["modelUsage"]), cost);
+    acc.finalUsage = mergeFinalUsage(modelUsage, parseResultUsage(p2["usage"]));
+    if (costUsd != null) {
+      acc.costUsd = costUsd;
     }
     if (acc.finalUsage || acc.costUsd != null) acc.saw = true;
   }
 }
+function sinceRestored(restored, usage, costUsd) {
+  if (!restored) return { usage, costUsd };
+  const out = usage ? { ...usage } : null;
+  if (out && restored.usage) {
+    for (const k2 of ["input", "output", "cacheRead", "cacheCreation"]) {
+      const base = restored.usage[k2];
+      const total = out[k2];
+      if (total == null || base == null) continue;
+      if (total < base) return { usage, costUsd };
+      out[k2] = total - base;
+    }
+  }
+  if (costUsd != null && restored.costUsd != null) {
+    if (costUsd < restored.costUsd) return { usage, costUsd };
+    return { usage: out, costUsd: costUsd - restored.costUsd };
+  }
+  return { usage: out, costUsd };
+}
 function newClaudeRunningUsage() {
   return { byMessage: /* @__PURE__ */ new Map(), currentMessageId: null, lastKey: "" };
 }
@@ -4088,13 +4298,14 @@ function classifyExit(result) {
   if (status === 429 || status === 529) return "rate-limit";
   return "error";
 }
-var import_node_child_process3, import_node_crypto6, fs7, path7, readline, CLAUDE_BLOCKED_FLAGS, SUBAGENT_TRANSCRIPT_MAX_BYTES, SUBAGENT_TERMINAL, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
+var import_node_child_process3, import_node_crypto6, fs7, os4, path7, readline, CLAUDE_BLOCKED_FLAGS, SUBAGENT_TRANSCRIPT_MAX_BYTES, SUBAGENT_TERMINAL, RESTORED_COST_TAIL_BYTES, ONE_SHOT_UNSAFE_TOOLS, ClaudeCodeAdapter;
 var init_claude_code = __esm({
   "../adapters/src/claude-code/index.ts"() {
     "use strict";
     import_node_child_process3 = require("node:child_process");
     import_node_crypto6 = require("node:crypto");
     fs7 = __toESM(require("node:fs"), 1);
+    os4 = __toESM(require("node:os"), 1);
     path7 = __toESM(require("node:path"), 1);
     readline = __toESM(require("node:readline"), 1);
     init_sync_skills();
@@ -4141,6 +4352,7 @@ var init_claude_code = __esm({
       killed: "stopped",
       stopped: "stopped"
     };
+    RESTORED_COST_TAIL_BYTES = 4 * 1024 * 1024;
     ONE_SHOT_UNSAFE_TOOLS = ["ScheduleWakeup", "CronCreate", "CronDelete", "CronList"];
     ClaudeCodeAdapter = class {
       constructor(opts = {}) {
@@ -4237,6 +4449,9 @@ var init_claude_code = __esm({
             { runtime: "claude-code", actor: job.actor, ...job.dispatchId ? { dispatchId: job.dispatchId } : {} }
           )
         ];
+        const claudeConfigDir = job.env?.["CLAUDE_CONFIG_DIR"] || this.opts.env?.["CLAUDE_CONFIG_DIR"] || process.env["CLAUDE_CONFIG_DIR"] || path7.join(os4.homedir(), ".claude");
+        const resumedSessionFile = job.runtimeSessionId && job.resumeRuntimeSession ? findClaudeSessionFile(claudeConfigDir, dir, job.runtimeSessionId) : void 0;
+        const restoredCost = resumedSessionFile ? readClaudeRestoredCost(resumedSessionFile) : null;
         const otelEnv = this.resolveOtelEnv(job, id);
         const containerized = await maybeContainerize({
           bin: this.opts.claudeBin ?? "claude",
@@ -4364,6 +4579,7 @@ var init_claude_code = __esm({
         const STDERR_MAX_LINES = 40;
         const STDERR_MAX_BYTES = 4e3;
         const usageAcc = newClaudeUsageAcc();
+        usageAcc.restored = restoredCost;
         const runningUsage = newClaudeRunningUsage();
         const usageCheckpointCbs = [];
         let sessionModel;
@@ -4833,7 +5049,7 @@ var init_resilient = __esm({
 // ../adapters/src/_core/skill-cache.ts
 function defaultCacheRoot() {
-  return path8.join(os4.homedir(), ".oasis", "skill-cache");
+  return path8.join(os5.homedir(), ".oasis", "skill-cache");
 }
 function sessionSkillsSubdir(runtimeKind) {
   switch (runtimeKind) {
@@ -5238,13 +5454,13 @@ async function verifyPendingLink(skillsDir, name, pend, log3) {
   }
   return true;
 }
-var import_node_crypto7, fsp, os4, path8, MANIFEST_SCHEMA_VERSION, STALE_LOCK_MS, LOCK_ACQUIRE_TIMEOUT_MS, LOCK_POLL_MS;
+var import_node_crypto7, fsp, os5, path8, MANIFEST_SCHEMA_VERSION, STALE_LOCK_MS, LOCK_ACQUIRE_TIMEOUT_MS, LOCK_POLL_MS;
 var init_skill_cache = __esm({
   "../adapters/src/_core/skill-cache.ts"() {
     "use strict";
     import_node_crypto7 = require("node:crypto");
     fsp = __toESM(require("node:fs/promises"), 1);
-    os4 = __toESM(require("node:os"), 1);
+    os5 = __toESM(require("node:os"), 1);
     path8 = __toESM(require("node:path"), 1);
     MANIFEST_SCHEMA_VERSION = 2;
     STALE_LOCK_MS = 6e4;
@@ -6434,7 +6650,7 @@ function codexSessionsRoot() {
   const candidates = [];
   const ch = process.env["CODEX_HOME"];
   if (ch) candidates.push(path10.join(ch, "sessions"));
-  const home2 = process.env["HOME"] || os5.homedir();
+  const home2 = process.env["HOME"] || os6.homedir();
   if (home2) candidates.push(path10.join(home2, ".codex", "sessions"));
   for (const c of candidates) {
     try {
@@ -6757,7 +6973,7 @@ function codexTurnErrorMessage(value2) {
   const detail = typeof error2?.additionalDetails === "string" ? error2.additionalDetails.trim() : "";
   return [summary, detail].filter(Boolean).join("\n").slice(0, 4e3);
 }
-var import_node_child_process7, import_node_crypto9, fs8, os5, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CodexRolloutUsageTail, CODEX_APP_SERVER_BLOCKED_FLAGS, CodexAdapter;
+var import_node_child_process7, import_node_crypto9, fs8, os6, path10, readline2, CODEX_BLOCKED_FLAGS, CODEX_ARGV_PROMPT_MAX_BYTES, CodexRolloutUsageTail, CODEX_APP_SERVER_BLOCKED_FLAGS, CodexAdapter;
 var init_codex = __esm({
   "../adapters/src/codex/index.ts"() {
     "use strict";
@@ -6765,7 +6981,7 @@ var init_codex = __esm({
     init_container_runtime();
     import_node_crypto9 = require("node:crypto");
     fs8 = __toESM(require("node:fs"), 1);
-    os5 = __toESM(require("node:os"), 1);
+    os6 = __toESM(require("node:os"), 1);
     path10 = __toESM(require("node:path"), 1);
     readline2 = __toESM(require("node:readline"), 1);
     init_sync_skills();
@@ -9371,7 +9587,7 @@ function pdeathsigAvailable(probe = defaultProbe) {
   return cachedAvailable;
 }
 function defaultProbe() {
-  if (os6.platform() !== "linux") return false;
+  if (os7.platform() !== "linux") return false;
   try {
     const help = (0, import_node_child_process9.execFileSync)("setpriv", ["--help"], { stdio: ["ignore", "pipe", "ignore"], timeout: 2e3 }).toString();
     return help.includes("--pdeathsig");
@@ -9385,12 +9601,12 @@ function pdeathsigWrap(bin, args) {
 function shouldBindRuntimePdeathsig() {
   return process.env["OASIS_BIND_RUNTIME_PDEATHSIG"] === "1" && pdeathsigAvailable();
 }
-var import_node_child_process9, os6, cachedAvailable;
+var import_node_child_process9, os7, cachedAvailable;
 var init_pdeathsig = __esm({
   "../adapters/src/_core/pdeathsig.ts"() {
     "use strict";
     import_node_child_process9 = require("node:child_process");
-    os6 = __toESM(require("node:os"), 1);
+    os7 = __toESM(require("node:os"), 1);
   }
 });
@@ -12831,7 +13047,13 @@ async function reconcileChatTurn(turn, deps) {
     ...status === "succeeded" || !restartCause ? {} : { cancelledBy: restartCause }
   });
   if (!ok3) return raced;
-  return { settled: true, turnId: turn.id, status, reason: `run \u7EC8\u6001 ${run.status}` };
+  return {
+    settled: true,
+    turnId: turn.id,
+    status,
+    reason: `run \u7EC8\u6001 ${run.status}`,
+    ...run.exitReason ? { exitReason: run.exitReason } : {}
+  };
 }
 async function sweepStaleChatTurns(deps) {
   const before = new Date(deps.now - (deps.staleAfterMs ?? 2 * 6e4)).toISOString();
@@ -12853,7 +13075,8 @@ async function sweepStaleChatTurns(deps) {
         chatSessionId: turn.chatSessionId,
         turnId: turn.id,
         status: settledStatus,
-        reason: outcome.reason ?? `\u8F6E\u6B21\u6536\u53E3\u4E3A ${settledStatus}`
+        reason: outcome.reason ?? `\u8F6E\u6B21\u6536\u53E3\u4E3A ${settledStatus}`,
+        ...outcome.settled && outcome.exitReason ? { exitReason: outcome.exitReason } : {}
       }).catch((e) => {
         deps.log?.(`[chat-turn-sweep] \u8F6E\u6B21 ${turn.id} \u6536\u53E3\u540E\u7684\u56DE\u8C03\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u672C\u62CD\uFF09: ${String(e)}`);
       });
@@ -125858,7 +126081,7 @@ function isReplyWork(w2) {
 function replyIssueIdOf(w2) {
   return w2.lane === "reply" ? w2.replyToIssueId ?? null : null;
 }
-var BUSINESS_HANDOFF_POLICY_FIELD, BUSINESS_HANDOFF_POLICY_EXEMPT, DEFAULT_CONFIG, deriveWorkId, deriveReviewId, deriveReplyId;
+var BUSINESS_HANDOFF_POLICY_FIELD, BUSINESS_HANDOFF_POLICY_EXEMPT, DEFAULT_CONFIG, deriveWorkId, deriveReviewId, ENGINE_SYSTEM_ACTOR, REVIEW_EXHAUSTED_ESC_PREFIX, deriveReplyId;
 var init_model = __esm({
   "../engine/src/model.ts"() {
     "use strict";
@@ -125871,6 +126094,8 @@ var init_model = __esm({
     };
     deriveWorkId = (nodeId, version2) => `wk:${nodeId}:${version2}`;
     deriveReviewId = (workId, reviewer, group) => `rv:${workId}:${reviewer}:${group}`;
+    ENGINE_SYSTEM_ACTOR = "actor:system:engine";
+    REVIEW_EXHAUSTED_ESC_PREFIX = "esc:review-exhausted:";
     deriveReplyId = (issueId, salt) => `ir:${issueId}:${salt}`;
   }
 });
@@ -126414,6 +126639,7 @@ var init_kill = __esm({
 function scan(state, ctx) {
   if (state.workorder.dispatchPaused) return { events: [], terminated: false };
   const events = [];
+  closeSettledReviewEscalations(state, events);
   for (const node2 of state.liveNodes()) {
     const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
     const continuationPolicy = node2.assigneeActorId ? ctx.continuationPolicies?.get(node2.assigneeActorId) : null;
@@ -126942,6 +127168,55 @@ function reviewMaxRetriesOf(policy) {
   const act = policy.resolve({ executor: "agent", scenario: "review" }).timeoutAction;
   return act.kind === "kill-rebuild" ? act.maxRetries : AGENT_REVIEW_MAX_RETRIES;
 }
+function pushReviewExhaustedEscalation(state, nodeId, workId, reviewId, reviewerActorId, rounds, events) {
+  const node2 = state.node(nodeId);
+  if (!node2) return;
+  if (node2.latestAcceptId === workId) return;
+  const escId = `${REVIEW_EXHAUSTED_ESC_PREFIX}${reviewId}`;
+  if (state.allIssues().some((i) => i.id === escId)) return;
+  events.push({
+    kind: "issue.create",
+    workorderId: state.workorder.id,
+    issueId: escId,
+    issueKind: "escalation",
+    body: `\u300A${node2.title}\u300B\u7684\u8BC4\u5BA1\u8FDE\u7EED ${rounds} \u6B21\u5931\u8D25\uFF0C\u8FD9\u4E00\u8F6E\u8BC4\u5BA1\u6536\u4E0D\u9F50\u2014\u2014\u9700\u8981\u6709\u4EBA\u91CD\u5F00\u3002
+\u672B\u6B21\u8BC4\u5BA1\u4F1A\u8BDD\u7ED3\u675F\u65F6\u6CA1\u6709\u6295\u7968\uFF1B\u62A5\u9519\u539F\u8BDD\u89C1\u8FD9\u4E2A\u8282\u70B9\u7684\u6267\u884C\u8F68\u8FF9\u3002`,
+    aboutNodeId: nodeId,
+    aboutWorkId: workId,
+    raisedByNodeId: null,
+    authorActorId: reviewerActorId,
+    handActorId: null,
+    recipients: [state.workorder.ownerActorId],
+    attachments: [],
+    intent: "advisory"
+  });
+}
+function closeSettledReviewEscalations(state, events) {
+  for (const issue2 of state.allIssues()) {
+    if (issue2.resolvedAt !== null || issue2.kind !== "escalation") continue;
+    const id = issue2.id;
+    if (!id.startsWith(REVIEW_EXHAUSTED_ESC_PREFIX)) continue;
+    const node2 = issue2.aboutNodeId ? state.node(issue2.aboutNodeId) : void 0;
+    if (!node2 || node2.cancelledAt) continue;
+    const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
+    if (lw && workState(lw, hasOutput(lw, state.artifactsOf(lw.id).length)) === "dead") continue;
+    const review = state.review(id.slice(REVIEW_EXHAUSTED_ESC_PREFIX.length));
+    if (!review) continue;
+    const head = state.requirementsOf(node2.id).find((r) => r.reviewGroup === review.reviewGroup)?.latestReviewId ?? null;
+    const note = head !== review.id ? "\u8BC4\u5BA1\u5DF2\u91CD\u65B0\u5B89\u6392" : node2.latestAcceptId === review.targetWorkId ? "\u8FD9\u4E00\u7248\u5DF2\u9A8C\u6536" : null;
+    if (note === null) continue;
+    events.push({
+      kind: "issue.resolve",
+      workorderId: state.workorder.id,
+      issueId: issue2.id,
+      state: "resolved",
+      by: SYSTEM_ENGINE_ACTOR,
+      note,
+      viaWorkId: null
+    });
+  }
+}
 function processReviews(state, nodeId, workId, ctx, events) {
   const policy = ctx.policy ?? CODE_DEFAULT_POLICY;
   const reqs = state.requirementsOf(nodeId);
@@ -127003,15 +127278,19 @@ function processReviews(state, nodeId, workId, ctx, events) {
       }
     } else if (info.status === "failed") {
       const req = reqs.find((r) => r.reviewGroup === g2);
-      const overLimit = reviewRetriesExhausted(g2, reviews, { policy }) !== null;
+      const exhausted = reviewRetriesExhausted(g2, reviews, { policy });
+      const overLimit = exhausted !== null;
       if (overLimit && classify(req.reviewerActorId) === "agent") {
         const lrId = req.latestReviewId;
-        if (lrId) events.push({
-          kind: "review.kill",
-          workorderId: state.workorder.id,
-          reviewId: lrId,
-          reason: "exhausted"
-        });
+        if (lrId) {
+          events.push({
+            kind: "review.kill",
+            workorderId: state.workorder.id,
+            reviewId: lrId,
+            reason: "exhausted"
+          });
+          pushReviewExhaustedEscalation(state, nodeId, workId, lrId, req.reviewerActorId, exhausted.rounds, events);
+        }
       } else if (!overLimit) {
         events.push({
           kind: "review.create",
@@ -127202,6 +127481,7 @@ function assessConvergence(state, ctx) {
   const anyUnfinished = state.liveNodes().some((n) => !n.latestAcceptId);
   return { stuck: !anyRunning && !anyBlockingIssue && allIdle && anyUnfinished, codes };
 }
+var SYSTEM_ENGINE_ACTOR;
 var init_activate = __esm({
   "../engine/src/activate.ts"() {
     "use strict";
@@ -127216,6 +127496,7 @@ var init_activate = __esm({
     init_model();
     init_views2();
     init_kill();
+    SYSTEM_ENGINE_ACTOR = ENGINE_SYSTEM_ACTOR;
   }
 });
@@ -135090,6 +135371,7 @@ var init_issue = __esm({
   "../engine/src/handlers/issue.ts"() {
     "use strict";
     init_plan();
+    init_model();
     init_letters();
     issueCreate = {
       name: "issue/create",
@@ -135181,7 +135463,8 @@ var init_issue = __esm({
         }
         if (issue2.resolvedAt !== null) return;
         const humanResolution = e.by.startsWith("actor:human:") && e.by === ctx.actorId;
-        if (e.semanticsVersion === 2 && issue2.kind === "escalation" && !humanResolution) {
+        const engineSelfClosure = e.by === ENGINE_SYSTEM_ACTOR && ctx.actorId === ENGINE_SYSTEM_ACTOR && issue2.id.startsWith(REVIEW_EXHAUSTED_ESC_PREFIX);
+        if (e.semanticsVersion === 2 && issue2.kind === "escalation" && !humanResolution && !engineSelfClosure) {
           throw new Error("\u5173\u95ED\u5347\u7EA7\u9700\u8981\u4EBA\u660E\u786E\u786E\u8BA4\uFF1Bagent \u8BF7\u63D0\u4EA4\u5173\u95ED\u6388\u6743\u7533\u8BF7");
         }
         state.updateIssue(e.issueId, {
@@ -138078,6 +138361,13 @@ function openBackpressureOf(model, id) {
 function unresolvedGapsOf(model, id) {
   return (model.gaps.get(id) ?? []).filter((g2) => !g2.resolved);
 }
+function findGap(model, gapId) {
+  for (const [artifactId, list2] of model.gaps) {
+    const gap = list2.find((g2) => g2.gapId === gapId);
+    if (gap) return { artifactId, gap };
+  }
+  return null;
+}
 function unresolvedEscalationsOf(model, id) {
   return (model.escalations.get(id) ?? []).filter((e) => !e.resolved).map((e) => ({
     // ADR 0079 D4：把稳定 id 一并带出——inbox / 卡片要靠它指明「关哪一条」（现状 resolve 是 artifact 级全清）。
@@ -142128,9 +142418,6 @@ ${supplemental.taskAppend.trim()}
 `;
           }
         }
-        if (this.opts.executionContinuityInstructions && continuityExposureOn && (spec.action === "produce" || spec.action === "integrate") && continuityArtifact) {
-          bundle.files["execution/CONTINUITY.md"] = this.opts.executionContinuityInstructions;
-        }
         if (this.opts.resolveExecutionResumePack && continuityExposureOn && (spec.action === "produce" || spec.action === "integrate") && continuityArtifact) {
           let resumePack = null;
           try {
@@ -142738,6 +143025,9 @@ ${supplemental.taskAppend.trim()}
 });
 // ../core/src/session-limits.ts
+function sessionWallClockMs(kind) {
+  return SESSION_WALL_CLOCK_MS[kind];
+}
 var SESSION_WALL_CLOCK_MS;
 var init_session_limits = __esm({
   "../core/src/session-limits.ts"() {
@@ -142868,6 +143158,41 @@ ${lines.join("\n")}`, "rejected-proposal-repeat");
   }
 });
+// ../core/src/command-card-naming.ts
+function commandCardRefsOf(model) {
+  const nodeTitle = (id) => model.artifacts.get(id)?.title?.trim() || void 0;
+  return {
+    nodeTitle,
+    escalation: (escalationId) => {
+      const found2 = escalationById(model, escalationId);
+      if (!found2) return void 0;
+      return { summary: found2.reason, ...nodeTitle(found2.artifactId) ? { nodeTitle: nodeTitle(found2.artifactId) } : {} };
+    },
+    gap: (gapId) => {
+      const found2 = findGap(model, gapId);
+      if (!found2) return void 0;
+      return { summary: found2.gap.description, ...nodeTitle(found2.artifactId) ? { nodeTitle: nodeTitle(found2.artifactId) } : {} };
+    }
+  };
+}
+function annotateCommandCardLabels(model) {
+  const refs = commandCardRefsOf(model);
+  for (const review of model.pendingReviews.values()) {
+    if (!review.command) continue;
+    review.command = {
+      ...review.command,
+      displayLabel: commandCardDisplayLabel(review.command.command, review.command.args, review.command.effectLabel, refs)
+    };
+  }
+}
+var init_command_card_naming = __esm({
+  "../core/src/command-card-naming.ts"() {
+    "use strict";
+    init_src();
+    init_read_model();
+  }
+});
 // ../core/src/queue-retirement.ts
 function isSettledProduction(w2) {
   if (w2.lane === "reply") return false;
@@ -144183,6 +144508,7 @@ var init_kernel_bridge = __esm({
     init_closure_gate2();
     init_kernel();
     init_bridge_readmodel();
+    init_command_card_naming();
     init_propose_guard();
     init_src6();
     init_src6();
@@ -144508,6 +144834,7 @@ var init_kernel_bridge = __esm({
             ...card2.priorRejections && card2.priorRejections.length > 0 ? { priorRejections: card2.priorRejections } : {}
           });
         }
+        annotateCommandCardLabels(fresh);
         Object.assign(this.model, fresh);
         if (!this.sweepingStaleDrafts && this.draftCards.size > 0) {
           this.sweepingStaleDrafts = true;
@@ -146614,6 +146941,7 @@ var init_src7 = __esm({
     init_dispatcher();
     init_session_limits();
     init_rejected_proposals();
+    init_command_card_naming();
     init_kernel_bridge();
     init_bridge_readmodel();
     init_queue_retirement();
@@ -165172,6 +165500,23 @@ async function waitForInflightInsert(rowId, timeoutMs) {
   })]);
   if (timer) clearTimeout(timer);
 }
+async function waitForAdmittedTurnStart(chatSessionId, deps) {
+  if (deps.liveChat.isRunning(chatSessionId)) return;
+  if (!await deps.ledgerTurnRunning()) return;
+  await new Promise((resolve11) => {
+    let stop = () => {
+    };
+    const timer = setTimeout(() => {
+      stop();
+      resolve11();
+    }, deps.timeoutMs);
+    timer.unref?.();
+    stop = deps.liveChat.onNextTurn(chatSessionId, () => {
+      clearTimeout(timer);
+      resolve11();
+    });
+  });
+}
 async function appendNowThroughQueue(chatSessionId, text7, deps, clientKey, attachments, retainLocallyOnFailure = false, opts) {
   const newId = deps.newId ?? import_node_crypto22.randomUUID;
   const now = deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
@@ -200719,6 +201064,150 @@ var init_knowledge2 = __esm({
   }
 });
+// ../server/src/chat-exit.ts
+function transcriptTail(ref2) {
+  try {
+    const stat4 = fs17.statSync(ref2);
+    const size = Math.min(stat4.size, 4e3);
+    const buf = Buffer.alloc(size);
+    const fd = fs17.openSync(ref2, "r");
+    try {
+      fs17.readSync(fd, buf, 0, size, Math.max(0, stat4.size - size));
+    } finally {
+      fs17.closeSync(fd);
+    }
+    return buf.toString("utf8").trim();
+  } catch {
+    return "";
+  }
+}
+function clipLine(line2) {
+  return line2.length > SUMMARY_MAX_CHARS ? `${line2.slice(0, SUMMARY_MAX_CHARS)}\u2026` : line2;
+}
+function providerMessage(line2) {
+  const m2 = /['"]message['"]\s*:\s*(?:'((?:[^'\\]|\\.)*)'|"((?:[^"\\]|\\.)*)")/.exec(line2);
+  const text7 = (m2?.[1] ?? m2?.[2])?.trim();
+  return text7 ? text7 : void 0;
+}
+function failureKind(reason, line2) {
+  if (line2.startsWith(SESSION_STARTUP_FAILED_PREFIX)) return "startup-failed";
+  switch (reason) {
+    case "auth-error":
+      return "auth";
+    case "server-unreachable":
+      return "node-unreachable";
+    case "timeout":
+      return "timeout";
+    case "output-limit":
+      return "output-limit";
+    case "rate-limit":
+      return QUOTA_RE3.test(line2) ? "quota" : "rate-limit";
+    default:
+      break;
+  }
+  if (!line2) return "unknown";
+  if (DISK_FULL_RE.test(line2)) return "disk-full";
+  if (QUOTA_RE3.test(line2)) return "quota";
+  if (AUTH_RE2.test(line2)) return "auth";
+  if (RATE_LIMIT_RE.test(line2)) return "rate-limit";
+  if (MODEL_RE.test(line2)) return "model";
+  if (UNREACHABLE_RE2.test(line2)) return "node-unreachable";
+  return "unknown";
+}
+function setChatWallClockMs(ms) {
+  effectiveChatWallClockMs = typeof ms === "number" && ms > 0 ? ms : void 0;
+}
+function wallClockText(ms = effectiveChatWallClockMs ?? sessionWallClockMs("chat")) {
+  const minutes = Math.round(ms / 6e4);
+  return minutes > 0 && minutes % 60 === 0 ? `${minutes / 60} \u5C0F\u65F6` : `${minutes} \u5206\u949F`;
+}
+function resetTime(line2) {
+  return extractResetHint(line2)?.replace(/^(?:resets?|try again at)\s+/i, "").trim() || void 0;
+}
+function failureSummary(kind, ctx) {
+  switch (kind) {
+    case "auth":
+      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u7684\u767B\u5F55\u5DF2\u8FC7\u671F\u6216\u51ED\u8BC1\u65E0\u6548\uFF0C\u8C03\u7528\u4E0D\u4E86\u6A21\u578B\u3002\u8BF7\u8282\u70B9\u7BA1\u7406\u5458\u5728\u90A3\u53F0\u673A\u5668\u4E0A\u91CD\u65B0\u767B\u5F55\u8FD9\u4E2A\u8FD0\u884C\u65F6\uFF08\u6216\u66F4\u65B0 API Key\uFF09\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u7740\u6025\u7684\u8BDD\u4E5F\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u53EF\u7528\u7684\u8FD0\u884C\u65F6")}\u3002`;
+    case "quota": {
+      const at = resetTime(ctx.line);
+      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u6A21\u578B\u989D\u5EA6\u5DF2\u7528\u5B8C${at ? `\uFF0C\u9884\u8BA1 ${at} \u6062\u590D` : ""}\u3002\u8BF7\u7B49\u989D\u5EA6\u6062\u590D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u7740\u6025\u7684\u8BDD\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u989D\u5EA6\u5145\u8DB3\u7684\u8FD0\u884C\u65F6")}\u3002`;
+    }
+    case "rate-limit":
+      return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u6A21\u578B\u670D\u52A1\u6682\u65F6\u9650\u6D41\u6216\u7E41\u5FD9\u3002\u8BF7\u7B49\u4E00\u4E24\u5206\u949F\u518D\u53D1\u4E00\u6B21\u3002";
+    case "node-unreachable":
+      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u8FD9\u4F4D Agent \u7684\u8282\u70B9\u79BB\u7EBF\u6216\u8FDE\u63A5\u4E2D\u65AD\u3002\u8BF7\u786E\u8BA4\u90A3\u53F0\u673A\u5668\u5F00\u7740\u3001\u8282\u70B9\u7A0B\u5E8F\u5728\u8FD0\u884C\u3001\u7F51\u7EDC\u6B63\u5E38\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u4E5F\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u5728\u7EBF\u7684\u8FD0\u884C\u65F6")}\u3002`;
+    case "model":
+      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD9\u4E2A\u8FD0\u884C\u65F6\u7528\u4E0D\u4E86\u5F53\u524D\u914D\u7F6E\u7684\u6A21\u578B\u3002\u8BF7${chatRebindHint("\u6362\u4E00\u4E2A\u53EF\u7528\u7684\u6A21\u578B")}\u540E\u518D\u53D1\u4E00\u6B21\u3002`;
+    case "timeout":
+      return `\u8FD9\u4E00\u6B21\u6267\u884C\u8DD1\u6EE1\u4E86\u5355\u6B21\u8FD0\u884C\u7684\u65F6\u95F4\u4E0A\u9650\uFF08${wallClockText()}\uFF09\uFF0C\u88AB\u7CFB\u7EDF\u505C\u4E0B\u4E86\u3002\u5DF2\u7ECF\u505A\u5B8C\u7684\u90E8\u5206\u4E0D\u4F1A\u4E22\uFF1B\u8981\u63A5\u7740\u505A\u7684\u8BDD\uFF0C\u628A\u5269\u4E0B\u7684\u90E8\u5206\u62C6\u5C0F\u4E00\u4E9B\u518D\u53D1\u4E00\u6B21\u3002`;
+    case "startup-failed":
+      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A${ctx.readable || SESSION_STARTUP_FAILED_PREFIX}\u3002\u8FD9\u4E00\u8F6E\u6CA1\u6709\u5F00\u59CB\u8FD0\u884C\uFF0C\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u591A\u534A\u662F\u90A3\u53F0\u8282\u70B9\u8D1F\u8F7D\u8FC7\u9AD8\uFF0C\u8BF7\u7BA1\u7406\u5458\u7ED9\u5B83\u51CF\u8D1F\u6216${chatRebindHint("\u6362\u4E00\u4E2A\u8FD0\u884C\u65F6")}\u3002`;
+    case "disk-full":
+      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u8FD9\u4F4D Agent \u7684\u8282\u70B9\u78C1\u76D8\u7A7A\u95F4\u6EE1\u4E86\uFF0C\u8FD9\u4E00\u8F6E\u5199\u4E0D\u4E86\u6587\u4EF6\u3002\u8BF7\u8282\u70B9\u7BA1\u7406\u5458\u6E05\u7406\u90A3\u53F0\u673A\u5668\u7684\u78C1\u76D8\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u7740\u6025\u7684\u8BDD\u4E5F\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u8FD0\u884C\u65F6")}\u3002`;
+    case "output-limit":
+      return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u6A21\u578B\u8F93\u51FA\u8D85\u51FA\u957F\u5EA6\u4E0A\u9650\uFF0C\u56DE\u590D\u88AB\u622A\u65AD\u4E86\u3002\u53EF\u4EE5\u8BA9\u5B83\u5206\u51E0\u6B21\u8F93\u51FA\uFF0C\u6216\u628A\u4EFB\u52A1\u62C6\u5C0F\u4E00\u4E9B\u518D\u53D1\u3002";
+    case "unknown":
+      if (ctx.line) {
+        return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u62A5\u9519\u4E86\uFF0C\u6682\u65F6\u6CA1\u8BA4\u51FA\u662F\u4EC0\u4E48\u539F\u56E0\u3002\u53EF\u4EE5\u7A0D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u8BF7\u70B9\u300C\u5C55\u5F00\u8BE6\u60C5\u300D\u628A\u539F\u59CB\u62A5\u9519\u53D1\u7ED9\u7BA1\u7406\u5458\u3002";
+      }
+      return ctx.hasDetail ? "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u5F02\u5E38\u9000\u51FA\uFF0C\u6CA1\u6709\u7ED9\u51FA\u62A5\u9519\u539F\u56E0\u3002\u53EF\u4EE5\u7A0D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u8BF7\u70B9\u300C\u5C55\u5F00\u8BE6\u60C5\u300D\u628A\u539F\u59CB\u8BB0\u5F55\u53D1\u7ED9\u7BA1\u7406\u5458\u3002" : `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u5F02\u5E38\u9000\u51FA\uFF08\u9000\u51FA\u7801 ${ctx.code ?? "\u65E0"}\uFF09\uFF0C\u6CA1\u6709\u7559\u4E0B\u62A5\u9519\u4FE1\u606F\u3002\u53EF\u4EE5\u7A0D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u8BF7\u7BA1\u7406\u5458\u5230\u300C\u8FD0\u884C\u8F68\u8FF9\u300D\u91CC\u67E5\u8FD9\u4E00\u8F6E\u3002`;
+  }
+}
+function buildChatExitError(info) {
+  const chatExit = chatExitSummary(info);
+  return Object.assign(new Error(chatExit.summary), { chatExit });
+}
+function chatExitSummary(info) {
+  const genericLine = `runtime exited with code ${info.code ?? "null"}${info.reason ? ` (${info.reason})` : ""}`;
+  let detail = "";
+  if (info.reason !== "cancelled") {
+    detail = info.errorMessage?.trim() ?? "";
+    if (!detail && info.transcriptRef) detail = transcriptTail(info.transcriptRef);
+  }
+  let summary;
+  let cancelledBy;
+  if (info.reason === "cancelled") {
+    cancelledBy = cancelCauseFromExitMessage(info.errorMessage);
+    summary = chatCancelNote(cancelledBy);
+  } else {
+    const firstErrorLine = (info.errorMessage?.split("\n").map((line2) => line2.trim()).find(Boolean) ?? "").replace(INTERNAL_PREFIX_RE, "");
+    const readable = firstErrorLine ? clipLine(providerMessage(firstErrorLine) ?? firstErrorLine) : "";
+    summary = failureSummary(failureKind(info.reason, firstErrorLine), {
+      readable,
+      line: firstErrorLine,
+      hasDetail: Boolean(detail),
+      code: info.code
+    });
+  }
+  return {
+    ...info.reason ? { reason: info.reason } : {},
+    summary,
+    ...cancelledBy ? { cancelledBy } : {},
+    ...info.reason !== "cancelled" ? { detail: (detail ? `${genericLine}
+${detail}` : genericLine).slice(0, 4200) } : {}
+  };
+}
+var fs17, SUMMARY_MAX_CHARS, INTERNAL_PREFIX_RE, QUOTA_RE3, RATE_LIMIT_RE, AUTH_RE2, MODEL_RE, DISK_FULL_RE, UNREACHABLE_RE2, effectiveChatWallClockMs, chatRebindHint;
+var init_chat_exit = __esm({
+  "../server/src/chat-exit.ts"() {
+    "use strict";
+    fs17 = __toESM(require("node:fs"), 1);
+    init_src();
+    init_src7();
+    init_chat_cancel_attribution();
+    SUMMARY_MAX_CHARS = 500;
+    INTERNAL_PREFIX_RE = /^\[[a-z][a-z0-9_]*\]\s*/;
+    QUOTA_RE3 = /hit your (?:\w+ )?limit|usage limit|quota|insufficient[_ ](?:balance|credit|funds)|credit balance|billing|\b402\b|额度|余额/i;
+    RATE_LIMIT_RE = /rate.?limit|too many requests|\b429\b|\b529\b|overloaded|限流/i;
+    AUTH_RE2 = /\b401\b|\b403\b|unauthori[sz]ed|authenticat|oauth|invalid[_ -]?(?:api[_ -]?key|token|x-api-key)|api[_ -]?key[^\n]{0,40}\b(?:invalid|expired|revoked)|token[^\n]{0,30}\b(?:expired|invalid|revoked)|not logged in|\/login|credential|凭证|登录/i;
+    MODEL_RE = /\bmodel\b[^\n]{0,120}?\b(?:not found|not exist|does not exist|not available|not supported|unavailable|unknown)\b|\b(?:unknown|invalid|unsupported) model\b|model_not_found/i;
+    DISK_FULL_RE = /\bENOSPC\b|no space left on device|\bEDQUOT\b|disk quota exceeded|\[Errno 28\]|disk (?:is )?full|磁盘(?:空间)?(?:已满|不足)/i;
+    UNREACHABLE_RE2 = /不在线|socket 非 OPEN|帧未送达|失联/;
+    chatRebindHint = (what) => `\u5728\u7EC4\u7EC7\u9875\u8FD9\u4F4D Agent \u7684\u300C\u6A21\u578B\u300D\u9875\u7B7E\u91CC${what}`;
+  }
+});
 // ../server/src/domains/delegations/parent-conversation.ts
 function firstLine2(content3) {
   const line2 = content3.split("\n").map((s2) => s2.trim()).find((s2) => s2.length > 0);
@@ -201119,6 +201608,14 @@ var init_files = __esm({
 });
 // ../server/src/domains/delegations/service.ts
+function exitReasonOf(err) {
+  if (!(err instanceof Error)) return void 0;
+  const chatExit = err.chatExit;
+  return chatExit?.reason;
+}
+function roundFailureText(kind, error2) {
+  return kind === "timeout" ? `\u8FD9\u4E00\u6B21\u6267\u884C\u8DD1\u6EE1\u4E86\u5355\u6B21\u8FD0\u884C\u7684\u65F6\u95F4\u4E0A\u9650\uFF08${wallClockText()}\uFF09\uFF0C\u88AB\u7CFB\u7EDF\u505C\u4E0B\u4E86\uFF08${error2}\uFF09` : `\u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u5B8C\uFF1A${error2}`;
+}
 function deterministicUuid2(seed) {
   const h = (0, import_node_crypto36.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
@@ -201181,6 +201678,7 @@ var init_service3 = __esm({
     "use strict";
     import_node_crypto36 = require("node:crypto");
     init_src();
+    init_chat_exit();
     init_parent_conversation();
     init_title();
     init_deletion();
@@ -201868,7 +202366,7 @@ var init_service3 = __esm({
         try {
           await dispatched.done;
         } catch (err) {
-          failureKind2 = "interrupted";
+          failureKind2 = exitReasonOf(err) === "timeout" ? "timeout" : "interrupted";
           error2 = err instanceof Error ? err.message : String(err);
         }
         const at = this.now();
@@ -201885,7 +202383,11 @@ var init_service3 = __esm({
         const round = (fresh.roundSummaries[fresh.roundSummaries.length - 1]?.round ?? 0) + 1;
         const newSummary = {
           round,
-          text: text7 || (failureKind2 ? `\u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u5B8C\uFF1A${error2}` : ""),
+          /* ⚠️ 到点被停下那一档**不往摘要里合成句子**（Bug 0221）：`text` 从此是「专家这一轮到底
+             写出没写出正文」的判据——回流通告据它判「有没有可验证的交付」（`hasDelegationDelivery`）。
+             合成的那句话仍写进下面子会话的占位行（用户在子会话里要看到一句交代），
+             通告里空正文由 `delegationReturnText` 渲染成「（这一轮没有文本产出）」。 */
+          text: text7 || (failureKind2 && failureKind2 !== "timeout" ? roundFailureText(failureKind2, error2) : ""),
           at,
           // 本轮的键 = 派发这一轮时的 dispatchSeq（`record` 就是派发时那一份，轮次账本业务键也由它算）。
           dispatchSeq: record9.dispatchSeq ?? 0
@@ -201895,7 +202397,7 @@ var init_service3 = __esm({
         const stopLoss = consecutiveFails >= CONSECUTIVE_FAIL_LIMIT;
         const chatStore = await this.options.resolveChatSessions(companyId).catch(() => null);
         await chatStore?.updateMessage(childRoundMessageIds(fresh.childSessionId, round).placeholderId, {
-          content: text7 || (failureKind2 ? `\u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u5B8C\uFF1A${error2}` : ""),
+          content: text7 || (failureKind2 ? roundFailureText(failureKind2, error2) : ""),
           status: failureKind2 ? "error" : "done",
           completedAt: at
         }).catch(() => void 0);
@@ -201968,9 +202470,11 @@ var init_service3 = __esm({
         if (opts?.outcome === "succeeded") return this.settleSucceededFromSweep(record9, dispatchSeq, companyId);
         const at = this.now();
         const settledSeqAtRound = record9.settledSeq + 1;
+        const timedOut = opts?.exitReason === "timeout";
+        const partialAnswer = timedOut ? await this.readChildRoundAnswer(record9, dispatchSeq + 1, companyId).catch(() => "") : "";
         const newSummary = {
           round: (record9.roundSummaries[record9.roundSummaries.length - 1]?.round ?? 0) + 1,
-          text: `\u8FD9\u4E00\u8F6E\u88AB\u65F6\u949F\u95ED\u5408\uFF1A${reason}`,
+          text: timedOut ? partialAnswer : `\u8FD9\u4E00\u8F6E\u88AB\u65F6\u949F\u95ED\u5408\uFF1A${reason}`,
           at,
           settledSeq: settledSeqAtRound,
           dispatchSeq
@@ -201978,7 +202482,8 @@ var init_service3 = __esm({
         const settled = await store.appendRoundSummary(record9.id, newSummary, {
           state: "failed",
           // 退出帧丢失后被时钟闭合 = `interrupted`（§9），不是 `not-started`——它确实起来过。
-          failureKind: "interrupted",
+          // run 报的是墙钟超时时归 `timeout`（Bug 0221）：同样起来过，但「到点被停」与「断了」说法不同。
+          failureKind: timedOut ? "timeout" : "interrupted",
           consecutiveFails: record9.consecutiveFails + 1,
           settledSeq: settledSeqAtRound,
           settledAt: at
@@ -202579,11 +203084,11 @@ var init_routes2 = __esm({
 });
 // ../server/src/domains/delegations/store.ts
-var fs17, path18, touchKey, settlesTerminal, MemoryDelegationStore, FileDelegationStore;
+var fs18, path18, touchKey, settlesTerminal, MemoryDelegationStore, FileDelegationStore;
 var init_store2 = __esm({
   "../server/src/domains/delegations/store.ts"() {
     "use strict";
-    fs17 = __toESM(require("node:fs"), 1);
+    fs18 = __toESM(require("node:fs"), 1);
     path18 = __toESM(require("node:path"), 1);
     init_src();
     touchKey = (delegationId, messageId) => `${delegationId}\0${messageId}`;
@@ -202727,13 +203232,13 @@ var init_store2 = __esm({
       }
       static async open(file) {
         const store = new _FileDelegationStore(file);
-        if (fs17.existsSync(file)) {
-          const snap = JSON.parse(fs17.readFileSync(file, "utf8"));
+        if (fs18.existsSync(file)) {
+          const snap = JSON.parse(fs18.readFileSync(file, "utf8"));
           for (const d of snap.delegations ?? []) store.rows.set(d.id, d);
           for (const t of snap.touches ?? []) store.touches.set(touchKey(t.delegationId, t.messageId), t);
         } else {
-          fs17.mkdirSync(path18.dirname(file), { recursive: true });
-          fs17.writeFileSync(file, JSON.stringify({ delegations: [], touches: [] }, null, 2));
+          fs18.mkdirSync(path18.dirname(file), { recursive: true });
+          fs18.writeFileSync(file, JSON.stringify({ delegations: [], touches: [] }, null, 2));
         }
         return store;
       }
@@ -202742,7 +203247,7 @@ var init_store2 = __esm({
           delegations: [...this.rows.values()],
           touches: [...this.touches.values()]
         };
-        fs17.writeFileSync(this.file, JSON.stringify(snapshot, null, 2));
+        fs18.writeFileSync(this.file, JSON.stringify(snapshot, null, 2));
       }
       async create(record9) {
         const r = await super.create(record9);
@@ -202946,8 +203451,18 @@ function delegationReturnText(terminal, opts) {
   const { record: record9 } = terminal;
   const who = terminal.expertName ?? record9.expertActorId;
   const name = record9.label ? `${who}\uFF08${record9.label}\uFF09` : who;
-  const head = record9.state === "done" ? `\u3010\u7CFB\u7EDF\u3011${name} \u5DF2\u5B8C\u6210\u3002` : `\u3010\u7CFB\u7EDF\u3011${name} \u65E0\u6CD5\u5B8C\u6210${record9.failureKind ? `\uFF08${record9.failureKind}\uFF09` : ""}\u3002`;
-  const lines = [head, `\u59D4\u6D3E id\uFF1A${record9.id.slice(0, 8)}\u3000label\uFF1A${record9.label ?? "\uFF08\u65E0\uFF09"}`];
+  const lastRoundText = record9.roundSummaries[record9.roundSummaries.length - 1]?.text;
+  const ending = delegationEnding(record9, {
+    movedFiles: opts.movedPaths.length,
+    unchangedFiles: opts.unchangedPaths?.length ?? 0,
+    ...lastRoundText ? { roundText: lastRoundText } : {}
+  });
+  const cap = wallClockText();
+  const head = ending === "done" ? `\u3010\u7CFB\u7EDF\u3011${name} \u5DF2\u5B8C\u6210\u3002` : ending === "timeout-delivered" ? `\u3010\u7CFB\u7EDF\u3011${name} \u8FD9\u4E00\u6B21\u6267\u884C\u8DD1\u6EE1\u4E86\u5355\u6B21\u8FD0\u884C\u7684\u65F6\u95F4\u4E0A\u9650\uFF08${cap}\uFF09\uFF0C\u88AB\u7CFB\u7EDF\u505C\u4E0B\u4E86\u2014\u2014\u5DF2\u7ECF\u4EA4\u56DE\u7684\u5185\u5BB9\u89C1\u4E0B\u3002` : ending === "timeout-empty" ? `\u3010\u7CFB\u7EDF\u3011${name} \u8FD9\u4E00\u6B21\u6267\u884C\u8DD1\u6EE1\u4E86\u5355\u6B21\u8FD0\u884C\u7684\u65F6\u95F4\u4E0A\u9650\uFF08${cap}\uFF09\uFF0C\u88AB\u7CFB\u7EDF\u505C\u4E0B\u4E86\uFF0C\u8FD9\u4E00\u8F6E\u6CA1\u6709\u4EA4\u56DE\u4EFB\u4F55\u5185\u5BB9\u3002` : `\u3010\u7CFB\u7EDF\u3011${name} \u65E0\u6CD5\u5B8C\u6210\u3002`;
+  const lines = [
+    head,
+    `\u59D4\u6D3E id\uFF1A${record9.id.slice(0, 8)}\u3000label\uFF1A${record9.label ?? "\uFF08\u65E0\uFF09"}` + (record9.failureKind ? `\u3000\u7ED3\u675F\u539F\u56E0\uFF1A${record9.failureKind}` : "")
+  ];
   const trimmed = trimRoundSummariesForReturn(record9.roundSummaries, opts.recentRounds);
   if (trimmed.length > 0) {
     lines.push("", `\u4E13\u5BB6\u5404\u8F6E\u5C0F\u7ED3\uFF08\u5171 ${trimmed.length} \u8F6E\uFF1B\u6700\u8FD1 ${opts.recentRounds} \u8F6E\u7ED9\u5168\u6587\uFF0C\u66F4\u65E9\u7684\u53EA\u7559\u9996\u884C\uFF0C\u5168\u6587\u7528 \`oasis delegate --status\` \u770B\uFF09\uFF1A`);
@@ -202982,7 +203497,7 @@ function delegationReturnText(terminal, opts) {
   }
   lines.push(
     "",
-    record9.state === "done" ? "\u8FD9\u4E9B\u662F\u6750\u6599\uFF0C\u4E0D\u662F\u7ED9\u7528\u6237\u7684\u6210\u54C1\uFF1A\u4F60\u6709\u8FD9\u6761\u5BF9\u8BDD\u7684\u5B8C\u6574\u4E0A\u4E0B\u6587\uFF0C\u81EA\u5DF1\u5224\u65AD\u8BE5\u8BB2\u54EA\u4E00\u53E5\u3001\u8981\u4E0D\u8981\u63A5\u7740\u5F80\u4E0B\u505A\u3002" : "\u5148\u81EA\u5DF1\u5224\u65AD\u80FD\u4E0D\u80FD\u63A5\u4F4F\uFF1A\u63A5\u7BA1\u3001\u6362\u4E2A\u505A\u6CD5\u3001\u8FD8\u662F\u91CD\u6D3E\u3002**\u522B\u628A\u4E13\u4E1A\u5931\u8D25\u539F\u6837\u4E22\u56DE\u7ED9\u7528\u6237**\u3002"
+    record9.state === "done" ? "\u8FD9\u4E9B\u662F\u6750\u6599\uFF0C\u4E0D\u662F\u7ED9\u7528\u6237\u7684\u6210\u54C1\uFF1A\u4F60\u6709\u8FD9\u6761\u5BF9\u8BDD\u7684\u5B8C\u6574\u4E0A\u4E0B\u6587\uFF0C\u81EA\u5DF1\u5224\u65AD\u8BE5\u8BB2\u54EA\u4E00\u53E5\u3001\u8981\u4E0D\u8981\u63A5\u7740\u5F80\u4E0B\u505A\u3002" : ending === "timeout-delivered" ? "**\u8FD9\u4E0D\u662F\u4E13\u4E1A\u5931\u8D25\uFF0C\u662F\u65F6\u95F4\u5230\u4E86**\uFF1A\u5148\u770B\u4E0A\u9762\u5DF2\u7ECF\u4EA4\u56DE\u7684\u4E1C\u897F\uFF0C\u80FD\u7528\u5C31\u63A5\u7740\u7528\uFF1B\u8FD8\u6CA1\u505A\u5B8C\u7684\u90E8\u5206\uFF0C\u62C6\u6210\u4E00\u8F6E\u8DD1\u5F97\u5B8C\u7684\u91CF\u518D\u6D3E\u4E00\u6B21\u3002\u7ED9\u7528\u6237\u4EA4\u4EE3\u65F6\u522B\u8BF4\u300C\u65E0\u6CD5\u5B8C\u6210\u300D\u2014\u2014\u5DF2\u7ECF\u505A\u6210\u7684\u90E8\u5206\u7167\u5B9E\u8BF4\u3002" : ending === "timeout-empty" ? "**\u8FD9\u4E0D\u662F\u4E13\u4E1A\u5931\u8D25\uFF0C\u662F\u65F6\u95F4\u5230\u4E86**\uFF1A\u8FD9\u4E00\u8F6E\u6CA1\u6709\u7559\u4E0B\u53EF\u7528\u7684\u4EA7\u51FA\uFF0C\u628A\u4EFB\u52A1\u62C6\u5C0F\u4E00\u4E9B\u518D\u6D3E\u4E00\u6B21\u3002" : "\u5148\u81EA\u5DF1\u5224\u65AD\u80FD\u4E0D\u80FD\u63A5\u4F4F\uFF1A\u63A5\u7BA1\u3001\u6362\u4E2A\u505A\u6CD5\u3001\u8FD8\u662F\u91CD\u6D3E\u3002**\u522B\u628A\u4E13\u4E1A\u5931\u8D25\u539F\u6837\u4E22\u56DE\u7ED9\u7528\u6237**\u3002"
   );
   if (opts.movedPaths.length > 0 || (opts.unchangedPaths?.length ?? 0) > 0) {
     lines.push(
@@ -203136,6 +203651,7 @@ var init_return_flow = __esm({
     "use strict";
     init_chat_session();
     init_src();
+    init_chat_exit();
     init_chat_system_message();
     init_chat_broadcast();
     init_files();
@@ -208277,7 +208793,7 @@ async function resolveProposeContent(kernel, blobs, args, artifactId, ctx) {
   }
   return resolveContent2(blobs, args);
 }
-function authorizedCommandReceipt(command2, args, actor) {
+function authorizedCommandReceipt(command2, args, actor, refs = {}) {
   switch (command2) {
     case "continueBatch":
       return { message: `\u5DF2\u6388\u6743\u518D\u8FD0\u884C ${args.rounds} \u8F6E\uFF1B\u5176\u4ED6\u963B\u585E\u89E3\u9664\u540E\u7EE7\u7EED\u3002` };
@@ -208286,7 +208802,7 @@ function authorizedCommandReceipt(command2, args, actor) {
     case "promote":
       return { message: "promoted to persistent" };
     case "resolveEscalation":
-      return { message: optStr(args, "gapId") ? `\u5DF2\u786E\u8BA4\u6062\u590D\u65B9\u6848\uFF0C\u89E3\u51B3\u7F3A\u53E3 ${str(args, "gapId")}\u3001\u5173\u95ED\u5173\u8054\u4E0A\u62A5 ${str(args, "escalationId")}\uFF1B\u8C03\u5EA6\u5668\u5C06\u5728\u5176\u4ED6\u963B\u585E\u89E3\u9664\u540E\u7EE7\u7EED\u6267\u884C\u3002` : `\u5DF2\u5173\u95ED\u8BE5\u6761\u4E0A\u62A5\uFF08${str(args, "escalationId")}\uFF09\u3002` };
+      return { message: optStr(args, "gapId") ? `\u5DF2\u786E\u8BA4\u6062\u590D\u65B9\u6848\uFF0C${actionPhrase("\u89E3\u51B3", "\u7F3A\u53E3", gapPhraseOf(refs, optStr(args, "gapId")))}\u3001${actionPhrase("\u5173\u95ED\u5173\u8054", "\u6C42\u52A9", escalationPhraseOf(refs, optStr(args, "escalationId")), "\u5173\u95ED\u5173\u8054\u7684")}\uFF1B\u8C03\u5EA6\u5668\u5C06\u5728\u5176\u4ED6\u963B\u585E\u89E3\u9664\u540E\u7EE7\u7EED\u6267\u884C\u3002` : `\u5DF2${actionPhrase("\u5173\u95ED", "\u6C42\u52A9", escalationPhraseOf(refs, optStr(args, "escalationId")))}\u3002` };
     default:
       throw new Error(`\u547D\u4EE4\u6388\u6743\uFF1A\u6682\u65E0\u56DE\u6267\u6784\u9020 ${command2}`);
   }
@@ -209008,7 +209524,7 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}`] : []
         ...optStr(args, "reason") !== void 0 ? { reason: optStr(args, "reason") } : {},
         ...escId !== void 0 ? { escalationId: escId } : {}
       });
-      return { message: escId !== void 0 ? `\u5DF2\u5173\u95ED\u8BE5\u6761\u4E0A\u62A5\uFF08${escId}\uFF09\u3002` : "\u8BE5\u8282\u70B9\u7684\u672A\u89E3\u4E0A\u62A5\u5DF2\u5168\u90E8\u5173\u95ED\u3002" };
+      return { message: escId !== void 0 ? `\u5DF2${actionPhrase("\u5173\u95ED", "\u6C42\u52A9", escalationPhraseOf(commandCardRefsOf(kernel.model), escId))}\u3002` : "\u8BE5\u8282\u70B9\u7684\u672A\u89E3\u4E0A\u62A5\u5DF2\u5168\u90E8\u5173\u95ED\u3002" };
     }
     case "addRevision": {
       const addRevId = str(args, "artifactId");
@@ -209074,7 +209590,7 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}`] : []
     }
     case "promote": {
       await kernel.promote({ artifactId: str(args, "artifactId"), actor });
-      return authorizedCommandReceipt(command2, args, actor);
+      return authorizedCommandReceipt(command2, args, actor, commandCardRefsOf(kernel.model));
     }
     case "hold": {
       const artifactId = str(args, "artifactId");
@@ -209118,7 +209634,7 @@ ${acceptanceCriteria.map((c) => `- ${c}`).join("\n")}`] : []
         reason: str(args, "reason"),
         note: optStr(args, "note")
       });
-      return authorizedCommandReceipt(command2, args, actor);
+      return authorizedCommandReceipt(command2, args, actor, commandCardRefsOf(kernel.model));
     }
     case "unlink": {
       await kernel.unlinkInput({ artifactId: str(args, "artifactId"), to: str(args, "to"), actor });
@@ -209644,19 +210160,20 @@ async function startOasisServer(opts) {
     return { accepted: r.accepted, ...r.reason ? { reason: r.reason } : {}, queued: r.queued, insertStatus: r.insertStatus };
   };
   const GRAPH_EDIT_SUMMARY_MAX = 60;
+  const NEUTRAL_APPROVER = "\u8D1F\u8D23\u4EBA";
   const truncateSummary = (s2) => {
     const cps = [...s2];
     return cps.length > GRAPH_EDIT_SUMMARY_MAX ? `${cps.slice(0, GRAPH_EDIT_SUMMARY_MAX).join("")}\u2026` : s2;
   };
   const authorizationStatusText = (resolution, ctx) => {
     const approved = resolution.status === "approved";
-    const by = ctx.authorizedBy ?? "\u7BA1\u7406\u8005";
+    const by = ctx.authorizedByName?.trim() || NEUTRAL_APPROVER;
     const reason = resolution.status === "denied" ? resolution.reason ?? ctx.reason : ctx.reason;
     if (ctx.kind === "graph-edit") {
       const summary = truncateSummary((ctx.effectLabel ?? "").trim()) || "\uFF08\u672A\u586B\u5199\u7406\u7531\u7684\u56FE\u53D8\u66F4\uFF09";
       return approved ? `\u300C${summary}\u300D\u7684\u53D8\u66F4\u5DF2\u7531 ${by} \u6279\u51C6\u5E76\u843D\u5730\u3002` : `\u300C${summary}\u300D\u7684\u53D8\u66F4\u5DF2\u88AB ${by} \u9A73\u56DE${reason ? `\uFF1B\u7406\u7531\uFF1A${reason}` : ""}\u3002`;
     }
-    const label2 = ctx.effectLabel || ctx.command || "";
+    const label2 = ctx.displayLabel || stripInternalIds(ctx.effectLabel ?? "") || ctx.command || "";
     return approved ? `\u547D\u4EE4\u5DF2\u7531 ${by} \u6279\u51C6\u5E76\u4EE5\u5176\u540D\u4E49\u6267\u884C${label2 ? `\uFF1A${label2}` : ""}\u3002` : `\u547D\u4EE4\u5DF2\u88AB ${by} \u9A73\u56DE${reason ? `\uFF1A${reason}` : ""}\u3002`;
   };
   const GRAPH_EDIT_IN_FLIGHT_SUFFIX = "\uFF08\u8FD9\u6761\u662F\u5728\u4F60\u672C\u8F6E\u8FDB\u884C\u4E2D\u63D2\u5165\u7684\u901A\u77E5\uFF1A\u56DE\u5E94\u5B8C\u540E\u63A5\u7740\u505A\u4F60\u624B\u4E0A\u8FD8\u6CA1\u505A\u5B8C\u7684\u4E8B\uFF0C\u522B\u5C31\u6B64\u6536\u5C3E\u3002\uFF09";
@@ -211079,13 +211596,23 @@ async function startOasisServer(opts) {
               const { draftId } = JSON.parse(rawBody);
               const review = engine.kernel.model.pendingReviews.get(draftId);
               if (!review) throw new Error(`\u8349\u6848\u4E0D\u5B58\u5728\u6216\u5DF2\u5904\u7406\uFF1A${draftId}`);
+              const authorizedByName = (await (engine.registry ?? opts.registry)?.getActor(actor).catch(() => null))?.name?.trim();
               if (review.kind === "command" && review.command) {
                 const { command: command2, artifactId } = await engine.kernel.applyAuthorizedCommand({ draftId, actor });
-                const receipt = authorizedCommandReceipt(command2, review.command.args, actor);
+                const receipt = authorizedCommandReceipt(command2, review.command.args, actor, commandCardRefsOf(engine.kernel.model));
                 notifyReviewResolved(
                   draftId,
                   { status: "approved", command: command2, effectLabel: review.command.effectLabel, authorizedBy: actor, receipt },
-                  { origin: review.origin, kind: "command", authorizedBy: actor, effectLabel: review.command.effectLabel, command: command2 },
+                  {
+                    origin: review.origin,
+                    kind: "command",
+                    authorizedBy: actor,
+                    ...authorizedByName ? { authorizedByName } : {},
+                    // effectLabel 带 id：RESUME 提示词给起草 agent 用；displayLabel 是状态条（给人）那句。
+                    effectLabel: review.command.effectLabel,
+                    ...review.command.displayLabel ? { displayLabel: review.command.displayLabel } : {},
+                    command: command2
+                  },
                   chatStoreNowOrNull,
                   currentCompanyId
                 );
@@ -211104,7 +211631,7 @@ async function startOasisServer(opts) {
                 { status: "approved", command: "", effectLabel: review.plan.reason, authorizedBy: actor },
                 // 状态条要的两样也得进 resume 上下文（不能只放在 resolution 里）：`effectLabel` 是改图卡的
                 // 「改动摘要」（= plan.reason，见 diagnosis 口径 1），`authorizedBy` 是「谁批的」。
-                { origin: review.origin, kind: review.kind ?? "graph-edit", authorizedBy: actor, effectLabel: review.plan.reason },
+                { origin: review.origin, kind: review.kind ?? "graph-edit", authorizedBy: actor, ...authorizedByName ? { authorizedByName } : {}, effectLabel: review.plan.reason },
                 chatStoreNowOrNull,
                 // 续跑那一轮照样可能往 outputs/ 写东西——按公司出产出卡（与命令卡那支同口径）。
                 currentCompanyId
@@ -211134,6 +211661,7 @@ async function startOasisServer(opts) {
                 return;
               }
               const { recorded } = await engine.kernel.rejectIntervention({ draftId, anchor: review.anchor, actor, ...reason !== void 0 ? { reason } : {} });
+              const authorizedByName = (await (engine.registry ?? opts.registry)?.getActor(actor).catch(() => null))?.name?.trim();
               notifyReviewResolved(
                 draftId,
                 { status: "denied", ...reason !== void 0 ? { reason } : {} },
@@ -211141,10 +211669,13 @@ async function startOasisServer(opts) {
                   origin: review.origin,
                   kind: review.kind ?? "graph-edit",
                   authorizedBy: actor,
+                  ...authorizedByName ? { authorizedByName } : {},
                   // 状态条要的那段「效果标签 / 改动摘要」：命令卡用命令的效果标签，改图卡用 `plan.reason`
                   // ——与 apply-draft 改图那一支同源（那里传的就是 `review.plan.reason`），否则驳回档的
                   // 改图卡状态条会永远拿不到摘要、只能落占位符（diagnosis 口径 1）。
                   ...review.command?.effectLabel || review.plan.reason ? { effectLabel: review.command?.effectLabel || review.plan.reason } : {},
+                  // Bug 0215：驳回档的状态条同样走人读那句（命令卡才有；改图卡的摘要仍是 plan.reason）。
+                  ...review.command?.displayLabel ? { displayLabel: review.command.displayLabel } : {},
                   ...review.command?.command ? { command: review.command.command } : {},
                   ...reason !== void 0 ? { reason } : {}
                 },
@@ -211975,6 +212506,15 @@ async function startOasisServer(opts) {
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: "EMPTY_TEXT" }));
               return;
             }
+            await waitForAdmittedTurnStart(sid, {
+              liveChat,
+              ledgerTurnRunning: async () => {
+                const turns = opts.resolveChatTurns ? await opts.resolveChatTurns(currentCompanyId) : opts.chatTurns;
+                const status = (await turns?.activeTurn(sid).catch(() => null))?.status;
+                return status === "reserved" || status === "running";
+              },
+              timeoutMs: APPEND_TURN_START_WAIT_MS
+            });
             await respondAppend(res, wantsAppendProgress(req), (onAwaitingConsumption) => appendNowThroughQueue2(sid, text7, clientKey, insertAttachments, perCompanyStore, retainLocallyOnFailure, onAwaitingConsumption, resend));
             return;
           }
@@ -213900,7 +214440,10 @@ ${composed}`;
                 auth: {
                   actor,
                   ...companyId !== void 0 ? { companyId } : {},
-                  ...dispatch && Object.keys(dispatch).length > 0 ? { dispatch } : {}
+                  ...dispatch && Object.keys(dispatch).length > 0 ? { dispatch } : {},
+                  // 签名 scopes 原样透出（ADR 0609 D1）：部署级 operator-token 靠它被认出来。
+                  // 只来自签名 token；cookie / 简单 token 没有这一项。
+                  ...domainClaims?.scopes ? { scopes: domainClaims.scopes } : {}
                 },
                 raw: req
               });
@@ -214043,7 +214586,7 @@ async function markDeliveredWithRetry(store, messageId, attempts = 3) {
   }
   return false;
 }
-var http, import_node_crypto41, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
+var http, import_node_crypto41, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, APPEND_TURN_START_WAIT_MS, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
@@ -214058,6 +214601,7 @@ var init_server3 = __esm({
     init_src();
     init_src();
     init_src();
+    init_src();
     init_file_http();
     init_build_info();
     init_artifact_content2();
@@ -214117,6 +214661,7 @@ var init_server3 = __esm({
     defaultResolveActor = (token) => token.startsWith("token:") ? token.slice("token:".length) : null;
     enc = (s2) => new TextEncoder().encode(s2);
     CHAT_OUTPUT_LIMIT = 16e3;
+    APPEND_TURN_START_WAIT_MS = 1e4;
     STREAMING_PATHS = ["/api/events", "/api/chat", "/api/trajectory/events", "/api/intervention/wait"];
     PLANNER_BLOCKING_CODES = /* @__PURE__ */ new Set([
       "title_collision",
@@ -214207,12 +214752,12 @@ function createTokenIssuer(opts = {}) {
 function createNodeTokenStore(file) {
   const read3 = () => {
     try {
-      return JSON.parse(fs18.readFileSync(file, "utf8"));
+      return JSON.parse(fs19.readFileSync(file, "utf8"));
     } catch {
       return {};
     }
   };
-  const write = (table) => fs18.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
+  const write = (table) => fs19.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
   return {
     issue(nodeId) {
       const table = read3();
@@ -214238,14 +214783,14 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   const read3 = () => {
     if (!file) return table;
     try {
-      return new Map(Object.entries(JSON.parse(fs18.readFileSync(file, "utf8"))));
+      return new Map(Object.entries(JSON.parse(fs19.readFileSync(file, "utf8"))));
     } catch {
       return /* @__PURE__ */ new Map();
     }
   };
   const write = (m2) => {
     if (!file) return;
-    fs18.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
+    fs19.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
   };
   const table = /* @__PURE__ */ new Map();
   const prune = () => {
@@ -214307,12 +214852,12 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto42, fs18, path19, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
+var import_node_crypto42, fs19, path19, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
     import_node_crypto42 = require("node:crypto");
-    fs18 = __toESM(require("node:fs"), 1);
+    fs19 = __toESM(require("node:fs"), 1);
     path19 = __toESM(require("node:path"), 1);
     SESSION_TOKEN_PREFIX = "oat_v2_";
     b64url2 = (value2) => Buffer.from(value2).toString("base64url");
@@ -214320,13 +214865,13 @@ var init_tokens = __esm({
     readOrCreateSecret = (file) => {
       if (!file) return (0, import_node_crypto42.randomBytes)(32);
       try {
-        const raw = fs18.readFileSync(file, "utf8").trim();
+        const raw = fs19.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
       const secret = (0, import_node_crypto42.randomBytes)(32);
-      fs18.mkdirSync(path19.dirname(file), { recursive: true });
-      fs18.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
+      fs19.mkdirSync(path19.dirname(file), { recursive: true });
+      fs19.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
     sign = (secret, payload2) => (0, import_node_crypto42.createHmac)("sha256", secret).update(payload2).digest("base64url");
@@ -214351,6 +214896,18 @@ var init_tokens = __esm({
   }
 });
+// ../server/src/auth/operator.ts
+function isOperatorRequest(auth) {
+  return auth.scopes?.includes(OPERATOR_SCOPE) === true;
+}
+var OPERATOR_SCOPE;
+var init_operator = __esm({
+  "../server/src/auth/operator.ts"() {
+    "use strict";
+    OPERATOR_SCOPE = "oasis:operator";
+  }
+});
 // ../server/src/session-dataplane-token.ts
 function createDataplaneTokenIssuer(opts = {}) {
   const secret = readOrCreateSecret2(opts.secretFile);
@@ -214380,12 +214937,12 @@ function createDataplaneTokenIssuer(opts = {}) {
     }
   };
 }
-var import_node_crypto43, fs19, path20, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
+var import_node_crypto43, fs20, path20, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
 var init_session_dataplane_token = __esm({
   "../server/src/session-dataplane-token.ts"() {
     "use strict";
     import_node_crypto43 = require("node:crypto");
-    fs19 = __toESM(require("node:fs"), 1);
+    fs20 = __toESM(require("node:fs"), 1);
     path20 = __toESM(require("node:path"), 1);
     init_src();
     PREFIX2 = "osd_";
@@ -214400,13 +214957,13 @@ var init_session_dataplane_token = __esm({
     readOrCreateSecret2 = (file) => {
       if (!file) return (0, import_node_crypto43.randomBytes)(32);
       try {
-        const raw = fs19.readFileSync(file, "utf8").trim();
+        const raw = fs20.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
       const secret = (0, import_node_crypto43.randomBytes)(32);
-      fs19.mkdirSync(path20.dirname(file), { recursive: true });
-      fs19.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
+      fs20.mkdirSync(path20.dirname(file), { recursive: true });
+      fs20.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
     isClaims = (v2) => {
@@ -220004,13 +220561,13 @@ function applyTurnPatch(t, patch) {
     ...patch.lastError !== void 0 ? { lastError: patch.lastError } : {}
   };
 }
-var import_node_crypto46, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto46, fs21, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
     import_node_crypto46 = require("node:crypto");
-    fs20 = __toESM(require("node:fs"), 1);
+    fs21 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     init_src();
     init_src9();
@@ -220024,8 +220581,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const memory = new MemoryOplogStore();
-        if (fs20.existsSync(file)) {
-          for (const line2 of fs20.readFileSync(file, "utf8").split("\n")) {
+        if (fs21.existsSync(file)) {
+          for (const line2 of fs21.readFileSync(file, "utf8").split("\n")) {
             if (!line2.trim()) continue;
             const stored = JSON.parse(line2);
             const { artifactId, seq, ...op } = stored;
@@ -220033,15 +220590,15 @@ var init_dev_store = __esm({
             if (assigned !== seq) throw new Error(`corrupt ndjson log: seq mismatch at ${line2}`);
           }
         } else {
-          fs20.mkdirSync(path21.dirname(file), { recursive: true });
-          fs20.writeFileSync(file, "");
+          fs21.mkdirSync(path21.dirname(file), { recursive: true });
+          fs21.writeFileSync(file, "");
         }
         return new _NdjsonOplogStore(file, memory);
       }
       async append(artifactId, op, expectedSeq) {
         const seq = await this.memory.append(artifactId, op, expectedSeq);
         const stored = { ...op, artifactId, seq };
-        fs20.appendFileSync(this.file, JSON.stringify(stored) + "\n");
+        fs21.appendFileSync(this.file, JSON.stringify(stored) + "\n");
         return seq;
       }
       read(artifactId, fromSeq) {
@@ -220057,7 +220614,7 @@ var init_dev_store = __esm({
     DirBlobStore = class {
       constructor(dir) {
         this.dir = dir;
-        fs20.mkdirSync(dir, { recursive: true });
+        fs21.mkdirSync(dir, { recursive: true });
       }
       fileOf(hash3) {
         return path21.join(this.dir, hash3);
@@ -220065,31 +220622,31 @@ var init_dev_store = __esm({
       async put(bytes2) {
         const hash3 = (0, import_node_crypto46.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash3);
-        if (!fs20.existsSync(file)) fs20.writeFileSync(file, bytes2);
+        if (!fs21.existsSync(file)) fs21.writeFileSync(file, bytes2);
         return hash3;
       }
       async meta(hash3) {
         const file = this.fileOf(hash3);
-        if (!fs20.existsSync(file)) return null;
-        const size = fs20.statSync(file).size;
-        const fd = fs20.openSync(file, "r");
+        if (!fs21.existsSync(file)) return null;
+        const size = fs21.statSync(file).size;
+        const fd = fs21.openSync(file, "r");
         const head = Buffer.alloc(16);
-        fs20.readSync(fd, head, 0, 16, 0);
-        fs20.closeSync(fd);
+        fs21.readSync(fd, head, 0, 16, 0);
+        fs21.closeSync(fd);
         const contentType = sniffContentType(new Uint8Array(head));
         return { size, ...contentType ? { contentType } : {} };
       }
       async get(hash3) {
         const file = this.fileOf(hash3);
-        if (!fs20.existsSync(file)) throw new BlobNotFoundError(hash3);
-        return new Uint8Array(fs20.readFileSync(file));
+        if (!fs21.existsSync(file)) throw new BlobNotFoundError(hash3);
+        return new Uint8Array(fs21.readFileSync(file));
       }
       async has(hash3) {
-        return fs20.existsSync(this.fileOf(hash3));
+        return fs21.existsSync(this.fileOf(hash3));
       }
       async sweep(reachable) {
-        for (const name of fs20.readdirSync(this.dir)) {
-          if (!reachable.has(name)) fs20.unlinkSync(this.fileOf(name));
+        for (const name of fs21.readdirSync(this.dir)) {
+          if (!reachable.has(name)) fs21.unlinkSync(this.fileOf(name));
         }
       }
     };
@@ -220118,7 +220675,7 @@ var init_dev_store = __esm({
         this.file = file;
       }
       static async open(file) {
-        const seed = fs20.existsSync(file) ? JSON.parse(fs20.readFileSync(file, "utf8")) : [];
+        const seed = fs21.existsSync(file) ? JSON.parse(fs21.readFileSync(file, "utf8")) : [];
         return new _FileTypeRegistryStore(file, seed);
       }
       async put(def) {
@@ -220131,8 +220688,8 @@ var init_dev_store = __esm({
       }
       async save() {
         const tmp = `${this.file}.tmp`;
-        fs20.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
-        fs20.renameSync(tmp, this.file);
+        fs21.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
+        fs21.renameSync(tmp, this.file);
       }
     };
     FileRoleRegistryStore = class _FileRoleRegistryStore extends MemoryRoleRegistryStore {
@@ -220141,7 +220698,7 @@ var init_dev_store = __esm({
         this.file = file;
       }
       static async open(file) {
-        const seed = fs20.existsSync(file) ? JSON.parse(fs20.readFileSync(file, "utf8")) : [];
+        const seed = fs21.existsSync(file) ? JSON.parse(fs21.readFileSync(file, "utf8")) : [];
         return new _FileRoleRegistryStore(file, seed);
       }
       async put(def) {
@@ -220154,8 +220711,8 @@ var init_dev_store = __esm({
       }
       async save() {
         const tmp = `${this.file}.tmp`;
-        fs20.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
-        fs20.renameSync(tmp, this.file);
+        fs21.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
+        fs21.renameSync(tmp, this.file);
       }
     };
     FileRegistryStore = class _FileRegistryStore extends MemoryRegistryStore {
@@ -220173,8 +220730,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileRegistryStore(file);
-        if (fs20.existsSync(file)) {
-          const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+        if (fs21.existsSync(file)) {
+          const snap = JSON.parse(fs21.readFileSync(file, "utf8"));
           for (const a of snap.actors) await MemoryRegistryStore.prototype.upsertActor.call(store, a);
           for (const c of snap.configs) await MemoryRegistryStore.prototype.appendConfig.call(store, c);
           for (const t of snap.teams) await MemoryRegistryStore.prototype.upsertTeam.call(store, t);
@@ -220215,7 +220772,7 @@ var init_dev_store = __esm({
           skillFiles: skillFilesEntries,
           connections
         };
-        fs20.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
     FileAssistantBindStore = class _FileAssistantBindStore extends MemoryAssistantBindStore {
@@ -220233,11 +220790,11 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileAssistantBindStore(file);
-        if (fs20.existsSync(file)) store._load(JSON.parse(fs20.readFileSync(file, "utf8")));
+        if (fs21.existsSync(file)) store._load(JSON.parse(fs21.readFileSync(file, "utf8")));
         return store;
       }
       async save() {
-        fs20.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
       }
     };
     FileHumanPrefsStore = class _FileHumanPrefsStore extends MemoryHumanPrefsStore {
@@ -220255,11 +220812,11 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileHumanPrefsStore(file);
-        if (fs20.existsSync(file)) store._load(JSON.parse(fs20.readFileSync(file, "utf8")));
+        if (fs21.existsSync(file)) store._load(JSON.parse(fs21.readFileSync(file, "utf8")));
         return store;
       }
       async save() {
-        fs20.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
       }
     };
     FileProjectStateStore = class _FileProjectStateStore extends MemoryProjectStateStore {
@@ -220269,8 +220826,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileProjectStateStore(file);
-        if (fs20.existsSync(file)) {
-          const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+        if (fs21.existsSync(file)) {
+          const snap = JSON.parse(fs21.readFileSync(file, "utf8"));
           for (const project of snap.projects ?? []) await MemoryProjectStateStore.prototype.upsertProject.call(store, project);
           const membersByProject = /* @__PURE__ */ new Map();
           for (const member of snap.members ?? []) {
@@ -220282,8 +220839,8 @@ var init_dev_store = __esm({
             await MemoryProjectStateStore.prototype.replaceProjectMembers.call(store, projectId2, members);
           }
         } else {
-          fs20.mkdirSync(path21.dirname(file), { recursive: true });
-          fs20.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
+          fs21.mkdirSync(path21.dirname(file), { recursive: true });
+          fs21.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
         }
         return store;
       }
@@ -220302,7 +220859,7 @@ var init_dev_store = __esm({
       async save() {
         const projects = await this.listProjects();
         const members = (await Promise.all(projects.map((project) => this.listProjectMembers(project.id)))).flat();
-        fs20.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
       }
     };
     FileArtifactStateStore = class _FileArtifactStateStore extends MemoryArtifactStateStore {
@@ -220312,8 +220869,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileArtifactStateStore(file);
-        if (fs20.existsSync(file)) {
-          const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+        if (fs21.existsSync(file)) {
+          const snap = JSON.parse(fs21.readFileSync(file, "utf8"));
           for (const artifact of snap.artifacts ?? []) await MemoryArtifactStateStore.prototype.upsertArtifact.call(store, artifact);
           for (const revision of snap.revisions ?? []) await MemoryArtifactStateStore.prototype.upsertRevision.call(store, revision);
           for (const event of snap.events ?? []) await MemoryArtifactStateStore.prototype.appendEvent.call(store, event);
@@ -220323,8 +220880,8 @@ var init_dev_store = __esm({
           for (const ws of snap.workspaceDispatchHeld ?? []) await MemoryArtifactStateStore.prototype.setWorkspaceDispatchHold.call(store, ws, true);
           for (const f2 of snap.workOrderFiles ?? []) await MemoryArtifactStateStore.prototype.addWorkOrderFile.call(store, f2);
         } else {
-          fs20.mkdirSync(path21.dirname(file), { recursive: true });
-          fs20.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [], workOrderFiles: [] }, null, 2));
+          fs21.mkdirSync(path21.dirname(file), { recursive: true });
+          fs21.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [], workOrderFiles: [] }, null, 2));
         }
         return store;
       }
@@ -220361,7 +220918,7 @@ var init_dev_store = __esm({
         await this.save();
       }
       async save() {
-        fs20.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
       }
     };
     FileTraceStore = class _FileTraceStore extends MemoryTraceStore {
@@ -220388,25 +220945,25 @@ var init_dev_store = __esm({
         return path21.join(this.eventsDir, `${encodeURIComponent(runId)}.ndjson`);
       }
       appendLine(file, obj2) {
-        fs20.appendFileSync(file, JSON.stringify(obj2) + "\n");
+        fs21.appendFileSync(file, JSON.stringify(obj2) + "\n");
       }
       static replay(file, fn) {
-        if (!fs20.existsSync(file)) return;
-        for (const line2 of fs20.readFileSync(file, "utf8").split("\n")) {
+        if (!fs21.existsSync(file)) return;
+        for (const line2 of fs21.readFileSync(file, "utf8").split("\n")) {
           if (!line2.trim()) continue;
           fn(JSON.parse(line2));
         }
       }
       static async open(dir) {
         const store = new _FileTraceStore(dir);
-        fs20.mkdirSync(store.eventsDir, { recursive: true });
+        fs21.mkdirSync(store.eventsDir, { recursive: true });
         _FileTraceStore.replay(store.runsFile, (r) => store.restoreRun(r));
-        for (const name of fs20.readdirSync(store.eventsDir)) {
+        for (const name of fs21.readdirSync(store.eventsDir)) {
           _FileTraceStore.replay(path21.join(store.eventsDir, name), (e) => store.restoreEvent(e));
         }
         _FileTraceStore.replay(store.toolCallsFile, (c) => store.restoreToolCall(c));
         _FileTraceStore.replay(store.linksFile, (l) => store.restoreLink(l));
-        store.restoreContinuity(fs20.existsSync(store.continuityFile) ? JSON.parse(fs20.readFileSync(store.continuityFile, "utf8")) : {});
+        store.restoreContinuity(fs21.existsSync(store.continuityFile) ? JSON.parse(fs21.readFileSync(store.continuityFile, "utf8")) : {});
         return store;
       }
       async createRun(input) {
@@ -220458,8 +221015,8 @@ var init_dev_store = __esm({
       }
       saveContinuity() {
         const tmp = `${this.continuityFile}.tmp`;
-        fs20.writeFileSync(tmp, JSON.stringify(this.continuitySnapshot(), null, 2));
-        fs20.renameSync(tmp, this.continuityFile);
+        fs21.writeFileSync(tmp, JSON.stringify(this.continuitySnapshot(), null, 2));
+        fs21.renameSync(tmp, this.continuityFile);
       }
       async appendEvents(runId, inputs) {
         const existing = await super.listEvents(runId, {});
@@ -220920,8 +221477,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileChatSessionStore(file);
-        if (fs20.existsSync(file)) {
-          const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+        if (fs21.existsSync(file)) {
+          const snap = JSON.parse(fs21.readFileSync(file, "utf8"));
           for (const [sid, copies] of Object.entries(snap.outputCopies ?? {})) store.outputCopies.set(sid, copies);
           for (const [sid, fps] of Object.entries(snap.outputFingerprints ?? {})) store.outputFingerprints.set(sid, fps);
           for (const [sid, issues] of Object.entries(snap.fileIssues ?? {})) store.fileIssues.set(sid, issues);
@@ -220931,8 +221488,8 @@ var init_dev_store = __esm({
           for (const [sid, kinds] of Object.entries(snap.sessionWorkOrderKinds ?? {})) store.sessionWorkOrderKinds.set(sid, new Map(Object.entries(kinds)));
           for (const [sid, list2] of Object.entries(snap.pending ?? {})) store.pending.set(sid, list2);
         } else {
-          fs20.mkdirSync(path21.dirname(file), { recursive: true });
-          fs20.writeFileSync(file, JSON.stringify({ sessions: [], messages: {}, sessionWorkOrders: {} }, null, 2));
+          fs21.mkdirSync(path21.dirname(file), { recursive: true });
+          fs21.writeFileSync(file, JSON.stringify({ sessions: [], messages: {}, sessionWorkOrders: {} }, null, 2));
         }
         return store;
       }
@@ -221026,7 +221583,7 @@ var init_dev_store = __esm({
           sessionWorkOrderKinds: Object.fromEntries([...this.sessionWorkOrderKinds].map(([k2, v2]) => [k2, Object.fromEntries(v2)])),
           pending: Object.fromEntries(this.pending)
         };
-        fs20.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
     MemoryChatTurnStore = class {
@@ -221109,17 +221666,17 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileChatTurnStore(file);
-        if (fs20.existsSync(file)) {
-          const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+        if (fs21.existsSync(file)) {
+          const snap = JSON.parse(fs21.readFileSync(file, "utf8"));
           for (const t of snap.turns ?? []) store.turns.set(t.id, t);
         } else {
-          fs20.mkdirSync(path21.dirname(file), { recursive: true });
-          fs20.writeFileSync(file, JSON.stringify({ turns: [] }, null, 2));
+          fs21.mkdirSync(path21.dirname(file), { recursive: true });
+          fs21.writeFileSync(file, JSON.stringify({ turns: [] }, null, 2));
         }
         return store;
       }
       persist() {
-        fs20.writeFileSync(this.file, JSON.stringify({ turns: [...this.turns.values()] }, null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify({ turns: [...this.turns.values()] }, null, 2));
       }
     };
     MemoryReadMarkerStore = class _MemoryReadMarkerStore {
@@ -221145,12 +221702,12 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileReadMarkerStore(file);
-        if (fs20.existsSync(file)) {
-          const snap = JSON.parse(fs20.readFileSync(file, "utf8"));
+        if (fs21.existsSync(file)) {
+          const snap = JSON.parse(fs21.readFileSync(file, "utf8"));
           for (const m2 of snap.markers ?? []) store.markers.set(`${m2.actorId}\0${m2.scope}`, m2);
         } else {
-          fs20.mkdirSync(path21.dirname(file), { recursive: true });
-          fs20.writeFileSync(file, JSON.stringify({ markers: [] }, null, 2));
+          fs21.mkdirSync(path21.dirname(file), { recursive: true });
+          fs21.writeFileSync(file, JSON.stringify({ markers: [] }, null, 2));
         }
         return store;
       }
@@ -221159,18 +221716,18 @@ var init_dev_store = __esm({
         this.save();
       }
       save() {
-        fs20.writeFileSync(this.file, JSON.stringify({ markers: [...this.markers.values()] }, null, 2));
+        fs21.writeFileSync(this.file, JSON.stringify({ markers: [...this.markers.values()] }, null, 2));
       }
     };
   }
 });
 // ../server/src/control-plane-file-store.ts
-var fs21, path22, MUTATORS2, SNAPSHOT_VERSION, FileControlPlaneStore;
+var fs22, path22, MUTATORS2, SNAPSHOT_VERSION, FileControlPlaneStore;
 var init_control_plane_file_store = __esm({
   "../server/src/control-plane-file-store.ts"() {
     "use strict";
-    fs21 = __toESM(require("node:fs"), 1);
+    fs22 = __toESM(require("node:fs"), 1);
     path22 = __toESM(require("node:path"), 1);
     init_src9();
     MUTATORS2 = [
@@ -221213,8 +221770,8 @@ var init_control_plane_file_store = __esm({
       }
       static async open(file) {
         const store = new _FileControlPlaneStore(file);
-        if (fs21.existsSync(file)) {
-          const snap = JSON.parse(fs21.readFileSync(file, "utf8"));
+        if (fs22.existsSync(file)) {
+          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
           const needsOnboardingBackfill = (snap.version ?? 1) < 2;
           const backfillAt = (/* @__PURE__ */ new Date()).toISOString();
           for (const c of snap.companies ?? []) await MemoryControlPlaneStore.prototype.createCompany.call(store, c);
@@ -221232,7 +221789,7 @@ var init_control_plane_file_store = __esm({
           for (const op of snap.offboardings ?? []) store.offboardings.set(`${op.companyId}\0${op.operationId}`, op);
           if (needsOnboardingBackfill) await store.save();
         } else {
-          fs21.mkdirSync(path22.dirname(file), { recursive: true });
+          fs22.mkdirSync(path22.dirname(file), { recursive: true });
         }
         return store;
       }
@@ -221269,7 +221826,7 @@ var init_control_plane_file_store = __esm({
           // 交接操作无按公司列举的读面（按 operationId / accountId 定位），直接读 protected map。
           offboardings: [...this.offboardings.values()]
         };
-        fs21.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs22.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
   }
@@ -223441,8 +223998,12 @@ var init_dispatch_binding_diagnosis = __esm({
 });
 // ../server/src/zero-output-breaker.ts
+function roundKeyOfZeroOutputRun(run) {
+  return run.workId ?? run.id.replace(PROTOCOL_RECOVERY_SUFFIX, "");
+}
 function absorb(b2, r, startedMs) {
   b2.count += 1;
+  b2.rounds.add(roundKeyOfZeroOutputRun(r));
   b2.costUsdMicros += r.costUsdMicros ?? 0;
   if (startedMs >= b2.latestStartedMs) {
     b2.latestStartedMs = startedMs;
@@ -223510,6 +224071,7 @@ async function scanZeroOutputBreaker(deps) {
       actorId: axis === "count" ? b2.actorId : null,
       cls: axis === "count" ? b2.cls : null,
       count: b2.count,
+      workCount: b2.rounds.size,
       costUsdMicros: b2.costUsdMicros,
       windowMs: deps.windowMs,
       latestRunId: b2.latestRunId,
@@ -223519,7 +224081,7 @@ async function scanZeroOutputBreaker(deps) {
     const who = axis === "count" ? `${b2.actorId}\uFF08${b2.cls}\uFF09` : "\u8BE5\u8282\u70B9\u5168\u90E8\u6267\u884C\u4EBA\u5408\u8BA1";
     const cidTag = deps.defaultCompanyId && b2.companyId !== deps.defaultCompanyId ? ` [${b2.companyId}]` : "";
     deps.log?.(
-      `[zero-output-breaker] ${b2.artifactId}${cidTag}\uFF1A\u6700\u8FD1 ${Math.round(deps.windowMs / 6e4)} \u5206\u949F\u5185 ${who} \u7D2F\u8BA1 ${b2.count} \u6B21\u96F6\u4EA7\u51FA\uFF08\u7EA6 $${(b2.costUsdMicros / 1e6).toFixed(1)}\uFF09\u2192 ${axis} \u8F74\u8DF3\u95F8`
+      `[zero-output-breaker] ${b2.artifactId}${cidTag}\uFF1A\u6700\u8FD1 ${Math.round(deps.windowMs / 6e4)} \u5206\u949F\u5185 ${who} \u7D2F\u8BA1 ${b2.count} \u6B21\u96F6\u4EA7\u51FA\uFF08${b2.rounds.size} \u8F6E\uFF0C\u7EA6 $${(b2.costUsdMicros / 1e6).toFixed(1)}\uFF09\u2192 ${axis} \u8F74\u8DF3\u95F8`
     );
   };
   const byKey = (a, b2) => a.artifactId.localeCompare(b2.artifactId) || (a.actorId ?? "").localeCompare(b2.actorId ?? "");
@@ -223545,32 +224107,35 @@ async function scanZeroOutputBreaker(deps) {
 function formatZeroOutputNotice(t) {
   const usd2 = (t.costUsdMicros / 1e6).toFixed(1);
   const mins = Math.round(t.windowMs / 6e4);
+  const runs = t.count > t.workCount ? `\u5171 ${t.count} \u6B21\u8FD0\u884C\uFF0C\u542B\u540C\u4E00\u8F6E\u5185\u7684\u81EA\u52A8\u7EED\u8DD1\uFF1B` : "";
   const remark = t.closingRemark && t.closingRemark.trim() ? `
 \u6700\u8FD1\u4E00\u6B21\u8FD0\u884C\u7684\u6536\u5C3E\u53D1\u8A00\uFF08\u5F80\u5F80\u76F4\u63A5\u5199\u7740\u5361\u5728\u54EA\uFF09\uFF1A
 ${t.closingRemark.trim()}` : "";
   const tail = `\u8FD9\u4E0D\u662F\u5728\u5224\u67D0\u4E00\u6B21\u8FD0\u884C\u5931\u8D25\u2014\u2014\u662F\u5728\u8FD9\u6BB5\u65F6\u95F4\u91CC\u53CD\u590D\u96F6\u4EA7\u51FA\u3002\u65E0\u8BBA\u6BCF\u4E00\u6B21\u9000\u51FA\u591A\u4E48\u300C\u6B63\u5E38\u300D\uFF0C\u53CD\u590D\u5230\u8FD9\u4E2A\u6B21\u6570\u901A\u5E38\u610F\u5473\u7740\u5361\u5728\u4E00\u4E2A\u53CD\u590D\u91CD\u8BD5\u4E5F\u8FC7\u4E0D\u53BB\u7684\u574E\u4E0A\uFF08\u7F3A\u51ED\u636E\u3001\u4E0A\u6E38\u670D\u52A1\u8FDE\u4E0D\u4E0A\u3001\u6216\u649E\u4E0A\u4E86\u522B\u7684\u6B7B\u5FAA\u73AF\uFF09\u3002\u8BF7\u770B\u4E00\u773C\u6839\u56E0\uFF1B\u5904\u7406\u5B8C\u7528 \`oasis release\` \u6062\u590D\u3002` + remark;
   if (t.axis === "cost") {
-    return `\u8FD9\u4E2A\u4EA7\u7269\u5728\u6700\u8FD1 ${mins} \u5206\u949F\u5185\u7D2F\u8BA1\u6709 ${t.count} \u6B21\u8FD0\u884C**\u4EC0\u4E48\u90FD\u6CA1\u4EA4\u51FA\u6765**\uFF0C\u8FD9\u4E9B\u7A7A\u8DD1\u5408\u8BA1\u5DF2\u7ECF\u82B1\u6389\u7EA6 $${usd2}\uFF0C\u5DF2\u81EA\u52A8\u6682\u505C\u6D3E\u53D1\u4EE5\u6B62\u635F\u3002
+    return `\u8FD9\u4E2A\u4EA7\u7269\u5728\u6700\u8FD1 ${mins} \u5206\u949F\u5185\u6709 ${t.workCount} \u8F6E**\u4EC0\u4E48\u90FD\u6CA1\u4EA4\u51FA\u6765**\uFF08${runs}\u8FD9\u4E9B\u7A7A\u8DD1\u5408\u8BA1\u5DF2\u7ECF\u82B1\u6389\u7EA6 $${usd2}\uFF09\uFF0C\u5DF2\u81EA\u52A8\u6682\u505C\u6D3E\u53D1\u4EE5\u6B62\u635F\u3002
 ` + tail;
   }
   const who = t.cls === "review" ? `\u8BC4\u5BA1\u5458 ${t.actorId}` : `\u6267\u884C\u4EBA ${t.actorId}`;
   const what = t.cls === "review" ? `\u5DF2\u505C\u6389\u8FD9\u540D\u8BC4\u5BA1\u5458\u5728\u672C\u8282\u70B9\u4E0A\u7684\u8BC4\u5BA1\uFF08**\u4EA4\u4ED8\u5185\u5BB9\u539F\u6837\u4FDD\u7559**\uFF0C\u6062\u590D\u540E\u53EF\u7EE7\u7EED\u6295\u7968\uFF09` : `\u5DF2\u81EA\u52A8\u6682\u505C\u8BE5\u4EA7\u7269\u7684\u6D3E\u53D1\u4EE5\u6B62\u635F`;
-  return `${who} \u5728\u6700\u8FD1 ${mins} \u5206\u949F\u5185\u4E3A\u8FD9\u4E2A\u4EA7\u7269\u8DD1\u4E86 ${t.count} \u6B21\uFF0C**\u6BCF\u6B21\u90FD\u4EC0\u4E48\u90FD\u6CA1\u4EA4\u51FA\u6765**\uFF08\u8FD9\u4E9B\u7A7A\u8DD1\u7D2F\u8BA1\u82B1\u8D39\u7EA6 $${usd2}\uFF09\uFF0C${what}\u3002
+  return `${who} \u5728\u6700\u8FD1 ${mins} \u5206\u949F\u5185\u4E3A\u8FD9\u4E2A\u4EA7\u7269\u8DD1\u4E86 ${t.workCount} \u8F6E\uFF0C**\u6BCF\u4E00\u8F6E\u90FD\u4EC0\u4E48\u90FD\u6CA1\u4EA4\u51FA\u6765**\uFF08${runs}\u8FD9\u4E9B\u7A7A\u8DD1\u7D2F\u8BA1\u82B1\u8D39\u7EA6 $${usd2}\uFF09\uFF0C${what}\u3002
 ` + tail;
 }
-var emptyBucket;
+var PROTOCOL_RECOVERY_SUFFIX, emptyBucket;
 var init_zero_output_breaker = __esm({
   "../server/src/zero-output-breaker.ts"() {
     "use strict";
+    PROTOCOL_RECOVERY_SUFFIX = /(?::protocol-recovery)+$/;
     emptyBucket = (artifactId, companyId, actorId, cls) => ({
       artifactId,
       companyId,
       actorId,
       cls,
       count: 0,
+      rounds: /* @__PURE__ */ new Set(),
       costUsdMicros: 0,
       latestRunId: "",
       latestStartedMs: -Infinity
@@ -223970,6 +224535,11 @@ function chatRunLedgerFields(req) {
   if (req.executionProfile === "discussion-background") return { chatSessionId: null, chatTurnId: null };
   return { chatSessionId: req.chatSessionId ?? null, chatTurnId: req.chatTurnId ?? null };
 }
+function chatExitModelFields(runtimeReportedModel, dispatchedModel, dispatchedModelSource) {
+  const effectiveModel = runtimeReportedModel || dispatchedModel || null;
+  if (!effectiveModel) return {};
+  return { effectiveModel, modelSource: runtimeReportedModel ? "runtime" : dispatchedModelSource };
+}
 function createUsageLedgerResolver(deps) {
   const safeCompanyOfRun = (runId) => deps.companyOfRun(runId).catch(() => null);
   return async (dispatchId) => {
@@ -223985,6 +224555,15 @@ function createUsageLedgerResolver(deps) {
     return chatCid ? { runId: stable, store: await deps.storeFor(chatCid) } : null;
   };
 }
+async function backfillRunModel(target, run, model, warn) {
+  if (!model || model.trim().length === 0) return;
+  if (run.effectiveModel && run.effectiveModel.trim().length > 0) return;
+  try {
+    await target.store.updateRun(target.runId, { effectiveModel: model, modelSource: "runtime" });
+  } catch (err) {
+    warn(`[usage-ledger] run ${target.runId} \u7684\u6A21\u578B\u540D\u8865\u5199\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u4F1A\u8BDD\uFF09\uFF1A${String(err)}`);
+  }
+}
 function createUsageLedgerFrameHandler(deps) {
   const warn = deps.warn ?? defaultWarn;
   const marker = deps.marker ?? new RuntimeStartMarker({ warn });
@@ -224046,6 +224625,7 @@ function createUsageLedgerFrameHandler(deps) {
         usage: msg.usage,
         model: msg.model ?? null
       });
+      await backfillRunModel(target, run, msg.model, warn);
     } catch (err) {
       warn(`[usage-ledger] \u5904\u7406 ${msg.type} dispatch=${dispatchId} \u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u4F1A\u8BDD\uFF09\uFF1A${String(err)}`);
     }
@@ -225048,18 +225628,27 @@ function wireRecoveredChatTurn(deps) {
       log3(`[chat-recovery] \u4F1A\u8BDD ${plan.chatSessionId} \u91CD\u6302\uFF1A\u8865\u53D1\u6709 ${droppedFrames} \u5E27\u6CA1\u63A5\u4F4F\uFF08run ${plan.runId}\uFF09\uFF0C\u672C\u8F6E\u6309\u300C\u8F93\u51FA\u4E0D\u5B8C\u6574\u300D\u6536\u5C3E${exitIsFailure ? "\uFF08\u9000\u51FA\u5E27\u672C\u8EAB\u4E5F\u662F\u5931\u8D25\uFF09" : "\uFF0C\u4E0D\u8BB0\u6210\u6210\u529F"}`);
     }
     if (failed) {
-      const exitAttribution = exitIsFailure ? attributeChatExit(exitErrorText(info), {
-        ...info.reason ? { reason: info.reason } : {},
-        ...cancelCauseFromExitMessage(info.errorMessage) ? { cancelledBy: cancelCauseFromExitMessage(info.errorMessage) } : {}
+      const exitSummary = exitIsFailure ? chatExitSummary(info) : void 0;
+      const exitAttribution = exitSummary ? attributeChatExit(exitSummary.summary, {
+        ...exitSummary.reason ? { reason: exitSummary.reason } : {},
+        ...exitSummary.detail ? { detail: exitSummary.detail } : {},
+        ...exitSummary.cancelledBy ? { cancelledBy: exitSummary.cancelledBy } : {}
       }, live.cancelCause()) : void 0;
       const errText2 = [
         exitAttribution?.text,
         droppedFrames > 0 ? outputGapNotice(droppedFrames) : void 0
       ].filter((t) => Boolean(t)).join("\n\n");
-      live.emit({ type: "error", text: errText2, ...exitAttribution?.extra.cancelledBy ? { cancelledBy: exitAttribution.extra.cancelledBy } : {} });
+      live.emit({
+        type: "error",
+        text: errText2,
+        ...exitAttribution?.extra.detail ? { detail: exitAttribution.extra.detail } : {},
+        ...exitAttribution?.extra.cancelledBy ? { cancelledBy: exitAttribution.extra.cancelledBy } : {}
+      });
       const errReason = exitIsFailure ? info.reason : OUTPUT_GAP_ERROR_CODE;
       const errExtra = {
         ...errReason ? { reason: errReason } : {},
+        /* 运行时原文只进 detail：刷新后读的是这一行，「展开详情」要能翻出退出码与原始报错。 */
+        ...exitAttribution?.extra.detail ? { detail: exitAttribution.extra.detail } : {},
         ...exitAttribution?.extra.cancelledBy ? { cancelledBy: exitAttribution.extra.cancelledBy } : {}
       };
       const errorOutcome = itemLedger.recordError(errText2, errExtra);
@@ -225100,7 +225689,7 @@ function wireRecoveredChatTurn(deps) {
       touchedAt: finishedAt
     }).catch(() => void 0);
     if (deps.onTurnSettled) {
-      await deps.onTurnSettled(failed ? "failed" : "succeeded", finishedAt).catch((err) => {
+      await deps.onTurnSettled(failed ? "failed" : "succeeded", finishedAt, info.reason ?? void 0).catch((err) => {
         log3(`[chat-recovery] \u4F1A\u8BDD ${plan.chatSessionId} \u6536\u53E3\u8BB0\u8D26\u5931\u8D25\uFF08\u9000\u56DE\u6E05\u626B\u62CD\u515C\u5E95\uFF09: ${String(err)}`);
       });
     }
@@ -225297,13 +225886,26 @@ async function reconcileChatExitFrame(deps) {
       if (part) parts.push({ ...part, seq: ++seq });
     }
     if (failed) {
+      const exitSummary = exitIsFailure ? chatExitSummary(info) : void 0;
       const errText2 = [
-        exitIsFailure ? exitErrorText(info) : void 0,
+        exitSummary?.summary,
         droppedFrames > 0 ? outputGapNotice(droppedFrames) : void 0
       ].filter((t) => Boolean(t)).join("\n\n");
       const errReason = exitIsFailure ? info.reason : OUTPUT_GAP_ERROR_CODE;
-      itemLedger.recordError(errText2, { ...errReason ? { reason: errReason } : {} });
-      parts.push({ type: "error", seq: ++seq, text: errText2 });
+      const errExtra = {
+        ...errReason ? { reason: errReason } : {},
+        ...exitSummary?.detail ? { detail: exitSummary.detail } : {},
+        ...exitSummary?.cancelledBy ? { cancelledBy: exitSummary.cancelledBy } : {}
+      };
+      itemLedger.recordError(errText2, errExtra);
+      parts.push({
+        type: "error",
+        seq: ++seq,
+        text: errText2,
+        ...exitIsFailure && info.reason ? { reason: info.reason } : {},
+        ...exitSummary?.detail ? { detail: exitSummary.detail } : {},
+        ...exitSummary?.cancelledBy ? { cancelledBy: exitSummary.cancelledBy } : {}
+      });
     }
     normalizer.turnFinished(failed ? "failed" : "completed");
     itemLedger.finish(failed ? "failed" : "completed");
@@ -225364,7 +225966,8 @@ async function reconcileChatExitFrame(deps) {
           chatSessionId: row.sessionId,
           turnId: turn.id,
           status,
-          reason: `\u505C\u673A\u7A97\u53E3\u5185\u7ED3\u675F\u7684\u8F6E\u4EE5 ${status} \u6536\u5C3E`
+          reason: `\u505C\u673A\u7A97\u53E3\u5185\u7ED3\u675F\u7684\u8F6E\u4EE5 ${status} \u6536\u5C3E`,
+          ...info.reason ? { exitReason: info.reason } : {}
         });
       } catch (err) {
         deps.log?.(`[chat-recovery] \u8F6E\u6B21 ${turn.id} \u6536\u53E3\u540E\u7684\u8BB0\u8D26/\u5916\u62A5\u5931\u8D25\uFF08\u884C\u5DF2\u6536\u5C3E\uFF09: ${String(err)}`);
@@ -225520,7 +226123,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
         }
         const handle = deps.recover(plan);
         const settleTurnId = turn?.id;
-        const onTurnSettled = settleTurnId && stores.settleTurn ? async (status, completedAt) => {
+        const onTurnSettled = settleTurnId && stores.settleTurn ? async (status, completedAt, exitReason) => {
           await stores.settleTurn(settleTurnId, {
             status,
             completedAt,
@@ -225532,6 +226135,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
             turnId: settleTurnId,
             status,
             reason: `\u91CD\u6302\u7684\u8F6E\u4EE5 ${status} \u6536\u5C3E`,
+            ...exitReason ? { exitReason } : {},
             ...companyId ? { companyId } : {}
           });
         } : void 0;
@@ -225577,6 +226181,7 @@ var init_chat_recovery = __esm({
     init_chat_assistant_turn();
     init_src2();
     init_session_exit_outcome();
+    init_chat_exit();
     init_chat_cancel_attribution();
     asObj3 = (v2) => v2 && typeof v2 === "object" && !Array.isArray(v2) ? v2 : void 0;
     partsOf = (parts) => Array.isArray(parts) ? parts.filter((p2) => p2 && typeof p2 === "object" && typeof p2.type === "string") : [];
@@ -225826,6 +226431,8 @@ var init_daemon_hub = __esm({
       sessionMeta = /* @__PURE__ */ new Map();
       sessionConnectListeners = [];
       sessionDisconnectListeners = [];
+      /** Bug 0224：等某条会话连上数据面的一次性等待者（dispatchId → 兑现函数）。见 {@link waitForSession}。 */
+      sessionReadyWaiters = /* @__PURE__ */ new Map();
       // ── ADR 0300 D2「日志复制」：帧号 + 累积 ackSeq + 幂等摄入 ────────────────────────────
       // 只对自报 supportsFrameSeq 的会话生效；老会话这三张表始终为空、逐字走原 outbox 语义。
       /** 自报支持帧号的 dispatchId。 */
@@ -226089,6 +226696,11 @@ var init_daemon_hub = __esm({
                 ...msg.jobArtifactId ? { jobArtifactId: msg.jobArtifactId } : {}
               });
               for (const l of this.sessionConnectListeners) l({ dispatchId, sessionId: msg.sessionId, nodeId });
+              const readyWaiters = this.sessionReadyWaiters.get(dispatchId);
+              if (readyWaiters) {
+                this.sessionReadyWaiters.delete(dispatchId);
+                for (const w2 of readyWaiters) w2(true);
+              }
               void this.judgeSession(dispatchId, ws);
             }
             if (msg.supportsFrameSeq) {
@@ -226260,6 +226872,35 @@ var init_daemon_hub = __esm({
       addSessionDisconnectListener(l) {
         this.sessionDisconnectListeners.push(l);
       }
+      /**
+       * Bug 0224：等这次派发的会话进程连上数据面（`session_hello` 登记完），最多等 `timeoutMs`。
+       * 已连着立即回 true；等到了回 true；超时回 false。
+       *
+       * 为什么要等：每一轮开始时节点另起一个会话进程，它自己连回来、在 hello 里报「能回报插话读到的位置」。
+       * 连上之前 {@link supportsInputConsumptionReceipts} 只能答 false——那不是「不支持」，是「还没到」。
+       */
+      waitForSession(dispatchId, timeoutMs) {
+        if (this.hasSession(dispatchId)) return Promise.resolve(true);
+        return new Promise((resolve11) => {
+          let waiters = this.sessionReadyWaiters.get(dispatchId);
+          if (!waiters) {
+            waiters = /* @__PURE__ */ new Set();
+            this.sessionReadyWaiters.set(dispatchId, waiters);
+          }
+          const done = (connected) => {
+            clearTimeout(timer);
+            resolve11(connected);
+          };
+          const timer = setTimeout(() => {
+            const set = this.sessionReadyWaiters.get(dispatchId);
+            set?.delete(done);
+            if (set && set.size === 0) this.sessionReadyWaiters.delete(dispatchId);
+            resolve11(false);
+          }, timeoutMs);
+          timer.unref?.();
+          waiters.add(done);
+        });
+      }
       /** 这次派发有没有一根活着的数据面连接（有 = 会话自己在说话，不必再问节点）。 */
       hasSession(dispatchId) {
         return this.sessionSockets.get(dispatchId)?.readyState === import_websocket.default.OPEN;
@@ -231236,7 +231877,7 @@ function createRegistryAuditSink(file) {
   return {
     /** 登记审计：落盘 + 推 registry 通知（前端据此重拉登记类投影）。 */
     registryAudit: (record9) => {
-      fs22.appendFile(file, JSON.stringify(record9) + "\n", () => {
+      fs23.appendFile(file, JSON.stringify(record9) + "\n", () => {
       });
       notify({ kind: record9.kind, actor: record9.actor, target: record9.target, timestamp: record9.timestamp });
     },
@@ -231250,7 +231891,7 @@ function createRegistryAuditSink(file) {
      * 得先让通知带组织、`/api/events` 按组织过滤（recvvzbhOGiS7l 的完整修复），再放回来。
      */
     credentialAudit: (record9) => {
-      fs22.appendFile(file, JSON.stringify(record9) + "\n", () => {
+      fs23.appendFile(file, JSON.stringify(record9) + "\n", () => {
       });
     },
     /** runtime 状态变了：只发无内容的失效提示（ADR 0576）。 */
@@ -231267,11 +231908,11 @@ function createRegistryAuditSink(file) {
     }
   };
 }
-var fs22;
+var fs23;
 var init_registry_audit_sink = __esm({
   "../server/src/domains/actors/registry-audit-sink.ts"() {
     "use strict";
-    fs22 = __toESM(require("node:fs"), 1);
+    fs23 = __toESM(require("node:fs"), 1);
   }
 });
@@ -233201,8 +233842,18 @@ var init_review_requirement_activity = __esm({
 });
 // ../server/src/domains/collab/activity.ts
+function coordinatorCardGapId(cardId) {
+  return cardId.startsWith(COORDINATOR_CARD_PREFIX) ? cardId.slice(COORDINATOR_CARD_PREFIX.length) : void 0;
+}
+function coordinatorRunOfGap(gap, runs) {
+  const opensAt = gap.createdAt;
+  const closesAt = gap.resolvedAt ?? null;
+  const overlapping = runs.filter((r) => (!closesAt || r.startedAt <= closesAt) && (!r.endedAt || r.endedAt >= opensAt)).sort((a, b2) => a.startedAt.localeCompare(b2.startedAt) || a.id.localeCompare(b2.id));
+  return overlapping.find((r) => r.startedAt >= opensAt) ?? overlapping.at(-1);
+}
 function escalationKindOf(issueId, authorActorId) {
   if (issueId.startsWith(RETRY_EXHAUSTED_ESC_PREFIX)) return "retry_exhausted";
+  if (issueId.startsWith(REVIEW_EXHAUSTED_ESC_PREFIX2)) return "review_exhausted";
   return isSystemActorId(authorActorId) ? "output_stall" : "manual";
 }
 function parseStopLossFacts(kind, body2) {
@@ -233211,7 +233862,7 @@ function parseStopLossFacts(kind, body2) {
     const reason = /末次失败原因（原文）：([^\n]+)/.exec(body2)?.[1]?.trim();
     return { ...n2 ? { count: Number(n2) } : {}, ...reason ? { lastReason: firstSentence(reason) } : {} };
   }
-  const n = /(?:跑了|累计有)\s*(\d+)\s*次/.exec(body2)?.[1];
+  const n = /(?:跑了|有)\s*(\d+)\s*轮/.exec(body2)?.[1] ?? /(?:跑了|累计有)\s*(\d+)\s*次/.exec(body2)?.[1];
   const rawCost = /约\s*\$([\d.]+)/.exec(body2)?.[1];
   const cost = rawCost !== void 0 && Number.isFinite(Number(rawCost)) ? `$${Number(rawCost).toFixed(2)}` : void 0;
   return { ...n ? { count: Number(n) } : {}, ...cost ? { cost } : {} };
@@ -233569,7 +234220,7 @@ function buildWorkorderActivity(input) {
         card2.segmentOpen = false;
         card2.status = interrupt.kind === "gap" ? ACTIVITY_COPY.interruptedByGap(name, nameOf(managerId ?? ownerId)) : ACTIVITY_COPY.interruptedByIssue(name);
         if (interrupt.kind === "gap" && interrupt.authorId) {
-          card2.actions = [{ kind: "open_thread", label: BUTTON.gapThread, target: gapThreadSessionId(interrupt.authorId) }];
+          card2.actions = [{ kind: "open_thread", label: BUTTON.view, target: gapThreadSessionId(interrupt.authorId) }];
         }
         if (interrupt.at > card2.updatedAt) card2.updatedAt = interrupt.at;
       } else if (supersededBy) {
@@ -233623,6 +234274,7 @@ function buildWorkorderActivity(input) {
   const recoveryLetterIssueIds = /* @__PURE__ */ new Set();
   const plainComments = [];
   const escalations = [];
+  const gapCreatedSeq = /* @__PURE__ */ new Map();
   const plainResolveEvents = /* @__PURE__ */ new Map();
   const acceptCards = /* @__PURE__ */ new Map();
   const standalone = [];
@@ -233879,7 +234531,10 @@ function buildWorkorderActivity(input) {
           });
           break;
         }
-        if (isGap) break;
+        if (isGap) {
+          gapCreatedSeq.set(issueId, rec2.seq);
+          break;
+        }
         if (isRecoveryLetter) recoveryLetterIssueIds.add(issueId);
         const nodeAssignee = nodeId ? nodeById.get(nodeId)?.assigneeActorId : void 0;
         const commentCounterpart = nodeAssignee ?? ownerId;
@@ -233905,7 +234560,7 @@ function buildWorkorderActivity(input) {
              全库实测最长 8096 字印两遍（`ws:wo-56bba3c1`），一张卡顶掉整屏。 */
           artifacts: [],
           /* 缺口不出按钮（处置在缺口线上，由「任务内沟通」那一列进）；
-             留言给「去查看」直达留言线——线是投影出来的、恒存在，id 这里就能算；
+             留言给「查看留言」直达留言线——线是投影出来的、恒存在，id 这里就能算；
              回压仍给「去处理」落到产物预览栏（那儿才有批注的处置面）。
              留言算不出对面是谁（该产物没负责人）时退回「去处理」，别给一个开不了的落点。 */
           actions: isBackpressure || !commentTargetId ? [{ kind: "open_issue", label: BUTTON.handle, target: issueId }] : [{ kind: "open_thread", label: BUTTON.view, target: commentThreadSessionId(authorId, commentTargetId) }]
@@ -234079,150 +234734,135 @@ function buildWorkorderActivity(input) {
       commentIssueIds: ids2
     });
   }
-  {
-    const groupKeyOf2 = (e, kind) => kind === "output_stall" ? `${e.nodeId ?? ""}|${kind}` : `solo|${e.id}`;
-    const groups = /* @__PURE__ */ new Map();
-    for (const e of [...escalations].sort((a, b2) => a.at.localeCompare(b2.at) || a.seq - b2.seq)) {
-      const kind = escalationKindOf(e.id, issueById.get(e.id)?.authorActorId ?? e.authorId);
-      const key2 = groupKeyOf2(e, kind);
-      groups.set(key2, [...groups.get(key2) ?? [], { ...e, kind }]);
-    }
-    for (const members of groups.values()) {
-      const first = members[0];
-      const latest = members.at(-1);
-      const kind = latest.kind;
-      const resolvedAt = (id) => issueById.get(id)?.resolvedAt ?? null;
-      const open3 = members.filter((m2) => !resolvedAt(m2.id));
-      const target = resolveEscalationRecipient({
-        recipients: latest.recipients,
-        authorActorId: latest.authorId,
-        stuckActorId: latest.stuckActorId,
-        ownerActorId: ownerId,
-        managerActorId: managerId
-      });
-      const stuckActor = (isStopLoss(kind) ? latest.nodeId ? nodeById.get(latest.nodeId)?.assigneeActorId : void 0 : void 0) ?? latest.stuckActorId;
-      const active = open3.at(-1) ?? latest;
-      const inDiscussion = open3.some((m2) => input.escalationsInDiscussion?.has(m2.id));
-      const stamps = [
-        ...members.map((m2) => m2.at),
-        ...members.map((m2) => resolvedAt(m2.id)).filter((t) => !!t)
-      ].sort();
-      const gapBehind = (id) => {
-        const gapId = issueById.get(id)?.gapId;
-        return typeof gapId === "string" && !!issueById.get(gapId);
-      };
-      const head = kind === "retry_exhausted" ? ACTIVITY_COPY.escalationHeadRetryExhausted(nodeName(latest.nodeId)) : kind === "output_stall" ? ACTIVITY_COPY.escalationHeadOutputStall(nodeName(latest.nodeId)) : gapBehind(latest.id) ? ACTIVITY_COPY.escalationHeadGapEscalated(nameOf(latest.authorId), nodeName(latest.nodeId)) : ACTIVITY_COPY.escalationHeadManual(nameOf(stuckActor));
-      const howTo = kind === "retry_exhausted" ? ACTIVITY_COPY.escalationHowToRetryExhausted : kind === "output_stall" ? ACTIVITY_COPY.escalationHowToOutputStall : void 0;
-      const closing = issueById.get(latest.id);
-      const closeEvent = plainResolveEvents.get(latest.id);
-      const closedBy = text5(closing?.resolvedBy) ?? closeEvent?.by ?? target;
-      const closingNote = text5(closing?.resolvedNote) ?? text5(closeEvent?.note);
-      const noteOf = (id) => text5(issueById.get(id)?.resolvedNote) ?? text5(plainResolveEvents.get(id)?.note);
-      const rerunClosed = closingNote === ESCALATION_RERUN_NOTE;
-      const rerunOrdinal = escalations.filter((e) => e.nodeId === latest.nodeId && noteOf(e.id) === ESCALATION_RERUN_NOTE && (issueById.get(e.id)?.resolvedAt ?? "") <= (issueById.get(latest.id)?.resolvedAt ?? "")).length;
-      const doneStatus = rerunClosed ? ACTIVITY_COPY.escalationRerun(nameOf(closedBy), Math.max(rerunOrdinal, 1)) : ACTIVITY_COPY.escalationHandled(head, nameOf(closedBy), closingNote);
-      const retryExhaustedSoFar = escalations.filter((e) => e.nodeId === latest.nodeId && escalationKindOf(e.id, issueById.get(e.id)?.authorActorId ?? e.authorId) === "retry_exhausted" && e.at <= latest.at).length;
-      const viewerIsTarget = !input.viewerActorId || input.viewerActorId === target;
-      const offerRerun = kind === "retry_exhausted" && viewerIsTarget && retryExhaustedSoFar < 2 && !!latest.nodeId;
-      issueCards.set(first.id, {
-        id: `issue:${first.id}`,
-        seq: first.seq,
-        at: first.at,
-        updatedAt: stamps.at(-1) ?? first.at,
-        ...first.nodeId ? { nodeId: first.nodeId } : {},
-        executorId: target,
-        /* 代操作人只在**还没关**的时候带：那是「谁替谁把这条上报派成待办」的事实。
-           关掉之后归因只认这次收口（`resolvedBy`），不沿用派发待办时的代操作者。 */
-        ...open3.length > 0 && active.handActorId ? { handActorId: active.handActorId } : {},
-        escalationKind: kind,
-        /* 大状态三档（F5）：待处理 → 处理中（讨论房里已经有人说过话）→ 已完成。
-           颜色跟着「这一段还开着吗」走：没关 ⇒ 暖橙（与「待开始」同一档），关了 ⇒ 灰。
-           关掉那一档不覆写 `phaseLabel`，用四档默认的「已完成」。 */
-        phase: open3.length === 0 ? "done" : inDiscussion ? "running" : "not_started",
-        segmentOpen: open3.length > 0,
-        ...open3.length === 0 ? {} : { phaseLabel: inDiscussion ? PHASE_LABEL.escalationInProgress : PHASE_LABEL.escalationPending },
-        status: open3.length === 0 ? doneStatus : ACTIVITY_COPY.escalationPendingWith(head, nameOf(target), howTo),
-        /* 上报正文**不上卡**——与缺口 / 回压同一条口径。此前这里把整封信塞进展开区，
-           `ws:wo-635d7add` 那条渲染出的是一屏字，连内部 artifact id 都印在卡面上。
-           全文的去处，就是那个「去处理」按钮。 */
-        artifacts: [],
-        /* 「去处理」进**还开着的那一条**上报自己的讨论房（`discuss_escalation`）——合并卡上点进去
-           必须是要人处理的那一条，不是第一条。房间不在这里造：前端拿 escalationId 去打
-           `POST /api/inbox/discuss`，那个端点按项幂等（ADR 0079 D1「一上报一房」）。
-           按钮文案按**查看者**分两态（Bug 0151 / PR #2003 / 用例 T-31）：不是收件人就写「去查看」
-           ——他点进去只有只读视图，按钮不该承诺一件他做不到的事。查看者取不到时保持「去处理」。
-           关掉之后按钮不收走、只换成「去查看」：那间讨论房是这条上报唯一的来龙去脉。 */
-        actions: open3.length === 0 ? [{ kind: "discuss_escalation", label: BUTTON.view, target: latest.id }] : offerRerun ? [
-          { kind: "rerun_node", label: BUTTON.rerun, target: active.id, variant: "primary" },
-          { kind: "discuss_escalation", label: BUTTON.handle, target: active.id, variant: "secondary" }
-        ] : [{
-          kind: "discuss_escalation",
-          label: viewerIsTarget ? BUTTON.handle : BUTTON.view,
-          target: active.id
-        }]
-      });
-    }
+  for (const e of [...escalations].sort((a, b2) => a.at.localeCompare(b2.at) || a.seq - b2.seq)) {
+    const kind = escalationKindOf(e.id, issueById.get(e.id)?.authorActorId ?? e.authorId);
+    const resolvedAt = (id) => issueById.get(id)?.resolvedAt ?? null;
+    const closedAt = resolvedAt(e.id);
+    const open3 = !closedAt;
+    const target = resolveEscalationRecipient({
+      recipients: e.recipients,
+      authorActorId: e.authorId,
+      stuckActorId: e.stuckActorId,
+      ownerActorId: ownerId,
+      managerActorId: managerId
+    });
+    const stuckActor = (isStopLoss(kind) ? e.nodeId ? nodeById.get(e.nodeId)?.assigneeActorId : void 0 : void 0) ?? e.stuckActorId;
+    const inDiscussion = open3 && !!input.escalationsInDiscussion?.has(e.id);
+    const gapBehind = (id) => {
+      const gapId = issueById.get(id)?.gapId;
+      return typeof gapId === "string" && !!issueById.get(gapId);
+    };
+    const head = kind === "retry_exhausted" ? ACTIVITY_COPY.escalationHeadRetryExhausted(nodeName(e.nodeId)) : kind === "review_exhausted" ? ACTIVITY_COPY.escalationHeadReviewExhausted(nodeName(e.nodeId)) : kind === "output_stall" ? ACTIVITY_COPY.escalationHeadOutputStall(nodeName(e.nodeId)) : gapBehind(e.id) ? ACTIVITY_COPY.escalationHeadGapEscalated(nameOf(e.authorId), nodeName(e.nodeId)) : ACTIVITY_COPY.escalationHeadManual(nameOf(stuckActor));
+    const howTo = kind === "retry_exhausted" ? ACTIVITY_COPY.escalationHowToRetryExhausted : kind === "review_exhausted" ? ACTIVITY_COPY.escalationHowToReviewExhausted : kind === "output_stall" ? ACTIVITY_COPY.escalationHowToOutputStall : void 0;
+    const closing = issueById.get(e.id);
+    const closeEvent = plainResolveEvents.get(e.id);
+    const closedBy = text5(closing?.resolvedBy) ?? closeEvent?.by ?? target;
+    const closingNote = text5(closing?.resolvedNote) ?? text5(closeEvent?.note);
+    const noteOf = (id) => text5(issueById.get(id)?.resolvedNote) ?? text5(plainResolveEvents.get(id)?.note);
+    const rerunClosed = closingNote === ESCALATION_RERUN_NOTE;
+    const rerunOrdinal = escalations.filter((x2) => x2.nodeId === e.nodeId && noteOf(x2.id) === ESCALATION_RERUN_NOTE && (resolvedAt(x2.id) ?? "") <= (closedAt ?? "")).length;
+    const doneStatus = rerunClosed ? ACTIVITY_COPY.escalationRerun(nameOf(closedBy), Math.max(rerunOrdinal, 1)) : ACTIVITY_COPY.escalationHandled(head, nameOf(closedBy), closingNote);
+    const retryExhaustedSoFar = escalations.filter((x2) => x2.nodeId === e.nodeId && escalationKindOf(x2.id, issueById.get(x2.id)?.authorActorId ?? x2.authorId) === "retry_exhausted" && x2.at <= e.at).length;
+    const viewerIsTarget = !input.viewerActorId || input.viewerActorId === target;
+    const offerRerun = kind === "retry_exhausted" && viewerIsTarget && retryExhaustedSoFar < 2 && !!e.nodeId;
+    issueCards.set(e.id, {
+      id: `issue:${e.id}`,
+      seq: e.seq,
+      at: e.at,
+      updatedAt: closedAt ?? e.at,
+      ...e.nodeId ? { nodeId: e.nodeId } : {},
+      executorId: target,
+      /* 代操作人只在**还没关**的时候带：那是「谁替谁把这条上报派成待办」的事实。
+         关掉之后归因只认这次收口（`resolvedBy`），不沿用派发待办时的代操作者。 */
+      ...open3 && e.handActorId ? { handActorId: e.handActorId } : {},
+      escalationKind: kind,
+      /* 大状态三档（F5）：待处理 → 处理中（讨论房里已经有人说过话）→ 已完成。
+         关掉那一档不覆写 `phaseLabel`，用四档默认的「已完成」。 */
+      phase: !open3 ? "done" : inDiscussion ? "running" : "not_started",
+      segmentOpen: open3,
+      /* 颜色（奕璇 2026-09-22 定的判据「是不是在等人动手」）：**上报没关 ⇒ 砖红**——这一段就卡在人
+         身上，卡面给的正是「去处理」/「重新运行」。关了 ⇒ 不再等人，`segmentOpen` 也随之为假 ⇒ 灰。
+         ⚠ **不按查看者分**：非收件人看到的按钮词是「查看留言」（Bug 0151 / 用例 T-31），但这件事照样
+         卡在人身上——颜色说的是这一段的状态，不是「轮到你了没有」。 */
+      awaitingHuman: open3,
+      ...open3 ? { phaseLabel: inDiscussion ? PHASE_LABEL.escalationInProgress : PHASE_LABEL.escalationPending } : {},
+      status: open3 ? ACTIVITY_COPY.escalationPendingWith(head, nameOf(target), howTo) : doneStatus,
+      /* 上报正文**不上卡**——与缺口 / 回压同一条口径。此前这里把整封信塞进展开区，
+         `ws:wo-635d7add` 那条渲染出的是一屏字，连内部 artifact id 都印在卡面上。
+         全文的去处，就是那个「去处理」按钮。 */
+      artifacts: [],
+      /* 「去处理」进**这条上报自己的**讨论房（`discuss_escalation`）——卡与房一一对应（ADR 0079 D1
+         「一上报一房」），所以关掉之后这张卡仍然指着当初处理它的那间房，不会被后来新开的上报改指。
+         房间不在这里造：前端拿 escalationId 去打 `POST /api/inbox/discuss`，那个端点按项幂等。
+         按钮文案按**查看者**分两态（Bug 0151 / PR #2003 / 用例 T-31）：不是收件人就写「查看留言」
+         ——他点进去只有只读视图，按钮不该承诺一件他做不到的事。查看者取不到时保持「去处理」。
+         关掉之后按钮不收走、只换成「查看留言」：那间讨论房是这条上报唯一的来龙去脉。 */
+      actions: !open3 ? [{ kind: "discuss_escalation", label: BUTTON.view, target: e.id }] : offerRerun ? [
+        { kind: "rerun_node", label: BUTTON.rerun, target: e.id, variant: "primary" },
+        { kind: "discuss_escalation", label: BUTTON.handle, target: e.id, variant: "secondary" }
+      ] : [{
+        kind: "discuss_escalation",
+        label: viewerIsTarget ? BUTTON.handle : BUTTON.view,
+        target: e.id
+      }]
+    });
   }
   const coordinatorCards = [];
+  const gapsClosedByCoordinatorCard = /* @__PURE__ */ new Set();
   {
-    const runs = [...input.coordinatorRuns ?? []].filter((r) => !!r.id && !!r.nodeId).sort((a, b2) => a.startedAt.localeCompare(b2.startedAt) || a.id.localeCompare(b2.id));
-    const episodes = [];
-    for (const r of runs) {
-      const prev = episodes.at(-1);
-      const overlapping = !!prev && prev.nodeId === r.nodeId && prev.actorId === r.actorId && (prev.endedAt === null || r.startedAt <= prev.endedAt);
-      if (prev && overlapping) {
-        prev.endedAt = prev.endedAt === null || !r.endedAt ? null : r.endedAt > prev.endedAt ? r.endedAt : prev.endedAt;
-        prev.statuses.push(r.status ?? null);
-        continue;
-      }
-      episodes.push({
-        id: r.id,
-        nodeId: r.nodeId,
-        actorId: r.actorId,
-        startedAt: r.startedAt,
-        endedAt: r.endedAt ?? null,
-        statuses: [r.status ?? null]
-      });
-    }
-    for (const run of episodes) {
-      const name = nodeName(run.nodeId);
-      const endedAt = run.endedAt;
-      const inWindow2 = (at) => !!at && at >= run.startedAt && (!endedAt || at <= endedAt);
-      const escalated = snap.issues.find((i) => i.kind === "escalation" && (i.aboutNodeId ?? i.raisedByNodeId) === run.nodeId && escalationKindOf(i.id, i.authorActorId) === "manual" && inWindow2(i.createdAt));
-      const fixedGap = snap.issues.find((i) => i.kind === "gap" && (i.aboutNodeId ?? i.raisedByNodeId) === run.nodeId && inWindow2(i.resolvedAt));
-      const gapOnNode = snap.issues.find((i) => i.kind === "gap" && (i.aboutNodeId ?? i.raisedByNodeId) === run.nodeId && i.createdAt <= (endedAt ?? run.startedAt));
-      const failedRun = !!endedAt && run.statuses.every((st) => !!st && st !== "succeeded");
+    const gaps = [...snap.issues].filter((i) => i.kind === "gap" && !!(i.aboutNodeId ?? i.raisedByNodeId)).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id));
+    for (const gap of gaps) {
+      const gapId = gap.id;
+      const nodeId = gap.aboutNodeId ?? gap.raisedByNodeId;
+      const name = nodeName(nodeId);
+      const resolvedAt = gap.resolvedAt ?? null;
+      const inWindow2 = (at) => !!at && at >= gap.createdAt && (!resolvedAt || at <= resolvedAt);
+      const escalated = snap.issues.find((i) => i.kind === "escalation" && escalationKindOf(i.id, i.authorActorId) === "manual" && (i.gapId === gapId || (i.aboutNodeId ?? i.raisedByNodeId) === nodeId && inWindow2(i.createdAt)));
+      const run = coordinatorRunOfGap(
+        { createdAt: gap.createdAt, resolvedAt },
+        (input.coordinatorRuns ?? []).filter((r) => !!r.id && r.nodeId === nodeId)
+      );
+      const failedRun = !!run?.endedAt && !!run.status && run.status !== "succeeded";
+      const coordinatorId = gap.resolvedBy ?? run?.actorId ?? managerId ?? ownerId;
+      const executorId = gap.authorActorId;
       const recipient = escalated ? resolveEscalationRecipient({
         recipients: (snap.issueRecipients ?? []).filter((r) => r.issueId === escalated.id).map((r) => r.actorId),
         authorActorId: escalated.authorActorId,
-        stuckActorId: gapOnNode?.authorActorId ?? escalated.authorActorId,
+        stuckActorId: executorId,
         ownerActorId: ownerId,
         managerActorId: managerId
       }) : void 0;
-      coordinatorCards.push({
-        id: `${COORDINATOR_CARD_PREFIX}${run.id}`,
-        seq: 0,
-        at: run.startedAt,
-        updatedAt: endedAt ?? run.startedAt,
-        nodeId: run.nodeId,
-        executorId: run.actorId,
-        /* 大状态用四档默认词（进行中 / 已完成），不覆写 `phaseLabel`——「补上了还是升级了」
-           在小状态那句话里说得比一个词清楚。颜色跟着「这一段还开着吗」走。 */
-        phase: endedAt ? "done" : "running",
-        segmentOpen: !endedAt,
-        status: !endedAt ? ACTIVITY_COPY.coordinatingNode(name) : escalated ? ACTIVITY_COPY.coordinatorEscalated(nameOf(run.actorId), name, nameOf(recipient)) : fixedGap ? ACTIVITY_COPY.coordinatorFixedGap(nameOf(run.actorId), nameOf(gapOnNode?.authorActorId)) : failedRun ? ACTIVITY_COPY.coordinatorFailed(name) : ACTIVITY_COPY.coordinatorInconclusive(nameOf(run.actorId), name),
+      const segmentOpen = !resolvedAt && !escalated;
+      const draft = {
+        id: coordinatorCardId(gapId),
+        seq: gapCreatedSeq.get(gapId) ?? 0,
+        at: gap.createdAt,
+        updatedAt: [gap.createdAt, resolvedAt, escalated?.createdAt, run?.endedAt].filter((t) => !!t).sort().at(-1),
+        nodeId,
+        executorId: coordinatorId,
+        /* 大状态用四档默认词（进行中 / 已完成 / 执行中断），不覆写 `phaseLabel`——「补上了还是升级了」
+           在小状态那句话里说得比一个词清楚。颜色跟着 `segmentOpen` 走。 */
+        phase: !segmentOpen ? "done" : failedRun ? "stuck" : "running",
+        segmentOpen,
+        /* 协调者卡**从不砖红**：缺口的第一接手人恒是协调者本人，这一段没有人在等着动手
+           （奕璇 2026-09-22 的判据）。连它自己那一段跑挂了（`failedRun` ⇒ `phase: "stuck"`）也一样，
+           那时按 `segmentOpen` 走暖橙——真要人动手的是它升级出去的那张升级卡，红归那一张。
+           显式写 `false` 而不是省略：省略 = 不表态，前端会退回老规则（`stuck` + 开着 ⇒ 砖红）。 */
+        awaitingHuman: false,
+        status: resolvedAt ? ACTIVITY_COPY.coordinatorFixedGap(nameOf(coordinatorId), nameOf(executorId)) : escalated ? ACTIVITY_COPY.coordinatorEscalated(nameOf(coordinatorId), name, nameOf(recipient)) : failedRun ? ACTIVITY_COPY.coordinatorFailed(name) : ACTIVITY_COPY.coordinatingGap(nameOf(coordinatorId), name),
         artifacts: [],
-        /* 点进去 = **这段协调轨迹**（run 在 `agent_runs` 里，`runId` 直接给）＋ 缺口线。 */
-        traceAvailable: true,
-        runId: run.id,
-        actions: gapOnNode ? [{ kind: "open_thread", label: BUTTON.gapThread, target: gapThreadSessionId(gapOnNode.authorActorId) }] : []
-      });
+        /* 点进去 = **这段协调轨迹**（run 在 `agent_runs` 里，`runId` 直接给）＋ 缺口线。
+           查不到那一段运行 ⇒ 不给轨迹入口，卡与那颗「查看留言」照旧。 */
+        ...run ? { traceAvailable: true, runId: run.id } : {},
+        actions: [{ kind: "open_thread", label: BUTTON.view, target: gapThreadSessionId(executorId) }]
+      };
+      coordinatorCards.push(draft);
+      if (resolvedAt) gapsClosedByCoordinatorCard.add(gapId);
     }
   }
-  for (const [issueId, d] of [...issueCards]) {
+  for (const issueId of [...issueCards.keys()]) {
     if (!issueId.startsWith(REWORK_ANNOTATION_PREFIX)) continue;
-    const covered = coordinatorCards.some((c) => c.nodeId === d.nodeId && c.at <= d.at && d.at <= c.updatedAt);
-    if (covered) issueCards.delete(issueId);
+    if (gapsClosedByCoordinatorCard.has(issueId.slice(REWORK_ANNOTATION_PREFIX.length))) issueCards.delete(issueId);
   }
   const lastFailureOf = (card2, trip) => {
     const message = (input.runFailures ?? []).filter((f2) => f2.nodeId === card2.nodeId && f2.startedAt >= card2.at && f2.startedAt <= trip.at && f2.message.trim()).sort((a, b2) => a.startedAt.localeCompare(b2.startedAt)).at(-1)?.message;
@@ -234349,6 +234989,7 @@ function buildWorkorderActivity(input) {
       d.phase = "done";
       delete d.phaseLabel;
       d.segmentOpen = false;
+      d.awaitingHuman = false;
       d.status = ACTIVITY_COPY.closedNoAction(terminal);
       if (!d.commentIssueIds) d.actions = [];
     }
@@ -234417,6 +235058,7 @@ function buildWorkorderActivity(input) {
       phase: d.phase,
       ...d.phaseLabel ? { phaseLabel: d.phaseLabel } : {},
       ...d.segmentOpen === void 0 ? {} : { segmentOpen: d.segmentOpen },
+      ...d.awaitingHuman === void 0 ? {} : { awaitingHuman: d.awaitingHuman },
       ...d.escalationKind ? { escalationKind: d.escalationKind } : {},
       ...d.noticeTitle ? { noticeTitle: d.noticeTitle } : {},
       status: d.status,
@@ -234434,7 +235076,7 @@ function buildWorkorderActivity(input) {
   cards.sort((a, b2) => a.at.localeCompare(b2.at) || a.seq - b2.seq || a.id.localeCompare(b2.id));
   return { workorderId, cards, truncated };
 }
-var ACTIVITY_EVENT_KINDS, LEGACY_PAUSE_REASON, ACTIVITY_EVENT_LIMIT, UPSTREAM_ACK_NOTE_CAP, ACTIVITY_COPY, REWORK_ANNOTATION_PREFIX, RECOVERY_ANNOTATION_PREFIX, ENGINE_RETRY_EXHAUSTED, BUTTON, PHASE_LABEL, COORDINATOR_CARD_PREFIX, RETRY_EXHAUSTED_ESC_PREFIX, isStopLoss;
+var ACTIVITY_EVENT_KINDS, LEGACY_PAUSE_REASON, ACTIVITY_EVENT_LIMIT, UPSTREAM_ACK_NOTE_CAP, ACTIVITY_COPY, REWORK_ANNOTATION_PREFIX, RECOVERY_ANNOTATION_PREFIX, ENGINE_RETRY_EXHAUSTED, BUTTON, PHASE_LABEL, COORDINATOR_CARD_PREFIX, coordinatorCardId, RETRY_EXHAUSTED_ESC_PREFIX, REVIEW_EXHAUSTED_ESC_PREFIX2, isStopLoss;
 var init_activity2 = __esm({
   "../server/src/domains/collab/activity.ts"() {
     "use strict";
@@ -234567,9 +235209,10 @@ var init_activity2 = __esm({
          改完之后两种止损的**执行者是一样的**（执行卡挂执行人、升级卡挂等处理的那个人），
          能不能分辨全落在这几句话上。投影侧怎么判是哪一种见 {@link escalationKindOf}。
          次数与花费**取上报正文里系统自己算出来的那个数**（引擎 `activate.ts` 的 `连续 N 次执行失败`、
-         serve `zero-output-breaker.ts` 的 `跑了 N 次 … 约 $X`）——本投影手上没有第二份可信来源：
-         保险丝数的是 30 分钟窗口里的 `agent_runs` 空跑数（`ws:wo-7cf619ff` 实测 5 次），而快照里
-         同一节点只有 3 条 work，按 work 数自己算会说出一个跟上报正文对不上的数。 */
+         serve `zero-output-breaker.ts` 的 `跑了 N 轮 … 约 $X`）——本投影手上没有第二份可信来源，
+         上报正文是唯一事实源（奕璇 2026-09-22 定）。两头的口径都已经是**轮**：引擎那条本来就数
+         work，保险丝那条 Bug 0211 起把同一轮里的协议续唤 run 折回去再数（老正文不回填，见
+         {@link parseStopLossFacts}）。 */
       retryExhausted: (executor, node2, n, lastReason) => `${executor} \u8FDE\u7EED ${n} \u6B21\u6CA1\u8DD1\u6210\u300A${node2}\u300B\uFF0C\u91CD\u8BD5\u5DF2\u7528\u5C3D${lastReason ? `\uFF08\u672B\u6B21\uFF1A${lastReason}\uFF09` : ""}\u3002`,
       outputStalled: (executor, node2, n, cost) => `${executor} \u8FDE\u7EED ${n} \u6B21\u6CA1\u4EA4\u51FA\u300A${node2}\u300B\u7684\u4EFB\u4F55\u6210\u679C${cost ? `\uFF08\u7EA6 ${cost}\uFF09` : ""}\uFF0C\u7CFB\u7EDF\u5DF2\u6B62\u635F\u3002`,
       /* ── 升级卡（上报）的整句 ───────────────────────────────────────────────────────────
@@ -234578,6 +235221,16 @@ var init_activity2 = __esm({
          同一件事，只换后半句（「等 @X 处理」→「X 已处理：…」）。 */
       escalationHeadRetryExhausted: (node2) => `\u300A${node2}\u300B\u91CD\u8BD5\u5DF2\u7528\u5C3D\uFF0C`,
       escalationHeadOutputStall: (node2) => `\u7CFB\u7EDF\u6B62\u635F\uFF1A\u300A${node2}\u300B\u505C\u4F4F\u4E86\uFF0C`,
+      /**
+       * 评审连败熔断（Bug 0212）：卡住的是**这一轮评审**，不是那一版活——话不能写成「执行异常」。
+       *
+       * 🚨 **这里没有「（末次：…）」**，与连败熔断卡不同：报错原话只在 `agent_runs.error_message`，
+       * 而**评审派发的 run 行 `node_id` 与 `work_order_id` 双双为 null**（v2 `ws:wo-65841524` 实测：
+       * qa-quality 连败那 4 条只有 `artifact_id`）——`listRunFailures` 按 `work_order_id` 圈范围，
+       * 这批行根本取不到。硬拼一句取不到值的模板只会永远不出现，不如不写。
+       * 要补这半句，得先让评审派发把 `work_order_id` / `node_id` 记进 `agent_runs`（另开单）。
+       */
+      escalationHeadReviewExhausted: (node2) => `\u300A${node2}\u300B\u7684\u8BC4\u5BA1\u8FDE\u7740\u6CA1\u8DD1\u6210\uFF0C\u8FD9\u4E00\u8F6E\u6536\u4E0D\u9F50\uFF0C`,
       /** 人工上报里**关联着缺口**的那一档：协调者接了缺口、补不了，于是升级给人（四种停法的第二种）。 */
       escalationHeadGapEscalated: (coordinator, node2) => `${coordinator} \u8865\u4E0D\u4E86\u300A${node2}\u300B\u7684\u7F3A\u53E3\uFF0C`,
       /** 其余人工上报：主语是卡住的那个执行人（异常是它的，不是上报作者的）。 */
@@ -234593,6 +235246,8 @@ var init_activity2 = __esm({
       /** 「你要做什么」那半句——两种系统止损各一份（F6 的立论就在这里：执行者一样，只有话不一样）。 */
       escalationHowToRetryExhausted: "\u5904\u7406\u5E76\u5173\u6389\u8FD9\u6761\u4E0A\u62A5\u540E\uFF0C\u8FD9\u4E00\u6B65\u4F1A\u81EA\u52A8\u91CD\u8BD5\uFF1B\u591A\u534A\u662F\u989D\u5EA6 / \u767B\u5F55\u8FC7\u671F / \u9650\u6D41\u8FD9\u7C7B\u73AF\u5883\u95EE\u9898\uFF0C\u5148\u770B\u8F68\u8FF9\u518D\u51B3\u5B9A\u91CD\u8BD5\u3002",
       escalationHowToOutputStall: "\u5904\u7406\u5E76\u5173\u6389\u8FD9\u6761\u4E0A\u62A5\u540E\uFF0C\u8FD9\u4E00\u6B65\u4F1A\u81EA\u52A8\u91CD\u8BD5\uFF1B\u4E0D\u67E5\u6E05\u539F\u56E0\u5C31\u91CD\u8BD5\u4F1A\u7EE7\u7EED\u7A7A\u70E7\uFF0C\u5148\u8FDB\u8BA8\u8BBA\u623F\u3002",
+      /** 评审熔断那一份：关掉之后重开的是**评审**，不是这一步的活（活已经交了，等的是审）。 */
+      escalationHowToReviewExhausted: "\u5904\u7406\u5E76\u5173\u6389\u8FD9\u6761\u4E0A\u62A5\u540E\uFF0C\u8FD9\u4E00\u8F6E\u8BC4\u5BA1\u4F1A\u81EA\u52A8\u91CD\u5F00\uFF1B\u591A\u534A\u662F\u8BC4\u5BA1\u5458\u7684\u8FD0\u884C\u73AF\u5883\u51FA\u4E86\u95EE\u9898\uFF08\u989D\u5EA6 / \u767B\u5F55\u8FC7\u671F / \u9650\u6D41\uFF09\uFF0C\u5148\u770B\u8F68\u8FF9\u518D\u51B3\u5B9A\u3002",
       /** 关掉了：接着开头那半句说「谁处理的、怎么处理的」。没写处置说明就只说「已处理」。
        *  处置说明常常是人自己写的一整段、末尾自带句号——**别再补一个**，否则卡面收在「。。」上。 */
       escalationHandled: (head, by, note) => `${head}${by} \u5DF2\u5904\u7406${note ? `\uFF1A${note}` : ""}${note && /[。！？.!?]$/.test(note) ? "" : "\u3002"}`,
@@ -234601,15 +235256,20 @@ var init_activity2 = __esm({
        * ——人并没有写说明，说明是这颗按钮替他写的。次数是**这个节点上第几次这么重试**。
        */
       escalationRerun: (by, n) => `${by} \u91CD\u65B0\u8FD0\u884C\u4E86\u8FD9\u4E00\u6B65\uFF08\u7B2C ${n} \u6B21\u91CD\u8BD5\uFF09\u3002`,
-      /* ── 协调者卡（F2，新增）──────────────────────────────────────────────────────────
-         对应「协调者处理这个节点的卡点」那一段运行（`agent_runs` 里 id 为 `coordinate:<uuid>` 的行，
-         生产 9/10 起 9 天 71 段、17 张单，此前一张卡都没有）。它不在引擎快照里，由 handler 喂进来。 */
-      coordinatingNode: (node2) => `\u6B63\u5728\u5904\u7406\u300A${node2}\u300B\u7684\u7F3A\u53E3\u3002`,
+      /* ── 协调者卡（F2）──────────────────────────────────────────────────────────────────
+         「协调者处理**某条缺口**的那一段」。三句话对应缺口的三种去向（已补齐 / 补不了升级给人 /
+         还开着），判据全在缺口这条 issue 上，不看旁账那条 `coordinate:` 运行有没有留下结论
+         （Bug 0213；前两句 T-104 / T-113 已验收，逐字不动）。 */
+      coordinatingGap: (coordinator, node2) => `${coordinator} \u6B63\u5728\u5904\u7406\u300A${node2}\u300B\u7684\u7F3A\u53E3\u3002`,
       coordinatorFixedGap: (coordinator, executor) => `${coordinator} \u5DF2\u8865\u9F50\u7F3A\u53E3\uFF0C${executor} \u7EE7\u7EED\u6267\u884C\u3002`,
       coordinatorEscalated: (coordinator, node2, target) => `${coordinator} \u8865\u4E0D\u4E86\u300A${node2}\u300B\u7684\u7F3A\u53E3\uFF0C\u5DF2\u5347\u7EA7\u7ED9 @${target} \u5904\u7406\u3002`,
-      /** 这一段结束了，缺口既没补上也没升级——如实说到此为止，别替它宣布一个没发生的结局。 */
-      coordinatorInconclusive: (coordinator, node2) => `${coordinator} \u5904\u7406\u300A${node2}\u300B\u7684\u7F3A\u53E3\uFF0C\u8FD9\u4E00\u6BB5\u6CA1\u6709\u7ED3\u8BBA\u3002`,
-      /** 协调者这一段自己没跑成（run 判 failed / orphaned / timeout）——如实说，别冒充「已处理」。 */
+      /**
+       * 缺口还开着、也没升级给人，而这一段协调运行已经结束且没跑成（failed / orphaned / timeout）——
+       * 如实说这一轮没跑成，别说「正在处理」（没人在处理），也别替它宣布一个没发生的结局。
+       *
+       * 🚨 兜底句「{协调者} 处理《X》的缺口，这一段没有结论」**已删**（Bug 0213）：那句是拿 run 的结论
+       * 拼卡时的产物——取不到结论就替这一段下一个空结论。缺口自己的状态永远答得出「补上了没有」。
+       */
       coordinatorFailed: (node2) => `\u5904\u7406\u300A${node2}\u300B\u7684\u7F3A\u53E3\u65F6\u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u6210\u3002`,
       /**
        * 这一轮**被计划变更打断**（P15）。与卡点中断同级：计划一动，这一轮就不再是「还在跑」，
@@ -234724,7 +235384,7 @@ var init_activity2 = __esm({
        *
        * 此前走 `issueOpen`：正文整段当小状态，`detail` 又是同一段。全库实测最长
        * **8096 字印两遍**（`ws:wo-56bba3c1`），一张卡顶掉整屏。正文的去处是「留言线」——
-       * 与缺口线同一套投影（`gap-thread.ts` 的 `buildCommentThread`），卡上给「去查看」。
+       * 与缺口线同一套投影（`gap-thread.ts` 的 `buildCommentThread`），卡上给「查看留言」。
        */
       commentRaised: (author, target, node2) => `${author} \u5728\u300A${node2}\u300B\u7559\u8A00\uFF0C\u9700\u8981 @${target} \u67E5\u770B\u3002`,
       /* ── 普通留言卡（奕璇 2026-09-18 定，ADR 0594）────────────────────────────────────────
@@ -234766,9 +235426,17 @@ var init_activity2 = __esm({
       acceptPass: "\u9A8C\u6536\u901A\u8FC7",
       acceptFail: "\u9A8C\u6536\u4E0D\u901A\u8FC7",
       handle: "\u53BB\u5904\u7406",
-      view: "\u53BB\u67E5\u770B",
-      /** 缺口线（执行人 ↔ 协调者）。缺口卡删掉之后，正文与来回的入口挂在执行卡与协调者卡上（F4）。 */
-      gapThread: "\u53BB\u7F3A\u53E3\u7EBF",
+      /**
+       * **只读进房**那一档：留言线、缺口线（执行人 ↔ 协调者）、上报讨论房（旁观者 / 已关掉）共用这一个词。
+       *
+       * 2026-09-22 奕璇拍板把旧的两个名字**并成一个**：缺口线那两处原来写「去缺口线」
+       * （`BUTTON.gapThread`），其余只读入口原来写「去查看」——三处点进去做的是同一件事：
+       * **进这条线看聊天记录**，用户视角没有第二、第三个名字。目标（`open_thread` /
+       * `discuss_escalation` 与 target）一个字没动，只是不再自造第二个词。
+       * 于是卡上只剩三种按钮：「去处理」（等人动手）、「查看留言」（只读进房）、
+       * 「重新运行」（连败熔断升级卡的主按钮）。
+       */
+      view: "\u67E5\u770B\u7559\u8A00",
       /** 连败熔断升级卡的主按钮（F7）：重开这一步，并把那条上报一并关掉。 */
       rerun: "\u91CD\u65B0\u8FD0\u884C"
     };
@@ -234781,8 +235449,10 @@ var init_activity2 = __esm({
       escalationInProgress: "\u5904\u7406\u4E2D"
     };
     COORDINATOR_CARD_PREFIX = "coordinator:";
+    coordinatorCardId = (gapId) => `${COORDINATOR_CARD_PREFIX}${gapId}`;
     RETRY_EXHAUSTED_ESC_PREFIX = "esc:retry-exhausted:";
-    isStopLoss = (kind) => kind !== "manual";
+    REVIEW_EXHAUSTED_ESC_PREFIX2 = "esc:review-exhausted:";
+    isStopLoss = (kind) => kind === "retry_exhausted" || kind === "output_stall";
   }
 });
@@ -234800,10 +235470,12 @@ function buildWorkorderActivityTrace(input) {
   const reviews = activityReviews(snap, input.events ?? []);
   const reviewTarget = reviewCardTarget(cardId, reviews);
   if (reviewTarget) return buildReviewHistory(input, reviewTarget.targetWorkId, reviewTarget.reviewerActorId, reviews);
-  if (cardId.startsWith(COORDINATOR_CARD_PREFIX)) {
-    const runId = cardId.slice(COORDINATOR_CARD_PREFIX.length);
-    const run = (input.coordinatorRuns ?? []).find((r) => r.id === runId);
-    if (!run) return empty2;
+  const coordinatorGapId = coordinatorCardGapId(cardId);
+  if (coordinatorGapId !== void 0) {
+    const gap2 = snap.issues.find((i) => i.id === coordinatorGapId && i.kind === "gap");
+    const gapNodeId = gap2 ? gap2.aboutNodeId ?? gap2.raisedByNodeId : null;
+    const run = gap2 && gapNodeId ? coordinatorRunOfGap(gap2, (input.coordinatorRuns ?? []).filter((r) => r.nodeId === gapNodeId)) : void 0;
+    if (!run) return { ...empty2, notice: "\u534F\u8C03\u8005\u5904\u7406\u8FD9\u6761\u7F3A\u53E3\u7684\u90A3\u4E00\u6BB5\u6CA1\u6709\u7559\u4E0B\u8FD0\u884C\u8BB0\u5F55\uFF0C\u6682\u65F6\u65E0\u6CD5\u786E\u8BA4\u8FD0\u884C\u8F68\u8FF9\u3002" };
     const node2 = snap.nodes.find((n) => n.id === run.nodeId);
     const spec = node2?.spec?.trim();
     return {
@@ -235080,11 +235752,14 @@ var init_activity_trace = __esm({
 });
 // ../server/src/domains/collab/inbox.ts
+function commandCardLine(command2) {
+  return command2.displayLabel?.trim() || stripInternalIds(command2.effectLabel ?? "");
+}
 function changeConfirmSummary(r) {
   if (r.continuation) return `\u81EA\u52A8\u7EED\u8DD1\u5DF2\u5230\u9650\uFF0C\u7B49\u5F85\u4F60\u5BA1\u6838\uFF1A${r.plan.reason}`;
   const why = r.plan.reason.slice(0, 100);
   if (r.kind === "command" && r.command) {
-    return `\u7BA1\u7406\u8005\u8BF7\u6C42\u6267\u884C\u4E00\u4E2A\u9AD8\u5371\u64CD\u4F5C\uFF0C\u7B49\u4F60\u6388\u6743\uFF1A${r.command.effectLabel}`;
+    return `\u7BA1\u7406\u8005\u8BF7\u6C42\u6267\u884C\u4E00\u4E2A\u9AD8\u5371\u64CD\u4F5C\uFF0C\u7B49\u4F60\u6388\u6743\uFF1A${commandCardLine(r.command)}`;
   }
   const ops = r.plan.ops ?? [];
   if (ops.length > 0 && ops.every((o) => o.action === "resolveEscalation")) {
@@ -235260,7 +235935,7 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
       // 仍回落工单详情。
       ...r.origin ? { chatSessionId: r.origin } : {},
       ...anchorArt ? { title: nodeLabel(anchorArt) } : {},
-      detail: `${actorName(r.proposedBy) || "\u7BA1\u7406\u8005"}\uFF1A${r.command?.effectLabel ?? firstSentence2(r.plan.reason)}`,
+      detail: `${actorName(r.proposedBy) || "\u7BA1\u7406\u8005"}\uFF1A${r.command ? commandCardLine(r.command) : firstSentence2(r.plan.reason)}`,
       ...r.kind !== "command" && opCount > 0 ? { impact: `\u6D89\u53CA ${opCount} \u5904\u6539\u52A8${r.nonMonotonicOps.length > 0 ? " \xB7 \u542B\u9500\u6BC1\u6027" : ""}` } : {},
       actor: actorRef2(r.proposedBy),
       ...overdueField(r.at)
@@ -235482,6 +236157,15 @@ function backfillInboxUnread(items, markers) {
     item.unread = !Number.isFinite(effective) ? true : sinceMs > effective;
   }
 }
+function applyReadAllWatermark(items, markers) {
+  const at = markers.find((m2) => m2.scope === INBOX_READ_ALL_SCOPE)?.readAt;
+  const atMs = at ? Date.parse(at) : Number.NaN;
+  if (!Number.isFinite(atMs)) return;
+  for (const item of items) {
+    const sinceMs = Date.parse(item.since);
+    if (Number.isFinite(sinceMs) && sinceMs <= atMs) item.unread = false;
+  }
+}
 var C_ACTION_LABEL;
 var init_inbox = __esm({
   "../server/src/domains/collab/inbox.ts"() {
@@ -236060,6 +236744,16 @@ var init_notification_store = __esm({
         }
         if (changed) this.save();
       }
+      async markAllRead(recipient, at) {
+        let n = 0;
+        for (const [id, r] of this.rows) {
+          if (r.recipient !== recipient || r.readAt) continue;
+          this.rows.set(id, { ...r, readAt: at });
+          n++;
+        }
+        if (n > 0) this.save();
+        return n;
+      }
       async countUnread(recipient) {
         let pending = 0;
         let all2 = 0;
@@ -236250,6 +236944,13 @@ var init_notification_store = __esm({
           [recipient, [...ids2], at]
         );
       }
+      async markAllRead(recipient, at) {
+        const r = await this.sql.query(
+          `UPDATE ${this.t} SET read_at = $2::timestamptz WHERE recipient = $1 AND read_at IS NULL`,
+          [recipient, at]
+        );
+        return r.rowCount ?? 0;
+      }
       async countUnread(recipient) {
         const r = await this.sql.query(
           `SELECT count(*) FILTER (WHERE status = 'pending')::int AS pending, count(*)::int AS "all"
@@ -236780,7 +237481,7 @@ var init_workorder_metrics = __esm({
 });
 // ../server/src/domains/usage/statistics-model.ts
-var UsageQueryError;
+var UsageQueryError, ZERO_USAGE_AMOUNT;
 var init_statistics_model = __esm({
   "../server/src/domains/usage/statistics-model.ts"() {
     "use strict";
@@ -236791,6 +237492,13 @@ var init_statistics_model = __esm({
         this.name = "UsageQueryError";
       }
     };
+    ZERO_USAGE_AMOUNT = {
+      tokens: { input: 0, cache: 0, cacheRead: 0, cacheCreation: 0, output: 0, total: 0 },
+      costUsdMicros: 0,
+      costParts: { input: 0, cacheRead: 0, cacheCreation: 0, output: 0, unsplit: 0 },
+      costKnown: "full",
+      costUnknownTokens: 0
+    };
   }
 });
@@ -236999,6 +237707,16 @@ function effectivePoints(run) {
   }
   return points;
 }
+function ledgerRunModel(run) {
+  const onRow = resolvedModel(run.effectiveModel);
+  if (onRow) return onRow;
+  let best = null;
+  for (const p2 of run.points) {
+    const m2 = resolvedModel(p2.model);
+    if (m2 && (!best || p2.seq < best.seq)) best = { seq: p2.seq, model: m2 };
+  }
+  return best?.model ?? null;
+}
 function distribute(total, weights) {
   const sum = weights.reduce((s2, w2) => s2 + w2, 0);
   if (sum <= 0) return weights.map(() => 0);
@@ -237166,6 +237884,11 @@ function bucketIndex(starts, ms) {
   }
   return ans;
 }
+function pushView(map, key2, v2) {
+  const list2 = map.get(key2);
+  if (list2) list2.push(v2);
+  else map.set(key2, [v2]);
+}
 function getCell(map, key2) {
   let c = map.get(key2);
   if (!c) {
@@ -237336,14 +238059,15 @@ function runtimeRows(facts, relations) {
     if (!v2.relevant) continue;
     const key2 = keyOf4(v2.run.runtimeInstanceId, v2.run.runtimeKind);
     getCell(cells, key2).addView(v2);
-    modelsOf(key2).cell(v2.run.effectiveModel).addView(v2);
+    modelsOf(key2).cell(ledgerRunModel(v2.run)).addView(v2);
   }
   for (const r of facts.rounds) {
     const key2 = keyOf4(r.runtimeInstanceId, r.runtimeKind);
     const c = getCell(cells, key2);
     c.active = true;
     c.runCount += 1;
-    const m2 = modelsOf(key2).cell(runById.get(r.firstRunId)?.effectiveModel ?? null);
+    const firstRun = runById.get(r.firstRunId);
+    const m2 = modelsOf(key2).cell(firstRun ? ledgerRunModel(firstRun) : null);
     m2.active = true;
     m2.runCount += 1;
   }
@@ -237403,12 +238127,15 @@ function attributed(facts, relations) {
   const taskCells = /* @__PURE__ */ new Map();
   const taskActorCells = /* @__PURE__ */ new Map();
   const convSessionCells = /* @__PURE__ */ new Map();
+  const convViews = /* @__PURE__ */ new Map();
+  const taskViews = /* @__PURE__ */ new Map();
   const unlinked = new Cell();
   for (const v2 of facts.views) {
     if (!v2.relevant) continue;
     const attr = runAttribution(relations, v2.run, memo);
     if (attr.kind === "task") {
       getCell(taskCells, attr.workorderId).addView(v2);
+      pushView(taskViews, attr.workorderId, v2);
       let byActor2 = taskActorCells.get(attr.workorderId);
       if (!byActor2) {
         byActor2 = /* @__PURE__ */ new Map();
@@ -237422,6 +238149,7 @@ function attributed(facts, relations) {
         convSessionCells.set(attr.rootSessionId, bySession);
       }
       getCell(bySession, attr.sessionId).addView(v2);
+      pushView(convViews, attr.rootSessionId, v2);
     } else unlinked.addView(v2);
   }
   const taskAmount = /* @__PURE__ */ new Map();
@@ -237453,8 +238181,13 @@ function attributed(facts, relations) {
   }
   const conversations = [];
   const convGroupAcc = /* @__PURE__ */ new Map();
+  const treeViews = /* @__PURE__ */ new Map();
   for (const rootId of /* @__PURE__ */ new Set([...convSessionCells.keys(), ...tasksByRoot.keys()])) {
     const root = relations.sessions.get(rootId);
+    treeViews.set(rootId, [
+      ...convViews.get(rootId) ?? [],
+      ...(tasksByRoot.get(rootId) ?? []).flatMap((workorderId) => taskViews.get(workorderId) ?? [])
+    ]);
     const group = new Cell();
     const rows = [];
     const sessionRows = [];
@@ -237576,9 +238309,83 @@ function attributed(facts, relations) {
     { amount: a.amount, name: a.name, id: a.projectId ?? "" },
     { amount: b2.amount, name: b2.name, id: b2.projectId ?? "" }
   ));
-  return { conversations, tasks, projects };
+  return { conversations, tasks, projects, treeViews };
+}
+function deriveTreeDuration(views, now) {
+  const nowMs = now.getTime();
+  const spans = [];
+  let countedRuns = 0;
+  let unstartedRuns = 0;
+  let inProgress = false;
+  let firstMs = Infinity;
+  let lastMs = -Infinity;
+  let runtimeMs = 0;
+  for (const v2 of views) {
+    const startMs = v2.run.runtimeStartedAt ? Date.parse(v2.run.runtimeStartedAt) : NaN;
+    if (!Number.isFinite(startMs)) {
+      unstartedRuns += 1;
+      continue;
+    }
+    const endedMs = v2.run.endedAt ? Date.parse(v2.run.endedAt) : NaN;
+    const running = !Number.isFinite(endedMs) && !isRunEnded(v2.run);
+    if (running) inProgress = true;
+    const rawEnd = Number.isFinite(endedMs) ? endedMs : running ? nowMs : startMs;
+    const end = Math.max(rawEnd, startMs);
+    countedRuns += 1;
+    runtimeMs += end - startMs;
+    spans.push({ start: startMs, end });
+    if (startMs < firstMs) firstMs = startMs;
+    if (end > lastMs) lastMs = end;
+  }
+  if (countedRuns === 0) return { ...ZERO_DURATION, unstartedRuns };
+  spans.sort((a, b2) => a.start - b2.start || a.end - b2.end);
+  let activeMs = 0;
+  let curStart = spans[0].start;
+  let curEnd = spans[0].end;
+  for (const span of spans.slice(1)) {
+    if (span.start > curEnd) {
+      activeMs += curEnd - curStart;
+      curStart = span.start;
+      curEnd = span.end;
+    } else if (span.end > curEnd) curEnd = span.end;
+  }
+  activeMs += curEnd - curStart;
+  return {
+    firstStartedAt: new Date(firstMs).toISOString(),
+    lastEndedAt: new Date(lastMs).toISOString(),
+    inProgress,
+    wallClockMs: lastMs - firstMs,
+    runtimeMs,
+    activeMs,
+    countedRuns,
+    unstartedRuns
+  };
 }
-var UNKNOWN_AGENT_NAME, UNREGISTERED_RUNTIME_NAME, UNSPECIFIED_PROJECT_NAME, UNLINKED_ROW_TITLE, UNTITLED_CONVERSATION, BUCKET_KEYS, AmountAcc, FlagAcc, Cell, collator, ModelCells;
+function buildChatSessionUsage(sessionId, input) {
+  const facts = computeFacts(input);
+  const lists = attributed(facts, input.relations);
+  const attr = sessionAttribution(input.relations, sessionId, /* @__PURE__ */ new Map());
+  const rootId = attr.kind === "conversation" ? attr.rootSessionId : sessionId;
+  const session = input.relations.sessions.get(rootId);
+  const group = lists.conversations.find((g2) => g2.sessionId === rootId) ?? {
+    sessionId: rootId,
+    title: session?.title || UNTITLED_CONVERSATION,
+    projectId: session?.projectId ?? null,
+    createdAt: session?.createdAt ?? null,
+    amount: ZERO_USAGE_AMOUNT,
+    flags: { inProgress: false, usagePending: false, costUnknownRuns: 0 },
+    rows: []
+  };
+  return {
+    companyId: input.companyId,
+    sessionId,
+    window: input.resolved.window,
+    generatedAt: input.now.toISOString(),
+    group,
+    duration: deriveTreeDuration(lists.treeViews.get(rootId) ?? [], input.now)
+  };
+}
+var UNKNOWN_AGENT_NAME, UNREGISTERED_RUNTIME_NAME, UNSPECIFIED_PROJECT_NAME, UNLINKED_ROW_TITLE, UNTITLED_CONVERSATION, BUCKET_KEYS, AmountAcc, FlagAcc, Cell, collator, ModelCells, ZERO_DURATION;
 var init_statistics = __esm({
   "../server/src/domains/usage/statistics.ts"() {
     "use strict";
@@ -237586,6 +238393,7 @@ var init_statistics = __esm({
     init_uncategorized_project();
     init_model_pricing();
     init_accounting();
+    init_statistics_model();
     UNKNOWN_AGENT_NAME = "\u672A\u77E5 Agent";
     UNREGISTERED_RUNTIME_NAME = "\u672A\u767B\u8BB0\u8FD0\u884C\u65F6";
     UNSPECIFIED_PROJECT_NAME = UNCATEGORIZED_PROJECT_NAME;
@@ -237704,6 +238512,16 @@ var init_statistics = __esm({
         return [...this.cells].map(([model, c]) => ({ model, runCount: c.runCount, amount: c.amount.toAmount(), flags: c.flags.toFlags() })).filter((r) => r.runCount > 0 || r.amount.tokens.total > 0 || r.amount.costUsdMicros > 0 || r.amount.costKnown !== "full").sort((a, b2) => b2.amount.tokens.total - a.amount.tokens.total || b2.runCount - a.runCount || (a.model === null ? 1 : b2.model === null ? -1 : collator.compare(a.model, b2.model)));
       }
     };
+    ZERO_DURATION = {
+      firstStartedAt: null,
+      lastEndedAt: null,
+      inProgress: false,
+      wallClockMs: null,
+      runtimeMs: 0,
+      activeMs: 0,
+      countedRuns: 0,
+      unstartedRuns: 0
+    };
   }
 });
@@ -237959,6 +238777,22 @@ function createUsageReadService(deps) {
       logRequest({ companyId, op: "breakdown", range: r.query.range, dimension, runs: r.runs.length, companyScoped: r.target.companyScoped, startedMs });
       return body2;
     },
+    async conversationUsage(companyId, sessionId, raw) {
+      const startedMs = Date.now();
+      const loads = requestLoads(companyId);
+      const r = await readLedger(companyId, { ...raw, range: raw.range ?? "all" }, loads);
+      const relations = await loadRelations(companyId, loads);
+      const body2 = buildChatSessionUsage(sessionId, {
+        companyId,
+        resolved: r.resolved,
+        runs: r.runs,
+        coverage: r.coverage,
+        now: r.now,
+        relations
+      });
+      logRequest({ companyId, op: "conversation", range: r.query.range, runs: r.runs.length, companyScoped: r.target.companyScoped, startedMs });
+      return body2;
+    },
     async runtimeLedger(companyId, runtimeInstanceId, raw) {
       const startedMs = Date.now();
       const loads = requestLoads(companyId);
@@ -238936,6 +239770,7 @@ function collabDomain(opts) {
         backfillInboxUnread(waitingItems, markers);
       }
       const items = mergeInbox(kernelItems, [...chatItems, ...waitingItems]);
+      if (myReadMarkers) applyReadAllWatermark(items, markers);
       return { status: 200, body: { items: myReadMarkers ? withEscalationAttention(items, req.auth.companyId ?? opts.defaultCompanyId ?? "", markers, Date.now(), opts.escalationReminders) : items } };
     });
     router.post("/api/inbox/escalations/:id/acknowledge", async (req) => {
@@ -239205,6 +240040,28 @@ function collabDomain(opts) {
       await marks.markRead(me, scope2, (/* @__PURE__ */ new Date()).toISOString());
       return { status: 200, body: { ok: true } };
     });
+    router.post("/api/inbox/read-all", async (req) => {
+      const me = req.auth.actor;
+      if (!isHumanActor(me)) {
+        return { status: 403, body: { error: { code: "human_only", message: "\u53EA\u6709\u4EBA\u7C7B\u8EAB\u4EFD\u53EF\u4EE5\u6807\u8BB0\u5DF2\u8BFB" } } };
+      }
+      const marks = opts.resolveReadMarkers ? await opts.resolveReadMarkers(req.auth.companyId).catch(() => void 0) : opts.readMarkers;
+      let ledger;
+      if (opts.resolveNotificationLedger) {
+        try {
+          ledger = await opts.resolveNotificationLedger(req.auth.companyId);
+        } catch (err) {
+          console.warn(`[notifications] \u65E0\u53EF\u4FE1\u516C\u53F8\u4E0A\u4E0B\u6587\uFF0C\u4E0D\u6807\u5DF2\u8BFB\uFF08\u4E0D\u56DE\u843D\u9ED8\u8BA4\u516C\u53F8\uFF09: ${String(err)}`);
+        }
+      }
+      if (!marks && !ledger) {
+        return { status: 503, body: { error: { code: "unavailable", message: "\u5DF2\u8BFB\u6C34\u4F4D\u4E0E\u901A\u77E5\u53F0\u8D26\u90FD\u4E0D\u53EF\u7528" } } };
+      }
+      const readAt = (/* @__PURE__ */ new Date()).toISOString();
+      const notifications = ledger ? await ledger.markAllRead(me, readAt) : 0;
+      if (marks) await marks.markRead(me, INBOX_READ_ALL_SCOPE, readAt);
+      return { status: 200, body: { ok: true, readAt, notifications } };
+    });
     router.get("/api/audit", async (req) => {
       const { engineStore, oplog, kernel } = await resolveCtx(req.auth.companyId);
       const q2 = req.query;
@@ -241643,9 +242500,17 @@ function bucketLabelOf(slice, index2) {
 function runtimeUsageFromLedger(runtimeInstanceId, slice) {
   const rows = /* @__PURE__ */ new Map();
   const runById = new Map(slice.runs.map((r) => [r.id, r]));
+  const modelByRun = /* @__PURE__ */ new Map();
+  const modelOf = (run) => {
+    const hit = modelByRun.get(run.id);
+    if (hit !== void 0) return hit;
+    const m2 = ledgerRunModel(run);
+    modelByRun.set(run.id, m2);
+    return m2;
+  };
   const rowOf = (bucketIndex2, run) => {
     const bucket2 = bucketLabelOf(slice, bucketIndex2);
-    const model = resolvedModel(run.effectiveModel);
+    const model = modelOf(run);
     const key2 = `${bucket2}\0${run.actorId}\0${model ?? ""}`;
     let row = rows.get(key2);
     if (!row) {
@@ -242641,11 +243506,11 @@ var init_roles = __esm({
 });
 // ../server/src/node-store.ts
-var fs25, MemoryNodeStore, FileNodeStore;
+var fs26, MemoryNodeStore, FileNodeStore;
 var init_node_store = __esm({
   "../server/src/node-store.ts"() {
     "use strict";
-    fs25 = __toESM(require("node:fs"), 1);
+    fs26 = __toESM(require("node:fs"), 1);
     MemoryNodeStore = class {
       nodes = /* @__PURE__ */ new Map();
       runtimes = /* @__PURE__ */ new Map();
@@ -242770,16 +243635,16 @@ var init_node_store = __esm({
       static async open(file) {
         const s2 = new _FileNodeStore(file);
         try {
-          const snap = JSON.parse(fs25.readFileSync(file, "utf8"));
+          const snap = JSON.parse(fs26.readFileSync(file, "utf8"));
           for (const n of snap.nodes ?? []) s2.nodes.set(n.id, n);
           for (const r of snap.runtimes ?? []) s2.runtimes.set(r.id, r);
         } catch {
-          fs25.writeFileSync(file, JSON.stringify({ nodes: [], runtimes: [] }, null, 2));
+          fs26.writeFileSync(file, JSON.stringify({ nodes: [], runtimes: [] }, null, 2));
         }
         return s2;
       }
       flush() {
-        fs25.writeFileSync(this.file, JSON.stringify({
+        fs26.writeFileSync(this.file, JSON.stringify({
           nodes: [...this.nodes.values()],
           runtimes: [...this.runtimes.values()]
         }, null, 2));
@@ -243570,9 +244435,9 @@ function prepareReadonlyGitBundles(input) {
   if (repos.length === 0) return null;
   const targets = collectTargets(repos, input.pinnedRevisions);
   if (targets.length === 0) return null;
-  const bundleRoot = input.bundleRoot ?? os7.tmpdir();
-  fs26.mkdirSync(bundleRoot, { recursive: true });
-  const root = fs26.mkdtempSync(path24.join(bundleRoot, "oasis-git-bundles-"));
+  const bundleRoot = input.bundleRoot ?? os8.tmpdir();
+  fs27.mkdirSync(bundleRoot, { recursive: true });
+  const root = fs27.mkdtempSync(path24.join(bundleRoot, "oasis-git-bundles-"));
   const files = {};
   const binaryFiles = {};
   const metas = [];
@@ -243580,7 +244445,7 @@ function prepareReadonlyGitBundles(input) {
     for (const target of targets) {
       const generated = createBundle(root, target, input);
       files[generated.metaPath] = JSON.stringify(generated.meta, null, 2) + "\n";
-      binaryFiles[generated.bundlePath] = fs26.readFileSync(generated.absoluteBundlePath).toString("base64");
+      binaryFiles[generated.bundlePath] = fs27.readFileSync(generated.absoluteBundlePath).toString("base64");
       metas.push(generated.meta);
     }
     files["inputs/git-bundles/MANIFEST.json"] = JSON.stringify({
@@ -243601,10 +244466,10 @@ function prepareReadonlyGitBundles(input) {
     return {
       files,
       binaryFiles,
-      cleanup: () => fs26.rmSync(root, { recursive: true, force: true })
+      cleanup: () => fs27.rmSync(root, { recursive: true, force: true })
     };
   } catch (err) {
-    fs26.rmSync(root, { recursive: true, force: true });
+    fs27.rmSync(root, { recursive: true, force: true });
     throw err;
   }
 }
@@ -243663,7 +244528,7 @@ function createBundle(root, target, input) {
   if (!HEX40.test(commit)) throw new GitReadonlyBundleError("COMMIT_NOT_FOUND", `commit \u683C\u5F0F\u4E0D\u662F 40 \u4F4D sha: ${commit.slice(0, 48)}`);
   const safeRepo = repo.id.replace(/[^a-zA-Z0-9_-]+/g, "_");
   const work = path24.join(root, safeRepo);
-  fs26.mkdirSync(work, { recursive: true });
+  fs27.mkdirSync(work, { recursive: true });
   const source = ensureSourceRepo(work, repo, commit, input.env);
   const tree = git2(source, ["rev-parse", `${commit}^{tree}`], input.env, "COMMIT_NOT_FOUND").trim();
   if (target.expectedTree && target.expectedTree.toLowerCase() !== tree.toLowerCase()) {
@@ -243690,8 +244555,8 @@ function createBundle(root, target, input) {
     } catch {
     }
   }
-  const bytes2 = fs26.statSync(absBundle).size;
-  const digest = (0, import_node_crypto62.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
+  const bytes2 = fs27.statSync(absBundle).size;
+  const digest = (0, import_node_crypto62.createHash)("sha256").update(fs27.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -243715,7 +244580,7 @@ function createBundle(root, target, input) {
   };
 }
 function verifyBundleReadable(dir, bundlePath, _bundleRef, commit, expectedTree, env) {
-  fs26.rmSync(dir, { recursive: true, force: true });
+  fs27.rmSync(dir, { recursive: true, force: true });
   try {
     (0, import_node_child_process16.execFileSync)("git", ["clone", bundlePath, dir], { stdio: "ignore", ...env ? { env } : {} });
     git2(dir, ["cat-file", "-e", `${commit}^{commit}`], env, "COMMIT_NOT_FOUND");
@@ -243757,8 +244622,8 @@ function ensureSourceRepo(work, repo, commit, env) {
   }
 }
 function gitInitBare(dir, env) {
-  if (fs26.existsSync(path24.join(dir, "objects"))) return;
-  fs26.mkdirSync(dir, { recursive: true });
+  if (fs27.existsSync(path24.join(dir, "objects"))) return;
+  fs27.mkdirSync(dir, { recursive: true });
   (0, import_node_child_process16.execFileSync)("git", ["init", "--bare", dir], { stdio: "ignore", ...env ? { env } : {} });
 }
 function git2(cwd, args, env, fallback, timeout) {
@@ -243787,14 +244652,14 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process16, import_node_crypto62, fs26, os7, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process16, import_node_crypto62, fs27, os8, path24, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process16 = require("node:child_process");
     import_node_crypto62 = require("node:crypto");
-    fs26 = __toESM(require("node:fs"), 1);
-    os7 = __toESM(require("node:os"), 1);
+    fs27 = __toESM(require("node:fs"), 1);
+    os8 = __toESM(require("node:os"), 1);
     path24 = __toESM(require("node:path"), 1);
     init_remote_util();
     GitReadonlyBundleError = class extends Error {
@@ -244601,6 +245466,7 @@ function parseFilters(q2) {
   const actorId = q2.get("actorId");
   const artifactId = q2.get("artifactId");
   const projectId2 = q2.get("projectId");
+  const chatSessionId = q2.get("chatSessionId");
   const runtimeKind = q2.get("runtimeKind");
   const status = q2.get("status");
   const rootRunId = q2.get("rootRunId");
@@ -244611,6 +245477,7 @@ function parseFilters(q2) {
   if (actorId) f2.actorId = actorId;
   if (artifactId) f2.artifactId = artifactId;
   if (projectId2) f2.projectId = projectId2;
+  if (chatSessionId) f2.chatSessionId = chatSessionId;
   if (runtimeKind) f2.runtimeKind = runtimeKind;
   if (status) f2.status = status;
   if (rootRunId) f2.rootRunId = rootRunId;
@@ -246517,6 +247384,19 @@ function createChatSessionsDomain(opts) {
     const binding = await bindingFor(companyId, aiActorId).catch(() => null);
     return binding?.nodeId ?? null;
   }
+  async function agentDefaultRuntime(companyId, aiActorId) {
+    const binding = await bindingFor(companyId, aiActorId).catch(() => null);
+    let model = null;
+    try {
+      model = opts.resolveActorModel ? await opts.resolveActorModel(companyId, aiActorId) : (await registry2.latestConfig(aiActorId))?.model ?? null;
+    } catch {
+      model = null;
+    }
+    return {
+      binding: binding ? { nodeId: binding.nodeId, runtimeKind: binding.runtimeKind } : null,
+      model: normalizeModel(model)
+    };
+  }
   function normalizeModel(raw) {
     return typeof raw === "string" && raw.trim() ? raw.trim() : null;
   }
@@ -246581,9 +247461,12 @@ function createChatSessionsDomain(opts) {
     }
     return manager ? manager : null;
   }
-  function ensureSessionReadable(session, actor, kernel) {
+  function ownsSessionOrOperator(session, auth) {
+    return session.humanActorId === auth.actor || isOperatorRequest(auth);
+  }
+  function ensureSessionReadable(session, auth, kernel) {
     if (!session) throw new ApiError(404, "NOT_FOUND", "session not found");
-    if (session.humanActorId === actor) return session;
+    if (ownsSessionOrOperator(session, auth)) return session;
     if (session.workspace) {
       const coordinator = coordinatorOfWorkspace(kernel, session.workspace);
       if (coordinator && session.aiActorId === coordinator) return session;
@@ -246681,7 +247564,16 @@ function createChatSessionsDomain(opts) {
       if (isDeletedActor(aiActor)) {
         throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
       }
-      const runtimeId = await currentRuntimeId(req.auth.companyId, body2.aiActorId) ?? "unknown";
+      const agentDefault = await agentDefaultRuntime(req.auth.companyId, body2.aiActorId);
+      const initial = chatSessionInitialRuntime({
+        binding: agentDefault.binding,
+        agentModel: agentDefault.model,
+        requested: {
+          override: normalizeOverride(body2.overrideNodeId) && normalizeOverride(body2.overrideRuntimeKind) ? { nodeId: normalizeOverride(body2.overrideNodeId), runtimeKind: normalizeOverride(body2.overrideRuntimeKind) } : null,
+          ...Object.prototype.hasOwnProperty.call(body2, "model") ? { model: normalizeModel(body2.model) } : {}
+        }
+      });
+      const runtimeId = agentDefault.binding?.nodeId ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
         id: (0, import_node_crypto65.randomUUID)(),
@@ -246698,12 +247590,12 @@ function createChatSessionsDomain(opts) {
         // 两个入口页面行为一致。区别于 linkWorkOrder（出处关联，建单脑暴也有、不构成绑定）。
         workspace: sessionWorkspaceToStore(body2.workspace),
         projectId: sessionProjectIdToStore(body2.projectId),
-        // 会话级模型覆盖（口径 A）：建会话时就带上选择；空串/空白归 null = 沿用旧解析，不写员工全局配置。
-        model: normalizeModel(body2.model),
-        /* 会话级 runtime 覆盖（ADR 0604）：欢迎态在 chip 带上选好的节点/runtime 随 create 一起写进去
-           （与项目、模型同一刻、同一条路），不做「发完再 PATCH」。两列都为 null = 跟随员工 binding。 */
-        overrideNodeId: normalizeOverride(body2.overrideNodeId),
-        overrideRuntimeKind: normalizeOverride(body2.overrideRuntimeKind),
+        /* 三列一起由 `chatSessionInitialRuntime` 给（ADR 0613）：用户在欢迎态挑过就用他挑的，
+           没挑就抄员工此刻的默认运行配置。**员工没绑定 = 三列留空**，逐字回到 ADR 0604 的旧语义
+           （跟随员工 binding），绑上之后那条路照旧管用。 */
+        model: initial.model,
+        overrideNodeId: initial.overrideNodeId,
+        overrideRuntimeKind: initial.overrideRuntimeKind,
         // ADR-0058：分析会话指向被分析 run；非空即"这是分析会话"（不进主聊天列表、进 trace 分析视图）。
         analyzedRunId: body2.analyzedRunId ?? null
       };
@@ -246748,7 +247640,7 @@ function createChatSessionsDomain(opts) {
     router.get("/api/chat-sessions/:id", async (req) => {
       const store2 = await storeFor(req);
       const [raw, kernel] = await Promise.all([store2.getSession(req.params.id), kernelFor(req)]);
-      const session = ensureSessionReadable(raw, req.auth.actor, kernel);
+      const session = ensureSessionReadable(raw, req.auth, kernel);
       const [window3, curRuntimeId] = await Promise.all([
         listRecentTurns(store2, session.id, parseTurns(req.query?.get("turns"))),
         currentRuntimeId(req.auth.companyId, session.aiActorId)
@@ -246803,6 +247695,19 @@ function createChatSessionsDomain(opts) {
       });
       return { status: 200, body: await store2.getSession(req.params.id) };
     });
+    router.post("/api/chat-sessions/:id/runtime/reset-to-agent-default", async (req) => {
+      const store2 = await storeFor(req);
+      const session = await store2.getSession(req.params.id);
+      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const agentDefault = await agentDefaultRuntime(req.auth.companyId, session.aiActorId);
+      const initial = chatSessionInitialRuntime({ binding: agentDefault.binding, agentModel: agentDefault.model });
+      await store2.updateSession(req.params.id, {
+        overrideNodeId: initial.overrideNodeId,
+        overrideRuntimeKind: initial.overrideRuntimeKind,
+        model: initial.model
+      });
+      return { status: 200, body: await store2.getSession(req.params.id) };
+    });
     router.delete("/api/chat-sessions/:id", async (req) => {
       const store2 = await storeFor(req);
       const session = await store2.getSession(req.params.id);
@@ -246889,7 +247794,7 @@ function createChatSessionsDomain(opts) {
       if (!items) throw new ApiError(404, "NOT_FOUND", "\u672C\u5B9E\u4F8B\u672A\u63A5 chat_items \u5FEB\u7167\u8BFB\u53E3");
       const store2 = await storeFor(req);
       const [session, kernel] = await Promise.all([store2.getSession(req.params.id), kernelFor(req)]);
-      ensureSessionReadable(session, req.auth.actor, kernel);
+      ensureSessionReadable(session, req.auth, kernel);
       const chatSessionId = req.params.id;
       const sinceVersion = Math.max(0, Number(req.query?.get("sinceVersion") ?? "0") || 0);
       const beforeOrdRaw = Number(req.query?.get("beforeOrd") ?? "0") || 0;
@@ -246964,6 +247869,14 @@ function createChatSessionsDomain(opts) {
           snapshotEntries.splice(at + 1, 0, entry);
         }
       }
+      const outputCards = await sessionOutputCards(snapshotEntries, store2, chatSessionId).catch((e) => {
+        console.warn(`[chat] \u4EA7\u51FA\u5361\u73B0\u62FC\u5931\u8D25\uFF08session=${chatSessionId}\uFF09\uFF0C\u8FD9\u6B21\u5FEB\u7167\u4E0D\u5E26\u5361: ${String(e)}`);
+        return [];
+      });
+      for (const { after, entry } of outputCards) {
+        const at = snapshotEntries.findIndex((e) => e.itemId === after);
+        snapshotEntries.splice(at + 1, 0, entry);
+      }
       const oldestOrd = snapshotEntries.find((e) => e.ord !== null)?.ord ?? null;
       const body2 = {
         chatSessionId,
@@ -247060,7 +247973,7 @@ function createChatSessionsDomain(opts) {
     router.get("/api/chat-sessions/:id/delegations", async (req) => {
       const store2 = await storeFor(req);
       const session = await store2.getSession(req.params.id);
-      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      if (!session || !ownsSessionOrOperator(session, req.auth)) throw new ApiError(404, "NOT_FOUND", "session not found");
       const wiring = opts.delegations;
       if (!wiring || !wiring.enabled()) return { status: 200, body: { items: [] } };
       const companyId = session.companyId ?? req.auth.companyId ?? void 0;
@@ -247081,6 +247994,9 @@ function createChatSessionsDomain(opts) {
           ...expert?.avatar ? { expertAvatar: expert.avatar } : {},
           state: record9.state,
           ...record9.failureKind ? { failureKind: record9.failureKind } : {},
+          /* 给人看的那一档由服务端算（Bug 0221）：委派卡、徽章、子会话面板三处渲染同一个值。 */
+          ending: delegationEndingOfRecord(record9, delegationArtifactsView(record9)),
+          settledSeq: record9.settledSeq,
           ...record9.label ? { label: record9.label } : {},
           ...record9.taskDigest ? { taskDigest: record9.taskDigest } : {},
           parentMessageId: record9.parentMessageId,
@@ -247126,7 +248042,7 @@ function createChatSessionsDomain(opts) {
     router.get("/api/chat-sessions/:id/work-orders", async (req) => {
       const store2 = await storeFor(req);
       const session = await store2.getSession(req.params.id);
-      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
+      if (!session || !ownsSessionOrOperator(session, req.auth)) throw new ApiError(404, "NOT_FOUND", "session not found");
       const workOrderIds = await store2.listWorkOrdersForSession(req.params.id);
       const wkKernel = await kernelFor(req);
       if (!wkKernel || workOrderIds.length === 0) return { status: 200, body: { items: [] } };
@@ -247149,6 +248065,29 @@ function createChatSessionsDomain(opts) {
       });
       return { status: 200, body: { items } };
     });
+    router.get("/api/chat-sessions/:id/usage", async (req) => {
+      const store2 = await storeFor(req);
+      const session = await store2.getSession(req.params.id);
+      if (!session || !ownsSessionOrOperator(session, req.auth)) throw new ApiError(404, "NOT_FOUND", "session not found");
+      const companyId = req.auth.companyId ?? session.companyId ?? opts.defaultCompanyId;
+      if (!opts.usageRead || !companyId) {
+        return { status: 503, body: { error: { code: "usage_ledger_unavailable", message: "\u4F7F\u7528\u4E0E\u7EDF\u8BA1\u6570\u636E\u6E90\u672A\u63A5\u5165" } } };
+      }
+      try {
+        return {
+          status: 200,
+          body: await opts.usageRead.conversationUsage(companyId, session.id, {
+            range: req.query.get("range") ?? void 0,
+            asOf: req.query.get("asOf") ?? void 0,
+            timeZone: req.query.get("timeZone") ?? void 0
+          })
+        };
+      } catch (err) {
+        const mapped = usageErrorResponse(err);
+        if (mapped) return mapped;
+        throw err;
+      }
+    });
     router.get("/api/chat-broadcasts/pending", async (req) => {
       if (!opts.broadcastOps) throw new ApiError(404, "NOT_FOUND", "\u672C\u5B9E\u4F8B\u672A\u542F\u7528\u5DE5\u5355\u7EC8\u6001\u64AD\u62A5");
       const store2 = await storeFor(req);
@@ -247463,6 +248402,44 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
+async function sessionOutputCards(entries, store, chatSessionId) {
+  const lastEntryOf = /* @__PURE__ */ new Map();
+  for (const e of entries) {
+    if (e.role === "assistant" && e.messageId) lastEntryOf.set(e.messageId, e);
+  }
+  if (lastEntryOf.size === 0) return [];
+  const ids2 = [...lastEntryOf.keys()];
+  const rows = store.listMessageOutputParts ? await store.listMessageOutputParts(chatSessionId, ids2) : (await store.listMessages(chatSessionId)).filter((m2) => m2.role === "assistant" && lastEntryOf.has(m2.id)).map((m2) => ({ messageId: m2.id, outputs: Array.isArray(m2.parts) ? m2.parts.filter((p2) => p2?.type === "outputs") : [] }));
+  const out = [];
+  for (const { messageId, outputs } of rows) {
+    const anchor = lastEntryOf.get(messageId);
+    const files = sessionOutputFilesOfParts(outputs);
+    if (!anchor || files.length === 0) continue;
+    const anchorPayload = anchor.payload && typeof anchor.payload === "object" && !Array.isArray(anchor.payload) ? anchor.payload : {};
+    out.push({
+      after: anchor.itemId,
+      entry: {
+        itemId: sessionOutputsItemId(messageId),
+        turnId: anchor.turnId,
+        itemType: "control",
+        role: "assistant",
+        status: "completed",
+        itemVersion: anchor.itemVersion,
+        seq: anchor.seq,
+        ord: anchor.ord,
+        messageId,
+        updatedAt: anchor.updatedAt,
+        payload: {
+          code: SESSION_OUTPUTS_ITEM_CODE,
+          files: files.map((f2) => ({ path: f2.path, name: f2.name })),
+          ...anchorPayload.createdAt !== void 0 ? { createdAt: anchorPayload.createdAt } : {},
+          ...anchorPayload.completedAt !== void 0 ? { completedAt: anchorPayload.completedAt } : {}
+        }
+      }
+    });
+  }
+  return out;
+}
 async function submissionCardProjection(entries, deps) {
   const out = { add: [], resolved: [] };
   const turns = deps.turns;
@@ -247605,6 +248582,8 @@ var init_chat_sessions2 = __esm({
     init_persistent_files();
     init_files_view();
     init_router();
+    init_operator();
+    init_usage_read();
     init_collab();
     init_gap_thread();
     init_escalation_opening();
@@ -247619,6 +248598,7 @@ var init_chat_sessions2 = __esm({
     init_company_data_store_router();
     init_workorder_terminal();
     init_session_workdir();
+    init_session_runtime_target();
     init_uncategorized_project();
     init_chat_submission();
     init_project_bundle();
@@ -251454,14 +252434,41 @@ function daemonMetaOf(hub, nodeId) {
   if (typeof connectedDaemons !== "function") return void 0;
   return connectedDaemons.call(hub).find((candidate) => candidate.daemonId === nodeId)?.meta;
 }
-function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, confirm) {
+function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessionReadyWaitMs, confirm) {
   const key2 = input.requireConsumptionReceipt ? input.clientMessageKey : void 0;
-  if (!key2 || !confirm) return sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs);
-  return sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs).then((result) => ({ ...result, receiptProbe: { nodeId, dispatchId, confirm: () => confirm(key2) } }));
+  if (!key2 || !confirm) return sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessionReadyWaitMs);
+  return sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessionReadyWaitMs).then((result) => ({ ...result, receiptProbe: { nodeId, dispatchId, confirm: () => confirm(key2) } }));
+}
+async function waitSessionReady(hub, dispatchId, entry, timeoutMs) {
+  const deadline = Date.now() + timeoutMs;
+  const ready = () => hub.hasSession?.(dispatchId) === true && entry.deliveryState === "started";
+  while (!entry.exited && !ready()) {
+    const left = deadline - Date.now();
+    if (left <= 0) return;
+    await new Promise((resolve11) => {
+      let settled = false;
+      const finish = () => {
+        if (settled) return;
+        settled = true;
+        const i = entry.readyWaiters?.indexOf(finish) ?? -1;
+        if (i >= 0) entry.readyWaiters.splice(i, 1);
+        resolve11();
+      };
+      (entry.readyWaiters ??= []).push(finish);
+      if (hub.hasSession?.(dispatchId) !== true) void hub.waitForSession(dispatchId, left).then(finish, finish);
+      else {
+        const t = setTimeout(finish, left);
+        t.unref?.();
+      }
+    });
+  }
 }
-function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
+function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessionReadyWaitMs) {
   const unknownIfInterrupting = input.interrupt ? { interrupt: "unknown" } : {};
   if (entry.exited) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
+  if (input.requireConsumptionReceipt && sessionReadyWaitMs > 0 && (hub.hasSession?.(dispatchId) === false || entry.deliveryState !== "started") && typeof hub.waitForSession === "function" && daemonMetaOf(hub, nodeId)?.supportsInputReceiptQuery === true) {
+    return waitSessionReady(hub, dispatchId, entry, sessionReadyWaitMs).then(() => sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, 0));
+  }
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
@@ -251498,6 +252505,7 @@ var init_daemon_adapter = __esm({
         this.nodeLostGraceMs = opts.nodeLostGraceMs ?? graceFromEnv(12e4);
         this.ackTimeoutMs = opts.ackTimeoutMs ?? ackMsFromEnv(15e3);
         this.appendTimeoutMs = opts.appendTimeoutMs ?? 1e4;
+        this.sessionReadyWaitMs = opts.sessionReadyWaitMs ?? 1e4;
         this.receiptQueryTimeoutMs = opts.receiptQueryTimeoutMs ?? 5e3;
         this.log = opts.log ?? ((m2) => console.warn(m2));
         this.health = opts.health;
@@ -251519,6 +252527,7 @@ var init_daemon_adapter = __esm({
       ackTimeoutMs;
       /** ADR-0093：append_input 回执时限；超时（老节点忽略帧）→ unsupported，上层降级 kill+resume。 */
       appendTimeoutMs;
+      sessionReadyWaitMs;
       log;
       health;
       stashEnabled;
@@ -251671,6 +252680,7 @@ var init_daemon_adapter = __esm({
           clearTimeout(w2.timer);
           w2.resolve({ accepted: false, reason: w2.requireConsumptionReceipt ? "unconfirmed" : "session-closing" });
         }
+        for (const w2 of entry.readyWaiters?.splice(0) ?? []) w2();
         if (info.reason === "server-unreachable") this.health?.recordUnreachable(entry.nodeId, info.reason);
         else this.health?.recordReachable(entry.nodeId);
         for (const cb of entry.exitCbs.splice(0)) cb(info);
@@ -251730,6 +252740,7 @@ var init_daemon_adapter = __esm({
           entry.ackTimer = void 0;
         }
         if (entry) entry.deliveryState = state;
+        if (entry && state === "started") for (const w2 of entry.readyWaiters?.splice(0) ?? []) w2();
       }
       onNodeDown(daemonId) {
         if (this.reapTimers.has(daemonId)) return;
@@ -251938,6 +252949,7 @@ var init_daemon_adapter = __esm({
         }
         const hub = this.hub;
         const appendTimeoutMs = this.appendTimeoutMs;
+        const sessionReadyWaitMs = this.sessionReadyWaitMs;
         const confirm = (key2) => this.confirmInputReceipt(nodeId, dispatchId, key2);
         return {
           id: dispatchId,
@@ -251971,7 +252983,7 @@ var init_daemon_adapter = __esm({
           } : {},
           // ADR-0093 对话追加：经 WS 把输入送到节点上的会话，等 append_result 回执；节点不认帧
           // （老节点）则超时 unsupported，上层降级 kill+resume。
-          appendInput: (input) => remoteAppendInput(hub, nodeId, dispatchId, entry, input, appendTimeoutMs, confirm)
+          appendInput: (input) => remoteAppendInput(hub, nodeId, dispatchId, entry, input, appendTimeoutMs, sessionReadyWaitMs, confirm)
         };
       }
       recover(dispatchId, nodeId, runtimeKind, actorId) {
@@ -252029,6 +253041,7 @@ var init_daemon_adapter = __esm({
         };
         const hub = this.hub;
         const appendTimeoutMs = this.appendTimeoutMs;
+        const sessionReadyWaitMs = this.sessionReadyWaitMs;
         const confirm = (key2) => this.confirmInputReceipt(nodeId, dispatchId, key2);
         return {
           id: dispatchId,
@@ -252068,7 +253081,7 @@ var init_daemon_adapter = __esm({
             }
           } : {},
           // ADR-0093 对话追加（重挂句柄同 spawn 句柄）。
-          appendInput: (input) => remoteAppendInput(hub, nodeId, dispatchId, entry, input, appendTimeoutMs, confirm)
+          appendInput: (input) => remoteAppendInput(hub, nodeId, dispatchId, entry, input, appendTimeoutMs, sessionReadyWaitMs, confirm)
         };
       }
     };
@@ -252382,22 +253395,22 @@ var init_engine = __esm({
 });
 // ../server/src/mirror/fs-state.ts
-var fs29, FsMirrorStateStore;
+var fs30, FsMirrorStateStore;
 var init_fs_state = __esm({
   "../server/src/mirror/fs-state.ts"() {
     "use strict";
-    fs29 = __toESM(require("node:fs"), 1);
+    fs30 = __toESM(require("node:fs"), 1);
     FsMirrorStateStore = class {
       constructor(file) {
         this.file = file;
-        if (fs29.existsSync(file)) {
-          const obj2 = JSON.parse(fs29.readFileSync(file, "utf8"));
+        if (fs30.existsSync(file)) {
+          const obj2 = JSON.parse(fs30.readFileSync(file, "utf8"));
           for (const [k2, v2] of Object.entries(obj2)) this.map.set(k2, v2);
         }
       }
       map = /* @__PURE__ */ new Map();
       flush() {
-        fs29.writeFileSync(this.file, JSON.stringify(Object.fromEntries(this.map), null, 2));
+        fs30.writeFileSync(this.file, JSON.stringify(Object.fromEntries(this.map), null, 2));
       }
       async get(artifactId) {
         return this.map.get(artifactId) ?? null;
@@ -258375,6 +259388,7 @@ var init_postgres_trace = __esm({
         if (filter.actorId) push2((n) => `r.actor_id = $${n}`, filter.actorId);
         if (filter.artifactId) push2((n) => `r.artifact_id = $${n}`, filter.artifactId);
         if (filter.projectId) push2((n) => `r.project_id = $${n}`, filter.projectId);
+        if (filter.chatSessionId) push2((n) => `r.chat_session_id = $${n}`, filter.chatSessionId);
         if (filter.runtimeKind) push2((n) => `r.runtime_kind = $${n}`, filter.runtimeKind);
         if (filter.status) push2((n) => `r.status = $${n}`, filter.status);
         if (filter.rootRunId) push2((n) => `r.root_run_id = $${n}`, filter.rootRunId);
@@ -261775,6 +262789,34 @@ var init_postgres_chat_sessions = __esm({
           attachments: row.attachments ?? []
         }));
       }
+      /**
+       * `/items` 快照出产出卡的窄读（Bug 0217）：按主键批量命中，在库里把 `parts` 展开、只挑 `type='outputs'`
+       * 那几段聚回一个数组送出来——整轮过程时间线不出库。只看 assistant 行（outputs 段只在助手轮收尾写）。
+       */
+      async listMessageOutputParts(sessionId, messageIds) {
+        if (messageIds.length === 0) return [];
+        const r = await this.pool.query(
+          `SELECT m.id, o.outputs
+         FROM ${this.s}.chat_messages m
+         JOIN ${this.s}.chat_sessions s ON s.id = m.session_id
+         CROSS JOIN LATERAL (
+           SELECT jsonb_agg(p ORDER BY i) AS outputs
+             FROM jsonb_array_elements(CASE WHEN jsonb_typeof(m.parts) = 'array' THEN m.parts ELSE '[]'::jsonb END)
+                  WITH ORDINALITY AS e(p, i)
+            WHERE p->>'type' = 'outputs'
+         ) o
+        WHERE m.id = ANY($1::text[])
+          AND m.session_id = $2
+          AND s.company_id = $3
+          AND m.role = 'assistant'
+          AND o.outputs IS NOT NULL`,
+          [[...messageIds], sessionId, this.companyId]
+        );
+        return r.rows.map((row) => ({
+          messageId: row.id,
+          outputs: Array.isArray(row.outputs) ? row.outputs : []
+        }));
+      }
       /**
        * 末尾 N 轮视窗（详情读侧默认）：先定位「从尾部数第 N 条 user 消息」的 seq 作为窗口起点，再取
        * seq >= 起点的全部消息。语义与内存版 windowMessagesByTurns 一致，但把裁剪下推到 SQL——长会话
@@ -263212,6 +264254,68 @@ var init_chat_items_ord_backfill = __esm({
   }
 });
+// ../storage/src/chat-session-runtime-pin-backfill.ts
+async function hasChatSessions(pool, schema) {
+  const r = await pool.query(`SELECT to_regclass($1) IS NOT NULL AS ok`, [`${schema}.chat_sessions`]);
+  return r.rows[0]?.ok === true;
+}
+async function pinChatSessionsToAgentDefault(pool, schema, opts) {
+  const s2 = quoteIdent2(schema);
+  const dryRun = opts.dryRun === true;
+  const base = {
+    schema,
+    companyId: opts.companyId,
+    scanned: 0,
+    pinned: 0,
+    leftUnbound: 0,
+    unresolved: 0,
+    dryRun
+  };
+  if (!await hasChatSessions(pool, schema)) return base;
+  const pending = await pool.query(
+    `SELECT ai_actor_id, count(*)::int AS n
+       FROM ${s2}.chat_sessions
+      WHERE company_id = $1
+        AND (override_node_id IS NULL OR override_runtime_kind IS NULL)
+      GROUP BY ai_actor_id`,
+    [opts.companyId]
+  );
+  for (const row of pending.rows) {
+    base.scanned += row.n;
+    let binding;
+    try {
+      binding = await opts.resolveBinding(row.ai_actor_id);
+    } catch {
+      base.unresolved += row.n;
+      continue;
+    }
+    if (!binding?.nodeId || !binding?.runtimeKind) {
+      base.leftUnbound += row.n;
+      continue;
+    }
+    if (dryRun) {
+      base.pinned += row.n;
+      continue;
+    }
+    const upd = await pool.query(
+      `UPDATE ${s2}.chat_sessions
+          SET override_node_id = $3, override_runtime_kind = $4
+        WHERE company_id = $1
+          AND ai_actor_id = $2
+          AND (override_node_id IS NULL OR override_runtime_kind IS NULL)`,
+      [opts.companyId, row.ai_actor_id, binding.nodeId, binding.runtimeKind]
+    );
+    base.pinned += upd.rowCount ?? 0;
+  }
+  return base;
+}
+var init_chat_session_runtime_pin_backfill = __esm({
+  "../storage/src/chat-session-runtime-pin-backfill.ts"() {
+    "use strict";
+    init_pg_ident();
+  }
+});
 // ../storage/src/postgres-delegations.ts
 function toRecord2(row) {
   return {
@@ -267580,7 +268684,7 @@ var init_cutover_aware_trace = __esm({
         const s2 = await this.pick();
         return typeof s2.runtimeRunActivity === "function" ? s2.runtimeRunActivity(runtimeInstanceId) : null;
       }
-      /** 协调运行（任务动态协调者卡）：落点 store 没实现就当没有这份数据，不出卡、不报错。 */
+      /** 协调运行（协调者卡的轨迹入口）：落点 store 没实现就当没有这份数据，卡照出、只是没图标，不报错。 */
       async listCoordinatorRuns(workOrderId) {
         const store = await this.pick();
         return await store.listCoordinatorRuns?.(workOrderId) ?? [];
@@ -267907,7 +269011,7 @@ var init_cutover_aware_trace = __esm({
       /**
        * 协调运行按工单扇出（任务动态协调者卡）。与 `FanOutDispatchLedger.listByWorkorder` 同理：
        * **一张工单只属于一家公司**，所以逐家查出来的并集恰好就是那一家的行；漏扇会让非默认公司的
-       * 协调者卡整片空白。某家查不动只记一笔，不让整块读失败。
+       * 协调者卡全都点不进轨迹。某家查不动只记一笔，不让整块读失败。
        */
       async listCoordinatorRuns(workOrderId) {
         const out = [];
@@ -270859,7 +271963,8 @@ async function backfillUsageLedger(ledger, opts) {
     manifestId: opts.dryRun ? null : opts.manifestId,
     usagePoints: emptyStep(),
     runtimeStartedAt: emptyStep(),
-    chat: { ...emptyStep(), notFound: 0, ambiguous: 0, turnFilled: 0 }
+    chat: { ...emptyStep(), notFound: 0, ambiguous: 0, turnFilled: 0 },
+    claudeResume: null
   };
   const sample = (step, id) => {
     if (step.samples.length < sampleSize) step.samples.push(id);
@@ -270997,8 +272102,134 @@ async function backfillUsageLedger(ledger, opts) {
       }
     });
   }
+  if (opts.claudeResumeBefore) {
+    report.claudeResume = await fixClaudeResumeUsage(ledger.pool, s2, opts.claudeResumeBefore, {
+      dryRun: opts.dryRun,
+      manifestId: opts.manifestId,
+      batch,
+      sample: (step, id) => sample(step, id),
+      now
+    });
+  }
+  return report;
+}
+function claudeResumeNetUsage(raw) {
+  const out = [];
+  let prev = null;
+  for (const u of raw) {
+    const cost = reportedCost(u["costUsdMicros"]);
+    if (cost === null) {
+      out.push(u);
+      continue;
+    }
+    const prevCost = prev ? reportedCost(prev["costUsdMicros"]) : null;
+    const cumulative = prev !== null && prevCost !== null && cost >= prevCost && BUCKETS.every(([k2]) => usageBucket(u[k2]) >= usageBucket(prev[k2]));
+    if (!cumulative) {
+      out.push(u);
+      prev = u;
+      continue;
+    }
+    const input = usageBucket(u["inputTokens"]) - usageBucket(prev["inputTokens"]);
+    const output = usageBucket(u["outputTokens"]) - usageBucket(prev["outputTokens"]);
+    out.push({
+      ...u,
+      inputTokens: input,
+      outputTokens: output,
+      totalTokens: input + output,
+      cacheReadTokens: usageBucket(u["cacheReadTokens"]) - usageBucket(prev["cacheReadTokens"]),
+      cacheCreationTokens: usageBucket(u["cacheCreationTokens"]) - usageBucket(prev["cacheCreationTokens"]),
+      costUsdMicros: cost - prevCost
+    });
+    prev = u;
+  }
+  return out;
+}
+async function fixClaudeResumeUsage(pool, s2, before, o) {
+  const report = { ...emptyStep(), sessions: 0, costBefore: 0, costAfter: 0 };
+  const audited = /* @__PURE__ */ new Map();
+  const auditRows = await pool.query(
+    `SELECT run_id, manifest_id, before, after FROM ${s2}.agent_run_usage_backfill_audit
+      WHERE field = 'claude_resume_usage' ORDER BY id`
+  );
+  for (const a of auditRows.rows) {
+    audited.set(a.run_id, { manifest: a.manifest_id, before: a.before, after: a.after });
+  }
+  const { rows } = await pool.query(
+    `SELECT r.id, r.usage, COALESCE(r.runtime_session_id, r.metadata->>'runtimeSessionId') AS rt
+       FROM ${s2}.agent_runs r
+      WHERE r.runtime_kind = 'claude-code' AND ${ENDED_SQL} AND jsonb_typeof(r.usage) = 'object'
+        AND COALESCE(r.runtime_session_id, r.metadata->>'runtimeSessionId') IS NOT NULL
+        AND r.started_at < $1
+      ORDER BY rt, r.started_at, r.id`,
+    [before]
+  );
+  const chains = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    const current = row.usage;
+    let raw = current;
+    const last = audited.get(row.id);
+    if (last && !last.manifest.endsWith(":undo")) {
+      const after = last.after?.usage;
+      const prior = last.before?.usage;
+      if (after && prior && sameUsage(after, current)) raw = prior;
+    }
+    const rt = row.rt;
+    const chain = chains.get(rt) ?? [];
+    chains.set(rt, chain);
+    chain.push({ id: row.id, current, raw });
+  }
+  report.sessions = chains.size;
+  const plan = [];
+  for (const chain of chains.values()) {
+    const net = claudeResumeNetUsage(chain.map((r) => r.raw));
+    chain.forEach((r, i) => {
+      if (sameUsage(net[i], r.current)) return;
+      plan.push({ id: r.id, current: r.current, next: net[i] });
+    });
+  }
+  report.candidates = plan.length;
+  for (const p2 of plan) {
+    o.sample(report, p2.id);
+    report.costBefore += reportedCost(p2.current["costUsdMicros"]) ?? 0;
+    report.costAfter += reportedCost(p2.next["costUsdMicros"]) ?? 0;
+  }
+  if (o.dryRun) return report;
+  for (let i = 0; i < plan.length; i += o.batch) {
+    const slice = plan.slice(i, i + o.batch);
+    await inTx(pool, async (c) => {
+      const at = o.now();
+      for (const p2 of slice) {
+        const r = await c.query(
+          `UPDATE ${s2}.agent_runs SET usage = $2::jsonb WHERE id = $1 AND usage = $3::jsonb RETURNING id`,
+          [p2.id, JSON.stringify(p2.next), JSON.stringify(p2.current)]
+        );
+        if (!r.rowCount) continue;
+        await setFinalPoint(c, s2, p2.id, p2.next);
+        report.changed += 1;
+        await audit(
+          c,
+          s2,
+          o.manifestId,
+          p2.id,
+          "claude_resume_usage",
+          { usage: p2.current },
+          { usage: p2.next },
+          at
+        );
+      }
+    });
+  }
   return report;
 }
+async function setFinalPoint(c, s2, runId, usage) {
+  const f2 = fourOf(usage);
+  await c.query(
+    `UPDATE ${s2}.agent_run_usage_points
+        SET input_tokens = $3, output_tokens = $4, cache_read_tokens = $5, cache_creation_tokens = $6, cost_usd_micros = $7
+      WHERE run_id = $1 AND seq = $2`,
+    [runId, USAGE_POINT_FINAL_SEQ, f2.inputTokens, f2.outputTokens, f2.cacheReadTokens, f2.cacheCreationTokens, reportedCost(usage["costUsdMicros"])]
+  );
+}
 function usageLedgerViolationCount(r) {
   return Object.values(r.violations).reduce((n, ids2) => n + ids2.length, 0);
 }
@@ -271092,6 +272323,17 @@ async function undoUsageLedgerBackfill(ledger, manifestId, opts = {}) {
         } else if (before !== null) {
           ok3 = await insertPoint(c, s2, runId, before);
         }
+      } else if (field === "claude_resume_usage") {
+        const prior = before?.usage;
+        const cur = after?.usage;
+        if (prior && cur) {
+          const r = await c.query(
+            `UPDATE ${s2}.agent_runs SET usage = $2::jsonb WHERE id = $1 AND usage = $3::jsonb RETURNING id`,
+            [runId, JSON.stringify(prior), JSON.stringify(cur)]
+          );
+          ok3 = (r.rowCount ?? 0) > 0;
+          if (ok3) await setFinalPoint(c, s2, runId, prior);
+        }
       } else if (field === "runtime_started_at" || field === "chat_session_id" || field === "chat_turn_id") {
         const r = await c.query(
           `UPDATE ${s2}.agent_runs SET ${field} = $2 WHERE id = $1 AND ${field} IS NOT DISTINCT FROM $3`,
@@ -271140,7 +272382,7 @@ async function audit(c, s2, manifestId, runId, field, before, after, createdAt)
     [manifestId, runId, field, before == null ? null : JSON.stringify(before), after == null ? null : JSON.stringify(after), createdAt]
   );
 }
-var import_node_crypto82, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, emptyStep, ChatRunLookup;
+var import_node_crypto82, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, emptyStep, fourOf, sameUsage, ChatRunLookup;
 var init_usage_ledger_backfill = __esm({
   "../storage/src/usage-ledger-backfill.ts"() {
     "use strict";
@@ -271163,6 +272405,13 @@ var init_usage_ledger_backfill = __esm({
 )`;
     CHAT_RUN_SQL = `r.id LIKE 'chat-run:%'`;
     emptyStep = () => ({ candidates: 0, changed: 0, samples: [] });
+    fourOf = (u) => ({
+      inputTokens: usageBucket(u["inputTokens"]),
+      outputTokens: usageBucket(u["outputTokens"]),
+      cacheReadTokens: usageBucket(u["cacheReadTokens"]),
+      cacheCreationTokens: usageBucket(u["cacheCreationTokens"])
+    });
+    sameUsage = (a, b2) => BUCKETS.every(([k2]) => usageBucket(a[k2]) === usageBucket(b2[k2])) && reportedCost(a["costUsdMicros"]) === reportedCost(b2["costUsdMicros"]);
     ChatRunLookup = class {
       constructor(sources) {
         this.sources = sources;
@@ -271314,6 +272563,7 @@ __export(src_exports, {
   buildTrigger: () => buildTrigger,
   buildWorkorderIndex: () => buildWorkorderIndex,
   canonicalTypeDefHash: () => canonicalTypeDefHash,
+  claudeResumeNetUsage: () => claudeResumeNetUsage,
   companySchemaName: () => companySchemaName,
   copyActorMemoriesIdempotent: () => copyActorMemoriesIdempotent,
   copyActorsIdempotent: () => copyActorsIdempotent,
@@ -271351,6 +272601,7 @@ __export(src_exports, {
   newUsageBackfillManifestId: () => newUsageBackfillManifestId,
   openUsageLedgerForBackfill: () => openUsageLedgerForBackfill,
   payloadChecksum: () => payloadChecksum,
+  pinChatSessionsToAgentDefault: () => pinChatSessionsToAgentDefault,
   planSessionOrd: () => planSessionOrd,
   provisionCompanyDataPlaneSchema: () => provisionCompanyDataPlaneSchema,
   provisionNewCompanyDataPlane: () => provisionNewCompanyDataPlane,
@@ -271396,6 +272647,7 @@ var init_src10 = __esm({
     init_postgres_chat_turns();
     init_postgres_chat_items();
     init_chat_items_ord_backfill();
+    init_chat_session_runtime_pin_backfill();
     init_postgres_delegations();
     init_postgres_nodes();
     init_postgres_model_prices();
@@ -272632,6 +273884,7 @@ __export(src_exports2, {
   NdjsonOplogStore: () => NdjsonOplogStore,
   NodeHealthTracker: () => NodeHealthTracker,
   NotificationLedgerWorker: () => NotificationLedgerWorker,
+  OPERATOR_SCOPE: () => OPERATOR_SCOPE,
   ORPHANED_TURN_ASSISTANT_NOTICE: () => ORPHANED_TURN_ASSISTANT_NOTICE,
   OUTPUT_COPY_LIMITS: () => OUTPUT_COPY_LIMITS,
   PARENT_CONVERSATION_PATH: () => PARENT_CONVERSATION_PATH,
@@ -272723,11 +273976,13 @@ __export(src_exports2, {
   chatBroadcastEnabledFromEnv: () => chatBroadcastEnabledFromEnv,
   chatDelegationEnabledFromEnv: () => chatDelegationEnabledFromEnv,
   chatDispatchScope: () => chatDispatchScope,
+  chatExitModelFields: () => chatExitModelFields,
   chatInterruptCauseOf: () => chatInterruptCauseOf,
   chatInterruptItemId: () => chatInterruptItemId,
   chatItemsDoubleWriteEnabled: () => chatItemsDoubleWriteEnabled,
   chatNodeChanged: () => chatNodeChanged,
   chatRunLedgerFields: () => chatRunLedgerFields,
+  chatSessionInitialRuntime: () => chatSessionInitialRuntime,
   childRoundMessageIds: () => childRoundMessageIds,
   clampObservedAt: () => clampObservedAt,
   classifyPage: () => classifyPage,
@@ -272868,6 +274123,7 @@ __export(src_exports2, {
   isKnowledgeQueryPlanV2: () => isKnowledgeQueryPlanV2,
   isLocationFailureCode: () => isLocationFailureCode,
   isNodeHealthy: () => isNodeHealthy,
+  isOperatorRequest: () => isOperatorRequest,
   isRunTerminalStatus: () => isRunTerminalStatus,
   isRuntimeDrifted: () => isRuntimeDrifted,
   isRuntimeRunReader: () => isRuntimeRunReader,
@@ -273097,6 +274353,7 @@ var init_src11 = __esm({
     "use strict";
     init_server3();
     init_tokens();
+    init_operator();
     init_session_dataplane_token();
     init_dev_store();
     init_control_plane_file_store();
@@ -273385,7 +274642,23 @@ function parseUsageLedgerBackfillArgs(flags) {
   if (modes.length !== 1) {
     throw new UsageLedgerBackfillArgError("--dry-run / --execute / --verify / --undo \u5FC5\u987B\u4E14\u53EA\u80FD\u9009\u4E00\u4E2A");
   }
-  return { scope: company !== void 0 ? { companyId: company } : { all: true }, mode: modes[0] };
+  const mode = modes[0];
+  let claudeResumeBefore;
+  if (flags.has("claude-resume-before")) {
+    const raw = flags.get("claude-resume-before");
+    if (raw === "" || raw === "true" || Number.isNaN(Date.parse(raw))) {
+      throw new UsageLedgerBackfillArgError("--claude-resume-before \u9700\u8981 ISO \u65F6\u523B\uFF08\u5982 2026-09-23T00:00:00Z\uFF09\uFF1A\u4FEE\u597D\u7684\u8282\u70B9\u5305\u5728\u5168\u90E8\u8282\u70B9\u88C5\u4E0A\u7684\u65F6\u523B");
+    }
+    if (mode.kind !== "dry-run" && mode.kind !== "execute") {
+      throw new UsageLedgerBackfillArgError("--claude-resume-before \u53EA\u80FD\u914D --dry-run \u6216 --execute\uFF08\u64A4\u9500\u7167\u5E38\u7528 --undo\uFF09");
+    }
+    claudeResumeBefore = new Date(raw).toISOString();
+  }
+  return {
+    scope: company !== void 0 ? { companyId: company } : { all: true },
+    mode,
+    ...claudeResumeBefore ? { claudeResumeBefore } : {}
+  };
 }
 async function runUsageLedgerBackfill(flags, io) {
   let args;
@@ -273427,7 +274700,11 @@ ${USAGE_LEDGER_BACKFILL_USAGE}`);
       const dryRun = args.mode.kind === "dry-run";
       const manifestId2 = dryRun ? void 0 : storage.newUsageBackfillManifestId();
       for (const l of ledgers) {
-        const r = await storage.backfillUsageLedger(l, { dryRun, ...manifestId2 ? { manifestId: manifestId2 } : {} });
+        const r = await storage.backfillUsageLedger(l, {
+          dryRun,
+          ...manifestId2 ? { manifestId: manifestId2 } : {},
+          ...args.claudeResumeBefore ? { claudeResumeBefore: args.claudeResumeBefore } : {}
+        });
         const n = (step) => dryRun ? `\u5F85\u6539 ${step.candidates}` : `\u5DF2\u6539 ${step.changed}/${step.candidates}`;
         io.out(`\u2014 \u8D26\u672C ${r.label}\uFF08schema=${r.schema}\uFF09`);
         io.out(`  1 \u7528\u91CF\u70B9(backfill)\uFF1A${n(r.usagePoints)}${samples(r.usagePoints.samples)}`);
@@ -273435,6 +274712,12 @@ ${USAGE_LEDGER_BACKFILL_USAGE}`);
         io.out(
           `  3 \u4F1A\u8BDD/\u8F6E\u6B21\uFF1A${n(r.chat)}\uFF08\u5176\u4E2D\u8865\u8F6E\u6B21 ${r.chat.turnFilled}\uFF1B\u67E5\u4E0D\u5230 ${r.chat.notFound}\u3001\u6B67\u4E49 ${r.chat.ambiguous}\uFF0C\u4FDD\u6301 NULL\uFF09` + samples(r.chat.samples)
         );
+        if (r.claudeResume) {
+          const c = r.claudeResume;
+          io.out(
+            `  4 Claude \u7EED\u8DD1\u7D2F\u8BA1\u503C\u6263\u56DE\uFF08\u5F00\u8DD1\u65E9\u4E8E ${args.claudeResumeBefore}\uFF0C${c.sessions} \u6761\u4F1A\u8BDD\u7EBF\uFF09\uFF1A${n(c)}\uFF1B\u8FD9\u4E9B run \u7684\u8D39\u7528\u5408\u8BA1 $${(c.costBefore / 1e6).toFixed(2)} \u2192 $${(c.costAfter / 1e6).toFixed(2)}` + samples(c.samples)
+          );
+        }
       }
       if (dryRun) io.out("[usage-ledger-backfill] dry-run\uFF1A\u4E00\u884C\u672A\u5199\u3002\u4E0B\u4E00\u6B65 --execute\u3002");
       else {
@@ -273482,7 +274765,7 @@ var USAGE_LEDGER_BACKFILL_USAGE, UsageLedgerBackfillArgError, MAX_LISTED;
 var init_usage_ledger_backfill_command = __esm({
   "../cli/src/usage-ledger-backfill-command.ts"() {
     "use strict";
-    USAGE_LEDGER_BACKFILL_USAGE = "\u7528\u6CD5\uFF1Aoasis usage-ledger-backfill (--company <id> | --all) (--dry-run | --execute | --verify | --undo <manifestId>)";
+    USAGE_LEDGER_BACKFILL_USAGE = "\u7528\u6CD5\uFF1Aoasis usage-ledger-backfill (--company <id> | --all) (--dry-run | --execute | --verify | --undo <manifestId>) [--claude-resume-before <ISO \u65F6\u523B>]";
     UsageLedgerBackfillArgError = class extends Error {
     };
     MAX_LISTED = 50;
@@ -273492,7 +274775,7 @@ var init_usage_ledger_backfill_command = __esm({
 // src/index.ts
 var fs48 = __toESM(require("node:fs"));
 init_src();
-var os14 = __toESM(require("node:os"));
+var os15 = __toESM(require("node:os"));
 var path43 = __toESM(require("node:path"));
 var import_node_child_process24 = require("node:child_process");
 var import_node_crypto93 = require("node:crypto");
@@ -273500,7 +274783,7 @@ var import_node_crypto93 = require("node:crypto");
 // ../cli/src/cli.ts
 init_src();
 var fs42 = __toESM(require("node:fs"), 1);
-var os12 = __toESM(require("node:os"), 1);
+var os13 = __toESM(require("node:os"), 1);
 var path37 = __toESM(require("node:path"), 1);
 var import_node_crypto91 = require("node:crypto");
@@ -273510,7 +274793,7 @@ init_chat_cancel_attribution();
 init_src();
 init_src11();
 var fs34 = __toESM(require("node:fs"), 1);
-var os8 = __toESM(require("node:os"), 1);
+var os9 = __toESM(require("node:os"), 1);
 var path28 = __toESM(require("node:path"), 1);
 var import_node_child_process17 = require("node:child_process");
 var import_node_crypto87 = require("node:crypto");
@@ -275480,132 +276763,7 @@ init_src11();
 init_src4();
 // ../cli/src/chat-exit.ts
-var fs31 = __toESM(require("node:fs"), 1);
-init_src();
-init_src7();
-init_chat_cancel_attribution();
-function transcriptTail(ref2) {
-  try {
-    const stat4 = fs31.statSync(ref2);
-    const size = Math.min(stat4.size, 4e3);
-    const buf = Buffer.alloc(size);
-    const fd = fs31.openSync(ref2, "r");
-    try {
-      fs31.readSync(fd, buf, 0, size, Math.max(0, stat4.size - size));
-    } finally {
-      fs31.closeSync(fd);
-    }
-    return buf.toString("utf8").trim();
-  } catch {
-    return "";
-  }
-}
-var SUMMARY_MAX_CHARS = 500;
-function clipLine(line2) {
-  return line2.length > SUMMARY_MAX_CHARS ? `${line2.slice(0, SUMMARY_MAX_CHARS)}\u2026` : line2;
-}
-function providerMessage(line2) {
-  const m2 = /['"]message['"]\s*:\s*(?:'((?:[^'\\]|\\.)*)'|"((?:[^"\\]|\\.)*)")/.exec(line2);
-  const text7 = (m2?.[1] ?? m2?.[2])?.trim();
-  return text7 ? text7 : void 0;
-}
-var INTERNAL_PREFIX_RE = /^\[[a-z][a-z0-9_]*\]\s*/;
-var QUOTA_RE3 = /hit your (?:\w+ )?limit|usage limit|quota|insufficient[_ ](?:balance|credit|funds)|credit balance|billing|\b402\b|额度|余额/i;
-var RATE_LIMIT_RE = /rate.?limit|too many requests|\b429\b|\b529\b|overloaded|限流/i;
-var AUTH_RE2 = /\b401\b|\b403\b|unauthori[sz]ed|authenticat|oauth|invalid[_ -]?(?:api[_ -]?key|token|x-api-key)|api[_ -]?key[^\n]{0,40}\b(?:invalid|expired|revoked)|token[^\n]{0,30}\b(?:expired|invalid|revoked)|not logged in|\/login|credential|凭证|登录/i;
-var MODEL_RE = /\bmodel\b[^\n]{0,120}?\b(?:not found|not exist|does not exist|not available|not supported|unavailable|unknown)\b|\b(?:unknown|invalid|unsupported) model\b|model_not_found/i;
-var DISK_FULL_RE = /\bENOSPC\b|no space left on device|\bEDQUOT\b|disk quota exceeded|\[Errno 28\]|disk (?:is )?full|磁盘(?:空间)?(?:已满|不足)/i;
-var UNREACHABLE_RE2 = /不在线|socket 非 OPEN|帧未送达|失联/;
-function failureKind(reason, line2) {
-  if (line2.startsWith(SESSION_STARTUP_FAILED_PREFIX)) return "startup-failed";
-  switch (reason) {
-    case "auth-error":
-      return "auth";
-    case "server-unreachable":
-      return "node-unreachable";
-    case "timeout":
-      return "timeout";
-    case "output-limit":
-      return "output-limit";
-    case "rate-limit":
-      return QUOTA_RE3.test(line2) ? "quota" : "rate-limit";
-    default:
-      break;
-  }
-  if (!line2) return "unknown";
-  if (DISK_FULL_RE.test(line2)) return "disk-full";
-  if (QUOTA_RE3.test(line2)) return "quota";
-  if (AUTH_RE2.test(line2)) return "auth";
-  if (RATE_LIMIT_RE.test(line2)) return "rate-limit";
-  if (MODEL_RE.test(line2)) return "model";
-  if (UNREACHABLE_RE2.test(line2)) return "node-unreachable";
-  return "unknown";
-}
-var chatRebindHint = (what) => `\u5728\u7EC4\u7EC7\u9875\u8FD9\u4F4D Agent \u7684\u300C\u6A21\u578B\u300D\u9875\u7B7E\u91CC${what}`;
-function resetTime(line2) {
-  return extractResetHint(line2)?.replace(/^(?:resets?|try again at)\s+/i, "").trim() || void 0;
-}
-function failureSummary(kind, ctx) {
-  switch (kind) {
-    case "auth":
-      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u7684\u767B\u5F55\u5DF2\u8FC7\u671F\u6216\u51ED\u8BC1\u65E0\u6548\uFF0C\u8C03\u7528\u4E0D\u4E86\u6A21\u578B\u3002\u8BF7\u8282\u70B9\u7BA1\u7406\u5458\u5728\u90A3\u53F0\u673A\u5668\u4E0A\u91CD\u65B0\u767B\u5F55\u8FD9\u4E2A\u8FD0\u884C\u65F6\uFF08\u6216\u66F4\u65B0 API Key\uFF09\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u7740\u6025\u7684\u8BDD\u4E5F\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u53EF\u7528\u7684\u8FD0\u884C\u65F6")}\u3002`;
-    case "quota": {
-      const at = resetTime(ctx.line);
-      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u6A21\u578B\u989D\u5EA6\u5DF2\u7528\u5B8C${at ? `\uFF0C\u9884\u8BA1 ${at} \u6062\u590D` : ""}\u3002\u8BF7\u7B49\u989D\u5EA6\u6062\u590D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u7740\u6025\u7684\u8BDD\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u989D\u5EA6\u5145\u8DB3\u7684\u8FD0\u884C\u65F6")}\u3002`;
-    }
-    case "rate-limit":
-      return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u6A21\u578B\u670D\u52A1\u6682\u65F6\u9650\u6D41\u6216\u7E41\u5FD9\u3002\u8BF7\u7B49\u4E00\u4E24\u5206\u949F\u518D\u53D1\u4E00\u6B21\u3002";
-    case "node-unreachable":
-      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u8FD9\u4F4D Agent \u7684\u8282\u70B9\u79BB\u7EBF\u6216\u8FDE\u63A5\u4E2D\u65AD\u3002\u8BF7\u786E\u8BA4\u90A3\u53F0\u673A\u5668\u5F00\u7740\u3001\u8282\u70B9\u7A0B\u5E8F\u5728\u8FD0\u884C\u3001\u7F51\u7EDC\u6B63\u5E38\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u4E5F\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u5728\u7EBF\u7684\u8FD0\u884C\u65F6")}\u3002`;
-    case "model":
-      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD9\u4E2A\u8FD0\u884C\u65F6\u7528\u4E0D\u4E86\u5F53\u524D\u914D\u7F6E\u7684\u6A21\u578B\u3002\u8BF7${chatRebindHint("\u6362\u4E00\u4E2A\u53EF\u7528\u7684\u6A21\u578B")}\u540E\u518D\u53D1\u4E00\u6B21\u3002`;
-    case "timeout":
-      return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD9\u4E00\u8F6E\u8FD0\u884C\u8D85\u8FC7\u4E86\u65F6\u95F4\u4E0A\u9650\uFF0C\u5DF2\u88AB\u7EC8\u6B62\u3002\u53EF\u4EE5\u628A\u4EFB\u52A1\u62C6\u5C0F\u4E00\u4E9B\u518D\u53D1\u3002";
-    case "startup-failed":
-      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A${ctx.readable || SESSION_STARTUP_FAILED_PREFIX}\u3002\u8FD9\u4E00\u8F6E\u6CA1\u6709\u5F00\u59CB\u8FD0\u884C\uFF0C\u53EF\u4EE5\u76F4\u63A5\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u591A\u534A\u662F\u90A3\u53F0\u8282\u70B9\u8D1F\u8F7D\u8FC7\u9AD8\uFF0C\u8BF7\u7BA1\u7406\u5458\u7ED9\u5B83\u51CF\u8D1F\u6216${chatRebindHint("\u6362\u4E00\u4E2A\u8FD0\u884C\u65F6")}\u3002`;
-    case "disk-full":
-      return `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u8FD9\u4F4D Agent \u7684\u8282\u70B9\u78C1\u76D8\u7A7A\u95F4\u6EE1\u4E86\uFF0C\u8FD9\u4E00\u8F6E\u5199\u4E0D\u4E86\u6587\u4EF6\u3002\u8BF7\u8282\u70B9\u7BA1\u7406\u5458\u6E05\u7406\u90A3\u53F0\u673A\u5668\u7684\u78C1\u76D8\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u7740\u6025\u7684\u8BDD\u4E5F\u53EF\u4EE5${chatRebindHint("\u6362\u4E00\u4E2A\u8FD0\u884C\u65F6")}\u3002`;
-    case "output-limit":
-      return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u6A21\u578B\u8F93\u51FA\u8D85\u51FA\u957F\u5EA6\u4E0A\u9650\uFF0C\u56DE\u590D\u88AB\u622A\u65AD\u4E86\u3002\u53EF\u4EE5\u8BA9\u5B83\u5206\u51E0\u6B21\u8F93\u51FA\uFF0C\u6216\u628A\u4EFB\u52A1\u62C6\u5C0F\u4E00\u4E9B\u518D\u53D1\u3002";
-    case "unknown":
-      if (ctx.line) {
-        return "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u62A5\u9519\u4E86\uFF0C\u6682\u65F6\u6CA1\u8BA4\u51FA\u662F\u4EC0\u4E48\u539F\u56E0\u3002\u53EF\u4EE5\u7A0D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u8BF7\u70B9\u300C\u5C55\u5F00\u8BE6\u60C5\u300D\u628A\u539F\u59CB\u62A5\u9519\u53D1\u7ED9\u7BA1\u7406\u5458\u3002";
-      }
-      return ctx.hasDetail ? "\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u5F02\u5E38\u9000\u51FA\uFF0C\u6CA1\u6709\u7ED9\u51FA\u62A5\u9519\u539F\u56E0\u3002\u53EF\u4EE5\u7A0D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u8BF7\u70B9\u300C\u5C55\u5F00\u8BE6\u60C5\u300D\u628A\u539F\u59CB\u8BB0\u5F55\u53D1\u7ED9\u7BA1\u7406\u5458\u3002" : `\u5BF9\u8BDD\u5931\u8D25\uFF1A\u8FD0\u884C\u65F6\u5F02\u5E38\u9000\u51FA\uFF08\u9000\u51FA\u7801 ${ctx.code ?? "\u65E0"}\uFF09\uFF0C\u6CA1\u6709\u7559\u4E0B\u62A5\u9519\u4FE1\u606F\u3002\u53EF\u4EE5\u7A0D\u540E\u518D\u53D1\u4E00\u6B21\uFF1B\u53CD\u590D\u51FA\u73B0\u7684\u8BDD\uFF0C\u8BF7\u7BA1\u7406\u5458\u5230\u300C\u8FD0\u884C\u8F68\u8FF9\u300D\u91CC\u67E5\u8FD9\u4E00\u8F6E\u3002`;
-  }
-}
-function buildChatExitError(info) {
-  const genericLine = `runtime exited with code ${info.code ?? "null"}${info.reason ? ` (${info.reason})` : ""}`;
-  let detail = "";
-  if (info.reason !== "cancelled") {
-    detail = info.errorMessage?.trim() ?? "";
-    if (!detail && info.transcriptRef) detail = transcriptTail(info.transcriptRef);
-  }
-  let summary;
-  let cancelledBy;
-  if (info.reason === "cancelled") {
-    cancelledBy = cancelCauseFromExitMessage(info.errorMessage);
-    summary = chatCancelNote(cancelledBy);
-  } else {
-    const firstErrorLine = (info.errorMessage?.split("\n").map((line2) => line2.trim()).find(Boolean) ?? "").replace(INTERNAL_PREFIX_RE, "");
-    const readable = firstErrorLine ? clipLine(providerMessage(firstErrorLine) ?? firstErrorLine) : "";
-    summary = failureSummary(failureKind(info.reason, firstErrorLine), {
-      readable,
-      line: firstErrorLine,
-      hasDetail: Boolean(detail),
-      code: info.code
-    });
-  }
-  const chatExit = {
-    ...info.reason ? { reason: info.reason } : {},
-    summary,
-    ...cancelledBy ? { cancelledBy } : {},
-    ...detail ? { detail: `${genericLine}
-${detail}`.slice(0, 4200) } : {}
-  };
-  return Object.assign(new Error(summary), { chatExit });
-}
+init_chat_exit();
 // ../cli/src/chat-task-header.ts
 init_src11();
@@ -276398,15 +277556,15 @@ function oasisWrapperScript() {
   const main = path28.join(repoRoot, "packages/cli/src/main.ts");
   const key2 = (0, import_node_crypto87.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
-  const stable = path28.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key2}`);
+  const stable = path28.join(os9.tmpdir(), `oasis-cli-wrapper-${uid}-${key2}`);
   let dir;
   try {
     fs34.mkdirSync(stable, { recursive: true, mode: 448 });
     const st = fs34.lstatSync(stable);
     const mine = st.isDirectory() && !st.isSymbolicLink() && (typeof process.getuid !== "function" || st.uid === process.getuid());
-    dir = mine ? stable : fs34.mkdtempSync(path28.join(os8.tmpdir(), "oasis-cli-"));
+    dir = mine ? stable : fs34.mkdtempSync(path28.join(os9.tmpdir(), "oasis-cli-"));
   } catch {
-    dir = fs34.mkdtempSync(path28.join(os8.tmpdir(), "oasis-cli-"));
+    dir = fs34.mkdtempSync(path28.join(os9.tmpdir(), "oasis-cli-"));
   }
   const wrapper = path28.join(dir, "oasis");
   fs34.writeFileSync(wrapper, `#!/usr/bin/env bash
@@ -276632,7 +277790,8 @@ async function startServe(opts) {
   const reloadTimeoutPolicy = () => {
     try {
       activeTimeoutPolicy = loadPolicyFromFile(resolvePolicyFilePath());
-      console.log(`[serve] timeout-policy \u5DF2\u70ED\u8F7D\uFF08version=${activeTimeoutPolicy.version}\uFF09`);
+      syncChatWallClockCopy();
+      console.log(`[serve] timeout-policy \u5DF2\u70ED\u8F7D\uFF08version=${activeTimeoutPolicy.version}\uFF0Cchat \u5899\u949F=${wallClockForKind("chat")}ms\uFF09`);
       return { ok: true, version: activeTimeoutPolicy.version };
     } catch (err) {
       console.error(`[serve] timeout-policy \u70ED\u8F7D\u5931\u8D25\uFF0C\u4FDD\u7559\u65E7\u7B56\u7565\uFF1A${err.message}`);
@@ -276646,6 +277805,8 @@ async function startServe(opts) {
     return (act.cadence.find((s2) => s2.reassignAfter) ?? act.cadence[act.cadence.length - 1]).atMs;
   };
   const wallClockForKind = (runtimeKind) => activeTimeoutPolicy.resolve({ executor: "agent", scenario: "wall-clock", runtimeKind }).wallClockMs ?? 120 * 6e4;
+  const syncChatWallClockCopy = () => setChatWallClockMs(wallClockForKind("chat"));
+  syncChatWallClockCopy();
   const loadJson = (name) => {
     const file = path28.join(opts.dir, name);
     return fs34.existsSync(file) ? JSON.parse(fs34.readFileSync(file, "utf8")) : void 0;
@@ -276767,8 +277928,8 @@ async function startServe(opts) {
   );
   const issuer = createTokenIssuer({ secretFile: path28.join(opts.dir, "session-token-secret") });
   const apiActivity = createApiActivityLedger();
-  const operatorActor = `actor:human:${os8.userInfo().username}`;
-  const operatorToken = issuer.issue(operatorActor);
+  const operatorActor = `actor:human:${os9.userInfo().username}`;
+  const operatorToken = issuer.issue(operatorActor, { scopes: [OPERATOR_SCOPE] });
   fs34.writeFileSync(path28.join(opts.dir, "operator-token"), operatorToken, { mode: 384 });
   let nodeTokens = createNodeTokenStore(path28.join(opts.dir, "node-tokens.json"));
   const enrollTokens = createEnrollTokenStore(30 * 60 * 1e3, path28.join(opts.dir, "enroll-tokens.json"));
@@ -278605,6 +279766,37 @@ async function startServe(opts) {
     return plan && plan.injectedHistoryCount > 0 ? plan.runtimeMessage : void 0;
   };
   const resolveCompanyBinding = createCompanyBindingResolver({ actors, defaultCompanyId });
+  if (pgPool) {
+    const pinPool = pgPool;
+    void (async () => {
+      try {
+        const companies2 = await controlPlaneStore.listCompanies();
+        const total = { scanned: 0, pinned: 0, leftUnbound: 0, unresolved: 0 };
+        for (const c of companies2) {
+          const rep = await pinChatSessionsToAgentDefault(pinPool, engineSchemaFor(c.id), {
+            companyId: c.id,
+            // 与派发、与委派回流、与 chat 工作区读口**同一个** resolver 实例——存量钉住的目标必须
+            // 与「不钉时这一轮会派到哪」逐字相同，否则这条迁移本身就改了行为。
+            resolveBinding: async (actorId) => {
+              const b2 = await resolveCompanyBinding(c.id, actorId);
+              return b2 ? { nodeId: b2.nodeId, runtimeKind: b2.runtimeKind } : null;
+            }
+          });
+          total.scanned += rep.scanned;
+          total.pinned += rep.pinned;
+          total.leftUnbound += rep.leftUnbound;
+          total.unresolved += rep.unresolved;
+        }
+        if (total.scanned > 0) {
+          console.log(
+            `[chat-runtime-pin] ADR 0613 \u5B58\u91CF\u4F1A\u8BDD\u9489\u76EE\u6807\uFF1A\u547D\u4E2D ${total.scanned} \u6761\u3001\u5199\u5165 ${total.pinned} \u6761\u3001\u5458\u5DE5\u672A\u7ED1\u5B9A\u7559\u7A7A ${total.leftUnbound} \u6761\u3001binding \u89E3\u6790\u5931\u8D25 ${total.unresolved} \u6761`
+          );
+        }
+      } catch (err) {
+        console.warn(`[chat-runtime-pin] \u5B58\u91CF\u4F1A\u8BDD\u9489\u76EE\u6807\u5931\u8D25\uFF08\u4E0D\u5F71\u54CD\u542F\u52A8\uFF0C\u4E0B\u6B21\u542F\u52A8\u5E42\u7B49\u91CD\u8BD5\uFF09\uFF1A`, err);
+      }
+    })();
+  }
   const delegationWorkdirLocator = buildDelegationWorkdirLocator({
     // ⭐ 与派发、与 chat-sessions 域**同一个 resolver 实例**（评审 blocker ① 五修）：
     // 生产 `resolveCompanyBinding` 在上文构造一次，喂给这里、`dispatchChatImpl`、
@@ -279036,7 +280228,7 @@ async function startServe(opts) {
         // 派发台账：动态卡的 runId 与「执行轨迹」抽屉靠它把 work/review 硬关联到 agent_runs.id。
         // 与上面 createServer 的 `dispatchesOfWorkorder`（timeline 用）是同一个闭包，别分叉。
         dispatchesOfWorkorder: (wid) => fanOutLedger.listByWorkorder(wid),
-        // 任务动态**协调者卡**（F2）：协调者不走 dispatcher，台账里没有它，只能从 agent_runs 取。
+        // 任务动态**协调者卡**（F2）的轨迹入口：协调者不走 dispatcher，台账里没有它，只能从 agent_runs 取。
         // 扇出理由同 `dispatchesOfWorkorder`：这个回调拿不到公司，而一张工单只属于一家。
         coordinatorRunsOfWorkorder: (wid) => fanOutTrace.listCoordinatorRuns(wid),
         // 连败熔断卡面的「末次：{失败原文首句}」：原话只在 `agent_runs.error_message`，快照里只有分类词。
@@ -279113,6 +280305,13 @@ async function startServe(opts) {
         // store（`public.actor_bindings`），org-registry cutover 之后它是冻结旧镜像——只留给
         // 本域其它老读口，工作区定位一律不许再用它。
         resolveBinding: resolveCompanyBinding,
+        /* ADR 0613：建会话 / 「恢复为员工默认运行配置」这两下要读员工详情页配的型号，按**当前公司**读
+           （与 `resolveBinding` 同一条理由：全局 `registry` 对已切 `actor-config` 的公司是冻结旧镜像）。
+           ⚠ 只有这两下读它；解析每一轮的模型依旧不读员工配置（ADR 0610 D1）。 */
+        resolveActorModel: async (cid, actorId) => {
+          const ctx = await actors.resolveCtx(cid ?? defaultCompanyId);
+          return (await ctx.service.latestConfig(actorId))?.model ?? null;
+        },
         // 按 runId 路由：切换后新会话的事件落在本公司库里，共享 store 会一条都补不出 parts。
         // ⚠ `runRoutedTrace` 声明在本行**之后**：包成箭头函数避 TDZ（本域只需要 listEvents）。
         trace: { listEvents: (runId, o) => runRoutedTrace.listEvents(runId, o) },
@@ -279200,7 +280399,11 @@ async function startServe(opts) {
         resolveChatItems: (companyId) => chatItemsFor(companyId),
         liveChat,
         // ADR-0587：列表行派生 `unread`，与 collab 域收件箱读同一份按公司的水位（无 PG 时闭包自己回落单实例）。
-        resolveReadMarkers: readMarkerStoreFor
+        resolveReadMarkers: readMarkerStoreFor,
+        // ADR 0610 D4：`GET /api/chat-sessions/:id/usage` 的取数口——**与 collab 域是同一个实例**，
+        // 按会话取数与组织统计因此永远同一份账本、同一套归属，不会出现两条路各算各的。
+        usageRead,
+        defaultCompanyId
       })] : []
     ],
     workorderDrafts,
@@ -279747,7 +280950,9 @@ async function startServe(opts) {
         ...c.dispatchId !== void 0 ? { dispatchId: c.dispatchId } : {},
         // ADR-0078 D3：写入围栏的钥匙
         ...c.artifactId !== void 0 ? { artifactId: c.artifactId } : {},
-        ...c.sessionId !== void 0 ? { sessionId: c.sessionId } : {}
+        ...c.sessionId !== void 0 ? { sessionId: c.sessionId } : {},
+        // ADR 0610 D1：签名 scopes 透给域路由，`isOperatorRequest` 据此认出部署级 operator-token。
+        ...c.scopes !== void 0 ? { scopes: c.scopes } : {}
       } : null;
     },
     /**
@@ -280071,9 +281276,10 @@ async function startServe(opts) {
         const provision = isolatedKnowledgeTurn ? { env: {}, wrapperPaths: [], requiredTools: [], requiredToolVersions: {}, connectorCreds: [], cleanup: async () => void 0 } : await buildActorProvision(actorService, actorId, chatDispatchScope(priorChatSession));
         const actorCtx = await buildActorContext(actorService, actorId).catch(() => null);
         const sessionModel = configuredModel(sessionModelOverride);
-        const chatResolvedModel = sessionModel ?? configuredModel(actorCtx?.config?.model);
+        const actorConfiguredModel = isolatedBackground ? configuredModel(actorCtx?.config?.model) : void 0;
+        const chatResolvedModel = sessionModel ?? actorConfiguredModel;
         const chatModel = chatResolvedModel ?? await registryStore.getRuntimeConfig(`runtime:${binding.nodeId}:${binding.runtimeKind}`).then((c) => configuredModel(c?.model)).catch(() => void 0);
-        const chatModelSource = sessionModel ? "session_override" : chatResolvedModel ? "actor_config" : chatModel ? "runtime_default" : null;
+        const chatModelSource = sessionModel ? "session_override" : actorConfiguredModel ? "actor_config" : chatModel ? "runtime_default" : null;
         const attachmentFiles = { ...preparedAttachments.files, ...restore ? { "SESSION_FILES.md": restore.index } : {} };
         const attachmentBinary = { ...preparedAttachments.binaryFiles };
         const attachmentPaths = [...preparedAttachments.paths];
@@ -280290,8 +281496,7 @@ async function startServe(opts) {
                 startedAt: endedAt
               }]);
               const usage = info.usage ?? null;
-              const effectiveModel = info.model ?? chatModel ?? null;
-              const modelSource = info.model ? "runtime" : chatModelSource;
+              const modelFields = chatExitModelFields(info.model, chatModel, chatModelSource);
               let nativeSessionMetadata;
               if (info.runtimeSessionId && info.runtimeSessionId !== runtimeSessionId) {
                 const run = await (await traceStoreFor(runCompanyId)).getRun(traceRunId).catch(() => null);
@@ -280306,8 +281511,7 @@ async function startServe(opts) {
                 ...!isHealthySessionExit(info) && info.reason !== "cancelled" ? { errorCode: info.reason ?? "error", errorMessage: formatExitError(info) } : {},
                 transcriptRef: info.transcriptRef ?? null,
                 usage,
-                effectiveModel,
-                modelSource,
+                ...modelFields,
                 ...nativeSessionMetadata ? { metadata: nativeSessionMetadata } : {}
               });
               if (usage) await settleRunUsage(await traceStoreFor(runCompanyId), traceRunId);
@@ -280420,7 +281624,11 @@ async function startServe(opts) {
       info.chatSessionId,
       `\u5B50\u4F1A\u8BDD\u8FD9\u4E00\u8F6E\u88AB\u6062\u590D\u5668\u6536\u53E3\u4E3A ${info.status}\uFF08${info.reason}\uFF09`,
       info.companyId,
-      { outcome: info.status === "succeeded" ? "succeeded" : "failed", ...info.turnId ? { turnId: info.turnId } : {} }
+      {
+        outcome: info.status === "succeeded" ? "succeeded" : "failed",
+        ...info.turnId ? { turnId: info.turnId } : {},
+        ...info.exitReason ? { exitReason: info.exitReason } : {}
+      }
     );
   };
   const handshakeThrottleOpts = {};
@@ -282883,6 +284091,11 @@ ${nodeFault}` : "");
     const zbCostThresholdMicros = opts.zeroOutputBreaker?.costThresholdMicros ?? (envInt("OASIS_ZERO_OUTPUT_BREAKER_COST_USD") ?? 0) * 1e6;
     if (zbEnabled && zbIntervalMs > 0 && (zbThreshold > 0 || zbCostThresholdMicros > 0)) {
       const zbActions = /* @__PURE__ */ new Set(["produce", "review"]);
+      const engineWorkIdOf = (metadata) => {
+        if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) return null;
+        const v2 = metadata["engineWorkId"];
+        return typeof v2 === "string" && v2.trim() ? v2 : null;
+      };
       const listRecentZeroOutputRuns = async (sinceIso) => {
         const items = await fanOutTrace.listRunsAcrossWithCompany(
           { status: "no-output", from: sinceIso, limit: 1e3 },
@@ -282896,7 +284109,10 @@ ${nodeFault}` : "");
           actorId: r.actorId,
           action: r.action,
           startedAt: r.startedAt,
-          costUsdMicros: r.usage?.costUsdMicros ?? null
+          costUsdMicros: r.usage?.costUsdMicros ?? null,
+          // ★ 轮次维度（Bug 0211）：同一轮里的协议续唤各是一条 run，只数 run 会让上报正文那个数
+          //   比人点开轨迹数到的段数大。**只影响正文措辞，不影响跳闸判据**（阈值仍按 run 数判）。
+          workId: engineWorkIdOf(r.metadata)
         }));
       };
       const latestClosingRemark = async (runId) => {
@@ -285433,7 +286649,7 @@ async function startNode(opts) {
 }
 // ../cli/src/exec.ts
-var os11 = __toESM(require("node:os"), 1);
+var os12 = __toESM(require("node:os"), 1);
 var UnsafeExecArgvError = class extends Error {
   code = "ERR_UNSAFE_EXEC_ARGV";
   constructor(message) {
@@ -285470,7 +286686,7 @@ function planExec(opts) {
 function computeExitCode(code2, signal) {
   if (code2 !== null) return code2;
   if (signal) {
-    const num4 = os11.constants.signals[signal];
+    const num4 = os12.constants.signals[signal];
     return 128 + (typeof num4 === "number" ? num4 : 1);
   }
   return 1;
@@ -285720,7 +286936,7 @@ var COMMAND_DECLS = {
   },
   "usage-ledger-backfill": {
     group: "\u57FA\u7840\u8BBE\u65BD",
-    usage: "oasis usage-ledger-backfill (--company <id> | --all) (--dry-run | --execute | --verify | --undo <manifestId>)",
+    usage: "oasis usage-ledger-backfill (--company <id> | --all) (--dry-run | --execute | --verify | --undo <manifestId>) [--claude-resume-before <ISO>]",
     description: "\u7528\u91CF\u8D26\u672C\u5386\u53F2\u56DE\u586B\uFF08\u4F7F\u7528\u4E0E\u7EDF\u8BA1\uFF09\uFF1A\u8865\u7EC8\u503C\u7528\u91CF\u70B9\u3001runtime_started_at\u3001chat \u4F1A\u8BDD/\u8F6E\u6B21\uFF1B\u5E42\u7B49\uFF0C\u6539\u52A8\u5199\u5BA1\u8BA1\u8868\uFF0C\u53EF\u6309 manifest \u64A4\u9500\u3002\u4EE5 serve \u7684\u73AF\u5883\u5728\u90E8\u7F72\u673A\u4E0A\u6267\u884C\u3002",
     flags: [
       { name: "company", desc: "\u53EA\u5904\u7406\u8FD9\u5BB6\u516C\u53F8\u7684\u8D26\u672C\uFF08\u4ECD\u5728 legacy \u7684\u516C\u53F8 = \u5171\u4EAB\u8D26\u672C + \u672C\u516C\u53F8 chat \u53CD\u67E5\uFF09" },
@@ -285728,10 +286944,12 @@ var COMMAND_DECLS = {
       { name: "dry-run", desc: "\u53EA\u62A5\u6BCF\u4E2A\u8D26\u672C\u5404\u6B65\u5F85\u6539\u6761\u6570\u548C\u6837\u4F8B run id\uFF0C\u4E00\u884C\u4E0D\u5199", boolean: true },
       { name: "execute", desc: "\u5199\u5165\uFF1B\u7ED3\u675F\u65F6\u6253\u5370 manifestId", boolean: true },
       { name: "verify", desc: "\u6838\u5BF9 I6\uFF08\u7EC8\u503C\u70B9 = agent_runs.usage\u3001\u68C0\u67E5\u70B9\u4E0D\u8D85\u7EC8\u503C\uFF09\u4E0E\u542F\u52A8\u8BC1\u636E\uFF1B\u6709\u8FDD\u4F8B\u9000\u51FA\u7801 1", boolean: true },
-      { name: "undo", desc: "\u6309\u5BA1\u8BA1\u8868\u628A\u67D0\u4E2A manifestId \u7684\u6539\u52A8\u6062\u590D\u539F\u503C" }
+      { name: "undo", desc: "\u6309\u5BA1\u8BA1\u8868\u628A\u67D0\u4E2A manifestId \u7684\u6539\u52A8\u6062\u590D\u539F\u503C" },
+      { name: "claude-resume-before", desc: "\u52A0\u8DD1\u7B2C 4 \u6B65\uFF1A\u5F00\u8DD1\u65E9\u4E8E\u8FD9\u4E2A\u65F6\u523B\u7684 claude-code run\uFF0C\u628A\u7EED\u8DD1\u5E26\u8FDB\u6765\u7684\u6574\u6761\u4F1A\u8BDD\u7EBF\u7D2F\u8BA1\u503C\u6263\u56DE\u6210\u672C\u8F6E\u51C0\u503C\uFF08\u53D6\u4FEE\u597D\u7684\u8282\u70B9\u5305\u5728\u5168\u90E8\u8282\u70B9\u88C5\u4E0A\u7684\u65F6\u523B\uFF09" }
     ],
     examples: [
       "oasis usage-ledger-backfill --all --dry-run",
+      "oasis usage-ledger-backfill --all --dry-run --claude-resume-before 2026-09-23T00:00:00Z",
       "oasis usage-ledger-backfill --all --execute",
       "oasis usage-ledger-backfill --all --verify"
     ]
@@ -288074,7 +289292,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.68" ? "2.2.68" : "dev";
+var CLI_VERSION = "2.2.70" ? "2.2.70" : "dev";
 function apiHeaders(token, company) {
   const headers = {
     authorization: `Bearer ${token}`,
@@ -288309,7 +289527,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const res = await fetch(`${httpBase2}/api/nodes/exchange`, {
         method: "POST",
         headers: { "content-type": "application/json" },
-        body: JSON.stringify({ enrollToken, nodeId, hostname: os12.hostname(), serverUrl, ...companyId ? { companyId } : {} })
+        body: JSON.stringify({ enrollToken, nodeId, hostname: os13.hostname(), serverUrl, ...companyId ? { companyId } : {} })
       });
       if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
       const body2 = await res.json();
@@ -288342,7 +289560,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
       const binPath = path37.join(prefix, "bin", "oasis_test");
       const svcArgs = `node --server-ws ${serverUrl} --dir ${dir}${nodeName ? ` --name ${nodeName}` : ""}`;
       if (process.platform === "linux") {
-        const svcFile = path37.join(os12.homedir(), ".config/systemd/user/oasis-node.service");
+        const svcFile = path37.join(os13.homedir(), ".config/systemd/user/oasis-node.service");
         fs42.mkdirSync(path37.dirname(svcFile), { recursive: true });
         if (spawnSync3("systemctl", ["--user", "is-active", "--quiet", "oasis-node"], {}).status === 0)
           spawnSync3("systemctl", ["--user", "stop", "oasis-node"], { stdio: "inherit" });
@@ -288355,7 +289573,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
           `ExecStart=${binPath} ${svcArgs}`,
           // Carry the install-time PATH so the detached daemon detects CLIs in user dirs
           // (~/.npm-global/bin, ~/.local/bin) — systemd --user otherwise gives a minimal PATH.
-          `Environment=PATH=${process.env["PATH"] ?? ""}:${path37.join(os12.homedir(), ".npm-global/bin")}:${path37.join(os12.homedir(), ".local/bin")}:/usr/local/bin`,
+          `Environment=PATH=${process.env["PATH"] ?? ""}:${path37.join(os13.homedir(), ".npm-global/bin")}:${path37.join(os13.homedir(), ".local/bin")}:/usr/local/bin`,
           "Restart=on-failure",
           "RestartSec=5",
           "StandardOutput=journal",
@@ -288367,23 +289585,23 @@ async function runCli(argv, println = console.log, progressln = console.error) {
         ].join("\n"));
         spawnSync3("systemctl", ["--user", "daemon-reload"], { stdio: "inherit" });
         spawnSync3("systemctl", ["--user", "enable", "--now", "oasis-node"], { stdio: "inherit" });
-        spawnSync3("loginctl", ["enable-linger", os12.userInfo().username], { stdio: "ignore" });
+        spawnSync3("loginctl", ["enable-linger", os13.userInfo().username], { stdio: "ignore" });
         println("\u2713 Oasis node service started (systemd --user oasis-node)");
         println("  Status : systemctl --user status oasis-node");
         println("  Logs   : journalctl --user -u oasis-node -f");
         println("  Stop   : systemctl --user stop oasis-node");
       } else if (process.platform === "darwin") {
-        const plist = path37.join(os12.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
+        const plist = path37.join(os13.homedir(), "Library/LaunchAgents/com.oasis.node.plist");
         fs42.mkdirSync(path37.dirname(plist), { recursive: true });
         spawnSync3("launchctl", ["unload", plist], { stdio: "ignore" });
         const argXml = [binPath, "node", "--server-ws", serverUrl, "--dir", dir, ...nodeName ? ["--name", nodeName] : []].map((a) => `<string>${a}</string>`).join("");
-        fs42.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os12.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os12.homedir()}/.oasis-node.err</string></dict></plist>`);
+        fs42.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>com.oasis.node</string><key>ProgramArguments</key><array>${argXml}</array><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>StandardOutPath</key><string>${os13.homedir()}/.oasis-node.log</string><key>StandardErrorPath</key><string>${os13.homedir()}/.oasis-node.err</string></dict></plist>`);
         spawnSync3("launchctl", ["load", plist], { stdio: "inherit" });
         println("\u2713 Oasis node service started (macOS LaunchAgent com.oasis.node)");
-        println(`  Logs : tail -f ${os12.homedir()}/.oasis-node.log`);
+        println(`  Logs : tail -f ${os13.homedir()}/.oasis-node.log`);
         println(`  Stop : launchctl unload ${plist}`);
       } else {
-        spawnSync3("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path37.join(os12.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
+        spawnSync3("sh", ["-c", `nohup ${binPath} ${svcArgs} > ${path37.join(os13.homedir(), ".oasis-node.log")} 2>&1 &`], { stdio: "inherit" });
         println(`\u2713 Oasis node started in background (nohup). Logs: ~/.oasis-node.log`);
         println("  Note: no automatic restart on reboot in this environment.");
       }
@@ -288492,8 +289710,8 @@ async function runCli(argv, println = console.log, progressln = console.error) {
   if (command2 === "serve" && positional[0] === "install") {
     const absDir = path37.resolve(dir);
     const name = `oasis-serve-${path37.basename(absDir)}`;
-    const unitDir = flags.get("unit-dir") ?? path37.join(os12.homedir(), ".config", "systemd", "user");
-    const bin = flags.get("bin") ?? path37.join(os12.homedir(), ".local", "bin", "oasis");
+    const unitDir = flags.get("unit-dir") ?? path37.join(os13.homedir(), ".config", "systemd", "user");
+    const bin = flags.get("bin") ?? path37.join(os13.homedir(), ".local", "bin", "oasis");
     const port = flags.get("port") ?? "7320";
     const extra = (flags.get("dispatch") === "true" ? ` --dispatch true` : "") + (flags.has("model") ? ` --model ${flags.get("model")}` : "");
     const unit = [
@@ -288982,7 +290200,7 @@ Trace: ${run.traceRunId}`);
       if (plan.inject.mode === "env") {
         childEnv[plan.inject.envName] = value2;
       } else {
-        tmpDir = await fs42.promises.mkdtemp(path37.join(os12.tmpdir(), "oasis-var-exec-"));
+        tmpDir = await fs42.promises.mkdtemp(path37.join(os13.tmpdir(), "oasis-var-exec-"));
         const keyfile = path37.join(tmpDir, "value");
         await fs42.promises.writeFile(keyfile, value2, { mode: 384 });
         childEnv[plan.inject.fileEnv] = keyfile;
@@ -289868,7 +291086,7 @@ ${res.warning}`);
         for (const a of st.artifacts) println(`  - ${a.path}\uFF08${a.kind ?? "?"}\uFF09status=${a.status ?? "?"}${a.mtime ? ` \xB7 ${new Date(a.mtime).toISOString()}` : ""}`);
         if (flags.get("pull") === "true") {
           const odPublic2 = (flags.get("od-public-url") ?? process.env["OASIS_OPEN_DESIGN_PUBLIC_URL"] ?? "https://design.open-friday.com").replace(/\/$/, "");
-          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os12.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
+          const { dir: dir3, entry: entry2 } = await harvestBoard(odBase2, fetch, odPublic2, os13.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
           println(`[design] \u5DF2\u62C9\u5230\u672C\u5730\uFF1A${dir3}\uFF08\u5165\u53E3 ${entry2}\uFF09`);
           println(`[design] \u8BFB\u5B8C\u6EE1\u610F\u5373\u4EA4\u7A3F\uFF1Aoasis propose ${artifactId2} --from-dir ${dir3} --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"`);
         } else {
@@ -291676,10 +292894,10 @@ function runtimeAssetSourceRoots(input) {
 // src/paths.ts
 var fs46 = __toESM(require("node:fs"));
-var os13 = __toESM(require("node:os"));
+var os14 = __toESM(require("node:os"));
 var path41 = __toESM(require("node:path"));
 var DEFAULT_INSTANCE = "default";
-var home = () => os13.homedir();
+var home = () => os14.homedir();
 var oasisDir = () => path41.join(home(), ".oasis");
 var versionsDir = () => path41.join(oasisDir(), "versions");
 var versionDir = (label2) => path41.join(versionsDir(), label2);
@@ -291880,7 +293098,7 @@ function shimScript() {
 }
 // src/index.ts
-var PKG_VERSION = true ? "2.2.68" : "dev";
+var PKG_VERSION = true ? "2.2.70" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -291986,7 +293204,7 @@ function installSoftware(label2) {
 function setupAutostart(name) {
   const inst = instancePaths(name);
   const cmd = `${process.execPath} "${inst.binFile}" --_daemon --instance ${name}`;
-  const home2 = os14.homedir();
+  const home2 = os15.homedir();
   const pnpmHome = process.env["PNPM_HOME"] || path43.join(home2, ".local", "share", "pnpm");
   const extraBins = [
     path43.join(home2, ".npm-global", "bin"),
@@ -291996,7 +293214,7 @@ function setupAutostart(name) {
   ];
   const daemonPath = sanitizeDaemonPath([process.env["PATH"] ?? "", ...extraBins].filter(Boolean).join(":"));
   if (process.platform === "linux") {
-    const unitDir = path43.join(os14.homedir(), ".config", "systemd", "user");
+    const unitDir = path43.join(os15.homedir(), ".config", "systemd", "user");
     fs48.mkdirSync(unitDir, { recursive: true });
     const unit = systemdUnitName(name);
     fs48.mkdirSync(path43.dirname(inst.logFile), { recursive: true });
@@ -292021,7 +293239,7 @@ function setupAutostart(name) {
     return false;
   } else if (process.platform === "darwin") {
     const label2 = launchdLabel(name);
-    const plist = path43.join(os14.homedir(), "Library", "LaunchAgents", `${label2}.plist`);
+    const plist = path43.join(os15.homedir(), "Library", "LaunchAgents", `${label2}.plist`);
     fs48.mkdirSync(path43.dirname(plist), { recursive: true });
     fs48.writeFileSync(plist, `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -292203,7 +293421,7 @@ async function startOneInstance(o) {
     const res = await fetch(`${httpBase(serverUrl)}/api/nodes/exchange`, {
       method: "POST",
       headers: { "content-type": "application/json" },
-      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os14.hostname(), serverUrl, ...companyId ? { companyId } : {} })
+      body: JSON.stringify({ enrollToken, nodeId: derivedNodeId, hostname: os15.hostname(), serverUrl, ...companyId ? { companyId } : {} })
     });
     if (!res.ok) throw new Error(`enroll token exchange failed: HTTP ${res.status}`);
     const body2 = await res.json();
@@ -292268,7 +293486,7 @@ function derivedNodeIdFor(name) {
   if (name === DEFAULT_INSTANCE) return resolveNodeId();
   const user = (() => {
     try {
-      return os14.userInfo().username;
+      return os15.userInfo().username;
     } catch {
       return process.env["USER"] ?? process.env["USERNAME"] ?? "unknown";
     }