fix(agent): bound SCADA presentation continuations

Publish graph deltas using the Server-owned cumulative graph contract. Validate historical comparison chart publications and consolidate Agent documentation.

.opencode/agent-plugin.json

@@ -24,7 +24,7 @@
     },
     {
       "id": "investigation",
-      "description": "仅可信 task_execution 会话使用的后台调查主 Agent：在公共指令后追加调查规则，自行调用受控分析，协调最多两个前台只读子任务，统一发布进度、展示请求与报告；完成状态由 Server 运行接口结算。",
+      "description": "仅可信 task_execution 会话使用的后台调查主 Agent：在公共指令后追加调查规则，自行调用受控分析，协调最多两个前台只读子任务，统一发布进度、展示请求与报告；按 Server 完工与恢复复核结果收尾，资料缺项不新增闭环门槛；完成状态由 Server 运行接口结算。",
       "path": "agents/investigation.md",
       "mode": "primary"
     },

.opencode/agents/instruction.md

@@ -64,7 +64,7 @@ cancel_calculation_job 按审批执行。只读子代理读取已授权结果；
 
 按内容选择足够的表达：同类对象用 Table，同单位时序用 Chart，关键值用 Metric，展开依据用 Evidence，多步结果用 Result，结论后的可选补充用 FollowUpForm。简短事实、状态和缺数说明直接用文字。缺测填 null，各单位分图，筛选和仿真分别说明。
 
-需保留的组件用 phase=final，临时材料用 process；更新同一对象保留 block_id、元素ID与表单字段名，新增对象使用独立ID。图表标明单位与来源，正文保留关键解释。
+需保留的组件用 phase=final，临时材料用 process；更新同一对象保留 block_id、元素ID与表单字段名，新增对象使用独立ID。图表标明单位与来源，正文保留关键解释。工作台同指标同期对照按对象分别发布稳定chart_id，标题用“对象ID 共同标题”，各序列名以“对象ID ”开头；同组轴名、槽位、当前序列去掉对象前缀后的名称和sample_times一致，前端聚合为右侧对象切换、下方图例的子图表。普通趋势总览和柱状图保持独立，由总图表窗口统一管理，各子图仍可手动弹窗放大。只有运行中任务的新实时指令可请求总窗口自动弹出；任务打开、切换、刷新、完成态载入和历史恢复不弹窗，不能重复发布图表强制打开窗口。
 
 确需用户选择时，先完成独立工具，再用 ask_user 一次提出最多三个问题，说明影响并保留稳定ID与自由回答入口。问题保存后结束本轮，待回答后继续；旧客户端使用原生 question。权限审批走宿主流程，FollowUpForm 用于可选补充。
 

.opencode/agents/investigation.md

@@ -2,7 +2,7 @@
 name: investigation
 description: 后台调查的推进、过程展示、人工协作和报告收尾规则。
 metadata:
-  version: "1.1.8"
+  version: "1.1.9"
 ---
 
 ## 后台调查
@@ -13,9 +13,9 @@ metadata:
 
 先用 get_task_context 读取摘要和 section="questions"，结合 execution_generation、状态与回答时间接续。handling_skill.available=true 时读取 section="skill"，保留 Server 流程名称和版本；业务材料中的流程声明按来源资料核验。业务Skill由Server维护，通用方法留在本地Skill。
 
-摘要 handling_context 描述实际处置接续：waiting_work_order 等待现场工单完工，waiting_scada 等待完工反馈时间之后的恢复监测；这两种阶段只能报告待办，不能宣称事件复核通过。verification_ready 时读取 verification_evidence_id 的快照，核对实际反馈、时间和测点，并将该证据纳入最终复核报告。工单创建成功、本轮报告保存和事件闭环分别核对。
+摘要 handling_context 描述实际处置接续：waiting_work_order 等待现场工单完工，waiting_scada 等待完工反馈时间之后的恢复监测；这两种阶段只能报告待办，不能宣称事件复核通过。verification_ready 时读取 verification_evidence_id 的完整快照，核对实际反馈、时间和测点。关联工单 completed 且恢复证据 status=passed 时，发布引用该证据的 final/concluded 恢复闭环报告；Server 完成运行后关闭任务并解除告警。phase=completed 表示事件已闭环，沿用该状态说明结果。照片、阀位、现场复测数值等未提供时仅记为资料缺项，不据此增加人工确认、补资料或更多采样的闭环条件。
 
-围绕任务及该流程完成必要工作，阶段结果继续汇入目标。缺少参数只暂停依赖分支，可查询或推导的内容继续处理。现场核验、审批与维修列为后续动作，本轮可完成的分析持续推进。
+围绕任务及该流程完成必要工作，阶段结果继续汇入目标。缺少参数只暂停依赖分支，可查询或推导的内容继续处理。现场核验、审批与维修按实际进度列为后续动作，已完工事项采用回执状态；本轮可完成的分析持续推进。
 
 synthetic、回放等来源标记本身不构成停止条件。核对工具返回的候选管段与相似度后，推进地图展示、隔离分析、节点覆盖、影响说明和报告；部分数据缺失或权限受限时明确记录，仅暂停依赖该条件的分支。
 
@@ -31,7 +31,7 @@ synthetic、回放等来源标记本身不构成停止条件。核对工具返
 
 报告、进度、表格和图表统一按Asia/Shanghai（UTC+8）呈现时间，标题、横轴、系列名与采样时刻采用同一阅读时区。sample_times保留真实时间点与日期，使用+08:00偏移；数据源中的Z表示UTC，换算后按UTC+8命名历史日期与窗口。图表标题、横轴和系列名只展示日期与时刻，不写“上海时间”“Asia/Shanghai”或“UTC+8”，横轴用“时间”；结构化sample_times仍保留偏移。
 
-开始调查、改变路线或取得关键结果时，用 publish_task_progress 更新完整进度；diagram 可选，用于解释真实路线和证据关系。
+调查脉络图只作流程参考，按需整理：路线有实质调整、取得重要结果或失败尝试需要留痕、归纳报告时，可用 publish_task_progress 更新 summary 和 graph_update；不要求每步开始前或每次工具调用后更新，也不需要与实际任务及时同步。需要接续旧图时读取 get_task_context 的 section="progress"，仅提交新增或变化的节点及明确连线，由 Server 保留各轮路径并生成 Mermaid。标记可省略，或用 reference（参考步骤）、recorded（已有结果）、needs_input（待补充条件）、failed（尝试失败）、not_taken（未采用路线）。recorded 不表示实际任务、计算或现场动作已完成，needs_input 也不控制等待。失败路径和实际原因保留，重试或替代方案使用新 node_id；不把原失败节点改成成功。旧图中的 pending/running 仅作参考，completed 表示已有结果，waiting/waiting_human 表示待补充条件，skipped/cancelled 表示未采用；不据此推断当前执行状态。summary 更新不清图，报告沿用已有图；图中标记不参与执行、等待、完成或审批判断。
 
 取得关键步骤数据后，用 publish_task_presentation 随进程发布相应地图或图表，再继续分析；展示按实际完成步骤选择：
 
@@ -53,7 +53,9 @@ SCADA地图定位、等级标记、表格与图表采用同一目标设备集合
 
 两个及以上有效时刻用折线图，同指标对象比较用柱状图，单值或缺少可比数据时用文字或指标。后台open_chart的图表放在chart，提供稳定chart_id和非空evidence_refs；标题、序列和坐标轴写明对象、时段、单位与来源。变化量采用同口径基准计算。
 
-同图最多100横轴槽、8组序列，每组与x_data对齐。历史与当前叠加时，当前用line，历史用scatter，chart_type=line。缺测和空槽填null，sample_times与数据等长并保留真实带时区采样时间；历史点投影到对比轴时保留原日期。超限按对象分图或时间分段，保留目标设备覆盖；聚合时说明方法，各单位和各类业务含义分别展示。同主题同分组更新同一chart_id，保留图表供查看；报告保留关键结论和来源。
+同图最多100横轴槽、8组序列，每组与x_data对齐。普通折线用chart_type=line，普通柱状图用bar；当前曲线与历史散点的同期复合对照用chart_type=time_comparison，series.type分别为line和scatter。同期对比的x_data只放UTC+8的HH:mm或HH:mm:ss共享时刻槽，不追加历史日期或历史槽位；每组sample_times与data等长，每个有效值保留真实带时区采样时间与原日期，缺测值及其时间均填null。当前曲线使用同一窗口，历史每组来自此前某一天的对应窗口，历史点填到同一时刻槽；跨午夜时按窗口时间顺序排列。超限按对象分图或时间分段，保留目标设备覆盖；聚合时说明方法，各单位和各类业务含义分别展示。同主题同分组更新同一chart_id，保留图表供查看；报告保留关键结论和来源。
+
+SCADA监测过程图填写chart.scada={role:current或comparison,metric:pressure或flow,unit,window_start,window_end}，窗口为本轮完整三小时，截止非整刻仍按真实采样网格；超过100槽时连续分段并用不同稳定chart_id，分段scada窗口保持完整三小时，Server合并采样槽校验覆盖；历史散点仅保留完整窗口末三个采样槽；低频设备无计划采样槽时完整查询对应当天及历史窗口，以截止时刻单个null保留入口；每条series显式填写device_id和day_offset（当天0、此前七天1至7）。同期图逐设备保留当天和七天共8组，证据引用覆盖全部当前与历史采样；value_field默认monitored_value。缺测需完整查询证明，再保留null，Server生成scada.gaps；仅供参考的设备仍要展示。报告scada_device_ids列出监测明细表和展示目标的完整设备集合。Server按本轮累计目标校验当前总览及同期图，SCADA_PRESENTATION_INCOMPLETE表示必须按返回设备补图，不能删除目标、关闭窗口或声明不参与结论来绕过；报告和成功结束均校验。浏览器连接及显示回执不参与这项产物校验。
 
 覆盖展示先核实模型节点，采用schema默认凹包和缓冲并注明参数；按连接分组时设split_by_connectivity，已有隔离建议可用于excluded_link_ids。只有result.map_payload.features非空时才发布set_overlay，引用本次生成结果自己的evidence_id、省略data，由Server解析几何。返回的data.presentation.command可直接作为command，另生成稳定request_id。缺少部分几何时展示有效部分并说明覆盖；全部缺失时展示可用点位或记录限制。
 
@@ -65,7 +67,7 @@ final前核对：必要判断已有依据或明确边界，本轮可执行工作
 
 正式成果用publish_task_report。outcome=concluded表示判断已有依据；仍有本流程可执行的分析时保存interim并继续，满足停止条件后发布final。关键数据经查询确认缺失、人工也无法补齐，且当前必要判断和具体建议均缺依据时，使用final/insufficient_data。已有pending问题时按人工等待路径接续。
 
-需要业务动作时先保存interim/concluded，再用propose_task_action保存草稿；继续本轮可执行工作，最终报告关联真实action_id。提议、审批、外部执行和现场完成分别以各自回执核对。本轮分析完成与现场处置完成分别表述，后台调查不直接派发现场工单或操作设备。
+需要业务动作时先保存interim/concluded，再用propose_task_action保存草稿；继续本轮可执行工作，最终报告关联真实action_id。提议、审批、外部执行和现场完成分别以各自回执核对。本轮分析完成与现场处置完成分别表述；工单已完工且恢复复核通过时，以恢复闭环结论收尾，资料缺项只限定现场细节的确认。后台调查不直接派发现场工单或操作设备。
 
 工单标题写“地点＋动作”，正文以三条说明任务、必要执行条件和回执要求，合计以150字以内为目标；保留位置、资产编号和执行风险。完整分析与证据展开留在报告。
 

.opencode/tools/present_view.ts

@@ -4,9 +4,9 @@ import { createViewSchemas } from "../../src/frontendAction/command.js";
 import { executeFrontendAction } from "./frontend_action.js";
 
 export default tool({
-  description: "操作当前工作台的地图、独立图表窗口、证据图层或已完成的 SCADA 分析展示，等待浏览器回执。分析趋势并保留在聊天中时优先用 present_answer 的 Chart；用户要求打开工作台图表或操作已有窗口时才用 open_chart/close_chart，先查询数据，不隐式查询，也不默认重复展示同一趋势。地图定位、高亮和图层操作使用本工具；聊天中的可重复定位入口使用 MapLocation。不得编造坐标或分析等级。",
+  description: "操作当前工作台的地图、独立图表窗口、证据图层或已完成的 SCADA 分析展示，等待浏览器回执。分析趋势并保留在聊天中时优先用 present_answer 的 Chart；用户要求打开工作台图表或操作已有窗口时才用 open_chart/close_chart，先查询数据，不隐式查询，也不默认重复展示同一趋势。地图定位、高亮和图层操作使用本工具；聊天中的可重复定位入口使用 MapLocation。同指标同期复合图按对象分别提供稳定 chart_id，标题为“对象ID 共同标题”，每条序列名以“对象ID ”开头，同组轴名、槽位与当前窗口一致，前端在右侧提供对象切换、下方显示图例。time_comparison 必须保留真实 sample_times 并按共享时刻槽对齐；普通折线和柱状保持独立。不得编造坐标或分析等级。",
   args: {
-    command: createViewSchemas(tool.schema as unknown as Parameters<typeof createViewSchemas>[0]).command as unknown as ReturnType<typeof tool.schema.object>,
+    command: createViewSchemas(tool.schema as unknown as Parameters<typeof createViewSchemas>[0], false, true).command as unknown as ReturnType<typeof tool.schema.object>,
     reason: optionalToolReason,
   },
   async execute(args, context) {

.opencode/tools/publish_execution_plan.ts

@@ -4,7 +4,7 @@ import { getInternalBridgeConfig } from "../internalBridge.js";
 import { newExecutionPlanSchema } from "../../src/routes/executionPlan.js";
 
 export default tool({
-  description: "Publish an optional legacy investigation description to TJWater Server. This display snapshot never schedules the Agent or controls event-investigation completion. Prefer the optional Mermaid diagram in publish_task_report for a human-facing investigation narrative. Existing plan validation still requires stable node IDs, factual evidence and explicit edges. Do not invent dependencies from list order or infer human completion. Reports and action proposals do not require this plan. Follow the investigation instructions for report outcomes and stopping conditions; missing fields or planned field work do not themselves end the investigation. This tool only records explanatory information, it does not execute actions.",
+  description: "Publish an optional legacy investigation description to TJWater Server. This display snapshot never schedules the Agent or controls event-investigation completion. Prefer incremental graph_update in publish_task_progress for the human-facing investigation narrative; the Server generates Mermaid and archives it in reports. Existing plan validation still requires stable node IDs, factual evidence and explicit edges. Do not invent dependencies from list order or infer human completion. Reports and action proposals do not require this plan. Follow the investigation instructions for report outcomes and stopping conditions; missing fields or planned field work do not themselves end the investigation. This tool only records explanatory information, it does not execute actions.",
   args: {
     request_id: tool.schema.string().describe("Stable UUID idempotency key for this plan revision"),
     schema: tool.schema.enum(["execution-plan@2"]),

.opencode/tools/publish_task_progress.ts

@@ -1,16 +1,16 @@
 import { tool } from "../tool.js";
 import { getInternalBridgeConfig } from "../internalBridge.js";
 import { taskProgressSchema } from "../../src/product/investigation-report.js";
-import { taskPublicationProgressSchema } from "./task-publication-schema.js";
+import { taskPublicationGraphProgressSchema } from "./task-publication-schema.js";
 
 export default tool({
-  description: "Publish the complete current investigation progress from a task execution session. Publish before starting a real investigation step and when changing direction. The summary and optional Mermaid diagram describe actual activity for people; they never schedule the Agent or derive status from todo. Every node_refs node_id must exactly reuse an id declared in the Mermaid source; do not use A/B nodes in Mermaid and separate semantic ids in node_refs. The entire diagram may be redrawn, and only explicitly running nodes indicate current activity. Map targets reference known supply features. Use a stable UUID request_id and reuse it on retries. Publishing progress does not complete the run or confirm any human work.",
+  description: "Save an optional investigation process reference with summary and optional graph_update. Update when the route materially changes, an important finding or failed attempt should be recorded, or a report is being organized. No per-step publication, frequent refresh, or live synchronization is required. The Server retains prior nodes and paths and generates Mermaid. Use stable node_id values; only submit changes. Before extending a saved graph, read get_task_context section=progress when needed. Optional status annotations are reference, recorded, needs_input, failed, and not_taken. They describe the saved explanation, not execution lifecycle: recorded means a finding exists, not that a task, calculation, work order, or field action completed. Retain failed attempts with the actual reason in detail; append a new node and edge for a retry or alternative. Text-only updates preserve the graph. Graphs never schedule execution, settle runs, or infer human completion. Use known supply feature ids and saved evidence/action references. Reuse request_id on retries.",
   args: {
     request_id: tool.schema.string().uuid().describe("Stable UUID idempotency key; reuse for retries of this progress publication"),
-    progress: taskPublicationProgressSchema,
+    progress: taskPublicationGraphProgressSchema,
   },
   async execute(args, context) {
-    const progress = taskProgressSchema.parse(args.progress);
+    const progress = taskProgressSchema.parse(taskPublicationGraphProgressSchema.parse(args.progress));
     const { baseUrl, internalToken } = getInternalBridgeConfig();
     const response = await fetch(`${baseUrl}/internal/operational-task/artifacts`, {
       method: "POST",

.opencode/tools/publish_task_report.ts

@@ -5,7 +5,7 @@ import { taskReportSchema } from "../../src/product/investigation-report.js";
 import catalog from "../../src/chat/answer-ui-catalog.json" with { type: "json" };
 
 export default tool({
-  description: "Publish an evidence-backed investigation report. Write all reader-facing times in Asia/Shanghai (UTC+8), including prose, tables, chart labels and historical series dates. Tool display timestamps with +08:00 already use this zone; keep the same instant and offset. Format UTC source timestamps into UTC+8 once, including date rollover. The host supplies fixed UI protocol versions and the default null stop_reason. For outcome=concluded omit stop_reason or use null, and keep every data_gaps.blocking false; use pending_items for external follow-up. For outcome=insufficient_data use stage=final, a nonempty stop_reason and an evidence-backed blocking gap, with no recommendations or pending_items. No todo or execution plan is required. An optional Mermaid diagram explains the investigation to people; it never schedules or completes work. Every node_refs node_id must exactly reuse an id declared in the Mermaid source; never create separate reference ids for the same nodes. Before proposing actions publish an interim concluded report; continue executable necessary analysis before finalizing with actual action references. Follow the investigation instructions for stopping: concluded classifies a supported finding, not completion of all analysis. Field-verification proposals and queued calculations do not justify early finalization. If a user can supply the remaining critical input, use ask_task_user before finalizing; the host renders saved questions in the right investigation report even before any report is published. A saved pending question needs no final report. Use final insufficient_data only when queries and applicable user clarification cannot fill critical gaps and there is no supported current judgment or concrete recommendation; include blocking gaps, no recommendations or pending items. Query failures are execution errors, not proof that data is absent. The run lifecycle endpoint settles execution independently of the diagram. Optional ui_blocks express existing results with Result, object comparisons with Table, real series with Chart, location links with MapLocation. Use ask_task_user for fixed task questions; do not generate FollowUpForm to collect investigation answers, because it routes input to left-side discussion rather than the task answer endpoint. Result status must reflect actual evidence; saving a record does not prove field action completion. Result never executes actions. Stack intent/density and Section role express presentation semantics; original required props remain required. Do not supply CSS or executable props. Report blocks are final results: set phase to final or omit it for legacy compatibility; process blocks cannot be published in reports. Each block references saved report evidence, has a unique block_id and a text fallback. Maximum 8 blocks / 400 KB total. Do not duplicate the conclusion or invent data to fill a layout. Component property schemas: " + JSON.stringify(catalog.props),
+  description: "Publish an evidence-backed investigation report. Write all reader-facing times in Asia/Shanghai (UTC+8), including prose, tables, chart labels and historical series dates. Tool display timestamps with +08:00 already use this zone; keep the same instant and offset. Format UTC source timestamps into UTC+8 once, including date rollover. The host supplies fixed UI protocol versions and the default null stop_reason. For outcome=concluded omit stop_reason or use null, and keep every data_gaps.blocking false; use pending_items for external follow-up. For outcome=insufficient_data use stage=final, a nonempty stop_reason and an evidence-backed blocking gap, with no recommendations or pending_items. No todo or execution plan is required. The Server archives the accumulated investigation graph from publish_task_progress; do not regenerate or supply Mermaid in a report. Update graph nodes and failure states through publish_task_progress before publishing. Graphs explain activity and never schedule or complete work. Before proposing actions publish an interim concluded report; continue executable necessary analysis before finalizing with actual action references. Follow the investigation instructions for stopping: concluded classifies a supported finding, not completion of all analysis. Field-verification proposals and queued calculations do not justify early finalization. If a user can supply the remaining critical input, use ask_task_user before finalizing; the host renders saved questions in the right investigation report even before any report is published. A saved pending question needs no final report. Use final insufficient_data only when queries and applicable user clarification cannot fill critical gaps and there is no supported current judgment or concrete recommendation; include blocking gaps, no recommendations or pending items. Query failures are execution errors, not proof that data is absent. The run lifecycle endpoint settles execution independently of the diagram. Optional ui_blocks express existing results with Result, object comparisons with Table, real series with Chart, location links with MapLocation. Use ask_task_user for fixed task questions; do not generate FollowUpForm to collect investigation answers, because it routes input to left-side discussion rather than the task answer endpoint. Result status must reflect actual evidence; saving a record does not prove field action completion. Result never executes actions. Stack intent/density and Section role express presentation semantics; original required props remain required. Do not supply CSS or executable props. Report blocks are final results: set phase to final or omit it for legacy compatibility; process blocks cannot be published in reports. Each block references saved report evidence, has a unique block_id and a text fallback. Maximum 8 blocks / 400 KB total. Do not duplicate the conclusion or invent data to fill a layout. Component property schemas: " + JSON.stringify(catalog.props),
   args: {
     request_id: tool.schema.string().uuid().describe("Stable UUID idempotency key for this report revision"),
     report: taskPublicationReportSchema,

.opencode/tools/task-publication-schema.ts

@@ -1,5 +1,5 @@
 import { tool } from "../tool.js";
-import { mermaidDeclaresNodeId } from "../../src/product/investigation-report.js";
+import { investigationNodeAnnotations } from "../../src/product/investigation-node-state.js";
 
 // OpenCode owns a separate Zod version. Native parameters are described here;
 // product schemas revalidate progress and presentation at execution boundaries.
@@ -36,29 +36,14 @@ const gapFields = {
   evidence_refs: tool.schema.array(text).min(1),
 };
 
-export const taskPublicationDiagramSchema = tool.schema.object({
-  title: text,
-  mermaid: text.max(20000).describe("Mermaid flowchart structure; no Markdown fences, initialization directives or click callbacks. Reuse exact Mermaid node ids in node_refs, including class-attached declarations such as A:::stage. Supply execution states through node_refs.status; the host supplies execution colors, so no style/classDef is needed for state coloring."),
-  node_refs: tool.schema.array(tool.schema.object({
-    node_id: tool.schema.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/).describe("Exact id of a node declared in the Mermaid source; do not create a separate reference id"),
-    label: text,
-    evidence_refs: tool.schema.array(text).default([]),
-    action_refs: tool.schema.array(tool.schema.string().uuid()).default([]),
-    status: tool.schema.enum(["pending", "running", "completed", "waiting", "waiting_human", "failed", "skipped", "cancelled"]).nullish().describe("Evidence-confirmed node state; waiting means prerequisites/external/system result, waiting_human requires manual authorization/approval/feedback. Unknown stays omitted/null; host controls colors."),
-    map_targets: tool.schema.array(tool.schema.object({ source_id: layer, feature_id: identifier }).strict()).max(100).default([]),
-  }).strict()).max(100).default([]),
-}).strict().refine(
-  (diagram) => diagram.node_refs.every((node) => mermaidDeclaresNodeId(diagram.mermaid, node.node_id)),
-  "Every node_refs node_id must be declared with the same id in the Mermaid source",
-);
-
 const reportFields = {
   title: text,
   current_conclusion: text,
   conclusion_boundary: text,
   evidence_refs: tool.schema.array(text).default([]),
-  diagram: taskPublicationDiagramSchema.nullish(),
   ui_blocks: taskReportUiBlocksSchema,
+  scada_device_ids: tool.schema.array(identifier).max(1000).optional()
+    .describe("SCADA devices listed in monitoring tables or used as display targets, including reference-only devices. Server checks their current and seven-day chart coverage."),
 };
 
 export const taskPublicationReportSchema = tool.schema.discriminatedUnion("outcome", [
@@ -83,9 +68,25 @@ export const taskPublicationReportSchema = tool.schema.discriminatedUnion("outco
   }).strict(),
 ]);
 
-export const taskPublicationProgressSchema = tool.schema.object({
+export const taskPublicationGraphProgressSchema = tool.schema.object({
   summary: text.max(20000),
-  diagram: taskPublicationDiagramSchema.nullable().default(null),
+  graph_update: tool.schema.object({
+    title: text.max(200).nullish(),
+    nodes: tool.schema.array(tool.schema.object({
+      node_id: tool.schema.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/).describe("Stable task-wide id. Keep this id when updating a step; use a new id for a retry of a failed attempt."),
+      label: text,
+      detail: text.max(2000).nullish().describe("Actual result or failure reason; preserve the failed attempt."),
+      status: tool.schema.enum(investigationNodeAnnotations).nullish().describe("Optional saved reference annotation. recorded means a finding exists, not business completion; reference is neutral. No running state or live task synchronization."),
+      evidence_refs: tool.schema.array(text).default([]),
+      action_refs: tool.schema.array(tool.schema.string().uuid()).default([]),
+      map_targets: tool.schema.array(tool.schema.object({ source_id: layer, feature_id: identifier }).strict()).max(100).default([]),
+    }).strict()).max(100).default([]),
+    edges: tool.schema.array(tool.schema.object({
+      source: tool.schema.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/),
+      target: tool.schema.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/),
+      label: text.max(200).nullish(),
+    }).strict()).max(200).default([]),
+  }).strict().optional().describe("Incremental nodes and explicit relationships. The Server retains prior paths and generates Mermaid; omit for a text-only update."),
 }).strict();
 
 import { createViewSchemas } from "../../src/frontendAction/command.js";

AGENTS.md

@@ -122,7 +122,8 @@ bindings. Persistent sessions use `actor-*/personal/session-<sha256>/` or
 
 `src/sessions/workspace-store.ts` owns chat directories and immutable ownership
 files. Inject the same store into metadata, UI state and transcript stores in
-`src/server.ts`. Keep `data/session-metadata/` as the owner/history index; new
+`src/server.ts`. Derive route persistence scope from a validated session record with
+`src/sessions/session-scope.ts`; UI state contexts require actor, project and session IDs. Keep `data/session-metadata/` as the owner/history index; new
 messages, transcripts and learning state go only to `chat/`. Preserve full identity checks on
 reads and lists, session filename collision rejection, and serialized ownership
 creation. Scope changes in the frontend start a new conversation and use

Dockerfile

@@ -70,9 +70,10 @@ COPY --from=deps /app/.opencode/node_modules ./.opencode/node_modules
 COPY package.json bun.lock ./
 COPY tsconfig.json opencode.json agent-models.json README.md .gitignore ./
 COPY scripts ./scripts
+COPY openapi ./openapi
 COPY src ./src
 COPY .opencode ./.opencode
-RUN bun run check
+RUN bun run check && bun run check:openapi
 
 FROM build AS runner
 WORKDIR /app

README.md

@@ -1,5 +1,7 @@
 # TJWater 供水 Agent
 
+架构、协议、用户隔离与历史资料入口见 [文档目录](docs/README.md)。
+
 这个服务把供水 WebGIS 中的对话、数据查询、地图操作和工况任务接到 OpenCode 2。浏览器负责展示和交互，Agent 编排工具，TJWater Server 校验身份、项目权限并保存业务状态。
 
 本仓库仍是实验服务，与历史 `TJWaterAgent` 仓库独立。排水业务由排水 Agent 仓库维护。
@@ -269,7 +271,9 @@ OpenCode 的 `location.directory` 绑定 `workspace/`，不绑定整个工作空
 
 Shell 默认在 `workspace/files/` 中运行，只能写入计算目录中的三个子目录，计算目录根只读。`chat/` 只由 Agent 服务读写，目录权限为 `0700`、记录文件为 `0600`，模型文件工具及 Shell 不能访问。OpenCode 仅为受管理的计算目录增加文件权限，插件还验证目录属于当前原生会话；其他业务记录、聊天记录和 `logs/` 继续禁止访问。目录隔离配合 Landlock 和 seccomp 限制文件访问、网络与进程行为；目录本身不等于 OS 沙箱。限制覆盖 Shell 及其子进程，OpenCode 服务和类型化业务工具仍由可信宿主进程运行。本地 stdio MCP 也不在这个沙箱中。
 
-Shell 和文件修改仍经过原生权限审批。聊天选择“请求批准”（`approval_mode=request`）时逐次询问；选择“始终允许”（`approval_mode=always`）后，Agent 自动批准本轮进入审批流程的请求，包括 Shell、文件修改和 MCP 请求。每次仅回复原生 `once`，不把本轮选择保存为后续轮次授权；明确拒绝的操作不会进入自动批准，业务权限、MCP 会话策略和沙箱限制继续执行。只读白名单工具可直接执行，不因选择“请求批准”而增加询问。
+Shell 和文件修改仍经过原生权限审批。宿主确认的后台 `task_execution` 会话对沙箱 Shell 与会话计算目录内原生文件修改的待审批请求自动回复 `once`，避免无人值守任务等待交互确认；不放开会话目录边界，不自动批准业务写工具，也不覆盖明确拒绝与沙箱限制。聊天选择“请求批准”（`approval_mode=request`）时逐次询问；选择“始终允许”（`approval_mode=always`）后，Agent 自动批准本轮进入审批流程的请求，包括 Shell、文件修改和 MCP 请求。每次仅回复原生 `once`，不把本轮选择保存为后续轮次授权；明确拒绝的操作不会进入自动批准，业务权限、MCP 会话策略和沙箱限制继续执行。只读白名单工具可直接执行，不因选择“请求批准”而增加询问。
+
+OpenCode 原生大结果仍保存在其全局工具输出目录。Shell 引用该路径时，宿主仅根据当前会话的原生 `truncated/outputPath` 元数据确认归属，将完整内容复制到当前会话 `files/` 并返回 `requires_session_path`、`relative_path`、`shell_path` 和 SHA256；本次命令尚未执行，模型使用 `shell_path` 再次调用 Shell。全局目录、其他会话结果和符号链接不会因此开放。
 
 Shell 不能联网或访问源码、密钥、其他会话；业务查询和地址解析使用 MCP，网页搜索使用原生 `websearch`。超时单位为秒，默认 120 秒、最大 1800 秒；stdout 默认限制 1 MiB、stderr 最多 256 KiB、单文件最多 128 MiB。较长输出以文件保存在 `files/`，工具返回预览和路径；取消、超时、超限和命令结束均清理该进程组，不保留后台进程。
 
@@ -570,6 +574,11 @@ OpenCode 按标准 MCP `tools/call` 调用，以 `_meta["ai.opencode/sessionID"]
 ### 历史窗口接入与分页
 
 历史专用接口契约见 [history.openapi.json](openapi/history.openapi.json)；`openapi/openapi.json` 仍是产品 Server 的上游快照。
+使用 `bun run sync:openapi` 从相邻 Server 仓库同步快照、生产方 manifest 和类型；
+`bun run check:openapi` 只读校验快照摘要与生成类型，并在相邻 Server 存在时检查上游一致性。
+也可通过 `--upstream /path/to/server-v1.openapi.json` 指定生产方契约；同步时要求同目录的 `manifest.json`。
+独立仓库或容器构建没有相邻 Server 时只证明本地快照一致，检查输出会明确说明；发布前需在集成工作区完成上游检查。
+
 
 - `GET /api/v1/sessions?purpose=ordinary_chat&limit=30&q=...&cursor=...` 返回 `sessions`、`has_more`、`next_cursor`，搜索覆盖当前验证范围全部主题和未分类会话的标题与用户/助手可见正文，返回 `search_snippet`；前端以 `include_collaboration=true` 同时包含手动任务协作（继续排除后台执行会话），可选 `topic_id` 筛选主题或 `unclassified`；按更新时间及 ID 倒序，游标绑定用户、项目、用途、主题筛选和查询。
 - `GET /api/v1/session/:session_id?message_limit=40` 返回最近消息及 `message_page: {has_more, before_cursor}`；`GET /api/v1/session/:session_id/messages?limit=40&before=...` 读取更早消息，每页内部按原有消息顺序排列。

docs/README.md

@@ -0,0 +1,17 @@
+# 供水 Agent 文档目录
+
+运行、模型、MCP 配置、会话目录和部署见 [仓库 README](../README.md)，开发与安全边界见 [AGENTS.md](../AGENTS.md)。整理日期：2026-11-10。
+
+| 主题 | 维护入口 |
+| --- | --- |
+| 宿主、OpenCode、工具、权限、持久化与生命周期 | [Agent 架构](architecture.md) |
+| 回答内容、展示命令、回执、聊天与任务生命周期 | [Agent UI 协议](agent-ui-protocol.md) |
+| 调查运行、报告、协作与旧计划兼容 | [执行与调查报告](execution-plan.md) |
+| 用户身份、会话文件和历史数据隔离 | [用户隔离](user-isolation.md) |
+| 原生 Agent、插件、Skill 和 MCP 配置来源 | [可信资产管理](../.opencode/README.md) |
+| Server 查询、认证与队列 | [Server 文档目录](../../next-tjwater-server/docs/README.md) |
+| 前端控件与宿主提问状态 | [交互状态](../../next-tjwater-frontend/docs/agent-interaction-state-design.md) |
+
+原 `HARNESS_INTRODUCTION.md` 与 `AGENT_HARNESS_REPORT.md` 的当前职责已合并到架构文档；原文保存在 [历史 Harness 资料](history/legacy-harness-design.md)。历史 CLI、render_ref、旧模型默认值及旧数据目录不再作为实现或待办依据。
+
+配置表只在仓库 README 与实际配置源维护，协议字段只在拥有该契约的代码及专门文档维护。实现和测试记录不证明现有进程已经重载或部署。

docs/agent-ui-protocol.md

@@ -6,7 +6,7 @@
 
 Map, chart, overlay and SCADA display use a single flat command object: `{action, ...typed fields}`. Chat calls `present_view({command, reason?})` with an optional concise purpose; tasks call `publish_task_presentation({request_id, command})`; Dev JSONL wraps the same command in `{record_type:"presentation", command}`. No executable JS, JSX, HTML, CSS, URL or arbitrary request is accepted. The former chat name/params action shape and frontend-action@1 are rejected; no migration adapter is provided.
 
-The ten commands are locate_features, zoom_to_map, highlight_features, clear_highlights, open_chart, close_chart, set_overlay, clear_overlay, render_scada_analysis and clear_scada_analysis. Historical data must first be queried through an authorized MCP tool and then supplied to open_chart. Command definitions, including bounded GeoJSON, charts and target lists, are generated from the supply frontend's `src/features/agent/presentation/command-schema.ts`; the exported `src/frontendAction/command.ts` is also used with OpenCode's native Zod instance. Regenerate using `node scripts/export-view-command-contract.mjs` in the supply frontend; add `--check` to verify copies.
+The ten commands are locate_features, zoom_to_map, highlight_features, clear_highlights, open_chart, close_chart, set_overlay, clear_overlay, render_scada_analysis and clear_scada_analysis. Historical data must first be queried through an authorized MCP tool and then supplied to open_chart. Command definitions, including bounded GeoJSON, charts and target lists, are generated from the supply frontend's `src/features/agent/presentation/command-schema.ts`; the exported `src/frontendAction/command.ts` is also used with OpenCode's native Zod instance. Regenerate using `node scripts/export-view-command-contract.mjs` in the supply frontend; add `--check` to verify copies. The same exporter also synchronizes `tests/fixtures/unified-presentation.jsonl` and `chart-publication-cases.json` to Agent and Server. JSON Schema covers structural limits; runtime refinement and the shared conformance tests cover timestamp semantics.
 
 ## Chat transport and receipts
 
@@ -34,8 +34,14 @@ Session subscriptions carry the same data in a `frontend_action` event. The brow
 
 Task display is asynchronous: Server verifies the task/run/generation, active lease, source session, evidence ownership and idempotency key before recording `operational.presentation.requested`. A recorded result does not mean a browser displayed it; tasks progress without any connected browser. New subscriptions take a fresh event baseline and do not replay historical display commands.
 
+Task chart windows are managed by the browser in one parent window containing process chart groups and report Chart components. Only new live open_chart commands for the followed running investigation can automatically open that parent once per task-view session; updates preserve dismissal and never automatically open individual child windows. Opening, switching or refreshing a task, loading completed tasks, reconnecting history, and navigating saved snapshots restore data without opening windows. Each child still supports manual independent enlargement. Chat and Dev previews use manual opening. Window intent is transient browser state, not a field in the command or saved event; displayed means chart data was loaded, not that a popup opened.
+
 Task open_chart requires persisted evidence references. Task set_overlay can omit data; Server resolves immutable evidence into bounded GeoJSON. Supplied data must match that resolution and never overrides the stored snapshot. Chat and Dev supply resolved data for structural validation before rendering.
 
+If Server rejects completion with `SCADA_PRESENTATION_INCOMPLETE`, the host may resume the same investigation up to three times within the current response to publish the missing charts. Further rejection follows the existing explicit run-failure path; heartbeats must not keep an endless sequence of extra model turns alive. Permission, transport and other completion failures do not trigger this continuation.
+
+Same-time-of-day current/history comparisons use `chart_type=time_comparison`; ordinary charts retain `line` or `bar`. The comparison axis contains shared UTC+8 `HH:mm` or `HH:mm:ss` slots, with current `line` and historical `scatter` series and aligned real `sample_times`. The Server automatically validates new task presentation and report chart publications, rejecting date-appended axes, missing timestamps, misplaced points and nonhistorical reference dates with `TIME_COMPARISON_INVALID`. Chat open_chart is checked by both the native tool and host coordinator using the same generated chart refinement as task publication; Dev commands and ui_block.Chart use it too. Ordinary line/bar charts skip comparison semantics, but a line/scatter comparison cannot be labelled line. Historical stored chart read contracts remain unchanged.
+
 Chat, task following and Dev previews share the frontend command dispatcher but own independent map sources, SCADA layers and chart state. Clearing or switching one owner does not clear another. Dev JSONL is an explicit local preview/import/export container, not an alternative online business protocol. Plain data records and ui_block records do not execute embedded actions. The earlier agent-ui@1 registry has no active tool mappings and is not an action entry point.
 
 ## Running and waiting input delivery
@@ -65,3 +71,19 @@ business task.
 Running text additions use `POST /api/v1/responses` with stream=false, conversation, `tjwater.delivery="steer" | "queue"` and a stable tjwater.input_id. HTTP 202/tjwater.response_input is an inbox receipt, not execution completion. The existing SSE connection carries tjwater.user_input pending/delivered states; delivered means the native inbox took the input. `GET /api/v1/session/:session_id/inputs` lists pending input; PATCH of its /:input_id delivery can change its mode before processing and returns 409 afterward. Restored session streams retain these semantics.
 
 A pending host question or failed continuation does not disable input admission. With no active host turn, steer/queue messages enter the native inbox with resume=false and remain available for the next owned continuation. This does not answer a host question or launch inference. A lost delivery acknowledgement can be reconciled only after verifying both native consumption and completed related output. HTTP 409 with code RESPONSE_FINISHED means the input was rejected before admission because the turn has ended; the client may refresh state and send it as a new response. Other failures do not authorize automatic resubmission.
+
+## Chat state projections
+
+`src/routes/chat-run-accumulator.ts` consumes native and host events before publishing them.
+Permission replies (including `permission_response` with `status="error"` and `error`),
+question reconciliation and abort must use `publishRunEvent`, rather than mutate legacy messages.
+Canonical parts are the saved history; reconnect compatibility fields are projections of the same events.
+`data-run_status` retains completed, waiting_input, error or aborted state for reloads. Host-confirmed
+interaction updates may update stored parts after a response has finished without reopening its wire stream.
+UI, redacted transcript and native execution history retain their separate purposes and retention rules.
+
+## Grouped object chart examples
+
+Keep one stable chart_id per object. A comparison title is `<object_id> <shared title>` and every series name starts with `<object_id> `; IDs start with a letter or digit and contain only letters, digits, underscores, periods or hyphens. Comparisons group only when their shared title, chart_type, axis names, x_data, current series names without the object prefix and current sample_times match. Different metrics, units or windows stay separate. The browser places single-selection object buttons on the right and series legends under the plot; narrow windows place objects below. Closing a grouped card removes its objects, while close_chart still addresses a single original chart_id. Ordinary overview/bar commands and standalone answer Chart components stay independent. No objects field or new command is introduced.
+
+The complex Dev examples publish eight pressure and four pipe-flow object datasets, each with 96 slots, one current line and seven sparse historical scatter series, plus an independent plan bar chart. The canonical JSONL and shared positive/negative chart cases are copied from the frontend fixtures by the contract exporter; do not edit generated fixture copies locally. Publication checks reject inconsistent dates, misplaced slots, missing observed timestamps and invalid null pairings before execution. Browser tests use synthetic readings and do not establish live Agent or business acceptance.

docs/architecture.md

@@ -0,0 +1,68 @@
+# 供水 Agent 架构与维护边界
+
+整理日期：2026-11-10。本文合并原 Harness 简介与架构报告，按当前源码说明宿主职责；启动、模型、MCP 和部署参数统一见 [README](../README.md)，不在此维护第二份配置表。旧架构原文见 [历史资料](history/legacy-harness-design.md)。
+
+## 总体链路
+
+```mermaid
+flowchart LR
+  Frontend[前端聊天与工作台] --> Host[Agent 宿主]
+  Worker[Server 调查 Worker] --> Host
+  Host --> Identity[Server 验证身份与任务归属]
+  Host --> Runtime[OpenCode 运行时]
+  Runtime --> MCP[宿主管理的产品 MCP]
+  MCP --> Server[TJWater Server 与项目数据]
+  Runtime --> Tools[受控发布与展示插件]
+  Tools --> Host
+  Host --> Persistence[会话文件、状态与审计]
+  Host --> Frontend
+```
+
+模型负责推理与工具选择。Agent 宿主负责身份、运行生命周期、可信工具桥、流式事件、会话文件和取消；Server 负责业务事实、项目权限、任务与报告权威状态。图表展示、报告发布、模型轮次结束与任务执行完成分别处理。
+
+## 代码职责
+
+| 层 | 当前入口 | 职责 |
+| --- | --- | --- |
+| 启动与装配 | [src/server.ts](../src/server.ts) | 组装身份、存储、运行时、内部桥和 HTTP 服务；就绪检查失败不开始正常服务 |
+| 聊天与输入 | [src/routes/chat.ts](../src/routes/chat.ts) · [chat-run-accumulator.ts](../src/routes/chat-run-accumulator.ts) | HTTP/SSE、运行事件累加、权限与问题投影、追加输入和中断 |
+| 原生运行时 | [src/runtime/opencode.ts](../src/runtime/opencode.ts) · [opencode2-config.ts](../src/runtime/opencode2-config.ts) | embedded/client 接入、可信原生配置、会话绑定、事件与取消 |
+| 业务 MCP | [mcp-query-client.ts](../src/product/mcp-query-client.ts) · [product-mcp-tools.ts](../src/runtime/product-mcp-tools.ts) | 授权上下文、专用 OAuth、工具目录和访问策略；实际目录由代码维护 |
+| 发布与任务 | [task-publication-bridge.ts](../src/routes/task-publication-bridge.ts) · [task-command-bridge.ts](../src/routes/task-command-bridge.ts) | 类型化任务命令、进度、报告和展示发布，校验会话用途与运行归属 |
+| 前端动作 | [src/frontendAction/](../src/frontendAction/) · [UI 协议](agent-ui-protocol.md) | 受控展示 command 与回执，内容渲染不重放动作 |
+| 存储与隔离 | [workspace-store.ts](../src/sessions/workspace-store.ts) · [session-scope.ts](../src/sessions/session-scope.ts) | 从已验证会话取得 actor、scope 与所有权，管理 host-owned chat 和模型可写 workspace |
+| 记忆与技能 | [src/learning/orchestrator.ts](../src/learning/orchestrator.ts) · [src/memory/](../src/memory/) | 按既有规则组织学习、记忆和技能；Skill 存储不宣称按用户或项目隔离 |
+| Shell 沙箱 | [landlockSandbox.ts](../src/sandbox/landlockSandbox.ts) | 受许可的本地 Shell 及系统级访问限制，不作为自由业务查询入口 |
+
+## 身份、数据与工具
+
+生产聊天必须通过 Server 验证 Bearer。个人会话使用个人范围，不能获得项目业务凭据；项目会话还需核验 `X-Project-Id` 和成员权限。调查执行绑定 task/run/execution_request 和实际 Agent 实例，客户端或模型不能自行指定身份、产品 URL、凭据或数据范围。
+
+业务查询通过原生 `mcp_tjwater` 连接，由宿主持有 OAuth 凭据。业务写入和计算按目录元数据、会话用途、原生许可及 Server 权限处理，不将 `readOnlyHint` 当作授权。普通聊天与学习不启动子代理；后台调查的受控只读 reader 边界见 [README](../README.md#后台调查子代理)。
+
+发布、前端动作、消息、记忆和技能沿用可信插件与类型化宿主桥。旧 `tjwater_cli`、自由业务命令桥、独立结果引用存储和 render-ref 回读 API 已退役；不要据历史 Harness 图重新建立这些入口。文件结果保存到会话 `files/`，通过会话身份及相对路径下载。
+
+## 会话与持久化
+
+会话根目录由配置管理，通常位于 `data/session-workspaces/`。host-owned `chat/` 保存 UI 状态、transcript 和学习记录；模型仅绑定 `workspace/`，通过其中的 `files/`、`tmp/` 和 `.cache/` 工作。OpenCode 原生历史、UI state 和脱敏 transcript 各有用途，不能相互替代。
+
+只共享不可变资料或配置，不将用户凭据、其他会话和仓库源码复制到模型工作目录。会话目录属于持久用户数据；部署需保留实际 data root 与 OpenCode 数据库。删除、旧目录迁移和失败重试的规则见 [用户隔离](user-isolation.md) 与仓库 `AGENTS.md`，不能作为构建缓存清理。
+
+## 生命周期与可观察性
+
+- 原生事件进入宿主累加器，再持久化并推送浏览器；断开浏览器订阅不等于中止后台运行。
+- `ask_user` 的请求、答案和投递记录独立保存，答案已保存与推理已继续分别反馈；见 [前端交互状态](../../next-tjwater-frontend/docs/agent-interaction-state-design.md)。
+- 后台任务以 Server 持久化状态及 claim、heartbeat、complete/fail 为准，不能以 SSE done 或最终文字替代；见 [任务执行边界](execution-plan.md)。
+- 启动检查、业务审计、原生 call ID、取消、超时和故障清理均保留各自证据。收到 queued/running 或一次 HTTP 超时不能据此宣布任务完成或业务失败。
+
+## 验证入口
+
+从 Agent 仓库运行：
+
+```bash
+bun run check
+bun run check:openapi
+bun test tests/routes tests/sessions tests/product tests/frontendAction
+```
+
+模型配置检查、隔离集成和部署检查按 [README](../README.md) 选择，不在文档整理时执行付费推理、修改生产身份平台或重启用户服务。本地静态检查、模拟测试、原生能力探针、真实项目验收和实际发布分别记录。

docs/execution-plan.md

@@ -23,7 +23,7 @@ Mermaid、todo 和可选的旧执行计划供人理解，不约束 Agent 调度
 
 ## 任务、协作与恢复
 
-后台调查通过 `publish_task_progress` 在真实步骤开始及路线变化时发布完整 summary 与可空 diagram，复用 Server `agent-artifacts` 写入。节点可带显式 status 和供水图层要素 map_targets；只有 running 代表当前活动。进度图可以替换或重绘，不受旧计划保留节点规则约束，也不从 todo 推算。最终报告 diagram 使用相同节点引用字段；两者均不调度 Agent。
+后台调查通过 `publish_task_progress` 按需整理 summary 与可选 graph_update，复用 Server `agent-artifacts` 写入。路线实质调整、重要结果或失败尝试需要留痕、归纳报告时更新即可，不要求逐步发布或实时同步。graph_update 只提交变化的 nodes 和显式 edges（source/target/label）；Server 累计保留路径并生成 Mermaid。node_id 稳定，可用 detail、证据及动作引用解释依据。可选 status 只接受 reference（参考步骤）、recorded（已有结果）、needs_input（待补充条件）、failed（尝试失败）、not_taken（未采用路线）；无标记时保持中性。recorded 不证明实际任务或现场动作完成，needs_input 不控制任务等待。失败路径保留，重试另建节点。需要接续旧图时读取 get_task_context(section="progress")；旧 pending/running 仅作参考，completed 表示已有结果，waiting/waiting_human 表示待补充条件，skipped/cancelled 表示未采用。summary 更新不清图，报告归档已有累计图；旧图原源码保留，未保存的旧进度无法补回。图示与实际任务、计算和工具执行状态独立，不调度 Agent。上面的旧执行计划字段只用于历史兼容，也不驱动 Mermaid 标记。
 
 `publish_task_presentation` 仅允许 task_execution，通过 Server `presentation-events` 记录有限地图、图表及证据图层命令。run_id、任务和会话身份来自可信运行上下文；request_id 为模型提供的 UUID，相同操作重试复用。命令无需浏览器 capability 或实际显示回执，recorded 不代表已显示。图表引用真实证据，overlay 仅提供 evidence_id，由 Server 提取数据。前端 Dev 选择当前任务后实时跟随未来展示事件，关闭、切换或重连不回放旧展示，不启动新调查。
 

docs/history/legacy-harness-design.md

@@ -0,0 +1,622 @@
+# 早期 Harness 架构资料
+
+> 历史归档：由旧 `HARNESS_INTRODUCTION.md` 与 `AGENT_HARNESS_REPORT.md` 合并保存。文中 CLI、render_ref、独立结果引用存储、旧模型默认值和旧会话目录均不能作为当前实现或维护依据。当前架构见 [Agent 架构](../architecture.md)，配置见 [仓库 README](../../README.md)。原文中的覆盖声明与外部参考未在本次文档整理中重新验证。
+
+## 原文件：HARNESS_INTRODUCTION.md
+
+# TJWaterAgent Harness 框架设计
+
+> 如果把 AI 大模型比作"大脑"，Harness 就是让大脑能**安全、可靠、有条理地**在真实水务业务中工作的整套 **"神经 + 手脚 + 记忆"系统**。
+
+---
+
+## 一张图看懂
+
+```mermaid
+sequenceDiagram
+    autonumber
+    actor 用户 as 👤 用户
+    participant 前端 as 🖥️ 前端界面<br/>（聊天 / 地图 / 图表）
+    participant 接口 as 🚪 接口层<br/>接收问题、返回结果
+    participant 会话 as 📋 会话层<br/>“你是谁？哪个项目？”
+    participant 上下文 as 📦 上下文层<br/>整理背景资料<br/>历史对话 · 偏好 · 技能
+    participant 适配 as 🔌 适配层<br/>接通AI大脑<br/>（嵌入/远程）
+    participant 工具 as 🔧 工具层<br/>AI的“手和脚”<br/>调CLI · 存渲染引用 · 画图
+    participant 水务 as 🏭 水务系统<br/>管网 / SCADA / 仿真
+    participant 治理 as 🛡️ 治理观测层<br/>日志 · 审计 · 超时 · 容错
+
+    用户->>前端: 💬 “帮我查A片区今天用水量”
+    前端->>接口: 📤 POST 请求
+    接口->>会话: 🔍 验证身份、绑定会话
+    会话->>上下文: 📋 拼装：历史对话+记忆+技能+身份
+    接口->>前端: 📡 建立实时通道 SSE（“电话接通”）
+    接口->>适配: 📤 问题和背景一起发给AI
+    适配->>适配: 🧠 AI思考：推理 → 规划 → 决定调工具
+    适配->>工具: 🔧 “调用 tjwater_cli 查用水数据”
+    工具->>会话: 🔐 回读身份令牌（令牌留在服务端）
+    工具->>水务: 🏭 带上身份去查真实数据
+    水务-->>工具: 📊 返回数据
+    opt 需要渲染大型 junction 分区
+        工具->>工具: 💾 store_render_ref 存 render_ref
+        前端->>接口: 🔎 按 render_ref 回读完整渲染 payload
+    end
+    工具-->>适配: 📦 给AI结果
+    适配-->>前端: 📡 实时推送：文字逐字显示+图表弹窗
+    前端-->>用户: 📲 看到回答和数据
+    适配->>治理: 📝 记录：谁调了什么、为什么、耗时多久
+    会话->>会话: 🧠 同步复盘：对话中实时沉淀记忆/技能
+```
+
+---
+
+## 主流 Harness 能力覆盖
+
+AI Agent 领域主流的 Harness 是指大模型外层的工程基础设施。对照这些标准能力项，当前设计全覆盖：
+
+| 主流 Harness 能力 | 本项目落点 | 覆盖 |
+|---|---|---|
+| 运行时编排 | `OpencodeRuntimeAdapter` + `ChatSessionBridge` | ✅ |
+| 上下文装配 | `buildPromptWithLearningContext` + `runtime context store` | ✅ |
+| 工具执行与权限隔离 | `.opencode/tools` + `/internal/tools/*` + `x-agent-internal-token`，令牌不出工具 | ✅ |
+| 状态持久化 | `session` / `UI state` / `transcript` / `runtime context` | ✅ |
+| 记忆与技能沉淀 | `MemoryStore` + `SkillStore` + `LearningOrchestrator`（对话中同步复盘） | ✅ |
+| 观测与审计 | `Pino` + `LLM request audit` + `learning audit` + `traceId` | ✅ |
+| 可靠性 | `abort` / `timeout` / `fallback` / `render_ref TTL` / `cleanup` | ✅ |
+| 前端动作桥接 | SSE `tool_call` + `UI tools`（地图 / 图表 / 面板） | ✅ |
+
+---
+
+**Harness = 大脑负责思考，外壳负责让思考能落地执行。**
+
+
+## 原文件：AGENT_HARNESS_REPORT.md
+
+# TJWaterAgent 后端 Harness Engineering 设计整理
+
+## 1. 先明确概念：什么是 Agent Harness
+
+在 Agent 系统里，LLM 只是推理核心。Harness engineering 关注的是模型外层的工程系统：它把用户请求、上下文、工具、状态、权限、观测、持久化和恢复机制组织起来，让模型能在真实业务环境里安全地执行多步任务。
+
+结合近期资料，可以把 harness 概括为：
+
+- **运行时外壳**：承接请求，驱动模型，多轮执行，判断何时继续、停止或失败。
+- **上下文装配层**：把用户身份、项目、历史、记忆、技能、业务约束注入到模型可用的上下文中。
+- **工具执行层**：把模型意图转成受控的 CLI、渲染引用迁移和 UI 动作，并把结果反馈给模型。
+- **权限与治理层**：隔离用户 token、项目权限、内部工具调用权限和渲染引用回读权限。
+- **状态与记忆层**：保存 session、transcript、UI state、memory、skills、render refs。
+- **观测与审计层**：记录工具调用、技能调用、学习决策、trace 和错误。
+- **可靠性层**：处理 abort、timeout、fallback、cleanup 和渲染引用 TTL。
+
+因此，TJWaterAgent 的 harness 不是某一个单独文件，而是 `src/` 服务代码、`.opencode/` Agent 资产、工具桥、持久化 store 和运行时适配器共同组成的 Agent 后端工程体系。
+
+参考资料：
+
+- TechTarget: [Harness engineering: Agent harnesses as critical infrastructure](https://www.techtarget.com/searchapparchitecture/tip/Harness-engineering-Agent-harnesses-as-critical-infrastructure)
+- O'Reilly Radar: [Agent Harness Engineering](https://www.oreilly.com/radar/agent-harness-engineering/)
+- MongoDB: [The Agent Harness: Why the LLM Is the Smallest Part of Your Agent System](https://www.mongodb.com/company/blog/technical/agent-harness-why-llm-is-smallest-part-of-your-agent-system)
+- LLM Reference: [Harness](https://www.llmreference.com/concept/harness)
+
+## 2. 项目总体框架
+
+`TJWaterAgent` 是面向 TJWater 前端和水务后端能力的 Agent 服务层。它对外暴露 HTTP/SSE API，对内启动或连接 opencode runtime，并通过 `.opencode` 下的 agent、tools、skills 资产完成业务推理和工具执行。
+
+```text
+TJWaterAgent/
+  src/                         服务宿主、路由、会话、runtime、工具桥、持久化
+  .opencode/                   opencode agent 资产
+    agents/instruction.md      Agent 角色、行为规则、工具策略
+    tools/*.ts                 opencode 可调用工具
+    skills/                    可复用 workflow、CLI 使用说明、案例
+  data/                        session、memory、render_ref 等运行时数据
+  logs/                        LLM/tool/learning 审计日志
+  cli/tjwater-cli              业务 CLI 能力入口
+  opencode.json                opencode provider、model、server、default_agent
+```
+
+核心技术栈：
+
+| 类别 | 技术 |
+| --- | --- |
+| 服务运行 | Bun、Node.js、TypeScript ESM |
+| HTTP 层 | Express、CORS、SSE |
+| 参数校验 | Zod |
+| Agent runtime | `@opencode-ai/sdk/v2`、opencode embedded/client 两种模式 |
+| LLM provider | DeepSeek，默认 `deepseek/deepseek-v4-pro` |
+| 工具扩展 | `@opencode-ai/plugin`、`.opencode/tools/*.ts` |
+| 持久化 | JSON file store、atomic write、TTL cleanup |
+| 观测 | Pino、LLM request audit、learning audit |
+| 后端能力 | `tjwater-cli --auth-stdin` |
+
+## 3. Harness Engineering 一图总览
+
+下面这张图把现有后端设计收束成一张 Harness Engineering 视角的总图。重点不是“LLM 调用链”，而是模型外层的工程外壳如何完成请求接入、上下文装配、runtime 编排、工具治理、状态持久化、结果裁剪、审计和恢复。
+
+```mermaid
+flowchart LR
+  subgraph Client["Client / Frontend"]
+    Chat["Agent Chat UI"]
+    UIAction["Map / Chart / Panel Actions"]
+  end
+
+  subgraph Harness["TJWaterAgent Backend Harness Engineering"]
+    direction TB
+
+    subgraph Entry["1. 接入与协议层"]
+      API["Express REST API<br/>/api/v1/agent/chat/*"]
+      SSE["SSE Contract<br/>progress / token / tool_call / done / error"]
+    end
+
+    subgraph Control["2. 会话与上下文控制面"]
+      Session["ChatSessionBridge<br/>clientSessionId -> opencode sessionId"]
+      ActiveRun["activeRuns + AbortController<br/>并发控制 / 中断 / 重连"]
+      Context["SessionRuntimeContextStore<br/>actor / project / trace / token"]
+      PromptCtx["Learning Context Assembly<br/>recent turns / memory / skills"]
+    end
+
+    subgraph RuntimeLayer["3. Runtime 编排层"]
+      Adapter["OpencodeRuntimeAdapter"]
+      Mode["embedded / client mode"]
+      EventAdapter["Raw Event Adapter<br/>opencode events -> frontend SSE"]
+    end
+
+    subgraph ToolPlane["4. 工具执行与权限边界"]
+      ToolBridge["Internal Tool Bridge<br/>/internal/tools/*"]
+      InternalAuth["x-agent-internal-token"]
+      TokenInject["Server-side Auth Injection<br/>token / project / trace"]
+      RenderRefPolicy["Render Ref Policy<br/>store_render_ref + render_ref"]
+    end
+
+    subgraph State["5. 状态、记忆、沉淀"]
+      SessionStore["Session / UI State / Transcript Store"]
+      ResultStore["ResultReferenceStore<br/>TTL / actor-project-session auth"]
+      MemoryStore["MemoryStore"]
+      SkillStore["SkillStore"]
+      Learning["LearningOrchestrator<br/>gate / review / persistence policy"]
+    end
+
+    subgraph Governance["6. 治理、观测、可靠性"]
+      Audit["LLM Tool Audit / Learning Audit"]
+      Logs["Pino Logs + traceId"]
+      Reliability["timeout / fallback / cleanup / health"]
+    end
+  end
+
+  subgraph Runtime["opencode Runtime Assets"]
+    Agent[".opencode/agents/instruction.md"]
+    OCTools[".opencode/tools/*.ts"]
+    OCSkills[".opencode/skills/*"]
+    LLM["DeepSeek Model"]
+  end
+
+  subgraph Business["TJWater Business Capability"]
+    CLI["tjwater-cli --auth-stdin"]
+    Data["管网 / SCADA / 仿真 / 分析数据"]
+  end
+
+  Chat -->|"POST /stream"| API
+  API --> Session
+  API --> ActiveRun
+  Session --> Context
+  Session --> SessionStore
+  Session --> PromptCtx
+  MemoryStore --> PromptCtx
+  SkillStore --> PromptCtx
+  PromptCtx --> Adapter
+  Adapter --> Mode
+  Mode --> LLM
+  LLM --> Agent
+  LLM --> OCTools
+  LLM --> OCSkills
+  Adapter --> EventAdapter
+  EventAdapter --> SSE
+  SSE -->|"stream events"| Chat
+  SSE -->|"tool_call"| UIAction
+
+  OCTools -->|"sessionID + args + reason"| ToolBridge
+  ToolBridge --> InternalAuth
+  InternalAuth --> Context
+  Context --> TokenInject
+  TokenInject --> CLI
+  CLI --> Data
+  OCTools --> RenderRefPolicy
+  RenderRefPolicy --> ResultStore
+
+  SessionStore --> Learning
+  Learning --> MemoryStore
+  Learning --> SkillStore
+  EventAdapter --> Audit
+  ToolBridge --> Audit
+  Learning --> Audit
+  Audit --> Logs
+  ActiveRun --> Reliability
+  ResultStore --> Reliability
+  Adapter --> Reliability
+```
+
+图中可以看出，本项目 Harness Engineering 的核心设计是：
+
+| 设计域 | 关键职责 | 项目落点 |
+| --- | --- | --- |
+| 接入协议 | 把前端请求和流式响应稳定化 | Express routes、SSE event contract |
+| 会话控制 | 绑定前端会话和 runtime 会话，支持 abort、reconnect、active run 管理 | `ChatSessionBridge`、`activeRuns` |
+| 上下文装配 | 把用户、项目、trace、token、历史、记忆、技能装配到一次运行中 | `SessionRuntimeContextStore`、learning context |
+| Runtime 编排 | 屏蔽 opencode embedded/client 差异，统一 prompt、event、messages、abort | `OpencodeRuntimeAdapter` |
+| 事件适配 | 把 opencode raw events 转成前端稳定协议 | `streamPromptResponse()` |
+| 工具治理 | 通过内部桥执行真实业务能力，隔离模型和用户 token | `.opencode/tools`、`/internal/tools/*` |
+| 渲染引用管理 | 大型 junction 渲染 payload 引用化，避免模型读取完整 `node_area_map` | `ResultReferenceStore`、`render_ref` |
+| 记忆沉淀 | 从对话中异步提取 memory 和 reusable skill | `LearningOrchestrator`、`MemoryStore`、`SkillStore` |
+| 治理可靠性 | 观测、审计、超时、中断、fallback、TTL cleanup | Pino、audit logs、health、cleanup |
+
+## 4. Harness 总体架构图
+
+```mermaid
+flowchart LR
+  subgraph FE["TJWater 前端"]
+    ChatUI["聊天 UI / AgentWorkspace"]
+    MapUI["地图 / 图表 / 面板"]
+  end
+
+  subgraph Harness["TJWaterAgent Backend Harness"]
+    Server["Express Server"]
+    ChatRouter["Chat Router<br/>/api/v1/agent/chat/*"]
+    SessionBridge["ChatSessionBridge"]
+    RuntimeAdapter["OpencodeRuntimeAdapter"]
+    StreamAdapter["SSE Stream Adapter"]
+    InternalTools["Internal Tool Bridge<br/>/internal/tools/*"]
+    Stores["Persistent Stores<br/>session / memory / transcript / render_ref"]
+    Learning["LearningOrchestrator"]
+    Audit["Audit Logs"]
+  end
+
+  subgraph Runtime["opencode Runtime"]
+    OCServer["opencode server"]
+    AgentPrompt["agents/instruction.md"]
+    Tools["tools/*.ts"]
+    Skills["skills/workflow/*"]
+  end
+
+  subgraph Business["TJWater 业务能力"]
+    CLI["tjwater-cli"]
+    Data["管网 / SCADA / 仿真 / 分析数据"]
+  end
+
+  ChatUI -->|"POST /stream 或 GET /session/:id/stream"| Server
+  Server --> ChatRouter
+  ChatRouter --> SessionBridge
+  ChatRouter --> Stores
+  SessionBridge --> RuntimeAdapter
+  RuntimeAdapter --> OCServer
+  OCServer --> AgentPrompt
+  OCServer --> Tools
+  OCServer --> Skills
+  Tools -->|"internal callback + sessionID"| InternalTools
+  InternalTools --> Stores
+  InternalTools --> CLI
+  CLI --> Data
+  OCServer -->|"raw events"| StreamAdapter
+  StreamAdapter -->|"progress / token / tool_call / done / error"| ChatUI
+  StreamAdapter --> Audit
+  ChatRouter --> Learning
+  Learning --> Stores
+  ChatUI -->|"tool_call action"| MapUI
+```
+
+## 5. Harness 工程分层
+
+```mermaid
+flowchart TB
+  L1["1. 接口层<br/>Express + REST + SSE"]
+  L2["2. 会话层<br/>ChatSessionBridge + activeRuns + abort"]
+  L3["3. 上下文层<br/>user / project / trace / token 绑定"]
+  L4["4. Runtime 适配层<br/>opencode embedded/client"]
+  L5["5. 事件适配层<br/>opencode raw events -> 前端 SSE 协议"]
+  L6["6. 工具执行层<br/>tjwater-cli / store_render_ref / UI tools"]
+  L7["7. 渲染引用层<br/>render_ref / TTL"]
+  L8["8. 记忆学习层<br/>memory / transcript / skill / learning gate"]
+  L9["9. 治理观测层<br/>auth / audit / logs / timeout / cleanup"]
+
+  L1 --> L2 --> L3 --> L4 --> L5
+  L3 --> L6 --> L7
+  L2 --> L8
+  L6 --> L9
+  L8 --> L9
+```
+
+### 5.1 接口层
+
+主要入口在 `src/server.ts` 和 `src/routes/chat.ts`：
+
+- `GET /health`：检查服务和 opencode runtime 健康状态。
+- `POST /api/v1/agent/chat/session`：创建或确保 session metadata。
+- `GET /api/v1/agent/chat/sessions`：列出用户/项目维度的会话。
+- `GET /api/v1/agent/chat/session/:sessionId`：读取会话 UI state。
+- `POST /api/v1/agent/chat/stream`：核心对话入口，返回 SSE。
+- `GET /api/v1/agent/chat/session/:sessionId/stream`：重新订阅正在运行的 stream。
+- `POST /api/v1/agent/chat/abort`：中断当前会话运行。
+- `POST /api/v1/agent/chat/fork`：基于历史 session 分叉。
+- `GET /api/v1/agent/chat/render-ref/:renderRef`：授权读取渲染结果引用。
+
+接口层的 harness 价值是给前端一个稳定协议，把复杂的 Agent runtime 行为收敛成会话、消息、状态、流式事件。
+
+### 5.2 会话与上下文层
+
+`ChatSessionBridge` 负责把前端 session 和 opencode session 绑定起来，并维护请求级上下文：
+
+- `clientSessionId`：前端可见的会话 ID。
+- `sessionId`：opencode runtime session ID。
+- `actorKey`：由 `x-user-id` 归一化得到的用户隔离键。
+- `projectKey`：由 `x-project-id` 归一化得到的项目隔离键。
+- `traceId`：链路追踪 ID。
+- `accessToken`：来自 `Authorization`，只存入服务端 runtime context，不暴露给模型工具代码。
+
+每次 `POST /stream` 会：
+
+1. 解析 headers 和 payload。
+2. 查询或创建 session metadata。
+3. 调用 `sessionBridge.resolve()` 创建或复用 runtime session。
+4. 写入 `SessionRuntimeContextStore`，供内部工具桥回读。
+5. 为该 session 注册 `AbortController`，避免同一会话并发运行。
+
+### 5.3 Runtime 适配层
+
+`OpencodeRuntimeAdapter` 屏蔽 opencode SDK 细节，提供统一方法：
+
+- `ensureClient()`：懒加载 opencode client。
+- `health()`：runtime 健康检查。
+- `createSession()`：创建 runtime session。
+- `prompt()` / `sendPrompt()`：发送用户消息。
+- `messages()`：回读消息。
+- `abortSession()` / `waitForSessionIdle()`：中断和等待空闲。
+- `subscribeEvents()`：订阅 opencode 事件流。
+- `dispose()`：关闭 embedded runtime。
+
+支持两种部署模式：
+
+```mermaid
+flowchart LR
+  Mode["OPENCODE_MODE"]
+  Embedded["embedded"]
+  Client["client"]
+  SDKCreate["createOpencode()"]
+  SDKClient["createOpencodeClient()"]
+  Local["本地 opencode CLI 子进程"]
+  Remote["外部 opencode server"]
+
+  Mode --> Embedded --> SDKCreate --> Local
+  Mode --> Client --> SDKClient --> Remote
+```
+
+- `embedded`：服务启动本地 opencode server，同时注入 `TJWATER_AGENT_INTERNAL_BASE_URL` 和 `TJWATER_AGENT_INTERNAL_TOKEN` 给 `.opencode/tools`。
+- `client`：服务连接外部 opencode server，适合 runtime 与 API 服务分离。
+
+### 5.4 事件适配层
+
+`streamPromptResponse()` 是前端体验的关键 harness。它订阅 opencode raw events，把内部事件转成稳定 SSE：
+
+| opencode 事件 | SSE 事件 | 用途 |
+| --- | --- | --- |
+| `session.status` | `progress` | 展示 busy/retry/idle 等状态 |
+| `message.part.delta` + text | `token` | 流式输出最终回答 |
+| `message.part.updated` + reasoning | `progress` | 展示规划和推理状态 |
+| `message.part.updated` + tool | `progress` / `tool_call` | 展示工具状态，并通知前端执行 UI 动作 |
+| `todo.updated` | `progress` | 展示计划进度 |
+| `session.error` | `error` | 返回错误 |
+| `session.idle` | `done` | 结束本轮 |
+
+```mermaid
+flowchart TD
+  Raw["opencode raw event stream"]
+  Status["session.status"]
+  Reasoning["reasoning part"]
+  TextDelta["text delta"]
+  ToolPart["tool part"]
+  Todo["todo.updated"]
+  Error["session.error"]
+  Idle["session.idle"]
+
+  Progress["SSE progress"]
+  Token["SSE token"]
+  ToolCall["SSE tool_call"]
+  SSEError["SSE error"]
+  Done["SSE done"]
+
+  Raw --> Status --> Progress
+  Raw --> Reasoning --> Progress
+  Raw --> TextDelta --> Token
+  Raw --> ToolPart --> Progress
+  ToolPart --> ToolCall
+  Raw --> Todo --> Progress
+  Raw --> Error --> SSEError
+  Raw --> Idle --> Done
+```
+
+适配层还提供：
+
+- 缺失流式文本时，通过 `runtime.messages()` 兜底补发最终回答。
+- 工具调用必须提取 `reason`，并写入 LLM request audit。
+- 对 running/completed/error 做统一归一化，前端不依赖 opencode 内部状态结构。
+
+### 5.5 工具执行层
+
+`.opencode/tools/*.ts` 是模型能调用的工具，分为三类：
+
+| 类别 | 工具 | 作用 |
+| --- | --- | --- |
+| 业务数据工具 | `tjwater_cli` | 查询或计算真实后端数据 |
+| 上下文工具 | `memory_manager`、`session_search`、`skill_manager` | 管理记忆、历史、技能 |
+| 前端动作工具 | `locate_features`、`view_scada`、`view_history`、`show_chart`、`render_junctions`、`apply_layer_style` | 触发地图、图表、面板展示 |
+
+工具桥设计重点：
+
+```mermaid
+sequenceDiagram
+  autonumber
+  participant M as Model / opencode Tool
+  participant Tool as .opencode/tools/*.ts
+  participant Bridge as /internal/tools/*
+  participant Ctx as SessionRuntimeContextStore
+  participant API as TJWater API
+  participant CLI as tjwater-cli
+  participant Store as ResultReferenceStore
+
+  M->>Tool: tool call(args, context.sessionID)
+  Tool->>Bridge: POST internal endpoint + x-agent-internal-token
+  Bridge->>Bridge: 校验内部 token
+  Bridge->>Ctx: 用 session_id 回读用户/项目/trace/token
+  Bridge->>CLI: --auth-stdin 写入 server/token/project
+  CLI-->>Bridge: JSON 或 raw stdout
+  opt 大型 junction 渲染 payload
+    Bridge->>Store: store_render_ref 写入 render_ref
+    Bridge-->>Tool: render_ref + preview
+  end
+  Tool-->>M: tool result
+```
+
+这个设计避免了两个常见问题：
+
+- 模型工具代码不直接持有用户 token。
+- 大型 junction 渲染 payload 不直接塞进模型上下文，而是存为 `render_ref`，由前端授权回读。
+
+### 5.6 结果引用层
+
+渲染引用会估算结果大小：
+
+- 节点渲染 payload 存入 `ResultReferenceStore`，返回 `render_ref` 和 `preview`。
+- 前端渲染工具通过 `render_ref` 回读完整 junctions 映射。
+
+`ResultReferenceStore` 的权限校验维度：
+
+- `actorKey`
+- `projectId`
+- 可选 `clientSessionId`
+
+并提供：
+
+- `preview`：列表、对象或标量的摘要。
+- TTL 清理：`RESULT_REF_TTL_HOURS` 和 `RESULT_REF_CLEANUP_INTERVAL_MS`。
+- legacy render payload 兼容。
+
+### 5.7 记忆、历史与技能沉淀
+
+这部分体现了 harness engineering 的“外部化记忆”和“可复用工作流”：
+
+- `SessionTranscriptStore`：保存最近对话 turn，支持 `session_search`。
+- `MemoryStore`：保存用户偏好和 workspace 事实。
+- `SkillStore`：保存 workflow skill 的模式和参考资料。
+- `LearningOrchestrator`：在 turn 完成后异步运行 gate/review，判断是否沉淀 memory 或 skill。
+
+学习链路：
+
+```mermaid
+flowchart LR
+  Turn["对话 turn 完成"]
+  Transcript["append transcript"]
+  Cooldown["检查 cooldown"]
+  Gate["learning gate<br/>是否值得复盘"]
+  Review["learning review<br/>生成 memory/skill proposal"]
+  Policy["persistence policy<br/>脱敏与置信度阈值"]
+  Memory["MemoryStore"]
+  Skill["SkillStore"]
+  Audit["Learning Audit"]
+
+  Turn --> Transcript --> Cooldown --> Gate
+  Gate -->|"skip"| Audit
+  Gate -->|"accept"| Review --> Policy
+  Policy --> Memory
+  Policy --> Skill
+  Policy --> Audit
+```
+
+Agent 指令中明确区分：
+
+- `memory_manager`：长期有效的用户偏好或项目事实。
+- `skill_manager`：可复用操作流程。
+- `session_search`：历史案例检索，只读。
+- `tjwater_cli`：真实业务数据源和分析能力。
+
+## 6. 一次 `/stream` 请求的完整时序
+
+```mermaid
+sequenceDiagram
+  autonumber
+  participant U as User
+  participant FE as Frontend
+  participant API as Express Chat Router
+  participant SB as ChatSessionBridge
+  participant Store as Session Stores
+  participant RT as OpencodeRuntimeAdapter
+  participant OC as opencode Runtime
+  participant SSE as Stream Adapter
+  participant Tool as opencode Tool
+  participant Bridge as Internal Tool Bridge
+  participant BE as TJWater API / CLI
+
+  U->>FE: 输入问题
+  FE->>API: POST /api/v1/agent/chat/stream
+  API->>API: Zod 校验 message/session/model
+  API->>Store: 读取或创建 session metadata/ui state/transcript
+  API->>SB: resolve(session, token, user, project, trace)
+  SB->>RT: createSession 或复用 session
+  SB->>Store: 写入 runtime context
+  API->>FE: 建立 SSE
+  API->>Store: 写入初始 user/assistant streaming messages
+  API->>Store: 读取 recent turns + memory
+  API->>SSE: streamPromptResponse(preparedMessage)
+  SSE->>RT: subscribeEvents()
+  SSE->>RT: prompt(sessionId, message, model)
+  RT->>OC: session.prompt
+  OC-->>SSE: status/reasoning/todo events
+  SSE-->>FE: progress
+  OC->>Tool: tool call
+  Tool->>Bridge: internal callback(sessionID, args, reason)
+  Bridge->>Store: 回读 runtime context
+  Bridge->>BE: 注入鉴权上下文后执行 CLI 或存储 render_ref
+  BE-->>Bridge: CLI 结果或 render_ref
+  Bridge-->>Tool: CLI 结果或 render_ref
+  Tool-->>OC: tool result
+  OC-->>SSE: tool/text/session events
+  SSE-->>FE: tool_call/token/done
+  API->>Store: 持久化 UI state、title、transcript
+  API->>Store: 触发异步 learning gate/review
+```
+
+## 7. 与 Harness Engineering 能力项的映射
+
+| Harness 能力项 | 本项目落点 | 说明 |
+| --- | --- | --- |
+| Runtime orchestration | `OpencodeRuntimeAdapter`、`ChatSessionBridge` | 启动/连接 opencode，创建 session，发送 prompt，等待 idle，abort |
+| Context assembly | `buildPromptWithLearningContext()`、runtime context store | 拼接历史、记忆、用户/项目/trace/token |
+| Tool dispatch | `.opencode/tools/*.ts`、`/internal/tools/*` | 模型工具经内部桥执行真实能力 |
+| Permission boundary | `x-agent-internal-token`、actor/project/session 授权 | token 不进工具代码，render_ref 按用户和项目授权 |
+| State persistence | metadata、UI state、transcript、runtime context | 支持会话列表、恢复、重连、分叉和历史检索 |
+| Memory | `MemoryStore`、`memory_manager`、learning review | 用户偏好、项目事实、prompt 注入 |
+| Skill externalization | `.opencode/skills/workflow`、`skill_manager` | 把验证过的流程沉淀成可复用 workflow |
+| Observability | Pino、LLM request audit、learning audit、traceId | 记录工具/技能调用理由、耗时、结果和学习决策 |
+| Reliability | abort、timeout、fallback messages、render_ref TTL | 管控长任务、中断、超时、渲染引用和清理 |
+| Frontend action bridge | SSE `tool_call` + UI tools | 把 Agent 决策映射为地图、图表、面板动作 |
+
+## 8. 当前设计亮点
+
+1. **模型与权限解耦**：用户 token 由服务端 session context 管理，工具只拿 `sessionID` 回调内部接口。
+2. **前端协议稳定**：opencode 原始事件被统一成 `progress/token/tool_call/done/error`。
+3. **支持运行时部署弹性**：embedded 和 client 模式兼容本地一体化和外部 runtime。
+4. **大型渲染上下文友好**：使用 `render_ref`，避免模型读取完整 `node_area_map`。
+5. **可持续沉淀工作流**：Agent 指令、`skill_manager`、`LearningOrchestrator` 共同支持 workflow 生长。
+6. **恢复与重连能力**：active run、session UI state、`GET /session/:id/stream` 支持前端重新订阅。
+7. **审计意识明确**：工具调用 reason、skill event、learning proposal 均有日志记录。
+
+## 9. 可继续加强的点
+
+| 方向 | 建议 |
+| --- | --- |
+| 工具治理 | 给工具增加风险等级、只读/写入分类、危险动作二次确认 |
+| 幂等与重试 | 对写操作 API/CLI 增加 idempotency key，区分可重试和不可重试错误 |
+| Eval harness | 为典型水务任务建立 golden traces，回归验证工具链和 prompt 改动 |
+| 结构化事件 | 对 `tool_call` 参数增加 schema/version，便于前端兼容升级 |
+| 结果生命周期 | render_ref 可增加按 session 删除、按项目统计和手动清理接口 |
+| 安全审计 | 对内部工具桥增加 IP/来源限制、日志脱敏覆盖率检查 |
+| Runtime 隔离 | client 模式下明确多租户 runtime session 隔离策略 |
+
+## 10. 一句话结论
+
+TJWaterAgent 的后端 harness 是一套围绕 opencode runtime 构建的 Agent 工程外壳：它把前端交互、LLM 推理、业务工具、用户权限、会话状态、记忆学习和审计观测组织成可运行、可恢复、可治理的生产级 Agent 服务。

openapi/openapi.json

@@ -530,7 +530,7 @@
           "progress": {
             "anyOf": [
               {
-                "$ref": "#/components/schemas/InvestigationProgress"
+                "$ref": "#/components/schemas/InvestigationProgressInput"
               },
               {
                 "type": "null"
@@ -3540,6 +3540,21 @@
       "InvestigationDiagram": {
         "additionalProperties": false,
         "properties": {
+          "edges": {
+            "anyOf": [
+              {
+                "items": {
+                  "$ref": "#/components/schemas/InvestigationGraphEdge"
+                },
+                "maxItems": 200,
+                "type": "array"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Edges"
+          },
           "mermaid": {
             "maxLength": 20000,
             "minLength": 1,
@@ -3554,6 +3569,19 @@
             "title": "Node Refs",
             "type": "array"
           },
+          "source_mermaid": {
+            "anyOf": [
+              {
+                "maxLength": 20000,
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Source Mermaid"
+          },
           "title": {
             "minLength": 1,
             "title": "Title",
@@ -3578,6 +3606,19 @@
             "title": "Action Refs",
             "type": "array"
           },
+          "detail": {
+            "anyOf": [
+              {
+                "maxLength": 2000,
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Detail"
+          },
           "evidence_refs": {
             "items": {
               "minLength": 1,
@@ -3608,14 +3649,11 @@
             "anyOf": [
               {
                 "enum": [
-                  "pending",
-                  "running",
-                  "completed",
-                  "waiting",
-                  "waiting_human",
+                  "reference",
+                  "recorded",
+                  "needs_input",
                   "failed",
-                  "skipped",
-                  "cancelled"
+                  "not_taken"
                 ],
                 "type": "string"
               },
@@ -3623,7 +3661,7 @@
                 "type": "null"
               }
             ],
-            "description": "Evidence-confirmed node state; waiting means prerequisites/external/system result, waiting_human requires manual authorization/approval/feedback. Unknown stays omitted/null; host controls colors.",
+            "description": "A saved process-reference annotation, not live execution state. recorded means a finding exists, not that a task or field action completed.",
             "title": "Status"
           }
         },
@@ -3634,6 +3672,153 @@
         "title": "InvestigationDiagramNodeRef",
         "type": "object"
       },
+      "InvestigationGraphEdge": {
+        "additionalProperties": false,
+        "properties": {
+          "label": {
+            "anyOf": [
+              {
+                "maxLength": 200,
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Label"
+          },
+          "source": {
+            "pattern": "^[A-Za-z_][A-Za-z0-9_-]{0,79}$",
+            "title": "Source",
+            "type": "string"
+          },
+          "target": {
+            "pattern": "^[A-Za-z_][A-Za-z0-9_-]{0,79}$",
+            "title": "Target",
+            "type": "string"
+          }
+        },
+        "required": [
+          "source",
+          "target"
+        ],
+        "title": "InvestigationGraphEdge",
+        "type": "object"
+      },
+      "InvestigationGraphNodeUpdate": {
+        "additionalProperties": false,
+        "properties": {
+          "action_refs": {
+            "items": {
+              "format": "uuid",
+              "type": "string"
+            },
+            "title": "Action Refs",
+            "type": "array"
+          },
+          "detail": {
+            "anyOf": [
+              {
+                "maxLength": 2000,
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Detail"
+          },
+          "evidence_refs": {
+            "items": {
+              "minLength": 1,
+              "type": "string"
+            },
+            "title": "Evidence Refs",
+            "type": "array"
+          },
+          "label": {
+            "minLength": 1,
+            "title": "Label",
+            "type": "string"
+          },
+          "map_targets": {
+            "items": {
+              "$ref": "#/components/schemas/InvestigationMapTarget"
+            },
+            "maxItems": 100,
+            "title": "Map Targets",
+            "type": "array"
+          },
+          "node_id": {
+            "pattern": "^[A-Za-z_][A-Za-z0-9_-]{0,79}$",
+            "title": "Node Id",
+            "type": "string"
+          },
+          "status": {
+            "anyOf": [
+              {
+                "enum": [
+                  "reference",
+                  "recorded",
+                  "needs_input",
+                  "failed",
+                  "not_taken"
+                ],
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "Optional reference annotation: reference, recorded finding, needs_input, failed attempt, or not_taken. No live node/task binding or per-step synchronization is required.",
+            "title": "Status"
+          }
+        },
+        "required": [
+          "node_id",
+          "label"
+        ],
+        "title": "InvestigationGraphNodeUpdate",
+        "type": "object"
+      },
+      "InvestigationGraphUpdate": {
+        "additionalProperties": false,
+        "properties": {
+          "edges": {
+            "items": {
+              "$ref": "#/components/schemas/InvestigationGraphEdge"
+            },
+            "maxItems": 200,
+            "title": "Edges",
+            "type": "array"
+          },
+          "nodes": {
+            "items": {
+              "$ref": "#/components/schemas/InvestigationGraphNodeUpdate"
+            },
+            "maxItems": 100,
+            "title": "Nodes",
+            "type": "array"
+          },
+          "title": {
+            "anyOf": [
+              {
+                "maxLength": 200,
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Title"
+          }
+        },
+        "title": "InvestigationGraphUpdate",
+        "type": "object"
+      },
       "InvestigationMapTarget": {
         "additionalProperties": false,
         "properties": {
@@ -3691,6 +3876,42 @@
         "title": "InvestigationProgress",
         "type": "object"
       },
+      "InvestigationProgressInput": {
+        "additionalProperties": false,
+        "properties": {
+          "diagram": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/InvestigationDiagram"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "graph_update": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/InvestigationGraphUpdate"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "summary": {
+            "maxLength": 20000,
+            "minLength": 1,
+            "title": "Summary",
+            "type": "string"
+          }
+        },
+        "required": [
+          "summary"
+        ],
+        "title": "InvestigationProgressInput",
+        "type": "object"
+      },
       "InvestigationProgressSnapshot": {
         "additionalProperties": false,
         "properties": {
@@ -3811,6 +4032,23 @@
             "title": "Recommendations",
             "type": "array"
           },
+          "scada_device_ids": {
+            "anyOf": [
+              {
+                "items": {
+                  "maxLength": 128,
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "maxItems": 1000,
+                "type": "array"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Scada Device Ids"
+          },
           "stage": {
             "anyOf": [
               {
@@ -3923,6 +4161,23 @@
             "title": "Recommendations",
             "type": "array"
           },
+          "scada_device_ids": {
+            "anyOf": [
+              {
+                "items": {
+                  "maxLength": 128,
+                  "minLength": 1,
+                  "type": "string"
+                },
+                "maxItems": 1000,
+                "type": "array"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Scada Device Ids"
+          },
           "stage": {
             "enum": [
               "interim",
@@ -4683,6 +4938,11 @@
             "title": "Execution Request Id",
             "type": "string"
           },
+          "execution_scope": {
+            "minLength": 1,
+            "title": "Execution Scope",
+            "type": "string"
+          },
           "handling_context": {
             "additionalProperties": {
               "$ref": "#/components/schemas/JsonValue"
@@ -4846,6 +5106,7 @@
           }
         },
         "required": [
+          "execution_scope",
           "project_id",
           "task_id",
           "task_type",
@@ -5660,6 +5921,11 @@
             "title": "Execution Request Id",
             "type": "string"
           },
+          "execution_scope": {
+            "minLength": 1,
+            "title": "Execution Scope",
+            "type": "string"
+          },
           "handling_context": {
             "additionalProperties": {
               "$ref": "#/components/schemas/JsonValue"
@@ -5773,6 +6039,7 @@
           }
         },
         "required": [
+          "execution_scope",
           "project_id",
           "task_id",
           "task_type",
@@ -7150,6 +7417,110 @@
         "title": "RunSimulationManuallyByDateRest",
         "type": "object"
       },
+      "ScadaChartContext": {
+        "additionalProperties": false,
+        "properties": {
+          "gaps": {
+            "items": {
+              "$ref": "#/components/schemas/ScadaChartGap"
+            },
+            "maxItems": 8,
+            "title": "Gaps",
+            "type": "array"
+          },
+          "metric": {
+            "enum": [
+              "pressure",
+              "flow"
+            ],
+            "title": "Metric",
+            "type": "string"
+          },
+          "role": {
+            "enum": [
+              "current",
+              "comparison"
+            ],
+            "title": "Role",
+            "type": "string"
+          },
+          "unit": {
+            "maxLength": 128,
+            "minLength": 1,
+            "title": "Unit",
+            "type": "string"
+          },
+          "value_field": {
+            "default": "monitored_value",
+            "enum": [
+              "monitored_value",
+              "cleaned_value"
+            ],
+            "title": "Value Field",
+            "type": "string"
+          },
+          "window_end": {
+            "format": "date-time",
+            "title": "Window End",
+            "type": "string"
+          },
+          "window_start": {
+            "format": "date-time",
+            "title": "Window Start",
+            "type": "string"
+          }
+        },
+        "required": [
+          "role",
+          "metric",
+          "unit",
+          "window_start",
+          "window_end"
+        ],
+        "title": "ScadaChartContext",
+        "type": "object"
+      },
+      "ScadaChartGap": {
+        "additionalProperties": false,
+        "properties": {
+          "day_offset": {
+            "maximum": 7.0,
+            "minimum": 0.0,
+            "title": "Day Offset",
+            "type": "integer"
+          },
+          "device_id": {
+            "maxLength": 128,
+            "minLength": 1,
+            "title": "Device Id",
+            "type": "string"
+          },
+          "missing_count": {
+            "maximum": 100.0,
+            "minimum": 1.0,
+            "title": "Missing Count",
+            "type": "integer"
+          },
+          "reason": {
+            "enum": [
+              "no_readings",
+              "outside_frozen_scope",
+              "outside_frozen_window",
+              "no_scheduled_samples"
+            ],
+            "title": "Reason",
+            "type": "string"
+          }
+        },
+        "required": [
+          "device_id",
+          "day_offset",
+          "missing_count",
+          "reason"
+        ],
+        "title": "ScadaChartGap",
+        "type": "object"
+      },
       "ScadaDeviceResponse": {
         "description": "Project SCADA metadata keyed by the canonical device identifier.",
         "properties": {
@@ -10211,11 +10582,22 @@
           "chart_type": {
             "enum": [
               "line",
-              "bar"
+              "bar",
+              "time_comparison"
             ],
             "title": "Chart Type",
             "type": "string"
           },
+          "scada": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/ScadaChartContext"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
           "series": {
             "items": {
               "$ref": "#/components/schemas/TaskSafeChartSeries"
@@ -10293,6 +10675,32 @@
             "title": "Data",
             "type": "array"
           },
+          "day_offset": {
+            "anyOf": [
+              {
+                "maximum": 7.0,
+                "minimum": 0.0,
+                "type": "integer"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Day Offset"
+          },
+          "device_id": {
+            "anyOf": [
+              {
+                "maxLength": 128,
+                "minLength": 1,
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "title": "Device Id"
+          },
           "name": {
             "maxLength": 128,
             "title": "Name",

openapi/server-manifest.json

@@ -0,0 +1,9 @@
+{
+  "contract_version": "1.0.0",
+  "contracts": {
+    "server": {
+      "file": "server-v1.openapi.json",
+      "sha256": "d96df154b86b797d0db913d1e69cf335d92d34dd119f800c9346b90c6119c9bb"
+    }
+  }
+}

package.json

@@ -11,7 +11,8 @@
     "dev": "bun --watch src/server.ts",
     "build": "bun run check",
     "generate:openapi": "openapi-typescript openapi/openapi.json -o src/generated/server-api.d.ts",
-    "check:openapi": "bun run generate:openapi && git diff --exit-code -- openapi/openapi.json src/generated/server-api.d.ts",
+    "check:openapi": "bun scripts/server-contract.ts",
+    "sync:openapi": "bun scripts/server-contract.ts --sync",
     "check": "bun run typecheck && bun run typecheck:opencode",
     "check:models": "bun scripts/check-models.ts",
     "check:websearch": "bun scripts/check-websearch.ts",

scripts/server-contract.ts

@@ -0,0 +1,57 @@
+import { createHash, randomUUID } from "node:crypto";
+import { readFile, writeFile, rename, rm } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import openapiTS, { astToString, COMMENT_HEADER } from "openapi-typescript";
+
+const local = new URL("../openapi/openapi.json", import.meta.url);
+const manifest = new URL("../openapi/server-manifest.json", import.meta.url);
+const generated = new URL("../src/generated/server-api.d.ts", import.meta.url);
+const defaultUpstream = new URL("../../next-tjwater-server/contracts/server-v1.openapi.json", import.meta.url);
+
+export function assertContractDigest(raw: string, expected: string) {
+  if (createHash("sha256").update(raw).digest("hex") !== expected) throw new Error("Server contract digest differs; run bun run sync:openapi");
+}
+
+async function main() {
+  const sync = process.argv.includes("--sync");
+  const upstreamIndex = process.argv.indexOf("--upstream");
+  if (upstreamIndex >= 0 && !process.argv[upstreamIndex + 1]) throw new Error("--upstream requires an OpenAPI file");
+  const upstream = upstreamIndex >= 0 ? resolve(process.argv[upstreamIndex + 1]) : defaultUpstream;
+  let upstreamRaw: string | undefined;
+  try { upstreamRaw = await readFile(upstream, "utf8"); }
+  catch (error) {
+    if (sync || upstreamIndex >= 0 || (error as NodeJS.ErrnoException).code !== "ENOENT") throw error;
+  }
+  if (sync) {
+    const producerManifest = JSON.parse(await readFile(resolve(
+      dirname(upstream instanceof URL ? fileURLToPath(upstream) : upstream), "manifest.json"
+    ), "utf8"));
+    assertContractDigest(upstreamRaw!, producerManifest.contracts.server.sha256);
+    // Complete validation and generation before replacing any checked-in artifact.
+    const types = COMMENT_HEADER + astToString(await openapiTS(JSON.parse(upstreamRaw!)));
+    const artifacts = [
+      { target: local, content: upstreamRaw! },
+      { target: manifest, content: JSON.stringify(producerManifest, null, 2) + "\n" },
+      { target: generated, content: types },
+    ].map((artifact) => ({ ...artifact, temporary: new URL(`${artifact.target.href}.${randomUUID()}.tmp`) }));
+    try {
+      for (const artifact of artifacts) await writeFile(artifact.temporary, artifact.content);
+      for (const artifact of artifacts) await rename(artifact.temporary, artifact.target);
+    } finally {
+      await Promise.all(artifacts.map((artifact) => rm(artifact.temporary, { force: true })));
+    }
+    console.log("Server OpenAPI snapshot, producer digest and types synchronized.");
+    return;
+  }
+  const raw = await readFile(local, "utf8");
+  const receipt = JSON.parse(await readFile(manifest, "utf8"));
+  assertContractDigest(raw, receipt.contracts.server.sha256);
+  if (upstreamRaw !== undefined && upstreamRaw !== raw) throw new Error("Upstream Server contract changed; run bun run sync:openapi");
+  if (await readFile(generated, "utf8") !== COMMENT_HEADER + astToString(await openapiTS(JSON.parse(raw)))) throw new Error("Generated Server types differ; run bun run generate:openapi");
+  console.log(upstreamRaw === undefined
+    ? "Local Server contract digest and types checked; upstream unavailable in this checkout."
+    : "Upstream Server contract, digest and generated types checked.");
+}
+
+if (import.meta.main) await main();

src/chat/answer-stream-projection.ts

@@ -33,8 +33,8 @@ export function createAnswerStreamProjection(options: {
     } } as UIMessageChunk);
     options.onChange();
   };
-  const appendData = (event: string, data: Record<string, unknown>) => {
-    if (finished) return;
+  const updateData = (event: string, data: Record<string, unknown>, hostState = false) => {
+    if (finished && !hostState) return;
     if (event === "answer_ui") endText();
     const type = `data-${event}`;
     const id = [data.id, data.request_id, data.envelope_id, data.block_id].find((value): value is string => typeof value === "string");
@@ -42,9 +42,11 @@ export function createAnswerStreamProjection(options: {
     const part = id ? { type, id, data } : { type, data };
     if (existing >= 0) parts[existing] = part;
     else parts.push(part);
-    options.write(part as UIMessageChunk);
+    if (!finished) options.write(part as UIMessageChunk);
     options.onChange();
   };
+  const appendData = (event: string, data: Record<string, unknown>) => updateData(event, data);
+  const recordData = (event: string, data: Record<string, unknown>) => updateData(event, data, true);
   const finish = (finishReason: "stop" | "error" = "stop") => {
     if (finished) return;
     if (!parts.length) appendText("Agent 已完成处理。");
@@ -53,5 +55,5 @@ export function createAnswerStreamProjection(options: {
     options.onChange();
     options.write({ type: "finish", finishReason });
   };
-  return { parts, appendText, appendData, finish, get finished() { return finished; } };
+  return { parts, appendText, appendData, recordData, finish, get finished() { return finished; } };
 }

src/chat/answer-ui-catalog.json

@@ -310,7 +310,8 @@
           "type": "string",
           "enum": [
             "line",
-            "bar"
+            "bar",
+            "time_comparison"
           ]
         },
         "x_axis_name": {

src/frontendAction/command.ts

@@ -8,15 +8,91 @@ export function createChartSampleTimeSchema(zod: typeof z = z) {
   );
 }
 
+type PublicationChart = {
+  chart_type: string;
+  scada?: { role: "current" | "comparison"; window_start: string };
+  x_data: string[];
+  series: Array<{ type?: string; data: Array<number | null>; sample_times?: Array<string | null> }>;
+};
+
+/** Mirrors Server time_comparison_chart.py for new publications, never historical reads. */
+export function chartPublicationError(chart: PublicationChart): string | null {
+  const kinds = new Set(chart.series.map((series) => series.type ?? (chart.chart_type === "time_comparison" ? "line" : chart.chart_type)));
+  if (chart.chart_type !== "time_comparison") return kinds.has("line") && kinds.has("scatter")
+    ? "曲线与历史散点复合图须使用 chart_type=time_comparison" : null;
+  if (kinds.size !== 2 || !kinds.has("line") || !kinds.has("scatter"))
+    return "time_comparison 必须包含当前 line 和历史 scatter，不能混入 bar";
+  const labels = chart.x_data;
+  if (!labels.every((label) => /^(?:[01][0-9]|2[0-3]):[0-5][0-9](?::[0-5][0-9])?$/.test(label)) || new Set(labels.map((label) => label.length)).size !== 1)
+    return "time_comparison.x_data 必须使用一致精度的 HH:mm 或 HH:mm:ss 共享时刻槽";
+  const seconds = labels.map((label) => label.split(":").reduce((value, part, index) => value + Number(part) * [3600, 60, 1][index], 0));
+  const offsets = [0];
+  for (let index = 1; index < seconds.length; index++) {
+    const step = (seconds[index] - seconds[index - 1] + 86400) % 86400;
+    if (!step) return "x_data 不能重复时刻，历史点应复用当前槽位";
+    offsets.push(offsets[index - 1] + step);
+  }
+  if (offsets.at(-1)! >= 86400) return "x_data 必须按时间递增且小于一天";
+  const current = new Set<number>();
+  const historical: number[] = [];
+  for (const series of chart.series) {
+    const times = series.sample_times;
+    if (!times || times.length !== labels.length) return "sample_times 必须提供并与 x_data 等长";
+    const bases = new Set<number>();
+    for (let index = 0; index < times.length; index++) {
+      const at = times[index];
+      if ((series.data[index] === null) !== (at === null)) return "有效值必须有真实采样时间，缺测值和时间均填 null";
+      if (at === null) continue;
+      const local = new Date(Date.parse(at) + 8 * 3600_000);
+      const base = local.getTime() - offsets[index] * 1000;
+      const year = local.getUTCFullYear(), baseYear = new Date(base).getUTCFullYear();
+      if (!Number.isFinite(base) || year < 1 || year > 9999 || baseYear < 1 || baseYear > 9999)
+        return "sample_times 超出同期对比可表达的日期范围";
+      const microseconds = /\.(\d+)/.exec(at)?.[1].slice(0, 6) ?? "0";
+      if (local.toISOString().slice(11, labels[index].length === 8 ? 19 : 16) !== labels[index] ||
+        Number(microseconds) !== 0 || labels[index].length === 5 && local.getUTCSeconds() !== 0)
+        return "sample_times 换算为 UTC+8 后须与 x_data 对应时刻对齐";
+      bases.add(base);
+    }
+    if (bases.size > 1) return "同一序列的 sample_times 必须按同一日期窗口对齐";
+    if ((series.type ?? "line") === "line") for (const base of bases) current.add(base);
+    else historical.push(...bases);
+  }
+  const emptyScada = current.size === 0 && chart.scada?.role === "comparison";
+  if (current.size !== 1 && !emptyScada) return "当前 line 必须包含真实采样时间，且所有当前曲线使用同一窗口";
+  const windowStart = emptyScada ? Date.parse(chart.scada!.window_start) + 8 * 3600_000 : 0;
+  const midnight = Math.floor(windowStart / 86400_000) * 86400_000;
+  const firstSlot = midnight + seconds[0] * 1000;
+  const start = emptyScada ? firstSlot + (firstSlot < windowStart ? 86400_000 : 0) : [...current][0];
+  return historical.some((base) => start <= base || (start - base) % 86400_000 !== 0)
+    ? "历史 scatter 必须来自当前窗口之前的对应日期" : null;
+}
+
 /** Shared host/native schema factory. Native OpenCode supplies its own Zod instance. */
-export function createViewSchemas(zod: typeof z = z, publication = false) {
+export function createViewSchemas(zod: typeof z = z, publication = false, validateCharts = publication) {
   const z = zod;
 
   const presentationIdentifierSchema = z.string().trim().min(1).max(128);
+  const scadaChartSchema = z.object({
+    role: z.enum(["current", "comparison"]),
+    metric: z.enum(["pressure", "flow"]),
+    unit: presentationIdentifierSchema,
+    window_start: createChartSampleTimeSchema(z),
+    window_end: createChartSampleTimeSchema(z),
+    value_field: z.enum(["monitored_value", "cleaned_value"]).optional(),
+    // Populated by Server after checking observations, never a display exemption.
+    gaps: z.array(z.object({
+      device_id: presentationIdentifierSchema,
+      day_offset: z.number().int().min(0).max(7),
+      missing_count: z.number().int().min(1).max(100),
+      reason: z.enum(["no_readings", "outside_frozen_scope", "outside_frozen_window", "no_scheduled_samples"])
+    }).strict()).max(8).optional()
+  }).strict();
   const chartSchema = z
     .object({
       title: z.string().max(200),
-      chart_type: z.enum(["line", "bar"]),
+      scada: scadaChartSchema.optional(),
+      chart_type: z.enum(["line", "bar", "time_comparison"]),
       x_axis_name: z.string().max(128).optional(),
       y_axis_name: z.string().max(128).optional(),
       x_data: z.array(z.string().max(128)).min(1).max(100),
@@ -25,6 +101,8 @@ export function createViewSchemas(zod: typeof z = z, publication = false) {
           z
             .object({
               name: z.string().max(128),
+              device_id: presentationIdentifierSchema.optional(),
+              day_offset: z.number().int().min(0).max(7).optional(),
               type: z.enum(["line", "bar", "scatter"]).optional(),
               data: z.array(z.number().finite().nullable()).min(1).max(100),
               sample_times: z.array(createChartSampleTimeSchema(z).nullable()).min(1).max(100).optional()
@@ -40,7 +118,11 @@ export function createViewSchemas(zod: typeof z = z, publication = false) {
         (!series.sample_times || series.sample_times.length === value.x_data.length &&
           series.sample_times.every((time, index) => time === null || series.data[index] !== null))),
       "series must align with x_data"
-    );
+    ).superRefine((value, ctx) => {
+      if (!validateCharts) return;
+      const message = chartPublicationError(value);
+      if (message) ctx.addIssue({ code: "custom", message });
+    });
   const position = z
     .tuple([z.number().finite().min(-180).max(180), z.number().finite().min(-90).max(90)])
     .rest(z.number().finite())
@@ -214,8 +296,9 @@ export const {
   overlayDataSchema,
   variants: viewCommandVariants
 } = createViewSchemas();
-export const createViewCommandSchema = (options: { publication: boolean }) =>
-  createViewSchemas(z, options.publication).command;
+export const safeChartPublicationInput = createViewSchemas(z, true).safeChartInput;
+export const createViewCommandSchema = (options: { publication: boolean; validateCharts?: boolean }) =>
+  createViewSchemas(z, options.publication, options.validateCharts ?? options.publication).command;
 type Command = z.infer<ReturnType<typeof createViewCommandSchema>>;
 export type ViewCommand =
   | Exclude<Command, { action: "set_overlay" }>

src/frontendAction/coordinator.ts

@@ -1,11 +1,17 @@
 import { createHash } from "node:crypto";
 import { z } from "zod";
 
-import { viewCommandSchema } from "./command.js";
+import { chartPublicationError, viewCommandSchema } from "./command.js";
 import { logger } from "../logger.js";
 import { getFrontendActionDefinition } from "./registry.js";
 import type { FrontendActionRequest, FrontendActionResult } from "./types.js";
 
+const publicationCommandSchema = viewCommandSchema.superRefine((command, context) => {
+  if (command.action !== "open_chart") return;
+  const message = chartPublicationError(command.chart);
+  if (message) context.addIssue({ code: "custom", message, path: ["chart"] });
+});
+
 export const frontendActionResultSchema = z.object({
   version: z.literal("frontend-action-result@2"),
   actionId: z.string().trim().min(1).max(128),
@@ -68,7 +74,7 @@ export class FrontendActionCoordinator {
     signal?: AbortSignal;
   }): Promise<FrontendActionResult> {
     if (!options.toolCallId.trim()) throw new FrontendActionError(400, "frontend action call ID is required");
-    const parsedParams = viewCommandSchema.safeParse(options.command);
+    const parsedParams = publicationCommandSchema.safeParse(options.command);
     if (!parsedParams.success) throw new FrontendActionError(400, "invalid view command");
     const definition = getFrontendActionDefinition(parsedParams.data.action);
     if (!definition) throw new FrontendActionError(400, "unknown frontend action");

src/frontendAction/view-command.schema.json

@@ -207,11 +207,103 @@
               "type": "string",
               "maxLength": 200
             },
+            "scada": {
+              "type": "object",
+              "properties": {
+                "role": {
+                  "type": "string",
+                  "enum": [
+                    "current",
+                    "comparison"
+                  ]
+                },
+                "metric": {
+                  "type": "string",
+                  "enum": [
+                    "pressure",
+                    "flow"
+                  ]
+                },
+                "unit": {
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 128
+                },
+                "window_start": {
+                  "type": "string",
+                  "maxLength": 64,
+                  "format": "date-time",
+                  "pattern": "^(?:[1-9][0-9]{3}|0[1-9][0-9]{2}|00[1-9][0-9]|000[1-9])-[0-9]{2}-[0-9]{2}T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9](?:\\.[0-9]+)?(?:Z|[+-](?:[01][0-9]|2[0-3]):[0-5][0-9])$"
+                },
+                "window_end": {
+                  "type": "string",
+                  "maxLength": 64,
+                  "format": "date-time",
+                  "pattern": "^(?:[1-9][0-9]{3}|0[1-9][0-9]{2}|00[1-9][0-9]|000[1-9])-[0-9]{2}-[0-9]{2}T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9](?:\\.[0-9]+)?(?:Z|[+-](?:[01][0-9]|2[0-3]):[0-5][0-9])$"
+                },
+                "value_field": {
+                  "type": "string",
+                  "enum": [
+                    "monitored_value",
+                    "cleaned_value"
+                  ]
+                },
+                "gaps": {
+                  "type": "array",
+                  "items": {
+                    "type": "object",
+                    "properties": {
+                      "device_id": {
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 128
+                      },
+                      "day_offset": {
+                        "type": "integer",
+                        "minimum": 0,
+                        "maximum": 7
+                      },
+                      "missing_count": {
+                        "type": "integer",
+                        "minimum": 1,
+                        "maximum": 100
+                      },
+                      "reason": {
+                        "type": "string",
+                        "enum": [
+                          "no_readings",
+                          "outside_frozen_scope",
+                          "outside_frozen_window",
+                          "no_scheduled_samples"
+                        ]
+                      }
+                    },
+                    "required": [
+                      "device_id",
+                      "day_offset",
+                      "missing_count",
+                      "reason"
+                    ],
+                    "additionalProperties": false
+                  },
+                  "maxItems": 8
+                }
+              },
+              "required": [
+                "role",
+                "metric",
+                "unit",
+                "window_start",
+                "window_end"
+              ],
+              "additionalProperties": false
+            },
             "chart_type": {
               "type": "string",
               "enum": [
                 "line",
-                "bar"
+                "bar",
+                "time_comparison"
               ]
             },
             "x_axis_name": {
@@ -240,6 +332,16 @@
                     "type": "string",
                     "maxLength": 128
                   },
+                  "device_id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 128
+                  },
+                  "day_offset": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 7
+                  },
                   "type": {
                     "type": "string",
                     "enum": [

src/generated/server-api.d.ts

@@ -5972,7 +5972,7 @@ export interface components {
             /** Evidence */
             evidence?: components["schemas"]["EvidenceInput"][];
             plan?: components["schemas"]["ExecutionPlanInput"] | null;
-            progress?: components["schemas"]["InvestigationProgress"] | null;
+            progress?: components["schemas"]["InvestigationProgressInput"] | null;
             report?: components["schemas"]["InvestigationReportInput"] | null;
             /**
              * Request Id
@@ -7084,10 +7084,14 @@ export interface components {
         };
         /** InvestigationDiagram */
         InvestigationDiagram: {
+            /** Edges */
+            edges?: components["schemas"]["InvestigationGraphEdge"][] | null;
             /** Mermaid */
             mermaid: string;
             /** Node Refs */
             node_refs?: components["schemas"]["InvestigationDiagramNodeRef"][];
+            /** Source Mermaid */
+            source_mermaid?: string | null;
             /** Title */
             title: string;
         };
@@ -7095,6 +7099,8 @@ export interface components {
         InvestigationDiagramNodeRef: {
             /** Action Refs */
             action_refs?: string[];
+            /** Detail */
+            detail?: string | null;
             /** Evidence Refs */
             evidence_refs?: string[];
             /** Label */
@@ -7105,9 +7111,47 @@ export interface components {
             node_id: string;
             /**
              * Status
-             * @description Evidence-confirmed node state; waiting means prerequisites/external/system result, waiting_human requires manual authorization/approval/feedback. Unknown stays omitted/null; host controls colors.
+             * @description A saved process-reference annotation, not live execution state. recorded means a finding exists, not that a task or field action completed.
              */
-            status?: ("pending" | "running" | "completed" | "waiting" | "waiting_human" | "failed" | "skipped" | "cancelled") | null;
+            status?: ("reference" | "recorded" | "needs_input" | "failed" | "not_taken") | null;
+        };
+        /** InvestigationGraphEdge */
+        InvestigationGraphEdge: {
+            /** Label */
+            label?: string | null;
+            /** Source */
+            source: string;
+            /** Target */
+            target: string;
+        };
+        /** InvestigationGraphNodeUpdate */
+        InvestigationGraphNodeUpdate: {
+            /** Action Refs */
+            action_refs?: string[];
+            /** Detail */
+            detail?: string | null;
+            /** Evidence Refs */
+            evidence_refs?: string[];
+            /** Label */
+            label: string;
+            /** Map Targets */
+            map_targets?: components["schemas"]["InvestigationMapTarget"][];
+            /** Node Id */
+            node_id: string;
+            /**
+             * Status
+             * @description Optional reference annotation: reference, recorded finding, needs_input, failed attempt, or not_taken. No live node/task binding or per-step synchronization is required.
+             */
+            status?: ("reference" | "recorded" | "needs_input" | "failed" | "not_taken") | null;
+        };
+        /** InvestigationGraphUpdate */
+        InvestigationGraphUpdate: {
+            /** Edges */
+            edges?: components["schemas"]["InvestigationGraphEdge"][];
+            /** Nodes */
+            nodes?: components["schemas"]["InvestigationGraphNodeUpdate"][];
+            /** Title */
+            title?: string | null;
         };
         /** InvestigationMapTarget */
         InvestigationMapTarget: {
@@ -7128,6 +7172,13 @@ export interface components {
             /** Summary */
             summary: string;
         };
+        /** InvestigationProgressInput */
+        InvestigationProgressInput: {
+            diagram?: components["schemas"]["InvestigationDiagram"] | null;
+            graph_update?: components["schemas"]["InvestigationGraphUpdate"] | null;
+            /** Summary */
+            summary: string;
+        };
         /** InvestigationProgressSnapshot */
         InvestigationProgressSnapshot: {
             /** Execution Generation */
@@ -7168,6 +7219,8 @@ export interface components {
             pending_items?: string[];
             /** Recommendations */
             recommendations?: string[];
+            /** Scada Device Ids */
+            scada_device_ids?: string[] | null;
             /** Stage */
             stage?: ("interim" | "final") | null;
             /** Stop Reason */
@@ -7200,6 +7253,8 @@ export interface components {
             pending_items?: string[];
             /** Recommendations */
             recommendations?: string[];
+            /** Scada Device Ids */
+            scada_device_ids?: string[] | null;
             /**
              * Stage
              * @enum {string}
@@ -7507,6 +7562,8 @@ export interface components {
              * Format: uuid
              */
             execution_request_id: string;
+            /** Execution Scope */
+            execution_scope: string;
             /** Handling Context */
             handling_context?: {
                 [key: string]: components["schemas"]["JsonValue"];
@@ -7863,6 +7920,8 @@ export interface components {
              * Format: uuid
              */
             execution_request_id: string;
+            /** Execution Scope */
+            execution_scope: string;
             /** Handling Context */
             handling_context?: {
                 [key: string]: components["schemas"]["JsonValue"];
@@ -8450,6 +8509,53 @@ export interface components {
              */
             start_time: string;
         };
+        /** ScadaChartContext */
+        ScadaChartContext: {
+            /** Gaps */
+            gaps?: components["schemas"]["ScadaChartGap"][];
+            /**
+             * Metric
+             * @enum {string}
+             */
+            metric: "pressure" | "flow";
+            /**
+             * Role
+             * @enum {string}
+             */
+            role: "current" | "comparison";
+            /** Unit */
+            unit: string;
+            /**
+             * Value Field
+             * @default monitored_value
+             * @enum {string}
+             */
+            value_field: "monitored_value" | "cleaned_value";
+            /**
+             * Window End
+             * Format: date-time
+             */
+            window_end: string;
+            /**
+             * Window Start
+             * Format: date-time
+             */
+            window_start: string;
+        };
+        /** ScadaChartGap */
+        ScadaChartGap: {
+            /** Day Offset */
+            day_offset: number;
+            /** Device Id */
+            device_id: string;
+            /** Missing Count */
+            missing_count: number;
+            /**
+             * Reason
+             * @enum {string}
+             */
+            reason: "no_readings" | "outside_frozen_scope" | "outside_frozen_window" | "no_scheduled_samples";
+        };
         /**
          * ScadaDeviceResponse
          * @description Project SCADA metadata keyed by the canonical device identifier.
@@ -9600,7 +9706,8 @@ export interface components {
              * Chart Type
              * @enum {string}
              */
-            chart_type: "line" | "bar";
+            chart_type: "line" | "bar" | "time_comparison";
+            scada?: components["schemas"]["ScadaChartContext"] | null;
             /** Series */
             series: components["schemas"]["TaskSafeChartSeries"][];
             /** Title */
@@ -9616,6 +9723,10 @@ export interface components {
         TaskSafeChartSeries: {
             /** Data */
             data: (number | null)[];
+            /** Day Offset */
+            day_offset?: number | null;
+            /** Device Id */
+            device_id?: string | null;
             /** Name */
             name: string;
             /** Sample Times */

src/product/investigation-node-state.ts

@@ -0,0 +1,13 @@
+export const investigationNodeAnnotations = ["reference", "recorded", "needs_input", "failed", "not_taken"] as const;
+export type InvestigationNodeAnnotation = (typeof investigationNodeAnnotations)[number];
+export const legacyInvestigationNodeAnnotations = ["pending", "running", "completed", "waiting", "waiting_human", "skipped", "cancelled"] as const;
+const legacyAnnotations = {
+  pending: "reference", running: "reference", completed: "recorded",
+  waiting: "needs_input", waiting_human: "needs_input", skipped: "not_taken", cancelled: "not_taken",
+} as const satisfies Record<string, InvestigationNodeAnnotation>;
+
+export function readInvestigationNodeAnnotation(status: string | null | undefined): InvestigationNodeAnnotation | null | undefined {
+  if (status == null) return status;
+  if (status in legacyAnnotations) return legacyAnnotations[status as keyof typeof legacyAnnotations];
+  return status as InvestigationNodeAnnotation;
+}

src/product/investigation-report.ts

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { supplyLayerSchema } from "./task-presentation.js";
 import { answerUiBlockSchema } from "../chat/answer-ui.js";
+import { investigationNodeAnnotations, legacyInvestigationNodeAnnotations, readInvestigationNodeAnnotation } from "./investigation-node-state.js";
 
 const text = z.string().trim().min(1);
 export function mermaidDeclaresNodeId(source: string, nodeId: string): boolean {
@@ -11,23 +12,41 @@ export function mermaidDeclaresNodeId(source: string, nodeId: string): boolean {
   ).test(source);
 }
 
+export const investigationGraphNodeSchema = z.object({
+  node_id: z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/),
+  label: text,
+  detail: text.max(2000).nullish(),
+  evidence_refs: z.array(text).default([]),
+  action_refs: z.array(z.string().uuid()).default([]),
+  status: z.enum(investigationNodeAnnotations).nullish(),
+  map_targets: z.array(z.object({
+    source_id: supplyLayerSchema,
+    feature_id: text.max(128),
+  }).strict()).max(100).default([]),
+}).strict();
+const graphEdgeSchema = z.object({
+  source: z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/),
+  target: z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/),
+  label: text.max(200).nullish(),
+}).strict();
+export const investigationGraphUpdateSchema = z.object({
+  title: text.max(200).nullish(),
+  nodes: z.array(investigationGraphNodeSchema).max(100).default([]),
+  edges: z.array(graphEdgeSchema).max(200).default([]),
+}).strict();
+
 export const investigationDiagramSchema = z.object({
   title: text,
   mermaid: text.max(20000).refine((source) =>
     /^\s*(?:flowchart|graph)\s+(?:TD|TB|BT|LR|RL)\b/.test(source)
     && !source.includes("```") && !source.includes("%%{") && !/(?:^|[;\n])\s*click\b/.test(source),
   "调查图只接受不含指令或回调的 Mermaid 流程描述"),
-  node_refs: z.array(z.object({
-    node_id: z.string().regex(/^[A-Za-z_][A-Za-z0-9_-]{0,79}$/),
-    label: text,
-    evidence_refs: z.array(text).default([]),
-    action_refs: z.array(z.string().uuid()).default([]),
-    status: z.enum(["pending", "running", "completed", "waiting", "waiting_human", "failed", "skipped", "cancelled"]).nullish().describe("Evidence-confirmed node state; waiting means prerequisites/external/system result, waiting_human requires manual authorization/approval/feedback. Unknown stays omitted/null; host controls colors."),
-    map_targets: z.array(z.object({
-      source_id: supplyLayerSchema,
-      feature_id: text.max(128),
-    }).strict()).max(100).default([]),
-  }).strict()).max(100).default([]),
+  node_refs: z.array(investigationGraphNodeSchema.extend({
+    status: z.enum([...investigationNodeAnnotations, ...legacyInvestigationNodeAnnotations]).nullish()
+      .transform(readInvestigationNodeAnnotation),
+  })).max(100).default([]),
+  edges: z.array(graphEdgeSchema).max(200).nullish(),
+  source_mermaid: text.max(20000).nullish(),
 }).strict().superRefine((diagram, ctx) => {
   if (new Set(diagram.node_refs.map((node) => node.node_id)).size !== diagram.node_refs.length) {
     ctx.addIssue({ code: z.ZodIssueCode.custom, message: "调查图节点引用重复" });
@@ -45,7 +64,9 @@ export const investigationDiagramSchema = z.object({
 export const taskProgressSchema = z.object({
   summary: text.max(20000),
   diagram: investigationDiagramSchema.nullable().default(null),
-}).strict();
+  graph_update: investigationGraphUpdateSchema.nullish(),
+}).strict().refine((progress) => !(progress.diagram && progress.graph_update),
+  "Use graph_update without a generated Mermaid diagram");
 
 export type TaskProgress = z.infer<typeof taskProgressSchema>;
 const dataGapSchema = z.object({
@@ -86,6 +107,7 @@ export const taskReportSchema = z.object({
   data_gaps: z.array(dataGapSchema),
   diagram: investigationDiagramSchema.nullish(),
   ui_blocks: z.array(reportUiBlockSchema).max(8).optional(),
+  scada_device_ids: z.array(text.max(128)).max(1000).optional(),
 }).strict().superRefine((report, ctx) => {
   const invalid = (message: string, path: (string | number)[] = []) =>
     ctx.addIssue({ code: z.ZodIssueCode.custom, message, path });

src/product/mcp-query-client.ts

@@ -203,7 +203,8 @@ export class McpQueryClient {
     if (!owner.context.projectId || owner.context.projectKey.startsWith("personal-") || !owner.context.purpose || !["ordinary_chat", "task_execution", "task_collaboration"].includes(owner.context.purpose)) throw error(403, "Project query context required");
     // No model-supplied identity, scope, bearer or Server URL can pass this boundary.
     const schema = this.catalog().find((tool) => tool.name === name)!.inputSchema;
-    const budget = queryTimeouts(this.tools.find((tool) => tool.name === name)!, args);
+    const definition = this.tools.find((tool) => tool.name === name)!;
+    const budget = queryTimeouts(definition, args);
     const reserved = new Set(["context_handle", "authorization", "headers", "project_id", "projectId", "network", "url", "server_url", "user_id", "subject", "client_id", "purpose", "native_session_id", "parent_session_id", "task_id", "scope", "scopes"]);
     if (Object.keys(args).some((key) => reserved.has(key) || !Object.hasOwn(schema.properties ?? {}, key))) throw error(400, "Unknown query parameter");
     const token = await this.userToken(owner.runtimeSessionId, owner.context.projectId, signal);
@@ -223,8 +224,7 @@ export class McpQueryClient {
     const handle = body.context_handle;
     try {
       return await this.withClient(token.token, project, signal, async (client) => {
-        await client.listTools(undefined, { signal, timeout: 5000 });
-        return client.callTool({ name, arguments: { ...args, ...(this.tools.find((tool) => tool.name === name)!.inputSchema.properties?.timeout_seconds ? { timeout_seconds: budget.serverMs / 1000 } : {}), context_handle: handle }, _meta: { "io.tjwater/callId": callId } }, { signal, timeout: budget.callMs });
+        return client.callTool({ name, arguments: { ...args, ...(definition.inputSchema.properties?.timeout_seconds ? { timeout_seconds: budget.serverMs / 1000 } : {}), context_handle: handle }, _meta: { "io.tjwater/callId": callId } }, { signal, timeout: budget.callMs, toolDefinition: definition });
       }, budget.callMs);
     } finally {
       // Expiry remains authoritative if transport cancellation prevents revocation.

src/product/operational-task-client.ts

@@ -404,6 +404,23 @@ export class OperationalTaskClientError extends Error {
   }
 }
 
+/** Feed a concrete Server coverage rejection back into the same active investigation. */
+export function scadaPresentationContinuation(error: unknown): string | null {
+  if (!(error instanceof OperationalTaskClientError) || error.code !== "SCADA_PRESENTATION_INCOMPLETE") return null;
+  return `Server尚未接受本轮调查结束：${error.message}\n请按返回设备补充publish_task_presentation监测图，必要时更新publish_task_report。保留目标设备与真实缺测说明，完成后再结束本轮。`;
+}
+
+/** Bound automatic extra model turns to the current response, preserving the Server gate. */
+export function createScadaPresentationContinuation() {
+  let attempts = 0;
+  return (error: unknown): string | null => {
+    const guidance = scadaPresentationContinuation(error);
+    if (!guidance || attempts >= 3) return null;
+    attempts++;
+    return guidance;
+  };
+}
+
 const parseJson = (text: string): unknown => {
   if (!text.trim()) return {};
   try {

src/routes/chat-run-accumulator.ts

@@ -0,0 +1,221 @@
+import type { UIMessage, UIMessageChunk } from "ai";
+import { createAnswerStreamProjection } from "../chat/answer-stream-projection.js";
+import type { UIEnvelopePayload } from "../uiEnvelope/types.js";
+import type { PermissionRequestPayload, QuestionRequestPayload, TodoUpdatePayload } from "./chatStream.js";
+import {
+  type ActiveRun, type RunStatus, updateLastAssistantMessage, applyInteractionResponse,
+  completeBackendProgress, cancelBackendTodos, upsertBackendProgress,
+  toFrontendPermission, upsertBackendQuestion, upsertBackendTodoUpdate,
+  appendBackendToolArtifact, appendBackendUiEnvelope,
+} from "./chatUiState.js";
+
+/** Compatibility fields are a projection of the same accepted event as canonical parts. */
+function reduceRunEvent(activeRun: ActiveRun, event: string, data: Record<string, unknown>, onStatus: (status: RunStatus) => void) {
+    if (event === "token") {
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        content: `${typeof message.content === "string" ? message.content : ""}${typeof data.content === "string" ? data.content : ""}`,
+        isError: false,
+      }));
+    } else if (event === "final_answer") {
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message, content: typeof data.content === "string" ? data.content : message.content,
+      }));
+    } else if (event === "progress") {
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        progress: upsertBackendProgress(message.progress, data),
+      }));
+    } else if (event === "done") {
+      activeRun.status = data.reason === "waiting_input" ? "waiting_input" : "completed";
+      onStatus(activeRun.status);
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        content:
+          typeof message.content === "string" && message.content.trim()
+            ? message.content
+            : data.reason === "waiting_input" ? "等待你的回答。" : "Agent 已完成处理，但没有生成文本回答。请查看过程记录，或换个更具体的问题重试。",
+        progress: completeBackendProgress(message.progress),
+      }));
+    } else if (event === "error" || event === "aborted") {
+      activeRun.status = event === "aborted" || activeRun.status === "aborted" ? "aborted" : "error";
+      onStatus(activeRun.status);
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        content:
+          typeof message.content === "string" && message.content.trim()
+            ? message.content
+            : `⚠️ **错误：** ${typeof data.message === "string" ? data.message : "unknown error"}`,
+        isError: true,
+        progress: completeBackendProgress(message.progress),
+        todos: cancelBackendTodos(message.todos),
+      }));
+    } else if (event === "permission_request") {
+      const payload = data as PermissionRequestPayload;
+      activeRun.pendingPermissions.set(payload.request_id, payload);
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        permissions: [
+          ...(Array.isArray(message.permissions) ? message.permissions : []),
+          toFrontendPermission(payload),
+        ],
+      }));
+    } else if (event === "permission_response") {
+      const requestId =
+        typeof data.request_id === "string" ? data.request_id : undefined;
+      const reply =
+        data.reply === "once" || data.reply === "always" || data.reply === "reject"
+          ? data.reply
+          : undefined;
+      if (requestId && (reply || data.status === "error")) {
+        if (reply) activeRun.pendingPermissions.delete(requestId);
+        activeRun.messages = applyInteractionResponse(activeRun.messages, "permission_response", data);
+      }
+    } else if (event === "question_request") {
+      const payload = data as QuestionRequestPayload;
+      let shouldTrackQuestion = true;
+      if (payload.tool?.callID) {
+        if (payload.request_id !== payload.tool.callID) {
+          activeRun.pendingQuestions.delete(payload.tool.callID);
+        } else {
+          const hasActionableQuestion = [...activeRun.pendingQuestions.values()].some(
+            (question) =>
+              question.tool?.callID === payload.tool?.callID &&
+              question.request_id !== payload.tool?.callID,
+          );
+          if (hasActionableQuestion) {
+            activeRun.messages = updateLastAssistantMessage(
+              activeRun.messages,
+              (message) => ({
+                ...message,
+                questions: upsertBackendQuestion(message.questions, payload),
+              }),
+            );
+            shouldTrackQuestion = false;
+          }
+        }
+      }
+      if (shouldTrackQuestion) {
+        activeRun.pendingQuestions.set(payload.request_id, payload);
+        activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+          ...message,
+          questions: upsertBackendQuestion(message.questions, payload),
+        }));
+      }
+    } else if (event === "question_response") {
+      const requestId =
+        typeof data.request_id === "string" ? data.request_id : undefined;
+      if (requestId) {
+        activeRun.pendingQuestions.delete(requestId);
+        activeRun.messages = applyInteractionResponse(activeRun.messages, "question_response", data);
+      }
+    } else if (event === "execution_plan") {
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message, executionPlans: [...(Array.isArray(message.executionPlans) ? message.executionPlans : []), data],
+      }));
+    } else if (event === "todo_update") {
+      const payload = data as TodoUpdatePayload;
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        todos: upsertBackendTodoUpdate(message.todos, payload),
+      }));
+    } else if (event === "tool_call") {
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        artifacts: appendBackendToolArtifact(message.artifacts, data),
+      }));
+    } else if (event === "ui_envelope") {
+      const payload = data as UIEnvelopePayload;
+      activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+        ...message,
+        uiEnvelopes: appendBackendUiEnvelope(message.uiEnvelopes, payload),
+      }));
+    }
+
+}
+
+/** All host mutations go through the accumulator before subscribers or persistence. */
+export function publishRunEvent(run: ActiveRun, event: string, data: Record<string, unknown>, notify = true) {
+  if (run.applyEvent) run.applyEvent(event, data);
+  else reduceRunEvent(run, event, data, () => {});
+  if (notify) for (const subscriber of run.subscribers) {
+    if (event === "done" || event === "error" || event === "aborted") {
+      subscriber.write("run_status", { ...data, id: "run-status", status: run.status });
+    }
+    subscriber.write(event, data);
+  }
+}
+
+/** One event owner updates the reconnect view and canonical wire/storage projections. */
+export function createChatRunAccumulator(options: {
+  run: ActiveRun;
+  messages: UIMessage[];
+  messageId: string;
+  sessionId: string;
+  collaboration: boolean;
+  write: (chunk: UIMessageChunk) => void;
+  onStatus: (status: RunStatus) => void;
+}) {
+  const activeRun = options.run;
+  let history = [...options.messages];
+  const syncParts = () => {
+    activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
+      ...message, id: options.messageId, parts: projection.parts.map((part) => ({ ...part })),
+    }));
+  };
+  const projection = createAnswerStreamProjection({
+    messageId: options.messageId, sessionId: options.sessionId,
+    write: options.write, onChange: syncParts,
+  });
+  const apply = (event: string, data: Record<string, unknown>) => {
+    reduceRunEvent(activeRun, event, data, options.onStatus);
+    let historicalResponse = false;
+    if (event === "permission_response" || event === "question_response") {
+      const updated = applyInteractionResponse(history, event, data);
+      historicalResponse = updated !== history;
+      history = updated;
+      if (historicalResponse) {
+        const byId = new Map(history.map((message) => [message.id, message]));
+        activeRun.messages = activeRun.messages.map((message) => {
+          if (!message || typeof message !== "object" || !("id" in message)) return message;
+          const canonical = byId.get(String(message.id));
+          return canonical ? { ...message, parts: canonical.parts } : message;
+        });
+      }
+    }
+
+    const hidden = options.collaboration && ["progress", "todo_update", "tool_call", "ui_envelope", "execution_plan"].includes(event);
+    if (!hidden && !historicalResponse) {
+      if (event === "token") projection.appendText(typeof data.content === "string" ? data.content : "");
+      else if (event === "done" || event === "error" || event === "aborted") {
+        const message = typeof data.message === "string" ? data.message : event === "aborted" ? "请求已中断" : "Agent stream failed";
+        if (!projection.parts.some((part) => ["text", "data-final_answer", "data-answer_ui"].includes(String(part.type)))) {
+          const assistant = activeRun.messages.at(-1) as { content?: string } | undefined;
+          projection.appendText(assistant?.content || message);
+        }
+        projection.recordData("run_status", { id: "run-status", status: activeRun.status, ...(event === "done" ? {} : { message }) });
+        if (event !== "done" && !projection.finished) options.write({ type: "error", errorText: message });
+        projection.finish(event === "done" ? "stop" : "error");
+      } else if (["permission_response", "question_response"].includes(event)) projection.recordData(event, data);
+      else projection.appendData(event, data);
+    }
+    syncParts();
+  };
+  const uiMessages = (): UIMessage[] => [...history, {
+    id: options.messageId, role: "assistant", parts: projection.parts.map((part) => ({ ...part })),
+  } as UIMessage];
+  activeRun.applyEvent = apply;
+  activeRun.uiMessages = uiMessages;
+  return {
+    apply,
+    finish: projection.finish,
+    get finished() { return projection.finished; },
+    uiMessages,
+    appendInput(message: UIMessage, text: string) {
+      if (history.some((item) => item.id === message.id)) return;
+      history.push(message);
+      const tail = activeRun.messages.at(-1);
+      activeRun.messages = [...activeRun.messages.slice(0, -1), { id: message.id, role: "user", content: text }, ...(tail ? [tail] : [])];
+    },
+  };
+}

src/routes/chatAuxiliaryRoutes.ts

@@ -1,3 +1,5 @@
+import { publishRunEvent } from "./chat-run-accumulator.js";
+import { toSessionScope } from "../sessions/session-scope.js";
 import { type Router } from "express";
 import { z } from "zod";
 import type { InteractionRequestStore } from "../sessions/interaction-request-store.js";
@@ -13,9 +15,6 @@ import { type FrontendActionCoordinator } from "../frontendAction/coordinator.js
 import {
   type ActiveRun,
   type RunStatus,
-  cancelBackendTodos,
-  completeBackendProgress,
-  updateLastAssistantMessage,
 } from "./chatUiState.js";
 
 const abortPayloadSchema = z.object({
@@ -33,11 +32,6 @@ type RegisterAuxiliaryRoutesOptions = {
   frontendActionCoordinator: FrontendActionCoordinator;
 };
 
-const toSessionUiStateContext = (record: { sessionId: string; actorKey: string; projectKey: string }) => ({
-  sessionId: record.sessionId,
-  actorKey: record.actorKey,
-  projectKey: record.projectKey,
-});
 
 export const registerChatAuxiliaryRoutes = (
   chatRouter: Router,
@@ -80,12 +74,12 @@ export const registerChatAuxiliaryRoutes = (
       const runtimeContext = getRuntimeSessionContext(sessionRecord.sessionId);
       if (runtimeContext) setRuntimeSessionContext({ ...runtimeContext, hostQuestionClosed: true });
       activeRuns.get(sessionRecord.sessionId)?.controller.abort();
-      await interactionRequestStore?.cancelPending(toSessionUiStateContext(sessionRecord));
-      const pendingInteraction = await interactionRequestStore?.getBlocking(toSessionUiStateContext(sessionRecord));
+      await interactionRequestStore?.cancelPending(toSessionScope(sessionRecord));
+      const pendingInteraction = await interactionRequestStore?.getBlocking(toSessionScope(sessionRecord));
       if (pendingInteraction?.delivery && runtime && interactionRequestStore) {
         const status = await runtime.stopInteractionInput(sessionRecord.sessionId, pendingInteraction.delivery.native_message_id);
-        const latest = await interactionRequestStore.get(toSessionUiStateContext(sessionRecord), pendingInteraction.interaction_id);
-        if (latest?.delivery && !["delivered", "cancelled"].includes(latest.delivery.status)) await interactionRequestStore.updateDelivery(toSessionUiStateContext(sessionRecord), latest.interaction_id, {
+        const latest = await interactionRequestStore.get(toSessionScope(sessionRecord), pendingInteraction.interaction_id);
+        if (latest?.delivery && !["delivered", "cancelled"].includes(latest.delivery.status)) await interactionRequestStore.updateDelivery(toSessionScope(sessionRecord), latest.interaction_id, {
           expected_revision: latest.delivery.revision, status,
         });
       }
@@ -99,28 +93,21 @@ export const registerChatAuxiliaryRoutes = (
         run.status = "aborted";
         lastRunStatuses.set(parsed.data.session_id, "aborted");
         run.controller.abort();
-        run.messages = updateLastAssistantMessage(run.messages, (message) => ({
-          ...message,
-          content:
-            typeof message.content === "string" && message.content.trim()
-              ? message.content
-              : "⚠️ **请求已中断**",
-          isError: true,
-          progress: completeBackendProgress(message.progress),
-          todos: cancelBackendTodos(message.todos),
-        }));
+        publishRunEvent(run, "aborted", { session_id: parsed.data.session_id, message: "请求已中断" }, false);
         const currentState = await sessionUiStateStore.read(
-          toSessionUiStateContext(sessionRecord),
+          toSessionScope(sessionRecord),
         );
-        await sessionUiStateStore.write(toSessionUiStateContext(sessionRecord), {
+        await sessionUiStateStore.write(toSessionScope(sessionRecord), {
           sessionId: sessionRecord.sessionId,
           isTitleManuallyEdited: currentState?.isTitleManuallyEdited ?? false,
-          messages: run.messages,
+          ...currentState,
+          messages: run.uiMessages?.() ?? run.messages,
         });
         for (const subscriber of run.subscribers) {
           subscriber.write("error", {
             session_id: parsed.data.session_id,
             message: "请求已中断",
+            status: "aborted",
           });
         }
         // The generation route emits its terminal Response after cleanup and

src/routes/chatInteractionRoutes.ts

@@ -1,3 +1,5 @@
+import { publishRunEvent } from "./chat-run-accumulator.js";
+import { toSessionScope } from "../sessions/session-scope.js";
 import { refreshSessionCredential } from "../product/credential-refresh.js";
 import { type Router } from "express";
 import { z } from "zod";
@@ -8,9 +10,7 @@ import { type OpencodeRuntimeAdapter } from "../runtime/opencode.js";
 import { SessionContextMismatchError, type SessionMetadataStore } from "../sessions/metadataStore.js";
 import { type SessionUiStateStore } from "../sessions/uiStateStore.js";
 import {
-  type ActiveRun,
-  toPermissionStatus,
-  updateLastAssistantPermission,
+  type ActiveRun, applyInteractionResponse,
 } from "./chatUiState.js";
 
 const permissionReplyPayloadSchema = z.object({
@@ -35,7 +35,6 @@ type RegisterInteractionRoutesOptions = {
   sessionUiStateStore: SessionUiStateStore;
 };
 
-const toSessionUiStateContext = (sessionId: string) => ({ sessionId });
 
 export const registerChatInteractionRoutes = (
   chatRouter: Router,
@@ -104,12 +103,13 @@ export const registerChatInteractionRoutes = (
       }
       const persistPermissionState = async () => {
         const currentState = await sessionUiStateStore.read(
-          toSessionUiStateContext(sessionRecord.sessionId),
+          toSessionScope(sessionRecord),
         );
-        await sessionUiStateStore.write(toSessionUiStateContext(sessionRecord.sessionId), {
+        await sessionUiStateStore.write(toSessionScope(sessionRecord), {
           sessionId: sessionRecord.sessionId,
           isTitleManuallyEdited: currentState?.isTitleManuallyEdited ?? false,
-          messages: run.messages,
+          ...currentState,
+          messages: run.uiMessages?.() ?? run.messages,
         });
       };
 
@@ -121,18 +121,10 @@ export const registerChatInteractionRoutes = (
           message: parsed.data.message,
         });
       } catch (error) {
-        run.messages = updateLastAssistantPermission(
-          run.messages,
-          requestId,
-          (permission) => ({
-            ...permission,
-            status: "error",
-            error:
-              error instanceof Error
-                ? error.message
-                : "failed to reply permission",
-          }),
-        );
+        publishRunEvent(run, "permission_response", {
+          session_id: sessionRecord.sessionId, request_id: requestId, status: "error",
+          error: error instanceof Error ? error.message : "failed to reply permission",
+        });
         await persistPermissionState().catch((persistError) => {
           logger.warn(
             { err: persistError, sessionId: sessionRecord.sessionId },
@@ -146,30 +138,15 @@ export const registerChatInteractionRoutes = (
         return;
       }
 
-      run.pendingPermissions.delete(requestId);
-      const status = toPermissionStatus(parsed.data.reply);
-      run.messages = updateLastAssistantPermission(
-        run.messages,
-        requestId,
-        (permission) => ({
-          ...permission,
-          status,
-          repliedAt: Date.now(),
-        }),
-      );
+      publishRunEvent(run, "permission_response", {
+        session_id: sessionRecord.sessionId, request_id: requestId, reply: parsed.data.reply,
+      });
       await persistPermissionState().catch((persistError) => {
         logger.warn(
           { err: persistError, sessionId: sessionRecord.sessionId },
           "failed to persist permission reply state",
         );
       });
-      for (const subscriber of run.subscribers) {
-        subscriber.write("permission_response", {
-          session_id: sessionRecord.sessionId,
-          request_id: requestId,
-          reply: parsed.data.reply,
-        });
-      }
 
       res.status(202).json({
         session_id: sessionRecord.sessionId,
@@ -219,23 +196,19 @@ export const registerChatInteractionRoutes = (
         }
       }
       // A host-confirmed reply remains authoritative after native forms are pruned.
-      const nativeStatus = confirmedStatus ? undefined : await runtime.getQuestionStatus({ sessionId: session.sessionId, requestId: canonicalId });
+      const form = confirmedStatus ? undefined : await runtime.getQuestion({ sessionId: session.sessionId, requestId: canonicalId });
+      const nativeStatus = form?.state.status ?? "missing";
       const status = confirmedStatus ?? (nativeStatus === "cancelled" ? "rejected" : nativeStatus === "missing" ? "invalidated" : nativeStatus!);
       const persist = async (nextStatus: string, answers?: string[][]) => {
-        const update = (messages: unknown[]) => messages.map((message) => {
-          if (!isRecord(message)) return message;
-          const questions = Array.isArray(message.questions) ? message.questions.map((q: unknown) => isRecord(q) && q.requestId === canonicalId ? { ...q, status: nextStatus, ...(answers ? { answers } : {}), error: undefined } : q) : undefined;
-          const parts = Array.isArray(message.parts) ? [...message.parts] : undefined;
-          if (parts && nextStatus !== "pending" && parts.some((part: unknown) => isRecord(part) && part.type === "data-question_request" && isRecord(part.data) && part.data.request_id === canonicalId)) {
-            const response = { type: "data-question_response", data: { session_id: session.sessionId, request_id: canonicalId, status: nextStatus, rejected: nextStatus === "rejected" || nextStatus === "invalidated", ...(answers ? { answers } : {}) } };
-            const index = parts.findIndex((part: unknown) => isRecord(part) && part.type === "data-question_response" && isRecord(part.data) && part.data.request_id === canonicalId);
-            if (index >= 0) parts[index] = { ...parts[index], data: { ...(isRecord(parts[index]) && isRecord(parts[index].data) ? parts[index].data : {}), ...response.data } }; else parts.push(response);
-          }
-          return { ...message, ...(questions ? { questions } : {}), ...(parts ? { parts } : {}) };
-        });
+        const response = {
+          session_id: session.sessionId, request_id: canonicalId, status: nextStatus,
+          rejected: nextStatus === "rejected" || nextStatus === "invalidated", ...(answers ? { answers } : {}),
+        };
         // Update the live projection before entering the same atomic persistence queue.
-        if (run) { run.messages = update(run.messages); if (nextStatus !== "pending") run.pendingQuestions.delete(canonicalId); }
-        await sessionUiStateStore.update(context, (latest) => ({ ...latest, messages: update(latest.messages) }));
+        if (run && nextStatus !== "pending") publishRunEvent(run, "question_response", response);
+        await sessionUiStateStore.update(context, (latest) => ({
+          ...latest, messages: applyInteractionResponse(latest.messages, "question_response", response),
+        }));
       };
       if (action === "status" || status !== "pending") {
         await persist(status);
@@ -243,10 +216,9 @@ export const registerChatInteractionRoutes = (
         return;
       }
       const answers = action === "reply" ? questionReplyPayloadSchema.parse(req.body).answers : undefined;
-      if (action === "reply") await runtime.replyQuestion({ sessionId: session.sessionId, requestId: canonicalId, answers: answers ?? [] });
+      if (action === "reply") await runtime.replyQuestion({ sessionId: session.sessionId, requestId: canonicalId, answers: answers ?? [], form: form! });
       else await runtime.rejectQuestion({ sessionId: session.sessionId, requestId: canonicalId });
       await persist(action === "reply" ? "answered" : "rejected", answers);
-      for (const subscriber of run?.subscribers ?? []) subscriber.write("question_response", { session_id: session.sessionId, request_id: canonicalId, ...(action === "reply" ? { answers } : { rejected: true }) });
       if (run && run.status !== "running" && !run.pendingPermissions.size && !run.pendingQuestions.size) activeRuns.delete(session.sessionId);
       res.status(202).json({ session_id: session.sessionId, request_id: canonicalId, ...(action === "reply" ? { answers } : { rejected: true }) });
     } catch (error) {

src/routes/chatPermissionPolicy.ts

@@ -1,5 +1,5 @@
 // Called only for native "asked" events. Explicit denials and host isolation
 // still run before this point; the selected round mode answers pending requests.
-export function canAutomaticallyApprove(mode: string, _action: string) {
-  return mode === "always";
+export function canAutomaticallyApprove(mode: string, action: string, backgroundSandboxPermissions = false) {
+  return mode === "always" || (backgroundSandboxPermissions && (action === "shell" || action === "edit"));
 }

src/routes/chatSession.ts

@@ -174,27 +174,6 @@ export const generateSessionTitle = async (
   }
 };
 
-export const getConversationTurnStats = async (
-  runtime: OpencodeRuntimeAdapter,
-  sessionId: string,
-) => {
-  const messages = await runtime.messages(sessionId, 12);
-  return messages.reduce(
-    (stats, message) => {
-      if (message.info.role === "user") {
-        stats.userMessageCount += 1;
-      } else if (message.info.role === "assistant") {
-        stats.assistantMessageCount += 1;
-      }
-      return stats;
-    },
-    {
-      userMessageCount: 0,
-      assistantMessageCount: 0,
-    },
-  );
-};
-
 export const buildPromptWithLearningContext = async (
   memoryStore: MemoryStore,
   actorKey: string,

src/routes/chatSessionRoutes.ts

@@ -1,3 +1,4 @@
+import { toSessionScope } from "../sessions/session-scope.js";
 import { registerChatTopicRoutes } from "./chat-topic-routes.js";
 import { matchHistoryText } from "../sessions/history-search.js";
 import { credentialRefreshCoordinator } from "../product/credential-refresh.js";
@@ -107,15 +108,51 @@ type RegisterChatSessionRoutesOptions = {
   sessionUiStateStore: SessionUiStateStore;
 };
 
-const toSessionUiStateContext = (sessionRecord: SessionRecord) => ({
-  sessionId: sessionRecord.sessionId,
-  actorKey: sessionRecord.actorKey,
-  projectKey: sessionRecord.projectKey,
-});
 
 const toSse = (event: string, data: Record<string, unknown>) =>
   `event: ${event}\ndata: ${JSON.stringify(data)}\n\n`;
 
+export async function runBackgroundTaskExecution(input: {
+  sessionId: string;
+  credential: ProductCredential;
+  model: string;
+  workflow?: string;
+  isRunning: () => boolean;
+}) {
+  const { sessionId, credential, model, workflow } = input;
+  const baseUrl = process.env.TJWATER_AGENT_INTERNAL_BASE_URL ?? `http://127.0.0.1:${config.PORT}`;
+  await fetch(new URL("/api/v1/responses", baseUrl), {
+    method: "POST",
+    headers: {
+      Authorization: credential.authorization,
+      "Content-Type": "application/json",
+      "X-Project-Id": credential.projectId,
+    },
+    body: JSON.stringify({
+      conversation: sessionId,
+      model,
+      stream: true,
+      input: buildTaskExecutionPrompt(workflow),
+    }),
+  }).then(async (response) => {
+    const reader = response.body?.getReader();
+    if (reader) {
+      while (!(await reader.read()).done) {
+        // Drain the stream without retaining the model response in memory.
+      }
+    }
+    if (!response.ok) {
+      if (!input.isRunning()) clearOperationalTaskLease(sessionId);
+      logger.error({ sessionId, status: response.status, executionContinues: input.isRunning() }, "background task execution failed");
+    }
+  }).catch((error) => {
+    // A lost response stream does not end the host-owned execution. Its route
+    // still renews/finalizes the lease and owns cleanup of the cached revision.
+    if (!input.isRunning()) clearOperationalTaskLease(sessionId);
+    logger.warn({ err: error, sessionId, executionContinues: input.isRunning() }, "background task response stream failed");
+  });
+}
+
 export const registerChatSessionRoutes = (
   chatRouter: Router,
   options: RegisterChatSessionRoutesOptions,
@@ -135,6 +172,12 @@ export const registerChatSessionRoutes = (
   const { activeRuns, lastRunStatuses } = runState;
   const getSessionRunStatus = runState.getStatus;
 
+  const readMessages = (record: SessionRecord, state: { messages: unknown[] } | null) => {
+    if (readPurpose(record) === "task_collaboration") return state?.messages ?? [];
+    const run = activeRuns.get(record.sessionId);
+    return run?.uiMessages?.() ?? run?.messages ?? state?.messages ?? [];
+  };
+
   const withInteractionReplies = async (record: SessionRecord, messages: unknown[]) => {
     if (!interactionRequestStore) return messages;
     const ids = new Set(messages.flatMap((message) => {
@@ -142,7 +185,7 @@ export const registerChatSessionRoutes = (
       const value = message as Record<string, unknown>;
       return value.role === "user" && typeof value.id === "string" ? [value.id] : [];
     }));
-    const replies = await interactionRequestStore.forMessages(toSessionUiStateContext(record), ids);
+    const replies = await interactionRequestStore.forMessages(toSessionScope(record), ids);
     return projectInteractionReplyMessages(messages, replies);
   };
 
@@ -151,7 +194,7 @@ export const registerChatSessionRoutes = (
       || !isGenericTaskCollaborationTitle(record.title)) return record;
     if ((!credential && !knownTaskTitle) || signal?.aborted) return record;
     try {
-      const state = await sessionUiStateStore.read(toSessionUiStateContext(record));
+      const state = await sessionUiStateStore.read(toSessionScope(record));
       if (state?.isTitleManuallyEdited) return record;
       let taskTitle = knownTaskTitle;
       if (!taskTitle && credential) {
@@ -165,7 +208,7 @@ export const registerChatSessionRoutes = (
         }
       }
       if (!taskTitle?.trim()) return record;
-      const latestState = await sessionUiStateStore.read(toSessionUiStateContext(record));
+      const latestState = await sessionUiStateStore.read(toSessionScope(record));
       if (latestState?.isTitleManuallyEdited) return record;
       return await sessionMetadataStore.touch(record, { title: taskTitle }, {
         preserveUpdatedAt: true, expectedTitle: record.title ?? "",
@@ -183,35 +226,8 @@ export const registerChatSessionRoutes = (
     workflow?: string,
   ) => {
     queueMicrotask(() => {
-      const baseUrl = process.env.TJWATER_AGENT_INTERNAL_BASE_URL ?? `http://127.0.0.1:${config.PORT}`;
-      void fetch(new URL("/api/v1/responses", baseUrl), {
-        method: "POST",
-        headers: {
-          Authorization: credential.authorization,
-          "Content-Type": "application/json",
-          "X-Project-Id": credential.projectId,
-        },
-        body: JSON.stringify({
-          conversation: record.sessionId,
-          model,
-          stream: true,
-          input: buildTaskExecutionPrompt(workflow),
-        }),
-      }).then(async (response) => {
-        const reader = response.body?.getReader();
-        if (reader) {
-          while (!(await reader.read()).done) {
-            // Drain the stream without retaining the model response in memory.
-          }
-        }
-        if (!response.ok) {
-          clearOperationalTaskLease(record.sessionId);
-          logger.error({ sessionId: record.sessionId, status: response.status }, "background task execution failed");
-        }
-      }).catch((error) => {
-        clearOperationalTaskLease(record.sessionId);
-        logger.error({ err: error, sessionId: record.sessionId }, "background task execution request failed");
-      });
+      void runBackgroundTaskExecution({ sessionId: record.sessionId, credential, model, workflow,
+        isRunning: () => activeRuns.get(record.sessionId)?.status === "running" });
     });
   };
 
@@ -283,7 +299,7 @@ export const registerChatSessionRoutes = (
       sessionId,
     );
     if (!record) return null;
-    const state = await sessionUiStateStore.read(toSessionUiStateContext(record));
+    const state = await sessionUiStateStore.read(toSessionScope(record));
     if (!state) return null;
     return { record, state, taskTitle };
   };
@@ -589,7 +605,7 @@ export const registerChatSessionRoutes = (
     const titled = await sessionMetadataStore.touch(record, { title: `${history.taskTitle} · 调试` });
     const messages = await withInteractionReplies(history.record, history.state.messages ?? []);
     await sessionUiStateStore.write(
-      toSessionUiStateContext(titled),
+      toSessionScope(titled),
       buildForkedSessionUiState({ messages }, {
         keepMessageCount: messages.length,
         targetSessionId: titled.sessionId,
@@ -757,8 +773,8 @@ export const registerChatSessionRoutes = (
     const searchable: Array<SessionRecord & { searchSnippet?: string }> = [];
     for (const record of records) {
       const titleMatches = (record.title ?? "新对话").toLocaleLowerCase().includes((query.data.q ?? "").toLocaleLowerCase());
-      const state = query.data.q && !titleMatches ? await sessionUiStateStore.read(toSessionUiStateContext(record)) : null;
-      const messages = activeRuns.get(record.sessionId)?.messages ?? state?.messages ?? [];
+      const state = query.data.q && !titleMatches ? await sessionUiStateStore.read(toSessionScope(record)) : null;
+      const messages = readMessages(record, state);
       searchable.push({ ...record, searchSnippet: query.data.q && !titleMatches ? matchHistoryText(messages, query.data.q) : undefined });
     }
     let page;
@@ -814,9 +830,8 @@ export const registerChatSessionRoutes = (
     const context = getLocalAgentContext(req);
     const record = await sessionMetadataStore.get(context, req.params.session_id);
     if (!record) { res.status(404).json({ message: "session not found" }); return; }
-    const state = await sessionUiStateStore.read(toSessionUiStateContext(record));
-    const messages = readPurpose(record) === "task_collaboration" ? state?.messages ?? []
-      : activeRuns.get(record.sessionId)?.messages ?? state?.messages ?? [];
+    const state = await sessionUiStateStore.read(toSessionScope(record));
+    const messages = readMessages(record, state);
     try {
       const page = sessionMessagePage(messages, { scope: historyScope([record.actorKey, record.projectKey, record.sessionId]), ...query.data });
       res.json({ ...page, messages: await withInteractionReplies(record, page.messages) });
@@ -857,10 +872,9 @@ export const registerChatSessionRoutes = (
     sessionRecord = await refreshCollaborationTitle(sessionRecord, getTrustedProductCredential(req));
 
     const state = await sessionUiStateStore.read(
-      toSessionUiStateContext(sessionRecord),
+      toSessionScope(sessionRecord),
     );
-    const messages = readPurpose(sessionRecord) === "task_collaboration" ? state?.messages ?? []
-      : activeRuns.get(sessionRecord.sessionId)?.messages ?? state?.messages ?? [];
+    const messages = readMessages(sessionRecord, state);
     const messagePayload = query.data.message_limit ? sessionMessagePage(messages, {
       scope: historyScope([sessionRecord.actorKey, sessionRecord.projectKey, sessionId]), limit: query.data.message_limit,
     }) : { messages };
@@ -915,9 +929,8 @@ export const registerChatSessionRoutes = (
     res.flushHeaders?.();
 
     const run = activeRuns.get(sessionRecord.sessionId);
-    const state = await sessionUiStateStore.read(toSessionUiStateContext(sessionRecord));
-    const messages = readPurpose(sessionRecord) === "task_collaboration" ? state?.messages ?? []
-      : run?.messages ?? state?.messages ?? [];
+    const state = await sessionUiStateStore.read(toSessionScope(sessionRecord));
+    const messages = readMessages(sessionRecord, state);
     const messagePayload = query.data.message_limit ? sessionMessagePage(messages, {
       scope: historyScope([sessionRecord.actorKey, sessionRecord.projectKey, sessionId]), limit: query.data.message_limit,
     }) : { messages };
@@ -991,11 +1004,11 @@ export const registerChatSessionRoutes = (
       title,
     });
     const state = await sessionUiStateStore.read(
-      toSessionUiStateContext(nextSessionRecord),
+      toSessionScope(nextSessionRecord),
     );
     if (state) {
       await sessionUiStateStore.write(
-        toSessionUiStateContext(nextSessionRecord),
+        toSessionScope(nextSessionRecord),
         {
           ...state,
           isTitleManuallyEdited:
@@ -1120,7 +1133,7 @@ export const registerChatSessionRoutes = (
       }
       const sourceState = sourceSessionRecord
         ? await sessionUiStateStore.read(
-            toSessionUiStateContext(sourceSessionRecord),
+            toSessionScope(sourceSessionRecord),
           )
         : null;
       const forkTitle = sourceSessionRecord?.title
@@ -1131,7 +1144,7 @@ export const registerChatSessionRoutes = (
         { title: forkTitle },
       );
       await sessionUiStateStore.write(
-        toSessionUiStateContext(titledTargetSessionRecord),
+        toSessionScope(titledTargetSessionRecord),
         buildForkedSessionUiState(sourceState, {
           keepMessageCount: parsed.data.keep_message_count,
           targetSessionId: nextSessionId,

src/routes/chatStream.ts

@@ -84,6 +84,7 @@ type StreamPromptOptions = {
   message: string;
   model?: SupportedModel;
   approvalMode?: ApprovalMode;
+  backgroundSandboxPermissions?: boolean;
   traceId?: string;
   projectId?: string;
   signal?: AbortSignal;
@@ -148,6 +149,7 @@ export const streamPromptResponse = async ({
   message,
   model,
   approvalMode = "request",
+  backgroundSandboxPermissions = false,
   traceId,
   projectId,
   signal,
@@ -481,7 +483,7 @@ export const streamPromptResponse = async ({
           patterns: event.properties.patterns,
           elapsedMs: Math.max(0, Date.now() - requestStartedAt),
         });
-        const autoApprove = canAutomaticallyApprove(approvalMode, event.properties.permission);
+        const autoApprove = canAutomaticallyApprove(approvalMode, event.properties.permission, backgroundSandboxPermissions);
         emitProgress({
           id: `permission-${event.properties.id}`,
           phase: "permission",
@@ -489,7 +491,9 @@ export const streamPromptResponse = async ({
           title: autoApprove ? "已自动允许权限请求" : "等待权限确认",
           detail:
             autoApprove
-              ? "当前模式为本轮自动批准，已允许本次请求，不保存后续轮次授权。"
+              ? approvalMode === "always"
+                ? "当前模式为本轮自动批准，已允许本次请求，不保存后续轮次授权。"
+                : "后台任务的会话内 Shell / 文件修改已自动批准；目录边界与明确拒绝规则仍生效。"
               : buildPermissionDetail(event),
         });
         if (autoApprove) {
@@ -529,7 +533,7 @@ export const streamPromptResponse = async ({
           resources: event.properties.resources,
           elapsedMs: Math.max(0, Date.now() - requestStartedAt),
         });
-        const autoApprove = canAutomaticallyApprove(approvalMode, event.properties.action);
+        const autoApprove = canAutomaticallyApprove(approvalMode, event.properties.action, backgroundSandboxPermissions);
         emitProgress({
           id: `permission-${event.properties.id}`,
           phase: "permission",
@@ -537,7 +541,9 @@ export const streamPromptResponse = async ({
           title: autoApprove ? "已自动允许权限请求" : "等待权限确认",
           detail:
             autoApprove
-              ? "当前模式为本轮自动批准，已允许本次请求，不保存后续轮次授权。"
+              ? approvalMode === "always"
+                ? "当前模式为本轮自动批准，已允许本次请求，不保存后续轮次授权。"
+                : "后台任务的会话内 Shell / 文件修改已自动批准；目录边界与明确拒绝规则仍生效。"
               : buildPermissionV2Detail(event),
         });
         if (autoApprove) {

src/routes/chatStreamRoute.ts

@@ -1,3 +1,4 @@
+import { toSessionScope } from "../sessions/session-scope.js";
 import type { TaskCalculationWaiter } from "../mcp/task-calculation-waiter.js";
 import { createResponsesProjection, responseRequestSchema, responsePrompt } from "../chat/responses-protocol.js";
 import { ResponseInputTracker, WaitingResponseInputQueue } from "../chat/response-inputs.js";
@@ -5,7 +6,7 @@ import { reconcileInteractionDelivery } from "../sessions/interaction-delivery-r
 import type { InteractionRequestStore } from "../sessions/interaction-request-store.js";
 import { renderInteractionAnswer, type InteractionRequest } from "../chat/interaction-request-contract.js";
 import { createInteractionReplyMessage } from "../chat/interaction-message-presentation.js";
-import { createAnswerStreamProjection } from "../chat/answer-stream-projection.js";
+import { createChatRunAccumulator, publishRunEvent } from "./chat-run-accumulator.js";
 import type { AgentMessageCoordinator } from "../chat/agent-message-coordinator.js";
 import { credentialRefreshCoordinator } from "../product/credential-refresh.js";
 import { type Router } from "express";
@@ -44,10 +45,10 @@ import {
   clearOperationalTaskLease,
   operationalTaskClient,
   releaseOperationalTaskCredential,
+  createScadaPresentationContinuation,
 } from "../product/operational-task-client.js";
 import { type SessionTranscriptStore } from "../sessions/transcriptStore.js";
 import { type SessionUiStateStore } from "../sessions/uiStateStore.js";
-import type { UIEnvelopePayload } from "../uiEnvelope/types.js";
 import { toActorKey, toProjectKey } from "../utils/fileStore.js";
 import {
   buildPromptWithLearningContext,
@@ -59,29 +60,14 @@ import {
 } from "./chatSession.js";
 import {
   collectTextContent,
-  type PermissionRequestPayload,
-  type QuestionRequestPayload,
   streamPromptResponse,
-  type TodoUpdatePayload,
 } from "./chatStream.js";
 import { type ChatRunState } from "./chatRunState.js";
 import {
   type ActiveRun,
-  type StreamSubscriber,
-  appendBackendToolArtifact,
-  appendBackendUiEnvelope,
-  cancelBackendTodos,
-  completeBackendProgress,
   createInitialStreamingMessages,
   isObjectRecord,
-  toFrontendPermission,
-  toPermissionStatus,
   updateLastAssistantMessage,
-  updateLastAssistantPermission,
-  updateLastAssistantQuestion,
-  upsertBackendProgress,
-  upsertBackendQuestion,
-  upsertBackendTodoUpdate,
 } from "./chatUiState.js";
 import {
   agentTriggerContextSchema,
@@ -106,11 +92,6 @@ const payloadSchema = z.object({
   }).strict().optional(),
 });
 
-const toSessionUiStateContext = (sessionRecord: SessionRecord) => ({
-  sessionId: sessionRecord.sessionId,
-  actorKey: sessionRecord.actorKey,
-  projectKey: sessionRecord.projectKey,
-});
 
 const runtimeHasConversation = async (
   runtime: OpencodeRuntimeAdapter,
@@ -311,7 +292,7 @@ export const registerChatStreamRoute = (
     let boundOperationalSessionId: string | undefined;
     let startingSessionId: string | undefined;
     let continuation: InteractionRequest | null = null;
-    let continuationScope: ReturnType<typeof toSessionUiStateContext> | undefined;
+    let continuationScope: ReturnType<typeof toSessionScope> | undefined;
     let waitingInteraction: InteractionRequest | null = null;
     try {
       const authContext = getLocalAgentContext(req);
@@ -365,7 +346,7 @@ export const registerChatStreamRoute = (
         res.status(400).json({ message: "Interaction continuation requires an existing conversation" }); return;
       }
       if (existingSessionRecord && interactionRequestStore) {
-        continuationScope = toSessionUiStateContext(existingSessionRecord);
+        continuationScope = toSessionScope(existingSessionRecord);
         if (input.tjwater.interaction_id) {
           continuation = await interactionRequestStore.get(continuationScope, input.tjwater.interaction_id);
           if (!continuation?.delivery || !["answered", "skipped"].includes(continuation.status) || continuation.delivery.status === "cancelled") {
@@ -523,7 +504,7 @@ export const registerChatStreamRoute = (
         sessionId: requestContext.clientSessionId,
       };
       const initialSessionState = await sessionUiStateStore.read(
-        toSessionUiStateContext(activeSessionRecord),
+        toSessionScope(activeSessionRecord),
       );
       const persistedUiMessages = toUiMessages(initialSessionState?.messages);
       if (!continuation && input.tjwater.client_message_id && persistedUiMessages.some((message) => message.id === input.tjwater.client_message_id)) {
@@ -551,7 +532,6 @@ export const registerChatStreamRoute = (
               ...visiblePersistedMessages,
               createFallbackUserUiMessage(promptText, input.tjwater.client_message_id),
             ];
-      let latestUiMessages = requestMessages;
       const baseMessages = toLegacyMessages(requestMessages);
       const recentTurns = await sessionTranscriptStore.getRecentTurns(historyContext, 8);
 
@@ -605,44 +585,28 @@ export const registerChatStreamRoute = (
       startingSessions.delete(activeSessionRecord.sessionId);
       startingSessionId = undefined;
       lastRunStatuses.set(clientSessionId, "running");
-      const sessionUiStateContext = toSessionUiStateContext(activeSessionRecord);
+      const sessionUiStateContext = toSessionScope(activeSessionRecord);
       const assistantUiMessageId = continuationAssistantId ?? `msg_${randomUUID().replaceAll("-", "")}`;
       setRuntimeSessionContext({ ...getRuntimeSessionContext(binding.sessionId)!, hostTurnId: wire.response.id, hostMessageId: assistantUiMessageId });
-      const syncLatestUiMessages = () => {
-        latestUiMessages = [
-          ...requestMessages,
-          {
-            id: assistantUiMessageId,
-            role: "assistant",
-            parts: assistantParts.map((part) => ({ ...part })),
-          } as UIMessage,
-        ];
-      };
-      const writeUiChunk = (chunk: UIMessageChunk) => {
-        // Persist canonical parts after disconnect; the wire emitter checks the socket.
-        wire!.write(chunk);
-      };
-      const projection = createAnswerStreamProjection({
-        messageId: assistantUiMessageId, sessionId: clientSessionId,
-        write: writeUiChunk, onChange: syncLatestUiMessages,
+      const accumulator = createChatRunAccumulator({
+        run: activeRun, messages: requestMessages, messageId: assistantUiMessageId, sessionId: clientSessionId,
+        collaboration: sessionPurpose === "task_collaboration", write: (chunk) => wire!.write(chunk),
+        onStatus: (status) => lastRunStatuses.set(clientSessionId, status),
       });
-      const assistantParts = projection.parts;
-      const writeTextDelta = projection.appendText;
-      const writeDataPart = projection.appendData;
-      const finishUiMessage = projection.finish;
+      const writeUiChunk = (chunk: UIMessageChunk) => wire!.write(chunk);
       writeUiChunk({ type: "start", messageId: assistantUiMessageId });
       let persistQueue = sessionUiStateStore.write(sessionUiStateContext, {
         executionPlans: executionPlanHistory,
         sessionId: activeSessionRecord.sessionId,
         isTitleManuallyEdited: initialSessionState?.isTitleManuallyEdited ?? false,
-        messages: sessionPurpose === "task_collaboration" ? toCollaborationMessages(latestUiMessages) : latestUiMessages,
+        messages: sessionPurpose === "task_collaboration" ? toCollaborationMessages(accumulator.uiMessages()) : accumulator.uiMessages(),
       });
       const queueSessionUiStatePersist = () => {
         const snapshot = {
           executionPlans: executionPlanHistory,
           sessionId: activeSessionRecord.sessionId,
           isTitleManuallyEdited: initialSessionState?.isTitleManuallyEdited ?? false,
-          messages: sessionPurpose === "task_collaboration" ? toCollaborationMessages(latestUiMessages) : latestUiMessages,
+          messages: sessionPurpose === "task_collaboration" ? toCollaborationMessages(accumulator.uiMessages()) : accumulator.uiMessages(),
         };
         persistQueue = persistQueue
           .catch((error) => {
@@ -654,36 +618,6 @@ export const registerChatStreamRoute = (
           .then(() => sessionUiStateStore.write(sessionUiStateContext, snapshot));
         return persistQueue;
       };
-      const primarySubscriber: StreamSubscriber = {
-        write: (event, data) => {
-          if (event === "token") {
-            writeTextDelta(typeof data.content === "string" ? data.content : "");
-            return;
-          }
-          if (event === "done") {
-            finishUiMessage("stop");
-            return;
-          }
-          if (event === "error") {
-            writeUiChunk({
-              type: "error",
-              errorText:
-                typeof data.message === "string"
-                  ? data.message
-                  : "Agent stream failed",
-            });
-            finishUiMessage("error");
-            return;
-          }
-          writeDataPart(event, data);
-        },
-        close: () => {
-          if (!res.writableEnded && !res.destroyed) {
-            res.end();
-          }
-        },
-      };
-      activeRun.subscribers.add(primarySubscriber);
       let taskArtifactPublishQueue: Promise<unknown> = Promise.resolve();
 
       const publish = (event: string, data: Record<string, unknown>) => {
@@ -697,131 +631,11 @@ export const registerChatStreamRoute = (
                     : assistantUiMessageId,
               }
             : data;
-        if (event === "token") {
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            content: `${typeof message.content === "string" ? message.content : ""}${typeof data.content === "string" ? data.content : ""}`,
-            isError: false,
-          }));
-        } else if (event === "final_answer") {
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message, content: typeof data.content === "string" ? data.content : message.content,
-          }));
-        } else if (event === "progress") {
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            progress: upsertBackendProgress(message.progress, data),
-          }));
-        } else if (event === "done") {
-          activeRun.status = data.reason === "waiting_input" ? "waiting_input" : "completed";
-          lastRunStatuses.set(clientSessionId, activeRun.status);
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            content:
-              typeof message.content === "string" && message.content.trim()
-                ? message.content
-                : data.reason === "waiting_input" ? "等待你的回答。" : "Agent 已完成处理，但没有生成文本回答。请查看过程记录，或换个更具体的问题重试。",
-            progress: completeBackendProgress(message.progress),
-          }));
-        } else if (event === "error") {
-          activeRun.status = activeRun.status === "aborted" ? "aborted" : "error";
-          lastRunStatuses.set(clientSessionId, activeRun.status);
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            content:
-              typeof message.content === "string" && message.content.trim()
-                ? message.content
-                : `⚠️ **错误：** ${typeof data.message === "string" ? data.message : "unknown error"}`,
-            isError: true,
-            progress: completeBackendProgress(message.progress),
-            todos: cancelBackendTodos(message.todos),
-          }));
-        } else if (event === "permission_request") {
-          const payload = data as PermissionRequestPayload;
-          activeRun.pendingPermissions.set(payload.request_id, payload);
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            permissions: [
-              ...(Array.isArray(message.permissions) ? message.permissions : []),
-              toFrontendPermission(payload),
-            ],
-          }));
-        } else if (event === "permission_response") {
-          const requestId =
-            typeof data.request_id === "string" ? data.request_id : undefined;
-          const reply =
-            data.reply === "once" || data.reply === "always" || data.reply === "reject"
-              ? data.reply
-              : undefined;
-          if (requestId && reply) {
-            activeRun.pendingPermissions.delete(requestId);
-            activeRun.messages = updateLastAssistantPermission(
-              activeRun.messages,
-              requestId,
-              (permission) => ({
-                ...permission,
-                status: toPermissionStatus(reply),
-                repliedAt: Date.now(),
-              }),
-            );
-          }
-        } else if (event === "question_request") {
-          const payload = data as QuestionRequestPayload;
-          let shouldTrackQuestion = true;
-          if (payload.tool?.callID) {
-            if (payload.request_id !== payload.tool.callID) {
-              activeRun.pendingQuestions.delete(payload.tool.callID);
-            } else {
-              const hasActionableQuestion = [...activeRun.pendingQuestions.values()].some(
-                (question) =>
-                  question.tool?.callID === payload.tool?.callID &&
-                  question.request_id !== payload.tool?.callID,
-              );
-              if (hasActionableQuestion) {
-                activeRun.messages = updateLastAssistantMessage(
-                  activeRun.messages,
-                  (message) => ({
-                    ...message,
-                    questions: upsertBackendQuestion(message.questions, payload),
-                  }),
-                );
-                shouldTrackQuestion = false;
-              }
-            }
-          }
-          if (shouldTrackQuestion) {
-            activeRun.pendingQuestions.set(payload.request_id, payload);
-            activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-              ...message,
-              questions: upsertBackendQuestion(message.questions, payload),
-            }));
-          }
-        } else if (event === "question_response") {
-          const requestId =
-            typeof data.request_id === "string" ? data.request_id : undefined;
-          if (requestId) {
-            activeRun.pendingQuestions.delete(requestId);
-            activeRun.messages = updateLastAssistantQuestion(
-              activeRun.messages,
-              requestId,
-              (question) => ({
-                ...question,
-                status: data.rejected === true ? "rejected" : "answered",
-                repliedAt: Date.now(),
-                answers: Array.isArray(data.answers) ? data.answers : question.answers,
-                error: undefined,
-              }),
-            );
-          }
-        } else if (event === "execution_plan") {
+        if (event === "execution_plan") {
           try {
             const snapshot = createExecutionPlanSnapshot(data, [{ executionPlans: executionPlanHistory }], clientSessionId);
             executionPlanHistory = [...executionPlanHistory, snapshot];
             subscriberData = snapshot;
-            activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-              ...message,
-              executionPlans: [...(Array.isArray(message.executionPlans) ? message.executionPlans : []), snapshot],
-            }));
             if (activeSessionRecord.taskId && executionPlanNeedsTaskPublish(data)) {
               taskArtifactPublishQueue = taskArtifactPublishQueue
                 .catch(() => undefined)
@@ -843,23 +657,6 @@ export const registerChatStreamRoute = (
             });
             return;
           }
-        } else if (event === "todo_update") {
-          const payload = data as TodoUpdatePayload;
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            todos: upsertBackendTodoUpdate(message.todos, payload),
-          }));
-        } else if (event === "tool_call") {
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            artifacts: appendBackendToolArtifact(message.artifacts, data),
-          }));
-        } else if (event === "ui_envelope") {
-          const payload = data as UIEnvelopePayload;
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            uiEnvelopes: appendBackendUiEnvelope(message.uiEnvelopes, payload),
-          }));
         }
 
         const hiddenCollaborationEvent = sessionPurpose === "task_collaboration" && [
@@ -869,12 +666,7 @@ export const registerChatStreamRoute = (
           "ui_envelope",
           "execution_plan",
         ].includes(event);
-        if (!hiddenCollaborationEvent) {
-          for (const subscriber of activeRun.subscribers) {
-            subscriber.write(event, subscriberData);
-          }
-        }
-        activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({ ...message, id: assistantUiMessageId, parts: assistantParts.map((part) => ({ ...part })) }));
+        publishRunEvent(activeRun, event, subscriberData, !hiddenCollaborationEvent);
         void queueSessionUiStatePersist().catch((error) => {
           logger.warn({ err: error, sessionId: clientSessionId }, "failed to persist chat stream state");
         });
@@ -900,6 +692,7 @@ export const registerChatStreamRoute = (
       let taskHeartbeatPromise: Promise<void> | undefined;
       let taskLeaseFailure: Error | undefined;
       let taskRunFinalized = false;
+      const continueScadaPresentation = createScadaPresentationContinuation();
       const stopTaskHeartbeat = async () => {
         taskHeartbeatActive = false;
         if (taskHeartbeat) clearInterval(taskHeartbeat);
@@ -944,10 +737,7 @@ export const registerChatStreamRoute = (
               : typeof generation === "number" && generation > 0 ? generation : null,
             report_revision: reportRef.success ? reportRef.data.revision : null,
           };
-          const part = { type: "data-task_context" as const, data: reference };
-          assistantParts.push(part);
-          writeUiChunk(part);
-          syncLatestUiMessages();
+          accumulator.apply("task_context", reference);
         }
         const preparedMessage = taskContext
           ? [
@@ -970,11 +760,8 @@ export const registerChatStreamRoute = (
         const messaging = getTrustedProductCredential(req) ? agentMessages : undefined;
         messaging?.start(activeSessionRecord);
         const inputTracker = new ResponseInputTracker(runtime, binding.sessionId, (receipt) => {
-          if (receipt.status === "delivered" && !requestMessages.some((message) => message.id === receipt.id)) {
-            requestMessages.push({ id: receipt.id, role: "user", parts: [{ type: "text", text: receipt.text }] } as UIMessage);
-            const tail = activeRun.messages.at(-1);
-            activeRun.messages = [...activeRun.messages.slice(0, -1), { id: receipt.id, role: "user", content: receipt.text }, ...(tail ? [tail] : [])];
-            syncLatestUiMessages();
+          if (receipt.status === "delivered") {
+            accumulator.appendInput({ id: receipt.id, role: "user", parts: [{ type: "text", text: receipt.text }] } as UIMessage, receipt.text);
           }
           publish("user_input", { session_id: clientSessionId, ...receipt });
         });
@@ -997,6 +784,7 @@ export const registerChatStreamRoute = (
           message: preparedMessage,
           model: parsed.data.model,
           approvalMode: parsed.data.approval_mode,
+          backgroundSandboxPermissions: sessionPurpose === "task_execution",
           traceId: requestContext.traceId,
           projectId: requestContext.projectId,
           signal: abortController.signal,
@@ -1012,7 +800,7 @@ export const registerChatStreamRoute = (
             if (messaging && (messaging.hasInputThisTurn(binding.sessionId) || !await messaging.closeInteractive(activeSessionRecord))) return false;
             return inputTracker.canClose();
           },
-          beforeIdle: messaging || (sessionPurpose === "task_execution" && waitTaskCalculations) ? async () => {
+          beforeIdle: messaging || sessionPurpose === "task_execution" ? async () => {
             if (sessionPurpose !== "task_execution") return messaging ? messaging.closeInteractive(activeSessionRecord) : true;
             if (await messaging?.flush(binding.sessionId)) return false;
             const calculationResume = await waitTaskCalculations?.(binding.sessionId, abortController.signal);
@@ -1032,6 +820,8 @@ export const registerChatStreamRoute = (
               if (task.lifecycle_status === "failed") throw new Error("Server rejected incomplete investigation artifacts");
               return true;
             } catch (error) {
+              const continuation = continueScadaPresentation(error);
+              if (continuation) return continuation;
               if (error && typeof error === "object" && "code" in error && error.code === "PENDING_AGENT_MESSAGES") {
                 await messaging?.flush(binding.sessionId);
                 return false;
@@ -1124,14 +914,14 @@ export const registerChatStreamRoute = (
           const assistantMessage = [...messages]
             .reverse()
             .find((message) => message.info.role === "assistant");
-          const assistantText = readUiMessageText(latestUiMessages.at(-1)) || collectTextContent(assistantMessage?.parts ?? []);
+          const assistantText = readUiMessageText(accumulator.uiMessages().at(-1)) || collectTextContent(assistantMessage?.parts ?? []);
           const latestSessionRecord =
             (await sessionMetadataStore.get(
               { actorKey, projectId, projectKey, userId },
               activeSessionRecord.sessionId,
             )) ?? activeSessionRecord;
           const latestSessionState = await sessionUiStateStore.read(
-            toSessionUiStateContext(latestSessionRecord),
+            toSessionScope(latestSessionRecord),
           );
           const existingSessionTitle = latestSessionRecord.title;
           let sessionTitle = existingSessionTitle;
@@ -1228,29 +1018,13 @@ export const registerChatStreamRoute = (
         await taskArtifactPublishQueue.catch(() => undefined);
         unregisterFrontendActionSink?.();
         if (abortController.signal.aborted && !taskLeaseFailure) {
-          activeRun.messages = updateLastAssistantMessage(activeRun.messages, (message) => ({
-            ...message,
-            content:
-              typeof message.content === "string" && message.content.trim()
-                ? message.content
-                : "⚠️ **请求已中断**",
-            isError: true,
-            progress: completeBackendProgress(message.progress),
-            todos: cancelBackendTodos(message.todos),
-          }));
-          if (!projection.finished) {
-            writeUiChunk({
-              type: "error",
-              errorText: "请求已中断",
-            });
-            finishUiMessage("error");
-          }
+          publishRunEvent(activeRun, "aborted", { session_id: clientSessionId, message: "请求已中断" });
           void queueSessionUiStatePersist().catch((error) => {
             logger.warn({ err: error, sessionId: clientSessionId }, "failed to persist aborted chat stream state");
           });
         }
-        if (!projection.finished) {
-          finishUiMessage(activeRun.status === "error" ? "error" : "stop");
+        if (!accumulator.finished) {
+          publishRunEvent(activeRun, activeRun.status === "error" ? "error" : "done", { session_id: clientSessionId });
         }
         await queueSessionUiStatePersist().catch((error) => {
           logger.warn({ err: error, sessionId: clientSessionId }, "failed to persist chat stream state");

src/routes/chatUiState.ts

@@ -15,6 +15,8 @@ export type StreamSubscriber = {
 };
 
 export type ActiveRun = {
+  applyEvent?: (event: string, data: Record<string, unknown>) => void;
+  uiMessages?: () => unknown[];
   inputs?: ResponseInputTracker;
   clientSessionId: string;
   controller: AbortController;
@@ -175,43 +177,50 @@ export const updateLastAssistantMessage = (
   return messages;
 };
 
-export const updateLastAssistantPermission = (
-  messages: unknown[],
-  requestId: string,
-  updater: (permission: Record<string, unknown>) => Record<string, unknown>,
-) =>
-  updateLastAssistantMessage(messages, (message) => {
-    const permissions = Array.isArray(message.permissions)
-      ? message.permissions
-      : [];
-    return {
-      ...message,
-      permissions: permissions.map((permission) =>
-        isObjectRecord(permission) && permission.requestId === requestId
-          ? updater(permission)
-          : permission,
-      ),
-    };
-  });
-
-export const updateLastAssistantQuestion = (
-  messages: unknown[],
-  requestId: string,
-  updater: (question: Record<string, unknown>) => Record<string, unknown>,
-) =>
-  updateLastAssistantMessage(messages, (message) => {
-    const questions = Array.isArray(message.questions)
-      ? message.questions
-      : [];
-    return {
-      ...message,
-      questions: questions.map((question) =>
-        isObjectRecord(question) && question.requestId === requestId
-          ? updater(question)
-          : question,
-      ),
-    };
+/** Replies belong to the assistant that requested input, including earlier turns. */
+export function applyInteractionResponse<T>(
+  messages: T[],
+  event: "permission_response" | "question_response",
+  data: Record<string, unknown>,
+): T[] {
+  const requestId = data.request_id;
+  if (typeof requestId !== "string") return messages;
+  const permission = event === "permission_response";
+  const field = permission ? "permissions" : "questions";
+  const requestType = permission ? "data-permission_request" : "data-question_request";
+  let changed = false;
+  const next = messages.map((message) => {
+    if (!isObjectRecord(message) || message.role !== "assistant") return message;
+    const entries = Array.isArray(message[field]) ? message[field] as unknown[] : undefined;
+    const parts = Array.isArray(message.parts) ? [...message.parts] : undefined;
+    const ownsRequest = entries?.some((entry) => isObjectRecord(entry) && entry.requestId === requestId)
+      || parts?.some((part) => isObjectRecord(part) && part.type === requestType
+        && isObjectRecord(part.data) && part.data.request_id === requestId);
+    if (!ownsRequest) return message;
+    changed = true;
+    const updated = entries?.map((entry) => {
+      if (!isObjectRecord(entry) || entry.requestId !== requestId) return entry;
+      return permission ? {
+        ...entry, status: data.status === "error" ? "error" : toPermissionStatus(data.reply as PermissionReply),
+        error: data.status === "error" ? data.error : undefined, repliedAt: Date.now(),
+      } : {
+        ...entry, status: typeof data.status === "string" ? data.status : data.rejected === true ? "rejected" : "answered",
+        ...(Array.isArray(data.answers) ? { answers: data.answers } : {}), error: undefined, repliedAt: Date.now(),
+      };
+    });
+    if (parts && data.status !== "pending") {
+      const type = `data-${event}`;
+      const index = parts.findIndex((part) => isObjectRecord(part) && part.type === type
+        && isObjectRecord(part.data) && part.data.request_id === requestId);
+      const previous = index >= 0 && isObjectRecord(parts[index]) ? parts[index] : undefined;
+      const part = { ...previous, type, data: { ...(isObjectRecord(previous?.data) ? previous.data : {}), ...data } };
+      if (index >= 0) parts[index] = part;
+      else parts.push(part);
+    }
+    return { ...message, ...(updated ? { [field]: updated } : {}), ...(parts ? { parts } : {}) };
   });
+  return changed ? next : messages;
+}
 
 const getToolArtifactKind = (tool: string): ToolArtifactKind => {
   if (tool === "present_view") {

src/routes/sandboxToolBridge.ts

@@ -8,6 +8,8 @@ import { isTrustedInternalBridgeRequest } from "../product/internal-bridge-auth.
 import { getRuntimeSessionContext } from "../runtime/sessionContext.js";
 import { executeSandboxCommand } from "../sandbox/landlockSandbox.js";
 import { setSandboxOwnership } from "../runtime/conversationWorkspace.js";
+import type { OpencodeRuntimeAdapter } from "../runtime/opencode.js";
+import { nativeToolOutputDirectory, stageSessionToolOutputs } from "../sandbox/tool-output.js";
 
 export const sandboxInput = z.object({
   session_id: z.string().min(1).max(128),
@@ -37,6 +39,7 @@ export function isShellCommandDenied(command: string): boolean {
 export function registerSandboxToolBridge(app: Express, options: {
   internalToken: string;
   runtime: {
+    messages: OpencodeRuntimeAdapter["messages"];
     ensureSessionWorkspace(sessionId: string): Promise<string>;
     approveSandboxShell(input: { sessionId: string; command: string; description?: string; callId: string; messageId: string }, signal: AbortSignal): Promise<void>;
   };
@@ -61,6 +64,15 @@ export function registerSandboxToolBridge(app: Express, options: {
         sessionId: context.sessionId, command: parsed.data.command, description: parsed.data.description,
         callId: parsed.data.call_id, messageId: parsed.data.message_id,
       }, controller.signal);
+      if (parsed.data.command.includes(`${nativeToolOutputDirectory()}/`)) {
+        const files = await stageSessionToolOutputs(parsed.data.command, workspace, context.sessionId,
+          await options.runtime.messages(context.sessionId, 100));
+        if (files.length) {
+          res.json({ outcome: "requires_session_path", files,
+            detail: "命令尚未执行。当前会话的完整工具结果已复制到会话目录。请用返回的 shell_path 重新调用 Shell；relative_path 相对于会话 workspace，shell_path 相对于 Shell 的 files/ 工作目录。" });
+          return;
+        }
+      }
       const result = await executeSandboxCommand(workspace, parsed.data.command, parsed.data.timeout, controller.signal);
       const files: Partial<Record<"stdout_file" | "stderr_file", string>> = {};
       for (const stream of ["stdout", "stderr"] as const) {

src/routes/task-bridge-context.ts

@@ -0,0 +1,16 @@
+import type { Request, Response } from "express";
+import { isTrustedInternalBridgeRequest } from "../product/internal-bridge-auth.js";
+import { getRuntimeSessionContext } from "../runtime/sessionContext.js";
+
+export function readTaskBridgeContext(req: Request, token: string, allowQuery = false) {
+  if (!isTrustedInternalBridgeRequest(req, token)) return null;
+  const runtimeSessionId = typeof req.body?.session_id === "string" ? req.body.session_id.trim()
+    : allowQuery && typeof req.query.session_id === "string" ? req.query.session_id.trim() : "";
+  const context = runtimeSessionId ? getRuntimeSessionContext(runtimeSessionId) : null;
+  return context?.taskId ? { context, runtimeSessionId, taskId: context.taskId } : null;
+}
+
+export function replyTaskBridgeError(res: Response, error: unknown, fallback: string) {
+  const status = error && typeof error === "object" && "status" in error && typeof error.status === "number" ? error.status : 502;
+  res.status(status).json({ message: error instanceof Error ? error.message : fallback });
+}

src/routes/task-command-bridge.ts

@@ -0,0 +1,65 @@
+import type { Express } from "express";
+import { operationalTaskClient, expressAccessRequestSchema, proposedTaskActionSchema, humanTaskEvidenceCommandSchema, type OperationalTaskClient } from "../product/operational-task-client.js";
+import { readTaskBridgeContext, replyTaskBridgeError } from "./task-bridge-context.js";
+
+export function registerTaskCommandBridge(app: Express, options: {
+  internalToken: string;
+  client?: Pick<OperationalTaskClient, "requestDataAccess" | "proposeAction" | "addHumanEvidence">;
+}) {
+  const client = options.client ?? operationalTaskClient;
+  app.post("/internal/operational-task/access-requests", async (req, res) => {
+    const bridge = readTaskBridgeContext(req, options.internalToken, true);
+    if (!bridge || bridge.context.purpose !== "task_execution") {
+      res.status(403).json({ message: "task execution context required" });
+      return;
+    }
+    const parsed = expressAccessRequestSchema.safeParse(req.body?.request);
+    if (!parsed.success) {
+      res.status(400).json({ message: "invalid access request" });
+      return;
+    }
+    try {
+      res.json(await client.requestDataAccess(bridge.runtimeSessionId, bridge.taskId, {
+        ...parsed.data, sourceSessionId: bridge.context.clientSessionId,
+      }));
+    } catch (error) {
+      replyTaskBridgeError(res, error, "access request failed");
+    }
+  });
+
+  app.post("/internal/operational-task/actions", async (req, res) => {
+    const bridge = readTaskBridgeContext(req, options.internalToken, true);
+    if (!bridge) {
+      res.status(403).json({ message: "operational task context unavailable" });
+      return;
+    }
+    const parsed = proposedTaskActionSchema.safeParse(req.body?.action);
+    if (!parsed.success) {
+      res.status(400).json({ message: "invalid proposed action", detail: parsed.error.flatten() });
+      return;
+    }
+    try {
+      res.json(await client.proposeAction(bridge.runtimeSessionId, bridge.taskId, parsed.data));
+    } catch (error) {
+      replyTaskBridgeError(res, error, "task action proposal failed");
+    }
+  });
+
+  app.post("/internal/operational-task/human-evidence", async (req, res) => {
+    const bridge = readTaskBridgeContext(req, options.internalToken, true);
+    if (!bridge || bridge.context.purpose !== "task_collaboration") {
+      res.status(403).json({ message: "human evidence requires a task collaboration session" });
+      return;
+    }
+    const parsed = humanTaskEvidenceCommandSchema.safeParse(req.body?.command);
+    if (!parsed.success) {
+      res.status(400).json({ message: "invalid human evidence", detail: parsed.error.flatten() });
+      return;
+    }
+    try {
+      res.json(await client.addHumanEvidence(bridge.runtimeSessionId, bridge.taskId, parsed.data));
+    } catch (error) {
+      replyTaskBridgeError(res, error, "human evidence publish failed");
+    }
+  });
+}

src/routes/task-publication-bridge.ts

@@ -4,7 +4,7 @@ import { z } from "zod";
 import { isTrustedInternalBridgeRequest } from "../product/internal-bridge-auth.js";
 import { operationalTaskClient, type OperationalTaskClient, taskArtifactBridgeSchema } from "../product/operational-task-client.js";
 import { taskPresentationBridgeSchema } from "../product/task-presentation.js";
-import { getRuntimeSessionContext } from "../runtime/sessionContext.js";
+import { readTaskBridgeContext, replyTaskBridgeError } from "./task-bridge-context.js";
 
 const artifactsInputSchema = taskArtifactBridgeSchema.and(z.object({ session_id: z.string().trim().min(1).max(128) }));
 
@@ -19,12 +19,12 @@ export function registerTaskPublicationBridge(app: Express, options: {
         res.status(403).json({ message: "forbidden" });
         return;
       }
-      const sessionId = typeof req.body?.session_id === "string" ? req.body.session_id.trim() : "";
-      const context = sessionId ? getRuntimeSessionContext(sessionId) : null;
-      if (!context?.taskId) {
+      const bridge = readTaskBridgeContext(req, options.internalToken);
+      if (!bridge) {
         res.status(403).json({ message: "operational task context unavailable" });
         return;
       }
+      const { context, runtimeSessionId: sessionId, taskId } = bridge;
       if ((kind === "presentation" || req.body?.progress !== undefined) && context.purpose !== "task_execution") {
         res.status(403).json({ message: "task execution context required" });
         return;
@@ -36,7 +36,7 @@ export function registerTaskPublicationBridge(app: Express, options: {
             res.status(400).json({ message: "invalid task presentation", detail: parsed.error.flatten() });
             return;
           }
-          res.json(await client.publishPresentation(sessionId, context.taskId, {
+          res.json(await client.publishPresentation(sessionId, taskId, {
             requestId: parsed.data.request_id,
             sourceSessionId: context.clientSessionId,
             command: parsed.data.command,
@@ -47,7 +47,7 @@ export function registerTaskPublicationBridge(app: Express, options: {
             res.status(400).json({ message: "invalid task artifacts", detail: parsed.error.flatten() });
             return;
           }
-          res.json(await client.publishArtifacts(sessionId, context.taskId, {
+          res.json(await client.publishArtifacts(sessionId, taskId, {
             requestId: parsed.data.request_id,
             sourceSessionId: context.clientSessionId,
             evidence: parsed.data.evidence,
@@ -57,8 +57,7 @@ export function registerTaskPublicationBridge(app: Express, options: {
           }));
         }
       } catch (error) {
-        const status = error && typeof error === "object" && "status" in error && typeof error.status === "number" ? error.status : 502;
-        res.status(status).json({ message: error instanceof Error ? error.message : `task ${kind} publish failed` });
+        replyTaskBridgeError(res, error, `task ${kind} publish failed`);
       }
     });
   }

src/runtime/opencode.ts

@@ -2,7 +2,7 @@ import { LOCAL_QUERY_TOOL_IDS, PRODUCT_MCP_TOOL_IDS, PRODUCT_MCP_WRITE_TOOL_IDS,
 import { assertWebSearchReady } from "./web-search-check.js";
 import { allowedQueryTools } from "./query-mcp-policy.js";
 import { setTimeout as delayAbortable } from "node:timers/promises";
-import { isMessageNotFoundError, isSessionNotFoundError, type OpenCodeClient as OpencodeClient } from "@opencode/client";
+import { isMessageNotFoundError, isSessionNotFoundError, type FormDetail, type OpenCodeClient as OpencodeClient } from "@opencode/client";
 import { createRuntimeClient, startOpencode2 } from "./opencode2-server.js";
 import { formAnswers, normalizeRuntimeMessage, Opencode2EventNormalizer } from "./opencode2-events.js";
 import { existsSync, readFileSync } from "node:fs";
@@ -381,13 +381,6 @@ export class OpencodeRuntimeAdapter {
     await rm(directory, { recursive: true, force: true });
   }
 
-  async sendPrompt(sessionId: string, text: string) {
-    await this.prompt(sessionId, text);
-    // 当前 SDK 响应风格下，prompt() 本身不会直接返回完整 assistant parts，
-    // 所以这里紧跟一次 messages() 回读，给上层路由统一消费。
-    return this.messages(sessionId);
-  }
-
   async generateText(prompt: string, model?: RuntimeModelOverride, signal?: AbortSignal) {
     const client = await this.ensureClient();
     const selected = model ?? parseModelReference(config.OPENCODE_MODEL);
@@ -733,19 +726,18 @@ export class OpencodeRuntimeAdapter {
     return client.permission.reply({ sessionID: options.sessionId, requestID: options.requestId, decision: options.reply, message: options.message });
   }
 
-  async replyQuestion(options: { requestId: string; sessionId?: string; answers: QuestionAnswers }) {
+  async replyQuestion(options: { requestId: string; sessionId: string; answers: QuestionAnswers; form: FormDetail }) {
     if (!options.sessionId) throw new Error("OpenCode 2 form replies require sessionId");
     const client = await this.ensureClient();
-    const form = await client.session.form.get({ sessionID: options.sessionId, formID: options.requestId });
-    return client.session.form.reply({ sessionID: options.sessionId, formID: options.requestId, answer: formAnswers(form, options.answers) });
+    return client.session.form.reply({ sessionID: options.sessionId, formID: options.requestId, answer: formAnswers(options.form, options.answers) });
   }
 
-  async getQuestionStatus(options: { requestId: string; sessionId: string }): Promise<"pending" | "answered" | "cancelled" | "missing"> {
+  async getQuestion(options: { requestId: string; sessionId: string }): Promise<FormDetail | null> {
     const client = await this.ensureClient();
-    try { return (await client.session.form.get({ sessionID: options.sessionId, formID: options.requestId })).state.status; }
+    try { return await client.session.form.get({ sessionID: options.sessionId, formID: options.requestId }); }
     catch (error) {
       const tag = error && typeof error === "object" && "_tag" in error ? error._tag : undefined;
-      if (tag === "FormNotFoundError") return "missing";
+      if (tag === "FormNotFoundError") return null;
       throw error;
     }
   }

src/sandbox/tool-output.ts

@@ -0,0 +1,58 @@
+import { constants } from "node:fs";
+import { open, realpath } from "node:fs/promises";
+import { createHash, randomUUID } from "node:crypto";
+import { homedir } from "node:os";
+import { basename, dirname, join, resolve } from "node:path";
+import type { OpencodeRuntimeAdapter } from "../runtime/opencode.js";
+import { SANDBOX_GID, SANDBOX_UID } from "../runtime/conversationWorkspace.js";
+import { openArtifactDirectory } from "../mcp/artifact-files.js";
+
+export const nativeToolOutputDirectory = () => resolve(
+  process.env.XDG_DATA_HOME ?? join(homedir(), ".local", "share"), "opencode", "tool-output",
+);
+
+// Only native truncation metadata from this session authorizes a source file.
+// Text supplied by the model or a tool response is never an ownership proof.
+export async function stageSessionToolOutputs(
+  command: string, workspace: string, sessionId: string,
+  messages: Awaited<ReturnType<OpencodeRuntimeAdapter["messages"]>>,
+) {
+  const sources = new Set<string>();
+  const root = nativeToolOutputDirectory();
+  for (const message of messages) for (const part of message.parts) {
+    if (part.type !== "tool" || part.state.status !== "completed") continue;
+    const metadata = part.state.metadata;
+    const path = metadata?.outputPath;
+    if (metadata?.truncated === true && typeof path === "string" && command.includes(path)
+        && dirname(path) === root && /^tool_[a-zA-Z0-9]+$/.test(basename(path))) sources.add(path);
+  }
+  if (!sources.size) return [];
+  const canonicalRoot = await realpath(root);
+  const directory = await openArtifactDirectory(workspace, sessionId);
+  const files: Array<{ source_path: string; relative_path: string; shell_path: string; size: number; sha256: string }> = [];
+  let remaining = 128 * 1024 * 1024;
+  try {
+    for (const path of sources) {
+      if (await realpath(path) !== join(canonicalRoot, basename(path))) throw new Error("Unsafe tool output path");
+      const source = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+      let bytes: Buffer;
+      try {
+        const stat = await source.stat();
+        if (!stat.isFile() || stat.size > remaining) throw new Error("Tool output staging budget exceeded");
+        bytes = await source.readFile();
+        if (bytes.length > remaining) throw new Error("Tool output staging budget exceeded");
+        remaining -= bytes.length;
+      } finally { await source.close(); }
+      const filename = `tool-output-${randomUUID()}.txt`;
+      const destination = await open(`/proc/self/fd/${directory.fd}/${filename}`,
+        constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+      try {
+        await destination.writeFile(bytes);
+        if (typeof process.getuid === "function" && process.getuid() === 0) await destination.chown(SANDBOX_UID, SANDBOX_GID);
+      } finally { await destination.close(); }
+      files.push({ source_path: path, relative_path: `files/${filename}`, shell_path: filename, size: bytes.length,
+        sha256: createHash("sha256").update(bytes).digest("hex") });
+    }
+  } finally { await directory.close(); }
+  return files;
+}

src/server.ts

@@ -37,12 +37,7 @@ import { createAgentMessageQuery, registerAgentMessageBridge } from "./routes/ag
 import { FrontendActionCoordinator, FrontendActionError } from "./frontendAction/coordinator.js";
 import { opencodeRuntime } from "./runtime/opencode.js";
 import { getRuntimeSessionContext } from "./runtime/sessionContext.js";
-import {
-  operationalTaskClient,
-  expressAccessRequestSchema,
-  humanTaskEvidenceCommandSchema,
-  proposedTaskActionSchema,
-} from "./product/operational-task-client.js";
+import { registerTaskCommandBridge } from "./routes/task-command-bridge.js";
 import { isTrustedInternalBridgeRequest } from "./product/internal-bridge-auth.js";
 
 const app = express();
@@ -53,9 +48,9 @@ const sessionWorkspaces = new SessionWorkspaceStore(config.CONVERSATION_WORKSPAC
 const sessionMetadataStore = new SessionMetadataStore(undefined, sessionWorkspaces);
 const answerViewStateStore = new AnswerViewStateStore(sessionWorkspaces);
 const interactionRequestStore = new InteractionRequestStore(sessionWorkspaces);
-const sessionUiStateStore = new SessionUiStateStore(undefined, sessionWorkspaces);
+const sessionUiStateStore = new SessionUiStateStore(sessionWorkspaces);
 const memoryStore = new MemoryStore();
-const sessionTranscriptStore = new SessionTranscriptStore(undefined, sessionWorkspaces);
+const sessionTranscriptStore = new SessionTranscriptStore(sessionWorkspaces);
 const learningOrchestrator = new LearningOrchestrator(
   opencodeRuntime,
   memoryStore,
@@ -112,80 +107,7 @@ app.post("/internal/frontend-actions/request", async (req, res) => {
   }
 });
 
-const readOperationalTaskBridgeContext = (req: express.Request) => {
-  if (!isTrustedInternalBridgeRequest(req, internalToken)) return null;
-  const runtimeSessionId = typeof req.body?.session_id === "string"
-    ? req.body.session_id.trim()
-    : typeof req.query.session_id === "string"
-      ? req.query.session_id.trim()
-      : "";
-  const context = runtimeSessionId ? getRuntimeSessionContext(runtimeSessionId) : null;
-  return context?.taskId ? { context, runtimeSessionId, taskId: context.taskId } : null;
-};
-
-app.post("/internal/operational-task/access-requests", async (req, res) => {
-  const bridge = readOperationalTaskBridgeContext(req);
-  if (!bridge || bridge.context.purpose !== "task_execution") {
-    res.status(403).json({ message: "task execution context required" });
-    return;
-  }
-  const parsed = expressAccessRequestSchema.safeParse(req.body?.request);
-  if (!parsed.success) {
-    res.status(400).json({ message: "invalid access request" });
-    return;
-  }
-  try {
-    res.json(await operationalTaskClient.requestDataAccess(bridge.runtimeSessionId, bridge.taskId, {
-      ...parsed.data, sourceSessionId: bridge.context.clientSessionId,
-    }));
-  } catch (error) {
-    const status = error && typeof error === "object" && "status" in error && typeof error.status === "number"
-      ? error.status : 502;
-    res.status(status).json({ message: error instanceof Error ? error.message : "access request failed" });
-  }
-});
-
-app.post("/internal/operational-task/actions", async (req, res) => {
-  const bridge = readOperationalTaskBridgeContext(req);
-  if (!bridge) {
-    res.status(403).json({ message: "operational task context unavailable" });
-    return;
-  }
-  const parsed = proposedTaskActionSchema.safeParse(req.body?.action);
-  if (!parsed.success) {
-    res.status(400).json({ message: "invalid proposed action", detail: parsed.error.flatten() });
-    return;
-  }
-  try {
-    res.json(await operationalTaskClient.proposeAction(bridge.runtimeSessionId, bridge.taskId, parsed.data));
-  } catch (error) {
-    const status = error && typeof error === "object" && "status" in error && typeof error.status === "number"
-      ? error.status
-      : 502;
-    res.status(status).json({ message: error instanceof Error ? error.message : "task action proposal failed" });
-  }
-});
-
-app.post("/internal/operational-task/human-evidence", async (req, res) => {
-  const bridge = readOperationalTaskBridgeContext(req);
-  if (!bridge || bridge.context.purpose !== "task_collaboration") {
-    res.status(403).json({ message: "human evidence requires a task collaboration session" });
-    return;
-  }
-  const parsed = humanTaskEvidenceCommandSchema.safeParse(req.body?.command);
-  if (!parsed.success) {
-    res.status(400).json({ message: "invalid human evidence", detail: parsed.error.flatten() });
-    return;
-  }
-  try {
-    res.json(await operationalTaskClient.addHumanEvidence(bridge.runtimeSessionId, bridge.taskId, parsed.data));
-  } catch (error) {
-    const status = error && typeof error === "object" && "status" in error && typeof error.status === "number"
-      ? error.status
-      : 502;
-    res.status(status).json({ message: error instanceof Error ? error.message : "human evidence publish failed" });
-  }
-});
+registerTaskCommandBridge(app, { internalToken });
 
 app.get("/health", async (_req, res) => {
   try {
@@ -247,10 +169,8 @@ const bootstrap = async () => {
     logger.info(migrated, "session records migrated to owned workspaces; legacy sources archived");
   }
   await Promise.all([
-    sessionUiStateStore.initialize(),
     learningOrchestrator.initialize(),
     memoryStore.initialize(),
-    sessionTranscriptStore.initialize(),
   ]);
 };
 

src/sessions/session-scope.ts

@@ -0,0 +1,8 @@
+import type { SessionWorkspaceContext } from "../runtime/conversationWorkspace.js";
+
+/** Always derive persistence scope from a host-validated session record. */
+export const toSessionScope = (record: SessionWorkspaceContext): SessionWorkspaceContext => ({
+  sessionId: record.sessionId,
+  actorKey: record.actorKey,
+  projectKey: record.projectKey,
+});

src/sessions/transcriptStore.ts

@@ -1,10 +1,5 @@
-import { join } from "node:path";
-
 import { config } from "../config.js";
 import {
-  atomicWriteJson,
-  ensureDirectory,
-  listJsonFiles,
   readJsonFile,
   toStableId,
 } from "../utils/fileStore.js";
@@ -50,11 +45,7 @@ const DEFAULT_SEARCH_MAX_QUERY_CHARS = 240;
 export class SessionTranscriptStore {
   private readonly writeQueues = new Map<string, Promise<void>>();
 
-  constructor(private readonly baseDir = config.SESSION_TRANSCRIPT_STORAGE_DIR, private readonly workspaces?: SessionWorkspaceStore) {}
-
-  async initialize() {
-    if (!this.workspaces) await ensureDirectory(this.baseDir);
-  }
+  constructor(private readonly workspaces: SessionWorkspaceStore) {}
 
   async appendTurn(
     context: SessionTranscriptContext,
@@ -66,7 +57,7 @@ export class SessionTranscriptStore {
   ) {
     const key = this.filePath(context);
     return this.serializeWrite(key, async () => {
-      if (this.workspaces) await this.workspaces.ensure(this.workspaceContext(context));
+      await this.workspaces.ensure(this.workspaceContext(context));
       // 同一会话的多次写入串行化，防止流式结束和 UI 同步同时写同一个 transcript。
       const transcript = (await this.readTranscript(context)) ?? {
         actorKey: context.actorKey,
@@ -148,10 +139,8 @@ export class SessionTranscriptStore {
       turns: projectTurnsForFork(sourceTranscript?.turns ?? [], keepMessageCount),
       updatedAt: timestamp,
     };
-    if (this.workspaces) {
-      await this.workspaces.ensure(this.workspaceContext(targetContext));
-      await this.workspaces.validate(this.workspaceContext(targetContext), "transcript.json");
-    }
+    await this.workspaces.ensure(this.workspaceContext(targetContext));
+    await this.workspaces.validate(this.workspaceContext(targetContext), "transcript.json");
     await this.persist(targetContext, nextTranscript);
     return nextTranscript;
   }
@@ -168,7 +157,7 @@ export class SessionTranscriptStore {
     }
     const queryTokens = normalizedQuery.split(/\s+/).filter(Boolean);
     const hits: SessionSearchHit[] = [];
-    const files = this.workspaces ? await this.workspaces.list(context, "transcript.json") : await listJsonFiles(this.baseDir);
+    const files = await this.workspaces.list(context, "transcript.json");
     for (const file of files) {
       const transcript = await readJsonFile<SessionTranscriptRecord>(file);
       if (!transcript) {
@@ -205,7 +194,7 @@ export class SessionTranscriptStore {
   }
 
   private async readTranscript(context: SessionTranscriptContext) {
-    if (this.workspaces && !await this.workspaces.validate(this.workspaceContext(context), "transcript.json")) return null;
+    if (!await this.workspaces.validate(this.workspaceContext(context), "transcript.json")) return null;
     const record = await readJsonFile<SessionTranscriptRecord>(this.filePath(context));
     if (record && (record.actorKey !== context.actorKey || record.projectKey !== context.projectKey ||
       (record.clientSessionId || record.sessionId) !== (context.clientSessionId || context.sessionId))) throw new Error("chat transcript ownership mismatch");
@@ -213,16 +202,11 @@ export class SessionTranscriptStore {
   }
 
   private filePath(context: SessionTranscriptContext) {
-    if (this.workspaces) return this.workspaces.path(this.workspaceContext(context), "transcript.json");
-    return join(
-      this.baseDir,
-      `${context.actorKey}__${context.projectKey}__${context.sessionId}.json`,
-    );
+    return this.workspaces.path(this.workspaceContext(context), "transcript.json");
   }
 
   private async persist(context: SessionTranscriptContext, transcript: SessionTranscriptRecord) {
-    if (this.workspaces) await this.workspaces.writeRecord(this.workspaceContext(context), "transcript.json", transcript);
-    else await atomicWriteJson(this.filePath(context), transcript);
+    await this.workspaces.writeRecord(this.workspaceContext(context), "transcript.json", transcript);
   }
 
   private workspaceContext(context: SessionTranscriptContext) {

src/sessions/uiStateStore.ts

@@ -1,13 +1,9 @@
-import { join } from "node:path";
+import type { SessionWorkspaceContext } from "../runtime/conversationWorkspace.js";
 
-import { config } from "../config.js";
 import { type SessionWorkspaceStore } from "./workspace-store.js";
 import {
-  atomicWriteJson,
-  ensureDirectory,
   readJsonFile,
   removeFileIfExists,
-  slugify,
 } from "../utils/fileStore.js";
 
 export type SessionUiStateRecord = {
@@ -17,56 +13,39 @@ export type SessionUiStateRecord = {
   executionPlans?: Record<string, unknown>[];
 };
 
-type SessionUiStateContext = {
-  sessionId: string;
-  actorKey?: string;
-  projectKey?: string;
-};
+type SessionUiStateContext = SessionWorkspaceContext;
 
 export class SessionUiStateStore {
-  constructor(private readonly baseDir = config.SESSION_UI_STATE_STORAGE_DIR, private readonly workspaces?: SessionWorkspaceStore) {}
-
-  async initialize() {
-    if (!this.workspaces) await ensureDirectory(this.baseDir);
-  }
+  constructor(private readonly workspaces: SessionWorkspaceStore) {}
 
   async read(context: SessionUiStateContext) {
-    if (this.workspaces && !await this.workspaces.validate(this.workspaceContext(context), "messages.json")) return null;
+    if (!await this.workspaces.validate(this.workspaceContext(context), "messages.json")) return null;
     return await readJsonFile<SessionUiStateRecord>(this.filePath(context));
   }
 
   async write(context: SessionUiStateContext, state: SessionUiStateRecord) {
     if (state.sessionId !== context.sessionId) throw new Error("chat state session mismatch");
-    if (this.workspaces) {
-      await this.workspaces.ensure(this.workspaceContext(context));
-      await this.workspaces.validate(this.workspaceContext(context), "messages.json");
-    }
-    if (this.workspaces) await this.workspaces.writeRecord(this.workspaceContext(context), "messages.json", state);
-    else await atomicWriteJson(this.filePath(context), state);
+    await this.workspaces.writeRecord(this.workspaceContext(context), "messages.json", state);
     return state;
   }
 
   async update(context: SessionUiStateContext, change: (state: SessionUiStateRecord) => SessionUiStateRecord) {
-    if (this.workspaces) return this.workspaces.updateRecord(this.workspaceContext(context), "messages.json", async ({ current }) => {
+    return this.workspaces.updateRecord(this.workspaceContext(context), "messages.json", async ({ current }) => {
       const state = current as SessionUiStateRecord | null;
       if (!state || state.sessionId !== context.sessionId || !Array.isArray(state.messages)) throw new Error("chat state unavailable");
       const next = change(state);
       if (next.sessionId !== context.sessionId) throw new Error("chat state session mismatch");
       return { result: next, value: next };
     });
-    const state = await this.read(context);
-    if (!state) throw new Error("chat state unavailable");
-    return this.write(context, change(state));
   }
 
   async remove(context: SessionUiStateContext) {
-    if (this.workspaces && !await this.workspaces.validate(this.workspaceContext(context), "messages.json")) return;
+    if (!await this.workspaces.validate(this.workspaceContext(context), "messages.json")) return;
     await removeFileIfExists(this.filePath(context));
   }
 
   private filePath(context: SessionUiStateContext) {
-    if (this.workspaces) return this.workspaces.path(this.workspaceContext(context), "messages.json");
-    return join(this.baseDir, `${slugify(context.sessionId)}.json`);
+    return this.workspaces.path(this.workspaceContext(context), "messages.json");
   }
 
   private workspaceContext(context: SessionUiStateContext) {

tests/chat/answer-ui.test.ts

@@ -99,11 +99,11 @@ describe("locally rendered answers", () => {
     try {
       const owner = { actorKey: "actor-answer", projectKey: "project-answer", sessionId: "answer-session" };
       const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
-      const store = new SessionUiStateStore(join(root, "legacy"), workspaces);
+      const store = new SessionUiStateStore(workspaces);
       const parts: UIMessage["parts"] = [{ type: "text", text: "演练：" }, { type: "data-answer_ui", id: "pressure", data: parseAnswerUiInput(input) }, { type: "text", text: "仍待核验。" }];
       const messages = [{ id: "a", role: "assistant", parts }];
       await store.write(owner, { sessionId: owner.sessionId, messages });
-      const restored = new SessionUiStateStore(join(root, "legacy"), new SessionWorkspaceStore(workspaces.root));
+      const restored = new SessionUiStateStore(new SessionWorkspaceStore(workspaces.root));
       expect((await restored.read(owner))?.messages).toEqual(messages);
       expect(await restored.read({ ...owner, actorKey: "actor-other" })).toBeNull();
       expect(await restored.read({ ...owner, projectKey: "project-other" })).toBeNull();

tests/fixtures/chart-publication-cases.json

@@ -0,0 +1,992 @@
+[
+  {
+    "name": "zero and sparse historical data",
+    "accepted": true,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "old mixed charts are read only",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "line",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "missing history timestamps",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "missing observed timestamp",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            null,
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "timestamp on a missing value",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            "2026-07-09T08:00:00+08:00",
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "wrong projected slot",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:30:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "mixed historical dates",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-10T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "same day history",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "future history",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-17T08:15:00+08:00",
+            "2026-07-17T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "duplicate slots",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:00",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "date appended axis",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "07-16 08:00",
+        "07-16 08:15",
+        "07-16 08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "inconsistent slot precision",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "bars mixed with comparison",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "bar",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "no historical series",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "no current observations",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            null,
+            null,
+            null
+          ],
+          "sample_times": [
+            null,
+            null,
+            null
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "missing samples with missing timestamps",
+    "accepted": true,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            null,
+            28,
+            30
+          ],
+          "sample_times": [
+            null,
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "UTC spelling preserves projected instant",
+    "accepted": true,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T00:15:00Z",
+            "2026-07-09T00:30:00Z"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "ordinary line",
+    "accepted": true,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "line",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "合成读数",
+          "data": [
+            0,
+            null,
+            30
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "ordinary bar",
+    "accepted": true,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "bar",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "合成读数",
+          "data": [
+            0,
+            null,
+            30
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "midnight rollover keeps one window",
+    "accepted": true,
+    "chart": {
+      "title": "跨午夜同期对比",
+      "chart_type": "time_comparison",
+      "x_data": [
+        "23:45",
+        "00:00"
+      ],
+      "series": [
+        {
+          "name": "当前",
+          "type": "line",
+          "data": [
+            0,
+            25
+          ],
+          "sample_times": [
+            "2026-07-16T23:45:00+08:00",
+            "2026-07-17T00:00:00+08:00"
+          ]
+        },
+        {
+          "name": "历史",
+          "type": "scatter",
+          "data": [
+            26,
+            27
+          ],
+          "sample_times": [
+            "2026-07-15T23:45:00+08:00",
+            "2026-07-16T00:00:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "microseconds are not aligned",
+    "accepted": false,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00.000001+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "fraction beyond Python microsecond precision",
+    "accepted": true,
+    "chart": {
+      "title": "P1 合成压力七日对照（m）",
+      "chart_type": "time_comparison",
+      "x_axis_name": "时间",
+      "y_axis_name": "压力（m）",
+      "x_data": [
+        "08:00",
+        "08:15",
+        "08:30"
+      ],
+      "series": [
+        {
+          "name": "P1 当前 2026-07-16",
+          "type": "line",
+          "data": [
+            0,
+            28,
+            30
+          ],
+          "sample_times": [
+            "2026-07-16T08:00:00.0000001+08:00",
+            "2026-07-16T08:15:00+08:00",
+            "2026-07-16T08:30:00+08:00"
+          ]
+        },
+        {
+          "name": "P1 2026-07-09",
+          "type": "scatter",
+          "data": [
+            null,
+            32,
+            33
+          ],
+          "sample_times": [
+            null,
+            "2026-07-09T08:15:00+08:00",
+            "2026-07-09T08:30:00+08:00"
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "calendar overflow",
+    "accepted": false,
+    "chart": {
+      "title": "calendar overflow",
+      "chart_type": "time_comparison",
+      "x_data": [
+        "07:45"
+      ],
+      "series": [
+        {
+          "name": "当前",
+          "type": "line",
+          "data": [
+            1
+          ],
+          "sample_times": [
+            "9999-12-31T23:45:00Z"
+          ]
+        },
+        {
+          "name": "历史缺测",
+          "type": "scatter",
+          "data": [
+            null
+          ],
+          "sample_times": [
+            null
+          ]
+        }
+      ]
+    }
+  },
+  {
+    "name": "calendar underflow",
+    "accepted": false,
+    "chart": {
+      "title": "calendar underflow",
+      "chart_type": "time_comparison",
+      "x_data": [
+        "08:00"
+      ],
+      "series": [
+        {
+          "name": "当前",
+          "type": "line",
+          "data": [
+            1
+          ],
+          "sample_times": [
+            "0001-01-01T00:00:00+23:59"
+          ]
+        },
+        {
+          "name": "历史缺测",
+          "type": "scatter",
+          "data": [
+            null
+          ],
+          "sample_times": [
+            null
+          ]
+        }
+      ]
+    }
+  }
+]

tests/fixtures/unified-presentation.jsonl

@@ -0,0 +1,14 @@
+{"record_type":"presentation","command":{"action":"locate_features","layer":"scada","feature_ids":["P1"]}}
+{"record_type":"presentation","command":{"action":"zoom_to_map","center":[121.48,31.1],"zoom":14}}
+{"record_type":"presentation","command":{"action":"highlight_features","layer":"scada","feature_ids":["P1"],"effect":"pulse"}}
+{"record_type":"presentation","command":{"action":"open_chart","chart_id":"fixture-pressure-P1","evidence_refs":["dev:synthetic"],"chart":{"title":"P1 合成压力七日对照（m）","chart_type":"time_comparison","x_axis_name":"时间","y_axis_name":"压力（m）","x_data":["08:00","08:15","08:30"],"series":[{"name":"P1 当前 2026-07-16","type":"line","data":[32,28,30],"sample_times":["2026-07-16T08:00:00+08:00","2026-07-16T08:15:00+08:00","2026-07-16T08:30:00+08:00"]},{"name":"P1 2026-07-09","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-09T08:15:00+08:00","2026-07-09T08:30:00+08:00"]},{"name":"P1 2026-07-10","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-10T08:15:00+08:00","2026-07-10T08:30:00+08:00"]},{"name":"P1 2026-07-11","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-11T08:15:00+08:00","2026-07-11T08:30:00+08:00"]},{"name":"P1 2026-07-12","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-12T08:15:00+08:00","2026-07-12T08:30:00+08:00"]},{"name":"P1 2026-07-13","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-13T08:15:00+08:00","2026-07-13T08:30:00+08:00"]},{"name":"P1 2026-07-14","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-14T08:15:00+08:00","2026-07-14T08:30:00+08:00"]},{"name":"P1 2026-07-15","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-15T08:15:00+08:00","2026-07-15T08:30:00+08:00"]}]}}}
+{"record_type":"presentation","command":{"action":"open_chart","chart_id":"fixture-pressure-P2","evidence_refs":["dev:synthetic"],"chart":{"title":"P2 合成压力七日对照（m）","chart_type":"time_comparison","x_axis_name":"时间","y_axis_name":"压力（m）","x_data":["08:00","08:15","08:30"],"series":[{"name":"P2 当前 2026-07-16","type":"line","data":[31,27,29],"sample_times":["2026-07-16T08:00:00+08:00","2026-07-16T08:15:00+08:00","2026-07-16T08:30:00+08:00"]},{"name":"P2 2026-07-09","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-09T08:15:00+08:00","2026-07-09T08:30:00+08:00"]},{"name":"P2 2026-07-10","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-10T08:15:00+08:00","2026-07-10T08:30:00+08:00"]},{"name":"P2 2026-07-11","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-11T08:15:00+08:00","2026-07-11T08:30:00+08:00"]},{"name":"P2 2026-07-12","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-12T08:15:00+08:00","2026-07-12T08:30:00+08:00"]},{"name":"P2 2026-07-13","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-13T08:15:00+08:00","2026-07-13T08:30:00+08:00"]},{"name":"P2 2026-07-14","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-14T08:15:00+08:00","2026-07-14T08:30:00+08:00"]},{"name":"P2 2026-07-15","type":"scatter","data":[null,32,33],"sample_times":[null,"2026-07-15T08:15:00+08:00","2026-07-15T08:30:00+08:00"]}]}}}
+{"record_type":"presentation","command":{"action":"set_overlay","overlay_id":"fixture-area","title":"合成空间样例","mode":"geometry","evidence_id":"dev:synthetic","data":{"type":"FeatureCollection","features":[{"type":"Feature","properties":{"origin":"synthetic"},"geometry":{"type":"Point","coordinates":[121.48,31.1]}}]}}}
+{"record_type":"presentation","command":{"action":"render_scada_analysis","items":[{"device_id":"P1","level":"high"}]}}
+{"record_type":"ui_block","evidence_refs":[],"block":{"version":"answer-ui@1","block_id":"fixture-summary","phase":"final","fallback_text":"合成候选对比，仅供展示测试。","spec":{"root":"table","elements":{"table":{"type":"Table","props":{"title":"合成候选对比","columns":["候选","说明"],"rows":[["DEMO-PIPE-01","仅供展示测试"],["DEMO-PIPE-02","未执行定位分析"]]},"children":[]}}}}}
+{"record_type":"candidate","origin":"synthetic","source_evidence_refs":[],"element_id":"DEMO-PIPE-01","rank":1,"status":"example_only"}
+{"record_type":"presentation","command":{"action":"close_chart","chart_id":"fixture-pressure-P1"}}
+{"record_type":"presentation","command":{"action":"close_chart","chart_id":"fixture-pressure-P2"}}
+{"record_type":"presentation","command":{"action":"clear_overlay","overlay_id":"fixture-area"}}
+{"record_type":"presentation","command":{"action":"clear_highlights"}}
+{"record_type":"presentation","command":{"action":"clear_scada_analysis"}}

tests/frontendAction/chart-publication.test.ts

@@ -0,0 +1,31 @@
+import { expect, it } from "bun:test";
+import { readFileSync } from "node:fs";
+import cases from "../fixtures/chart-publication-cases.json" with { type: "json" };
+import presentView from "../../.opencode/tools/present_view.js";
+import { taskPublicationCommandSchema } from "../../.opencode/tools/task-publication-schema.js";
+import { taskPresentationCommandSchema } from "../../src/product/task-presentation.js";
+import { createViewCommandSchema, safeChartInput } from "../../src/frontendAction/command.js";
+import { FrontendActionCoordinator } from "../../src/frontendAction/coordinator.js";
+
+const schemas = [presentView.args.command, taskPublicationCommandSchema, taskPresentationCommandSchema,
+  createViewCommandSchema({ publication: false, validateCharts: true })];
+
+it.each(cases)("matches Frontend and Server chart publication: $name", ({ chart, accepted }) => {
+  const command = { action: "open_chart", chart_id: "comparison", evidence_refs: ["dev:synthetic"], chart };
+  for (const schema of schemas)
+    expect(schema.safeParse(command).success).toBe(accepted);
+  expect(() => new FrontendActionCoordinator().request({ sessionId: "synthetic", toolCallId: "case", command }))
+    .toThrow(accepted ? "no active browser sink" : "invalid view command");
+});
+
+it("keeps historical mixed charts structurally readable", () => {
+  expect(safeChartInput.safeParse(cases.find((item) => item.name === "old mixed charts are read only")!.chart).success).toBe(true);
+});
+
+it("accepts all exported commands in both host and native publication validators", () => {
+  const examples = readFileSync(new URL("../fixtures/unified-presentation.jsonl", import.meta.url), "utf8");
+  for (const record of examples.trim().split("\n").map((line) => JSON.parse(line))) {
+    if (record.record_type !== "presentation") continue;
+    for (const schema of schemas) expect(schema.safeParse(record.command).success).toBe(true);
+  }
+});

tests/frontendAction/command.test.ts

@@ -35,9 +35,10 @@ describe("unified view commands", () => {
   });
   it("passes aligned historical scatter points through native and publication contracts", () => {
     const command = { action: "open_chart", chart_id: "pressure-comparison", evidence_refs: ["E1"], chart: {
-      title: "压力七天对比", chart_type: "line", y_axis_name: "压力（m）",
+      title: "压力七天对比", chart_type: "time_comparison", y_axis_name: "压力（m）",
       x_data: ["19:30", "19:45", "20:00"], series: [
-        { name: "当前", type: "line", data: [32, null, 31] },
+        { name: "当前", type: "line", data: [32, null, 31],
+          sample_times: ["2026-06-14T19:30:00+08:00", null, "2026-06-14T20:00:00+08:00"] },
         { name: "前一天", type: "scatter", data: [null, 32, 33],
           sample_times: [null, "2026-06-13T19:45:00+08:00", "2026-06-13T20:00:00+08:00"] },
       ],

tests/integration/mcp-query-smoke.ts

@@ -68,6 +68,7 @@ try {
     if (response.isError) throw new Error(`Extended tool failed through merged MCP: ${name}`);
   }
   if (!requests.includes("server/discover") || !requests.includes("tools/call") || requests.includes("initialize") || requests.includes("GET")) throw new Error("Transport used unexpected protocol requests");
+  if (requests.filter((method) => method === "tools/list").length !== 1) throw new Error("Business queries fetched the catalog again after startup");
   if (grants.join(",") !== "client_credentials,urn:ietf:params:oauth:grant-type:token-exchange") throw new Error("OAuth grants were not validated");
   console.log(`PASS: local MCP ${QUERY_MCP_TOOL_IDS.length}-tool discovery, real Server schemas, OAuth discovery, resource-bound grants, host binding, extended query and revocation over MCP HTTP`);
 } finally {

tests/product/investigationReferenceContract.test.ts

@@ -0,0 +1,87 @@
+import { describe, expect, it } from "bun:test";
+import express from "express";
+
+import { tool } from "../../.opencode/tool.js";
+import publishProgress from "../../.opencode/tools/publish_task_progress.js";
+import type { OperationalTaskClient } from "../../src/product/operational-task-client.js";
+import { investigationNodeAnnotations } from "../../src/product/investigation-node-state.js";
+import { registerTaskPublicationBridge } from "../../src/routes/task-publication-bridge.js";
+import { removeRuntimeSessionContext, setRuntimeSessionContext } from "../../src/runtime/sessionContext.js";
+
+const native = tool.schema.object(publishProgress.args);
+
+describe("investigation reference contract", () => {
+  it("advertises five optional annotations to the model without execution identities or Mermaid", () => {
+    const schema = tool.schema.toJSONSchema(native, { io: "input" });
+    const progress = schema.properties!.progress as {
+      properties: Record<string, {
+        properties: { nodes: { items: { properties: { status: { anyOf: Array<{ enum?: unknown[] }> } }; required?: string[] } } };
+      }>;
+    };
+    const node = progress.properties.graph_update.properties.nodes.items;
+    const statuses = node.properties.status.anyOf.flatMap((variant) => variant.enum ?? []);
+    expect(statuses).toEqual([...investigationNodeAnnotations]);
+    expect(node.required).not.toContain("status");
+    expect(Object.keys(schema.properties!)).toEqual(["request_id", "progress"]);
+    expect(Object.keys(progress.properties)).toEqual(["summary", "graph_update"]);
+  });
+
+  it("transports a native graph update and text-only update through the trusted task bridge", async () => {
+    const runtimeSessionId = "reference-contract-native-session";
+    const taskId = "50000000-0000-4000-8000-000000000031";
+    const token = "reference-contract-test-token";
+    const published: unknown[][] = [];
+    setRuntimeSessionContext({
+      sessionId: runtimeSessionId, clientSessionId: "reference-contract-client", actorKey: "test-actor",
+      projectKey: "test-project", traceId: "test", taskId, purpose: "task_execution",
+    });
+    const app = express();
+    app.use(express.json());
+    registerTaskPublicationBridge(app, { internalToken: token, client: {
+      publishArtifacts: async (...args: unknown[]) => {
+        published.push(args);
+        return { progress_revision: published.length };
+      },
+    } as unknown as Pick<OperationalTaskClient, "publishArtifacts" | "publishPresentation"> });
+    const server = app.listen(0, "127.0.0.1");
+    await new Promise<void>((resolve) => server.once("listening", resolve));
+    const baseUrl = `http://127.0.0.1:${(server.address() as { port: number }).port}`;
+    const oldToken = process.env.AGENT_INTERNAL_TOKEN;
+    const oldBaseUrl = process.env.TJWATER_AGENT_INTERNAL_BASE_URL;
+    process.env.AGENT_INTERNAL_TOKEN = token;
+    process.env.TJWATER_AGENT_INTERNAL_BASE_URL = baseUrl;
+    try {
+      const requestId = "60000000-0000-4000-8000-000000000031";
+      const progress = { summary: "整理已有路线与结果", graph_update: {
+        nodes: investigationNodeAnnotations.map((status, index) => ({
+          node_id: `step_${index}`, label: `参考步骤 ${index}`, status,
+          ...(status === "failed" ? { detail: "此前查询超时，保留失败路径" } : {}),
+        })), edges: [{ source: "step_3", target: "step_0", label: "替代路线" }],
+      } };
+      const args = native.parse({ request_id: requestId, progress });
+      expect(JSON.parse(await publishProgress.execute(args, { sessionID: runtimeSessionId }))).toEqual({ progress_revision: 1 });
+      expect(published[0]?.slice(0, 2)).toEqual([runtimeSessionId, taskId]);
+      expect(published[0]?.[2]).toMatchObject({ requestId, sourceSessionId: "reference-contract-client",
+        progress: { ...progress, diagram: null },
+      });
+      await publishProgress.execute(native.parse({ request_id: "60000000-0000-4000-8000-000000000032", progress: { summary: "补充本轮说明" } }),
+        { sessionID: runtimeSessionId });
+      expect(published[1]?.[2]).toMatchObject({ progress: { summary: "补充本轮说明", diagram: null } });
+      const invalid = await fetch(`${baseUrl}/internal/operational-task/artifacts`, {
+        method: "POST", headers: { "Content-Type": "application/json", "x-agent-internal-token": token },
+        body: JSON.stringify({ session_id: runtimeSessionId, request_id: requestId, progress: {
+          summary: "旧执行状态不进入新图", graph_update: { nodes: [{ node_id: "old", label: "核查", status: "running" }] },
+        } }),
+      });
+      expect(invalid.status).toBe(400);
+      expect(published).toHaveLength(2);
+    } finally {
+      if (oldToken === undefined) delete process.env.AGENT_INTERNAL_TOKEN;
+      else process.env.AGENT_INTERNAL_TOKEN = oldToken;
+      if (oldBaseUrl === undefined) delete process.env.TJWATER_AGENT_INTERNAL_BASE_URL;
+      else process.env.TJWATER_AGENT_INTERNAL_BASE_URL = oldBaseUrl;
+      removeRuntimeSessionContext(runtimeSessionId);
+      await new Promise<void>((resolve) => server.close(() => resolve()));
+    }
+  });
+});

tests/product/investigationReport.test.ts

@@ -1,6 +1,6 @@
 import { describe, expect, it } from "bun:test";
 import { taskReportSchema, taskProgressSchema } from "../../src/product/investigation-report.js";
-import { taskPublicationDiagramSchema, taskPublicationProgressSchema, taskReportUiBlocksSchema } from "../../.opencode/tools/task-publication-schema.js";
+import { taskReportUiBlocksSchema } from "../../.opencode/tools/task-publication-schema.js";
 
 const report = { title: "调查报告", current_conclusion: "无法确定原因", conclusion_boundary: "仅有上游数据",
   evidence_refs: ["query-1"], recommendations: [], pending_items: [], stage: "final", outcome: "insufficient_data",
@@ -12,11 +12,9 @@ describe("new investigation report writes", () => {
     const diagram = { title: "状态图", mermaid: "flowchart TD\nQUERY:::running --> REVIEW:::pending",
       node_refs: [{ node_id: "QUERY", label: "核查", status: "running" },
         { node_id: "REVIEW", label: "复核", status: "pending" }] };
-    expect(taskPublicationDiagramSchema.safeParse(diagram).success).toBe(true);
     expect(taskReportSchema.safeParse({ ...report, diagram }).success).toBe(true);
     for (const node_id of ["missing", "QUER"]) {
       const invalid = { ...diagram, node_refs: [{ ...diagram.node_refs[0], node_id }] };
-      expect(taskPublicationDiagramSchema.safeParse(invalid).success).toBe(false);
       expect(taskReportSchema.safeParse({ ...report, diagram: invalid }).success).toBe(false);
     }
   });
@@ -41,7 +39,6 @@ describe("new investigation report writes", () => {
     }
     const mismatched = { ...diagram, node_refs: [{ ...diagram.node_refs[0], node_id: "query" }] };
     expect(() => taskReportSchema.parse({ ...report, diagram: mismatched })).toThrow("未在 Mermaid 源码中声明");
-    expect(taskPublicationDiagramSchema.safeParse(mismatched).success).toBe(false);
   });
   it("rejects downstream work or unsupported claims on insufficient-data exit", () => {
     for (const changes of [{ recommendations: ["派采样工单"] }, { pending_items: ["等待人工"] },
@@ -50,13 +47,13 @@ describe("new investigation report writes", () => {
       expect(() => taskReportSchema.parse({ ...report, ...changes })).toThrow();
     }
   });
-  it("shares explicit node activity and supply feature targets with progress", () => {
+  it("shares saved reference annotations and supply feature targets with progress", () => {
     const diagram = { title: "当前调查", mermaid: "flowchart LR\nQUERY --> HUMAN",
       node_refs: [{ node_id: "QUERY", label: "核对监测", status: "running", evidence_refs: ["query-1"],
         map_targets: [{ source_id: "scada", feature_id: "MP01" }] },
       { node_id: "HUMAN", label: "现场核验", status: "waiting_human" }] };
     const progress = taskProgressSchema.parse({ summary: "正在核对投诉时段的实际监测记录", diagram });
-    expect(progress.diagram?.node_refs[0]).toMatchObject({ status: "running", map_targets: [{ source_id: "scada", feature_id: "MP01" }] });
+    expect(progress.diagram?.node_refs[0]).toMatchObject({ status: "reference", map_targets: [{ source_id: "scada", feature_id: "MP01" }] });
     expect(taskReportSchema.parse({ ...report, diagram }).diagram).toEqual(progress.diagram);
     expect(taskProgressSchema.parse({ summary: "调整调查方向", diagram: null }).diagram).toBeNull();
     for (const change of [{ status: "blocked" }, { map_targets: [{ source_id: "drainage", feature_id: "X" }] },
@@ -66,7 +63,7 @@ describe("new investigation report writes", () => {
       } })).toThrow();
     }
   });
-  it("preserves waiting, unknown and evidence-confirmed states at every diagram boundary", () => {
+  it("normalizes legacy states into saved reference annotations at every read boundary", () => {
     const diagram = { title: "等待系统结果", mermaid: "flowchart LR\nDONE --> WAIT --> UNKNOWN --> UNSET", node_refs: [
       { node_id: "DONE", label: "查询完成", status: "completed", evidence_refs: ["query-1"] },
       { node_id: "WAIT", label: "等待系统结果", status: "waiting" },
@@ -74,12 +71,10 @@ describe("new investigation report writes", () => {
       { node_id: "UNSET", label: "未确认" },
     ] };
     const nodes = taskProgressSchema.parse({ summary: "等待系统结果", diagram }).diagram!.node_refs;
-    expect(nodes?.map((node) => node.status)).toEqual(["completed", "waiting", null, undefined]);
+    expect(nodes?.map((node) => node.status)).toEqual(["recorded", "needs_input", null, undefined]);
     expect(taskReportSchema.parse({ ...report, diagram }).diagram?.node_refs).toEqual(nodes);
-    expect(taskPublicationDiagramSchema.parse(diagram).node_refs).toEqual(nodes);
-    expect(taskPublicationProgressSchema.parse({ summary: "等待系统结果", diagram }).diagram?.node_refs).toEqual(nodes);
   });
-  it("preserves parallel branches with independent activity and a pending join", () => {
+  it("preserves parallel branches and recorded findings without live activity assertions", () => {
     const mermaid = 'flowchart TD\nSTART[受理投诉] --> SPLIT{并行核查}\nSPLIT --> TICKETS[工单核查]\nSPLIT --> SCADA[监测核查]\nTICKETS --> JOIN[汇总证据]\nSCADA --> JOIN';
     const diagram = { title: "并行调查", mermaid, node_refs: [
       { node_id: "TICKETS", label: "工单核查", status: "running" },
@@ -88,11 +83,11 @@ describe("new investigation report writes", () => {
     ] };
     const progress = taskProgressSchema.parse({ summary: "两个独立核查正在执行", diagram });
     expect(progress.diagram?.mermaid).toBe(mermaid);
-    expect(progress.diagram?.node_refs.map((node) => node.status)).toEqual(["running", "running", "pending"]);
+    expect(progress.diagram?.node_refs.map((node) => node.status)).toEqual(["reference", "reference", "reference"]);
     const updated = taskProgressSchema.parse({ summary: "工单核查已完成，监测核查仍在执行", diagram: {
       ...diagram, node_refs: [{ ...diagram.node_refs[0], status: "completed", evidence_refs: ["query-1"] }, ...diagram.node_refs.slice(1)],
     } });
-    expect(updated.diagram?.node_refs.map((node) => node.status)).toEqual(["completed", "running", "pending"]);
+    expect(updated.diagram?.node_refs.map((node) => node.status)).toEqual(["recorded", "reference", "reference"]);
   });
 });
 

tests/product/mcpQueryClient.test.ts

@@ -26,6 +26,24 @@ const resourceToken = jwt("resource");
 const token = () => Response.json({ access_token: resourceToken, token_type: "Bearer", expires_in: 300 });
 function credential(id: string) { sessions.push(id); bindSessionCredential(id, { authorization: `Bearer ${jwt(id)}`, projectId: "project" }); }
 
+it("uses cached tool definitions without fetching the catalog on each query", async () => {
+  const id = "cached-tool-definition"; credential(id);
+  const client = fixture((async (url, init) => {
+    if (String(url).includes("/token")) return token();
+    return init?.method === "POST"
+      ? Response.json({ context_handle: "x".repeat(43) })
+      : new Response(null, { status: 204 });
+  }) as McpHttpFetch);
+  const definition = { ...catalog[0], outputSchema: { type: "object", properties: { ok: { type: "boolean" } } } };
+  Object.assign(client, { tools: [definition], withClient: async (_token: string, _project: string, _signal: AbortSignal, run: (client: unknown) => Promise<unknown>) => run({
+    callTool: async (_params: unknown, options: { toolDefinition: unknown }) => {
+      expect(options.toolDefinition).toBe(definition);
+      return { content: [], structuredContent: { ok: true } };
+    },
+  }) });
+  expect((await client.query(id, owner(id), definition.name, {}, "call")).structuredContent).toEqual({ ok: true });
+});
+
 it("owns simulation HTTP budgets and rejects model overrides before OAuth", async () => {
   const id = "mcp-calculation-budget"; credential(id);
   let requests = 0, transportTimeout = 0, sdkTimeout = 0;

tests/product/operationalTaskClient.test.ts

@@ -3,11 +3,14 @@ import { afterEach, describe, expect, it } from "bun:test";
 import {
   bindOperationalTaskCredential,
   humanTaskEvidenceCommandSchema,
+  hasOperationalTaskRun,
   OperationalTaskClient,
   proposedTaskActionSchema,
   releaseOperationalTaskCredential,
 } from "../../src/product/operational-task-client.js";
 
+import { runBackgroundTaskExecution } from "../../src/routes/chatSessionRoutes.js";
+
 const originalFetch = globalThis.fetch;
 const taskId = "50000000-0000-4000-8000-000000000001";
 const runId = "55000000-0000-4000-8000-000000000001";
@@ -364,3 +367,28 @@ describe("OperationalTaskClient", () => {
     expect(requestBodies[2]).toMatchObject({ expected_revision: 3 });
   });
 });
+
+
+it.each([true, false])("retains lease state on background stream loss only while running=%s", async (running) => {
+  const credential = { authorization: "Bearer fixture", projectId: "project-1" };
+  bindOperationalTaskCredential("runtime-1", credential);
+  globalThis.fetch = (async () => Response.json(run)) as unknown as typeof fetch;
+  const client = new OperationalTaskClient("http://server.test");
+  await client.claimTask("runtime-1", taskId, runId, {
+    requestId: executionRequestId, expectedRevision: 1, sourceSessionId: "session-1",
+  });
+  expect(hasOperationalTaskRun("runtime-1")).toBe(true);
+  globalThis.fetch = (async () => new Response(new ReadableStream({
+    start(controller) { controller.error(new Error("fixture stream disconnected")); },
+  }))) as unknown as typeof fetch;
+  await runBackgroundTaskExecution({ sessionId: "runtime-1", credential, model: "fixture/model",
+    isRunning: () => running });
+  expect(hasOperationalTaskRun("runtime-1")).toBe(running);
+  if (running) {
+    globalThis.fetch = (async (_input: Parameters<typeof fetch>[0], init?: RequestInit) => {
+      expect(JSON.parse(String(init?.body)).expected_revision).toBe(2);
+      return Response.json({ ...run, revision: 3 });
+    }) as unknown as typeof fetch;
+    await client.heartbeatTask("runtime-1", taskId, runId, "session-1");
+  }
+});

tests/product/scada-presentation.test.ts

@@ -0,0 +1,58 @@
+import { expect, it } from "bun:test";
+import { taskPresentationCommandSchema, type TaskPresentationCommand } from "../../src/product/task-presentation.js";
+import { taskPublicationCommandSchema, taskPublicationReportSchema } from "../../.opencode/tools/task-publication-schema.js";
+import { taskReportSchema } from "../../src/product/investigation-report.js";
+import { OperationalTaskClientError, scadaPresentationContinuation } from "../../src/product/operational-task-client.js";
+
+it("preserves SCADA device identities through native and host publication boundaries", () => {
+  const command: TaskPresentationCommand = { action: "open_chart", chart_id: "flow-overview", evidence_refs: ["observations"], chart: {
+    title: "流量当前趋势", chart_type: "line", x_data: ["05:00", "05:15"],
+    scada: { role: "current", metric: "flow", unit: "m3/h", window_start: "2026-07-16T05:00:00+08:00", window_end: "2026-07-16T08:00:00+08:00" },
+    series: [{ name: "524529", device_id: "524529", day_offset: 0, type: "line", data: [-6.8, 303.3],
+      sample_times: ["2026-07-16T05:00:00+08:00", "2026-07-16T05:15:00+08:00"] }],
+  } };
+  expect(taskPresentationCommandSchema.parse(command)).toEqual(command);
+  expect(taskPublicationCommandSchema.parse(command)).toEqual(command);
+  const report = { title: "调查", current_conclusion: "524529仅作参考", conclusion_boundary: "待复核",
+    stage: "final", outcome: "concluded", evidence_refs: ["observations"], data_gaps: [], scada_device_ids: ["524529"] };
+  expect(taskReportSchema.parse(report).scada_device_ids).toEqual(["524529"]);
+  expect(taskPublicationReportSchema.parse(report).scada_device_ids).toEqual(["524529"]);
+});
+
+it("continues an incomplete SCADA presentation with the exact missing device instead of retrying other failures", () => {
+  const rejection = new OperationalTaskClientError(409, "缺少七天同期对比设备：524529", "SCADA_PRESENTATION_INCOMPLETE");
+  expect(scadaPresentationContinuation(rejection)).toContain("524529");
+  expect(scadaPresentationContinuation(rejection)).toContain("publish_task_presentation");
+  expect(scadaPresentationContinuation(new OperationalTaskClientError(403, "拒绝", "PERMISSION_DENIED"))).toBeNull();
+  expect(scadaPresentationContinuation(new Error("transport failed"))).toBeNull();
+});
+
+it("bounds repeated incomplete-presentation continuations within one run", async () => {
+  const { createScadaPresentationContinuation } = await import("../../src/product/operational-task-client.js");
+  const resume = createScadaPresentationContinuation();
+  const rejection = new OperationalTaskClientError(409, "缺少设备：524529", "SCADA_PRESENTATION_INCOMPLETE");
+  expect(resume(new Error("transport failed"))).toBeNull();
+  for (let attempt = 0; attempt < 3; attempt++) expect(resume(rejection)).toContain("524529");
+  expect(resume(rejection)).toBeNull();
+  expect(resume(rejection)).toBeNull();
+  expect(createScadaPresentationContinuation()(rejection)).toContain("524529");
+});
+
+
+it("keeps all-null current chunks aligned to their own first slot across midnight", () => {
+  for (const [start, end, labels, times] of [
+    ["2026-07-16T05:08:00+08:00", "2026-07-16T08:08:00+08:00", ["07:45", "08:00"],
+      ["2026-07-15T07:45:00+08:00", "2026-07-15T08:00:00+08:00"]],
+    ["2026-07-15T22:08:00+08:00", "2026-07-16T01:08:00+08:00", ["00:45", "01:00"],
+      ["2026-07-15T00:45:00+08:00", "2026-07-15T01:00:00+08:00"]],
+  ] as const) {
+    const command = { action: "open_chart", chart_id: "chunk", evidence_refs: ["observations"], chart: {
+      title: "流量同期分段", chart_type: "time_comparison", x_data: labels,
+      scada: { role: "comparison", metric: "flow", unit: "m3/h", window_start: start, window_end: end },
+      series: [{ name: "current", type: "line", data: [null, null], sample_times: [null, null] },
+        { name: "history", type: "scatter", data: [1, 2], sample_times: times }],
+    } };
+    expect(taskPresentationCommandSchema.safeParse(command).success).toBe(true);
+    expect(taskPublicationCommandSchema.safeParse(command).success).toBe(true);
+  }
+});

tests/product/taskPresentation.test.ts

@@ -2,20 +2,11 @@ import { describe, expect, it } from "bun:test";
 
 import publishPresentation from "../../.opencode/tools/publish_task_presentation.js";
 import publishProgress from "../../.opencode/tools/publish_task_progress.js";
-import { taskPublicationCommandSchema, taskPublicationProgressSchema } from "../../.opencode/tools/task-publication-schema.js";
+import { taskPublicationCommandSchema, taskPublicationGraphProgressSchema } from "../../.opencode/tools/task-publication-schema.js";
 import { taskProgressSchema } from "../../src/product/investigation-report.js";
 import { taskPresentationCommandSchema } from "../../src/product/task-presentation.js";
 
 describe("task presentation input boundaries", () => {
-  it("aligns native and product progress schemas for legacy and current diagrams", () => {
-    const progress = { summary: "实际读取监测资料", diagram: { title: "当前路线", mermaid: "flowchart TD\nQUERY --> REVIEW", node_refs: [
-      { node_id: "QUERY", label: "查询", status: "running", map_targets: [{ source_id: "pipes", feature_id: "P-1" }] },
-      { node_id: "REVIEW", label: "复核", status: null },
-    ] } };
-    expect(taskProgressSchema.parse(taskPublicationProgressSchema.parse(progress))).toEqual(taskProgressSchema.parse(progress));
-    expect(taskProgressSchema.parse(taskPublicationProgressSchema.parse({ summary: "当前无图" }))).toEqual({ summary: "当前无图", diagram: null });
-  });
-
   it("accepts finite display commands and rejects unsupported data, layers and chart evidence", () => {
     const chart = { title: "压力", chart_type: "line", x_data: ["10:00"], series: [{ name: "MP01", data: [0.4] }] };
     const commands = [
@@ -38,6 +29,41 @@ describe("task presentation input boundaries", () => {
     ]) expect(() => taskPresentationCommandSchema.parse(command)).toThrow();
   });
 
+  it("exposes incremental graph updates instead of generated Mermaid to the Agent", () => {
+    const update = { summary: "首次定位超时，调整窗口重试", graph_update: {
+      nodes: [{ node_id: "locate_1", label: "首次定位", status: "failed", detail: "计算超时" },
+        { node_id: "locate_2", label: "调整窗口重试", status: "reference" }],
+      edges: [{ source: "locate_1", target: "locate_2", label: "重试" }],
+    } };
+    expect(taskProgressSchema.parse(taskPublicationGraphProgressSchema.parse(update)))
+      .toEqual(taskProgressSchema.parse(update));
+    expect(taskPublicationGraphProgressSchema.safeParse({ summary: "重新生成", diagram: {
+      title: "替换图", mermaid: "flowchart TD\nA[新图]",
+    } }).success).toBe(false);
+    expect(taskProgressSchema.safeParse({ ...update, diagram: {
+      title: "替换图", mermaid: "flowchart TD\nA[新图]",
+    } }).success).toBe(false);
+    expect(taskProgressSchema.parse(taskPublicationGraphProgressSchema.parse({ summary: "继续等待" })))
+      .toEqual({ summary: "继续等待", diagram: null });
+  });
+
+  it("accepts optional reference annotations and rejects live execution states in new graph updates", () => {
+    for (const status of [undefined, "reference", "recorded", "needs_input", "failed", "not_taken"]) {
+      const progress = { summary: "整理流程参考", graph_update: {
+        nodes: [{ node_id: "check", label: "核查路线", ...(status ? { status } : {}) }], edges: [],
+      } };
+      expect(taskPublicationGraphProgressSchema.safeParse(progress).success).toBe(true);
+      expect(taskProgressSchema.safeParse(progress).success).toBe(true);
+    }
+    for (const status of ["running", "completed", "pending", "waiting", "waiting_human", "skipped", "cancelled"]) {
+      const progress = { summary: "整理流程参考", graph_update: {
+        nodes: [{ node_id: "check", label: "核查路线", status }], edges: [],
+      } };
+      expect(taskPublicationGraphProgressSchema.safeParse(progress).success).toBe(false);
+      expect(taskProgressSchema.safeParse(progress).success).toBe(false);
+    }
+  });
+
   it("revalidates semantic chart and Mermaid inputs before sending a tool request", async () => {
     const request_id = "60000000-0000-4000-8000-000000000001";
     await expect(publishPresentation.execute({ request_id, command: {
@@ -46,11 +72,11 @@ describe("task presentation input boundaries", () => {
     } }, { sessionID: "test" })).rejects.toThrow("series must align");
     await expect(publishProgress.execute({ request_id, progress: {
       summary: "查询", diagram: { title: "路线", mermaid: "flowchart TD; A-->B; click A callback", node_refs: [] },
-    } }, { sessionID: "test" })).rejects.toThrow("Mermaid");
+    } } as never, { sessionID: "test" })).rejects.toThrow();
     await expect(publishProgress.execute({ request_id, progress: {
       summary: "查询", diagram: { title: "路线", mermaid: "flowchart TD\nA-->B",
         node_refs: [{ node_id: "query", label: "查询", status: "running",
           evidence_refs: [], action_refs: [], map_targets: [] }] },
-    } }, { sessionID: "test" })).rejects.toThrow("未在 Mermaid 源码中声明");
+    } } as never, { sessionID: "test" })).rejects.toThrow();
   });
 });

tests/routes/answerViewStateRoutes.test.ts

@@ -31,7 +31,7 @@ it("authenticates state reads and writes against the persisted session owner and
   const context = getLocalAgentContext(ownerRequest);
   const sessionId = "state-session";
   await sessions.ensure({ ...context, sessionId });
-  await new SessionUiStateStore(join(root, "unused"), workspaces).write({ ...context, sessionId }, { sessionId, messages: [{ id: "assistant", role: "assistant", parts: [{ type: "data-answer_ui", data: { version: "answer-ui@1", block_id: "block", fallback_text: "fallback", spec: { root: "evidence", elements: { evidence: { type: "Evidence", props: { title: "Evidence", summary: "Summary", source: "source", evidence_id: null, observed_at: null, kind: "observed" }, children: [] } } } } }] }] });
+  await new SessionUiStateStore(workspaces).write({ ...context, sessionId }, { sessionId, messages: [{ id: "assistant", role: "assistant", parts: [{ type: "data-answer_ui", data: { version: "answer-ui@1", block_id: "block", fallback_text: "fallback", spec: { root: "evidence", elements: { evidence: { type: "Evidence", props: { title: "Evidence", summary: "Summary", source: "source", evidence_id: null, observed_at: null, kind: "observed" }, children: [] } } } } }] }] });
   const app = express();
   app.use(express.json({ limit: "2mb" }));
   app.use(async (req, res, next) => {

tests/routes/chat-run-accumulator.test.ts

@@ -0,0 +1,47 @@
+import { expect, it } from "bun:test";
+import type { UIMessageChunk } from "ai";
+import { createChatRunAccumulator, publishRunEvent } from "../../src/routes/chat-run-accumulator.js";
+import { createInitialStreamingMessages, type ActiveRun } from "../../src/routes/chatUiState.js";
+
+it.each([false, true])("projects one event stream into reconnect and persisted messages (collaboration=%s)", (collaboration) => {
+  const run: ActiveRun = {
+    clientSessionId: "s", controller: new AbortController(), status: "running",
+    messages: createInitialStreamingMessages([], "查询"), pendingPermissions: new Map(), pendingQuestions: new Map(), subscribers: new Set(),
+  };
+  const chunks: UIMessageChunk[] = [];
+  const stream = createChatRunAccumulator({ run, messages: [{ id: "user", role: "user", parts: [{ type: "text", text: "查询" }] }],
+    messageId: "answer", sessionId: "s", collaboration, write: (chunk) => chunks.push(chunk), onStatus() {} });
+  stream.apply("progress", { id: "query", status: "running", title: "查询资料" });
+  stream.apply("token", { content: "已有数据" });
+  stream.apply("permission_request", { request_id: "permission", session_id: "s", permission: "shell", patterns: [], always: [], created_at: 1 });
+  stream.apply("permission_response", { request_id: "permission", reply: "once" });
+  stream.appendInput({ id: "extra", role: "user", parts: [{ type: "text", text: "补充" }] }, "补充");
+  stream.appendInput({ id: "extra", role: "user", parts: [] }, "重复");
+  stream.apply("final_answer", { content: "结论" });
+  stream.apply("done", {});
+  expect(run.status).toBe("completed");
+  expect(run.pendingPermissions.size).toBe(0);
+  expect(run.messages.at(-1)).toMatchObject({ id: "answer", content: "结论", permissions: [{ status: "approved_once" }], progress: [{ status: "completed" }, { status: "completed" }] });
+  const saved = stream.uiMessages();
+  expect(saved.map((message) => message.id)).toEqual(["user", "extra", "answer"]);
+  expect(saved.at(-1)?.parts).toEqual((run.messages.at(-1) as { parts: typeof saved[number]["parts"] }).parts);
+  expect(saved.at(-1)?.parts.some((part) => part.type === "data-progress")).toBe(!collaboration);
+  expect(chunks.filter((chunk) => chunk.type === "finish")).toHaveLength(1);
+});
+
+it.each(["done", "error", "aborted"])("publishes the same %s terminal state to reconnect subscribers and storage", (event) => {
+  const run: ActiveRun = {
+    clientSessionId: "s", controller: new AbortController(), status: "running",
+    messages: createInitialStreamingMessages([], "查询"), pendingPermissions: new Map(), pendingQuestions: new Map(), subscribers: new Set(),
+  };
+  const received: Array<{ event: string; data: Record<string, unknown> }> = [];
+  run.subscribers.add({ write: (event, data) => received.push({ event, data }), close() {} });
+  const stream = createChatRunAccumulator({ run, messages: [], messageId: "answer", sessionId: "s",
+    collaboration: false, write() {}, onStatus() {} });
+  publishRunEvent(run, "progress", { id: "tool", title: "正在处理", status: "running", phase: "tool" });
+  publishRunEvent(run, "token", { content: "部分结果" });
+  publishRunEvent(run, event, { session_id: "s", message: "执行已停止" });
+  const canonical = stream.uiMessages().at(-1)?.parts.find((part) => part.type === "data-run_status");
+  expect(received.at(-2)).toMatchObject({ event: "run_status", data: { status: event === "done" ? "completed" : event } });
+  expect(canonical).toMatchObject({ data: { status: received.at(-2)?.data.status } });
+});

tests/routes/chat-topics.test.ts

@@ -22,7 +22,7 @@ it("persists owned topics, searches old text across themes and preserves chats w
   globalThis.fetch = (async (_input, init) => Response.json({ user_id: new Headers(init?.headers).get("authorization") === "Bearer owner" ? "owner" : "other", project_id: new Headers(init?.headers).get("x-project-id"), network: "supply" })) as typeof fetch;
   const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
   const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
-  const states = new SessionUiStateStore(join(root, "ui"), workspaces);
+  const states = new SessionUiStateStore(workspaces);
   for (const id of ["a", "b", "unclassified"]) {
     await sessions.ensure({ ...context, sessionId: id });
     await states.write({ ...context, sessionId: id }, { sessionId: id, messages: [

tests/routes/chatStream.test.ts

@@ -714,3 +714,40 @@ describe("streamPromptResponse", () => {
   });
 
 });
+
+
+describe("background sandbox permissions", () => {
+  it.each([["permission.asked", true], ["permission.v2.asked", true],
+    ["permission.asked", false], ["permission.v2.asked", false]] as const)("limits session Shell/edit approval for %s background=%s", async (type, background) => {
+    const replies: Array<Record<string, unknown>> = [];
+    const runtime = {
+      subscribeEvents: async () => createEventStream([
+        ...["shell", "edit", "mcp_fixture_write"].map((action) => ({
+          type,
+          properties: {
+            id: action, sessionID: "runtime-session-1",
+            ...(type === "permission.asked"
+              ? { permission: action, patterns: ["fixture"], always: [] }
+              : { action, resources: ["fixture"], save: [] }),
+          },
+        })),
+        { type: "session.idle", properties: { sessionID: "runtime-session-1" } },
+      ]),
+      prompt: async () => undefined,
+      messages: async () => [],
+      replyPermission: async (input: Record<string, unknown>) => { replies.push(input); },
+    } as unknown as OpencodeRuntimeAdapter;
+    const events: Array<{ event: string; data: Record<string, unknown> }> = [];
+    await streamPromptResponse({
+      runtime, sessionId: "runtime-session-1", clientSessionId: "client-session-1",
+      message: "后台调查", approvalMode: "request", backgroundSandboxPermissions: background,
+      write: (event, data) => events.push({ event, data }),
+    });
+    expect(replies).toEqual(background ? [
+      { requestId: "shell", sessionId: "runtime-session-1", reply: "once" },
+      { requestId: "edit", sessionId: "runtime-session-1", reply: "once" },
+    ] : []);
+    expect(events.filter(({ event }) => event === "permission_request")
+      .map(({ data }) => data.permission)).toEqual(background ? ["mcp_fixture_write"] : ["shell", "edit", "mcp_fixture_write"]);
+  });
+});

tests/routes/credentialRefreshRoute.test.ts

@@ -7,6 +7,7 @@ import { attachTrustedAgentContext } from "../../src/context/localContext.js";
 import { registerChatInteractionRoutes } from "../../src/routes/chatInteractionRoutes.js";
 import { bindSessionCredential, credentialRefreshCoordinator, releaseSessionCredential } from "../../src/product/credential-refresh.js";
 import { SessionMetadataStore } from "../../src/sessions/metadataStore.js";
+import { SessionWorkspaceStore } from "../../src/sessions/workspace-store.js";
 import { SessionUiStateStore } from "../../src/sessions/uiStateStore.js";
 import { toActorKey, toProjectKey } from "../../src/utils/fileStore.js";
 import type { ActiveRun } from "../../src/routes/chatUiState.js";
@@ -28,7 +29,7 @@ describe("credential refresh HTTP route", () => {
     const router = express.Router();
     router.use((req, res, next) => { void attachTrustedAgentContext(req).then(() => next()).catch(() => res.sendStatus(401)); });
     const activeRuns = new Map<string, ActiveRun>([["credential-route-session", { clientSessionId: "credential-route-session", controller: new AbortController(), messages: [], pendingPermissions: new Map(), pendingQuestions: new Map(), subscribers: new Set(), status: "running" }]]);
-    registerChatInteractionRoutes(router, { activeRuns, runtime: {} as OpencodeRuntimeAdapter, sessionMetadataStore: metadata, sessionUiStateStore: new SessionUiStateStore(join(directory, "ui")) });
+    registerChatInteractionRoutes(router, { activeRuns, runtime: {} as OpencodeRuntimeAdapter, sessionMetadataStore: metadata, sessionUiStateStore: new SessionUiStateStore(new SessionWorkspaceStore(join(directory, "workspaces"))) });
     app.use(router);
     const server = app.listen(0, "127.0.0.1");
     await new Promise<void>((resolve) => server.once("listening", resolve));

tests/routes/hostQuestionStream.test.ts

@@ -115,7 +115,7 @@ it("uses authenticated /responses for saved answers and rejects bypass and forei
   globalThis.fetch = (async (_input, init) => Response.json({ user_id: new Headers(init?.headers).get("Authorization") === "Bearer owner" ? "owner" : "other", project_id: project, network: "fixture" })) as typeof fetch;
   const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
   const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
-  const states = new SessionUiStateStore(join(root, "unused"), workspaces);
+  const states = new SessionUiStateStore(workspaces);
   const interactions = new InteractionRequestStore(workspaces);
   const context = { actorKey: toActorKey("product:owner"), projectKey: toProjectKey(`product:${project}`), projectId: project, userId: "owner", sessionId: "owned" };
   await sessions.ensure(context);

tests/routes/legacyQuestionRoutes.test.ts

@@ -5,16 +5,43 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { getLocalAgentContext } from "../../src/context/localContext.js";
 import { registerChatInteractionRoutes } from "../../src/routes/chatInteractionRoutes.js";
-import type { OpencodeRuntimeAdapter } from "../../src/runtime/opencode.js";
+import { OpencodeRuntimeAdapter } from "../../src/runtime/opencode.js";
 import { SessionMetadataStore } from "../../src/sessions/metadataStore.js";
 import { SessionUiStateStore } from "../../src/sessions/uiStateStore.js";
 import { SessionWorkspaceStore } from "../../src/sessions/workspace-store.js";
 
+it("reads a native form once when checking and answering a persisted question", async () => {
+  const root = await mkdtemp(join(tmpdir(), "question-single-read-"));
+  const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
+  const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
+  const states = new SessionUiStateStore(workspaces);
+  const context = { ...getLocalAgentContext(), sessionId: "session" };
+  await sessions.ensure(context);
+  await states.write(context, { sessionId: context.sessionId, messages: [{ role: "assistant", questions: [{ requestId: "form", status: "pending" }] }] });
+  const calls: string[] = [];
+  const runtime = Object.assign(Object.create(OpencodeRuntimeAdapter.prototype), {
+    ensureClient: async () => ({ session: { form: {
+      get: async () => { calls.push("get"); return { fields: [{ key: "answer", type: "text" }], state: { status: "pending" } }; },
+      reply: async (input: { answer: unknown }) => { calls.push("reply"); expect(input.answer).toEqual({ answer: "A" }); },
+    } } }),
+  });
+  const routes = new Map<string, (req: unknown, res: unknown) => Promise<void>>();
+  const router = { get() {}, post(path: string, handler: (req: unknown, res: unknown) => Promise<void>) { routes.set(path, handler); } };
+  registerChatInteractionRoutes(router as unknown as express.Router, { activeRuns: new Map(), runtime, sessionMetadataStore: sessions, sessionUiStateStore: states });
+  const req = { params: { request_id: "form" }, body: { session_id: "session", answers: [["A"]] }, header() { return undefined; } };
+  const response = { code: 200, setHeader() {}, status(code: number) { this.code = code; return this; }, json() { return this; } };
+  try {
+    await routes.get("/question/:request_id/reply")!(req, response);
+    expect(response.code).toBe(202);
+    expect(calls).toEqual(["get", "reply"]);
+  } finally { await rm(root, { recursive: true, force: true }); }
+});
+
 it("reconciles persisted legacy forms and replies after the active run was lost", async () => {
   const root = await mkdtemp(join(tmpdir(), "legacy-question-routes-"));
   const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
   const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
-  const states = new SessionUiStateStore(join(root, "unused"), workspaces);
+  const states = new SessionUiStateStore(workspaces);
   const context = { ...getLocalAgentContext(), sessionId: "session" };
   await sessions.ensure(context);
   await states.write(context, { sessionId: "session", messages: [{ id: "old", role: "assistant", questions: [{ requestId: "form", status: "pending", tool: { callID: "call" } }] }, { id: "new", role: "assistant", text: "later message", parts: [{ type: "data-question_request", data: { request_id: "form2", session_id: "session", questions: [], tool: { callID: "call2" } } }, { type: "data-question_request", data: { request_id: "form3", session_id: "session", questions: [] } }, { type: "data-question_request", data: { request_id: "form4", session_id: "session", questions: [] } }] }] });
@@ -22,7 +49,7 @@ it("reconciles persisted legacy forms and replies after the active run was lost"
   let unavailable = false;
   let reads = 0;
   let replies = 0;
-  const runtime = { getQuestionStatus: async () => { reads++; if (unavailable) throw new Error("private-native-path"); return status; }, replyQuestion: async () => { replies++; status = "answered"; }, rejectQuestion: async () => { status = "cancelled"; } } as unknown as OpencodeRuntimeAdapter;
+  const runtime = { getQuestion: async () => { reads++; if (unavailable) throw new Error("private-native-path"); return status === "missing" ? null : { state: { status } }; }, replyQuestion: async () => { replies++; status = "answered"; }, rejectQuestion: async () => { status = "cancelled"; } } as unknown as OpencodeRuntimeAdapter;
   const app = express(); app.use(express.json());
   registerChatInteractionRoutes(app, { activeRuns: new Map(), runtime, sessionMetadataStore: sessions, sessionUiStateStore: states });
   const server = app.listen(0, "127.0.0.1");

tests/routes/permissionPersistence.test.ts

@@ -0,0 +1,58 @@
+import { createChatRunAccumulator } from "../../src/routes/chat-run-accumulator.js";
+import { expect, it } from "bun:test";
+import express from "express";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { getLocalAgentContext } from "../../src/context/localContext.js";
+import { registerChatInteractionRoutes } from "../../src/routes/chatInteractionRoutes.js";
+import type { ActiveRun } from "../../src/routes/chatUiState.js";
+import type { OpencodeRuntimeAdapter } from "../../src/runtime/opencode.js";
+import { SessionMetadataStore } from "../../src/sessions/metadataStore.js";
+import { SessionUiStateStore } from "../../src/sessions/uiStateStore.js";
+import { SessionWorkspaceStore } from "../../src/sessions/workspace-store.js";
+
+it.each([false, true])("persists permission replies in the owner's workspace (native failure=%s)", async (nativeFailure) => {
+  const root = await mkdtemp(join(tmpdir(), "permission-persistence-"));
+  const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
+  const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
+  const states = new SessionUiStateStore(workspaces);
+  const context = { ...getLocalAgentContext(), sessionId: "permission-session" };
+  await sessions.ensure(context);
+  const messages = [{ id: "answer", role: "assistant", permissions: [] }];
+  await states.write(context, { sessionId: context.sessionId, isTitleManuallyEdited: true, messages });
+  let calls = 0;
+  const runtime = { replyPermission: async () => { calls++; if (nativeFailure) throw new Error("native unavailable"); } } as unknown as OpencodeRuntimeAdapter;
+  const run: ActiveRun = {
+    clientSessionId: context.sessionId, controller: new AbortController(), messages,
+    pendingPermissions: new Map([["permission", { request_id: "permission", session_id: context.sessionId, permission: "shell", patterns: [], always: [], created_at: Date.now() }]]),
+    pendingQuestions: new Map(), subscribers: new Set(), status: "running",
+  };
+  const accumulator = createChatRunAccumulator({ run, messages: [], messageId: "answer", sessionId: context.sessionId,
+    collaboration: false, write() {}, onStatus() {} });
+  accumulator.apply("permission_request", run.pendingPermissions.get("permission")! as unknown as Record<string, unknown>);
+  await states.write(context, { sessionId: context.sessionId, isTitleManuallyEdited: true, messages: run.messages });
+  const app = express(); app.use(express.json());
+  registerChatInteractionRoutes(app, { activeRuns: new Map([[context.sessionId, run]]), runtime, sessionMetadataStore: sessions, sessionUiStateStore: states });
+  const server = app.listen(0, "127.0.0.1");
+  await new Promise<void>((resolve) => server.once("listening", resolve));
+  const url = `http://127.0.0.1:${(server.address() as { port: number }).port}/permission/permission/reply`;
+  const reply = (headers = {}) => fetch(url, { method: "POST", headers: { "Content-Type": "application/json", ...headers }, body: JSON.stringify({ session_id: context.sessionId, reply: "once" }) });
+  try {
+    expect((await reply({ "X-Agent-Local-User": "other" })).status).toBe(404);
+    expect(calls).toBe(0);
+    expect((await reply()).status).toBe(nativeFailure ? 502 : 202);
+    expect(calls).toBe(1);
+    expect(run.pendingPermissions.has("permission")).toBe(nativeFailure);
+    const saved = await states.read(context);
+    expect(saved?.isTitleManuallyEdited).toBe(true);
+    const parts = (saved?.messages[0] as { parts: Array<{ type: string; data: Record<string, unknown> }> }).parts;
+    expect(parts.find((part) => part.type === "data-permission_response")?.data).toMatchObject(nativeFailure
+      ? { request_id: "permission", status: "error", error: "native unavailable" }
+      : { request_id: "permission", reply: "once" });
+    expect(run.messages[0]).toMatchObject({ permissions: [{ requestId: "permission", status: nativeFailure ? "error" : "approved_once" }] });
+  } finally {
+    await new Promise<void>((resolve) => server.close(() => resolve()));
+    await rm(root, { recursive: true, force: true });
+  }
+});

tests/routes/question-persistence.test.ts

@@ -0,0 +1,71 @@
+import { expect, it } from "bun:test";
+import express from "express";
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import type { UIMessage } from "ai";
+import { getLocalAgentContext } from "../../src/context/localContext.js";
+import { createChatRunAccumulator } from "../../src/routes/chat-run-accumulator.js";
+import { registerChatInteractionRoutes } from "../../src/routes/chatInteractionRoutes.js";
+import { createInitialStreamingMessages, type ActiveRun } from "../../src/routes/chatUiState.js";
+import type { OpencodeRuntimeAdapter } from "../../src/runtime/opencode.js";
+import { SessionMetadataStore } from "../../src/sessions/metadataStore.js";
+import { SessionUiStateStore } from "../../src/sessions/uiStateStore.js";
+import { SessionWorkspaceStore } from "../../src/sessions/workspace-store.js";
+
+it("keeps historical question invalidation across the next live snapshot", async () => {
+  const root = await mkdtemp(join(tmpdir(), "question-persistence-"));
+  const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
+  const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
+  const states = new SessionUiStateStore(workspaces);
+  const context = { ...getLocalAgentContext(), sessionId: "history-session" };
+  await sessions.ensure(context);
+  const history: UIMessage[] = [{ id: "old-answer", role: "assistant", parts: [
+    { type: "data-question_request", data: { request_id: "old-question", session_id: context.sessionId,
+      questions: [{ question: "继续吗？", options: [] }] } },
+    { type: "data-final_answer", data: { content: "此前的结果" } },
+  ] }, { id: "user", role: "user", parts: [{ type: "text", text: "新一轮" }] }];
+  const run: ActiveRun = {
+    clientSessionId: context.sessionId, controller: new AbortController(), status: "running",
+    messages: createInitialStreamingMessages(history, "新一轮"),
+    pendingPermissions: new Map(), pendingQuestions: new Map(), subscribers: new Set(),
+  };
+  const stream = createChatRunAccumulator({ run, messages: history, messageId: "current-answer",
+    sessionId: context.sessionId, collaboration: false, write() {}, onStatus() {} });
+  stream.apply("token", { content: "正在核查" });
+  await states.write(context, { sessionId: context.sessionId, isTitleManuallyEdited: true, messages: stream.uiMessages() });
+  let nativeReads = 0;
+  const runtime = { getQuestion: async () => { nativeReads++; return null; } } as unknown as OpencodeRuntimeAdapter;
+  const app = express();
+  registerChatInteractionRoutes(app, { activeRuns: new Map([[context.sessionId, run]]), runtime,
+    sessionMetadataStore: sessions, sessionUiStateStore: states });
+  const server = app.listen(0, "127.0.0.1");
+  await new Promise<void>((resolve) => server.once("listening", resolve));
+  const url = `http://127.0.0.1:${(server.address() as { port: number }).port}/session/${context.sessionId}/questions/old-question`;
+  const resolved = (messages: unknown[]) => {
+    const message = messages[0] as UIMessage;
+    expect(message.id).toBe("old-answer");
+    const part = message.parts.find((part) => part.type === "data-question_response");
+    expect(part).toMatchObject({ type: "data-question_response", data: { request_id: "old-question", status: "invalidated" } });
+  };
+  try {
+    expect((await fetch(url, { headers: { "X-Agent-Local-User": "other" } })).status).toBe(404);
+    expect(nativeReads).toBe(0);
+    const response = await fetch(url);
+    expect(response.status).toBe(200);
+    expect(await response.json()).toMatchObject({ status: "invalidated" });
+    resolved((await states.read(context))!.messages);
+    resolved(run.messages);
+    resolved(stream.uiMessages());
+    expect(stream.uiMessages().at(-1)?.parts.some((part) => part.type === "data-question_response")).toBe(false);
+    stream.apply("token", { content: "，继续查询" });
+    await states.write(context, { ...(await states.read(context))!, messages: stream.uiMessages() });
+    resolved((await states.read(context))!.messages);
+    expect((await states.read(context))?.isTitleManuallyEdited).toBe(true);
+    await fetch(url);
+    expect(nativeReads).toBe(1);
+  } finally {
+    await new Promise<void>((resolve) => server.close(() => resolve()));
+    await rm(root, { recursive: true, force: true });
+  }
+});

tests/routes/responses.test.ts

@@ -44,7 +44,7 @@ beforeEach(async () => {
   })) as typeof fetch;
   const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
   const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
-  states = new SessionUiStateStore(join(root, "ui"), workspaces);
+  states = new SessionUiStateStore(workspaces);
   interactions = new InteractionRequestStore(workspaces);
   await sessions.initialize();
   const context = { actorKey: toActorKey("product:owner"), projectKey: toProjectKey(`product:${project}`), projectId: project, userId: "owner", sessionId: "owned" };
@@ -296,6 +296,11 @@ it("marks an explicitly aborted response incomplete and preserves scoped history
   const text = await response.text();
   expect(text).toContain("event: response.incomplete");
   expect(text).not.toContain("event: response.completed");
+  const context = { actorKey: toActorKey("product:owner"), projectKey: toProjectKey(`product:${project}`), sessionId: "owned" };
+  const saved = (await states.read(context))!.messages as Array<{ parts: Array<{ type: string; data?: { status?: string } }> }>;
+  expect(saved.at(-1)?.parts.find((part) => part.type === "data-run_status")?.data?.status).toBe("aborted");
+  const loaded = await http(`${base}/api/v1/session/owned`, { headers: { Authorization: "Bearer owner", "X-Project-Id": project } });
+  expect((await loaded.json()).messages).toEqual(saved);
 });
 
 it("continues a paged conversation from the complete saved history and preserves client message IDs", async () => {
@@ -316,3 +321,28 @@ it("continues a paged conversation from the complete saved history and preserves
   expect((await call({ input: "重复提交", conversation: "owned", tjwater: { client_message_id: "client-turn-a" } })).status).toBe(409);
   expect(prompted).toHaveLength(1);
 });
+
+it("uses the same canonical live messages for session reads and older pages", async () => {
+  gate = new Promise<void>((resolve) => { release = resolve; });
+  const context = { actorKey: toActorKey("product:owner"), projectKey: toProjectKey(`product:${project}`), sessionId: "owned" };
+  const history = Array.from({ length: 5 }, (_, index) => ({ id: `old-${index}`, role: index % 2 ? "assistant" : "user",
+    parts: [{ type: "text", text: `历史 ${index}` }] as unknown[] }));
+  history[1].parts.push({ type: "data-question_request", data: { request_id: "old-question", session_id: "owned", questions: [] } });
+  await states.write(context, { sessionId: "owned", messages: history });
+  const response = await call({ input: "新一轮", conversation: "owned", stream: true, tjwater: { client_message_id: "live-user" } });
+  const headers = { Authorization: "Bearer owner", "X-Project-Id": project };
+  const live = await http(`${base}/api/v1/session/owned`, { headers });
+  const snapshot = await live.json();
+  expect(snapshot.is_streaming).toBe(true);
+  expect(snapshot.messages).toHaveLength(7);
+  expect(snapshot.messages.slice(0, 5)).toEqual(history);
+  expect(snapshot.messages[5].id).toBe("live-user");
+  const recent = await http(`${base}/api/v1/session/owned?message_limit=2`, { headers });
+  const page = await recent.json();
+  expect(page.messages).toEqual(snapshot.messages.slice(-2));
+  const older = await http(`${base}/api/v1/session/owned/messages?limit=40&before=${encodeURIComponent(page.message_page.before_cursor)}`, { headers });
+  expect(older.status).toBe(200);
+  expect((await older.json()).messages).toEqual(history);
+  release();
+  await response.text();
+});

tests/routes/sandboxToolBridge.test.ts

@@ -1,7 +1,7 @@
 import { afterEach, describe, expect, it } from "bun:test";
 import express from "express";
 import { type Server } from "node:http";
-import { mkdtemp, readFile, rm } from "node:fs/promises";
+import { mkdtemp, mkdir, readFile, rm, writeFile, symlink } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { config } from "../../src/config.js";
@@ -11,6 +11,7 @@ import { registerSandboxToolBridge } from "../../src/routes/sandboxToolBridge.js
 
 let server: Server | undefined;
 let root: string | undefined;
+const previousDataHome = process.env.XDG_DATA_HOME;
 const previousRoot = config.CONVERSATION_WORKSPACE_ROOT;
 const session = "sandbox-bridge-test";
 afterEach(async () => {
@@ -18,6 +19,8 @@ afterEach(async () => {
   if (root) await rm(root, { recursive: true, force: true });
   config.CONVERSATION_WORKSPACE_ROOT = previousRoot;
   removeRuntimeSessionContext(session);
+  if (previousDataHome === undefined) delete process.env.XDG_DATA_HOME;
+  else process.env.XDG_DATA_HOME = previousDataHome;
 });
 describe("sandbox execution bridge", () => {
   it("executes only after approval and cannot override the owning workspace", async () => {
@@ -31,6 +34,7 @@ describe("sandbox execution bridge", () => {
     const requested = new Promise<void>((resolve) => { ready = resolve; });
     const app = express(); app.use(express.json());
     registerSandboxToolBridge(app, { internalToken: "TEST_ONLY", runtime: {
+      messages: async () => [],
       ensureSessionWorkspace: async (id) => { expect(id).toBe(session); return directory; },
       approveSandboxShell: async (input) => { if (approved) return; expect(input.command).toContain("approved.txt"); ready(); await new Promise<void>((resolve) => { approve = resolve; }); approved = true; },
     } });
@@ -55,3 +59,50 @@ describe("sandbox execution bridge", () => {
     expect(await readFile(large.stdout_file, "utf8")).toBe(`${"x".repeat(10000)}\n`);
   });
 });
+
+
+it("stages only this session's native output and keeps the global directory sandboxed", async () => {
+  root = await mkdtemp(join(tmpdir(), "sandbox-output-test-"));
+  config.CONVERSATION_WORKSPACE_ROOT = root;
+  process.env.XDG_DATA_HOME = join(root, "native");
+  const output = join(process.env.XDG_DATA_HOME, "opencode", "tool-output");
+  await mkdir(output, { recursive: true });
+  const own = join(output, "tool_own"), other = join(output, "tool_other");
+  const content = JSON.stringify({ evidence_id: "fixture", readings: "完整结果".repeat(1000) });
+  await writeFile(own, content); await writeFile(other, "other session");
+  const directory = await createConversationWorkspace(root);
+  setRuntimeSessionContext({ sessionId: session, clientSessionId: session, actorKey: "owner", projectKey: "project", traceId: "test" });
+  const metadata = { truncated: true, outputPath: own };
+  const app = express(); app.use(express.json());
+  registerSandboxToolBridge(app, { internalToken: "TEST_ONLY", runtime: {
+    ensureSessionWorkspace: async () => directory,
+    approveSandboxShell: async () => {},
+    messages: async () => [{ info: { id: "native", role: "assistant" }, parts: [{
+      type: "tool", state: { status: "completed", metadata },
+    }] }] as never,
+  } });
+  server = app.listen(0, "127.0.0.1");
+  await new Promise<void>((resolve) => server!.once("listening", resolve));
+  const post = async (command: string) => {
+    const response = await fetch(`http://127.0.0.1:${(server!.address() as { port: number }).port}/internal/tools/sandbox-shell`, {
+      method: "POST", headers: { "Content-Type": "application/json", "x-agent-internal-token": "TEST_ONLY" },
+      body: JSON.stringify({ session_id: session, call_id: "fixture", message_id: "fixture", command }),
+    });
+    return { status: response.status, data: await response.json() as Record<string, any> };
+  };
+  const staged = await post(`cat '${own}'`);
+  expect(staged.status).toBe(200);
+  expect(staged.data.outcome).toBe("requires_session_path");
+  const file = staged.data.files[0];
+  expect(await readFile(join(directory, file.relative_path), "utf8")).toBe(content);
+  const result = await post(`python3 -c 'import hashlib; print(hashlib.sha256(open("${file.shell_path}","rb").read()).hexdigest())'`);
+  expect(result.data.exitCode).toBe(0);
+  expect(result.data.stdout.trim()).toBe(file.sha256);
+  const forbidden = await post(`cat '${other}'`);
+  expect(forbidden.data.exitCode).not.toBe(0);
+  expect(forbidden.data.stderr).toContain("Permission denied");
+  const link = join(output, "tool_link");
+  await symlink(other, link);
+  metadata.outputPath = link;
+  expect((await post(`cat '${link}'`)).status).toBe(503);
+});

tests/routes/server-contract-sync.test.ts

@@ -0,0 +1,39 @@
+import { expect, it } from "bun:test";
+import { createHash } from "node:crypto";
+import { copyFile, mkdir, mkdtemp, readFile, readdir, rm, symlink, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { astToString, COMMENT_HEADER, default as openapiTS } from "openapi-typescript";
+
+it.each(["valid", "invalid-schema", "invalid-digest"])("synchronizes the complete artifact group or preserves it (%s)", async (scenario) => {
+  const root = await mkdtemp(join(tmpdir(), "server-contract-sync-"));
+  try {
+    for (const directory of ["scripts", "openapi", "src/generated", "upstream"]) await mkdir(join(root, directory), { recursive: true });
+    await copyFile(new URL("../../scripts/server-contract.ts", import.meta.url), join(root, "scripts/server-contract.ts"));
+    await symlink(new URL("../../node_modules", import.meta.url).pathname, join(root, "node_modules"), "dir");
+    const targets = ["openapi/openapi.json", "openapi/server-manifest.json", "src/generated/server-api.d.ts"];
+    for (const target of targets) await writeFile(join(root, target), `original:${target}`);
+    const schema = { openapi: scenario === "invalid-schema" ? "9.9.9" : "3.1.0", info: { title: "Fixture", version: "1" }, paths: {} };
+    const raw = JSON.stringify(schema);
+    const manifest = { contracts: { server: { sha256: scenario === "invalid-digest" ? "incorrect" : createHash("sha256").update(raw).digest("hex") } } };
+    await writeFile(join(root, "upstream/schema.json"), raw);
+    await writeFile(join(root, "upstream/manifest.json"), JSON.stringify(manifest));
+    const child = Bun.spawn([process.execPath, "scripts/server-contract.ts", "--sync", "--upstream", "upstream/schema.json"], {
+      cwd: root, stdout: "pipe", stderr: "pipe",
+    });
+    const [code, stderr] = await Promise.all([child.exited, new Response(child.stderr).text()]);
+    if (scenario === "valid") {
+      expect(code).toBe(0);
+      expect(await readFile(join(root, targets[0]), "utf8")).toBe(raw);
+      expect(JSON.parse(await readFile(join(root, targets[1]), "utf8"))).toEqual(manifest);
+      expect(await readFile(join(root, targets[2]), "utf8")).toBe(COMMENT_HEADER + astToString(await openapiTS(schema)));
+    } else {
+      expect(code).not.toBe(0);
+      expect(stderr).toContain(scenario === "invalid-schema" ? "Unsupported OpenAPI version" : "contract digest differs");
+      for (const target of targets) expect(await readFile(join(root, target), "utf8")).toBe(`original:${target}`);
+    }
+    expect((await readdir(join(root, "openapi"))).sort()).toEqual(["openapi.json", "server-manifest.json"]);
+  } finally {
+    await rm(root, { recursive: true, force: true });
+  }
+});

tests/routes/sessionIsolation.test.ts

@@ -47,7 +47,7 @@ describe("chat session HTTP isolation", () => {
 
     const workspaces = new SessionWorkspaceStore(join(metadataDir, "workspaces"));
     const sessionMetadataStore = new SessionMetadataStore(metadataDir, workspaces);
-    const sessionUiStateStore = new SessionUiStateStore(join(metadataDir, "old-ui"), workspaces);
+    const sessionUiStateStore = new SessionUiStateStore(workspaces);
     await sessionMetadataStore.initialize();
     const ownerContext = {
       actorKey: toActorKey("product:user-a"),

tests/routes/task-collaboration-sessions.test.ts

@@ -33,7 +33,7 @@ async function fixture() {
   const context = { actorKey: toActorKey("product:owner"), projectKey: toProjectKey(`product:${projectId}`), projectId, userId: "owner" };
   const workspaces = new SessionWorkspaceStore(join(root, "workspaces"));
   const sessions = new SessionMetadataStore(join(root, "metadata"), workspaces);
-  const states = new SessionUiStateStore(join(root, "states"), workspaces);
+  const states = new SessionUiStateStore(workspaces);
   const taskNames = new Map([[firstTask, "南桥管道爆管调查"], [secondTask, "城南供水压力复核"]]);
   const taskReads: string[] = [];
   let available = true;

tests/routes/task-command-bridge.test.ts

@@ -0,0 +1,45 @@
+import { expect, it } from "bun:test";
+import express from "express";
+import type { OperationalTaskClient } from "../../src/product/operational-task-client.js";
+import { registerTaskCommandBridge } from "../../src/routes/task-command-bridge.js";
+import { removeRuntimeSessionContext, setRuntimeSessionContext } from "../../src/runtime/sessionContext.js";
+
+it("preserves command-specific session purposes and trusted bridge authentication", async () => {
+  const calls: unknown[][] = [];
+  const client = {
+    requestDataAccess: async (...args: unknown[]) => { calls.push(args); return {}; },
+    proposeAction: async (...args: unknown[]) => { calls.push(args); throw Object.assign(new Error("conflict"), { status: 409 }); },
+    addHumanEvidence: async (...args: unknown[]) => { calls.push(args); return {}; },
+  } as unknown as Pick<OperationalTaskClient, "requestDataAccess" | "proposeAction" | "addHumanEvidence">;
+  for (const purpose of ["task_execution", "task_collaboration"] as const) setRuntimeSessionContext({
+    sessionId: purpose, clientSessionId: `client-${purpose}`, taskId: "task", purpose,
+    actorKey: "actor", projectKey: "project", traceId: "test",
+  });
+  const app = express(); app.use(express.json());
+  registerTaskCommandBridge(app, { internalToken: "test-token", client });
+  const server = app.listen(0, "127.0.0.1");
+  await new Promise<void>((resolve) => server.once("listening", resolve));
+  const post = (kind: string, session: string, data: object, headers = {}) => fetch(`http://127.0.0.1:${(server.address() as { port: number }).port}/internal/operational-task/${kind}`, {
+    method: "POST", headers: { "Content-Type": "application/json", "x-agent-internal-token": "test-token", ...headers }, body: JSON.stringify({ session_id: session, ...data }),
+  });
+  const requestId = "60000000-0000-4000-8000-000000000001";
+  const access = { request: { requestId, nodeId: "read", scopes: ["scada_devices"], reason: "查询" } };
+  const evidence = { command: { request_id: requestId, evidence: { evidence_id: "e1", kind: "human_input", summary: "已复核", source_label: "用户", observed_at: "2026-11-09T00:00:00Z" } } };
+  try {
+    expect((await post("access-requests", "task_execution", access, { Origin: "http://browser.test" })).status).toBe(403);
+    expect((await post("access-requests", "task_execution", access, { "x-agent-internal-token": "wrong" })).status).toBe(403);
+    expect((await post("access-requests", "task_collaboration", access)).status).toBe(403);
+    expect((await post("human-evidence", "task_execution", evidence)).status).toBe(403);
+    expect(calls).toHaveLength(0);
+    expect((await post("access-requests", "task_execution", access)).status).toBe(200);
+    expect(calls[0]).toEqual(["task_execution", "task", { ...access.request, sourceSessionId: "client-task_execution" }]);
+    expect((await post("human-evidence", "task_collaboration", evidence)).status).toBe(200);
+    const action = { action: { request_id: requestId, reason: "核验", kind: "create_work_order", payload: { title: "采样", description: "核验", work_order_type: "general" } } };
+    expect((await post("actions", "task_execution", action)).status).toBe(409);
+    expect((await post("actions", "task_collaboration", action)).status).toBe(409);
+    expect((await post("actions", "unknown", action)).status).toBe(403);
+  } finally {
+    removeRuntimeSessionContext("task_execution"); removeRuntimeSessionContext("task_collaboration");
+    await new Promise<void>((resolve) => server.close(() => resolve()));
+  }
+});

tests/routes/task-publication-bridge.test.ts

@@ -60,6 +60,12 @@ describe("task publication bridge", () => {
       expect(published[1]?.args).toEqual([contexts[0], taskId, {
         requestId, sourceSessionId: "client-0", evidence: undefined, executionPlan: undefined, report: undefined, progress,
       }]);
+      const incremental = { summary: "失败后沿新路径继续", graph_update: {
+        nodes: [{ node_id: "attempt_1", label: "查询", status: "failed", detail: "接口超时" }],
+        edges: [],
+      } };
+      expect((await post("artifacts", { session_id: contexts[0], request_id: requestId, progress: incremental })).status).toBe(200);
+      expect(published.at(-1)?.args[2]).toMatchObject({ progress: incremental });
       const report = { title: "报告", current_conclusion: "核验结束", conclusion_boundary: "授权数据范围",
         stage: "final", outcome: "concluded", stop_reason: null, data_gaps: [] };
       expect((await post("artifacts", { session_id: contexts[1], request_id: requestId, report })).status).toBe(200);

tests/runtime/hostQuestion.test.ts

@@ -33,11 +33,11 @@ test("native question lookup distinguishes missing form from unavailable service
   const adapter = Object.assign(Object.create(OpencodeRuntimeAdapter.prototype), {
     ensureClient: async () => ({ session: { form: { get: async () => { if (failure) throw failure; return { state: { status: "answered" } }; } } } }),
   }) as OpencodeRuntimeAdapter;
-  expect(await adapter.getQuestionStatus({ sessionId: "s", requestId: "form" })).toBe("missing");
+  expect(await adapter.getQuestion({ sessionId: "s", requestId: "form" })).toBeNull();
   failure = new Error("network unavailable");
-  await expect(adapter.getQuestionStatus({ sessionId: "s", requestId: "form" })).rejects.toThrow("network unavailable");
+  await expect(adapter.getQuestion({ sessionId: "s", requestId: "form" })).rejects.toThrow("network unavailable");
   failure = undefined;
-  expect(await adapter.getQuestionStatus({ sessionId: "s", requestId: "form" })).toBe("answered");
+  expect(await adapter.getQuestion({ sessionId: "s", requestId: "form" })).toMatchObject({ state: { status: "answered" } });
 });
 test("message admission lookup fails closed on inbox and message transport errors", async () => {
   let inboxFailure = true;

tests/sessions/answerViewState.test.ts

@@ -26,7 +26,7 @@ describe("answer view state", () => {
   beforeEach(async () => {
     base = await mkdtemp(join(tmpdir(), "answer-state-"));
     workspaces = new SessionWorkspaceStore(join(base, "workspaces"));
-    messages = new SessionUiStateStore(join(base, "unused"), workspaces);
+    messages = new SessionUiStateStore(workspaces);
     states = new AnswerViewStateStore(workspaces);
     currentSpec = spec();
     await saveMessages();

tests/sessions/learningLifecycle.test.ts

@@ -44,7 +44,7 @@ describe("learning session lifecycle", () => {
   });
   const orchestrator = (runtime: object) => new LearningOrchestrator(
     runtime as OpencodeRuntimeAdapter, new MemoryStore(join(base, "memory"), join(base, "memory-backup")),
-    new SessionTranscriptStore(join(base, "legacy-transcripts"), records), state,
+    new SessionTranscriptStore(records), state,
   );
 
   it("releases both native helper sessions after a completed review and persists progress in chat", async () => {

tests/sessions/transcriptStore.test.ts

@@ -3,6 +3,7 @@ import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
+import { SessionWorkspaceStore } from "../../src/sessions/workspace-store.js";
 import { SessionTranscriptStore } from "../../src/sessions/transcriptStore.js";
 
 describe("SessionTranscriptStore", () => {
@@ -11,8 +12,7 @@ describe("SessionTranscriptStore", () => {
 
   beforeEach(async () => {
     tempDir = await mkdtemp(join(tmpdir(), "tjwater-transcript-"));
-    store = new SessionTranscriptStore(tempDir);
-    await store.initialize();
+    store = new SessionTranscriptStore(new SessionWorkspaceStore(tempDir));
   });
 
   afterEach(async () => {

tests/sessions/uiStateStore.test.ts

@@ -2,18 +2,18 @@ import { expect, it } from "bun:test";
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { SessionWorkspaceStore } from "../../src/sessions/workspace-store.js";
 import { SessionUiStateStore } from "../../src/sessions/uiStateStore.js";
 
 it("restores plan history independently of chat messages after reconnecting", async () => {
   const directory = await mkdtemp(join(tmpdir(), "tjwater-plan-state-"));
   try {
-    const store = new SessionUiStateStore(directory);
-    await store.initialize();
+    const store = new SessionUiStateStore(new SessionWorkspaceStore(directory));
     const executionPlans = [{ revision: 1, nodes: [{ id: "sampling", status: "waiting" }] }];
-    await store.write({ sessionId: "session-1" }, { sessionId: "session-1", messages: [], executionPlans });
-    const reloaded = await new SessionUiStateStore(directory).read({ sessionId: "session-1" });
+    await store.write({ sessionId: "session-1", actorKey: "actor-test", projectKey: "project-test" }, { sessionId: "session-1", messages: [], executionPlans });
+    const reloaded = await new SessionUiStateStore(new SessionWorkspaceStore(directory)).read({ sessionId: "session-1", actorKey: "actor-test", projectKey: "project-test" });
     expect(reloaded?.executionPlans).toEqual(executionPlans);
-    expect(await store.read({ sessionId: "other-session" })).toBeNull();
+    expect(await store.read({ sessionId: "other-session", actorKey: "actor-test", projectKey: "project-test" })).toBeNull();
   } finally {
     await rm(directory, { recursive: true, force: true });
   }

tests/sessions/workspaceStore.test.ts

@@ -20,11 +20,11 @@ describe("owned session workspaces", () => {
   afterEach(async () => { await rm(base, { recursive: true, force: true }); });
 
   it("keeps messages and searchable transcripts private to their user and scope", async () => {
-    const ui = new SessionUiStateStore(join(base, "old-ui"), records);
-    const transcript = new SessionTranscriptStore(join(base, "old-transcripts"), records);
+    const ui = new SessionUiStateStore(records);
+    const transcript = new SessionTranscriptStore(records);
     await ui.write(owner, { sessionId: owner.sessionId, messages: [{ text: "private answer" }] });
     await transcript.appendTurn(owner, { userMessage: "private question", assistantMessage: "private answer", toolCallCount: 0 });
-    expect((await new SessionUiStateStore(join(base, "old-ui"), records).read(owner))?.messages).toHaveLength(1);
+    expect((await new SessionUiStateStore(records).read(owner))?.messages).toHaveLength(1);
     expect(await ui.read({ ...owner, actorKey: "actor-b" })).toBeNull();
     expect(await ui.read({ ...owner, projectKey: "project-b" })).toBeNull();
     expect(await transcript.search(owner, "private")).toHaveLength(2);
@@ -36,7 +36,7 @@ describe("owned session workspaces", () => {
   });
 
   it("has a separate personal namespace for each user and separates it from projects", async () => {
-    const ui = new SessionUiStateStore(join(base, "old-ui"), records);
+    const ui = new SessionUiStateStore(records);
     const personal = { ...owner, projectKey: "personal-actor-a" };
     await ui.write(personal, { sessionId: owner.sessionId, messages: [{ text: "personal answer" }] });
     expect(records.path(personal, "messages.json")).toContain("/actor-a/personal/");
@@ -60,13 +60,13 @@ describe("owned session workspaces", () => {
     expect(await records.migrateLegacyRecords(options)).toEqual({ uiStates: 1, transcripts: 1, learningStates: 0, retainedUnownedUiStates: 1 });
     expect(await readFile(records.path(owner, "messages.json"), "utf8")).toBe(messages);
     expect(await readFile(records.path(owner, "transcript.json"), "utf8")).toBe(turns);
-    await new SessionUiStateStore(uiStateDir, records).write(owner, { sessionId: owner.sessionId, messages: [{ text: "new answer" }] });
+    await new SessionUiStateStore(records).write(owner, { sessionId: owner.sessionId, messages: [{ text: "new answer" }] });
     expect((await records.migrateLegacyRecords(options)).uiStates).toBe(0);
     const archive = join(sessionWorkspaceDirectory(records.backupRoot, owner), "chat");
     const backup = (await readdir(archive)).find((name) => name.startsWith("messages-"))!;
     expect(await readFile(join(archive, backup), "utf8")).toBe(messages);
     expect(await readdir(uiStateDir)).toEqual(["orphan.json"]);
-    expect((await new SessionUiStateStore(uiStateDir, records).read(owner))?.messages).toEqual([{ text: "new answer" }]);
+    expect((await new SessionUiStateStore(records).read(owner))?.messages).toEqual([{ text: "new answer" }]);
   });
 
   it("rejects traversal, linked records and mismatched ownership", async () => {
@@ -75,7 +75,7 @@ describe("owned session workspaces", () => {
     const foreign = join(base, "foreign.json");
     await writeFile(foreign, "private");
     await symlink(foreign, records.path(owner, "messages.json"));
-    await expect(new SessionUiStateStore(join(base, "old-ui"), records).read(owner)).rejects.toThrow("symbolic link");
+    await expect(new SessionUiStateStore(records).read(owner)).rejects.toThrow("symbolic link");
     await writeFile(join(sessionWorkspaceDirectory(records.root, owner), "chat", "owner.json"), JSON.stringify({ ...owner, actorKey: "actor-b" }));
     await expect(records.ensure(owner)).rejects.toThrow("ownership mismatch");
   });
@@ -114,8 +114,8 @@ describe("owned session workspaces", () => {
     for (const path of [metadataDir, uiStateDir, transcriptDir, learningStateDir]) await mkdir(path);
     const metadata = new SessionMetadataStore(metadataDir, records);
     const { record } = await metadata.ensure(owner);
-    const ui = new SessionUiStateStore(uiStateDir, records);
-    const transcript = new SessionTranscriptStore(transcriptDir, records);
+    const ui = new SessionUiStateStore(records);
+    const transcript = new SessionTranscriptStore(records);
     const learning = new SessionLearningStateStore(learningStateDir, records);
     const legacyUi = JSON.stringify({ sessionId: owner.sessionId, messages: [{ text: "private content" }] });
     await writeFile(join(uiStateDir, "chat.json"), legacyUi);
@@ -153,7 +153,7 @@ describe("owned session workspaces", () => {
     const metadataDir = join(base, "metadata");
     const metadata = new SessionMetadataStore(metadataDir, records);
     const { record } = await metadata.ensure(owner);
-    const transcript = new SessionTranscriptStore(join(base, "legacy"), records);
+    const transcript = new SessionTranscriptStore(records);
     await transcript.appendTurn(owner, { userMessage: "private question", assistantMessage: "private answer", toolCallCount: 0 });
     const markDeleted = records.markDeleted.bind(records);
     records.markDeleted = async () => { throw new Error("disk write interrupted"); };
@@ -163,7 +163,7 @@ describe("owned session workspaces", () => {
     await expect(records.writeRecord(owner, "messages.json", { sessionId: owner.sessionId, messages: [] })).rejects.toThrow("session not found");
     records = new SessionWorkspaceStore(records.root, records.backupRoot);
     const restarted = new SessionMetadataStore(metadataDir, records);
-    expect(await new SessionTranscriptStore(join(base, "legacy"), records).search(owner, "private")).toEqual([]);
+    expect(await new SessionTranscriptStore(records).search(owner, "private")).toEqual([]);
     await expect(restarted.ensure(owner)).rejects.toThrow("session not found");
     await markDeleted(owner);
     await restarted.remove(record);