Wire preview capabilities into the app shell and dual-dock placement

Why: the adjudicated plan (D1-D4) calls for office/link previews with
loaders injected from the host, right-rail light preview alongside the
overlay viewer, and artifact deletion kept as an API capability with no
UI entry.

Evidence: previewsetup.ts injects docx (mammoth), xlsx (SheetJS, sheet
tabs, 200-row cap), pptx (pptx-preview full-fidelity; pptx2html was
dropped for a broken module entry — tXml case mismatch breaks Linux
builds — per the D2 fallback clause), and the /api/url-preview fetcher,
all via dynamic import: the main entry grows ~12KB while xlsx (430KB),
pptx (1.2MB) and jszip (98KB) load on first preview. DocViewer becomes a
FilePreview container (keeps text-family editing); Workbench gains a
preview tab with rail-preview state (store.railPreview); artifact chips
and panel rows gain a rail-preview action; the panel delete button is
removed while api.deleteArtifact and DELETE /api/artifacts/{id} remain.
tsc clean; vitest 33 passed; production build succeeds.

Impact: previews work end to end for the whole format matrix; deletion
stays plugin-reachable only.

Refs: task feature/file-preview-caps; ui fb76239; core 4d29301; backend
6d4ccfd.

.gitignore

@@ -1,3 +1,4 @@
-node_modules/
+# 无斜杠形式同时忽略目录与符号链接（目录式规则不匹配 symlink，曾致链接被提交）。
+node_modules
 dist/
 *.local

AGENTS.md

@@ -17,3 +17,20 @@
 - 模块边界、公开契约与隔离档位见 `policy/modules/`（如有）与 PROJECT.md。
 - 跨仓 gitlink 变更须经组合验证后在 Dev 仓推进；受保护分支经 PR 合入。
 - 验证命令见 PROJECT.md「验证」节；完成声明须附实际命令输出证据。
+
+## Gitea 与 Git 访问事实（2026-09-30 实测）
+
+历史文档与旧链接里的 `git-panel.u1680832.nyat.app:30319` 已失效（TLS 握手失败），
+见到一律按过期处理，不要再试。当前权威通道：
+
+- **Web / API（HTTPS）**：`https://git-home.u1680832.nyat.app:30319`（Gitea 1.27.3，
+  API 前缀 `/api/v1`；偶发 broken pipe / 超时，重试即可）。
+- **Git over SSH**：`ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/<Repo>.git`
+  （各仓 origin 与 gitlink 均为此格式）。
+- **API token**：`~/.secrets/gitea`，两行键值 `URL_PREFIX=…` 与
+  `ACCESS_TOKEN=<40 位 hex>`；取值 `grep ACCESS_TOKEN ~/.secrets/gitea | cut -d= -f2-`，
+  用作 `Authorization: token <值>` 请求头。**token 值不入仓、不回显、不写进产出物**
+  （baseline 硬边界 2：只记录来源、字段与可用状态）。
+- **SSH key**：`~/.ssh/home_gitea`（ED25519，公钥指纹
+  `SHA256:GYXaOXIMeloQ1fKSfdJ/ndgPQzs/Ix7Hk62ekfkfQ20`，Gitea 侧密钥名 GMKtec）；
+  `~/.ssh/config` 已有 `git-ssh.u1680832.nyat.app` 主机条目，克隆/推送直接可用。

package.json

@@ -10,9 +10,13 @@
     "preview": "vite preview"
   },
   "dependencies": {
+    "jszip": "^3.10.2",
+    "mammoth": "^1.13.0",
     "marked": "^15.0.7",
+    "pptx-preview": "^1.0.7",
     "react": "^19.2.0",
-    "react-dom": "^19.2.0"
+    "react-dom": "^19.2.0",
+    "xlsx": "^0.18.5"
   },
   "devDependencies": {
     "@types/react": "^19.2.0",
@@ -20,6 +24,6 @@
     "@vitejs/plugin-react": "^4.3.4",
     "typescript": "^5.7.3",
     "vite": "^6.0.11",
-    "vitest": "^3.0.5"
+    "vitest": "^4.1.11"
   }
 }

src/App.tsx

@@ -11,6 +11,7 @@ import { Workbench } from './components/Workbench'
 import { Workspaces, workspaceShortcuts } from './components/Workspaces'
 import { AgentTracker } from './components/AgentTracker'
 import { SettingsModal } from './components/SettingsModal'
+import { ProjectSettingsModal } from './components/ProjectSettingsModal'
 import { DocViewer } from './components/DocViewer'
 
 // 三栏布局：左（项目会话）/ 中（对话）/ 右（工作台）；分隔条拖拽与超调收起（4.4）。
@@ -146,6 +147,7 @@ export function App() {
       <Workspaces />
       {trackerRunId && <AgentTracker />}
       {ui.settingsOpen && <SettingsModal />}
+      {ui.projectSettingsId && <ProjectSettingsModal />}
       {ui.adminUsersOpen && <AdminUsersModal onClose={() => store.setUI({ adminUsersOpen: false })} />}
       {ui.changePwOpen && <ChangePasswordModal onClose={() => store.setUI({ changePwOpen: false })} />}
       {viewingArtifact && <DocViewer artifact={viewingArtifact} />}

src/api.ts

@@ -26,7 +26,7 @@ export const api = {
   listConversations: (projectId: string) => auth.fetch(`${BASE}/api/projects/${projectId}/conversations`).then(r => json<Conversation[]>(r)),
   // 跨项目任务列表（方案 A 侧栏）：默认仅未归档；includeArchived 含归档。
   listTasks: (includeArchived?: boolean) => auth.fetch(`${BASE}/api/conversations${includeArchived ? '?archived=1' : ''}`).then(r => json<Conversation[]>(r)),
-  setConversationFlags: (id: string, flags: { pinned?: boolean; archived?: boolean }) => auth.fetch(`${BASE}/api/conversations/${id}`, { method: 'PATCH', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(flags) }).then(r => { if (!r.ok) throw new Error(`${r.status}: ${r.statusText}`) }),
+  setConversationFlags: (id: string, flags: { pinned?: boolean; archived?: boolean; allowCrossRead?: boolean; crossPrivate?: boolean }) => auth.fetch(`${BASE}/api/conversations/${id}`, { method: 'PATCH', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(flags) }).then(r => { if (!r.ok) throw new Error(`${r.status}: ${r.statusText}`) }),
   me: () => auth.fetch(`${BASE}/api/me`).then(r => json<{ owner: string; name: string; auth: boolean; isAdmin?: boolean; mustChangePassword?: boolean }>(r)),
   // ---- 认证与会话（管理员发放制，R2）----
   login: (owner: string, password: string) => auth.fetch(`${BASE}/api/auth/login`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ owner, password }) }).then(async r => {
@@ -78,7 +78,13 @@ export const api = {
   },
   listArtifacts: (projectId: string) => auth.fetch(`${BASE}/api/projects/${projectId}/artifacts`).then(r => json<Artifact[]>(r)),
   artifactContentUrl: (id: string) => auth.withKey(`${BASE}/api/artifacts/${id}/content`),
+  // 下载直链：后端按 ?download=1 回 Content-Disposition: attachment（RFC 5987 文件名）。
+  artifactDownloadUrl: (id: string) => {
+    const url = auth.withKey(`${BASE}/api/artifacts/${id}/content`)
+    return url.includes('?') ? `${url}&download=1` : `${url}?download=1`
+  },
   saveArtifactContent: (id: string, content: string) => auth.fetch(`${BASE}/api/artifacts/${id}/content`, { method: 'PUT', body: content }),
+  deleteArtifact: (id: string) => auth.fetch(`${BASE}/api/artifacts/${id}`, { method: 'DELETE' }),
 
   getPlan: (convId: string) => auth.fetch(`${BASE}/api/conversations/${convId}/plan`).then(r => r.ok ? r.json() : null) as Promise<PlanSnapshot | null>,
   getTodos: (convId: string) => auth.fetch(`${BASE}/api/conversations/${convId}/todos`).then(r => r.ok ? r.json() : null) as Promise<TodoList | null>,

src/components/Conversation.tsx

@@ -4,9 +4,11 @@ import { useEffect, useMemo, useRef, useState } from 'react'
 import { marked } from 'marked'
 import { api } from '../api'
 import { store, useStore, activeRun, type LiveState, type ContextObs } from '../store'
-import type { Message, Part, HITLCard } from '../contracts'
-import { UIRenderer, InlineConfirmCard, hasOpenConfirm } from '@ui'
+import { liveToMessage, showProcessInline } from '../live'
+import type { Message, Part, HITLCard, ActivityCard } from '../contracts'
+import { UIRenderer, InlineConfirmCard, hasOpenConfirm, CardAnchor } from '@ui'
 import { docBridge } from './Workbench'
+import { groupParts, artifactIcon } from '../messageparts'
 
 // marked 走标准 Markdown 语义（不开 breaks）：模型输出按块级排版渲染，
 // 行内换行交给段落折叠，避免与 CSS 块间距叠加出松散排版。
@@ -33,18 +35,38 @@ function PartView({ part, live }: { part: Part; live?: boolean | null }) {
         {part.toolCall?.name ?? part.toolResult?.callId} <span className={`status-${st}`}>{st === 'ok' ? '✓' : '✗'}</span>
       </span>
     }
-    case 'artifact_ref':
-      return <span className="artifact-chip" onClick={() => {
-        const art = findArtifact(part.artifact!.artifactId)
-        if (art) store.viewArtifact(art)
-      }}>📄 {part.artifact?.name}</span>
+    case 'artifact_ref': {
+      const a = part.artifact
+      const art = a ? findArtifact(a.artifactId) : undefined
+      const name = a?.name ?? '工件'
+      const icon = artifactIcon(name, a?.kind ?? art?.kind)
+      return (
+        <span className="artifact-chip" data-artifact-chip={a?.artifactId}>
+          <button className="ac-main" title={`打开 ${name}`} onClick={() => { if (art) store.viewArtifact(art) }}>
+            <Icon name={icon} size={14} /> {name}
+          </button>
+          <button className="ac-act" title={`右栏预览 ${name}（边聊边看）`}
+            onClick={() => { if (art) store.railPreview(art) }}><Icon name="panel-left" size={13} /></button>
+          <a className="ac-act" title={`下载 ${name}`} href={api.artifactDownloadUrl(a?.artifactId ?? '')}
+            download={name} onClick={e => e.stopPropagation()}><Icon name="download" size={13} /></a>
+        </span>
+      )
+    }
     case 'hitl':
       return <div className="tool-chip"><Icon name="message" size={12} /> {part.hitl?.question} → {part.hitl?.answer || '…'}</div>
     case 'plan':
       return null // 计划在右栏 Plan 标签呈现
     case 'card': {
-      // cardlink 互定位（D32）：点击 ↗ 定位收件箱对应卡（从 data 中解析 card:<id>）。
-      const m = /card:([A-Za-z0-9_]+)/.exec(JSON.stringify(part.card?.data ?? ''))
+      // 卡流锚点（D39）：cardId 非空 = submit_card 引用部件——中栏自足（可展开全文）+ 跳收件箱。
+      if (part.card?.cardId) {
+        const ref = part.card.cardId
+        const card = findCard(ref)
+        const bodyChars = card?.body?.reduce((n, node) => n + (node.markdown?.length ?? 0), 0)
+        return <CardAnchor title={card?.title ?? part.card.kind} chars={bodyChars} card={card}
+          onLocate={() => store.openInbox(ref)} docBridge={docBridge} />
+      }
+      // 插件内嵌卡片部件（cardlink 互定位，D32）：点击 ↗ 定位收件箱对应卡（从 data 解析 card:<id>）。
+      const m = JSON.stringify(part.card?.data ?? '').match(/card:([A-Za-z0-9_]+)/)
       return (
         <div className="ui-section card-link" title={m ? '点击在收件箱中定位' : undefined}
           onClick={() => m && store.openInbox(m[1])}>
@@ -65,6 +87,12 @@ function findArtifact(id: string) {
   return artifactCache[id]
 }
 
+// 收件箱卡片查询缓存（store.cards 的派生索引；卡流锚点取卡数据用）。
+let cardCache: Record<string, ActivityCard> = {}
+function findCard(id: string) {
+  return cardCache[id]
+}
+
 // 过程折叠：run 终态后把连续 process 部件折叠为摘要行（可展开回看）。
 function ProcessCollapse({ parts }: { parts: Part[] }) {
   const toolCount = parts.filter(p => p.type === 'tool_call').length
@@ -82,51 +110,67 @@ function ProcessCollapse({ parts }: { parts: Part[] }) {
   )
 }
 
+// 长回复折叠阈值（CF0）：终态后超长正文收成摘要行，点击展开全文；live 期间全文可见。
+const LONG_REPLY_CHARS = 800
+
+function LongReplyCollapse({ text }: { text: string }) {
+  // 摘句取压缩空白后的前 100 字；字数按 Markdown 源码长度计。
+  const excerpt = text.replace(/\s+/g, ' ').trim().slice(0, 100)
+  return (
+    <details className="process-collapse long-reply">
+      <summary>
+        <span>📄 长回复</span>
+        <span>{text.length} 字（按 Markdown 源码计）</span>
+        {excerpt && <span style={{ color: 'var(--text-faint)' }}>{excerpt}…</span>}
+      </summary>
+      <div className="body">
+        <div className="part-text" dangerouslySetInnerHTML={{ __html: marked.parse(text) }} />
+      </div>
+    </details>
+  )
+}
+
 function AssistantMessage({ msg, live }: { msg: Message; live?: LiveState | null }) {
   const autoCollapse = useStore(s => s.ui.autoCollapseProcess)
   const ctxObs = useStore(s => (msg.runId ? s.contextObs[msg.runId] : undefined))
   const parts = msg.parts ?? []
-  const split = useMemo(() => {
-    const out: { process: Part[]; content: Part[] } = { process: [], content: [] }
-    for (const p of parts) (p.process ? out.process : out.content).push(p)
-    return out
-  }, [parts])
+  // 顺序保真（渲染顺序 = 落库顺序）：连续过程部件就地聚块，内容部件原位保留——
+  // 工具调用显示在它真正发生的位置，不被抽到消息头部重排。
+  const blocks = useMemo(() => groupParts(parts), [parts])
 
-  // 流式中：过程部件实时展开；run 终态后：按偏好折叠为摘要行（可回看）。
-  const showProcessInline = live || !autoCollapse
+  // 流式期间：工具/思考阶段过程实时展开；一旦进入 responding（最终回复开始流式）
+  // 立即折叠过程，只显式显示回复（Cursor 式）；工具恢复（acting）时重新展开。
+  // run 终态后：按偏好折叠为摘要行（可回看）。
+  const showProcess = showProcessInline(live ?? null, autoCollapse)
+  const lastContentIdx = (() => {
+    for (let i = blocks.length - 1; i >= 0; i--) if (blocks[i].kind === 'content') return i
+    return -1
+  })()
   return (
-    <div className="msg assistant">
+    <div className="msg assistant" data-msg-id={msg.id}>
       <div className="msg-role">
         <span className="role-mark role-assistant"><BrandMark size={16} /></span>
         <span>助手</span>
         {live && <span className="live-bar"><span className="live-dot" />{live.phase}</span>}
       </div>
-      {split.process.length > 0 && (showProcessInline
-        ? split.process.map((p, i) => <div className="part" key={i}><PartView part={p} live={!!live} /></div>)
-        : <ProcessCollapse parts={split.process} />)}
-      {split.content.map((p, i) => <div className="part" key={i}><PartView part={p} live={!!(live && i === split.content.length - 1 && p.type === 'text')} /></div>)}
+      {blocks.map((b, i) => b.kind === 'process'
+        ? (showProcess
+          ? <div className="part-group" key={i}>{b.parts.map((p, j) => <div className="part" key={j}><PartView part={p} live={!!live} /></div>)}</div>
+          : <ProcessCollapse key={i} parts={b.parts} />)
+        : (() => {
+          // CF0：非 live 的超长文本部件折叠为摘要行；live 与短文本不受影响。
+          if (!live && b.part.type === 'text' && (b.part.text?.length ?? 0) > LONG_REPLY_CHARS)
+            return <LongReplyCollapse key={i} text={b.part.text ?? ''} />
+          return <div className="part" key={i}>
+            <PartView part={b.part} live={!!(live && i === lastContentIdx && b.part.type === 'text')} />
+          </div>
+        })())}
       {live && <LiveAgentNotes live={live} />}
       {!live && ctxObs && <ContextObsView obs={ctxObs} />}
     </div>
   )
 }
 
-// live 投影：run 进行中没有已落库的助手消息，把 LiveState 合成为同构的临时消息
-// 复用 AssistantMessage 渲染（思考/工具/文本实时上屏）；run 终态对账后由真消息替代。
-function liveToMessage(live: LiveState): Message {
-  const parts: Part[] = []
-  if (live.thinking) parts.push({ type: 'thinking', text: live.thinking, process: true })
-  for (const tc of live.toolCalls) {
-    parts.push({ type: 'tool_call', process: true, toolCall: { id: '', name: tc.name } })
-    if (tc.status !== undefined) {
-      parts.push({ type: 'tool_result', process: true, toolCall: { id: '', name: tc.name },
-        toolResult: { callId: '', status: tc.status === 'error' ? 'error' : 'ok', summary: tc.summary } })
-    }
-  }
-  if (live.text) parts.push({ type: 'text', text: live.text })
-  return { id: `live:${live.runId}`, conversationId: '', role: 'assistant', runId: live.runId, parts, createdAt: '' }
-}
-
 // 上下文组装观测（4.10/4.17）：模型实际看到什么、裁了什么——可解释性入口。
 function ContextObsView({ obs }: { obs: ContextObs }) {
   return (
@@ -233,12 +277,13 @@ export function Conversation() {
   const bodyRef = useRef<HTMLDivElement>(null)
 
   artifactCache = Object.fromEntries(artifacts.map(a => [a.id, a]))
+  cardCache = Object.fromEntries(cards.map(c => [c.id, c]))
 
   const active = activeRun(runs)
 
   useEffect(() => {
     bodyRef.current?.scrollTo({ top: bodyRef.current.scrollHeight })
-  }, [messages.length, live?.text, live?.thinking, live?.toolCalls.length, live?.phase, activeHitl.length])
+  }, [messages.length, live?.items, live?.phase, activeHitl.length])
 
   const send = async () => {
     if (!text.trim() && attachmentIds.length === 0) return
@@ -272,6 +317,13 @@ export function Conversation() {
           }}>
           {profiles.map(p => <option key={p.id} value={p.id}>{p.name}</option>)}
         </select>
+        <button className="btn ghost" style={{ display: 'inline-flex', alignItems: 'center', gap: 4 }}
+          title={conversation?.allowCrossRead === false
+            ? '本会话不读取其他会话记录（点击开启）'
+            : '本会话可读取同项目其他会话记录（需项目设置开启跨会话读取；点击关闭）'}
+          onClick={() => currentConvId && store.setCrossFlags(currentConvId, { allowCrossRead: conversation?.allowCrossRead === false })}>
+          <Icon name="users" size={13} />跨读{conversation?.allowCrossRead === false ? '·关' : '·开'}
+        </button>
         <span title={connected ? '事件流已连接' : '事件流重连中'} className={`conn-dot ${connected ? 'on' : 'off'}`} />
         {active && <button className="btn ghost" onClick={() => store.cancelActive()}>停止</button>}
       </div>
@@ -291,7 +343,7 @@ export function Conversation() {
             // 内联确认卡（T3）：锚定本消息的危险命令确认，双现于对话流与收件箱。
             const anchored = cards.filter(c => c.anchorMessageId === m.id && c.kind === 'confirm')
             return (
-              <div className="msg user" key={m.id}>
+              <div className="msg user" key={m.id} data-msg-id={m.id}>
                 <div className="msg-role">
                   <span className="role-mark"><Avatar name={myName} size="sm" /></span>你
                 </div>

src/components/DocViewer.tsx

@@ -1,52 +1,61 @@
-// 右栏文档查看器（4.4）：markdown 渲染 / 文本编辑保存 / 图片预览 / 其他下载。
+// 文档查看器（4.4 → 预览能力收敛）：格式渲染统一交给 @ui FilePreview
+// （md/图片/pdf/代码/数据/docx/xlsx/pptx/URL 一套分派），这里只保留 OverlayHost
+// 容器、工具栏与文本族的在线编辑保存。
 import { useEffect, useState } from 'react'
-import { marked } from 'marked'
 import { api } from '../api'
 import { store } from '../store'
-import { OverlayHost } from '@ui'
+import { OverlayHost, Icon, Btn, FilePreview } from '@ui'
 import type { Artifact } from '../contracts'
+import { humanSize } from '../messageparts'
 
 export function DocViewer({ artifact }: { artifact: Artifact }) {
   const [content, setContent] = useState<string | null>(null)
   const [editing, setEditing] = useState(false)
   const [dirty, setDirty] = useState(false)
 
+  const textKind = isTextKind(artifact)
   useEffect(() => {
-    if (artifact.kind === 'image' || isBinaryKind(artifact)) return
+    if (!textKind) return
+    setContent(null)
     fetch(api.artifactContentUrl(artifact.id)).then(r => r.text()).then(setContent).catch(() => setContent('（读取失败）'))
   }, [artifact.id])
 
+  const source = {
+    kind: 'artifact' as const,
+    id: artifact.id,
+    name: artifact.name,
+    mime: artifact.mime,
+    contentUrl: api.artifactContentUrl(artifact.id),
+    downloadUrl: api.artifactDownloadUrl(artifact.id),
+  }
+
   return (
     <OverlayHost title={artifact.name} icon="📄" onClose={() => store.viewArtifact(null)}>
-      <div className="modal">
-        <div className="modal-header">
-          📄 {artifact.name}
+      <div className="docv">
+        <div className="docv-toolbar">
+          <span className="docv-meta">{artifact.kind}{humanSize(artifact.size) ? ` · ${humanSize(artifact.size)}` : ''}</span>
           <span className="spacer" />
-          {dirty && <span style={{ color: 'var(--warn)', fontSize: 12, marginRight: 8 }}>未保存</span>}
-          {isTextKind(artifact) && !isBinaryKind(artifact) && (
+          {dirty && <span className="docv-dirty">未保存</span>}
+          {textKind && (
             <>
-              <button className="btn ghost" onClick={() => setEditing(e => !e)}>{editing ? '预览' : '编辑'}</button>
-              {editing && <button className="btn" disabled={!dirty} onClick={async () => {
+              <Btn variant="ghost" icon={editing ? 'eye' : 'list'} onClick={() => setEditing(e => !e)}>{editing ? '预览' : '编辑'}</Btn>
+              {editing && <Btn variant="primary" icon="check" disabled={!dirty} onClick={async () => {
                 await api.saveArtifactContent(artifact.id, content ?? '')
                 setDirty(false)
                 store.toast('已保存')
-              }}>保存</button>
-              }
+              }}>保存</Btn>}
             </>
           )}
-          <a className="btn ghost" style={{ textDecoration: 'none' }} href={api.artifactContentUrl(artifact.id)} download={artifact.name}>下载</a>
-          <button className="btn ghost" onClick={() => store.viewArtifact(null)}>关闭</button>
+          <a className="btn v-ghost docv-dl" href={api.artifactDownloadUrl(artifact.id)} download={artifact.name}>
+            <Icon name="download" size={14} /> 下载
+          </a>
         </div>
-        <div className="modal-body">
-          {artifact.kind === 'image' ? (
-            <img src={api.artifactContentUrl(artifact.id)} alt={artifact.name} style={{ maxWidth: '100%' }} />
-          ) : isBinaryKind(artifact) ? (
-            <div style={{ color: 'var(--text-faint)' }}>二进制工件——请下载查看（docx 深度预览为远期项；md/txt 可在线查看）</div>
-          ) : editing ? (
-            <textarea className="search-input" style={{ height: '60vh', fontFamily: 'var(--mono)', fontSize: 12.5 }}
-              value={content ?? ''} onChange={e => { setContent(e.target.value); setDirty(true) }} />
+        <div className="docv-body">
+          {editing && textKind ? (
+            <textarea className="search-input docv-editor" value={content ?? ''}
+              onChange={e => { setContent(e.target.value); setDirty(true) }} />
           ) : (
-            <div className="doc-viewer" dangerouslySetInnerHTML={{ __html: marked.parse(content ?? '（加载中…') as string }} />
+            <FilePreview source={source} />
           )}
         </div>
       </div>
@@ -57,7 +66,3 @@ export function DocViewer({ artifact }: { artifact: Artifact }) {
 function isTextKind(a: Artifact): boolean {
   return a.kind === 'document' && /\.(md|txt|csv|log|json)$/i.test(a.name)
 }
-
-function isBinaryKind(a: Artifact): boolean {
-  return /\.(docx|pdf|xlsx|pptx|png|jpg|jpeg|gif|webp)$/i.test(a.name)
-}

src/components/ProjectSettingsModal.tsx

@@ -0,0 +1,86 @@
+// 项目设置面板（提案 2026-09-30-cross-session-reading）：首个项目级设置 UI。
+// schema 驱动渲染 project scope（4.9 覆盖链：system → user → project），
+// 写 putProjectSettings；后续项目级设置项经 settings schema 自动出现，零开发。
+import { useEffect, useMemo, useState } from 'react'
+import { api } from '../api'
+import { store, useStore } from '../store'
+import type { SettingDesc } from '../contracts'
+import { SettingsShell, Btn, EmptyState } from '@ui'
+import { SettingInput, flatten, unflatten, groupNames } from './SettingsModal'
+
+export function ProjectSettingsModal() {
+  const projectId = useStore(s => s.ui.projectSettingsId)
+  const projects = useStore(s => s.projects)
+  const project = projects.find(p => p.id === projectId)
+  const [schema, setSchema] = useState<SettingDesc[]>([])
+  const [draft, setDraft] = useState<Record<string, any>>({})
+  const [loaded, setLoaded] = useState(false)
+  const [saved, setSaved] = useState(false)
+
+  useEffect(() => {
+    if (!projectId) return
+    setLoaded(false)
+    api.getSettings(projectId).then(s => {
+      setSchema(s.schema)
+      setDraft(flatten(s.project))
+      setLoaded(true)
+    }).catch(() => undefined)
+  }, [projectId])
+
+  const groups = useMemo(() => {
+    const g: Record<string, SettingDesc[]> = {}
+    for (const d of schema) (g[d.group] ??= []).push(d)
+    return g
+  }, [schema])
+
+  if (!projectId) return null
+
+  const save = async () => {
+    if (!projectId) return
+    try {
+      await api.putProjectSettings(projectId, unflatten(draft))
+      setSaved(true)
+      setTimeout(() => setSaved(false), 1500)
+    } catch (e) {
+      store.toast(`项目设置保存失败：${e}`)
+    }
+  }
+
+  return (
+    <SettingsShell
+      title={`项目设置 · ${project?.name ?? projectId}`}
+      active="project"
+      onSelect={() => undefined}
+      onClose={() => store.openProjectSettings(null)}
+      sections={[{ key: 'project', label: '本项目', icon: 'folder' }]}
+      footer={saved ? <span style={{ color: 'var(--ok)' }}>✓ 已保存</span> : '项目设置覆盖用户设置（new-run 类对新任务生效）'}
+    >
+      <div>
+        {!loaded ? (
+          <EmptyState icon="settings">加载中…</EmptyState>
+        ) : (
+          <>
+            <div className="empty-note" style={{ marginBottom: 10 }}>
+              此处仅保存本项目的覆盖值；留空即沿用用户/系统设置。跨会话读取在「会话协作」组。
+            </div>
+            {Object.entries(groups).map(([g, descs]) => (
+              <div className="settings-group" key={g}>
+                <h4>{groupNames[g] ?? g}</h4>
+                {descs.map(d => (
+                  <div className="setting-row" key={d.key}>
+                    <label title={d.key}>{d.label}</label>
+                    <SettingInput desc={d} value={draft[d.key] ?? ''} onChange={v => setDraft(x => ({ ...x, [d.key]: v }))} />
+                    <span className={`effect-badge effect-${d.effect}`} title={`生效时机：${d.effect}`}>
+                      {d.effect === 'hot' ? '立即' : d.effect === 'new-run' ? '新任务' : '需重启'}
+                    </span>
+                  </div>
+                ))}
+              </div>
+            ))}
+            <Btn variant="primary" icon="check" onClick={save}>保存项目设置</Btn>
+          </>
+        )}
+      </div>
+    </SettingsShell>
+  )
+}

src/components/SettingsModal.tsx

@@ -1,12 +1,19 @@
-// 设置中心（4.9）：schema 驱动渲染 + 生效时机标注 + 密钥掩码 + 插件管理 + 画像管理。
+// 设置中心（4.9 → UI 能力平台迁移）：@ui SettingsShell + SettingRow 统一行语义，
+// 保存按钮进固定 actions 底栏（不随内容滚动）；schema 驱动 + 生效时机标注 + 密钥掩码。
 import { useEffect, useMemo, useState } from 'react'
 import { api } from '../api'
 import { store, useStore } from '../store'
 import type { AgentProfile, SettingDesc } from '../contracts'
-import { SettingsShell, Btn, EmptyState } from '@ui'
+import { SettingsShell, SettingRow, SettingsGroup, Btn, EmptyState } from '@ui'
 
 type Section = 'settings' | 'profiles' | 'plugins'
 
+// 分组显示名（项目设置面板共用）。
+export const groupNames: Record<string, string> = {
+  models: '模型与密钥', runtime: '运行时', context: '上下文', retrieval: '检索',
+  ui: '界面', plugins: '插件目录', crossSession: '会话协作', tools: '工具',
+}
+
 export function SettingsModal() {
   const profiles = useStore(s => s.profiles)
   const [section, setSection] = useState<Section>('settings')
@@ -29,11 +36,6 @@ export function SettingsModal() {
     return g
   }, [schema])
 
-  const groupNames: Record<string, string> = {
-    models: '模型与密钥', runtime: '运行时', context: '上下文', retrieval: '检索',
-    ui: '界面', plugins: '插件目录',
-  }
-
   const save = async () => {
     const values = unflatten(draft)
     await api.putUserSettings(values)
@@ -55,35 +57,29 @@ export function SettingsModal() {
         { key: 'plugins', label: '插件', icon: 'puzzle' },
       ]}
       footer={saved ? <span style={{ color: 'var(--ok)' }}>✓ 已保存</span> : 'Agent-System · 设置中心'}
+      actions={section === 'settings' && schema.length > 0 ? (
+        <>
+          {saved && <span style={{ color: 'var(--ok)', fontSize: 12.5, marginRight: 8 }}>✓ 已保存</span>}
+          <Btn variant="primary" icon="check" onClick={save}>保存设置</Btn>
+        </>
+      ) : undefined}
     >
-      <div>
-          {section === 'settings' && (
-            <>
-              {Object.entries(groups).map(([g, descs]) => (
-                <div className="settings-group" key={g}>
-                  <h4>{groupNames[g] ?? g}</h4>
-                  {descs.map(d => (
-                    <div className="setting-row" key={d.key}>
-                      <label title={d.key}>{d.label}</label>
-                      <SettingInput desc={d} value={draft[d.key] ?? ''} onChange={v => setDraft(x => ({ ...x, [d.key]: v }))} />
-                      <span className={`effect-badge effect-${d.effect}`} title={`生效时机：${d.effect}`}>
-                        {d.effect === 'hot' ? '立即' : d.effect === 'new-run' ? '新任务' : '需重启'}
-                      </span>
-                    </div>
-                  ))}
-                </div>
-              ))}
-              <Btn variant="primary" icon="check" onClick={save}>保存设置</Btn>
-            </>
-          )}
-          {section === 'profiles' && <ProfilesSection profiles={profiles} />}
-          {section === 'plugins' && <PluginsSection />}
-      </div>
+      {section === 'settings' && Object.entries(groups).map(([g, descs]) => (
+        <SettingsGroup key={g} title={groupNames[g] ?? g}>
+          {descs.map(d => (
+            <SettingRow key={d.key} label={d.label} desc={d.description} effect={d.effect}>
+              <SettingInput desc={d} value={draft[d.key] ?? ''} onChange={v => setDraft(x => ({ ...x, [d.key]: v }))} />
+            </SettingRow>
+          ))}
+        </SettingsGroup>
+      ))}
+      {section === 'profiles' && <ProfilesSection profiles={profiles} />}
+      {section === 'plugins' && <PluginsSection />}
     </SettingsShell>
   )
 }
 
-function SettingInput({ desc, value, onChange }: { desc: SettingDesc; value: any; onChange: (v: any) => void }) {
+export function SettingInput({ desc, value, onChange }: { desc: SettingDesc; value: any; onChange: (v: any) => void }) {
   if (desc.type === 'boolean') {
     return <input type="checkbox" checked={value === true || value === 'true'} onChange={e => onChange(e.target.checked)} />
   }
@@ -106,12 +102,12 @@ function flat(m: Record<string, any>, prefix: string, out: Record<string, any>)
     else out[key] = v
   }
 }
-function flatten(m: Record<string, any>): Record<string, any> {
+export function flatten(m: Record<string, any>): Record<string, any> {
   const out: Record<string, any> = {}
   flat(m, '', out)
   return out
 }
-function unflatten(flatMap: Record<string, any>): Record<string, any> {
+export function unflatten(flatMap: Record<string, any>): Record<string, any> {
   const out: Record<string, any> = {}
   for (const [k, v] of Object.entries(flatMap)) {
     if (v === '' || v === undefined) continue // 空串不覆盖（密钥未修改）
@@ -147,25 +143,22 @@ function ProfilesSection({ profiles }: { profiles: AgentProfile[] }) {
         </label>
       </div>
       {profiles.map(p => (
-        <div className="setting-row" key={p.id}>
-          <label>
-            {p.name} <span style={{ color: 'var(--text-faint)', fontSize: 11 }}>{p.id}{p.builtin ? ' · 内置' : ''}</span>
-          </label>
-          <div style={{ color: 'var(--text-faint)', fontSize: 12 }}>{p.description}</div>
-          <div style={{ display: 'flex', gap: 6 }}>
-            <button className="btn ghost" onClick={() => {
+        <SettingRow key={p.id}
+          label={<>{p.name} <span style={{ color: 'var(--text-faint)', fontSize: 11 }}>{p.id}{p.builtin ? ' · 内置' : ''}</span></>}
+          desc={p.description}>
+          <div style={{ display: 'flex', gap: 6, justifyContent: 'flex-end' }}>
+            <Btn variant="ghost" icon="download" onClick={() => {
               const blob = new Blob([JSON.stringify(p, null, 2)], { type: 'application/json' })
               const a = document.createElement('a')
               a.href = URL.createObjectURL(blob); a.download = `${p.id}.json`; a.click()
-            }}>导出</button>
-            {!p.builtin && <button className="btn ghost" onClick={() => { setEditing(p); setText(p.systemPrompt) }}>编辑</button>}
-            {!p.builtin && <button className="btn ghost" onClick={async () => { await api.deleteProfile(p.id); store.refreshProfiles() }}>删除</button>}
+            }}>导出</Btn>
+            {!p.builtin && <Btn variant="ghost" onClick={() => { setEditing(p); setText(p.systemPrompt) }}>编辑</Btn>}
+            {!p.builtin && <Btn variant="ghost" icon="trash" onClick={async () => { await api.deleteProfile(p.id); store.refreshProfiles() }}>删除</Btn>}
           </div>
-        </div>
+        </SettingRow>
       ))}
       {editing && (
-        <div className="settings-group" style={{ borderTop: '1px solid var(--border)', paddingTop: 12 }}>
-          <h4>编辑画像：{editing.name}</h4>
+        <SettingsGroup title={`编辑画像：${editing.name}`}>
           <div className="ui-form">
             <label>名称<input value={editing.name} onChange={e => setEditing({ ...editing, name: e.target.value })} /></label>
             <label>系统提示<textarea className="search-input" rows={4} style={{ height: 'auto' }} value={text} onChange={e => setText(e.target.value)} /></label>
@@ -173,15 +166,15 @@ function ProfilesSection({ profiles }: { profiles: AgentProfile[] }) {
             <label>执行前确认（前缀. 结尾表示族）<input value={editing.tools.confirm?.join(',') ?? ''} onChange={e => setEditing({ ...editing, tools: { ...editing.tools, confirm: e.target.value.split(',').map(s => s.trim()).filter(Boolean) } })} /></label>
             <label>拒绝工具<input value={editing.tools.deny?.join(',') ?? ''} onChange={e => setEditing({ ...editing, tools: { ...editing.tools, deny: e.target.value.split(',').map(s => s.trim()).filter(Boolean) } })} /></label>
           </div>
-          <button className="btn" onClick={async () => {
+          <Btn variant="primary" icon="check" onClick={async () => {
             try {
               await api.saveProfile({ ...editing, builtin: false, source: 'user', systemPrompt: text })
               await store.refreshProfiles()
               setEditing(null)
               store.toast('画像已保存')
             } catch (e) { store.toast(`保存失败：${e}`) }
-          }}>保存画像</button>
-        </div>
+          }}>保存画像</Btn>
+        </SettingsGroup>
       )}
     </div>
   )
@@ -210,15 +203,13 @@ function PluginsSection() {
         }}>热重载</Btn>
         <span style={{ color: 'var(--text-faint)', fontSize: 12 }}>声明资产（工作流/意图/提示词/面板）热加载；装卸不影响核心</span>
       </div>
-      {plugins.length === 0 && <EmptyState icon="puzzle">暂无已装载插件<br/>（目录：常规 → 插件目录；示例见 Dev 仓 plugins/example）</EmptyState>}
+      {plugins.length === 0 && <EmptyState icon="puzzle">暂无已装载插件<br />（目录：常规 → 插件目录；示例见 Dev 仓 plugins/example）</EmptyState>}
       {plugins.map(p => (
-        <div className="setting-row" key={p.manifest.id}>
-          <label>{p.manifest.name} <span style={{ fontSize: 11, color: 'var(--text-faint)' }}>v{p.manifest.version}</span></label>
-          <div style={{ color: 'var(--text-faint)', fontSize: 12 }}>
-            {[`工具 ${p.manifest.provides.tools?.length ?? 0}`, `面板 ${p.panels?.length ?? 0}`, `意图 ${p.intents?.length ?? 0}`, `工作流 ${p.workflows?.length ?? 0}`].join(' · ')}
-          </div>
+        <SettingRow key={p.manifest.id}
+          label={`${p.manifest.name} v${p.manifest.version}`}
+          desc={[`工具 ${p.manifest.provides.tools?.length ?? 0}`, `面板 ${p.panels?.length ?? 0}`, `意图 ${p.intents?.length ?? 0}`, `工作流 ${p.workflows?.length ?? 0}`].join(' · ')}>
           <span className="effect-badge">api {p.manifest.apiVersion}</span>
-        </div>
+        </SettingRow>
       ))}
     </div>
   )

src/components/TaskSidebar.tsx

@@ -93,6 +93,10 @@ export function TaskSidebar() {
       <button className="tsb-row-act" title={t.archived ? '恢复' : '归档'} onClick={e => { e.stopPropagation(); store.archiveTask(t.id, !t.archived) }}>
         <Icon name={t.archived ? 'undo' : 'archive'} size={13} />
       </button>
+      <button className={`tsb-row-act ${t.crossPrivate ? 'active' : ''}`} title={t.crossPrivate ? '私有会话：不被其他会话读取（点击取消）' : '设为私有（不被其他会话读取）'}
+        onClick={e => { e.stopPropagation(); store.setCrossFlags(t.id, { crossPrivate: !t.crossPrivate }) }}>
+        <Icon name="shield" size={13} />
+      </button>
     </span>
   )
 
@@ -101,6 +105,7 @@ export function TaskSidebar() {
       onClick={() => store.openTask(t.id)}
       onContextMenu={e => { e.preventDefault(); setMenu({ kind: `row:${t.id}`, anchor: e.currentTarget as HTMLElement }) }}>
       <span className="tsb-task-t" title={t.title}>{t.title || '未命名任务'}</span>
+      {t.crossPrivate && <span className="tsb-pbadge" title="私有：不被其他会话读取"><Icon name="shield" size={11} /></span>}
       {badge && <span className="tsb-pbadge">{badge}</span>}
       <span className="tsb-task-tm">{relativeTime(t.updatedAt)}</span>
       {rowActions(t)}
@@ -176,6 +181,7 @@ export function TaskSidebar() {
                 <span className="tsb-group-name" title={g.label}>{g.label}</span>
                 <span className="tsb-group-cnt">{g.tasks.length}</span>
                 <span style={{ flex: 1 }} />
+                <button className="tsb-group-add" title="项目设置（含跨会话读取）" onClick={e => { e.stopPropagation(); if (g.projectId) store.openProjectSettings(g.projectId) }}><Icon name="settings" size={13} /></button>
                 <button className="tsb-group-add" title="在此项目新建任务" onClick={e => { e.stopPropagation(); store.createTask(g.projectId) }}><Icon name="plus" size={13} /></button>
               </div>
             ) : (
@@ -224,6 +230,9 @@ export function TaskSidebar() {
           <MenuItem icon="pin" onClick={() => { store.pinTask(rowTask.id, !rowTask.pinned); setMenu(null) }}>{rowTask.pinned ? '取消置顶' : '置顶'}</MenuItem>
           <MenuItem icon={rowTask.archived ? 'undo' : 'archive'} onClick={() => { store.archiveTask(rowTask.id, !rowTask.archived); setMenu(null) }}>{rowTask.archived ? '恢复（移出归档）' : '归档'}</MenuItem>
           <div className="tsb-menu-div" />
+          <MenuItem icon="shield" onClick={() => { store.setCrossFlags(rowTask.id, { crossPrivate: !rowTask.crossPrivate }); setMenu(null) }}>{rowTask.crossPrivate ? '取消私有（可被其他会话读取）' : '设为私有（不被其他会话读取）'}</MenuItem>
+          <MenuItem icon="users" onClick={() => { store.setCrossFlags(rowTask.id, { allowCrossRead: rowTask.allowCrossRead === false }); setMenu(null) }}>{rowTask.allowCrossRead === false ? '开启读取其他会话' : '关闭读取其他会话'}</MenuItem>
+          <div className="tsb-menu-div" />
           <MenuItem icon="clock" onClick={() => { store.setUI({ taskOrg: 'timeline' }); setMenu(null) }}>按时间线查看</MenuItem>
         </>}
       </Menu>

src/components/Workbench.tsx

@@ -1,9 +1,10 @@
-// 右栏终态（提案 T4/D25）：纯收件箱 + 「当前任务」常驻卡（计划/待办并入；工件/代理/
-// 插件面板迁为工作区弹层，见 Workspaces.tsx）。
+// 右栏终态（提案 T4/D25 → 预览双落位）：收件箱/预览两页签 + 「当前任务」常驻卡。
+// 预览页签（裁定 D4）承载右栏轻预览：FilePreview compact 模式，边聊边看。
 import { store, useStore } from '../store'
 import type { Run } from '../contracts'
-import { InboxList, pendingCount, type ActivityCard, type DocBridge } from '@ui'
+import { InboxList, pendingCount, FilePreview, type ActivityCard, type DocBridge } from '@ui'
 import { Icon } from '@ui'
+import { api } from '../api'
 
 // 工件解析/打开注入：渲染器纯展示，doc-ref 词汇经此桥接本仓状态（D29）。
 export const docBridge: DocBridge = {
@@ -19,23 +20,55 @@ export function Workbench() {
   const plan = useStore(s => s.plan)
   const todos = useStore(s => s.todos)
   const pending = pendingCount(cards)
+  const rightTab = useStore(s => s.ui.rightTab)
+  const railId = useStore(s => s.ui.railPreviewId)
+  const railArtifact = useStore(s => (railId ? s.artifacts.find(a => a.id === railId) : undefined))
 
+  const showPreview = rightTab === 'preview'
   return (
     <>
       <div className="tabs">
-        <span className="tab active">收件箱{pending > 0 ? ` ${pending}` : ''}</span>
+        <button className={`tab ${!showPreview ? 'active' : ''}`} onClick={() => store.setUI({ rightTab: 'inbox' })}
+          title="收件箱">收件箱{pending > 0 ? ` ${pending}` : ''}</button>
+        <button className={`tab ${showPreview ? 'active' : ''}`} onClick={() => store.railPreview(railArtifact ?? null)}
+          title="预览（右栏轻预览）"><Icon name="eye" size={13} /> 预览</button>
+        <span className="spacer" style={{ flex: 1 }} />
         <button className="tab tab-action" title="收纳已完成卡（done→关闭；已确认卡留痕不动）" onClick={() => store.tidyCards()}><Icon name="check" size={13} /> 收纳</button>
         <button className="tab" title="收起收件箱" onClick={store.toggleRight}><Icon name="chevron-right" size={14} /></button>
       </div>
-      <div className="tab-body">
-        <CurrentTaskCard plan={plan} todos={todos} />
-        <InboxList cards={cards} callbacks={{
-          onAction: (c: ActivityCard, id: string) => store.cardAction(c, id),
-          onPin: (c: ActivityCard, p: boolean) => store.cardPin(c, p),
-          onDismiss: (c: ActivityCard) => store.cardDismiss(c),
-          onLocate: (c: ActivityCard) => store.openInbox(c.id),
-        }} />
-      </div>
+      {showPreview ? (
+        <div className="tab-body" data-rail-preview="">
+          {railArtifact ? (
+            <>
+              <div className="rail-preview-head">
+                <span className="rp-name" title={railArtifact.name}>{railArtifact.name}</span>
+                <span className="spacer" style={{ flex: 1 }} />
+                <button className="icon-btn" title="深预览（弹窗）" onClick={() => store.viewArtifact(railArtifact)}><Icon name="panel-left" size={14} /></button>
+                <a className="icon-btn" title="下载" href={api.artifactDownloadUrl(railArtifact.id)} download={railArtifact.name}><Icon name="download" size={14} /></a>
+                <button className="icon-btn" title="关闭预览" onClick={() => store.railPreview(null)}><Icon name="x" size={14} /></button>
+              </div>
+              <FilePreview compact source={{
+                kind: 'artifact',
+                id: railArtifact.id,
+                name: railArtifact.name,
+                mime: railArtifact.mime,
+                contentUrl: api.artifactContentUrl(railArtifact.id),
+                downloadUrl: api.artifactDownloadUrl(railArtifact.id),
+              }} />
+            </>
+          ) : <div className="empty-note" style={{ padding: 14 }}>在消息工件卡片或工件面板点「右栏预览」——文件会在这里边聊边看（md/图片/pdf/Office/代码均可）</div>}
+        </div>
+      ) : (
+        <div className="tab-body">
+          <CurrentTaskCard plan={plan} todos={todos} />
+          <InboxList cards={cards} docBridge={docBridge} callbacks={{
+            onAction: (c: ActivityCard, id: string) => store.cardAction(c, id),
+            onPin: (c: ActivityCard, p: boolean) => store.cardPin(c, p),
+            onDismiss: (c: ActivityCard) => store.cardDismiss(c),
+            onLocate: (c: ActivityCard) => store.locateMessage(c.anchorMessageId),
+          }} />
+        </div>
+      )}
     </>
   )
 }

src/components/Workspaces.tsx

@@ -1,10 +1,13 @@
 // 工作区弹层（提案 T4/D25）：工件/代理/插件面板/插件声明工作区统一经 OverlayHost 呈现；
 // ⌘1–9 快捷键与左栏快捷区共享同一清单（workspaceEntries）。
+import { useState } from 'react'
 import { store, useStore } from '../store'
 import type { Run } from '../contracts'
-import { OverlayHost, type DocBridge } from '@ui'
+import { api } from '../api'
+import { OverlayHost, Icon, type DocBridge } from '@ui'
 import { docBridge } from './Workbench'
 import { AgentRow } from './Workbench'
+import { artifactIcon, humanSize } from '../messageparts'
 
 /** 工作区清单（顺序即 ⌘ 序号）：内置在前，插件面板/声明工作区随后。 */
 export function workspaceEntries(): { key: string; title: string; icon: string; shortcut: string }[] {
@@ -52,17 +55,66 @@ export function Workspaces() {
   return null
 }
 
-/** 工件面板（自 Workbench tabs 迁入；点击进 DocViewer 深读）。 */
+/** 工件面板（工作区文件管理）：搜索 + kind 过滤 + 上传；行内 深预览/右栏预览/下载。
+ *  删除是保留能力：DELETE /api/artifacts/{id} 与 api.deleteArtifact 均在（插件可用），
+ *  系统默认不提供删除入口（提案 2026-09-30-file-preview-and-reserved-capabilities §2.2）。 */
 export function ArtifactsPanel() {
   const artifacts = useStore(s => s.artifacts)
-  if (artifacts.length === 0) return <div className="empty-note">暂无工件——上传附件或让模型产出文档（mock：#doc）</div>
-  return <>{artifacts.map(a => (
-    <div key={a.id} className="artifact-row" onClick={() => store.viewArtifact(a)}>
-      <span>{a.kind === 'image' ? '🖼' : a.kind === 'document' ? '📄' : '🗂'}</span>
-      <span className="name" title={a.name}>{a.name}</span>
-      <span className="kind">{a.kind}</span>
+  const [q, setQ] = useState('')
+  const [kind, setKind] = useState<'all' | 'document' | 'data' | 'image'>('all')
+
+  const kinds = ['all', 'document', 'data', 'image'] as const
+  const visible = artifacts.filter(a =>
+    (kind === 'all' || a.kind === kind) && a.name.toLowerCase().includes(q.toLowerCase()))
+
+  return (
+    <div className="artifacts-panel">
+      <div className="ap-toolbar">
+        <input className="search-input" placeholder="搜索文件名…" value={q} onChange={e => setQ(e.target.value)} />
+        {kinds.map(k => (
+          <button key={k} className={`kind-pill ${kind === k ? 'on' : ''}`} onClick={() => setKind(k)}>
+            {k === 'all' ? '全部' : k === 'document' ? '文档' : k === 'data' ? '数据' : '图片'}
+          </button>
+        ))}
+        <label className="btn ghost ap-upload" title="上传文件到当前项目">
+          <Icon name="paperclip" size={14} /> 上传
+          <input type="file" multiple style={{ display: 'none' }} onChange={async e => {
+            for (const f of Array.from(e.target.files ?? [])) await store.uploadAttachment(f)
+            e.target.value = ''
+          }} />
+        </label>
+      </div>
+      {artifacts.length === 0
+        ? <div className="empty-note">暂无文件——上传附件或让模型产出文档（mock：#doc）；这里可浏览、预览、下载</div>
+        : visible.length === 0
+          ? <div className="empty-note">没有匹配「{q}」的文件</div>
+          : visible.map(a => (
+            <div key={a.id} className="artifact-row" data-artifact-row={a.id}>
+              <span className="ar-icon" onClick={() => store.viewArtifact(a)}><Icon name={artifactIcon(a.name, a.kind)} size={15} /></span>
+              <span className="ar-main" onClick={() => store.viewArtifact(a)} title={a.name}>
+                <span className="name">{a.name}</span>
+                <span className="meta">{a.kind} · {humanSize(a.size) || '—'} · {shortTime(a.updatedAt)}</span>
+              </span>
+              <span className="ar-acts">
+                <button className="icon-btn" title="预览（弹窗）" onClick={() => store.viewArtifact(a)}><Icon name="eye" size={14} /></button>
+                <button className="icon-btn" title="右栏预览（边聊边看）" onClick={() => store.railPreview(a)}><Icon name="panel-left" size={14} /></button>
+                <a className="icon-btn" title="下载" href={api.artifactDownloadUrl(a.id)} download={a.name}
+                  onClick={e => e.stopPropagation()}><Icon name="download" size={14} /></a>
+              </span>
+            </div>
+          ))}
     </div>
-  ))}</>
+  )
+}
+
+function shortTime(iso: string): string {
+  try {
+    const d = new Date(iso)
+    const now = new Date()
+    return d.toDateString() === now.toDateString()
+      ? d.toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' })
+      : d.toLocaleDateString([], { month: '2-digit', day: '2-digit' })
+  } catch { return '' }
 }
 
 /** 代理面板（任务树；点击进 AgentTracker 深读）。 */

src/contracts.ts

@@ -15,6 +15,7 @@ export interface Project {
 export interface Conversation {
   id: ID; projectId: ID; owner?: ID; title: string; profileId?: ID;
   pinned?: boolean; archived?: boolean;
+  allowCrossRead?: boolean; crossPrivate?: boolean;
   createdAt: string; updatedAt: string;
 }
 
@@ -32,7 +33,7 @@ export interface Part {
   artifact?: { artifactId: ID; name: string; kind?: string };
   hitl?: { cardId: ID; question: string; resolved: boolean; answer?: string };
   plan?: PlanSnapshot;
-  card?: { kind: string; data: UINode[] };
+  card?: { kind: string; data: UINode[]; cardId?: ID }; // cardId 非空 = 收件箱卡片引用部件（submit_card）
   error?: { code: string; message: string };
   process?: boolean; // run 终态后折叠为摘要行
 }

src/live.ts

@@ -0,0 +1,100 @@
+// live 流式投影纯逻辑（中栏过程/回复分离）：事件按到达序并入 items——thinking/text
+// 增量各并入其末段，工具按当前位置落位。SSE 有序且后端每轮按 思考→正文→工具 追加落库
+// 部件，事件到达序即落库序，故合成消息与落库部件同构，终态对账不重排。
+// 文本段是否为过程（process）由「本段之后、下一个思考/文本段之前是否出现工具」判定，
+// 对齐落库的 Process: len(calls) > 0——工具轮解说的 tool.call 一到即并入过程区，
+// 无需等下一轮文本段开启。
+// 残余边界：某轮若既无正文也无思考、仅静默发起工具，其调用会被并入上一文本段（需协议
+// 携带轮次归属才能消除；现行事件流无法区分）。
+import type { Message, Part } from './contracts'
+import type { LiveState } from './store'
+
+// 到达序部件流的元素。
+export type LiveItem =
+  | { kind: 'thinking'; text: string }
+  | { kind: 'text'; index: number; text: string }
+  | { kind: 'tool'; callId?: string; name: string; status?: string; summary?: string }
+  | { kind: 'artifact'; artifact: { artifactId: string; name: string; kind?: string } }
+
+// applyThinkingDelta 并入思考增量：末段是思考则追加，否则开启新思考段（新轮开始）。
+export function applyThinkingDelta(items: LiveItem[], delta: string): LiveItem[] {
+  const last = items[items.length - 1]
+  if (last && last.kind === 'thinking') {
+    const out = items.slice()
+    out[out.length - 1] = { kind: 'thinking', text: last.text + delta }
+    return out
+  }
+  return [...items, { kind: 'thinking', text: delta }]
+}
+
+// applyTextDelta 并入正文增量：末段是同 index 的文本段则追加，否则开启新文本段。
+export function applyTextDelta(items: LiveItem[], index: number, delta: string): LiveItem[] {
+  const last = items[items.length - 1]
+  if (last && last.kind === 'text' && last.index === index) {
+    const out = items.slice()
+    out[out.length - 1] = { kind: 'text', index, text: last.text + delta }
+    return out
+  }
+  return [...items, { kind: 'text', index, text: delta }]
+}
+
+export function applyToolCall(items: LiveItem[], name: string, callId?: string): LiveItem[] {
+  return [...items, { kind: 'tool', callId, name }]
+}
+
+// applyArtifactCreated 追加工件引用（artifact.created 事件；与落库一致标记为过程）。
+export function applyArtifactCreated(items: LiveItem[], artifact: { artifactId: string; name: string; kind?: string }): LiveItem[] {
+  return [...items, { kind: 'artifact', artifact }]
+}
+
+// applyToolResult 回填对应工具（优先按 callId 配对，回落到最近一个未决工具——
+// 与落库的尾部配对语义一致）。
+export function applyToolResult(items: LiveItem[], callId: string | undefined, status: string, summary?: string): LiveItem[] {
+  for (let i = items.length - 1; i >= 0; i--) {
+    const it = items[i]
+    if (it.kind !== 'tool' || it.status !== undefined) continue
+    if (callId && it.callId && it.callId !== callId) continue
+    const out = items.slice()
+    out[i] = { kind: 'tool', callId: it.callId, name: it.name, status, summary }
+    return out
+  }
+  return items
+}
+
+// liveToMessage：run 进行中没有已落库的助手消息，把 LiveState 合成同构临时消息，
+// 复用 AssistantMessage 渲染（思考/工具/文本实时上屏）；终态对账后由真消息替代。
+export function liveToMessage(live: LiveState): Message {
+  // 文本段是否为过程：本段之后、下一个思考/文本段之前出现工具（= 该轮带工具调用）。
+  const textProcess = new Map<number, boolean>()
+  for (let i = 0; i < live.items.length; i++) {
+    if (live.items[i].kind !== 'text') continue
+    let hasCalls = false
+    for (let j = i + 1; j < live.items.length && live.items[j].kind === 'tool'; j++) hasCalls = true
+    textProcess.set(i, hasCalls)
+  }
+  const parts: Part[] = []
+  for (let i = 0; i < live.items.length; i++) {
+    const it = live.items[i]
+    if (it.kind === 'thinking') {
+      if (it.text) parts.push({ type: 'thinking', text: it.text, process: true })
+    } else if (it.kind === 'tool') {
+      parts.push({ type: 'tool_call', process: true, toolCall: { id: it.callId ?? '', name: it.name } })
+      if (it.status !== undefined) {
+        parts.push({ type: 'tool_result', process: true, toolCall: { id: it.callId ?? '', name: it.name },
+          toolResult: { callId: it.callId ?? '', status: it.status === 'error' ? 'error' : 'ok', summary: it.summary } })
+      }
+    } else if (it.kind === 'artifact') {
+      parts.push({ type: 'artifact_ref', process: true, artifact: it.artifact })
+    } else {
+      parts.push({ type: 'text', text: it.text, process: textProcess.get(i) || undefined })
+    }
+  }
+  return { id: `live:${live.runId}`, conversationId: '', role: 'assistant', runId: live.runId, parts, createdAt: '' }
+}
+
+// showProcessInline：流式期间过程区是否展开——thinking/acting 实时展开；一旦进入
+// responding（最终回复开始流式）立即折叠，只显示回复（Cursor 式），工具恢复再展开。
+// 非 live 消息随「自动折叠过程」偏好。
+export function showProcessInline(live: LiveState | null, autoCollapse: boolean): boolean {
+  return live ? live.phase !== 'responding' : !autoCollapse
+}

src/main.tsx

@@ -1,10 +1,14 @@
 import { StrictMode } from 'react'
 import { createRoot } from 'react-dom/client'
 import { App } from './App'
+import { wirePreviewCapabilities } from './previewsetup'
 import '@ui/tokens.css'
 import '@ui/ui.css'
 import './styles.css'
 
+// 预览能力装配（D1–D4）：Office 解析器与链接预览 fetcher 注入 @ui（动态加载，不进主包）。
+wirePreviewCapabilities()
+
 createRoot(document.getElementById('root')!).render(
   <StrictMode>
     <App />

src/messageparts.ts

@@ -0,0 +1,46 @@
+// 消息部件顺序保真（渲染顺序 = 落库顺序）：后端 llm.go 按时间交错落库 parts
+// （text → tool_call → tool_result → artifact_ref → 下一轮 text…），渲染端不得
+// 按 process 标志二分重排——只允许把"连续的"过程部件就地聚成一块折叠。
+import type { Part } from './contracts'
+
+export type PartBlock =
+  | { kind: 'process'; parts: Part[] } // 连续过程段（thinking/tool_call/tool_result…）
+  | { kind: 'content'; part: Part } // 原位内容部件（text/artifact_ref/card/hitl…）
+
+/**
+ * 按原始顺序把 parts 切成「过程段 / 内容」交替的块序列。
+ * 例：[text, tool_call, tool_result, text, artifact_ref]
+ *   → [content(text), process(tool_call,tool_result), content(text), content(artifact_ref)]
+ * 连续的过程部件合并为一个折叠单元，不改变相对顺序。
+ */
+export function groupParts(parts: Part[]): PartBlock[] {
+  const out: PartBlock[] = []
+  for (const p of parts) {
+    if (p.process) {
+      const last = out[out.length - 1]
+      if (last && last.kind === 'process') last.parts.push(p)
+      else out.push({ kind: 'process', parts: [p] })
+    } else {
+      out.push({ kind: 'content', part: p })
+    }
+  }
+  return out
+}
+
+/** 文件大小人类可读（工件面板/DocViewer 共用）。 */
+export function humanSize(n: number | undefined): string {
+  if (!n || n <= 0) return ''
+  const units = ['B', 'KB', 'MB', 'GB']
+  let v = n
+  let i = 0
+  while (v >= 1024 && i < units.length - 1) { v /= 1024; i++ }
+  const s = v >= 100 || i === 0 ? String(Math.round(v)) : v.toFixed(1).replace(/\.0$/, '')
+  return `${s} ${units[i]}`
+}
+
+/** 工件文件图标名（@ui Icon 名）：按扩展名优先，回落 kind。 */
+export function artifactIcon(name: string, kind?: string): 'file' | 'image' | 'package' {
+  if (/\.(png|jpe?g|gif|webp|svg|bmp)$/i.test(name) || kind === 'image') return 'image'
+  if (/\.(zip|tar|gz|7z|rar)$/i.test(name)) return 'package'
+  return 'file'
+}

src/previewsetup.ts

@@ -0,0 +1,85 @@
+// 预览能力装配（裁定 D1–D4）：把重解析器经 configureFilePreviewLoaders 注入 @ui。
+// 全部 dynamic import——对应格式首次预览时才下载 chunk，主 bundle 不含解析器。
+// 链接预览 fetcher 走服务端 /api/url-preview（SSRF 防护在服务端执行端）。
+import { configureFilePreviewLoaders, configureLinkPreviewFetcher } from '@ui'
+import { auth } from './auth'
+import type { LinkPreviewData } from '@ui'
+
+const fetchBuf = async (url: string | undefined): Promise<ArrayBuffer> => {
+  const r = await fetch(url!)
+  if (!r.ok) throw new Error(`HTTP ${r.status}`)
+  return r.arrayBuffer()
+}
+
+const docxLoader = async (el: HTMLElement, source: { contentUrl?: string }) => {
+  const mammoth = await import('mammoth')
+  const { value } = await mammoth.convertToHtml({ arrayBuffer: await fetchBuf(source.contentUrl) })
+  el.innerHTML = value
+}
+
+const xlsxLoader = async (el: HTMLElement, source: { contentUrl?: string }) => {
+  const XLSX = await import('xlsx')
+  const wb = XLSX.read(await fetchBuf(source.contentUrl), { type: 'array' })
+  el.innerHTML = ''
+  const tabs = document.createElement('div')
+  tabs.className = 'ui-fp-sheet-tabs'
+  const wrap = document.createElement('div')
+  wrap.className = 'ui-fp-sheet-wrap'
+  el.append(tabs, wrap)
+  wb.SheetNames.forEach((name, i) => {
+    const tab = document.createElement('button')
+    tab.className = `ui-fp-sheet-tab ${i === 0 ? 'on' : ''}`
+    tab.textContent = name
+    tab.onclick = () => {
+      tabs.querySelectorAll('.ui-fp-sheet-tab').forEach(t => t.classList.remove('on'))
+      tab.classList.add('on')
+      renderSheet(wrap, XLSX.utils.sheet_to_json<unknown[]>(wb.Sheets[name], { header: 1, defval: '' }))
+    }
+    tabs.append(tab)
+    if (i === 0) renderSheet(wrap, XLSX.utils.sheet_to_json<unknown[]>(wb.Sheets[name], { header: 1, defval: '' }))
+  })
+}
+
+function renderSheet(wrap: HTMLElement, rows: unknown[][]) {
+  wrap.innerHTML = ''
+  if (rows.length > 200) {
+    const note = document.createElement('div')
+    note.className = 'ui-fp-note'
+    note.textContent = `仅显示前 200 行（共 ${rows.length} 行）——完整内容请下载`
+    wrap.append(note)
+  }
+  const table = document.createElement('table')
+  table.className = 'ui-fp-sheet'
+  for (const row of rows.slice(0, 200)) {
+    const tr = document.createElement('tr')
+    for (const cell of row) {
+      const td = document.createElement('td')
+      td.textContent = cell == null ? '' : String(cell)
+      td.title = td.textContent
+      tr.append(td)
+    }
+    table.append(tr)
+  }
+  wrap.append(table)
+}
+
+const pptxLoader = async (el: HTMLElement, source: { contentUrl?: string }) => {
+  // pptx2html@0.3.4 的 module 入口引用了大小写错配的 ./txml（Linux 打包必炸），
+  // 按 D2 备选条款改用 pptx-preview（init(dom).preview(arrayBuffer) 全保真渲染）。
+  const { init } = await import('pptx-preview')
+  el.innerHTML = ''
+  const stage = document.createElement('div')
+  stage.className = 'ui-fp-slide-stage'
+  el.append(stage)
+  const previewer = init(stage, { width: stage.clientWidth || 900 })
+  await previewer.preview(await fetchBuf(source.contentUrl))
+}
+
+export function wirePreviewCapabilities() {
+  configureFilePreviewLoaders({ docx: docxLoader, xlsx: xlsxLoader, pptx: pptxLoader })
+  configureLinkPreviewFetcher(async href => {
+    const r = await fetch(auth.withKey(`/api/url-preview?url=${encodeURIComponent(href)}`))
+    if (!r.ok) return { url: href, error: `HTTP ${r.status}` }
+    return (await r.json()) as LinkPreviewData
+  })
+}

src/store.ts

@@ -2,6 +2,7 @@
 // useSyncExternalStore 驱动；live 流式部件为会话内临时态，run 终态后由消息树对账收敛。
 import { useSyncExternalStore } from 'react'
 import { api, connectEvents } from './api'
+import { applyTextDelta, applyThinkingDelta, applyToolCall, applyToolResult, applyArtifactCreated, type LiveItem } from './live'
 import type {
   Project, Conversation, Message, Run, Artifact, HITLCard, PlanSnapshot, TodoList,
   AgentProfile, StreamEvent, PluginPanel, ActivityCard,
@@ -16,9 +17,9 @@ export interface ContextObs {
 export interface LiveState {
   runId: string
   phase: string
-  thinking: string
-  text: string
-  toolCalls: { name: string; status?: string; summary?: string }[]
+  // 到达序部件流（见 live.ts LiveItem）：事件到达序即落库序，与落库部件的轮次穿插序
+  // 同构；文本段是否为过程由「本段内是否出现工具调用」判定，tool.call 一到即改标。
+  items: LiveItem[]
   agentNotes: Record<string, string>
   startedAt: number
 }
@@ -34,12 +35,15 @@ export interface UIState {
   settingsOpen: boolean
   trackerRunId: string | null
   viewingArtifact: Artifact | null
+  /** 右栏轻预览的工件（rail 预览页签内容；与弹窗深预览 viewingArtifact 并存）。 */
+  railPreviewId: string | null
   activeWorkspace: string | null
   taskOrg: 'project' | 'timeline'
   showArchived: boolean
   lastProjectId: string | null
   adminUsersOpen: boolean
   changePwOpen: boolean
+  projectSettingsId: string | null
 }
 
 export interface Me { owner: string; name: string; auth: boolean; isAdmin?: boolean; mustChangePassword?: boolean }
@@ -81,11 +85,13 @@ const DEFAULT_UI: UIState = {
   settingsOpen: false,
   trackerRunId: null,
   viewingArtifact: null,
+  railPreviewId: null,
   taskOrg: 'project',
   showArchived: false,
   lastProjectId: null,
   adminUsersOpen: false,
   changePwOpen: false,
+  projectSettingsId: null,
 }
 
 function loadUI(): UIState {
@@ -209,6 +215,13 @@ export const store = {
     store.refreshTasks()
   },
 
+  // 跨会话标记（提案 2026-09-30-cross-session-reading）：出站 allowCrossRead / 入站 crossPrivate。
+  async setCrossFlags(convId: string, flags: { allowCrossRead?: boolean; crossPrivate?: boolean }) {
+    const tasks = state.tasks.map(t => t.id === convId ? { ...t, ...flags } : t)
+    set({ tasks })
+    try { await api.setConversationFlags(convId, flags) } catch (e) { store.toast(`跨会话设置失败：${e}`); store.refreshTasks() }
+  },
+
   async openConversation(convId: string) {
     if (sse) { sse.close(); sse = null }
     set({ currentConvId: convId, messages: [], runs: [], activeHitl: [], lastSeq: 0, live: null, plan: null, todos: null, cards: [] })
@@ -253,26 +266,22 @@ export const store = {
     switch (e.type) {
       case 'message.delta': {
         const p = e.payload as { index: number; text: string }
-        set({ live: touchLive(e.runId ?? '', l => { l.text += p.text }) })
+        set({ live: touchLive(e.runId ?? '', l => { l.items = applyTextDelta(l.items, p.index, p.text) }) })
         break
       }
       case 'thinking.delta': {
         const p = e.payload as { index: number; text: string }
-        set({ live: touchLive(e.runId ?? '', l => { l.thinking += p.text }) })
+        set({ live: touchLive(e.runId ?? '', l => { l.items = applyThinkingDelta(l.items, p.text) }) })
         break
       }
       case 'tool.call': {
         const p = e.payload as { callId: string; name: string }
-        set({ live: touchLive(e.runId ?? '', l => { l.toolCalls.push({ name: p.name }) }) })
+        set({ live: touchLive(e.runId ?? '', l => { l.items = applyToolCall(l.items, p.name, p.callId) }) })
         break
       }
       case 'tool.result': {
         const p = e.payload as { callId: string; status: string; summary?: string }
-        set({ live: touchLive(e.runId ?? '', l => {
-          for (let i = l.toolCalls.length - 1; i >= 0; i--) {
-            if (l.toolCalls[i].status === undefined) { l.toolCalls[i] = { ...l.toolCalls[i], status: p.status, summary: p.summary }; break }
-          }
-        }) })
+        set({ live: touchLive(e.runId ?? '', l => { l.items = applyToolResult(l.items, p.callId, p.status, p.summary) }) })
         break
       }
       case 'run.phase': {
@@ -333,6 +342,12 @@ export const store = {
         break
       }
       case 'artifact.created': {
+        const p = e.payload as { artifact?: { id: string; name: string; kind?: string } }
+        if (p?.artifact) {
+          set({ live: touchLive(e.runId ?? '', l => {
+            l.items = applyArtifactCreated(l.items, { artifactId: p.artifact!.id, name: p.artifact!.name, kind: p.artifact!.kind })
+          }) })
+        }
         if (state.currentProjectId) store.refreshArtifacts(state.currentProjectId)
         break
       }
@@ -367,7 +382,7 @@ export const store = {
         // 竞态保护：POST 返回前 SSE 事件可能已先行到达并累积（同 run），
         // 此时保留已累积的 live，只补挂用户消息；否则初始化空 live。
         if (!state.live || state.live.runId !== out.run.id) {
-          set({ live: { runId: out.run.id, phase: 'thinking', thinking: '', text: '', toolCalls: [], agentNotes: {}, startedAt: Date.now() } })
+          set({ live: { runId: out.run.id, phase: 'thinking', items: [], agentNotes: {}, startedAt: Date.now() } })
         }
         set({ messages: [...state.messages, out.message] })
         store.connectIfNeeded()
@@ -491,9 +506,22 @@ export const store = {
       document.querySelector(`[data-card-id="${cardId}"]`)?.scrollIntoView({ behavior: 'smooth', block: 'center' })
     }, 60)
   },
+  // 卡→消息互定位另一半（D32）：从收件箱卡滚回产生它的对话消息。
+  locateMessage(messageId?: string) {
+    if (!messageId) return
+    setTimeout(() => {
+      document.querySelector(`[data-msg-id="${messageId}"]`)?.scrollIntoView({ behavior: 'smooth', block: 'center' })
+    }, 60)
+  },
   openTracker(runId: string) { setUI({ trackerRunId: runId }) },
   viewArtifact(a: Artifact | null) { setUI({ viewingArtifact: a }) },
+  /** 右栏轻预览：打开指定工件并切到 rail 预览页签（双落位中的"轻"侧）。 */
+  railPreview(a: Artifact | null) {
+    if (!a) { setUI({ railPreviewId: null, rightTab: 'inbox' }); return }
+    setUI({ railPreviewId: a.id, rightTab: 'preview', rightCollapsed: false })
+  },
   openSettings(open: boolean) { setUI({ settingsOpen: open }) },
+  openProjectSettings(id: string | null) { setUI({ projectSettingsId: id }) },
   toast(msg: string) {
     set({ toast: msg })
     setTimeout(() => { if (state.toast === msg) set({ toast: null }) }, 2600)
@@ -501,8 +529,8 @@ export const store = {
 }
 
 function touchLive(_runId: string, mutate: (l: LiveState) => void): LiveState | null {
-  const base = state.live ?? { runId: _runId, phase: 'thinking', thinking: '', text: '', toolCalls: [], agentNotes: {}, startedAt: Date.now() }
-  const next: LiveState = { ...base, toolCalls: [...base.toolCalls], agentNotes: { ...base.agentNotes } }
+  const base = state.live ?? { runId: _runId, phase: 'thinking', items: [], agentNotes: {}, startedAt: Date.now() }
+  const next: LiveState = { ...base, agentNotes: { ...base.agentNotes } }
   mutate(next)
   return next
 }

src/styles.css

@@ -101,8 +101,14 @@ button { font-family: inherit; font-size: inherit; color: inherit; }
 .part-text hr { border: none; border-top: 1px solid var(--border); margin: 0.8em 0; }
 .part-text a { color: var(--accent); }
 .part-error { color: var(--err); background: var(--err-soft); border: 1px solid var(--err); border-radius: var(--radius-sm); padding: 8px 12px; }
-.artifact-chip { display: inline-flex; align-items: center; gap: 6px; color: var(--accent); background: var(--accent-soft); border: 1px solid transparent; border-radius: var(--radius-sm); padding: 5px 10px; cursor: pointer; font-size: 13px; transition: background .12s; }
-.artifact-chip:hover { background: var(--accent-soft-2); }
+.artifact-chip { display: inline-flex; align-items: stretch; background: var(--bg-panel); border: 1px solid var(--border); border-radius: var(--radius-sm); overflow: hidden; font-size: 13px; margin: 2px 0; }
+.artifact-chip .ac-main { display: inline-flex; align-items: center; gap: 7px; color: var(--accent); background: none; border: none; padding: 5px 10px; cursor: pointer; font: inherit; max-width: 340px; }
+.artifact-chip .ac-main span, .artifact-chip .ac-main { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.artifact-chip:hover { border-color: var(--accent); }
+.artifact-chip .ac-act { display: inline-flex; align-items: center; padding: 5px 8px; color: var(--text-dim); border-left: 1px solid var(--border-soft); background: none; cursor: pointer; }
+.artifact-chip .ac-act:hover { color: var(--accent); background: var(--bg-hover); }
+/* 过程段内联组（流式/关闭自动折叠时，按原位渲染的过程容器） */
+.part-group { margin: 2px 0; }
 
 /* 过程折叠（run 终态后） */
 .process-collapse { border: 1px solid var(--border-soft); border-radius: var(--radius); background: var(--bg-panel); margin: 6px 0; }
@@ -155,10 +161,25 @@ button { font-family: inherit; font-size: inherit; color: inherit; }
 .step.in_progress .step-icon { color: var(--accent); }
 .step.done .step-icon { color: var(--ok); }
 .step.skipped { color: var(--text-faint); text-decoration: line-through; }
-.artifact-row { display: flex; align-items: center; gap: 8px; padding: 8px; border-radius: var(--radius-sm); cursor: pointer; }
+/* ---- 工件面板（工作区文件管理）---- */
+.artifacts-panel { display: flex; flex-direction: column; gap: 4px; }
+.ap-toolbar { display: flex; align-items: center; gap: 6px; margin-bottom: 8px; flex-wrap: wrap; }
+.ap-toolbar .search-input { flex: 1; min-width: 120px; height: 30px; font-size: 12.5px; }
+.kind-pill { border: 1px solid var(--border); background: none; color: var(--text-dim); border-radius: var(--radius-full); padding: 3px 10px; font-size: 12px; cursor: pointer; }
+.kind-pill:hover { color: var(--text); background: var(--bg-hover); }
+.kind-pill.on { color: var(--accent); border-color: var(--accent); background: var(--accent-soft); }
+.ap-upload { cursor: pointer; }
+.artifact-row { display: flex; align-items: center; gap: 8px; padding: 7px 8px; border-radius: var(--radius-sm); }
 .artifact-row:hover { background: var(--bg-hover); }
-.artifact-row .name { flex: 1; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; font-size: 13px; }
-.artifact-row .kind { font-size: 11px; color: var(--text-faint); }
+.artifact-row .ar-icon { display: flex; color: var(--text-dim); cursor: pointer; flex: none; }
+.artifact-row .ar-main { flex: 1; min-width: 0; display: flex; flex-direction: column; gap: 1px; cursor: pointer; }
+.artifact-row .name { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; font-size: 13px; }
+.artifact-row .meta { font-size: 11px; color: var(--text-faint); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.artifact-row .ar-acts { display: none; align-items: center; gap: 2px; flex: none; }
+.artifact-row:hover .ar-acts { display: inline-flex; }
+.artifact-row .ar-acts .icon-btn { width: 26px; height: 26px; }
+.artifact-row .ar-acts .icon-btn.danger { color: var(--err); }
+.empty-note { color: var(--text-faint); font-size: 12.5px; padding: 14px 6px; }
 .agent-row { display: flex; align-items: center; gap: 8px; padding: 8px; border-radius: var(--radius-sm); cursor: pointer; font-size: 13px; }
 .agent-row:hover { background: var(--bg-hover); }
 .status-dot { width: 8px; height: 8px; border-radius: 50%; flex-shrink: 0; }
@@ -179,17 +200,27 @@ button { font-family: inherit; font-size: inherit; color: inherit; }
 .subagent-node { border: 1px solid var(--border); border-radius: var(--radius); padding: 10px; margin-bottom: 8px; background: var(--bg-panel); }
 .subagent-node .head { display: flex; gap: 8px; align-items: center; margin-bottom: 6px; }
 
-/* ---- 设置（schema 驱动）---- */
-.settings-group { margin-bottom: 18px; }
-.settings-group h4 { margin: 0 0 8px; font-size: 11.5px; color: var(--text-faint); text-transform: uppercase; letter-spacing: .07em; font-weight: 600; }
-.setting-row { display: grid; grid-template-columns: 200px 1fr auto; gap: 10px; align-items: center; padding: 8px 0; border-bottom: 1px solid var(--border-soft); font-size: 13px; }
-.setting-row label { color: var(--text-dim); }
-.setting-row input, .setting-row select { background: var(--bg); border: 1px solid var(--border); border-radius: var(--radius-sm); color: var(--text); padding: 7px 10px; font-family: inherit; }
-.setting-row input:focus, .setting-row select:focus { border-color: var(--accent); box-shadow: var(--ring); outline: none; }
+/* ---- 设置（schema 驱动；行组件来自 @ui SettingRow，这里只补控件样式）---- */
+.ui-setting-control { display: flex; align-items: center; justify-content: flex-end; }
+.ui-setting-control input, .ui-setting-control select { background: var(--bg); border: 1px solid var(--border); border-radius: var(--radius-sm); color: var(--text); padding: 7px 10px; font-family: inherit; width: 100%; max-width: 340px; }
+.ui-setting-control input:focus, .ui-setting-control select:focus { border-color: var(--accent); box-shadow: var(--ring); outline: none; }
+.ui-setting-control input[type="checkbox"] { width: auto; }
 .effect-badge { font-size: 10.5px; padding: 2px 7px; border-radius: var(--radius-full); border: 1px solid var(--border); color: var(--text-faint); white-space: nowrap; }
 .effect-hot { color: var(--ok); border-color: var(--ok); }
 .effect-new-run { color: var(--warn); border-color: var(--warn); }
 
+/* ---- 文档查看器（单层 OverlayHost 内）---- */
+.docv { display: flex; flex-direction: column; min-height: 0; }
+.docv-toolbar { display: flex; align-items: center; gap: 8px; padding: 0 0 10px; border-bottom: 1px solid var(--border-soft); margin-bottom: 10px; }
+.docv-toolbar .spacer { flex: 1; }
+.docv-meta { font-size: 11.5px; color: var(--text-faint); text-transform: capitalize; }
+.docv-dirty { color: var(--warn); font-size: 12px; }
+.docv-dl { text-decoration: none; }
+.docv-body { flex: 1; min-height: 0; overflow: auto; }
+.docv-pdf { width: 100%; height: 100%; min-height: 60vh; border: 1px solid var(--border-soft); border-radius: var(--radius); background: var(--bg); }
+.docv-editor { width: 100%; height: 56vh; font-family: var(--mono); font-size: 12.5px; resize: vertical; }
+.docv-pre { font-family: var(--mono); font-size: 12.5px; white-space: pre-wrap; word-break: break-word; background: var(--bg-inset); border: 1px solid var(--border-soft); border-radius: var(--radius); padding: 12px 14px; }
+
 /* ---- 杂项 ---- */
 .toast { position: fixed; bottom: 24px; left: 50%; transform: translateX(-50%); background: var(--bg-raised); border: 1px solid var(--border); color: var(--text); padding: 9px 16px; border-radius: var(--radius-full); box-shadow: var(--shadow-lg); z-index: 90; font-size: 13px; }
 .conn-dot { width: 8px; height: 8px; border-radius: 50%; }
@@ -366,3 +397,10 @@ button { font-family: inherit; font-size: inherit; color: inherit; }
 .role-mark.role-assistant { background: none; border: none; padding: 0; }
 .msg.user .msg-role { align-items: center; }
 .ad-user-cell { display: flex; align-items: center; gap: 8px; }
+
+/* ---- 右栏轻预览（裁定 D4：右栏 + 弹窗双落位）---- */
+.rail-preview-head { display: flex; align-items: center; gap: 6px; padding: 0 2px 8px; border-bottom: 1px solid var(--border-soft); margin-bottom: 8px; }
+.rail-preview-head .rp-name { font-size: 13px; font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; max-width: 55%; }
+.tab-body[data-rail-preview] { display: flex; flex-direction: column; }
+.tab-body[data-rail-preview] .ui-fp { flex: 1; }
+.artifact-chip .ac-act { border: none; background: none; }

test/live.test.ts

@@ -0,0 +1,149 @@
+// live 流式投影纯逻辑测试（中栏过程/回复分离）：到达序并段、process 标记时机、
+// 轮次穿插同构、过程区折叠谓词。
+import { describe, it, expect } from 'vitest'
+import {
+  applyTextDelta, applyThinkingDelta, applyToolCall, applyToolResult, applyArtifactCreated,
+  liveToMessage, showProcessInline, type LiveItem,
+} from '../src/live'
+import type { LiveState } from '../src/store'
+
+function live(over: Partial<LiveState> = {}): LiveState {
+  return { runId: 'r1', phase: 'thinking', items: [], agentNotes: {}, startedAt: 0, ...over }
+}
+
+// 两轮流式事件回放：思考→解说文本→工具→思考→最终回复（与后端事件序一致）。
+function twoTurnItems(): LiveItem[] {
+  let items: LiveItem[] = []
+  items = applyThinkingDelta(items, '先想想')
+  items = applyThinkingDelta(items, '一下')
+  items = applyTextDelta(items, 0, '我先更新待办。')
+  items = applyToolCall(items, 'update_todos', 'c1')
+  items = applyToolResult(items, 'c1', 'ok', '已更新')
+  items = applyThinkingDelta(items, '再想想')
+  items = applyTextDelta(items, 1, '最终')
+  items = applyTextDelta(items, 1, '回复')
+  return items
+}
+
+describe('applyThinkingDelta / applyTextDelta', () => {
+  it('merges thinking deltas into the last thinking segment', () => {
+    let items: LiveItem[] = []
+    items = applyThinkingDelta(items, '先')
+    items = applyThinkingDelta(items, '想想')
+    expect(items).toEqual([{ kind: 'thinking', text: '先想想' }])
+  })
+  it('opens a new thinking segment after text/tool (turn boundary)', () => {
+    let items: LiveItem[] = applyThinkingDelta([], '第一轮思考')
+    items = applyTextDelta(items, 0, '解说')
+    items = applyThinkingDelta(items, '第二轮思考')
+    expect(items).toEqual([
+      { kind: 'thinking', text: '第一轮思考' },
+      { kind: 'text', index: 0, text: '解说' },
+      { kind: 'thinking', text: '第二轮思考' },
+    ])
+  })
+  it('appends text to the last segment when index matches', () => {
+    let items: LiveItem[] = []
+    items = applyTextDelta(items, 0, '先查')
+    items = applyTextDelta(items, 0, '一下')
+    expect(items).toEqual([{ kind: 'text', index: 0, text: '先查一下' }])
+  })
+  it('opens a new text segment when index advances (new turn)', () => {
+    let items: LiveItem[] = applyTextDelta([], 0, '解说')
+    items = applyTextDelta(items, 1, '最终')
+    items = applyTextDelta(items, 1, '回复')
+    expect(items).toEqual([
+      { kind: 'text', index: 0, text: '解说' },
+      { kind: 'text', index: 1, text: '最终回复' },
+    ])
+  })
+  it('fills the most recent pending tool call (callId match, tail fallback)', () => {
+    let items: LiveItem[] = []
+    items = applyToolCall(items, 'a', 'ca')
+    items = applyToolCall(items, 'b', 'cb')
+    items = applyToolResult(items, 'cb', 'ok', '结果')
+    expect(items).toEqual([
+      { kind: 'tool', callId: 'ca', name: 'a' },
+      { kind: 'tool', callId: 'cb', name: 'b', status: 'ok', summary: '结果' },
+    ])
+    // 无 callId 的事件回落到尾部配对。
+    items = applyToolResult(items, undefined, 'ok')
+    expect(items[0]).toEqual({ kind: 'tool', callId: 'ca', name: 'a', status: 'ok' })
+  })
+})
+
+describe('liveToMessage', () => {
+  it('interleaves parts per turn in arrival order, matching persisted parts', () => {
+    const msg = liveToMessage(live({ items: twoTurnItems() }))
+    expect(msg.parts).toEqual([
+      { type: 'thinking', text: '先想想一下', process: true },
+      { type: 'text', text: '我先更新待办。', process: true },
+      { type: 'tool_call', process: true, toolCall: { id: 'c1', name: 'update_todos' } },
+      { type: 'tool_result', process: true, toolCall: { id: 'c1', name: 'update_todos' },
+        toolResult: { callId: 'c1', status: 'ok', summary: '已更新' } },
+      { type: 'thinking', text: '再想想', process: true },
+      { type: 'text', text: '最终回复' },
+    ])
+  })
+  it('marks the in-flight segment as process the moment its tool call arrives', () => {
+    let items: LiveItem[] = []
+    items = applyTextDelta(items, 0, '我先查一下')
+    const before = liveToMessage(live({ items }))
+    expect(before.parts.map(p => p.process)).toEqual([undefined]) // 尚无工具：仍在回复位
+    items = applyToolCall(items, 'web_search')
+    const after = liveToMessage(live({ items }))
+    expect(after.parts.map(p => p.process)).toEqual([true, true]) // tool.call 一到即改标
+  })
+  it('single final segment without tools carries no process flag', () => {
+    let items: LiveItem[] = []
+    items = applyTextDelta(items, 0, '直接回答')
+    const msg = liveToMessage(live({ items }))
+    expect(msg.parts.map(p => p.process)).toEqual([undefined])
+  })
+  it('tools between segments keep every non-final segment in the process area', () => {
+    let items: LiveItem[] = []
+    items = applyTextDelta(items, 0, '第一轮')
+    items = applyToolCall(items, 'a')
+    items = applyToolResult(items, undefined, 'ok')
+    items = applyTextDelta(items, 1, '第二轮')
+    items = applyToolCall(items, 'b')
+    items = applyTextDelta(items, 2, '最终回复')
+    const msg = liveToMessage(live({ items }))
+    expect(msg.parts.filter(p => p.type === 'text').map(p => p.process)).toEqual([true, true, undefined])
+    // 顺序必须与落库穿插序一致：text → tool → text → tool → text。
+    expect(msg.parts.map(p => p.type)).toEqual(['text', 'tool_call', 'tool_result', 'text', 'tool_call', 'text'])
+  })
+  it('thinking and tool parts are always process', () => {
+    let items: LiveItem[] = []
+    items = applyThinkingDelta(items, '想')
+    items = applyTextDelta(items, 0, '答')
+    items = applyToolCall(items, 'web_search')
+    items = applyToolResult(items, undefined, 'ok', '命中')
+    const msg = liveToMessage(live({ items }))
+    for (const p of msg.parts.filter(p => p.type !== 'text')) expect(p.process).toBe(true)
+  })
+  it('artifact refs land after their tool call and are process', () => {
+    let items: LiveItem[] = []
+    items = applyTextDelta(items, 0, '生成报表。')
+    items = applyToolCall(items, 'make_report', 'c1')
+    items = applyToolResult(items, 'c1', 'ok')
+    items = applyArtifactCreated(items, { artifactId: 'a1', name: 'report.csv', kind: 'csv' })
+    items = applyTextDelta(items, 1, '完成。')
+    const msg = liveToMessage(live({ items }))
+    expect(msg.parts.map(p => p.type)).toEqual(['text', 'tool_call', 'tool_result', 'artifact_ref', 'text'])
+    expect(msg.parts.find(p => p.type === 'artifact_ref')).toMatchObject({ process: true })
+    expect(msg.parts.filter(p => p.type === 'text').map(p => p.process)).toEqual([true, undefined])
+  })
+})
+
+describe('showProcessInline', () => {
+  it('expands during thinking/acting and collapses the moment responding starts', () => {
+    expect(showProcessInline(live({ phase: 'thinking' }), true)).toBe(true)
+    expect(showProcessInline(live({ phase: 'acting' }), true)).toBe(true)
+    expect(showProcessInline(live({ phase: 'responding' }), true)).toBe(false)
+  })
+  it('falls back to the auto-collapse preference when no live run', () => {
+    expect(showProcessInline(null, true)).toBe(false)
+    expect(showProcessInline(null, false)).toBe(true)
+  })
+})

test/messageparts.test.ts

@@ -0,0 +1,65 @@
+// 消息部件顺序保真纯函数测试（渲染顺序 = 落库顺序）。
+import { describe, it, expect } from 'vitest'
+import { groupParts, humanSize, artifactIcon } from '../src/messageparts'
+import type { Part } from '../src/contracts'
+
+function p(partial: Partial<Part> & { type: Part['type'] }): Part {
+  return partial as Part
+}
+
+describe('groupParts（顺序保真）', () => {
+  it('interleaves tool blocks at their original positions', () => {
+    // 后端 llm.go 的真实交错序：text → tool → tool_result → artifact_ref → text
+    const parts: Part[] = [
+      p({ type: 'text', text: '先找资料' }),
+      p({ type: 'tool_call', process: true, toolCall: { id: 'c1', name: 'search' } }),
+      p({ type: 'tool_result', process: true, toolResult: { callId: 'c1', status: 'ok' } }),
+      p({ type: 'artifact_ref', artifact: { artifactId: 'a1', name: '会议纪要.docx' } }),
+      p({ type: 'text', text: '文档已生成，请查收' }),
+    ]
+    const blocks = groupParts(parts)
+    expect(blocks.map(b => b.kind)).toEqual(['content', 'process', 'content', 'content'])
+    expect((blocks[0] as { part: Part }).part.text).toBe('先找资料')
+    expect((blocks[1] as { parts: Part[] }).parts.map(x => x.type)).toEqual(['tool_call', 'tool_result'])
+    expect((blocks[2] as { part: Part }).part.type).toBe('artifact_ref')
+    expect((blocks[3] as { part: Part }).part.text).toBe('文档已生成，请查收')
+  })
+
+  it('merges only consecutive process parts into one block', () => {
+    const parts: Part[] = [
+      p({ type: 'thinking', process: true, text: '思考' }),
+      p({ type: 'text', text: '第一段' }),
+      p({ type: 'tool_call', process: true, toolCall: { id: 'c1', name: 'a' } }),
+      p({ type: 'tool_result', process: true, toolResult: { callId: 'c1', status: 'ok' } }),
+      p({ type: 'text', text: '第二段' }),
+      p({ type: 'tool_call', process: true, toolCall: { id: 'c2', name: 'b' } }),
+    ]
+    const blocks = groupParts(parts)
+    expect(blocks.map(b => b.kind)).toEqual(['process', 'content', 'process', 'content', 'process'])
+    expect((blocks[2] as { parts: Part[] }).parts).toHaveLength(2)
+    expect((blocks[4] as { parts: Part[] }).parts).toHaveLength(1)
+  })
+
+  it('handles all-process and all-content messages', () => {
+    expect(groupParts([p({ type: 'thinking', process: true, text: 'x' }), p({ type: 'tool_call', process: true, toolCall: { id: '', name: '' } })]))
+      .toEqual([{ kind: 'process', parts: [expect.anything(), expect.anything()] }])
+    expect(groupParts([p({ type: 'text', text: 'hi' })]).map(b => b.kind)).toEqual(['content'])
+    expect(groupParts([])).toEqual([])
+  })
+})
+
+describe('humanSize / artifactIcon', () => {
+  it('formats sizes compactly', () => {
+    expect(humanSize(undefined)).toBe('')
+    expect(humanSize(0)).toBe('')
+    expect(humanSize(512)).toBe('512 B')
+    expect(humanSize(2048)).toBe('2 KB')
+    expect(humanSize(1536 * 1024)).toBe('1.5 MB')
+  })
+  it('picks icons by extension then kind', () => {
+    expect(artifactIcon('会议纪要.docx')).toBe('file')
+    expect(artifactIcon('截图.png')).toBe('image')
+    expect(artifactIcon('blob', 'image')).toBe('image')
+    expect(artifactIcon('打包.zip')).toBe('package')
+  })
+})

tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["./src/App.tsx","./src/api.ts","./src/auth.ts","./src/contracts.ts","./src/main.tsx","./src/passwords.ts","./src/store.ts","./src/tasklist.ts","./src/components/AdminUsersModal.tsx","./src/components/AgentTracker.tsx","./src/components/Conversation.tsx","./src/components/DocViewer.tsx","./src/components/LoginPage.tsx","./src/components/SettingsModal.tsx","./src/components/TaskSidebar.tsx","./src/components/Workbench.tsx","./src/components/Workspaces.tsx","./test/auth.test.ts","./test/contracts.test.ts","./test/tasklist.test.ts"],"version":"5.9.3"}
+{"root":["./src/App.tsx","./src/api.ts","./src/auth.ts","./src/contracts.ts","./src/live.ts","./src/main.tsx","./src/messageparts.ts","./src/passwords.ts","./src/previewsetup.ts","./src/store.ts","./src/tasklist.ts","./src/components/AdminUsersModal.tsx","./src/components/AgentTracker.tsx","./src/components/Conversation.tsx","./src/components/DocViewer.tsx","./src/components/LoginPage.tsx","./src/components/ProjectSettingsModal.tsx","./src/components/SettingsModal.tsx","./src/components/TaskSidebar.tsx","./src/components/Workbench.tsx","./src/components/Workspaces.tsx","./test/auth.test.ts","./test/contracts.test.ts","./test/live.test.ts","./test/messageparts.test.ts","./test/tasklist.test.ts"],"version":"5.9.3"}