Drop the login-key issue client and fix hint punctuation

Why: independent review flagged the issue client still targeting the 410
endpoint and a hint sentence ending with a period.
Evidence: npm run build + npm test re-run on the fix (SELF).
Impact: api client surface only.
Refs: review brief /tmp/review-brief-admin-user-contract.md

e2e/rdm-duties.playwright.ts

@@ -1,4 +1,4 @@
-// Real React/Picker interaction with deterministic HTTP responses; no live account or database.
+// 文档职责三视图：确定性 HTTP，不连接真实账号或数据库。
 import { test, expect, type Page } from '@playwright/test'
 
 test.skip(!process.env.PLAYWRIGHT_BASE_URL, 'set PLAYWRIGHT_BASE_URL to an isolated frontend server')
@@ -11,17 +11,10 @@ function deferred() {
 
 async function dutiesPage(page: Page) {
   const writes: { command: string; params: Record<string, unknown> }[] = []
-  const calls: { command: string; params: Record<string, unknown> }[] = []
   const holds = new Map<string, { started: ReturnType<typeof deferred>; release: ReturnType<typeof deferred> }>()
-  const active = new Set<string>()
-  const submissions: Record<string, unknown> = { 'doc-A': null, 'doc-B': null }
-  const commands = ['rdm.project.member.list', 'rdm.project.member.add', 'rdm.project.member.remove',
-    'rdm.duty.catalog', 'rdm.duty.get', 'rdm.review.assign.doc', 'rdm.review.assign.doc.batch',
-    'rdm.review.doc.submit', 'rdm.review.doc.approve', 'rdm.review.doc.reject', 'rdm.review.doc.final', 'rdm.review.doc.status']
-  const docs = [
-    { docId: 'doc-A', title: '文档A', typeKey: 'design', sections: 1, assigned: true, author: 'alice', reviewers: ['carol'], approver: 'dave' },
-    { docId: 'doc-B', title: '文档B', typeKey: 'design', sections: 1, assigned: true, author: 'bob', reviewers: ['carol'], approver: 'dave' },
-  ]
+  let generation = 0
+  const commands = ['rdm.project.member.list', 'rdm.duty.matrix', 'rdm.duty.preview',
+    'rdm.review.assign.doc', 'rdm.review.assign.doc.batch', 'rdm.duty.legacy.scan', 'rdm.duty.legacy.apply']
   await page.route('**/api/**', async route => {
     const request = route.request()
     const path = new URL(request.url()).pathname
@@ -36,125 +29,73 @@ async function dutiesPage(page: Page) {
       const command = decodeURIComponent(path.substring('/api/commands/'.length))
       const params = request.postDataJSON().params as Record<string, unknown>
       expect(params.projectId).toBe('domain-7')
-      calls.push({ command, params })
-      const hold = holds.get(`${command}:${params.docId ?? ''}`)
+      const hold = holds.get(command)
       if (hold) { hold.started.resolve(); await hold.release.promise }
-      let payload: unknown = {}
-      if (command === 'rdm.duty.catalog') payload = { docs }
-      else if (command === 'rdm.project.member.list') payload = { members: ['alice', 'bob', 'carol', 'dave'].map(owner => ({ owner, role: 'member', addedBy: '', addedAt: '' })) }
-      else if (command === 'rdm.duty.get') {
-        const doc = docs.find(d => d.docId === params.docId)!
-        payload = { docId: doc.docId, title: doc.title, assigned: doc.assigned,
-          roles: { author: doc.author, reviewers: doc.reviewers, approver: doc.approver }, sections: [],
-          active: active.has(doc.docId) ? { round: 1, state: 'submitted', createdBy: 'alice' } : null }
-      } else if (command === 'rdm.review.doc.status') payload = { submission: submissions[String(params.docId)] }
-      else { writes.push({ command, params }) }
-      body = { payload }
+      const author = generation === 0 ? 'alice' : 'bob'
+      if (command === 'rdm.duty.matrix') {
+        body = { payload: {
+          canAssign: true,
+          docs: [{ docId: 'doc-A', code: 'A', title: '文档A', typeKey: 'design', stage: 'BD', dutyVersion: 1, authors: 1, reviewers: 1, approvers: 1, conflicts: 0, legacySectionOverrides: 0 }],
+          members: ['alice', 'bob', 'carol'].map(owner => ({ owner, role: 'member', valid: true, canAuthor: true, canReview: true, canApprove: true })),
+          cells: [
+            { docId: 'doc-A', owner: 'alice', duty: author === 'alice' ? 'author' : 'none' },
+            { docId: 'doc-A', owner: 'bob', duty: author === 'bob' ? 'author' : 'reviewer' },
+            { docId: 'doc-A', owner: 'carol', duty: 'approver' },
+          ],
+        } }
+      } else if (command === 'rdm.duty.preview') {
+        writes.push({ command, params })
+        body = { payload: { ok: true, docs: [{ docId: 'doc-A', title: '文档A', replacedAuthor: 'alice' }] } }
+      } else if (command === 'rdm.duty.legacy.scan') {
+        body = { payload: { findings: [{ docId: 'doc-A', title: '文档A', sectionTitle: '范围', kind: 'ambiguous' }] } }
+      } else {
+        writes.push({ command, params })
+        generation += 1
+        body = { payload: { applied: 1 } }
+      }
     } else if (path.endsWith('/cards')) body = { cards: [] }
     await route.fulfill({ contentType: 'application/json', body: JSON.stringify(body) })
   })
   await page.goto('/')
   await page.getByRole('button', { name: '项目设置', exact: true }).click()
-  await page.getByRole('tab', { name: /文档职责/ }).click()
-  await expect(page.getByRole('button', { name: '文档A', exact: true })).toBeVisible()
-  return { writes, calls, active, submissions,
-    hold(command: string, docId: string) {
-      const pending = { started: deferred(), release: deferred() }
-      holds.set(`${command}:${docId}`, pending)
-      return pending
-    } }
+  await page.getByRole('tab', { name: '文档职责', exact: true }).click()
+  await expect(page.getByText('本页只分配已有文档的职责，不创建或生成文档。')).toBeVisible()
+  return { writes, hold(command: string) {
+    const pending = { started: deferred(), release: deferred() }
+    holds.set(command, pending)
+    return pending
+  } }
 }
 
-async function chooseMember(page: Page, label: string, owner: string) {
-  await page.locator(`.picker[aria-label="${label}"]`).getByRole('combobox').fill(owner)
-  await page.getByRole('option', { name: new RegExp(`^${owner}`) }).click()
-}
-
-async function settleResponse(page: Page, command: string, release: () => void) {
-  const response = page.waitForResponse(r => r.url().endsWith(`/api/commands/${command}`))
-  release()
-  await response
-  await page.evaluate(() => new Promise<void>(done => requestAnimationFrame(() => requestAnimationFrame(() => done()))))
-}
-
-test('a newly assigned document can submit its first whole-document review', async ({ page }) => {
+test('three views share one draft and do not offer review actions', async ({ page }) => {
   const fixture = await dutiesPage(page)
-  await page.getByRole('button', { name: '文档A', exact: true }).click()
-  await expect(page.getByText('该文档尚无整文提交记录（当前职责仍可分配）。', { exact: true })).toBeVisible()
-  const submit = page.getByRole('button', { name: '整文提交（编制人）', exact: true })
-  await expect(submit).toBeEnabled()
-  await submit.click()
-  await expect(page.getByText('整文已提交审核（全文锁定）', { exact: true })).toBeVisible()
-  expect(fixture.writes).toEqual([{ command: 'rdm.review.doc.submit', params: { projectId: 'domain-7', docId: 'doc-A' } }])
+  await page.getByLabel('选择成员').selectOption('bob')
+  await page.getByLabel('bob 在 文档A 的职责').selectOption({ label: '编制（将替换alice）' })
+  await page.getByRole('tab', { name: '按文档' }).click()
+  await page.getByLabel('选择文档').selectOption('doc-A')
+  await page.getByLabel('alice 在 文档A 的职责').selectOption('审核')
+  await expect(page.getByLabel('bob 在 文档A 的职责')).toHaveValue('author')
+  await page.getByRole('tab', { name: '矩阵' }).click()
+  await expect(page.getByLabel('bob 在 文档A 的职责')).toHaveValue('author')
+  await expect(page.getByRole('button', { name: /提交|审核通过|驳回|终批|生成|新建文档/ })).toHaveCount(0)
+  await page.getByRole('button', { name: '保存职责' }).click()
+  await expect.poll(() => fixture.writes.map(item => item.command)).toEqual(['rdm.duty.preview', 'rdm.review.assign.doc.batch'])
 })
 
-test('viewing active duties is passive; only a dirty save asks for confirmation', async ({ page }) => {
+test('a stale matrix response does not replace the current draft', async ({ page }) => {
   const fixture = await dutiesPage(page)
-  fixture.active.add('doc-A')
-  const dialogs: string[] = []
-  let accept = false
-  page.on('dialog', async dialog => { dialogs.push(dialog.message()); accept ? await dialog.accept() : await dialog.dismiss() })
-  await page.getByRole('button', { name: '文档A', exact: true }).click()
-  await expect(page.getByRole('heading', { name: /文档A · 当前职责/ })).toBeVisible()
-  const save = page.getByRole('button', { name: '保存当前职责', exact: true })
-  await expect(save).toBeDisabled()
-  expect(dialogs).toEqual([])
-  await chooseMember(page, '编制人', 'bob')
-  await expect(save).toBeEnabled()
-  expect(dialogs).toEqual([])
-  await save.click()
-  expect(dialogs).toHaveLength(1)
-  expect(fixture.writes).toEqual([])
-  accept = true
-  await save.click()
-  await expect(page.getByText('已保存当前职责', { exact: true })).toBeVisible()
-  expect(dialogs).toHaveLength(2)
-  expect(fixture.writes).toEqual([{ command: 'rdm.review.assign.doc', params: {
-    projectId: 'domain-7', docId: 'doc-A', author: 'bob', reviewers: ['carol'], approver: 'dave',
-  } }])
+  await page.getByLabel('选择成员').selectOption('alice')
+  const held = fixture.hold('rdm.duty.matrix')
+  await page.getByLabel('筛选文档名称或编号').fill('文档A')
+  await held.started.promise
+  await page.getByLabel('alice 在 文档A 的职责').selectOption('审核')
+  held.release.resolve()
+  await expect(page.getByLabel('alice 在 文档A 的职责')).toHaveValue('reviewer')
 })
 
-test('a late document detail cannot overwrite another selection or its saved roles', async ({ page }) => {
-  const fixture = await dutiesPage(page)
-  const old = fixture.hold('rdm.duty.get', 'doc-A')
-  await page.getByRole('button', { name: '文档A', exact: true }).click()
-  await old.started.promise
-  await page.getByRole('button', { name: '文档B', exact: true }).click()
-  await expect(page.getByRole('heading', { name: '文档B · 当前职责', exact: true })).toBeVisible()
-  await settleResponse(page, 'rdm.duty.get', old.release.resolve)
-  await expect(page.getByRole('heading', { name: '文档B · 当前职责', exact: true })).toBeVisible()
-  expect(fixture.calls.filter(c => c.command === 'rdm.review.doc.status' && c.params.docId === 'doc-A')).toEqual([])
-  await chooseMember(page, '批准人', 'alice')
-  await page.getByRole('button', { name: '保存当前职责', exact: true }).click()
-  await expect(page.getByText('已保存当前职责', { exact: true })).toBeVisible()
-  expect(fixture.writes).toEqual([{ command: 'rdm.review.assign.doc', params: {
-    projectId: 'domain-7', docId: 'doc-B', author: 'bob', reviewers: ['carol'], approver: 'alice',
-  } }])
-})
-
-test('a late review status cannot replace the selected document frozen review', async ({ page }) => {
-  const fixture = await dutiesPage(page)
-  const submission = (round: number, author: string) => ({ round, state: 'submitted', digest: '', createdBy: author,
-    createdAt: '', duties: { author, reviewers: ['carol'], approver: 'dave' }, reviews: {}, sections: {} })
-  fixture.submissions['doc-A'] = submission(1, 'alice')
-  fixture.submissions['doc-B'] = submission(2, 'bob')
-  const old = fixture.hold('rdm.review.doc.status', 'doc-A')
-  await page.getByRole('button', { name: '文档A', exact: true }).click()
-  await old.started.promise
-  await page.getByRole('button', { name: '文档B', exact: true }).click()
-  await expect(page.getByRole('heading', { name: /整文审签 · 第 2 轮/ })).toBeVisible()
-  await settleResponse(page, 'rdm.review.doc.status', old.release.resolve)
-  await expect(page.getByRole('heading', { name: /整文审签 · 第 2 轮/ })).toBeVisible()
-  await expect(page.getByRole('heading', { name: /整文审签 · 第 1 轮/ })).toHaveCount(0)
-})
-
-test('closing the project panel invalidates a pending detail before its follow-up status read', async ({ page }) => {
-  const fixture = await dutiesPage(page)
-  const old = fixture.hold('rdm.duty.get', 'doc-A')
-  await page.getByRole('button', { name: '文档A', exact: true }).click()
-  await old.started.promise
-  await page.getByRole('dialog').getByRole('button', { name: '关闭', exact: true }).click()
-  await expect(page.getByRole('tab', { name: /文档职责/ })).toHaveCount(0)
-  await settleResponse(page, 'rdm.duty.get', old.release.resolve)
-  expect(fixture.calls.filter(c => c.command === 'rdm.review.doc.status' && c.params.docId === 'doc-A')).toEqual([])
+test('a narrow viewport points away from the full matrix', async ({ page }) => {
+  await dutiesPage(page)
+  await page.setViewportSize({ width: 390, height: 800 })
+  await page.getByRole('tab', { name: '矩阵' }).click()
+  await expect(page.getByText('当前宽度放不下成员×文档矩阵。请使用“按人员”或“按文档”。')).toBeVisible()
 })

e2e/work-companion.playwright.ts

@@ -1,5 +1,5 @@
 import { test, expect, type Page } from '@playwright/test'
-import type { ActivityCard, Artifact, Conversation, Part, StreamEvent } from '../src/contracts'
+import type { ActivityCard, Artifact, Conversation, Part, StreamEvent, WorkCardAction } from '../src/contracts'
 
 test.skip(!process.env.WORK_COMPANION_BROWSER, 'Run explicitly against the task-owned UI preview')
 
@@ -27,7 +27,8 @@ async function fixture(page: Page, initialCards: ActivityCard[] = [progress], fo
   let actionCount = 0
   let releaseAction: (() => void) | undefined
   let holdAction = false
-  let sent: { text: string; attachmentIds: string[] } | undefined
+  let sent: { text: string; attachmentIds: string[]; taskRef?: { cardId: string; resultVersion: number } } | undefined
+  const workActions: { cardId: string; actionId: string; payload: WorkCardAction }[] = []
   let uploadNumber = 0
   const errors: string[] = []
   page.on('pageerror', error => errors.push(error.message))
@@ -91,6 +92,22 @@ async function fixture(page: Page, initialCards: ActivityCard[] = [progress], fo
     else if (/\/messages$/.test(path) && request.method() === 'POST') {
       sent = request.postDataJSON()
       body = { message: { id: 'sent', conversationId: 'c1', role: 'user', parts: [{ type: 'text', text: sent?.text ?? '' }], createdAt: stamp }, run: { id: 'run1', conversationId: 'c1', projectId: 'p1', kind: 'conversation', status: 'running', createdAt: stamp } }
+    } else if (/^\/api\/cards\/[^/]+\/actions\/work\./.test(path)) {
+      const cardId = path.split('/')[3]
+      const actionId = path.split('/').at(-1)!
+      const payload = request.postDataJSON() as WorkCardAction
+      workActions.push({ cardId, actionId, payload })
+      cards = cards.map(card => {
+        if (card.id !== cardId || !card.work) return card
+        const next = { ...card, work: { ...card.work } }
+        if (actionId === 'work.read') next.work.readVersion = payload.resultVersion
+        else if (next.work.decision) next.work.decision = { ...next.work.decision,
+          state: actionId === 'work.defer' ? 'deferred' : actionId === 'work.reopen' ? 'open' : 'submitted',
+          ...(actionId === 'work.submit' ? { selectedIds: payload.selectedIds, freeText: payload.freeText, respondedAt: stamp } : {}),
+        }
+        return next
+      })
+      body = { card: cards.find(card => card.id === cardId) }
     } else if (path === '/api/cards/confirm1/actions/confirm') {
       actionCount++
       if (holdAction) await new Promise<void>(resolve => { releaseAction = resolve })
@@ -102,7 +119,7 @@ async function fixture(page: Page, initialCards: ActivityCard[] = [progress], fo
   await page.goto('/')
   await expect(page.locator('.chat-title')).toHaveText('整理项目材料')
   if (initialCards.length) await expect(page.locator('[data-conversation-work]')).toBeVisible()
-  return { errors, get actionCount() { return actionCount }, get sent() { return sent }, hold() { holdAction = true }, release() { releaseAction?.() },
+  return { errors, workActions, get actionCount() { return actionCount }, get sent() { return sent }, hold() { holdAction = true }, release() { releaseAction?.() },
     async emit(type: StreamEvent['type'], payload: unknown, seq: number) {
       await page.evaluate(({ type, payload, seq }) => {
         const win = window as typeof window & { __workStreams: { url: string; emit: (e: unknown) => void }[] }
@@ -114,6 +131,145 @@ async function fixture(page: Page, initialCards: ActivityCard[] = [progress], fo
   }
 }
 
+function optionalWork(id = 'optional-work', mode: 'single' | 'multiple' = 'single'): ActivityCard {
+  return work(id, 'done', { title: '说明书材料整理', sourceRunId: 'run-history',
+    work: { resultVersion: 2, readVersion: 0, completedAt: stamp,
+      result: '# 说明书重点\n\n已整理软件结构、角色权限与操作流程，原文件保留。\n\n'
+        + '- **使用角色**：管理员、医生和患者\n- **软件结构**：患者端与医生端连接同一服务端\n- **核心内容**：安装维护、训练操作与安全说明\n\n'
+        + '## 可继续整理的内容\n\n可以先阅读摘要了解全貌，也可以单独提取性能参数、设备要求与需要进一步确认的事项。'
+        + '整理结果仅依据当前上传的说明书；缺少的材料和不能确认的内容会单独列出，不会补写成已确认的结论。'
+        + '如果继续生成交付物，新的结果会更新到独立工作卡，您可以同时讨论其他话题。'
+        + '每项结论都应保留材料范围和来源，便于后续复核。\n\n'
+        + '## 后续核对\n\n在正式采用整理结果前，建议把产品版本、适用设备、使用人员与预期交付形式分别确认。'
+        + '材料中直接写明的内容和整理时发现的问题会分开记录。对没有原文依据的数字、范围或归属，整理结果会保持待确认状态。'
+        + '需要比较其他版本时，可补充相应文件，并说明希望重点比较的部分。\n\n最后一条：需要确认使用场景。',
+      decision: { mode, state: 'open', options: [{ id: 'summary', label: '生成摘要' }, { id: 'facts', label: '提取参数' }] },
+    },
+  })
+}
+
+test('keeps optional choices nonblocking and supports defer, reopen, free input and saved answers', async ({ page }) => {
+  const state = await fixture(page, [optionalWork('optional-work', 'multiple')])
+  const inline = page.locator('[data-conversation-work] [data-card-id="optional-work"]')
+  await expect(inline.getByRole('checkbox', { name: '生成摘要', exact: true })).toBeVisible()
+  await inline.getByRole('button', { name: '先不选择', exact: true }).click()
+  await expect(inline.getByText('已暂缓选择，您可以继续对话')).toBeVisible()
+  await expect(inline.getByRole('checkbox')).toHaveCount(0)
+  await page.getByRole('textbox', { name: '工作目标或消息', exact: true }).fill('先聊一下本周的安排')
+  await page.getByRole('button', { name: '发送', exact: true }).click()
+  await expect.poll(() => state.sent?.text).toBe('先聊一下本周的安排')
+  expect(state.sent?.taskRef).toBeUndefined()
+  // Receiving the POST is earlier than rendering its legitimate foreground reply.
+  await expect(page.locator('.msg.assistant[data-msg-id="live:run1"]')).toBeVisible()
+  const assistantCount = await page.locator('.msg.assistant').count()
+  await inline.getByRole('button', { name: '继续选择', exact: true }).click()
+  await inline.getByRole('checkbox', { name: '生成摘要', exact: true }).check()
+  await inline.getByRole('checkbox', { name: '提取参数', exact: true }).check()
+  await inline.getByRole('textbox', { name: '补充要求或直接输入需求' }).fill('保留原文中的来源和限制')
+  await inline.getByRole('button', { name: '开始处理', exact: true }).click()
+  await expect(inline.getByText('已提交需求', { exact: true })).toBeVisible()
+  await expect(inline.getByText('保留原文中的来源和限制', { exact: true })).toBeVisible()
+  await expect(inline.getByRole('textbox')).toHaveCount(0)
+  expect(state.workActions.filter(action => action.actionId === 'work.submit')).toEqual([{
+    cardId: 'optional-work', actionId: 'work.submit', payload: { resultVersion: 2, selectedIds: ['summary', 'facts'], freeText: '保留原文中的来源和限制' },
+  }])
+  await expect(page.locator('.msg.assistant')).toHaveCount(assistantCount)
+  expect(state.errors).toEqual([])
+})
+
+test('opens full results in one place, preserves unread until explicit action and references a version in the composer', async ({ page }) => {
+  await page.setViewportSize({ width: 1440, height: 1050 })
+  const state = await fixture(page, [optionalWork()])
+  await expect(page.locator('.work-result-notice')).toContainText('1 项工作有新结果')
+  await page.locator('.work-result-notice').click()
+  const card = page.locator('.right-panel [data-card-id="optional-work"]')
+  await expect(page.locator('[data-conversation-work]')).toHaveCount(0)
+  await expect(card.getByRole('radio', { name: '生成摘要', exact: true })).toBeVisible()
+  if (process.env.WORKBENCH_FLOW_SCREENSHOT) await page.screenshot({ path: process.env.WORKBENCH_FLOW_SCREENSHOT, fullPage: true })
+  await card.getByRole('button', { name: '查看完整结果', exact: true }).click()
+  await expect(card.getByText('最后一条：需要确认使用场景。', { exact: false })).toBeVisible()
+  expect(state.workActions.filter(action => action.actionId === 'work.read')).toHaveLength(0)
+  await card.getByRole('button', { name: '基于此结果继续', exact: true }).click()
+  await expect(page.getByRole('group', { name: '本条消息引用的工作结果' })).toContainText('第 2 版结果')
+  await expect.poll(() => state.workActions.filter(action => action.actionId === 'work.read').length).toBe(1)
+  await page.getByRole('textbox', { name: '工作目标或消息', exact: true }).fill('解释一下需要确认的事项')
+  await page.getByRole('button', { name: '发送', exact: true }).click()
+  await expect.poll(() => state.sent?.taskRef).toEqual({ cardId: 'optional-work', resultVersion: 2 })
+  expect(state.sent?.text).toBe('解释一下需要确认的事项')
+  await expect(page.getByRole('group', { name: '本条消息引用的工作结果' })).toHaveCount(0)
+  await expect(page.locator('.msg.user time[datetime]')).toHaveCount(2)
+  await expect(page.locator('.msg.assistant time[datetime]')).toHaveCount(2)
+  expect(state.errors).toEqual([])
+})
+
+test('retains text, uploads and the result reference when mixed input is not supported', async ({ page }) => {
+  const state = await fixture(page, [optionalWork()])
+  await page.locator('.work-result-notice').click()
+  await page.getByRole('button', { name: '基于此结果继续', exact: true }).click()
+  await page.getByLabel('添加材料', { exact: true }).setInputFiles({ name: '补充材料.txt', mimeType: 'text/plain', buffer: Buffer.from('补充要求') })
+  const input = page.getByRole('textbox', { name: '工作目标或消息', exact: true })
+  await input.fill('结合补充材料解释重点')
+  await page.getByRole('button', { name: '发送', exact: true }).click()
+  await expect(input).toHaveValue('结合补充材料解释重点')
+  await expect(page.locator('.attach-chip')).toContainText('补充材料.txt')
+  await expect(page.getByRole('group', { name: '本条消息引用的工作结果' })).toBeVisible()
+  expect(state.sent).toBeUndefined()
+})
+
+test('keeps middle and right scrolling independent while retaining full execution output', async ({ page }) => {
+  await page.setViewportSize({ width: 1440, height: 800 })
+  const events: StreamEvent[] = [
+    { seq: 1, type: 'thinking.delta', payload: { text: '已保存的核对思路' }, runId: 'run-history', conversationId: 'c1', ts: stamp, v: 1 },
+    { seq: 2, type: 'tool.call', payload: { callId: 'call-record', name: 'fs_read_file', arguments: '{"path":"说明书"}' }, runId: 'run-history', conversationId: 'c1', ts: stamp, v: 1 },
+    { seq: 3, type: 'tool.output', payload: { callId: 'call-record', text: '完整的文档读取记录' }, runId: 'run-history', conversationId: 'c1', ts: stamp, v: 1 },
+    { seq: 4, type: 'tool.result', payload: { callId: 'call-record', status: 'ok' }, runId: 'run-history', conversationId: 'c1', ts: stamp, v: 1 },
+  ]
+  const cards = [optionalWork(), ...Array.from({ length: 15 }, (_, index) => work(`active-${index}`, 'active', { title: `其他工作 ${index + 1}` }))]
+  const state = await fixture(page, cards, 14, { events, savedParts: [{ type: 'text', text: '继续讨论当前主题。\n\n'.repeat(100) }] })
+  await page.getByRole('button', { name: '打开工作', exact: true }).click()
+  const right = page.locator('.right-panel [data-work-scroll]')
+  const chat = page.locator('.chat-body')
+  await right.evaluate(element => { element.scrollTop = 180 })
+  const rightTop = await right.evaluate(element => element.scrollTop)
+  await chat.evaluate(element => { element.scrollTop = 80; element.dispatchEvent(new Event('scroll', { bubbles: true })) })
+  expect(await right.evaluate(element => element.scrollTop)).toBe(rightTop)
+  const chatTop = await chat.evaluate(element => element.scrollTop)
+  await right.evaluate(element => { element.scrollTop = 240; element.dispatchEvent(new Event('scroll', { bubbles: true })) })
+  expect(await chat.evaluate(element => element.scrollTop)).toBe(chatTop)
+  await page.locator('.right-panel [data-card-id="optional-work"]').getByRole('button', { name: '查看完整执行记录', exact: true }).click()
+  const record = page.getByRole('region', { name: '说明书材料整理的执行记录' })
+  await expect(record.getByText('已保存的核对思路', { exact: true })).toBeVisible()
+  await record.getByRole('button', { name: /查看记录/ }).click()
+  await expect(record.getByText('完整的文档读取记录', { exact: true })).toBeVisible()
+  await expect(page.locator('.work-execution-record')).toHaveCount(1)
+  await record.getByRole('button', { name: '返回工作', exact: true }).click()
+  await expect(page.locator('.right-panel [data-card-id="optional-work"]')).toBeVisible()
+  expect(state.errors).toEqual([])
+})
+
+test('folds read task history newest first and retains submitted choices after reload', async ({ page }) => {
+  const older = optionalWork('older')
+  const latest = optionalWork('latest')
+  older.title = '旧材料整理'; latest.title = '新材料整理'
+  older.work = { ...older.work!, readVersion: 2, decision: { mode: 'single', state: 'submitted', selectedIds: ['summary'], freeText: '保留参数表', respondedAt: stamp,
+    options: [{ id: 'summary', label: '生成摘要' }] } }
+  latest.work = { ...latest.work!, readVersion: 2, decision: { mode: 'single', state: 'deferred' } }
+  latest.updatedAt = '2026-10-13T10:00:00Z'
+  const state = await fixture(page, [older, latest])
+  await page.getByRole('button', { name: '打开工作', exact: true }).click()
+  await expect(page.locator('.right-panel [data-card-id]')).toHaveCount(0)
+  await page.locator('.right-panel').getByRole('button', { name: '工作历史 · 2', exact: true }).click()
+  await expect(page.locator('.right-panel [data-card-id]')).toHaveCount(2)
+  expect(await page.locator('.right-panel [data-card-id]').evaluateAll(elements => elements.map(element => element.getAttribute('data-card-id')))).toEqual(['latest', 'older'])
+  await expect(page.locator('.right-panel [data-card-id="older"]').getByText('保留参数表', { exact: true })).toBeVisible()
+  await page.reload()
+  await page.getByRole('button', { name: '打开工作', exact: true }).click()
+  await page.locator('.right-panel').getByRole('button', { name: '工作历史 · 2', exact: true }).click()
+  await expect(page.locator('.right-panel [data-card-id="older"]').getByText('保留参数表', { exact: true })).toBeVisible()
+  await expect(page.locator('.right-panel [data-card-id="older"]').getByRole('textbox')).toHaveCount(0)
+  expect(state.errors).toEqual([])
+})
+
 test('keeps real summary and details accessible with right pane closed', async ({ page }) => {
   const state = await fixture(page)
   await expect(page.locator('.right-panel')).toBeHidden()

src/api.ts

@@ -5,7 +5,7 @@ import { rdmCommandProjectId, rdmProjectCommandError } from './rdmManagement'
 import type {
   Project, Conversation, Message, Run, Artifact, HITLCard, HITLResponse,
   AgentProfile, SettingDesc, StreamEvent, StreamEventType, PlanSnapshot, TodoList, UploadInfo, PromptModule,
-  ActivityCard, SurfaceMeta, SurfaceSnapshot,
+  ActivityCard, SurfaceMeta, SurfaceSnapshot, WorkCardAction,
 } from './contracts'
 
 const BASE = ''
@@ -15,6 +15,16 @@ const BASE = ''
  *  自身命令面 fail-closed。 */
 export interface AdminZoneSection { id: string; title: string; icon?: string; desc?: string; order?: number }
 
+export interface ExecEnvView {
+  configured: boolean
+  root?: string
+  python?: string
+  base?: string
+  layers?: string[]
+  requests?: { id: string; conversationId: string; owner: string; spec: string; reason: string; status: string; layerId: string; detail: string; approver: string }[]
+  bindings?: { conversationId: string; baseId: string; extensions: string[] | null; isolated: string }[]
+}
+
 async function checked(res: Response): Promise<Response> {
   if (!res.ok) {
     const text = await res.text()
@@ -74,11 +84,23 @@ export const api = {
     return r.json() as Promise<{ owner: string; name: string; isAdmin: boolean; mustChangePassword: boolean; reloginRequired: boolean }>
   }),
   listAdminUsers: () => auth.fetch(`${BASE}/api/admin/users`).then(r => json<{ owner: string; name: string; isAdmin: boolean; mustChangePassword: boolean; hasPassword: boolean; passwordSetAt?: string; createdAt: string }[]>(r)),
-  createAdminUser: (owner: string, name: string, password: string, isAdmin: boolean) => auth.fetch(`${BASE}/api/admin/users`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ owner, name, password, isAdmin }) }).then(r => json<{ owner: string; mustChangePassword: boolean }>(r)),
-  // ---- 管理员：一次性登录 Key（忘记密码恢复主入口；旧"直接重置密码"接口退出常规 UI）----
-  adminIssueLoginKey: (owner: string, ttlMinutes?: number) => auth.fetch(`${BASE}/api/admin/users/${encodeURIComponent(owner)}/login-keys`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ purpose: 'recover', ...(ttlMinutes ? { ttlMinutes } : {}) }) }).then(r => json<{ id: string; owner: string; purpose: string; status: string; expiresAt: string; key: string }>(r)),
+  // 建号只创建待初始化账号（无密码、无权限位）；初始凭证由服务器本地 CLI 发放激活 Key。
+  createAdminUser: (owner: string, name: string) => auth.fetch(`${BASE}/api/admin/users`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ owner, profile: { name } }) }).then(r => json<{ owner: string; initializationState: string }>(r)),
+  // ---- 管理员：一次性登录 Key（HTTP 签发端点已被恢复提案契约替换为 410，客户端方法随之移除；
+  // list/revoke 仍有效，供恢复提案视图复用；兑换入口不变）----
   adminListLoginKeys: (owner: string) => auth.fetch(`${BASE}/api/admin/users/${encodeURIComponent(owner)}/login-keys`).then(r => json<{ keys: { id: string; owner: string; purpose: string; status: string; expiresAt: string; createdAt: string; createdBy?: string }[] }>(r)).then(d => d.keys ?? []),
   adminRevokeLoginKey: (owner: string, id: string) => auth.fetch(`${BASE}/api/admin/users/${encodeURIComponent(owner)}/login-keys/${encodeURIComponent(id)}`, { method: 'DELETE' }).then(r => json<{ ok: boolean }>(r)),
+  adminExecEnv: () => auth.fetch(`${BASE}/api/admin/exec-env`).then(r => json<ExecEnvView>(r)),
+  adminExecEnvDecision: (id: string, allow: boolean, isolate: boolean) => auth.fetch(`${BASE}/api/admin/exec-env/requests/${encodeURIComponent(id)}/decision`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ allow, isolate }) }).then(r => json<{ status: string; detail?: string; layerId?: string }>(r)),
+  adminExecEnvRebase: () => auth.fetch(`${BASE}/api/admin/exec-env/rebase`, { method: 'POST' }).then(r => json<{ base: string }>(r)),
+  adminExecEnvGC: () => auth.fetch(`${BASE}/api/admin/exec-env/gc`, { method: 'POST' }).then(r => json<{ removed: string[] | null }>(r)),
+  adminExecEnvWheel: (file: File, conversationId: string, reason: string) => {
+    const body = new FormData()
+    body.set('wheel', file)
+    body.set('conversationId', conversationId)
+    body.set('reason', reason)
+    return auth.fetch(`${BASE}/api/admin/exec-env/wheels`, { method: 'POST', body }).then(r => json<{ file: string; outcome: { status: string; requestId?: string; detail?: string } }>(r))
+  },
   createConversation: (projectId: string, title?: string) => auth.fetch(`${BASE}/api/projects/${projectId}/conversations`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ title: title ?? '' }) }).then(r => json<Conversation>(r)),
   deleteConversation: (id: string) => auth.fetch(`${BASE}/api/conversations/${id}`, { method: 'DELETE' }),
   setConversationProfile: (id: string, profileId: string) => auth.fetch(`${BASE}/api/conversations/${id}`, { method: 'PATCH', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ profileId }) }).then(r => json<Conversation>(r)),
@@ -90,8 +112,9 @@ export const api = {
     auth.fetch(`${BASE}/api/conversations/${encodeURIComponent(convId)}/runs/${encodeURIComponent(runId)}/events?after=${after}&limit=500`, { signal })
       .then(r => json<{ events: StreamEvent[] }>(r)),
 
-  sendMessage: (convId: string, text: string, attachmentIds: string[], requestId?: string) =>
-    auth.fetch(`${BASE}/api/conversations/${convId}/messages`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ text, attachmentIds, requestId }) })
+  sendMessage: (convId: string, text: string, attachmentIds: string[], requestId?: string, taskRef?: { cardId: string; resultVersion: number }) =>
+    auth.fetch(`${BASE}/api/conversations/${convId}/messages`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ text, attachmentIds, requestId,
+      ...(taskRef ? { taskRef: { cardId: taskRef.cardId, resultVersion: taskRef.resultVersion } } : {}) }) })
       .then(async r => {
         if (!r.ok) throw new Error(`${r.status}: ${await r.text()}`)
         return r.json() as Promise<{ message: Message; run?: Run; command?: string; reply?: string; conversation?: Conversation }>
@@ -105,8 +128,8 @@ export const api = {
 
   listCards: (conversationId: string) =>
     auth.fetch(`${BASE}/api/conversations/${conversationId}/cards`).then(r => json<{ cards: ActivityCard[] }>(r)).then(d => d.cards ?? []),
-  cardAction: (cardId: string, actionId: string, freeText?: string) =>
-    auth.fetch(`${BASE}/api/cards/${cardId}/actions/${encodeURIComponent(actionId)}`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ freeText }) })
+  cardAction: (cardId: string, actionId: string, payload?: string | WorkCardAction) =>
+    auth.fetch(`${BASE}/api/cards/${cardId}/actions/${encodeURIComponent(actionId)}`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(typeof payload === 'object' ? payload : { freeText: payload }) })
       .then(r => json<{ card: ActivityCard; receipt?: Message }>(r)),
   cardPin: (cardId: string, pinned: boolean) =>
     auth.fetch(`${BASE}/api/cards/${cardId}/pin`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ pinned }) }).then(r => json<{ card: ActivityCard }>(r)),

src/companion-conversation.css

@@ -71,6 +71,19 @@
   font-weight: 600;
 }
 .work-companion-chat .msg.user .msg-role { justify-content: flex-end; }
+.message-timestamp { color: var(--text-dim); font-size: var(--fs-ui-sm); font-weight: 400; white-space: nowrap; }
+.work-companion-chat .msg.assistant .message-timestamp { margin-left: auto; }
+.work-result-notice, .composer-work-reference { display: flex; align-items: center; flex-wrap: wrap; gap: 8px; box-sizing: border-box; padding: 8px 12px; margin-bottom: 8px; border: 1px solid var(--border); border-radius: var(--radius); background: var(--bg-raised); color: var(--text-dim); font-size: var(--fs-ui-caption); text-align: left; }
+.work-result-notice { cursor: pointer; }
+.work-result-notice:hover { background: var(--bg-hover); color: var(--text); }
+.work-result-notice > span:last-child { margin-left: auto; color: var(--accent-text); }
+.composer-work-reference > span { flex: 1; min-width: 0; overflow-wrap: anywhere; }
+.work-execution-record { min-width: 0; padding: 16px; color: var(--text); background: var(--bg-panel); border: 1px solid var(--border); border-radius: var(--radius-lg); }
+.work-record-heading { display: flex; align-items: flex-start; justify-content: space-between; gap: 12px; margin-bottom: 8px; }
+.work-record-heading strong { min-width: 0; overflow-wrap: anywhere; font-size: var(--fs-ui-base); }
+.work-record-heading .btn { flex-shrink: 0; font-size: var(--fs-ui-caption); }
+.work-execution-record .tl { margin-top: 16px; }
+.work-execution-record .part-text { overflow-wrap: anywhere; }
 .work-companion-chat .msg.assistant .role-mark {
   background: var(--primary);
   border-color: var(--primary);

src/components/AdminZone.tsx

@@ -8,6 +8,7 @@ import { useState } from 'react'
 import { store, useStore } from '../store'
 import { EmptyState, Icon, type IconName } from '@ui'
 import { UsersPanel, ProfilesSection, PluginsSection, PluginWorkspacesPanel, SystemSettingsPanel } from './adminSections'
+import { ExecEnvPanel } from './ExecEnvPanel'
 import { RdmAuditWorkspace } from './RdmAuditWorkspace'
 import { RdmRolesPanel } from './adminRdmSections'
 import type { AdminZoneSection } from '../api'
@@ -34,6 +35,7 @@ const SECTIONS: AdminSectionDef[] = [
   // P2 受管：模型/密钥/Tavily/遥测/运行基础设施的唯一写入面（Backend PR 188 系统设置 API）。
   { key: 'system-settings', label: '模型与服务配置', icon: 'settings', desc: '系统受管项：模型、密钥、Tavily、遥测与运行基础设施（仅管理员）', render: () => <SystemSettingsPanel /> },
   { key: 'plugins', label: '插件管理', icon: 'puzzle', desc: '已装载插件清单与热重载（装卸不影响核心）', render: () => <PluginsSection /> },
+  { key: 'python-env', label: 'Python 环境', icon: 'package', desc: '基础层、扩展申请、回收和 wheel 上传（仅管理员）', render: () => <ExecEnvPanel /> },
   { key: 'workspaces', label: '插件工作区', icon: 'grid', desc: '插件声明面板与服务端声明工作区', render: () => <PluginWorkspacesPanel /> },
 ]
 

src/components/Conversation.tsx

@@ -5,15 +5,16 @@ import { Icon, Avatar, BrandMark, Collapsible, getPersistedOpen, setPersistedOpe
 import { useEffect, useMemo, useRef, useState } from 'react'
 import { api } from '../api'
 import { store, useStore, activeRun, isTerminal, type LiveState, type ContextObs } from '../store'
-import { scrollRatio, scrollTopForRatio } from '../scrollsync'
 import { liveToMessage, livePhaseLabel, runEventsToTimeline, showProcessInline } from '../live'
 import { deriveShellPhase, isShellBusy, showLiveBubble, type ShellPhase } from '../runstate'
-import type { Message, Part, HITLCard, ActivityCard, Artifact, StreamEvent } from '../contracts'
+import type { Message, Part, HITLCard, ActivityCard, Artifact } from '../contracts'
 import { UIRenderer, InlineConfirmCard, hasOpenConfirm, CardAnchor } from '@ui'
 import { docBridge } from './Workbench'
 import { splitTimeline, mergeProcessTimeline, artifactIcon, humanSize, artifactIdsIn, markMissingArtifacts, dedupeDeliverables, foldRunErrors, processSummary, humanError } from '../messageparts'
 import { ProcessTimeline } from './ProcessTimeline'
 import { ConversationWork } from './ConversationWork'
+import { MessageTimestamp } from './MessageTimestamp'
+import { loadRunEvents } from '../runEvents'
 import '../companion-conversation.css'
 
 function hasFiles(dt: DataTransfer | null): boolean {
@@ -52,7 +53,7 @@ function PartView({ part, live }: { part: Part; live?: boolean | null }) {
         const ref = part.card.cardId
         const card = findCard(ref)
         const bodyChars = card?.body?.reduce((n, node) => n + (node.markdown?.length ?? 0), 0)
-        return <CardAnchor title={card?.title ?? part.card.kind} chars={bodyChars} card={workPaneOwnsCards ? undefined : card}
+        return <CardAnchor title={card?.title ?? part.card.kind} chars={bodyChars} card={workPaneOwnsCards || card?.work ? undefined : card}
           onLocate={() => store.openInbox(ref)} docBridge={docBridge} />
       }
       // 插件内嵌卡片部件（cardlink 互定位，D32）：点击 ↗ 定位收件箱对应卡（从 data 解析 card:<id>）。
@@ -226,17 +227,7 @@ function AssistantMessage({ msg, live, convId }: { msg: Message; live?: LiveStat
     let active = true
     void (async () => {
       try {
-        const events: StreamEvent[] = []
-        let after = 0
-        while (true) {
-          const page = await api.runEventsPage(convId, msg.runId!, after, controller.signal)
-          const rows = page.events ?? []
-          events.push(...rows)
-          if (rows.length < 500) break
-          const next = rows[rows.length - 1].seq
-          if (next <= after) throw new Error('process event cursor did not advance')
-          after = next
-        }
+        const events = await loadRunEvents(convId, msg.runId!, controller.signal)
         if (active) setReplayed(runEventsToTimeline(events, msg.runId))
       } catch {
         if (active) setProcessError(true)
@@ -269,6 +260,7 @@ function AssistantMessage({ msg, live, convId }: { msg: Message; live?: LiveStat
       <div className="msg-role">
         <span className="role-mark role-assistant"><BrandMark size={16} /></span>
         <span>助手</span>
+        <MessageTimestamp value={msg.createdAt || run?.createdAt} />
         {live && <LiveBar live={live} />}
       </div>
       {(split.timeline.length > 0 || !!msg.runId) && (
@@ -462,18 +454,19 @@ function OutboxPanel() {
   if (outbox.length === 0) return null
   return (
     <Collapsible id="composer-outbox" defaultOpen
-      trigger={<span>排队 {outbox.length}</span>}
+      trigger={<span>待发送 {outbox.length}</span>}
       triggerClassName="outbox-trigger">
       <ul className="outbox-list">
         {outbox.map(item => (
           <li key={item.id} className="outbox-item">
+            {item.deliveryError && <span className="outbox-text" role="status">{item.deliveryError}</span>}
             {editing === item.id ? (
               <input className="search-input outbox-edit" value={draft} onChange={e => setDraft(e.target.value)}
                 onKeyDown={e => {
                   if (e.key === 'Enter') { store.updateOutbox(item.id, draft); setEditing(null) }
                 }} />
             ) : (
-              <span className="outbox-text" title={item.text}>{item.text.trim() || '（仅附件）'}{item.attachmentNames.length > 0 ? ` · ${item.attachmentNames.join('、')}` : ''}</span>
+              <span className="outbox-text" title={item.text}>{item.text.trim() || '（仅附件）'}{item.attachmentNames.length > 0 ? ` · ${item.attachmentNames.join('、')}` : ''}{item.taskRef ? ` · 基于「${item.taskRef.title}」` : ''}</span>
             )}
             {editing === item.id ? (
               <button className="btn ghost" onClick={() => { store.updateOutbox(item.id, draft); setEditing(null) }}>保存</button>
@@ -481,6 +474,7 @@ function OutboxPanel() {
               <button className="btn ghost" onClick={() => { setEditing(item.id); setDraft(item.text) }}>修改</button>
             )}
             <button className="btn ghost" onClick={() => store.sendOutboxNow(item.id)}>发送</button>
+            {item.taskRef && <button className="btn ghost" onClick={() => store.clearOutboxReference(item.id)}>移除引用</button>}
             <button className="icon-btn" title="移出队列" onClick={() => store.removeOutbox(item.id)}><Icon name="x" size={12} /></button>
           </li>
         ))}
@@ -495,7 +489,7 @@ export function NoticeMessage({ msg }: { msg: Message }) {
   return (
     <div className="msg notice" data-msg-id={msg.id}>
       <Collapsible id={`notice:${msg.id}`} triggerClassName="notice-summary"
-        trigger={<span className="notice-label">通知 · {preview}</span>}>
+        trigger={<><span className="notice-label">通知 · {preview}</span><MessageTimestamp value={msg.createdAt} /></>}>
         <div className="notice-body">{text}</div>
       </Collapsible>
     </div>
@@ -524,6 +518,7 @@ function ConversationSession() {
   const cards = useStore(s => s.cards)
   const currentProjectId = useStore(s => s.currentProjectId)
   const cardActionStates = useStore(s => s.cardActionStates)
+  const workReference = useStore(s => s.workReference)
   const workPaneOwnsCards = useStore(s => !s.ui.rightCollapsed && s.ui.rightTab === 'work')
   const [text, setText] = useState('')
   const [attachmentIds, setAttachmentIds] = useState<string[]>([])
@@ -553,8 +548,9 @@ function ConversationSession() {
   })
   const busy = isShellBusy(phase)
   const showStop = phase === 'running'
-  // 慢通道在跑的后台子代理：前台回合结束后仍在执行，完成后经通知回到对话汇报。
+  // Background work stays in its own card and does not insert another chat turn.
   const bgRunning = runs.filter(r => r.kind === 'subagent' && !isTerminal(r.status)).length
+  const unreadResults = cards.filter(card => card.work?.result && card.work.resultVersion > card.work.readVersion)
 
   useEffect(() => {
     if (!stickRef.current) return
@@ -588,12 +584,18 @@ function ConversationSession() {
     const t = text
     const ids = attachmentIds
     const names = attachmentNames
-    setText(''); setAttachmentIds([]); setAttachmentNames([])
-    if (busy) {
-      store.enqueueOutbox(t, ids, names)
+    const reference = workReference ?? undefined
+    if (reference && ids.length > 0) {
+      store.toast('这条消息已引用工作结果，请先移除引用或附件再发送')
       return
     }
-    await store.sendMessage(t, ids)
+    setText(''); setAttachmentIds([]); setAttachmentNames([])
+    store.clearWorkReference()
+    if (busy) {
+      store.enqueueOutbox(t, ids, names, reference)
+      return
+    }
+    await store.sendMessage(t, ids, undefined, reference)
   }
 
   if (!currentConvId) {
@@ -656,13 +658,6 @@ function ConversationSession() {
           const stick = dist < 80
           stickRef.current = stick
           setShowJump(prev => (prev === !stick ? prev : !stick))
-          const ratio = scrollRatio(src)
-          if (ratio === null) return
-          const dst = document.querySelector('[data-scroll-sync="inbox"]')
-          if (!dst) return
-          const top = scrollTopForRatio(dst, ratio)
-          if (top === null) return
-          dst.scrollTop = top
         }}>
         {foldRunErrors(messages.filter(m => m.role !== 'assistant' || !m.runId || runs.find(r => r.id === m.runId)?.kind !== 'subagent')).map(m => {
           if (m.role === 'user') {
@@ -672,6 +667,7 @@ function ConversationSession() {
               <div className={`msg user${m.excluded ? ' is-excluded' : ''}`} key={m.id} data-msg-id={m.id}>
                 <div className="msg-role">
                   <span className="role-mark"><Avatar name={myName} size="sm" /></span>你
+                  <MessageTimestamp value={m.createdAt} />
                 </div>
                 <div className="bubble">{m.parts.filter(p => p.type === 'text').map(p => p.text).join('\n')}</div>
                 {currentConvId && <MessageTools msg={m} convId={currentConvId} />}
@@ -716,16 +712,23 @@ function ConversationSession() {
 
       <div className="input-bar">
         <OutboxPanel />
+        {unreadResults.length > 0 && <button type="button" className="work-result-notice" onClick={() => store.openInbox(unreadResults[0].id)}>
+          <Icon name="check" size={14} /><span>{unreadResults.length} 项工作有新结果</span><span>查看工作 ↗</span>
+        </button>}
+        {workReference && <div className="composer-work-reference" role="group" aria-label="本条消息引用的工作结果">
+          <span>基于「{workReference.title}」的第 {workReference.resultVersion} 版结果</span>
+          <button type="button" className="icon-btn" aria-label="移除工作结果引用" onClick={() => store.clearWorkReference()}><Icon name="x" size={12} /></button>
+        </div>}
         {!connected && <div className="companion-reconnect" role="status">正在重新连接，最新进展待确认</div>}
         {/* 轻量状态提示（方案：快慢通道连续体验）：忙碌时可继续输入排队；
-            后台任务在回合结束后仍在执行，完成后回到对话汇报。 */}
+            后台工作完成后更新原卡，用户按需打开。 */}
         {(busy || bgRunning > 0) && (
           <div className="input-status" data-testid="input-status">
             <span className="live-dot" />
             {busy
               ? <span className="mk-sweep">助手正在处理{bgRunning > 0 ? ` · ${bgRunning} 项后台工作` : ''}</span>
               : <span>{bgRunning} 项后台工作</span>}
-            <span className="input-status-note">{busy ? '新消息会排队，当前回合结束后发送' : '你可以继续对话，完成后会在这里汇报'}</span>
+            <span className="input-status-note">{busy ? '新消息会排队，当前回合结束后发送' : '你可以继续对话，结果会更新到工作卡'}</span>
           </div>
         )}
         {attachmentNames.length > 0 && (

src/components/ConversationWork.tsx

@@ -1,7 +1,9 @@
 import { useEffect, useMemo, useState } from 'react'
-import { ActivityCardView, Collapsible, activitySummary, pendingCount, type ActivityCard } from '@ui'
+import { ActivityCardView, Collapsible, activitySummary, groupActivityCards, pendingCount, type ActivityCard } from '@ui'
 import { store, useStore } from '../store'
 import { docBridge } from './Workbench'
+import type { WorkCardAction } from '../contracts'
+import { WorkExecutionRecord } from './WorkExecutionRecord'
 
 /** 对话与辅助工作栏共享对象、动作和唯一文件预览，不另持有异步状态。 */
 export function ConversationWork() {
@@ -12,6 +14,7 @@ export function ConversationWork() {
   const actionStates = useStore(s => s.cardActionStates)
   const rightCollapsed = useStore(s => s.ui.rightCollapsed)
   const rightTab = useStore(s => s.ui.rightTab)
+  const record = useStore(s => s.workRecord)
   const detailHere = rightCollapsed || rightTab !== 'work'
   const [summaryOpen, setSummaryOpen] = useState(detailHere)
   useEffect(() => setSummaryOpen(detailHere), [detailHere])
@@ -26,22 +29,27 @@ export function ConversationWork() {
       if (card.kind === 'confirm' && card.anchorMessageId
         && messages.some(message => message.role === 'user' && message.id === card.anchorMessageId)) continue
       const summary = activitySummary(card)
-      if (card.status === 'action_required' || summary.failed || (card.status === 'done' && summary.remaining)) required.push(card)
+      if (card.status === 'action_required' || card.work?.decision?.state === 'open' || summary.failed || (card.status === 'done' && summary.remaining)) required.push(card)
       else remaining.push(card)
     }
     // Preserve the host's newest-first order for completed results and history.
+    const results = groupActivityCards(remaining).find(group => group.key === 'results')?.cards ?? []
     const focused = remaining.find(card => card.pinned && card.status === 'active')
       ?? remaining.find(card => card.status === 'active')
-      ?? remaining.find(card => card.status === 'done') ?? remaining[0]
-    return { current, required, focused, history: remaining.filter(card => card !== focused) }
+      ?? results[0]
+    return { current, required, focused, history: remaining.filter(card => card !== focused).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt)) }
   }, [cards, messages, conversationId, projectId])
-  if (current.length === 0 || !detailHere) return null
+  if (!detailHere) return null
+  if (record) return <div className="conversation-work" data-conversation-work><WorkExecutionRecord /></div>
+  if (current.length === 0) return null
   const pending = pendingCount(current)
   const active = current.filter(card => card.status === 'active').length
   const results = current.filter(card => card.status === 'done' || card.status === 'failed').length
   const summary = [pending ? `${pending} 项待处理` : '', active ? `${active} 项工作` : '', results ? `${results} 项结果` : ''].filter(Boolean).join(' · ')
   const callbacks = {
-    onAction: (card: ActivityCard, actionId: string) => { void store.cardAction(card, actionId) },
+    onAction: (card: ActivityCard, actionId: string, payload?: WorkCardAction) => { void store.cardAction(card, actionId, payload) },
+    onOpenRecord: (card: ActivityCard) => store.openWorkRecord(card),
+    onReference: (card: ActivityCard) => store.referenceWork(card),
     actionState: (card: ActivityCard) => actionStates?.[card.id],
     onPin: (card: ActivityCard, pinned: boolean) => { void store.cardPin(card, pinned) },
     onDismiss: (card: ActivityCard) => { void store.cardDismiss(card) },

src/components/ExecEnvPanel.tsx

@@ -0,0 +1,98 @@
+import { useEffect, useState } from 'react'
+import { api, type ExecEnvView } from '../api'
+import { Btn, EmptyState, Icon, SettingRow, SettingsGroup } from '@ui'
+
+export function ExecEnvPanel() {
+  const [view, setView] = useState<ExecEnvView | null>(null)
+  const [err, setErr] = useState('')
+  const [notice, setNotice] = useState('')
+  const [busy, setBusy] = useState(false)
+  const [conv, setConv] = useState('')
+  const [reason, setReason] = useState('')
+  const [wheel, setWheel] = useState<File | null>(null)
+
+  const refresh = async () => {
+    try { setView(await api.adminExecEnv()) } catch (e) { setErr(String(e)) }
+  }
+  useEffect(() => { refresh() }, [])
+
+  const run = async (work: () => Promise<string>) => {
+    setErr(''); setNotice(''); setBusy(true)
+    try { setNotice(await work()); await refresh() } catch (e) { setErr(String(e)) } finally { setBusy(false) }
+  }
+
+  if (!view) return <EmptyState icon="package">加载 Python 环境…</EmptyState>
+  if (!view.configured) return <EmptyState icon="package">这台服务没有配置分层 Python 环境根</EmptyState>
+
+  return (
+    <div>
+      <SettingsGroup title="当前环境">
+        <SettingRow label="环境根" desc={view.root || '未设置'}><span /></SettingRow>
+        <SettingRow label="解释器" desc={view.python || '尚未安装托管解释器'}><span /></SettingRow>
+        <SettingRow label="基础层" desc={view.base || '尚未建立'}><span /></SettingRow>
+        <SettingRow label="层目录" desc={(view.layers ?? []).join('、') || '无'}>
+          <Btn variant="ghost" icon="undo" disabled={busy} onClick={() => run(async () => {
+            const out = await api.adminExecEnvRebase()
+            return `基础层已切换到 ${out.base}。已有会话仍用原来的绑定。`
+          })}>重建基础层</Btn>
+        </SettingRow>
+      </SettingsGroup>
+      <SettingsGroup title="申请">
+        {(view.requests ?? []).length === 0 && <EmptyState icon="inbox">还没有扩展包申请</EmptyState>}
+        {(view.requests ?? []).map(req => (
+          <SettingRow key={req.id} label={req.spec || req.id} desc={`${req.status} · ${req.conversationId} · ${req.detail}`}>
+            {req.status === 'pending_approval' && (
+              <span className="ad-row">
+                <Btn variant="primary" icon="check" disabled={busy} onClick={() => run(async () => {
+                  const out = await api.adminExecEnvDecision(req.id, true, false)
+                  return out.detail || out.status
+                })}>批准</Btn>
+                <Btn variant="ghost" disabled={busy} onClick={() => run(async () => {
+                  const out = await api.adminExecEnvDecision(req.id, true, true)
+                  return out.detail || '已用隔离层'
+                })}>隔离层</Btn>
+                <Btn variant="ghost" icon="x" disabled={busy} onClick={() => run(async () => {
+                  const out = await api.adminExecEnvDecision(req.id, false, false)
+                  return out.detail || '已拒绝'
+                })}>拒绝</Btn>
+              </span>
+            )}
+          </SettingRow>
+        ))}
+      </SettingsGroup>
+      <SettingsGroup title="会话绑定">
+        {(view.bindings ?? []).map(b => (
+          <SettingRow key={b.conversationId} label={b.conversationId} desc={b.isolated ? `隔离 ${b.isolated}` : (b.extensions ?? []).join('、') || '只用基础层'}>
+            <span />
+          </SettingRow>
+        ))}
+        <SettingRow label="回收" desc="删掉 7 天内没有会话引用、也不是当前基础层的目录">
+          <Btn variant="ghost" icon="trash" disabled={busy} onClick={() => run(async () => {
+            const out = await api.adminExecEnvGC()
+            const n = out.removed?.length ?? 0
+            return n === 0 ? '没有可回收的层' : `已回收 ${n} 层`
+          })}>回收未引用层</Btn>
+        </SettingRow>
+      </SettingsGroup>
+      <SettingsGroup title="上传 wheel">
+        <SettingRow label="会话" desc="这个 wheel 只挂到指定会话，并进入审批">
+          <input className="lg-input" value={conv} onChange={e => setConv(e.target.value)} placeholder="会话 ID" />
+        </SettingRow>
+        <SettingRow label="理由" desc="写给审批记录">
+          <input className="lg-input" value={reason} onChange={e => setReason(e.target.value)} />
+        </SettingRow>
+        <SettingRow label="文件" desc="只接受预编译 wheel，不执行里面的脚本">
+          <input type="file" accept=".whl" onChange={e => setWheel(e.target.files?.[0] ?? null)} />
+        </SettingRow>
+        <div className="ad-row">
+          <Btn variant="primary" icon="download" disabled={busy || !wheel || !conv.trim()} onClick={() => run(async () => {
+            const out = await api.adminExecEnvWheel(wheel as File, conv.trim(), reason.trim())
+            return `${out.file}：${out.outcome.status}`
+          })}>提交审批</Btn>
+        </div>
+      </SettingsGroup>
+      {notice && <div className="ad-notice"><Icon name="check" size={14} />{notice}</div>}
+      {err && <div className="lg-err"><Icon name="alert" size={14} />{err}</div>}
+    </div>
+  )
+}

src/components/MessageTimestamp.tsx

@@ -0,0 +1,8 @@
+/** Stable server time, with the full local date available to keyboard and assistive readers. */
+export function MessageTimestamp({ value }: { value?: string }) {
+  const date = value ? new Date(value) : null
+  if (!date || !Number.isFinite(date.getTime())) return null
+  const full = date.toLocaleString('zh-CN', { year: 'numeric', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', second: '2-digit', hour12: false })
+  const label = date.toLocaleTimeString('zh-CN', { hour: '2-digit', minute: '2-digit', hour12: false })
+  return <time className="message-timestamp" dateTime={date.toISOString()} title={full} aria-label={full}>{label}</time>
+}

src/components/ProjectSettingsModal.tsx

@@ -19,6 +19,11 @@ export function ProjectSettingsModal() {
   const rdmDocReviewAvailable = useStore(s => s.rdmDocReviewAvailable)
   const rdmPermMatrixAvailable = useStore(s => s.rdmPermMatrixAvailable)
   const owner = useStore(s => s.me?.owner)
+  const isAdmin = useStore(s => s.me?.isAdmin ?? false)
+  // P1-B 裁定：宿主覆盖设置（含模型与密钥）仅项目负责人/系统管理员可查看与修改；
+  // RDM 页签（成员/文档职责/项目权限）不在此列——数据面由 RDM 权限自行收敛，
+  // 授权的职责管理者仍可进入。
+  const projectPrivileged = !!project && (project.owner === owner || isAdmin)
   const [tab, setTab] = useState('project')
   const [schema, setSchema] = useState<SettingDesc[]>([])
   const [draft, setDraft] = useState<Record<string, any>>({})
@@ -72,7 +77,7 @@ export function ProjectSettingsModal() {
         { key: 'project', label: '本项目', icon: 'folder' },
         // U6/KTD5：成员与文档职责页签按 RDM 命令面门控（普通基座不出现）。
         ...(rdmMembersAvailable ? [{ key: 'members', label: '成员', icon: 'users' as const }] : []),
-        ...(rdmDocReviewAvailable ? [{ key: 'duties', label: '文档职责 · 整文审签', icon: 'shield' as const }] : []),
+        ...(rdmDocReviewAvailable ? [{ key: 'duties', label: '文档职责', icon: 'shield' as const }] : []),
         ...(rdmPermMatrixAvailable ? [{ key: 'matrix', label: '项目权限', icon: 'key' as const }] : []),
       ]}
       footer={saved ? <span style={{ color: 'var(--ok-text)' }}>✓ 已保存</span> : '项目设置覆盖用户设置（new-run 类对新任务生效）'}
@@ -85,6 +90,8 @@ export function ProjectSettingsModal() {
         </>}
         {tab !== 'members' && tab !== 'duties' && tab !== 'matrix' && !loaded ? (
           <EmptyState icon="settings">{error || '加载中…'}</EmptyState>
+        ) : tab !== 'members' && tab !== 'duties' && tab !== 'matrix' && !projectPrivileged ? (
+          <EmptyState icon="settings">项目覆盖设置（含模型与密钥）仅项目负责人或系统管理员可查看与修改。</EmptyState>
         ) : tab !== 'members' && tab !== 'duties' && tab !== 'matrix' ? (
           <>
             <div className="empty-note" style={{ marginBottom: 10 }}>

src/components/WorkExecutionRecord.tsx

@@ -0,0 +1,50 @@
+import { useEffect, useMemo, useState } from 'react'
+import { SafeMarkdown } from '@ui'
+import type { StreamEvent } from '../contracts'
+import { loadRunEvents } from '../runEvents'
+import { store, useStore } from '../store'
+import { runEventsToTimeline } from '../live'
+import { mergeProcessTimeline } from '../messageparts'
+import { ProcessTimeline } from './ProcessTimeline'
+import { MessageTimestamp } from './MessageTimestamp'
+
+/** The work pane and inline fallback share one selection. Only this detail host
+ * reads that run's authorized durable events; opening a record never adds chat. */
+export function WorkExecutionRecord() {
+  const selected = useStore(s => s.workRecord)
+  const conversationId = useStore(s => s.currentConvId)
+  const messages = useStore(s => s.messages)
+  const run = useStore(s => s.runs.find(r => r.id === selected?.runId))
+  const [result, setResult] = useState<{ runId: string; events: StreamEvent[] } | null>(null)
+  const [failed, setFailed] = useState(false)
+  useEffect(() => {
+    if (!selected || selected.conversationId !== conversationId) return
+    const controller = new AbortController()
+    let active = true
+    setResult(null); setFailed(false)
+    void (async () => {
+      try {
+        const events = await loadRunEvents(selected.conversationId, selected.runId, controller.signal)
+        if (active) setResult({ runId: selected.runId, events })
+      } catch { if (active) setFailed(true) }
+    })()
+    return () => { active = false; controller.abort() }
+  }, [selected?.runId, selected?.conversationId, conversationId, run?.status, run?.endedAt])
+  const parts = useMemo(() => {
+    if (!selected || result?.runId !== selected.runId) return []
+    const saved = messages.filter(message => message.runId === selected.runId && message.role === 'assistant')
+      .flatMap(message => message.parts).map(part => ({ ...part, process: true }))
+    return mergeProcessTimeline(saved, runEventsToTimeline(result.events, selected.runId, true), [])
+  }, [messages, result, selected?.runId])
+  if (!selected || selected.conversationId !== conversationId) return null
+  return <section className="work-execution-record" aria-label={`${selected.title}的执行记录`}>
+    <div className="work-record-heading"><strong>{selected.title} · 执行记录</strong>
+      <button type="button" className="btn ghost" onClick={() => store.closeWorkRecord()}>返回工作</button></div>
+    <MessageTimestamp value={run?.createdAt} />
+    {failed ? <p role="status">完整记录暂不可用，请稍后重新打开</p>
+      : !result ? <p role="status">正在读取已保存的记录…</p>
+        : parts.length === 0 ? <p>这项工作没有已保存的过程输出</p>
+          : <ProcessTimeline parts={parts} live={false} idKey={`work-record:${selected.runId}`}
+            renderPart={part => <SafeMarkdown className="part-text" markdown={part.text ?? ''} breaks />} />}
+  </section>
+}

src/components/Workbench.tsx

@@ -2,13 +2,14 @@
 // 工作 = 当前任务卡 + 收件箱（待处理事项、后台任务卡、执行记录）；
 // 文件 = 文件列表（搜索/上传）与多标签预览（预览、编辑、下载）——预览不再是独立第四栏。
 import { store, useStore } from '../store'
-import type { Run } from '../contracts'
+import type { Run, WorkCardAction } from '../contracts'
 import { InboxList, pendingCount, type ActivityCard, type DocBridge, type InboxFilter } from '@ui'
 import { Icon, SurfaceView } from '@ui'
 import { previewTabsKey } from '../previewtabs'
 import { surfaceKey } from '../surfaceKey'
 import { ArtifactsPanel } from './ArtifactsPanel'
 import { PreviewPane } from './PreviewPane'
+import { WorkExecutionRecord } from './WorkExecutionRecord'
 
 // 工件解析/打开注入：渲染器纯展示，doc-ref 词汇经此桥接本仓状态（D29）。
 // 打开语义走 requestPreview 唯一入口（第三栏「文件」入口）。
@@ -21,7 +22,9 @@ export const docBridge: DocBridge = {
 }
 
 const inboxCallbacks = {
-  onAction: (c: ActivityCard, id: string) => store.cardAction(c, id),
+  onAction: (c: ActivityCard, id: string, payload?: WorkCardAction) => store.cardAction(c, id, payload),
+  onOpenRecord: (c: ActivityCard) => store.openWorkRecord(c),
+  onReference: (c: ActivityCard) => store.referenceWork(c),
   actionState: (c: ActivityCard) => store.getState().cardActionStates[c.id],
   onPin: (c: ActivityCard, p: boolean) => store.cardPin(c, p),
   onDismiss: (c: ActivityCard) => store.cardDismiss(c),
@@ -64,6 +67,7 @@ export function Workbench() {
   const filter = useStore(s => s.ui.inboxFilter)
   const visible = inboxScope === 'project' ? projectCards : cards
   const pending = pendingCount(visible)
+  const unread = visible.filter(card => card.work && card.work.resultVersion > card.work.readVersion).length
   // 离开文件入口时收回全屏展开，避免出现「工作」铺满主区的怪态。
   const switchTab = (tab: 'work' | 'files') =>
     store.setUI({ rightTab: tab, previewExpanded: tab === 'files' ? store.getState().ui.previewExpanded : false })
@@ -71,7 +75,7 @@ export function Workbench() {
     <>
       <div className="tabs">
         <button className={`tab ${rightTab === 'work' ? 'active' : ''}`} onClick={() => switchTab('work')}
-          title="待处理事项、后台任务与执行记录">工作{pending > 0 ? ` ${pending}` : ''}</button>
+          title="待处理事项、后台任务与执行记录">工作{pending > 0 ? ` ${pending}` : ''}{unread > 0 ? ` · ${unread} 项新结果` : ''}</button>
         <button className={`tab ${rightTab === 'files' ? 'active' : ''}`} onClick={() => switchTab('files')}
           title="文件搜索、预览、编辑与下载">文件</button>
         <span className="spacer" style={{ flex: 1 }} />
@@ -108,10 +112,12 @@ function WorkTab({ plan, todos, filter, inboxScope, projectCards, cards }: {
   projectCards: ActivityCard[]
   cards: ActivityCard[]
 }) {
+  const record = useStore(s => s.workRecord)
   const showCurrentTask = !hasActiveProgressCard(cards)
   return (
     <>
-      <div className="tab-body" data-scroll-sync="inbox">
+      <div className="tab-body" data-work-scroll>
+        {record ? <WorkExecutionRecord /> : <>
         {showCurrentTask ? <CurrentTaskCard plan={plan} todos={todos} /> : null}
         <div className="inbox-scope" role="tablist" aria-label="收件箱范围与筛选">
           <button className={inboxScope === 'conv' ? 'active' : ''} onClick={() => store.setInboxScope('conv')}>本会话</button>
@@ -126,6 +132,7 @@ function WorkTab({ plan, todos, filter, inboxScope, projectCards, cards }: {
           ? <ProjectInbox cards={projectCards} filter={filter} />
           : <InboxList cards={cards} docBridge={docBridge} callbacks={inboxCallbacks} filter={filter} />}
         <WorkspaceSurfaces />
+        </>}
       </div>
     </>
   )

src/components/adminRdmSections.tsx

@@ -1,5 +1,5 @@
 // U6/KTD5：RDM 管理与项目页面组件。系统管理「RDM 角色权限」+ 项目设置「成员 /
-// 文档职责 · 整文审签」。全部数据经 api.rdmCommand（命令总线），载荷构造与能力
+// 文档职责」。全部数据经 api.rdmCommand（命令总线），载荷构造与能力
 // 门控集中在 src/rdmManagement.ts；分区可见性由 AdminZone/ProjectSettingsModal
 // 按 store 的 rdm*Available 门控（命令面不齐不渲染，普通基座零暴露）。样式只复用
 // 既有 ad-*/lg-*/settings-* 类（design-guard 棘轮：不新增裸色值/字号）。
@@ -13,8 +13,7 @@ import {
   ROLE_ACTIONS,
   roleCreatePayload, roleActionPayload, roleAssignPayload, roleDisablePayload,
   memberAddPayload, memberRemovePayload, memberSetRolePayload,
-  assignDocDutiesPayload, docSubmitPayload, docApprovePayload, docRejectPayload,
-  docFinalPayload, docStatusPayload, permCheckPayload, describeSource,
+  permCheckPayload, describeSource,
   rolesListPlaceholder, describeRoleListError,
 } from '../rdmManagement'
 
@@ -260,271 +259,7 @@ export function RdmMembersSection({ project }: { project: Project }) {
   )
 }
 
-// ---- 项目设置：文档职责（P7-B：文档清单＋选中职责详情；方案 §4）----
-
-interface DocSubmissionView {
-  round: number
-  state: string
-  digest: string
-  createdBy: string
-  createdAt: string
-  duties: { author: string; reviewers: string[]; approver: string }
-  reviews: Record<string, boolean>
-  sections: Record<string, number>
-}
-
-interface DutyCatalogDoc {
-  docId: string; typeKey: string; title: string; stage?: string; sections: number
-  assigned: boolean; author?: string; reviewers?: string[]; approver?: string; activeRound?: number
-}
-
-interface DutyGetOut {
-  docId: string; title: string; assigned: boolean
-  roles: { author: string; reviewers: string[]; approver: string }
-  active?: { round: number; state: string; createdBy: string } | null
-  sections: { sectionId: string; title: string; overridden: boolean }[]
-}
-
-/** 职责候选 = 当前项目成员（方案 §4：候选只能来自项目成员）。
- * member.list 为小全量列表：本地 query 过滤 + 游标分页。 */
-function useMemberPickerPage(members: { owner: string; role: string }[] | null) {
-  return useCallback(async (query: string, cursor: string, limit: number) => {
-    const q = query.trim().toLowerCase()
-    const all = (members ?? [])
-      .filter(m => q === '' || m.owner.toLowerCase().includes(q))
-      .map(m => ({ id: m.owner, title: m.owner, subtitle: m.role === 'owner' ? '项目负责人' : '项目成员' }))
-    const start = cursor === '' ? 0 : all.findIndex(x => x.id === cursor) + 1
-    const page = all.slice(start, start + limit)
-    return {
-      items: page,
-      nextCursor: start + limit < all.length ? page[page.length - 1]?.id : undefined,
-    }
-  }, [members])
-}
-
-export function RdmDutiesSection({ project }: { project: Project }) {
-  const projectId = project.id
-  const writeError = projectWorkError(project)
-  const [docs, setDocs] = useState<DutyCatalogDoc[] | null>(null)
-  const [members, setMembers] = useState<{ owner: string; role: string }[] | null>(null)
-  const [docId, setDocId] = useState('')
-  const [detail, setDetail] = useState<DutyGetOut | null | undefined>(undefined)
-  const [author, setAuthor] = useState<string[]>([])
-  const [reviewers, setReviewers] = useState<string[]>([])
-  const [approver, setApprover] = useState<string[]>([])
-  const [sub, setSub] = useState<DocSubmissionView | null | undefined>(undefined)
-  const [batchSel, setBatchSel] = useState<Set<string>>(new Set())
-  const [batchAuthor, setBatchAuthor] = useState<string[]>([])
-  const [batchReviewers, setBatchReviewers] = useState<string[]>([])
-  const [batchApprover, setBatchApprover] = useState<string[]>([])
-  const [err, setErr] = useState('')
-  const [notice, setNotice] = useState('')
-  const [busy, setBusy] = useState(false)
-
-  const cmd = <T,>(id: string, params: Record<string, unknown>) => api.rdmProjectCommand<T>(project, id, params)
-  const memberPage = useMemberPickerPage(members)
-  const requests = useRef({ project, epoch: 0, selected: '', selection: 0, catalog: 0, status: 0, action: 0 })
-  requests.current.project = project
-  const currentProject = (epoch: number) => requests.current.project === project && requests.current.epoch === epoch
-  const currentDocument = (epoch: number, selection: number, id: string) =>
-    currentProject(epoch) && requests.current.selection === selection && requests.current.selected === id
-
-  const refreshCatalog = async (epoch = requests.current.epoch) => {
-    const request = ++requests.current.catalog
-    try {
-      const out = await cmd<{ docs: DutyCatalogDoc[] }>('rdm.duty.catalog', { projectId })
-      if (!currentProject(epoch) || request !== requests.current.catalog) return
-      setDocs(out.docs ?? [])
-    } catch (e) {
-      if (!currentProject(epoch) || request !== requests.current.catalog) return
-      setErr(String(e)); setDocs([])
-    }
-  }
-  const refreshStatus = async (id: string, epoch: number, selection: number) => {
-    if (!id || !currentDocument(epoch, selection, id)) return
-    const request = ++requests.current.status
-    try {
-      const out = await cmd<{ submission: DocSubmissionView | null }>('rdm.review.doc.status', docStatusPayload(projectId, id))
-      if (!currentDocument(epoch, selection, id) || request !== requests.current.status) return
-      setSub(out.submission)
-    } catch (e) {
-      if (!currentDocument(epoch, selection, id) || request !== requests.current.status) return
-      setSub(undefined); setErr(`整文状态读取失败：${e}`)
-    }
-  }
-  /** 选中文档：读当前职责（duty.get）并回填选择器（方案：当前职责与冻结名单分列）。 */
-  const selectDoc = async (id: string, keepNotice = false) => {
-    const epoch = requests.current.epoch
-    const selection = ++requests.current.selection
-    requests.current.selected = id
-    requests.current.status++
-    setErr(''); if (!keepNotice) setNotice('')
-    setDocId(id); setDetail(undefined); setSub(undefined); setBatchSel(new Set())
-    setAuthor([]); setReviewers([]); setApprover([])
-    if (!id) return
-    try {
-      const out = await cmd<DutyGetOut>('rdm.duty.get', { projectId, docId: id })
-      if (!currentDocument(epoch, selection, id)) return
-      if (out.docId !== id) throw new Error('文档职责与当前选择不一致，请重新选择文档')
-      setDetail(out)
-      setAuthor(out.assigned && out.roles.author ? [out.roles.author] : [])
-      setReviewers(out.assigned ? out.roles.reviewers ?? [] : [])
-      setApprover(out.assigned && out.roles.approver ? [out.roles.approver] : [])
-    } catch (e) {
-      if (!currentDocument(epoch, selection, id)) return
-      setDetail(null); setErr(String(e))
-    }
-    await refreshStatus(id, epoch, selection)
-  }
-  useEffect(() => {
-    const epoch = ++requests.current.epoch
-    requests.current.selected = ''; requests.current.selection++; requests.current.status++
-    requests.current.action++
-    setDocId(''); setDetail(undefined); setSub(undefined); setBatchSel(new Set())
-    setDocs(null); setMembers(null); setAuthor([]); setReviewers([]); setApprover([])
-    setBatchAuthor([]); setBatchReviewers([]); setBatchApprover([])
-    setErr(''); setNotice(''); setBusy(false)
-    void refreshCatalog(epoch)
-    cmd<{ members: { owner: string; role: string }[] }>('rdm.project.member.list', { projectId })
-      .then(out => { if (currentProject(epoch)) setMembers(out.members ?? []) })
-      .catch(() => { if (currentProject(epoch)) setMembers([]) })
-    return () => {
-      requests.current.epoch++; requests.current.selection++; requests.current.status++
-      requests.current.catalog++; requests.current.action++; requests.current.selected = ''
-    }
-  }, [project])
-
-  const run = async (label: string, fn: () => Promise<unknown>) => {
-    const epoch = requests.current.epoch
-    const selection = requests.current.selection
-    const selected = requests.current.selected
-    const action = ++requests.current.action
-    const currentAction = () => currentProject(epoch) && action === requests.current.action
-    setErr(''); setNotice(''); setBusy(true)
-    try {
-      await fn()
-      if (!currentAction() || !currentDocument(epoch, selection, selected)) return
-      setNotice(label)
-      await refreshCatalog(epoch)
-      if (currentAction() && currentDocument(epoch, selection, selected) && selected) await selectDoc(selected, true)
-    } catch (e) {
-      if (currentAction() && currentDocument(epoch, selection, selected)) setErr(String(e))
-    } finally { if (currentAction()) setBusy(false) }
-  }
-
-  const dirty = detail != null && (
-    (author[0] ?? '') !== (detail.assigned ? detail.roles.author : '')
-    || JSON.stringify(reviewers) !== JSON.stringify(detail.assigned ? detail.roles.reviewers ?? [] : [])
-    || (approver[0] ?? '') !== (detail.assigned ? detail.roles.approver : ''))
-
-  const saveDisabled = busy || !!writeError || !docId || detail == null || !author[0] || !approver[0] || reviewers.length === 0
-
-  const save = () => {
-    if (saveDisabled || !dirty || requests.current.selected !== docId || detail?.docId !== docId) return
-    if (detail.active && !window.confirm(
-      `文档「${detail.title}」在途第 ${detail.active.round} 轮审签将因职责变更失效，需重新提交。确认变更？`)) return
-    return run('已保存当前职责', () =>
-      cmd('rdm.review.assign.doc', assignDocDutiesPayload(projectId, docId, author[0], reviewers, approver[0])))
-  }
-
-  const batchApply = () => run(`已批量分配 ${batchSel.size} 份文档`, () =>
-    cmd('rdm.review.assign.doc.batch', { projectId, docs: [...batchSel].map(d => ({
-      docId: d, author: batchAuthor[0], reviewers: batchReviewers, approver: batchApprover[0] })) }))
-
-  return (
-    <div>
-      <h4 className="settings-group-title">文档清单（职责分配对象为整份文档；搜索/浏览同一目录）</h4>
-      <table className="ad-table">
-        <thead><tr><th></th><th>文档</th><th>类型 / 阶段</th><th>当前职责</th><th>状态</th><th></th></tr></thead>
-        <tbody>
-          {(docs ?? []).map(d => (
-            <tr key={d.docId} className={d.docId === docId ? 'ad-row-on' : ''}>
-              <td><input type="checkbox" checked={batchSel.has(d.docId)}
-                onChange={e => { const n = new Set(batchSel); e.target.checked ? n.add(d.docId) : n.delete(d.docId); setBatchSel(n) }} /></td>
-              <td><button className="ad-mini" onClick={() => selectDoc(d.docId)}>{d.title}</button>
-                <span className="ad-dim ad-mono"> · {d.docId}</span></td>
-              <td className="ad-dim">{d.typeKey}{d.stage ? ` / ${d.stage}` : ''}</td>
-              <td className="ad-dim">{d.assigned
-                ? `编 ${d.author} · 审 ${(d.reviewers ?? []).join('、')} · 批 ${d.approver}` : '未分配'}</td>
-              <td>{d.activeRound ? <span className="ad-chip ad-chip-warn">第 {d.activeRound} 轮在途</span> : d.assigned ? <span className="ad-chip">—</span> : <span className="ad-chip">未分配</span>}</td>
-              <td className="ad-dim">{d.sections} 章节</td>
-            </tr>
-          ))}
-          {docs === null && <tr><td colSpan={6} className="ad-dim">加载中…</td></tr>}
-          {docs !== null && docs.length === 0 && <tr><td colSpan={6} className="ad-dim">暂无文档</td></tr>}
-        </tbody>
-      </table>
-
-      {detail === null && docId && <EmptyState icon="inbox">读取职责失败</EmptyState>}
-      {detail && (
-        <div className="settings-group" style={{ marginTop: 14 }}>
-          <h4>{detail.title} · 当前职责{detail.active ? <span className="ad-chip ad-chip-warn">在途第 {detail.active.round} 轮（变更将失效需重提交）</span> : null}</h4>
-          <div className="setting-row"><label>编制人（单选）</label>
-            <div style={{ maxWidth: 320 }}><Picker aria-label="编制人" selected={author} onSelect={setAuthor} fetchPage={memberPage} /></div></div>
-          <div className="setting-row"><label>审核人（多选 ≥1）</label>
-            <div style={{ maxWidth: 320 }}><Picker aria-label="审核人" multiple selected={reviewers} onSelect={setReviewers} fetchPage={memberPage} /></div>
-            {reviewers.length > 0 && <span className="ad-dim">已选：{reviewers.join('、')}</span>}</div>
-          <div className="setting-row"><label>批准人（单选）</label>
-            <div style={{ maxWidth: 320 }}><Picker aria-label="批准人" selected={approver} onSelect={setApprover} fetchPage={memberPage} /></div></div>
-          <div className="ad-row">
-            <Btn variant="primary" icon="check" disabled={saveDisabled || !dirty} onClick={save}>保存当前职责</Btn>
-            {detail.active && <span className="ad-hint">保存将使在途第 {detail.active.round} 轮失效（提交人 {detail.active.createdBy}）</span>}
-          </div>
-          {detail.sections.length > 0 && (
-            <p className="ad-hint">章节覆盖：{detail.sections.filter(x => x.overridden).length}/{detail.sections.length} 章节单独指派（覆盖文档默认）。</p>
-          )}
-        </div>
-      )}
-
-      {detail && docId && (
-        <div className="ad-row" style={{ marginTop: 8 }}>
-          <button className="lg-submit ad-create-btn" disabled={busy || !!writeError || !detail.assigned || sub === undefined}
-            onClick={() => run('整文已提交审核（全文锁定）',
-              () => cmd('rdm.review.doc.submit', docSubmitPayload(projectId, docId)))}>整文提交（编制人）</button>
-        </div>
-      )}
-      {sub && (
-        <div className="settings-group" style={{ marginTop: 14 }}>
-          <h4>整文审签 · 第 {sub.round} 轮 · {sub.state === 'submitted' ? <span className="ad-chip ad-chip-warn">在途（全文锁定）</span> : sub.state === 'final' ? <span className="ad-chip ad-chip-admin">已终批</span> : <span className="ad-chip">已驳回</span>}</h4>
-          <div className="setting-row"><label>冻结名单</label><span>编 <b className="ad-mono">{sub.duties.author}</b> · 审 <b className="ad-mono">{(sub.duties.reviewers ?? []).join('、')}</b> · 批 <b className="ad-mono">{sub.duties.approver}</b></span></div>
-          <div className="setting-row"><label>审核进度</label><span>{Object.entries(sub.reviews ?? {}).map(([r, ok]) => `${r}:${ok ? '✓' : '…'}`).join('  ') || '—'}</span></div>
-          <div className="ad-row" style={{ marginTop: 8 }}>
-            <button className="ad-mini" disabled={busy || !!writeError || sub.state !== 'submitted'}
-              onClick={() => run('已通过整文审核',
-                () => cmd('rdm.review.doc.approve', docApprovePayload(projectId, docId, '通过')))}>审核通过</button>
-            <button className="ad-mini" disabled={busy || !!writeError || sub.state !== 'submitted'}
-              onClick={() => run('已驳回整文（解锁回编写态）',
-                () => cmd('rdm.review.doc.reject', docRejectPayload(projectId, docId, '退回修改')))}>驳回</button>
-            <button className="lg-submit ad-create-btn" disabled={busy || !!writeError || sub.state !== 'submitted'}
-              onClick={() => run('整文终批完成（各章节已基线）',
-                () => cmd('rdm.review.doc.final', docFinalPayload(projectId, docId)))}>终批（批准人）</button>
-          </div>
-        </div>
-      )}
-      {sub === null && docId && <p className="ad-hint">该文档尚无整文提交记录（当前职责仍可分配）。</p>}
-
-      {batchSel.size > 0 && (
-        <div className="settings-group" style={{ marginTop: 14 }}>
-          <h4>批量分配（已选 {batchSel.size} 份；任一校验失败整批拒绝并列原因）</h4>
-          <div className="setting-row"><label>统一编制人</label>
-            <div style={{ maxWidth: 320 }}><Picker aria-label="批量编制人" selected={batchAuthor} onSelect={setBatchAuthor} fetchPage={memberPage} /></div></div>
-          <div className="setting-row"><label>统一审核人</label>
-            <div style={{ maxWidth: 320 }}><Picker aria-label="批量审核人" multiple selected={batchReviewers} onSelect={setBatchReviewers} fetchPage={memberPage} /></div></div>
-          <div className="setting-row"><label>统一批准人</label>
-            <div style={{ maxWidth: 320 }}><Picker aria-label="批量批准人" selected={batchApprover} onSelect={setBatchApprover} fetchPage={memberPage} /></div></div>
-          <div className="ad-row">
-            <Btn variant="primary" icon="check" disabled={busy || !!writeError || !batchAuthor[0] || !batchApprover[0] || batchReviewers.length === 0}
-              onClick={batchApply}>批量分配 {batchSel.size} 份文档</Btn>
-            <button className="ad-mini" onClick={() => setBatchSel(new Set())}>清空选择</button>
-          </div>
-        </div>
-      )}
-
-      {notice && <div className="ad-notice"><Icon name="check" size={14} />{notice}</div>}
-      {err && <div className="lg-err"><Icon name="alert" size={14} />{err}</div>}
-    </div>
-  )
-}
+export { RdmDutiesSection } from './duties/RdmDutiesSection'
 
 // ---- 项目设置：项目权限（P7-C：单成员详情标签化 + 多人矩阵 + 三态覆盖；
 // 与实际判定同源——UI 不重算，全部读服务端解释） ----

src/components/adminSections.tsx

@@ -9,19 +9,11 @@ import { Btn, EmptyState, Icon, SettingRow, SettingsGroup, UIRenderer, type DocB
 import { SettingInput, flatten, unflatten } from './SettingsModal'
 import type { SettingDesc } from '../contracts'
 import { docBridge } from './Workbench'
-import { randomPassword } from '../passwords'
 
-// ---- 用户管理（原 AdminUsersModal 主体，R2 管理员发放制 + 2026-10-13 恢复 Key）----
+// ---- 用户管理（原 AdminUsersModal 主体，R2 管理员发放制）：建号仅创建待初始化
+// 账号（HTTP 契约不含密码与管理员位），初始凭证由服务器本地 CLI 发放激活 Key；
+// 登录 Key 签发已被恢复提案契约替换（HTTP 410），提案视图为后续增量。----
 interface AdminUserRow { owner: string; name: string; isAdmin: boolean; mustChangePassword: boolean; hasPassword: boolean; passwordSetAt?: string; createdAt: string }
-interface LoginKeyRow { id: string; owner: string; purpose: string; status: string; expiresAt: string; createdAt: string; createdBy?: string }
-
-/** Key 状态徽标：复用既有 chip 体系，不新增颜色。 */
-function keyStatusChip(status: string) {
-  if (status === 'unused') return <span className="ad-chip ad-chip-warn">待使用</span>
-  if (status === 'consumed') return <span className="ad-chip">已使用</span>
-  if (status === 'expired') return <span className="ad-chip">已过期</span>
-  return <span className="ad-chip">已撤销</span>
-}
 
 export function UsersPanel() {
   const me = useStore(s => s.me)
@@ -30,63 +22,24 @@ export function UsersPanel() {
   const [notice, setNotice] = useState('')
   const [owner, setOwner] = useState('')
   const [name, setName] = useState('')
-  const [pw, setPw] = useState('')
-  const [asAdmin, setAsAdmin] = useState(false)
   const [busy, setBusy] = useState(false)
-  // 登录 Key 面板：keyFor 打开指定用户的签发/状态视图；issued 明文仅签发响应持有一次。
-  const [keyFor, setKeyFor] = useState<string | null>(null)
-  const [issued, setIssued] = useState<{ key: string; expiresAt: string } | null>(null)
-  const [keys, setKeys] = useState<LoginKeyRow[] | null>(null)
 
   const refresh = async () => {
     try { setUsers(await api.listAdminUsers()) } catch (e) { setErr(String(e)) }
   }
-  const refreshKeys = async (owner: string) => {
-    try { setKeys(await api.adminListLoginKeys(owner)) } catch (e) { setErr(String(e)) }
-  }
   useEffect(() => { refresh() }, [])
 
-  const openKeyPanel = async (owner: string) => {
-    setErr(''); setNotice(''); setIssued(null); setKeyFor(owner); setKeys(null)
-    await refreshKeys(owner)
-  }
-
   const create = async () => {
     setErr(''); setNotice('')
-    if (pw.length < 8) { setErr('初始密码至少 8 位'); return }
     setBusy(true)
     try {
-      await api.createAdminUser(owner.trim(), name.trim(), pw, asAdmin)
-      setNotice(`已创建 ${owner.trim()}：首次登录须改密`)
-      setOwner(''); setName(''); setPw('')
+      const out = await api.createAdminUser(owner.trim(), name.trim())
+      setNotice(`已创建 ${out.owner}（待初始化）：请在服务器执行 user initialize-account 发放激活 Key`)
+      setOwner(''); setName('')
       await refresh()
     } catch (e) { setErr(String(e).includes('409') ? '用户名已存在' : String(e)) } finally { setBusy(false) }
   }
 
-  const issue = async () => {
-    if (!keyFor) return
-    setErr(''); setNotice(''); setBusy(true)
-    try {
-      const out = await api.adminIssueLoginKey(keyFor)
-      setIssued({ key: out.key, expiresAt: out.expiresAt })
-      await refreshKeys(keyFor)
-    } catch (e) { setErr(String(e)) } finally { setBusy(false) }
-  }
-
-  const copyKey = async () => {
-    if (!issued) return
-    try { await navigator.clipboard.writeText(issued.key); setNotice('已复制到剪贴板，请安全交付给该用户') } catch { setErr('复制失败，请手动选择复制') }
-  }
-
-  const revoke = async (id: string) => {
-    if (!keyFor) return
-    setErr(''); setBusy(true)
-    try {
-      await api.adminRevokeLoginKey(keyFor, id)
-      await refreshKeys(keyFor)
-    } catch (e) { setErr(String(e)) } finally { setBusy(false) }
-  }
-
   return (
     <div>
       {me?.isAdmin && (
@@ -94,69 +47,28 @@ export function UsersPanel() {
           <div className="ad-row">
             <input className="lg-input" placeholder="用户名（登录名）" value={owner} onChange={e => setOwner(e.target.value)} />
             <input className="lg-input" placeholder="显示名（可空）" value={name} onChange={e => setName(e.target.value)} />
+            <button className="lg-submit ad-create-btn" disabled={busy || !owner.trim()} onClick={create}>创建账号</button>
           </div>
-          <div className="ad-row">
-            <input className="lg-input lg-mono" placeholder="初始密码（≥8 位）" value={pw} onChange={e => setPw(e.target.value)} />
-            <button type="button" className="ad-mini" title="生成随机密码" onClick={() => setPw(randomPassword())}>随机</button>
-            <label className="ad-check"><input type="checkbox" checked={asAdmin} onChange={e => setAsAdmin(e.target.checked)} />管理员</label>
-            <button className="lg-submit ad-create-btn" disabled={busy || !owner.trim() || !pw} onClick={create}>创建账号</button>
-          </div>
-          <p className="ad-hint">创建后该用户首次登录必须修改此初始密码；忘记密码时为其生成一次性登录 Key。</p>
+          <p className="ad-hint">账号创建后处于待初始化状态：在服务器执行 user initialize-account 发放一次性激活 Key，用户经兑换入口设置密码后登录</p>
         </div>
       )}
       {notice && <div className="ad-notice"><Icon name="check" size={14} />{notice}</div>}
       {err && <div className="lg-err"><Icon name="alert" size={14} />{err}</div>}
-      {keyFor ? (
-        <div className="ad-reset">
-          <div className="ad-row">
-            <span><b>{keyFor}</b> 的一次性登录 Key（忘记密码恢复）</span>
-            <button className="lg-submit ad-create-btn" disabled={busy} onClick={issue}>{issued ? '重新签发（旧 Key 与受限会话立即失效）' : '生成 Key'}</button>
-            <button type="button" className="ad-mini" onClick={() => { setKeyFor(null); setIssued(null); setKeys(null) }}>关闭</button>
-          </div>
-          {issued && (
-            <div className="ad-row">
-              <input className="lg-input lg-mono" readOnly value={issued.key} aria-label="一次性登录 Key（仅显示一次）" onFocus={e => e.currentTarget.select()} />
-              <button type="button" className="ad-mini" onClick={copyKey}>复制</button>
-            </div>
-          )}
-          {issued && <p className="ad-hint">明文仅此一次显示，关闭后不可再取；单次有效，{new Date(issued.expiresAt).toLocaleString()} 过期。请经安全渠道交付本人。</p>}
-          {keys !== null && keys.length > 0 && (
-            <table className="ad-table">
-              <thead><tr><th>签发时间</th><th>用途</th><th>状态</th><th>过期时间</th><th></th></tr></thead>
-              <tbody>
-                {keys.map(k => (
-                  <tr key={k.id}>
-                    <td className="ad-dim">{new Date(k.createdAt).toLocaleString()}</td>
-                    <td>{k.purpose === 'recover' ? '恢复' : '激活'}</td>
-                    <td>{keyStatusChip(k.status)}</td>
-                    <td className="ad-dim">{new Date(k.expiresAt).toLocaleString()}</td>
-                    <td>{k.status === 'unused' && <button className="ad-mini" disabled={busy} onClick={() => revoke(k.id)}>撤销</button>}</td>
-                  </tr>
-                ))}
-              </tbody>
-            </table>
-          )}
-        </div>
-      ) : (
-        <table className="ad-table">
-          <thead><tr><th>用户名</th><th>显示名</th><th>角色</th><th>状态</th><th>密码设置于</th><th></th></tr></thead>
-          <tbody>
-            {(users ?? []).map(u => (
-              <tr key={u.owner}>
-                <td className="ad-user-cell"><span className="ad-mono">{u.owner}</span></td>
-                <td>{u.name || '—'}</td>
-                <td>{u.isAdmin ? <span className="ad-chip ad-chip-admin">ADMIN</span> : <span className="ad-chip">USER</span>}</td>
-                <td>{u.mustChangePassword ? <span className="ad-chip ad-chip-warn">待改密</span> : u.hasPassword ? '正常' : '未设密码'}</td>
-                <td className="ad-dim">{u.passwordSetAt ? new Date(u.passwordSetAt).toLocaleString() : '—'}</td>
-                <td>{me?.isAdmin && (
-                  <button className="ad-mini" onClick={() => openKeyPanel(u.owner)}>生成登录 Key</button>
-                )}</td>
-              </tr>
-            ))}
-            {users !== null && users.length === 0 && <tr><td colSpan={6} className="ad-dim">暂无账号</td></tr>}
-          </tbody>
-        </table>
-      )}
+      <table className="ad-table">
+        <thead><tr><th>用户名</th><th>显示名</th><th>角色</th><th>状态</th><th>密码设置于</th></tr></thead>
+        <tbody>
+          {(users ?? []).map(u => (
+            <tr key={u.owner}>
+              <td className="ad-user-cell"><span className="ad-mono">{u.owner}</span></td>
+              <td>{u.name || '—'}</td>
+              <td>{u.isAdmin ? <span className="ad-chip ad-chip-admin">ADMIN</span> : <span className="ad-chip">USER</span>}</td>
+              <td>{u.mustChangePassword ? <span className="ad-chip ad-chip-warn">待改密</span> : u.hasPassword ? '正常' : '未设密码'}</td>
+              <td className="ad-dim">{u.passwordSetAt ? new Date(u.passwordSetAt).toLocaleString() : '—'}</td>
+            </tr>
+          ))}
+          {users !== null && users.length === 0 && <tr><td colSpan={5} className="ad-dim">暂无账号</td></tr>}
+        </tbody>
+      </table>
     </div>
   )
 }

src/components/duties/RdmDutiesSection.tsx

@@ -0,0 +1,253 @@
+import { useEffect, useRef, useState } from 'react'
+import { api } from '../../api'
+import type { Project } from '../../contracts'
+import { projectWorkError } from '../../projectmeta'
+import { Btn, Collapsible, EmptyState, Icon } from '@ui'
+import { dutyMatrixPayload, dutyPreviewPayload, dutyLegacyPayload } from '../../rdmManagement'
+import {
+  absorbServerDocs, dirtyDocs, editCell, savePayload,
+  type CellDuty, type DutyDocDraft, type DutyMember,
+} from '../../duties/draft'
+import { DutyByDocumentView, DutyByMemberView, DutyChangePreview, DutyMatrixView } from '../../duties/views'
+
+type ViewName = 'member' | 'document' | 'matrix'
+
+interface MatrixDoc {
+  docId: string
+  title: string
+  code?: string
+  typeKey: string
+  stage?: string
+  dutyVersion: number
+  activeRound?: number
+  legacySectionOverrides?: number
+}
+interface MatrixOut {
+  canAssign: boolean
+  docs: MatrixDoc[]
+  members: DutyMember[]
+  cells: { docId: string; owner: string; duty: string }[]
+  nextDocCursor?: string
+  nextMemberCursor?: string
+}
+interface PreviewOut {
+  ok: boolean
+  docs: {
+    docId: string
+    title?: string
+    replacedAuthor?: string
+    replacedApprover?: string
+    needsConfirm?: boolean
+    reasons?: string[]
+  }[]
+}
+interface LegacyOut {
+  findings: { docId: string; title: string; sectionTitle: string; kind: string }[]
+}
+
+export function RdmDutiesSection({ project }: { project: Project }) {
+  const projectId = project.id
+  const writeError = projectWorkError(project)
+  const [view, setView] = useState<ViewName>('member')
+  const [docs, setDocs] = useState<DutyDocDraft[]>([])
+  const [members, setMembers] = useState<DutyMember[]>([])
+  const [member, setMember] = useState('')
+  const [docId, setDocId] = useState('')
+  const [query, setQuery] = useState('')
+  const [stage, setStage] = useState('')
+  const [typeKey, setTypeKey] = useState('')
+  const [assignment, setAssignment] = useState('')
+  const [docCursor, setDocCursor] = useState('')
+  const [nextDoc, setNextDoc] = useState('')
+  const [canAssign, setCanAssign] = useState(false)
+  const [narrow, setNarrow] = useState(false)
+  const [err, setErr] = useState('')
+  const [notice, setNotice] = useState('')
+  const [busy, setBusy] = useState(false)
+  const [preview, setPreview] = useState<PreviewOut['docs']>([])
+  const [confirm, setConfirm] = useState(false)
+  const [legacy, setLegacy] = useState<LegacyOut['findings']>([])
+  const [legacyOpen, setLegacyOpen] = useState(false)
+  const seq = useRef(0)
+  const op = useRef(0)
+  const docsRef = useRef(docs)
+  docsRef.current = docs
+
+  const load = async (cursor: string, request = ++seq.current, replaceDirty = false) => {
+    const seenMembers: DutyMember[] = []
+    const seenCells: MatrixOut['cells'] = []
+    let pageDocs: MatrixDoc[] = []
+    let memberCursor = ''
+    let nextDocument = ''
+    let assignable = false
+    try {
+      do {
+        const page = await api.rdmProjectCommand<MatrixOut>(project, 'rdm.duty.matrix', dutyMatrixPayload(projectId, {
+          view: 'matrix', query, stage, typeKey, assignment, docCursor: cursor, memberCursor, docLimit: 10, memberLimit: 20,
+        }))
+        if (request !== seq.current) return
+        if (pageDocs.length === 0) pageDocs = page.docs ?? []
+        seenMembers.push(...(page.members ?? []))
+        seenCells.push(...(page.cells ?? []))
+        assignable = page.canAssign
+        nextDocument = page.nextDocCursor ?? ''
+        memberCursor = page.nextMemberCursor ?? ''
+      } while (memberCursor)
+      if (request !== seq.current) return
+      setMembers(seenMembers)
+      setCanAssign(assignable)
+      setNextDoc(nextDocument)
+      setDocs(current => absorbServerDocs(current, pageDocs, seenCells, replaceDirty))
+    } catch (error) {
+      if (request !== seq.current) return
+      setErr(String(error))
+    }
+  }
+
+  useEffect(() => {
+    const media = window.matchMedia('(max-width: 720px)')
+    const apply = () => setNarrow(media.matches)
+    apply()
+    media.addEventListener('change', apply)
+    return () => media.removeEventListener('change', apply)
+  }, [])
+
+  useEffect(() => {
+    void load(docCursor)
+    return () => { seq.current += 1 }
+  }, [project, query, stage, typeKey, assignment, docCursor])
+
+  const onCell = (id: string, owner: string, duty: CellDuty) => {
+    setPreview([])
+    setConfirm(false)
+    setDocs(current => editCell(current, id, owner, duty))
+  }
+
+  const visibleDocs = docs.filter(doc => {
+    const text = `${doc.title} ${doc.code} ${doc.docId}`.toLowerCase()
+    if (query && !text.includes(query.trim().toLowerCase())) return false
+    if (stage && doc.stage !== stage) return false
+    if (typeKey && doc.typeKey !== typeKey) return false
+    return true
+  })
+
+  const save = async () => {
+    const payload = savePayload(docsRef.current, confirm)
+    if (payload.issues.length > 0) {
+      setErr(payload.issues.join('；'))
+      return
+    }
+    const request = ++seq.current
+    const ticket = ++op.current
+    setBusy(true); setErr(''); setNotice('')
+    let sent = false
+    try {
+      const looked = await api.rdmProjectCommand<PreviewOut>(project, 'rdm.duty.preview', dutyPreviewPayload(projectId, payload.docs))
+      if (request !== seq.current) return
+      setPreview(looked.docs ?? [])
+      if (!looked.ok) {
+        setErr('预览未通过，未写入')
+        return
+      }
+      if ((looked.docs ?? []).some(item => item.needsConfirm) && !confirm) {
+        setErr('在途审签将失效。确认后再保存。')
+        return
+      }
+      sent = true
+      await api.rdmProjectCommand(project, 'rdm.review.assign.doc.batch', dutyPreviewPayload(projectId, savePayload(docsRef.current, confirm).docs))
+      if (request !== seq.current) return
+      setNotice('已保存文档职责')
+      setPreview([])
+      setConfirm(false)
+      setDocs(current => current.map(doc => ({ ...doc, dirty: false })))
+      await load(docCursor, request)
+    } catch (error) {
+      if (request !== seq.current) return
+      if (!sent) {
+        setErr(String(error))
+        return
+      }
+      setErr(`保存结果未确认：${error}`)
+      setConfirm(false)
+      await load(docCursor, request, true)
+    } finally {
+      if (ticket === op.current) setBusy(false)
+    }
+  }
+
+  const scanLegacy = async (request = ++seq.current) => {
+    try {
+      const out = await api.rdmProjectCommand<LegacyOut>(project, 'rdm.duty.legacy.scan', dutyLegacyPayload(projectId))
+      if (request !== seq.current) return
+      setLegacy(out.findings ?? [])
+    } catch (error) {
+      if (request !== seq.current) return
+      setErr(String(error))
+    }
+  }
+
+  const applyIdentical = async () => {
+    const request = ++seq.current
+    const ticket = ++op.current
+    setBusy(true)
+    try {
+      await api.rdmProjectCommand(project, 'rdm.duty.legacy.apply', dutyLegacyPayload(projectId))
+      if (request !== seq.current) return
+      setNotice('已归并无歧义的章节职责')
+      await scanLegacy(request)
+      await load(docCursor, request)
+    } catch (error) {
+      if (request !== seq.current) return
+      setErr(String(error))
+    } finally {
+      if (ticket === op.current) setBusy(false)
+    }
+  }
+
+  const disabled = busy || !!writeError || !canAssign
+  const ambiguous = legacy.filter(item => item.kind !== 'identical')
+
+  return (
+    <div>
+      <p className="ad-hint">本页只分配已有文档的职责，不创建或生成文档。</p>
+      {writeError && <p className="ad-hint">{writeError}</p>}
+      <div className="ad-row" role="tablist" aria-label="职责视图">
+        <button className="ad-mini" role="tab" aria-selected={view === 'member'} onClick={() => setView('member')}>按人员</button>
+        <button className="ad-mini" role="tab" aria-selected={view === 'document'} onClick={() => setView('document')}>按文档</button>
+        <button className="ad-mini" role="tab" aria-selected={view === 'matrix'} onClick={() => setView('matrix')}>矩阵</button>
+      </div>
+      <div className="ad-row">
+        <input aria-label="筛选文档名称或编号" value={query} placeholder="名称或编号" disabled={busy} onChange={event => { setDocCursor(''); setQuery(event.target.value) }} />
+        <input aria-label="筛选类型" value={typeKey} placeholder="类型" disabled={busy} onChange={event => { setDocCursor(''); setTypeKey(event.target.value) }} />
+        <input aria-label="筛选阶段" value={stage} placeholder="阶段" disabled={busy} onChange={event => { setDocCursor(''); setStage(event.target.value) }} />
+        <select aria-label="筛选当前职责" value={assignment} disabled={busy} onChange={event => { setDocCursor(''); setAssignment(event.target.value) }}>
+          <option value="">全部</option>
+          <option value="assigned">已分配</option>
+          <option value="unassigned">未分配</option>
+        </select>
+      </div>
+      {view === 'member' && <DutyByMemberView member={member} members={members} docs={visibleDocs} disabled={disabled} onMember={setMember} onCell={onCell} />}
+      {view === 'document' && <DutyByDocumentView docId={docId} docs={visibleDocs} members={members} disabled={disabled} onDoc={setDocId} onCell={onCell} />}
+      {view === 'matrix' && <DutyMatrixView docs={visibleDocs} members={members} disabled={disabled} narrow={narrow} onCell={onCell} />}
+      <div className="ad-row">
+        {docCursor && <button className="ad-mini" disabled={busy} onClick={() => setDocCursor('')}>文档首页</button>}
+        {nextDoc && <button className="ad-mini" disabled={busy} onClick={() => setDocCursor(nextDoc)}>下一页文档</button>}
+        <Btn variant="primary" icon="check" disabled={disabled || dirtyDocs(docs).length === 0} onClick={() => { void save() }}>保存职责</Btn>
+      </div>
+      <DutyChangePreview impacts={preview} confirm={confirm} onConfirm={setConfirm} />
+      <Collapsible id="duty-legacy" open={legacyOpen} onToggle={setLegacyOpen} trigger="旧章节职责">
+        <button className="ad-mini" disabled={busy} onClick={() => { void scanLegacy() }}>扫描</button>
+        <button className="ad-mini" disabled={disabled} onClick={() => { void applyIdentical() }}>归并无歧义覆盖</button>
+        {legacy.length === 0 ? <p className="ad-hint">尚未扫描，或没有章节级覆盖。</p> : (
+          <ul>
+            {legacy.map(item => <li key={`${item.docId}-${item.sectionTitle}`}>{item.title} / {item.sectionTitle}：{item.kind === 'identical' ? '与文档职责一致' : '有歧义，需逐文档确认'}</li>)}
+          </ul>
+        )}
+        {ambiguous.length > 0 && <p className="ad-hint">有歧义的文档不会自动覆盖。请在上面的视图里逐份确认后再保存。</p>}
+      </Collapsible>
+      {notice && <div className="ad-notice"><Icon name="check" size={14} />{notice}</div>}
+      {err && <div className="lg-err"><Icon name="alert" size={14} />{err}</div>}
+      {docs.length === 0 && !err && <EmptyState icon="inbox">暂无文档</EmptyState>}
+    </div>
+  )
+}

src/contracts.ts

@@ -151,7 +151,21 @@ export interface ActivityCard {
   sourceRunId?: ID; anchorMessageId?: ID;
   kind: CardKind; title: string; status: CardStatus; tone?: string;
   body?: UINode[]; actions?: { id: string; label: string; style?: 'primary' | 'default' | 'danger'; command?: string }[];
-  pinned?: boolean; createdAt: string; updatedAt: string;
+  pinned?: boolean; createdAt: string; updatedAt: string; work?: WorkCard;
+}
+
+export interface WorkCard {
+  result?: string; resultVersion: number; readVersion: number; completedAt?: string;
+  decision?: WorkDecision;
+}
+export interface WorkDecision {
+  runId?: ID;
+  mode: 'single' | 'multiple'; state: 'open' | 'deferred' | 'dispatching' | 'submitted';
+  options?: { id: string; label: string }[];
+  selectedIds?: string[]; freeText?: string; respondedAt?: string;
+}
+export interface WorkCardAction {
+  resultVersion: number; selectedIds?: string[]; freeText?: string;
 }
 
 export interface CardPayload { card: ActivityCard }

src/duties/draft.ts

@@ -0,0 +1,197 @@
+// 文档职责草稿的唯一存储。三个视图只投影这份数据；单元格值由三权反推。
+export type CellDuty = 'none' | 'author' | 'reviewer' | 'approver'
+
+interface DutyRoles {
+  author: string
+  reviewers: string[]
+  approver: string
+}
+
+export interface DutyDocDraft extends DutyRoles {
+  docId: string
+  title: string
+  code: string
+  typeKey: string
+  stage: string
+  dutyVersion: number
+  activeRound: number
+  legacySectionOverrides: number
+  dirty: boolean
+}
+
+export interface DutyMember {
+  owner: string
+  role: string
+  valid: boolean
+  canAuthor: boolean
+  canReview: boolean
+  canApprove: boolean
+}
+
+interface DutySaveItem {
+  docId: string
+  author: string
+  reviewers: string[]
+  approver: string
+  expectedDutyVersion: number
+  confirmInvalidation: boolean
+}
+
+export function cellDuty(roles: DutyRoles, owner: string): CellDuty {
+  if (roles.author === owner) return 'author'
+  if (roles.approver === owner) return 'approver'
+  if (roles.reviewers.includes(owner)) return 'reviewer'
+  return 'none'
+}
+
+export function applyCell(roles: DutyRoles, owner: string, duty: CellDuty): {
+  roles: DutyRoles
+  replacedAuthor: string
+  replacedApprover: string
+} {
+  const replacedAuthor = duty === 'author' && roles.author !== '' && roles.author !== owner ? roles.author : ''
+  const replacedApprover = duty === 'approver' && roles.approver !== '' && roles.approver !== owner ? roles.approver : ''
+  let author = roles.author === owner ? '' : roles.author
+  let approver = roles.approver === owner ? '' : roles.approver
+  let reviewers = roles.reviewers.filter(person => person !== owner)
+  switch (duty) {
+    case 'author':
+      author = owner
+      break
+    case 'approver':
+      approver = owner
+      break
+    case 'reviewer':
+      reviewers = [...reviewers, owner]
+      break
+    case 'none':
+      break
+    default: {
+      const exhaustive: never = duty
+      throw new Error(exhaustive)
+    }
+  }
+  return { roles: { author, reviewers, approver }, replacedAuthor, replacedApprover }
+}
+
+export function replacementNote(roles: DutyRoles, owner: string, duty: CellDuty): string {
+  if (duty === 'author' && roles.author !== '' && roles.author !== owner) return `将替换${roles.author}`
+  if (duty === 'approver' && roles.approver !== '' && roles.approver !== owner) return `将替换${roles.approver}`
+  return ''
+}
+
+function dutyConflicts(roles: DutyRoles): number {
+  const seen = new Map<string, number>()
+  const mark = (owner: string) => {
+    if (!owner) return
+    seen.set(owner, (seen.get(owner) ?? 0) + 1)
+  }
+  mark(roles.author)
+  mark(roles.approver)
+  for (const reviewer of roles.reviewers) mark(reviewer)
+  let conflicts = 0
+  for (const count of seen.values()) if (count > 1) conflicts += 1
+  return conflicts
+}
+
+export function completeness(roles: DutyRoles): { authors: number; reviewers: number; approvers: number; conflicts: number } {
+  return {
+    authors: roles.author ? 1 : 0,
+    reviewers: roles.reviewers.length,
+    approvers: roles.approver ? 1 : 0,
+    conflicts: dutyConflicts(roles),
+  }
+}
+
+export function saveIssues(roles: DutyRoles): string[] {
+  const issues: string[] = []
+  if (!roles.author) issues.push('需指定编制人')
+  if (roles.reviewers.length === 0) issues.push('审核至少一人')
+  if (!roles.approver) issues.push('需指定批准人')
+  if (dutyConflicts(roles) > 0) issues.push('一人只能担一个职责')
+  return issues
+}
+
+function rolesFromCells(docId: string, cells: { docId: string; owner: string; duty: string }[]): DutyRoles {
+  const roles: DutyRoles = { author: '', reviewers: [], approver: '' }
+  for (const cell of cells) {
+    if (cell.docId !== docId) continue
+    if (cell.duty !== 'none' && cell.duty !== 'author' && cell.duty !== 'reviewer' && cell.duty !== 'approver') continue
+    const next = applyCell(roles, cell.owner, cell.duty)
+    roles.author = next.roles.author
+    roles.reviewers = next.roles.reviewers
+    roles.approver = next.roles.approver
+  }
+  return roles
+}
+
+export function absorbServerDocs(
+  current: DutyDocDraft[],
+  docs: {
+    docId: string; title: string; code?: string; typeKey: string; stage?: string
+    dutyVersion: number; activeRound?: number; legacySectionOverrides?: number
+  }[],
+  cells: { docId: string; owner: string; duty: string }[],
+  replaceDirty = false,
+): DutyDocDraft[] {
+  const byId = new Map(current.map(doc => [doc.docId, doc]))
+  const pageIds = new Set(docs.map(doc => doc.docId))
+  const next: DutyDocDraft[] = []
+  for (const doc of docs) {
+    const previous = byId.get(doc.docId)
+    const serverRoles = rolesFromCells(doc.docId, cells)
+    const keepDraft = !replaceDirty && previous?.dirty === true
+    next.push({
+      docId: doc.docId,
+      title: doc.title,
+      code: doc.code ?? doc.docId,
+      typeKey: doc.typeKey,
+      stage: doc.stage ?? '',
+      dutyVersion: keepDraft ? previous.dutyVersion : doc.dutyVersion,
+      activeRound: doc.activeRound ?? 0,
+      legacySectionOverrides: doc.legacySectionOverrides ?? 0,
+      dirty: keepDraft,
+      author: keepDraft ? previous.author : serverRoles.author,
+      reviewers: keepDraft ? previous.reviewers : serverRoles.reviewers,
+      approver: keepDraft ? previous.approver : serverRoles.approver,
+    })
+  }
+  for (const doc of current) {
+    if (!replaceDirty && doc.dirty && !pageIds.has(doc.docId)) next.push(doc)
+  }
+  return next
+}
+
+export function editCell(docs: DutyDocDraft[], docId: string, owner: string, duty: CellDuty): DutyDocDraft[] {
+  return docs.map(doc => {
+    if (doc.docId !== docId) return doc
+    const next = applyCell(doc, owner, duty)
+    return { ...doc, ...next.roles, dirty: true }
+  })
+}
+
+export function dirtyDocs(docs: DutyDocDraft[]): DutyDocDraft[] {
+  return docs.filter(doc => doc.dirty)
+}
+
+export function savePayload(docs: DutyDocDraft[], confirmInvalidation: boolean): { docs: DutySaveItem[]; issues: string[] } {
+  const dirty = dirtyDocs(docs)
+  const issues: string[] = []
+  if (dirty.length === 0) issues.push('没有未保存的职责')
+  if (dirty.length > 20) issues.push('一次保存最多 20 份文档')
+  for (const doc of dirty) {
+    for (const issue of saveIssues(doc)) issues.push(`${doc.title}：${issue}`)
+  }
+  return {
+    docs: dirty.slice(0, 20).map(doc => ({
+      docId: doc.docId,
+      author: doc.author,
+      reviewers: doc.reviewers,
+      approver: doc.approver,
+      expectedDutyVersion: doc.dutyVersion,
+      confirmInvalidation: confirmInvalidation && doc.activeRound > 0,
+    })),
+    issues,
+  }
+}
+

src/duties/views.tsx

@@ -0,0 +1,203 @@
+import type { CellDuty, DutyDocDraft, DutyMember } from './draft'
+import { cellDuty, completeness, replacementNote, saveIssues } from './draft'
+
+const DUTY_OPTIONS: { value: CellDuty; label: string }[] = [
+  { value: 'none', label: '无职责' },
+  { value: 'author', label: '编制' },
+  { value: 'reviewer', label: '审核' },
+  { value: 'approver', label: '批准' },
+]
+
+function DutySelect({
+  doc, owner, disabled, onChange,
+}: {
+  doc: DutyDocDraft
+  owner: string
+  disabled: boolean
+  onChange: (duty: CellDuty) => void
+}) {
+  const current = cellDuty(doc, owner)
+  return (
+    <label className="duty-cell">
+      <select
+        aria-label={`${owner} 在 ${doc.title} 的职责`}
+        value={current}
+        disabled={disabled}
+        onChange={event => {
+          const value = event.target.value
+          if (value === 'none' || value === 'author' || value === 'reviewer' || value === 'approver') onChange(value)
+        }}
+      >
+        {DUTY_OPTIONS.map(option => {
+          const hint = replacementNote(doc, owner, option.value)
+          return <option key={option.value} value={option.value}>{hint ? `${option.label}（${hint}）` : option.label}</option>
+        })}
+      </select>
+    </label>
+  )
+}
+
+export function DutyByMemberView({
+  member, members, docs, disabled, onMember, onCell,
+}: {
+  member: string
+  members: DutyMember[]
+  docs: DutyDocDraft[]
+  disabled: boolean
+  onMember: (owner: string) => void
+  onCell: (docId: string, owner: string, duty: CellDuty) => void
+}) {
+  return (
+    <div>
+      <div className="setting-row">
+        <label htmlFor="duty-member">成员</label>
+        <select id="duty-member" aria-label="选择成员" value={member} onChange={event => onMember(event.target.value)}>
+          <option value="">选择成员</option>
+          {members.map(person => <option key={person.owner} value={person.owner}>{person.owner}</option>)}
+        </select>
+      </div>
+      {!member ? <p className="ad-hint">先选择成员，再为每份文档指定无职责、编制、审核或批准。</p> : (
+        <table className="ad-table">
+          <thead><tr><th>文档</th><th>类型 / 阶段</th><th>职责</th><th>完整性</th></tr></thead>
+          <tbody>
+            {docs.map(doc => {
+              const score = completeness(doc)
+              return (
+                <tr key={doc.docId}>
+                  <td>{doc.title}<span className="ad-dim ad-mono"> · {doc.code}</span></td>
+                  <td className="ad-dim">{doc.typeKey}{doc.stage ? ` / ${doc.stage}` : ''}</td>
+                  <td><DutySelect doc={doc} owner={member} disabled={disabled} onChange={duty => onCell(doc.docId, member, duty)} /></td>
+                  <td className="ad-dim">编 {score.authors}/1 · 审 {score.reviewers} · 批 {score.approvers}/1</td>
+                </tr>
+              )
+            })}
+            {docs.length === 0 && <tr><td colSpan={4} className="ad-dim">没有符合筛选的文档</td></tr>}
+          </tbody>
+        </table>
+      )}
+    </div>
+  )
+}
+
+export function DutyByDocumentView({
+  docId, docs, members, disabled, onDoc, onCell,
+}: {
+  docId: string
+  docs: DutyDocDraft[]
+  members: DutyMember[]
+  disabled: boolean
+  onDoc: (id: string) => void
+  onCell: (docId: string, owner: string, duty: CellDuty) => void
+}) {
+  const doc = docs.find(item => item.docId === docId)
+  const score = doc ? completeness(doc) : null
+  const issues = doc ? saveIssues(doc) : []
+  return (
+    <div>
+      <div className="setting-row">
+        <label htmlFor="duty-doc">文档</label>
+        <select id="duty-doc" aria-label="选择文档" value={docId} onChange={event => onDoc(event.target.value)}>
+          <option value="">选择整份文档</option>
+          {docs.map(item => <option key={item.docId} value={item.docId}>{item.title}</option>)}
+        </select>
+      </div>
+      {score && <p className="ad-hint">编制 {score.authors}/1、审核 {score.reviewers} 人、批准 {score.approvers}/1、冲突 {score.conflicts}{issues.length > 0 ? `。${issues.join('，')}` : ''}</p>}
+      {!doc ? <p className="ad-hint">先选择整份文档。这里不能选择章节，也没有生成入口。</p> : (
+        <table className="ad-table">
+          <thead><tr><th>成员</th><th>项目身份</th><th>职责</th></tr></thead>
+          <tbody>
+            {members.map(person => (
+              <tr key={person.owner}>
+                <td className="ad-mono">{person.owner}{person.valid ? '' : '（无效）'}</td>
+                <td className="ad-dim">{person.role === 'owner' ? '项目负责人' : '项目成员'}</td>
+                <td><DutySelect doc={doc} owner={person.owner} disabled={disabled || !person.valid} onChange={duty => onCell(doc.docId, person.owner, duty)} /></td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      )}
+    </div>
+  )
+}
+
+export function DutyMatrixView({
+  docs, members, disabled, narrow, onCell,
+}: {
+  docs: DutyDocDraft[]
+  members: DutyMember[]
+  disabled: boolean
+  narrow: boolean
+  onCell: (docId: string, owner: string, duty: CellDuty) => void
+}) {
+  if (narrow) {
+    return <p className="ad-hint">当前宽度放不下成员×文档矩阵。请使用“按人员”或“按文档”。</p>
+  }
+  return (
+    <div className="duty-matrix-wrap">
+      <table className="ad-table duty-matrix">
+        <thead>
+          <tr>
+            <th className="duty-sticky">成员</th>
+            {docs.map(doc => {
+              const score = completeness(doc)
+              const ready = score.authors === 1 && score.reviewers >= 1 && score.approvers === 1 && score.conflicts === 0
+              return <th key={doc.docId}>{doc.title}<span className={ready ? 'ad-chip' : 'ad-chip ad-chip-warn'}>{ready ? '三权齐' : '未齐'}</span></th>
+            })}
+          </tr>
+        </thead>
+        <tbody>
+          {members.map(person => (
+            <tr key={person.owner}>
+              <td className="duty-sticky ad-mono">{person.owner}</td>
+              {docs.map(doc => (
+                <td key={doc.docId}>
+                  <DutySelect doc={doc} owner={person.owner} disabled={disabled || !person.valid} onChange={duty => onCell(doc.docId, person.owner, duty)} />
+                </td>
+              ))}
+            </tr>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  )
+}
+
+export function DutyChangePreview({
+  impacts, confirm, onConfirm,
+}: {
+  impacts: {
+    docId: string
+    title?: string
+    replacedAuthor?: string
+    replacedApprover?: string
+    needsConfirm?: boolean
+    reasons?: string[]
+  }[]
+  confirm: boolean
+  onConfirm: (value: boolean) => void
+}) {
+  if (impacts.length === 0) return null
+  const needs = impacts.some(item => item.needsConfirm)
+  return (
+    <div className="settings-group">
+      <h4>保存前预览</h4>
+      <ul>
+        {impacts.map(item => (
+          <li key={item.docId}>
+            {item.title || item.docId}
+            {item.replacedAuthor ? `：编制将替换${item.replacedAuthor}` : ''}
+            {item.replacedApprover ? `：批准将替换${item.replacedApprover}` : ''}
+            {item.needsConfirm ? '；在途审签将失效，历史名单保持不变' : ''}
+            {item.reasons && item.reasons.length > 0 ? `；${item.reasons.join('，')}` : ''}
+          </li>
+        ))}
+      </ul>
+      {needs && (
+        <label>
+          <input type="checkbox" checked={confirm} onChange={event => onConfirm(event.target.checked)} />
+          确认使受影响的在途审签失效
+        </label>
+      )}
+    </div>
+  )
+}

src/live.ts

@@ -13,7 +13,7 @@ export type ToolLiveState = 'composing' | 'running' | 'done'
 export type LiveItem =
   | { kind: 'thinking'; text: string; startedAt: number; endedAt: number }
   | { kind: 'text'; index: number; text: string }
-  | { kind: 'agent'; text: string }
+  | { kind: 'agent'; text: string; agentRun?: string; agentPhase?: 'spawn' | 'progress' | 'result' }
   | {
       kind: 'tool'
       callId?: string
@@ -151,6 +151,27 @@ export function applyCheck(items: LiveItem[], passed: boolean, reason: string):
   return [...items, { kind: 'check', passed, reason }]
 }
 
+/** A child streams cumulative previews. Replace that child's latest preview in
+ * place, while preserving real phase changes and the order of other children. */
+function applyAgentProgress(items: LiveItem[], agentRun: string, note: string): LiveItem[] {
+  const text = note.trim()
+  if (!text) return items
+  for (let i = items.length - 1; i >= 0; i--) {
+    const previous = items[i]
+    if (previous.kind !== 'agent' || previous.agentRun !== agentRun) continue
+    if (previous.agentPhase !== 'progress') break
+    const value = previous.text.slice('协作进展：'.length)
+    if (value === text || value.startsWith(text)) return items
+    if (text.startsWith(value) && !/^调用\s/.test(text)) {
+      const next = items.slice()
+      next[i] = { ...previous, text: `协作进展：${text}` }
+      return next
+    }
+    break
+  }
+  return [...items, { kind: 'agent', text: `协作进展：${text}`, agentRun, agentPhase: 'progress' }]
+}
+
 // applyFinalizing 标记收尾开始：此前的正文都是过程，此后的正文才是给用户的回复。
 export function applyFinalizing(items: LiveItem[]): LiveItem[] {
   if (items.some(it => it.kind === 'final')) return items
@@ -225,11 +246,12 @@ export function liveToMessage(live: LiveState): Message {
       parts.push({ type: 'text', text: it.text, process: textProcess.get(i) || undefined })
     }
   }
-  return { id: `live:${live.runId}`, conversationId: '', role: 'assistant', runId: live.runId, parts, createdAt: '' }
+  const createdAt = live.startedAt > 0 && Number.isFinite(live.startedAt) ? new Date(live.startedAt).toISOString() : ''
+  return { id: `live:${live.runId}`, conversationId: '', role: 'assistant', runId: live.runId, parts, createdAt }
 }
 
 /** Rebuild one run's process from its durable ordered events, without the live preview's output-tail limit. */
-export function runEventsToTimeline(events: StreamEvent[], parentRunId = events[0]?.runId): ReplayPart[] {
+export function runEventsToTimeline(events: StreamEvent[], parentRunId = events[0]?.runId, completeRecord = false): ReplayPart[] {
   let items: LiveItem[] = []
   let finalizing = false
   for (const event of [...events].sort((a, b) => a.seq - b.seq)) {
@@ -238,19 +260,21 @@ export function runEventsToTimeline(events: StreamEvent[], parentRunId = events[
     if (event.runId !== parentRunId && event.type !== 'agent.progress' && event.type !== 'agent.result') continue
     switch (event.type) {
       case 'agent.spawn':
-        if (typeof p?.name === 'string') items.push({ kind: 'agent', text: `协作代理「${p.name}」已开始` })
+        if (typeof p?.name === 'string') items.push({ kind: 'agent', text: `协作代理「${p.name}」已开始`,
+          agentRun: String(p.agentRun ?? event.runId ?? ''), agentPhase: 'spawn' })
         break
       case 'agent.progress':
-        if (typeof p?.note === 'string' && p.note.trim()) items.push({ kind: 'agent', text: `协作进展：${p.note}` })
+        if (typeof p?.note === 'string') items = applyAgentProgress(items, String(p.agentRun ?? event.runId ?? ''), p.note)
         break
       case 'agent.result':
-        items.push({ kind: 'agent', text: `协作结束：${typeof p?.summary === 'string' && p.summary.trim() ? p.summary : String(p?.status ?? '已结束')}` })
+        items.push({ kind: 'agent', text: `协作结束：${typeof p?.summary === 'string' && p.summary.trim() ? p.summary : String(p?.status ?? '已结束')}`,
+          agentRun: String(p?.agentRun ?? event.runId ?? ''), agentPhase: 'result' })
         break
       case 'thinking.delta':
         if (typeof p?.text === 'string') items = applyThinkingDelta(items, p.text, now)
         break
       case 'message.delta':
-        if (!finalizing && typeof p?.text === 'string') items = applyTextDelta(items, typeof p.index === 'number' ? p.index : 0, p.text)
+        if ((!finalizing || completeRecord) && typeof p?.text === 'string') items = applyTextDelta(items, typeof p.index === 'number' ? p.index : 0, p.text)
         break
       case 'tool.call.delta':
         if (typeof p?.delta === 'string') items = applyToolCallDelta(items, typeof p.index === 'number' ? p.index : 0,
@@ -278,7 +302,7 @@ export function runEventsToTimeline(events: StreamEvent[], parentRunId = events[
     }
   }
   const live: LiveState = { runId: events[0]?.runId ?? '', phase: 'done', items, agentNotes: {}, startedAt: 0 }
-  return splitTimeline(liveToMessage(live).parts).timeline
+  return completeRecord ? liveToMessage(live).parts : splitTimeline(liveToMessage(live).parts).timeline
 }
 
 // livePhaseLabel 用最后一个实时条目给出中文阶段，而不是后端的英文 phase。

src/outbox.ts

@@ -1,17 +1,22 @@
 // 输入排队（纯数据）：回合进行中先入本地队列，终态再逐条发送。
+export interface WorkReference { cardId: string; resultVersion: number; title: string }
+
 export interface QueuedMessage {
   id: string
   text: string
   attachmentIds: string[]
   attachmentNames: string[]
+  taskRef?: WorkReference
+  deliveryError?: string
 }
 
-export function newQueuedMessage(text: string, attachmentIds: string[], attachmentNames: string[]): QueuedMessage {
+export function newQueuedMessage(text: string, attachmentIds: string[], attachmentNames: string[], taskRef?: WorkReference): QueuedMessage {
   return {
     id: `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`,
     text,
     attachmentIds,
     attachmentNames,
+    ...(taskRef ? { taskRef } : {}),
   }
 }
 

src/passwords.ts

@@ -1,11 +0,0 @@
-// 浏览器端随机初始密码（管理员未显式给定密码时）：
-// crypto.getRandomValues 拒绝易混淆字符（0/O/1/l/I），保证可抄写。
-const ALPHABET = 'abcdefghjkmnpqrstuvwxyz23456789'
-
-export function randomPassword(length = 12): string {
-  const buf = new Uint32Array(length)
-  crypto.getRandomValues(buf)
-  let out = ''
-  for (let i = 0; i < length; i++) out += ALPHABET[buf[i] % ALPHABET.length]
-  return out
-}

src/rdmManagement.ts

@@ -26,6 +26,7 @@ export function rdmProjectReadError(project: Project | undefined): string | null
 const PROJECT_READ_COMMANDS = new Set([
   'rdm.project.member.list', 'rdm.perm.check', 'rdm.perm.matrix',
   'rdm.review.doc.status', 'rdm.duty.catalog', 'rdm.duty.get',
+  'rdm.duty.matrix', 'rdm.duty.preview', 'rdm.duty.legacy.scan',
 ])
 
 export function rdmProjectCommandError(project: Project, command: string): string | null {
@@ -54,14 +55,12 @@ export const RDM_PERM_MATRIX_COMMANDS = [
   'rdm.project.member.list',
 ] as const
 
-/** 项目设置「文档职责 · 整文审签」页消费的命令面。 */
-export const RDM_DOC_REVIEW_COMMANDS = [
+/** 项目设置「文档职责」页消费的命令面。审签命令留在文档工作区，不作为本页门控。 */
+export const RDM_DUTY_COMMANDS = [
+  'rdm.duty.matrix',
+  'rdm.duty.preview',
   'rdm.review.assign.doc',
-  'rdm.review.doc.submit',
-  'rdm.review.doc.approve',
-  'rdm.review.doc.reject',
-  'rdm.review.doc.final',
-  'rdm.review.doc.status',
+  'rdm.review.assign.doc.batch',
 ] as const
 
 export type CommandListItem = { id?: string; enabled?: boolean } | null | undefined
@@ -79,9 +78,9 @@ export const rdmRolesReady = (cmds: CommandListItem[] | null | undefined) =>
 export const rdmMembersReady = (cmds: CommandListItem[] | null | undefined) =>
   ready(cmds, RDM_MEMBER_COMMANDS)
 
-/** 文档职责/整文审签页是否就绪。 */
-export const rdmDocReviewReady = (cmds: CommandListItem[] | null | undefined) =>
-  ready(cmds, RDM_DOC_REVIEW_COMMANDS)
+/** 文档职责页是否就绪。命令未齐则 fail-closed。 */
+export const rdmDutyReady = (cmds: CommandListItem[] | null | undefined) =>
+  ready(cmds, RDM_DUTY_COMMANDS)
 
 /** 项目权限矩阵页是否就绪。 */
 export const rdmPermMatrixReady = (cmds: CommandListItem[] | null | undefined) =>
@@ -109,7 +108,37 @@ export const memberSetRolePayload = (projectId: string, member: string, role: 'o
 
 export const assignDocDutiesPayload = (
   projectId: string, docId: string, author: string, reviewers: string[], approver: string,
-) => ({ projectId, docId, author, reviewers, approver })
+  extra?: { expectedDutyVersion?: number; confirmInvalidation?: boolean },
+) => ({
+  projectId, docId, author, reviewers, approver,
+  ...(extra?.expectedDutyVersion !== undefined ? { expectedDutyVersion: extra.expectedDutyVersion } : {}),
+  ...(extra?.confirmInvalidation !== undefined ? { confirmInvalidation: extra.confirmInvalidation } : {}),
+})
+
+export const dutyMatrixPayload = (
+  projectId: string,
+  query: {
+    view: 'member' | 'document' | 'matrix'
+    memberOwner?: string
+    docId?: string
+    query?: string
+    stage?: string
+    typeKey?: string
+    assignment?: string
+    memberQuery?: string
+    memberCursor?: string
+    docCursor?: string
+    memberLimit?: number
+    docLimit?: number
+  },
+) => ({ projectId, ...query })
+
+export const dutyPreviewPayload = (
+  projectId: string,
+  docs: { docId: string; author: string; reviewers: string[]; approver: string; expectedDutyVersion: number; confirmInvalidation: boolean }[],
+) => ({ projectId, docs })
+
+export const dutyLegacyPayload = (projectId: string) => ({ projectId })
 
 export const docSubmitPayload = (projectId: string, docId: string) => ({ projectId, docId })
 export const docApprovePayload = (projectId: string, docId: string, note?: string) =>

src/runEvents.ts

@@ -0,0 +1,17 @@
+import { api } from './api'
+import type { StreamEvent } from './contracts'
+
+/** Read the durable record in bounded pages; callers own cancellation and projection. */
+export async function loadRunEvents(conversationId: string, runId: string, signal: AbortSignal): Promise<StreamEvent[]> {
+  const events: StreamEvent[] = []
+  let after = 0
+  while (true) {
+    const page = await api.runEventsPage(conversationId, runId, after, signal)
+    const rows = page.events ?? []
+    events.push(...rows)
+    if (rows.length < 500) return events
+    const next = rows[rows.length - 1].seq
+    if (next <= after) throw new Error('process event cursor did not advance')
+    after = next
+  }
+}

src/scrollsync.ts

@@ -1,24 +1,4 @@
-// 中栏 → 右栏单向滚动同步，以及互定位后的 1.2s 闪烁。
-// 比例按可滚动范围计算；任一侧没有溢出时不同步，避免把静止栏拽动。
-
-export interface ScrollBox {
-  scrollTop: number
-  scrollHeight: number
-  clientHeight: number
-}
-
-export function scrollRatio(box: ScrollBox): number | null {
-  const range = box.scrollHeight - box.clientHeight
-  if (range <= 0) return null
-  return box.scrollTop / range
-}
-
-export function scrollTopForRatio(box: Pick<ScrollBox, 'scrollHeight' | 'clientHeight'>, ratio: number): number | null {
-  const range = box.scrollHeight - box.clientHeight
-  if (range <= 0) return null
-  const clamped = Math.min(1, Math.max(0, ratio))
-  return clamped * range
-}
+// Explicit message/card location feedback. The middle and work panes scroll independently.
 
 /** 给已定位的节点加上 mk-flash，1.2s 后摘掉。 */
 export function flashElement(el: Element | null) {

src/store.ts

@@ -6,13 +6,13 @@ import { auth } from './auth'
 import { projectActionError, projectWorkError } from './projectmeta'
 import { applyTextDelta, applyThinkingDelta, applyToolCall, applyToolCallDelta, applyToolResult, applyToolOutput, applyArtifactCreated, applyArtifactUpdated, applyCheck, applyFinalizing, type LiveItem } from './live'
 import { closePreviewTab, mergeOrphanPreviewTabs, openPreviewTab, previewTabsKey, type PreviewTab } from './previewtabs'
-import { deliveryRequestId, enqueueMessage, enqueueMessageFront, newQueuedMessage, promoteQueuedMessage, removeQueuedMessage, replaceQueuedText, type QueuedMessage } from './outbox'
+import { deliveryRequestId, enqueueMessage, enqueueMessageFront, newQueuedMessage, promoteQueuedMessage, removeQueuedMessage, replaceQueuedText, type QueuedMessage, type WorkReference } from './outbox'
 import { canFlushOutbox, deriveShellPhase } from './runstate'
 import { flashElement } from './scrollsync'
 import { isThemeChoice, resolveTheme, type ThemeChoice } from './theme'
 import { mergeSurfacesByRevision, surfaceKey } from './surfaceKey'
 import { rdmAuditReady, rdmExportReady } from './workspaces'
-import { rdmRolesReady, rdmMembersReady, rdmDocReviewReady, rdmPermMatrixReady } from './rdmManagement'
+import { rdmRolesReady, rdmMembersReady, rdmDutyReady, rdmPermMatrixReady } from './rdmManagement'
 
 type FontSizeChoice = 13 | 14 | 16 | 18
 const FONT_SIZE_CHOICES: readonly FontSizeChoice[] = [13, 14, 16, 18]
@@ -34,7 +34,8 @@ import type {
   StreamEvent,
   SurfaceMeta,
   SurfaceSnapshot,
-  TodoList
+  TodoList,
+  WorkCardAction
 } from './contracts'
 
 export interface ContextObs {
@@ -113,6 +114,8 @@ interface AppState {
   projectCards: ActivityCard[]
   /** 同一操作的双入口反馈；未知结果必须先对账，不重新发送副作用。 */
   cardActionStates: Record<string, 'submitting' | 'unknown'>
+  workRecord: { cardId: string; runId: string; conversationId: string; title: string } | null
+  workReference: WorkReference | null
   inboxScope: 'conv' | 'project'
   /** runtime.mock：只控制演示指令提示，不改变对话能力。 */
   runtimeMock: boolean
@@ -193,7 +196,7 @@ let state: AppState = {
   contextObs: {},
   projects: [], currentProjectId: null, tasks: [], me: null, currentConvId: null,
   messages: [], runs: [], activeHitl: [], lastSeq: 0, live: null,
-  plan: null, todos: null, artifacts: [], surfaces: [], projectSurfaces: [], cards: [], projectCards: [], cardActionStates: {}, inboxScope: 'conv', runtimeMock: false, profiles: [], pluginPanels: [],
+  plan: null, todos: null, artifacts: [], surfaces: [], projectSurfaces: [], cards: [], projectCards: [], cardActionStates: {}, workRecord: null, workReference: null, inboxScope: 'conv', runtimeMock: false, profiles: [], pluginPanels: [],
   serverWorkspaces: [],
   rdmAuditAvailable: false,
   rdmExportAvailable: false,
@@ -306,6 +309,7 @@ let cardPatches: Record<string, Pick<ActivityCard, 'status' | 'tone'>> = {}
 let projectCardPatches: Record<string, Pick<ActivityCard, 'status' | 'tone'>> = {}
 const actionInflight = new Set<string>()
 const actionFeedbackOwners: Record<string, symbol> = {}
+const workActionExpectations = new Map<string, { actionId: string; payload: WorkCardAction }>()
 
 function observeDetail(observations: Record<string, DetailObservation>, id: string, seq = state.lastSeq, terminal = false) {
   const version = ++detailVersion
@@ -366,7 +370,7 @@ function actionFeedback(key: string, value?: 'submitting' | 'unknown', ids: stri
     if (value ? current[id] === value : !(id in current)) continue
     states ??= { ...state.cardActionStates }
     if (value) states[id] = value
-    else { delete states[id]; delete actionFeedbackOwners[id] }
+    else { delete states[id]; delete actionFeedbackOwners[id]; workActionExpectations.delete(id) }
   }
   if (states) set({ cardActionStates: states })
 }
@@ -381,13 +385,22 @@ function startActionFeedback(key: string, ids: string[] = []) {
 function settleCardFeedback(cards: ActivityCard[]) {
   let states: AppState['cardActionStates'] | undefined
   for (const card of cards) {
-    if (card.status === 'action_required') continue
+    const expected = workActionExpectations.get(card.id)
+    if (expected) {
+      const decision = card.work?.decision?.state
+      const settled = expected.actionId === 'work.read' ? (card.work?.readVersion ?? 0) >= expected.payload.resultVersion
+        : expected.actionId === 'work.defer' ? decision === 'deferred'
+          : expected.actionId === 'work.reopen' ? decision === 'open' : decision === 'submitted'
+      if (!settled) continue
+    }
+    if (!expected && card.status === 'action_required') continue
     const source = hitlSource(card)
     for (const id of [card.id, ...(source ? [`hitl:${source}`] : [])]) {
       if (!(id in (states ?? state.cardActionStates))) continue
       states ??= { ...state.cardActionStates }
       delete states[id]
       delete actionFeedbackOwners[id]
+      workActionExpectations.delete(id)
     }
   }
   if (states) set({ cardActionStates: states })
@@ -419,6 +432,7 @@ export const store = {
     cardVersions = {}; projectCardVersions = {}; cardPatches = {}; projectCardPatches = {}
     runObservations = {}; messageObservations = {}; hitlObservations = {}
     actionInflight.clear()
+    workActionExpectations.clear()
     for (const key of Object.keys(actionFeedbackOwners)) delete actionFeedbackOwners[key]
     for (const key of Object.keys(surfaceActionsInflight)) delete surfaceActionsInflight[key]
     convRestoreDone = true
@@ -426,7 +440,7 @@ export const store = {
     set({ projects: [], currentProjectId: null, tasks: [], me: null, currentConvId: null,
       contextObs: {}, messages: [], runs: [], activeHitl: [], lastSeq: 0, live: null,
       plan: null, todos: null, artifacts: [], surfaces: [], projectSurfaces: [],
-      cards: [], projectCards: [], cardActionStates: {}, inboxScope: 'conv',
+      cards: [], projectCards: [], cardActionStates: {}, workRecord: null, workReference: null, inboxScope: 'conv',
       runtimeMock: false, profiles: [], pluginPanels: [], serverWorkspaces: [], adminSections: [],
       rdmAuditAvailable: false, rdmExportAvailable: false, rdmRolesAvailable: false, rdmMembersAvailable: false,
       rdmDocReviewAvailable: false, rdmPermMatrixAvailable: false,
@@ -513,7 +527,7 @@ export const store = {
       conversationEpoch++; streamSeq = 0; cardVersion = 0; cardVersions = {}; cardPatches = {}
       detailSeq = 0; detailVersion = 0; runObservations = {}; messageObservations = {}; hitlObservations = {}
       set({ currentConvId: null, messages: [], runs: [], activeHitl: [], lastSeq: 0, live: null,
-        cards: [], projectCards: [], plan: null, todos: null, surfaces: [], projectSurfaces: [],
+        cards: [], projectCards: [], workRecord: null, workReference: null, plan: null, todos: null, surfaces: [], projectSurfaces: [],
         artifacts: [], outbox: [], outboxDraining: false, posting: false })
       setUI({ previewExpanded: false, filesView: 'list' })
     }
@@ -603,7 +617,7 @@ export const store = {
     const epoch = ++conversationEpoch
     streamSeq = 0; cardVersion = 0; cardVersions = {}; cardPatches = {}
     detailSeq = 0; detailVersion = 0; runObservations = {}; messageObservations = {}; hitlObservations = {}
-    set({ currentConvId: convId, messages: [], runs: [], activeHitl: [], lastSeq: 0, live: null, plan: null, todos: null, cards: [], surfaces: [], projectSurfaces: [], inboxScope: 'conv', outbox: [], outboxDraining: false, posting: false })
+    set({ currentConvId: convId, messages: [], runs: [], activeHitl: [], lastSeq: 0, live: null, plan: null, todos: null, cards: [], workRecord: null, workReference: null, surfaces: [], projectSurfaces: [], inboxScope: 'conv', outbox: [], outboxDraining: false, posting: false })
     setUI({ previewExpanded: false })
     persistConvId(convId)
     // 空态时打开的预览标签（'_' 键）随会话进入一起迁移，不留在不可见的孤儿键下。
@@ -716,6 +730,9 @@ export const store = {
     if (e.runId && liveEventTypes.has(e.type)) observeDetail(runObservations, e.runId, e.seq)
     const now = eventTime(e)
     const project = (mutate: (l: LiveState) => void) => touchLive(e.runId ?? '', mutate, now)
+    const belongsToLive = (agentRun: string) => !!state.live && (e.runId === state.live.runId
+      || Object.prototype.hasOwnProperty.call(state.live.agentNotes, agentRun)
+      || state.runs.some(run => run.id === agentRun && run.parentRunId === state.live?.runId))
     switch (e.type) {
       case 'message.delta': {
         const p = e.payload as { index: number; text: string }
@@ -777,17 +794,17 @@ export const store = {
       }
       case 'agent.spawn': {
         const p = e.payload as { agentRun: string; name: string; task: string }
-        if (state.live) set({ live: { ...state.live, agentNotes: { ...state.live.agentNotes, [p.agentRun]: `已派生 ${p.name}` } } })
+        if (state.live && belongsToLive(p.agentRun)) set({ live: { ...state.live, agentNotes: { ...state.live.agentNotes, [p.agentRun]: `已派生 ${p.name}` } } })
         break
       }
       case 'agent.progress': {
         const p = e.payload as { agentRun: string; note?: string }
-        if (state.live && p.note) set({ live: { ...state.live, agentNotes: { ...state.live.agentNotes, [p.agentRun]: p.note } } })
+        if (state.live && p.note && belongsToLive(p.agentRun)) set({ live: { ...state.live, agentNotes: { ...state.live.agentNotes, [p.agentRun]: p.note } } })
         break
       }
       case 'agent.result': {
         const p = e.payload as { agentRun: string; summary?: string }
-        if (state.live) set({ live: { ...state.live, agentNotes: { ...state.live.agentNotes, [p.agentRun]: p.summary ?? '任务已结束' } } })
+        if (state.live && belongsToLive(p.agentRun)) set({ live: { ...state.live, agentNotes: { ...state.live.agentNotes, [p.agentRun]: p.summary ?? '任务已结束' } } })
         store.reconcile()
         break
       }
@@ -888,7 +905,7 @@ export const store = {
     }
   },
 
-  async sendMessage(text: string, attachmentIds: string[], requestId?: string): Promise<'ok' | 'busy'> {
+  async sendMessage(text: string, attachmentIds: string[], requestId?: string, taskRef?: WorkReference): Promise<'ok' | 'busy' | 'rejected'> {
     const convId = state.currentConvId
     const epoch = conversationEpoch
     const sameContext = () => state.currentConvId === convId && conversationEpoch === epoch
@@ -896,7 +913,7 @@ export const store = {
     const id = requestId ?? newQueuedMessage(text, attachmentIds, []).id
     set({ posting: true })
     try {
-      const out = await api.sendMessage(convId, text, attachmentIds, id)
+      const out = await (taskRef ? api.sendMessage(convId, text, attachmentIds, id, taskRef) : api.sendMessage(convId, text, attachmentIds, id))
       if (!sameContext()) return 'ok'
       if (out.command) {
         store.toast(out.reply ?? `命令 ${out.command} 已执行`)
@@ -922,8 +939,8 @@ export const store = {
         // 竞态保护：POST 返回前 SSE 事件可能已先行到达并累积（同 run），
         // 此时保留已累积的 live，只补挂用户消息；否则初始化空 live。
         const live = !state.live || state.live.runId !== started.id
-          ? { runId: started.id, phase: 'thinking', items: [], agentNotes: {}, startedAt: Date.now() }
-          : state.live
+          ? { runId: started.id, phase: 'thinking', items: [], agentNotes: {}, startedAt: eventTime({ ts: started.createdAt }) }
+          : { ...state.live, startedAt: eventTime({ ts: started.createdAt }, state.live.startedAt) }
         set({ live, runs, messages })
         store.connectIfNeeded()
       }
@@ -931,19 +948,22 @@ export const store = {
     } catch (e) {
       if (!sameContext()) return 'ok'
       if (isConversationBusy(e)) {
-        set({ outbox: enqueueMessageFront(state.outbox, { id, text, attachmentIds, attachmentNames: [] }) })
+        set({ outbox: enqueueMessageFront(state.outbox, { id, text, attachmentIds, attachmentNames: [], ...(taskRef ? { taskRef } : {}) }) })
         return 'busy'
       }
       store.toast(`发送失败：${e}`)
+      set({ outbox: enqueueMessageFront(state.outbox, { id, text, attachmentIds,
+        attachmentNames: attachmentIds.map(attachmentId => state.artifacts.find(artifact => artifact.id === attachmentId)?.name ?? '已添加材料'),
+        ...(taskRef ? { taskRef } : {}), deliveryError: '发送未成功，内容已保留；可修改后重试或移除' }) })
       await store.reconcile()
-      return 'ok'
+      return 'rejected'
     } finally {
       if (sameContext()) set({ posting: false })
     }
   },
 
-  enqueueOutbox(text: string, attachmentIds: string[], attachmentNames: string[]) {
-    set({ outbox: enqueueMessage(state.outbox, newQueuedMessage(text, attachmentIds, attachmentNames)) })
+  enqueueOutbox(text: string, attachmentIds: string[], attachmentNames: string[], taskRef?: WorkReference) {
+    set({ outbox: enqueueMessage(state.outbox, newQueuedMessage(text, attachmentIds, attachmentNames, taskRef)) })
   },
 
   updateOutbox(id: string, text: string) {
@@ -954,6 +974,10 @@ export const store = {
     set({ outbox: removeQueuedMessage(state.outbox, id) })
   },
 
+  clearOutboxReference(id: string) {
+    set({ outbox: state.outbox.map(item => item.id === id ? { ...item, taskRef: undefined } : item) })
+  },
+
   async sendOutboxNow(id: string) {
     const item = state.outbox.find(q => q.id === id)
     if (!item) return
@@ -964,23 +988,23 @@ export const store = {
       return
     }
     set({ outbox: rest })
-    await store.sendMessage(item.text, item.attachmentIds, deliveryRequestId(item))
+    await store.sendMessage(item.text, item.attachmentIds, deliveryRequestId(item), item.taskRef)
   },
 
   async flushOutbox() {
     if (state.outboxDraining) return
     if (!canFlushOutbox(shellPhase())) return
-    const next = state.outbox[0]
+    const next = state.outbox.find(item => !item.deliveryError)
     if (!next) return
-    set({ outbox: state.outbox.slice(1), outboxDraining: true })
-    let result: 'ok' | 'busy' = 'ok'
+    set({ outbox: removeQueuedMessage(state.outbox, next.id), outboxDraining: true })
+    let result: 'ok' | 'busy' | 'rejected' = 'ok'
     try {
-      result = await store.sendMessage(next.text, next.attachmentIds, deliveryRequestId(next))
+      result = await store.sendMessage(next.text, next.attachmentIds, deliveryRequestId(next), next.taskRef)
     } finally {
       set({ outboxDraining: false })
     }
     if (result === 'busy') return
-    if (canFlushOutbox(shellPhase()) && state.outbox.length > 0) {
+    if (canFlushOutbox(shellPhase()) && state.outbox.some(item => !item.deliveryError)) {
       await store.flushOutbox()
     }
   },
@@ -1065,7 +1089,8 @@ export const store = {
 
   // 卡片动作：确认投影卡（来源 hitl:）路由回 HITL 解析（恢复挂起 run，服务端同步销项）；
   // 其余卡走卡片动作 API，并把服务端持久化的回执消息追加进本地时间线（id 一致，对账不重复）。
-  async cardAction(card: ActivityCard, actionId: string, freeText?: string) {
+  async cardAction(card: ActivityCard, actionId: string, payload?: string | WorkCardAction) {
+    const freeText = typeof payload === 'object' ? payload.freeText : payload
     const source = hitlSource(card)
     if (source) {
       await store.resolveHITL(source, actionId ? { choiceId: actionId } : { freeText })
@@ -1080,8 +1105,9 @@ export const store = {
     const sameContext = () => identity === identityEpoch && state.currentProjectId === pid && (!card.conversationId || (state.currentConvId === convId && conversationEpoch === epoch))
     actionInflight.add(card.id)
     const feedbackOwner = startActionFeedback(card.id)
+    if (actionId.startsWith('work.') && typeof payload === 'object') workActionExpectations.set(card.id, { actionId, payload })
     try {
-      const out = await api.cardAction(card.id, actionId, freeText)
+      const out = await api.cardAction(card.id, actionId, payload)
       if (!sameContext()) return
       const newer = (card.conversationId === state.currentConvId ? cardVersions[card.id] : projectCardVersions[card.id]) > startedVersion
       if (!newer && card.conversationId === state.currentConvId) store.upsertCard(out.card)
@@ -1090,7 +1116,7 @@ export const store = {
         const cards = state.projectCards
         set({ projectCards: cards.some(c => c.id === out.card.id) ? cards.map(c => c.id === out.card.id ? out.card : c) : [out.card, ...cards] })
       }
-      if (out.receipt && out.receipt.conversationId === state.currentConvId && !state.messages.some(m => m.id === out.receipt?.id)) {
+      if (!actionId.startsWith('work.') && out.receipt && out.receipt.conversationId === state.currentConvId && !state.messages.some(m => m.id === out.receipt?.id)) {
         observeDetail(messageObservations, out.receipt.id)
         set({ messages: [...state.messages, out.receipt as Message] })
       }
@@ -1101,7 +1127,7 @@ export const store = {
       }
       if (sameContext()) {
         const current = [...state.cards, ...state.projectCards].find(c => c.id === card.id)
-        actionFeedback(card.id, actionId !== 'recheck' && current?.status === 'action_required' ? 'unknown' : undefined, [], feedbackOwner)
+        actionFeedback(card.id, !actionId.startsWith('work.') && actionId !== 'recheck' && current?.status === 'action_required' ? 'unknown' : undefined, [], feedbackOwner)
       }
     } catch (e) {
       const rejected = /^4\d\d:/.test(String(e instanceof Error ? e.message : e))
@@ -1174,7 +1200,7 @@ export const store = {
         rdmExportAvailable: rdmExportReady(cmds),
         rdmRolesAvailable: rdmRolesReady(cmds),
         rdmMembersAvailable: rdmMembersReady(cmds),
-        rdmDocReviewAvailable: rdmDocReviewReady(cmds),
+        rdmDocReviewAvailable: rdmDutyReady(cmds),
         rdmPermMatrixAvailable: rdmPermMatrixReady(cmds),
       })
     } catch {
@@ -1327,6 +1353,7 @@ export const store = {
     setUI({ rightCollapsed: false, rightTab: 'work', inboxFilter: 'todo' })
   },
   openInbox(cardId?: string) {
+    if (state.workRecord) set({ workRecord: null })
     if (cardId) {
       const scope = state.cards.some(card => card.id === cardId) ? 'conv'
         : state.projectCards.some(card => card.id === cardId) ? 'project' : 'conv'
@@ -1335,6 +1362,24 @@ export const store = {
     setUI({ rightCollapsed: false, rightTab: 'work', ...(cardId ? { inboxFilter: 'all' as const } : {}) })
     if (cardId) setTimeout(() => flashLocate('.right-panel', 'data-card-id', cardId), 60)
   },
+  openWorkRecord(card: ActivityCard) {
+    if (!card.sourceRunId || !card.conversationId || card.conversationId !== state.currentConvId || card.projectId !== state.currentProjectId) {
+      store.toast('请先打开这项工作所属的对话，再查看执行记录')
+      return
+    }
+    set({ workRecord: { cardId: card.id, runId: card.sourceRunId, conversationId: card.conversationId, title: card.title } })
+  },
+  closeWorkRecord() { set({ workRecord: null }) },
+  referenceWork(card: ActivityCard) {
+    if (card.projectId !== state.currentProjectId || card.conversationId !== state.currentConvId || !card.work?.result?.trim()) {
+      store.toast('请在这项工作所属的对话中引用结果')
+      return
+    }
+    set({ workReference: { cardId: card.id, resultVersion: card.work.resultVersion, title: card.title } })
+    if (card.work.resultVersion > card.work.readVersion) void store.cardAction(card, 'work.read', { resultVersion: card.work.resultVersion })
+    if (typeof document !== 'undefined') document.querySelector<HTMLTextAreaElement>('.input-row textarea')?.focus()
+  },
+  clearWorkReference() { set({ workReference: null }) },
   /** 左栏/收起轨的「文件」入口：打开第三栏文件入口（列表或既有预览）。 */
   openFiles() { setUI({ rightTab: 'files', rightCollapsed: false }) },
   // 卡→消息互定位另一半（D32）：从收件箱卡滚回产生它的对话消息。
@@ -1424,7 +1469,8 @@ auth.onIdentityChange(() => store.resetIdentity())
 function touchLive(_runId: string, mutate: (l: LiveState) => void, now = Date.now()): LiveState | null {
   if (state.runs.find(r => r.id === _runId)?.kind === 'subagent') return state.live
   if (state.live && state.live.runId !== _runId && !isTerminal(state.runs.find(r => r.id === state.live?.runId)?.status)) return state.live
-  const base = state.live ?? { runId: _runId, phase: 'thinking', items: [], agentNotes: {}, startedAt: now }
+  const base = state.live ?? { runId: _runId, phase: 'thinking', items: [], agentNotes: {},
+    startedAt: eventTime({ ts: state.runs.find(run => run.id === _runId)?.createdAt }, now) }
   const next: LiveState = { ...base, agentNotes: { ...base.agentNotes } }
   mutate(next)
   return next

src/styles.css

@@ -644,3 +644,7 @@ button { font-family: inherit; font-size: inherit; color: inherit; }
 .rdm-audit-err { display: flex; flex-direction: column; gap: 8px; }
 .rdm-audit-err-toggle { font-size: var(--fs-ui-caption); color: var(--text-dim); }
 .rdm-audit-err-raw { display: block; font-family: var(--mono); font-size: var(--fs-code); color: var(--text-dim); background: var(--bg-inset); border-radius: var(--radius-sm); padding: 8px 12px; white-space: pre-wrap; word-break: break-all; }
+.duty-matrix-wrap { overflow: auto; }
+.duty-matrix .duty-sticky { position: sticky; left: 0; background: var(--bg-panel); z-index: 1; }
+.duty-matrix thead th { position: sticky; top: 0; background: var(--bg-panel); z-index: 2; }
+.duty-cell select { font-size: var(--fs-ui-sm); color: var(--text); background: var(--bg-raised); border: 1px solid var(--border); border-radius: var(--radius-sm); }

test/conversation-work.test.ts

@@ -69,6 +69,29 @@ describe('conversation work reading', () => {
     expect(html).not.toContain('data-testid="input-status"')
   })
 
+  it('renders stable semantic timestamps on user and assistant messages', () => {
+    snapshot.state!.messages = [{ ...reply([{ type: 'text', text: '请整理材料' }]), id: 'user', role: 'user' }, reply([{ type: 'text', text: '材料已收到' }])]
+    const html = render()
+    expect(html.match(/<time class="message-timestamp"/g)).toHaveLength(2)
+    expect(html.match(/dateTime="2026-10-12T10:00:00.000Z"/g)).toHaveLength(2)
+    expect(html).toContain('title="2026/10/12')
+  })
+
+  it('announces unread work without inserting its full result into the chat', () => {
+    snapshot.state!.ui.rightCollapsed = false
+    snapshot.state!.cards = [card({ status: 'done', work: { result: 'background-result-full-text', resultVersion: 2, readVersion: 1 } })]
+    const html = render()
+    expect(html).toContain('1 项工作有新结果')
+    expect(html).not.toContain('background-result-full-text')
+  })
+
+  it('shows an explicit removable result reference without copying its content into the draft', () => {
+    snapshot.state!.workReference = { cardId: 'work', resultVersion: 2, title: '材料整理' }
+    const html = render()
+    expect(html).toContain('基于「材料整理」的第 2 版结果')
+    expect(html).toContain('aria-label="移除工作结果引用"')
+  })
+
   it('shows the current real work with the auxiliary pane closed', () => {
     snapshot.state!.cards = [card()]
     const html = render()

test/duty-draft.test.ts

@@ -0,0 +1,73 @@
+import { describe, expect, it } from 'vitest'
+import {
+  absorbServerDocs, applyCell, cellDuty, completeness, editCell, replacementNote, saveIssues, savePayload,
+  type DutyDocDraft,
+} from '../src/duties/draft'
+
+function doc(over: Partial<DutyDocDraft> = {}): DutyDocDraft {
+  return {
+    docId: 'd1', title: '需求', code: 'UR-1', typeKey: 'design', stage: 'BD',
+    dutyVersion: 3, activeRound: 0, legacySectionOverrides: 0, dirty: false,
+    author: 'alice', reviewers: ['bob'], approver: 'carol',
+    ...over,
+  }
+}
+
+describe('文档职责草稿', () => {
+  it('单元格由三权反推，三人视图读到同一份角色', () => {
+    const roles = { author: 'alice', reviewers: ['bob', 'dave'], approver: 'carol' }
+    expect(cellDuty(roles, 'alice')).toBe('author')
+    expect(cellDuty(roles, 'bob')).toBe('reviewer')
+    expect(cellDuty(roles, 'dave')).toBe('reviewer')
+    expect(cellDuty(roles, 'carol')).toBe('approver')
+    expect(cellDuty(roles, 'erin')).toBe('none')
+    expect(completeness(roles)).toEqual({ authors: 1, reviewers: 2, approvers: 1, conflicts: 0 })
+  })
+
+  it('替换编制前先记住原编制，并保证一人一责', () => {
+    const next = applyCell({ author: 'alice', reviewers: ['bob'], approver: 'carol' }, 'bob', 'author')
+    expect(next.replacedAuthor).toBe('alice')
+    expect(next.roles).toEqual({ author: 'bob', reviewers: [], approver: 'carol' })
+    expect(replacementNote({ author: 'alice', reviewers: ['bob'], approver: 'carol' }, 'bob', 'author')).toBe('将替换alice')
+  })
+
+  it('清掉唯一编制后允许留在草稿，但禁止保存', () => {
+    const cleared = editCell([doc()], 'd1', 'alice', 'none')
+    expect(cleared[0].author).toBe('')
+    expect(cleared[0].dirty).toBe(true)
+    expect(saveIssues(cleared[0])).toContain('需指定编制人')
+    expect(savePayload(cleared, false).issues.join(' ')).toContain('需指定编制人')
+  })
+
+  it('过期服务端页不覆盖未保存草稿', () => {
+    const dirty = doc({ author: 'erin', dirty: true, dutyVersion: 3 })
+    const absorbed = absorbServerDocs([dirty], [{
+      docId: 'd1', title: '需求', typeKey: 'design', dutyVersion: 4,
+    }], [{ docId: 'd1', owner: 'alice', duty: 'author' }, { docId: 'd1', owner: 'bob', duty: 'reviewer' }, { docId: 'd1', owner: 'carol', duty: 'approver' }])
+    expect(absorbed[0].author).toBe('erin')
+    expect(absorbed[0].dutyVersion).toBe(3)
+  })
+
+  it('写入结果未知时采用服务端版本，不再留着旧草稿重放', () => {
+    const dirty = doc({ author: 'erin', dirty: true, dutyVersion: 3 })
+    const absorbed = absorbServerDocs([dirty], [{
+      docId: 'd1', title: '需求', typeKey: 'design', dutyVersion: 4,
+    }], [
+      { docId: 'd1', owner: 'alice', duty: 'author' },
+      { docId: 'd1', owner: 'bob', duty: 'reviewer' },
+      { docId: 'd1', owner: 'carol', duty: 'approver' },
+    ], true)
+    expect(absorbed[0]).toMatchObject({ author: 'alice', dutyVersion: 4, dirty: false })
+  })
+
+  it('保存载荷是每份脏文档的完整目标，超过 20 份被拒绝', () => {
+    const many = Array.from({ length: 21 }, (_, index) => doc({ docId: `d${index}`, dirty: true }))
+    const blocked = savePayload(many, true)
+    expect(blocked.issues).toContain('一次保存最多 20 份文档')
+    const one = savePayload([doc({ dirty: true, activeRound: 2 })], true)
+    expect(one.docs[0]).toMatchObject({
+      docId: 'd1', author: 'alice', reviewers: ['bob'], approver: 'carol',
+      expectedDutyVersion: 3, confirmInvalidation: true,
+    })
+  })
+})

test/live.test.ts

@@ -195,6 +195,27 @@ it('retains collaboration notes from a child after the parent has replied', () =
   expect(parts.every(part => part.replaySource === 'agent')).toBe(true)
 })
 
+it('coalesces cumulative child updates without mixing tasks or erasing tool phases', () => {
+  const notes = [
+    ['one', '我来检索'], ['two', '核对第二份材料'], ['one', '我来检索一下材料'],
+    ['one', '调用 knowledge_search'], ['one', '根据检索结果，开始整理'],
+    ...Array.from({ length: 80 }, () => ['one', '根据检索结果，开始整理完整报告']),
+  ]
+  const events: StreamEvent[] = notes.map(([agentRun, note], seq) => ({
+    seq: seq + 1, type: 'agent.progress', payload: { agentRun, note }, runId: agentRun,
+    conversationId: 'c', ts: '2026-10-15T10:00:00Z', v: 1,
+  }))
+  expect(runEventsToTimeline(events, 'parent').map(part => part.text)).toEqual([
+    '协作进展：我来检索一下材料', '协作进展：核对第二份材料',
+    '协作进展：调用 knowledge_search', '协作进展：根据检索结果，开始整理完整报告',
+  ])
+})
+
+it('uses the stable run start time for the temporary assistant message', () => {
+  expect(liveToMessage(live({ startedAt: Date.parse('2026-10-15T10:00:00Z') })).createdAt)
+    .toBe('2026-10-15T10:00:00.000Z')
+})
+
 describe('livePhaseLabel', () => {
   it('names the current activity in Chinese', () => {
     let items: LiveItem[] = applyThinkingDelta([], '想', 0)

test/project-access.test.ts

@@ -56,7 +56,8 @@ describe('project command identity', () => {
   it.each(['archived', 'closed'])('preserves canonical member, permission and duty reads for a %s project', async state => {
     const historical = project('host-1', { 'rdm.projectId': 'domain-7', 'rdm.state': state })
     const commands = ['rdm.project.member.list', 'rdm.perm.check', 'rdm.perm.matrix',
-      'rdm.review.doc.status', 'rdm.duty.catalog', 'rdm.duty.get']
+      'rdm.review.doc.status', 'rdm.duty.catalog', 'rdm.duty.get',
+      'rdm.duty.matrix', 'rdm.duty.preview', 'rdm.duty.legacy.scan']
     for (const command of commands) await api.rdmProjectCommand(historical, command, { docId: 'doc-2' })
     expect(requests.map(r => ({ path: r.path, params: JSON.parse(String(r.init?.body)).params }))).toEqual([
       { path: '/api/commands/rdm.project.member.list', params: { projectId: 'domain-7', docId: 'doc-2' } },
@@ -65,13 +66,17 @@ describe('project command identity', () => {
       { path: '/api/commands/rdm.review.doc.status', params: { projectId: 'domain-7', docId: 'doc-2' } },
       { path: '/api/commands/rdm.duty.catalog', params: { projectId: 'domain-7', docId: 'doc-2' } },
       { path: '/api/commands/rdm.duty.get', params: { projectId: 'domain-7', docId: 'doc-2' } },
+      { path: '/api/commands/rdm.duty.matrix', params: { projectId: 'domain-7', docId: 'doc-2' } },
+      { path: '/api/commands/rdm.duty.preview', params: { projectId: 'domain-7', docId: 'doc-2' } },
+      { path: '/api/commands/rdm.duty.legacy.scan', params: { projectId: 'domain-7', docId: 'doc-2' } },
     ])
   })
 
   it.each(['archived', 'closed'])('still blocks project and document mutations for a %s project', async state => {
     const historical = project('host-1', { 'rdm.projectId': 'domain-7', 'rdm.state': state })
     for (const command of ['rdm.project.member.add', 'rdm.project.member.remove', 'rdm.project.member.setRole',
-      'rdm.review.assign.doc', 'rdm.review.doc.submit', 'rdm.review.doc.approve', 'rdm.review.doc.reject', 'rdm.review.doc.final']) {
+      'rdm.review.assign.doc', 'rdm.review.assign.doc.batch', 'rdm.duty.legacy.apply',
+      'rdm.review.doc.submit', 'rdm.review.doc.approve', 'rdm.review.doc.reject', 'rdm.review.doc.final']) {
       await expect(api.rdmProjectCommand(historical, command)).rejects.toThrow()
     }
     expect(requests).toEqual([])

test/rdm-management.test.ts

@@ -3,8 +3,8 @@
 //（未登录/请求失败/null）一律视为未就绪（fail-closed），普通基座不出现 RDM 页面。
 import { describe, expect, it } from 'vitest'
 import {
-  RDM_ROLES_COMMANDS, RDM_MEMBER_COMMANDS, RDM_DOC_REVIEW_COMMANDS, ROLE_ACTIONS,
-  rdmRolesReady, rdmMembersReady, rdmDocReviewReady,
+  RDM_ROLES_COMMANDS, RDM_MEMBER_COMMANDS, RDM_DUTY_COMMANDS, ROLE_ACTIONS,
+  rdmRolesReady, rdmMembersReady, rdmDutyReady, dutyMatrixPayload, dutyPreviewPayload,
   roleCreatePayload, roleActionPayload, roleAssignPayload, roleDisablePayload,
   memberAddPayload, memberRemovePayload, assignDocDutiesPayload,
   docSubmitPayload, docApprovePayload, docRejectPayload, docFinalPayload, docStatusPayload,
@@ -19,19 +19,19 @@ describe('RDM 页面能力门控', () => {
   it('命令齐备且 enabled 才就绪', () => {
     expect(rdmRolesReady(all(RDM_ROLES_COMMANDS))).toBe(true)
     expect(rdmMembersReady(all(RDM_MEMBER_COMMANDS))).toBe(true)
-    expect(rdmDocReviewReady(all(RDM_DOC_REVIEW_COMMANDS))).toBe(true)
+    expect(rdmDutyReady(all(RDM_DUTY_COMMANDS))).toBe(true)
   })
   it('缺一命令即未就绪', () => {
     const drop = (ids: readonly string[], skip: string) => ids.filter(i => i !== skip).map(id => cmd(id))
     expect(rdmRolesReady(drop(RDM_ROLES_COMMANDS, 'rdm.role.list'))).toBe(false)
     expect(rdmMembersReady(drop(RDM_MEMBER_COMMANDS, 'rdm.project.member.add'))).toBe(false)
-    expect(rdmDocReviewReady(drop(RDM_DOC_REVIEW_COMMANDS, 'rdm.review.doc.final'))).toBe(false)
+    expect(rdmDutyReady(drop(RDM_DUTY_COMMANDS, 'rdm.duty.matrix'))).toBe(false)
   })
   it('disabled / null / 非数组 / 请求失败均未就绪（fail-closed）', () => {
     expect(rdmRolesReady(RDM_ROLES_COMMANDS.map(id => cmd(id, false)))).toBe(false)
     expect(rdmRolesReady(null)).toBe(false)
     expect(rdmMembersReady(undefined)).toBe(false)
-    expect(rdmDocReviewReady('not-array' as unknown as never)).toBe(false)
+    expect(rdmDutyReady('not-array' as unknown as never)).toBe(false)
   })
 })
 
@@ -68,6 +68,9 @@ describe('命令载荷构造（身份只经认证会话——载荷不含任何
     expect(docFinalPayload('p1', 'd1')).toEqual({ projectId: 'p1', docId: 'd1' })
     expect(docFinalPayload('p1', 'd1', 3)).toEqual({ projectId: 'p1', docId: 'd1', round: 3 })
     expect(docStatusPayload('p1', 'd1')).toEqual({ projectId: 'p1', docId: 'd1' })
+    expect(dutyMatrixPayload('p1', { view: 'matrix', docLimit: 10 })).toEqual({ projectId: 'p1', view: 'matrix', docLimit: 10 })
+    expect(dutyPreviewPayload('p1', [{ docId: 'd1', author: 'alice', reviewers: ['bob'], approver: 'dave', expectedDutyVersion: 2, confirmInvalidation: true }]))
+      .toEqual({ projectId: 'p1', docs: [{ docId: 'd1', author: 'alice', reviewers: ['bob'], approver: 'dave', expectedDutyVersion: 2, confirmInvalidation: true }] })
   })
   it('审阅人 CSV 解析：去空白、去空项、保序去重', () => {
     expect(parseReviewers('bob, carol,,bob')).toEqual(['bob', 'carol'])

test/run-events.test.ts

@@ -0,0 +1,26 @@
+import { afterEach, expect, it, vi } from 'vitest'
+import { api } from '../src/api'
+import { loadRunEvents } from '../src/runEvents'
+import type { StreamEvent } from '../src/contracts'
+
+afterEach(() => vi.restoreAllMocks())
+function event(seq: number): StreamEvent {
+  return { seq, type: 'message.delta', runId: 'run', conversationId: 'conversation', ts: '2026-10-15T07:00:00Z', v: 1, payload: { index: 0, text: `已保存输出${seq}` } }
+}
+
+it('reads a complete saved record across the 500-event boundary in order', async () => {
+  const query = vi.spyOn(api, 'runEventsPage')
+    .mockResolvedValueOnce({ events: Array.from({ length: 500 }, (_, i) => event(i + 1)) })
+    .mockResolvedValueOnce({ events: [event(501), event(502)] })
+  const controller = new AbortController()
+  const result = await loadRunEvents('conversation', 'run', controller.signal)
+  expect(result.map(item => item.seq)).toEqual(Array.from({ length: 502 }, (_, i) => i + 1))
+  expect(query).toHaveBeenNthCalledWith(1, 'conversation', 'run', 0, controller.signal)
+  expect(query).toHaveBeenNthCalledWith(2, 'conversation', 'run', 500, controller.signal)
+})
+
+it('stops an invalid nonadvancing record cursor instead of fetching forever', async () => {
+  const query = vi.spyOn(api, 'runEventsPage').mockResolvedValue({ events: Array.from({ length: 500 }, (_, i) => event(i + 1)) })
+  await expect(loadRunEvents('conversation', 'run', new AbortController().signal)).rejects.toThrow('cursor did not advance')
+  expect(query).toHaveBeenCalledTimes(2)
+})

test/scrollsync.test.ts

@@ -1,16 +0,0 @@
-import { describe, expect, it } from 'vitest'
-import { scrollRatio, scrollTopForRatio } from '../src/scrollsync'
-
-describe('scrollsync', () => {
-  it('没有溢出时不同步', () => {
-    expect(scrollRatio({ scrollTop: 0, scrollHeight: 100, clientHeight: 100 })).toBeNull()
-    expect(scrollTopForRatio({ scrollHeight: 80, clientHeight: 80 }, 0.5)).toBeNull()
-  })
-
-  it('按可滚动范围的比例映射，并夹在 0 到 1', () => {
-    expect(scrollRatio({ scrollTop: 50, scrollHeight: 200, clientHeight: 100 })).toBe(0.5)
-    expect(scrollTopForRatio({ scrollHeight: 300, clientHeight: 100 }, 0.5)).toBe(100)
-    expect(scrollTopForRatio({ scrollHeight: 300, clientHeight: 100 }, 2)).toBe(200)
-    expect(scrollTopForRatio({ scrollHeight: 300, clientHeight: 100 }, -1)).toBe(0)
-  })
-})

test/work-api.test.ts

@@ -0,0 +1,24 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { api } from '../src/api'
+import { auth } from '../src/auth'
+
+afterEach(() => vi.restoreAllMocks())
+
+describe('versioned work request bodies', () => {
+  it('preserves multiple selections and free input on the card action endpoint', async () => {
+    const request = vi.spyOn(auth, 'fetch').mockResolvedValue(new Response(JSON.stringify({ card: { id: 'task' } })))
+    await api.cardAction('task', 'work.submit', { resultVersion: 3, selectedIds: ['summary', 'parameters'], freeText: '请说明依据' })
+    const [url, options] = request.mock.calls[0]
+    expect(url).toBe('/api/cards/task/actions/work.submit')
+    expect(JSON.parse(String(options?.body))).toEqual({ resultVersion: 3, selectedIds: ['summary', 'parameters'], freeText: '请说明依据' })
+  })
+
+  it('sends a result identity separately from the user message and discards client display metadata', async () => {
+    const request = vi.spyOn(auth, 'fetch').mockResolvedValue(new Response(JSON.stringify({ message: { id: 'reply' } })))
+    const reference = { cardId: 'task', resultVersion: 3, title: '说明书整理', result: 'must-not-be-client-context' }
+    await api.sendMessage('conversation', '比较这些重点', [], 'request-1', reference)
+    expect(JSON.parse(String(request.mock.calls[0][1]?.body))).toEqual({
+      text: '比较这些重点', attachmentIds: [], requestId: 'request-1', taskRef: { cardId: 'task', resultVersion: 3 },
+    })
+  })
+})

test/work-state.test.ts

@@ -43,7 +43,42 @@ beforeEach(async () => {
 })
 afterEach(() => { vi.useRealTimers(); vi.restoreAllMocks(); vi.unstubAllGlobals() })
 
+it('preserves rejected referenced input without retrying it or blocking later queued chat', async () => {
+  const reference = { cardId: 'saved-result', resultVersion: 1, title: '整理结果' }
+  const submit = vi.spyOn(api, 'sendMessage').mockRejectedValueOnce(new Error('400: reference no longer valid'))
+    .mockResolvedValue({ message: { id: 'accepted', conversationId: 'a', role: 'user', parts: [], createdAt: '' } })
+  expect(await store.sendMessage('请解释重点', ['saved-upload'], 'retry-safe-id', reference)).toBe('rejected')
+  const failed = store.getState().outbox[0]
+  expect(failed).toMatchObject({ id: 'retry-safe-id', text: '请解释重点', attachmentIds: ['saved-upload'], taskRef: reference })
+  expect(failed.deliveryError).toBeTruthy()
+  await store.flushOutbox()
+  expect(submit).toHaveBeenCalledTimes(1)
+  store.enqueueOutbox('先讨论其他事情', [], [])
+  await store.flushOutbox()
+  expect(submit).toHaveBeenCalledTimes(2)
+  expect(store.getState().outbox).toHaveLength(1)
+  store.clearOutboxReference(failed.id)
+  await store.sendOutboxNow(failed.id)
+  expect(submit).toHaveBeenLastCalledWith('a', '请解释重点', ['saved-upload'], 'retry-safe-id')
+  expect(store.getState().outbox).toEqual([])
+})
+
 describe('work projection ordering and context', () => {
+  it('keeps an earlier background task out of a newer foreground process', async () => {
+    const current: Run = { id: 'new-topic', conversationId: 'a', projectId: 'p', kind: 'conversation', status: 'running', createdAt: '' }
+    const child: Run = { ...current, id: 'old-child', kind: 'subagent', parentRunId: 'old-topic' }
+    vi.mocked(api.conversationDetail).mockResolvedValue(detail('a', [current, child]))
+    await store.openConversation('a')
+    store.applyEvent(event(1, 'message.delta', { index: 0, text: '正在回答新的问题' }, current.id))
+    store.applyEvent(event(2, 'agent.progress', { agentRun: child.id, note: '旧材料仍在整理' }, child.id))
+    expect(store.getState().live?.agentNotes[child.id]).toBeUndefined()
+    store.applyEvent(event(3, 'agent.spawn', { agentRun: 'new-child', name: '新任务', task: '核对新问题' }, current.id))
+    store.applyEvent(event(4, 'agent.progress', { agentRun: 'new-child', note: '核对当前问题' }, 'new-child'))
+    expect(store.getState().live?.agentNotes['new-child']).toBe('核对当前问题')
+    store.applyEvent(event(5, 'agent.result', { agentRun: child.id, summary: '旧材料已整理' }, child.id))
+    expect(store.getState().live?.runId).toBe(current.id)
+    expect(store.getState().live?.agentNotes[child.id]).toBeUndefined()
+  })
   it('settles foreground completion and queued input when background events overtake its detail response', async () => {
     vi.useFakeTimers()
     const run: Run = { id: 'front', conversationId: 'a', projectId: 'p', kind: 'conversation', status: 'running', createdAt: '' }
@@ -248,6 +283,70 @@ describe('work projection ordering and context', () => {
 })
 
 describe('shared action feedback', () => {
+  it('sends a versioned optional choice once and keeps it out of the conversation', async () => {
+    const task = { ...card('work-choice', 'done'), work: { resultVersion: 2, readVersion: 0,
+      result: '完整材料结果', decision: { mode: 'multiple' as const, state: 'open' as const } } }
+    store.upsertCard(task)
+    const response = deferred<Awaited<ReturnType<typeof api.cardAction>>>()
+    const action = vi.spyOn(api, 'cardAction').mockReturnValue(response.promise)
+    const payload = { resultVersion: 2, selectedIds: ['summary', 'facts'], freeText: '请保留来源' }
+    const pending = store.cardAction(task, 'work.submit', payload)
+    await store.cardAction(task, 'work.submit', payload)
+    expect(action).toHaveBeenCalledOnce()
+    expect(action).toHaveBeenCalledWith(task.id, 'work.submit', payload)
+    response.resolve({ card: { ...task, work: { ...task.work, decision: { ...task.work.decision, state: 'submitted' } } },
+      receipt: { id: 'unexpected-work-receipt', conversationId: 'a', role: 'assistant', parts: [], createdAt: '' } })
+    await pending
+    expect(store.getState().messages).toEqual([])
+    expect(store.getState().cardActionStates[task.id]).toBeUndefined()
+    expect(store.getState().cards.find(c => c.id === task.id)?.work?.decision?.state).toBe('submitted')
+  })
+
+  it('does not unlock an uncertain optional submission merely because its result is done', async () => {
+    const task = { ...card('work-unknown', 'done'), work: { resultVersion: 1, readVersion: 0,
+      result: '结果', decision: { mode: 'single' as const, state: 'open' as const } } }
+    store.upsertCard(task)
+    vi.spyOn(api, 'cardAction').mockRejectedValue(new TypeError('connection lost'))
+    vi.mocked(api.listCards).mockResolvedValue([task])
+    await store.cardAction(task, 'work.submit', { resultVersion: 1, selectedIds: ['summary'] })
+    expect(store.getState().cardActionStates[task.id]).toBe('unknown')
+    store.upsertCard({ ...task, work: { ...task.work, decision: { ...task.work.decision, state: 'submitted' } } })
+    expect(store.getState().cardActionStates[task.id]).toBeUndefined()
+  })
+
+  it('settles successful metadata actions while an ordinary card still needs action', async () => {
+    const task = { ...card('work-read', 'action_required'), work: { resultVersion: 1, readVersion: 0 } }
+    store.upsertCard(task)
+    vi.spyOn(api, 'cardAction').mockResolvedValue({ card: { ...task, work: { ...task.work, readVersion: 1 } } })
+    await store.cardAction(task, 'work.read', { resultVersion: 1 })
+    expect(store.getState().cardActionStates[task.id]).toBeUndefined()
+  })
+
+  it('retains an explicit result reference across a queued send without adding it to chat text', async () => {
+    const task = { ...card('work-ref', 'done'), work: { result: '完整结果', resultVersion: 3, readVersion: 3 } }
+    store.upsertCard(task)
+    store.referenceWork(task)
+    const reference = store.getState().workReference!
+    store.enqueueOutbox('比较重点', [], [], reference)
+    store.clearWorkReference()
+    expect(store.getState().outbox[0].taskRef).toEqual({ cardId: 'work-ref', resultVersion: 3, title: '整理材料' })
+    const send = vi.spyOn(api, 'sendMessage').mockResolvedValue({ message: { id: 'queued-ref', conversationId: 'a', role: 'user', parts: [], createdAt: '' } })
+    await store.flushOutbox()
+    expect(send).toHaveBeenCalledWith('a', '比较重点', [], expect.any(String), reference)
+    expect(store.getState().workReference).toBeNull()
+  })
+
+  it('clears record selection and result reference when navigating to another conversation', async () => {
+    const task = { ...card('work-record', 'done'), sourceRunId: 'child', work: { result: '完整结果', resultVersion: 1, readVersion: 1 } }
+    store.upsertCard(task)
+    store.openWorkRecord(task)
+    store.referenceWork(task)
+    expect(store.getState().workRecord?.runId).toBe('child')
+    await store.openConversation('b')
+    expect(store.getState().workRecord).toBeNull()
+    expect(store.getState().workReference).toBeNull()
+  })
+
   it.each(['card', 'hitl'] as const)('clears its definite rejected %s action after A to B navigation', async kind => {
     const confirm = { ...card(`reject-${kind}`, 'action_required'), kind: 'confirm' as const,
       ...(kind === 'hitl' ? { body: [{ type: 'kv' as const, kv: [['来源', `hitl:reject-${kind}`]] as [string, string][] }] } : {}) }