落地系统异常：大模型/TMS/建群故障停住本单并告警，后台可重试失败步骤。

Co-authored-by: Cursor <cursoragent@cursor.com>

inquiry-agent/agent/policy/air_group_ops.py

@@ -586,6 +586,14 @@ def apply_air_lock(
     if not is_airline(flow, sender_id):
         send_group_text(group_client_of(flow), chat_id, copy.air_airline_only_cabin())
         return "not_airline"
+    from agent.policy.system_exception import reply_paused_ticket, ticket_is_paused
+
+    if ticket_is_paused(ticket):
+        reply_paused_ticket(
+            ticket=ticket,
+            reply=lambda text: send_group_text(group_client_of(flow), chat_id, text),
+        )
+        return "system_exception_paused"
     no = ticket_no(ticket)
     name = operator_name(flow, sender_id)
     quote = ticket_view(ticket).get("quote") or {}
@@ -612,24 +620,43 @@ def apply_air_lock(
             copy.air_lock_fail(work_order_no=no, operator=name, reason="主账未开放锁舱"),
         )
         return "lock_unavailable"
-    out = locker(
-        work_order_no=no,
-        option_no=picked,
-        sender_id=sender_id,
-        operator_name=name,
-        instruction_text=instruction,
-    ) or {}
-    if not out.get("ok"):
-        send_group_text(
-            group_client_of(flow),
-            chat_id,
-            copy.air_lock_fail(
-                work_order_no=no,
-                operator=name,
-                reason=str(out.get("failReason") or out.get("error") or "锁舱失败"),
-            ),
+    from agent.policy.system_exception import (
+        STEP_TMS_CABIN,
+        TYPE_TMS,
+        SystemExceptionEvent,
+        call_with_retries,
+        confirm_system_exception,
+    )
+
+    out = call_with_retries(
+        lambda: locker(
+            work_order_no=no,
+            option_no=picked,
+            sender_id=sender_id,
+            operator_name=name,
+            instruction_text=instruction,
         )
-        return "lock_fail"
+        or {},
+        is_ok=lambda x: bool((x or {}).get("ok")),
+    )
+    if not out.get("ok"):
+        confirm_system_exception(
+            event=SystemExceptionEvent(
+                exception_type=TYPE_TMS,
+                step=STEP_TMS_CABIN,
+                reason="空运锁舱接口调用失败",
+                service="空运锁舱",
+                error_code=str(out.get("failReason") or out.get("error") or "LOCK_FAIL"),
+                work_order_no=no,
+                ticket_status=ticket_status(ticket),
+                conversation_kind="group",
+                conversation_target=chat_id,
+                extra={"option_no": picked, "instruction": instruction, "sender_id": sender_id},
+            ),
+            ledger=flow.ledger,
+            reply=lambda text: send_group_text(group_client_of(flow), chat_id, text),
+        )
+        return "system_exception"
     exec_no = str(out.get("lockId") or out.get("tmsRequestId") or "").strip()
     quote_no = str(out.get("quoteId") or quote_id).strip()
     flow.ledger.patch_collab_facts(
@@ -671,6 +698,14 @@ def apply_air_release(
     if not is_airline(flow, sender_id):
         send_group_text(group_client_of(flow), chat_id, copy.air_airline_only_cabin())
         return "not_airline"
+    from agent.policy.system_exception import reply_paused_ticket, ticket_is_paused
+
+    if ticket_is_paused(ticket):
+        reply_paused_ticket(
+            ticket=ticket,
+            reply=lambda text: send_group_text(group_client_of(flow), chat_id, text),
+        )
+        return "system_exception_paused"
     no = ticket_no(ticket)
     if ticket_status(ticket) == "已成交":
         send_group_text(group_client_of(flow), chat_id, copy.air_release_deal_blocked(no))
@@ -689,24 +724,43 @@ def apply_air_release(
             copy.air_release_fail(work_order_no=no, operator=name, reason="主账未开放释放"),
         )
         return "release_unavailable"
-    out = releaser(
-        work_order_no=no,
-        lock_id=lock_id,
-        sender_id=sender_id,
-        operator_name=name,
-        instruction_text=instruction,
-    ) or {}
-    if not out.get("ok"):
-        send_group_text(
-            group_client_of(flow),
-            chat_id,
-            copy.air_release_fail(
-                work_order_no=no,
-                operator=name,
-                reason=str(out.get("failReason") or out.get("error") or "释放失败"),
-            ),
+    from agent.policy.system_exception import (
+        STEP_TMS_CABIN,
+        TYPE_TMS,
+        SystemExceptionEvent,
+        call_with_retries,
+        confirm_system_exception,
+    )
+
+    out = call_with_retries(
+        lambda: releaser(
+            work_order_no=no,
+            lock_id=lock_id,
+            sender_id=sender_id,
+            operator_name=name,
+            instruction_text=instruction,
         )
-        return "release_fail"
+        or {},
+        is_ok=lambda x: bool((x or {}).get("ok")),
+    )
+    if not out.get("ok"):
+        confirm_system_exception(
+            event=SystemExceptionEvent(
+                exception_type=TYPE_TMS,
+                step=STEP_TMS_CABIN,
+                reason="空运释放舱位接口调用失败",
+                service="空运舱位",
+                error_code=str(out.get("failReason") or out.get("error") or "RELEASE_FAIL"),
+                work_order_no=no,
+                ticket_status=ticket_status(ticket),
+                conversation_kind="group",
+                conversation_target=chat_id,
+                extra={"lock_id": lock_id, "instruction": instruction, "sender_id": sender_id},
+            ),
+            ledger=flow.ledger,
+            reply=lambda text: send_group_text(group_client_of(flow), chat_id, text),
+        )
+        return "system_exception"
     exec_no = str(out.get("releaseId") or out.get("tmsRequestId") or lock_id).strip()
     send_group_text(
         group_client_of(flow),