oasis_test_v2 0.2.1 → 2.0.0

package/dist/index.js

@@ -820,6 +820,16 @@ var init_parse_extra_args = __esm({
   }
 });
 
+// ../contract/src/daemon-package.ts
+var DAEMON_NPM_PACKAGE, LEGACY_DAEMON_NPM_PACKAGE;
+var init_daemon_package = __esm({
+  "../contract/src/daemon-package.ts"() {
+    "use strict";
+    DAEMON_NPM_PACKAGE = "oasis_test_v2";
+    LEGACY_DAEMON_NPM_PACKAGE = "oasis_test";
+  }
+});
+
 // ../contract/src/daemon-protocol.ts
 var SESSION_LIMITS;
 var init_daemon_protocol = __esm({
@@ -1529,6 +1539,7 @@ var init_src = __esm({
     init_runtime();
     init_handle_passthrough();
     init_parse_extra_args();
+    init_daemon_package();
     init_daemon_protocol();
     init_link_windows();
     init_registry();
@@ -3822,6 +3833,11 @@ function resolveNodeReviewers(args) {
     if (reviewers.some((x2) => x2.reviewerActorId === r.actor && x2.reviewGroup === reviewGroup)) continue;
     reviewers.push({ reviewerActorId: r.actor, reviewGroup, source: r.source });
   }
+  for (const actor of args.closureGate ?? []) {
+    const group = `closure:${actor}`;
+    if (reviewers.some((x2) => x2.reviewerActorId === actor && x2.reviewGroup === group)) continue;
+    reviewers.push({ reviewerActorId: actor, reviewGroup: group, source: "closure" });
+  }
   return { reviewers, staffingIssues };
 }
 function auditReviewGateStaffing(kernel) {
@@ -8281,6 +8297,40 @@ var init_state = __esm({
   }
 });
 
+// ../engine/src/closure-gate.ts
+function engineClosureSlot(state) {
+  const live = state.liveNodes();
+  const report = live.find((n) => n.type === DELIVERY_SUMMARY_TYPE);
+  if (report) return report;
+  const business = live.filter((n) => n.type !== BRIEF_TYPE && n.type !== DELIVERY_SUMMARY_TYPE);
+  if (business.length === 1) return business[0];
+  return null;
+}
+function engineWorkorderHumanOwner(state) {
+  const brief = state.liveNodes().find((n) => n.type === BRIEF_TYPE);
+  const owner = brief?.assigneeActorId;
+  if (!owner || !owner.startsWith(HUMAN_ACTOR_PREFIX)) return null;
+  return owner;
+}
+function engineHumanGateActors(state, nodeId) {
+  const slot = engineClosureSlot(state);
+  if (!slot || slot.id !== nodeId) return [];
+  const owner = engineWorkorderHumanOwner(state);
+  return owner === null ? [] : [owner];
+}
+function closureReviewGroup(actor) {
+  return `closure:${actor}`;
+}
+var DELIVERY_SUMMARY_TYPE, BRIEF_TYPE, HUMAN_ACTOR_PREFIX;
+var init_closure_gate2 = __esm({
+  "../engine/src/closure-gate.ts"() {
+    "use strict";
+    DELIVERY_SUMMARY_TYPE = "delivery-summary";
+    BRIEF_TYPE = "brief";
+    HUMAN_ACTOR_PREFIX = "actor:human:";
+  }
+});
+
 // ../engine/src/letters.ts
 function repliesSorted(state, issueId) {
   return [...state.repliesOf(issueId)].sort((a, b2) => a.createdAt.localeCompare(b2.createdAt));
@@ -8475,6 +8525,21 @@ function scan(state, ctx) {
     const candidate = lsDelivery && ls.conclusion != null && ls.acceptanceState !== "accepted" && ls.acceptanceState !== "rejected" && node2.latestAcceptId !== ls.id ? ls : null;
     const rejectedDelivery = lsDelivery && ls.conclusion != null && ls.acceptanceState === "rejected" && node2.latestAcceptId !== ls.id ? ls : null;
     if (candidate) {
+      const closureActors = engineHumanGateActors(state, node2.id);
+      if (closureActors.length > 0 && needsClosureRequirementUpdate(state, node2.id, closureActors)) {
+        events.push({
+          kind: "plan.update_review_requirements",
+          workorderId: state.workorder.id,
+          nodeId: node2.id,
+          // ★ 合并写：保留 source ∈ {type, manual, model} 的原有行，覆写 source='closure' 的行。
+          //   `plan.update_review_requirements` handler 是**全量替换**（killNodeReviews + replaceRequirements），
+          //   所以必须把手动 / 类型 / 模型来源的行一并带上——漏一条即误删协调者手动指派的审核人。
+          //   killNodeReviews 会杀本节点在跑的评审：candidate 分支进入时该节点尚未派出评审（reqs 为空
+          //   or 只含 closure 之外的组），本轮内 kill 无影响。
+          reviewers: mergedClosureRequirements(state, node2.id, closureActors)
+        });
+        continue;
+      }
       const reqs = state.requirementsOf(node2.id);
       if (reqs.length === 0) {
         if (acceptBlock(state, candidate.id) !== null) continue;
@@ -9013,6 +9078,21 @@ function checkTerminated(state) {
   }
   return live.every((n) => n.latestAcceptId !== null && (n.latestAcceptId === n.latestWorkId || n.latestAcceptId === n.latestProposedWorkId));
 }
+function needsClosureRequirementUpdate(state, nodeId, closureActors) {
+  const existing = state.requirementsOf(nodeId).filter((r) => r.source === "closure");
+  const have = new Set(existing.map((r) => r.reviewerActorId));
+  if (have.size !== closureActors.length) return true;
+  return !closureActors.every((a) => have.has(a));
+}
+function mergedClosureRequirements(state, nodeId, closureActors) {
+  const kept = state.requirementsOf(nodeId).filter((r) => r.source !== "closure").map((r) => ({ reviewerActorId: r.reviewerActorId, reviewGroup: r.reviewGroup, source: r.source }));
+  const closureRows = closureActors.map((actor) => ({
+    reviewerActorId: actor,
+    reviewGroup: closureReviewGroup(actor),
+    source: "closure"
+  }));
+  return [...kept, ...closureRows];
+}
 function isEdgeInputUnobtainable(state, edge) {
   const upstream = state.node(edge.fromNodeId);
   return !!upstream?.cancelledAt && !upstream.latestAcceptId;
@@ -9126,6 +9206,7 @@ var init_activate = __esm({
     init_src3();
     init_src2();
     init_model();
+    init_closure_gate2();
     init_letters();
     init_model();
     init_views2();
@@ -9202,7 +9283,9 @@ CREATE TABLE IF NOT EXISTS ${q2}.review_requirements (
   node_id           text NOT NULL,
   reviewer_actor_id text NOT NULL,
   review_group      text NOT NULL,
-  source            text NOT NULL CHECK (source IN ('type','manual','model')),
+  -- \u2605 'closure' \u7531 scan \u5728\u7ED3\u6848\u4F4D\u6536\u53E3\u90A3\u4E00\u523B\u5199\u5165\uFF08{@link ../../core/src/closure-gate.ts}\uFF09\uFF0C\u662F**\u7CFB\u7EDF\u6D3E\u751F**\u7684
+  --   \u7ED3\u6848\u4EBA\u95F8\uFF1B\u4E0E manual \u5206\u5BB6\uFF0C\u91CD\u7B97\u65F6\u53EA\u8986\u76D6 source='closure' \u7684\u884C\uFF0C\u4E00\u6761 manual \u90FD\u4E0D\u52A8\u3002
+  source            text NOT NULL CHECK (source IN ('type','manual','model','closure')),
   assigned_by       text NOT NULL,
   assigned_at       timestamptz NOT NULL,
   latest_review_id   text,
@@ -9412,6 +9495,11 @@ CREATE TABLE IF NOT EXISTS ${q2}.event_handler_log (
 );
 
 -- \u2500\u2500 \u8FC1\u79FB\uFF1A\u65E2\u6709\u90E8\u7F72\u7684\u5217\u589E\u91CF\uFF08CREATE TABLE IF NOT EXISTS \u4E0D\u52A0\u5217\uFF0C\u8FD9\u91CC\u8865\uFF09\u2500\u2500
+-- \u2605 review_requirements.source \u6269\u4E3A\u56DB\u503C\uFF08+'closure'\uFF09\uFF1A\u7ED3\u6848\u4EBA\u95F8\u7531 scan \u5728\u6536\u53E3\u90A3\u4E00\u523B\u5199\u5165\uFF0C\u4E0E manual \u5206\u5BB6\u3002
+--   \u5199\u6CD5\u4E0E\u4E0B\u65B9 works_lane_check \u540C\u6B3E\uFF08\u5148\u5220\u540E\u52A0\uFF0C\u6210\u5BF9\u5E42\u7B49\uFF09\u3002
+ALTER TABLE ${q2}.review_requirements DROP CONSTRAINT IF EXISTS review_requirements_source_check;
+ALTER TABLE ${q2}.review_requirements ADD CONSTRAINT review_requirements_source_check
+  CHECK (source IN ('type','manual','model','closure'));
 ALTER TABLE ${q2}.works   ADD COLUMN IF NOT EXISTS retry_at timestamptz;
 ALTER TABLE ${q2}.reviews ADD COLUMN IF NOT EXISTS retry_at timestamptz;
 ALTER TABLE ${q2}.works   ADD COLUMN IF NOT EXISTS status text;
@@ -9512,10 +9600,9 @@ ALTER TABLE ${q2}.workflow_nodes ADD COLUMN IF NOT EXISTS latest_proposed_work_i
 DROP VIEW IF EXISTS ${q2}.work_view;
 DROP VIEW IF EXISTS ${q2}.review_view;
 DROP VIEW IF EXISTS ${q2}.node_view;
-DROP VIEW IF EXISTS ${q2}.workorder_view;
 -- ADR 0308\uFF1A\u5220\u9664\u672A\u88AB\u4E1A\u52A1\u8BFB\u53D6\u7684\u5DE5\u5355\u5143\u6570\u636E\u526F\u672C\u3002\u771F\u5B9E\u4FE1\u606F\u4F4D\u4E8E\u8282\u70B9\u6216\u9879\u76EE\u7ED1\u5B9A\u3002
--- \u5148\u68C0\u67E5\u5168\u90E8\u65E7\u5217\uFF0C\u518D\u5220\u5217\uFF1B\u9047\u5230\u975E\u7A7A\u5386\u53F2\u503C\u5C31\u505C\u6B62\uFF0C\u7981\u6B62\u731C\u6D4B\u6839\u8282\u70B9\u5E76\u8986\u76D6\u771F\u5B9E\u6765\u6E90\u3002
--- \u4E0D\u7528 CASCADE\uFF1A\u4ED3\u5E93\u5916\u7684\u4F9D\u8D56\u89C6\u56FE\u5FC5\u987B\u663E\u5F0F\u5904\u7406\u3002DDL \u5355\u6B21 query \u5185\u539F\u5B50\u56DE\u6EDA\u3002
+-- ADR 0512\uFF1A\u6E05\u7406\u4E0D\u963B\u65AD\u5B58\u91CF\u5E93\u542F\u52A8\u3002\u975E\u7A7A\u65E7\u503C\u6216\u5916\u90E8\u4F9D\u8D56\u5B58\u5728\u65F6\u4FDD\u7559\u6574\u7EC4\u65E7\u5217\u4E0E\u65E7\u89C6\u56FE\uFF0C
+-- \u7B49\u663E\u5F0F\u6838\u5BF9\u5F52\u6863\u540E\u518D\u6E05\u7406\uFF1B\u4E0D\u731C\u6D4B\u771F\u5B9E\u6765\u6E90\uFF0C\u4E0D\u6E05\u7A7A\u5386\u53F2\u503C\uFF0C\u4E0D\u7528 CASCADE\u3002
 DO $$
 DECLARE
   column_name_to_drop text;
@@ -9534,18 +9621,25 @@ BEGIN
         CASE WHEN column_name_to_drop = 'acceptance_criteria' THEN '[]' ELSE '' END
       ) INTO has_data;
       IF has_data THEN
-        RAISE EXCEPTION 'workorders.% contains legacy data; reconcile and archive it before migrating (ADR 0308)', column_name_to_drop;
+        RAISE WARNING 'Retaining legacy workorder metadata in schema %: column % contains data; reconcile and archive before cleanup (ADR 0512)', ${lit}, column_name_to_drop;
+        RETURN;
       END IF;
     END IF;
   END LOOP;
+  BEGIN
+    DROP VIEW IF EXISTS ${q2}.workorder_view;
+    ALTER TABLE ${q2}.workorders
+      DROP COLUMN IF EXISTS project_id,
+      DROP COLUMN IF EXISTS description,
+      DROP COLUMN IF EXISTS goal,
+      DROP COLUMN IF EXISTS acceptance_criteria,
+      DROP COLUMN IF EXISTS manager_actor_id,
+      DROP COLUMN IF EXISTS root_node_id;
+  EXCEPTION WHEN dependent_objects_still_exist THEN
+    -- \u5B50\u4E8B\u52A1\u6062\u590D\u521A\u624D\u5220\u9664\u7684\u81EA\u6709\u89C6\u56FE\u4E0E\u5217\uFF1B\u5916\u90E8\u6D88\u8D39\u8005\u4E0D\u4F1A\u88AB\u6E05\u7406\u987A\u5E26\u5220\u9664\u3002
+    RAISE WARNING 'Retaining legacy workorder metadata in schema %: external dependencies require reconciliation (ADR 0512)', ${lit};
+  END;
 END $$;
-ALTER TABLE ${q2}.workorders
-  DROP COLUMN IF EXISTS project_id,
-  DROP COLUMN IF EXISTS description,
-  DROP COLUMN IF EXISTS goal,
-  DROP COLUMN IF EXISTS acceptance_criteria,
-  DROP COLUMN IF EXISTS manager_actor_id,
-  DROP COLUMN IF EXISTS root_node_id;
 
 -- \u8C03\u5EA6\u5668\u5B8C\u7ED3\u6807\u8BB0\uFF08mark_done/unmark_done \u843D\u70B9\uFF0C2026-08-12\uFF09\u3002
 ALTER TABLE ${q2}.workorders ADD COLUMN IF NOT EXISTS done_at timestamptz;
@@ -9644,10 +9738,9 @@ LEFT JOIN ${q2}.works ls ON ls.id = n.latest_proposed_work_id;
 -- workorder_view \u5DF2\u4E0B\u7EBF\uFF08\u5DE5\u5355 1aa1f35b\uFF09\uFF1A\u5B83\u53EA\u989D\u5916\u7ED9\u51FA total_count / done_count \u4E24\u4E2A\u8FDB\u5EA6\u6570\uFF0C\u5168\u4ED3\u96F6\u6D88\u8D39\u65B9\uFF0C
 -- \u4E14\u53E3\u5F84\u4E0E\u540E\u7AEF\u771F\u6E90\uFF08server summaryOfWorkspace \u7684 progressExcludingBrief\uFF09\u4E0D\u540C\u2014\u2014total \u53EA\u6392 cancelled\u3001done \u7528
 -- latest_accept_id IS NOT NULL\uFF08\u66FE\u88AB\u9A8C\u6536\u8FC7\u81F3\u5C11\u4E00\u6B21\uFF09\uFF0C\u800C\u771F\u6E90\u6392\u9664 brief + \u5DF2\u4F5C\u5E9F\u3001\u6309\u300C\u9A8C\u6536\u843D\u5728\u5F53\u524D\u7248\u300D\u7B97\u3002
--- \u4FDD\u7559\u4E00\u4EFD\u89C6\u56FE\u65E2\u6CA1\u4EBA\u8BFB\u3001\u53E3\u5F84\u53C8\u5BF9\u4E0D\u4E0A\uFF0C\u53EA\u4F1A\u662F\u7B2C\u4E09\u5904\u5BF9\u4E0D\u4E0A\u7684\u8FDB\u5EA6\u6570\u3002\u8FD9\u91CC\u4E0D\u518D CREATE\uFF1B\u4E0B\u9762\u7684 DROP \u8BA9\u5B58\u91CF\u5E93
--- \u5728\u4E0B\u6B21 migrate \u65F6\u628A\u65E7\u89C6\u56FE\u5220\u6389\uFF08ENGINE_DDL \u6BB5\u4EA6\u6709\u4E00\u5904 DROP\uFF0C\u4E8C\u8005\u90FD\u7559\u4EE5\u9632\u91CD\u6392\uFF09\u3002\u5DE5\u5355\u8FDB\u5EA6\u7EDF\u4E00\u8D70\u540E\u7AEF\u8BFB\u6A21\u578B\uFF0C
+-- \u8FD9\u91CC\u4E0D\u518D CREATE\uFF1B\u65E7\u89C6\u56FE\u4EC5\u5728\u5386\u53F2\u5143\u6570\u636E\u9700\u5F52\u6863\u65F6\u6682\u5B58\uFF0C\u4E0D\u53C2\u4E0E\u4E1A\u52A1\u8BFB\u53D6\u3002\u5DE5\u5355\u8FDB\u5EA6\u7EDF\u4E00\u8D70\u540E\u7AEF\u8BFB\u6A21\u578B\uFF0C
 -- \u9700\u8981 SQL \u4FA7\u7EDF\u8BA1\u65F6\u53E6\u7ACB\u4E0E\u771F\u6E90\u540C\u53E3\u5F84\u7684\u89C6\u56FE\u5E76\u6CE8\u660E\u670D\u52A1\u5BF9\u8C61\uFF0C\u522B\u590D\u6D3B\u8FD9\u4E24\u4E2A\u6570\u3002
-DROP VIEW IF EXISTS ${q2}.workorder_view;
+-- \u6E05\u7406\u7531 ENGINE_DDL \u7684\u5143\u6570\u636E\u6E05\u7406\u5757\u8D1F\u8D23\uFF1B\u4FDD\u7559\u5386\u53F2\u5217\u65F6\u4E5F\u4FDD\u7559\u65E7\u89C6\u56FE\uFF08ADR 0512\uFF09\u3002
 `;
 }
 var init_schema2 = __esm({
@@ -10823,7 +10916,7 @@ var require_utils2 = __commonJS({
     var nodeCrypto = require("crypto");
     module2.exports = {
       postgresMd5PasswordHash,
-      randomBytes: randomBytes12,
+      randomBytes: randomBytes13,
       deriveKey,
       sha256: sha2563,
       hashByName,
@@ -10833,7 +10926,7 @@ var require_utils2 = __commonJS({
     var webCrypto = nodeCrypto.webcrypto || globalThis.crypto;
     var subtleCrypto = webCrypto.subtle;
     var textEncoder = new TextEncoder();
-    function randomBytes12(length) {
+    function randomBytes13(length) {
       return webCrypto.getRandomValues(Buffer.alloc(length));
     }
     async function md5(string7) {
@@ -17487,6 +17580,7 @@ var init_src4 = __esm({
     init_views2();
     init_state();
     init_activate();
+    init_closure_gate2();
     init_schema2();
     init_store();
     init_store_memory();
@@ -17583,7 +17677,11 @@ function nodeToArtifact(node2, edges, requirements) {
     required: e.required
   }));
   const nodeReqs = requirements.filter((r) => r.nodeId === node2.id);
-  const reviewers = nodeReqs.length > 0 ? nodeReqs.map((r) => ({ actor: r.reviewerActorId, source: r.source })) : void 0;
+  const reviewers = nodeReqs.length > 0 ? nodeReqs.map((r) => ({
+    actor: r.reviewerActorId,
+    source: r.source,
+    reviewGroup: r.reviewGroup
+  })) : void 0;
   const nodeFields = node2.fields;
   const reviewRoles = nodeFields && "reviewRoles" in nodeFields ? nodeFields.reviewRoles : void 0;
   const docType = nodeFields && "docType" in nodeFields ? nodeFields.docType : void 0;
@@ -18701,6 +18799,27 @@ async function mapWithConcurrency(items, limit, fn) {
   await Promise.all(Array.from({ length: Math.max(1, Math.min(limit, items.length)) }, worker));
   return out;
 }
+function groupRequirementsForPreview(rows) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    const key = r.reviewGroup ?? (r.source === "manual" || r.source === "closure" ? r.actor : "default");
+    const bucket = groups.get(key);
+    if (bucket) {
+      if (!bucket.eligible.includes(r.actor)) bucket.eligible.push(r.actor);
+    } else {
+      groups.set(key, { source: r.source, eligible: [r.actor] });
+    }
+  }
+  const out = [];
+  for (const [key, b2] of groups) {
+    if (b2.source === "type") {
+      out.push({ source: "type", eligible: [], quorum: 1, roles: [key] });
+    } else {
+      out.push({ source: b2.source, eligible: b2.eligible, quorum: 1 });
+    }
+  }
+  return out;
+}
 var import_node_crypto3, PENDING_ROLE_PREFIX2, PENDING_UNASSIGNED2, EngineKernel;
 var init_kernel_bridge = __esm({
   "../core/src/kernel-bridge.ts"() {
@@ -19125,26 +19244,50 @@ var init_kernel_bridge = __esm({
       reviewerPreview(artifactId) {
         const a = this.model.artifacts.get(artifactId);
         if (!a) return null;
-        const manual = (a.reviewers ?? []).map((r) => ({ actor: r.actor, source: r.source }));
-        const gateActors = humanGateActorsOf(this.model, artifactId);
-        for (const actor of gateActors) {
-          if (!manual.some((r) => r.actor === actor)) manual.push({ actor, source: "manual" });
+        const nodeReqs = a.reviewers ?? [];
+        if (nodeReqs.length > 0) {
+          const requirements2 = groupRequirementsForPreview(nodeReqs);
+          const manualLikeActors2 = nodeReqs.filter((r) => r.source === "manual" || r.source === "closure").map((r) => ({ actor: r.actor, source: r.source }));
+          return {
+            reviewers: manualLikeActors2,
+            quorum: requirements2.length,
+            requirements: requirements2,
+            typeName: a.type
+          };
         }
         const typeDef = this.schema.get(a.type);
-        const typeBuckets = [];
-        for (const gate of typeDef?.reviews?.gates ?? []) {
-          for (const role of gate.reviewers) {
-            typeBuckets.push({ source: "type", eligible: [], quorum: 1, roles: [role] });
-          }
-        }
-        for (const role of a.reviewRoles ?? []) {
-          if (typeBuckets.some((b2) => b2.roles[0] === role)) continue;
-          typeBuckets.push({ source: "type", eligible: [], quorum: 1, roles: [role] });
+        const closureGate = humanGateActorsOf(this.model, artifactId);
+        const { reviewers: predicted } = resolveNodeReviewers({
+          typeName: a.type,
+          typeDef,
+          ...a.reviewRoles !== void 0 ? { reviewRoles: a.reviewRoles } : {},
+          ...a.reviewers !== void 0 && a.reviewers.length > 0 ? { explicitReviewers: a.reviewers.map((r) => ({
+            actor: r.actor,
+            source: r.source === "type" || r.source === "closure" ? "manual" : r.source
+          })) } : {},
+          roleIndex: this.roleIndex,
+          ...closureGate.length > 0 ? { closureGate } : {}
+        });
+        if (predicted.length === 0) {
+          return {
+            reviewers: [],
+            quorum: 0,
+            requirements: [],
+            typeName: a.type
+          };
         }
+        const shape = predicted.map((r) => ({
+          actor: r.reviewerActorId,
+          source: r.source,
+          reviewGroup: r.reviewGroup
+        }));
+        const requirements = groupRequirementsForPreview(shape);
+        const manualLikeActors = shape.filter((r) => r.source === "manual" || r.source === "closure").map((r) => ({ actor: r.actor, source: r.source }));
         return {
-          reviewers: manual,
-          quorum: manual.length + typeBuckets.length,
-          requirements: [...typeBuckets, ...manual.length > 0 ? [{ source: "manual", eligible: manual.map((r) => r.actor), quorum: manual.length }] : []],
+          reviewers: manualLikeActors,
+          quorum: requirements.length,
+          requirements,
+          predicted: true,
           typeName: a.type
         };
       }
@@ -42410,7 +42553,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes12, createHash: createHash37 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash37 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -42948,7 +43091,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes12(16).toString("base64");
+      const key = randomBytes13(16).toString("base64");
       const request2 = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -153545,11 +153688,14 @@ function planningStatusOf(_model, arts, resolveRoleExecutor) {
   for (const a of arts) {
     if (!isPendingOwner(a.owner)) continue;
     if (a.owner === PENDING_UNASSIGNED) {
+      const label = nodeLabel(a);
       issues.push({
         code: "missing_owner",
         severity: "warning",
         artifactType: a.type,
-        message: `${a.id} \u7684\u7C7B\u578B\u4E0D\u7ED1\u5B9A\u5C97\u4F4D\uFF08\u8C01\u90FD\u80FD\u5199\uFF09\uFF0C\u5C1A\u672A\u6307\u5B9A\u8D1F\u8D23\u4EBA\u2014\u2014\u8BF7 assign\u3002`
+        artifactId: a.id,
+        label,
+        message: `\u300C${label}\u300D\u7684\u7C7B\u578B\u4E0D\u7ED1\u5B9A\u5C97\u4F4D\uFF08\u8C01\u90FD\u80FD\u5199\uFF09\uFF0C\u5C1A\u672A\u6307\u5B9A\u8D1F\u8D23\u4EBA\u2014\u2014\u8BF7 assign\u3002`
       });
       continue;
     }
@@ -153569,24 +153715,33 @@ function planningStatusOf(_model, arts, resolveRoleExecutor) {
           code: "missing_role",
           severity: "warning",
           role: p2.role,
-          message: `${p2.role} \u89D2\u8272\u65E0 active \u5458\u5DE5\uFF0C${a.id} \u7684\u90E8\u4EF6 ${p2.name} \u5F85\u6D3E\u2014\u2014\u8BF7\u8865\u4EBA\u6216\u6362 role\u3002`
+          message: `${p2.role} \u89D2\u8272\u65E0 active \u5458\u5DE5\uFF0C\u300C${nodeLabel(a)}\u300D\u7684\u90E8\u4EF6 ${p2.name} \u5F85\u6D3E\u2014\u2014\u8BF7\u8865\u4EBA\u6216\u6362 role\u3002`
         });
       }
     }
   }
   return issues.length > 0 ? { status: "needs_staffing", issues } : { status: "ready", issues: [] };
 }
+function draftNodeLabel(id, type, title) {
+  if (title) return title;
+  if (!id) return `\u672A\u547D\u540D ${type}`;
+  const tail = id.split(":").slice(2).join(":");
+  return tail ? `\u672A\u547D\u540D ${type}\uFF08${tail}\uFF09` : `\u672A\u547D\u540D ${type}`;
+}
 function draftPlanningStatusOf(spawns, isRoleStaffed) {
   const issues = [];
   const seenRoles = /* @__PURE__ */ new Set();
   for (const s2 of spawns) {
     const owner = s2.owner;
     if (owner === void 0 || owner === PENDING_UNASSIGNED) {
+      const label = draftNodeLabel(s2.id, s2.type, s2.title);
       issues.push({
         code: "missing_owner",
         severity: "warning",
         artifactType: s2.type,
-        message: `${s2.id} \u5C1A\u672A\u6307\u5B9A\u8D1F\u8D23\u4EBA\u2014\u2014\u5EFA\u5355\u524D\u8BF7\u5728\u8349\u6848\u91CC\u6307\u5B9A\uFF0C\u5426\u5219\u843D\u6210\u5F85\u6D3E\u3002`
+        ...s2.id ? { artifactId: s2.id } : {},
+        label,
+        message: `\u300C${label}\u300D\u5C1A\u672A\u6307\u5B9A\u8D1F\u8D23\u4EBA\u2014\u2014\u5EFA\u5355\u524D\u8BF7\u5728\u8349\u6848\u91CC\u6307\u5B9A\uFF0C\u5426\u5219\u843D\u6210\u5F85\u6D3E\u3002`
       });
       continue;
     }
@@ -153814,6 +153969,8 @@ function buildWorkorderDetail(model, workspaceId, resolveActor, resolveProject,
         }),
         // 0101：审核角色是否被覆盖过（替换了类型默认）——供详情页角色位徽标/复原判断。
         ...a.reviewRoles !== void 0 ? { reviewRolesOverridden: true } : {},
+        // 预计标：结案位在报告交付前展示时会带；落库后消失。前端据此区分「预计要谁审」vs「已确定要谁审」。
+        ...pv.predicted ? { reviewersPredicted: true } : {},
         typeName: pv.typeName
       } : {},
       // 过期事实（提案 rework-cascade-rollout）：无条件透出，前端 DAG 挂「上游已更新」徽标。
@@ -153978,6 +154135,9 @@ function buildWorkorderDraftDetail(draft, resolveActor, typeReviewerPreview, res
       type: op.type,
       label: op.title ?? op.description ?? op.id,
       stage: "embryo",
+      // 草案节点从没跑过——补 state:"not_run"（与真工单节点 `evaluateNodeRunState` 同一档），
+      // 否则 WorkorderNodeCard 的 `state ? NODE_STATE_LABEL[state] : "已废弃"` 会给每张卡印上「已废弃」。
+      state: "not_run",
       currentRev: null,
       queue: 0,
       blocked: false,
@@ -154014,7 +154174,15 @@ function buildWorkorderDraftDetail(draft, resolveActor, typeReviewerPreview, res
     ...draft.seed.dispatch === false ? { dispatchPaused: true } : {}
   };
   const planning = draftPlanningStatusOf(
-    spawns.filter((op) => op.type !== DELIVERY_SUMMARY_ARTIFACT_TYPE).map((op) => ({ id: op.id, type: op.type, ...op.owner !== void 0 ? { owner: op.owner } : {} })),
+    spawns.filter((op) => op.type !== DELIVERY_SUMMARY_ARTIFACT_TYPE).map((op) => {
+      const title2 = op.title ?? op.description;
+      return {
+        ...op.id ? { id: op.id } : {},
+        type: op.type,
+        ...op.owner !== void 0 ? { owner: op.owner } : {},
+        ...title2 !== void 0 ? { title: title2 } : {}
+      };
+    }),
     resolveRoleStaffed ?? (() => true)
   );
   return {
@@ -162398,7 +162566,7 @@ async function deliverWorkorderBroadcast(deps, terminal) {
     const isEnqueueFailed = reason.includes(";enqueue-failed:");
     const isNotWired = reason.includes(";enqueue-not-wired");
     const isSkipped = reason.includes(";enqueue-skipped");
-    const classification = isEnqueueFailed ? "\u5B58\u50A8\u5C42\u6545\u969C\uFF08\u53D1\u8D77\u4EBA\u5DF2\u63A5\u53D7\u7684\u6B8B\u4F59\u98CE\u9669\uFF1A\u5165\u961F\u771F\u53BB\u4E86\u5374\u6296\u5230\u5E95\uFF0C\u804A\u5929\u672C\u8EAB\u4E5F\u5199\u4E0D\u8FDB\u53BB\uFF09" : isNotWired ? "\u8BE5\u90E8\u7F72\u6CA1\u63A5 enqueuePending\uFF08\u6700\u5C0F\u88C5\u914D / \u5355\u6D4B\uFF09\uFF0C\u975E\u751F\u4EA7\u4E8B\u6545\uFF1B\u751F\u4EA7\u4E0A\u5FC5\u987B\u63A5\u961F\u5217" : isSkipped ? "flush \u89E6\u53D1\u5668\u4F20\u5165 skipEnqueueOnFail=true\uFF0C\u672C\u884C\u4ECD\u5728\u961F\u5217\u91CC\uFF0C\u4F1A\u7531\u4E0B\u4E00\u573A flush \u8BA4\u9886" : "\u9996\u6B21\u6295\u9012\u5931\u8D25\u4E14\u672A\u8D70\u5165\u961F\uFF08\u672A\u9884\u671F\u5F52\u56E0\uFF0C\u8BF7\u6838\u67E5 deliverToAgent \u662F\u5426\u6F0F\u8D70 enqueueOrFail\uFF09";
+    const classification = isEnqueueFailed ? "\u5B58\u50A8\u5C42\u6545\u969C\uFF08\u53D1\u8D77\u4EBA\u5DF2\u63A5\u53D7\u7684\u6B8B\u4F59\u98CE\u9669\uFF1A\u5165\u961F\u771F\u53BB\u4E86\u5374\u6296\u5230\u5E95\uFF0C\u804A\u5929\u672C\u8EAB\u4E5F\u5199\u4E0D\u8FDB\u53BB\uFF09" : isNotWired ? "\u672A\u88C5\u914D enqueuePending\uFF0C\u751F\u4EA7\u5FC5\u987B\u63A5\u961F\u5217\uFF08\u6700\u5C0F\u88C5\u914D / \u5355\u6D4B\u624D\u5141\u8BB8\u7F3A\u88C5\u914D\uFF09" : isSkipped ? "flush \u89E6\u53D1\u5668\u4F20\u5165 skipEnqueueOnFail=true\uFF0C\u672C\u884C\u4ECD\u5728\u961F\u5217\u91CC\uFF0C\u4F1A\u7531\u4E0B\u4E00\u573A flush \u8BA4\u9886" : "\u9996\u6B21\u6295\u9012\u5931\u8D25\u4E14\u672A\u8D70\u5165\u961F\uFF08\u672A\u9884\u671F\u5F52\u56E0\uFF0C\u8BF7\u6838\u67E5 deliverToAgent \u662F\u5426\u6F0F\u8D70 enqueueOrFail\uFF09";
     log3(
       `[chat-broadcast] \u26A0 \u901A\u544A\u5DF2\u843D\u5E93\u3001\u6295\u9012\u672A\u6210\u529F\uFF1A\u515C\u5E95\u634E\u5E26\u770B\u4E0D\u5230 delivery_route='queue' \u7684\u884C\uFF0C \u552F\u4E00\u9001\u53D1\u8005\u662F flusher\u3002 wo=${terminal.workOrderId} session=${originId} messageId=${messageId} reason=${reason} \u2014\u2014 ${classification}`
     );
@@ -162817,6 +162985,10 @@ function invitationJoinUrl(consoleUrl, invitationId) {
   if (!consoleUrl) return void 0;
   return joinConsoleUrl(consoleUrl, `/invite/${encodeURIComponent(invitationId)}`);
 }
+function inviteLinkJoinUrl(consoleUrl, token) {
+  if (!consoleUrl) return void 0;
+  return joinConsoleUrl(consoleUrl, `/invite/${encodeURIComponent(token)}`);
+}
 var init_console_url = __esm({
   "../server/src/domains/shared/console-url.ts"() {
     "use strict";
@@ -202866,6 +203038,31 @@ async function startOasisServer(opts) {
                 return;
               }
             }
+            const staffedRoles = /* @__PURE__ */ new Set();
+            if (principalRegistry) {
+              const actorsForStaffing = await principalRegistry.listActors();
+              for (const a of actorsForStaffing) if (a.status === "active") for (const r of a.roles) staffedRoles.add(r);
+            }
+            const spawnedForPlanning = body2.plan.ops.filter((op) => op.action === "spawn").filter((op) => op.type !== DELIVERY_SUMMARY_ARTIFACT_TYPE).map((op) => {
+              const title = op.title ?? op.description;
+              return {
+                ...op.id ? { id: op.id } : {},
+                type: op.type,
+                ...op.owner !== void 0 ? { owner: op.owner } : {},
+                ...title !== void 0 ? { title } : {}
+              };
+            });
+            const planning = draftPlanningStatusOf(
+              spawnedForPlanning,
+              (role) => staffedRoles.has(role)
+            );
+            if (planning.status === "needs_staffing") {
+              const summary = planning.issues.map((i) => i.label ?? i.message).join("\uFF1B");
+              res.writeHead(400, { "content-type": "application/json" }).end(
+                JSON.stringify({ error: "WORKORDER_NOT_STAFFED", message: `\u4EBA\u5458\u8FD8\u6CA1\u914D\u9F50\uFF1A${summary}`, issues: planning.issues })
+              );
+              return;
+            }
             if (targetWs && sessionProjectId) {
               await opts.artifactState.upsertWorkspaceBinding({ workOrderId: targetWs, projectId: sessionProjectId });
             }
@@ -205362,6 +205559,7 @@ var init_server3 = __esm({
     init_validate_principals();
     init_assistants();
     init_workorder_detail();
+    init_workorders();
     init_discuss();
     init_planner();
     init_chat_parts();
@@ -207361,6 +207559,8 @@ var init_memory_control_plane_store = __esm({
       members = /* @__PURE__ */ new Map();
       // key = companyId\0accountId
       invitations = /* @__PURE__ */ new Map();
+      /** 共享邀请链接：**token → 行**（同公司可并存任意多条；不作废、只过期）。 */
+      inviteLinks = /* @__PURE__ */ new Map();
       accounts = /* @__PURE__ */ new Map();
       /** protected：FileControlPlaneStore 子类 open() 回放快照时直接恢复（密码须持久化）。 */
       accountSecrets = /* @__PURE__ */ new Map();
@@ -207419,10 +207619,12 @@ var init_memory_control_plane_store = __esm({
         const prev = this.members.get(key);
         const displayName = m2.displayName ?? prev?.displayName;
         const onboardingCompletedAt = m2.onboardingCompletedAt ?? prev?.onboardingCompletedAt;
+        const onboardingStep = m2.onboardingStep ?? prev?.onboardingStep;
         this.members.set(key, {
           ...m2,
           ...displayName !== void 0 ? { displayName } : {},
-          ...onboardingCompletedAt !== void 0 ? { onboardingCompletedAt } : {}
+          ...onboardingCompletedAt !== void 0 ? { onboardingCompletedAt } : {},
+          ...onboardingStep !== void 0 ? { onboardingStep } : {}
         });
       }
       async getMember(companyId, accountId) {
@@ -207509,11 +207711,24 @@ var init_memory_control_plane_store = __esm({
         const stored = {
           ...member,
           ...prev?.displayName !== void 0 ? { displayName: prev.displayName } : {},
-          ...prev?.onboardingCompletedAt !== void 0 ? { onboardingCompletedAt: prev.onboardingCompletedAt } : {}
+          ...prev?.onboardingCompletedAt !== void 0 ? { onboardingCompletedAt: prev.onboardingCompletedAt } : {},
+          ...prev?.onboardingStep !== void 0 ? { onboardingStep: prev.onboardingStep } : {}
         };
         this.members.set(key, stored);
         return { ok: true, invitation: { ...inv }, member: { ...stored } };
       }
+      // —— 共享邀请链接 ——
+      async createInviteLink(link) {
+        if (this.inviteLinks.has(link.token)) throw new Error(`invite link already exists: ${link.token}`);
+        this.inviteLinks.set(link.token, { ...link });
+      }
+      async listInviteLinks(companyId, filter) {
+        return [...this.inviteLinks.values()].filter((l) => l.companyId === companyId && (filter?.createdBy === void 0 || l.createdBy === filter.createdBy)).sort((a, b2) => b2.createdAt.localeCompare(a.createdAt) || a.token.localeCompare(b2.token)).map((l) => ({ ...l }));
+      }
+      async getInviteLinkByToken(token) {
+        const link = this.inviteLinks.get(token);
+        return link ? { ...link } : null;
+      }
       // —— 账号 ——
       async upsertAccount(a) {
         this.accounts.set(a.id, { ...a });
@@ -207854,6 +208069,13 @@ var init_engine_handoff = __esm({
   }
 });
 
+// ../testkit/src/closure-approve.ts
+var init_closure_approve = __esm({
+  "../testkit/src/closure-approve.ts"() {
+    "use strict";
+  }
+});
+
 // ../testkit/src/pg-test-schemas.ts
 var init_pg_test_schemas = __esm({
   "../testkit/src/pg-test-schemas.ts"() {
@@ -207878,6 +208100,7 @@ var init_src9 = __esm({
     init_memory_actor_memory_store();
     init_test_engine();
     init_engine_handoff();
+    init_closure_approve();
     init_pg_test_schemas();
   }
 });
@@ -210947,6 +211170,7 @@ var init_control_plane_file_store = __esm({
       "createInvitation",
       "updateInvitationStatus",
       "updateInvitationStatusIf",
+      "createInviteLink",
       "commitAcceptedInvitation",
       "upsertAccount",
       "setAccountPassword",
@@ -210987,6 +211211,7 @@ var init_control_plane_file_store = __esm({
             await MemoryControlPlaneStore.prototype.upsertMember.call(store, row);
           }
           for (const inv of snap.invitations ?? []) await MemoryControlPlaneStore.prototype.createInvitation.call(store, inv);
+          for (const link of snap.inviteLinks ?? []) await MemoryControlPlaneStore.prototype.createInviteLink.call(store, link);
           for (const a of snap.accounts ?? []) await MemoryControlPlaneStore.prototype.upsertAccount.call(store, a);
           for (const e of snap.accountSecrets ?? []) store.accountSecrets.set(e.accountId, { ...e.secret });
           for (const e of snap.digitalEmployees ?? []) await MemoryControlPlaneStore.prototype.upsertDigitalEmployee.call(store, e);
@@ -211022,6 +211247,8 @@ var init_control_plane_file_store = __esm({
           companies,
           members,
           invitations: await this.listInvitations(),
+          // 按 token 存、没有「列全部公司」的读面——直接读 protected map（同 offboardings 的写法）。
+          inviteLinks: [...this.inviteLinks.values()],
           accounts,
           accountSecrets,
           digitalEmployees,
@@ -220373,7 +220600,7 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto50, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto50, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
@@ -220382,6 +220609,9 @@ var init_service6 = __esm({
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
     INVITATION_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+    INVITE_LINK_TTL_MS = INVITATION_TTL_MS;
+    INVITE_LINK_TOKEN_BYTES = 32;
+    INVITE_LINK_ROLE = "member";
     SLUG_RE = /^[a-z][a-z0-9-]*$/;
     CompanyError = class extends Error {
       constructor(status, code2, message, details) {
@@ -220526,7 +220756,7 @@ var init_service6 = __esm({
           accountId: creatorAccountId,
           actorId: creatorAccountId,
           role: "owner",
-          onboardingCompletedAt: this.now()
+          onboardingStep: "runtime"
         };
         await this.store.upsertMember(owner);
         return company;
@@ -220562,9 +220792,14 @@ var init_service6 = __esm({
        *   这两处方向相反，改动时别顺手一起过滤。
        * - 本人查自己走 `getMember`（`GET /api/companies/:id/members/me`），不受本过滤影响——
        *   否则「未完成的人」连自己的 membership 都读不到，就没法判断该不该进向导（自我指涉死锁）。
+       *
+       * 🚨 **`role==='owner'` 从本过滤豁免**（2026-09-08 反转 ADR 0208 owner 侧 🚨）：owner 建团队后
+       * `onboardingCompletedAt` 要等他走完 owner 流最后一步才落，其间他若停在环境配置步就出去了，
+       * 这条过滤会让**团队 owner 从自己团队的成员页上消失**（判死锁）。他建了公司就是这家公司的
+       * 成员，向导走完与否只影响他自己下次进来落到哪一步，不影响他是不是成员。
        */
       async listMemberViews(companyId) {
-        const members = (await this.listMembers(companyId)).filter((m2) => m2.onboardingCompletedAt);
+        const members = (await this.listMembers(companyId)).filter((m2) => m2.onboardingCompletedAt || m2.role === "owner");
         const accounts = await Promise.all(members.map((m2) => this.store.getAccount(m2.accountId)));
         return members.map((m2, i) => {
           const acc = accounts[i];
@@ -220752,6 +220987,145 @@ var init_service6 = __esm({
           return {};
         }
       }
+      // —— 共享邀请链接（Figma 466:217；语义见 contract 的 `CompanyInviteLink`）——
+      /**
+       * 取**我自己**在这家公司当前可用的那条链接；没有、或都过期了返回 `null`。
+       *
+       * 作用域是 `(companyId, createdBy)` 而不是整个公司：链接允许并存任意多条（发起人 2026-09-08
+       * 定案），所以「当前那条」只对**签发人自己**有意义。别人签了几条、什么时候签的，与我这条无关。
+       *
+       * 「过期的当作没有」：链接只有「现在能不能用」这一个问题。把过期行原样吐给页面，页面就得
+       * 再判一次同样的规则——判据一分成两处迟早漂。
+       */
+      async getMyInviteLink(companyId, createdBy) {
+        const mine = await this.store.listInviteLinks(companyId, { createdBy });
+        return mine.find((l) => !this.isPast(l.expiresAt)) ?? null;
+      }
+      /**
+       * 组织页弹窗打开时调：**幂等**拿到我自己的当前链接，没有才签一条。
+       *
+       * 做成幂等而不是「每次打开都签一条新的」，是为了让同一个人重复开弹窗看到同一把钥匙——
+       * 否则每开一次弹窗就往库里多塞一条，而人只会复制走最后看到的那条。**这不是「一公司一条」
+       * 那个约束的残留**：那条约束管的是「别人签会不会把我的打死」（已取消），这里管的是
+       * 「我自己重复打开会不会每次都换」。
+       */
+      async ensureMyInviteLink(companyId, createdBy) {
+        await this.requireCompany(companyId);
+        const current = await this.getMyInviteLink(companyId, createdBy);
+        if (current) return current;
+        return this.issueInviteLink(companyId, createdBy);
+      }
+      /**
+       * 再签一条**新的**链接。
+       *
+       * ⚠ 与 Onboarding PRD §4.3「重新生成 → 旧链接立即失效」**相悖**，是发起人 2026-09-08 明确
+       * 推翻的那条：签新的**不作废**任何已发出去的链接（自己的、别人的都不动）。所以这个动作
+       * 不是破坏性的，也就不需要二次确认。
+       *
+       * 没有「吊销某条链接」的出口——真要收回得另加吊销位，本轮不做（见 ADR 0513 D3）。
+       */
+      async issueAnotherInviteLink(companyId, createdBy) {
+        await this.requireCompany(companyId);
+        return this.issueInviteLink(companyId, createdBy);
+      }
+      async issueInviteLink(companyId, createdBy) {
+        const nowMs = Date.parse(this.now());
+        const link = {
+          companyId,
+          token: (0, import_node_crypto50.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          role: INVITE_LINK_ROLE,
+          createdAt: new Date(nowMs).toISOString(),
+          expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
+          ...createdBy !== void 0 ? { createdBy } : {}
+        };
+        await this.store.createInviteLink(link);
+        return link;
+      }
+      /** 这条链接对外的完整地址；本实例没配 `OASIS_CONSOLE_URL` 时返回 `undefined`（调用方不放链接）。 */
+      inviteLinkUrl(token) {
+        return inviteLinkJoinUrl(this.consoleUrl, token);
+      }
+      /**
+       * 链接的只读预览（`GET /api/invite-links/:token`）——接受邀请页进页面时那一问。
+       * **一个字节都不写**：不建邀请行、不改任何状态。真正的兑换在 accept 那一步。
+       *
+       * 错误与邀请预览对齐，页面判定层（`invite-view.ts`）只认 details，不认状态码：
+       * 已经是这家公司的人 → 409 + `alreadyMember`（PRD §7.2：「已经是成员：直接进入该团队空间，
+       * 不重复加入」，这是**正常路径**，绝不能渲染成「链接已失效」）；过期 → 410（前端给
+       * 「邀请链接已失效」那一屏）；token 查不到 → 404。
+       */
+      async previewInviteLink(token, viewer) {
+        const link = await this.requireUsableInviteLink(token, viewer.accountId);
+        const company = await this.store.getCompany(link.companyId);
+        return {
+          token: link.token,
+          companyId: link.companyId,
+          companyName: company?.name ?? link.companyId,
+          role: link.role,
+          expiresAt: link.expiresAt,
+          ...await this.inviterNameOf({ companyId: link.companyId, invitedBy: link.createdBy })
+        };
+      }
+      /**
+       * 兑换：把一条共享链接换成**属于当前登录邮箱**的 `CompanyInvitation`，随后交给既有的
+       * peek → 翻活/物化 → commit 流水线消费。
+       *
+       * 为什么绕这一道而不让 accept 直接吃 token：那条流水线的每一步都建立在「这条邀请是发给我的、
+       * 接受一次就消费掉」之上（CO-005 唯一 pending、`CAS(pending→accepted)`、失败补偿全按单条邀请写）。
+       * 共享链接是**多人多次**可用的，直接塞进去就得把那些不变量逐条改成「视 kind 而定」——两种语义
+       * 挤在一张表里，每条 CAS 都要多一个分支，那才是真正会出事的地方。换成「链接 → 我的那一条邀请」
+       * 之后，链接侧只管「谁可以进」，邀请侧仍然只有一种语义。
+       *
+       * **复用已有 pending**：同邮箱已经有一条未过期的 pending（比如管理员先前按邮箱单独邀请过他、
+       * 或者他点过**另一条**链接但没走完），就直接用那条——既不违反 CO-005，也让「按邮箱邀请」与
+       * 「任意多条共享链接」全部自然汇流到同一条邀请上；那条邀请的 role 优先（管理员显式给的 admin
+       * 不该被链接的默认 member 冲掉）。
+       */
+      async claimInviteLink(token, claimer) {
+        const link = await this.requireUsableInviteLink(token, claimer.accountId);
+        const mail = claimer.email?.trim().toLowerCase() ?? "";
+        if (!mail) throw new CompanyError(403, "EMAIL_REQUIRED", "\u5F53\u524D\u767B\u5F55\u8EAB\u4EFD\u6CA1\u6709\u90AE\u7BB1\uFF0C\u65E0\u6CD5\u7528\u9080\u8BF7\u94FE\u63A5\u52A0\u5165");
+        const existing = await this.store.listInvitations({ companyId: link.companyId, email: mail, status: "pending" });
+        const reusable = existing.find((inv) => !this.isExpired(inv));
+        if (reusable) return reusable;
+        const invitation = {
+          id: `invitation:${(0, import_node_crypto50.randomUUID)()}`,
+          companyId: link.companyId,
+          email: mail,
+          role: link.role,
+          status: "pending",
+          // 有效期跟着**这条链接**走：链接死了，由它换出来的邀请不该比它活得更久。
+          expiresAt: link.expiresAt,
+          ...link.createdBy !== void 0 ? { invitedBy: link.createdBy } : {}
+        };
+        await this.store.createInvitation(invitation);
+        return invitation;
+      }
+      /**
+       * 链接可用性的三道闸（预览与兑换共用，保证两边**逐字**同一套判定）：
+       * 存在 → 未过期 → 我还不是这家公司的人。
+       */
+      async requireUsableInviteLink(token, accountId) {
+        const link = await this.store.getInviteLinkByToken(token);
+        if (!link) throw new CompanyError(404, "NOT_FOUND", "\u9080\u8BF7\u94FE\u63A5\u65E0\u6548");
+        if (this.isPast(link.expiresAt)) throw new CompanyError(410, "EXPIRED", "\u9080\u8BF7\u94FE\u63A5\u5DF2\u8FC7\u671F", await this.joinDetails(link, accountId));
+        const member = await this.store.getMember(link.companyId, accountId);
+        if (member) {
+          throw new CompanyError(409, "ALREADY_MEMBER", "\u4F60\u5DF2\u7ECF\u662F\u8FD9\u4E2A\u56E2\u961F\u7684\u6210\u5458", await this.joinDetails(link, accountId));
+        }
+        return link;
+      }
+      /** 链接类错误的 details——与 `decorateInvitationError` 同一组键，接受邀请页据它分「已加入」与「已失效」。 */
+      async joinDetails(link, accountId) {
+        const company = await this.store.getCompany(link.companyId).catch(() => null);
+        const member = await this.store.getMember(link.companyId, accountId).catch(() => null);
+        return {
+          companyId: link.companyId,
+          companyName: company?.name ?? link.companyId,
+          alreadyMember: member !== null,
+          ...member?.onboardingCompletedAt ? { onboardingCompletedAt: member.onboardingCompletedAt } : {}
+        };
+      }
       /**
        * 落「新手指引已完成」（`POST /api/companies/:id/members/me/onboarding-complete` 的服务层）。
        *
@@ -220769,6 +221143,29 @@ var init_service6 = __esm({
         await this.store.upsertMember(next);
         return next;
       }
+      /**
+       * 记「新手指引走到了哪一步」（`POST /api/companies/:id/members/me/onboarding-step` 的服务层，
+       * 2026-09-08 反转 ADR 0208 §4）。
+       *
+       * **本人限定**：路径写死 `me`，只对自己那条 membership 生效；不是成员 → 404。
+       * **可向前改写**：与 `onboardingCompletedAt` 单向语义不同，本列是进度指针；store 的 upsert
+       *   对本列走 COALESCE（传值即覆盖，传 null 不动）。
+       * **上报是尽力而为**：路由层若拿到非 200/非 404 也不该阻塞用户进下一步（前端做，不在这里判）。
+       *
+       * 传入的 `step` 值域约束在契约层是 `OnboardingStepId`（team / runtime / assistant），但存储层
+       * 只把它当字符串——放宽到「非空 trim 串」即可，非法值不落库。这是一条进度指针，不是权限判据；
+       * 万一将来加了新步骤名，老服务端也能透传，读侧再降级到兜底回落。
+       */
+      async setMemberOnboardingStep(companyId, accountId, step) {
+        const trimmed = step?.trim();
+        if (!trimmed) throw new CompanyError(400, "BAD_REQUEST", "step \u4E0D\u80FD\u4E3A\u7A7A");
+        await this.requireCompany(companyId);
+        const member = await this.store.getMember(companyId, accountId);
+        if (!member) throw new CompanyError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}`);
+        const next = { ...member, onboardingStep: trimmed };
+        await this.store.upsertMember(next);
+        return next;
+      }
       /**
        * 列出发给某邮箱的有效（pending 未过期）邀请；顺带把过期的 pending 落为 expired。
        *
@@ -220891,7 +221288,11 @@ var init_service6 = __esm({
         }
       }
       isExpired(inv) {
-        return Date.parse(inv.expiresAt) <= Date.parse(this.now());
+        return this.isPast(inv.expiresAt);
+      }
+      /** 统一时间源下「这个时刻过去了没有」。邀请与链接共用，避免两处各写一次比较。 */
+      isPast(at) {
+        return Date.parse(at) <= Date.parse(this.now());
       }
       async requireCompany(companyId) {
         const c = await this.store.getCompany(companyId);
@@ -221274,6 +221675,15 @@ function companiesDomain(opts) {
       const member = await service.completeMemberOnboarding(req.params.id, me.accountId).catch(mapErr);
       return { status: 200, body: member };
     });
+    router.post("/api/companies/:id/members/me/onboarding-step", async (req) => {
+      const me = await whoami(req);
+      const body2 = req.body ?? {};
+      if (typeof body2.step !== "string") {
+        throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 step: string");
+      }
+      const member = await service.setMemberOnboardingStep(req.params.id, me.accountId, body2.step).catch(mapErr);
+      return { status: 200, body: member };
+    });
     router.patch("/api/companies/:id/members/:accountId", async (req) => {
       const b2 = req.body ?? {};
       const cid = req.params.id;
@@ -221407,6 +221817,10 @@ function companiesDomain(opts) {
       const result = await off.commit(cid, req.params.accountId, req.params.operationId, version2).catch(mapErr);
       return { status: 200, body: result };
     });
+    const toInviteLinkBody = (link) => {
+      const url = service.inviteLinkUrl(link.token);
+      return { token: link.token, role: link.role, createdAt: link.createdAt, expiresAt: link.expiresAt, ...url ? { url } : {} };
+    };
     router.post("/api/companies/:id/invitations", async (req) => {
       const b2 = req.body ?? {};
       if (!b2.email) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 email");
@@ -221425,9 +221839,7 @@ function companiesDomain(opts) {
       const items = me.email !== void 0 ? await service.listInvitationsForEmail(me.email) : [];
       return { status: 200, body: { items } };
     });
-    router.post("/api/invitations/:invitationId/accept", async (req) => {
-      const me = await whoami(req);
-      const inv = await service.peekAcceptableInvitation(req.params.invitationId, me).catch(mapErr);
+    const acceptPeekedInvitation = async (req, inv, me) => {
       let revivedSnapshot = null;
       let reviveSeq = 0;
       let materializedSnapshot = null;
@@ -221451,8 +221863,7 @@ function companiesDomain(opts) {
         }
       }
       try {
-        const member = await service.commitAcceptedInvitation(inv, me).catch(mapErr);
-        return { status: 201, body: member };
+        return await service.commitAcceptedInvitation(inv, me).catch(mapErr);
       } catch (err) {
         if (revivedSnapshot && actorsSvc) {
           let confirmedAbsent = false;
@@ -221508,6 +221919,36 @@ function companiesDomain(opts) {
         }
         throw err;
       }
+    };
+    router.post("/api/invitations/:invitationId/accept", async (req) => {
+      const me = await whoami(req);
+      const inv = await service.peekAcceptableInvitation(req.params.invitationId, me).catch(mapErr);
+      return { status: 201, body: await acceptPeekedInvitation(req, inv, me) };
+    });
+    router.post("/api/companies/:id/invite-links/mine", async (req) => {
+      const cid = req.params.id;
+      await requireOwnerOrAdmin(req, cid);
+      const me = await whoami(req);
+      const link = await service.ensureMyInviteLink(cid, me.accountId).catch(mapErr);
+      return { status: 200, body: toInviteLinkBody(link) };
+    });
+    router.post("/api/companies/:id/invite-links", async (req) => {
+      const cid = req.params.id;
+      await requireOwnerOrAdmin(req, cid);
+      const me = await whoami(req);
+      const link = await service.issueAnotherInviteLink(cid, me.accountId).catch(mapErr);
+      return { status: 201, body: toInviteLinkBody(link) };
+    });
+    router.get("/api/invite-links/:token", async (req) => {
+      const me = await whoami(req);
+      const preview2 = await service.previewInviteLink(req.params.token, me).catch(mapErr);
+      return { status: 200, body: preview2 };
+    });
+    router.post("/api/invite-links/:token/accept", async (req) => {
+      const me = await whoami(req);
+      const claimed = await service.claimInviteLink(req.params.token, me).catch(mapErr);
+      const inv = await service.peekAcceptableInvitation(claimed.id, me).catch(mapErr);
+      return { status: 201, body: await acceptPeekedInvitation(req, inv, me) };
     });
     router.post("/api/invitations/:invitationId/decline", async (req) => {
       await service.declineInvitation(req.params.invitationId).catch(mapErr);
@@ -222296,16 +222737,21 @@ Write-Host "  Stop   : Stop-ScheduledTask -TaskName 'OasisNode'"
 Write-Host "  Remove : Unregister-ScheduledTask -TaskName 'OasisNode' -Confirm:$false"
 `;
 }
+function daemonNpmPrefix(pkg = DAEMON_NPM_PACKAGE) {
+  return pkg === LEGACY_DAEMON_NPM_PACKAGE ? "~/.oasis/npm-global" : `~/.oasis/npm-global/${pkg}`;
+}
 function buildNpxCmd(p2) {
   const namePart = p2.nodeName ? ` --name ${shellQuote(p2.nodeName)}` : "";
   const instanceName = connectInstanceName(p2.gatewayUrl, p2.token, p2.companyId);
   const companyPart = p2.companyId ? ` --company ${shellQuote(p2.companyId)}` : "";
-  return `npm install -g --prefer-online --prefix ~/.oasis/npm-global oasis_test@latest && ~/.oasis/npm-global/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --enroll-token ${shellQuote(p2.token)}`;
+  const prefix = daemonNpmPrefix();
+  return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --enroll-token ${shellQuote(p2.token)}`;
 }
 var import_node_crypto53;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
+    init_src();
     import_node_crypto53 = require("node:crypto");
   }
 });
@@ -222595,6 +223041,7 @@ function nodesDomain(deps) {
       const hub = deps.getHub();
       if (hub) wireHub(hub);
       const daemonVersionById = new Map((hub?.connectedDaemons() ?? []).map((d) => [d.daemonId, d.meta.daemonVersion]));
+      const daemonPkgById = new Map((hub?.connectedDaemons() ?? []).map((d) => [d.daemonId, d.meta.daemonPkg]));
       const connectionById = new Map((hub?.recentConnectionChanges() ?? []).map((d) => [d.daemonId, d]));
       const onlineIds = new Set((hub?.connectedDaemons() ?? []).map((d) => d.daemonId));
       const healthNow = Date.now();
@@ -222624,6 +223071,7 @@ function nodesDomain(deps) {
           runtimes: rts.map(runtimeInfoOf),
           nodeVersion: n.nodeVersion,
           ...daemonVersion ? { daemonVersion } : {},
+          ...daemonPkgById.get(n.id) ? { daemonPkg: daemonPkgById.get(n.id) } : {},
           ...n.name ? { name: n.name } : {},
           ...updateStatus ? { updateStatus } : {},
           ...connection ? {
@@ -222788,12 +223236,14 @@ function nodesDomain(deps) {
       if (!daemon) return { status: 409, body: { error: `\u8282\u70B9 ${nodeId} \u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u65E0\u6CD5\u66F4\u65B0` } };
       const current = daemon.meta.daemonVersion;
       const { version: latest } = await resolveLatestDaemonVersion();
-      if (latest && current && !daemonVersionLess(current, latest)) {
+      const nodePkg = daemon.meta.daemonPkg;
+      const sameLane = !nodePkg || nodePkg === DAEMON_NPM_PACKAGE;
+      if (sameLane && latest && current && !daemonVersionLess(current, latest)) {
         nodeUpdates.delete(nodeId);
         return { status: 200, body: { ok: true, alreadyLatest: true, version: current } };
       }
       const activeRunCount = deps.activeRunCountOf?.(nodeId) ?? 0;
-      const sent = hub.dispatch(nodeId, { type: "update" });
+      const sent = hub.dispatch(nodeId, { type: "update", pkg: DAEMON_NPM_PACKAGE });
       if (!sent) return { status: 409, body: { error: `\u8282\u70B9 ${nodeId} \u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u65E0\u6CD5\u66F4\u65B0` } };
       const nowMs = Date.now();
       const tracked = activeRunCount > 0 ? { ...current ? { fromVersion: current } : {}, requestedAtMs: nowMs, state: "queued" } : { ...current ? { fromVersion: current } : {}, requestedAtMs: nowMs, state: "updating", startedAtMs: nowMs };
@@ -222889,6 +223339,7 @@ var init_routes7 = __esm({
     import_node_fs13 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path20 = require("node:path");
+    init_src();
     init_src7();
     init_connect_script();
     init_node_health();
@@ -223607,9 +224058,10 @@ function buildWorkorderActivity(input) {
         const helperId = managerId ?? ownerId;
         const body2 = str4(ev.body) ?? "";
         if (isEscalation) {
-          const target = recipients[0] ?? ownerId;
           const linkedGapId = str4(ev.gapId);
           const stuckActor = (linkedGapId ? issueById.get(linkedGapId)?.authorActorId : void 0) ?? (nodeId ? nodeById.get(nodeId)?.assigneeActorId : void 0) ?? authorId;
+          const selfRef = (id) => !!id && (id === stuckActor || id === authorId);
+          const target = [recipients[0], ownerId, managerId].find((cand) => cand && !selfRef(cand)) ?? recipients[0] ?? ownerId;
           issueCards.set(`${issueId}:raised`, {
             id: `escalation:${issueId}:raised`,
             seq: rec.seq,
@@ -223633,9 +224085,21 @@ function buildWorkorderActivity(input) {
             ...rec.handActorId ? { handActorId: rec.handActorId } : {},
             phase: "not_started",
             status: ACTIVITY_COPY.escalationPending(nameOf(stuckActor), nameOf(target)),
-            ...body2 ? { detail: body2 } : {},
+            /* 「去处理」进这条上报自己的**讨论房**（`discuss_escalation`），不是只读陈列面。
+                           上报的收件人就是必须开口回答的人——给他一个读不了回不了的落点等于死路。
+            
+                           房间**不在这里造**：前端拿这个 `target`（escalationId）去打
+                           `POST /api/inbox/discuss`，那个端点按项幂等——存量复用、没有则建（决策 0027 D3 /
+                           0030 D3，ADR 0079 D1「一上报一房」）。1.0 的上报气泡走的就是这条路，所以
+                           **存量上报不需要回填**：谁点谁就建出来。投影侧只负责说清"去哪条上报"。 */
+            /* 上报正文**不上卡**——与缺口 / 回压同一条口径（见下面那支的注释）。
+               此前这里把整封信塞进展开区，`ws:wo-635d7add` 那条渲染出的是一屏字：
+               「需要您确认一件事…背景…请您提供以下任意一项…—— 技术细节…[关联缺口] gap:artifact:…」，
+               连内部 artifact id 都印在卡面上。原型两帧口径一致（`1979:3039` 与 `1923:3319` 那张
+               `Rectangle 20`，高 104 / 99）：**标题行 + 一句小状态 + 去处理**，没有展开区。
+               全文的去处，就是那个「去处理」按钮。 */
             artifacts: [],
-            actions: [{ kind: "open_issue", label: BUTTON.handle, target: issueId }]
+            actions: [{ kind: "discuss_escalation", label: BUTTON.handle, target: issueId }]
           });
           break;
         }
@@ -238039,7 +238503,7 @@ var init_pool = __esm({
 });
 
 // ../storage/src/postgres-control-plane.ts
-var ident6, PostgresControlPlaneStore, rowToDigitalEmployee, rowToAgentCredential, rowToBridge, rowToOffboarding, toIso, rowToCompany, rowToMember, rowToInvitation, rowToAccount, rowToVerificationCode;
+var ident6, PostgresControlPlaneStore, rowToDigitalEmployee, rowToAgentCredential, rowToBridge, rowToOffboarding, toIso, rowToCompany, rowToMember, rowToInvitation, rowToInviteLink, rowToAccount, rowToVerificationCode;
 var init_postgres_control_plane = __esm({
   "../storage/src/postgres-control-plane.ts"() {
     "use strict";
@@ -238091,6 +238555,16 @@ var init_postgres_control_plane = __esm({
         await pool.query(`CREATE INDEX IF NOT EXISTS company_invitations_email_idx ON "${s2}".company_invitations (email)`);
         await pool.query(`CREATE INDEX IF NOT EXISTS company_invitations_company_idx ON "${s2}".company_invitations (company_id)`);
         await pool.query(`
+      CREATE TABLE IF NOT EXISTS "${s2}".company_invite_links (
+        token      text PRIMARY KEY,
+        company_id text NOT NULL,
+        role       text NOT NULL,               -- admin | member\uFF08\u4E0D\u542B owner\uFF09
+        created_by text,                        -- \u751F\u6210\u4EBA\u8D26\u53F7\uFF1BNULL \u2192 \u63A5\u53D7\u9875\u964D\u7EA7\u4E3A\u4E0D\u663E\u793A\u9080\u8BF7\u4EBA
+        created_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL
+      )`);
+        await pool.query(`CREATE INDEX IF NOT EXISTS company_invite_links_company_creator_idx ON "${s2}".company_invite_links (company_id, created_by, created_at DESC)`);
+        await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".accounts (
         id            text PRIMARY KEY,
         email         text NOT NULL,
@@ -238137,6 +238611,7 @@ var init_postgres_control_plane = __esm({
             client.release();
           }
         }
+        await pool.query(`ALTER TABLE "${s2}".company_members ADD COLUMN IF NOT EXISTS onboarding_step text`);
         await pool.query(`CREATE INDEX IF NOT EXISTS company_members_account_company_idx ON "${s2}".company_members (account_id, company_id)`);
         await pool.query(`CREATE INDEX IF NOT EXISTS company_members_company_role_idx ON "${s2}".company_members (company_id, role)`);
         await pool.query(`
@@ -238293,14 +238768,15 @@ var init_postgres_control_plane = __esm({
       // —— 成员 ——
       async upsertMember(m2) {
         await this.pool.query(
-          `INSERT INTO ${this.s}.company_members (company_id, account_id, actor_id, role, display_name, onboarding_completed_at, created_at, updated_at)
-       VALUES ($1,$2,$3,$4,$5,$6,now(),now())
+          `INSERT INTO ${this.s}.company_members (company_id, account_id, actor_id, role, display_name, onboarding_completed_at, onboarding_step, created_at, updated_at)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,now(),now())
        ON CONFLICT (company_id, account_id) DO UPDATE
          SET actor_id = $3, role = $4,
              display_name = COALESCE($5, company_members.display_name),
              onboarding_completed_at = COALESCE($6, company_members.onboarding_completed_at),
+             onboarding_step = COALESCE($7, company_members.onboarding_step),
              updated_at = now()`,
-          [m2.companyId, m2.accountId, m2.actorId, m2.role, m2.displayName ?? null, m2.onboardingCompletedAt ?? null]
+          [m2.companyId, m2.accountId, m2.actorId, m2.role, m2.displayName ?? null, m2.onboardingCompletedAt ?? null, m2.onboardingStep ?? null]
         );
       }
       async getMember(companyId, accountId) {
@@ -238328,7 +238804,7 @@ var init_postgres_control_plane = __esm({
           const all2 = await client.query(
             // 列要写全：只 SELECT 四列的话，返回给调用方的 Membership 会**丢掉** display_name /
             // onboarding_completed_at——PATCH 改角色的响应体里昵称凭空消失，而前端拿它当 membership 用。
-            `SELECT company_id, account_id, actor_id, role, display_name, onboarding_completed_at
+            `SELECT company_id, account_id, actor_id, role, display_name, onboarding_completed_at, onboarding_step
            FROM ${this.s}.company_members WHERE company_id = $1 FOR UPDATE`,
             [companyId]
           );
@@ -238366,7 +238842,7 @@ var init_postgres_control_plane = __esm({
           const all2 = await client.query(
             // 列要写全：只 SELECT 四列的话，返回给调用方的 Membership 会**丢掉** display_name /
             // onboarding_completed_at——PATCH 改角色的响应体里昵称凭空消失，而前端拿它当 membership 用。
-            `SELECT company_id, account_id, actor_id, role, display_name, onboarding_completed_at
+            `SELECT company_id, account_id, actor_id, role, display_name, onboarding_completed_at, onboarding_step
            FROM ${this.s}.company_members WHERE company_id = $1 FOR UPDATE`,
             [companyId]
           );
@@ -238488,6 +238964,31 @@ var init_postgres_control_plane = __esm({
           client.release();
         }
       }
+      // —— 共享邀请链接 ——
+      async createInviteLink(link) {
+        await this.pool.query(
+          `INSERT INTO ${this.s}.company_invite_links (token, company_id, role, created_by, created_at, expires_at)
+         VALUES ($1,$2,$3,$4,$5,$6)`,
+          [link.token, link.companyId, link.role, link.createdBy ?? null, link.createdAt, link.expiresAt]
+        );
+      }
+      async listInviteLinks(companyId, filter) {
+        const args = [companyId];
+        let where = "company_id = $1";
+        if (filter?.createdBy !== void 0) {
+          args.push(filter.createdBy);
+          where += ` AND created_by = $${args.length}`;
+        }
+        const r = await this.pool.query(
+          `SELECT * FROM ${this.s}.company_invite_links WHERE ${where} ORDER BY created_at DESC, token ASC`,
+          args
+        );
+        return r.rows.map(rowToInviteLink);
+      }
+      async getInviteLinkByToken(token) {
+        const r = await this.pool.query(`SELECT * FROM ${this.s}.company_invite_links WHERE token = $1`, [token]);
+        return r.rows[0] ? rowToInviteLink(r.rows[0]) : null;
+      }
       // —— 账号 ——
       async upsertAccount(a) {
         await this.pool.query(
@@ -238850,8 +239351,10 @@ var init_postgres_control_plane = __esm({
       role: row.role,
       // expand 阶段可空：存量行未回填 → 不带该键（与内存实现一致，读侧统一按 undefined 降级）。
       ...row.display_name != null ? { displayName: row.display_name } : {},
-      // 空 = 还没走完被邀请者三步向导（= 不算真正加入）。timestamptz → ISO 串，与其它时间字段一致。
-      ...row.onboarding_completed_at != null ? { onboardingCompletedAt: toIso(row.onboarding_completed_at) } : {}
+      // 空 = 还没走完新手指引（= 不算真正加入）。timestamptz → ISO 串，与其它时间字段一致。
+      ...row.onboarding_completed_at != null ? { onboardingCompletedAt: toIso(row.onboarding_completed_at) } : {},
+      // 新手指引当前步骤（2026-09-08）：空 = 未记，前端按各条流的兜底回落。
+      ...row.onboarding_step != null ? { onboardingStep: row.onboarding_step } : {}
     });
     rowToInvitation = (row) => ({
       id: row.id,
@@ -238863,6 +239366,15 @@ var init_postgres_control_plane = __esm({
       // 存量邀请行为 NULL → 不带该键，读侧降级为不显示邀请人（不编名字）。
       ...row.invited_by != null ? { invitedBy: row.invited_by } : {}
     });
+    rowToInviteLink = (row) => ({
+      companyId: row.company_id,
+      token: row.token,
+      role: row.role,
+      // NULL → 不带该键，读侧降级为不显示邀请人（与 rowToInvitation 的 invited_by 同一约定）。
+      ...row.created_by != null ? { createdBy: row.created_by } : {},
+      createdAt: toIso(row.created_at),
+      expiresAt: toIso(row.expires_at)
+    });
     rowToAccount = (row) => ({
       id: row.id,
       email: row.email,
@@ -252993,7 +253505,7 @@ function apiUrlFromGatewayUrl(raw) {
     return void 0;
   }
 }
-var NODE_DAEMON_PKG = "oasis_test";
+var NODE_DAEMON_PKG = DAEMON_NPM_PACKAGE;
 var NPM_LATEST_TTL_MS = 5 * 6e4;
 var npmLatestCache = null;
 async function fetchLatestNpmDaemonVersion() {
@@ -259559,6 +260071,7 @@ var DaemonWsClient = class {
     this.preflight = preflight;
     this.onUpdate = onUpdate;
     this.daemonVersion = daemonVersion;
+    this.daemonPkg = opts.daemonPkg;
     this.spawnSessionProcess = opts.spawnSessionProcess;
     this.countDetachedSessions = opts.countDetachedSessions;
     this.pingIntervalMs = opts.pingIntervalMs ?? PING_INTERVAL_MS;
@@ -259574,7 +260087,10 @@ var DaemonWsClient = class {
   pingTimer = null;
   stopped = false;
   /** 收到 update 但本进程内还有活跃会话时置真：延后到全部结束再自更新，避免打断执行中的 agent。 */
+  daemonPkg;
   pendingUpdate = false;
+  /** 延后的那次 update 帧带的目标包名（ADR 0515）；延后期间必须记住，否则补跑时会退回本包升版本。 */
+  pendingUpdatePkg;
   /** 第一次延后这次更新的时刻。用于给「等空闲」封顶——否则长跑会话能把更新无限期挂住（ADR 0115 缺陷 3）。 */
   pendingUpdateSince = null;
   /** 「等空闲」的上限；到点就照做（会打断本进程内的会话）。env OASIS_UPDATE_DEFER_MAX_MS 可调。 */
@@ -259902,6 +260418,7 @@ var DaemonWsClient = class {
         break;
       }
       case "update": {
+        this.pendingUpdatePkg = msg.pkg;
         if (!this.onUpdate) {
           log2("[node-cli]", "\u2190 update \u5FFD\u7565\uFF1A\u672C\u8FDB\u7A0B\u672A\u6CE8\u5165\u81EA\u66F4\u65B0\u903B\u8F91\uFF08\u975E node-daemon \u6258\u7BA1\uFF1F\uFF09");
           break;
@@ -259917,11 +260434,11 @@ var DaemonWsClient = class {
           log2("[node-cli]", `\u2190 update\uFF1A\u5DF2\u5EF6\u540E ${Math.round((Date.now() - (this.pendingUpdateSince ?? Date.now())) / 6e4)} \u5206\u949F\u4ECD\u672A\u7A7A\u95F2\uFF0C\u8D85\u8FC7\u4E0A\u9650\uFF0C\u73B0\u5728\u5C31\u66F4\u65B0\uFF08\u4F1A\u6253\u65AD ${active} \u4E2A\u672C\u8FDB\u7A0B\u5185\u4F1A\u8BDD\uFF09`);
           this.pendingUpdate = false;
           this.pendingUpdateSince = null;
-          this.onUpdate();
+          this.onUpdate(this.pendingUpdatePkg);
         } else {
           const detached = this.countDetachedSessions?.() ?? 0;
           log2("[node-cli]", detached > 0 ? `\u2190 update\uFF1A\u672C\u8FDB\u7A0B\u5185\u65E0\u4F1A\u8BDD\uFF08\u53E6\u6709 ${detached} \u4E2A\u72EC\u7ACB\u4F1A\u8BDD\u5728\u8DD1\uFF0C**\u4E0D\u53D7\u672C\u6B21\u91CD\u542F\u5F71\u54CD**\uFF09\uFF0C\u7ACB\u5373\u62C9\u53D6\u6700\u65B0\u7248\u672C\u5E76\u91CD\u542F` : "\u2190 update\uFF1A\u7A7A\u95F2,\u7ACB\u5373\u62C9\u53D6\u6700\u65B0\u7248\u672C\u5E76\u91CD\u542F");
-          this.onUpdate();
+          this.onUpdate(this.pendingUpdatePkg);
         }
         break;
       }
@@ -260014,7 +260531,7 @@ var DaemonWsClient = class {
       this.pendingUpdate = false;
       this.pendingUpdateSince = null;
       log2("[node-cli]", "\u6240\u6709\u4F1A\u8BDD\u5DF2\u7ED3\u675F,\u6267\u884C\u5EF6\u540E\u7684\u66F4\u65B0\uFF1A\u62C9\u53D6\u6700\u65B0\u7248\u672C\u5E76\u91CD\u542F");
-      this.onUpdate?.();
+      this.onUpdate?.(this.pendingUpdatePkg);
     }
   }
   buildMeta() {
@@ -260029,6 +260546,7 @@ var DaemonWsClient = class {
       runtimeCapabilities: this.runtimes,
       nodeVersion: process.version,
       ...this.daemonVersion ? { daemonVersion: this.daemonVersion } : {},
+      ...this.daemonPkg ? { daemonPkg: this.daemonPkg } : {},
       connectorReadiness: inspectConnectorRuntimeReadiness(),
       ...this.nodeName ? { nodeName: this.nodeName } : {},
       // ADR-0147：容器执行能力（podman 探测，进程内缓存）。带 executionEnv 的 job 只该派给 true 的节点。
@@ -260182,6 +260700,7 @@ async function startNode(opts) {
   }
   const sessions = new SessionManager(buildRoutedAdapter());
   const client = new DaemonWsClient(opts.serverUrl, opts.nodeId, sessions, adapters, opts.token, runtimes, opts.nodeName, opts.reportRuntimes ?? false, true, opts.onUpdate, opts.daemonVersion, {
+    ...opts.daemonPkg ? { daemonPkg: opts.daemonPkg } : {},
     // chat 文件浏览 handler 用它定位会话目录；production 不传 = 与 adapter 同款默认根（~/.oasis/work）。
     ...opts.workRoot !== void 0 ? { workRoot: opts.workRoot } : {},
     ...opts.spawnSessionProcess ? { spawnSessionProcess: opts.spawnSessionProcess } : {},
@@ -265368,7 +265887,8 @@ var home = () => os13.homedir();
 var oasisDir = () => path38.join(home(), ".oasis");
 var versionsDir = () => path38.join(oasisDir(), "versions");
 var versionDir = (label) => path38.join(versionsDir(), label);
-var npmPrefix = () => path38.join(oasisDir(), "npm-global");
+var LEGACY_PKG_NAME = "oasis_test";
+var npmPrefix = (pkg = LEGACY_PKG_NAME) => pkg === LEGACY_PKG_NAME ? path38.join(oasisDir(), "npm-global") : path38.join(oasisDir(), "npm-global", pkg);
 var localBin = () => path38.join(home(), ".local", "bin", "oasis");
 var instancesRoot = () => path38.join(oasisDir(), "instances");
 function isValidInstanceName(name) {
@@ -265438,17 +265958,18 @@ var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 var import_node_crypto80 = require("node:crypto");
 var fs42 = __toESM(require("node:fs"));
 var path39 = __toESM(require("node:path"));
-function versionLabel(sourceFile, pkgVersion, npmPrefixDir) {
-  if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return pkgVersion;
+function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
+  const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
+  if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
   const digest = (0, import_node_crypto80.createHash)("sha256").update(fs42.readFileSync(sourceFile)).digest("hex").slice(0, 8);
-  return `${pkgVersion}+local.${digest}`;
+  return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
   const src = realpathOrSelf(sourceFile);
   const root = realpathOrSelf(path39.join(npmPrefixDir, "lib", "node_modules"));
   return src.startsWith(root + path39.sep);
 }
-var isLocalLabel = (label) => label.includes("+local.");
+var isLocalLabel = (label) => /(?:^|[+.])local\.[0-9a-f]{8}$/.test(label);
 function installBinaryAtomic(sourceFile, targetPath) {
   if (realpathOrSelf(sourceFile) === realpathOrSelf(targetPath)) return;
   fs42.mkdirSync(path39.dirname(targetPath), { recursive: true });
@@ -265563,7 +266084,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "0.2.1" : "dev";
+var PKG_VERSION = true ? "2.0.0" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -265581,8 +266102,14 @@ function useInstance(name) {
   LOG_FILE = INST.logFile;
   BIN_DIR = INST.binDir;
   BIN_FILE = INST.binFile;
+  usePkgName(readConfigAt(INST.configFile)?.pkgName ?? BUILT_PKG_NAME);
+}
+var BUILT_PKG_NAME = true ? "oasis_test_v2" : LEGACY_PKG_NAME2;
+var PKG_NAME = BUILT_PKG_NAME;
+function usePkgName(pkg) {
+  PKG_NAME = pkg;
+  NPM_PREFIX = npmPrefix(pkg);
 }
-var PKG_NAME = true ? "oasis_test_v2" : "oasis_test";
 var parseFlags = (argv) => {
   const flags = /* @__PURE__ */ new Map();
   for (let i = 0; i < argv.length; i++) {
@@ -265770,9 +266297,28 @@ function stopDaemon(name) {
     }
   }
 }
-function selfUpdate() {
+var PKG_SWITCH_COOLDOWN_MS = 10 * 60 * 1e3;
+function pkgToSwitchTo(serverPkg) {
+  const pkg = (serverPkg ?? "").trim();
+  if (!pkg || pkg === PKG_NAME) return void 0;
+  const last = readConfig()?.pkgSwitchedAt ?? 0;
+  const sinceMs = Date.now() - last;
+  if (last && sinceMs < PKG_SWITCH_COOLDOWN_MS) {
+    console.error(
+      `[oasis] \u5FFD\u7565\u6362\u5305 ${PKG_NAME} \u2192 ${pkg}\uFF1A${Math.round(sinceMs / 1e3)}s \u524D\u521A\u6362\u8FC7\u4E00\u6B21\u3002\u4E24\u4E2A\u63A7\u5236\u9762\u5BF9\u672C\u8282\u70B9\u671F\u671B\u7684\u5305\u540D\u4E0D\u4E00\u81F4\u65F6\u4F1A\u65E0\u9650\u4E92\u5207\uFF0C\u5148\u53BB\u6838\u5BF9\u914D\u7F6E\u3002`
+    );
+    return void 0;
+  }
+  return pkg;
+}
+function selfUpdate(targetPkg) {
   const cfg = readConfig();
   if (!cfg?.serverUrl) throw new Error("no config \u2014 run `oasis daemon start` first");
+  if (targetPkg && targetPkg !== PKG_NAME) {
+    console.error(`[oasis] \u6362\u901A\u9053\uFF1A${PKG_NAME} \u2192 ${targetPkg}\uFF08\u672C\u63A7\u5236\u9762\u671F\u671B\u7684\u5305\uFF09`);
+    saveConfig({ ...cfg, pkgName: targetPkg, pkgSwitchedAt: Date.now() });
+    usePkgName(targetPkg);
+  }
   const nameArg = cfg.name ? ` --name '${cfg.name.replace(/'/g, "'\\''")}'` : "";
   const oasisBin = path40.join(NPM_PREFIX, "bin", "oasis");
   const startCmd = `"${oasisBin}" daemon start --upgrade --instance ${INSTANCE} --server-ws '${cfg.serverUrl}'${nameArg}`;
@@ -265872,17 +266418,28 @@ async function startOneInstance(o) {
     token = prev.token;
   }
   if (!token || !nodeId) {
-    console.error("Usage: oasis daemon start --server-ws <wss://...> (--enroll-token <ent_...> | --token <ont_...>) [--name <name>] [--instance <name>] [--upgrade]");
+    console.error("Usage: oasis daemon start --server-ws <wss://...> (--enroll-token <ent_...> | --token <ont_...>) [--name <name>] [--instance <name>] [--pkg <npm \u5305\u540D>] [--upgrade]");
     process.exit(1);
   }
   const name = o.applyName ? flags.get("name") ?? prev?.name : prev?.name;
   const nameChanged = prev?.name !== void 0 && name !== prev.name;
   const savedCompanyId = companyId?.trim() || prev?.companyId?.trim();
-  saveConfig({ serverUrl, token, nodeId, ...name ? { name } : {}, ...savedCompanyId ? { companyId: savedCompanyId } : {}, reportRuntimesOnNextStart: true });
+  const savedPkgName = (flags.get("pkg") || "").trim() || prev?.pkgName;
+  if (savedPkgName) usePkgName(savedPkgName);
+  saveConfig({
+    serverUrl,
+    token,
+    nodeId,
+    ...name ? { name } : {},
+    ...savedCompanyId ? { companyId: savedCompanyId } : {},
+    ...savedPkgName ? { pkgName: savedPkgName } : {},
+    ...prev?.pkgSwitchedAt ? { pkgSwitchedAt: prev.pkgSwitchedAt } : {},
+    reportRuntimesOnNextStart: true
+  });
   const before = currentLabelOf(INST);
   let label = before;
   if (!instanceHasSoftware(INST) || upgrade) {
-    const next = versionLabel(process.argv[1], PKG_VERSION, NPM_PREFIX);
+    const next = versionLabel(process.argv[1], PKG_VERSION, NPM_PREFIX, PKG_NAME);
     if (before && isLocalLabel(before) && before !== next) {
       console.log(`  \u26A0 \u5373\u5C06\u7528 ${next} \u8986\u76D6\u672C\u5B9E\u4F8B\u6B63\u5728\u8DD1\u7684\u672C\u5730\u6784\u5EFA ${before}`);
     }
@@ -265940,7 +266497,8 @@ function spawnSessionProcess(spec) {
       ...spec,
       sessionDir: dir,
       nodeId: cfg?.nodeId ?? INSTANCE,
-      daemonVersion: PKG_VERSION
+      daemonVersion: PKG_VERSION,
+      daemonPkg: PKG_NAME
     }), { mode: 384 });
     let pinnedDir = INST.currentLink;
     try {
@@ -266077,9 +266635,10 @@ void (async () => {
       nodeName: cfg.name ?? cfg.nodeId,
       reportRuntimes,
       daemonVersion: PKG_VERSION,
-      onUpdate: () => {
+      daemonPkg: PKG_NAME,
+      onUpdate: (pkg) => {
         try {
-          selfUpdate();
+          selfUpdate(pkgToSwitchTo(pkg));
         } catch (e) {
           console.error("[oasis] self-update failed:", String(e));
         }
@@ -266142,12 +266701,14 @@ void (async () => {
       process.exit(1);
     }
     const cur = currentLabelOf(INST);
+    const wantPkg = (flags.get("pkg") || "").trim();
     if (cur && isLocalLabel(cur)) {
-      console.log(`  \u26A0 \u672C\u5B9E\u4F8B\u73B0\u5728\u8DD1\u7684\u662F\u672C\u5730\u6784\u5EFA ${cur}\uFF0C\u672C\u6B21\u66F4\u65B0\u4F1A\u7528 ${PKG_NAME}@latest \u8986\u76D6\u5B83\u3002`);
+      console.log(`  \u26A0 \u672C\u5B9E\u4F8B\u73B0\u5728\u8DD1\u7684\u662F\u672C\u5730\u6784\u5EFA ${cur}\uFF0C\u672C\u6B21\u66F4\u65B0\u4F1A\u7528 ${wantPkg || PKG_NAME}@latest \u8986\u76D6\u5B83\u3002`);
     }
-    console.log(`\u2192 \u66F4\u65B0 ${PKG_NAME} \u5230\u6700\u65B0\u7248\u672C\u5E76\u91CD\u542F\u8282\u70B9\u2026`);
-    selfUpdate();
-    console.log(`\u2713 \u66F4\u65B0\u5DF2\u89E6\u53D1\uFF08\u540E\u53F0\u62C9\u53D6 ${PKG_NAME}@latest \u5E76\u91CD\u542F\uFF09\uFF1B\u67E5\u770B\u65E5\u5FD7\uFF1Atail -f ${LOG_FILE}`);
+    if (wantPkg && wantPkg !== PKG_NAME) console.log(`\u2192 \u6362\u901A\u9053\uFF1A${PKG_NAME} \u2192 ${wantPkg}`);
+    console.log(`\u2192 \u66F4\u65B0 ${wantPkg || PKG_NAME} \u5230\u6700\u65B0\u7248\u672C\u5E76\u91CD\u542F\u8282\u70B9\u2026`);
+    selfUpdate(wantPkg || void 0);
+    console.log(`\u2713 \u66F4\u65B0\u5DF2\u89E6\u53D1\uFF08\u540E\u53F0\u62C9\u53D6 ${wantPkg || PKG_NAME}@latest \u5E76\u91CD\u542F\uFF09\uFF1B\u67E5\u770B\u65E5\u5FD7\uFF1Atail -f ${LOG_FILE}`);
     return;
   }
   if (dsub === "status") {