oasis_test_v2 2.2.10 → 2.2.11

package/dist/index.js

@@ -4666,8 +4666,6 @@ var init_kill = __esm({
 function scan(state, ctx) {
   if (state.workorder.dispatchPaused) return { events: [], terminated: false };
   const events = [];
-  const now = ctx.at;
-  const policy = ctx.policy ?? CODE_DEFAULT_POLICY;
   for (const node2 of state.liveNodes()) {
     const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
     if (!lw) {
@@ -4701,12 +4699,7 @@ function scan(state, ctx) {
       continue;
     }
     if (wstate === "running") {
-      const start = lw.lastActivityAt ?? lw.startedAt ?? lw.createdAt;
-      const elapsed = new Date(now).getTime() - new Date(start).getTime();
-      const wcell = policy.resolve({ executor: classify(node2.assigneeActorId), scenario: "work" });
-      if (wcell.timeoutAction.kind === "kill-rebuild" && elapsed > wcell.deadlineMs) {
-        events.push({ kind: "work.timeout", workorderId: state.workorder.id, workId: lw.id });
-      }
+      checkRunningWorkTimeout(state, node2, lw, ctx, events);
       continue;
     }
     const blockers = scanBlockersForNode(state, node2, lw);
@@ -4771,10 +4764,9 @@ function scan(state, ctx) {
           workorderId: state.workorder.id,
           nodeId: node2.id,
           // ★ 合并写：保留 source ∈ {type, manual, model} 的原有行，覆写 source='closure' 的行。
-          //   `plan.update_review_requirements` handler 是**全量替换**（killNodeReviews + replaceRequirements），
+          //   `plan.update_review_requirements` 的名单仍是**全量替换**，
           //   所以必须把手动 / 类型 / 模型来源的行一并带上——漏一条即误删协调者手动指派的审核人。
-          //   killNodeReviews 会杀本节点在跑的评审：candidate 分支进入时该节点尚未派出评审（reqs 为空
-          //   or 只含 closure 之外的组），本轮内 kill 无影响。
+          //   总线为新事件写 preserveReviews：未变组的当前审核继续，只有新增 closure 组待派。
           reviewers: mergedClosureRequirements(state, node2.id, closureActors)
         });
         continue;
@@ -4877,6 +4869,15 @@ function scan(state, ctx) {
   const terminated = events.length === 0 && checkTerminated(state);
   return { events, terminated };
 }
+function checkRunningWorkTimeout(state, node2, work, ctx, events) {
+  const start = work.lastActivityAt ?? work.startedAt ?? work.createdAt;
+  const elapsed = new Date(ctx.at).getTime() - new Date(start).getTime();
+  const policy = ctx.policy ?? CODE_DEFAULT_POLICY;
+  const wcell = policy.resolve({ executor: classify(node2.assigneeActorId), scenario: "work" });
+  if (wcell.timeoutAction.kind === "kill-rebuild" && elapsed > wcell.deadlineMs) {
+    events.push({ kind: "work.timeout", workorderId: state.workorder.id, workId: work.id });
+  }
+}
 function openCommentBlockers(state, node2) {
   if (!node2.assigneeActorId) return [];
   return state.allIssues().filter((i) => i.kind === "comment" && i.resolvedAt === null && i.aboutNodeId === node2.id).map((i) => ({
@@ -4961,6 +4962,13 @@ function tryToRun(state, nodeId, ctx, events) {
   const node2 = state.node(nodeId);
   if (!node2) return;
   if (!node2.assigneeActorId) return;
+  const latest = (node2.latestWorkId ? state.work(node2.latestWorkId) : null) ?? null;
+  if (unexemptedVetoBlockers(scanBlockersForNode(state, node2, latest), "dispatch").length > 0) {
+    if (latest && workState(latest, hasOutput(latest, state.artifactsOf(latest.id).length)) === "running") {
+      checkRunningWorkTimeout(state, node2, latest, ctx, events);
+    }
+    return;
+  }
   const inbound = state.edgesInto(nodeId);
   for (const e of inbound) {
     if (e.kind !== "data" || !e.required) continue;
@@ -12011,7 +12019,7 @@ function markNodeForRetry(state, nodeId, at, resetRejectedBudget = false) {
     }
   }
 }
-var planUpdateSpec, planAddNode, planDeleteNode, planAddEdge, planDeleteEdge, planAssignActor, planUpdateReviewRequirements, planNodeRetry, planUpdateFields, planApply;
+var planUpdateSpec, planAddNode, planDeleteNode, planAddEdge, planDeleteEdge, planAssignActor, reviewerKey, planUpdateReviewRequirements, planNodeRetry, planUpdateFields, planApply;
 var init_plan = __esm({
   "../engine/src/handlers/plan.ts"() {
     "use strict";
@@ -12134,11 +12142,51 @@ var init_plan = __esm({
         });
       }
     };
+    reviewerKey = (r) => JSON.stringify([r.reviewerActorId, r.reviewGroup]);
     planUpdateReviewRequirements = {
       name: "plan/update-review-requirements",
       kind: "plan.update_review_requirements",
       apply(e, state, ctx) {
-        if (!state.node(e.nodeId)) return;
+        const node2 = state.node(e.nodeId);
+        if (!node2) return;
+        if (e.preserveReviews) {
+          const previous3 = state.requirementsOf(e.nodeId);
+          const previousByKey = new Map(previous3.map((r) => [reviewerKey(r), r]));
+          const nextByKey = new Map(e.reviewers.map((r) => [reviewerKey(r), r]));
+          const membershipChanged = previousByKey.size !== nextByKey.size || [...previousByKey.keys()].some((key) => !nextByKey.has(key));
+          const currentByGroup = /* @__PURE__ */ new Map();
+          for (const req of previous3) {
+            const r = req.latestReviewId ? state.review(req.latestReviewId) : void 0;
+            if (r && r.nodeId === e.nodeId && r.targetWorkId === node2.latestProposedWorkId && r.reviewGroup === req.reviewGroup && previousByKey.has(reviewerKey(r)) && nextByKey.has(reviewerKey(r))) {
+              currentByGroup.set(req.reviewGroup, r.id);
+            }
+          }
+          const next = [...nextByKey.values()].map((r) => {
+            const old = previousByKey.get(reviewerKey(r));
+            return {
+              nodeId: e.nodeId,
+              reviewerActorId: r.reviewerActorId,
+              reviewGroup: r.reviewGroup,
+              source: r.source,
+              assignedBy: old?.assignedBy ?? ctx.actorId,
+              // assignedAt 同时是历史判决回填的名单纪元。名单变更必须推进，避免拿缩减后的组集
+              // 去补判旧 work；本轮有效票由 durable 指针保留，不靠时间戳继承（ADR 0533）。
+              assignedAt: membershipChanged ? ctx.at : old?.assignedAt ?? ctx.at,
+              latestReviewId: currentByGroup.get(r.reviewGroup) ?? null
+            };
+          });
+          for (const r of state.allReviews()) {
+            if (r.nodeId === e.nodeId && !nextByKey.has(reviewerKey(r)) && isReviewKillable(r)) {
+              killReviewRow(state, r, ctx.at);
+            }
+          }
+          const unchanged = previous3.length === next.length && next.every((r) => {
+            const old = previousByKey.get(reviewerKey(r));
+            return old?.source === r.source && old.latestReviewId === r.latestReviewId;
+          });
+          if (!unchanged) state.replaceRequirements(e.nodeId, next);
+          return;
+        }
         killNodeReviews(state, e.nodeId, ctx.at);
         state.replaceRequirements(e.nodeId, e.reviewers.map((r) => ({
           nodeId: e.nodeId,
@@ -12149,6 +12197,9 @@ var init_plan = __esm({
           assignedAt: ctx.at,
           latestReviewId: null
         })));
+      },
+      async effect(e, ctx) {
+        if (e.preserveReviews) await ctx.cancelKilledSessions(e.workorderId, { nodeId: e.nodeId, retained: e.reviewers });
       }
     };
     planNodeRetry = {
@@ -13236,6 +13287,8 @@ function versionCommandEvent(event) {
     return { ...event, semanticsVersion: 3 };
   }
   switch (event.kind) {
+    case "plan.update_review_requirements":
+      return { ...event, preserveReviews: true };
     case "work.accept":
     case "work.kill":
     case "work.handoff_recorded":
@@ -13801,7 +13854,7 @@ var init_bus = __esm({
           // ★ 设计 §workorder.sealed/paused「按 work.kill 逻辑杀」：killAllWorks 只置状态，会话取消在这里做——
           // apply 已把被杀 work/review 置 deadAt/cancelledAt，这里按 store 找它们仍挂着的会话 cancel
           //（deadAt 且 endedAt 未置 = 刚被杀未退出的在途会话）。没会话 / 已退 → no-op。
-          cancelKilledSessions: async () => {
+          cancelKilledSessions: async (_workorderId, reviewScope) => {
             let snap;
             try {
               snap = await this.store.transaction((tx) => tx.loadWorkorder(record8.workorderId));
@@ -13817,10 +13870,13 @@ var init_bus = __esm({
                 console.warn(`[bus] cancelKilledSessions ${what} ${id}: ${String(err)}`);
               }
             };
-            for (const w2 of snap.works) {
+            for (const w2 of reviewScope === void 0 ? snap.works : []) {
               if (w2.deadAt && w2.endedAt === null) await cancel(w2.id, "work");
             }
             for (const r of snap.reviews) {
+              if (reviewScope && (r.nodeId !== reviewScope.nodeId || reviewScope.retained.some(
+                (req) => req.reviewerActorId === r.reviewerActorId && req.reviewGroup === r.reviewGroup
+              ))) continue;
               if (r.cancelledAt && r.endedAt === null) await cancel(r.id, "review");
             }
           },
@@ -16273,6 +16329,10 @@ var init_dispatcher = __esm({
       // 凭证是执行者属性，要人改（等待策略：熔断）
       [NO_BINDING_REASON]: "A",
       // 僵尸账号：只有人给它一个有效绑定才可能变
+      // 绑到了**别家公司**的机器上（ADR-0164 §5 的租户闸）。与上一条同构：绑定本身就是错的，
+      // 只有人改绑才可能变——而「改绑」正是 A 轴的第一条触发（executorSignature 含 nodeId），
+      // 改完自动复位、不必再等一次人工干预。落 C 也不算错（安全默认），但会让人多做一步。
+      "node-not-in-company": "A",
       "clean": "B",
       // 机器好好的、就是没交东西 → 换个东西给它做才有意义
       "timeout": "B",
@@ -21195,16 +21255,18 @@ var init_kernel_bridge = __esm({
               const artId = op.artifactId;
               const opReviewers = op.reviewers;
               const editReviewRoles = op.reviewRoles;
+              const closureReviewers = (artifacts.get(artId)?.reviewers ?? []).filter((r) => r.source === "closure");
               if (artId && (opReviewers || editReviewRoles !== void 0)) {
                 const art = artifacts.get(artId);
                 const effectiveRoles = editReviewRoles !== void 0 ? editReviewRoles === null ? void 0 : editReviewRoles : art?.reviewRoles;
-                const effectiveExplicit = opReviewers ?? (art?.reviewers ?? []).map((r) => ({ actor: r.actor, source: r.source }));
+                const effectiveExplicit = opReviewers ?? (art?.reviewers ?? []).filter((r) => r.source !== "closure").map((r) => ({ actor: r.actor, source: r.source }));
                 const { reviewers: nextReqs, staffingIssues } = resolveNodeReviewers({
                   typeName: art?.type ?? "",
                   typeDef: art ? this.schema.get(art.type) : void 0,
                   ...effectiveRoles !== void 0 ? { reviewRoles: effectiveRoles } : {},
                   explicitReviewers: effectiveExplicit,
-                  roleIndex: this.roleIndex
+                  roleIndex: this.roleIndex,
+                  closureGate: closureReviewers.map((r) => r.actor)
                 });
                 for (const issue2 of staffingIssues) {
                   reviewerStaffing.push({ nodeId: artId, type: art?.type ?? "", role: issue2.role, from: issue2.from });
@@ -21263,7 +21325,7 @@ var init_kernel_bridge = __esm({
                 ...opDescription !== void 0 ? { description: opDescription } : {},
                 ...fields ? { fields: { ...previous3.fields, ...fields } } : {},
                 ...editReviewRoles !== void 0 ? { reviewRoles: editReviewRoles ?? void 0 } : {},
-                ...opReviewers ? { reviewers: opReviewers } : {}
+                ...opReviewers ? { reviewers: [...opReviewers, ...closureReviewers] } : {}
               });
               applied++;
               break;
@@ -29324,6 +29386,8 @@ function runBackgroundAssistantChatTurn(deps) {
       ...assistantMsgId ? { messageId: assistantMsgId } : {},
       log: log3
     });
+    const liveTurn = deps.liveChat && deps.liveHandle ? deps.liveChat.start(deps.chatSessionId, deps.liveHandle, { items: itemLedger }) : void 0;
+    if (assistantMsgId) liveTurn?.setAssistantMessageId(assistantMsgId);
     const normalizedSource = typeof deps.session.onNormalizedProviderEvent === "function" ? {
       onNormalizedProviderEvent: deps.session.onNormalizedProviderEvent.bind(deps.session),
       finishTurn: (signal) => deps.session.finishNormalizedTurn?.(signal)
@@ -29349,7 +29413,8 @@ function runBackgroundAssistantChatTurn(deps) {
     let ckptDirty = false;
     normalizedSource.onNormalizedProviderEvent((event) => {
       try {
-        itemLedger.apply(event);
+        if (liveTurn) liveTurn.applyNormalizedEvent(event);
+        else itemLedger.apply(event);
       } catch {
       }
       ckptDirty = true;
@@ -29387,34 +29452,59 @@ function runBackgroundAssistantChatTurn(deps) {
     }
     const finalize = async (status) => {
       if (ckptTimer) clearInterval(ckptTimer);
-      await checkpointChain.catch(() => void 0);
-      normalizedSource.finishTurn(status === "done" ? "completed" : "failed");
-      itemLedger.finish(status === "done" ? "completed" : "failed");
-      await itemLedger.drain();
-      const projectedContent = itemLedger.projectContent();
-      const parts = collectedParts();
-      await finalizeAssistantRow({
-        chatStore: deps.chatStore,
-        chatSessionId: deps.chatSessionId,
-        assistantMsgId,
-        content: projectedContent,
-        parts,
-        status,
-        ...runId ? { runId } : {},
-        now
-      });
-      if (typeof deps.chatStore.updateSession === "function") {
-        try {
-          await deps.chatStore.updateSession(deps.chatSessionId, {
-            runtimeSessionId: deps.session.nativeSessionId ?? null,
-            touchedAt: now()
+      try {
+        await checkpointChain.catch(() => void 0);
+        normalizedSource.finishTurn(status === "done" ? "completed" : "failed");
+        itemLedger.finish(status === "done" ? "completed" : "failed");
+        await itemLedger.drain();
+        const projectedContent = itemLedger.projectContent();
+        const parts = collectedParts();
+        await finalizeAssistantRow({
+          chatStore: deps.chatStore,
+          chatSessionId: deps.chatSessionId,
+          assistantMsgId,
+          content: projectedContent,
+          parts,
+          status,
+          ...runId ? { runId } : {},
+          now
+        });
+        if (typeof deps.chatStore.updateSession === "function") {
+          try {
+            await deps.chatStore.updateSession(deps.chatSessionId, {
+              runtimeSessionId: deps.session.nativeSessionId ?? null,
+              touchedAt: now()
+            });
+          } catch {
+          }
+        }
+        if (liveTurn) {
+          if (projectedContent) liveTurn.emit({ type: "text", text: projectedContent });
+          liveTurn.emitLive({
+            protocolVersion: 2,
+            streamId: `background:${deps.chatSessionId}`,
+            turnId: deps.turnId ?? fallbackTurnId(runId),
+            itemId: `background:${assistantMsgId ?? runId}`,
+            itemType: "message",
+            operation: "completed",
+            payload: { role: "assistant", text: projectedContent }
           });
+        }
+        try {
+          deps.onSettled?.();
         } catch {
         }
-      }
-      try {
-        deps.onSettled?.();
-      } catch {
+      } finally {
+        liveTurn?.emit({ type: "done" });
+        liveTurn?.emitLive({
+          protocolVersion: 2,
+          streamId: `background:${deps.chatSessionId}`,
+          turnId: deps.turnId ?? fallbackTurnId(runId),
+          itemId: "background:terminal",
+          itemType: "control",
+          operation: status === "done" ? "turn_completed" : "turn_failed"
+        });
+        liveTurn?.finish(status);
       }
     };
     void Promise.resolve(deps.session.done).then(() => finalize("done").catch(() => void 0)).catch((err) => {
@@ -142333,71 +142423,6 @@ var init_collect = __esm({
   }
 });
 
-// ../server/src/domains/projects/ephemeral-project.ts
-function isEphemeralProject(projectId2) {
-  return projectId2.startsWith(EPHEMERAL_PROJECT_PREFIX);
-}
-function isUncategorizedProjectId(projectId2) {
-  return projectId2 === UNCATEGORIZED_PROJECT_ID;
-}
-function ephemeralProjectIdFor(workOrderId) {
-  return `${EPHEMERAL_PROJECT_PREFIX}${workOrderId.replace(/[^a-zA-Z0-9_-]+/g, "_")}`;
-}
-function ephemeralProjectNameFor(workOrderId, title) {
-  return `\u4E34\u65F6\u9879\u76EE \xB7 ${title?.trim() || workOrderId}`;
-}
-async function ensureWorkorderProject(deps) {
-  const { workOrderId, projectId: projectId2, title, createdBy } = deps;
-  try {
-    if (projectId2) {
-      await deps.upsertBinding({ workOrderId, projectId: projectId2 });
-      return projectId2;
-    }
-    const id = ephemeralProjectIdFor(workOrderId);
-    await deps.createProject({
-      id,
-      name: ephemeralProjectNameFor(workOrderId, title),
-      description: `\u5EFA\u5355\u65F6\u672A\u6307\u5B9A\u9879\u76EE\uFF0C\u7CFB\u7EDF\u81EA\u52A8\u4E3A\u5DE5\u5355 ${workOrderId} \u521B\u5EFA\u7684\u4E34\u65F6\u9879\u76EE\u3002\u53EF\u7528 \`PATCH /api/work-orders/${workOrderId}/project\` \u6539\u6302\u5230\u6B63\u5F0F\u9879\u76EE\u3002`,
-      ...createdBy ? { createdBy } : {}
-    });
-    await deps.upsertBinding({ workOrderId, projectId: id });
-    return id;
-  } catch (e) {
-    deps.onWarn?.(`[project] \u5DE5\u5355 ${workOrderId} \u7ED1\u5B9A\u9879\u76EE\u5931\u8D25\uFF08\u4E0D\u963B\u65AD\u5EFA\u5355\uFF09\uFF1A${String(e)}`);
-    return null;
-  }
-}
-function makeEnsureProjectFromStore(store) {
-  return async (input) => {
-    const existing = await store.getProject(input.id);
-    if (existing) return { id: existing.id };
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const createdById = input.createdBy?.trim();
-    const createdBy = createdById && (createdById.startsWith("actor:human:") || createdById.startsWith("actor:agent:")) ? { id: createdById, kind: projectActorKind(createdById), name: null, avatar: null } : void 0;
-    await store.upsertProject({
-      id: input.id,
-      name: input.name,
-      ...input.description !== void 0 ? { description: input.description } : {},
-      ...createdBy ? { createdBy } : {},
-      createdAt: now,
-      updatedAt: now
-    });
-    return { id: input.id };
-  };
-}
-var EPHEMERAL_PROJECT_PREFIX, UNCATEGORIZED_PROJECT_ID, UNCATEGORIZED_PROJECT_NAME, UNCATEGORIZED_PROJECT_DESCRIPTION, UNCATEGORIZED_UNKNOWN_TIME;
-var init_ephemeral_project = __esm({
-  "../server/src/domains/projects/ephemeral-project.ts"() {
-    "use strict";
-    init_src();
-    EPHEMERAL_PROJECT_PREFIX = "proj_tmp_";
-    UNCATEGORIZED_PROJECT_ID = "proj:uncategorized";
-    UNCATEGORIZED_PROJECT_NAME = "\u65E0\u5206\u7C7B\u9879\u76EE";
-    UNCATEGORIZED_PROJECT_DESCRIPTION = "\u6240\u6709\u672A\u9009\u62E9\u9879\u76EE\u7684\u5BF9\u8BDD\u76F8\u5173\u6587\u4EF6\u548C\u4EFB\u52A1\u81EA\u52A8\u5E76\u5165\u8FD9\u91CC\uFF0C\u7EC4\u7EC7\u5185\u6240\u6709\u4EBA\u53EF\u89C1\u3002";
-    UNCATEGORIZED_UNKNOWN_TIME = "1970-01-01T00:00:00.000Z";
-  }
-});
-
 // ../server/src/domains/collab/timeline.ts
 function buildNodeTimeline(artifactId, snap, runIdByTarget) {
   if (!snap) return { artifactId, items: [] };
@@ -159818,8 +159843,9 @@ var init_live_chat = __esm({
     DEFAULT_LIVE_COALESCE_MS = 24;
     DEFAULT_LIVE_COALESCE_MAX_CHUNKS = 32;
     DEFAULT_LIVE_COALESCE_MAX_CHARS = 64 * 1024;
-    LiveChatRegistry = class {
+    LiveChatRegistry = class _LiveChatRegistry {
       turns = /* @__PURE__ */ new Map();
+      turnStartWaiters = /* @__PURE__ */ new Map();
       epochs = /* @__PURE__ */ new Map();
       bufferMax;
       graceMs;
@@ -159865,6 +159891,15 @@ var init_live_chat = __esm({
           v3Items: /* @__PURE__ */ new Map()
         };
         this.turns.set(chatSessionId, turn);
+        this.flushPendingUserItems(chatSessionId);
+        const waiters = this.turnStartWaiters.get(chatSessionId);
+        this.turnStartWaiters.delete(chatSessionId);
+        for (const wake of waiters ?? []) {
+          try {
+            wake();
+          } catch {
+          }
+        }
         return {
           runtimeSessionId: turn.runtimeSessionId,
           epoch: turn.liveEpoch,
@@ -159937,6 +159972,26 @@ var init_live_chat = __esm({
           ...opts.items ? { items: opts.items } : {}
         };
       }
+      /** 只通知开轮，不承载内容。先检查再登记均为同步，避免空闲检查与订阅之间漏掉开轮。 */
+      onNextTurn(chatSessionId, wake) {
+        if (this.isRunning(chatSessionId)) {
+          wake();
+          return () => {
+          };
+        }
+        let waiters = this.turnStartWaiters.get(chatSessionId);
+        if (!waiters) {
+          waiters = /* @__PURE__ */ new Set();
+          this.turnStartWaiters.set(chatSessionId, waiters);
+        }
+        waiters.add(wake);
+        return () => {
+          waiters.delete(wake);
+          if (waiters.size === 0 && this.turnStartWaiters.get(chatSessionId) === waiters) {
+            this.turnStartWaiters.delete(chatSessionId);
+          }
+        };
+      }
       /**
        * 归一层中间事件 → 带 `itemId` 的 item op（ADR D4 第 2 跳）+ v3 帧 dual-emit（S3）。
        *
@@ -160164,9 +160219,34 @@ var init_live_chat = __esm({
        * （`server.ts` 里 `recordUserSubmission` 在 `liveChat.start` 之前）。拿不到就不发——
        * 前端退回「等下一次快照」，与修复前一致，不会更坏。
        */
+      /**
+       * 「user item 已落库、但这条会话的 live 轮还没 start」时的暂存位（见 {@link publishUserItem}）。
+       *
+       * 每会话只留最近几条：它的唯一用途是补发**当前这一次提交**，不是可靠队列。留太多等于把
+       * 一条早就过期的 user 帧在下一轮开头推出去，那比丢了更糟（用户会看到上一轮的话冒出来）。
+       */
+      pendingUserItems = /* @__PURE__ */ new Map();
+      /** 单会话暂存上限。正常只会有 1 条（一次提交一条）；给到 4 是为了并发提交时不至于丢。 */
+      static PENDING_USER_ITEM_MAX = 4;
+      bufferUserItem(chatSessionId, item) {
+        const list2 = this.pendingUserItems.get(chatSessionId) ?? [];
+        list2.push(item);
+        while (list2.length > _LiveChatRegistry.PENDING_USER_ITEM_MAX) list2.shift();
+        this.pendingUserItems.set(chatSessionId, list2);
+      }
+      /** `start` 之后立刻调：把暂存的 user item 补发出去。发不出去就丢掉，不再往下一轮带。 */
+      flushPendingUserItems(chatSessionId) {
+        const list2 = this.pendingUserItems.get(chatSessionId);
+        if (!list2?.length) return;
+        this.pendingUserItems.delete(chatSessionId);
+        for (const item of list2) this.publishUserItem(chatSessionId, item);
+      }
       publishUserItem(chatSessionId, item) {
         const turn = this.turns.get(chatSessionId);
-        if (!turn) return false;
+        if (!turn) {
+          this.bufferUserItem(chatSessionId, item);
+          return false;
+        }
         const payload = { role: "user", text: item.text };
         if (item.clientSubmitId) payload.clientSubmitId = item.clientSubmitId;
         if (item.attachments?.length) payload.attachments = item.attachments;
@@ -160587,6 +160667,40 @@ var init_live_chat = __esm({
   }
 });
 
+// ../server/src/chat-turn-wait.ts
+function waitForChatTurn(res, liveChat, sessionId, startKeepalive, ready = false) {
+  res.writeHead(200, {
+    "content-type": "application/x-oasis-live-v3+ndjson; charset=utf-8",
+    "cache-control": "no-cache, no-transform",
+    "x-accel-buffering": "no",
+    "access-control-expose-headers": "X-Chat-Session-Watch, X-Chat-Waiting, X-Can-Append",
+    "x-chat-session-watch": "1",
+    "x-chat-waiting": "1",
+    "x-can-append": "0"
+  });
+  res.flushHeaders();
+  const stopKeepalive = startKeepalive(res);
+  let detach = () => {
+  };
+  const cleanup = () => {
+    stopKeepalive();
+    detach();
+  };
+  res.once("close", cleanup);
+  const wake = () => {
+    cleanup();
+    if (!res.destroyed) res.end('{"type":"turn_available"}\n');
+  };
+  if (ready) wake();
+  else detach = liveChat.onNextTurn(sessionId, wake);
+  if (res.destroyed) cleanup();
+}
+var init_chat_turn_wait = __esm({
+  "../server/src/chat-turn-wait.ts"() {
+    "use strict";
+  }
+});
+
 // ../server/src/chat-attachment-files.ts
 function safeAttachmentName(raw) {
   return (raw || "attachment").replace(/[^\w.\-]+/g, "_").replace(/^\.+/, "").slice(0, 80) || "attachment";
@@ -160784,13 +160898,24 @@ var init_closure_report = __esm({
 });
 
 // ../server/src/governance/workorder-drafts.ts
-var import_node_fs5, DRAFT_EDIT_LOCK_TTL_MS, WorkorderDraftStore, ident, seqNoOf, PostgresWorkorderDraftStore;
+var import_node_fs5, DRAFT_EDIT_LOCK_TTL_MS, WorkorderDraftTagMismatchError, WorkorderDraftStore, ident, seqNoOf, PostgresWorkorderDraftStore;
 var init_workorder_drafts = __esm({
   "../server/src/governance/workorder-drafts.ts"() {
     "use strict";
     import_node_fs5 = __toESM(require("node:fs"), 1);
     init_closure_report();
     DRAFT_EDIT_LOCK_TTL_MS = 12e4;
+    WorkorderDraftTagMismatchError = class extends Error {
+      constructor(draftId, expectedWorkspace, actualWorkspace) {
+        super(
+          actualWorkspace === void 0 ? `\u5EFA\u5355\u8349\u6848 ${draftId} \u4E0D\u5728\u672C store\uFF08\u5F88\u53EF\u80FD\u5EFA\u5728\u53E6\u4E00\u4E2A schema \u7684\u5E93\u91CC\uFF09\u2014\u2014\u62D2\u7EDD\u6253\u6807` : `\u5EFA\u5355\u8349\u6848 ${draftId} \u7684 workspace \u662F ${actualWorkspace}\uFF0C\u4E0E\u672C\u6B21\u5EFA\u5355\u7684 ${String(expectedWorkspace)} \u4E0D\u7B26\u2014\u2014\u62D2\u7EDD\u6253\u6807\uFF08\u8DE8\u5E93\u649E\u53F7\u4F1A\u6539\u7ED1\u522B\u4EBA\u7684\u8349\u6848\uFF09`
+        );
+        this.draftId = draftId;
+        this.expectedWorkspace = expectedWorkspace;
+        this.actualWorkspace = actualWorkspace;
+        this.name = "WorkorderDraftTagMismatchError";
+      }
+    };
     WorkorderDraftStore = class {
       constructor(file) {
         this.file = file;
@@ -160894,14 +161019,28 @@ var init_workorder_drafts = __esm({
       }
       /** 给草案打上 chat 会话标（建单经 chat 路时，/api/cmd 拿到 X-Chat-Session-Id 后调）。
        *  同时（若拿得到）盖上产出它的那一轮 runId，供 friday 重进对话页把该版草案归位到那条助手消息。
-       *  sourceRunId 一旦盖上不再改（同一版草案就属于那一轮）。 */
-      async tagSession(draftId, chatSessionId, sourceRunId) {
+       *  sourceRunId 一旦盖上不再改（同一版草案就属于那一轮）。
+       *
+       *  **`expectedWorkspace` 是防跨库改绑的那道闸（2026-09-10 线上事故）**：草案 id 形如
+       *  `wodraft:<n>`，而**每个 schema 各有一台发号器**（共享库一台、每家公司各一台，见
+       *  `PostgresWorkorderDraftStore.open` 建的 `workorder_draft_seq`）。于是「共享库的 70 号」和
+       *  「didi 库的 70 号」是两份毫不相干的草案。一旦建草案与打标落在**不同的 store**上
+       *  （公司上下文解析不出来 → 建落共享库；打标按公司解析 → 打进公司库），这里就会拿着同一个
+       *  号在另一个库里翻出**别人的草案**，把它的 chatSessionId / sourceRunId 覆盖成本次会话——
+       *  别人的建单卡就这样出现在你的对话里，而原归属被覆盖后再也找不回来。
+       *
+       *  所以调用方**必须**把「我刚建的那张单的 workspace」一起传进来：对不上就抛，绝不写。
+       *  查不到 id 同理——旧实现在这里是 `if (d) {}` 的静默 no-op，那正是这次事故连一行日志都没留下的原因。
+       *  抛出的是 {@link WorkorderDraftTagMismatchError}，调用方该**记账后继续**（草案本身已经建好，
+       *  不该因为打标失败把整个建单回执变成失败），见 `/api/cmd` 与 playbooks 两处调用点。 */
+      async tagSession(draftId, chatSessionId, sourceRunId, expectedWorkspace) {
         const d = this.drafts.get(draftId);
-        if (d) {
-          d.chatSessionId = chatSessionId;
-          if (sourceRunId && !d.sourceRunId) d.sourceRunId = sourceRunId;
-          await this.persist({ kind: "upsert", draft: d });
+        if (!d || expectedWorkspace !== void 0 && d.workspace !== expectedWorkspace) {
+          throw new WorkorderDraftTagMismatchError(draftId, expectedWorkspace, d?.workspace);
         }
+        d.chatSessionId = chatSessionId;
+        if (sourceRunId && !d.sourceRunId) d.sourceRunId = sourceRunId;
+        await this.persist({ kind: "upsert", draft: d });
       }
       /** 草案被就地编辑后（editDraftPlan 改了 plan.ops）调用：bump `at` 让 friday 重载据此察觉，
        *  并**落盘**——否则编辑过的草案在 apply 前进程重启就丢改动（草案落盘的初衷正是扛重启）。 */
@@ -161694,9 +161833,14 @@ var init_assistants = __esm({
         await this.opts.actors.disableActor(agentId, by).catch(() => {
         });
       }
+      /** 本服务的公司 scope；未启用公司维度（单租户装配/单测）时 undefined = 不过滤，行为不变。 */
+      scope() {
+        const companyId = this.opts.companyId();
+        return companyId ? { companyId } : void 0;
+      }
       /* ---------- runtime 挑选（ADR §3.3.a）：负载均衡 + 幂等 tie-break ---------- */
       async pickAssistantRuntime() {
-        const runtimes = (await this.opts.listRuntimes()).filter((r) => r.status === "online");
+        const runtimes = (await this.opts.listRuntimes(void 0, this.scope())).filter((r) => r.status === "online");
         if (runtimes.length === 0) return null;
         let defaultKind = DEFAULT_ASSISTANT_RUNTIME_KIND;
         for (const r of runtimes) {
@@ -161723,7 +161867,7 @@ var init_assistants = __esm({
         if (!actor.roles.includes("assistant")) return false;
         const binding = await this.opts.registry.getBinding(agentId);
         if (!binding || binding.status !== "active") return false;
-        const runtime = (await this.opts.listRuntimes(binding.nodeId)).find((r) => r.kind === binding.runtimeKind);
+        const runtime = (await this.opts.listRuntimes(binding.nodeId, this.scope())).find((r) => r.kind === binding.runtimeKind);
         if (!runtime || runtime.status !== "online") return false;
         return true;
       }
@@ -186756,12 +186900,13 @@ var init_governance_service = __esm({
         const binding = await this.options.projects.getWorkspaceBinding(ctx.organizationId, workorderId);
         if (!binding) {
           if (claimedProjectId) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_PROJECT_BINDING_MISSING", "\u5DE5\u5355\u6CA1\u6709\u53EF\u4FE1\u9879\u76EE\u7ED1\u5B9A");
+          await this.requireOrganizationActor(ctx);
           return void 0;
         }
         if (claimedProjectId && binding.projectId !== claimedProjectId) {
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_PROJECT_MISMATCH", "\u8BF7\u6C42\u9879\u76EE\u4E0E\u5DE5\u5355\u7ED1\u5B9A\u4E0D\u4E00\u81F4");
         }
-        if (this.options.projects.isEphemeralProject(ctx.organizationId, binding.projectId)) {
+        if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, binding.projectId)) {
           await this.requireOrganizationActor(ctx);
           return void 0;
         }
@@ -186969,8 +187114,8 @@ var init_governance_service = __esm({
         const projectId2 = input.scopeType === "project" ? input.scopeId : void 0;
         if (input.scopeType === "project") {
           if (!projectId2) throw new KnowledgeGovernanceError(400, "KNOWLEDGE_PROJECT_REQUIRED", "\u9879\u76EE Space \u5FC5\u987B\u6307\u5B9A\u9879\u76EE");
-          if (this.options.projects.isEphemeralProject(ctx.organizationId, projectId2)) {
-            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u4E34\u65F6\u9879\u76EE\u4E0D\u521B\u5EFA\u77E5\u8BC6 Space");
+          if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2)) {
+            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u8BE5\u9879\u76EE\u4E0D\u652F\u6301\u72EC\u7ACB\u77E5\u8BC6 Space");
           }
           await this.authorizeProjectResource(ctx, projectId2, "configure");
         } else if (input.scopeId) {
@@ -187096,7 +187241,7 @@ var init_governance_service = __esm({
       async reconfigureKnowledgeTree(ctx, store, organizationSpace, connection, _config) {
         const projectEntries = [];
         for (const project of await this.options.projects.listProjects(ctx.organizationId)) {
-          if (this.options.projects.isEphemeralProject(ctx.organizationId, project.id)) continue;
+          if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, project.id)) continue;
           const projectSpace = (await store.list(this.projectScope(ctx, project.id), "space")).filter((space) => space.status !== "archived").sort((left, right) => right.updatedAt.localeCompare(left.updatedAt))[0];
           if (projectSpace) projectEntries.push({ project, space: projectSpace });
         }
@@ -187315,8 +187460,8 @@ var init_governance_service = __esm({
       async resolveRunTarget(ctx, projectId2) {
         await this.requireOrganizationActor(ctx);
         if (projectId2) {
-          if (this.options.projects.isEphemeralProject(ctx.organizationId, projectId2)) {
-            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u4E34\u65F6\u9879\u76EE\u6CA1\u6709\u72EC\u7ACB\u9879\u76EE\u77E5\u8BC6\u5E93\uFF0C\u8BF7\u9009\u62E9\u7EC4\u7EC7\u77E5\u8BC6\u5E93");
+          if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2)) {
+            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u8BE5\u9879\u76EE\u6CA1\u6709\u72EC\u7ACB\u9879\u76EE\u77E5\u8BC6\u5E93\uFF0C\u8BF7\u9009\u62E9\u7EC4\u7EC7\u77E5\u8BC6\u5E93");
           }
           await this.authorizeProjectResource(ctx, projectId2, "publish");
         }
@@ -187532,7 +187677,7 @@ var init_governance_service = __esm({
         if (actor.kind !== "system") await this.requireOrganizationAdmin(ctx);
         const project = await this.options.projects.getProject(ctx.organizationId, projectId2);
         if (!project) throw new KnowledgeGovernanceError(404, "KNOWLEDGE_PROJECT_NOT_FOUND", "\u9879\u76EE\u4E0D\u5B58\u5728");
-        if (this.options.projects.isEphemeralProject(ctx.organizationId, projectId2)) return null;
+        if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2)) return null;
         const store = await this.options.storeFor(ctx.organizationId);
         const scope = this.projectScope(ctx, projectId2);
         const existingSpaces = await store.list(scope, "space");
@@ -190232,7 +190377,7 @@ var init_governance_service = __esm({
         if (event.claimedProjectId !== trusted.projectId) {
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_PROJECT_MISMATCH", "\u8BF7\u6C42\u9879\u76EE\u4E0E\u53EF\u4FE1\u6765\u6E90\u5F52\u5C5E\u4E0D\u4E00\u81F4");
         }
-        const targetProjectId = trusted.projectId && !this.options.projects.isEphemeralProject(ctx.organizationId, trusted.projectId) ? trusted.projectId : void 0;
+        const targetProjectId = trusted.projectId && !this.options.projects.isProjectScopeUnsupported(ctx.organizationId, trusted.projectId) ? trusted.projectId : void 0;
         const discoveryActor = await this.requireActiveActor(ctx.actorId, ctx.organizationId);
         if (discoveryActor.kind !== "system") await this.requireOrganizationActor(ctx);
         if (targetProjectId) {
@@ -190498,7 +190643,7 @@ var init_governance_service = __esm({
             runs.push(...await this.enqueueDiscoveryEvent(ctx, event, runtime ?? void 0));
           } catch (error2) {
             const store = await this.options.storeFor(ctx.organizationId);
-            const taskProjectId = projectId2 && !this.options.projects.isEphemeralProject(ctx.organizationId, projectId2) ? projectId2 : void 0;
+            const taskProjectId = projectId2 && !this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2) ? projectId2 : void 0;
             const scope = this.scopeFor(ctx, taskProjectId);
             const task = this.governanceTask(ctx, "discovery_failed", event.sourceType, `${event.sourceId}:${event.sourceVersionId}`, {
               eventType: event.eventType,
@@ -202522,20 +202667,6 @@ async function runCommand(kernel, blobs, oplog, engineStore, actor, command, arg
         const project = await ctx.projectState.getProject(projectId2);
         if (!project) throw new Error(`project not found: ${projectId2}`);
         await bindingState.upsertWorkspaceBinding({ workOrderId: workspace, projectId: projectId2 });
-      } else if (createdViaArg === "seed" && ctx.projectState && bindingState) {
-        await ensureWorkorderProject({
-          workOrderId: workspace,
-          ...optStr(args, "title") ? { title: optStr(args, "title") } : {},
-          // ADR 0207「对话中创建则为对话人」：优先记**陪聊解析出的那个真人**
-          // （`ctx.workorderInitiator.humanActorId`，与 brief.owner 同源），
-          // 没有会话上下文时退到调用者本人——但**只在他是人时**；
-          // agent 替人跑 spawn 不该把自己写成项目创建人，那种情况落 NULL，
-          // 由读侧从工单 brief.owner 派生（service.resolveProjectCreator）。
-          ...ctx.workorderInitiator?.humanActorId ? { createdBy: ctx.workorderInitiator.humanActorId } : !isAgent(actor) ? { createdBy: actor } : {},
-          createProject: makeEnsureProjectFromStore(ctx.projectState),
-          upsertBinding: (b2) => bindingState.upsertWorkspaceBinding(b2),
-          onWarn: (m2) => console.warn(m2)
-        });
       }
       if (schemaForSeed) {
         const title = optStr(args, "title") ?? optStr(args, "description") ?? workspace;
@@ -204027,6 +204158,18 @@ async function startOasisServer(opts) {
           chatStore: store,
           chatSessionId: sessionId,
           session: bgSession,
+          liveChat,
+          liveHandle: {
+            runtimeSessionId: session.id,
+            ...session.runId ? { runId: session.runId } : {},
+            kill: () => {
+              void session.kill?.();
+            },
+            ...session.appendInput ? { appendInput: (input) => session.appendInput(input) } : {},
+            get canAppendInput() {
+              return typeof session.appendInput === "function" && session.canAppendInput !== false;
+            }
+          },
           ...itemStore ? { itemStore } : {},
           // 广播/委派回流带上 held turn id（B3）；授权卡入口在别处，那条路本轮不接账本。
           ...turnId ? { turnId } : {}
@@ -204585,7 +204728,15 @@ async function startOasisServer(opts) {
             if (body2.command === "spawn" && wodrafts) {
               const draftId = result?.data?.draftId;
               const chatSid = req.headers["x-chat-session-id"];
-              if (draftId && typeof chatSid === "string") await wodrafts.tagSession(draftId, chatSid, liveChat.runFor(chatSid));
+              if (draftId && typeof chatSid === "string") {
+                const draftWorkspace = result?.data?.workspace;
+                await wodrafts.tagSession(draftId, chatSid, liveChat.runFor(chatSid), draftWorkspace).catch((err) => {
+                  console.error(
+                    `[workorder-draft] \u8349\u6848 ${draftId}\uFF08ws=${String(draftWorkspace)}\uFF09\u672A\u80FD\u5173\u8054\u4F1A\u8BDD ${chatSid}\uFF1A`,
+                    err
+                  );
+                });
+              }
             }
             res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(result));
           } catch (err) {
@@ -205592,6 +205743,13 @@ async function startOasisServer(opts) {
           };
           const wantsV3 = url.searchParams.get("protocol") === "v3";
           if (wantsV3) {
+            const watchSession = url.searchParams.get("watch") === "1";
+            const fromEpoch = url.searchParams.has("epoch") ? Number(url.searchParams.get("epoch")) : void 0;
+            const cursor = liveChat.cursorFor(sid);
+            if (watchSession && fromEpoch !== void 0 && cursor && cursor.epoch !== fromEpoch) {
+              waitForChatTurn(res, liveChat, sid, startStreamKeepalive, true);
+              return;
+            }
             const sub2 = (frame) => {
               if (res.destroyed) return;
               res.write(`${JSON.stringify(frame)}
@@ -205603,6 +205761,11 @@ async function startOasisServer(opts) {
               await reopenRecoveringTurn();
               att2 = liveChat.attachLiveV3(sid, fromSeq, sub2);
             }
+            if (watchSession && (!att2 || att2.status !== "running" && att2.replay.length === 0)) {
+              att2?.detach();
+              waitForChatTurn(res, liveChat, sid, startStreamKeepalive);
+              return;
+            }
             if (!att2) {
               res.writeHead(204).end();
               return;
@@ -205610,7 +205773,8 @@ async function startOasisServer(opts) {
             res.writeHead(200, {
               "content-type": "application/x-oasis-live-v3+ndjson; charset=utf-8",
               "transfer-encoding": "chunked",
-              "access-control-expose-headers": "X-Session-Id, X-Replay-Gap, X-Live-Epoch, X-Can-Append",
+              "access-control-expose-headers": "X-Session-Id, X-Replay-Gap, X-Live-Epoch, X-Can-Append, X-Chat-Session-Watch",
+              ...watchSession ? { "x-chat-session-watch": "1" } : {},
               "x-session-id": cs.runtimeSessionId ?? "",
               "x-live-epoch": String(att2.epoch),
               "x-can-append": liveChat.canAppend(sid) ? "1" : "0",
@@ -206993,14 +207157,23 @@ ${composed}`;
             const installationId = await svc.revealResolvedVariable("GITHUB_APP_INSTALLATION_ID", actorId);
             const effective = installationId ? await fetchInstallationPermissions({ appId, privateKeyPem, installationId }) : meta.permissions;
             const missing = missingAppPermissions(effective);
+            const requestedAll = Object.entries(meta.permissions).filter(([, level]) => Boolean(level)).map(([key, level]) => ({ key, level: String(level) })).sort((a, b2) => a.key.localeCompare(b2.key));
+            const grantedKeys = new Set(
+              Object.entries(effective).filter(([, level]) => Boolean(level)).map(([k2]) => k2)
+            );
             res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
               configured: true,
               slug: meta.slug,
               ownerLogin: meta.ownerLogin,
+              /** App 申请的全集（英文原名 + 级别）。界面用它回答「我配了多少项」。 */
+              requested: requestedAll,
               /** true＝读的是这次安装真正被授予的权限；false＝只拿到 App 申请的，可能偏乐观。 */
               fromInstallation: Boolean(installationId),
-              /** App 申请了、但这次安装还没被授予——多半是权限升级还等着组织 owner 批准。 */
-              awaitingApproval: missingAppPermissions(effective).filter((m2) => meta.permissions[m2.key]).map((m2) => m2.key),
+              /**
+               * App 申请了、但这次安装还没被授予——多半是权限升级还等着组织 owner 批准。
+               * **在全集上做差**，不再只看本仓必需的那八项（否则人另外勾的永远报不出来）。
+               */
+              awaitingApproval: requestedAll.filter((r) => !grantedKeys.has(r.key)).map((r) => r.key),
               /**
                * 这次安装**真正被授予**的全部权限，一律用 GitHub 的英文原名 + 级别
                * （2026-09-10 发起人：「所有权限都用英文原文，不区分是不是八项权限」）。
@@ -207318,7 +207491,9 @@ ${composed}`;
                 const svc = await connectorActorsService();
                 if (svc) {
                   const connId = "github";
-                  await svc.upsertConnector({ id: connId, name: "GitHub", mode: "oauth", status: "connected", account: "github" });
+                  if (!actorIdParam) {
+                    await svc.upsertConnector({ id: connId, name: "GitHub", mode: "oauth", status: "connected", account: "github" });
+                  }
                   for (const [k2, v2] of [["GIT_AUTHOR_NAME", actorNameParam], ["GIT_AUTHOR_EMAIL", ""], ["GIT_COMMITTER_NAME", actorNameParam], ["GIT_COMMITTER_EMAIL", ""], ["EMAIL", ""]])
                     await svc.putVariable({ key: k2, value: v2, scope: "personal", actorId: actorIdParam, connectorId: connId, encrypted: false });
                   await svc.putVariable({ key: "GITHUB_TOKEN", value: p2.access_token, scope: "personal", actorId: actorIdParam, connectorId: connId, encrypted: true });
@@ -207453,7 +207628,6 @@ var init_server3 = __esm({
     init_src7();
     init_collect();
     init_remote_util();
-    init_ephemeral_project();
     init_timeline();
     init_node_state();
     init_src5();
@@ -207462,6 +207636,7 @@ var init_server3 = __esm({
     init_router();
     init_infra_error();
     init_live_chat();
+    init_chat_turn_wait();
     init_append_now();
     init_workorder_drafts();
     init_draft_edit();
@@ -210527,6 +210702,32 @@ var init_projection = __esm({
   }
 });
 
+// ../server/src/domains/projects/uncategorized-project.ts
+function isUncategorizedProjectId(projectId2) {
+  return projectId2 === UNCATEGORIZED_PROJECT_ID;
+}
+async function bindWorkorderProject(deps) {
+  const { workOrderId, projectId: projectId2 } = deps;
+  if (!projectId2) return null;
+  try {
+    await deps.upsertBinding({ workOrderId, projectId: projectId2 });
+    return projectId2;
+  } catch (e) {
+    deps.onWarn?.(`[project] \u5DE5\u5355 ${workOrderId} \u7ED1\u5B9A\u9879\u76EE\u5931\u8D25\uFF08\u4E0D\u963B\u65AD\u5EFA\u5355\uFF09\uFF1A${String(e)}`);
+    return null;
+  }
+}
+var UNCATEGORIZED_PROJECT_ID, UNCATEGORIZED_PROJECT_NAME, UNCATEGORIZED_PROJECT_DESCRIPTION, UNCATEGORIZED_UNKNOWN_TIME;
+var init_uncategorized_project = __esm({
+  "../server/src/domains/projects/uncategorized-project.ts"() {
+    "use strict";
+    UNCATEGORIZED_PROJECT_ID = "proj:uncategorized";
+    UNCATEGORIZED_PROJECT_NAME = "\u65E0\u5206\u7C7B\u9879\u76EE";
+    UNCATEGORIZED_PROJECT_DESCRIPTION = "\u6240\u6709\u672A\u9009\u62E9\u9879\u76EE\u7684\u5BF9\u8BDD\u76F8\u5173\u6587\u4EF6\u548C\u4EFB\u52A1\u81EA\u52A8\u5E76\u5165\u8FD9\u91CC\uFF0C\u7EC4\u7EC7\u5185\u6240\u6709\u4EBA\u53EF\u89C1\u3002";
+    UNCATEGORIZED_UNKNOWN_TIME = "1970-01-01T00:00:00.000Z";
+  }
+});
+
 // ../server/src/domains/projects/service.ts
 function sanitizeCreatorActorId(raw) {
   const id = raw?.trim();
@@ -210799,7 +211000,7 @@ var init_service4 = __esm({
     init_src();
     init_src5();
     init_projection();
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_workorders();
     init_node_state();
     DEFAULT_AGENT_ACTOR = "actor:agent:system";
@@ -210935,6 +211136,9 @@ var init_service4 = __esm({
       async listWorkspaceBindings() {
         return [...this.workspaceBindings.values()].map((binding) => ({ ...binding }));
       }
+      async deleteWorkspaceBinding(workOrderId) {
+        this.workspaceBindings.delete(workOrderId);
+      }
       async setWorkspaceDispatchHold(workOrderId, held) {
         if (held) this.dispatchHeld.add(workOrderId);
         else this.dispatchHeld.delete(workOrderId);
@@ -211061,15 +211265,8 @@ var init_service4 = __esm({
         return { project, artifacts, files };
       }
       async collectProjectFiles(projectId2) {
-        if (!isUncategorizedProjectId(projectId2)) return this.projects.listProjectFiles(projectId2);
-        const stored = await this.projects.listProjects();
-        const ephemeralIds = stored.filter((p2) => isEphemeralProject(p2.id)).map((p2) => p2.id);
-        const out = [];
-        for (const id of ephemeralIds) {
-          const files = await this.projects.listProjectFiles(id);
-          out.push(...files.map((f2) => ({ ...f2, projectId: UNCATEGORIZED_PROJECT_ID })));
-        }
-        return out.sort((a, b2) => b2.uploadedAt.localeCompare(a.uploadedAt));
+        if (isUncategorizedProjectId(projectId2)) return [];
+        return this.projects.listProjectFiles(projectId2);
       }
       /**
        * B2 投影同步：写命令落 oplog 后，从 oplog 重放重建 `this.artifacts` 文档层投影。
@@ -211126,23 +211323,18 @@ var init_service4 = __esm({
         return project ? this.withProjectDerivedState(project) : null;
       }
       /**
-       * 「无分类项目」虚拟卡：把所有 `proj_tmp_*` 一族的**读侧聚合**成一张固定项目，供列表/详情/关联任务/相关文件消费。
+       * 「无分类项目」虚拟卡：把所有**没有项目绑定**的工单聚合成一张固定项目，供列表/详情/关联任务/相关文件消费。
        * 存储里没有真行——这就是本卡与真项目最大的区别：
        *   - 写侧（成员、内容位置、上传文件）一律拒收（写到真项目 or 走真工单流程）；
-       *   - 派生态（artifactSummary / workOrderCount）跨所有 ephemeral 项目算并集；
+       *   - 派生态（artifactSummary / workOrderCount）按「无绑定工单」算并集；
        *   - 帧上的「项目负责人：系统」由前端自选文案渲染，本层只给一个稳定的空 members 名单。
+       *
+       * ⚠ `workOrderCount` **走 listProjectWorkorders 同一条路**，不另写一份 bindings 过滤——
+       * 两处各算各的正是「卡片计数与点进去的列表条数对不上」那类缺陷的来路。
        */
       async buildUncategorizedProject() {
-        const stored = await this.projects.listProjects();
-        const ephemeralIds = new Set(
-          stored.filter((project) => isEphemeralProject(project.id)).map((project) => project.id)
-        );
-        const bindings = await this.artifacts.listWorkspaceBindings();
-        const workOrderCount = bindings.filter((b2) => ephemeralIds.has(b2.projectId)).length;
-        const artifactList = await this.aggregateUncategorizedArtifacts(ephemeralIds, bindings);
-        const ephemeralProjects = stored.filter((project) => ephemeralIds.has(project.id));
-        const createdAts = ephemeralProjects.map((p2) => p2.createdAt).sort();
-        const updatedAts = ephemeralProjects.map((p2) => p2.updatedAt).sort();
+        const workorders = await this.listProjectWorkorders(UNCATEGORIZED_PROJECT_ID);
+        const artifactList = await this.aggregateUncategorizedArtifacts();
         return {
           id: UNCATEGORIZED_PROJECT_ID,
           name: UNCATEGORIZED_PROJECT_NAME,
@@ -211150,46 +211342,33 @@ var init_service4 = __esm({
           memberCount: 0,
           members: [],
           artifactSummary: artifactList.summary,
-          workOrderCount,
+          workOrderCount: workorders.length,
           // ADR 0205：本卡的「项目负责人：系统」是**前端按帧自选的文案**，后端不出 `"system"` 哨兵——
           // 出 null 保持「取不到就 null」的域内红线，也不把一个不存在的 actor id 塞进契约。
           createdBy: null,
-          createdAt: createdAts[0] ?? UNCATEGORIZED_UNKNOWN_TIME,
-          updatedAt: updatedAts[updatedAts.length - 1] ?? UNCATEGORIZED_UNKNOWN_TIME
+          createdAt: UNCATEGORIZED_UNKNOWN_TIME,
+          updatedAt: UNCATEGORIZED_UNKNOWN_TIME
         };
       }
-      async aggregateUncategorizedArtifacts(ephemeralIds, bindings) {
-        const _bindings = bindings ?? await this.artifacts.listWorkspaceBindings();
-        const artifacts = [];
-        for (const projectId2 of ephemeralIds) {
-          const list2 = await this.listAllProjectArtifacts(projectId2);
-          artifacts.push(...list2.map((a) => ({ ...a, projectId: UNCATEGORIZED_PROJECT_ID })));
-        }
+      async aggregateUncategorizedArtifacts() {
+        const artifacts = await this.listAllProjectArtifacts(UNCATEGORIZED_PROJECT_ID);
         artifacts.sort((a, b2) => b2.updatedAt.localeCompare(a.updatedAt));
         return { artifacts, summary: summarizeArtifacts(artifacts) };
       }
       /**
        * 项目列表（带派生态）。
        *
-       * ★ `includeEphemeral` 必须在**算派生态之前**生效，不能让调用方拿到全量再自己 filter。
-       *   `withProjectDerivedState` 每算一个项目就要跑一遍 `buildWorkorderSummaries`（全量工单）+
-       *   遍历模型里全部 artifact——成本是 O(项目数 × 全模型)，而且是同步的。实测 dev：294 个项目里
-       *   272 个是 `proj_tmp_*` 临时项目（工单没指定项目时的兜底归属，一单一个），列表只返回剩下的 22 个，
-       *   **93% 的计算算完就扔**。代价不是"多花点 CPU"：这段同步活会把单线程的事件循环整块堵住 3~11 秒，
-       *   期间别的请求从 pg 连接池取连接排不上号、撞 `connectionTimeoutMillis`(5s)，
-       *   前端看到的是「项目列表加载失败：timeout exceeded when trying to connect」——像数据库挂了，
-       *   其实是被自己堵死的（实测并发时 /api/automations 从 0.24s 被拖到 7.1s，自动化页面因此空白）。
-       *
-       * 只对**真要返回的那些**算派生态。默认口径与路由一致（不含临时项目），排查用 `includeEphemeral`。
+       * 库里的每一行都是**人建的真项目**，全部返回——临时项目（`proj_tmp_*`）退役后，这里不再有
+       * "算完就扔"的过滤：旧版 dev 环境 294 个项目里 272 个是一单一个的临时项目，
+       * `withProjectDerivedState` 对它们逐个跑 `buildWorkorderSummaries`（全量工单）+ 遍历全部 artifact，
+       * 93% 的计算白算，还把单线程事件循环整块堵住 3~11 秒（并发时 /api/automations 从 0.24s 被拖到 7.1s，
+       * 前端看到的是「项目列表加载失败：timeout」——像数据库挂了，其实是被自己堵死的）。
        */
       async listProjects(opts) {
         const stored = await this.projects.listProjects();
-        const wanted = opts?.includeEphemeral === true ? stored : stored.filter((project) => !isEphemeralProject(project.id));
         const creatorCache = /* @__PURE__ */ new Map();
-        const derived = await Promise.all(wanted.map((project) => this.withProjectDerivedState(project, creatorCache)));
+        const derived = await Promise.all(stored.map((project) => this.withProjectDerivedState(project, creatorCache)));
         if (opts?.includeUncategorized === false) return derived;
-        const wantUncategorized = opts?.includeUncategorized ?? !(opts?.includeEphemeral === true);
-        if (!wantUncategorized) return derived;
         const virtual = await this.buildUncategorizedProject();
         return [virtual, ...derived];
       }
@@ -211268,10 +211447,10 @@ var init_service4 = __esm({
        * 项目创建人（ADR 0205）——**读时解析**，三条来路按优先级：
        *
        *  1. 库里落了 `created_by` → 按它解析 name/avatar；
-       *  2. 没落且是**临时项目**（`proj_tmp_*`）→ 从它绑定的那张工单的 `brief.owner`（决策 0026 的
-       *     「发起人真人」）派生。这是老数据免回填的口径：派生每次都新鲜，回填反而会造出
-       *     「工单发起人换过、项目创建人却挂着旧值」的伪相；
-       *  3. 都取不到 → `null`（老的手建项目），前端诚实显示「—」。
+       *  2. 没落 → `null`（老的手建项目），前端诚实显示「—」。
+       *
+       * 旧版还有一档「临时项目从它绑定的那张工单 `brief.owner` 派生」——临时项目退役后没有这一档了
+       * （见 uncategorized-project.ts 文件头）。
        *
        * **绝不拿别的字段顶替**（`members[0]`、项目名、updatedAt 都不行）——未指定成员时全组织都是成员，
        * 按 actorId 排序等于随机点一个 agent 当负责人。这是本域红线，见 resolveActorName 的注释。
@@ -211279,9 +211458,7 @@ var init_service4 = __esm({
       async resolveProjectCreator(project, workorders, cache) {
         const stored = project.createdBy?.id;
         if (stored) return this.resolveActorRef(stored, cache);
-        if (!isEphemeralProject(project.id)) return null;
-        const ownerId = workorders.map((wo) => wo.owner?.id).find((id) => typeof id === "string" && id.startsWith("actor:"));
-        return ownerId ? this.resolveActorRef(ownerId, cache) : null;
+        return null;
       }
       /**
        * actorId → {@link ProjectActorRef}：`kind` 按 id 前缀派生，`name` / `avatar` 走本公司名册现取。
@@ -211344,7 +211521,8 @@ var init_service4 = __esm({
        */
       async reassignWorkorder(workOrderId, projectId2) {
         if (isUncategorizedProjectId(projectId2)) {
-          return this.unlinkWorkorder(workOrderId);
+          await this.unlinkWorkorder(workOrderId);
+          return { workOrderId, projectId: null };
         }
         const project = await this.projects.getProject(projectId2);
         if (!project) throw new Error(`project not found: ${projectId2}`);
@@ -211353,77 +211531,46 @@ var init_service4 = __esm({
         return binding;
       }
       /**
-       * 「取消任务关联」——把工单从当前项目解绑，回落到它专属的临时项目（proj_tmp_<slug>）。
+       * 「取消任务关联」——**删掉工单的项目绑定行**，工单从此没有项目（读侧落进「无分类项目」桶）。
        *
-       * **不是真正解绑成 null**：契约里 `Workspace.projectId` 是必填（见 ephemeral-project.ts 的历史事故链），
-       * 无绑定态会让下游 provision / 自动收集 / propose 走向连环破坏。回落到临时项目 =「在读侧进入
-       * 无分类桶」+「写侧仍保持"每工单必属项目"的合法态」。
+       * 2026-09-10 之前这里是"回落到工单专属的临时项目 `proj_tmp_<slug>`"，理由是「契约里每个工单
+       * 都该属于某项目」。那套兜底已退役（见 uncategorized-project.ts 文件头）：兜底容器让每张未挂靠
+       * 工单变成一个只有它自己的假项目，代码仓/项目变量/记忆作用域全挂在一次性 id 上。
        *
-       * 幂等：目标已是自己的 ephemeral 项目 → 直接返回既有绑定，不重复 upsert；ephemeral 项目本身
-       * 不需要预先存在（`ensureWorkorderProject` 后台建，也可能是本工单第一次被"解绑"——按需建）。
+       * 幂等：没有绑定行时静默返回（store 的 delete 本身幂等）。
        */
       async unlinkWorkorder(workOrderId) {
         if (!workOrderId.trim()) throw new Error("work_order_id is required");
-        const ephemeralId = ephemeralProjectIdFor(workOrderId);
-        const existing = await this.artifacts.getWorkspaceBinding(workOrderId);
-        if (!await this.projects.getProject(ephemeralId)) {
-          const now = (/* @__PURE__ */ new Date()).toISOString();
-          await this.projects.upsertProject({
-            id: ephemeralId,
-            name: `\u4E34\u65F6\u9879\u76EE \xB7 ${workOrderId}`,
-            description: `\u5DE5\u5355 ${workOrderId} \u4ECE\u5176\u5B83\u9879\u76EE\u53D6\u6D88\u5173\u8054\u540E\u843D\u56DE\u7684\u4E34\u65F6\u9879\u76EE\u3002\u53EF\u7528 PATCH /api/work-orders/${workOrderId}/project \u6539\u6302\u5230\u6B63\u5F0F\u9879\u76EE\u3002`,
-            createdAt: now,
-            updatedAt: now
-          });
-        }
-        if (existing?.projectId === ephemeralId) return existing;
-        const binding = { workOrderId, projectId: ephemeralId };
-        await this.artifacts.upsertWorkspaceBinding(binding);
-        return binding;
+        await this.artifacts.deleteWorkspaceBinding(workOrderId);
       }
       /**
        * 删除项目（帧 `444:1792` 三点菜单第二项，口径由发起人 2026-09-09 拍板）。
        *
        * **只删项目这个壳**——项目主记录 + 成员名单 + 上传文件记录 + 内容位置。任务和会话一条都不删：
        *
-       * 1. 绑到本项目的工单**不管在跑还是没在跑**，一律 `unlinkWorkorder` 回落到自己的
-       *    `proj_tmp_<slug>`，也就是读侧的「无分类项目」。发起人明确不要「有任务在跑就不让删」
-       *    这道闸，所以这里没有任何在跑判断。
-       * 2. 搬工单的同时**把本项目的 git 类内容位置复制一份到每个工单的临时项目上**。
-       *    这条不是可选的：`git/resolve.ts` 的 `resolveCodeRepo` 是**派发时**沿
-       *    `binding → project → listContentLocations` 实时解的，不带过去的话，正在跑的任务
-       *    下一个节点就取不到代码仓——正是 `ephemeral-project.ts` 顶部那条五环事故链。
+       * 1. 绑到本项目的工单**不管在跑还是没在跑**，一律 `unlinkWorkorder` 删掉绑定行 → 落进读侧的
+       *    「无分类项目」。发起人明确不要「有任务在跑就不让删」这道闸，所以这里没有任何在跑判断。
+       * 2. **代码仓不跟着搬**（发起人 2026-09-10 裁定）。`git/resolve.ts` 的 `resolveCodeRepo` 是
+       *    派发时沿 `绑定 → 项目 → 内容位置` 实时解的，所以删完项目，这些任务下一个节点就取不到代码仓——
+       *    这是**期望行为**：由执行中的数字员工发现并引导人给任务指定新项目，而不是由系统兜一个假容器
+       *    （旧版把 git 位置逐单复制到 `proj_tmp_*` 上，正是那套已退役的兜底）。
        * 3. 会话的 `project_id` 置空、项目作用域的变量/密钥清理，走 {@link OnProjectDeleted} 钩子
        *    （本 service 对会话域与凭据域零耦合，同 `onProjectNameChanged` 的注入模式）。
        *
-       * 拒绝两类 id：`proj:uncategorized`（读侧虚拟卡，存储里没有真行）与 `proj_tmp_*`
-       * （工单的兜底归属，删掉等于把工单变成无绑定态——契约里 `Workspace.projectId` 必填）。
+       * 拒绝 `proj:uncategorized`（读侧虚拟卡，存储里没有真行，删它没有意义）。
        */
       async deleteProject(id) {
         const projectId2 = id?.trim();
         if (!projectId2) throw new Error("project id is required");
         if (isUncategorizedProjectId(projectId2)) throw new Error(`project not deletable: ${projectId2}`);
-        if (isEphemeralProject(projectId2)) throw new Error(`project not deletable: ${projectId2}`);
         const project = await this.projects.getProject(projectId2);
         if (!project) throw new Error(`project not found: ${projectId2}`);
-        const gitLocations = (await this.projects.listContentLocations(projectId2)).filter((loc) => loc.kind === "external-home" && loc.externalHome?.system === "git");
-        const now = (/* @__PURE__ */ new Date()).toISOString();
         const bindings = await this.artifacts.listWorkspaceBindings();
         const movedWorkOrderIds = [];
         for (const binding of bindings) {
           if (binding.projectId !== projectId2) continue;
-          const moved = await this.unlinkWorkorder(binding.workOrderId);
+          await this.unlinkWorkorder(binding.workOrderId);
           movedWorkOrderIds.push(binding.workOrderId);
-          for (const loc of gitLocations) {
-            await this.projects.addContentLocation({
-              ...loc,
-              projectId: moved.projectId,
-              // 派生 id：同一条位置搬到同一个临时项目永远算出同一个 id（addContentLocation 是
-              // upsert），重跑不会堆出重复的仓库行。
-              locationId: `pcl-${moved.projectId}-carried-${loc.locationId}`,
-              updatedAt: now
-            });
-          }
         }
         await this.projects.deleteProject(projectId2);
         if (this.onProjectDeleted) {
@@ -211433,7 +211580,7 @@ var init_service4 = __esm({
             console.warn(`[projects] project-deleted follow-up failed for ${projectId2}: ${error2 instanceof Error ? error2.message : String(error2)}`);
           }
         }
-        return { projectId: projectId2, movedWorkOrderIds, carriedGitLocationCount: gitLocations.length };
+        return { projectId: projectId2, movedWorkOrderIds };
       }
       /**
        * 项目关联工单（帧 `1355:4918`）：把内部私有的 `listProjectWorkorders` 暴露给路由层。
@@ -212063,7 +212210,7 @@ var init_service4 = __esm({
         if (!snap) return [];
         const worksById = new Map(snap.works.map((w2) => [w2.id, w2]));
         const binding = this.artifacts.getWorkspaceBinding ? await this.artifacts.getWorkspaceBinding(workOrderId).catch(() => null) : null;
-        const projectId2 = binding?.projectId ?? ephemeralProjectIdFor(workOrderId);
+        const projectId2 = binding?.projectId ?? UNCATEGORIZED_PROJECT_ID;
         const out = [];
         for (const node2 of snap.nodes) {
           if (!node2.latestAcceptId) continue;
@@ -212193,20 +212340,8 @@ var init_service4 = __esm({
         const filtered = artifacts.filter((artifact) => input.type === void 0 || artifact.type === input.type).filter((artifact) => input.status === void 0 || artifact.status === input.status).sort((a, b2) => b2.updatedAt.localeCompare(a.updatedAt));
         return { artifacts: filtered, summary: summarizeArtifacts(filtered) };
       }
-      /** 内部：虚拟卡 → 跨全部 ephemeral 项目聚合；真项目 → 走原路径。 */
+      /** 内部：虚拟卡与真项目走同一条路——{@link listAllProjectArtifacts} 内部按「无绑定 / 绑到本项目」分流。 */
       async collectProjectArtifacts(projectId2) {
-        if (isUncategorizedProjectId(projectId2)) {
-          const stored = await this.projects.listProjects();
-          const ephemeralIds = new Set(
-            stored.filter((project) => isEphemeralProject(project.id)).map((project) => project.id)
-          );
-          const artifacts = [];
-          for (const id of ephemeralIds) {
-            const list2 = await this.listAllProjectArtifacts(id);
-            artifacts.push(...list2.map((a) => ({ ...a, projectId: UNCATEGORIZED_PROJECT_ID })));
-          }
-          return artifacts;
-        }
         return this.listAllProjectArtifacts(projectId2);
       }
       async listProjectWorkorders(projectId2) {
@@ -212215,17 +212350,19 @@ var init_service4 = __esm({
         const uncategorized = isUncategorizedProjectId(projectId2);
         return buildWorkorderSummaries(this.kernel.model, void 0, (workOrderId) => projectByWorkorder.get(workOrderId) ?? null, void 0, void 0, void 0, (role) => this.kernel.actorForRole(role)).filter((workorder) => {
           const bound = workorder.projectId;
-          if (uncategorized) return typeof bound === "string" && isEphemeralProject(bound);
+          if (uncategorized) return bound == null;
           return bound === projectId2;
         });
       }
       async listAllProjectArtifacts(projectId2) {
-        const stored = await this.artifacts.listArtifacts({ projectId: projectId2 });
+        const uncategorized = isUncategorizedProjectId(projectId2);
+        const stored = uncategorized ? [] : await this.artifacts.listArtifacts({ projectId: projectId2 });
         const byArtifact = new Map(stored.map((artifact) => [artifact.artifactId, artifact]));
         const bindings = await this.artifacts.listWorkspaceBindings();
         const projectByWorkorder = new Map(bindings.map((binding) => [binding.workOrderId, binding.projectId]));
         for (const artifact of this.kernel.model.artifacts.values()) {
-          if (projectByWorkorder.get(artifact.workspace) !== projectId2) continue;
+          const bound = projectByWorkorder.get(artifact.workspace);
+          if (uncategorized ? bound !== void 0 : bound !== projectId2) continue;
           const descriptor = decodeDocumentDescription(artifact.description);
           const info = nodeInfo(this.kernel.model, artifact);
           const revisions = revisionsOf(this.kernel.model, artifact.id);
@@ -216890,8 +217027,18 @@ function wireRecoveredChatTurn(deps) {
     clearInterval(ckptTimer);
     const failed = exitFailed(info);
     if (failed) {
-      live.emit({ type: "error", text: exitErrorText(info) });
-      itemLedger.recordError(exitErrorText(info));
+      const errText2 = exitErrorText(info);
+      live.emit({ type: "error", text: errText2 });
+      const errorOutcome = itemLedger.recordError(errText2, { ...info.reason ? { reason: info.reason } : {} });
+      live.publishServerItem({
+        itemId: errorOutcome.itemId,
+        itemType: "control",
+        startedVersion: errorOutcome.startedVersion,
+        version: errorOutcome.version,
+        ord: errorOutcome.ord,
+        status: "failed",
+        payload: { code: "error", note: errText2, ...info.reason ? { reason: info.reason } : {} }
+      });
     }
     const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     const parts = collectedParts();
@@ -219789,13 +219936,6 @@ var init_memory = __esm({
       async write(ctx, input) {
         this.assertWritable(input, "agent");
         const projectId2 = await this.projectOf(ctx);
-        if (input.scope === "project" && projectId2 === null) {
-          throw new ApiError(
-            400,
-            "MEMORY_NO_PROJECT",
-            "\u672C\u8F6E\u89E3\u6790\u4E0D\u51FA\u6240\u5C5E\u9879\u76EE\uFF08\u975E\u6D3E\u53D1\u4F1A\u8BDD\u6216\u4EA7\u7269\u672A\u7ED1\u5B9A\u5DE5\u5355\uFF09\uFF0C\u65E0\u6CD5\u5199\u9879\u76EE\u7EA7\u8BB0\u5FC6\u2014\u2014\u6539\u7528 --scope actor \u5199\u8DE8\u9879\u76EE\u901A\u7528\u7684\u7ECF\u9A8C\u3002"
-          );
-        }
         return this.writeResolved(ctx, input, input.scope === "project" ? projectId2 : null, "agent");
       }
       /** 控制台管理面写入：actorId/projectId 由受保护的管理路由明确给出，不复用 agent 自用入口。 */
@@ -220905,6 +221045,21 @@ var init_connector_skills = __esm({
   }
 });
 
+// ../server/src/domains/nodes/runtime-tenancy.ts
+function foreignNodeBlock(node2, expectedCompanyId) {
+  if (!expectedCompanyId) return null;
+  if (!node2) return null;
+  const owner = node2.companyId;
+  if (!owner) return null;
+  if (owner === expectedCompanyId) return null;
+  return `\u8FD0\u884C\u65F6\u8282\u70B9 ${node2.id} \u5C5E\u4E8E\u516C\u53F8 ${owner}\uFF0C\u4E0D\u5C5E\u4E8E ${expectedCompanyId}\u2014\u2014\u5458\u5DE5\u53EA\u80FD\u7ED1\u5B9A/\u6D3E\u53D1\u5230\u672C\u516C\u53F8\u7684\u8282\u70B9\uFF08ADR-0164 \xA75\uFF1A\u8DE8\u516C\u53F8\u5171\u4EAB\u540C\u4E00\u53F0\u7269\u7406\u673A\u7684\u6B63\u89E3\u662F\u5404\u81EA\u767B\u8BB0\u4E0D\u540C node id\uFF09\u3002`;
+}
+var init_runtime_tenancy = __esm({
+  "../server/src/domains/nodes/runtime-tenancy.ts"() {
+    "use strict";
+  }
+});
+
 // ../server/src/domains/actors/routes.ts
 async function asApiError(run) {
   try {
@@ -221227,6 +221382,9 @@ function actorsDomain(opts) {
       const { service } = await resolveCtx(req.auth.companyId);
       const b2 = req.body;
       if (!b2?.actorId || !b2.nodeId || !b2.runtimeKind) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 actorId / nodeId / runtimeKind");
+      const targetNode = await opts.resolveNodeTenancy?.(b2.nodeId).catch(() => null) ?? null;
+      const foreign = foreignNodeBlock(targetNode, req.auth.companyId);
+      if (foreign) throw new ApiError(400, "NODE_NOT_IN_COMPANY", foreign);
       const { clearedModel } = await service.bind({ actorId: b2.actorId, nodeId: b2.nodeId, runtimeKind: b2.runtimeKind, status: b2.status ?? "active" }, req.auth.actor);
       return { status: 201, body: { ok: true, ...clearedModel ? { clearedModel } : {} } };
     });
@@ -222036,6 +222194,7 @@ var init_routes3 = __esm({
     init_image_upload();
     init_skill_materializer();
     init_connector_skills();
+    init_runtime_tenancy();
     CREDENTIAL_REVEAL_SOURCES = /* @__PURE__ */ new Set(["agent-cli", "agent-exec", "smoke-test", "oasis-internal", "console"]);
     RevealRateLimiter = class {
       constructor(perSession, perSessionPerKey, ttlMs = 2 * 60 * 6e4) {
@@ -222232,7 +222391,7 @@ function createActorsDomain(opts) {
   return {
     service: defaultCtx.service,
     resolveCtx,
-    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {} })
+    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
 var import_node_crypto49;
@@ -222434,12 +222593,9 @@ function projectsDomain(opts) {
       }
     });
     router.get("/api/projects", async (req) => {
-      const inc = req.query?.get("includeEphemeral");
-      const includeEphemeral = inc === "1" || inc === "true";
       const uncatRaw = req.query?.get("includeUncategorized");
       const includeUncategorized = uncatRaw === null || uncatRaw === void 0 ? void 0 : !(uncatRaw === "0" || uncatRaw === "false");
       const projects = await (await svc(req)).listProjects({
-        includeEphemeral,
         ...includeUncategorized !== void 0 ? { includeUncategorized } : {}
       });
       const page = paginate(projects.map(toApiProject), req.query);
@@ -222477,8 +222633,7 @@ function projectsDomain(opts) {
           body: {
             ok: true,
             project_id: result.projectId,
-            moved_work_order_ids: result.movedWorkOrderIds,
-            carried_git_location_count: result.carriedGitLocationCount
+            moved_work_order_ids: result.movedWorkOrderIds
           }
         };
       } catch (err) {
@@ -222720,8 +222875,8 @@ ${errs.join("\n")}`);
       const nulledPatch = "project_id" in b2 && b2.project_id === null || "projectId" in b2 && b2.projectId === null || b2.project_id === "null" || b2.project_id === "" || b2.projectId === "null" || b2.projectId === "";
       if (nulledPatch) {
         try {
-          const binding = await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
-          return { status: 200, body: { work_order_id: binding.workOrderId, project_id: binding.projectId } };
+          await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
+          return { status: 200, body: { work_order_id: req.params.workOrderId, project_id: null } };
         } catch (err) {
           throw mapProjectError(err);
         }
@@ -222737,8 +222892,8 @@ ${errs.join("\n")}`);
     });
     router.delete("/api/work-orders/:workOrderId/project", async (req) => {
       try {
-        const binding = await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
-        return { status: 200, body: { work_order_id: binding.workOrderId, project_id: binding.projectId } };
+        await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
+        return { status: 200, body: { work_order_id: req.params.workOrderId, project_id: null } };
       } catch (err) {
         throw mapProjectError(err);
       }
@@ -223256,7 +223411,7 @@ var init_routes5 = __esm({
     "use strict";
     init_router();
     init_src();
-    init_ephemeral_project();
+    init_uncategorized_project();
   }
 });
 
@@ -228322,13 +228477,15 @@ async function buildChatPreview(chatStore, sessionId, who) {
   if (lastAsst) lines.push({ label: who, text: clip2(lastAsst.content) });
   return lines.length ? { lines } : void 0;
 }
-async function buildChatInbox(chatStore, markers, me, resolveActor) {
+async function buildChatInbox(chatStore, markers, me, resolveActor, excludeChildSessions) {
   const sessions = await chatStore.listSessions(me);
   const byScope = new Map(markers.map((m2) => [m2.scope, m2]));
   const unread = sessions.filter((s2) => s2.lastTurnQuality !== void 0 && isUnread(s2.touchedAt, byScope.get(chatScope(s2.id)))).sort((a, b2) => a.touchedAt < b2.touchedAt ? 1 : a.touchedAt > b2.touchedAt ? -1 : 0);
+  const excluded = excludeChildSessions ? new Set(await excludeChildSessions(unread.map((s2) => s2.id)).catch(() => [])) : /* @__PURE__ */ new Set();
   const out = [];
   let previewsFetched = 0;
   for (const s2 of unread) {
+    if (excluded.has(s2.id)) continue;
     const who = resolveActor?.(s2.aiActorId)?.name ?? "\u52A9\u7406";
     const abnormal = s2.lastTurnQuality === "abnormal";
     const preview2 = previewsFetched < PREVIEW_FETCH_CAP ? await buildChatPreview(chatStore, s2.id, who) : void 0;
@@ -229718,7 +229875,7 @@ function collabDomain(opts) {
       if (projectFilter) {
         items = items.filter((wo) => {
           const bound = wo.projectId;
-          if (isUncategorizedProjectId(projectFilter)) return typeof bound === "string" && isEphemeralProject(bound);
+          if (isUncategorizedProjectId(projectFilter)) return bound == null;
           return bound === projectFilter;
         });
       }
@@ -230124,7 +230281,8 @@ function collabDomain(opts) {
           return void 0;
         }
       })();
-      const chatItems = chatStore && myReadMarkers ? await buildChatInbox(chatStore, markers, me, resolveActor) : [];
+      const excludeChildSessions = opts.resolveDelegationChildIds ? (ids2) => opts.resolveDelegationChildIds(req.auth.companyId, ids2) : void 0;
+      const chatItems = chatStore && myReadMarkers ? await buildChatInbox(chatStore, markers, me, resolveActor, excludeChildSessions) : [];
       let waitingItems = [];
       if (engineStore) {
         const snaps = (await Promise.all(
@@ -230419,7 +230577,7 @@ var init_collab = __esm({
     init_workorder_metrics();
     init_chat_workorder_files();
     init_organization_usage();
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_tags();
     init_activity2();
     init_node_state();
@@ -230706,24 +230864,16 @@ function makeSeededWorkorderCreator(deps) {
     const blobs = company?.blobs ?? deps.blobs;
     const registry2 = company?.registry ?? deps.registry;
     const artifactState = company ? company.artifactState : deps.artifactState;
-    const createProject = company ? company.createProject : deps.createProject;
+    const workorderDrafts = company ? company.workorderDrafts : deps.workorderDrafts;
     const workspace = input.idempotencyKey ? workspaceForKey(input.idempotencyKey) : genWorkspace();
     if (input.idempotencyKey) {
       const existing = existingWorkorder(kernel, workspace);
       if (existing) return existing;
     }
-    if (artifactState && (input.projectId || createProject)) {
-      await ensureWorkorderProject({
+    if (artifactState && input.projectId) {
+      await bindWorkorderProject({
         workOrderId: workspace,
-        ...input.projectId ? { projectId: input.projectId } : {},
-        ...input.title ? { title: input.title } : {},
-        // ADR 0207：临时项目的创建人 = 建这张单的**真人**。`humanActorId` 是 B 路径 handler
-        // 从 `x-chat-session-id` 反查填进来的「陪发起人聊出此单的人」，与 brief.owner 同源；
-        // 没有它时只在 `input.actor` 本身是人时才用——剧本由 agent 触发时落 NULL，
-        // 不把执行者写成负责人。
-        ...input.humanActorId ? { createdBy: input.humanActorId } : input.actor.startsWith("actor:human:") ? { createdBy: input.actor } : {},
-        createProject: createProject ?? (async ({ id }) => ({ id })),
-        // 上面的守卫保证走不到这个分支
+        projectId: input.projectId,
         upsertBinding: (b2) => artifactState.upsertWorkspaceBinding(b2),
         ...deps.onWarn ? { onWarn: deps.onWarn } : {}
       });
@@ -230755,8 +230905,8 @@ function makeSeededWorkorderCreator(deps) {
     if (!preview2.endState.ok) {
       throw new Error(`\u5267\u672C\u5EFA\u5355\u7EC8\u6001\u6821\u9A8C\u4E0D\u8FC7\uFF1A${preview2.endState.violations.join("\uFF1B")}`);
     }
-    if (input.stage === true && deps.workorderDrafts) {
-      const draft = await deps.workorderDrafts.submit({
+    if (input.stage === true && workorderDrafts) {
+      const draft = await workorderDrafts.submit({
         workspace,
         plan: planned.plan,
         rootArtifactId: planned.rootArtifactId,
@@ -230818,7 +230968,7 @@ var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
     import_node_crypto57 = require("node:crypto");
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_planner();
     enc2 = (s2) => new TextEncoder().encode(s2);
   }
@@ -234058,6 +234208,9 @@ function createChatSessionsDomain(opts) {
           childSessionId: record8.childSessionId,
           expertActorId: record8.expertActorId,
           ...expert?.name ? { expertName: expert.name } : {},
+          /* 头像与名字同一本名册、同一次查询取出来。缺了它，委派卡与输入框上方状态条只能退回
+             姓名首字的灰圆（发起人 2026-09-10 报的「灰底 D」）——那两处画的是「[头像] 名字 进行中」。 */
+          ...expert?.avatar ? { expertAvatar: expert.avatar } : {},
           state: record8.state,
           ...record8.failureKind ? { failureKind: record8.failureKind } : {},
           ...record8.label ? { label: record8.label } : {},
@@ -237750,7 +237903,7 @@ function playbooksDomain(opts) {
       const drafts = opts.resolveWorkorderDrafts ? await opts.resolveWorkorderDrafts(req.auth?.companyId) : opts.workorderDrafts;
       if (result.draftId && chatSid && drafts) {
         try {
-          await drafts.tagSession(result.draftId, chatSid, opts.liveChat?.runFor(chatSid));
+          await drafts.tagSession(result.draftId, chatSid, opts.liveChat?.runFor(chatSid), result.workspace);
         } catch (err) {
           console.warn(`[playbooks] tagSession(${result.draftId}) \u5931\u8D25\uFF0C\u4E0D\u963B\u585E\u5EFA\u5355\u54CD\u5E94:`, err);
         }
@@ -238497,7 +238650,10 @@ var init_daemon_adapter = __esm({
         } else if (msg.type === "session_normalized_event") {
           this.confirmDelivery(msg.dispatchId, "started");
           const entry = this.pending.get(msg.dispatchId);
-          if (!entry) return;
+          if (!entry) {
+            if (this.stashEnabled) this.stashFrame(msg.dispatchId, { type: "normalized", event: msg.event });
+            return;
+          }
           if (entry.normalizedCbs.length === 0) entry.normalizedBacklog.push(msg.event);
           else for (const cb of entry.normalizedCbs) cb(msg.event);
         } else if (msg.type === "session_output") {
@@ -238630,6 +238786,7 @@ var init_daemon_adapter = __esm({
         let replayOutput;
         let replayTelemetry;
         let replayLiveEvent;
+        let replayNormalized;
         const flushReplay = () => {
           while (stashed.frames.length > 0) {
             const frame = stashed.frames[0];
@@ -238641,6 +238798,10 @@ var init_daemon_adapter = __esm({
               if (!replayTelemetry) return;
               stashed.frames.shift();
               replayTelemetry(frame.event);
+            } else if (frame.type === "normalized") {
+              if (!replayNormalized) return;
+              stashed.frames.shift();
+              replayNormalized(frame.event);
             } else {
               if (!replayLiveEvent) return;
               stashed.frames.shift();
@@ -238679,9 +238840,11 @@ var init_daemon_adapter = __esm({
           },
           ...supportsNormalizedEvents ? {
             onNormalizedProviderEvent(cb) {
-              entry.normalizedCbs.push(cb);
+              replayNormalized ??= cb;
+              flushReplay();
               const backlog = entry.normalizedBacklog.splice(0, entry.normalizedBacklog.length);
               for (const e of backlog) cb(e);
+              entry.normalizedCbs.push(cb);
             }
           } : {},
           // ADR-0093 对话追加（重挂句柄同 spawn 句柄）。
@@ -242164,6 +242327,9 @@ var init_postgres_projects = __esm({
         const r = await this.pool.query(`SELECT * FROM ${this.s}.workspace_bindings`);
         return r.rows.map(rowToWorkspaceBinding);
       }
+      async deleteWorkspaceBinding(workOrderId) {
+        await this.pool.query(`DELETE FROM ${this.s}.workspace_bindings WHERE work_order_id = $1`, [workOrderId]);
+      }
       /* ---------- 任务输入文件（PRD §2.6.3 建单交接；薄旁存，非 oplog） ---------- */
       async addWorkOrderFile(file) {
         await this.pool.query(
@@ -255641,8 +255807,8 @@ var init_cutover_aware_workorder_drafts = __esm({
       async snapshotForNewRun(d, runId) {
         return (await this.pickWritable()).snapshotForNewRun(d, runId);
       }
-      async tagSession(id, s2, runId) {
-        return (await this.pickWritable()).tagSession(id, s2, runId);
+      async tagSession(id, s2, runId, expectedWorkspace) {
+        return (await this.pickWritable()).tagSession(id, s2, runId, expectedWorkspace);
       }
       async markEdited(id) {
         return (await this.pickWritable()).markEdited(id);
@@ -256613,6 +256779,7 @@ var init_src11 = __esm({
     init_sender();
     init_routes7();
     init_runtime_drift();
+    init_runtime_tenancy();
     init_types4();
     init_roles();
     init_node_store();
@@ -256664,7 +256831,7 @@ var init_src11 = __esm({
     init_connector_skills();
     init_connector_tool_versions();
     init_board_watch();
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_run_settlement();
     init_reconcile_terminal_runs();
     init_run_settlement_wiring();
@@ -258176,6 +258343,9 @@ async function startServe(opts) {
   let memStoreShared;
   let isKnowledgeQueryAvailable = async (_actorId) => false;
   const actors = createActorsDomain({
+    // 租户闸（ADR-0164 §5）：`POST /api/bindings` 据它拦「把本公司员工绑到别家公司的机器上」。
+    // 闭包读当前 nodeStore（下方 PG 分支会重赋值），与 `listBindingModelIds` 同一写法。
+    resolveNodeTenancy: async (nodeId) => nodeStore.getNode(nodeId),
     store: registryStore,
     oplog,
     kernel: defaultCompanyKernel,
@@ -258244,7 +258414,10 @@ async function startServe(opts) {
     prefsStore: humanPrefsStore,
     registry: registryStore,
     actors: actors.service,
-    listRuntimes: (nodeId) => nodeStore.listRuntimes(nodeId),
+    // 默认公司那一份。**闭包求值**：`defaultCompanyId` 是 let，startup 后才被库里的真实 id 覆盖
+    // （同 :1575 那句「必须是调用时求值」）。
+    companyId: () => defaultCompanyId,
+    listRuntimes: (nodeId, scope) => nodeStore.listRuntimes(nodeId, scope),
     isPlatformAdmin: async () => false
     // 占位；controlPlaneStore 就绪后由下方 setPlatformAdminChecker 注入真判据
   });
@@ -258536,8 +258709,6 @@ async function startServe(opts) {
     getSchema: () => schema,
     registry: registryStore,
     artifactState: artifactStateStore,
-    // 决策 C：剧本建单没给 projectId 时，兜底建一个由工单派生的临时项目并绑上。
-    createProject: makeEnsureProjectFromStore(projectStateStore),
     onWarn: (m2) => console.warn(m2),
     workorderDrafts,
     buildDraftGraph: async (draft) => buildWorkorderDraftDetail(draft, await buildResolver(registryStore), buildTypeReviewerResolver(schema, await registryStore.listActors())).graph,
@@ -258559,8 +258730,12 @@ async function startServe(opts) {
           blobs: engine2.blobs,
           registry: engine2.registry ?? registryStore,
           artifactState: stores.artifacts,
-          // 兜底临时项目也要建在本公司的库里，否则绑定两端分处两个 schema。
-          createProject: makeEnsureProjectFromStore(stores.projects)
+          // 草案 store 必须按公司拿（2026-09-10 事故）：此前它是装配期捕获的共享库实例，
+          // `stage: true` 建出来的草案落大通铺、读侧却按公司解析，本公司永远查不到自己的草案。
+          // ⚠ 这个 helper 的 const 声明在本处之后，只能在**请求时**才求值的闭包里引用
+          //   （同上方 resolveChatSession 的写法），直接在装配期引用会撞 TDZ。
+          // planner 阻断项旁账**不在本次范围**，理由见 create-seeded-workorder.ts 里那段注释。
+          workorderDrafts: await workorderDraftsFor(companyId)
         };
       }
     } : {}
@@ -259871,7 +260046,9 @@ async function startServe(opts) {
               prefsStore: plane?.humanPrefs ?? humanPrefsStore,
               registry: engine2.registry,
               actors: ctx.service,
-              listRuntimes: (nodeId) => nodeStore.listRuntimes(nodeId),
+              // 这一份服务的是**请求方的公司**——助理只在这家的在线 runtime 里挑机器（ADR-0164 §5）。
+              companyId: () => cid,
+              listRuntimes: (nodeId, scope) => nodeStore.listRuntimes(nodeId, scope),
               isPlatformAdmin: async (caller) => {
                 const member = await controlPlaneStore.getMember(cid, caller);
                 return member?.role === "owner";
@@ -259965,6 +260142,14 @@ async function startServe(opts) {
         // ADR-0086：chat 知会条目（与 readMarkers 成对）
         // ADR「多租户数据面收口」§D2：知会条目按**当前公司**取。装了路由才给（dev 文件模式沿用单实例）。
         ...chatStoreRouter ? { resolveChatSession: chatStoreFor } : {},
+        /* 委派子会话不进铃铛（发起人 2026-09-10）：专家跑完回流到父会话，父会话那条已经通知过一次。
+           判据与左侧会话列表那条路同一个读口（`listChildSessionIds`，见下面 chat-sessions 域的
+           `delegations` 接线），不另造。灰度关着 → 回空集合 = 不滤，与接入前逐字一致。 */
+        resolveDelegationChildIds: async (companyId, sessionIds) => {
+          if (!chatDelegationEnabledFromEnv() || sessionIds.length === 0) return [];
+          const ledger = await delegationStoreFor(companyId).catch(() => null);
+          return ledger ? ledger.listChildSessionIds(sessionIds) : [];
+        },
         readMarkers: readMarkerStore,
         // bundle=`inbox`：水位按当前公司取（与上面 resolveChatSession 成对）。
         ...pgPool ? { resolveReadMarkers: readMarkerStoreFor } : {},
@@ -260176,7 +260361,9 @@ async function startServe(opts) {
           listProjects: (companyId) => companyId === defaultCompanyId ? projectStateStore.listProjects() : Promise.resolve([]),
           listProjectMembers: async (companyId, projectId2) => companyId === defaultCompanyId ? (await projectStateStore.listProjectMembers(projectId2)).flatMap((member) => member.kind === "system" ? [] : [{ actorId: member.actorId, kind: member.kind, status: member.status === "active" ? "active" : "inactive" }]) : [],
           getWorkspaceBinding: (companyId, workorderId) => companyId === defaultCompanyId ? artifactStateStore.getWorkspaceBinding(workorderId) : Promise.resolve(null),
-          isEphemeralProject: (companyId, projectId2) => companyId !== defaultCompanyId || isEphemeralProject(projectId2)
+          // 非默认公司暂不支持项目级知识作用域（这里只有默认公司的 projectStateStore/名册可读），
+          // 一律降级到组织作用域。旧版这个谓词还兼着"是不是 proj_tmp_ 临时项目"，临时项目退役后只剩这一半。
+          isProjectScopeUnsupported: (companyId) => companyId !== defaultCompanyId
         },
         actor: async (actorId, organizationId) => {
           if (actorId === SYSTEM_ACTOR2) return { id: actorId, kind: "system", status: "active" };
@@ -260681,7 +260868,9 @@ async function startServe(opts) {
           }
           binding = currentBinding;
         }
-        const requireDispatchNode = (target) => {
+        const requireDispatchNode = async (target) => {
+          const foreign = foreignNodeBlock(await nodeStore.getNode(target.nodeId).catch(() => null), runCompanyId);
+          if (foreign) throw new ApiError(409, "NODE_NOT_IN_COMPANY", foreign);
           const connected = hub?.connectedDaemons().find((d) => d.daemonId === target.nodeId);
           if (!connected) {
             throw new ApiError(409, "NODE_OFFLINE", `\u7ED1\u5B9A\u8282\u70B9 ${target.nodeId} \u5F53\u524D\u4E0D\u5728\u7EBF`);
@@ -260691,7 +260880,7 @@ async function startServe(opts) {
           }
           return connected;
         };
-        let node2 = requireDispatchNode(binding);
+        let node2 = await requireDispatchNode(binding);
         if (!chatRemoteAdapter) {
           throw new ApiError(503, "NODE_GATEWAY_NOT_READY", "node-gateway \u5C1A\u672A\u5C31\u7EEA");
         }
@@ -260771,7 +260960,7 @@ async function startServe(opts) {
           }
           if (stableDispatch.target.nodeId !== binding.nodeId || stableDispatch.target.runtimeKind !== binding.runtimeKind) {
             binding = { actorId, ...stableDispatch.target, status: "active" };
-            node2 = requireDispatchNode(binding);
+            node2 = await requireDispatchNode(binding);
             requireNodeConnectors();
           }
         }
@@ -262124,6 +262313,8 @@ async function startServe(opts) {
         checkDispatchable: async ({ actor, binding }) => {
           try {
             if (!binding.nodeId) return null;
+            const foreign = foreignNodeBlock(await nodeStore.getNode(binding.nodeId).catch(() => null), companyId);
+            if (foreign) return { reason: "node-not-in-company", errorMessage: foreign };
             const drift = runtimeDriftBlock(await nodeStore.listRuntimes(binding.nodeId), binding.nodeId, binding.runtimeKind);
             if (drift) return drift;
             const health = healthOfNode(binding.nodeId);
@@ -269282,6 +269473,9 @@ ${res.warning}`);
           ...expect !== void 0 ? { expectedVersion: Number(expect) } : {}
         });
         println(`\u5DF2\u8BB0\u4E0B ${rec.memId}\uFF08v${rec.version}\uFF0C${rec.projectId === null ? "actor \u7EA7\xB7\u8DE8\u9879\u76EE\u901A\u7528" : `\u9879\u76EE ${rec.projectId}`}\uFF09`);
+        if ((flags.get("scope") ?? "actor") === "project" && rec.projectId === null) {
+          println("  \u24D8 \u672C\u8F6E\u89E3\u6790\u4E0D\u51FA\u6240\u5C5E\u9879\u76EE\uFF08\u8FD9\u5F20\u4EFB\u52A1\u6CA1\u6302\u9879\u76EE\uFF09\uFF0C\u5DF2\u6309 actor \u7EA7\u8BB0\u4E0B\u2014\u2014\u60F3\u8BA9\u5B83\u843D\u5230\u9879\u76EE\u540D\u4E0B\uFF0C\u5148\u7ED9\u4EFB\u52A1\u6307\u5B9A\u9879\u76EE\u3002");
+        }
       } catch (err) {
         const body2 = err instanceof ApiRequestError ? err.body : void 0;
         if (body2?.current) {
@@ -270840,7 +271034,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.10" : "dev";
+var PKG_VERSION = true ? "2.2.11" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;