oasis_test_v2 2.2.10 → 2.2.12

package/dist/index.js

@@ -4666,8 +4666,6 @@ var init_kill = __esm({
 function scan(state, ctx) {
   if (state.workorder.dispatchPaused) return { events: [], terminated: false };
   const events = [];
-  const now = ctx.at;
-  const policy = ctx.policy ?? CODE_DEFAULT_POLICY;
   for (const node2 of state.liveNodes()) {
     const lw = node2.latestWorkId ? state.work(node2.latestWorkId) : null;
     if (!lw) {
@@ -4701,12 +4699,7 @@ function scan(state, ctx) {
       continue;
     }
     if (wstate === "running") {
-      const start = lw.lastActivityAt ?? lw.startedAt ?? lw.createdAt;
-      const elapsed = new Date(now).getTime() - new Date(start).getTime();
-      const wcell = policy.resolve({ executor: classify(node2.assigneeActorId), scenario: "work" });
-      if (wcell.timeoutAction.kind === "kill-rebuild" && elapsed > wcell.deadlineMs) {
-        events.push({ kind: "work.timeout", workorderId: state.workorder.id, workId: lw.id });
-      }
+      checkRunningWorkTimeout(state, node2, lw, ctx, events);
       continue;
     }
     const blockers = scanBlockersForNode(state, node2, lw);
@@ -4771,10 +4764,9 @@ function scan(state, ctx) {
           workorderId: state.workorder.id,
           nodeId: node2.id,
           // ★ 合并写：保留 source ∈ {type, manual, model} 的原有行，覆写 source='closure' 的行。
-          //   `plan.update_review_requirements` handler 是**全量替换**（killNodeReviews + replaceRequirements），
+          //   `plan.update_review_requirements` 的名单仍是**全量替换**，
           //   所以必须把手动 / 类型 / 模型来源的行一并带上——漏一条即误删协调者手动指派的审核人。
-          //   killNodeReviews 会杀本节点在跑的评审：candidate 分支进入时该节点尚未派出评审（reqs 为空
-          //   or 只含 closure 之外的组），本轮内 kill 无影响。
+          //   总线为新事件写 preserveReviews：未变组的当前审核继续，只有新增 closure 组待派。
           reviewers: mergedClosureRequirements(state, node2.id, closureActors)
         });
         continue;
@@ -4877,6 +4869,15 @@ function scan(state, ctx) {
   const terminated = events.length === 0 && checkTerminated(state);
   return { events, terminated };
 }
+function checkRunningWorkTimeout(state, node2, work, ctx, events) {
+  const start = work.lastActivityAt ?? work.startedAt ?? work.createdAt;
+  const elapsed = new Date(ctx.at).getTime() - new Date(start).getTime();
+  const policy = ctx.policy ?? CODE_DEFAULT_POLICY;
+  const wcell = policy.resolve({ executor: classify(node2.assigneeActorId), scenario: "work" });
+  if (wcell.timeoutAction.kind === "kill-rebuild" && elapsed > wcell.deadlineMs) {
+    events.push({ kind: "work.timeout", workorderId: state.workorder.id, workId: work.id });
+  }
+}
 function openCommentBlockers(state, node2) {
   if (!node2.assigneeActorId) return [];
   return state.allIssues().filter((i) => i.kind === "comment" && i.resolvedAt === null && i.aboutNodeId === node2.id).map((i) => ({
@@ -4961,6 +4962,13 @@ function tryToRun(state, nodeId, ctx, events) {
   const node2 = state.node(nodeId);
   if (!node2) return;
   if (!node2.assigneeActorId) return;
+  const latest = (node2.latestWorkId ? state.work(node2.latestWorkId) : null) ?? null;
+  if (unexemptedVetoBlockers(scanBlockersForNode(state, node2, latest), "dispatch").length > 0) {
+    if (latest && workState(latest, hasOutput(latest, state.artifactsOf(latest.id).length)) === "running") {
+      checkRunningWorkTimeout(state, node2, latest, ctx, events);
+    }
+    return;
+  }
   const inbound = state.edgesInto(nodeId);
   for (const e of inbound) {
     if (e.kind !== "data" || !e.required) continue;
@@ -12011,7 +12019,7 @@ function markNodeForRetry(state, nodeId, at, resetRejectedBudget = false) {
     }
   }
 }
-var planUpdateSpec, planAddNode, planDeleteNode, planAddEdge, planDeleteEdge, planAssignActor, planUpdateReviewRequirements, planNodeRetry, planUpdateFields, planApply;
+var planUpdateSpec, planAddNode, planDeleteNode, planAddEdge, planDeleteEdge, planAssignActor, reviewerKey, planUpdateReviewRequirements, planNodeRetry, planUpdateFields, planApply;
 var init_plan = __esm({
   "../engine/src/handlers/plan.ts"() {
     "use strict";
@@ -12134,11 +12142,51 @@ var init_plan = __esm({
         });
       }
     };
+    reviewerKey = (r) => JSON.stringify([r.reviewerActorId, r.reviewGroup]);
     planUpdateReviewRequirements = {
       name: "plan/update-review-requirements",
       kind: "plan.update_review_requirements",
       apply(e, state, ctx) {
-        if (!state.node(e.nodeId)) return;
+        const node2 = state.node(e.nodeId);
+        if (!node2) return;
+        if (e.preserveReviews) {
+          const previous3 = state.requirementsOf(e.nodeId);
+          const previousByKey = new Map(previous3.map((r) => [reviewerKey(r), r]));
+          const nextByKey = new Map(e.reviewers.map((r) => [reviewerKey(r), r]));
+          const membershipChanged = previousByKey.size !== nextByKey.size || [...previousByKey.keys()].some((key) => !nextByKey.has(key));
+          const currentByGroup = /* @__PURE__ */ new Map();
+          for (const req of previous3) {
+            const r = req.latestReviewId ? state.review(req.latestReviewId) : void 0;
+            if (r && r.nodeId === e.nodeId && r.targetWorkId === node2.latestProposedWorkId && r.reviewGroup === req.reviewGroup && previousByKey.has(reviewerKey(r)) && nextByKey.has(reviewerKey(r))) {
+              currentByGroup.set(req.reviewGroup, r.id);
+            }
+          }
+          const next = [...nextByKey.values()].map((r) => {
+            const old = previousByKey.get(reviewerKey(r));
+            return {
+              nodeId: e.nodeId,
+              reviewerActorId: r.reviewerActorId,
+              reviewGroup: r.reviewGroup,
+              source: r.source,
+              assignedBy: old?.assignedBy ?? ctx.actorId,
+              // assignedAt 同时是历史判决回填的名单纪元。名单变更必须推进，避免拿缩减后的组集
+              // 去补判旧 work；本轮有效票由 durable 指针保留，不靠时间戳继承（ADR 0533）。
+              assignedAt: membershipChanged ? ctx.at : old?.assignedAt ?? ctx.at,
+              latestReviewId: currentByGroup.get(r.reviewGroup) ?? null
+            };
+          });
+          for (const r of state.allReviews()) {
+            if (r.nodeId === e.nodeId && !nextByKey.has(reviewerKey(r)) && isReviewKillable(r)) {
+              killReviewRow(state, r, ctx.at);
+            }
+          }
+          const unchanged = previous3.length === next.length && next.every((r) => {
+            const old = previousByKey.get(reviewerKey(r));
+            return old?.source === r.source && old.latestReviewId === r.latestReviewId;
+          });
+          if (!unchanged) state.replaceRequirements(e.nodeId, next);
+          return;
+        }
         killNodeReviews(state, e.nodeId, ctx.at);
         state.replaceRequirements(e.nodeId, e.reviewers.map((r) => ({
           nodeId: e.nodeId,
@@ -12149,6 +12197,9 @@ var init_plan = __esm({
           assignedAt: ctx.at,
           latestReviewId: null
         })));
+      },
+      async effect(e, ctx) {
+        if (e.preserveReviews) await ctx.cancelKilledSessions(e.workorderId, { nodeId: e.nodeId, retained: e.reviewers });
       }
     };
     planNodeRetry = {
@@ -13236,6 +13287,8 @@ function versionCommandEvent(event) {
     return { ...event, semanticsVersion: 3 };
   }
   switch (event.kind) {
+    case "plan.update_review_requirements":
+      return { ...event, preserveReviews: true };
     case "work.accept":
     case "work.kill":
     case "work.handoff_recorded":
@@ -13801,7 +13854,7 @@ var init_bus = __esm({
           // ★ 设计 §workorder.sealed/paused「按 work.kill 逻辑杀」：killAllWorks 只置状态，会话取消在这里做——
           // apply 已把被杀 work/review 置 deadAt/cancelledAt，这里按 store 找它们仍挂着的会话 cancel
           //（deadAt 且 endedAt 未置 = 刚被杀未退出的在途会话）。没会话 / 已退 → no-op。
-          cancelKilledSessions: async () => {
+          cancelKilledSessions: async (_workorderId, reviewScope) => {
             let snap;
             try {
               snap = await this.store.transaction((tx) => tx.loadWorkorder(record8.workorderId));
@@ -13817,10 +13870,13 @@ var init_bus = __esm({
                 console.warn(`[bus] cancelKilledSessions ${what} ${id}: ${String(err)}`);
               }
             };
-            for (const w2 of snap.works) {
+            for (const w2 of reviewScope === void 0 ? snap.works : []) {
               if (w2.deadAt && w2.endedAt === null) await cancel(w2.id, "work");
             }
             for (const r of snap.reviews) {
+              if (reviewScope && (r.nodeId !== reviewScope.nodeId || reviewScope.retained.some(
+                (req) => req.reviewerActorId === r.reviewerActorId && req.reviewGroup === r.reviewGroup
+              ))) continue;
               if (r.cancelledAt && r.endedAt === null) await cancel(r.id, "review");
             }
           },
@@ -16273,6 +16329,10 @@ var init_dispatcher = __esm({
       // 凭证是执行者属性，要人改（等待策略：熔断）
       [NO_BINDING_REASON]: "A",
       // 僵尸账号：只有人给它一个有效绑定才可能变
+      // 绑到了**别家公司**的机器上（ADR-0164 §5 的租户闸）。与上一条同构：绑定本身就是错的，
+      // 只有人改绑才可能变——而「改绑」正是 A 轴的第一条触发（executorSignature 含 nodeId），
+      // 改完自动复位、不必再等一次人工干预。落 C 也不算错（安全默认），但会让人多做一步。
+      "node-not-in-company": "A",
       "clean": "B",
       // 机器好好的、就是没交东西 → 换个东西给它做才有意义
       "timeout": "B",
@@ -21195,16 +21255,18 @@ var init_kernel_bridge = __esm({
               const artId = op.artifactId;
               const opReviewers = op.reviewers;
               const editReviewRoles = op.reviewRoles;
+              const closureReviewers = (artifacts.get(artId)?.reviewers ?? []).filter((r) => r.source === "closure");
               if (artId && (opReviewers || editReviewRoles !== void 0)) {
                 const art = artifacts.get(artId);
                 const effectiveRoles = editReviewRoles !== void 0 ? editReviewRoles === null ? void 0 : editReviewRoles : art?.reviewRoles;
-                const effectiveExplicit = opReviewers ?? (art?.reviewers ?? []).map((r) => ({ actor: r.actor, source: r.source }));
+                const effectiveExplicit = opReviewers ?? (art?.reviewers ?? []).filter((r) => r.source !== "closure").map((r) => ({ actor: r.actor, source: r.source }));
                 const { reviewers: nextReqs, staffingIssues } = resolveNodeReviewers({
                   typeName: art?.type ?? "",
                   typeDef: art ? this.schema.get(art.type) : void 0,
                   ...effectiveRoles !== void 0 ? { reviewRoles: effectiveRoles } : {},
                   explicitReviewers: effectiveExplicit,
-                  roleIndex: this.roleIndex
+                  roleIndex: this.roleIndex,
+                  closureGate: closureReviewers.map((r) => r.actor)
                 });
                 for (const issue2 of staffingIssues) {
                   reviewerStaffing.push({ nodeId: artId, type: art?.type ?? "", role: issue2.role, from: issue2.from });
@@ -21263,7 +21325,7 @@ var init_kernel_bridge = __esm({
                 ...opDescription !== void 0 ? { description: opDescription } : {},
                 ...fields ? { fields: { ...previous3.fields, ...fields } } : {},
                 ...editReviewRoles !== void 0 ? { reviewRoles: editReviewRoles ?? void 0 } : {},
-                ...opReviewers ? { reviewers: opReviewers } : {}
+                ...opReviewers ? { reviewers: [...opReviewers, ...closureReviewers] } : {}
               });
               applied++;
               break;
@@ -28721,6 +28783,8 @@ var init_chat_item_ledger = __esm({
        * 也不算进本段的 assistant item 计数。
        */
       recordUserInput(text5, attachments) {
+        const payload = { role: "user", text: text5 };
+        if (attachments?.length) payload.attachments = attachments;
         this.insert({
           kind: "text",
           role: "user",
@@ -28731,6 +28795,7 @@ var init_chat_item_ledger = __esm({
           inContent: false,
           persist: true,
           forceNullMessage: true,
+          payload,
           metadata: {
             [CHAT_ITEM_META_LEGACY_CONTENT]: false,
             ...attachments?.length ? { attachments } : {}
@@ -29049,7 +29114,8 @@ var init_chat_item_ledger = __esm({
               ord: created.ord,
               version: writeVersion,
               role: input.role,
-              text: input.text
+              text: input.text,
+              payload
             });
           } catch {
           }
@@ -29324,6 +29390,8 @@ function runBackgroundAssistantChatTurn(deps) {
       ...assistantMsgId ? { messageId: assistantMsgId } : {},
       log: log3
     });
+    const liveTurn = deps.liveChat && deps.liveHandle ? deps.liveChat.start(deps.chatSessionId, deps.liveHandle, { items: itemLedger }) : void 0;
+    if (assistantMsgId) liveTurn?.setAssistantMessageId(assistantMsgId);
     const normalizedSource = typeof deps.session.onNormalizedProviderEvent === "function" ? {
       onNormalizedProviderEvent: deps.session.onNormalizedProviderEvent.bind(deps.session),
       finishTurn: (signal) => deps.session.finishNormalizedTurn?.(signal)
@@ -29349,7 +29417,8 @@ function runBackgroundAssistantChatTurn(deps) {
     let ckptDirty = false;
     normalizedSource.onNormalizedProviderEvent((event) => {
       try {
-        itemLedger.apply(event);
+        if (liveTurn) liveTurn.applyNormalizedEvent(event);
+        else itemLedger.apply(event);
       } catch {
       }
       ckptDirty = true;
@@ -29387,34 +29456,59 @@ function runBackgroundAssistantChatTurn(deps) {
     }
     const finalize = async (status) => {
       if (ckptTimer) clearInterval(ckptTimer);
-      await checkpointChain.catch(() => void 0);
-      normalizedSource.finishTurn(status === "done" ? "completed" : "failed");
-      itemLedger.finish(status === "done" ? "completed" : "failed");
-      await itemLedger.drain();
-      const projectedContent = itemLedger.projectContent();
-      const parts = collectedParts();
-      await finalizeAssistantRow({
-        chatStore: deps.chatStore,
-        chatSessionId: deps.chatSessionId,
-        assistantMsgId,
-        content: projectedContent,
-        parts,
-        status,
-        ...runId ? { runId } : {},
-        now
-      });
-      if (typeof deps.chatStore.updateSession === "function") {
-        try {
-          await deps.chatStore.updateSession(deps.chatSessionId, {
-            runtimeSessionId: deps.session.nativeSessionId ?? null,
-            touchedAt: now()
+      try {
+        await checkpointChain.catch(() => void 0);
+        normalizedSource.finishTurn(status === "done" ? "completed" : "failed");
+        itemLedger.finish(status === "done" ? "completed" : "failed");
+        await itemLedger.drain();
+        const projectedContent = itemLedger.projectContent();
+        const parts = collectedParts();
+        await finalizeAssistantRow({
+          chatStore: deps.chatStore,
+          chatSessionId: deps.chatSessionId,
+          assistantMsgId,
+          content: projectedContent,
+          parts,
+          status,
+          ...runId ? { runId } : {},
+          now
+        });
+        if (typeof deps.chatStore.updateSession === "function") {
+          try {
+            await deps.chatStore.updateSession(deps.chatSessionId, {
+              runtimeSessionId: deps.session.nativeSessionId ?? null,
+              touchedAt: now()
+            });
+          } catch {
+          }
+        }
+        if (liveTurn) {
+          if (projectedContent) liveTurn.emit({ type: "text", text: projectedContent });
+          liveTurn.emitLive({
+            protocolVersion: 2,
+            streamId: `background:${deps.chatSessionId}`,
+            turnId: deps.turnId ?? fallbackTurnId(runId),
+            itemId: `background:${assistantMsgId ?? runId}`,
+            itemType: "message",
+            operation: "completed",
+            payload: { role: "assistant", text: projectedContent }
           });
+        }
+        try {
+          deps.onSettled?.();
         } catch {
         }
-      }
-      try {
-        deps.onSettled?.();
-      } catch {
+      } finally {
+        liveTurn?.emit({ type: "done" });
+        liveTurn?.emitLive({
+          protocolVersion: 2,
+          streamId: `background:${deps.chatSessionId}`,
+          turnId: deps.turnId ?? fallbackTurnId(runId),
+          itemId: "background:terminal",
+          itemType: "control",
+          operation: status === "done" ? "turn_completed" : "turn_failed"
+        });
+        liveTurn?.finish(status);
       }
     };
     void Promise.resolve(deps.session.done).then(() => finalize("done").catch(() => void 0)).catch((err) => {
@@ -142333,71 +142427,6 @@ var init_collect = __esm({
   }
 });
 
-// ../server/src/domains/projects/ephemeral-project.ts
-function isEphemeralProject(projectId2) {
-  return projectId2.startsWith(EPHEMERAL_PROJECT_PREFIX);
-}
-function isUncategorizedProjectId(projectId2) {
-  return projectId2 === UNCATEGORIZED_PROJECT_ID;
-}
-function ephemeralProjectIdFor(workOrderId) {
-  return `${EPHEMERAL_PROJECT_PREFIX}${workOrderId.replace(/[^a-zA-Z0-9_-]+/g, "_")}`;
-}
-function ephemeralProjectNameFor(workOrderId, title) {
-  return `\u4E34\u65F6\u9879\u76EE \xB7 ${title?.trim() || workOrderId}`;
-}
-async function ensureWorkorderProject(deps) {
-  const { workOrderId, projectId: projectId2, title, createdBy } = deps;
-  try {
-    if (projectId2) {
-      await deps.upsertBinding({ workOrderId, projectId: projectId2 });
-      return projectId2;
-    }
-    const id = ephemeralProjectIdFor(workOrderId);
-    await deps.createProject({
-      id,
-      name: ephemeralProjectNameFor(workOrderId, title),
-      description: `\u5EFA\u5355\u65F6\u672A\u6307\u5B9A\u9879\u76EE\uFF0C\u7CFB\u7EDF\u81EA\u52A8\u4E3A\u5DE5\u5355 ${workOrderId} \u521B\u5EFA\u7684\u4E34\u65F6\u9879\u76EE\u3002\u53EF\u7528 \`PATCH /api/work-orders/${workOrderId}/project\` \u6539\u6302\u5230\u6B63\u5F0F\u9879\u76EE\u3002`,
-      ...createdBy ? { createdBy } : {}
-    });
-    await deps.upsertBinding({ workOrderId, projectId: id });
-    return id;
-  } catch (e) {
-    deps.onWarn?.(`[project] \u5DE5\u5355 ${workOrderId} \u7ED1\u5B9A\u9879\u76EE\u5931\u8D25\uFF08\u4E0D\u963B\u65AD\u5EFA\u5355\uFF09\uFF1A${String(e)}`);
-    return null;
-  }
-}
-function makeEnsureProjectFromStore(store) {
-  return async (input) => {
-    const existing = await store.getProject(input.id);
-    if (existing) return { id: existing.id };
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const createdById = input.createdBy?.trim();
-    const createdBy = createdById && (createdById.startsWith("actor:human:") || createdById.startsWith("actor:agent:")) ? { id: createdById, kind: projectActorKind(createdById), name: null, avatar: null } : void 0;
-    await store.upsertProject({
-      id: input.id,
-      name: input.name,
-      ...input.description !== void 0 ? { description: input.description } : {},
-      ...createdBy ? { createdBy } : {},
-      createdAt: now,
-      updatedAt: now
-    });
-    return { id: input.id };
-  };
-}
-var EPHEMERAL_PROJECT_PREFIX, UNCATEGORIZED_PROJECT_ID, UNCATEGORIZED_PROJECT_NAME, UNCATEGORIZED_PROJECT_DESCRIPTION, UNCATEGORIZED_UNKNOWN_TIME;
-var init_ephemeral_project = __esm({
-  "../server/src/domains/projects/ephemeral-project.ts"() {
-    "use strict";
-    init_src();
-    EPHEMERAL_PROJECT_PREFIX = "proj_tmp_";
-    UNCATEGORIZED_PROJECT_ID = "proj:uncategorized";
-    UNCATEGORIZED_PROJECT_NAME = "\u65E0\u5206\u7C7B\u9879\u76EE";
-    UNCATEGORIZED_PROJECT_DESCRIPTION = "\u6240\u6709\u672A\u9009\u62E9\u9879\u76EE\u7684\u5BF9\u8BDD\u76F8\u5173\u6587\u4EF6\u548C\u4EFB\u52A1\u81EA\u52A8\u5E76\u5165\u8FD9\u91CC\uFF0C\u7EC4\u7EC7\u5185\u6240\u6709\u4EBA\u53EF\u89C1\u3002";
-    UNCATEGORIZED_UNKNOWN_TIME = "1970-01-01T00:00:00.000Z";
-  }
-});
-
 // ../server/src/domains/collab/timeline.ts
 function buildNodeTimeline(artifactId, snap, runIdByTarget) {
   if (!snap) return { artifactId, items: [] };
@@ -159818,8 +159847,9 @@ var init_live_chat = __esm({
     DEFAULT_LIVE_COALESCE_MS = 24;
     DEFAULT_LIVE_COALESCE_MAX_CHUNKS = 32;
     DEFAULT_LIVE_COALESCE_MAX_CHARS = 64 * 1024;
-    LiveChatRegistry = class {
+    LiveChatRegistry = class _LiveChatRegistry {
       turns = /* @__PURE__ */ new Map();
+      turnStartWaiters = /* @__PURE__ */ new Map();
       epochs = /* @__PURE__ */ new Map();
       bufferMax;
       graceMs;
@@ -159865,6 +159895,15 @@ var init_live_chat = __esm({
           v3Items: /* @__PURE__ */ new Map()
         };
         this.turns.set(chatSessionId, turn);
+        this.flushPendingUserItems(chatSessionId);
+        const waiters = this.turnStartWaiters.get(chatSessionId);
+        this.turnStartWaiters.delete(chatSessionId);
+        for (const wake of waiters ?? []) {
+          try {
+            wake();
+          } catch {
+          }
+        }
         return {
           runtimeSessionId: turn.runtimeSessionId,
           epoch: turn.liveEpoch,
@@ -159937,6 +159976,26 @@ var init_live_chat = __esm({
           ...opts.items ? { items: opts.items } : {}
         };
       }
+      /** 只通知开轮，不承载内容。先检查再登记均为同步，避免空闲检查与订阅之间漏掉开轮。 */
+      onNextTurn(chatSessionId, wake) {
+        if (this.isRunning(chatSessionId)) {
+          wake();
+          return () => {
+          };
+        }
+        let waiters = this.turnStartWaiters.get(chatSessionId);
+        if (!waiters) {
+          waiters = /* @__PURE__ */ new Set();
+          this.turnStartWaiters.set(chatSessionId, waiters);
+        }
+        waiters.add(wake);
+        return () => {
+          waiters.delete(wake);
+          if (waiters.size === 0 && this.turnStartWaiters.get(chatSessionId) === waiters) {
+            this.turnStartWaiters.delete(chatSessionId);
+          }
+        };
+      }
       /**
        * 归一层中间事件 → 带 `itemId` 的 item op（ADR D4 第 2 跳）+ v3 帧 dual-emit（S3）。
        *
@@ -160164,9 +160223,34 @@ var init_live_chat = __esm({
        * （`server.ts` 里 `recordUserSubmission` 在 `liveChat.start` 之前）。拿不到就不发——
        * 前端退回「等下一次快照」，与修复前一致，不会更坏。
        */
+      /**
+       * 「user item 已落库、但这条会话的 live 轮还没 start」时的暂存位（见 {@link publishUserItem}）。
+       *
+       * 每会话只留最近几条：它的唯一用途是补发**当前这一次提交**，不是可靠队列。留太多等于把
+       * 一条早就过期的 user 帧在下一轮开头推出去，那比丢了更糟（用户会看到上一轮的话冒出来）。
+       */
+      pendingUserItems = /* @__PURE__ */ new Map();
+      /** 单会话暂存上限。正常只会有 1 条（一次提交一条）；给到 4 是为了并发提交时不至于丢。 */
+      static PENDING_USER_ITEM_MAX = 4;
+      bufferUserItem(chatSessionId, item) {
+        const list2 = this.pendingUserItems.get(chatSessionId) ?? [];
+        list2.push(item);
+        while (list2.length > _LiveChatRegistry.PENDING_USER_ITEM_MAX) list2.shift();
+        this.pendingUserItems.set(chatSessionId, list2);
+      }
+      /** `start` 之后立刻调：把暂存的 user item 补发出去。发不出去就丢掉，不再往下一轮带。 */
+      flushPendingUserItems(chatSessionId) {
+        const list2 = this.pendingUserItems.get(chatSessionId);
+        if (!list2?.length) return;
+        this.pendingUserItems.delete(chatSessionId);
+        for (const item of list2) this.publishUserItem(chatSessionId, item);
+      }
       publishUserItem(chatSessionId, item) {
         const turn = this.turns.get(chatSessionId);
-        if (!turn) return false;
+        if (!turn) {
+          this.bufferUserItem(chatSessionId, item);
+          return false;
+        }
         const payload = { role: "user", text: item.text };
         if (item.clientSubmitId) payload.clientSubmitId = item.clientSubmitId;
         if (item.attachments?.length) payload.attachments = item.attachments;
@@ -160442,6 +160526,7 @@ var init_live_chat = __esm({
         if (!turn || turn.status !== "running") {
           return say({ accepted: false, reason: "no-live-turn" }, { turnStatus: turn?.status ?? "<no-turn>" });
         }
+        if (turn.recovering) return say({ accepted: false, reason: "recovering" }, { recovering: true });
         const fn = turn.handle.appendInput;
         if (typeof fn !== "function") return say({ accepted: false, reason: "unsupported" });
         const pendingItemId = !opts?.system && opts?.clientMessageKey ? `oasis-user:${opts.clientMessageKey}` : void 0;
@@ -160587,6 +160672,40 @@ var init_live_chat = __esm({
   }
 });
 
+// ../server/src/chat-turn-wait.ts
+function waitForChatTurn(res, liveChat, sessionId, startKeepalive, ready = false) {
+  res.writeHead(200, {
+    "content-type": "application/x-oasis-live-v3+ndjson; charset=utf-8",
+    "cache-control": "no-cache, no-transform",
+    "x-accel-buffering": "no",
+    "access-control-expose-headers": "X-Chat-Session-Watch, X-Chat-Waiting, X-Can-Append",
+    "x-chat-session-watch": "1",
+    "x-chat-waiting": "1",
+    "x-can-append": "0"
+  });
+  res.flushHeaders();
+  const stopKeepalive = startKeepalive(res);
+  let detach = () => {
+  };
+  const cleanup = () => {
+    stopKeepalive();
+    detach();
+  };
+  res.once("close", cleanup);
+  const wake = () => {
+    cleanup();
+    if (!res.destroyed) res.end('{"type":"turn_available"}\n');
+  };
+  if (ready) wake();
+  else detach = liveChat.onNextTurn(sessionId, wake);
+  if (res.destroyed) cleanup();
+}
+var init_chat_turn_wait = __esm({
+  "../server/src/chat-turn-wait.ts"() {
+    "use strict";
+  }
+});
+
 // ../server/src/chat-attachment-files.ts
 function safeAttachmentName(raw) {
   return (raw || "attachment").replace(/[^\w.\-]+/g, "_").replace(/^\.+/, "").slice(0, 80) || "attachment";
@@ -160683,7 +160802,7 @@ async function appendNowThroughQueue(chatSessionId, text5, deps, clientKey, atta
     ...displayText !== merged ? { displayText } : {},
     ...attachmentRefs.length ? { attachments: attachmentRefs } : {}
   });
-  const DEFINITELY_NOT_DELIVERED = /* @__PURE__ */ new Set(["unsupported", "no-live-turn", "session-closing", "turn-finished"]);
+  const DEFINITELY_NOT_DELIVERED = /* @__PURE__ */ new Set(["unsupported", "no-live-turn", "session-closing", "turn-finished", "recovering"]);
   const nextState = res.accepted ? "delivered" : DEFINITELY_NOT_DELIVERED.has(res.reason ?? "") ? "queued" : "unconfirmed";
   await deps.store.markPendingMessages?.(chatSessionId, ids2, nextState, res.reason).catch(() => void 0);
   return { ...res, queued: true, delivered: merged, batch, ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {} };
@@ -160784,13 +160903,24 @@ var init_closure_report = __esm({
 });
 
 // ../server/src/governance/workorder-drafts.ts
-var import_node_fs5, DRAFT_EDIT_LOCK_TTL_MS, WorkorderDraftStore, ident, seqNoOf, PostgresWorkorderDraftStore;
+var import_node_fs5, DRAFT_EDIT_LOCK_TTL_MS, WorkorderDraftTagMismatchError, WorkorderDraftStore, ident, seqNoOf, PostgresWorkorderDraftStore;
 var init_workorder_drafts = __esm({
   "../server/src/governance/workorder-drafts.ts"() {
     "use strict";
     import_node_fs5 = __toESM(require("node:fs"), 1);
     init_closure_report();
     DRAFT_EDIT_LOCK_TTL_MS = 12e4;
+    WorkorderDraftTagMismatchError = class extends Error {
+      constructor(draftId, expectedWorkspace, actualWorkspace) {
+        super(
+          actualWorkspace === void 0 ? `\u5EFA\u5355\u8349\u6848 ${draftId} \u4E0D\u5728\u672C store\uFF08\u5F88\u53EF\u80FD\u5EFA\u5728\u53E6\u4E00\u4E2A schema \u7684\u5E93\u91CC\uFF09\u2014\u2014\u62D2\u7EDD\u6253\u6807` : `\u5EFA\u5355\u8349\u6848 ${draftId} \u7684 workspace \u662F ${actualWorkspace}\uFF0C\u4E0E\u672C\u6B21\u5EFA\u5355\u7684 ${String(expectedWorkspace)} \u4E0D\u7B26\u2014\u2014\u62D2\u7EDD\u6253\u6807\uFF08\u8DE8\u5E93\u649E\u53F7\u4F1A\u6539\u7ED1\u522B\u4EBA\u7684\u8349\u6848\uFF09`
+        );
+        this.draftId = draftId;
+        this.expectedWorkspace = expectedWorkspace;
+        this.actualWorkspace = actualWorkspace;
+        this.name = "WorkorderDraftTagMismatchError";
+      }
+    };
     WorkorderDraftStore = class {
       constructor(file) {
         this.file = file;
@@ -160894,14 +161024,28 @@ var init_workorder_drafts = __esm({
       }
       /** 给草案打上 chat 会话标（建单经 chat 路时，/api/cmd 拿到 X-Chat-Session-Id 后调）。
        *  同时（若拿得到）盖上产出它的那一轮 runId，供 friday 重进对话页把该版草案归位到那条助手消息。
-       *  sourceRunId 一旦盖上不再改（同一版草案就属于那一轮）。 */
-      async tagSession(draftId, chatSessionId, sourceRunId) {
+       *  sourceRunId 一旦盖上不再改（同一版草案就属于那一轮）。
+       *
+       *  **`expectedWorkspace` 是防跨库改绑的那道闸（2026-09-10 线上事故）**：草案 id 形如
+       *  `wodraft:<n>`，而**每个 schema 各有一台发号器**（共享库一台、每家公司各一台，见
+       *  `PostgresWorkorderDraftStore.open` 建的 `workorder_draft_seq`）。于是「共享库的 70 号」和
+       *  「didi 库的 70 号」是两份毫不相干的草案。一旦建草案与打标落在**不同的 store**上
+       *  （公司上下文解析不出来 → 建落共享库；打标按公司解析 → 打进公司库），这里就会拿着同一个
+       *  号在另一个库里翻出**别人的草案**，把它的 chatSessionId / sourceRunId 覆盖成本次会话——
+       *  别人的建单卡就这样出现在你的对话里，而原归属被覆盖后再也找不回来。
+       *
+       *  所以调用方**必须**把「我刚建的那张单的 workspace」一起传进来：对不上就抛，绝不写。
+       *  查不到 id 同理——旧实现在这里是 `if (d) {}` 的静默 no-op，那正是这次事故连一行日志都没留下的原因。
+       *  抛出的是 {@link WorkorderDraftTagMismatchError}，调用方该**记账后继续**（草案本身已经建好，
+       *  不该因为打标失败把整个建单回执变成失败），见 `/api/cmd` 与 playbooks 两处调用点。 */
+      async tagSession(draftId, chatSessionId, sourceRunId, expectedWorkspace) {
         const d = this.drafts.get(draftId);
-        if (d) {
-          d.chatSessionId = chatSessionId;
-          if (sourceRunId && !d.sourceRunId) d.sourceRunId = sourceRunId;
-          await this.persist({ kind: "upsert", draft: d });
+        if (!d || expectedWorkspace !== void 0 && d.workspace !== expectedWorkspace) {
+          throw new WorkorderDraftTagMismatchError(draftId, expectedWorkspace, d?.workspace);
         }
+        d.chatSessionId = chatSessionId;
+        if (sourceRunId && !d.sourceRunId) d.sourceRunId = sourceRunId;
+        await this.persist({ kind: "upsert", draft: d });
       }
       /** 草案被就地编辑后（editDraftPlan 改了 plan.ops）调用：bump `at` 让 friday 重载据此察觉，
        *  并**落盘**——否则编辑过的草案在 apply 前进程重启就丢改动（草案落盘的初衷正是扛重启）。 */
@@ -161694,9 +161838,14 @@ var init_assistants = __esm({
         await this.opts.actors.disableActor(agentId, by).catch(() => {
         });
       }
+      /** 本服务的公司 scope；未启用公司维度（单租户装配/单测）时 undefined = 不过滤，行为不变。 */
+      scope() {
+        const companyId = this.opts.companyId();
+        return companyId ? { companyId } : void 0;
+      }
       /* ---------- runtime 挑选（ADR §3.3.a）：负载均衡 + 幂等 tie-break ---------- */
       async pickAssistantRuntime() {
-        const runtimes = (await this.opts.listRuntimes()).filter((r) => r.status === "online");
+        const runtimes = (await this.opts.listRuntimes(void 0, this.scope())).filter((r) => r.status === "online");
         if (runtimes.length === 0) return null;
         let defaultKind = DEFAULT_ASSISTANT_RUNTIME_KIND;
         for (const r of runtimes) {
@@ -161723,7 +161872,7 @@ var init_assistants = __esm({
         if (!actor.roles.includes("assistant")) return false;
         const binding = await this.opts.registry.getBinding(agentId);
         if (!binding || binding.status !== "active") return false;
-        const runtime = (await this.opts.listRuntimes(binding.nodeId)).find((r) => r.kind === binding.runtimeKind);
+        const runtime = (await this.opts.listRuntimes(binding.nodeId, this.scope())).find((r) => r.kind === binding.runtimeKind);
         if (!runtime || runtime.status !== "online") return false;
         return true;
       }
@@ -163729,7 +163878,8 @@ async function linkChatAttachmentsToWorkOrder(input) {
       ...candidate.contentType ?? meta?.contentType ? { contentType: candidate.contentType ?? meta?.contentType } : {},
       sourceSessionId: input.chatSessionId,
       sourceMessageId: candidate.messageId,
-      linkedAt: input.linkedAt
+      linkedAt: input.linkedAt,
+      ...input.uploadedBy ? { uploadedBy: input.uploadedBy } : {}
     };
     try {
       await input.artifacts.addWorkOrderFile(file);
@@ -186756,12 +186906,13 @@ var init_governance_service = __esm({
         const binding = await this.options.projects.getWorkspaceBinding(ctx.organizationId, workorderId);
         if (!binding) {
           if (claimedProjectId) throw new KnowledgeGovernanceError(409, "KNOWLEDGE_PROJECT_BINDING_MISSING", "\u5DE5\u5355\u6CA1\u6709\u53EF\u4FE1\u9879\u76EE\u7ED1\u5B9A");
+          await this.requireOrganizationActor(ctx);
           return void 0;
         }
         if (claimedProjectId && binding.projectId !== claimedProjectId) {
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_PROJECT_MISMATCH", "\u8BF7\u6C42\u9879\u76EE\u4E0E\u5DE5\u5355\u7ED1\u5B9A\u4E0D\u4E00\u81F4");
         }
-        if (this.options.projects.isEphemeralProject(ctx.organizationId, binding.projectId)) {
+        if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, binding.projectId)) {
           await this.requireOrganizationActor(ctx);
           return void 0;
         }
@@ -186969,8 +187120,8 @@ var init_governance_service = __esm({
         const projectId2 = input.scopeType === "project" ? input.scopeId : void 0;
         if (input.scopeType === "project") {
           if (!projectId2) throw new KnowledgeGovernanceError(400, "KNOWLEDGE_PROJECT_REQUIRED", "\u9879\u76EE Space \u5FC5\u987B\u6307\u5B9A\u9879\u76EE");
-          if (this.options.projects.isEphemeralProject(ctx.organizationId, projectId2)) {
-            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u4E34\u65F6\u9879\u76EE\u4E0D\u521B\u5EFA\u77E5\u8BC6 Space");
+          if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2)) {
+            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u8BE5\u9879\u76EE\u4E0D\u652F\u6301\u72EC\u7ACB\u77E5\u8BC6 Space");
           }
           await this.authorizeProjectResource(ctx, projectId2, "configure");
         } else if (input.scopeId) {
@@ -187096,7 +187247,7 @@ var init_governance_service = __esm({
       async reconfigureKnowledgeTree(ctx, store, organizationSpace, connection, _config) {
         const projectEntries = [];
         for (const project of await this.options.projects.listProjects(ctx.organizationId)) {
-          if (this.options.projects.isEphemeralProject(ctx.organizationId, project.id)) continue;
+          if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, project.id)) continue;
           const projectSpace = (await store.list(this.projectScope(ctx, project.id), "space")).filter((space) => space.status !== "archived").sort((left, right) => right.updatedAt.localeCompare(left.updatedAt))[0];
           if (projectSpace) projectEntries.push({ project, space: projectSpace });
         }
@@ -187315,8 +187466,8 @@ var init_governance_service = __esm({
       async resolveRunTarget(ctx, projectId2) {
         await this.requireOrganizationActor(ctx);
         if (projectId2) {
-          if (this.options.projects.isEphemeralProject(ctx.organizationId, projectId2)) {
-            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u4E34\u65F6\u9879\u76EE\u6CA1\u6709\u72EC\u7ACB\u9879\u76EE\u77E5\u8BC6\u5E93\uFF0C\u8BF7\u9009\u62E9\u7EC4\u7EC7\u77E5\u8BC6\u5E93");
+          if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2)) {
+            throw new KnowledgeGovernanceError(409, "KNOWLEDGE_EPHEMERAL_PROJECT", "\u8BE5\u9879\u76EE\u6CA1\u6709\u72EC\u7ACB\u9879\u76EE\u77E5\u8BC6\u5E93\uFF0C\u8BF7\u9009\u62E9\u7EC4\u7EC7\u77E5\u8BC6\u5E93");
           }
           await this.authorizeProjectResource(ctx, projectId2, "publish");
         }
@@ -187532,7 +187683,7 @@ var init_governance_service = __esm({
         if (actor.kind !== "system") await this.requireOrganizationAdmin(ctx);
         const project = await this.options.projects.getProject(ctx.organizationId, projectId2);
         if (!project) throw new KnowledgeGovernanceError(404, "KNOWLEDGE_PROJECT_NOT_FOUND", "\u9879\u76EE\u4E0D\u5B58\u5728");
-        if (this.options.projects.isEphemeralProject(ctx.organizationId, projectId2)) return null;
+        if (this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2)) return null;
         const store = await this.options.storeFor(ctx.organizationId);
         const scope = this.projectScope(ctx, projectId2);
         const existingSpaces = await store.list(scope, "space");
@@ -190232,7 +190383,7 @@ var init_governance_service = __esm({
         if (event.claimedProjectId !== trusted.projectId) {
           throw new KnowledgeGovernanceError(409, "KNOWLEDGE_PROJECT_MISMATCH", "\u8BF7\u6C42\u9879\u76EE\u4E0E\u53EF\u4FE1\u6765\u6E90\u5F52\u5C5E\u4E0D\u4E00\u81F4");
         }
-        const targetProjectId = trusted.projectId && !this.options.projects.isEphemeralProject(ctx.organizationId, trusted.projectId) ? trusted.projectId : void 0;
+        const targetProjectId = trusted.projectId && !this.options.projects.isProjectScopeUnsupported(ctx.organizationId, trusted.projectId) ? trusted.projectId : void 0;
         const discoveryActor = await this.requireActiveActor(ctx.actorId, ctx.organizationId);
         if (discoveryActor.kind !== "system") await this.requireOrganizationActor(ctx);
         if (targetProjectId) {
@@ -190498,7 +190649,7 @@ var init_governance_service = __esm({
             runs.push(...await this.enqueueDiscoveryEvent(ctx, event, runtime ?? void 0));
           } catch (error2) {
             const store = await this.options.storeFor(ctx.organizationId);
-            const taskProjectId = projectId2 && !this.options.projects.isEphemeralProject(ctx.organizationId, projectId2) ? projectId2 : void 0;
+            const taskProjectId = projectId2 && !this.options.projects.isProjectScopeUnsupported(ctx.organizationId, projectId2) ? projectId2 : void 0;
             const scope = this.scopeFor(ctx, taskProjectId);
             const task = this.governanceTask(ctx, "discovery_failed", event.sourceType, `${event.sourceId}:${event.sourceVersionId}`, {
               eventType: event.eventType,
@@ -196615,6 +196766,7 @@ var init_continue_outcome = __esm({
     "use strict";
     REASON_TEXT = {
       "no-live-turn": "\u4E13\u5BB6\u6B64\u523B\u6CA1\u6709\u6B63\u5728\u8DD1\u7684\u90A3\u4E00\u8F6E\uFF08\u591A\u534A\u662F\u521A\u6536\u5C3E\u3001\u4E0B\u4E00\u8F6E\u8FD8\u6CA1\u8D77\u6765\uFF09",
+      recovering: "\u670D\u52A1\u521A\u91CD\u542F\uFF0C\u4E13\u5BB6\u90A3\u4E00\u8F6E\u8FD8\u5728\u6062\u590D\u4E2D\uFF08\u8282\u70B9\u91CD\u8FDE\u540E\u5C31\u80FD\u63D2\uFF1B\u8FD9\u53E5\u8BDD\u5DF2\u6392\u961F\uFF09",
       unsupported: "\u8FD9\u4E2A\u4E13\u5BB6\u7528\u7684\u6A21\u578B\u4E0D\u652F\u6301\u4E2D\u9014\u63D2\u8BDD\uFF08\u8981\u7B49\u5B83\u8FD9\u4E00\u8F6E\u8DD1\u5B8C\uFF09",
       "session-closing": "\u4E13\u5BB6\u90A3\u4E00\u8F6E\u6B63\u5728\u6536\u5C3E\uFF0C\u8FD9\u53E5\u8BDD\u6765\u665A\u4E86\u4E00\u6B65",
       "turn-finished": "\u6295\u9012\u8FC7\u7A0B\u4E2D\u4E13\u5BB6\u90A3\u4E00\u8F6E\u5DF2\u7ECF\u6536\u5C3E\u4E86",
@@ -198699,9 +198851,13 @@ async function mintInstallationToken(args, deps = {}) {
   const token = typeof body2["token"] === "string" ? body2["token"] : "";
   if (!token) throw new Error("github app: token missing in response");
   const parsed = typeof body2["expires_at"] === "string" ? Date.parse(body2["expires_at"]) : NaN;
+  const rawPerms = body2["permissions"];
+  const permissions = {};
+  for (const [k2, v2] of Object.entries(rawPerms ?? {})) if (typeof v2 === "string") permissions[k2] = v2;
   return {
     token,
-    expiresAtMs: Number.isFinite(parsed) ? parsed : nowMs + 60 * 60 * 1e3
+    expiresAtMs: Number.isFinite(parsed) ? parsed : nowMs + 60 * 60 * 1e3,
+    permissions
   };
 }
 async function listAppInstallations(args, deps = {}) {
@@ -198725,7 +198881,10 @@ async function listAppInstallations(args, deps = {}) {
     const id = item["id"] === void 0 ? "" : String(item["id"]);
     if (!id) return [];
     const account = item["account"];
-    return [{ installationId: id, account: String(account?.["login"] ?? "") }];
+    const rawPerms = item["permissions"];
+    const permissions = {};
+    for (const [k2, v2] of Object.entries(rawPerms ?? {})) if (typeof v2 === "string") permissions[k2] = v2;
+    return [{ installationId: id, account: String(account?.["login"] ?? ""), permissions }];
   });
 }
 async function fetchAppSelfMetadata(args, deps = {}) {
@@ -202522,20 +202681,6 @@ async function runCommand(kernel, blobs, oplog, engineStore, actor, command, arg
         const project = await ctx.projectState.getProject(projectId2);
         if (!project) throw new Error(`project not found: ${projectId2}`);
         await bindingState.upsertWorkspaceBinding({ workOrderId: workspace, projectId: projectId2 });
-      } else if (createdViaArg === "seed" && ctx.projectState && bindingState) {
-        await ensureWorkorderProject({
-          workOrderId: workspace,
-          ...optStr(args, "title") ? { title: optStr(args, "title") } : {},
-          // ADR 0207「对话中创建则为对话人」：优先记**陪聊解析出的那个真人**
-          // （`ctx.workorderInitiator.humanActorId`，与 brief.owner 同源），
-          // 没有会话上下文时退到调用者本人——但**只在他是人时**；
-          // agent 替人跑 spawn 不该把自己写成项目创建人，那种情况落 NULL，
-          // 由读侧从工单 brief.owner 派生（service.resolveProjectCreator）。
-          ...ctx.workorderInitiator?.humanActorId ? { createdBy: ctx.workorderInitiator.humanActorId } : !isAgent(actor) ? { createdBy: actor } : {},
-          createProject: makeEnsureProjectFromStore(ctx.projectState),
-          upsertBinding: (b2) => bindingState.upsertWorkspaceBinding(b2),
-          onWarn: (m2) => console.warn(m2)
-        });
       }
       if (schemaForSeed) {
         const title = optStr(args, "title") ?? optStr(args, "description") ?? workspace;
@@ -204027,6 +204172,18 @@ async function startOasisServer(opts) {
           chatStore: store,
           chatSessionId: sessionId,
           session: bgSession,
+          liveChat,
+          liveHandle: {
+            runtimeSessionId: session.id,
+            ...session.runId ? { runId: session.runId } : {},
+            kill: () => {
+              void session.kill?.();
+            },
+            ...session.appendInput ? { appendInput: (input) => session.appendInput(input) } : {},
+            get canAppendInput() {
+              return typeof session.appendInput === "function" && session.canAppendInput !== false;
+            }
+          },
           ...itemStore ? { itemStore } : {},
           // 广播/委派回流带上 held turn id（B3）；授权卡入口在别处，那条路本轮不接账本。
           ...turnId ? { turnId } : {}
@@ -204585,7 +204742,15 @@ async function startOasisServer(opts) {
             if (body2.command === "spawn" && wodrafts) {
               const draftId = result?.data?.draftId;
               const chatSid = req.headers["x-chat-session-id"];
-              if (draftId && typeof chatSid === "string") await wodrafts.tagSession(draftId, chatSid, liveChat.runFor(chatSid));
+              if (draftId && typeof chatSid === "string") {
+                const draftWorkspace = result?.data?.workspace;
+                await wodrafts.tagSession(draftId, chatSid, liveChat.runFor(chatSid), draftWorkspace).catch((err) => {
+                  console.error(
+                    `[workorder-draft] \u8349\u6848 ${draftId}\uFF08ws=${String(draftWorkspace)}\uFF09\u672A\u80FD\u5173\u8054\u4F1A\u8BDD ${chatSid}\uFF1A`,
+                    err
+                  );
+                });
+              }
             }
             res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(result));
           } catch (err) {
@@ -204914,7 +205079,9 @@ async function startOasisServer(opts) {
                   blobMeta: blobMetaAcrossCabinets,
                   // 工单就是这一刻建出来的，所以「现在」就是任务创建时间。取一次、全部文件共用，
                   // 保证同一次建单带进来的文件在任务侧显示的是同一个时刻（排期序 28 原文口径）。
-                  linkedAt: (/* @__PURE__ */ new Date()).toISOString()
+                  linkedAt: (/* @__PURE__ */ new Date()).toISOString(),
+                  // 建单发起人就是把这些附件带进任务的人——项目页「创建人」列与预览副标据此署名。
+                  uploadedBy: actor
                 }).catch((err) => ({
                   linked: 0,
                   warnings: [`\u672A\u80FD\u628A\u672C\u6B21\u5BF9\u8BDD\u7684\u9644\u4EF6\u5E26\u5165\u4EFB\u52A1\u6587\u4EF6\uFF1A${err instanceof Error ? err.message : String(err)}`]
@@ -205592,6 +205759,13 @@ async function startOasisServer(opts) {
           };
           const wantsV3 = url.searchParams.get("protocol") === "v3";
           if (wantsV3) {
+            const watchSession = url.searchParams.get("watch") === "1";
+            const fromEpoch = url.searchParams.has("epoch") ? Number(url.searchParams.get("epoch")) : void 0;
+            const cursor = liveChat.cursorFor(sid);
+            if (watchSession && fromEpoch !== void 0 && cursor && cursor.epoch !== fromEpoch) {
+              waitForChatTurn(res, liveChat, sid, startStreamKeepalive, true);
+              return;
+            }
             const sub2 = (frame) => {
               if (res.destroyed) return;
               res.write(`${JSON.stringify(frame)}
@@ -205603,6 +205777,11 @@ async function startOasisServer(opts) {
               await reopenRecoveringTurn();
               att2 = liveChat.attachLiveV3(sid, fromSeq, sub2);
             }
+            if (watchSession && (!att2 || att2.status !== "running" && att2.replay.length === 0)) {
+              att2?.detach();
+              waitForChatTurn(res, liveChat, sid, startStreamKeepalive);
+              return;
+            }
             if (!att2) {
               res.writeHead(204).end();
               return;
@@ -205610,7 +205789,8 @@ async function startOasisServer(opts) {
             res.writeHead(200, {
               "content-type": "application/x-oasis-live-v3+ndjson; charset=utf-8",
               "transfer-encoding": "chunked",
-              "access-control-expose-headers": "X-Session-Id, X-Replay-Gap, X-Live-Epoch, X-Can-Append",
+              "access-control-expose-headers": "X-Session-Id, X-Replay-Gap, X-Live-Epoch, X-Can-Append, X-Chat-Session-Watch",
+              ...watchSession ? { "x-chat-session-watch": "1" } : {},
               "x-session-id": cs.runtimeSessionId ?? "",
               "x-live-epoch": String(att2.epoch),
               "x-can-append": liveChat.canAppend(sid) ? "1" : "0",
@@ -206062,13 +206242,16 @@ ${composed}`;
                    只推 user：assistant 的每一条本来就走 `emitV3`。 */
                 onPersisted: (info) => {
                   if (info.role !== "user") return;
+                  const rowPayload = info.payload && typeof info.payload === "object" && !Array.isArray(info.payload) ? info.payload : void 0;
+                  const rowCsid = typeof rowPayload?.["clientSubmitId"] === "string" ? rowPayload["clientSubmitId"] : void 0;
+                  const rowAttachments = Array.isArray(rowPayload?.["attachments"]) ? rowPayload["attachments"] : void 0;
                   opts.liveChat?.publishUserItem(persistTarget?.id ?? session.id, {
                     itemId: info.itemId,
                     ord: info.ord,
                     version: info.version,
                     text: info.text,
-                    ...clientSubmitId ? { clientSubmitId } : {},
-                    ...effectiveAttachments.length ? { attachments: effectiveAttachments } : {}
+                    ...rowCsid ? { clientSubmitId: rowCsid } : {},
+                    ...rowAttachments?.length ? { attachments: rowAttachments } : {}
                   });
                 },
                 sessionId: persistTarget?.id ?? session.id,
@@ -206990,19 +207173,60 @@ ${composed}`;
               return;
             }
             const meta = await fetchAppSelfMetadata({ appId, privateKeyPem });
-            const installationId = await svc.revealResolvedVariable("GITHUB_APP_INSTALLATION_ID", actorId);
-            const effective = installationId ? await fetchInstallationPermissions({ appId, privateKeyPem, installationId }) : meta.permissions;
+            const storedInstallationId = await svc.revealResolvedVariable("GITHUB_APP_INSTALLATION_ID", actorId);
+            const installs = await listAppInstallations({ appId, privateKeyPem }).catch(() => []);
+            const chosen = installs.find((i) => i.installationId === storedInstallationId) ?? (installs.length === 1 ? installs[0] : void 0);
+            const installationStale = Boolean(storedInstallationId) && installs.length > 0 && !chosen;
+            const installationId = chosen?.installationId || storedInstallationId;
+            let grantedFrom = "app";
+            let effective = meta.permissions;
+            if (installationId) {
+              const minted = await mintInstallationToken({ appId, privateKeyPem, installationId }).catch(() => null);
+              if (minted && Object.keys(minted.permissions).length > 0) {
+                effective = minted.permissions;
+                grantedFrom = "token";
+              } else if (chosen && Object.keys(chosen.permissions).length > 0) {
+                effective = chosen.permissions;
+                grantedFrom = "installation";
+              } else {
+                effective = await fetchInstallationPermissions({ appId, privateKeyPem, installationId });
+                grantedFrom = "installation";
+              }
+            }
             const missing = missingAppPermissions(effective);
+            const requestedAll = Object.entries(meta.permissions).filter(([, level]) => Boolean(level)).map(([key, level]) => ({ key, level: String(level) })).sort((a, b2) => a.key.localeCompare(b2.key));
+            const grantedKeys = new Set(
+              Object.entries(effective).filter(([, level]) => Boolean(level)).map(([k2]) => k2)
+            );
             res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
               configured: true,
               slug: meta.slug,
               ownerLogin: meta.ownerLogin,
+              /** App 申请的全集（英文原名 + 级别）。界面用它回答「我配了多少项」。 */
+              requested: requestedAll,
               /** true＝读的是这次安装真正被授予的权限；false＝只拿到 App 申请的，可能偏乐观。 */
               fromInstallation: Boolean(installationId),
-              /** App 申请了、但这次安装还没被授予——多半是权限升级还等着组织 owner 批准。 */
-              awaitingApproval: missingAppPermissions(effective).filter((m2) => meta.permissions[m2.key]).map((m2) => m2.key),
+              /** 「已授予」这一列是从哪问出来的：token（最准）/ 安装记录 / 只有 App 申请。 */
+              grantedFrom,
+              /** 读的是哪一处安装——同一个 App 装多处时，人得看得见自己批的是不是这一处。 */
+              installationAccount: chosen?.account ?? "",
+              /** 库里存的 installation 已不在这个 App 的安装列表里（卸载重装过）。 */
+              installationStale,
+              /**
+               * 这个 App 的**其它**安装及各自的权限项数。只在装了不止一处时才有内容。
+               * 它专门回答那句「我明明已经批过了」：批在哪一处，这里一眼看得见。
+               */
+              otherInstallations: installs.filter((i) => i.installationId !== installationId).map((i) => ({ account: i.account, count: Object.keys(i.permissions).length })),
               /**
-               * 这次安装**真正被授予**的全部权限，一律用 GitHub 的英文原名 + 级别
+               * App 申请了、但**这一处安装铸出来的 token 里没有**。
+               * **在全集上做差**，不再只看本仓必需的那八项（否则人另外勾的永远报不出来）。
+               *
+               * ⚠ 差集只说明「这一处安装现在给不了」，不等于「人没批」——同一个 App 装多处时
+               * 批准是逐处的（见 `otherInstallations`）。界面别把这层推断说死。
+               */
+              awaitingApproval: requestedAll.filter((r) => !grantedKeys.has(r.key)).map((r) => r.key),
+              /**
+               * agent **真正拿得到**的全部权限（优先读 token 自己的权限位），一律用 GitHub 的英文原名 + 级别
                * （2026-09-10 发起人：「所有权限都用英文原文，不区分是不是八项权限」）。
                *
                * 此前这里是 `GITHUB_APP_PERMISSION_LABELS.filter(...)` —— 那张表只有本仓必需的
@@ -207152,7 +207376,8 @@ ${composed}`;
             return;
           }
           try {
-            const appSecret = opts.actors ? await opts.actors.service.revealVariable("FEISHU_APP_SECRET", actorId) : null;
+            const startSvc = await connectorActorsService();
+            const appSecret = startSvc ? await startSvc.revealResolvedVariable("FEISHU_APP_SECRET", actorId) : null;
             if (!appSecret) throw new Error("FEISHU_APP_SECRET not found \u2014 please complete app setup first");
             const basicAuth = Buffer.from(`${appId}:${appSecret}`).toString("base64");
             const resp = await fetch("https://accounts.feishu.cn/oauth/v1/device_authorization", {
@@ -207182,7 +207407,8 @@ ${composed}`;
             return;
           }
           try {
-            const appSecret = opts.actors ? await opts.actors.service.revealVariable("FEISHU_APP_SECRET", actorId) : null;
+            const pollSvc = await connectorActorsService();
+            const appSecret = pollSvc ? await pollSvc.revealResolvedVariable("FEISHU_APP_SECRET", actorId) : null;
             if (!appSecret) throw new Error("FEISHU_APP_SECRET not found \u2014 please complete app setup first");
             const resp = await fetch("https://open.feishu.cn/open-apis/authen/v2/oauth/token", {
               method: "POST",
@@ -207208,6 +207434,7 @@ ${composed}`;
             if (svc) {
               if (actorId) {
                 await svc.putVariable({ key: "FEISHU_APP_ID", value: appId, scope: "personal", actorId, connectorId: "feishu", encrypted: true });
+                await svc.putVariable({ key: "FEISHU_APP_SECRET", value: appSecret, scope: "personal", actorId, connectorId: "feishu", encrypted: true });
               } else {
                 await svc.putVariable({ key: "FEISHU_APP_ID", value: appId, scope: "global", connectorId: "feishu", encrypted: true });
                 await svc.upsertConnector({ id: "feishu", name: "\u98DE\u4E66", mode: "oauth", status: "connected", account: appId });
@@ -207318,7 +207545,9 @@ ${composed}`;
                 const svc = await connectorActorsService();
                 if (svc) {
                   const connId = "github";
-                  await svc.upsertConnector({ id: connId, name: "GitHub", mode: "oauth", status: "connected", account: "github" });
+                  if (!actorIdParam) {
+                    await svc.upsertConnector({ id: connId, name: "GitHub", mode: "oauth", status: "connected", account: "github" });
+                  }
                   for (const [k2, v2] of [["GIT_AUTHOR_NAME", actorNameParam], ["GIT_AUTHOR_EMAIL", ""], ["GIT_COMMITTER_NAME", actorNameParam], ["GIT_COMMITTER_EMAIL", ""], ["EMAIL", ""]])
                     await svc.putVariable({ key: k2, value: v2, scope: "personal", actorId: actorIdParam, connectorId: connId, encrypted: false });
                   await svc.putVariable({ key: "GITHUB_TOKEN", value: p2.access_token, scope: "personal", actorId: actorIdParam, connectorId: connId, encrypted: true });
@@ -207453,7 +207682,6 @@ var init_server3 = __esm({
     init_src7();
     init_collect();
     init_remote_util();
-    init_ephemeral_project();
     init_timeline();
     init_node_state();
     init_src5();
@@ -207462,6 +207690,7 @@ var init_server3 = __esm({
     init_router();
     init_infra_error();
     init_live_chat();
+    init_chat_turn_wait();
     init_append_now();
     init_workorder_drafts();
     init_draft_edit();
@@ -208068,10 +208297,15 @@ var init_memory_registry_store = __esm({
         const mk = this._varKey(v2.key, v2.actorId, v2.projectId);
         const ex = this.variables.get(mk);
         const keptName = v2.name ?? ex?.name;
+        const keptCreatedBy = ex?.createdBy ?? v2.createdBy;
+        const keptCreatedAt = ex?.createdAt ?? v2.createdAt;
         this.variables.set(mk, {
           ...v2,
           ...ex?.lastUsedAt !== void 0 ? { lastUsedAt: ex.lastUsedAt } : {},
-          ...keptName ? { name: keptName } : {}
+          ...keptName ? { name: keptName } : {},
+          ...keptCreatedBy ? { createdBy: keptCreatedBy } : {},
+          ...keptCreatedAt ? { createdAt: keptCreatedAt } : {},
+          ...v2.updatedBy ? { updatedBy: v2.updatedBy } : {}
         });
       }
       async touchVariableUsage(key, actorId, projectId2, when) {
@@ -210527,6 +210761,32 @@ var init_projection = __esm({
   }
 });
 
+// ../server/src/domains/projects/uncategorized-project.ts
+function isUncategorizedProjectId(projectId2) {
+  return projectId2 === UNCATEGORIZED_PROJECT_ID;
+}
+async function bindWorkorderProject(deps) {
+  const { workOrderId, projectId: projectId2 } = deps;
+  if (!projectId2) return null;
+  try {
+    await deps.upsertBinding({ workOrderId, projectId: projectId2 });
+    return projectId2;
+  } catch (e) {
+    deps.onWarn?.(`[project] \u5DE5\u5355 ${workOrderId} \u7ED1\u5B9A\u9879\u76EE\u5931\u8D25\uFF08\u4E0D\u963B\u65AD\u5EFA\u5355\uFF09\uFF1A${String(e)}`);
+    return null;
+  }
+}
+var UNCATEGORIZED_PROJECT_ID, UNCATEGORIZED_PROJECT_NAME, UNCATEGORIZED_PROJECT_DESCRIPTION, UNCATEGORIZED_UNKNOWN_TIME;
+var init_uncategorized_project = __esm({
+  "../server/src/domains/projects/uncategorized-project.ts"() {
+    "use strict";
+    UNCATEGORIZED_PROJECT_ID = "proj:uncategorized";
+    UNCATEGORIZED_PROJECT_NAME = "\u65E0\u5206\u7C7B\u9879\u76EE";
+    UNCATEGORIZED_PROJECT_DESCRIPTION = "\u6240\u6709\u672A\u9009\u62E9\u9879\u76EE\u7684\u5BF9\u8BDD\u76F8\u5173\u6587\u4EF6\u548C\u4EFB\u52A1\u81EA\u52A8\u5E76\u5165\u8FD9\u91CC\uFF0C\u7EC4\u7EC7\u5185\u6240\u6709\u4EBA\u53EF\u89C1\u3002";
+    UNCATEGORIZED_UNKNOWN_TIME = "1970-01-01T00:00:00.000Z";
+  }
+});
+
 // ../server/src/domains/projects/service.ts
 function sanitizeCreatorActorId(raw) {
   const id = raw?.trim();
@@ -210562,8 +210822,14 @@ function foldSingleNodeTasks(items) {
     paths.add(item.path);
     nodeFoldersByTask.set(item.taskId, paths);
   }
+  const tasksWithRootFiles = /* @__PURE__ */ new Set();
+  for (const item of items) {
+    if (item.kind === "file" && item.taskId && item.path?.startsWith(`wo:${item.taskId}/file:`)) {
+      tasksWithRootFiles.add(item.taskId);
+    }
+  }
   const folded = new Set(
-    [...nodeFoldersByTask].filter(([, paths]) => paths.size === 1).map(([taskId]) => taskId)
+    [...nodeFoldersByTask].filter(([taskId, paths]) => paths.size === 1 && !tasksWithRootFiles.has(taskId)).map(([taskId]) => taskId)
   );
   if (folded.size === 0) return folded;
   for (const item of items) {
@@ -210799,7 +211065,7 @@ var init_service4 = __esm({
     init_src();
     init_src5();
     init_projection();
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_workorders();
     init_node_state();
     DEFAULT_AGENT_ACTOR = "actor:agent:system";
@@ -210935,6 +211201,9 @@ var init_service4 = __esm({
       async listWorkspaceBindings() {
         return [...this.workspaceBindings.values()].map((binding) => ({ ...binding }));
       }
+      async deleteWorkspaceBinding(workOrderId) {
+        this.workspaceBindings.delete(workOrderId);
+      }
       async setWorkspaceDispatchHold(workOrderId, held) {
         if (held) this.dispatchHeld.add(workOrderId);
         else this.dispatchHeld.delete(workOrderId);
@@ -211061,15 +211330,8 @@ var init_service4 = __esm({
         return { project, artifacts, files };
       }
       async collectProjectFiles(projectId2) {
-        if (!isUncategorizedProjectId(projectId2)) return this.projects.listProjectFiles(projectId2);
-        const stored = await this.projects.listProjects();
-        const ephemeralIds = stored.filter((p2) => isEphemeralProject(p2.id)).map((p2) => p2.id);
-        const out = [];
-        for (const id of ephemeralIds) {
-          const files = await this.projects.listProjectFiles(id);
-          out.push(...files.map((f2) => ({ ...f2, projectId: UNCATEGORIZED_PROJECT_ID })));
-        }
-        return out.sort((a, b2) => b2.uploadedAt.localeCompare(a.uploadedAt));
+        if (isUncategorizedProjectId(projectId2)) return [];
+        return this.projects.listProjectFiles(projectId2);
       }
       /**
        * B2 投影同步：写命令落 oplog 后，从 oplog 重放重建 `this.artifacts` 文档层投影。
@@ -211126,23 +211388,18 @@ var init_service4 = __esm({
         return project ? this.withProjectDerivedState(project) : null;
       }
       /**
-       * 「无分类项目」虚拟卡：把所有 `proj_tmp_*` 一族的**读侧聚合**成一张固定项目，供列表/详情/关联任务/相关文件消费。
+       * 「无分类项目」虚拟卡：把所有**没有项目绑定**的工单聚合成一张固定项目，供列表/详情/关联任务/相关文件消费。
        * 存储里没有真行——这就是本卡与真项目最大的区别：
        *   - 写侧（成员、内容位置、上传文件）一律拒收（写到真项目 or 走真工单流程）；
-       *   - 派生态（artifactSummary / workOrderCount）跨所有 ephemeral 项目算并集；
+       *   - 派生态（artifactSummary / workOrderCount）按「无绑定工单」算并集；
        *   - 帧上的「项目负责人：系统」由前端自选文案渲染，本层只给一个稳定的空 members 名单。
+       *
+       * ⚠ `workOrderCount` **走 listProjectWorkorders 同一条路**，不另写一份 bindings 过滤——
+       * 两处各算各的正是「卡片计数与点进去的列表条数对不上」那类缺陷的来路。
        */
       async buildUncategorizedProject() {
-        const stored = await this.projects.listProjects();
-        const ephemeralIds = new Set(
-          stored.filter((project) => isEphemeralProject(project.id)).map((project) => project.id)
-        );
-        const bindings = await this.artifacts.listWorkspaceBindings();
-        const workOrderCount = bindings.filter((b2) => ephemeralIds.has(b2.projectId)).length;
-        const artifactList = await this.aggregateUncategorizedArtifacts(ephemeralIds, bindings);
-        const ephemeralProjects = stored.filter((project) => ephemeralIds.has(project.id));
-        const createdAts = ephemeralProjects.map((p2) => p2.createdAt).sort();
-        const updatedAts = ephemeralProjects.map((p2) => p2.updatedAt).sort();
+        const workorders = await this.listProjectWorkorders(UNCATEGORIZED_PROJECT_ID);
+        const artifactList = await this.aggregateUncategorizedArtifacts();
         return {
           id: UNCATEGORIZED_PROJECT_ID,
           name: UNCATEGORIZED_PROJECT_NAME,
@@ -211150,46 +211407,33 @@ var init_service4 = __esm({
           memberCount: 0,
           members: [],
           artifactSummary: artifactList.summary,
-          workOrderCount,
+          workOrderCount: workorders.length,
           // ADR 0205：本卡的「项目负责人：系统」是**前端按帧自选的文案**，后端不出 `"system"` 哨兵——
           // 出 null 保持「取不到就 null」的域内红线，也不把一个不存在的 actor id 塞进契约。
           createdBy: null,
-          createdAt: createdAts[0] ?? UNCATEGORIZED_UNKNOWN_TIME,
-          updatedAt: updatedAts[updatedAts.length - 1] ?? UNCATEGORIZED_UNKNOWN_TIME
+          createdAt: UNCATEGORIZED_UNKNOWN_TIME,
+          updatedAt: UNCATEGORIZED_UNKNOWN_TIME
         };
       }
-      async aggregateUncategorizedArtifacts(ephemeralIds, bindings) {
-        const _bindings = bindings ?? await this.artifacts.listWorkspaceBindings();
-        const artifacts = [];
-        for (const projectId2 of ephemeralIds) {
-          const list2 = await this.listAllProjectArtifacts(projectId2);
-          artifacts.push(...list2.map((a) => ({ ...a, projectId: UNCATEGORIZED_PROJECT_ID })));
-        }
+      async aggregateUncategorizedArtifacts() {
+        const artifacts = await this.listAllProjectArtifacts(UNCATEGORIZED_PROJECT_ID);
         artifacts.sort((a, b2) => b2.updatedAt.localeCompare(a.updatedAt));
         return { artifacts, summary: summarizeArtifacts(artifacts) };
       }
       /**
        * 项目列表（带派生态）。
        *
-       * ★ `includeEphemeral` 必须在**算派生态之前**生效，不能让调用方拿到全量再自己 filter。
-       *   `withProjectDerivedState` 每算一个项目就要跑一遍 `buildWorkorderSummaries`（全量工单）+
-       *   遍历模型里全部 artifact——成本是 O(项目数 × 全模型)，而且是同步的。实测 dev：294 个项目里
-       *   272 个是 `proj_tmp_*` 临时项目（工单没指定项目时的兜底归属，一单一个），列表只返回剩下的 22 个，
-       *   **93% 的计算算完就扔**。代价不是"多花点 CPU"：这段同步活会把单线程的事件循环整块堵住 3~11 秒，
-       *   期间别的请求从 pg 连接池取连接排不上号、撞 `connectionTimeoutMillis`(5s)，
-       *   前端看到的是「项目列表加载失败：timeout exceeded when trying to connect」——像数据库挂了，
-       *   其实是被自己堵死的（实测并发时 /api/automations 从 0.24s 被拖到 7.1s，自动化页面因此空白）。
-       *
-       * 只对**真要返回的那些**算派生态。默认口径与路由一致（不含临时项目），排查用 `includeEphemeral`。
+       * 库里的每一行都是**人建的真项目**，全部返回——临时项目（`proj_tmp_*`）退役后，这里不再有
+       * "算完就扔"的过滤：旧版 dev 环境 294 个项目里 272 个是一单一个的临时项目，
+       * `withProjectDerivedState` 对它们逐个跑 `buildWorkorderSummaries`（全量工单）+ 遍历全部 artifact，
+       * 93% 的计算白算，还把单线程事件循环整块堵住 3~11 秒（并发时 /api/automations 从 0.24s 被拖到 7.1s，
+       * 前端看到的是「项目列表加载失败：timeout」——像数据库挂了，其实是被自己堵死的）。
        */
       async listProjects(opts) {
         const stored = await this.projects.listProjects();
-        const wanted = opts?.includeEphemeral === true ? stored : stored.filter((project) => !isEphemeralProject(project.id));
         const creatorCache = /* @__PURE__ */ new Map();
-        const derived = await Promise.all(wanted.map((project) => this.withProjectDerivedState(project, creatorCache)));
+        const derived = await Promise.all(stored.map((project) => this.withProjectDerivedState(project, creatorCache)));
         if (opts?.includeUncategorized === false) return derived;
-        const wantUncategorized = opts?.includeUncategorized ?? !(opts?.includeEphemeral === true);
-        if (!wantUncategorized) return derived;
         const virtual = await this.buildUncategorizedProject();
         return [virtual, ...derived];
       }
@@ -211268,10 +211512,10 @@ var init_service4 = __esm({
        * 项目创建人（ADR 0205）——**读时解析**，三条来路按优先级：
        *
        *  1. 库里落了 `created_by` → 按它解析 name/avatar；
-       *  2. 没落且是**临时项目**（`proj_tmp_*`）→ 从它绑定的那张工单的 `brief.owner`（决策 0026 的
-       *     「发起人真人」）派生。这是老数据免回填的口径：派生每次都新鲜，回填反而会造出
-       *     「工单发起人换过、项目创建人却挂着旧值」的伪相；
-       *  3. 都取不到 → `null`（老的手建项目），前端诚实显示「—」。
+       *  2. 没落 → `null`（老的手建项目），前端诚实显示「—」。
+       *
+       * 旧版还有一档「临时项目从它绑定的那张工单 `brief.owner` 派生」——临时项目退役后没有这一档了
+       * （见 uncategorized-project.ts 文件头）。
        *
        * **绝不拿别的字段顶替**（`members[0]`、项目名、updatedAt 都不行）——未指定成员时全组织都是成员，
        * 按 actorId 排序等于随机点一个 agent 当负责人。这是本域红线，见 resolveActorName 的注释。
@@ -211279,9 +211523,7 @@ var init_service4 = __esm({
       async resolveProjectCreator(project, workorders, cache) {
         const stored = project.createdBy?.id;
         if (stored) return this.resolveActorRef(stored, cache);
-        if (!isEphemeralProject(project.id)) return null;
-        const ownerId = workorders.map((wo) => wo.owner?.id).find((id) => typeof id === "string" && id.startsWith("actor:"));
-        return ownerId ? this.resolveActorRef(ownerId, cache) : null;
+        return null;
       }
       /**
        * actorId → {@link ProjectActorRef}：`kind` 按 id 前缀派生，`name` / `avatar` 走本公司名册现取。
@@ -211344,7 +211586,8 @@ var init_service4 = __esm({
        */
       async reassignWorkorder(workOrderId, projectId2) {
         if (isUncategorizedProjectId(projectId2)) {
-          return this.unlinkWorkorder(workOrderId);
+          await this.unlinkWorkorder(workOrderId);
+          return { workOrderId, projectId: null };
         }
         const project = await this.projects.getProject(projectId2);
         if (!project) throw new Error(`project not found: ${projectId2}`);
@@ -211353,77 +211596,46 @@ var init_service4 = __esm({
         return binding;
       }
       /**
-       * 「取消任务关联」——把工单从当前项目解绑，回落到它专属的临时项目（proj_tmp_<slug>）。
+       * 「取消任务关联」——**删掉工单的项目绑定行**，工单从此没有项目（读侧落进「无分类项目」桶）。
        *
-       * **不是真正解绑成 null**：契约里 `Workspace.projectId` 是必填（见 ephemeral-project.ts 的历史事故链），
-       * 无绑定态会让下游 provision / 自动收集 / propose 走向连环破坏。回落到临时项目 =「在读侧进入
-       * 无分类桶」+「写侧仍保持"每工单必属项目"的合法态」。
+       * 2026-09-10 之前这里是"回落到工单专属的临时项目 `proj_tmp_<slug>`"，理由是「契约里每个工单
+       * 都该属于某项目」。那套兜底已退役（见 uncategorized-project.ts 文件头）：兜底容器让每张未挂靠
+       * 工单变成一个只有它自己的假项目，代码仓/项目变量/记忆作用域全挂在一次性 id 上。
        *
-       * 幂等：目标已是自己的 ephemeral 项目 → 直接返回既有绑定，不重复 upsert；ephemeral 项目本身
-       * 不需要预先存在（`ensureWorkorderProject` 后台建，也可能是本工单第一次被"解绑"——按需建）。
+       * 幂等：没有绑定行时静默返回（store 的 delete 本身幂等）。
        */
       async unlinkWorkorder(workOrderId) {
         if (!workOrderId.trim()) throw new Error("work_order_id is required");
-        const ephemeralId = ephemeralProjectIdFor(workOrderId);
-        const existing = await this.artifacts.getWorkspaceBinding(workOrderId);
-        if (!await this.projects.getProject(ephemeralId)) {
-          const now = (/* @__PURE__ */ new Date()).toISOString();
-          await this.projects.upsertProject({
-            id: ephemeralId,
-            name: `\u4E34\u65F6\u9879\u76EE \xB7 ${workOrderId}`,
-            description: `\u5DE5\u5355 ${workOrderId} \u4ECE\u5176\u5B83\u9879\u76EE\u53D6\u6D88\u5173\u8054\u540E\u843D\u56DE\u7684\u4E34\u65F6\u9879\u76EE\u3002\u53EF\u7528 PATCH /api/work-orders/${workOrderId}/project \u6539\u6302\u5230\u6B63\u5F0F\u9879\u76EE\u3002`,
-            createdAt: now,
-            updatedAt: now
-          });
-        }
-        if (existing?.projectId === ephemeralId) return existing;
-        const binding = { workOrderId, projectId: ephemeralId };
-        await this.artifacts.upsertWorkspaceBinding(binding);
-        return binding;
+        await this.artifacts.deleteWorkspaceBinding(workOrderId);
       }
       /**
        * 删除项目（帧 `444:1792` 三点菜单第二项，口径由发起人 2026-09-09 拍板）。
        *
        * **只删项目这个壳**——项目主记录 + 成员名单 + 上传文件记录 + 内容位置。任务和会话一条都不删：
        *
-       * 1. 绑到本项目的工单**不管在跑还是没在跑**，一律 `unlinkWorkorder` 回落到自己的
-       *    `proj_tmp_<slug>`，也就是读侧的「无分类项目」。发起人明确不要「有任务在跑就不让删」
-       *    这道闸，所以这里没有任何在跑判断。
-       * 2. 搬工单的同时**把本项目的 git 类内容位置复制一份到每个工单的临时项目上**。
-       *    这条不是可选的：`git/resolve.ts` 的 `resolveCodeRepo` 是**派发时**沿
-       *    `binding → project → listContentLocations` 实时解的，不带过去的话，正在跑的任务
-       *    下一个节点就取不到代码仓——正是 `ephemeral-project.ts` 顶部那条五环事故链。
+       * 1. 绑到本项目的工单**不管在跑还是没在跑**，一律 `unlinkWorkorder` 删掉绑定行 → 落进读侧的
+       *    「无分类项目」。发起人明确不要「有任务在跑就不让删」这道闸，所以这里没有任何在跑判断。
+       * 2. **代码仓不跟着搬**（发起人 2026-09-10 裁定）。`git/resolve.ts` 的 `resolveCodeRepo` 是
+       *    派发时沿 `绑定 → 项目 → 内容位置` 实时解的，所以删完项目，这些任务下一个节点就取不到代码仓——
+       *    这是**期望行为**：由执行中的数字员工发现并引导人给任务指定新项目，而不是由系统兜一个假容器
+       *    （旧版把 git 位置逐单复制到 `proj_tmp_*` 上，正是那套已退役的兜底）。
        * 3. 会话的 `project_id` 置空、项目作用域的变量/密钥清理，走 {@link OnProjectDeleted} 钩子
        *    （本 service 对会话域与凭据域零耦合，同 `onProjectNameChanged` 的注入模式）。
        *
-       * 拒绝两类 id：`proj:uncategorized`（读侧虚拟卡，存储里没有真行）与 `proj_tmp_*`
-       * （工单的兜底归属，删掉等于把工单变成无绑定态——契约里 `Workspace.projectId` 必填）。
+       * 拒绝 `proj:uncategorized`（读侧虚拟卡，存储里没有真行，删它没有意义）。
        */
       async deleteProject(id) {
         const projectId2 = id?.trim();
         if (!projectId2) throw new Error("project id is required");
         if (isUncategorizedProjectId(projectId2)) throw new Error(`project not deletable: ${projectId2}`);
-        if (isEphemeralProject(projectId2)) throw new Error(`project not deletable: ${projectId2}`);
         const project = await this.projects.getProject(projectId2);
         if (!project) throw new Error(`project not found: ${projectId2}`);
-        const gitLocations = (await this.projects.listContentLocations(projectId2)).filter((loc) => loc.kind === "external-home" && loc.externalHome?.system === "git");
-        const now = (/* @__PURE__ */ new Date()).toISOString();
         const bindings = await this.artifacts.listWorkspaceBindings();
         const movedWorkOrderIds = [];
         for (const binding of bindings) {
           if (binding.projectId !== projectId2) continue;
-          const moved = await this.unlinkWorkorder(binding.workOrderId);
+          await this.unlinkWorkorder(binding.workOrderId);
           movedWorkOrderIds.push(binding.workOrderId);
-          for (const loc of gitLocations) {
-            await this.projects.addContentLocation({
-              ...loc,
-              projectId: moved.projectId,
-              // 派生 id：同一条位置搬到同一个临时项目永远算出同一个 id（addContentLocation 是
-              // upsert），重跑不会堆出重复的仓库行。
-              locationId: `pcl-${moved.projectId}-carried-${loc.locationId}`,
-              updatedAt: now
-            });
-          }
         }
         await this.projects.deleteProject(projectId2);
         if (this.onProjectDeleted) {
@@ -211433,7 +211645,7 @@ var init_service4 = __esm({
             console.warn(`[projects] project-deleted follow-up failed for ${projectId2}: ${error2 instanceof Error ? error2.message : String(error2)}`);
           }
         }
-        return { projectId: projectId2, movedWorkOrderIds, carriedGitLocationCount: gitLocations.length };
+        return { projectId: projectId2, movedWorkOrderIds };
       }
       /**
        * 项目关联工单（帧 `1355:4918`）：把内部私有的 `listProjectWorkorders` 暴露给路由层。
@@ -211558,6 +211770,33 @@ var init_service4 = __esm({
             });
           }
         }
+        if (this.artifacts.listWorkOrderFiles) {
+          for (const workOrderId of workorderSummaries.map((w2) => w2.id)) {
+            const workOrderFiles = await this.artifacts.listWorkOrderFiles(workOrderId).catch(() => []);
+            const taskTitle = workorderTitleById.get(workOrderId) ?? null;
+            for (const file of workOrderFiles) {
+              const creatorId = file.uploadedBy ?? null;
+              items.push({
+                kind: "file",
+                id: file.fileId,
+                name: file.name,
+                path: `wo:${workOrderId}/file:${file.fileId}`,
+                filePath: null,
+                depth: 1,
+                type: file.contentType ?? inferTypeFromName(file.name),
+                blobRef: file.blobId,
+                contentType: file.contentType ?? null,
+                size: file.size,
+                taskId: workOrderId,
+                taskTitle,
+                creatorKind: creatorId ? creatorId.startsWith("actor:human:") ? "human" : "agent" : null,
+                creatorId,
+                creatorName: creatorId ? this.resolveActorName(creatorId) : null,
+                updatedAt: file.linkedAt
+              });
+            }
+          }
+        }
         const foldedTasks = foldSingleNodeTasks(items);
         const taskFolders = /* @__PURE__ */ new Set();
         for (const item of [...items]) {
@@ -211596,6 +211835,8 @@ var init_service4 = __esm({
             filePath: null,
             depth: path41 ? path41.replace(/^\/+/, "").split("/").length - 1 : 0,
             type: file.contentType ?? inferTypeFromName(file.name),
+            blobRef: file.blobId,
+            contentType: file.contentType ?? null,
             size: file.size,
             taskId: null,
             taskTitle: null,
@@ -212063,7 +212304,7 @@ var init_service4 = __esm({
         if (!snap) return [];
         const worksById = new Map(snap.works.map((w2) => [w2.id, w2]));
         const binding = this.artifacts.getWorkspaceBinding ? await this.artifacts.getWorkspaceBinding(workOrderId).catch(() => null) : null;
-        const projectId2 = binding?.projectId ?? ephemeralProjectIdFor(workOrderId);
+        const projectId2 = binding?.projectId ?? UNCATEGORIZED_PROJECT_ID;
         const out = [];
         for (const node2 of snap.nodes) {
           if (!node2.latestAcceptId) continue;
@@ -212193,20 +212434,8 @@ var init_service4 = __esm({
         const filtered = artifacts.filter((artifact) => input.type === void 0 || artifact.type === input.type).filter((artifact) => input.status === void 0 || artifact.status === input.status).sort((a, b2) => b2.updatedAt.localeCompare(a.updatedAt));
         return { artifacts: filtered, summary: summarizeArtifacts(filtered) };
       }
-      /** 内部：虚拟卡 → 跨全部 ephemeral 项目聚合；真项目 → 走原路径。 */
+      /** 内部：虚拟卡与真项目走同一条路——{@link listAllProjectArtifacts} 内部按「无绑定 / 绑到本项目」分流。 */
       async collectProjectArtifacts(projectId2) {
-        if (isUncategorizedProjectId(projectId2)) {
-          const stored = await this.projects.listProjects();
-          const ephemeralIds = new Set(
-            stored.filter((project) => isEphemeralProject(project.id)).map((project) => project.id)
-          );
-          const artifacts = [];
-          for (const id of ephemeralIds) {
-            const list2 = await this.listAllProjectArtifacts(id);
-            artifacts.push(...list2.map((a) => ({ ...a, projectId: UNCATEGORIZED_PROJECT_ID })));
-          }
-          return artifacts;
-        }
         return this.listAllProjectArtifacts(projectId2);
       }
       async listProjectWorkorders(projectId2) {
@@ -212215,17 +212444,19 @@ var init_service4 = __esm({
         const uncategorized = isUncategorizedProjectId(projectId2);
         return buildWorkorderSummaries(this.kernel.model, void 0, (workOrderId) => projectByWorkorder.get(workOrderId) ?? null, void 0, void 0, void 0, (role) => this.kernel.actorForRole(role)).filter((workorder) => {
           const bound = workorder.projectId;
-          if (uncategorized) return typeof bound === "string" && isEphemeralProject(bound);
+          if (uncategorized) return bound == null;
           return bound === projectId2;
         });
       }
       async listAllProjectArtifacts(projectId2) {
-        const stored = await this.artifacts.listArtifacts({ projectId: projectId2 });
+        const uncategorized = isUncategorizedProjectId(projectId2);
+        const stored = uncategorized ? [] : await this.artifacts.listArtifacts({ projectId: projectId2 });
         const byArtifact = new Map(stored.map((artifact) => [artifact.artifactId, artifact]));
         const bindings = await this.artifacts.listWorkspaceBindings();
         const projectByWorkorder = new Map(bindings.map((binding) => [binding.workOrderId, binding.projectId]));
         for (const artifact of this.kernel.model.artifacts.values()) {
-          if (projectByWorkorder.get(artifact.workspace) !== projectId2) continue;
+          const bound = projectByWorkorder.get(artifact.workspace);
+          if (uncategorized ? bound !== void 0 : bound !== projectId2) continue;
           const descriptor = decodeDocumentDescription(artifact.description);
           const info = nodeInfo(this.kernel.model, artifact);
           const revisions = revisionsOf(this.kernel.model, artifact.id);
@@ -216890,8 +217121,18 @@ function wireRecoveredChatTurn(deps) {
     clearInterval(ckptTimer);
     const failed = exitFailed(info);
     if (failed) {
-      live.emit({ type: "error", text: exitErrorText(info) });
-      itemLedger.recordError(exitErrorText(info));
+      const errText2 = exitErrorText(info);
+      live.emit({ type: "error", text: errText2 });
+      const errorOutcome = itemLedger.recordError(errText2, { ...info.reason ? { reason: info.reason } : {} });
+      live.publishServerItem({
+        itemId: errorOutcome.itemId,
+        itemType: "control",
+        startedVersion: errorOutcome.startedVersion,
+        version: errorOutcome.version,
+        ord: errorOutcome.ord,
+        status: "failed",
+        payload: { code: "error", note: errText2, ...info.reason ? { reason: info.reason } : {} }
+      });
     }
     const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     const parts = collectedParts();
@@ -216918,6 +217159,11 @@ function wireRecoveredChatTurn(deps) {
       ...nextRuntimeSessionId ? { runtimeSessionId: nextRuntimeSessionId } : {},
       touchedAt: finishedAt
     }).catch(() => void 0);
+    if (deps.onTurnSettled) {
+      await deps.onTurnSettled(failed ? "failed" : "succeeded", finishedAt).catch((err) => {
+        log3(`[chat-recovery] \u4F1A\u8BDD ${plan.chatSessionId} \u6536\u53E3\u8BB0\u8D26\u5931\u8D25\uFF08\u9000\u56DE\u6E05\u626B\u62CD\u515C\u5E95\uFF09: ${String(err)}`);
+      });
+    }
     if (!liveTerminalEmitted) {
       live.emitLive({
         protocolVersion: 2,
@@ -217241,6 +217487,22 @@ async function recoverChatTurnsAcrossCompanies(deps) {
           continue;
         }
         const handle = deps.recover(plan);
+        const settleTurnId = turn?.id;
+        const onTurnSettled = settleTurnId && stores.settleTurn ? async (status, completedAt) => {
+          await stores.settleTurn(settleTurnId, {
+            status,
+            completedAt,
+            ...status === "failed" ? { lastError: `\u91CD\u6302\u7684\u8F6E\u4EE5 ${status} \u6536\u5C3E\uFF08run ${plan.runId}\uFF09` } : {}
+          });
+          log3(`[chat-recovery] \u8F6E\u6B21 ${settleTurnId}\uFF08\u4F1A\u8BDD ${plan.chatSessionId}\uFF09\u968F\u91CD\u6302\u6536\u53E3\u4E3A ${status}\uFF0C\u4F1A\u8BDD\u69FD\u5DF2\u91CA\u653E`);
+          await deps.onTurnSettled?.({
+            chatSessionId: plan.chatSessionId,
+            turnId: settleTurnId,
+            status,
+            reason: `\u91CD\u6302\u7684\u8F6E\u4EE5 ${status} \u6536\u5C3E`,
+            ...companyId ? { companyId } : {}
+          });
+        } : void 0;
         const { done } = wireRecoveredChatTurn({
           plan,
           handle,
@@ -217250,6 +217512,7 @@ async function recoverChatTurnsAcrossCompanies(deps) {
           register: () => deps.register(plan, handle),
           unregister: () => deps.unregister(plan),
           ...deps.traceHealth ? { traceHealth: deps.traceHealth } : {},
+          ...onTurnSettled ? { onTurnSettled } : {},
           ...stores.items ? { items: stores.items, itemsTurnId } : {},
           log: log3
         });
@@ -219317,7 +219580,14 @@ ${input.description}
           vars.filter((v2) => v2.scope === "personal" && v2.actorId === actorId && v2.connectorId).map((v2) => v2.connectorId)
         )];
         const effective = await this.effectiveConnectorEntries(actorId, config2, connectors);
-        return { connections, globalConnected, actorConnected, effective };
+        const flat = {};
+        for (const v2 of vars) if (v2.scope === "global" && !v2.actorId) flat[v2.key] = this.decodeCiphertext(v2.valueEncrypted);
+        for (const v2 of vars) if (v2.scope === "personal" && (!v2.actorId || v2.actorId === actorId)) flat[v2.key] = this.decodeCiphertext(v2.valueEncrypted);
+        const credentialReady = collectAllConnectorCredentials({
+          vars: flat,
+          actorName: flat["GIT_AUTHOR_NAME"] ?? actorId.split(":").pop() ?? "oasis-agent"
+        }).map((c) => c.slug);
+        return { connections, globalConnected, actorConnected, effective, credentialReady };
       }
       /**
        * 该员工每个连接器的「有效启用」集合（变量/技能注入闸门）：
@@ -219430,6 +219700,11 @@ ${input.description}
           deliveryMode: v2.deliveryMode ?? "env",
           valueEncrypted: v2.encrypted === false ? `plain:${v2.value}` : this.encrypt(v2.value),
           updatedAt: this.now(),
+          /* 创建者 / 创建时间 / 更新者：**由服务端落，不接受调用方自报**。
+             createdBy/createdAt 两格存储层按「第一次落行才写」处理（COALESCE 旧值），所以这里每次都传，
+             写不写得进去由存储层决定；updatedBy 每次覆盖。
+             `by` 缺省（连接器授权流程等系统写入）时三格都不传——**不拿一个假身份填上去**。 */
+          ...v2.by ? { createdBy: v2.by, createdAt: this.now(), updatedBy: v2.by } : {},
           // ADR 凭据保险库补章 §D2.2：expiresAt 写侧穿透——**显式带 key**（含 undefined），使清空（传空→undefined）
           // 也落到底（store 两实现都按此覆盖）。lastUsedAt 从不由写侧传，取用时另刷（§D2.3）。
           expiresAt: v2.expiresAt
@@ -219502,7 +219777,12 @@ ${input.description}
             updatedAt: r.updatedAt,
             // ADR 凭据保险库补章 §D2.1：到期/取用时间戳透传（展示层据此染色；补章 §D2.4）。
             ...r.expiresAt !== void 0 ? { expiresAt: r.expiresAt } : {},
-            ...r.lastUsedAt !== void 0 ? { lastUsedAt: r.lastUsedAt } : {}
+            ...r.lastUsedAt !== void 0 ? { lastUsedAt: r.lastUsedAt } : {},
+            // 创建者 / 创建时间 / 更新者（子 PRD《密钥管理》§2 + 2026-09-10 追加）。
+            // 存量行没有这三格，原样不带出去——展示侧出「—」，不拿 updatedAt 冒充 createdAt。
+            ...r.createdBy !== void 0 ? { createdBy: r.createdBy } : {},
+            ...r.createdAt !== void 0 ? { createdAt: r.createdAt } : {},
+            ...r.updatedBy !== void 0 ? { updatedBy: r.updatedBy } : {}
           };
         });
       }
@@ -219789,13 +220069,6 @@ var init_memory = __esm({
       async write(ctx, input) {
         this.assertWritable(input, "agent");
         const projectId2 = await this.projectOf(ctx);
-        if (input.scope === "project" && projectId2 === null) {
-          throw new ApiError(
-            400,
-            "MEMORY_NO_PROJECT",
-            "\u672C\u8F6E\u89E3\u6790\u4E0D\u51FA\u6240\u5C5E\u9879\u76EE\uFF08\u975E\u6D3E\u53D1\u4F1A\u8BDD\u6216\u4EA7\u7269\u672A\u7ED1\u5B9A\u5DE5\u5355\uFF09\uFF0C\u65E0\u6CD5\u5199\u9879\u76EE\u7EA7\u8BB0\u5FC6\u2014\u2014\u6539\u7528 --scope actor \u5199\u8DE8\u9879\u76EE\u901A\u7528\u7684\u7ECF\u9A8C\u3002"
-          );
-        }
         return this.writeResolved(ctx, input, input.scope === "project" ? projectId2 : null, "agent");
       }
       /** 控制台管理面写入：actorId/projectId 由受保护的管理路由明确给出，不复用 agent 自用入口。 */
@@ -220905,6 +221178,21 @@ var init_connector_skills = __esm({
   }
 });
 
+// ../server/src/domains/nodes/runtime-tenancy.ts
+function foreignNodeBlock(node2, expectedCompanyId) {
+  if (!expectedCompanyId) return null;
+  if (!node2) return null;
+  const owner = node2.companyId;
+  if (!owner) return null;
+  if (owner === expectedCompanyId) return null;
+  return `\u8FD0\u884C\u65F6\u8282\u70B9 ${node2.id} \u5C5E\u4E8E\u516C\u53F8 ${owner}\uFF0C\u4E0D\u5C5E\u4E8E ${expectedCompanyId}\u2014\u2014\u5458\u5DE5\u53EA\u80FD\u7ED1\u5B9A/\u6D3E\u53D1\u5230\u672C\u516C\u53F8\u7684\u8282\u70B9\uFF08ADR-0164 \xA75\uFF1A\u8DE8\u516C\u53F8\u5171\u4EAB\u540C\u4E00\u53F0\u7269\u7406\u673A\u7684\u6B63\u89E3\u662F\u5404\u81EA\u767B\u8BB0\u4E0D\u540C node id\uFF09\u3002`;
+}
+var init_runtime_tenancy = __esm({
+  "../server/src/domains/nodes/runtime-tenancy.ts"() {
+    "use strict";
+  }
+});
+
 // ../server/src/domains/actors/routes.ts
 async function asApiError(run) {
   try {
@@ -221227,6 +221515,9 @@ function actorsDomain(opts) {
       const { service } = await resolveCtx(req.auth.companyId);
       const b2 = req.body;
       if (!b2?.actorId || !b2.nodeId || !b2.runtimeKind) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 actorId / nodeId / runtimeKind");
+      const targetNode = await opts.resolveNodeTenancy?.(b2.nodeId).catch(() => null) ?? null;
+      const foreign = foreignNodeBlock(targetNode, req.auth.companyId);
+      if (foreign) throw new ApiError(400, "NODE_NOT_IN_COMPANY", foreign);
       const { clearedModel } = await service.bind({ actorId: b2.actorId, nodeId: b2.nodeId, runtimeKind: b2.runtimeKind, status: b2.status ?? "active" }, req.auth.actor);
       return { status: 201, body: { ok: true, ...clearedModel ? { clearedModel } : {} } };
     });
@@ -221345,6 +221636,8 @@ function actorsDomain(opts) {
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
         ...b2.overrides !== void 0 ? { overrides: b2.overrides } : {},
         ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {},
+        // 创建者/更新者取**当前登录人**，不接受 body 传入——自报的「谁建的」等于没有这一格。
+        by: req.auth.actor,
         expiresAt: expiresAt2
       });
       await auditVariableChange(
@@ -221417,6 +221710,7 @@ function actorsDomain(opts) {
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
         ...b2.overrides !== void 0 ? { overrides: b2.overrides } : {},
         ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {},
+        by: req.auth.actor,
         expiresAt: expiresAt2
       });
       await auditVariableChange(req, "credential_write", b2.key, `personal:${actorId}`);
@@ -222036,6 +222330,7 @@ var init_routes3 = __esm({
     init_image_upload();
     init_skill_materializer();
     init_connector_skills();
+    init_runtime_tenancy();
     CREDENTIAL_REVEAL_SOURCES = /* @__PURE__ */ new Set(["agent-cli", "agent-exec", "smoke-test", "oasis-internal", "console"]);
     RevealRateLimiter = class {
       constructor(perSession, perSessionPerKey, ttlMs = 2 * 60 * 6e4) {
@@ -222232,7 +222527,7 @@ function createActorsDomain(opts) {
   return {
     service: defaultCtx.service,
     resolveCtx,
-    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {} })
+    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
 var import_node_crypto49;
@@ -222434,12 +222729,9 @@ function projectsDomain(opts) {
       }
     });
     router.get("/api/projects", async (req) => {
-      const inc = req.query?.get("includeEphemeral");
-      const includeEphemeral = inc === "1" || inc === "true";
       const uncatRaw = req.query?.get("includeUncategorized");
       const includeUncategorized = uncatRaw === null || uncatRaw === void 0 ? void 0 : !(uncatRaw === "0" || uncatRaw === "false");
       const projects = await (await svc(req)).listProjects({
-        includeEphemeral,
         ...includeUncategorized !== void 0 ? { includeUncategorized } : {}
       });
       const page = paginate(projects.map(toApiProject), req.query);
@@ -222477,8 +222769,7 @@ function projectsDomain(opts) {
           body: {
             ok: true,
             project_id: result.projectId,
-            moved_work_order_ids: result.movedWorkOrderIds,
-            carried_git_location_count: result.carriedGitLocationCount
+            moved_work_order_ids: result.movedWorkOrderIds
           }
         };
       } catch (err) {
@@ -222720,8 +223011,8 @@ ${errs.join("\n")}`);
       const nulledPatch = "project_id" in b2 && b2.project_id === null || "projectId" in b2 && b2.projectId === null || b2.project_id === "null" || b2.project_id === "" || b2.projectId === "null" || b2.projectId === "";
       if (nulledPatch) {
         try {
-          const binding = await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
-          return { status: 200, body: { work_order_id: binding.workOrderId, project_id: binding.projectId } };
+          await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
+          return { status: 200, body: { work_order_id: req.params.workOrderId, project_id: null } };
         } catch (err) {
           throw mapProjectError(err);
         }
@@ -222737,8 +223028,8 @@ ${errs.join("\n")}`);
     });
     router.delete("/api/work-orders/:workOrderId/project", async (req) => {
       try {
-        const binding = await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
-        return { status: 200, body: { work_order_id: binding.workOrderId, project_id: binding.projectId } };
+        await (await svc(req)).unlinkWorkorder(req.params.workOrderId);
+        return { status: 200, body: { work_order_id: req.params.workOrderId, project_id: null } };
       } catch (err) {
         throw mapProjectError(err);
       }
@@ -223222,6 +223513,9 @@ function toApiProjectFilesView(view) {
       // 其它外部引用→链接）。交付物整份产物行才有，上传文件与文件夹为 null。
       content_kind: item.contentKind ?? null,
       content_ref: item.contentRef ?? null,
+      // 上传文件行（项目级上传 / 工单级文件）的 blob 引用 + MIME：前端据此直读 blob 预览。交付物与文件夹为 null。
+      blob_ref: item.blobRef ?? null,
+      content_type: item.contentType ?? null,
       size: item.size,
       task_id: item.taskId,
       task_title: item.taskTitle,
@@ -223256,7 +223550,7 @@ var init_routes5 = __esm({
     "use strict";
     init_router();
     init_src();
-    init_ephemeral_project();
+    init_uncategorized_project();
   }
 });
 
@@ -228322,13 +228616,15 @@ async function buildChatPreview(chatStore, sessionId, who) {
   if (lastAsst) lines.push({ label: who, text: clip2(lastAsst.content) });
   return lines.length ? { lines } : void 0;
 }
-async function buildChatInbox(chatStore, markers, me, resolveActor) {
+async function buildChatInbox(chatStore, markers, me, resolveActor, excludeChildSessions) {
   const sessions = await chatStore.listSessions(me);
   const byScope = new Map(markers.map((m2) => [m2.scope, m2]));
   const unread = sessions.filter((s2) => s2.lastTurnQuality !== void 0 && isUnread(s2.touchedAt, byScope.get(chatScope(s2.id)))).sort((a, b2) => a.touchedAt < b2.touchedAt ? 1 : a.touchedAt > b2.touchedAt ? -1 : 0);
+  const excluded = excludeChildSessions ? new Set(await excludeChildSessions(unread.map((s2) => s2.id)).catch(() => [])) : /* @__PURE__ */ new Set();
   const out = [];
   let previewsFetched = 0;
   for (const s2 of unread) {
+    if (excluded.has(s2.id)) continue;
     const who = resolveActor?.(s2.aiActorId)?.name ?? "\u52A9\u7406";
     const abnormal = s2.lastTurnQuality === "abnormal";
     const preview2 = previewsFetched < PREVIEW_FETCH_CAP ? await buildChatPreview(chatStore, s2.id, who) : void 0;
@@ -228537,6 +228833,9 @@ function toAuditEntry(op) {
     actor: op.actor,
     op: op.kind,
     artifactId: op.artifactId,
+    /* 动作名单独发一份（见契约 `AuditEntry.actionLabel`）：`summary` 拼着裸 artifactId，
+       不能直接给人看，而「已处理」那一行需要「干了什么 + 在哪个节点」两截并排。 */
+    actionLabel: KIND_LABEL2[op.kind] ?? op.kind,
     summary: `${KIND_LABEL2[op.kind] ?? op.kind} \xB7 ${op.artifactId}`
   };
 }
@@ -228573,6 +228872,7 @@ function eventToAuditEntry(rec) {
     actor: rec.actorId,
     op: ev.kind,
     artifactId,
+    actionLabel: KIND_LABEL2[ev.kind] ?? ev.kind,
     summary: `${KIND_LABEL2[ev.kind] ?? ev.kind}${artifactId ? ` \xB7 ${artifactId}` : ""}`
   };
 }
@@ -229523,13 +229823,32 @@ async function buildLeadResolver(registry2) {
     return null;
   };
 }
-async function buildResolver(registry2) {
+async function memberNameResolver(listMembers, companyId) {
+  if (!listMembers) return void 0;
+  let members;
+  try {
+    members = await listMembers(companyId);
+  } catch (err) {
+    console.warn(`[collab] \u6210\u5458\u6635\u79F0\u8BFB\u53D6\u5931\u8D25\uFF0C\u672C\u6B21\u56DE\u843D\u5458\u5DE5\u6863\u6848\u59D3\u540D: ${String(err)}`);
+    return void 0;
+  }
+  const byActor2 = /* @__PURE__ */ new Map();
+  for (const m2 of members) {
+    const name = m2.displayName?.trim();
+    if (name) byActor2.set(m2.actorId, name);
+  }
+  return (id) => byActor2.get(id);
+}
+async function buildResolver(registry2, memberName) {
   if (!registry2) return void 0;
   const actors = await registry2.listActors();
   const byId = new Map(actors.map((a) => [a.id, a]));
   return (id) => {
     const a = byId.get(id);
-    return a ? actorRefFieldsOf(a) : actorRefFallbackOf(id);
+    if (!a) return actorRefFallbackOf(id);
+    const fields = actorRefFieldsOf(a);
+    const nickname = memberName?.(id);
+    return nickname ? { ...fields, name: nickname } : fields;
   };
 }
 async function buildProjectResolver(artifacts) {
@@ -229651,6 +229970,7 @@ function collabDomain(opts) {
     cache.set(companyId, ctx);
     return ctx;
   }
+  const resolverFor = async (companyId, registry2) => buildResolver(registry2, await memberNameResolver(opts.listMembers, companyId));
   return (router) => {
     router.get("/api/organization/usage-summary", async (req) => {
       if (!opts.trace) {
@@ -229695,7 +230015,7 @@ function collabDomain(opts) {
     });
     router.get("/api/workorders", async (req) => {
       const { kernel, registry: registry2, artifacts } = await resolveCtx(req.auth.companyId);
-      const resolve10 = await buildResolver(registry2);
+      const resolve10 = await resolverFor(req.auth.companyId, registry2);
       const resolveProject = await buildProjectResolver(artifacts);
       const dispatchPausedOf = await buildDispatchPausedResolver(kernel.model, artifacts);
       const ref2 = (id) => {
@@ -229718,7 +230038,7 @@ function collabDomain(opts) {
       if (projectFilter) {
         items = items.filter((wo) => {
           const bound = wo.projectId;
-          if (isUncategorizedProjectId(projectFilter)) return typeof bound === "string" && isEphemeralProject(bound);
+          if (isUncategorizedProjectId(projectFilter)) return bound == null;
           return bound === projectFilter;
         });
       }
@@ -229726,7 +230046,7 @@ function collabDomain(opts) {
     });
     router.get("/api/workorder-metrics", async (req) => {
       const { kernel, registry: registry2, artifacts, engineStore } = await resolveCtx(req.auth.companyId);
-      const resolve10 = await buildResolver(registry2);
+      const resolve10 = await resolverFor(req.auth.companyId, registry2);
       const resolveProject = await buildProjectResolver(artifacts);
       const dispatchPausedOf = await buildDispatchPausedResolver(kernel.model, artifacts);
       const workorders = buildWorkorderSummaries(kernel.model, resolve10, resolveProject, dispatchPausedOf);
@@ -229773,7 +230093,7 @@ function collabDomain(opts) {
     });
     router.get("/api/workorders/:id", async (req) => {
       const { kernel, oplog, blobs, registry: registry2, artifacts, engineStore } = await resolveCtx(req.auth.companyId);
-      const resolve10 = await buildResolver(registry2);
+      const resolve10 = await resolverFor(req.auth.companyId, registry2);
       const resolveProject = await buildProjectResolver(artifacts);
       const dispatchPausedOf = await buildDispatchPausedResolver(kernel.model, artifacts);
       const wsArts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === req.params.id);
@@ -229848,7 +230168,7 @@ function collabDomain(opts) {
       if (![...kernel.model.artifacts.values()].some((a) => a.workspace === workorderId)) {
         return { status: 404, body: { error: { code: "not_found", message: `\u5DE5\u5355\u4E0D\u5B58\u5728: ${workorderId}` } } };
       }
-      const resolve10 = await buildResolver(registry2);
+      const resolve10 = await resolverFor(req.auth.companyId, registry2);
       const ref2 = (id) => {
         const extra = resolve10?.(id);
         return {
@@ -229891,7 +230211,7 @@ function collabDomain(opts) {
       if (!cardId) {
         return { status: 400, body: { error: { code: "bad_request", message: "\u7F3A\u5C11 card \u53C2\u6570\uFF08\u52A8\u6001\u5361 id\uFF09" } } };
       }
-      const resolve10 = await buildResolver(registry2);
+      const resolve10 = await resolverFor(req.auth.companyId, registry2);
       const ref2 = (id) => {
         const extra = resolve10?.(id);
         return {
@@ -229931,7 +230251,7 @@ function collabDomain(opts) {
       if (!ledger) {
         return { status: 404, body: { error: { code: "not_found", message: `\u5DE5\u5355\u4E0D\u5B58\u5728: ${req.params.id}` } } };
       }
-      const resolve10 = await buildResolver(registry2);
+      const resolve10 = await resolverFor(req.auth.companyId, registry2);
       const ids2 = /* @__PURE__ */ new Set();
       if (ledger.owner) ids2.add(ledger.owner);
       if (ledger.manager) ids2.add(ledger.manager);
@@ -229950,13 +230270,14 @@ function collabDomain(opts) {
       return { status: 200, body: { ...ledger, actors } };
     });
     router.get("/api/workorders/:id/files", async (req) => {
-      const { kernel, artifacts } = await resolveCtx(req.auth.companyId);
+      const { kernel, registry: registry2, artifacts } = await resolveCtx(req.auth.companyId);
       const ws = req.params.id;
       const exists = [...kernel.model.artifacts.values()].some((a) => a.workspace === ws);
       if (!exists) {
         return { status: 404, body: { error: { code: "not_found", message: `\u5DE5\u5355\u4E0D\u5B58\u5728: ${ws}` } } };
       }
       const files = artifacts?.listWorkOrderFiles ? await artifacts.listWorkOrderFiles(ws) : [];
+      const resolve10 = await buildResolver(registry2);
       const items = files.map((f2) => ({
         id: f2.fileId,
         name: f2.name,
@@ -229966,12 +230287,14 @@ function collabDomain(opts) {
         updated_at: f2.linkedAt,
         blob_ref: f2.blobId,
         source_session_id: f2.sourceSessionId ?? null,
-        source_message_id: f2.sourceMessageId ?? null
+        source_message_id: f2.sourceMessageId ?? null,
+        uploaded_by: f2.uploadedBy ?? null,
+        uploader_name: f2.uploadedBy ? resolve10?.(f2.uploadedBy)?.name ?? null : null
       }));
       return { status: 200, body: { total: items.length, items } };
     });
     router.post("/api/workorders/:id/files", async (req) => {
-      const { kernel, artifacts } = await resolveCtx(req.auth.companyId);
+      const { kernel, registry: registry2, artifacts } = await resolveCtx(req.auth.companyId);
       const ws = req.params.id;
       const exists = [...kernel.model.artifacts.values()].some((a) => a.workspace === ws);
       if (!exists) {
@@ -230005,7 +230328,9 @@ function collabDomain(opts) {
         blobId,
         size: bytes2.byteLength,
         ...contentType ? { contentType } : {},
-        linkedAt
+        linkedAt,
+        // 上传者：项目页「创建人」列与预览副标据此署名（建单带入的那条路记的是建单发起人）。
+        uploadedBy: req.auth.actor
       };
       try {
         await artifacts.addWorkOrderFile(file);
@@ -230015,6 +230340,7 @@ function collabDomain(opts) {
           body: { error: { code: "write_failed", message: `\u5199 work_order_files \u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}` } }
         };
       }
+      const resolve10 = await buildResolver(registry2);
       const item = {
         id: fileId,
         name,
@@ -230024,7 +230350,9 @@ function collabDomain(opts) {
         updated_at: linkedAt,
         blob_ref: blobId,
         source_session_id: null,
-        source_message_id: null
+        source_message_id: null,
+        uploaded_by: req.auth.actor,
+        uploader_name: resolve10?.(req.auth.actor)?.name ?? null
       };
       return { status: 201, body: { item } };
     });
@@ -230098,7 +230426,7 @@ function collabDomain(opts) {
       const [leadOf, resolveActor, initialMarkers] = await Promise.all([
         buildLeadResolver(registry2),
         // 决策 0026 (c)：gap 升级也发卡住节点 owner 的人类上级
-        buildResolver(registry2),
+        resolverFor(req.auth.companyId, registry2),
         // 决策 0042：gap reporter 名册 join
         myReadMarkers ? myReadMarkers.listMarkers(me) : Promise.resolve([])
         // ADR-0086：知会型条目的已读水位
@@ -230124,7 +230452,8 @@ function collabDomain(opts) {
           return void 0;
         }
       })();
-      const chatItems = chatStore && myReadMarkers ? await buildChatInbox(chatStore, markers, me, resolveActor) : [];
+      const excludeChildSessions = opts.resolveDelegationChildIds ? (ids2) => opts.resolveDelegationChildIds(req.auth.companyId, ids2) : void 0;
+      const chatItems = chatStore && myReadMarkers ? await buildChatInbox(chatStore, markers, me, resolveActor, excludeChildSessions) : [];
       let waitingItems = [];
       if (engineStore) {
         const snaps = (await Promise.all(
@@ -230370,7 +230699,7 @@ function collabDomain(opts) {
       let teamMembers;
       let lead;
       if (registry2) {
-        const resolve10 = await buildResolver(registry2);
+        const resolve10 = await resolverFor(req.auth.companyId, registry2);
         const meRec = await registry2.getActor(me);
         if (meRec?.teamId) {
           teamMembers = new Set((await registry2.listActors({ teamId: meRec.teamId })).map((m2) => m2.id));
@@ -230419,7 +230748,7 @@ var init_collab = __esm({
     init_workorder_metrics();
     init_chat_workorder_files();
     init_organization_usage();
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_tags();
     init_activity2();
     init_node_state();
@@ -230706,24 +231035,16 @@ function makeSeededWorkorderCreator(deps) {
     const blobs = company?.blobs ?? deps.blobs;
     const registry2 = company?.registry ?? deps.registry;
     const artifactState = company ? company.artifactState : deps.artifactState;
-    const createProject = company ? company.createProject : deps.createProject;
+    const workorderDrafts = company ? company.workorderDrafts : deps.workorderDrafts;
     const workspace = input.idempotencyKey ? workspaceForKey(input.idempotencyKey) : genWorkspace();
     if (input.idempotencyKey) {
       const existing = existingWorkorder(kernel, workspace);
       if (existing) return existing;
     }
-    if (artifactState && (input.projectId || createProject)) {
-      await ensureWorkorderProject({
+    if (artifactState && input.projectId) {
+      await bindWorkorderProject({
         workOrderId: workspace,
-        ...input.projectId ? { projectId: input.projectId } : {},
-        ...input.title ? { title: input.title } : {},
-        // ADR 0207：临时项目的创建人 = 建这张单的**真人**。`humanActorId` 是 B 路径 handler
-        // 从 `x-chat-session-id` 反查填进来的「陪发起人聊出此单的人」，与 brief.owner 同源；
-        // 没有它时只在 `input.actor` 本身是人时才用——剧本由 agent 触发时落 NULL，
-        // 不把执行者写成负责人。
-        ...input.humanActorId ? { createdBy: input.humanActorId } : input.actor.startsWith("actor:human:") ? { createdBy: input.actor } : {},
-        createProject: createProject ?? (async ({ id }) => ({ id })),
-        // 上面的守卫保证走不到这个分支
+        projectId: input.projectId,
         upsertBinding: (b2) => artifactState.upsertWorkspaceBinding(b2),
         ...deps.onWarn ? { onWarn: deps.onWarn } : {}
       });
@@ -230755,8 +231076,8 @@ function makeSeededWorkorderCreator(deps) {
     if (!preview2.endState.ok) {
       throw new Error(`\u5267\u672C\u5EFA\u5355\u7EC8\u6001\u6821\u9A8C\u4E0D\u8FC7\uFF1A${preview2.endState.violations.join("\uFF1B")}`);
     }
-    if (input.stage === true && deps.workorderDrafts) {
-      const draft = await deps.workorderDrafts.submit({
+    if (input.stage === true && workorderDrafts) {
+      const draft = await workorderDrafts.submit({
         workspace,
         plan: planned.plan,
         rootArtifactId: planned.rootArtifactId,
@@ -230818,7 +231139,7 @@ var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
     import_node_crypto57 = require("node:crypto");
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_planner();
     enc2 = (s2) => new TextEncoder().encode(s2);
   }
@@ -233630,7 +233951,10 @@ function createChatSessionsDomain(opts) {
     const kernel = await kernelFor(req);
     const engineStore = kernel?.getStore?.();
     const snap = engineStore ? await engineStore.transaction((tx) => tx.loadWorkorder(workorderId)) : null;
-    const resolve10 = await buildResolver(await registryFor(req));
+    const resolve10 = await buildResolver(
+      await registryFor(req),
+      await memberNameResolver(opts.listMembers, req.auth.companyId)
+    );
     const ref2 = (id) => {
       const extra = resolve10?.(id);
       return { id, ...extra?.name ? { name: extra.name } : {}, ...extra?.role ? { role: extra.role } : {}, ...extra?.avatar ? { avatar: extra.avatar } : {} };
@@ -234058,6 +234382,9 @@ function createChatSessionsDomain(opts) {
           childSessionId: record8.childSessionId,
           expertActorId: record8.expertActorId,
           ...expert?.name ? { expertName: expert.name } : {},
+          /* 头像与名字同一本名册、同一次查询取出来。缺了它，委派卡与输入框上方状态条只能退回
+             姓名首字的灰圆（发起人 2026-09-10 报的「灰底 D」）——那两处画的是「[头像] 名字 进行中」。 */
+          ...expert?.avatar ? { expertAvatar: expert.avatar } : {},
           state: record8.state,
           ...record8.failureKind ? { failureKind: record8.failureKind } : {},
           ...record8.label ? { label: record8.label } : {},
@@ -237750,7 +238077,7 @@ function playbooksDomain(opts) {
       const drafts = opts.resolveWorkorderDrafts ? await opts.resolveWorkorderDrafts(req.auth?.companyId) : opts.workorderDrafts;
       if (result.draftId && chatSid && drafts) {
         try {
-          await drafts.tagSession(result.draftId, chatSid, opts.liveChat?.runFor(chatSid));
+          await drafts.tagSession(result.draftId, chatSid, opts.liveChat?.runFor(chatSid), result.workspace);
         } catch (err) {
           console.warn(`[playbooks] tagSession(${result.draftId}) \u5931\u8D25\uFF0C\u4E0D\u963B\u585E\u5EFA\u5355\u54CD\u5E94:`, err);
         }
@@ -238497,7 +238824,10 @@ var init_daemon_adapter = __esm({
         } else if (msg.type === "session_normalized_event") {
           this.confirmDelivery(msg.dispatchId, "started");
           const entry = this.pending.get(msg.dispatchId);
-          if (!entry) return;
+          if (!entry) {
+            if (this.stashEnabled) this.stashFrame(msg.dispatchId, { type: "normalized", event: msg.event });
+            return;
+          }
           if (entry.normalizedCbs.length === 0) entry.normalizedBacklog.push(msg.event);
           else for (const cb of entry.normalizedCbs) cb(msg.event);
         } else if (msg.type === "session_output") {
@@ -238630,6 +238960,7 @@ var init_daemon_adapter = __esm({
         let replayOutput;
         let replayTelemetry;
         let replayLiveEvent;
+        let replayNormalized;
         const flushReplay = () => {
           while (stashed.frames.length > 0) {
             const frame = stashed.frames[0];
@@ -238641,6 +238972,10 @@ var init_daemon_adapter = __esm({
               if (!replayTelemetry) return;
               stashed.frames.shift();
               replayTelemetry(frame.event);
+            } else if (frame.type === "normalized") {
+              if (!replayNormalized) return;
+              stashed.frames.shift();
+              replayNormalized(frame.event);
             } else {
               if (!replayLiveEvent) return;
               stashed.frames.shift();
@@ -238679,9 +239014,11 @@ var init_daemon_adapter = __esm({
           },
           ...supportsNormalizedEvents ? {
             onNormalizedProviderEvent(cb) {
-              entry.normalizedCbs.push(cb);
+              replayNormalized ??= cb;
+              flushReplay();
               const backlog = entry.normalizedBacklog.splice(0, entry.normalizedBacklog.length);
               for (const e of backlog) cb(e);
+              entry.normalizedCbs.push(cb);
             }
           } : {},
           // ADR-0093 对话追加（重挂句柄同 spawn 句柄）。
@@ -240228,7 +240565,11 @@ function rowToVariable(row) {
     ...row.expires_at ? { expiresAt: row.expires_at } : {},
     ...row.last_used_at ? { lastUsedAt: row.last_used_at } : {},
     // 展示名（存量行没有 → 不带这一格，展示侧回落成 key）。
-    ...row.name ? { name: row.name } : {}
+    ...row.name ? { name: row.name } : {},
+    // 创建者 / 创建时间 / 更新者：2026-09-10 之前的行没有 → 不带这一格，展示侧出「—」。
+    ...row.created_by ? { createdBy: row.created_by } : {},
+    ...row.created_at ? { createdAt: row.created_at } : {},
+    ...row.updated_by ? { updatedBy: row.updated_by } : {}
   };
 }
 var ident4, PostgresRegistryStore, rowToActor, rowToConfig, rowToAgentPrefs;
@@ -240399,6 +240740,9 @@ var init_postgres_registry = __esm({
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS name text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS expires_at text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS last_used_at text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS created_by text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS created_at text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS updated_by text`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_key_actor_uq"`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_scope_uq"`);
         await pool.query(`
@@ -240900,11 +241244,17 @@ var init_postgres_registry = __esm({
         await this.pool.query(
           /* `name` 走 COALESCE：**没传 = 不动**。连接器授权流程写变量时手上没有「名称」，
              普通赋值会把人在密钥表单里填的名字抹掉——同 connectors.connected_by 那条。 */
-          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at, name)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11)
+          /* created_by / created_at 走 COALESCE(**旧值**, 新值)：**第一次落行才写**，之后每次 upsert
+             都保留原值——否则「谁建的」会被最后一次改的人顶掉，这一格就没有意义了。
+             updated_by 反过来：每次都覆盖。三者与 name 的 COALESCE 方向相反，别照抄。 */
+          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at, name, created_by, created_at, updated_by)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14)
        ON CONFLICT (key, COALESCE(actor_id, ''), COALESCE(project_id, '')) DO UPDATE
          SET scope=$2, actor_id=$3, project_id=$4, connector_id=$5, overrides=$6, delivery_mode=$7, value_encrypted=$8, updated_at=$9, expires_at=$10,
-             name=COALESCE($11, ${this.s}.variables.name)`,
+             name=COALESCE($11, ${this.s}.variables.name),
+             created_by=COALESCE(${this.s}.variables.created_by, $12),
+             created_at=COALESCE(${this.s}.variables.created_at, $13),
+             updated_by=$14`,
           [
             v2.key,
             v2.scope,
@@ -240916,7 +241266,10 @@ var init_postgres_registry = __esm({
             v2.valueEncrypted,
             v2.updatedAt,
             v2.expiresAt ?? null,
-            v2.name ?? null
+            v2.name ?? null,
+            v2.createdBy ?? null,
+            v2.createdAt ?? null,
+            v2.updatedBy ?? null
           ]
         );
       }
@@ -241887,8 +242240,10 @@ var init_postgres_projects = __esm({
         content_type      text,
         source_session_id text,
         source_message_id text,
-        linked_at         timestamptz NOT NULL
+        linked_at         timestamptz NOT NULL,
+        uploaded_by       text
       )`);
+        await pool.query(`ALTER TABLE "${s2}".work_order_files ADD COLUMN IF NOT EXISTS uploaded_by text`);
         await pool.query(`CREATE INDEX IF NOT EXISTS work_order_files_wo_idx ON "${s2}".work_order_files (work_order_id)`);
         return new _PostgresArtifactStateStore(pool, schema);
       }
@@ -242164,15 +242519,19 @@ var init_postgres_projects = __esm({
         const r = await this.pool.query(`SELECT * FROM ${this.s}.workspace_bindings`);
         return r.rows.map(rowToWorkspaceBinding);
       }
+      async deleteWorkspaceBinding(workOrderId) {
+        await this.pool.query(`DELETE FROM ${this.s}.workspace_bindings WHERE work_order_id = $1`, [workOrderId]);
+      }
       /* ---------- 任务输入文件（PRD §2.6.3 建单交接；薄旁存，非 oplog） ---------- */
       async addWorkOrderFile(file) {
         await this.pool.query(
           `INSERT INTO ${this.s}.work_order_files
-         (file_id, work_order_id, name, blob_id, size, content_type, source_session_id, source_message_id, linked_at)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9)
+         (file_id, work_order_id, name, blob_id, size, content_type, source_session_id, source_message_id, linked_at, uploaded_by)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10)
        ON CONFLICT (file_id) DO UPDATE SET
          work_order_id=$2, name=$3, blob_id=$4, size=$5, content_type=$6,
-         source_session_id=$7, source_message_id=$8, linked_at=$9`,
+         source_session_id=$7, source_message_id=$8, linked_at=$9,
+         uploaded_by=COALESCE($10, ${this.s}.work_order_files.uploaded_by)`,
           [
             file.fileId,
             file.workOrderId,
@@ -242182,7 +242541,8 @@ var init_postgres_projects = __esm({
             file.contentType ?? null,
             file.sourceSessionId ?? null,
             file.sourceMessageId ?? null,
-            file.linkedAt
+            file.linkedAt,
+            file.uploadedBy ?? null
           ]
         );
       }
@@ -242374,6 +242734,7 @@ var init_postgres_projects = __esm({
       ...row.content_type !== null ? { contentType: row.content_type } : {},
       ...row.source_session_id !== null ? { sourceSessionId: row.source_session_id } : {},
       ...row.source_message_id !== null ? { sourceMessageId: row.source_message_id } : {},
+      ...row.uploaded_by !== null && row.uploaded_by !== void 0 ? { uploadedBy: row.uploaded_by } : {},
       linkedAt: iso2(row.linked_at)
     });
   }
@@ -255641,8 +256002,8 @@ var init_cutover_aware_workorder_drafts = __esm({
       async snapshotForNewRun(d, runId) {
         return (await this.pickWritable()).snapshotForNewRun(d, runId);
       }
-      async tagSession(id, s2, runId) {
-        return (await this.pickWritable()).tagSession(id, s2, runId);
+      async tagSession(id, s2, runId, expectedWorkspace) {
+        return (await this.pickWritable()).tagSession(id, s2, runId, expectedWorkspace);
       }
       async markEdited(id) {
         return (await this.pickWritable()).markEdited(id);
@@ -256613,6 +256974,7 @@ var init_src11 = __esm({
     init_sender();
     init_routes7();
     init_runtime_drift();
+    init_runtime_tenancy();
     init_types4();
     init_roles();
     init_node_store();
@@ -256664,7 +257026,7 @@ var init_src11 = __esm({
     init_connector_skills();
     init_connector_tool_versions();
     init_board_watch();
-    init_ephemeral_project();
+    init_uncategorized_project();
     init_run_settlement();
     init_reconcile_terminal_runs();
     init_run_settlement_wiring();
@@ -258176,6 +258538,9 @@ async function startServe(opts) {
   let memStoreShared;
   let isKnowledgeQueryAvailable = async (_actorId) => false;
   const actors = createActorsDomain({
+    // 租户闸（ADR-0164 §5）：`POST /api/bindings` 据它拦「把本公司员工绑到别家公司的机器上」。
+    // 闭包读当前 nodeStore（下方 PG 分支会重赋值），与 `listBindingModelIds` 同一写法。
+    resolveNodeTenancy: async (nodeId) => nodeStore.getNode(nodeId),
     store: registryStore,
     oplog,
     kernel: defaultCompanyKernel,
@@ -258244,7 +258609,10 @@ async function startServe(opts) {
     prefsStore: humanPrefsStore,
     registry: registryStore,
     actors: actors.service,
-    listRuntimes: (nodeId) => nodeStore.listRuntimes(nodeId),
+    // 默认公司那一份。**闭包求值**：`defaultCompanyId` 是 let，startup 后才被库里的真实 id 覆盖
+    // （同 :1575 那句「必须是调用时求值」）。
+    companyId: () => defaultCompanyId,
+    listRuntimes: (nodeId, scope) => nodeStore.listRuntimes(nodeId, scope),
     isPlatformAdmin: async () => false
     // 占位；controlPlaneStore 就绪后由下方 setPlatformAdminChecker 注入真判据
   });
@@ -258536,8 +258904,6 @@ async function startServe(opts) {
     getSchema: () => schema,
     registry: registryStore,
     artifactState: artifactStateStore,
-    // 决策 C：剧本建单没给 projectId 时，兜底建一个由工单派生的临时项目并绑上。
-    createProject: makeEnsureProjectFromStore(projectStateStore),
     onWarn: (m2) => console.warn(m2),
     workorderDrafts,
     buildDraftGraph: async (draft) => buildWorkorderDraftDetail(draft, await buildResolver(registryStore), buildTypeReviewerResolver(schema, await registryStore.listActors())).graph,
@@ -258559,8 +258925,12 @@ async function startServe(opts) {
           blobs: engine2.blobs,
           registry: engine2.registry ?? registryStore,
           artifactState: stores.artifacts,
-          // 兜底临时项目也要建在本公司的库里，否则绑定两端分处两个 schema。
-          createProject: makeEnsureProjectFromStore(stores.projects)
+          // 草案 store 必须按公司拿（2026-09-10 事故）：此前它是装配期捕获的共享库实例，
+          // `stage: true` 建出来的草案落大通铺、读侧却按公司解析，本公司永远查不到自己的草案。
+          // ⚠ 这个 helper 的 const 声明在本处之后，只能在**请求时**才求值的闭包里引用
+          //   （同上方 resolveChatSession 的写法），直接在装配期引用会撞 TDZ。
+          // planner 阻断项旁账**不在本次范围**，理由见 create-seeded-workorder.ts 里那段注释。
+          workorderDrafts: await workorderDraftsFor(companyId)
         };
       }
     } : {}
@@ -259716,6 +260086,7 @@ async function startServe(opts) {
     }
     return resolved;
   };
+  const listCompanyMembers = (companyId) => controlPlaneStore.listMembers(companyId ?? defaultCompanyId);
   const server = await startOasisServer({
     deployTargets,
     kernel: engine.kernel,
@@ -259871,7 +260242,9 @@ async function startServe(opts) {
               prefsStore: plane?.humanPrefs ?? humanPrefsStore,
               registry: engine2.registry,
               actors: ctx.service,
-              listRuntimes: (nodeId) => nodeStore.listRuntimes(nodeId),
+              // 这一份服务的是**请求方的公司**——助理只在这家的在线 runtime 里挑机器（ADR-0164 §5）。
+              companyId: () => cid,
+              listRuntimes: (nodeId, scope) => nodeStore.listRuntimes(nodeId, scope),
               isPlatformAdmin: async (caller) => {
                 const member = await controlPlaneStore.getMember(cid, caller);
                 return member?.role === "owner";
@@ -259961,10 +260334,20 @@ async function startServe(opts) {
         // 草案图算「类型默认审核人」用（与 /api/cmd 同源类型目录）
         roles: roleStore,
         // 诊断 f1641dd3-abdaa869：概览角色桶补「默认承接人」（读 RoleDef.defaultOwner）
+        // 真人展示名的第一顺位：本公司成员昵称压过员工档案 name（档案上那份缺省是邮箱）。
+        listMembers: listCompanyMembers,
         chatSession: chatSessionStore,
         // ADR-0086：chat 知会条目（与 readMarkers 成对）
         // ADR「多租户数据面收口」§D2：知会条目按**当前公司**取。装了路由才给（dev 文件模式沿用单实例）。
         ...chatStoreRouter ? { resolveChatSession: chatStoreFor } : {},
+        /* 委派子会话不进铃铛（发起人 2026-09-10）：专家跑完回流到父会话，父会话那条已经通知过一次。
+           判据与左侧会话列表那条路同一个读口（`listChildSessionIds`，见下面 chat-sessions 域的
+           `delegations` 接线），不另造。灰度关着 → 回空集合 = 不滤，与接入前逐字一致。 */
+        resolveDelegationChildIds: async (companyId, sessionIds) => {
+          if (!chatDelegationEnabledFromEnv() || sessionIds.length === 0) return [];
+          const ledger = await delegationStoreFor(companyId).catch(() => null);
+          return ledger ? ledger.listChildSessionIds(sessionIds) : [];
+        },
         readMarkers: readMarkerStore,
         // bundle=`inbox`：水位按当前公司取（与上面 resolveChatSession 成对）。
         ...pgPool ? { resolveReadMarkers: readMarkerStoreFor } : {},
@@ -259991,6 +260374,8 @@ async function startServe(opts) {
         // 装了路由（有 PG）就只走路由，解析不出公司一律 403，不回落默认公司。
         ...chatStoreRouter ? { resolveStore: chatStoreFor } : {},
         registry: registryStore,
+        // 缺口线署名的真人名字与 collab 读面同一口径：本公司成员昵称压过员工档案 name。
+        listMembers: listCompanyMembers,
         // ★ wo:acfee725 评审 blocker ①：两个 `/workdir/*` 读口与 files-view 段按**当前公司**解 binding，
         // 与派发、与委派回流搬产物同一处（`resolveCompanyBinding`）。上面那个 `registry` 是全局
         // store（`public.actor_bindings`），org-registry cutover 之后它是冻结旧镜像——只留给
@@ -260176,7 +260561,9 @@ async function startServe(opts) {
           listProjects: (companyId) => companyId === defaultCompanyId ? projectStateStore.listProjects() : Promise.resolve([]),
           listProjectMembers: async (companyId, projectId2) => companyId === defaultCompanyId ? (await projectStateStore.listProjectMembers(projectId2)).flatMap((member) => member.kind === "system" ? [] : [{ actorId: member.actorId, kind: member.kind, status: member.status === "active" ? "active" : "inactive" }]) : [],
           getWorkspaceBinding: (companyId, workorderId) => companyId === defaultCompanyId ? artifactStateStore.getWorkspaceBinding(workorderId) : Promise.resolve(null),
-          isEphemeralProject: (companyId, projectId2) => companyId !== defaultCompanyId || isEphemeralProject(projectId2)
+          // 非默认公司暂不支持项目级知识作用域（这里只有默认公司的 projectStateStore/名册可读），
+          // 一律降级到组织作用域。旧版这个谓词还兼着"是不是 proj_tmp_ 临时项目"，临时项目退役后只剩这一半。
+          isProjectScopeUnsupported: (companyId) => companyId !== defaultCompanyId
         },
         actor: async (actorId, organizationId) => {
           if (actorId === SYSTEM_ACTOR2) return { id: actorId, kind: "system", status: "active" };
@@ -260681,7 +261068,9 @@ async function startServe(opts) {
           }
           binding = currentBinding;
         }
-        const requireDispatchNode = (target) => {
+        const requireDispatchNode = async (target) => {
+          const foreign = foreignNodeBlock(await nodeStore.getNode(target.nodeId).catch(() => null), runCompanyId);
+          if (foreign) throw new ApiError(409, "NODE_NOT_IN_COMPANY", foreign);
           const connected = hub?.connectedDaemons().find((d) => d.daemonId === target.nodeId);
           if (!connected) {
             throw new ApiError(409, "NODE_OFFLINE", `\u7ED1\u5B9A\u8282\u70B9 ${target.nodeId} \u5F53\u524D\u4E0D\u5728\u7EBF`);
@@ -260691,7 +261080,7 @@ async function startServe(opts) {
           }
           return connected;
         };
-        let node2 = requireDispatchNode(binding);
+        let node2 = await requireDispatchNode(binding);
         if (!chatRemoteAdapter) {
           throw new ApiError(503, "NODE_GATEWAY_NOT_READY", "node-gateway \u5C1A\u672A\u5C31\u7EEA");
         }
@@ -260771,7 +261160,7 @@ async function startServe(opts) {
           }
           if (stableDispatch.target.nodeId !== binding.nodeId || stableDispatch.target.runtimeKind !== binding.runtimeKind) {
             binding = { actorId, ...stableDispatch.target, status: "active" };
-            node2 = requireDispatchNode(binding);
+            node2 = await requireDispatchNode(binding);
             requireNodeConnectors();
           }
         }
@@ -261132,6 +261521,14 @@ async function startServe(opts) {
       requestId: `project-created:${project.id}`
     }, project.id);
   });
+  const notifyChatTurnSettled = async (info) => {
+    await server.settleDelegationFromSweep(
+      info.chatSessionId,
+      `\u5B50\u4F1A\u8BDD\u8FD9\u4E00\u8F6E\u88AB\u6062\u590D\u5668\u6536\u53E3\u4E3A ${info.status}\uFF08${info.reason}\uFF09`,
+      info.companyId,
+      { outcome: info.status === "succeeded" ? "succeeded" : "failed" }
+    );
+  };
   const handshakeThrottleOpts = {};
   {
     const num3 = (name) => {
@@ -261194,10 +261591,12 @@ async function startServe(opts) {
         if (hit) return hit;
         const sessions = id === defaultCompanyId ? platformChatRecovery : PlatformChatRecoveryStore.open(pgPool, engineSchemaFor(id));
         const items = await chatItemsFor(id);
+        const turnsForRecovery = await chatTurnsFor(id).catch(() => void 0);
         const plane = {
           listRunningAssistantMessages: () => sessions.listRunningAssistantMessages(),
           chatStore: sessions,
           getTurnForRun: (sid, rid) => sessions.getTurnForRun(sid, rid),
+          ...turnsForRecovery ? { settleTurn: (turnId, patch) => turnsForRecovery.settleTurn(turnId, patch) } : {},
           ...items ? { items } : {}
         };
         chatRecoveryPlanes.set(id, plane);
@@ -261223,6 +261622,8 @@ async function startServe(opts) {
         isWired: (artifactId) => chatLiveSessions.has(`chat::${artifactId}`),
         ...opts2.stopOnFirstHit ? { stopOnFirstHit: true } : {},
         onCompanyError: chatRecoveryCompanyWarn(opts2.label),
+        // 重挂的那一轮收口时当场外报，与清扫拍同一个接收方（见 `notifyChatTurnSettled`）。
+        onTurnSettled: (info) => notifyChatTurnSettled(info),
         liveChat,
         trace: runRoutedTrace,
         traceHealth,
@@ -261493,14 +261894,12 @@ async function startServe(opts) {
          本拍是从轮次账本走的（`assistant_run_id` 一直有值），是"这一轮死没死"的权威来源。
          `companyId` 由扇出那层填好 —— 台账按公司分 store，少了它会查到默认公司的库。
          非委派会话调进去是空转：`settleFromSweep` 按 childSessionId 查不到记录就原样返回。 */
-      onTurnSettled: async ({ chatSessionId, status, reason, companyId }) => {
-        await server.settleDelegationFromSweep(
-          chatSessionId,
-          `\u5B50\u4F1A\u8BDD\u8FD9\u4E00\u8F6E\u88AB\u6062\u590D\u5668\u6536\u53E3\u4E3A ${status}\uFF08${reason}\uFF09`,
-          companyId,
-          { outcome: status === "succeeded" ? "succeeded" : "failed" }
-        );
-      },
+      /* `status` 必须带下去分流。跨重启完成的那一轮走的正是 `succeeded`：
+         `settleRound` 是派发那一刻建的闭包，serve 一重启就随老进程没了。
+         不分流的话，一条**干完活**的委派会被按时钟闭合拍成 failed。
+         接收方与重挂路**同一个**（`notifyChatTurnSettled`）——两条路一处收敛，
+         不会出现「清扫拍收的能通知、重挂收的不能」这种只在重启后显形的差异。 */
+      onTurnSettled: (info) => notifyChatTurnSettled(info),
       log: (m2) => console.log(m2),
       onCompanyError: (companyId, err) => {
         const key = companyId ?? "<default>";
@@ -262124,6 +262523,8 @@ async function startServe(opts) {
         checkDispatchable: async ({ actor, binding }) => {
           try {
             if (!binding.nodeId) return null;
+            const foreign = foreignNodeBlock(await nodeStore.getNode(binding.nodeId).catch(() => null), companyId);
+            if (foreign) return { reason: "node-not-in-company", errorMessage: foreign };
             const drift = runtimeDriftBlock(await nodeStore.listRuntimes(binding.nodeId), binding.nodeId, binding.runtimeKind);
             if (drift) return drift;
             const health = healthOfNode(binding.nodeId);
@@ -269282,6 +269683,9 @@ ${res.warning}`);
           ...expect !== void 0 ? { expectedVersion: Number(expect) } : {}
         });
         println(`\u5DF2\u8BB0\u4E0B ${rec.memId}\uFF08v${rec.version}\uFF0C${rec.projectId === null ? "actor \u7EA7\xB7\u8DE8\u9879\u76EE\u901A\u7528" : `\u9879\u76EE ${rec.projectId}`}\uFF09`);
+        if ((flags.get("scope") ?? "actor") === "project" && rec.projectId === null) {
+          println("  \u24D8 \u672C\u8F6E\u89E3\u6790\u4E0D\u51FA\u6240\u5C5E\u9879\u76EE\uFF08\u8FD9\u5F20\u4EFB\u52A1\u6CA1\u6302\u9879\u76EE\uFF09\uFF0C\u5DF2\u6309 actor \u7EA7\u8BB0\u4E0B\u2014\u2014\u60F3\u8BA9\u5B83\u843D\u5230\u9879\u76EE\u540D\u4E0B\uFF0C\u5148\u7ED9\u4EFB\u52A1\u6307\u5B9A\u9879\u76EE\u3002");
+        }
       } catch (err) {
         const body2 = err instanceof ApiRequestError ? err.body : void 0;
         if (body2?.current) {
@@ -270840,7 +271244,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.10" : "dev";
+var PKG_VERSION = true ? "2.2.12" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;