oasis_test_v2 2.2.12 → 2.2.14

package/dist/index.js

@@ -201815,6 +201815,15 @@ var init_provision = __esm({
 });
 
 // ../connectors/src/prepare-job.ts
+function loginShellShadow(commandName) {
+  const home2 = process.env["HOME"];
+  if (!home2) return "";
+  for (const dir of [(0, import_node_path17.join)(home2, ".local", "bin"), (0, import_node_path17.join)(home2, "bin")]) {
+    const candidate = (0, import_node_path17.join)(dir, commandName);
+    if ((0, import_node_fs11.existsSync)(candidate)) return candidate;
+  }
+  return "";
+}
 async function prepareConnectorsForJob(job, deps) {
   const creds = job.connectorCreds ?? [];
   const remoteWrappers = job.wrapperPaths ?? [];
@@ -201850,7 +201859,16 @@ async function prepareConnectorsForJob(job, deps) {
         localWrappers.push(staged);
         status.wrapperReady = true;
       }
-      log("[node-connectors]", `${slug6}: creds + wrapper \u5DF2\u843D\u5728\u672C\u673A`);
+      const shadow = loginShellShadow(connector.commandName);
+      if (shadow) {
+        status.shadowedBy = shadow;
+        log(
+          "[node-connectors]",
+          `\u26A0 ${slug6}: creds + wrapper \u5DF2\u843D\u5728\u672C\u673A\uFF0C\u4F46 **${shadow} \u4F1A\u5728\u767B\u5F55 shell \u91CC\u6321\u4F4F wrapper**\u2014\u2014Ubuntu \u7684 ~/.profile \u628A $HOME/.local/bin \u524D\u7F6E\u5230 PATH \u6700\u524D\u3002agent \u4E00\u65E6\u7528 \`bash -lc\` \u8C03 ${connector.commandName}\uFF0C\u8D70\u5230\u7684\u662F\u90A3\u4E2A\u5BBF\u4E3B\u526F\u672C\u3001\u914D\u7F6E\u76EE\u5F55\u53C8\u88AB\u9694\u79BB\u6210\u7A7A\u7684\uFF0C\u7ED3\u679C\u5C31\u662F\u300C\u672A\u914D\u7F6E\u300D\u3002\u5904\u7406\u529E\u6CD5\uFF1A\u5220\u6389 ${shadow}\uFF08\u8FDE\u63A5\u5668\u81EA\u5E26\u7684\u771F CLI \u5728 ~/.oasis/connector-tools/bin \u4E0B\uFF0C\u4E0D\u53D7\u5F71\u54CD\uFF09\u3002`
+        );
+      } else {
+        log("[node-connectors]", `${slug6}: creds + wrapper \u5DF2\u843D\u5728\u672C\u673A`);
+      }
     } catch (err) {
       status.error = String(err);
       log(
@@ -203664,6 +203682,14 @@ async function runView(kernel, oplog, engineStore, blobs, name, artifactId, para
       throw new Error(`\u672A\u77E5\u89C6\u56FE: ${name}`);
   }
 }
+function resolveListenTarget(env, pid, port) {
+  const count2 = Number(env["LISTEN_FDS"] ?? "0");
+  const listenPid = env["LISTEN_PID"];
+  if (Number.isFinite(count2) && count2 >= 1 && (!listenPid || listenPid === String(pid))) {
+    return { fd: 3 };
+  }
+  return { port: port ?? 0, host: "0.0.0.0" };
+}
 async function startOasisServer(opts) {
   const resolveActor = opts.resolveActor ?? defaultResolveActor;
   const defaultDraftPlannerIssuesStore = new MemoryWorkorderDraftPlannerIssuesStore();
@@ -206756,6 +206782,52 @@ ${composed}`;
           }
           return;
         }
+        if (url.pathname.startsWith("/api/connectors/") && /\/auth\/(begin|rollback|commit)$/.test(url.pathname) && req.method === "POST") {
+          const m2 = url.pathname.match(/^\/api\/connectors\/([^/]+)\/auth\/(begin|rollback|commit)$/);
+          try {
+            if (!m2) throw new Error("bad path");
+            const connectorId = decodeURIComponent(m2[1]);
+            const op = m2[2];
+            const { actorId } = JSON.parse(rawBody || "{}");
+            if (!actorId) {
+              res.writeHead(400).end(JSON.stringify({ error: "actorId required" }));
+              return;
+            }
+            const svc = await connectorActorsService();
+            if (!svc) throw new Error("actors service unavailable");
+            const cacheKey = `${currentCompanyId ?? ""}::${actorId}::${connectorId}`;
+            const now = Date.now();
+            for (const [k2, v2] of connectorAuthSnapshots) {
+              if (now - v2.at > CONNECTOR_AUTH_SNAPSHOT_TTL_MS) connectorAuthSnapshots.delete(k2);
+            }
+            if (op === "begin") {
+              const rows = await svc.snapshotActorConnectorVars(actorId, connectorId);
+              connectorAuthSnapshots.set(cacheKey, { rows, at: now });
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, snapshot: rows.length }));
+              return;
+            }
+            if (op === "commit") {
+              connectorAuthSnapshots.delete(cacheKey);
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true }));
+              return;
+            }
+            const snap = connectorAuthSnapshots.get(cacheKey);
+            if (!snap) {
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: false, reason: "no_snapshot" }));
+              return;
+            }
+            const out = await svc.restoreActorConnectorVars(
+              actorId,
+              connectorId,
+              snap.rows
+            );
+            connectorAuthSnapshots.delete(cacheKey);
+            res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, ...out }));
+          } catch (e) {
+            res.writeHead(500).end(JSON.stringify({ error: String(e) }));
+          }
+          return;
+        }
         if (req.method === "POST" && /^\/api\/connectors\/[^/]+\/disconnect$/.test(url.pathname)) {
           const connId = decodeURIComponent(url.pathname.split("/")[3] ?? "");
           const svc = await connectorActorsService();
@@ -207193,7 +207265,7 @@ ${composed}`;
                 grantedFrom = "installation";
               }
             }
-            const missing = missingAppPermissions(effective);
+            const missing = missingAppPermissions({ ...meta.permissions, ...effective });
             const requestedAll = Object.entries(meta.permissions).filter(([, level]) => Boolean(level)).map(([key, level]) => ({ key, level: String(level) })).sort((a, b2) => a.key.localeCompare(b2.key));
             const grantedKeys = new Set(
               Object.entries(effective).filter(([, level]) => Boolean(level)).map(([k2]) => k2)
@@ -207218,13 +207290,19 @@ ${composed}`;
                */
               otherInstallations: installs.filter((i) => i.installationId !== installationId).map((i) => ({ account: i.account, count: Object.keys(i.permissions).length })),
               /**
-               * App 申请了、但**这一处安装铸出来的 token 里没有**。
-               * **在全集上做差**，不再只看本仓必需的那八项（否则人另外勾的永远报不出来）。
-               *
-               * ⚠ 差集只说明「这一处安装现在给不了」，不等于「人没批」——同一个 App 装多处时
-               * 批准是逐处的（见 `otherInstallations`）。界面别把这层推断说死。
+               * ⚠ 保留只为**兼容老前端**（新卡片不再读它）：新口径不分「已授权 / 申请中」，
+               * 见 `detected`。这一格哪天确认没有旧客户端在读了就可以删。
                */
               awaitingApproval: requestedAll.filter((r) => !grantedKeys.has(r.key)).map((r) => r.key),
+              /**
+               * **检测到的全部权限**（App 申请的 ∪ 真拿得到的），英文原名 + 级别，按名排序。
+               * 界面就照这一份平铺成一排 chip，不分组、不计数、不解释审批状态。
+               */
+              detected: [.../* @__PURE__ */ new Set([...requestedAll.map((r) => r.key), ...grantedKeys])].sort((a, b2) => a.localeCompare(b2)).map((key) => ({
+                key,
+                // 真给的级别优先；只在 App 侧见过的才回落成它申请的级别。
+                level: String(effective[key] ?? meta.permissions[key] ?? "")
+              })),
               /**
                * agent **真正拿得到**的全部权限（优先读 token 自己的权限位），一律用 GitHub 的英文原名 + 级别
                * （2026-09-10 发起人：「所有权限都用英文原文，不区分是不是八项权限」）。
@@ -207630,7 +207708,7 @@ ${composed}`;
   });
   httpServer.keepAliveTimeout = 65e3;
   httpServer.headersTimeout = 66e3;
-  await new Promise((resolve10) => httpServer.listen(opts.port ?? 0, "0.0.0.0", resolve10));
+  await new Promise((resolve10) => httpServer.listen(resolveListenTarget(process.env, process.pid, opts.port), resolve10));
   const address = httpServer.address();
   if (address === null || typeof address === "string") throw new Error("listen failed");
   const baseUrl = `http://127.0.0.1:${address.port}`;
@@ -207649,19 +207727,46 @@ ${composed}`;
      * 委派域没装配时返回 null，调用方照常。
      */
     settleDelegationFromSweep: (childSessionId, reason, companyId, opts2) => delegationService?.settleFromSweep(childSessionId, reason, companyId, opts2) ?? Promise.resolve(null),
-    close: async () => {
+    /**
+     * @param opts.drainMs **优雅停机预算**（毫秒）。缺省 0 = 老行为：立刻掐断所有连接后关闭。
+     *
+     *   给了预算就改成「排空」：先 `close()` 停收新连接、`closeIdleConnections()` 放掉空闲的
+     *   keep-alive，**在途请求让它跑完**；预算到点还没走完的（SSE 这类长连接本来就不会自己结束）
+     *   再 `closeAllConnections()` 强断。前端的流有重连（`hydrateAndAttach`），被强断能自愈；
+     *   普通请求跑到一半被掐则是实打实的失败，所以要给它们这几百毫秒。
+     *
+     *   生产上这条由 `oasis serve` 的 SIGTERM 处理器传（见 cli.ts）——现在 systemd 是硬杀
+     *   （journal: `code=exited, status=143`），在途请求当场断。
+     */
+    close: async (opts2) => {
       if (broadcastTimer) clearInterval(broadcastTimer);
       if (pendingSystemNoticesRecoveryTimer) clearInterval(pendingSystemNoticesRecoveryTimer);
       await knowledgeDomain?.close();
       channelWsSupervisor?.stop();
+      const drainMs = opts2?.drainMs ?? 0;
       await new Promise((resolve10, reject) => {
-        httpServer.closeAllConnections();
-        httpServer.close((err) => err ? reject(err) : resolve10());
+        let sweep;
+        let force;
+        httpServer.close((err) => {
+          if (sweep) clearInterval(sweep);
+          if (force) clearTimeout(force);
+          if (err) reject(err);
+          else resolve10();
+        });
+        if (drainMs > 0) {
+          httpServer.closeIdleConnections();
+          sweep = setInterval(() => httpServer.closeIdleConnections(), 100);
+          sweep.unref?.();
+          force = setTimeout(() => httpServer.closeAllConnections(), drainMs);
+          force.unref?.();
+        } else {
+          httpServer.closeAllConnections();
+        }
       });
     }
   };
 }
-var http, import_node_crypto37, githubAppPending, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
+var http, import_node_crypto37, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
@@ -207719,6 +207824,8 @@ var init_server3 = __esm({
     init_src8();
     init_continuation();
     githubAppPending = new PendingAppCreations();
+    connectorAuthSnapshots = /* @__PURE__ */ new Map();
+    CONNECTOR_AUTH_SNAPSHOT_TTL_MS = 30 * 60 * 1e3;
     defaultResolveActor = (token) => token.startsWith("token:") ? token.slice("token:".length) : null;
     enc = (s2) => new TextEncoder().encode(s2);
     CHAT_OUTPUT_LIMIT = 16e3;
@@ -210765,6 +210872,18 @@ var init_projection = __esm({
 function isUncategorizedProjectId(projectId2) {
   return projectId2 === UNCATEGORIZED_PROJECT_ID;
 }
+function latestUncategorizedActivityAt(candidates) {
+  let bestIso = UNCATEGORIZED_UNKNOWN_TIME;
+  let bestMs = Date.parse(UNCATEGORIZED_UNKNOWN_TIME);
+  for (const iso6 of candidates) {
+    if (!iso6) continue;
+    const ms = Date.parse(iso6);
+    if (Number.isNaN(ms) || ms <= bestMs) continue;
+    bestMs = ms;
+    bestIso = iso6;
+  }
+  return bestIso;
+}
 async function bindWorkorderProject(deps) {
   const { workOrderId, projectId: projectId2 } = deps;
   if (!projectId2) return null;
@@ -211400,6 +211519,10 @@ var init_service4 = __esm({
       async buildUncategorizedProject() {
         const workorders = await this.listProjectWorkorders(UNCATEGORIZED_PROJECT_ID);
         const artifactList = await this.aggregateUncategorizedArtifacts();
+        const updatedAt = latestUncategorizedActivityAt([
+          ...workorders.map((workorder) => workorder.updatedAt),
+          ...artifactList.artifacts.map((artifact) => artifact.updatedAt)
+        ]);
         return {
           id: UNCATEGORIZED_PROJECT_ID,
           name: UNCATEGORIZED_PROJECT_NAME,
@@ -211412,7 +211535,7 @@ var init_service4 = __esm({
           // 出 null 保持「取不到就 null」的域内红线，也不把一个不存在的 actor id 塞进契约。
           createdBy: null,
           createdAt: UNCATEGORIZED_UNKNOWN_TIME,
-          updatedAt: UNCATEGORIZED_UNKNOWN_TIME
+          updatedAt
         };
       }
       async aggregateUncategorizedArtifacts() {
@@ -219564,6 +219687,46 @@ ${input.description}
       listActorConnectorConnections(actorId) {
         return this.opts.store.listActorConnectorConnections(actorId);
       }
+      /**
+       * 授权流程**开始前**给这名员工在这个连接器下的全部个人变量拍一张快照（原样密文，不解密）。
+       *
+       * 为什么需要它（2026-09-10 发起人：「如果本身已经有连接器身份，如果重新连接没走完，
+       * 则保留原身份不覆盖，之前重连到一半把原来的身份覆盖了」）：
+       * 「重新连接」是**边走边落库**的——飞书在「创建应用」那一步就把 `FEISHU_APP_ID` /
+       * `FEISHU_APP_SECRET` 覆盖掉了，GitHub 在 manifest 回调那一步就把 `GITHUB_APP_*` 覆盖掉了，
+       * 而这两步都在「用户完成授权」**之前**。人中途关掉弹窗，旧身份就已经没了。
+       *
+       * 前端此前的回滚只删「这次新增的键」（基线差集），**对已存在的键无能为力**——它拿不到旧值
+       * （读侧永远只给掩码）。所以快照必须在服务端拍、也在服务端写回。
+       */
+      async snapshotActorConnectorVars(actorId, connectorId) {
+        const rows = await this.opts.store.listVariables(actorId);
+        return rows.filter((v2) => v2.scope === "personal" && v2.actorId === actorId && v2.connectorId === connectorId);
+      }
+      /**
+       * 把快照原样写回：**快照里有的恢复旧值，快照之后新冒出来的键删掉**。
+       *
+       * 密文原样搬运，不经解密再加密——少一次明文落到内存里，也不受密钥轮换影响。
+       * 返回改了几行，调用方好把「回滚做了什么」如实说出来（回滚静默是上一版的毛病）。
+       */
+      async restoreActorConnectorVars(actorId, connectorId, snapshot) {
+        const keep = new Map(snapshot.map((r) => [r.key, r]));
+        const now = await this.snapshotActorConnectorVars(actorId, connectorId);
+        let removed = 0;
+        for (const row of now) {
+          if (keep.has(row.key)) continue;
+          await this.deleteVariable(row.key, actorId);
+          removed += 1;
+        }
+        let restored = 0;
+        for (const row of keep.values()) {
+          const current = now.find((r) => r.key === row.key);
+          if (current && current.valueEncrypted === row.valueEncrypted) continue;
+          await this.opts.store.putVariable({ ...row, updatedAt: this.now() });
+          restored += 1;
+        }
+        return { restored, removed };
+      }
       /**
        * 员工连接器面板所需状态：连接记录 + 组织级已连接集合 + 该员工已授权（有个人 connector 变量）集合。
        * 前端据此算每个 connector 的 hasRecord / 有效 enabled / connected（actor 或 global）。
@@ -223250,8 +223413,12 @@ function toApiProject(project) {
     //   - 取不到创建人 → `null`（老的手建项目 / 无分类虚拟卡），前端显示「—」；
     //   - 有 id 但名册解析不到 → 对象在、`name`/`avatar` 为 `null`（**不回落 id 尾段**）。
     created_by: project.createdBy ? toApiProjectActorRef(project.createdBy) : null,
-    // 空桶哨兵（`UNCATEGORIZED_UNKNOWN_TIME`）→ `null`：无分类项目桶为空时**无可派生时间**，
-    // 前端见 null 显示「—」而不是一串远古时间；真项目/非空桶不受影响。
+    // 「时间不可知」哨兵（`UNCATEGORIZED_UNKNOWN_TIME`）→ `null`，前端见 null 显示「—」而不是
+    // 一串远古时间。**只有无分类虚拟卡会命中**，真项目不受影响（建项目时两个字段都写真时间戳）。
+    // 命中的两种情形（2026-09-10 起）：
+    //   · `created_at`：恒命中——桶不存在「被创建」这回事；
+    //   · `updated_at`：只在桶里空无一物时命中；桶里有工单/产物时是真时间（见 service.ts
+    //     `buildUncategorizedProject` 与 `latestUncategorizedActivityAt`）。
     created_at: project.createdAt === UNCATEGORIZED_UNKNOWN_TIME ? null : project.createdAt,
     updated_at: project.updatedAt === UNCATEGORIZED_UNKNOWN_TIME ? null : project.updatedAt
   };
@@ -234744,6 +234911,12 @@ function payloadStr(payload, key) {
   }
   return "";
 }
+function workorderGoal(title, prefix, suffix) {
+  const subject = Array.from(title.replace(/\s+/g, " ").trim());
+  const budget = 50 - Array.from(prefix + suffix).length;
+  const shortTitle = subject.length > budget ? `${subject.slice(0, budget - 1).join("")}\u2026` : subject.join("");
+  return `${prefix}${shortTitle}${suffix}`;
+}
 function buildPlan(structure, title, ctx, opts = {}) {
   const nodeOwners = payloadNodeOwners(ctx.payload);
   const nodeReviewers = payloadNodeReviewers(ctx.payload);
@@ -234803,9 +234976,7 @@ function bugFixResolve(ctx) {
     artifactType: "diagnosis",
     title,
     brief,
-    // goal 用标题兜底：弹窗不再单列「工单目标」（实测无任何消费方读它、让用户填两遍纯属白填），
-    // 但字段本身在内核里有设计意图（workorderSpec 读它），故填上而非留空。
-    goal: title,
+    goal: workorderGoal(title, "\u4FEE\u590D\u300C", "\u300D\uFF0C\u9A8C\u8BC1\u6240\u62A5\u73B0\u8C61\u4E0D\u518D\u51FA\u73B0\u3002"),
     ...manager ? { manager } : {},
     acceptanceCriteria: ["\u6309\u63CF\u8FF0\u91CC\u7684\u590D\u73B0\u65B9\u5F0F\u9A8C\u8BC1\uFF1A\u6240\u62A5\u73B0\u8C61\u4E0D\u518D\u51FA\u73B0", "\u6539\u52A8\u6CA1\u6709\u660E\u663E\u6253\u574F\u76F4\u63A5\u76F8\u90BB\u7684\u8DEF\u5F84"],
     plan
@@ -234836,7 +235007,7 @@ function adoptExternalResolve(ctx) {
     artifactType: "research",
     title,
     brief,
-    goal: title,
+    goal: workorderGoal(title, "\u56F4\u7ED5\u300C", "\u300D\u501F\u9274\u5916\u90E8\u65B9\u6848\uFF0C\u5B8C\u6210\u843D\u5730\u5E76\u9A8C\u8BC1\u6548\u679C\u3002"),
     ...manager ? { manager } : {},
     acceptanceCriteria: [
       "\u843D\u5730\u65B9\u6848\u9010\u6761\u8BF4\u660E\u4E86\u4E3A\u4EC0\u4E48\u4E0D\u76F4\u63A5\u91C7\u7528\u5DF2\u77E5\u89E3\u6CD5\uFF0C\u5E76\u5199\u660E\u6211\u4EEC\u65B9\u6848\u7684\u4EE3\u4EF7",
@@ -234867,7 +235038,7 @@ function simpleTaskResolve(ctx) {
     artifactType: "research",
     title,
     brief,
-    goal: title,
+    goal: workorderGoal(title, "\u5B8C\u6210\u300C", "\u300D\uFF0C\u4EA4\u4ED8\u53D1\u8D77\u4EBA\u53EF\u76F4\u63A5\u4F7F\u7528\u7684\u7ED3\u679C\u3002"),
     ...manager ? { manager } : {},
     plan
   };
@@ -263976,7 +264147,8 @@ ${nodeFault}` : "");
     baseUrl: server.baseUrl,
     operatorToken,
     __coordinatorSpawnProbe: coordinatorSpawnProbe,
-    close: async () => {
+    /** @param opts.drainMs 优雅停机排空预算，原样透传给 HTTP 层（见 server.ts 的 close）。缺省 = 老行为。 */
+    close: async (opts2) => {
       for (const timer of dispatchTimers) clearInterval(timer);
       clearInterval(slaTimer);
       escalationDeliveryWorker.stop();
@@ -263995,7 +264167,7 @@ ${nodeFault}` : "");
       if (boardWatchTimer) clearInterval(boardWatchTimer);
       clearInterval(serverHeartbeatTimer);
       hub?.close();
-      await server.close();
+      await server.close(opts2 ?? {});
       if (pgPool) await pgPool.end().catch(() => {
       });
       releaseServeLock(lock);
@@ -268214,9 +268386,25 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     println(`oasis serve \u5C31\u7EEA\uFF1Ahttp://0.0.0.0:${port2}\uFF08\u672C\u673A\u8BBF\u95EE\u7528 http://127.0.0.1:${port2}\uFF09`);
     println(`operator token \u5DF2\u5199\u5165 ${path35.join(dir, "operator-token")}\uFF08\u672C\u673A CLI \u81EA\u52A8\u8BFB\u53D6\uFF09`);
     if (flags.get("dispatch") === "true") println(`\u8C03\u5EA6\u5FAA\u73AF\u5DF2\u542F\u52A8\uFF08claude-code adapter\uFF09`);
-    await new Promise(() => {
+    const drainMs = Number(process.env["OASIS_SHUTDOWN_DRAIN_MS"] ?? "3000");
+    const shutdownBudgetMs = drainMs + 5e3;
+    await new Promise((resolve10) => {
+      let stopping = false;
+      const stop = (signal) => {
+        if (stopping) return;
+        stopping = true;
+        println(`[serve] \u6536\u5230 ${signal}\uFF0C\u5F00\u59CB\u4F18\u96C5\u505C\u673A\uFF08\u6392\u7A7A\u9884\u7B97 ${drainMs}ms\uFF09\u2026`);
+        const hardExit = setTimeout(() => {
+          println(`[serve] \u505C\u673A\u603B\u9884\u7B97 ${shutdownBudgetMs}ms \u7528\u5C3D\uFF0C\u5F3A\u5236\u9000\u51FA`);
+          process.exit(0);
+        }, shutdownBudgetMs);
+        hardExit.unref?.();
+        void handle.close({ drainMs }).then(() => println("[serve] \u5DF2\u4F18\u96C5\u505C\u673A")).catch((err) => println(`[serve] \u505C\u673A\u8FC7\u7A0B\u51FA\u9519\uFF08\u7167\u5E38\u9000\u51FA\uFF09\uFF1A${String(err)}`)).finally(() => resolve10());
+      };
+      process.once("SIGTERM", () => stop("SIGTERM"));
+      process.once("SIGINT", () => stop("SIGINT"));
     });
-    return;
+    process.exit(0);
   }
   const base = flags.get("server") ?? process.env["OASIS_SERVER"] ?? "http://127.0.0.1:7320";
   const tokenFile = path35.join(dir, "operator-token");
@@ -271244,7 +271432,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.12" : "dev";
+var PKG_VERSION = true ? "2.2.14" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis_test_v2",
-  "version": "2.2.12",
+  "version": "2.2.14",
   "description": "Oasis node daemon + CLI — background daemon, auto-start, full server CLI",
   "bin": {
     "oasis": "./dist/index.js"
@@ -26,6 +26,6 @@
     "node": ">=20"
   },
   "oasisRelease": {
-    "sourceHead": "ae18ecf5995f37b7a3f14b601e3a87c21d91ab03"
+    "sourceHead": "c6b9e871786ca57b2d1b01293c368ed043db700f"
   }
 }