oasis_test_v2 2.2.15 → 2.2.17

package/dist/index.js

@@ -25452,7 +25452,9 @@ var init_codex = __esm({
         const reasoningEffort = this.opts.reasoningEffort;
         return runProtocolSession(job, {
           bin: this.opts.codexBin ?? "codex",
-          args: ["app-server", "--stdio"],
+          // 同 exec 那条路：关掉登录 shell，否则 `~/.profile` 会把 `$HOME/.local/bin` 前置到
+          // PATH 最前，压过注入的连接器 wrapper（理由与实证见 exec 分支里那段长注释）。
+          args: ["app-server", "--stdio", "-c", "allow_login_shell=false"],
           extraArgs: this.opts.extraArgs,
           blockedFlags: CODEX_APP_SERVER_BLOCKED_FLAGS,
           workRoot: this.opts.workRoot,
@@ -25633,6 +25635,24 @@ ${task}` : task;
           // 打开 reasoning 摘要通道：默认 auto，让 codex 产出 reasoning item（→ thought → 前端思考块）。
           ...this.opts.reasoningSummary !== "none" ? ["-c", `model_reasoning_summary=${this.opts.reasoningSummary ?? "auto"}`] : [],
           ...this.opts.reasoningEffort ? ["-c", `model_reasoning_effort=${this.opts.reasoningEffort}`] : [],
+          /* ★ 关掉登录 shell（2026-09-11）。
+                   codex 的 shell 工具默认把每条命令丢进 `/bin/bash -lc`——本机 codex 自己的
+                   thread_history 里逐字记着 `"command":"/bin/bash -lc \"pwd && rg …"`。
+                   登录 shell 会重跑 `~/.profile`，而 Ubuntu 的 profile 里是
+                   `PATH="$HOME/.local/bin:$PATH"`（**前置**）；于是任何装在 `~/.local/bin` 的同名 CLI
+                   都会抢到注入的连接器 wrapper 前面。实测后果：飞书连接器凭据、连接记录全对，
+                   dev-agent（codex）跑 `lark-cli whoami` 却回 `not_configured`——wrapper 被绕过、
+                   而隔离键 `LARKSUITE_CLI_CONFIG_DIR` 照旧生效指着空目录，两头落空。
+                   同机同用户的 claude-code agent 一切正常，差别只有这一个 `-l`。
+          
+                   `allow_login_shell` 是 codex 的正式配置键（本机实测：给它传整数会报
+                   `invalid type: integer, expected a boolean in \`allow_login_shell\``，
+                   而不存在的键是被静默忽略的），exec 与 app-server 两条路都吃 `-c` 覆盖。
+          
+                   ⚠ 未验证的一格：这个键**是否真的**就是那个 `-l` 的开关，只能等下一次
+                   codex 派单后在节点上 `ps` 看是 `bash -lc` 还是 `bash -c`。设错了是 no-op，不会更坏。 */
+          "-c",
+          "allow_login_shell=false",
           // ADR「agent CLI 启动参数员工级可配置化」：员工配置 job.extraArgs（在前）+ opts.extraArgs（静态默认，在后），
           // 过 CODEX_BLOCKED_FLAGS 拦截。追加在**位置 prompt 之前**（codex exec 的 [PROMPT] 必须是末位参数）。
           ...prepareExtraArgs(
@@ -28663,7 +28683,7 @@ function projectsIntoContent(kind, role, origin, telemetryTextInContent) {
       return true;
   }
 }
-var import_node_crypto15, CHAT_ITEMS_DOUBLE_WRITE_ENV, ChatItemLedger;
+var import_node_crypto15, CHAT_ITEMS_DOUBLE_WRITE_ENV, SEGMENT_END_NOTE, ChatItemLedger;
 var init_chat_item_ledger = __esm({
   "../server/src/chat-item-ledger.ts"() {
     "use strict";
@@ -28671,6 +28691,7 @@ var init_chat_item_ledger = __esm({
     init_chat_item();
     import_node_crypto15 = require("node:crypto");
     CHAT_ITEMS_DOUBLE_WRITE_ENV = "OASIS_CHAT_ITEMS_DOUBLE_WRITE";
+    SEGMENT_END_NOTE = "\u672C\u6BB5\u65E0\u8F93\u51FA\uFF08\u4EBA\u5728\u9996\u4E2A\u6B63\u6587\u4E4B\u524D\u63D2\u4E86\u8BDD\uFF09";
     ChatItemLedger = class {
       constructor(deps) {
         this.deps = deps;
@@ -28699,6 +28720,8 @@ var init_chat_item_ledger = __esm({
       log;
       persistEnabled;
       telemetryTextInContent;
+      /** 本段的「无输出」注解已经提前落过（`closeSegmentBeforeUserInput`），`beginSegment` 别再落一条。 */
+      segmentEndEmitted = false;
       /** **不变量 1**：`providerItemKey → itemId`，本账本唯一持有。切段/收尾清空。 */
       itemKeyMap = /* @__PURE__ */ new Map();
       /** 内存账本：itemId → 行。插入顺序即 seq 顺序。 */
@@ -28916,19 +28939,11 @@ var init_chat_item_ledger = __esm({
        * 映射一并清空——新段是新行，复用旧 itemId 会把新文本写进上一条消息。
        */
       beginSegment() {
-        this.closeStreamingRows("completed");
-        if (this.segmentItemCount === 0 && this.messageId) {
-          this.insert({
-            kind: "control",
-            role: "assistant",
-            status: "completed",
-            origin: "server",
-            text: "",
-            attrs: {},
-            inContent: false,
-            persist: true,
-            payload: { code: "segment_end", note: "\u672C\u6BB5\u65E0\u8F93\u51FA\uFF08\u4EBA\u5728\u9996\u4E2A\u6B63\u6587\u4E4B\u524D\u63D2\u4E86\u8BDD\uFF09" }
-          });
+        if (this.segmentEndEmitted) {
+          this.segmentEndEmitted = false;
+        } else {
+          this.closeStreamingRows("completed");
+          if (this.segmentItemCount === 0 && this.messageId) this.insertSegmentEnd();
         }
         this.itemKeyMap.clear();
         this.lastTurnId = null;
@@ -28936,6 +28951,41 @@ var init_chat_item_ledger = __esm({
         this.segment += 1;
         this.segmentItemCount = 0;
       }
+      /**
+       * 人插话时，先把「这一段到此为止」落定；**必须在那条 user 行之前调用**。
+       *
+       * 展示序（`ord`）由落库那一刻的表级序列派，所以**谁先落库谁在上面**。此前这条注解跟在
+       * `beginSegment()` 里、而 `beginSegment` 由 `onUserInput` 回调在 user 行之后触发，于是
+       * 「本段无输出」排到了人说的那句话**下面**——发起人 2026-09-11 的现场（会话 `eca44da4`：
+       * user 行 ord 8503、注解 ord 8504）。他要的顺序是：开启这一轮的那条消息 → agent 头像块
+       * （里面就是这条注解）→ 人插的那句话 → agent 接着说。
+       *
+       * 返回落下的那一行（`null` = 本段有输出、或还没有 assistant 行可归属，不需要注解），
+       * 调用方据它把这条推上 v3 流——不推的话它只在下一次快照才出现。
+       */
+      closeSegmentBeforeUserInput() {
+        this.closeStreamingRows("completed");
+        if (this.segmentEndEmitted) return null;
+        if (this.segmentItemCount !== 0 || !this.messageId) return null;
+        const id = this.insertSegmentEnd();
+        this.segmentEndEmitted = true;
+        const row = this.rows.get(id);
+        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord };
+      }
+      /** 零输出段兜底（S1 评审 B1）：那条 assistant 行库里已经在了，一条 item 都没有会被对账抓成假红。 */
+      insertSegmentEnd() {
+        return this.insert({
+          kind: "control",
+          role: "assistant",
+          status: "completed",
+          origin: "server",
+          text: "",
+          attrs: {},
+          inContent: false,
+          persist: true,
+          payload: { code: "segment_end", note: SEGMENT_END_NOTE }
+        });
+      }
       /** 行落库了，把本段还挂着 NULL 的 assistant item 认领回去，并让后续 item 直接带上它。 */
       bindMessage(messageId) {
         this.messageId = messageId;
@@ -51348,7 +51398,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes13, createHash: createHash37 } = require("crypto");
+    var { randomBytes: randomBytes13, createHash: createHash38 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -52016,7 +52066,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash37("sha1").update(key + GUID).digest("base64");
+        const digest = createHash38("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -52385,7 +52435,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter = require("events");
     var http2 = require("http");
     var { Duplex } = require("stream");
-    var { createHash: createHash37 } = require("crypto");
+    var { createHash: createHash38 } = require("crypto");
     var extension3 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -52692,7 +52742,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash37("sha1").update(key + GUID).digest("base64");
+        const digest = createHash38("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -159847,6 +159897,7 @@ var DEFAULT_BUFFER_MAX, DEFAULT_GRACE_MS, DEFAULT_LIVE_COALESCE_MS, DEFAULT_LIVE
 var init_live_chat = __esm({
   "../server/src/live-chat.ts"() {
     "use strict";
+    init_chat_item_ledger();
     DEFAULT_BUFFER_MAX = 4e3;
     DEFAULT_GRACE_MS = 6e4;
     DEFAULT_LIVE_COALESCE_MS = 24;
@@ -160593,6 +160644,24 @@ var init_live_chat = __esm({
           text: shown,
           ...opts?.attachments?.length ? { attachments: opts.attachments } : {}
         };
+        const segmentEnd = (() => {
+          try {
+            return turn.items?.closeSegmentBeforeUserInput() ?? null;
+          } catch {
+            return null;
+          }
+        })();
+        if (segmentEnd) {
+          this.publishServerItem(turn, {
+            itemId: segmentEnd.itemId,
+            itemType: "control",
+            startedVersion: segmentEnd.startedVersion,
+            version: segmentEnd.version,
+            ord: segmentEnd.ord,
+            status: "completed",
+            payload: { code: "segment_end", note: SEGMENT_END_NOTE }
+          });
+        }
         try {
           turn.items?.recordUserInput(shown, opts?.attachments, opts?.clientKeys);
         } catch {
@@ -197867,41 +197936,6 @@ function stageConnectorWrapper(connector) {
   stagedBinDirs.set(cacheKey, binDir);
   return link;
 }
-function clearLoginShellShadow(connector) {
-  const commandName = connector.commandName;
-  if (!commandName) return [];
-  const home2 = process.env["HOME"] ?? (0, import_node_os3.homedir)();
-  if (!home2) return [];
-  const moved = [];
-  for (const parts of LOGIN_SHELL_FRONT_DIRS) {
-    const dir = (0, import_node_path9.join)(home2, ...parts);
-    if (!(0, import_node_fs8.existsSync)(dir)) continue;
-    const target = (0, import_node_path9.join)(dir, commandName);
-    try {
-      (0, import_node_fs8.lstatSync)(target);
-    } catch {
-      continue;
-    }
-    if (isOasisWrapperPath(target)) continue;
-    const backup = (0, import_node_path9.join)(dir, `${commandName}${DISPLACED_SUFFIX}`);
-    const dest = (0, import_node_fs8.existsSync)(backup) || safeLstat(backup) ? `${backup}.${Date.now()}` : backup;
-    try {
-      (0, import_node_fs8.renameSync)(target, dest);
-      moved.push({ from: target, to: dest });
-    } catch {
-      continue;
-    }
-  }
-  return moved;
-}
-function safeLstat(p2) {
-  try {
-    (0, import_node_fs8.lstatSync)(p2);
-    return true;
-  } catch {
-    return false;
-  }
-}
 function isStagedWrapperUsable(link) {
   try {
     (0, import_node_fs8.lstatSync)(link);
@@ -197910,7 +197944,7 @@ function isStagedWrapperUsable(link) {
   }
   return (0, import_node_fs8.existsSync)(link);
 }
-var import_node_fs8, import_node_os3, import_node_path9, stagedBinDirs, LOGIN_SHELL_FRONT_DIRS, DISPLACED_SUFFIX;
+var import_node_fs8, import_node_os3, import_node_path9, stagedBinDirs;
 var init_stage = __esm({
   "../connectors/src/_base/stage.ts"() {
     "use strict";
@@ -197919,8 +197953,6 @@ var init_stage = __esm({
     import_node_path9 = require("node:path");
     init_wrapper_assets();
     stagedBinDirs = /* @__PURE__ */ new Map();
-    LOGIN_SHELL_FRONT_DIRS = [[".local", "bin"], ["bin"]];
-    DISPLACED_SUFFIX = ".oasis-displaced";
   }
 });
 
@@ -201952,19 +201984,12 @@ async function prepareConnectorsForJob(job, deps) {
         localWrappers.push(staged);
         status.wrapperReady = true;
       }
-      const moved = clearLoginShellShadow(connector);
-      for (const m2 of moved) {
-        log(
-          "[node-connectors]",
-          `${slug6}: \u632A\u5F00\u767B\u5F55 shell \u906E\u6321 ${m2.from} \u2192 ${m2.to}\uFF08$HOME/.local/bin \u4F1A\u88AB ~/.profile \u63D2\u5230 PATH \u6700\u524D\uFF0C\u538B\u8FC7\u6CE8\u5165\u7684 wrapper\uFF1B\u6539\u540D\u4E0D\u5220\u9664\uFF0Cwrapper \u89E3\u6790\u94FE\u6700\u540E\u4E00\u6863\u4ECD\u80FD\u6361\u56DE\u5B83\uFF09`
-        );
-      }
       const shadow = loginShellShadow(connector.commandName);
       if (shadow) {
         status.shadowedBy = shadow;
         log(
           "[node-connectors]",
-          `\u26A0 ${slug6}: creds + wrapper \u5DF2\u843D\u5728\u672C\u673A\uFF0C\u4F46 **${shadow} \u4ECD\u5728\u767B\u5F55 shell \u91CC\u6321\u7740 wrapper**\uFF0C\u800C\u4E14\u632A\u4E0D\u52A8\u5B83\u3002agent \u4E00\u65E6\u7528 \`bash -lc\` \u8C03 ${connector.commandName}\uFF0C\u8D70\u5230\u7684\u662F\u90A3\u4E2A\u5BBF\u4E3B\u526F\u672C\u3001\u914D\u7F6E\u76EE\u5F55\u53C8\u88AB\u9694\u79BB\u6210\u7A7A\u7684\uFF0C\u7ED3\u679C\u5C31\u662F\u300C\u672A\u914D\u7F6E\u300D\u3002`
+          `\u26A0 ${slug6}: creds + wrapper \u5DF2\u843D\u5728\u672C\u673A\uFF0C\u4F46 **${shadow} \u4F1A\u5728\u767B\u5F55 shell \u91CC\u6321\u4F4F wrapper**\u2014\u2014Ubuntu \u7684 ~/.profile \u628A $HOME/.local/bin \u524D\u7F6E\u5230 PATH \u6700\u524D\u3002agent \u4E00\u65E6\u7528 \`bash -lc\` \u8C03 ${connector.commandName}\uFF0C\u8D70\u5230\u7684\u662F\u90A3\u4E2A\u5BBF\u4E3B\u526F\u672C\u3001\u914D\u7F6E\u76EE\u5F55\u53C8\u88AB\u9694\u79BB\u6210\u7A7A\u7684\uFF0C\u7ED3\u679C\u5C31\u662F\u300C\u672A\u914D\u7F6E\u300D\u3002`
         );
       } else {
         log("[node-connectors]", `${slug6}: creds + wrapper \u5DF2\u843D\u5728\u672C\u673A`);
@@ -205876,13 +205901,22 @@ async function startOasisServer(opts) {
         if (url.pathname === "/api/chat/attachments" && req.method === "POST" && opts.uploadChatAttachment) {
           try {
             const body2 = JSON.parse(rawBody);
-            if (typeof body2.contentBase64 !== "string" || !body2.contentBase64) throw new Error("\u7F3A\u5C11 contentBase64");
-            const MAX_BASE64_LEN = Math.ceil(CHAT_ATTACHMENT_MAX_BYTES * 4 / 3) + 4096;
+            if (typeof body2.contentBase64 !== "string") throw new Error("\u7F3A\u5C11 contentBase64");
+            const MAX_BASE64_LEN = 4 * Math.ceil(CHAT_ATTACHMENT_MAX_BYTES / 3);
             if (body2.contentBase64.length > MAX_BASE64_LEN) {
               res.writeHead(413, { "content-type": "application/json" });
               res.end(JSON.stringify({ error: { code: "ATTACHMENT_TOO_LARGE", message: `\u9644\u4EF6\u8D85\u8FC7 ${CHAT_ATTACHMENT_MAX_BYTES / 1024 / 1024}MB \u4E0A\u9650` } }));
               return;
             }
+            if (body2.contentBase64.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(body2.contentBase64)) {
+              throw new Error("\u9644\u4EF6\u7F16\u7801\u65E0\u6548\uFF0C\u8BF7\u91CD\u65B0\u9009\u62E9\u6587\u4EF6");
+            }
+            if (Buffer.from(body2.contentBase64, "base64").byteLength > CHAT_ATTACHMENT_MAX_BYTES) {
+              res.writeHead(413, { "content-type": "application/json" }).end(JSON.stringify({
+                error: { code: "ATTACHMENT_TOO_LARGE", message: `\u9644\u4EF6\u8D85\u8FC7 ${CHAT_ATTACHMENT_MAX_BYTES / 1024 / 1024}MB \u4E0A\u9650` }
+              }));
+              return;
+            }
             const out = await opts.uploadChatAttachment({
               contentBase64: body2.contentBase64,
               ...typeof body2.contentType === "string" ? { contentType: body2.contentType } : {},
@@ -211505,7 +211539,7 @@ var init_service4 = __esm({
       }
     };
     ProjectsService = class {
-      constructor(projects, artifacts, kernel, oplog, actorNames, blobs, actorDirectory, resolveActorContext, loadActorResolver) {
+      constructor(projects, artifacts, kernel, oplog, actorNames, blobs, actorDirectory, resolveActorContext, loadActorResolver, listChatFiles) {
         this.projects = projects;
         this.artifacts = artifacts;
         this.kernel = kernel;
@@ -211515,6 +211549,7 @@ var init_service4 = __esm({
         this.actorDirectory = actorDirectory;
         this.resolveActorContext = resolveActorContext;
         this.loadActorResolver = loadActorResolver;
+        this.listChatFiles = listChatFiles;
       }
       projectCreatedHandler;
       onProjectNameChanged;
@@ -212102,6 +212137,18 @@ var init_service4 = __esm({
           });
         }
         const files = await this.collectProjectFiles(projectId2);
+        const existingFiles = /* @__PURE__ */ new Set([
+          ...items.filter((item) => item.blobRef).map((item) => `${item.name}\0${item.blobRef}`),
+          ...files.map((file) => `${file.name}\0${file.blobId}`)
+        ]);
+        if (this.listChatFiles && !isUncategorizedProjectId(projectId2)) {
+          for (const file of await this.listChatFiles(projectId2)) {
+            const key = `${file.name}\0${file.blobId}`;
+            if (existingFiles.has(key)) continue;
+            existingFiles.add(key);
+            files.push(file);
+          }
+        }
         for (const file of files) {
           const path41 = typeof file.path === "string" && file.path.trim() ? file.path : void 0;
           if (path41) emitFolder(dirname24(path41), file.uploadedAt);
@@ -212778,7 +212825,15 @@ var init_service4 = __esm({
        * 亲手提交过至少一版」。这是仓库里唯一一条真实存在的「产物 ↔ 人」关系；
        * 「谁 own 这个节点」不用（节点 owner 是**派给谁**，派了没干完的也会被算成产出，那是假数据）。
        *
-       * 同一产物被同一人提交多版只出现一次，`revisionCount` 记他提过几版、`updatedAt` 取他最近一次提交。
+       * **空轮不算产出**（ADR 0539 补记）：内核把**每一轮执行**都投影成一版 revision，这一轮一个产出文件
+       * 都没有时 bridge 如实给 `contentKind="empty"`（运行中占位 / 被限流打死的空跑 / 只留结论没产正文，
+       * 见 `bridge-readmodel.workToRevision` 与 ADR-0134）。那种版本这里一律跳过——它不是「他交了什么」，
+       * 展示层拿到只会得到一行没有大小、点开写着「还没有可预览的正文」的空行。
+       * 项目页「相关文件」早就不列这类轮次（`collectEngineFilesForProject` 的
+       * `latestAcceptId` / `cancelledAt` / `arts.length === 0` 三道闸），本栏此前漏了这条口径。
+       *
+       * 于是 `revisionCount` 记的是**他交付过几版**、`latestRevisionId`/`updatedAt` 取**他最近一次真的
+       * 交了东西的那一版**；一版都没交过内容的产物整条不出现。
        *
        * 数据同 `artifactDetail`：从 `kernel.model` 现算投影（新引擎 oplog 已退役、派生 store 恒空），
        * 不读 `artifact_revisions` 表——读那张表在新引擎上永远是空列表。
@@ -212796,6 +212851,7 @@ var init_service4 = __esm({
         const byArtifact = /* @__PURE__ */ new Map();
         for (const revision of projection.revisions) {
           if (revision.actorId !== actorId) continue;
+          if (isEmptyContent(this.kernel.model.revisions.get(revision.revisionId)?.contentKind)) continue;
           const artifact = artifactById.get(revision.artifactId);
           if (!artifact) continue;
           const prev = byArtifact.get(revision.artifactId);
@@ -212838,8 +212894,10 @@ var init_service4 = __esm({
        * 同一个 {@link contentByteSize}**，不另写一套判据）：装箱单摊成每个物理文件一行，
        * 其余（inline-blob / external-pin / 装箱单解析失败）整份产物一行。
        *
-       * 取哪一版：**他自己最近提交的那一版**（`latestRevisionId`），不是产物的 current head——
-       * 这一栏回答的是「他交了什么」，拿别人后来覆盖的版本冒充他的产出就是假数据。
+       * 取哪一版：**他自己最近交付过内容的那一版**（`latestRevisionId`，空轮已在
+       * {@link listActorArtifacts} 里滤掉），不是产物的 current head——这一栏回答的是「他交了什么」，
+       * 拿别人后来覆盖的版本冒充他的产出就是假数据。该版本 id 随行发给前端（`revisionId`），
+       * 预览栏据它定位同一版：行与预览必须指着同一个东西，否则会出现「行上有 20 KB、点开说没有正文」。
        */
       async listActorFiles(actorId) {
         const artifacts = await this.listActorArtifacts(actorId);
@@ -212851,6 +212909,7 @@ var init_service4 = __esm({
           const base = {
             artifactId: item.artifactId,
             projectId: item.projectId,
+            revisionId: item.latestRevisionId,
             type: item.type,
             updatedAt: item.updatedAt,
             ...contentKind ? { contentKind } : {},
@@ -220169,6 +220228,20 @@ ${input.description}
           };
         });
       }
+      /**
+       * 这一行变量是谁建的（子 PRD《密钥管理》§1 的权限判据）。**只读元数据、不解密**——
+       * `listVariables()` 会把每一行都解一遍出掩码，写路径上没必要付那个钱。
+       *
+       * 返回 undefined 有两种含义，调用方按「放行」处理：行不存在（新建），
+       * 或行是 2026-09-10 之前落的（那时还没有 created_by 这一格）。
+       */
+      async variableCreatedBy(key, selector = {}) {
+        const rows = await this.opts.store.listVariables();
+        const hit = rows.find(
+          (r) => r.key === key && (r.actorId ?? "") === (selector.actorId ?? "") && (r.projectId ?? "") === (selector.projectId ?? "")
+        );
+        return hit?.createdBy;
+      }
       async revealVariable(key, actorId) {
         const ct = await this.opts.store.getVariableCiphertext(key, actorId);
         if (ct === null) return null;
@@ -221954,6 +222027,17 @@ function actorsDomain(opts) {
         );
       }
     };
+    const requireSecretOwner = async (req, service, key, selector = {}) => {
+      const owner = await service.variableCreatedBy(key, selector);
+      if (!owner || owner === req.auth.actor) return;
+      const manager = opts.isCompanyManager ? await opts.isCompanyManager(req.auth.companyId ?? "", req.auth.actor).catch(() => false) : false;
+      if (manager) return;
+      throw new ApiError(
+        403,
+        "SECRET_NOT_OWNED",
+        "\u8FD9\u4EFD\u5BC6\u94A5\u7531\u522B\u4EBA\u521B\u5EFA\uFF0C\u53EA\u6709\u521B\u5EFA\u8005\u672C\u4EBA\u6216\u7EC4\u7EC7\u7BA1\u7406\u8005\u53EF\u4EE5\u4FEE\u6539 / \u5220\u9664"
+      );
+    };
     const auditVariableChange = async (req, kind, variableKey, targetScope) => {
       await opts.credentialAudit?.({
         kind,
@@ -222008,6 +222092,7 @@ function actorsDomain(opts) {
         );
       }
       if (b2.value === void 0 || b2.value === "") return { status: 200, body: { ok: true } };
+      await requireSecretOwner(req, service, b2.key, scope === "project" ? { projectId: b2.projectId } : {});
       await service.putVariable({
         key: b2.key,
         value: b2.value,
@@ -222035,6 +222120,7 @@ function actorsDomain(opts) {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
       const projectId2 = req.query.get("projectId") ?? void 0;
+      await requireSecretOwner(req, service, req.params.key, projectId2 ? { projectId: projectId2 } : {});
       await service.deleteVariable(
         req.params.key,
         void 0,
@@ -222082,6 +222168,7 @@ function actorsDomain(opts) {
           );
         }
       }
+      await requireSecretOwner(req, service, b2.key, { actorId });
       await service.putVariable({
         key: b2.key,
         value: b2.value,
@@ -222102,6 +222189,7 @@ function actorsDomain(opts) {
     router.delete("/api/actors/:id/variables/:key", async (req) => {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
+      await requireSecretOwner(req, service, req.params.key, { actorId: req.params.id });
       await service.deleteVariable(req.params.key, req.params.id);
       await auditVariableChange(req, "credential_delete", req.params.key, `personal:${req.params.id}`);
       return { status: 200, body: { ok: true } };
@@ -222910,7 +222998,7 @@ function createActorsDomain(opts) {
   return {
     service: defaultCtx.service,
     resolveCtx,
-    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
+    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
 var import_node_crypto49;
@@ -223267,6 +223355,7 @@ ${errs.join("\n")}`);
             id: item.id,
             artifact_id: item.artifactId,
             project_id: item.projectId,
+            revision_id: item.revisionId,
             type: item.type,
             name: item.name,
             file_path: item.filePath,
@@ -223942,6 +224031,15 @@ var init_routes5 = __esm({
   }
 });
 
+// ../server/src/domains/collab/activity-notice.ts
+var NOTICE_TITLE;
+var init_activity_notice = __esm({
+  "../server/src/domains/collab/activity-notice.ts"() {
+    "use strict";
+    NOTICE_TITLE = "\u53D8\u66F4\u901A\u77E5";
+  }
+});
+
 // ../server/src/domains/collab/review-activity.ts
 function reviewCardId(targetWorkId, reviewerActorId) {
   return `${REVIEW_CARD_PREFIX}${encodeURIComponent(targetWorkId)}:${encodeURIComponent(reviewerActorId)}`;
@@ -224090,35 +224188,18 @@ var init_review_activity = __esm({
 
 // ../server/src/domains/collab/review-requirement-activity.ts
 function reviewRequirementActivity(snap, events, ref2) {
-  const previous3 = /* @__PURE__ */ new Map();
   const titles = new Map(snap.nodes.map((n) => [n.id, n.title]));
   const cards = [];
   const label = (r) => `${ref2(r.reviewerActorId).name || "\u672A\u547D\u540D\u5BA1\u6838\u4EBA"}${r.source === "closure" ? "\uFF08\u7ED3\u6848\u5BA1\u6838\uFF09" : ""}`;
-  const names = (rows) => [...new Set(rows.map(label))].join("\u3001") || "\u65E0";
+  const names = (rows) => [...new Set(rows.map(label))].join("\u3001");
+  const submitter = (id) => ref2(id).name?.trim() || "\u672A\u547D\u540D\u6210\u5458";
+  const sentence = (id, nodeTitle, rows) => rows.length ? `${submitter(id)} \u66F4\u6539\u300A${nodeTitle}\u300B\u8282\u70B9\u7684\u5BA1\u6838\u4EBA\u4E3A ${names(rows)}\u3002` : `${submitter(id)} \u6E05\u7A7A\u4E86\u300A${nodeTitle}\u300B\u8282\u70B9\u7684\u5BA1\u6838\u4EBA\u3002`;
   for (const rec of [...events].sort((a, b2) => a.seq - b2.seq)) {
     if (rec.status === "pending" || rec.status === "failed") continue;
     const e = rec.event;
-    if (e.kind === "plan.changed") {
-      for (const node2 of e.addNodes ?? []) previous3.set(node2.id, node2.reviewers ?? []);
-      for (const id of e.removeNodes ?? []) previous3.delete(id);
-      continue;
-    }
-    if (e.kind === "plan.add_node") {
-      previous3.set(e.nodeId, e.reviewers ?? []);
-      continue;
-    }
     if (e.kind !== "plan.update_review_requirements") continue;
-    const before = previous3.get(e.nodeId);
-    const after = e.reviewers;
-    const beforeKeys = new Set(before?.map(requirementKey));
-    const afterKeys = new Set(after.map(requirementKey));
-    const added = before ? after.filter((r) => !beforeKeys.has(requirementKey(r))) : [];
-    const removed = before?.filter((r) => !afterKeys.has(requirementKey(r))) ?? [];
+    if (!isAuthoredChange(rec)) continue;
     const nodeTitle = titles.get(e.nodeId) || "\u5DF2\u79FB\u9664\u7684\u8282\u70B9";
-    if (!isAuthoredChange(rec)) {
-      previous3.set(e.nodeId, after);
-      continue;
-    }
     cards.push({
       id: `wo:${rec.seq}`,
       seq: rec.seq,
@@ -224129,24 +224210,19 @@ function reviewRequirementActivity(snap, events, ref2) {
       executor: ref2(rec.actorId),
       ...rec.handActorId ? { handActor: ref2(rec.handActorId) } : {},
       phase: "done",
-      status: `\u66F4\u65B0\u4E86\u300A${nodeTitle}\u300B\u7684\u5BA1\u6838\u5217\u8868\u3002`,
-      detail: [
-        ...added.length ? [`\u65B0\u589E\uFF1A${names(added)}`] : [],
-        ...removed.length ? [`\u79FB\u9664\uFF1A${names(removed)}`] : [],
-        `\u66F4\u65B0\u540E\uFF1A${names(after)}`
-      ].join("\n"),
+      noticeTitle: NOTICE_TITLE,
+      status: sentence(rec.actorId, nodeTitle, e.reviewers),
       artifacts: [],
       actions: []
     });
-    previous3.set(e.nodeId, after);
   }
   return cards;
 }
-var requirementKey, isAuthoredChange;
+var isAuthoredChange;
 var init_review_requirement_activity = __esm({
   "../server/src/domains/collab/review-requirement-activity.ts"() {
     "use strict";
-    requirementKey = (r) => JSON.stringify([r.reviewerActorId, r.reviewGroup, r.source]);
+    init_activity_notice();
     isAuthoredChange = (rec) => rec.origin !== "apply" && rec.origin !== "effect" && !rec.actorId.startsWith("actor:system:");
   }
 });
@@ -224242,7 +224318,6 @@ function buildWorkorderActivity(input) {
     return tail || nodeId;
   };
   const cardOfWork = /* @__PURE__ */ new Map();
-  const latestCardOfNode = /* @__PURE__ */ new Map();
   const executionCards = [];
   const offTimeline = (w2) => isDispatchLayerFailure(w2.outcomeDetail) || w2.outcome === "completed" && statusOf2(w2) !== "success" && !artifactsByWork.get(w2.id)?.length;
   const statusOf2 = (w2) => w2.status ?? (w2.outcome === "failed" ? "failed" : w2.outcome === "completed" ? "success" : "running");
@@ -224271,35 +224346,45 @@ function buildWorkorderActivity(input) {
     works.sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id));
     const interrupts = [...interruptsOfNode.get(nodeId) ?? []].sort();
     const node2 = nodeById.get(nodeId);
+    const nodeCancelledAt = node2?.cancelledAt ?? null;
     const name = nodeName(nodeId);
-    let card2 = null;
+    let fold2 = null;
     for (const [idx, w2] of works.entries()) {
-      if (!card2) {
-        card2 = {
-          /* 卡 id 取组内**首个** work（React key 与滚动锚点因此稳定）；`at` 是这一轮开工的时刻。 */
-          id: `work:${w2.id}`,
-          traceWorkIds: [],
-          seq: 0,
-          // 事件循环里按首个 work.create 的 seq 填
-          at: w2.createdAt,
-          updatedAt: w2.createdAt,
-          nodeId,
-          executorId: w2.assigneeActorId,
-          phase: "running",
-          status: ACTIVITY_COPY.working(name),
-          artifacts: [],
-          actions: []
-        };
-        executionCards.push(card2);
-        latestCardOfNode.set(nodeId, card2);
+      const next = works[idx + 1];
+      const artifacts = artifactsByWork.get(w2.id) ?? [];
+      const st = statusOf2(w2);
+      const interrupt = interrupts.find((t) => t >= w2.createdAt && (!next || t < next.createdAt));
+      const removedHere = !!nodeCancelledAt && nodeCancelledAt >= w2.createdAt && (!next || nodeCancelledAt < next.createdAt);
+      const reassigned = !!next && next.assigneeActorId !== w2.assigneeActorId;
+      const killedByPlan = !!(w2.deadAt || w2.cancelledAt) && !!next && (reassigned || (next.nodeVersion ?? 0) > (w2.nodeVersion ?? 0));
+      const failedRound = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && (!!w2.deadAt || !!w2.cancelledAt || st === "failed" || st === "retry");
+      if (failedRound && fold2) {
+        fold2.traceWorkIds.push(w2.id);
+        cardOfWork.set(w2.id, fold2);
+        fold2.updatedAt = lastStampOf(w2);
+        fold2.stuckReason = w2.outcomeDetail?.reason === "timeout" ? "timeout" : "failed";
+        fold2.foldedRounds = (fold2.foldedRounds ?? 1) + 1;
+        fold2.status = ACTIVITY_COPY.foldedFailures(nameOf(fold2.executorId), name, fold2.foldedRounds);
+        continue;
       }
-      card2.traceWorkIds.push(w2.id);
+      fold2 = null;
+      const card2 = {
+        /* 卡 id = 这一轮的 workId（连败折叠时取第一轮，React key 与滚动锚点因此稳定）。 */
+        id: `work:${w2.id}`,
+        traceWorkIds: [w2.id],
+        seq: 0,
+        // 事件循环里按这一轮 work.create 的 seq 填
+        at: w2.createdAt,
+        updatedAt: lastStampOf(w2),
+        nodeId,
+        executorId: w2.assigneeActorId,
+        phase: "running",
+        status: ACTIVITY_COPY.working(name),
+        artifacts,
+        actions: []
+      };
+      executionCards.push(card2);
       cardOfWork.set(w2.id, card2);
-      card2.executorId = w2.assigneeActorId;
-      card2.updatedAt = lastStampOf(w2);
-      card2.artifacts = artifactsByWork.get(w2.id) ?? card2.artifacts;
-      delete card2.openWorkId;
-      delete card2.stuckReason;
       if (w2.conclusion) {
         card2.phase = "done";
         if (rootBriefNodeIds.has(nodeId)) {
@@ -224315,32 +224400,21 @@ function buildWorkorderActivity(input) {
             card2.status = awaits ? ACTIVITY_COPY.doneAwaitingReview(name) : ACTIVITY_COPY.done(name);
           }
         }
-        card2 = null;
-        continue;
-      }
-      const next = works[idx + 1];
-      const interrupt = interrupts.find((t) => t >= w2.createdAt && (!next || t < next.createdAt));
-      if (interrupt) {
+      } else if (interrupt) {
         card2.phase = "stuck";
         card2.status = ACTIVITY_COPY.interruptedByIssue(name);
         if (interrupt > card2.updatedAt) card2.updatedAt = interrupt;
-        card2 = null;
-        continue;
-      }
-      const stuckKind = w2.outcomeDetail?.reason === "timeout" ? "timeout" : "failed";
-      const st = statusOf2(w2);
-      if (w2.deadAt || w2.cancelledAt) {
+      } else if (removedHere || killedByPlan) {
         card2.phase = "stuck";
-        card2.stuckReason = stuckKind;
-        card2.status = ACTIVITY_COPY.killed(name);
-      } else if (st === "failed") {
+        card2.status = removedHere ? ACTIVITY_COPY.interruptedByNodeRemoved(name) : reassigned ? ACTIVITY_COPY.interruptedByReassign(name, nameOf(next.assigneeActorId)) : ACTIVITY_COPY.interruptedByPlanChange(name);
+        if (!removedHere && !reassigned) card2.planChangeUnnamed = true;
+        if (removedHere && nodeCancelledAt > card2.updatedAt) card2.updatedAt = nodeCancelledAt;
+      } else if (failedRound) {
+        const stuckKind = w2.outcomeDetail?.reason === "timeout" ? "timeout" : "failed";
         card2.phase = "stuck";
         card2.stuckReason = stuckKind;
-        card2.status = stuckKind === "timeout" ? ACTIVITY_COPY.timedOut(nameOf(card2.executorId)) : ACTIVITY_COPY.failed(nameOf(card2.executorId));
-      } else if (st === "retry") {
-        card2.phase = "stuck";
-        card2.stuckReason = stuckKind;
-        card2.status = ACTIVITY_COPY.awaitingRedispatch(nameOf(card2.executorId), name);
+        card2.status = w2.deadAt || w2.cancelledAt ? ACTIVITY_COPY.killed(name) : st === "retry" ? ACTIVITY_COPY.awaitingRedispatch(nameOf(card2.executorId), name) : stuckKind === "timeout" ? ACTIVITY_COPY.timedOut(nameOf(card2.executorId)) : ACTIVITY_COPY.failed(nameOf(card2.executorId));
+        fold2 = card2;
       } else if (w2.endedAt) {
         card2.phase = "running";
         card2.status = ACTIVITY_COPY.awaitingConclude(name);
@@ -224361,17 +224435,28 @@ function buildWorkorderActivity(input) {
     if (rec.handActorId) d.handActorId = rec.handActorId;
     return d;
   };
-  const woCard = (rec, executorId, status, detail, phase = "done") => {
+  const cardOpenAt = (nodeId, at) => {
+    const list2 = worksOfNode.get(nodeId);
+    if (!list2) return void 0;
+    let hit;
+    for (const w2 of list2) {
+      if (w2.createdAt > at) break;
+      hit = w2;
+    }
+    return hit ? cardOfWork.get(hit.id) : void 0;
+  };
+  const woCard = (rec, status, opts = {}) => {
     standalone.push({
       id: `wo:${rec.seq}`,
       seq: rec.seq,
       at: rec.createdAt,
       updatedAt: rec.createdAt,
-      executorId,
+      executorId: rec.actorId,
       ...rec.handActorId ? { handActorId: rec.handActorId } : {},
-      phase,
+      phase: "done",
+      ...opts.notice ? { noticeTitle: NOTICE_TITLE } : {},
       status,
-      ...detail ? { detail } : {},
+      ...opts.detail ? { detail: opts.detail } : {},
       artifacts: [],
       actions: []
     });
@@ -224384,20 +224469,29 @@ function buildWorkorderActivity(input) {
       case "plan.changed": {
         break;
       }
+      /* 暂停 / 恢复是**人对这单做的事**，不是某一轮执行——走「变更通知」那套卡面（帧 `2874:1189`）。
+         此前它们沿用执行卡的标题模板，卡面第一行被拼成「{谁} 已完成」（`ACTIVITY_PHASE_LABEL.done`），
+         第二行才是「{谁}已暂停任务。」——标题和正文说的不是同一件事，而「已完成」在这一拍根本
+         没有所指（暂停不是完成）。 */
       case "workorder.paused":
-        woCard(rec, rec.actorId, ACTIVITY_COPY.paused(nameOf(rec.actorId)), str4(ev.reason));
+        woCard(rec, ACTIVITY_COPY.paused(nameOf(rec.actorId)), { notice: true, detail: str4(ev.reason) });
         break;
       case "workorder.resumed":
-        woCard(rec, rec.actorId, ACTIVITY_COPY.resumedWorkorder(nameOf(rec.actorId)));
+        woCard(rec, ACTIVITY_COPY.resumedWorkorder(nameOf(rec.actorId)), { notice: true });
         break;
       case "workorder.meta_changed": {
         const patch = ev.patch ?? {};
         if (!("goal" in patch) && !("description" in patch)) break;
-        woCard(rec, rec.actorId, ACTIVITY_COPY.goalChanged(nameOf(rec.actorId), managerName()));
+        woCard(rec, ACTIVITY_COPY.goalChanged(nameOf(rec.actorId), managerName()));
         break;
       }
       case "plan.update_spec": {
-        woCard(rec, rec.actorId, ACTIVITY_COPY.specConfirmed, void 0, "running");
+        const nodeId = String(ev.nodeId ?? "");
+        const d = cardOpenAt(nodeId, rec.createdAt);
+        if (d?.planChangeUnnamed) {
+          d.status = ACTIVITY_COPY.interruptedBySpecChange(nameOf(rec.actorId), nodeName(nodeId));
+          delete d.planChangeUnnamed;
+        }
         break;
       }
       /* ── 执行（work）──────────────────────────────────────────────
@@ -224677,10 +224771,10 @@ function buildWorkorderActivity(input) {
       case "plan.node_retry": {
         const nodeId = String(ev.nodeId ?? "");
         const by = str4(ev.by) ?? rec.actorId;
-        const target = latestCardOfNode.get(nodeId);
-        if (!target || target.phase !== "stuck") break;
+        const target = cardOpenAt(nodeId, rec.createdAt);
+        if (!target || target.phase !== "stuck" || !target.stuckReason) break;
         touch(target, rec);
-        target.status = target.stuckReason === "timeout" ? ACTIVITY_COPY.retriedAfterTimeout(nameOf(target.executorId), nameOf(by)) : ACTIVITY_COPY.retriedAfterFailure(nameOf(target.executorId), nameOf(by));
+        target.status = target.foldedRounds && target.foldedRounds > 1 ? ACTIVITY_COPY.foldedFailuresRetried(nameOf(target.executorId), nodeName(nodeId), target.foldedRounds, nameOf(by)) : target.stuckReason === "timeout" ? ACTIVITY_COPY.retriedAfterTimeout(nameOf(target.executorId), nameOf(by)) : ACTIVITY_COPY.retriedAfterFailure(nameOf(target.executorId), nameOf(by));
         break;
       }
       default:
@@ -224844,6 +224938,7 @@ function buildWorkorderActivity(input) {
       ...d.reviewWorkId ? { reviewWorkId: d.reviewWorkId, reviewers: d.reviewerIds?.map(ref2) } : {},
       ...d.handActorId ? { handActor: ref2(d.handActorId) } : {},
       phase: d.phase,
+      ...d.noticeTitle ? { noticeTitle: d.noticeTitle } : {},
       status: d.status,
       ...d.detail ? { detail: d.detail } : {},
       ...d.reviewNotes?.length ? { reviewNotes: d.reviewNotes } : {},
@@ -224865,13 +224960,13 @@ var init_activity2 = __esm({
     "use strict";
     init_src();
     init_src4();
+    init_activity_notice();
     init_review_activity();
     init_review_requirement_activity();
     init_workorder_manager();
     init_escalation_recipient();
     ACTIVITY_EVENT_KINDS = [
       "plan.changed",
-      "plan.add_node",
       "plan.update_review_requirements",
       "plan.update_spec",
       "plan.node_retry",
@@ -224945,7 +225040,39 @@ var init_activity2 = __esm({
        *
        * 不重复缺口卡那句「需要 @{协调者} 协助解决」：该找谁由缺口卡自己说，执行卡只说这一轮到此为止。
        */
+      /**
+       * **连败折叠**：同一节点上连续没跑成的 N 轮折成一张。不折叠的话 `ws:wo-6d588f8e` 的《隔离边界实现》
+       * 会在时间线上连出 12 张，其中 9 张都是「执行失败。」——真正要给人看的是「这个节点一直没跑成」
+       * 这一件事，逐轮的原因在轨迹抽屉里（`traceWorkIds` 收齐全部 N 轮，一轮不少）。
+       */
+      foldedFailures: (executor, node2, n) => `${executor} \u8FDE\u7EED ${n} \u6B21\u6CA1\u8DD1\u6210\u300A${node2}\u300B\u3002`,
+      /** 折叠卡上补「谁按的重试」——不把「连续 N 次」换成单轮那句。 */
+      foldedFailuresRetried: (executor, node2, n, by) => `${executor} \u8FDE\u7EED ${n} \u6B21\u6CA1\u8DD1\u6210\u300A${node2}\u300B\uFF0C${by}\u5DF2\u4ECB\u5165\u91CD\u8BD5\u3002`,
       interruptedByIssue: (node2) => `\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u56E0\u5361\u70B9\u4E2D\u65AD\u3002`,
+      /**
+       * 这一轮**被计划变更打断**（P15）。与卡点中断同级：计划一动，这一轮就不再是「还在跑」，
+       * 而是被引擎当场顶掉了——`plan.delete_node` 直接 `killLatestWork`；`plan.update_spec`（spec 真变）
+       * 与 `plan.assign_actor`（换人）把 `node.version` 加一，scan 随即重派，`work.create` 自带
+       * supersede 把在跑的这一轮翻成 dead。
+       *
+       * 此前这两条都不结束卡：删节点那档只落到 {@link killed}「本轮执行已终止」，不说是计划调整；
+       * 改 spec / 改派那档**根本没有结局**——新一轮直接改写同一张卡，「中断」在页面上不存在，
+       * 卡上署名还会换成新人（与 §2.1「一张卡只讲一个人的事」相抵）。
+       */
+      interruptedByPlanChange: (node2) => `\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u56E0\u8BA1\u5212\u8C03\u6574\u4E2D\u65AD\u3002`,
+      /**
+       * 计划变更里最常见的那一种：**有人改了任务说明**，在跑的这一轮因此被顶掉。
+       *
+       * 这句取代了原来那张独立的任务级卡「已确认任务说明更新，正在判断该修改的影响。」——两张卡讲的
+       * 本来就是同一件事：计划动了、这一轮做不下去了。旧卡还有两个毛病：`phase` 写死 `running`，
+       * 没有任何一拍能让它收口（`ws:wo-217a0909` 12:13 那两张就是这么永久停在「进行中」的）；文案是
+       * 一句没有主语也没有宾语的固定串，两次内容不同的修改渲染成两行一模一样的字。
+       */
+      interruptedBySpecChange: (by, node2) => `${by} \u66F4\u65B0\u4E86\u4EFB\u52A1\u8BF4\u660E\uFF0C\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u5230\u6B64\u4E2D\u65AD\u3002`,
+      /** 换人那一档点破接手的人——卡到此为止，下一轮是新执行人的新卡。 */
+      interruptedByReassign: (node2, next) => `\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u56E0\u8BA1\u5212\u8C03\u6574\u4E2D\u65AD\uFF0C\u5DF2\u6539\u7531 ${next} \u63A5\u624B\u3002`,
+      /** 节点被移出计划：这一轮再没有下文，也不会有新卡。 */
+      interruptedByNodeRemoved: (node2) => `\u300A${node2}\u300B\u5DF2\u4ECE\u8BA1\u5212\u4E2D\u79FB\u9664\uFF0C\u672C\u8F6E\u6267\u884C\u4E2D\u65AD\u3002`,
       /**
        * 引擎判卷 success、`endedAt` 也写了，却始终没有 `work.conclude`：**交了稿没收口**。
        * 如实说这一档，不冒充「正在处理」——后者把一轮早就结束的执行画成还在跑。
@@ -224982,7 +225109,6 @@ var init_activity2 = __esm({
       paused: (actor) => `${actor}\u5DF2\u6682\u505C\u4EFB\u52A1\u3002`,
       resumedWorkorder: (actor) => `${actor}\u5DF2\u6062\u590D\u4EFB\u52A1\u3002`,
       goalChanged: (actor, manager) => `${actor}\u4FEE\u6539\u4E86\u4EFB\u52A1\u76EE\u6807\uFF0C\u9700\u8981 ${manager}\u91CD\u65B0\u8BC4\u4F30\u3002`,
-      specConfirmed: "\u5DF2\u786E\u8BA4\u4EFB\u52A1\u8BF4\u660E\u66F4\u65B0\uFF0C\u6B63\u5728\u5224\u65AD\u8BE5\u4FEE\u6539\u7684\u5F71\u54CD\u3002",
       handleEscalation: (target) => `${target} \u7684\u6267\u884C\u5F02\u5E38\u6301\u7EED\u672A\u89E3\u51B3\u3002`,
       handledEscalation: (target) => `\u5DF2\u5904\u7406 ${target} \u7684\u6267\u884C\u5F02\u5E38\u3002`,
       /**
@@ -225991,13 +226117,7 @@ function buildWaitingInbox(reviews, works, policy, nowIso, me, resolveActor) {
       const isSelf = r.actorId === me;
       const actorLabel = displayName(resolveActor, r.actorId);
       if (r.status === "dead" || r.status === "exhausted") {
-        out.push(isSelf ? card(kind, r, "urgent", start, `\u4F60\u7684${KIND_LABEL[kind]}\u5DF2\u4E2D\u6B62\uFF0C\u9700\u8981\u4F60\u4ECB\u5165\u91CD\u5F00`) : card(
-          kind,
-          r,
-          "urgent",
-          start,
-          `\u8FD9\u4E00\u6B65\u7684${KIND_LABEL[kind]}\u5DF2\u4E2D\u6B62\uFF08${actorLabel} \u8FDE\u7EED\u5931\u8D25\u8D85\u9650\uFF09\u2014\u2014\u672C\u8F6E${KIND_LABEL[kind]}\u6536\u4E0D\u9F50\u3001\u8282\u70B9\u505C\u5728\u8FD9\u91CC\uFF0C\u9700\u8981\u4F60\u91CD\u5F00\u8FD9\u4E00\u8F6E`
-        ));
+        out.push(isSelf ? card(kind, r, "urgent", start, `\u4F60\u7684${KIND_LABEL[kind]}\u5DF2\u4E2D\u6B62\uFF0C\u9700\u8981\u4F60\u4ECB\u5165\u91CD\u5F00`) : card(kind, r, "urgent", start, kind === "review-waiting" ? `\u8FD9\u4E00\u6B65\u7684\u8BC4\u5BA1\u5DF2\u4E2D\u6B62\uFF08${actorLabel} \u8FDE\u7EED\u5931\u8D25\u8D85\u9650\uFF09\u2014\u2014\u672C\u8F6E\u8BC4\u5BA1\u6536\u4E0D\u9F50\u3001\u8282\u70B9\u505C\u5728\u8FD9\u91CC\uFF0C\u9700\u8981\u4F60\u91CD\u5F00\u8FD9\u4E00\u8F6E` : `\u8FD9\u4E00\u6B65\u7684\u5904\u7406\u5DF2\u4E2D\u6B62\uFF08${actorLabel} \u8FDE\u7EED\u5931\u8D25\u8D85\u9650\uFF09\u2014\u2014\u8282\u70B9\u505C\u5728\u8FD9\u91CC\uFF0C\u9700\u8981\u6709\u4EBA\u91CD\u5F00`));
         continue;
       }
       if (r.status !== "running") continue;
@@ -226049,14 +226169,20 @@ function collectWaitingRows(snapshots2, me, policy = CODE_DEFAULT_POLICY) {
     const requirementHeads = new Map(snap.requirements.map((q2) => [reqKey(q2), q2.latestReviewId]));
     const requirementHead = (r) => requirementHeads.get(reqKey(r));
     const nodesWithRequirements = new Set(snap.requirements.map((q2) => q2.nodeId));
-    const managerOfWo = snap.nodes.find((n) => n.type === "brief")?.fields?.["manager"];
+    const briefNode = snap.nodes.find((n) => n.type === "brief");
+    const managerOfWo = briefNode?.fields?.["manager"];
     const isManager = typeof managerOfWo === "string" && managerOfWo === me;
+    const launcher = briefNode?.assigneeActorId ?? null;
+    const openIssueNodes = new Set(
+      snap.issues.filter((i) => i.resolvedAt === null && i.aboutNodeId !== null).map((i) => i.aboutNodeId)
+    );
+    const nodeHasOpenIssue = (nodeId) => openIssueNodes.has(nodeId);
     const latestReview = /* @__PURE__ */ new Map();
     for (const r of snap.reviews) {
       if (cancelled.has(r.nodeId)) continue;
       if (acceptedWork.get(r.nodeId) === r.targetWorkId) continue;
       const mine = r.reviewerActorId === me;
-      const oversees = nodeOwner.get(r.nodeId) === me || isManager;
+      const oversees = nodeOwner.get(r.nodeId) === me || isManager || launcher === me;
       if (!mine && !oversees) continue;
       latestBy(latestReview, r);
     }
@@ -226075,10 +226201,12 @@ function collectWaitingRows(snapshots2, me, policy = CODE_DEFAULT_POLICY) {
       const humanPending = !stopped && classify(r.reviewerActorId) === "human";
       if (!mine && !stopped && !humanPending) continue;
       const audience = [r.reviewerActorId];
-      const owner = nodeOwner.get(r.nodeId);
-      if (stopped || humanPending) {
-        if (owner && !audience.includes(owner)) audience.push(owner);
-        if (typeof managerOfWo === "string" && !audience.includes(managerOfWo)) audience.push(managerOfWo);
+      const addBystanders = humanPending || stopped && !nodeHasOpenIssue(r.nodeId);
+      if (addBystanders) {
+        for (const candidate of [launcher, managerOfWo, nodeOwner.get(r.nodeId)]) {
+          if (typeof candidate !== "string" || classify(candidate) !== "human") continue;
+          if (!audience.includes(candidate)) audience.push(candidate);
+        }
       }
       reviews.push({
         id: r.id,
@@ -226095,17 +226223,25 @@ function collectWaitingRows(snapshots2, me, policy = CODE_DEFAULT_POLICY) {
     const latestMain = /* @__PURE__ */ new Map();
     const latestReply = /* @__PURE__ */ new Map();
     for (const w2 of snap.works) {
-      if (w2.assigneeActorId !== me || cancelled.has(w2.nodeId)) continue;
+      if (cancelled.has(w2.nodeId)) continue;
       latestBy(isReplyWork(w2) ? latestReply : latestMain, w2);
     }
     for (const w2 of [...latestMain.values(), ...latestReply.values()]) {
       const st = workState(w2, hasOutput(w2, outputCountOf(w2.id)));
       if (st !== "running" && st !== "dead") continue;
+      const audience = [w2.assigneeActorId];
+      if (st === "dead" && !nodeHasOpenIssue(w2.nodeId)) {
+        for (const candidate of [launcher, managerOfWo, nodeOwner.get(w2.nodeId)]) {
+          if (typeof candidate !== "string" || classify(candidate) !== "human") continue;
+          if (!audience.includes(candidate)) audience.push(candidate);
+        }
+      }
       works.push({
         id: w2.id,
         workorderId: snap.workorder.id,
         artifactId: w2.nodeId,
         actorId: w2.assigneeActorId,
+        notifyActorIds: audience,
         ...nodeTitle.get(w2.nodeId) ? { title: nodeTitle.get(w2.nodeId) } : {},
         createdAt: w2.createdAt,
         startedAt: w2.startedAt,
@@ -228074,6 +228210,245 @@ var init_collab = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/files-view.ts
+function reasonFromWorkdirCode(code2) {
+  switch (code2) {
+    case "NODE_OFFLINE":
+      return "NODE_OFFLINE";
+    case "TIMEOUT":
+      return "TIMEOUT";
+    default:
+      return "ERROR";
+  }
+}
+function joinRel(dir, name) {
+  return dir ? `${dir}/${name}` : name;
+}
+async function collectWorkdirFiles(bridge, loc, now = Date.now) {
+  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
+  const items = [];
+  let listCalls = 0;
+  let truncated = false;
+  const listDir = (path41) => {
+    listCalls += 1;
+    return bridge.list(loc.nodeId, {
+      workdirKey: loc.workdirKey,
+      runtimeKind: loc.runtimeKind,
+      rtId: loc.rtId,
+      path: path41
+    });
+  };
+  const root = await listDir("");
+  if (!root.ok) {
+    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
+  }
+  let level = [{ path: "", outcome: root }];
+  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
+    const nextDirs = [];
+    for (const { path: dir, outcome } of level) {
+      if (!outcome.ok) {
+        truncated = true;
+        continue;
+      }
+      if (outcome.truncated) truncated = true;
+      for (const entry of outcome.entries) {
+        if (entry.type === "dir") {
+          nextDirs.push(joinRel(dir, entry.name));
+          continue;
+        }
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated = true;
+          continue;
+        }
+        const rel = joinRel(dir, entry.name);
+        items.push({
+          id: `workdir:${rel}`,
+          name: entry.name,
+          kind: "file",
+          // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
+          // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
+          content_type: null,
+          size: entry.size,
+          updated_at: entry.mtime,
+          source: "workdir",
+          blob_ref: null,
+          path: rel,
+          message_id: null,
+          // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
+          // 这里是**按能力不渲染**的判据，不是置灰假钮。
+          editable: false
+        });
+      }
+    }
+    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
+      if (nextDirs.length > 0) truncated = true;
+      break;
+    }
+    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
+    if (budget <= 0 || now() >= deadline) {
+      truncated = true;
+      break;
+    }
+    const take = nextDirs.slice(0, budget);
+    if (take.length < nextDirs.length) truncated = true;
+    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
+    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
+  }
+  return { ok: true, items, truncated };
+}
+async function collectMessageFiles(messages, blobs) {
+  const rows = [];
+  for (const message of messages) {
+    if (!Array.isArray(message.attachments)) continue;
+    message.attachments.forEach((attachment, index2) => {
+      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
+      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
+      rows.push({
+        item: {
+          id: `msg:${message.id}:${index2}`,
+          name: attachment.name,
+          kind: "file",
+          updated_at: attachment.updatedAt ?? message.createdAt,
+          source: "message",
+          blob_ref: blobRef,
+          path: null,
+          message_id: message.id,
+          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
+          // contain `name`）——没有可写回的载体，一律不给编辑入口。
+          editable: blobRef !== null && isEditableFileName(attachment.name)
+        },
+        blobRef,
+        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
+      });
+    });
+  }
+  const metaCache = /* @__PURE__ */ new Map();
+  const metaOf = (ref2) => {
+    if (!blobs) return Promise.resolve(null);
+    let hit = metaCache.get(ref2);
+    if (!hit) {
+      hit = blobs.meta(ref2).catch(() => null);
+      metaCache.set(ref2, hit);
+    }
+    return hit;
+  };
+  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
+    const meta = blobRef ? await metaOf(blobRef) : null;
+    return {
+      ...item,
+      content_type: declaredType ?? meta?.contentType ?? null,
+      size: meta?.size ?? null
+    };
+  }));
+}
+function mergeChatSessionFiles(messageItems, workdirItems, materializedCopies = /* @__PURE__ */ new Set()) {
+  const out = [];
+  const seenMessageKeys = /* @__PURE__ */ new Set();
+  for (const item of [...messageItems].sort((a, b2) => b2.updated_at.localeCompare(a.updated_at))) {
+    const key = `${item.name}\0${item.blob_ref ?? ""}`;
+    if (seenMessageKeys.has(key)) continue;
+    seenMessageKeys.add(key);
+    out.push(item);
+  }
+  const seenWorkdirPaths = /* @__PURE__ */ new Set();
+  for (const item of workdirItems) {
+    if (item.path && materializedCopies.has(item.path)) continue;
+    if (seenWorkdirPaths.has(item.id)) continue;
+    seenWorkdirPaths.add(item.id);
+    out.push(item);
+  }
+  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
+  return out;
+}
+async function findMaterializedAttachmentCopies(messageItems, workdirItems, read) {
+  const copies = /* @__PURE__ */ new Set();
+  const attachments = messageItems.filter((item) => item.blob_ref && /^[a-f0-9]{64}$/.test(item.blob_ref));
+  let budget = CHAT_ATTACHMENT_MAX_BYTES;
+  const deadline = Date.now() + WORKDIR_WALK_BUDGET_MS;
+  let reads = 0;
+  for (const file of workdirItems) {
+    const rootFile = file.path === file.name;
+    const inputFile = file.path?.startsWith("inputs/attachments/") && !file.path.slice("inputs/attachments/".length).includes("/");
+    if (!file.path || !rootFile && !inputFile) continue;
+    const candidates = attachments.filter((attachment) => {
+      const safe = safeAttachmentName(attachment.name);
+      const numbered = file.name.endsWith(`-${safe}`) && /^\d+$/.test(file.name.slice(0, -(safe.length + 1)));
+      return (rootFile ? file.name === attachment.name : file.name === safe || numbered) && attachment.size !== null && attachment.size === file.size;
+    });
+    if (Date.now() >= deadline) break;
+    if (!candidates.length || file.size === null || file.size > budget || reads >= 10) continue;
+    reads += 1;
+    budget -= file.size;
+    let timer;
+    try {
+      const result = await Promise.race([
+        read(file.path, file.size),
+        new Promise((resolve10) => {
+          timer = setTimeout(() => resolve10(null), Math.max(0, deadline - Date.now()));
+        })
+      ]);
+      if (!result?.ok) continue;
+      const bytes2 = Buffer.from(result.contentBase64, "base64");
+      if (bytes2.length !== file.size) continue;
+      const hash2 = (0, import_node_crypto51.createHash)("sha256").update(bytes2).digest("hex");
+      if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
+    } catch {
+    } finally {
+      if (timer) clearTimeout(timer);
+    }
+  }
+  return copies;
+}
+var import_node_crypto51, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS;
+var init_files_view = __esm({
+  "../server/src/domains/chat-sessions/files-view.ts"() {
+    "use strict";
+    import_node_crypto51 = require("node:crypto");
+    init_chat_attachment_files();
+    init_src();
+    WORKDIR_WALK_MAX_DEPTH = 3;
+    WORKDIR_WALK_MAX_ENTRIES = 200;
+    WORKDIR_WALK_MAX_LIST_CALLS = 20;
+    WORKDIR_WALK_BUDGET_MS = 1e4;
+  }
+});
+
+// ../server/src/domains/projects/chat-files.ts
+async function collectProjectChatFiles(chat, projectId2, meta) {
+  if (!chat.listAttachmentMessages) return [];
+  const messages = await chat.listAttachmentMessages(projectId2);
+  const sessions = new Map(await Promise.all([...new Set(messages.map((m2) => m2.sessionId))].map(async (id) => [id, await chat.getSession(id)])));
+  const visible = messages.filter((m2) => {
+    const session = sessions.get(m2.sessionId);
+    return session?.projectId === projectId2 && session.visibility !== "internal" && !session.analyzedRunId;
+  });
+  const byMessage = new Map(visible.map((m2) => [m2.messageId, m2]));
+  const rows = await collectMessageFiles(visible.map((m2) => ({ ...m2, id: m2.messageId })), {
+    meta
+  });
+  return mergeChatSessionFiles(rows, []).filter((row) => row.blob_ref !== null).map((row) => {
+    const message = byMessage.get(row.message_id);
+    const session = sessions.get(message.sessionId);
+    return {
+      projectId: projectId2,
+      fileId: `chat:${message.sessionId}:${row.id}`,
+      name: row.name,
+      blobId: row.blob_ref,
+      contentType: row.content_type ?? void 0,
+      size: row.size,
+      uploadedBy: session.humanActorId,
+      uploadedAt: row.updated_at
+    };
+  });
+}
+var init_chat_files2 = __esm({
+  "../server/src/domains/projects/chat-files.ts"() {
+    "use strict";
+    init_files_view();
+  }
+});
+
 // ../server/src/domains/projects/index.ts
 function createProjectsDomain(opts) {
   const build = (companyId, deps) => {
@@ -228089,7 +228464,8 @@ function createProjectsDomain(opts) {
       opts.listMembers ? async () => buildResolver(
         deps?.actorDirectory ?? opts.actorDirectory,
         await memberNameResolver(opts.listMembers, companyId)
-      ) : void 0
+      ) : void 0,
+      opts.listChatFiles ? (projectId2) => opts.listChatFiles(companyId, projectId2) : void 0
     );
     if (opts.onProjectNameChangedFor) {
       const handler = opts.onProjectNameChangedFor(companyId);
@@ -228141,6 +228517,7 @@ var init_projects = __esm({
     init_routes5();
     init_service4();
     init_collab();
+    init_chat_files2();
     init_routes5();
     init_service4();
     init_projection();
@@ -228156,11 +228533,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto51, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto52, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -228252,7 +228629,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto51.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto52.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -228461,7 +228838,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto51.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto52.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -228592,7 +228969,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto51.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto52.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -228649,7 +229026,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto51.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto52.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -228887,11 +229264,11 @@ var init_service6 = __esm({
 });
 
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto52, MemberOffboardingService;
+var import_node_crypto53, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto52 = require("node:crypto");
+    import_node_crypto53 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -228963,7 +229340,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto52.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto53.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -229473,18 +229850,18 @@ var init_routes6 = __esm({
 
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto53.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto54.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto53.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto54.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto53, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto54, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -229509,7 +229886,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto53.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto54.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -229929,7 +230306,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope = companyId?.trim();
-  const suffix = scope ? `c${(0, import_node_crypto54.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope ? `c${(0, import_node_crypto55.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -230258,12 +230635,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto54;
+var import_node_crypto55;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto55 = require("node:crypto");
   }
 });
 
@@ -230697,7 +231074,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto55.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto56.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -230859,13 +231236,13 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto55.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto56.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto55, import_node_fs15, import_node_url6, import_node_path21;
+var import_node_crypto56, import_node_fs15, import_node_url6, import_node_path21;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     import_node_fs15 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path21 = require("node:path");
@@ -231346,7 +231723,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs25.statSync(absBundle).size;
-  const digest = (0, import_node_crypto56.createHash)("sha256").update(fs25.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto57.createHash)("sha256").update(fs25.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -231442,12 +231819,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto56, fs25, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto57, fs25, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto56 = require("node:crypto");
+    import_node_crypto57 = require("node:crypto");
     fs25 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path25 = __toESM(require("node:path"), 1);
@@ -231467,7 +231844,7 @@ var init_readonly_bundle = __esm({
 
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto57.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto58.randomUUID)().slice(0, 8)}`);
   return async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -231560,7 +231937,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key) {
-  return `ws:wo-${(0, import_node_crypto57.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto58.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(kernel, workspace) {
   const arts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === workspace);
@@ -231573,11 +231950,11 @@ function existingWorkorder(kernel, workspace) {
     spawned: arts.map((a) => ({ id: a.id, type: a.type, owner: a.owner }))
   };
 }
-var import_node_crypto57, enc2;
+var import_node_crypto58, enc2;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
     init_uncategorized_project();
     init_planner();
     enc2 = (s2) => new TextEncoder().encode(s2);
@@ -232974,12 +233351,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto58, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto59, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service8 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
     init_src5();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -233210,7 +233587,7 @@ var init_service8 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto58.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto59.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -233801,171 +234178,6 @@ var init_execution_continuity2 = __esm({
   }
 });
 
-// ../server/src/domains/chat-sessions/files-view.ts
-function reasonFromWorkdirCode(code2) {
-  switch (code2) {
-    case "NODE_OFFLINE":
-      return "NODE_OFFLINE";
-    case "TIMEOUT":
-      return "TIMEOUT";
-    default:
-      return "ERROR";
-  }
-}
-function joinRel(dir, name) {
-  return dir ? `${dir}/${name}` : name;
-}
-async function collectWorkdirFiles(bridge, loc, now = Date.now) {
-  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
-  const items = [];
-  let listCalls = 0;
-  let truncated = false;
-  const listDir = (path41) => {
-    listCalls += 1;
-    return bridge.list(loc.nodeId, {
-      workdirKey: loc.workdirKey,
-      runtimeKind: loc.runtimeKind,
-      rtId: loc.rtId,
-      path: path41
-    });
-  };
-  const root = await listDir("");
-  if (!root.ok) {
-    if (root.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
-    return { ok: false, reason: reasonFromWorkdirCode(root.code) };
-  }
-  let level = [{ path: "", outcome: root }];
-  for (let depth = 0; depth <= WORKDIR_WALK_MAX_DEPTH; depth += 1) {
-    const nextDirs = [];
-    for (const { path: dir, outcome } of level) {
-      if (!outcome.ok) {
-        truncated = true;
-        continue;
-      }
-      if (outcome.truncated) truncated = true;
-      for (const entry of outcome.entries) {
-        if (entry.type === "dir") {
-          nextDirs.push(joinRel(dir, entry.name));
-          continue;
-        }
-        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
-          truncated = true;
-          continue;
-        }
-        const rel = joinRel(dir, entry.name);
-        items.push({
-          id: `workdir:${rel}`,
-          name: entry.name,
-          kind: "file",
-          // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
-          // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
-          content_type: null,
-          size: entry.size,
-          updated_at: entry.mtime,
-          source: "workdir",
-          blob_ref: null,
-          path: rel,
-          message_id: null,
-          // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
-          // 这里是**按能力不渲染**的判据，不是置灰假钮。
-          editable: false
-        });
-      }
-    }
-    if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
-      if (nextDirs.length > 0) truncated = true;
-      break;
-    }
-    const budget = WORKDIR_WALK_MAX_LIST_CALLS - listCalls;
-    if (budget <= 0 || now() >= deadline) {
-      truncated = true;
-      break;
-    }
-    const take = nextDirs.slice(0, budget);
-    if (take.length < nextDirs.length) truncated = true;
-    const outcomes = await Promise.all(take.map((p2) => listDir(p2)));
-    level = take.map((p2, i) => ({ path: p2, outcome: outcomes[i] }));
-  }
-  return { ok: true, items, truncated };
-}
-async function collectMessageFiles(messages, blobs) {
-  const rows = [];
-  for (const message of messages) {
-    if (!Array.isArray(message.attachments)) continue;
-    message.attachments.forEach((attachment, index2) => {
-      if (!attachment || typeof attachment.name !== "string" || !attachment.name) return;
-      const blobRef = typeof attachment.blobRef === "string" && attachment.blobRef ? attachment.blobRef : null;
-      rows.push({
-        item: {
-          id: `msg:${message.id}:${index2}`,
-          name: attachment.name,
-          kind: "file",
-          updated_at: attachment.updatedAt ?? message.createdAt,
-          source: "message",
-          blob_ref: blobRef,
-          path: null,
-          message_id: message.id,
-          // 没有 blobRef 的是**历史纯文本附件**（契约注释：legacy text attachments may only
-          // contain `name`）——没有可写回的载体，一律不给编辑入口。
-          editable: blobRef !== null && isEditableFileName(attachment.name)
-        },
-        blobRef,
-        declaredType: typeof attachment.contentType === "string" && attachment.contentType ? attachment.contentType : null
-      });
-    });
-  }
-  const metaCache = /* @__PURE__ */ new Map();
-  const metaOf = (ref2) => {
-    if (!blobs) return Promise.resolve(null);
-    let hit = metaCache.get(ref2);
-    if (!hit) {
-      hit = blobs.meta(ref2).catch(() => null);
-      metaCache.set(ref2, hit);
-    }
-    return hit;
-  };
-  return Promise.all(rows.map(async ({ item, blobRef, declaredType }) => {
-    const meta = blobRef ? await metaOf(blobRef) : null;
-    return {
-      ...item,
-      content_type: declaredType ?? meta?.contentType ?? null,
-      size: meta?.size ?? null
-    };
-  }));
-}
-function mergeChatSessionFiles(messageItems, workdirItems) {
-  const out = [];
-  const seenMessageKeys = /* @__PURE__ */ new Set();
-  const messageNames = /* @__PURE__ */ new Set();
-  for (const item of messageItems) {
-    const key = `${item.name}\0${item.blob_ref ?? ""}`;
-    if (seenMessageKeys.has(key)) continue;
-    seenMessageKeys.add(key);
-    messageNames.add(item.name);
-    out.push(item);
-  }
-  const seenWorkdirPaths = /* @__PURE__ */ new Set();
-  for (const item of workdirItems) {
-    if (item.path === item.name && messageNames.has(item.name)) continue;
-    if (seenWorkdirPaths.has(item.id)) continue;
-    seenWorkdirPaths.add(item.id);
-    out.push(item);
-  }
-  out.sort((a, b2) => b2.updated_at.localeCompare(a.updated_at) || a.name.localeCompare(b2.name));
-  return out;
-}
-var WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS;
-var init_files_view = __esm({
-  "../server/src/domains/chat-sessions/files-view.ts"() {
-    "use strict";
-    init_src();
-    WORKDIR_WALK_MAX_DEPTH = 3;
-    WORKDIR_WALK_MAX_ENTRIES = 200;
-    WORKDIR_WALK_MAX_LIST_CALLS = 20;
-    WORKDIR_WALK_BUDGET_MS = 1e4;
-  }
-});
-
 // ../server/src/domains/collab/gap-thread.ts
 function gapThreadSessionId(executorActorId) {
   return `${GAP_THREAD_SESSION_PREFIX}${executorActorId}`;
@@ -234470,7 +234682,7 @@ function createChatSessionsDomain(opts) {
       if (!text5.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto59.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto60.randomUUID)()}`;
       drafts.set(id, { text: text5, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -234522,7 +234734,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = await currentRuntimeId(body2.aiActorId) ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto59.randomUUID)(),
+        id: (0, import_node_crypto60.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -234628,7 +234840,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto59.randomUUID)(),
+        id: (0, import_node_crypto60.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -234669,7 +234881,7 @@ function createChatSessionsDomain(opts) {
       const known = key ? cur.find((x2) => x2.clientKey === key) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store.enqueuePendingMessage({
-        id: (0, import_node_crypto59.randomUUID)(),
+        id: (0, import_node_crypto60.randomUUID)(),
         chatSessionId: sid,
         text: text5,
         ...attachments.length ? { attachments } : {},
@@ -235024,6 +235236,7 @@ function createChatSessionsDomain(opts) {
       const blobAccess = opts.resolveBlobs ? await opts.resolveBlobs(req.auth?.companyId) : opts.blobs;
       const messageItems = await collectMessageFiles(attachmentRows, blobAccess);
       let workdirItems = [];
+      let materializedCopies = /* @__PURE__ */ new Set();
       let workdirAvailable = false;
       let workdirTruncated = false;
       let workdirReason = "NOT_ENABLED";
@@ -235037,13 +235250,18 @@ function createChatSessionsDomain(opts) {
           if (outcome.ok) {
             workdirAvailable = true;
             workdirItems = outcome.items;
+            materializedCopies = await findMaterializedAttachmentCopies(
+              messageItems,
+              workdirItems,
+              (path41, maxBytes) => bridge.read(located.loc.nodeId, { ...located.loc, path: path41 }, maxBytes)
+            );
             workdirTruncated = outcome.truncated;
           } else {
             workdirReason = outcome.reason;
           }
         }
       }
-      const items = mergeChatSessionFiles(messageItems, workdirItems);
+      const items = mergeChatSessionFiles(messageItems, workdirItems, materializedCopies);
       const body2 = {
         total: items.length,
         items,
@@ -235112,11 +235330,11 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto59, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS, WORKDIR_READ_MAX_BYTES;
+var import_node_crypto60, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS, WORKDIR_READ_MAX_BYTES;
 var init_chat_sessions = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     init_src();
     init_chat_session();
     init_files_view();
@@ -236520,7 +236738,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto60.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto61.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -236576,11 +236794,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto60, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto61, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service9 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -237394,11 +237612,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto61.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto62.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto61.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto62.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -237428,11 +237646,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto61, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto62, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -238588,7 +238806,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto62.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto63.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -238605,11 +238823,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto62;
+var import_node_crypto63;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -238723,17 +238941,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto63.createHash)("sha256").update(canonical).digest("hex");
+  return (0, import_node_crypto64.createHash)("sha256").update(canonical).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto63.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto64.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto63, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto64, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -238941,7 +239159,7 @@ function routeToSession(hub, nodeId, dispatchId, msg) {
 function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
   const unknownIfInterrupting = input.interrupt ? { interrupt: "unknown" } : {};
   if (entry.exited) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
-  const requestId = (0, import_node_crypto64.randomUUID)();
+  const requestId = (0, import_node_crypto65.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve10) => {
@@ -238954,11 +239172,11 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     entry.appendWaiters.push({ requestId, resolve: resolve10, timer });
   });
 }
-var import_node_crypto64, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto65, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 500;
@@ -239308,7 +239526,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto64.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto65.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -239522,7 +239740,7 @@ var init_daemon_adapter = __esm({
         }));
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto64.randomUUID)();
+        const requestId = (0, import_node_crypto65.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve10) => {
@@ -239630,13 +239848,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto65, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto66, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto65.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto66.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc3 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -239883,11 +240101,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto66, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto67, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_src5();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -240156,7 +240374,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto66.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto67.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -240535,8 +240753,8 @@ ${ctx.nodeFault}
             this.deps.log?.(`[coordinator] ${workspace} \u5168\u5C40\u4E0A\u4E0B\u6587\u8BFB\u53D6\u5931\u8D25\uFF0C\u7EE7\u7EED\u6CBF\u7528\u539F\u534F\u8C03\u8005\u4EFB\u52A1\uFF1A${String(error2)}`);
           }
         }
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto66.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto66.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto67.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto67.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           task,
           ``,
@@ -240580,7 +240798,7 @@ ${ctx.nodeFault}
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto66.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto67.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -240785,11 +241003,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto67, ident3, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto68, ident3, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -240969,7 +241187,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto67.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto68.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash2, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -249392,11 +249610,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto68, ident12, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto69, ident12, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident12 = (s2) => {
@@ -249606,7 +249824,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto68.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto69.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -249872,11 +250090,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto69, matchClause, ident14, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto70, matchClause, ident14, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -250086,7 +250304,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto69.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto70.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -251533,14 +251751,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto70.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto71.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto70, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto71, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -251614,7 +251832,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto71.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto72.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -251794,11 +252012,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto71, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto72, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -251877,11 +252095,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto72, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto73, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -252266,7 +252484,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto72.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto73.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -254742,7 +254960,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto74.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -255130,11 +255348,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto73, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto74, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -255366,8 +255584,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto74.randomBytes)(12);
-  const cipher = (0, import_node_crypto74.createCipheriv)("aes-256-gcm", bytes(key), iv);
+  const iv = (0, import_node_crypto75.randomBytes)(12);
+  const cipher = (0, import_node_crypto75.createCipheriv)("aes-256-gcm", bytes(key), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -255377,7 +255595,7 @@ function openSnapshot(snapshot, key) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto74.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto75.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -255385,11 +255603,11 @@ function openSnapshot(snapshot, key) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto74, PREFIX3, bytes, aad2;
+var import_node_crypto75, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key) => {
       const value2 = Buffer.from(key);
@@ -257620,20 +257838,20 @@ var fs44 = __toESM(require("node:fs"));
 var os14 = __toESM(require("node:os"));
 var path40 = __toESM(require("node:path"));
 var import_node_child_process23 = require("node:child_process");
-var import_node_crypto81 = require("node:crypto");
+var import_node_crypto82 = require("node:crypto");
 
 // ../cli/src/cli.ts
 var fs39 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path35 = __toESM(require("node:path"), 1);
-var import_node_crypto79 = require("node:crypto");
+var import_node_crypto80 = require("node:crypto");
 
 // ../cli/src/serve.ts
 var fs33 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto75 = require("node:crypto");
+var import_node_crypto76 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
 // ../cli/src/artifact-discovery-source.ts
@@ -258318,7 +258536,7 @@ init_src9();
 init_src();
 init_trajectory();
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto75.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto76.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -258518,7 +258736,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path29.join(repoRoot, "node_modules/.bin/tsx");
   const main = path29.join(repoRoot, "packages/cli/src/main.ts");
-  const key = (0, import_node_crypto75.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key = (0, import_node_crypto76.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path29.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
   let dir;
@@ -258899,7 +259117,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto75.randomUUID)();
+    const requestId = (0, import_node_crypto76.randomUUID)();
     const task = new Promise((resolve10) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -259007,6 +259225,16 @@ async function startServe(opts) {
     // ADR 0125：写 scope=project 变量时校验 projectId 真实存在（getProject 直查，含临时项目）。
     // projectStateStore 在下方 ~行 1023 才赋值——本箭头只在请求时跑，那时已就绪（同 resolveDispatchScope 惰性模式）。
     projectExists: async (id) => await projectStateStore.getProject(id) !== null,
+    /* 子 PRD《密钥管理》§1 的权限判据：密钥的写 / 删要认「创建者本人或组织管理者」。
+       owner 与 admin 都算组织管理者（与组织页 `orgIdentityOf` 同一口径）。
+       `controlPlaneStore` 在下方才赋值——本箭头只在请求时跑，那时已就绪（同 projectExists 的惰性模式）。
+       成员表按 accountId 主键，但行上带 actorId，密钥那边手里只有 actorId，所以按 actorId 找。 */
+    isCompanyManager: async (companyId, actorId) => {
+      if (!companyId || !actorId) return false;
+      const members = await controlPlaneStore.listMembers(companyId).catch(() => []);
+      const me = members.find((m2) => m2.actorId === actorId);
+      return me?.role === "owner" || me?.role === "admin";
+    },
     // CO-302 数据面隔离（actors 域试点）：按当前公司取其引擎，用各自 registry 服务该域请求。
     // engineRouter 在下方（行 ~411）以 const 声明；此箭头只在请求时调用，那时已初始化，闭包引用合法
     // （TDZ 只在构造时访问才报错，这里不访问）。默认公司命中现有单实例（registry===registryStore），
@@ -259151,6 +259379,20 @@ async function startServe(opts) {
   const defaultBranchResolver = makeDefaultBranchResolver({ log: (m2) => console.warn(m2) });
   const perCompanyActorNames = /* @__PURE__ */ new Map();
   const projectsDomain2 = createProjectsDomain({
+    listChatFiles: async (companyId, projectId2) => {
+      const chat = await chatStoreFor(companyId);
+      const facts = await blobStoreFor(companyId);
+      return collectProjectChatFiles(chat, projectId2, async (ref2) => {
+        for (const cabinet of [assets, facts]) {
+          try {
+            const meta = await cabinet.meta?.(ref2);
+            if (meta) return meta;
+          } catch {
+          }
+        }
+        return null;
+      });
+    },
     projects: projectStateStore,
     artifacts: artifactStateStore,
     kernel: defaultCompanyKernel,
@@ -259597,7 +259839,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto75.randomUUID)(),
+                id: (0, import_node_crypto76.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -259643,7 +259885,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto75.randomUUID)();
+        const sessionId = (0, import_node_crypto76.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -260646,7 +260888,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto75.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto76.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -261498,10 +261740,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto75.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto76.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto75.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto75.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto76.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto76.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           return {
@@ -262623,7 +262865,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = `dispatch:${(0, import_node_crypto75.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto76.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -262708,7 +262950,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto75.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto76.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -263086,7 +263328,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto75.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto76.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -264976,7 +265218,7 @@ var SessionProcessState = class {
 // ../cli/src/daemon/ws-client.ts
 init_wrapper();
 var import_node_os9 = require("node:os");
-var import_node_crypto76 = require("node:crypto");
+var import_node_crypto77 = require("node:crypto");
 init_src8();
 init_src6();
 
@@ -265699,7 +265941,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto76.randomUUID)();
+    const requestId = (0, import_node_crypto77.randomUUID)();
     return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -266099,7 +266341,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process21 = require("node:child_process");
 var import_node_fs21 = require("node:fs");
-var import_node_crypto77 = require("node:crypto");
+var import_node_crypto78 = require("node:crypto");
 var import_node_os12 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -266165,7 +266407,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto77.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto78.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -267936,13 +268178,13 @@ function ownFlagsFromDecl(command) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto78 = require("node:crypto");
+var import_node_crypto79 = require("node:crypto");
 var import_node_child_process22 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto78.createHash)("sha256").update(canonical).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto79.createHash)("sha256").update(canonical).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -268152,7 +268394,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto79.randomUUID)();
+  const waiterId = (0, import_node_crypto80.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -268574,7 +268816,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path35.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto79.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto80.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -271587,13 +271829,13 @@ var LEGACY_SYSTEMD_UNIT = "oasis-node.service";
 var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 
 // src/install.ts
-var import_node_crypto80 = require("node:crypto");
+var import_node_crypto81 = require("node:crypto");
 var fs43 = __toESM(require("node:fs"));
 var path39 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto80.createHash)("sha256").update(fs43.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto81.createHash)("sha256").update(fs43.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -271716,7 +271958,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.15" : "dev";
+var PKG_VERSION = true ? "2.2.17" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -272001,7 +272243,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto81.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto82.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }