oasis_test_v2 2.2.16 → 2.2.18

package/dist/index.js

@@ -5737,6 +5737,26 @@ CREATE TABLE IF NOT EXISTS ${q2}.event_handler_log (
   PRIMARY KEY (event_seq, handler_name)
 );
 
+-- \u5F85\u4EBA\u786E\u8BA4\u7684 intervention \u8349\u6848\u5361\uFF08\u547D\u4EE4\u6388\u6743\u5361 / \u6539\u56FE\u5361\uFF09\u3002
+--
+-- \u4E3A\u4EC0\u4E48\u8981\u843D\u5E93\uFF082026-09-11 \u5B9E\u5F55\uFF09\uFF1A\u65E7\u5F15\u64CE\u628A\u8D77\u8349\u8BB0\u6210\u4E00\u6761 propose_intervention op \u8FDB oplog\uFF0C
+-- \u91CD\u542F replay \u5C31 fold \u56DE pendingReviews\uFF1B\u51B3\u7B56 0130 \u9000\u5F79 oplog \u65F6\u8FD9\u4E00\u6BB5\u53EA\u642C\u4E86\u5185\u5B58 Map\uFF0C
+-- \u6CE8\u91CA\u8FD8\u5199\u7740\u300C\u77ED\u751F\u547D\u5468\u671F\u3001\u91CD\u542F\u4E22\u53EF\u63A5\u53D7\u300D\u3002\u4F46\u8FD9\u5F20\u5361\u7684\u8BED\u4E49\u662F**\u7B49\u4E00\u4E2A\u771F\u4EBA\u6765\u70B9**\uFF0C\u5BFF\u547D\u7531\u4EBA\u51B3\u5B9A\uFF0C
+-- \u4E0D\u7531\u8FDB\u7A0B\u51B3\u5B9A\u3002v2 \u4E0A 31 \u5C0F\u65F6\u91CD\u542F\u4E86 158 \u6B21\uFF08\u22485 \u6B21/\u5C0F\u65F6\uFF09\uFF0C\u5B9E\u6D4B\u4E00\u5F20\u5361\u8D77\u8349 24 \u79D2\u540E\u5C31\u88AB\u91CD\u542F\u62B9\u6389\uFF0C
+-- \u534F\u8C03\u8005\u5374\u4ECD\u5728\u5BF9\u8BDD\u91CC\u8BA9\u4EBA\u300C\u53BB\u6536\u4EF6\u7BB1\u627E\u90A3\u5F20\u5361\u300D\u2014\u2014\u804A\u5929\u9875\u548C\u6536\u4EF6\u7BB1\u8BFB\u7684\u662F\u540C\u4E00\u4EFD\u5185\u5B58\uFF0C\u4E00\u8D77\u53D8\u7A7A\u3002
+--
+-- card \u5217\u7528 jsonb \u6574\u5B58\uFF1A\u5361\u4F53\u7684\u5F62\u72B6\u5F52 core\uFF08KernelBridge.draftCards\uFF09\u7BA1\uFF0C\u5F15\u64CE\u53EA\u8D1F\u8D23\u5B58\u53D6\uFF0C
+-- \u4E0D\u8BA4\u91CC\u9762\u7684\u4E1A\u52A1\u5B57\u6BB5\u2014\u2014\u5426\u5219\u6BCF\u52A0\u4E00\u4E2A\u5B57\u6BB5\u90FD\u8981\u52A8 DDL\uFF0C\u800C\u5F15\u64CE\u4E0D\u8BE5\u77E5\u9053 InterventionPlan \u662F\u4EC0\u4E48\u3002
+-- \u7D22\u5F15\u4F4D\u53EA\u7559\u6392\u969C\u8981\u7528\u7684\u90A3\u4E24\u5217\u3002\u4E0D\u52A0 workorder_id \u5916\u952E\uFF1A\u5361\u53EF\u4EE5\u6307\u5411\u4E00\u4E2A\u521A\u88AB\u4F5C\u5E9F\u7684\u8282\u70B9\uFF0C
+-- \u5916\u952E\u4F1A\u8BA9\u300C\u8D77\u8349\u300D\u8FD9\u4E00\u6B65\u76F4\u63A5\u5931\u8D25\uFF0C\u6BD4\u7559\u4E00\u6761\u5B64\u513F\u5361\u7CDF\u5F97\u591A\u3002
+CREATE TABLE IF NOT EXISTS ${q2}.intervention_drafts (
+  draft_id     text PRIMARY KEY,
+  workorder_id text,
+  created_at   timestamptz NOT NULL,
+  card         jsonb NOT NULL
+);
+CREATE INDEX IF NOT EXISTS intervention_drafts_wo_idx ON ${q2}.intervention_drafts (workorder_id);
+
 -- \u2500\u2500 \u8FC1\u79FB\uFF1A\u65E2\u6709\u90E8\u7F72\u7684\u5217\u589E\u91CF\uFF08CREATE TABLE IF NOT EXISTS \u4E0D\u52A0\u5217\uFF0C\u8FD9\u91CC\u8865\uFF09\u2500\u2500
 -- \u2605 review_requirements.source \u6269\u4E3A\u56DB\u503C\uFF08+'closure'\uFF09\uFF1A\u7ED3\u6848\u4EBA\u95F8\u7531 scan \u5728\u6536\u53E3\u90A3\u4E00\u523B\u5199\u5165\uFF0C\u4E0E manual \u5206\u5BB6\u3002
 --   \u5199\u6CD5\u4E0E\u4E0B\u65B9 works_lane_check \u540C\u6B3E\uFF08\u5148\u5220\u540E\u52A0\uFF0C\u6210\u5BF9\u5E42\u7B49\uFF09\u3002
@@ -11278,6 +11298,38 @@ var init_store_postgres = __esm({
           createdAt: iso(r.createdAt)
         }));
       }
+      /* ── intervention 草案卡（见 store.ts 的接口注释）。与上面两口钟同类：直连 pool 的窄读写，
+            标识符位一律经 quoteIdent——带连字符的公司 schema 裸拼会 syntax error。 ── */
+      async listInterventionDrafts() {
+        const res = await this.pool.query(
+          `SELECT draft_id AS "draftId", workorder_id AS "workorderId", created_at AS "createdAt", card
+         FROM ${quoteIdent(this.schema)}.intervention_drafts
+        ORDER BY created_at`
+        );
+        return res.rows.map((r) => ({
+          draftId: r.draftId,
+          workorderId: r.workorderId ?? null,
+          createdAt: iso(r.createdAt),
+          card: r.card
+        }));
+      }
+      async saveInterventionDraft(record8) {
+        await this.pool.query(
+          `INSERT INTO ${quoteIdent(this.schema)}.intervention_drafts (draft_id, workorder_id, created_at, card)
+            VALUES ($1, $2, $3::timestamptz, $4::jsonb)
+       ON CONFLICT (draft_id) DO UPDATE
+              SET workorder_id = EXCLUDED.workorder_id,
+                  created_at   = EXCLUDED.created_at,
+                  card         = EXCLUDED.card`,
+          [record8.draftId, record8.workorderId, record8.createdAt, JSON.stringify(record8.card ?? null)]
+        );
+      }
+      async deleteInterventionDraft(draftId) {
+        await this.pool.query(
+          `DELETE FROM ${quoteIdent(this.schema)}.intervention_drafts WHERE draft_id = $1`,
+          [draftId]
+        );
+      }
     };
     PgTx = class {
       constructor(c, s2) {
@@ -15588,7 +15640,7 @@ ${m2.spec.split("\n").map((l) => `  > ${l}`).join("\n")}`);
       `- \u7F3A\u4E00\u4E2A**\u8FD8\u4E0D\u5B58\u5728\u7684\u524D\u7F6E** \u2192 \`oasis gap\` \u4EA4\u4E0A\u53BB\uFF0C**\u522B\u786C\u7F16**\uFF1B\u5DF2\u505A\u5B8C\u7684\u90E8\u5206\u7167\u5E38 \`propose\`\uFF0C\u4F46\u8FD9\u4E00\u8F6E \`conclude\` \u4F1A\u88AB\u62D2\uFF0C\u63D0\u4EA4\u5B8C\u5373\u6536\u5DE5\u2014\u2014\u524D\u7F6E\u5C31\u7EEA\u540E\u7CFB\u7EDF\u4F1A\u5E26\u7740\u89E3\u6CD5\u8BF4\u660E\u91CD\u65B0\u5524\u8D77\u4F60\u3002`,
       `- \u5BF9**\u4E0A\u6E38**\u6709\u610F\u89C1\u2014\u2014\u6709\u7591\u95EE\u3001\u8981\u5B83\u6539\u3001\u5224\u5B83\u6CA1\u8FBE\u6807 \u2192 \`oasis annotate <\u4E0A\u6E38id> --body "<\u8BF4\u6E05\u695A>"\` \u540E**\u6536\u5DE5**\u3002\u5199\u7ED9\u4E0A\u6E38\u7684\u8BC4\u8BBA\u81EA\u52A8\u5E26\u963B\u585E\u529B\uFF1A**\u5B83\u7B54\u590D\u524D\u4E0D\u80FD\u6536\u5C3E**\uFF0C\u7B54\u590D\u540E\u7CFB\u7EDF\u91CD\u6D3E\u4F60\u3002`,
       ...args.part === void 0 ? [`- \u6D3B\u592A\u5927 / \u53EF\u5E76\u884C \u2192 \`oasis add-revision\` \u62C6\u6210\u5B50\u90E8\u4EF6\u6D3E\u51FA\u53BB\uFF0C\u522B\u4E00\u4EBA\u4E00\u4F1A\u8BDD\u786C\u625B\u3002`] : [],
-      ...batchedContinuation && args.part === void 0 ? [`- \u957F\u4EFB\u52A1\u5DF2\u5141\u8BB8\u5206\u6279\u7EED\u8DD1\uFF1A\u4E00\u6279\u6709\u8FDB\u5C55\u4F46\u6574\u4F53\u672A\u5B8C\u6210\u65F6\uFF0C\u6309\u300C\u600E\u4E48\u63D0\u4EA4\u300D\u91CC\u7684 propose \u547D\u4EE4\u8FFD\u52A0 \`--checkpoint --continue\`\uFF0Creason \u5199\u6E05\u672C\u6279\u5B8C\u6210\u4E86\u4EC0\u4E48\u3001\u5269\u4EC0\u4E48\u3001\u4E0B\u6279\u4ECE\u54EA\u7EE7\u7EED\uFF0C\u7136\u540E\u6536\u5DE5\uFF1B\u7CFB\u7EDF\u4F1A\u6D3E\u53D1\u4E0B\u4E00\u8F6E\u6B63\u5F0F session\u3002\u5168\u90E8\u5B8C\u6210\u65F6\u7167\u5E38 propose \u540E \`oasis conclude ${artifactId}\`\u3002`] : [],
+      ...batchedContinuation && args.part === void 0 ? [`- \u957F\u4EFB\u52A1\u5DF2\u5141\u8BB8\u5206\u6279\u7EED\u8DD1\uFF1A\u4E00\u6279\u6709\u8FDB\u5C55\u4F46\u6574\u4F53\u672A\u5B8C\u6210\u65F6\uFF0C\u6309\u300C\u600E\u4E48\u63D0\u4EA4\u300D\u91CC\u7684 propose \u547D\u4EE4\u8FFD\u52A0 \`--checkpoint --continue\`\uFF0Creason \u5199\u6E05\u672C\u6279\u5B8C\u6210\u4E86\u4EC0\u4E48\u3001\u5269\u4EC0\u4E48\u3001\u4E0B\u6279\u4ECE\u54EA\u7EE7\u7EED\uFF0C\u7136\u540E\u6536\u5DE5\uFF1B\u7CFB\u7EDF\u4F1A\u6D3E\u53D1\u4E0B\u4E00\u8F6E\u6B63\u5F0F session\u3002\u5168\u90E8\u5B8C\u6210\u65F6\u7167\u5E38 propose \u540E \`oasis conclude ${artifactId} --note "<\u4EA4\u4ED8\u7ED3\u8BBA>"\`\u3002`] : [],
       `- \u5199\u5165\u53EA\u8D70 \`oasis propose\`\uFF0C\u771F\u6B63\u5B8C\u6574\u4E86\u624D \`oasis conclude\`\uFF1B\u5361\u6CA1\u5361\u4F4F\u3001\u8FDB\u5EA6\u90FD\u662F\u7CFB\u7EDF\u7B97\u7684\uFF0C\u522B\u81EA\u5DF1\u7EF4\u62A4\u3002`,
       `- \u4F46**\u7B80\u5355\u3001\u81EA\u8DB3\u3001\u4E0D\u4F9D\u8D56\u672A\u5B9A\u51B3\u7B56\u7684\u4EFB\u52A1**\uFF08\u5982\u6539\u4E2A\u80CC\u666F\u8272\uFF09\u2192 \u76F4\u63A5\u505A\uFF0C\u5224\u65AD\u6743\u5728\u4F60\u3002`,
       ...typeDef?.recommendedInputs && typeDef.recommendedInputs.length > 0 ? [`- \u672C\u7C7B\u578B\u5E38\u89C1\u4E0A\u6E38\u4F9D\u8D56\uFF08\u63A8\u8350\uFF0C\u975E\u5F3A\u5236\uFF09\uFF1A${typeDef.recommendedInputs.join("\u3001")}\u2014\u2014\u4F9D\u8D56\u5176\u4E2D\u67D0\u4E2A\u800C\u5B83\u8FD8\u6CA1\u6709\uFF0C\u6309\u4E0A\u9762 gap \u89C4\u5219\u62A5\u7F3A\u53E3\u3002`] : []
@@ -19353,8 +19405,14 @@ var init_kernel_bridge = __esm({
       /** 下一轮刷新是否顺带重扫一小片"不脏"的工单。只由 `refreshModel({ resync: true })`（读模型时钟）置位。 */
       resyncRequested = false;
       /**
-       * intervention 待授权卡（内存态）。旧引擎存 oplog + fold 出 pendingReviews；新引擎无 oplog，
-       * 用内存 map 承载同样的「propose → 人等确认 → apply-draft/reject」流。短生命周期、重启丢可接受。
+       * intervention 待授权卡。内存 map 是**读路径的缓存**，真源在库里（`intervention_drafts` 表，
+       * 见 engine/schema.ts）——`open()` 启动时 rehydrate，propose 写库，apply/reject 删库。
+       *
+       * 旧引擎把起草记成一条 `propose_intervention` op 进 oplog，重启 replay 就 fold 回 pendingReviews；
+       * 决策 0130 退役 oplog 时这一段只搬了内存 Map，注释写着「短生命周期、重启丢可接受」。
+       * 2026-09-11 实录证伪了这句：v2 上 31 小时重启 158 次，一张卡起草 24 秒后就被抹掉，
+       * 而协调者仍在对话里让人「去收件箱找那张卡」——聊天页和收件箱读的是同一份 `pendingReviews`，
+       * 一起变空。这张卡的寿命由**等它的那个人**决定，不由进程决定，所以必须落库。
        */
       draftCards = /* @__PURE__ */ new Map();
       model;
@@ -19374,6 +19432,14 @@ var init_kernel_bridge = __esm({
           for (const record8 of records) kernel.markWorkorderDirty(record8.workorderId);
         });
         bus.onApplied((wid) => kernel.markWorkorderDirty(wid));
+        try {
+          for (const rec of await store.listInterventionDrafts()) {
+            const card2 = rec.card;
+            kernel.draftCards.set(rec.draftId, { ...card2, at: card2?.at || rec.createdAt });
+          }
+        } catch (err) {
+          console.warn(`[kernel-bridge] open \u6062\u590D\u5F85\u6388\u6743\u5361\u5931\u8D25\uFF08\u672C\u6B21\u91CD\u542F\u7684\u5B58\u91CF\u5361\u4F1A\u4E22\uFF09\uFF1A${String(err)}`);
+        }
         try {
           const all2 = await store.transaction((tx) => tx.listAllWorkorders());
           for (const id of all2) kernel.trackedWorkorders.add(id);
@@ -19384,6 +19450,39 @@ var init_kernel_bridge = __esm({
         return kernel;
       }
       /* ─────────────────────── 内部工具 ─────────────────────── */
+      /**
+       * 起草落库。**写失败不阻断起草**——卡已经在内存里、已经显示给人了，这时候抛错会让
+       * `oasis force-conclude` 整条命令失败，比"这张卡撑不过下次重启"糟得多。退化成本次改动之前的行为。
+       */
+      async persistDraftCard(draftId, card2) {
+        try {
+          await this.store.saveInterventionDraft({
+            draftId,
+            workorderId: this.workorderOfCard(card2),
+            createdAt: card2.at,
+            card: card2
+          });
+        } catch (err) {
+          console.warn(`[kernel-bridge] \u5F85\u6388\u6743\u5361\u843D\u5E93\u5931\u8D25 ${draftId}\uFF08\u91CD\u542F\u540E\u4F1A\u4E22\uFF09\uFF1A${String(err)}`);
+        }
+      }
+      /** 卡已终局（人点了确认或驳回）→ 删库。失败只记日志：内存已出队，残留行会在下次 rehydrate 后
+       *  被 apply/reject 的「卡不存在」分支挡掉，不会让已执行的命令被再执行一次。 */
+      async forgetDraftCard(draftId) {
+        try {
+          await this.store.deleteInterventionDraft(draftId);
+        } catch (err) {
+          console.warn(`[kernel-bridge] \u5F85\u6388\u6743\u5361\u5220\u5E93\u5931\u8D25 ${draftId}\uFF1A${String(err)}`);
+        }
+      }
+      /** 卡挂在哪张工单下（排障列用，允许为空）。锚点可能指向一个模型里已经没有的产物。 */
+      workorderOfCard(card2) {
+        const fromPlan = card2.plan?.workspace;
+        if (fromPlan) return fromPlan;
+        const anchor = card2.anchor;
+        if (!anchor) return null;
+        return this.model.artifacts.get(anchor)?.workspace ?? null;
+      }
       /** artifactId → 所属 workorderId（从 model 查）。 */
       wo(artifactId) {
         const a = this.model.artifacts.get(artifactId);
@@ -19554,7 +19653,8 @@ var init_kernel_bridge = __esm({
             workspace: cardWs,
             advisory: [],
             downstreamClosure: [],
-            at: "",
+            // 真实起草时刻。曾经恒为 ""：收件箱那行因此时间列印 "-"、排序键空串最小、恒沉到列表最后一行。
+            at: card2.at ?? "",
             // ★ anchor 也兜底到 plan ops 的产物 id——inbox change-confirm 用 r.anchor 找「anchor owner 的
             // 人类上级」（leadOf(r.anchor)）；graph-edit 卡之前恒空、boss 收不到卡（collab-inbox-audit 实测）。
             anchor: anchorId || card2.anchor || "",
@@ -21007,30 +21107,33 @@ var init_kernel_bridge = __esm({
       async proposeIntervention(plan, actor, opts) {
         const preview2 = await previewIntervention(this.model, plan, { schema: this.schema, roleIndex: this.roleIndex });
         const draftId = `draft:${(0, import_node_crypto3.randomUUID)()}`;
-        this.draftCards.set(draftId, {
+        const card2 = {
           kind: "graph-edit",
           plan,
           proposedBy: actor,
           origin: opts?.origin,
           parentMessageId: opts?.parentMessageId,
           changeClass: preview2.changeClass,
-          nonMonotonicOps: preview2.nonMonotonicOps
-        });
+          nonMonotonicOps: preview2.nonMonotonicOps,
+          at: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        this.draftCards.set(draftId, card2);
+        await this.persistDraftCard(draftId, card2);
         await this.refreshModel();
         return { draftId, changeClass: preview2.changeClass, nonMonotonicOps: preview2.nonMonotonicOps };
       }
       async proposeCommandAuthorization(args) {
         const originNorm = args.origin ?? null;
         const argsJson = JSON.stringify(args.args ?? {});
-        for (const [id, card2] of this.draftCards) {
-          if (card2.kind !== "command" || card2.command !== args.command) continue;
-          if ((card2.origin ?? null) !== originNorm) continue;
-          if (JSON.stringify(card2.commandArgs ?? {}) !== argsJson) continue;
+        for (const [id, card3] of this.draftCards) {
+          if (card3.kind !== "command" || card3.command !== args.command) continue;
+          if ((card3.origin ?? null) !== originNorm) continue;
+          if (JSON.stringify(card3.commandArgs ?? {}) !== argsJson) continue;
           await this.refreshModel();
           return { draftId: id };
         }
         const draftId = `draft:${(0, import_node_crypto3.randomUUID)()}`;
-        this.draftCards.set(draftId, {
+        const card2 = {
           kind: "command",
           command: args.command,
           commandArgs: args.args,
@@ -21038,8 +21141,11 @@ var init_kernel_bridge = __esm({
           anchor: args.artifactId,
           proposedBy: args.actor,
           origin: args.origin,
-          parentMessageId: args.parentMessageId
-        });
+          parentMessageId: args.parentMessageId,
+          at: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        this.draftCards.set(draftId, card2);
+        await this.persistDraftCard(draftId, card2);
         await this.refreshModel();
         return { draftId };
       }
@@ -21068,11 +21174,13 @@ var init_kernel_bridge = __esm({
           throw new Error(`\u547D\u4EE4\u6388\u6743\uFF1A\u6682\u4E0D\u652F\u6301\u6267\u884C ${card2.command}`);
         }
         this.draftCards.delete(args.draftId);
+        await this.forgetDraftCard(args.draftId);
         await this.refreshModel();
         return { command: card2.command, artifactId };
       }
       async rejectIntervention(args) {
         this.draftCards.delete(args.draftId);
+        await this.forgetDraftCard(args.draftId);
         await this.refreshModel();
       }
       /**
@@ -21383,6 +21491,7 @@ var init_kernel_bridge = __esm({
         }
         if (typeof plan.resolvesProposal === "string") {
           this.draftCards.delete(plan.resolvesProposal);
+          await this.forgetDraftCard(plan.resolvesProposal);
           await this.refreshModel();
         }
         return {
@@ -25452,7 +25561,9 @@ var init_codex = __esm({
         const reasoningEffort = this.opts.reasoningEffort;
         return runProtocolSession(job, {
           bin: this.opts.codexBin ?? "codex",
-          args: ["app-server", "--stdio"],
+          // 同 exec 那条路：关掉登录 shell，否则 `~/.profile` 会把 `$HOME/.local/bin` 前置到
+          // PATH 最前，压过注入的连接器 wrapper（理由与实证见 exec 分支里那段长注释）。
+          args: ["app-server", "--stdio", "-c", "allow_login_shell=false"],
           extraArgs: this.opts.extraArgs,
           blockedFlags: CODEX_APP_SERVER_BLOCKED_FLAGS,
           workRoot: this.opts.workRoot,
@@ -25633,6 +25744,24 @@ ${task}` : task;
           // 打开 reasoning 摘要通道：默认 auto，让 codex 产出 reasoning item（→ thought → 前端思考块）。
           ...this.opts.reasoningSummary !== "none" ? ["-c", `model_reasoning_summary=${this.opts.reasoningSummary ?? "auto"}`] : [],
           ...this.opts.reasoningEffort ? ["-c", `model_reasoning_effort=${this.opts.reasoningEffort}`] : [],
+          /* ★ 关掉登录 shell（2026-09-11）。
+                   codex 的 shell 工具默认把每条命令丢进 `/bin/bash -lc`——本机 codex 自己的
+                   thread_history 里逐字记着 `"command":"/bin/bash -lc \"pwd && rg …"`。
+                   登录 shell 会重跑 `~/.profile`，而 Ubuntu 的 profile 里是
+                   `PATH="$HOME/.local/bin:$PATH"`（**前置**）；于是任何装在 `~/.local/bin` 的同名 CLI
+                   都会抢到注入的连接器 wrapper 前面。实测后果：飞书连接器凭据、连接记录全对，
+                   dev-agent（codex）跑 `lark-cli whoami` 却回 `not_configured`——wrapper 被绕过、
+                   而隔离键 `LARKSUITE_CLI_CONFIG_DIR` 照旧生效指着空目录，两头落空。
+                   同机同用户的 claude-code agent 一切正常，差别只有这一个 `-l`。
+          
+                   `allow_login_shell` 是 codex 的正式配置键（本机实测：给它传整数会报
+                   `invalid type: integer, expected a boolean in \`allow_login_shell\``，
+                   而不存在的键是被静默忽略的），exec 与 app-server 两条路都吃 `-c` 覆盖。
+          
+                   ⚠ 未验证的一格：这个键**是否真的**就是那个 `-l` 的开关，只能等下一次
+                   codex 派单后在节点上 `ps` 看是 `bash -lc` 还是 `bash -c`。设错了是 no-op，不会更坏。 */
+          "-c",
+          "allow_login_shell=false",
           // ADR「agent CLI 启动参数员工级可配置化」：员工配置 job.extraArgs（在前）+ opts.extraArgs（静态默认，在后），
           // 过 CODEX_BLOCKED_FLAGS 拦截。追加在**位置 prompt 之前**（codex exec 的 [PROMPT] 必须是末位参数）。
           ...prepareExtraArgs(
@@ -28663,7 +28792,7 @@ function projectsIntoContent(kind, role, origin, telemetryTextInContent) {
       return true;
   }
 }
-var import_node_crypto15, CHAT_ITEMS_DOUBLE_WRITE_ENV, ChatItemLedger;
+var import_node_crypto15, CHAT_ITEMS_DOUBLE_WRITE_ENV, SEGMENT_END_NOTE, ChatItemLedger;
 var init_chat_item_ledger = __esm({
   "../server/src/chat-item-ledger.ts"() {
     "use strict";
@@ -28671,6 +28800,7 @@ var init_chat_item_ledger = __esm({
     init_chat_item();
     import_node_crypto15 = require("node:crypto");
     CHAT_ITEMS_DOUBLE_WRITE_ENV = "OASIS_CHAT_ITEMS_DOUBLE_WRITE";
+    SEGMENT_END_NOTE = "\u672C\u6BB5\u65E0\u8F93\u51FA\uFF08\u4EBA\u5728\u9996\u4E2A\u6B63\u6587\u4E4B\u524D\u63D2\u4E86\u8BDD\uFF09";
     ChatItemLedger = class {
       constructor(deps) {
         this.deps = deps;
@@ -28699,6 +28829,8 @@ var init_chat_item_ledger = __esm({
       log;
       persistEnabled;
       telemetryTextInContent;
+      /** 本段的「无输出」注解已经提前落过（`closeSegmentBeforeUserInput`），`beginSegment` 别再落一条。 */
+      segmentEndEmitted = false;
       /** **不变量 1**：`providerItemKey → itemId`，本账本唯一持有。切段/收尾清空。 */
       itemKeyMap = /* @__PURE__ */ new Map();
       /** 内存账本：itemId → 行。插入顺序即 seq 顺序。 */
@@ -28916,19 +29048,11 @@ var init_chat_item_ledger = __esm({
        * 映射一并清空——新段是新行，复用旧 itemId 会把新文本写进上一条消息。
        */
       beginSegment() {
-        this.closeStreamingRows("completed");
-        if (this.segmentItemCount === 0 && this.messageId) {
-          this.insert({
-            kind: "control",
-            role: "assistant",
-            status: "completed",
-            origin: "server",
-            text: "",
-            attrs: {},
-            inContent: false,
-            persist: true,
-            payload: { code: "segment_end", note: "\u672C\u6BB5\u65E0\u8F93\u51FA\uFF08\u4EBA\u5728\u9996\u4E2A\u6B63\u6587\u4E4B\u524D\u63D2\u4E86\u8BDD\uFF09" }
-          });
+        if (this.segmentEndEmitted) {
+          this.segmentEndEmitted = false;
+        } else {
+          this.closeStreamingRows("completed");
+          if (this.segmentItemCount === 0 && this.messageId) this.insertSegmentEnd();
         }
         this.itemKeyMap.clear();
         this.lastTurnId = null;
@@ -28936,6 +29060,41 @@ var init_chat_item_ledger = __esm({
         this.segment += 1;
         this.segmentItemCount = 0;
       }
+      /**
+       * 人插话时，先把「这一段到此为止」落定；**必须在那条 user 行之前调用**。
+       *
+       * 展示序（`ord`）由落库那一刻的表级序列派，所以**谁先落库谁在上面**。此前这条注解跟在
+       * `beginSegment()` 里、而 `beginSegment` 由 `onUserInput` 回调在 user 行之后触发，于是
+       * 「本段无输出」排到了人说的那句话**下面**——发起人 2026-09-11 的现场（会话 `eca44da4`：
+       * user 行 ord 8503、注解 ord 8504）。他要的顺序是：开启这一轮的那条消息 → agent 头像块
+       * （里面就是这条注解）→ 人插的那句话 → agent 接着说。
+       *
+       * 返回落下的那一行（`null` = 本段有输出、或还没有 assistant 行可归属，不需要注解），
+       * 调用方据它把这条推上 v3 流——不推的话它只在下一次快照才出现。
+       */
+      closeSegmentBeforeUserInput() {
+        this.closeStreamingRows("completed");
+        if (this.segmentEndEmitted) return null;
+        if (this.segmentItemCount !== 0 || !this.messageId) return null;
+        const id = this.insertSegmentEnd();
+        this.segmentEndEmitted = true;
+        const row = this.rows.get(id);
+        return { itemId: id, version: row.wireVersion, startedVersion: row.startedVersion, ord: row.ord };
+      }
+      /** 零输出段兜底（S1 评审 B1）：那条 assistant 行库里已经在了，一条 item 都没有会被对账抓成假红。 */
+      insertSegmentEnd() {
+        return this.insert({
+          kind: "control",
+          role: "assistant",
+          status: "completed",
+          origin: "server",
+          text: "",
+          attrs: {},
+          inContent: false,
+          persist: true,
+          payload: { code: "segment_end", note: SEGMENT_END_NOTE }
+        });
+      }
       /** 行落库了，把本段还挂着 NULL 的 assistant item 认领回去，并让后续 item 直接带上它。 */
       bindMessage(messageId) {
         this.messageId = messageId;
@@ -159847,6 +160006,7 @@ var DEFAULT_BUFFER_MAX, DEFAULT_GRACE_MS, DEFAULT_LIVE_COALESCE_MS, DEFAULT_LIVE
 var init_live_chat = __esm({
   "../server/src/live-chat.ts"() {
     "use strict";
+    init_chat_item_ledger();
     DEFAULT_BUFFER_MAX = 4e3;
     DEFAULT_GRACE_MS = 6e4;
     DEFAULT_LIVE_COALESCE_MS = 24;
@@ -160593,6 +160753,24 @@ var init_live_chat = __esm({
           text: shown,
           ...opts?.attachments?.length ? { attachments: opts.attachments } : {}
         };
+        const segmentEnd = (() => {
+          try {
+            return turn.items?.closeSegmentBeforeUserInput() ?? null;
+          } catch {
+            return null;
+          }
+        })();
+        if (segmentEnd) {
+          this.publishServerItem(turn, {
+            itemId: segmentEnd.itemId,
+            itemType: "control",
+            startedVersion: segmentEnd.startedVersion,
+            version: segmentEnd.version,
+            ord: segmentEnd.ord,
+            status: "completed",
+            payload: { code: "segment_end", note: SEGMENT_END_NOTE }
+          });
+        }
         try {
           turn.items?.recordUserInput(shown, opts?.attachments, opts?.clientKeys);
         } catch {
@@ -212756,7 +212934,15 @@ var init_service4 = __esm({
        * 亲手提交过至少一版」。这是仓库里唯一一条真实存在的「产物 ↔ 人」关系；
        * 「谁 own 这个节点」不用（节点 owner 是**派给谁**，派了没干完的也会被算成产出，那是假数据）。
        *
-       * 同一产物被同一人提交多版只出现一次，`revisionCount` 记他提过几版、`updatedAt` 取他最近一次提交。
+       * **空轮不算产出**（ADR 0539 补记）：内核把**每一轮执行**都投影成一版 revision，这一轮一个产出文件
+       * 都没有时 bridge 如实给 `contentKind="empty"`（运行中占位 / 被限流打死的空跑 / 只留结论没产正文，
+       * 见 `bridge-readmodel.workToRevision` 与 ADR-0134）。那种版本这里一律跳过——它不是「他交了什么」，
+       * 展示层拿到只会得到一行没有大小、点开写着「还没有可预览的正文」的空行。
+       * 项目页「相关文件」早就不列这类轮次（`collectEngineFilesForProject` 的
+       * `latestAcceptId` / `cancelledAt` / `arts.length === 0` 三道闸），本栏此前漏了这条口径。
+       *
+       * 于是 `revisionCount` 记的是**他交付过几版**、`latestRevisionId`/`updatedAt` 取**他最近一次真的
+       * 交了东西的那一版**；一版都没交过内容的产物整条不出现。
        *
        * 数据同 `artifactDetail`：从 `kernel.model` 现算投影（新引擎 oplog 已退役、派生 store 恒空），
        * 不读 `artifact_revisions` 表——读那张表在新引擎上永远是空列表。
@@ -212774,6 +212960,7 @@ var init_service4 = __esm({
         const byArtifact = /* @__PURE__ */ new Map();
         for (const revision of projection.revisions) {
           if (revision.actorId !== actorId) continue;
+          if (isEmptyContent(this.kernel.model.revisions.get(revision.revisionId)?.contentKind)) continue;
           const artifact = artifactById.get(revision.artifactId);
           if (!artifact) continue;
           const prev = byArtifact.get(revision.artifactId);
@@ -212816,8 +213003,10 @@ var init_service4 = __esm({
        * 同一个 {@link contentByteSize}**，不另写一套判据）：装箱单摊成每个物理文件一行，
        * 其余（inline-blob / external-pin / 装箱单解析失败）整份产物一行。
        *
-       * 取哪一版：**他自己最近提交的那一版**（`latestRevisionId`），不是产物的 current head——
-       * 这一栏回答的是「他交了什么」，拿别人后来覆盖的版本冒充他的产出就是假数据。
+       * 取哪一版：**他自己最近交付过内容的那一版**（`latestRevisionId`，空轮已在
+       * {@link listActorArtifacts} 里滤掉），不是产物的 current head——这一栏回答的是「他交了什么」，
+       * 拿别人后来覆盖的版本冒充他的产出就是假数据。该版本 id 随行发给前端（`revisionId`），
+       * 预览栏据它定位同一版：行与预览必须指着同一个东西，否则会出现「行上有 20 KB、点开说没有正文」。
        */
       async listActorFiles(actorId) {
         const artifacts = await this.listActorArtifacts(actorId);
@@ -212829,6 +213018,7 @@ var init_service4 = __esm({
           const base = {
             artifactId: item.artifactId,
             projectId: item.projectId,
+            revisionId: item.latestRevisionId,
             type: item.type,
             updatedAt: item.updatedAt,
             ...contentKind ? { contentKind } : {},
@@ -220147,6 +220337,20 @@ ${input.description}
           };
         });
       }
+      /**
+       * 这一行变量是谁建的（子 PRD《密钥管理》§1 的权限判据）。**只读元数据、不解密**——
+       * `listVariables()` 会把每一行都解一遍出掩码，写路径上没必要付那个钱。
+       *
+       * 返回 undefined 有两种含义，调用方按「放行」处理：行不存在（新建），
+       * 或行是 2026-09-10 之前落的（那时还没有 created_by 这一格）。
+       */
+      async variableCreatedBy(key, selector = {}) {
+        const rows = await this.opts.store.listVariables();
+        const hit = rows.find(
+          (r) => r.key === key && (r.actorId ?? "") === (selector.actorId ?? "") && (r.projectId ?? "") === (selector.projectId ?? "")
+        );
+        return hit?.createdBy;
+      }
       async revealVariable(key, actorId) {
         const ct = await this.opts.store.getVariableCiphertext(key, actorId);
         if (ct === null) return null;
@@ -220952,7 +221156,7 @@ async function actorStats(actorId, opts = {}) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
   const from = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1e3).toISOString();
   const to = now.toISOString();
-  const weeklyUsage = opts.usage?.listRuns ? summarizeWeeklyRuns(await listWeeklyRuns(opts.usage, actorId, from, to)) : summarizeWeeklyUsage(opts.usage?.queryUsageStats ? await opts.usage.queryUsageStats({
+  const weeklyUsage = opts.usage?.listRuns ? summarizeWeeklyRuns(await listWeeklyRuns(opts.usage, actorId, from, to, opts.artifactIds)) : summarizeWeeklyUsage(!opts.artifactIds && opts.usage?.queryUsageStats ? await opts.usage.queryUsageStats({
     actorIds: [actorId],
     from,
     to,
@@ -220960,6 +221164,8 @@ async function actorStats(actorId, opts = {}) {
   }) : []);
   return {
     actorId,
+    usageAvailable: !!(opts.usage?.listRuns || !opts.artifactIds && opts.usage?.queryUsageStats),
+    ...opts.model ? { participatingTaskCount: participatingTaskCount(opts.model, actorId) } : {},
     tokenWeek: weeklyUsage.tokenWeek,
     tokenWeekBreakdown: weeklyUsage.tokenWeekBreakdown,
     costWeekUsdMicros: weeklyUsage.costWeekUsdMicros,
@@ -220969,12 +221175,12 @@ async function actorStats(actorId, opts = {}) {
     unpricedModels: weeklyUsage.unpricedModels
   };
 }
-async function listWeeklyRuns(trace, actorId, from, to) {
+async function listWeeklyRuns(trace, actorId, from, to, artifactIds) {
   const out = [];
   let cursor;
   do {
     const page = await trace.listRuns({ actorId, from, to, limit: 500, ...cursor ? { cursor } : {} });
-    out.push(...page.items);
+    out.push(...page.items.filter((run) => !artifactIds || run.artifactId != null && artifactIds.has(run.artifactId)));
     cursor = page.nextCursor ?? void 0;
   } while (cursor);
   return out;
@@ -220985,6 +221191,13 @@ function summarizeWeeklyRuns(runs) {
 function summarizeWeeklyUsage(rows) {
   return summarize2(rows.map((row) => ({ model: row.effectiveModel, usage: row })));
 }
+function participatingTaskCount(model, actorId) {
+  const workorders = /* @__PURE__ */ new Set();
+  for (const artifact of model.artifacts.values()) {
+    if (artifact.owner === actorId) workorders.add(artifact.workspace);
+  }
+  return workorders.size;
+}
 var init_stats = __esm({
   "../server/src/domains/actors/stats.ts"() {
     "use strict";
@@ -221932,6 +222145,17 @@ function actorsDomain(opts) {
         );
       }
     };
+    const requireSecretOwner = async (req, service, key, selector = {}) => {
+      const owner = await service.variableCreatedBy(key, selector);
+      if (!owner || owner === req.auth.actor) return;
+      const manager = opts.isCompanyManager ? await opts.isCompanyManager(req.auth.companyId ?? "", req.auth.actor).catch(() => false) : false;
+      if (manager) return;
+      throw new ApiError(
+        403,
+        "SECRET_NOT_OWNED",
+        "\u8FD9\u4EFD\u5BC6\u94A5\u7531\u522B\u4EBA\u521B\u5EFA\uFF0C\u53EA\u6709\u521B\u5EFA\u8005\u672C\u4EBA\u6216\u7EC4\u7EC7\u7BA1\u7406\u8005\u53EF\u4EE5\u4FEE\u6539 / \u5220\u9664"
+      );
+    };
     const auditVariableChange = async (req, kind, variableKey, targetScope) => {
       await opts.credentialAudit?.({
         kind,
@@ -221986,6 +222210,7 @@ function actorsDomain(opts) {
         );
       }
       if (b2.value === void 0 || b2.value === "") return { status: 200, body: { ok: true } };
+      await requireSecretOwner(req, service, b2.key, scope === "project" ? { projectId: b2.projectId } : {});
       await service.putVariable({
         key: b2.key,
         value: b2.value,
@@ -222013,6 +222238,7 @@ function actorsDomain(opts) {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
       const projectId2 = req.query.get("projectId") ?? void 0;
+      await requireSecretOwner(req, service, req.params.key, projectId2 ? { projectId: projectId2 } : {});
       await service.deleteVariable(
         req.params.key,
         void 0,
@@ -222060,6 +222286,7 @@ function actorsDomain(opts) {
           );
         }
       }
+      await requireSecretOwner(req, service, b2.key, { actorId });
       await service.putVariable({
         key: b2.key,
         value: b2.value,
@@ -222080,6 +222307,7 @@ function actorsDomain(opts) {
     router.delete("/api/actors/:id/variables/:key", async (req) => {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
+      await requireSecretOwner(req, service, req.params.key, { actorId: req.params.id });
       await service.deleteVariable(req.params.key, req.params.id);
       await auditVariableChange(req, "credential_delete", req.params.key, `personal:${req.params.id}`);
       return { status: 200, body: { ok: true } };
@@ -222305,9 +222533,16 @@ function actorsDomain(opts) {
       throw new ApiError(400, "BAD_REQUEST", "\u4F20 enabled\uFF08\u5F00\u5173\uFF09/ appliedToAll\uFF08\u5168\u5458\u751F\u6548\uFF09/ name\xB7description\uFF08\u66F4\u65B0\u5143\u6570\u636E\uFF09");
     });
     router.get("/api/actors/:id/stats", async (req) => {
+      const ctx = await resolveCtx(req.auth.companyId);
+      if (!await ctx.service.getActor(req.params.id)) throw new ApiError(404, "NOT_FOUND", "\u6CA1\u6709\u8FD9\u4E2A\u5458\u5DE5");
+      const model = ctx.getModel?.();
       return {
         status: 200,
-        body: await actorStats(req.params.id, { usage: opts.trace?.() })
+        body: await actorStats(req.params.id, {
+          usage: req.auth.companyId && !model ? void 0 : opts.trace?.(),
+          model,
+          ...req.auth.companyId ? { artifactIds: new Set(model?.artifacts.keys() ?? []) } : {}
+        })
       };
     });
     router.get("/api/actors/:id/running-tasks", async (req) => {
@@ -222865,6 +223100,7 @@ function createActorsDomain(opts) {
   const engineStoreOf = (k2) => k2?.getStore?.();
   const defaultCtx = {
     service: buildService(opts.store, opts.kernel, opts.blobs),
+    ...opts.kernel?.model ? { getModel: () => opts.kernel.model } : {},
     ...opts.oplog !== void 0 ? { oplog: opts.oplog } : {},
     ...engineStoreOf(opts.kernel) !== void 0 ? { engineStore: engineStoreOf(opts.kernel) } : {},
     ...opts.blobs !== void 0 ? { blobs: opts.blobs } : {}
@@ -222878,6 +223114,7 @@ function createActorsDomain(opts) {
     const blobs = engine.assets ?? engine.blobs;
     const ctx = {
       service: buildService(engine.registry, engine.kernel, blobs),
+      getModel: () => engine.kernel.model,
       oplog: engine.oplog,
       ...engineStoreOf(engine.kernel) !== void 0 ? { engineStore: engineStoreOf(engine.kernel) } : {},
       blobs
@@ -222888,7 +223125,7 @@ function createActorsDomain(opts) {
   return {
     service: defaultCtx.service,
     resolveCtx,
-    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
+    register: actorsDomain({ resolveCtx, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
 var import_node_crypto49;
@@ -223245,6 +223482,7 @@ ${errs.join("\n")}`);
             id: item.id,
             artifact_id: item.artifactId,
             project_id: item.projectId,
+            revision_id: item.revisionId,
             type: item.type,
             name: item.name,
             file_path: item.filePath,
@@ -223920,6 +224158,15 @@ var init_routes5 = __esm({
   }
 });
 
+// ../server/src/domains/collab/activity-notice.ts
+var NOTICE_TITLE;
+var init_activity_notice = __esm({
+  "../server/src/domains/collab/activity-notice.ts"() {
+    "use strict";
+    NOTICE_TITLE = "\u53D8\u66F4\u901A\u77E5";
+  }
+});
+
 // ../server/src/domains/collab/review-activity.ts
 function reviewCardId(targetWorkId, reviewerActorId) {
   return `${REVIEW_CARD_PREFIX}${encodeURIComponent(targetWorkId)}:${encodeURIComponent(reviewerActorId)}`;
@@ -224068,35 +224315,18 @@ var init_review_activity = __esm({
 
 // ../server/src/domains/collab/review-requirement-activity.ts
 function reviewRequirementActivity(snap, events, ref2) {
-  const previous3 = /* @__PURE__ */ new Map();
   const titles = new Map(snap.nodes.map((n) => [n.id, n.title]));
   const cards = [];
   const label = (r) => `${ref2(r.reviewerActorId).name || "\u672A\u547D\u540D\u5BA1\u6838\u4EBA"}${r.source === "closure" ? "\uFF08\u7ED3\u6848\u5BA1\u6838\uFF09" : ""}`;
-  const names = (rows) => [...new Set(rows.map(label))].join("\u3001") || "\u65E0";
+  const names = (rows) => [...new Set(rows.map(label))].join("\u3001");
+  const submitter = (id) => ref2(id).name?.trim() || "\u672A\u547D\u540D\u6210\u5458";
+  const sentence = (id, nodeTitle, rows) => rows.length ? `${submitter(id)} \u66F4\u6539\u300A${nodeTitle}\u300B\u8282\u70B9\u7684\u5BA1\u6838\u4EBA\u4E3A ${names(rows)}\u3002` : `${submitter(id)} \u6E05\u7A7A\u4E86\u300A${nodeTitle}\u300B\u8282\u70B9\u7684\u5BA1\u6838\u4EBA\u3002`;
   for (const rec of [...events].sort((a, b2) => a.seq - b2.seq)) {
     if (rec.status === "pending" || rec.status === "failed") continue;
     const e = rec.event;
-    if (e.kind === "plan.changed") {
-      for (const node2 of e.addNodes ?? []) previous3.set(node2.id, node2.reviewers ?? []);
-      for (const id of e.removeNodes ?? []) previous3.delete(id);
-      continue;
-    }
-    if (e.kind === "plan.add_node") {
-      previous3.set(e.nodeId, e.reviewers ?? []);
-      continue;
-    }
     if (e.kind !== "plan.update_review_requirements") continue;
-    const before = previous3.get(e.nodeId);
-    const after = e.reviewers;
-    const beforeKeys = new Set(before?.map(requirementKey));
-    const afterKeys = new Set(after.map(requirementKey));
-    const added = before ? after.filter((r) => !beforeKeys.has(requirementKey(r))) : [];
-    const removed = before?.filter((r) => !afterKeys.has(requirementKey(r))) ?? [];
+    if (!isAuthoredChange(rec)) continue;
     const nodeTitle = titles.get(e.nodeId) || "\u5DF2\u79FB\u9664\u7684\u8282\u70B9";
-    if (!isAuthoredChange(rec)) {
-      previous3.set(e.nodeId, after);
-      continue;
-    }
     cards.push({
       id: `wo:${rec.seq}`,
       seq: rec.seq,
@@ -224107,24 +224337,19 @@ function reviewRequirementActivity(snap, events, ref2) {
       executor: ref2(rec.actorId),
       ...rec.handActorId ? { handActor: ref2(rec.handActorId) } : {},
       phase: "done",
-      status: `\u66F4\u65B0\u4E86\u300A${nodeTitle}\u300B\u7684\u5BA1\u6838\u5217\u8868\u3002`,
-      detail: [
-        ...added.length ? [`\u65B0\u589E\uFF1A${names(added)}`] : [],
-        ...removed.length ? [`\u79FB\u9664\uFF1A${names(removed)}`] : [],
-        `\u66F4\u65B0\u540E\uFF1A${names(after)}`
-      ].join("\n"),
+      noticeTitle: NOTICE_TITLE,
+      status: sentence(rec.actorId, nodeTitle, e.reviewers),
       artifacts: [],
       actions: []
     });
-    previous3.set(e.nodeId, after);
   }
   return cards;
 }
-var requirementKey, isAuthoredChange;
+var isAuthoredChange;
 var init_review_requirement_activity = __esm({
   "../server/src/domains/collab/review-requirement-activity.ts"() {
     "use strict";
-    requirementKey = (r) => JSON.stringify([r.reviewerActorId, r.reviewGroup, r.source]);
+    init_activity_notice();
     isAuthoredChange = (rec) => rec.origin !== "apply" && rec.origin !== "effect" && !rec.actorId.startsWith("actor:system:");
   }
 });
@@ -224220,7 +224445,6 @@ function buildWorkorderActivity(input) {
     return tail || nodeId;
   };
   const cardOfWork = /* @__PURE__ */ new Map();
-  const latestCardOfNode = /* @__PURE__ */ new Map();
   const executionCards = [];
   const offTimeline = (w2) => isDispatchLayerFailure(w2.outcomeDetail) || w2.outcome === "completed" && statusOf2(w2) !== "success" && !artifactsByWork.get(w2.id)?.length;
   const statusOf2 = (w2) => w2.status ?? (w2.outcome === "failed" ? "failed" : w2.outcome === "completed" ? "success" : "running");
@@ -224249,35 +224473,45 @@ function buildWorkorderActivity(input) {
     works.sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id));
     const interrupts = [...interruptsOfNode.get(nodeId) ?? []].sort();
     const node2 = nodeById.get(nodeId);
+    const nodeCancelledAt = node2?.cancelledAt ?? null;
     const name = nodeName(nodeId);
-    let card2 = null;
+    let fold2 = null;
     for (const [idx, w2] of works.entries()) {
-      if (!card2) {
-        card2 = {
-          /* 卡 id 取组内**首个** work（React key 与滚动锚点因此稳定）；`at` 是这一轮开工的时刻。 */
-          id: `work:${w2.id}`,
-          traceWorkIds: [],
-          seq: 0,
-          // 事件循环里按首个 work.create 的 seq 填
-          at: w2.createdAt,
-          updatedAt: w2.createdAt,
-          nodeId,
-          executorId: w2.assigneeActorId,
-          phase: "running",
-          status: ACTIVITY_COPY.working(name),
-          artifacts: [],
-          actions: []
-        };
-        executionCards.push(card2);
-        latestCardOfNode.set(nodeId, card2);
+      const next = works[idx + 1];
+      const artifacts = artifactsByWork.get(w2.id) ?? [];
+      const st = statusOf2(w2);
+      const interrupt = interrupts.find((t) => t >= w2.createdAt && (!next || t < next.createdAt));
+      const removedHere = !!nodeCancelledAt && nodeCancelledAt >= w2.createdAt && (!next || nodeCancelledAt < next.createdAt);
+      const reassigned = !!next && next.assigneeActorId !== w2.assigneeActorId;
+      const killedByPlan = !!(w2.deadAt || w2.cancelledAt) && !!next && (reassigned || (next.nodeVersion ?? 0) > (w2.nodeVersion ?? 0));
+      const failedRound = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && (!!w2.deadAt || !!w2.cancelledAt || st === "failed" || st === "retry");
+      if (failedRound && fold2) {
+        fold2.traceWorkIds.push(w2.id);
+        cardOfWork.set(w2.id, fold2);
+        fold2.updatedAt = lastStampOf(w2);
+        fold2.stuckReason = w2.outcomeDetail?.reason === "timeout" ? "timeout" : "failed";
+        fold2.foldedRounds = (fold2.foldedRounds ?? 1) + 1;
+        fold2.status = ACTIVITY_COPY.foldedFailures(nameOf(fold2.executorId), name, fold2.foldedRounds);
+        continue;
       }
-      card2.traceWorkIds.push(w2.id);
+      fold2 = null;
+      const card2 = {
+        /* 卡 id = 这一轮的 workId（连败折叠时取第一轮，React key 与滚动锚点因此稳定）。 */
+        id: `work:${w2.id}`,
+        traceWorkIds: [w2.id],
+        seq: 0,
+        // 事件循环里按这一轮 work.create 的 seq 填
+        at: w2.createdAt,
+        updatedAt: lastStampOf(w2),
+        nodeId,
+        executorId: w2.assigneeActorId,
+        phase: "running",
+        status: ACTIVITY_COPY.working(name),
+        artifacts,
+        actions: []
+      };
+      executionCards.push(card2);
       cardOfWork.set(w2.id, card2);
-      card2.executorId = w2.assigneeActorId;
-      card2.updatedAt = lastStampOf(w2);
-      card2.artifacts = artifactsByWork.get(w2.id) ?? card2.artifacts;
-      delete card2.openWorkId;
-      delete card2.stuckReason;
       if (w2.conclusion) {
         card2.phase = "done";
         if (rootBriefNodeIds.has(nodeId)) {
@@ -224293,32 +224527,21 @@ function buildWorkorderActivity(input) {
             card2.status = awaits ? ACTIVITY_COPY.doneAwaitingReview(name) : ACTIVITY_COPY.done(name);
           }
         }
-        card2 = null;
-        continue;
-      }
-      const next = works[idx + 1];
-      const interrupt = interrupts.find((t) => t >= w2.createdAt && (!next || t < next.createdAt));
-      if (interrupt) {
+      } else if (interrupt) {
         card2.phase = "stuck";
         card2.status = ACTIVITY_COPY.interruptedByIssue(name);
         if (interrupt > card2.updatedAt) card2.updatedAt = interrupt;
-        card2 = null;
-        continue;
-      }
-      const stuckKind = w2.outcomeDetail?.reason === "timeout" ? "timeout" : "failed";
-      const st = statusOf2(w2);
-      if (w2.deadAt || w2.cancelledAt) {
-        card2.phase = "stuck";
-        card2.stuckReason = stuckKind;
-        card2.status = ACTIVITY_COPY.killed(name);
-      } else if (st === "failed") {
+      } else if (removedHere || killedByPlan) {
         card2.phase = "stuck";
-        card2.stuckReason = stuckKind;
-        card2.status = stuckKind === "timeout" ? ACTIVITY_COPY.timedOut(nameOf(card2.executorId)) : ACTIVITY_COPY.failed(nameOf(card2.executorId));
-      } else if (st === "retry") {
+        card2.status = removedHere ? ACTIVITY_COPY.interruptedByNodeRemoved(name) : reassigned ? ACTIVITY_COPY.interruptedByReassign(name, nameOf(next.assigneeActorId)) : ACTIVITY_COPY.interruptedByPlanChange(name);
+        if (!removedHere && !reassigned) card2.planChangeUnnamed = true;
+        if (removedHere && nodeCancelledAt > card2.updatedAt) card2.updatedAt = nodeCancelledAt;
+      } else if (failedRound) {
+        const stuckKind = w2.outcomeDetail?.reason === "timeout" ? "timeout" : "failed";
         card2.phase = "stuck";
         card2.stuckReason = stuckKind;
-        card2.status = ACTIVITY_COPY.awaitingRedispatch(nameOf(card2.executorId), name);
+        card2.status = w2.deadAt || w2.cancelledAt ? ACTIVITY_COPY.killed(name) : st === "retry" ? ACTIVITY_COPY.awaitingRedispatch(nameOf(card2.executorId), name) : stuckKind === "timeout" ? ACTIVITY_COPY.timedOut(nameOf(card2.executorId)) : ACTIVITY_COPY.failed(nameOf(card2.executorId));
+        fold2 = card2;
       } else if (w2.endedAt) {
         card2.phase = "running";
         card2.status = ACTIVITY_COPY.awaitingConclude(name);
@@ -224339,17 +224562,28 @@ function buildWorkorderActivity(input) {
     if (rec.handActorId) d.handActorId = rec.handActorId;
     return d;
   };
-  const woCard = (rec, executorId, status, detail, phase = "done") => {
+  const cardOpenAt = (nodeId, at) => {
+    const list2 = worksOfNode.get(nodeId);
+    if (!list2) return void 0;
+    let hit;
+    for (const w2 of list2) {
+      if (w2.createdAt > at) break;
+      hit = w2;
+    }
+    return hit ? cardOfWork.get(hit.id) : void 0;
+  };
+  const woCard = (rec, status, opts = {}) => {
     standalone.push({
       id: `wo:${rec.seq}`,
       seq: rec.seq,
       at: rec.createdAt,
       updatedAt: rec.createdAt,
-      executorId,
+      executorId: rec.actorId,
       ...rec.handActorId ? { handActorId: rec.handActorId } : {},
-      phase,
+      phase: "done",
+      ...opts.notice ? { noticeTitle: NOTICE_TITLE } : {},
       status,
-      ...detail ? { detail } : {},
+      ...opts.detail ? { detail: opts.detail } : {},
       artifacts: [],
       actions: []
     });
@@ -224362,20 +224596,29 @@ function buildWorkorderActivity(input) {
       case "plan.changed": {
         break;
       }
+      /* 暂停 / 恢复是**人对这单做的事**，不是某一轮执行——走「变更通知」那套卡面（帧 `2874:1189`）。
+         此前它们沿用执行卡的标题模板，卡面第一行被拼成「{谁} 已完成」（`ACTIVITY_PHASE_LABEL.done`），
+         第二行才是「{谁}已暂停任务。」——标题和正文说的不是同一件事，而「已完成」在这一拍根本
+         没有所指（暂停不是完成）。 */
       case "workorder.paused":
-        woCard(rec, rec.actorId, ACTIVITY_COPY.paused(nameOf(rec.actorId)), str4(ev.reason));
+        woCard(rec, ACTIVITY_COPY.paused(nameOf(rec.actorId)), { notice: true, detail: str4(ev.reason) });
         break;
       case "workorder.resumed":
-        woCard(rec, rec.actorId, ACTIVITY_COPY.resumedWorkorder(nameOf(rec.actorId)));
+        woCard(rec, ACTIVITY_COPY.resumedWorkorder(nameOf(rec.actorId)), { notice: true });
         break;
       case "workorder.meta_changed": {
         const patch = ev.patch ?? {};
         if (!("goal" in patch) && !("description" in patch)) break;
-        woCard(rec, rec.actorId, ACTIVITY_COPY.goalChanged(nameOf(rec.actorId), managerName()));
+        woCard(rec, ACTIVITY_COPY.goalChanged(nameOf(rec.actorId), managerName()));
         break;
       }
       case "plan.update_spec": {
-        woCard(rec, rec.actorId, ACTIVITY_COPY.specConfirmed, void 0, "running");
+        const nodeId = String(ev.nodeId ?? "");
+        const d = cardOpenAt(nodeId, rec.createdAt);
+        if (d?.planChangeUnnamed) {
+          d.status = ACTIVITY_COPY.interruptedBySpecChange(nameOf(rec.actorId), nodeName(nodeId));
+          delete d.planChangeUnnamed;
+        }
         break;
       }
       /* ── 执行（work）──────────────────────────────────────────────
@@ -224655,10 +224898,10 @@ function buildWorkorderActivity(input) {
       case "plan.node_retry": {
         const nodeId = String(ev.nodeId ?? "");
         const by = str4(ev.by) ?? rec.actorId;
-        const target = latestCardOfNode.get(nodeId);
-        if (!target || target.phase !== "stuck") break;
+        const target = cardOpenAt(nodeId, rec.createdAt);
+        if (!target || target.phase !== "stuck" || !target.stuckReason) break;
         touch(target, rec);
-        target.status = target.stuckReason === "timeout" ? ACTIVITY_COPY.retriedAfterTimeout(nameOf(target.executorId), nameOf(by)) : ACTIVITY_COPY.retriedAfterFailure(nameOf(target.executorId), nameOf(by));
+        target.status = target.foldedRounds && target.foldedRounds > 1 ? ACTIVITY_COPY.foldedFailuresRetried(nameOf(target.executorId), nodeName(nodeId), target.foldedRounds, nameOf(by)) : target.stuckReason === "timeout" ? ACTIVITY_COPY.retriedAfterTimeout(nameOf(target.executorId), nameOf(by)) : ACTIVITY_COPY.retriedAfterFailure(nameOf(target.executorId), nameOf(by));
         break;
       }
       default:
@@ -224757,8 +225000,10 @@ function buildWorkorderActivity(input) {
       ] : []
     });
   }
+  const openedSeq = events.find((rec) => rec.event.kind === "work.create")?.seq;
+  const beforeOpen = (seq) => openedSeq !== void 0 && seq < openedSeq;
   const drafts = [
-    ...standalone,
+    ...standalone.filter((d) => !beforeOpen(d.seq)),
     ...executionCards,
     ...visibleReviews.values(),
     ...issueCards.values(),
@@ -224822,6 +225067,7 @@ function buildWorkorderActivity(input) {
       ...d.reviewWorkId ? { reviewWorkId: d.reviewWorkId, reviewers: d.reviewerIds?.map(ref2) } : {},
       ...d.handActorId ? { handActor: ref2(d.handActorId) } : {},
       phase: d.phase,
+      ...d.noticeTitle ? { noticeTitle: d.noticeTitle } : {},
       status: d.status,
       ...d.detail ? { detail: d.detail } : {},
       ...d.reviewNotes?.length ? { reviewNotes: d.reviewNotes } : {},
@@ -224833,7 +225079,7 @@ function buildWorkorderActivity(input) {
       .../* @__PURE__ */ ((r) => r ? { runId: r, traceAvailable: true } : {})(traced ? runIdOfCard(d) : void 0)
     };
   });
-  cards.push(...reviewRequirementActivity(snap, events, ref2));
+  cards.push(...reviewRequirementActivity(snap, events, ref2).filter((c) => !beforeOpen(c.seq)));
   cards.sort((a, b2) => a.updatedAt.localeCompare(b2.updatedAt) || a.seq - b2.seq || a.id.localeCompare(b2.id));
   return { workorderId, cards, truncated };
 }
@@ -224843,13 +225089,13 @@ var init_activity2 = __esm({
     "use strict";
     init_src();
     init_src4();
+    init_activity_notice();
     init_review_activity();
     init_review_requirement_activity();
     init_workorder_manager();
     init_escalation_recipient();
     ACTIVITY_EVENT_KINDS = [
       "plan.changed",
-      "plan.add_node",
       "plan.update_review_requirements",
       "plan.update_spec",
       "plan.node_retry",
@@ -224923,7 +225169,39 @@ var init_activity2 = __esm({
        *
        * 不重复缺口卡那句「需要 @{协调者} 协助解决」：该找谁由缺口卡自己说，执行卡只说这一轮到此为止。
        */
+      /**
+       * **连败折叠**：同一节点上连续没跑成的 N 轮折成一张。不折叠的话 `ws:wo-6d588f8e` 的《隔离边界实现》
+       * 会在时间线上连出 12 张，其中 9 张都是「执行失败。」——真正要给人看的是「这个节点一直没跑成」
+       * 这一件事，逐轮的原因在轨迹抽屉里（`traceWorkIds` 收齐全部 N 轮，一轮不少）。
+       */
+      foldedFailures: (executor, node2, n) => `${executor} \u8FDE\u7EED ${n} \u6B21\u6CA1\u8DD1\u6210\u300A${node2}\u300B\u3002`,
+      /** 折叠卡上补「谁按的重试」——不把「连续 N 次」换成单轮那句。 */
+      foldedFailuresRetried: (executor, node2, n, by) => `${executor} \u8FDE\u7EED ${n} \u6B21\u6CA1\u8DD1\u6210\u300A${node2}\u300B\uFF0C${by}\u5DF2\u4ECB\u5165\u91CD\u8BD5\u3002`,
       interruptedByIssue: (node2) => `\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u56E0\u5361\u70B9\u4E2D\u65AD\u3002`,
+      /**
+       * 这一轮**被计划变更打断**（P15）。与卡点中断同级：计划一动，这一轮就不再是「还在跑」，
+       * 而是被引擎当场顶掉了——`plan.delete_node` 直接 `killLatestWork`；`plan.update_spec`（spec 真变）
+       * 与 `plan.assign_actor`（换人）把 `node.version` 加一，scan 随即重派，`work.create` 自带
+       * supersede 把在跑的这一轮翻成 dead。
+       *
+       * 此前这两条都不结束卡：删节点那档只落到 {@link killed}「本轮执行已终止」，不说是计划调整；
+       * 改 spec / 改派那档**根本没有结局**——新一轮直接改写同一张卡，「中断」在页面上不存在，
+       * 卡上署名还会换成新人（与 §2.1「一张卡只讲一个人的事」相抵）。
+       */
+      interruptedByPlanChange: (node2) => `\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u56E0\u8BA1\u5212\u8C03\u6574\u4E2D\u65AD\u3002`,
+      /**
+       * 计划变更里最常见的那一种：**有人改了任务说明**，在跑的这一轮因此被顶掉。
+       *
+       * 这句取代了原来那张独立的任务级卡「已确认任务说明更新，正在判断该修改的影响。」——两张卡讲的
+       * 本来就是同一件事：计划动了、这一轮做不下去了。旧卡还有两个毛病：`phase` 写死 `running`，
+       * 没有任何一拍能让它收口（`ws:wo-217a0909` 12:13 那两张就是这么永久停在「进行中」的）；文案是
+       * 一句没有主语也没有宾语的固定串，两次内容不同的修改渲染成两行一模一样的字。
+       */
+      interruptedBySpecChange: (by, node2) => `${by} \u66F4\u65B0\u4E86\u4EFB\u52A1\u8BF4\u660E\uFF0C\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u5230\u6B64\u4E2D\u65AD\u3002`,
+      /** 换人那一档点破接手的人——卡到此为止，下一轮是新执行人的新卡。 */
+      interruptedByReassign: (node2, next) => `\u300A${node2}\u300B\u672C\u8F6E\u6267\u884C\u56E0\u8BA1\u5212\u8C03\u6574\u4E2D\u65AD\uFF0C\u5DF2\u6539\u7531 ${next} \u63A5\u624B\u3002`,
+      /** 节点被移出计划：这一轮再没有下文，也不会有新卡。 */
+      interruptedByNodeRemoved: (node2) => `\u300A${node2}\u300B\u5DF2\u4ECE\u8BA1\u5212\u4E2D\u79FB\u9664\uFF0C\u672C\u8F6E\u6267\u884C\u4E2D\u65AD\u3002`,
       /**
        * 引擎判卷 success、`endedAt` 也写了，却始终没有 `work.conclude`：**交了稿没收口**。
        * 如实说这一档，不冒充「正在处理」——后者把一轮早就结束的执行画成还在跑。
@@ -224960,7 +225238,6 @@ var init_activity2 = __esm({
       paused: (actor) => `${actor}\u5DF2\u6682\u505C\u4EFB\u52A1\u3002`,
       resumedWorkorder: (actor) => `${actor}\u5DF2\u6062\u590D\u4EFB\u52A1\u3002`,
       goalChanged: (actor, manager) => `${actor}\u4FEE\u6539\u4E86\u4EFB\u52A1\u76EE\u6807\uFF0C\u9700\u8981 ${manager}\u91CD\u65B0\u8BC4\u4F30\u3002`,
-      specConfirmed: "\u5DF2\u786E\u8BA4\u4EFB\u52A1\u8BF4\u660E\u66F4\u65B0\uFF0C\u6B63\u5728\u5224\u65AD\u8BE5\u4FEE\u6539\u7684\u5F71\u54CD\u3002",
       handleEscalation: (target) => `${target} \u7684\u6267\u884C\u5F02\u5E38\u6301\u7EED\u672A\u89E3\u51B3\u3002`,
       handledEscalation: (target) => `\u5DF2\u5904\u7406 ${target} \u7684\u6267\u884C\u5F02\u5E38\u3002`,
       /**
@@ -225472,6 +225749,12 @@ function buildInbox(model, me, leadOf, resolveActor, markers = [], slaMs, nowIso
       actionRequired: true,
       summary: changeConfirmSummary(r),
       draftId: r.draftId,
+      // ★ 落点（2026-09-11）：带上起草它的那段对话，让前端把这一行跳回**卡真正渲染着的地方**。
+      // 此前这一行恒跳「任务详情 ?tab=activity」，而全仓库渲染待审卡的只有 chat 页与任务页的协调者
+      // 对话（都按 origin=会话 id 查），动态 tab 里一行渲染代码都没有——于是收件箱这条路
+      // 「找得到那一行、却点不到确认键」。origin 缺省（自主会话起草、没人在场）时不带，
+      // 仍回落工单详情。
+      ...r.origin ? { chatSessionId: r.origin } : {},
       ...anchorArt ? { title: nodeLabel(anchorArt) } : {},
       detail: `${actorName(r.proposedBy) || "\u7BA1\u7406\u8005"}\uFF1A${r.command?.effectLabel ?? firstSentence(r.plan.reason)}`,
       ...r.kind !== "command" && opCount > 0 ? { impact: `\u6D89\u53CA ${opCount} \u5904\u6539\u52A8${r.nonMonotonicOps.length > 0 ? " \xB7 \u542B\u9500\u6BC1\u6027" : ""}` } : {},
@@ -225969,13 +226252,7 @@ function buildWaitingInbox(reviews, works, policy, nowIso, me, resolveActor) {
       const isSelf = r.actorId === me;
       const actorLabel = displayName(resolveActor, r.actorId);
       if (r.status === "dead" || r.status === "exhausted") {
-        out.push(isSelf ? card(kind, r, "urgent", start, `\u4F60\u7684${KIND_LABEL[kind]}\u5DF2\u4E2D\u6B62\uFF0C\u9700\u8981\u4F60\u4ECB\u5165\u91CD\u5F00`) : card(
-          kind,
-          r,
-          "urgent",
-          start,
-          `\u8FD9\u4E00\u6B65\u7684${KIND_LABEL[kind]}\u5DF2\u4E2D\u6B62\uFF08${actorLabel} \u8FDE\u7EED\u5931\u8D25\u8D85\u9650\uFF09\u2014\u2014\u672C\u8F6E${KIND_LABEL[kind]}\u6536\u4E0D\u9F50\u3001\u8282\u70B9\u505C\u5728\u8FD9\u91CC\uFF0C\u9700\u8981\u4F60\u91CD\u5F00\u8FD9\u4E00\u8F6E`
-        ));
+        out.push(isSelf ? card(kind, r, "urgent", start, `\u4F60\u7684${KIND_LABEL[kind]}\u5DF2\u4E2D\u6B62\uFF0C\u9700\u8981\u4F60\u4ECB\u5165\u91CD\u5F00`) : card(kind, r, "urgent", start, kind === "review-waiting" ? `\u8FD9\u4E00\u6B65\u7684\u8BC4\u5BA1\u5DF2\u4E2D\u6B62\uFF08${actorLabel} \u8FDE\u7EED\u5931\u8D25\u8D85\u9650\uFF09\u2014\u2014\u672C\u8F6E\u8BC4\u5BA1\u6536\u4E0D\u9F50\u3001\u8282\u70B9\u505C\u5728\u8FD9\u91CC\uFF0C\u9700\u8981\u4F60\u91CD\u5F00\u8FD9\u4E00\u8F6E` : `\u8FD9\u4E00\u6B65\u7684\u5904\u7406\u5DF2\u4E2D\u6B62\uFF08${actorLabel} \u8FDE\u7EED\u5931\u8D25\u8D85\u9650\uFF09\u2014\u2014\u8282\u70B9\u505C\u5728\u8FD9\u91CC\uFF0C\u9700\u8981\u6709\u4EBA\u91CD\u5F00`));
         continue;
       }
       if (r.status !== "running") continue;
@@ -226027,14 +226304,20 @@ function collectWaitingRows(snapshots2, me, policy = CODE_DEFAULT_POLICY) {
     const requirementHeads = new Map(snap.requirements.map((q2) => [reqKey(q2), q2.latestReviewId]));
     const requirementHead = (r) => requirementHeads.get(reqKey(r));
     const nodesWithRequirements = new Set(snap.requirements.map((q2) => q2.nodeId));
-    const managerOfWo = snap.nodes.find((n) => n.type === "brief")?.fields?.["manager"];
+    const briefNode = snap.nodes.find((n) => n.type === "brief");
+    const managerOfWo = briefNode?.fields?.["manager"];
     const isManager = typeof managerOfWo === "string" && managerOfWo === me;
+    const launcher = briefNode?.assigneeActorId ?? null;
+    const openIssueNodes = new Set(
+      snap.issues.filter((i) => i.resolvedAt === null && i.aboutNodeId !== null).map((i) => i.aboutNodeId)
+    );
+    const nodeHasOpenIssue = (nodeId) => openIssueNodes.has(nodeId);
     const latestReview = /* @__PURE__ */ new Map();
     for (const r of snap.reviews) {
       if (cancelled.has(r.nodeId)) continue;
       if (acceptedWork.get(r.nodeId) === r.targetWorkId) continue;
       const mine = r.reviewerActorId === me;
-      const oversees = nodeOwner.get(r.nodeId) === me || isManager;
+      const oversees = nodeOwner.get(r.nodeId) === me || isManager || launcher === me;
       if (!mine && !oversees) continue;
       latestBy(latestReview, r);
     }
@@ -226053,10 +226336,12 @@ function collectWaitingRows(snapshots2, me, policy = CODE_DEFAULT_POLICY) {
       const humanPending = !stopped && classify(r.reviewerActorId) === "human";
       if (!mine && !stopped && !humanPending) continue;
       const audience = [r.reviewerActorId];
-      const owner = nodeOwner.get(r.nodeId);
-      if (stopped || humanPending) {
-        if (owner && !audience.includes(owner)) audience.push(owner);
-        if (typeof managerOfWo === "string" && !audience.includes(managerOfWo)) audience.push(managerOfWo);
+      const addBystanders = humanPending || stopped && !nodeHasOpenIssue(r.nodeId);
+      if (addBystanders) {
+        for (const candidate of [launcher, managerOfWo, nodeOwner.get(r.nodeId)]) {
+          if (typeof candidate !== "string" || classify(candidate) !== "human") continue;
+          if (!audience.includes(candidate)) audience.push(candidate);
+        }
       }
       reviews.push({
         id: r.id,
@@ -226073,17 +226358,25 @@ function collectWaitingRows(snapshots2, me, policy = CODE_DEFAULT_POLICY) {
     const latestMain = /* @__PURE__ */ new Map();
     const latestReply = /* @__PURE__ */ new Map();
     for (const w2 of snap.works) {
-      if (w2.assigneeActorId !== me || cancelled.has(w2.nodeId)) continue;
+      if (cancelled.has(w2.nodeId)) continue;
       latestBy(isReplyWork(w2) ? latestReply : latestMain, w2);
     }
     for (const w2 of [...latestMain.values(), ...latestReply.values()]) {
       const st = workState(w2, hasOutput(w2, outputCountOf(w2.id)));
       if (st !== "running" && st !== "dead") continue;
+      const audience = [w2.assigneeActorId];
+      if (st === "dead" && !nodeHasOpenIssue(w2.nodeId)) {
+        for (const candidate of [launcher, managerOfWo, nodeOwner.get(w2.nodeId)]) {
+          if (typeof candidate !== "string" || classify(candidate) !== "human") continue;
+          if (!audience.includes(candidate)) audience.push(candidate);
+        }
+      }
       works.push({
         id: w2.id,
         workorderId: snap.workorder.id,
         artifactId: w2.nodeId,
         actorId: w2.assigneeActorId,
+        notifyActorIds: audience,
         ...nodeTitle.get(w2.nodeId) ? { title: nodeTitle.get(w2.nodeId) } : {},
         createdAt: w2.createdAt,
         startedAt: w2.startedAt,
@@ -253221,6 +253514,17 @@ var init_cutover_aware_trace = __esm({
         if (row.state === "frozen") throw new BundleFrozenError("trace");
         return this.o.cutover.readsCompanySchema(row) ? this.o.owned : this.o.legacy;
       }
+      /**
+       * 这家公司的 trace 当前**物理落在哪**：切走了就是它自己的引擎 schema，没切走就是那个
+       * 所有未切公司共用的 legacy store。
+       *
+       * 给 {@link FanOutTraceStore} 去重用。判据**不在调用方重算**——就是 {@link pick} 那一条
+       * （`cutover.get` + `readsCompanySchema`），照抄一遍就是又造一处会分叉的实现。
+       */
+      async storageKey() {
+        const row = await this.o.cutover.get(this.o.companyId, "trace");
+        return this.o.cutover.readsCompanySchema(row) ? `owned:${this.o.companyId}` : "legacy";
+      }
       // ── run ──────────────────────────────────────────────────────────────────
       async createRun(input) {
         return (await this.pickWritable()).createRun(input);
@@ -253338,10 +253642,43 @@ var init_cutover_aware_trace = __esm({
       constructor(o) {
         this.o = o;
       }
-      async first(op, fn) {
+      /**
+       * 本次要查的物理落点清单——**同一个 store 只出现一次**。
+       *
+       * 为什么必须去重：`trace` 是按 (公司, bundle) 逐个切的，没切走的公司**全部共用同一个
+       * legacy store**（读同一张 `public.agent_runs`）。此前 `union` 直接按公司逐家拼接，于是
+       * 一条 run 在库里只有一行，却被取回 N 份（N = 未切走的公司数）。
+       *
+       * 2026-09-11 v2 生产实证（`ws:wo-9f4652cd`）：35 家公司、其中 33 家 trace 未切走，
+       * 动态卡的「执行轨迹」抽屉里同一轮 attempt 出现 **33 次**；`listEvents` 更狠——那一轮
+       * `agent_run_events` 有 1158 行，扇出后返回 ≈3.8 万行，还附带 33 条一模一样的 SQL。
+       * 不是显示层重复，是响应体和查询量一起炸。
+       *
+       * 去重键由 store 自己报，不在这里按 cutover 状态重算（见 `storageKey` 的注释）。
+       * 也不能按 `storeFor` 返回的对象做身份去重：`openCompanyPlane` 给每家各造了一个
+       * `CutoverAwareTraceStore` 包装实例，33 个不同对象包着同一个 legacy store。
+       */
+      async targets(op) {
+        const out = [];
+        const seen = /* @__PURE__ */ new Set();
         for (const cid of await this.o.listCompanies()) {
           try {
-            const r = await fn(await this.o.storeFor(cid));
+            if (this.o.storageKeyFor) {
+              const key = await this.o.storageKeyFor(cid);
+              if (seen.has(key)) continue;
+              seen.add(key);
+            }
+            out.push({ cid, store: await this.o.storeFor(cid) });
+          } catch (err) {
+            this.o.onError?.(cid, op, err);
+          }
+        }
+        return out;
+      }
+      async first(op, fn) {
+        for (const { cid, store } of await this.targets(op)) {
+          try {
+            const r = await fn(store);
             if (r != null) return r;
           } catch (err) {
             this.o.onError?.(cid, op, err);
@@ -253351,20 +253688,26 @@ var init_cutover_aware_trace = __esm({
       }
       async union(op, fn) {
         const out = [];
-        for (const cid of await this.o.listCompanies()) {
+        for (const { cid, store } of await this.targets(op)) {
           try {
-            out.push(...await fn(await this.o.storeFor(cid)));
+            out.push(...await fn(store));
           } catch (err) {
             this.o.onError?.(cid, op, err);
           }
         }
         return out;
       }
-      /** 这个 run 属于哪一家。写侧要先拿它，别直接写。 */
+      /**
+       * 这个 run 属于哪一家。写侧要先拿它，别直接写。
+       *
+       * ⚠ 未切走的那批公司共用一张 legacy 表，这里**判不出真正的归属**——它们都「有」这条 run，
+       * 返回的是名单里第一家。去重不改变这个答案（第一家仍是第一家），只是把 N 次重复查询收成一次。
+       * 要真正判准归属，得等 `trace` bundle 切完、每家各有自己的 schema。
+       */
       async companyOfRun(runId) {
-        for (const cid of await this.o.listCompanies()) {
+        for (const { cid, store } of await this.targets("companyOfRun")) {
           try {
-            if (await (await this.o.storeFor(cid)).getRun(runId)) return cid;
+            if (await store.getRun(runId)) return cid;
           } catch (err) {
             this.o.onError?.(cid, "companyOfRun", err);
           }
@@ -256170,6 +256513,11 @@ var init_default_company_schema_move = __esm({
       "chat_sessions",
       "event_handler_log",
       "events",
+      // 待人确认的 intervention 草案卡（2026-09-11 落库）。与 events/workorders 同族：锚在本公司的
+      // 工单与产物上、不跨公司读，所以**整表搬**。不进 ENGINE_SCHEMA_BUNDLE_TABLES——那份是
+      // legacy 里混着所有公司行的表（dispatches/blobs/trace 一族），只能逐行按归属复制；
+      // 这张表在默认公司 schema 里只有总部自己的卡。
+      "intervention_drafts",
       "issue_attachments",
       "issue_recipients",
       "issue_replies",
@@ -259067,6 +259415,16 @@ async function startServe(opts) {
     // ADR 0125：写 scope=project 变量时校验 projectId 真实存在（getProject 直查，含临时项目）。
     // projectStateStore 在下方 ~行 1023 才赋值——本箭头只在请求时跑，那时已就绪（同 resolveDispatchScope 惰性模式）。
     projectExists: async (id) => await projectStateStore.getProject(id) !== null,
+    /* 子 PRD《密钥管理》§1 的权限判据：密钥的写 / 删要认「创建者本人或组织管理者」。
+       owner 与 admin 都算组织管理者（与组织页 `orgIdentityOf` 同一口径）。
+       `controlPlaneStore` 在下方才赋值——本箭头只在请求时跑，那时已就绪（同 projectExists 的惰性模式）。
+       成员表按 accountId 主键，但行上带 actorId，密钥那边手里只有 actorId，所以按 actorId 找。 */
+    isCompanyManager: async (companyId, actorId) => {
+      if (!companyId || !actorId) return false;
+      const members = await controlPlaneStore.listMembers(companyId).catch(() => []);
+      const me = members.find((m2) => m2.actorId === actorId);
+      return me?.role === "owner" || me?.role === "admin";
+    },
     // CO-302 数据面隔离（actors 域试点）：按当前公司取其引擎，用各自 registry 服务该域请求。
     // engineRouter 在下方（行 ~411）以 const 声明；此箭头只在请求时调用，那时已初始化，闭包引用合法
     // （TDZ 只在构造时访问才报错，这里不访问）。默认公司命中现有单实例（registry===registryStore），
@@ -260194,6 +260552,15 @@ async function startServe(opts) {
   const fanOutTrace = new FanOutTraceStore({
     listCompanies: async () => pgPool ? (await controlPlaneStore.listCompanies()).filter((c) => c.status === "active").map((c) => c.id) : [defaultCompanyId],
     storeFor: (cid) => traceStoreFor(cid),
+    /**
+     * 去重键：`trace` 未切走的公司全部共用同一个 legacy store，扇出只该查它一次。
+     * 由 store 自己报落点，这里不按 cutover 状态重算（见 FanOutTraceStore.targets 的注释）。
+     * 非 PG / 非 cutover-aware 的路径没有这个方法 ⇒ 退回按公司逐家查，行为不变。
+     */
+    storageKeyFor: async (cid) => {
+      const s2 = await traceStoreFor(cid);
+      return typeof s2.storageKey === "function" ? s2.storageKey() : cid;
+    },
     onError: (cid, op, err) => console.warn(`[trace] ${cid} \u7684 ${op} \u5931\u8D25\uFF08\u5176\u4F59\u516C\u53F8\u7EE7\u7EED\uFF09\uFF1A${String(err)}`)
   });
   const traceSinkCache = /* @__PURE__ */ new Map();
@@ -268202,6 +268569,28 @@ var ASYNC_AUTH_MESSAGE = "\u5DF2\u63D0\u4EA4\u4EBA\u5DE5\u5BA1\u6838\uFF1B\u5148
 function asyncAuthorizationReturn(data) {
   return data !== void 0 ? { message: ASYNC_AUTH_MESSAGE, data } : { message: ASYNC_AUTH_MESSAGE };
 }
+var AUTH_CARD_GONE_MESSAGE = "\u8FD9\u5F20\u5F85\u6388\u6743\u5361\u5DF2\u7ECF\u4E0D\u5728\u5F85\u5904\u7406\u5217\u8868\u91CC\u4E86\u2014\u2014\u53EF\u80FD\u5DF2\u88AB\u4EBA\u5904\u7F6E\uFF0C\u4E5F\u53EF\u80FD\u5DF2\u5931\u6548\u3002**\u522B\u518D\u8BA9\u7528\u6237\u53BB\u6536\u4EF6\u7BB1\u627E\u8FD9\u5F20\u5361**\uFF1A\u5148\u7528\u53EA\u8BFB\u547D\u4EE4\u6838\u5BF9\u5F53\u524D\u72B6\u6001\uFF08\u5982 `oasis status <\u8282\u70B9>`\uFF09\uFF0C\u786E\u8BA4\u8FD9\u4EF6\u4E8B\u6CA1\u751F\u6548\uFF0C\u518D\u91CD\u65B0\u53D1\u8D77\u540C\u4E00\u6761\u547D\u4EE4\u3002";
+function authorizationGoneReturn(draftId) {
+  return { message: AUTH_CARD_GONE_MESSAGE, data: { outcome: "authorization-gone", draftId } };
+}
+async function draftStillPending(base, headers, draftId) {
+  try {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), 5e3);
+    timer.unref?.();
+    try {
+      const res = await fetch(`${base}/api/view?name=intervention-drafts`, { headers, signal: ctrl.signal });
+      if (!res.ok) return null;
+      const body2 = await res.json();
+      if (!Array.isArray(body2.data)) return null;
+      return body2.data.some((d) => d?.id === draftId);
+    } finally {
+      clearTimeout(timer);
+    }
+  } catch {
+    return null;
+  }
+}
 function renderGraphLines(graph) {
   const closureIds = new Set(graph.nodes.filter((n) => n.type === DELIVERY_SUMMARY_ARTIFACT_TYPE).map((n) => n.id));
   const out = ["\n\u8282\u70B9\uFF08\u6539\u56FE\u5F15\u7528\u7528\u8FD9\u4E9B id\uFF09:"];
@@ -268223,6 +268612,10 @@ function resolveAuthWaitMs() {
 }
 async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const asyncFallback = asyncAuthorizationReturn(fallback.data);
+  const giveUp = async () => {
+    const pending = await draftStillPending(base, headers, draftId);
+    return pending === false ? authorizationGoneReturn(draftId) : asyncFallback;
+  };
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
@@ -268280,12 +268673,13 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
             data: { outcome: "denied", draftId }
           };
         }
-        return asyncFallback;
+        if (p2.status === "gone") return authorizationGoneReturn(draftId);
+        return await giveUp();
       }
     }
-    return asyncFallback;
+    return await giveUp();
   } catch {
-    return asyncFallback;
+    return await giveUp();
   } finally {
     clearTimeout(timer);
     clearInterval(progress);
@@ -271790,7 +272184,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.16" : "dev";
+var PKG_VERSION = true ? "2.2.18" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;