oasis_test_v2 2.2.26 → 2.2.28

package/dist/index.js

@@ -1607,7 +1607,7 @@ var init_delegation_prompts = __esm({
       "### \u8981\u5E26\u6587\u4EF6\u5C31\u660E\u5199",
       "",
       "`--file <\u5DE5\u4F5C\u533A\u91CC\u7684\u8DEF\u5F84>`\uFF0C\u53EF\u4EE5\u7ED9\u591A\u6B21\u3002**\u4E0D\u5199\u5C31\u4E00\u4E2A\u6587\u4EF6\u90FD\u4E0D\u5E26**\u2014\u2014\u4E24\u8FB9\u5DE5\u4F5C\u533A\u662F\u5206\u5F00\u7684\u3002",
-      "\u5BF9\u65B9\u7684\u4EA4\u4ED8\u7269\u4F1A\u81EA\u52A8\u56DE\u5230\u8FD9\u4E2A\u5BF9\u8BDD\u7684\u5DE5\u4F5C\u533A\uFF0C\u4F60\u4E0D\u7528\u624B\u5DE5\u642C\u3002"
+      "\u5BF9\u65B9\u4EA4\u56DE\u7684\u6587\u4EF6\u81EA\u52A8\u843D\u8FDB `delegations/<\u77ED\u540D>/`\uFF08\u7528\u6237\u770B\u4E0D\u5230\uFF09\uFF1B\u8981\u7ED9\u7528\u6237\u770B\u7684\uFF0C\u590D\u5236\u6216\u52A0\u5DE5\u540E\u653E\u8FDB `outputs/`\uFF0C\u539F\u4EF6\u522B\u52A8\u3002"
     ].join("\n");
   }
 });
@@ -196435,6 +196435,18 @@ function digestOf(text5) {
   const line = text5.trim().replace(/\s+/g, " ");
   return line.length > DIGEST_CHARS ? `${line.slice(0, DIGEST_CHARS)}\u2026` : line;
 }
+function delegationArtifactsView(record8) {
+  const dirName = delegationDirName(record8.label, record8.expertActorId, record8.id);
+  const prefixes = [`${DELEGATION_OUTBOUND_DIR}/${dirName}/`, `${SESSION_OUTPUTS_DIR}/${DELEGATION_OUTBOUND_DIR}/${dirName}/`];
+  return collectDelegationArtifacts(record8.roundSummaries).map((a) => {
+    const prefix = prefixes.find((p2) => a.name.startsWith(p2));
+    return {
+      ...a,
+      childMessageId: childRoundMessageIds(record8.childSessionId, a.round).placeholderId,
+      ...prefix ? { childPath: `${SESSION_OUTPUTS_DIR}/${a.name.slice(prefix.length)}` } : {}
+    };
+  });
+}
 function childRoundMessageIds(childSessionId, round) {
   const suffix = round <= 1 ? "" : `:${round}`;
   return {
@@ -197560,7 +197572,7 @@ ${inboundBundle.paths.map((path41) => `- ${path41}`).join("\n")}` : text5,
           ...record8.label ? { label: record8.label } : {},
           ...record8.taskDigest ? { taskDigest: record8.taskDigest } : {},
           roundSummaries: record8.roundSummaries,
-          artifacts: collectDelegationArtifacts(record8.roundSummaries),
+          artifacts: delegationArtifactsView(record8),
           consecutiveFails: record8.consecutiveFails,
           settledSeq: record8.settledSeq,
           pendingInputs: await this.pendingInputs(store, record8.id),
@@ -198137,7 +198149,12 @@ function delegationReturnText(terminal, opts) {
     }
   }
   if (opts.movedPaths.length > 0) {
-    lines.push("", "\u4E13\u5BB6\u4EA4\u56DE\u7684\u6587\u4EF6\uFF08\u5DF2\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A", ...opts.movedPaths.map((p2) => `- ${p2}`));
+    const updated = new Set(opts.updatedPaths ?? []);
+    lines.push(
+      "",
+      "\u4E13\u5BB6\u4EA4\u56DE\u7684\u6587\u4EF6\uFF08\u5DF2\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A",
+      ...opts.movedPaths.map((p2) => `- ${p2}\uFF08${updated.has(p2) ? "\u66F4\u65B0\uFF1A\u4E4B\u524D\u4EA4\u56DE\u8FC7\uFF0C\u8FD9\u4E00\u7248\u6709\u6539\u52A8" : "\u65B0\u4EA4"}\uFF09`)
+    );
   }
   if ((opts.unchangedPaths?.length ?? 0) > 0) {
     lines.push("", `\u53E6\u6709 ${opts.unchangedPaths.length} \u4E2A\u6587\u4EF6\u4E0E\u4E0A\u6B21\u4EA4\u56DE\u65F6\u9010\u5B57\u4E00\u81F4\uFF0C\u672C\u8F6E\u6CA1\u6709\u91CD\u4F20\uFF08\u4ECD\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u8DEF\u5F84\u4E0D\u53D8\uFF09\u3002`);
@@ -198160,6 +198177,11 @@ function delegationReturnText(terminal, opts) {
     "",
     record8.state === "done" ? "\u8FD9\u4E9B\u662F\u6750\u6599\uFF0C\u4E0D\u662F\u7ED9\u7528\u6237\u7684\u6210\u54C1\uFF1A\u4F60\u6709\u8FD9\u6761\u5BF9\u8BDD\u7684\u5B8C\u6574\u4E0A\u4E0B\u6587\uFF0C\u81EA\u5DF1\u5224\u65AD\u8BE5\u8BB2\u54EA\u4E00\u53E5\u3001\u8981\u4E0D\u8981\u63A5\u7740\u5F80\u4E0B\u505A\u3002" : "\u5148\u81EA\u5DF1\u5224\u65AD\u80FD\u4E0D\u80FD\u63A5\u4F4F\uFF1A\u63A5\u7BA1\u3001\u6362\u4E2A\u505A\u6CD5\u3001\u8FD8\u662F\u91CD\u6D3E\u3002**\u522B\u628A\u4E13\u4E1A\u5931\u8D25\u539F\u6837\u4E22\u56DE\u7ED9\u7528\u6237**\u3002"
   );
+  if (opts.movedPaths.length > 0 || (opts.unchangedPaths?.length ?? 0) > 0) {
+    lines.push(
+      "\u4EA4\u56DE\u7684\u6587\u4EF6\u653E\u5728 `delegations/` \u4E0B\uFF0C**\u7528\u6237\u770B\u4E0D\u5230**\uFF1B\u8981\u7ED9\u7528\u6237\u770B\u7684\uFF0C\u590D\u5236\u6216\u52A0\u5DE5\u540E\u653E\u8FDB `outputs/`\uFF08\u539F\u4EF6\u522B\u79FB\u52A8\u3001\u522B\u5220\u9664\uFF09\u3002" + ((opts.updatedPaths?.length ?? 0) > 0 ? "\u6807\u4E86\u300C\u66F4\u65B0\u300D\u7684\u6587\u4EF6\u5982\u679C\u4F60\u4E4B\u524D\u653E\u8FDB\u8FC7 `outputs/`\uFF0C\u8981\u4E0D\u8981\u6362\u6210\u65B0\u7248\u7531\u4F60\u5224\u65AD\u3002" : "")
+    );
+  }
   return lines.join("\n");
 }
 async function deliverDelegationReturn(deps, terminal) {
@@ -198212,11 +198234,14 @@ async function deliverDelegationReturn(deps, terminal) {
     );
   };
   const bundleFiles = toBundleFiles(outbound.prepared);
+  const previouslyDelivered = new Set(record8.roundSummaries.flatMap((round) => (round.files ?? []).map((file) => file.name)));
   const text5 = delegationReturnText(terminal, {
     movedPaths: bundleFiles.paths,
     skipped: outbound.skipped,
     recentRounds: deps.recentRounds ?? DELEGATION_RETURN_RECENT_ROUNDS,
-    unchangedPaths: outbound.unchanged
+    unchangedPaths: outbound.unchanged,
+    // 「之前交回过」按台账里已经登记的文件名判——这一轮的文件要等投递之后才落账，此刻还不在里面。
+    updatedPaths: bundleFiles.paths.filter((p2) => previouslyDelivered.has(p2))
   });
   const movedFileRefs = outbound.prepared.map((f2) => ({
     name: f2.rel,
@@ -209352,8 +209377,12 @@ var init_memory_registry_store = __esm({
         const keptName = v2.name ?? ex?.name;
         const keptCreatedBy = ex?.createdBy ?? v2.createdBy;
         const keptCreatedAt = ex?.createdAt ?? v2.createdAt;
+        const keptAudience = v2.audience ?? ex?.audience;
+        const keptEnabled = v2.enabledActorIds ?? ex?.enabledActorIds;
         this.variables.set(mk, {
           ...v2,
+          ...keptAudience !== void 0 ? { audience: keptAudience } : {},
+          ...keptEnabled !== void 0 ? { enabledActorIds: [...keptEnabled] } : {},
           ...ex?.lastUsedAt !== void 0 ? { lastUsedAt: ex.lastUsedAt } : {},
           ...keptName ? { name: keptName } : {},
           ...keptCreatedBy ? { createdBy: keptCreatedBy } : {},
@@ -209371,12 +209400,30 @@ var init_memory_registry_store = __esm({
         const ex = this.variables.get(mk);
         if (ex) this.variables.set(mk, { ...ex, valueEncrypted, updatedAt });
       }
+      async patchVariableMeta(key, actorId, patch) {
+        const mk = this._varKey(key, actorId);
+        const ex = this.variables.get(mk);
+        if (!ex) return false;
+        const next = { ...ex, updatedAt: patch.updatedAt };
+        if (patch.audience !== void 0) next.audience = patch.audience;
+        if (patch.enabledActorIds !== void 0) next.enabledActorIds = [...patch.enabledActorIds];
+        if (patch.deliveryMode !== void 0) next.deliveryMode = patch.deliveryMode;
+        if (patch.expiresAt !== void 0) {
+          if (patch.expiresAt === null) delete next.expiresAt;
+          else next.expiresAt = patch.expiresAt;
+        }
+        if (patch.updatedBy !== void 0) next.updatedBy = patch.updatedBy;
+        this.variables.set(mk, next);
+        return true;
+      }
       async getVariableCiphertext(key, actorId) {
         return this.variables.get(this._varKey(key, actorId))?.valueEncrypted ?? null;
       }
       async listVariables(actorId) {
         const all2 = [...this.variables.values()];
-        if (actorId !== void 0) return all2.filter((v2) => v2.scope === "global" || v2.actorId === actorId).map((v2) => ({ ...v2 }));
+        if (actorId !== void 0) {
+          return all2.filter((v2) => v2.actorId === actorId || v2.scope === "global" && (v2.audience !== "selected" || (v2.enabledActorIds ?? []).includes(actorId))).map((v2) => ({ ...v2 }));
+        }
         return all2.map((v2) => ({ ...v2 }));
       }
       async resolveProjectVariables(projectId2) {
@@ -209815,6 +209862,27 @@ var init_memory_trace_store = __esm({
           usage: structuredClone(run.usage)
         }));
       }
+      /** 与 PostgresTraceStore.runtimeRunActivity 同语义：按实例数全部 run（不看状态 / usage），取最近开跑。 */
+      async runtimeRunActivity(runtimeInstanceId) {
+        let runCount = 0;
+        let lastRunStartedAt = null;
+        for (const run of this.runs.values()) {
+          if (run.runtimeInstanceId !== runtimeInstanceId) continue;
+          runCount += 1;
+          if (lastRunStartedAt === null || run.startedAt > lastRunStartedAt) lastRunStartedAt = run.startedAt;
+        }
+        return { runCount, lastRunStartedAt };
+      }
+      /** 与 PostgresTraceStore.listRuntimeRuns 同语义：时间窗内该实例的全部 run，按开跑正序。 */
+      async listRuntimeRuns(runtimeInstanceId, range) {
+        return [...this.runs.values()].filter((run) => run.runtimeInstanceId === runtimeInstanceId && run.startedAt >= range.from && run.startedAt <= range.to).sort((a, b2) => a.startedAt < b2.startedAt ? -1 : a.startedAt > b2.startedAt ? 1 : 0).map((run) => ({
+          actorId: run.actorId,
+          runtimeKind: run.runtimeKind,
+          effectiveModel: run.effectiveModel,
+          startedAt: run.startedAt,
+          usage: run.usage ? structuredClone(run.usage) : null
+        }));
+      }
       /* ---------- execution continuity ---------- */
       async getAttempt(attemptId) {
         return this.getRun(attemptId);
@@ -211852,6 +211920,415 @@ var init_uncategorized_project = __esm({
   }
 });
 
+// ../server/src/domains/actors/model-pricing.ts
+function lookupInMap(map, prefixKeys, candidates) {
+  for (const candidate of candidates) {
+    const exact = map instanceof Map ? map.get(candidate) : map[candidate];
+    if (exact) return exact;
+  }
+  const prefix = prefixKeys.find((p2) => candidates.some((candidate) => candidate.startsWith(`${p2}-`) || candidate.startsWith(`${p2}:`)));
+  if (!prefix) return null;
+  return map instanceof Map ? map.get(prefix) ?? null : map[prefix] ?? null;
+}
+function stripBracketTier(model) {
+  return model.replace(/\[[^\]]*\]/g, "").trim();
+}
+function modelCandidates(model) {
+  const normalized4 = model.trim().toLowerCase();
+  if (!normalized4) return [];
+  const base = [
+    normalized4,
+    normalized4.includes(":") ? normalized4.slice(normalized4.lastIndexOf(":") + 1) : "",
+    normalized4.includes("/") ? normalized4.slice(normalized4.lastIndexOf("/") + 1) : ""
+  ].filter(Boolean);
+  const stripped = base.map(stripBracketTier).filter((m2) => m2 && !base.includes(m2));
+  return [...base, ...new Set(stripped)];
+}
+function setModelPriceCacheLoader(loader) {
+  cacheLoader = loader;
+}
+async function warmModelPriceCache() {
+  if (!cacheLoader) return 0;
+  try {
+    const next = await cacheLoader();
+    dbPrices = next;
+    dbPrefixKeys = [...next.keys()].sort((a, b2) => b2.length - a.length);
+    cacheLoadedAt = Date.now();
+    return next.size;
+  } catch (err) {
+    console.warn(`[model-pricing] \u9884\u70ED\u4EF7\u683C\u7F13\u5B58\u5931\u8D25\uFF0C\u6CBF\u7528\u9759\u6001\u5FEB\u7167\uFF1A${String(err)}`);
+    return 0;
+  }
+}
+function maybeRefreshCache() {
+  if (!cacheLoader) return;
+  if (dbPrices && Date.now() - cacheLoadedAt < CACHE_TTL_MS2) return;
+  if (cacheRefreshInFlight) return;
+  cacheRefreshInFlight = warmModelPriceCache().catch(() => 0).then(() => {
+    cacheRefreshInFlight = null;
+  });
+}
+function priceForModel(model) {
+  if (!model) return null;
+  const candidates = modelCandidates(model);
+  if (candidates.length === 0) return null;
+  maybeRefreshCache();
+  if (dbPrices && dbPrices.size > 0) {
+    const fromDb = lookupInMap(dbPrices, dbPrefixKeys, candidates);
+    if (fromDb) return fromDb;
+  }
+  return lookupInMap(MODEL_PRICES, STATIC_PREFIX_PRICES, candidates);
+}
+function estimateUsageCostBreakdown(model, usage) {
+  const price = priceForModel(model);
+  if (!price) return null;
+  const inputTokens = Math.max(usage.inputTokens ?? 0, 0);
+  const outputTokens = Math.max(usage.outputTokens ?? 0, 0);
+  const cacheReadTokens = Math.max(usage.cacheReadTokens ?? 0, 0);
+  const cacheCreationTokens = Math.max(usage.cacheCreationTokens ?? 0, 0);
+  const cacheReadPrice = price.cachedInputPerMillion ?? price.inputPerMillion * 0.1;
+  return {
+    currency: price.currency,
+    inputMicros: Math.round(inputTokens * price.inputPerMillion / 1e6 * 1e6),
+    cacheMicros: Math.round(
+      (cacheCreationTokens * price.inputPerMillion + cacheReadTokens * cacheReadPrice) / 1e6 * 1e6
+    ),
+    outputMicros: Math.round(outputTokens * price.outputPerMillion / 1e6 * 1e6)
+  };
+}
+function estimateUsageCost(model, usage) {
+  const breakdown = estimateUsageCostBreakdown(model, usage);
+  if (!breakdown) return null;
+  return {
+    currency: breakdown.currency,
+    micros: breakdown.inputMicros + breakdown.cacheMicros + breakdown.outputMicros
+  };
+}
+function displayCostUsdMicros(model, usage) {
+  const stored = Math.max(usage.costUsdMicros ?? 0, 0);
+  if (stored > 0) return stored;
+  const estimated = estimateUsageCost(model, usage);
+  if (!estimated || estimated.micros <= 0) return 0;
+  if (estimated.currency === "USD") return estimated.micros;
+  return Math.round(estimated.micros / DISPLAY_CNY_PER_USD);
+}
+var FOREIGN_MODEL_MARKUP, usd, cny, MODEL_PRICES, STATIC_PREFIX_PRICES, CACHE_TTL_MS2, dbPrices, dbPrefixKeys, cacheLoadedAt, cacheLoader, cacheRefreshInFlight;
+var init_model_pricing = __esm({
+  "../server/src/domains/actors/model-pricing.ts"() {
+    "use strict";
+    init_src();
+    FOREIGN_MODEL_MARKUP = 1.08;
+    usd = (inputPerMillion, outputPerMillion, cachedInputPerMillion) => ({
+      currency: "USD",
+      inputPerMillion: inputPerMillion * FOREIGN_MODEL_MARKUP,
+      outputPerMillion: outputPerMillion * FOREIGN_MODEL_MARKUP,
+      ...cachedInputPerMillion !== void 0 ? { cachedInputPerMillion: cachedInputPerMillion * FOREIGN_MODEL_MARKUP } : {}
+    });
+    cny = (inputPerMillion, outputPerMillion, cachedInputPerMillion) => ({
+      currency: "CNY",
+      inputPerMillion,
+      outputPerMillion,
+      ...cachedInputPerMillion !== void 0 ? { cachedInputPerMillion } : {}
+    });
+    MODEL_PRICES = {
+      "gpt-5.5": usd(5, 30, 0.5),
+      "gpt-5.5-pro": usd(30, 180),
+      "chat-latest": usd(5, 30, 0.5),
+      "gpt-5.4-mini": usd(0.75, 4.5, 0.075),
+      "gpt-5.4-nano": usd(0.2, 1.25, 0.02),
+      "gpt-5.4": usd(2.5, 15, 0.25),
+      "gpt-5.4-pro": usd(30, 180),
+      "gpt-5.3-codex": usd(1.75, 14, 0.175),
+      "gpt-5.2": usd(1.75, 14, 0.175),
+      "gpt-5.2-chat-latest": usd(1.75, 14, 0.175),
+      "gpt-5.2-pro": usd(21, 168),
+      "gpt-5.2-codex": usd(1.75, 14, 0.175),
+      "gpt-5.1": usd(1.25, 10, 0.125),
+      "gpt-5.1-chat-latest": usd(1.25, 10, 0.125),
+      "gpt-5.1-codex": usd(1.25, 10, 0.125),
+      "gpt-5.1-codex-max": usd(1.25, 10, 0.125),
+      "gpt-5.1-codex-mini": usd(0.25, 2, 0.025),
+      "gpt-5-pro": usd(15, 120),
+      "gpt-5-codex": usd(1.25, 10, 0.125),
+      "gpt-5-search-api": usd(1.25, 10, 0.125),
+      "gpt-5": usd(1.25, 10, 0.125),
+      "gpt-5-mini": usd(0.25, 2, 0.025),
+      "gpt-5-nano": usd(0.05, 0.4, 5e-3),
+      "gpt-5-chat-latest": usd(1.25, 10, 0.125),
+      "gpt-4.1": usd(2, 8, 0.5),
+      "gpt-4.1-2025-04-14": usd(2, 8, 0.5),
+      "gpt-4.1-mini": usd(0.4, 1.6, 0.1),
+      "gpt-4.1-mini-2025-04-14": usd(0.4, 1.6, 0.1),
+      "gpt-4.1-nano": usd(0.1, 0.4, 0.025),
+      "gpt-4.1-nano-2025-04-14": usd(0.1, 0.4, 0.025),
+      "o4-mini": usd(1.1, 4.4, 0.275),
+      // o3 / o3-mini 在 codex 静态目录里可选，却一直不在价目快照里（费用记 0）。
+      // 这两行按 OpenAI 公开价填，不是智增增快照里的行；供应商价目表同步到时以 DB 为准。
+      "o3": usd(2, 8),
+      "o3-mini": usd(1.1, 4.4),
+      "claude-fable-5-1": usd(10, 50),
+      "claude-fable-5": usd(10, 50),
+      "claude-mythos-5-1": usd(10, 50),
+      "claude-mythos-5": usd(10, 50),
+      // claude-opus-5 是 Claude Code 当代默认款，却一直不在这张快照里：查不到价 → 费用记 0
+      // （与 2026-09-04 那次 `claude-opus-5[1m]` 记 0 同一类坑）。按 Opus 档 $5/$25 补上。
+      "claude-opus-5": usd(5, 25),
+      "claude-opus-4-8": usd(5, 25),
+      "claude-opus-4-7": usd(5, 25),
+      "claude-sonnet-5": usd(2, 10),
+      "claude-sonnet-4-6": usd(3, 15),
+      "claude-opus-4-6": usd(5, 25),
+      "claude-opus-4-5-20251101": usd(5, 25),
+      "claude-opus-4-5": usd(5, 25),
+      "claude-sonnet-4-5-20250929": usd(3, 15),
+      // 短名同样要有：前缀比对是「表里的键是模型名的前缀」，带日期的那行匹配不上不带日期的短名。
+      // claude-sonnet-4-5 从 2026-07-04 起就在目录里可选，却一直查不到价（费用记 0），本次一并补。
+      "claude-sonnet-4-5": usd(3, 15),
+      "claude-opus-4-1-20250805": usd(15, 75),
+      "claude-opus-4-20250514": usd(15, 75),
+      "claude-sonnet-4-20250514": usd(3, 15),
+      "claude-3-7-sonnet-20250219": usd(3, 15),
+      "claude-3-5-sonnet-20241022": usd(3, 15),
+      "claude-3-5-sonnet-20240620": usd(3, 15),
+      "claude-3-sonnet-20240229": usd(3, 15),
+      "claude-haiku-4-5-20251001": usd(1, 5),
+      // codebuddy 目录用点号写法（claude-sonnet-4.6），与上面的连字符写法是同一批模型，
+      // 但字符串对不上就查不到价 → 记 0。同价另起别名行。
+      "claude-sonnet-4.6": usd(3, 15),
+      "claude-opus-4.7": usd(5, 25),
+      "gemini-3.1-pro": usd(2, 12),
+      "gemini-3-pro-preview": usd(2, 12),
+      // Claude Code 回报的可能是不带日期的短名，短名匹配不上带日期的那行（前缀比对是「表里的键是模型名的前缀」）。
+      "claude-haiku-4-5": usd(1, 5),
+      "gemini-3.5-flash": usd(1.5, 9),
+      "gemini-3.1-pro-preview": usd(2, 12),
+      "gemini-3.1-pro-preview-customtools": usd(2, 12),
+      "gemini-3.1-flash-lite-preview": usd(0.25, 1.5),
+      "gemini-3-flash-preview": usd(0.5, 3),
+      "gemini-2.5-pro": usd(1.25, 10),
+      "gemini-2.5-flash": usd(0.3, 2.5),
+      "gemini-2.5-flash-lite": usd(0.1, 0.4),
+      "gemini-2.5-flash-preview-09-2025": usd(0.3, 2.5),
+      "gemini-2.0-flash": usd(0.1, 0.4),
+      "deepseek-v4-flash": cny(1, 2, 0.02),
+      "deepseek-v4-pro": cny(3, 6, 0.025),
+      "deepseek-chat": cny(2, 3),
+      "deepseek-reasoner": cny(2, 3),
+      "deepseek-v3.2": cny(2, 3),
+      "deepseek-coder": cny(2, 3),
+      "deepseek-r1": cny(4, 16),
+      "deepseek-r1-0528": cny(4, 16),
+      "deepseek-v3": cny(2, 8),
+      "deepseek-v3-0324": cny(2, 8),
+      "deepseek-v3.1": cny(4, 12),
+      "qwen3-max": cny(6, 24),
+      "qwen3-max-preview": cny(6, 24),
+      "qwen3-coder-plus": cny(4, 16),
+      "qwen3-235b-a22b": cny(4, 40),
+      "qwen3-32b": cny(2, 20),
+      "qwen3-30b-a3b": cny(1.5, 15),
+      "qwen3-14b": cny(1, 10),
+      "qwen3-8b": cny(0.5, 5),
+      "qwen3-4b": cny(0.3, 3),
+      "qwen3-1.7b": cny(0.3, 3),
+      "qwen3-0.6b": cny(0.3, 3),
+      "qwq-plus": cny(1.6, 4),
+      "qwq-plus-latest": cny(1.6, 4),
+      "qwq-plus-2025-03-05": cny(1.6, 4),
+      "kimi-k2.7-code": cny(6.5, 27),
+      "kimi-k2.6": cny(6.5, 27),
+      "kimi-k2.5": cny(4, 21),
+      "kimi-k2-0905-preview": cny(4, 16),
+      "kimi-k2-0711-preview": cny(4, 16),
+      "kimi-k2-turbo-preview": cny(8, 58)
+    };
+    STATIC_PREFIX_PRICES = Object.keys(MODEL_PRICES).sort((a, b2) => b2.length - a.length);
+    CACHE_TTL_MS2 = 5 * 6e4;
+    dbPrices = null;
+    dbPrefixKeys = [];
+    cacheLoadedAt = 0;
+    cacheLoader = null;
+    cacheRefreshInFlight = null;
+  }
+});
+
+// ../server/src/domains/usage/accounting.ts
+function nonNegative(v2) {
+  return Math.max(v2 ?? 0, 0);
+}
+function resolvedModel(model) {
+  const trimmed = model?.trim();
+  return trimmed ? trimmed : null;
+}
+function splitByWeight(total, w2) {
+  const sum = w2.input + w2.cache + w2.output;
+  if (total === 0) return { input: 0, cache: 0, output: 0 };
+  if (sum <= 0) return { input: 0, cache: 0, output: total };
+  const input = Math.round(total * w2.input / sum);
+  const cache = Math.round(total * w2.cache / sum);
+  return { input, cache, output: total - input - cache };
+}
+function toDisplayUsd(currency, micros) {
+  return currency === "USD" ? micros : Math.round(micros / DISPLAY_CNY_PER_USD);
+}
+function accountUsage(model, usage) {
+  const resolved = resolvedModel(model);
+  if (!resolved || !usage) return null;
+  const input = nonNegative(usage.inputTokens);
+  const output = nonNegative(usage.outputTokens);
+  const cache = nonNegative(usage.cacheReadTokens) + nonNegative(usage.cacheCreationTokens);
+  const tokens = { input, cache, output, total: input + cache + output };
+  const estimated = estimateUsageCostBreakdown(resolved, usage);
+  const weights = estimated ? { input: estimated.inputMicros, cache: estimated.cacheMicros, output: estimated.outputMicros } : null;
+  const reported = Math.max(usage.costUsdMicros ?? 0, 0);
+  if (reported > 0) {
+    const parts = weights && estimated?.currency === "USD" ? splitByWeight(reported, weights) : { input: 0, cache: 0, output: reported };
+    return {
+      tokens,
+      currency: "USD",
+      amountMicros: reported,
+      parts,
+      displayUsdMicros: reported,
+      displayParts: parts,
+      source: "reported"
+    };
+  }
+  if (estimated && weights) {
+    const amount = weights.input + weights.cache + weights.output;
+    const displayUsdMicros = toDisplayUsd(estimated.currency, amount);
+    return {
+      tokens,
+      currency: estimated.currency,
+      amountMicros: amount,
+      parts: weights,
+      displayUsdMicros,
+      displayParts: estimated.currency === "USD" ? weights : splitByWeight(displayUsdMicros, weights),
+      source: "estimated"
+    };
+  }
+  return {
+    tokens,
+    currency: "USD",
+    amountMicros: 0,
+    parts: { input: 0, cache: 0, output: 0 },
+    displayUsdMicros: 0,
+    displayParts: { input: 0, cache: 0, output: 0 },
+    source: "unpriced"
+  };
+}
+function isUnpriced(account) {
+  return account.source === "unpriced" && account.tokens.total > 0;
+}
+var init_accounting = __esm({
+  "../server/src/domains/usage/accounting.ts"() {
+    "use strict";
+    init_model_pricing();
+  }
+});
+
+// ../server/src/domains/actors/stats.ts
+function emptyCostBreakdown() {
+  return {
+    inputUsdMicros: 0,
+    cacheUsdMicros: 0,
+    outputUsdMicros: 0,
+    inputCnyMicros: 0,
+    cacheCnyMicros: 0,
+    outputCnyMicros: 0
+  };
+}
+function emptySummary() {
+  return {
+    tokenWeek: 0,
+    tokenWeekBreakdown: { input: 0, cache: 0, output: 0 },
+    costWeekUsdMicros: 0,
+    costWeekCnyMicros: 0,
+    costWeekBreakdown: emptyCostBreakdown(),
+    unpricedModels: []
+  };
+}
+function addAccount(target, account) {
+  target.tokenWeekBreakdown.input += account.tokens.input;
+  target.tokenWeekBreakdown.cache += account.tokens.cache;
+  target.tokenWeekBreakdown.output += account.tokens.output;
+  target.tokenWeek += account.tokens.total;
+  if (account.currency === "USD") {
+    target.costWeekUsdMicros += account.amountMicros;
+    target.costWeekBreakdown.inputUsdMicros += account.parts.input;
+    target.costWeekBreakdown.cacheUsdMicros += account.parts.cache;
+    target.costWeekBreakdown.outputUsdMicros += account.parts.output;
+  } else {
+    target.costWeekCnyMicros += account.amountMicros;
+    target.costWeekBreakdown.inputCnyMicros += account.parts.input;
+    target.costWeekBreakdown.cacheCnyMicros += account.parts.cache;
+    target.costWeekBreakdown.outputCnyMicros += account.parts.output;
+  }
+}
+function summarize2(rows) {
+  const out = emptySummary();
+  const unpriced = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    const account = accountUsage(row.model, row.usage);
+    if (!account) continue;
+    addAccount(out, account);
+    if (isUnpriced(account)) unpriced.add(resolvedModel(row.model));
+  }
+  out.unpricedModels = [...unpriced].sort();
+  return out;
+}
+async function actorStats(actorId, opts = {}) {
+  const now = opts.now ?? /* @__PURE__ */ new Date();
+  const from = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1e3).toISOString();
+  const to = now.toISOString();
+  const weeklyUsage = opts.usage?.listRuns ? summarizeWeeklyRuns(await listWeeklyRuns(opts.usage, actorId, from, to, opts.artifactIds)) : summarizeWeeklyUsage(!opts.artifactIds && opts.usage?.queryUsageStats ? await opts.usage.queryUsageStats({
+    actorIds: [actorId],
+    from,
+    to,
+    granularity: "hour"
+  }) : []);
+  return {
+    actorId,
+    usageAvailable: !!(opts.usage?.listRuns || !opts.artifactIds && opts.usage?.queryUsageStats),
+    ...opts.model ? { participatingTaskCount: participatingTaskCount(opts.model, actorId) } : {},
+    tokenWeek: weeklyUsage.tokenWeek,
+    tokenWeekBreakdown: weeklyUsage.tokenWeekBreakdown,
+    costWeekUsdMicros: weeklyUsage.costWeekUsdMicros,
+    costWeekCnyMicros: weeklyUsage.costWeekCnyMicros,
+    costWeekBreakdown: weeklyUsage.costWeekBreakdown,
+    usageWindow: { from, to },
+    unpricedModels: weeklyUsage.unpricedModels
+  };
+}
+async function listWeeklyRuns(trace, actorId, from, to, artifactIds) {
+  const out = [];
+  let cursor;
+  do {
+    const page = await trace.listRuns({ actorId, from, to, limit: 500, ...cursor ? { cursor } : {} });
+    out.push(...page.items.filter((run) => !artifactIds || run.artifactId != null && artifactIds.has(run.artifactId)));
+    cursor = page.nextCursor ?? void 0;
+  } while (cursor);
+  return out;
+}
+function summarizeWeeklyRuns(runs) {
+  return summarize2(runs.map((run) => ({ model: run.effectiveModel, usage: run.usage })));
+}
+function summarizeWeeklyUsage(rows) {
+  return summarize2(rows.map((row) => ({ model: row.effectiveModel, usage: row })));
+}
+function participatingTaskCount(model, actorId) {
+  const workorders = /* @__PURE__ */ new Set();
+  for (const artifact of model.artifacts.values()) {
+    if (artifact.owner === actorId) workorders.add(artifact.workspace);
+  }
+  return workorders.size;
+}
+var init_stats = __esm({
+  "../server/src/domains/actors/stats.ts"() {
+    "use strict";
+    init_accounting();
+  }
+});
+
 // ../server/src/domains/projects/service.ts
 function sanitizeCreatorActorId(raw) {
   const id = raw?.trim();
@@ -212132,6 +212609,7 @@ var init_service4 = __esm({
     init_projection();
     init_uncategorized_project();
     init_workorders();
+    init_stats();
     init_node_state();
     DEFAULT_AGENT_ACTOR = "actor:agent:system";
     MemoryProjectStateStore = class {
@@ -212491,6 +212969,17 @@ var init_service4 = __esm({
         artifacts.sort((a, b2) => b2.updatedAt.localeCompare(a.updatedAt));
         return { artifacts, summary: summarizeArtifacts(artifacts) };
       }
+      /** 成员概览只读本公司的项目记录与当前任务模型，不加载项目文件/用量旁账。 */
+      async getActorParticipationStats(actorId) {
+        if (!this.actorDirectory) throw new Error("participation source unavailable");
+        if (!await this.actorDirectory.getActor(actorId)) return null;
+        const projects = await this.projects.listProjects();
+        return {
+          actorId,
+          createdProjectCount: projects.filter((project) => !isUncategorizedProjectId(project.id) && project.createdBy?.id === actorId).length,
+          participatingTaskCount: participatingTaskCount(this.kernel.model, actorId)
+        };
+      }
       /**
        * 项目列表（带派生态）。
        *
@@ -215467,6 +215956,9 @@ var init_company_scoped_registry = __esm({
       async patchVariableValue(...args) {
         return this.base.patchVariableValue(...args);
       }
+      async patchVariableMeta(...args) {
+        return this.base.patchVariableMeta(...args);
+      }
       async getVariableCiphertext(...args) {
         return this.base.getVariableCiphertext(...args);
       }
@@ -215491,17 +215983,30 @@ function joinRel(dir, name) {
   return dir ? `${dir}/${name}` : name;
 }
 async function scanSessionOutputs(bridge, loc, now = Date.now) {
+  const locator = { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId };
+  if (typeof bridge.walk === "function") {
+    const walked = await bridge.walk(loc.nodeId, { ...locator, path: SESSION_OUTPUTS_DIR }, WALK_MAX_ENTRIES).catch(() => null);
+    if (!walked) return null;
+    if (walked.ok) {
+      const files2 = walked.entries.filter((entry) => entry.type === "file").map((entry) => ({ path: entry.path, size: entry.size, mtime: entry.mtime }));
+      return { files: files2, via: "walk", tree: walked.entries };
+    }
+    if (walked.code === "NOT_FOUND") return { files: [], via: "walk", tree: [] };
+    if (walked.code !== "UNSUPPORTED") return null;
+  }
+  const files = await scanLayered(
+    (path41) => bridge.list(loc.nodeId, { ...locator, path: path41 }),
+    now
+  );
+  return files === null ? null : { files, via: "layered" };
+}
+async function scanLayered(list2, now) {
   const deadline = now() + BUDGET_MS;
   const out = [];
   let listCalls = 0;
   const listDir = (path41) => {
     listCalls += 1;
-    return bridge.list(loc.nodeId, {
-      workdirKey: loc.workdirKey,
-      runtimeKind: loc.runtimeKind,
-      rtId: loc.rtId,
-      path: path41
-    });
+    return list2(path41);
   };
   const root = await listDir(SESSION_OUTPUTS_DIR).catch(() => null);
   if (!root) return null;
@@ -215534,23 +216039,44 @@ async function scanSessionOutputs(bridge, loc, now = Date.now) {
   }
   return out;
 }
+async function legacyReach(tree) {
+  const children = /* @__PURE__ */ new Map();
+  for (const entry of tree) {
+    const slash = entry.path.lastIndexOf("/");
+    const parent = slash >= 0 ? entry.path.slice(0, slash) : "";
+    const siblings = children.get(parent) ?? [];
+    siblings.push({ name: entry.path.slice(slash + 1), type: entry.type, size: entry.size, mtime: entry.mtime });
+    children.set(parent, siblings);
+  }
+  const files = await scanLayered(async (path41) => ({ ok: true, entries: children.get(path41) ?? [], absPath: "" }), () => 0);
+  return new Set((files ?? []).map((file) => file.path));
+}
 async function settleSessionOutputs(deps) {
-  const scanned = await scanSessionOutputs(deps.bridge, deps.loc, deps.now);
-  if (scanned === null) return null;
+  const scan2 = await scanSessionOutputs(deps.bridge, deps.loc, deps.now);
+  if (scan2 === null) return null;
   const previous3 = await deps.readFingerprints(deps.sessionId).catch(() => null);
-  const diff = diffSessionOutputs(scanned, previous3 ?? void 0);
+  const diff = diffSessionOutputs(scan2.files, previous3 ?? void 0);
+  if (scan2.via === "walk") {
+    if (previous3 && previous3[WALK_TABLE_MARK] === void 0) {
+      const reach = await legacyReach(scan2.tree ?? []);
+      diff.changed = diff.changed.filter((file) => previous3[file.path] !== void 0 || reach.has(file.path));
+    }
+    diff.fingerprints[WALK_TABLE_MARK] = { size: 0, mtime: "" };
+  }
   await deps.writeFingerprints(deps.sessionId, diff.fingerprints).catch(() => void 0);
   return diff;
 }
-var MAX_DEPTH, MAX_ENTRIES, MAX_LIST_CALLS, BUDGET_MS;
+var WALK_MAX_ENTRIES, MAX_DEPTH, MAX_ENTRIES, MAX_LIST_CALLS, BUDGET_MS, WALK_TABLE_MARK;
 var init_outputs_scan = __esm({
   "../server/src/domains/chat-sessions/outputs-scan.ts"() {
     "use strict";
     init_src();
+    WALK_MAX_ENTRIES = 2e3;
     MAX_DEPTH = 3;
     MAX_ENTRIES = 100;
     MAX_LIST_CALLS = 12;
     BUDGET_MS = 5e3;
+    WALK_TABLE_MARK = "#walk";
   }
 });
 
@@ -220014,6 +220540,9 @@ function variableKeyFromEnv(env = process.env) {
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
   return (0, import_node_crypto47.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
+function dedupe(ids2) {
+  return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
+}
 var import_node_crypto47, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
@@ -220997,7 +221526,31 @@ ${input.description}
           ...v2.by ? { createdBy: v2.by, createdAt: this.now(), updatedBy: v2.by } : {},
           // ADR 凭据保险库补章 §D2.2：expiresAt 写侧穿透——**显式带 key**（含 undefined），使清空（传空→undefined）
           // 也落到底（store 两实现都按此覆盖）。lastUsedAt 从不由写侧传，取用时另刷（§D2.3）。
-          expiresAt: v2.expiresAt
+          expiresAt: v2.expiresAt,
+          // 决策 0556：发给谁只对全局行有意义；个人档 / 项目档一律不带（存储层 COALESCE：不带 = 不动）。
+          ...v2.scope === "global" && v2.audience !== void 0 ? { audience: v2.audience } : {},
+          ...v2.scope === "global" && v2.enabledActorIds !== void 0 ? { enabledActorIds: dedupe(v2.enabledActorIds) } : {}
+        });
+      }
+      /**
+       * 只改一行变量的元数据、不碰值（决策 0556）。
+       *
+       * 两个用处：① 管理页「配置Agent」改发给谁（audience / enabledActorIds）——不用为了改名单去取明文重写；
+       * ② 改到期时间 / 注入方式不用连值一起重填（此前 `putVariable` 空值即静默不写，界面只能逼人重输一遍值）。
+       *
+       * 行不存在返回 false，**不会凭空造一条没有值的行**。audience / enabledActorIds 只允许写在全局行上。
+       */
+      async patchVariableMeta(key, selector, patch) {
+        if (selector.actorId !== void 0 && (patch.audience !== void 0 || patch.enabledActorIds !== void 0)) {
+          throw new ApiError(400, "BAD_REQUEST", "audience / enabledActorIds \u53EA\u80FD\u5199\u5728\u7EC4\u7EC7\u9ED8\u8BA4\u503C\uFF08\u5168\u5C40\u884C\uFF09\u4E0A\uFF0C\u4E2A\u4EBA\u6863\u6CA1\u6709\u300C\u53D1\u7ED9\u8C01\u300D");
+        }
+        return this.opts.store.patchVariableMeta(key, selector.actorId, {
+          ...patch.audience !== void 0 ? { audience: patch.audience } : {},
+          ...patch.enabledActorIds !== void 0 ? { enabledActorIds: dedupe(patch.enabledActorIds) } : {},
+          ...patch.deliveryMode !== void 0 ? { deliveryMode: patch.deliveryMode } : {},
+          ...patch.expiresAt !== void 0 ? { expiresAt: patch.expiresAt } : {},
+          ...patch.by ? { updatedBy: patch.by } : {},
+          updatedAt: this.now()
         });
       }
       /** ADR 凭据保险库补章 §D2.3：某一行变量「明文真被取用」→ 刷 lastUsedAt。行按 (key, actorId?, projectId?)
@@ -221072,7 +221625,10 @@ ${input.description}
             // 存量行没有这三格，原样不带出去——展示侧出「—」，不拿 updatedAt 冒充 createdAt。
             ...r.createdBy !== void 0 ? { createdBy: r.createdBy } : {},
             ...r.createdAt !== void 0 ? { createdAt: r.createdAt } : {},
-            ...r.updatedBy !== void 0 ? { updatedBy: r.updatedBy } : {}
+            ...r.updatedBy !== void 0 ? { updatedBy: r.updatedBy } : {},
+            // 决策 0556：发给谁。存量行没有 → 不带出去，读侧按「全员生效」理解。
+            ...r.audience !== void 0 ? { audience: r.audience } : {},
+            ...r.enabledActorIds !== void 0 ? { enabledActorIds: r.enabledActorIds } : {}
           };
         });
       }
@@ -221536,415 +222092,6 @@ var init_skill_bundle = __esm({
   }
 });
 
-// ../server/src/domains/actors/model-pricing.ts
-function lookupInMap(map, prefixKeys, candidates) {
-  for (const candidate of candidates) {
-    const exact = map instanceof Map ? map.get(candidate) : map[candidate];
-    if (exact) return exact;
-  }
-  const prefix = prefixKeys.find((p2) => candidates.some((candidate) => candidate.startsWith(`${p2}-`) || candidate.startsWith(`${p2}:`)));
-  if (!prefix) return null;
-  return map instanceof Map ? map.get(prefix) ?? null : map[prefix] ?? null;
-}
-function stripBracketTier(model) {
-  return model.replace(/\[[^\]]*\]/g, "").trim();
-}
-function modelCandidates(model) {
-  const normalized4 = model.trim().toLowerCase();
-  if (!normalized4) return [];
-  const base = [
-    normalized4,
-    normalized4.includes(":") ? normalized4.slice(normalized4.lastIndexOf(":") + 1) : "",
-    normalized4.includes("/") ? normalized4.slice(normalized4.lastIndexOf("/") + 1) : ""
-  ].filter(Boolean);
-  const stripped = base.map(stripBracketTier).filter((m2) => m2 && !base.includes(m2));
-  return [...base, ...new Set(stripped)];
-}
-function setModelPriceCacheLoader(loader) {
-  cacheLoader = loader;
-}
-async function warmModelPriceCache() {
-  if (!cacheLoader) return 0;
-  try {
-    const next = await cacheLoader();
-    dbPrices = next;
-    dbPrefixKeys = [...next.keys()].sort((a, b2) => b2.length - a.length);
-    cacheLoadedAt = Date.now();
-    return next.size;
-  } catch (err) {
-    console.warn(`[model-pricing] \u9884\u70ED\u4EF7\u683C\u7F13\u5B58\u5931\u8D25\uFF0C\u6CBF\u7528\u9759\u6001\u5FEB\u7167\uFF1A${String(err)}`);
-    return 0;
-  }
-}
-function maybeRefreshCache() {
-  if (!cacheLoader) return;
-  if (dbPrices && Date.now() - cacheLoadedAt < CACHE_TTL_MS2) return;
-  if (cacheRefreshInFlight) return;
-  cacheRefreshInFlight = warmModelPriceCache().catch(() => 0).then(() => {
-    cacheRefreshInFlight = null;
-  });
-}
-function priceForModel(model) {
-  if (!model) return null;
-  const candidates = modelCandidates(model);
-  if (candidates.length === 0) return null;
-  maybeRefreshCache();
-  if (dbPrices && dbPrices.size > 0) {
-    const fromDb = lookupInMap(dbPrices, dbPrefixKeys, candidates);
-    if (fromDb) return fromDb;
-  }
-  return lookupInMap(MODEL_PRICES, STATIC_PREFIX_PRICES, candidates);
-}
-function estimateUsageCostBreakdown(model, usage) {
-  const price = priceForModel(model);
-  if (!price) return null;
-  const inputTokens = Math.max(usage.inputTokens ?? 0, 0);
-  const outputTokens = Math.max(usage.outputTokens ?? 0, 0);
-  const cacheReadTokens = Math.max(usage.cacheReadTokens ?? 0, 0);
-  const cacheCreationTokens = Math.max(usage.cacheCreationTokens ?? 0, 0);
-  const cacheReadPrice = price.cachedInputPerMillion ?? price.inputPerMillion * 0.1;
-  return {
-    currency: price.currency,
-    inputMicros: Math.round(inputTokens * price.inputPerMillion / 1e6 * 1e6),
-    cacheMicros: Math.round(
-      (cacheCreationTokens * price.inputPerMillion + cacheReadTokens * cacheReadPrice) / 1e6 * 1e6
-    ),
-    outputMicros: Math.round(outputTokens * price.outputPerMillion / 1e6 * 1e6)
-  };
-}
-function estimateUsageCost(model, usage) {
-  const breakdown = estimateUsageCostBreakdown(model, usage);
-  if (!breakdown) return null;
-  return {
-    currency: breakdown.currency,
-    micros: breakdown.inputMicros + breakdown.cacheMicros + breakdown.outputMicros
-  };
-}
-function displayCostUsdMicros(model, usage) {
-  const stored = Math.max(usage.costUsdMicros ?? 0, 0);
-  if (stored > 0) return stored;
-  const estimated = estimateUsageCost(model, usage);
-  if (!estimated || estimated.micros <= 0) return 0;
-  if (estimated.currency === "USD") return estimated.micros;
-  return Math.round(estimated.micros / DISPLAY_CNY_PER_USD);
-}
-var FOREIGN_MODEL_MARKUP, usd, cny, MODEL_PRICES, STATIC_PREFIX_PRICES, CACHE_TTL_MS2, dbPrices, dbPrefixKeys, cacheLoadedAt, cacheLoader, cacheRefreshInFlight;
-var init_model_pricing = __esm({
-  "../server/src/domains/actors/model-pricing.ts"() {
-    "use strict";
-    init_src();
-    FOREIGN_MODEL_MARKUP = 1.08;
-    usd = (inputPerMillion, outputPerMillion, cachedInputPerMillion) => ({
-      currency: "USD",
-      inputPerMillion: inputPerMillion * FOREIGN_MODEL_MARKUP,
-      outputPerMillion: outputPerMillion * FOREIGN_MODEL_MARKUP,
-      ...cachedInputPerMillion !== void 0 ? { cachedInputPerMillion: cachedInputPerMillion * FOREIGN_MODEL_MARKUP } : {}
-    });
-    cny = (inputPerMillion, outputPerMillion, cachedInputPerMillion) => ({
-      currency: "CNY",
-      inputPerMillion,
-      outputPerMillion,
-      ...cachedInputPerMillion !== void 0 ? { cachedInputPerMillion } : {}
-    });
-    MODEL_PRICES = {
-      "gpt-5.5": usd(5, 30, 0.5),
-      "gpt-5.5-pro": usd(30, 180),
-      "chat-latest": usd(5, 30, 0.5),
-      "gpt-5.4-mini": usd(0.75, 4.5, 0.075),
-      "gpt-5.4-nano": usd(0.2, 1.25, 0.02),
-      "gpt-5.4": usd(2.5, 15, 0.25),
-      "gpt-5.4-pro": usd(30, 180),
-      "gpt-5.3-codex": usd(1.75, 14, 0.175),
-      "gpt-5.2": usd(1.75, 14, 0.175),
-      "gpt-5.2-chat-latest": usd(1.75, 14, 0.175),
-      "gpt-5.2-pro": usd(21, 168),
-      "gpt-5.2-codex": usd(1.75, 14, 0.175),
-      "gpt-5.1": usd(1.25, 10, 0.125),
-      "gpt-5.1-chat-latest": usd(1.25, 10, 0.125),
-      "gpt-5.1-codex": usd(1.25, 10, 0.125),
-      "gpt-5.1-codex-max": usd(1.25, 10, 0.125),
-      "gpt-5.1-codex-mini": usd(0.25, 2, 0.025),
-      "gpt-5-pro": usd(15, 120),
-      "gpt-5-codex": usd(1.25, 10, 0.125),
-      "gpt-5-search-api": usd(1.25, 10, 0.125),
-      "gpt-5": usd(1.25, 10, 0.125),
-      "gpt-5-mini": usd(0.25, 2, 0.025),
-      "gpt-5-nano": usd(0.05, 0.4, 5e-3),
-      "gpt-5-chat-latest": usd(1.25, 10, 0.125),
-      "gpt-4.1": usd(2, 8, 0.5),
-      "gpt-4.1-2025-04-14": usd(2, 8, 0.5),
-      "gpt-4.1-mini": usd(0.4, 1.6, 0.1),
-      "gpt-4.1-mini-2025-04-14": usd(0.4, 1.6, 0.1),
-      "gpt-4.1-nano": usd(0.1, 0.4, 0.025),
-      "gpt-4.1-nano-2025-04-14": usd(0.1, 0.4, 0.025),
-      "o4-mini": usd(1.1, 4.4, 0.275),
-      // o3 / o3-mini 在 codex 静态目录里可选，却一直不在价目快照里（费用记 0）。
-      // 这两行按 OpenAI 公开价填，不是智增增快照里的行；供应商价目表同步到时以 DB 为准。
-      "o3": usd(2, 8),
-      "o3-mini": usd(1.1, 4.4),
-      "claude-fable-5-1": usd(10, 50),
-      "claude-fable-5": usd(10, 50),
-      "claude-mythos-5-1": usd(10, 50),
-      "claude-mythos-5": usd(10, 50),
-      // claude-opus-5 是 Claude Code 当代默认款，却一直不在这张快照里：查不到价 → 费用记 0
-      // （与 2026-09-04 那次 `claude-opus-5[1m]` 记 0 同一类坑）。按 Opus 档 $5/$25 补上。
-      "claude-opus-5": usd(5, 25),
-      "claude-opus-4-8": usd(5, 25),
-      "claude-opus-4-7": usd(5, 25),
-      "claude-sonnet-5": usd(2, 10),
-      "claude-sonnet-4-6": usd(3, 15),
-      "claude-opus-4-6": usd(5, 25),
-      "claude-opus-4-5-20251101": usd(5, 25),
-      "claude-opus-4-5": usd(5, 25),
-      "claude-sonnet-4-5-20250929": usd(3, 15),
-      // 短名同样要有：前缀比对是「表里的键是模型名的前缀」，带日期的那行匹配不上不带日期的短名。
-      // claude-sonnet-4-5 从 2026-07-04 起就在目录里可选，却一直查不到价（费用记 0），本次一并补。
-      "claude-sonnet-4-5": usd(3, 15),
-      "claude-opus-4-1-20250805": usd(15, 75),
-      "claude-opus-4-20250514": usd(15, 75),
-      "claude-sonnet-4-20250514": usd(3, 15),
-      "claude-3-7-sonnet-20250219": usd(3, 15),
-      "claude-3-5-sonnet-20241022": usd(3, 15),
-      "claude-3-5-sonnet-20240620": usd(3, 15),
-      "claude-3-sonnet-20240229": usd(3, 15),
-      "claude-haiku-4-5-20251001": usd(1, 5),
-      // codebuddy 目录用点号写法（claude-sonnet-4.6），与上面的连字符写法是同一批模型，
-      // 但字符串对不上就查不到价 → 记 0。同价另起别名行。
-      "claude-sonnet-4.6": usd(3, 15),
-      "claude-opus-4.7": usd(5, 25),
-      "gemini-3.1-pro": usd(2, 12),
-      "gemini-3-pro-preview": usd(2, 12),
-      // Claude Code 回报的可能是不带日期的短名，短名匹配不上带日期的那行（前缀比对是「表里的键是模型名的前缀」）。
-      "claude-haiku-4-5": usd(1, 5),
-      "gemini-3.5-flash": usd(1.5, 9),
-      "gemini-3.1-pro-preview": usd(2, 12),
-      "gemini-3.1-pro-preview-customtools": usd(2, 12),
-      "gemini-3.1-flash-lite-preview": usd(0.25, 1.5),
-      "gemini-3-flash-preview": usd(0.5, 3),
-      "gemini-2.5-pro": usd(1.25, 10),
-      "gemini-2.5-flash": usd(0.3, 2.5),
-      "gemini-2.5-flash-lite": usd(0.1, 0.4),
-      "gemini-2.5-flash-preview-09-2025": usd(0.3, 2.5),
-      "gemini-2.0-flash": usd(0.1, 0.4),
-      "deepseek-v4-flash": cny(1, 2, 0.02),
-      "deepseek-v4-pro": cny(3, 6, 0.025),
-      "deepseek-chat": cny(2, 3),
-      "deepseek-reasoner": cny(2, 3),
-      "deepseek-v3.2": cny(2, 3),
-      "deepseek-coder": cny(2, 3),
-      "deepseek-r1": cny(4, 16),
-      "deepseek-r1-0528": cny(4, 16),
-      "deepseek-v3": cny(2, 8),
-      "deepseek-v3-0324": cny(2, 8),
-      "deepseek-v3.1": cny(4, 12),
-      "qwen3-max": cny(6, 24),
-      "qwen3-max-preview": cny(6, 24),
-      "qwen3-coder-plus": cny(4, 16),
-      "qwen3-235b-a22b": cny(4, 40),
-      "qwen3-32b": cny(2, 20),
-      "qwen3-30b-a3b": cny(1.5, 15),
-      "qwen3-14b": cny(1, 10),
-      "qwen3-8b": cny(0.5, 5),
-      "qwen3-4b": cny(0.3, 3),
-      "qwen3-1.7b": cny(0.3, 3),
-      "qwen3-0.6b": cny(0.3, 3),
-      "qwq-plus": cny(1.6, 4),
-      "qwq-plus-latest": cny(1.6, 4),
-      "qwq-plus-2025-03-05": cny(1.6, 4),
-      "kimi-k2.7-code": cny(6.5, 27),
-      "kimi-k2.6": cny(6.5, 27),
-      "kimi-k2.5": cny(4, 21),
-      "kimi-k2-0905-preview": cny(4, 16),
-      "kimi-k2-0711-preview": cny(4, 16),
-      "kimi-k2-turbo-preview": cny(8, 58)
-    };
-    STATIC_PREFIX_PRICES = Object.keys(MODEL_PRICES).sort((a, b2) => b2.length - a.length);
-    CACHE_TTL_MS2 = 5 * 6e4;
-    dbPrices = null;
-    dbPrefixKeys = [];
-    cacheLoadedAt = 0;
-    cacheLoader = null;
-    cacheRefreshInFlight = null;
-  }
-});
-
-// ../server/src/domains/usage/accounting.ts
-function nonNegative(v2) {
-  return Math.max(v2 ?? 0, 0);
-}
-function resolvedModel(model) {
-  const trimmed = model?.trim();
-  return trimmed ? trimmed : null;
-}
-function splitByWeight(total, w2) {
-  const sum = w2.input + w2.cache + w2.output;
-  if (total === 0) return { input: 0, cache: 0, output: 0 };
-  if (sum <= 0) return { input: 0, cache: 0, output: total };
-  const input = Math.round(total * w2.input / sum);
-  const cache = Math.round(total * w2.cache / sum);
-  return { input, cache, output: total - input - cache };
-}
-function toDisplayUsd(currency, micros) {
-  return currency === "USD" ? micros : Math.round(micros / DISPLAY_CNY_PER_USD);
-}
-function accountUsage(model, usage) {
-  const resolved = resolvedModel(model);
-  if (!resolved || !usage) return null;
-  const input = nonNegative(usage.inputTokens);
-  const output = nonNegative(usage.outputTokens);
-  const cache = nonNegative(usage.cacheReadTokens) + nonNegative(usage.cacheCreationTokens);
-  const tokens = { input, cache, output, total: input + cache + output };
-  const estimated = estimateUsageCostBreakdown(resolved, usage);
-  const weights = estimated ? { input: estimated.inputMicros, cache: estimated.cacheMicros, output: estimated.outputMicros } : null;
-  const reported = Math.max(usage.costUsdMicros ?? 0, 0);
-  if (reported > 0) {
-    const parts = weights && estimated?.currency === "USD" ? splitByWeight(reported, weights) : { input: 0, cache: 0, output: reported };
-    return {
-      tokens,
-      currency: "USD",
-      amountMicros: reported,
-      parts,
-      displayUsdMicros: reported,
-      displayParts: parts,
-      source: "reported"
-    };
-  }
-  if (estimated && weights) {
-    const amount = weights.input + weights.cache + weights.output;
-    const displayUsdMicros = toDisplayUsd(estimated.currency, amount);
-    return {
-      tokens,
-      currency: estimated.currency,
-      amountMicros: amount,
-      parts: weights,
-      displayUsdMicros,
-      displayParts: estimated.currency === "USD" ? weights : splitByWeight(displayUsdMicros, weights),
-      source: "estimated"
-    };
-  }
-  return {
-    tokens,
-    currency: "USD",
-    amountMicros: 0,
-    parts: { input: 0, cache: 0, output: 0 },
-    displayUsdMicros: 0,
-    displayParts: { input: 0, cache: 0, output: 0 },
-    source: "unpriced"
-  };
-}
-function isUnpriced(account) {
-  return account.source === "unpriced" && account.tokens.total > 0;
-}
-var init_accounting = __esm({
-  "../server/src/domains/usage/accounting.ts"() {
-    "use strict";
-    init_model_pricing();
-  }
-});
-
-// ../server/src/domains/actors/stats.ts
-function emptyCostBreakdown() {
-  return {
-    inputUsdMicros: 0,
-    cacheUsdMicros: 0,
-    outputUsdMicros: 0,
-    inputCnyMicros: 0,
-    cacheCnyMicros: 0,
-    outputCnyMicros: 0
-  };
-}
-function emptySummary() {
-  return {
-    tokenWeek: 0,
-    tokenWeekBreakdown: { input: 0, cache: 0, output: 0 },
-    costWeekUsdMicros: 0,
-    costWeekCnyMicros: 0,
-    costWeekBreakdown: emptyCostBreakdown(),
-    unpricedModels: []
-  };
-}
-function addAccount(target, account) {
-  target.tokenWeekBreakdown.input += account.tokens.input;
-  target.tokenWeekBreakdown.cache += account.tokens.cache;
-  target.tokenWeekBreakdown.output += account.tokens.output;
-  target.tokenWeek += account.tokens.total;
-  if (account.currency === "USD") {
-    target.costWeekUsdMicros += account.amountMicros;
-    target.costWeekBreakdown.inputUsdMicros += account.parts.input;
-    target.costWeekBreakdown.cacheUsdMicros += account.parts.cache;
-    target.costWeekBreakdown.outputUsdMicros += account.parts.output;
-  } else {
-    target.costWeekCnyMicros += account.amountMicros;
-    target.costWeekBreakdown.inputCnyMicros += account.parts.input;
-    target.costWeekBreakdown.cacheCnyMicros += account.parts.cache;
-    target.costWeekBreakdown.outputCnyMicros += account.parts.output;
-  }
-}
-function summarize2(rows) {
-  const out = emptySummary();
-  const unpriced = /* @__PURE__ */ new Set();
-  for (const row of rows) {
-    const account = accountUsage(row.model, row.usage);
-    if (!account) continue;
-    addAccount(out, account);
-    if (isUnpriced(account)) unpriced.add(resolvedModel(row.model));
-  }
-  out.unpricedModels = [...unpriced].sort();
-  return out;
-}
-async function actorStats(actorId, opts = {}) {
-  const now = opts.now ?? /* @__PURE__ */ new Date();
-  const from = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1e3).toISOString();
-  const to = now.toISOString();
-  const weeklyUsage = opts.usage?.listRuns ? summarizeWeeklyRuns(await listWeeklyRuns(opts.usage, actorId, from, to, opts.artifactIds)) : summarizeWeeklyUsage(!opts.artifactIds && opts.usage?.queryUsageStats ? await opts.usage.queryUsageStats({
-    actorIds: [actorId],
-    from,
-    to,
-    granularity: "hour"
-  }) : []);
-  return {
-    actorId,
-    usageAvailable: !!(opts.usage?.listRuns || !opts.artifactIds && opts.usage?.queryUsageStats),
-    ...opts.model ? { participatingTaskCount: participatingTaskCount(opts.model, actorId) } : {},
-    tokenWeek: weeklyUsage.tokenWeek,
-    tokenWeekBreakdown: weeklyUsage.tokenWeekBreakdown,
-    costWeekUsdMicros: weeklyUsage.costWeekUsdMicros,
-    costWeekCnyMicros: weeklyUsage.costWeekCnyMicros,
-    costWeekBreakdown: weeklyUsage.costWeekBreakdown,
-    usageWindow: { from, to },
-    unpricedModels: weeklyUsage.unpricedModels
-  };
-}
-async function listWeeklyRuns(trace, actorId, from, to, artifactIds) {
-  const out = [];
-  let cursor;
-  do {
-    const page = await trace.listRuns({ actorId, from, to, limit: 500, ...cursor ? { cursor } : {} });
-    out.push(...page.items.filter((run) => !artifactIds || run.artifactId != null && artifactIds.has(run.artifactId)));
-    cursor = page.nextCursor ?? void 0;
-  } while (cursor);
-  return out;
-}
-function summarizeWeeklyRuns(runs) {
-  return summarize2(runs.map((run) => ({ model: run.effectiveModel, usage: run.usage })));
-}
-function summarizeWeeklyUsage(rows) {
-  return summarize2(rows.map((row) => ({ model: row.effectiveModel, usage: row })));
-}
-function participatingTaskCount(model, actorId) {
-  const workorders = /* @__PURE__ */ new Set();
-  for (const artifact of model.artifacts.values()) {
-    if (artifact.owner === actorId) workorders.add(artifact.workspace);
-  }
-  return workorders.size;
-}
-var init_stats = __esm({
-  "../server/src/domains/actors/stats.ts"() {
-    "use strict";
-    init_accounting();
-  }
-});
-
 // ../server/src/domains/actors/list-usage.ts
 function aggregateUsageByActor(runs) {
   const out = /* @__PURE__ */ new Map();
@@ -222929,6 +223076,10 @@ function actorsDomain(opts) {
       const b2 = req.body;
       if (!b2?.key) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 key");
       const expiresAt2 = normalizeExpiresAt(b2.expiresAt);
+      const audienceMeta = parseAudienceMeta(b2);
+      if ((audienceMeta.audience !== void 0 || audienceMeta.enabledActorIds !== void 0) && b2.scope !== "global") {
+        throw new ApiError(400, "BAD_REQUEST", "audience / enabledActorIds \u53EA\u80FD\u5199\u5728 scope=global \u7684\u7EC4\u7EC7\u9ED8\u8BA4\u503C\u4E0A");
+      }
       if (b2.scope !== "global" && b2.scope !== "personal" && b2.scope !== "project") {
         throw new ApiError(
           400,
@@ -222973,6 +223124,7 @@ function actorsDomain(opts) {
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
         ...b2.overrides !== void 0 ? { overrides: b2.overrides } : {},
         ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {},
+        ...audienceMeta,
         // 创建者/更新者取**当前登录人**，不接受 body 传入——自报的「谁建的」等于没有这一格。
         by: req.auth.actor,
         expiresAt: expiresAt2
@@ -222985,6 +223137,18 @@ function actorsDomain(opts) {
       );
       return { status: 201, body: { ok: true } };
     });
+    router.patch("/api/variables/:key", async (req) => {
+      requireVariableManager(req);
+      const { service } = await resolveCtx(req.auth.companyId);
+      const key = req.params.key;
+      const b2 = req.body ?? {};
+      const patch = parseMetaPatch(b2, { allowAudience: true });
+      await requireSecretOwner(req, service, key, {});
+      const ok3 = await service.patchVariableMeta(key, {}, { ...patch, by: req.auth.actor });
+      if (!ok3) throw new ApiError(404, "VARIABLE_NOT_FOUND", `\u6CA1\u6709\u53EB ${key} \u7684\u7EC4\u7EC7\u9ED8\u8BA4\u503C`);
+      await auditVariableChange(req, "credential_write", key, "global");
+      return { status: 200, body: { ok: true } };
+    });
     router.delete("/api/variables/:key", async (req) => {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
@@ -223055,6 +223219,19 @@ function actorsDomain(opts) {
       await auditVariableChange(req, "credential_write", b2.key, `personal:${actorId}`);
       return { status: 201, body: { ok: true } };
     });
+    router.patch("/api/actors/:id/variables/:key", async (req) => {
+      requireVariableManager(req);
+      const { service } = await resolveCtx(req.auth.companyId);
+      const actorId = req.params.id;
+      const key = req.params.key;
+      const b2 = req.body ?? {};
+      const patch = parseMetaPatch(b2, { allowAudience: false });
+      await requireSecretOwner(req, service, key, { actorId });
+      const ok3 = await service.patchVariableMeta(key, { actorId }, { ...patch, by: req.auth.actor });
+      if (!ok3) throw new ApiError(404, "VARIABLE_NOT_FOUND", `\u8FD9\u4F4D Agent \u6CA1\u6709\u5355\u72EC\u8BBE\u7F6E ${key}`);
+      await auditVariableChange(req, "credential_write", key, `personal:${actorId}`);
+      return { status: 200, body: { ok: true } };
+    });
     router.delete("/api/actors/:id/variables/:key", async (req) => {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
@@ -223657,6 +223834,43 @@ function actorsDomain(opts) {
     });
   };
 }
+function parseAudienceMeta(b2) {
+  const out = {};
+  if (b2.audience !== void 0) {
+    if (b2.audience !== "all" && b2.audience !== "selected") {
+      throw new ApiError(400, "BAD_REQUEST", "audience \u53EA\u80FD\u662F all \u6216 selected");
+    }
+    out.audience = b2.audience;
+  }
+  if (b2.enabledActorIds !== void 0) {
+    if (!Array.isArray(b2.enabledActorIds) || b2.enabledActorIds.some((x2) => typeof x2 !== "string" || !x2)) {
+      throw new ApiError(400, "BAD_REQUEST", "enabledActorIds \u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32\u6570\u7EC4");
+    }
+    out.enabledActorIds = b2.enabledActorIds;
+  }
+  return out;
+}
+function parseMetaPatch(b2, opts) {
+  const out = {};
+  const aud = parseAudienceMeta(b2);
+  if ((aud.audience !== void 0 || aud.enabledActorIds !== void 0) && !opts.allowAudience) {
+    throw new ApiError(400, "BAD_REQUEST", "\u4E2A\u4EBA\u6863\u6CA1\u6709\u300C\u53D1\u7ED9\u8C01\u300D\u2014\u2014audience / enabledActorIds \u8BF7\u5199\u5728\u7EC4\u7EC7\u9ED8\u8BA4\u503C\u4E0A");
+  }
+  Object.assign(out, aud);
+  if (b2.deliveryMode !== void 0) {
+    if (b2.deliveryMode !== "env" && b2.deliveryMode !== "ref" && b2.deliveryMode !== "broker") {
+      throw new ApiError(400, "BAD_REQUEST", "deliveryMode \u53EA\u80FD\u662F env\u3001ref \u6216 broker");
+    }
+    out.deliveryMode = b2.deliveryMode;
+  }
+  if (b2.expiresAt !== void 0) {
+    if (b2.expiresAt === null || b2.expiresAt === "") out.expiresAt = null;
+    else if (typeof b2.expiresAt === "string") out.expiresAt = normalizeExpiresAt(b2.expiresAt) ?? null;
+    else throw new ApiError(400, "BAD_REQUEST", "expiresAt \u5FC5\u987B\u662F ISO \u65F6\u95F4\u5B57\u7B26\u4E32\u6216 null");
+  }
+  if (Object.keys(out).length === 0) throw new ApiError(400, "BAD_REQUEST", "\u81F3\u5C11\u8981\u6539\u4E00\u6837\uFF1Aaudience / enabledActorIds / deliveryMode / expiresAt");
+  return out;
+}
 var CREDENTIAL_REVEAL_SOURCES, RevealRateLimiter;
 var init_routes3 = __esm({
   "../server/src/domains/actors/routes.ts"() {
@@ -224235,6 +224449,20 @@ ${errs.join("\n")}`);
       });
       return { status: 200, body: toApiProjectArtifacts(list2, req.query) };
     });
+    router.get("/api/actors/:id/participation-stats", async (req) => {
+      const service = await svc(req);
+      let stats;
+      try {
+        stats = await service.getActorParticipationStats(req.params.id);
+      } catch (error2) {
+        if (error2 instanceof Error && error2.message === "participation source unavailable") {
+          throw new ApiError(503, "UNAVAILABLE", "\u6210\u5458\u7EDF\u8BA1\u6570\u636E\u6E90\u672A\u63A5\u5165");
+        }
+        throw error2;
+      }
+      if (!stats) throw new ApiError(404, "NOT_FOUND", "\u8FD9\u4E2A\u7EC4\u7EC7\u91CC\u6CA1\u6709\u8FD9\u4F4D\u6210\u5458");
+      return { status: 200, body: stats };
+    });
     router.get("/api/actors/:id/files-view", async (req) => {
       const items = await (await svc(req)).listActorFiles(req.params.id);
       return {
@@ -229122,9 +229350,50 @@ function reasonFromWorkdirCode(code2) {
 function joinRel2(dir, name) {
   return dir ? `${dir}/${name}` : name;
 }
+function workdirFileItem(rel, name, size, mtime) {
+  return {
+    id: `workdir:${rel}`,
+    name,
+    kind: "file",
+    // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
+    // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
+    content_type: null,
+    size,
+    updated_at: mtime,
+    source: "workdir",
+    blob_ref: null,
+    path: rel,
+    message_id: null,
+    // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
+    // 这里是**按能力不渲染**的判据，不是置灰假钮。
+    editable: false
+  };
+}
 async function collectWorkdirFiles(bridge, loc, now = Date.now) {
-  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
   const items = [];
+  if (typeof bridge.walk === "function") {
+    const walked = await bridge.walk(
+      loc.nodeId,
+      { workdirKey: loc.workdirKey, runtimeKind: loc.runtimeKind, rtId: loc.rtId, path: "" },
+      WORKDIR_TREE_MAX_ENTRIES
+    );
+    if (walked.ok) {
+      let truncated2 = walked.truncated === true;
+      for (const entry of walked.entries) {
+        if (entry.type !== "file") continue;
+        if (items.length >= WORKDIR_WALK_MAX_ENTRIES) {
+          truncated2 = true;
+          break;
+        }
+        const slash = entry.path.lastIndexOf("/");
+        items.push(workdirFileItem(entry.path, entry.path.slice(slash + 1), entry.size, entry.mtime));
+      }
+      return { ok: true, items, truncated: truncated2 };
+    }
+    if (walked.code === "NOT_FOUND") return { ok: true, items: [], truncated: false };
+    if (walked.code !== "UNSUPPORTED") return { ok: false, reason: reasonFromWorkdirCode(walked.code) };
+  }
+  const deadline = now() + WORKDIR_WALK_BUDGET_MS;
   let listCalls = 0;
   let truncated = false;
   const listDir = (path41) => {
@@ -229159,24 +229428,7 @@ async function collectWorkdirFiles(bridge, loc, now = Date.now) {
           truncated = true;
           continue;
         }
-        const rel = joinRel2(dir, entry.name);
-        items.push({
-          id: `workdir:${rel}`,
-          name: entry.name,
-          kind: "file",
-          // 节点侧列目录只报 name/type/size/mtime，没有 MIME——诚实留 null，
-          // 不拿后缀猜（红线：取不到就是取不到，别拿别的字段顶）。
-          content_type: null,
-          size: entry.size,
-          updated_at: entry.mtime,
-          source: "workdir",
-          blob_ref: null,
-          path: rel,
-          message_id: null,
-          // 工作区文件本期不开写回（brief §4①：要动 node↔server 协议帧，超预算）。
-          // 这里是**按能力不渲染**的判据，不是置灰假钮。
-          editable: false
-        });
+        items.push(workdirFileItem(joinRel2(dir, entry.name), entry.name, entry.size, entry.mtime));
       }
     }
     if (depth === WORKDIR_WALK_MAX_DEPTH || nextDirs.length === 0) {
@@ -229298,7 +229550,7 @@ async function findMaterializedAttachmentCopies(messageItems, workdirItems, read
   }
   return copies;
 }
-var import_node_crypto51, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS;
+var import_node_crypto51, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
 var init_files_view = __esm({
   "../server/src/domains/chat-sessions/files-view.ts"() {
     "use strict";
@@ -229309,6 +229561,7 @@ var init_files_view = __esm({
     WORKDIR_WALK_MAX_ENTRIES = 200;
     WORKDIR_WALK_MAX_LIST_CALLS = 20;
     WORKDIR_WALK_BUDGET_MS = 1e4;
+    WORKDIR_TREE_MAX_ENTRIES = 2e3;
   }
 });
 
@@ -231543,6 +231796,84 @@ var init_connect_script = __esm({
   }
 });
 
+// ../server/src/domains/nodes/runtime-activity.ts
+function isRuntimeRunReader(store) {
+  const s2 = store;
+  return !!s2 && typeof s2.runtimeRunActivity === "function" && typeof s2.listRuntimeRuns === "function";
+}
+function parseRuntimeUsageWindow(query, granularity, nowMs) {
+  const toRaw = query.get("to");
+  const fromRaw = query.get("from");
+  const toMs = toRaw ? Date.parse(toRaw) : nowMs;
+  if (!Number.isFinite(toMs)) return "to \u4E0D\u662F\u5408\u6CD5\u7684 ISO \u65F6\u95F4";
+  const fromMs = fromRaw ? Date.parse(fromRaw) : toMs - DEFAULT_WINDOW_MS[granularity];
+  if (!Number.isFinite(fromMs)) return "from \u4E0D\u662F\u5408\u6CD5\u7684 ISO \u65F6\u95F4";
+  if (fromMs > toMs) return "from \u4E0D\u80FD\u665A\u4E8E to";
+  if (toMs - fromMs > MAX_WINDOW_MS) return "\u65F6\u95F4\u7A97\u6700\u957F 92 \u5929";
+  return { from: new Date(fromMs).toISOString(), to: new Date(toMs).toISOString() };
+}
+function runtimeUsageBucket(startedAt, granularity) {
+  const ms = Date.parse(startedAt);
+  if (!Number.isFinite(ms)) return null;
+  const d = new Date(ms);
+  if (granularity === "day") return d.toISOString().slice(0, 10);
+  return new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate(), d.getUTCHours())).toISOString();
+}
+function bucketRuntimeRuns(runtimeInstanceId, runs, granularity) {
+  const rows = /* @__PURE__ */ new Map();
+  for (const run of runs) {
+    const bucket = runtimeUsageBucket(run.startedAt, granularity);
+    if (!bucket) continue;
+    const model = resolvedModel(run.effectiveModel);
+    const key = `${bucket}\0${run.actorId}\0${model ?? ""}`;
+    let row = rows.get(key);
+    if (!row) {
+      row = {
+        actorId: run.actorId,
+        runtimeInstanceId,
+        runtimeKind: run.runtimeKind,
+        effectiveModel: model,
+        bucket,
+        runCount: 0,
+        inputTokens: 0,
+        outputTokens: 0,
+        totalTokens: 0,
+        cacheReadTokens: 0,
+        cacheCreationTokens: 0,
+        costUsdMicros: 0
+      };
+      rows.set(key, row);
+    }
+    row.runCount += 1;
+    const usage = run.usage;
+    if (!usage) continue;
+    const input = nonNegative2(usage.inputTokens);
+    const output = nonNegative2(usage.outputTokens);
+    row.inputTokens += input;
+    row.outputTokens += output;
+    row.totalTokens += input + output;
+    row.cacheReadTokens += nonNegative2(usage.cacheReadTokens);
+    row.cacheCreationTokens += nonNegative2(usage.cacheCreationTokens);
+    const account = accountUsage(model, usage);
+    row.costUsdMicros += account ? account.displayUsdMicros : nonNegative2(usage.costUsdMicros);
+  }
+  return [...rows.values()].sort((a, b2) => {
+    if (a.bucket !== b2.bucket) return a.bucket < b2.bucket ? 1 : -1;
+    if (a.actorId !== b2.actorId) return a.actorId < b2.actorId ? -1 : 1;
+    return (a.effectiveModel ?? "").localeCompare(b2.effectiveModel ?? "");
+  });
+}
+var DEFAULT_WINDOW_MS, MAX_WINDOW_MS, nonNegative2;
+var init_runtime_activity = __esm({
+  "../server/src/domains/nodes/runtime-activity.ts"() {
+    "use strict";
+    init_accounting();
+    DEFAULT_WINDOW_MS = { hour: 24 * 36e5, day: 30 * 864e5 };
+    MAX_WINDOW_MS = 92 * 864e5;
+    nonNegative2 = (v2) => Math.max(v2 ?? 0, 0);
+  }
+});
+
 // ../server/src/node-health.ts
 function deriveNodeHealth(input) {
   const staleMs = input.staleMs ?? 9e4;
@@ -231752,6 +232083,19 @@ function nodesDomain(deps) {
     hubWired = true;
     const { nodeStore } = deps;
     const now = () => (/* @__PURE__ */ new Date()).toISOString();
+    const HEARTBEAT_PERSIST_MS = 6e4;
+    const heartbeatPersistedAt = /* @__PURE__ */ new Map();
+    hub.addMessageListener((daemonId) => {
+      if (!nodeStore.touchNodeSeen) return;
+      const ms = Date.now();
+      const prev = heartbeatPersistedAt.get(daemonId) ?? 0;
+      if (ms - prev < HEARTBEAT_PERSIST_MS) return;
+      heartbeatPersistedAt.set(daemonId, ms);
+      void nodeStore.touchNodeSeen(daemonId, new Date(ms).toISOString()).catch((err) => {
+        heartbeatPersistedAt.delete(daemonId);
+        console.warn(`[nodes] \u5FC3\u8DF3\u843D\u5E93\u5931\u8D25(node=${daemonId})\uFF1A${err instanceof Error ? err.message : String(err)}`);
+      });
+    });
     hub.addMessageListener(async (daemonId, msg) => {
       if (msg.type !== "hello") return;
       const d = hub.connectedDaemons().find((c) => c.daemonId === daemonId);
@@ -231820,6 +232164,23 @@ function nodesDomain(deps) {
     };
     tryWire();
     if (!hubWired) wirePoll = setInterval(tryWire, 100);
+    async function forbidUnlessOrgManager(req, verb) {
+      if (!deps.resolveMemberRole) return null;
+      const role = await deps.resolveMemberRole(req.auth.companyId, req.auth.actor);
+      if (role === "owner" || role === "admin") return null;
+      return {
+        status: 403,
+        body: { error: "ORG_MANAGER_REQUIRED", message: `${verb}\u4EC5\u7EC4\u7EC7\u7BA1\u7406\u8005\u53EF\u64CD\u4F5C\uFF0C\u8BF7\u8054\u7CFB\u7EC4\u7EC7\u7BA1\u7406\u5458` }
+      };
+    }
+    async function runtimeInScope(req) {
+      const runtimeId = req.params["runtimeId"];
+      if (!runtimeId) return { denied: { status: 400, body: { error: "missing runtimeId" } } };
+      const scope = req.auth.companyId !== void 0 ? { companyId: req.auth.companyId } : void 0;
+      const rt = (await deps.nodeStore.listRuntimes(void 0, scope)).find((r) => r.id === runtimeId);
+      if (!rt) return { denied: { status: 404, body: { error: "runtime not found" } } };
+      return { runtimeId };
+    }
     async function syncConnectedDaemon(daemonId, hub) {
       const d = hub.connectedDaemons().find((c) => c.daemonId === daemonId);
       if (!d) return;
@@ -231848,6 +232209,13 @@ function nodesDomain(deps) {
         const outOfSync = nodes.filter((n) => onlineIds.has(n.id) && (n.status !== "online" || (runtimesByNode.get(n.id) ?? []).some((r) => r.status !== "online")));
         await Promise.all(outOfSync.map((n) => syncConnectedDaemon(n.id, hub)));
       }
+      function heartbeatMsOf(n, offline) {
+        const live = hub?.lastSeenAt(n.id);
+        if (live !== void 0) return live;
+        if (!offline) return void 0;
+        const ms = Date.parse(n.lastSeenAt);
+        return Number.isNaN(ms) ? void 0 : ms;
+      }
       const items = await Promise.all(nodes.map(async (n) => {
         const rts = runtimesByNode.get(n.id) ?? [];
         const daemonVersion = daemonVersionById.get(n.id);
@@ -231877,7 +232245,16 @@ function nodesDomain(deps) {
           ...deps.nodeHealth ? {
             health: deriveNodeHealth({
               online: onlineIds.has(n.id),
-              ...hub?.lastSeenAt(n.id) !== void 0 ? { lastHeartbeatMs: hub.lastSeenAt(n.id) } : {},
+              /*
+               * 心跳时钟：在线节点读 hub 内存（每帧刷新，最准）；**离线节点回落到落库的
+               * `lastSeenAt`**——那是这台机器最后一次跟服务端说上话的时刻（心跳每分钟落一次库，
+               * 见上面的 `HEARTBEAT_PERSIST_MS`；断开那一刻 `setNodeOnline(false)` 也会写一次）。
+               * 运行时页「工作情况」列的离线行显示的「断连时间 X」读的就是它。
+               *
+               * 不影响健康判定：`healthy = online && 心跳新鲜 && 连败未超阈`，离线节点 `online=false`
+               * 已经把结论钉死成不健康，这里补进来的只是**解释**用的时刻（设计稿 4.5 ⑤ 的口径）。
+               */
+              ...heartbeatMsOf(n, nodeOffline) !== void 0 ? { lastHeartbeatMs: heartbeatMsOf(n, nodeOffline) } : {},
               activeRunCount,
               ...deps.nodeHealth.snapshot(n.id) ? { snapshot: deps.nodeHealth.snapshot(n.id) } : {},
               now: healthNow
@@ -232047,6 +232424,8 @@ function nodesDomain(deps) {
     router.delete("/api/runtimes/:runtimeId", async (req) => {
       const runtimeId = req.params["runtimeId"];
       if (!runtimeId) return { status: 400, body: { error: "missing runtimeId" } };
+      const forbidden = await forbidUnlessOrgManager(req, "\u5220\u9664\u8FD0\u884C\u65F6");
+      if (forbidden) return forbidden;
       const runtime = (await deps.nodeStore.listRuntimes()).find((r) => r.id === runtimeId);
       const { nodeDeleted } = await deps.nodeStore.deleteRuntime(runtimeId);
       if (nodeDeleted && runtime) revokeNodeAccess(runtime.nodeId);
@@ -232105,6 +232484,23 @@ function nodesDomain(deps) {
       await deps.registry.upsertRuntimeModelOverride(override);
       return { status: 200, body: { override } };
     });
+    router.get("/api/runtimes/:runtimeId/activity", async (req) => {
+      const found = await runtimeInScope(req);
+      if (found.denied) return found.denied;
+      const reader = await deps.runtimeRuns?.(req.auth.companyId);
+      const activity = reader ? await reader.runtimeRunActivity(found.runtimeId) : null;
+      return { status: 200, body: { activity } };
+    });
+    router.get("/api/runtimes/:runtimeId/usage", async (req) => {
+      const found = await runtimeInScope(req);
+      if (found.denied) return found.denied;
+      const granularity = req.query.get("granularity") === "day" ? "day" : "hour";
+      const window2 = parseRuntimeUsageWindow(req.query, granularity, Date.now());
+      if (typeof window2 === "string") return { status: 400, body: { error: window2 } };
+      const reader = await deps.runtimeRuns?.(req.auth.companyId);
+      const runs = reader ? await reader.listRuntimeRuns(found.runtimeId, window2) : null;
+      return { status: 200, body: { items: bucketRuntimeRuns(found.runtimeId, runs ?? [], granularity) } };
+    });
     router.get("/api/runtimes/:runtimeId/config", async (req) => {
       const runtimeId = req.params["runtimeId"];
       if (!runtimeId) return { status: 400, body: { error: "missing runtimeId" } };
@@ -232114,6 +232510,8 @@ function nodesDomain(deps) {
     router.put("/api/runtimes/:runtimeId/config", async (req) => {
       const runtimeId = req.params["runtimeId"];
       if (!runtimeId) return { status: 400, body: { error: "missing runtimeId" } };
+      const forbidden = await forbidUnlessOrgManager(req, "\u4FEE\u6539\u56E2\u961F\u9ED8\u8BA4\u6A21\u578B");
+      if (forbidden) return forbidden;
       const body2 = req.body ?? {};
       const cfg = {
         runtimeId,
@@ -232151,6 +232549,7 @@ var init_routes7 = __esm({
     init_src();
     init_src6();
     init_connect_script();
+    init_runtime_activity();
     init_node_health();
   }
 });
@@ -232325,6 +232724,10 @@ var init_node_store = __esm({
           n.lastSeenAt = (/* @__PURE__ */ new Date()).toISOString();
         }
       }
+      async touchNodeSeen(id, atIso) {
+        const n = this.nodes.get(id);
+        if (n && n.status !== "deleted") n.lastSeenAt = atIso;
+      }
       async setNodeRuntimesOnline(nodeId, online) {
         const now = (/* @__PURE__ */ new Date()).toISOString();
         for (const rt of this.runtimes.values()) {
@@ -232444,6 +232847,10 @@ var init_node_store = __esm({
         await super.setNodeOnline(id, online);
         this.flush();
       }
+      async touchNodeSeen(id, atIso) {
+        await super.touchNodeSeen(id, atIso);
+        this.flush();
+      }
       async setNodeRuntimesOnline(nodeId, online) {
         await super.setNodeRuntimesOnline(nodeId, online);
         this.flush();
@@ -235958,7 +236365,9 @@ function createChatSessionsDomain(opts) {
              的去重装置，直接发给前端等于给了一条 `messages[]` 里不存在的 id ——追加转达卡全部掉进
              floating 堆在流末尾，同一条消息上的两条委派还会因后缀不同被拆成两张单专家卡。 */
           touches: touches.map((t) => ({ messageId: touchAnchorMessageId(t.messageId), kind: t.kind, at: t.at })),
-          artifacts: collectDelegationArtifacts(record8.roundSummaries),
+          /* 与协调者读口**同一个函数**——两侧 artifacts 有「逐字同源」的既有断言。它顺带给每份产物
+             填上 `childMessageId`（子会话面板把产出卡挂到产出它的那一轮下面要用）。 */
+          artifacts: delegationArtifactsView(record8),
           createdAt: record8.createdAt,
           ...record8.settledAt ? { settledAt: record8.settledAt } : {}
         });
@@ -236246,6 +236655,7 @@ var init_chat_sessions = __esm({
     init_escalation_opening();
     init_workorders();
     init_chat_parts();
+    init_service3();
     init_injected_context();
     init_deletion();
     init_chat_turn_gate();
@@ -240644,6 +241054,29 @@ var init_daemon_adapter = __esm({
           maxBytes
         }));
       }
+      /**
+       * 一次列全 `loc.path` 下的整棵子树（ADR 0554）。节点没自报能力位 → 不发帧、直接回 `UNSUPPORTED`，
+       * 调用方退回逐层 `list`。判据取 hello 里的能力位，不靠「发了看回不回」：老节点收到不认识的帧
+       * 只会静默丢掉，那样要白等满 30 秒超时。
+       */
+      walk(nodeId, loc, maxEntries) {
+        if (!this.nodeSupportsWalk(nodeId)) return Promise.resolve({ ok: false, code: "UNSUPPORTED" });
+        return this.request(nodeId, (requestId) => ({
+          type: "workdir_walk",
+          requestId,
+          workdirKey: loc.workdirKey,
+          runtimeKind: loc.runtimeKind,
+          rtId: loc.rtId ?? null,
+          path: loc.path,
+          maxEntries
+        }));
+      }
+      nodeSupportsWalk(nodeId) {
+        const connectedDaemons = this.hub.connectedDaemons;
+        if (typeof connectedDaemons !== "function") return false;
+        const daemon = connectedDaemons.call(this.hub).find((candidate) => candidate.daemonId === nodeId);
+        return daemon?.meta.supportsWorkdirWalk === true;
+      }
       request(nodeId, buildFrame) {
         const requestId = (0, import_node_crypto65.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
@@ -240658,7 +241091,7 @@ var init_daemon_adapter = __esm({
         });
       }
       onDaemonMessage(msg) {
-        if (msg.type !== "workdir_list_result" && msg.type !== "workdir_read_result") return;
+        if (msg.type !== "workdir_list_result" && msg.type !== "workdir_read_result" && msg.type !== "workdir_walk_result") return;
         const entry = this.pending.get(msg.requestId);
         if (!entry) return;
         this.pending.delete(msg.requestId);
@@ -242145,7 +242578,10 @@ function rowToVariable(row) {
     // 创建者 / 创建时间 / 更新者：2026-09-10 之前的行没有 → 不带这一格，展示侧出「—」。
     ...row.created_by ? { createdBy: row.created_by } : {},
     ...row.created_at ? { createdAt: row.created_at } : {},
-    ...row.updated_by ? { updatedBy: row.updated_by } : {}
+    ...row.updated_by ? { updatedBy: row.updated_by } : {},
+    // 决策 0556：NULL（存量行）不带出去——读侧按「全员生效」理解，与决策之前一致。
+    ...row.audience === "all" || row.audience === "selected" ? { audience: row.audience } : {},
+    ...Array.isArray(row.enabled_actor_ids) ? { enabledActorIds: row.enabled_actor_ids } : {}
   };
 }
 var ident4, PostgresRegistryStore, rowToActor, rowToConfig, rowToAgentPrefs;
@@ -242320,6 +242756,8 @@ var init_postgres_registry = __esm({
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS created_by text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS created_at text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS updated_by text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS audience text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS enabled_actor_ids text[]`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_key_actor_uq"`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_scope_uq"`);
         await pool.query(`
@@ -242825,14 +243263,18 @@ var init_postgres_registry = __esm({
           /* created_by / created_at 走 COALESCE(**旧值**, 新值)：**第一次落行才写**，之后每次 upsert
              都保留原值——否则「谁建的」会被最后一次改的人顶掉，这一格就没有意义了。
              updated_by 反过来：每次都覆盖。三者与 name 的 COALESCE 方向相反，别照抄。 */
-          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at, name, created_by, created_at, updated_by)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14)
+          /* audience / enabled_actor_ids（决策 0556）走 COALESCE(**新值**, 旧值)：不传 = 不动——
+             改默认值时手上不带「发给谁」，普通赋值会把「仅指定 Agent」悄悄打回全员生效。 */
+          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at, name, created_by, created_at, updated_by, audience, enabled_actor_ids)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16)
        ON CONFLICT (key, COALESCE(actor_id, ''), COALESCE(project_id, '')) DO UPDATE
          SET scope=$2, actor_id=$3, project_id=$4, connector_id=$5, overrides=$6, delivery_mode=$7, value_encrypted=$8, updated_at=$9, expires_at=$10,
              name=COALESCE($11, ${this.s}.variables.name),
              created_by=COALESCE(${this.s}.variables.created_by, $12),
              created_at=COALESCE(${this.s}.variables.created_at, $13),
-             updated_by=$14`,
+             updated_by=$14,
+             audience=COALESCE($15, ${this.s}.variables.audience),
+             enabled_actor_ids=COALESCE($16, ${this.s}.variables.enabled_actor_ids)`,
           [
             v2.key,
             v2.scope,
@@ -242847,7 +243289,9 @@ var init_postgres_registry = __esm({
             v2.name ?? null,
             v2.createdBy ?? null,
             v2.createdAt ?? null,
-            v2.updatedBy ?? null
+            v2.updatedBy ?? null,
+            v2.audience ?? null,
+            v2.enabledActorIds ?? null
           ]
         );
       }
@@ -242866,6 +243310,34 @@ var init_postgres_registry = __esm({
           [key, aid, valueEncrypted, updatedAt]
         );
       }
+      async patchVariableMeta(key, actorId, patch) {
+        const r = await this.pool.query(
+          `UPDATE ${this.s}.variables SET
+         audience          = CASE WHEN $3::boolean THEN $4::text   ELSE audience END,
+         enabled_actor_ids = CASE WHEN $5::boolean THEN $6::text[] ELSE enabled_actor_ids END,
+         delivery_mode     = CASE WHEN $7::boolean THEN $8::text   ELSE delivery_mode END,
+         expires_at        = CASE WHEN $9::boolean THEN $10::text  ELSE expires_at END,
+         updated_by        = CASE WHEN $11::boolean THEN $12::text ELSE updated_by END,
+         updated_at        = $13
+       WHERE key=$1 AND COALESCE(actor_id,'')=COALESCE($2::text,'') AND COALESCE(project_id,'')=''`,
+          [
+            key,
+            actorId ?? null,
+            patch.audience !== void 0,
+            patch.audience ?? null,
+            patch.enabledActorIds !== void 0,
+            patch.enabledActorIds ?? null,
+            patch.deliveryMode !== void 0,
+            patch.deliveryMode ?? null,
+            patch.expiresAt !== void 0,
+            patch.expiresAt ?? null,
+            patch.updatedBy !== void 0,
+            patch.updatedBy ?? null,
+            patch.updatedAt
+          ]
+        );
+        return (r.rowCount ?? 0) > 0;
+      }
       async getVariableCiphertext(key, actorId) {
         const aid = actorId ?? null;
         const r = await this.pool.query(
@@ -242878,7 +243350,14 @@ var init_postgres_registry = __esm({
         let r;
         if (actorId !== void 0) {
           r = await this.pool.query(
-            `SELECT * FROM ${this.s}.variables WHERE scope='global' OR actor_id=$1 ORDER BY key`,
+            /* 决策 0556：`audience='selected'` 的全局行**只给 enabled_actor_ids 里那几位**。
+               注入（resolveActorEnv / resolveActorProvisionEntries）、agent 侧 reveal、组织页 Agent 的密钥列表
+               全都读这一条查询——语义只改在这一处，别在上层各自再滤一遍（滤漏一处就是泄漏）。
+               audience 为 NULL（存量行）或 'all' 时行为与决策之前逐字一致。 */
+            `SELECT * FROM ${this.s}.variables
+          WHERE actor_id=$1
+             OR (scope='global' AND (audience IS DISTINCT FROM 'selected' OR $1 = ANY(COALESCE(enabled_actor_ids, '{}'::text[]))))
+          ORDER BY key`,
             [actorId]
           );
         } else {
@@ -245355,6 +245834,7 @@ var init_postgres_trace = __esm({
         AND left(job_key, char_length('produce::' || node_id || '::')) = 'produce::' || node_id || '::'`);
         await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_effective_model_idx ON "${s2}".agent_runs (effective_model)`);
         await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_actor_started_idx ON "${s2}".agent_runs (actor_id, started_at DESC)`);
+        await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_runtime_started_idx ON "${s2}".agent_runs (runtime_instance_id, started_at DESC)`);
         await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_workorder_idx ON "${s2}".agent_runs (work_order_id, node_id, attempt_no DESC)`);
         await pool.query(`CREATE UNIQUE INDEX IF NOT EXISTS agent_runs_node_attempt_uq ON "${s2}".agent_runs (node_id, attempt_no) WHERE node_id IS NOT NULL AND attempt_no IS NOT NULL`);
         await pool.query(`
@@ -246041,6 +246521,41 @@ var init_postgres_trace = __esm({
           usage: row.usage
         }));
       }
+      /* ---------- 运行时详情页：按实例直接读 run 行 ---------- */
+      /**
+       * 这个运行时实例上一共跑过几轮、最近一轮什么时候开跑。
+       *
+       * 读 `agent_runs` 而不是 `agent_usage_*` 聚合表：chat、工单节点（produce / integrate / review）、
+       * 协调者每一轮**开跑时**就先落一行 run，所以开跑即计入；聚合表只在 run 结束且带 usage 时才 +1，
+       * 失败 / 取消没 usage 的轮次永远不算。状态不过滤——每一轮都是一次运行。
+       */
+      async runtimeRunActivity(runtimeInstanceId) {
+        const r = await this.pool.query(
+          `SELECT count(*)::int AS run_count, max(started_at) AS last_started_at
+       FROM ${this.s}.agent_runs WHERE runtime_instance_id = $1`,
+          [runtimeInstanceId]
+        );
+        const row = r.rows[0] ?? {};
+        return { runCount: Number(row.run_count ?? 0), lastRunStartedAt: row.last_started_at ?? null };
+      }
+      /** 该实例在时间窗内开跑的全部 run（含还没有 usage 的在途 / 失败轮次），按开跑时刻正序。 */
+      async listRuntimeRuns(runtimeInstanceId, range) {
+        const r = await this.pool.query(
+          `SELECT actor_id, runtime_kind, effective_model, started_at, usage
+       FROM ${this.s}.agent_runs
+       WHERE runtime_instance_id = $1 AND started_at >= $2 AND started_at <= $3
+       ORDER BY started_at`,
+          [runtimeInstanceId, range.from, range.to]
+        );
+        return r.rows.map((row) => ({
+          actorId: row.actor_id,
+          runtimeKind: row.runtime_kind ?? "shell",
+          effectiveModel: row.effective_model ?? null,
+          startedAt: row.started_at,
+          // 历史行里有 JSONB 字面量 null，与 SQL NULL 一样当「还没有 usage」。
+          usage: row.usage && typeof row.usage === "object" ? row.usage : null
+        }));
+      }
       /* ---------- execution continuity ---------- */
       async getAttempt(attemptId) {
         return this.getRun(attemptId);
@@ -250669,6 +251184,13 @@ var init_postgres_nodes = __esm({
       async setNodeOnline(id, online) {
         await this.pool.query(`UPDATE ${this.s}.nodes SET status=$2,last_seen_at=$3 WHERE id=$1 AND status <> 'deleted'`, [id, online ? "online" : "offline", (/* @__PURE__ */ new Date()).toISOString()]);
       }
+      /** 只推进 last_seen_at，不动 status（心跳落库；节流由调用方做，见 nodes/routes.ts）。 */
+      async touchNodeSeen(id, atIso) {
+        await this.pool.query(
+          `UPDATE ${this.s}.nodes SET last_seen_at=$2 WHERE id=$1 AND status <> 'deleted' AND (last_seen_at IS NULL OR last_seen_at < $2)`,
+          [id, atIso]
+        );
+      }
       async setNodeRuntimesOnline(nodeId, online) {
         await this.pool.query(`UPDATE ${this.s}.node_runtimes SET status=$2,last_seen_at=$3 WHERE node_id=$1`, [nodeId, online ? "online" : "offline", (/* @__PURE__ */ new Date()).toISOString()]);
       }
@@ -254049,6 +254571,9 @@ var init_cutover_aware_registry = __esm({
       async patchVariableValue(...args) {
         return (await this.orgStoreForWrite()).patchVariableValue(...args);
       }
+      async patchVariableMeta(...args) {
+        return (await this.orgStoreForWrite()).patchVariableMeta(...args);
+      }
       async getVariableCiphertext(...args) {
         return (await this.orgStore()).getVariableCiphertext(...args);
       }
@@ -254430,6 +254955,15 @@ var init_cutover_aware_trace = __esm({
       async listUsageRuns(filter) {
         return (await this.pick()).listUsageRuns(filter);
       }
+      // ── 运行时详情页的按实例读（不在 TraceStore 契约上：落点 store 没实现就当没有数据源）──────────
+      async runtimeRunActivity(runtimeInstanceId) {
+        const s2 = await this.pick();
+        return typeof s2.runtimeRunActivity === "function" ? s2.runtimeRunActivity(runtimeInstanceId) : null;
+      }
+      async listRuntimeRuns(runtimeInstanceId, range) {
+        const s2 = await this.pick();
+        return typeof s2.listRuntimeRuns === "function" ? s2.listRuntimeRuns(runtimeInstanceId, range) : null;
+      }
       // ── 事件 / 工具调用 / 链接 ────────────────────────────────────────────────
       async appendEvent(runId, event) {
         return (await this.pickWritable()).appendEvent(runId, event);
@@ -258519,7 +259053,7 @@ var init_run_settlement_wiring = __esm({
 });
 
 // ../server/src/deadline-clock.ts
-async function deadlineClockTick(deps, dedupe) {
+async function deadlineClockTick(deps, dedupe2) {
   const limit = deps.batchLimit ?? DEADLINE_CLOCK_BATCH_LIMIT;
   const lookahead = deps.lookaheadMs ?? DEADLINE_CLOCK_LOOKAHEAD_MS;
   const policy = deps.policy();
@@ -258548,14 +259082,14 @@ async function deadlineClockTick(deps, dedupe) {
     if (overdue > result.oldestDueDelayMs) result.oldestDueDelayMs = overdue;
     const phase = overdue >= 0 ? "due" : "early";
     const bucket = `${c.workId}@${deadline}@${phase}`;
-    if (dedupe.has(c.workorderId, bucket)) {
+    if (dedupe2.has(c.workorderId, bucket)) {
       result.deduped++;
       continue;
     }
     const buckets = toPing.get(c.workorderId) ?? [];
     buckets.push(bucket);
     toPing.set(c.workorderId, buckets);
-    dedupe.mark(c.workorderId, bucket);
+    dedupe2.mark(c.workorderId, bucket);
   }
   if (page.nextCursor) result.backlog = toPing.size + result.deduped;
   for (const [workorderId, buckets] of toPing) {
@@ -258564,7 +259098,7 @@ async function deadlineClockTick(deps, dedupe) {
       result.pinged++;
     } catch (err) {
       result.failed++;
-      for (const b2 of buckets) dedupe.unmark(workorderId, b2);
+      for (const b2 of buckets) dedupe2.unmark(workorderId, b2);
       deps.log?.(`[deadline-clock] ping ${workorderId} \u5931\u8D25: ${String(err)}`);
     }
   }
@@ -258728,6 +259262,7 @@ var init_src11 = __esm({
     init_auth();
     init_sender();
     init_routes7();
+    init_runtime_activity();
     init_runtime_drift();
     init_runtime_tenancy();
     init_types4();
@@ -261543,6 +262078,11 @@ async function startServe(opts) {
   }) : dispatchLedger;
   const companyRegistryFor = async (companyId) => pgPool ? (await openCompanyPlane(companyId)).overlay : scopedRegistryFor(companyId);
   const defaultRegistry = await companyRegistryFor(defaultCompanyId);
+  const companyLiveTypeDefs = async (companyId) => {
+    if (!pgPool || !cutoverStore) return null;
+    if (!cutoverStore.readsCompanySchema(await cutoverStore.get(companyId, "types"))) return null;
+    return buildLiveSchema(await (await openCompanyPlane(companyId)).types.list());
+  };
   const engineRouter = new CompanyEngineRouter({
     // ★ 字节柜按公司取：`gc` 用的就是 `engine.blobs`，共享柜 + 单公司可达集 = 删光别家。
     defaultEngine: { kernel: defaultCompanyKernel, oplog, blobs: await blobStoreFor(defaultCompanyId), registry: defaultRegistry, assets },
@@ -261558,6 +262098,7 @@ async function startServe(opts) {
         // ★ 同默认公司：漏了这里，非默认公司的引擎照旧按代码默认 30min 判超时（策略文件形同虚设）。
         policy: () => activeTimeoutPolicy
       });
+      for (const d of await companyLiveTypeDefs(companyId) ?? []) engine2.kernel.setType(d);
       const registry2 = await companyRegistryFor(companyId);
       await ensureCompanyActors(controlPlaneStore, companyId, registry2);
       await ensureDefaultExpertTeam(registry2);
@@ -262094,7 +262635,7 @@ async function startServe(opts) {
             () => [engine2.kernel],
             async () => {
               if (primary) {
-                for (const d of await store.list()) engine2.kernel.setType(d);
+                for (const d of await companyLiveTypeDefs(cid) ?? []) engine2.kernel.setType(d);
                 return;
               }
               await rebuildLiveSchema();
@@ -262119,7 +262660,19 @@ async function startServe(opts) {
         activeRunsOf,
         nodeReportedModels,
         refreshNodeModels,
-        fetchLatestNpmDaemonVersion
+        fetchLatestNpmDaemonVersion,
+        // 「删除运行时 / 改团队默认模型仅组织管理者」的判据（Runtime PRD「权限设计」）。
+        // 与 projectsDomain 那条 resolveMemberRole 同一实现：闭包在请求时才读成员表。
+        resolveMemberRole: async (companyId, actorId) => {
+          const members = await listCompanyMembers(companyId);
+          return members.find((m2) => m2.actorId === actorId)?.role;
+        },
+        // 详情页「运行次数 / 最近工作时间」与用量 tab 按实例读 run 行：落到这家公司 trace 当前的读落点
+        //（切走了读公司 schema，没切走读 legacy）。dev 文件态的 FileTraceStore 同样实现了这两个读。
+        runtimeRuns: async (companyId) => {
+          const store = await traceStoreFor(companyId);
+          return isRuntimeRunReader(store) ? store : null;
+        }
       }),
       collabDomain({
         kernel: defaultCompanyKernel,
@@ -264734,7 +265287,7 @@ async function startServe(opts) {
       } else if (!deadlineStoreOf(newEngine.kernel)?.listOpenWorkDeadlines) {
         console.warn("[deadline-clock] engine store \u672A\u5B9E\u73B0 listOpenWorkDeadlines\uFF0C\u65F6\u949F\u672A\u542F\u52A8\u2014\u2014deadline \u65E0\u6700\u8FDF\u89E6\u53D1\u4FDD\u8BC1");
       } else {
-        const dedupe = new DeadlineDedupe();
+        const dedupe2 = new DeadlineDedupe();
         const clockCursors = /* @__PURE__ */ new Map();
         let clockTicking = false;
         void (async () => {
@@ -264784,7 +265337,7 @@ async function startServe(opts) {
             batchLimit: DEADLINE_CLOCK_BATCH_LIMIT,
             ...cursor ? { cursor } : {},
             log: (m2) => console.warn(m2)
-          }, dedupe);
+          }, dedupe2);
           clockCursors.set(companyId, r.nextCursor);
           if (r.pinged > 0) {
             console.log(`[deadline-clock] [${companyId}] \u6295\u51FA ${r.pinged} \u4E2A workorder.ping\uFF08\u53BB\u91CD ${r.deduped}\u3001\u8C41\u514D ${r.exempt}\uFF09`);
@@ -266455,6 +267008,8 @@ init_src6();
 init_src();
 var WORKDIR_READ_MAX_BYTES2 = 2 * 1024 * 1024;
 var WORKDIR_LIST_MAX_ENTRIES = 500;
+var WORKDIR_WALK_MAX_ENTRIES2 = 1e4;
+var WORKDIR_WALK_BUDGET_MS2 = 1e4;
 var CREDENTIAL_WORDS = ["token", "secret", "credential", "password", "passwd", "apikey"];
 var SSH_KEY_PREFIX = /^id_(rsa|dsa|ecdsa|ed25519)/;
 function isSensitiveSegment(segment) {
@@ -266578,6 +267133,41 @@ async function handleWorkdirList(req) {
     return { ok: false, code: "INTERNAL", message: String(e?.message ?? e) };
   }
 }
+async function handleWorkdirWalk(req, now = Date.now) {
+  const cap = Math.max(1, Math.min(req.maxEntries ?? WORKDIR_WALK_MAX_ENTRIES2, WORKDIR_WALK_MAX_ENTRIES2));
+  const deadline = now() + WORKDIR_WALK_BUDGET_MS2;
+  const start = normalizeRel(req.path).replace(/[/\\]+$/, "");
+  const root = await handleWorkdirList({ ...req, path: start });
+  if (!root.ok) return root;
+  const entries = [];
+  let truncated = root.truncated === true;
+  let level = [{ dir: start, listed: root }];
+  while (level.length > 0) {
+    const pending = [];
+    for (const { dir, listed } of level) {
+      if (!listed.ok) {
+        if (listed.code !== "NOT_FOUND") truncated = true;
+        continue;
+      }
+      if (listed.truncated) truncated = true;
+      for (const entry of listed.entries) {
+        if (entries.length >= cap) return { ok: true, entries, truncated: true, absPath: root.absPath };
+        const rel = dir ? `${dir}/${entry.name}` : entry.name;
+        entries.push({ path: rel, type: entry.type, size: entry.size, mtime: entry.mtime });
+        if (entry.type === "dir") pending.push(rel);
+      }
+    }
+    level = [];
+    for (const dir of pending) {
+      if (entries.length >= cap || now() >= deadline) {
+        truncated = true;
+        break;
+      }
+      level.push({ dir, listed: await handleWorkdirList({ ...req, path: dir }) });
+    }
+  }
+  return { ok: true, entries, absPath: root.absPath, ...truncated ? { truncated: true } : {} };
+}
 async function fdCanonicalPath(fh) {
   try {
     return await import_node_fs19.default.promises.readlink(`/proc/self/fd/${fh.fd}`);
@@ -267068,6 +267658,18 @@ var DaemonWsClient = class {
         this.send({ type: "workdir_read_result", requestId: msg.requestId, result });
         break;
       }
+      case "workdir_walk": {
+        const result = await handleWorkdirWalk({
+          workRoot: this.workRoot,
+          runtimeKind: msg.runtimeKind,
+          workdirKey: msg.workdirKey,
+          rtId: msg.rtId,
+          path: msg.path,
+          maxEntries: msg.maxEntries
+        });
+        this.send({ type: "workdir_walk_result", requestId: msg.requestId, result });
+        break;
+      }
       case "list_models": {
         void this.reportRuntimeModels({ force: true, requestId: msg.requestId });
         break;
@@ -267247,6 +267849,8 @@ var DaemonWsClient = class {
       // 服务端据此决定是用节点归一还是自己就地归一；判据取能力位而不是「见过帧没有」，
       // 否则首个 chunk 之前那段窗口两边都不归一，正文会静默丢一截。
       supportsNormalizedEvents: true,
+      // ADR 0554：本 daemon 认 `workdir_walk`。恒 true——handler 随包发，装了这版就一定有。
+      supportsWorkdirWalk: true,
       ...activeSessions.length > 0 ? { activeSessions } : {},
       // 始终带字段（空数组也带）作为新协议能力标志；服务端仅对支持该字段的节点做缺席确认。
       pendingDispatchIds: [...this.pendingDispatchIds]
@@ -273151,7 +273755,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.26" : "dev";
+var PKG_VERSION = true ? "2.2.28" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;