oasis_test_v2 2.2.27 → 2.2.29

package/dist/index.js

@@ -1399,13 +1399,6 @@ var init_chat_turn = __esm({
 });
 
 // ../contract/src/delegation.ts
-function isLegacyDelegationOutboundPath(path41) {
-  return path41.startsWith(`${LEGACY_DELEGATION_OUTBOUND_DIR}/`);
-}
-function delegationOutboundRoot(roundSummaries) {
-  const legacy = roundSummaries.some((round) => (round.files ?? []).some((file) => isLegacyDelegationOutboundPath(file.name)));
-  return legacy ? LEGACY_DELEGATION_OUTBOUND_DIR : DELEGATION_OUTBOUND_DIR;
-}
 function trimRoundSummariesForReturn(summaries, recentRounds = DELEGATION_RETURN_RECENT_ROUNDS) {
   const keep = Math.max(0, recentRounds);
   const cut = Math.max(0, summaries.length - keep);
@@ -1446,12 +1439,11 @@ function touchAnchorMessageId(messageId) {
   const hash2 = messageId.indexOf("#");
   return hash2 >= 0 ? messageId.slice(0, hash2) : messageId;
 }
-var DelegationLabelConflictError, DELEGATION_FILE_LIMITS, DELEGATION_INBOUND_DIR, DELEGATION_OUTBOUND_DIR, LEGACY_DELEGATION_OUTBOUND_DIR, DELEGATION_RETURN_RECENT_ROUNDS;
+var DelegationLabelConflictError, DELEGATION_FILE_LIMITS, DELEGATION_INBOUND_DIR, DELEGATION_OUTBOUND_DIR, DELEGATION_RETURN_RECENT_ROUNDS;
 var init_delegation = __esm({
   "../contract/src/delegation.ts"() {
     "use strict";
     init_session_outputs();
-    init_session_outputs();
     DelegationLabelConflictError = class extends Error {
       constructor(parentSessionId, label) {
         super(`delegation label conflict in parent session: parent=${parentSessionId} label=${label ?? "<null>"}`);
@@ -1469,8 +1461,7 @@ var init_delegation = __esm({
       maxTotalBytes: 20 * 1024 * 1024
     };
     DELEGATION_INBOUND_DIR = "inputs/attachments";
-    DELEGATION_OUTBOUND_DIR = `${SESSION_OUTPUTS_DIR}/delegations`;
-    LEGACY_DELEGATION_OUTBOUND_DIR = "delegations";
+    DELEGATION_OUTBOUND_DIR = "delegations";
     DELEGATION_RETURN_RECENT_ROUNDS = 3;
   }
 });
@@ -1563,7 +1554,7 @@ var init_delegation_prompts = __esm({
       "  \u4E2D\u9014\u7F3A\u4EC0\u4E48\u518D\u8981\u4EC0\u4E48\u3002**\u53EA\u6709\u76EE\u6807\u3001\u8303\u56F4\u3001\u6216\u8981\u7528\u6237\u62CD\u677F\u7684\u53D6\u820D**\u624D\u56DE\u5934\u95EE\u4EBA\u3002",
       "- **\u62FF\u4E0D\u51C6\u5F52\u8C01\u8D1F\u8D23\uFF0C\u5C31\u81EA\u5DF1\u505A\u3002**\u6D3E\u9519\u4EBA\u6BD4\u591A\u505A\u4E00\u6B65\u8D35\u3002",
       "- **\u81EA\u5DF1\u505A\u7684\u65F6\u5019**\uFF1A\u5148\u7528\u4E00\u53E5\u666E\u901A\u8BDD\u8BF4\u4F60\u5728\u505A\u4EC0\u4E48\uFF08\u4F8B\uFF1A\u300C\u6211\u6765\u6574\u7406\u8FD9\u4EFD\u9700\u6C42\uFF0C\u5E76\u8865\u51FA\u53EF\u6267\u884C\u7684\u8303\u56F4\u300D\uFF09\uFF0C",
-      "  \u505A\u5B8C\u628A\u7ED3\u679C\u6216\u6587\u4EF6\u7ED9\u51FA\u6765\u2014\u2014\u6587\u4EF6\u4F1A\u81EA\u52A8\u8FDB\u53F3\u4FA7\u5DE5\u4F5C\u533A\uFF0C\u4E0D\u7528\u4F60\u518D\u8D34\u4E00\u904D\u3002",
+      "  \u505A\u5B8C\u628A\u7ED3\u679C\u7ED9\u51FA\u6765\uFF1B\u7ED9\u7528\u6237\u7684\u6587\u4EF6\u653E\u8FDB `outputs/`\uFF08\u4F1A\u51FA\u5361\uFF09\uFF0C\u4E0D\u7528\u518D\u8D34\u3002",
       "- **\u4E2D\u9014\u53D1\u73B0\u8BE5\u6362\u8DEF**\uFF08\u505A\u7740\u505A\u7740\u53D1\u73B0\u8981\u4E09\u4E2A\u4EBA\u4E00\u8D77\uFF09\uFF1A\u76F4\u63A5\u6362\u3002",
       "  **\u8FD9\u4E2A\u8F6C\u6298\u4E0D\u7528\u8BB2\u7ED9\u7528\u6237\u542C**\uFF0C\u53EA\u5728\u771F\u9700\u8981\u4ED6\u8865\u4FE1\u606F\u3001\u7ED9\u6388\u6743\u3001\u505A\u53D6\u820D\u65F6\u624D\u5F00\u53E3\u3002",
       "",
@@ -1616,7 +1607,7 @@ var init_delegation_prompts = __esm({
       "### \u8981\u5E26\u6587\u4EF6\u5C31\u660E\u5199",
       "",
       "`--file <\u5DE5\u4F5C\u533A\u91CC\u7684\u8DEF\u5F84>`\uFF0C\u53EF\u4EE5\u7ED9\u591A\u6B21\u3002**\u4E0D\u5199\u5C31\u4E00\u4E2A\u6587\u4EF6\u90FD\u4E0D\u5E26**\u2014\u2014\u4E24\u8FB9\u5DE5\u4F5C\u533A\u662F\u5206\u5F00\u7684\u3002",
-      "\u5BF9\u65B9\u7684\u4EA4\u4ED8\u7269\u4F1A\u81EA\u52A8\u56DE\u5230\u8FD9\u4E2A\u5BF9\u8BDD\u7684\u5DE5\u4F5C\u533A\uFF0C\u4F60\u4E0D\u7528\u624B\u5DE5\u642C\u3002"
+      "\u5BF9\u65B9\u4EA4\u56DE\u7684\u6587\u4EF6\u81EA\u52A8\u843D\u8FDB `delegations/<\u77ED\u540D>/`\uFF0C\u4E0D\u51FA\u5361\uFF1B\u8981\u7ED9\u7528\u6237\u770B\u7684\uFF0C\u590D\u5236\u6216\u52A0\u5DE5\u8FDB `outputs/`\uFF0C\u539F\u4EF6\u522B\u52A8\u3002"
     ].join("\n");
   }
 });
@@ -196286,7 +196277,7 @@ async function collectInboundFiles(port, parent, paths, limits, lenient) {
   }
   return { prepared, skipped, totalBytes, unchanged: [] };
 }
-async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FILE_LIMITS, known, outboundRoot = DELEGATION_OUTBOUND_DIR) {
+async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FILE_LIMITS, known) {
   const out = { prepared: [], skipped: [], totalBytes: 0, unchanged: [] };
   if (!port) return out;
   if (port.locate) {
@@ -196363,7 +196354,7 @@ async function prepareOutboundFiles(port, child, dirName, limits = DELEGATION_FI
       out.skipped.push({ source: file.rel, code: "PATH_REJECTED", message: "\u8DEF\u5F84\u4E0D\u5408\u6CD5\uFF0C\u6CA1\u642C" });
       continue;
     }
-    const target = `${outboundRoot}/${dirName}/${relative5}`;
+    const target = `${DELEGATION_OUTBOUND_DIR}/${dirName}/${relative5}`;
     const seen = known?.get(target);
     if (seen && file.mtime && seen.size === file.size && seen.mtime === file.mtime) {
       out.unchanged.push(target);
@@ -196445,10 +196436,16 @@ function digestOf(text5) {
   return line.length > DIGEST_CHARS ? `${line.slice(0, DIGEST_CHARS)}\u2026` : line;
 }
 function delegationArtifactsView(record8) {
-  return collectDelegationArtifacts(record8.roundSummaries).map((a) => ({
-    ...a,
-    childMessageId: childRoundMessageIds(record8.childSessionId, a.round).placeholderId
-  }));
+  const dirName = delegationDirName(record8.label, record8.expertActorId, record8.id);
+  const prefixes = [`${DELEGATION_OUTBOUND_DIR}/${dirName}/`, `${SESSION_OUTPUTS_DIR}/${DELEGATION_OUTBOUND_DIR}/${dirName}/`];
+  return collectDelegationArtifacts(record8.roundSummaries).map((a) => {
+    const prefix = prefixes.find((p2) => a.name.startsWith(p2));
+    return {
+      ...a,
+      childMessageId: childRoundMessageIds(record8.childSessionId, a.round).placeholderId,
+      ...prefix ? { childPath: `${SESSION_OUTPUTS_DIR}/${a.name.slice(prefix.length)}` } : {}
+    };
+  });
 }
 function childRoundMessageIds(childSessionId, round) {
   const suffix = round <= 1 ? "" : `:${round}`;
@@ -198152,7 +198149,12 @@ function delegationReturnText(terminal, opts) {
     }
   }
   if (opts.movedPaths.length > 0) {
-    lines.push("", "\u4E13\u5BB6\u4EA4\u56DE\u7684\u6587\u4EF6\uFF08\u5DF2\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A", ...opts.movedPaths.map((p2) => `- ${p2}`));
+    const updated = new Set(opts.updatedPaths ?? []);
+    lines.push(
+      "",
+      "\u4E13\u5BB6\u4EA4\u56DE\u7684\u6587\u4EF6\uFF08\u5DF2\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u53EF\u76F4\u63A5\u8BFB\u53D6\uFF09\uFF1A",
+      ...opts.movedPaths.map((p2) => `- ${p2}\uFF08${updated.has(p2) ? "\u66F4\u65B0\uFF1A\u4E4B\u524D\u4EA4\u56DE\u8FC7\uFF0C\u8FD9\u4E00\u7248\u6709\u6539\u52A8" : "\u65B0\u4EA4"}\uFF09`)
+    );
   }
   if ((opts.unchangedPaths?.length ?? 0) > 0) {
     lines.push("", `\u53E6\u6709 ${opts.unchangedPaths.length} \u4E2A\u6587\u4EF6\u4E0E\u4E0A\u6B21\u4EA4\u56DE\u65F6\u9010\u5B57\u4E00\u81F4\uFF0C\u672C\u8F6E\u6CA1\u6709\u91CD\u4F20\uFF08\u4ECD\u5728\u4F60\u7684\u5DE5\u4F5C\u76EE\u5F55\u4E0B\uFF0C\u8DEF\u5F84\u4E0D\u53D8\uFF09\u3002`);
@@ -198175,6 +198177,11 @@ function delegationReturnText(terminal, opts) {
     "",
     record8.state === "done" ? "\u8FD9\u4E9B\u662F\u6750\u6599\uFF0C\u4E0D\u662F\u7ED9\u7528\u6237\u7684\u6210\u54C1\uFF1A\u4F60\u6709\u8FD9\u6761\u5BF9\u8BDD\u7684\u5B8C\u6574\u4E0A\u4E0B\u6587\uFF0C\u81EA\u5DF1\u5224\u65AD\u8BE5\u8BB2\u54EA\u4E00\u53E5\u3001\u8981\u4E0D\u8981\u63A5\u7740\u5F80\u4E0B\u505A\u3002" : "\u5148\u81EA\u5DF1\u5224\u65AD\u80FD\u4E0D\u80FD\u63A5\u4F4F\uFF1A\u63A5\u7BA1\u3001\u6362\u4E2A\u505A\u6CD5\u3001\u8FD8\u662F\u91CD\u6D3E\u3002**\u522B\u628A\u4E13\u4E1A\u5931\u8D25\u539F\u6837\u4E22\u56DE\u7ED9\u7528\u6237**\u3002"
   );
+  if (opts.movedPaths.length > 0 || (opts.unchangedPaths?.length ?? 0) > 0) {
+    lines.push(
+      "\u4EA4\u56DE\u7684\u6587\u4EF6\u653E\u5728 `delegations/` \u4E0B\uFF0C**\u4E0D\u4F1A\u5728\u5BF9\u8BDD\u91CC\u51FA\u5361**\uFF08\u7528\u6237\u53EA\u80FD\u53BB\u53F3\u4FA7\u300C\u76F8\u5173\u6587\u4EF6\u300D\u5217\u8868\u91CC\u7FFB\uFF09\uFF1B\u8981\u7ED9\u7528\u6237\u770B\u7684\uFF0C\u590D\u5236\u6216\u52A0\u5DE5\u540E\u653E\u8FDB `outputs/`\uFF08\u539F\u4EF6\u522B\u79FB\u52A8\u3001\u522B\u5220\u9664\uFF09\u3002" + ((opts.updatedPaths?.length ?? 0) > 0 ? "\u6807\u4E86\u300C\u66F4\u65B0\u300D\u7684\u6587\u4EF6\u5982\u679C\u4F60\u4E4B\u524D\u653E\u8FDB\u8FC7 `outputs/`\uFF0C\u8981\u4E0D\u8981\u6362\u6210\u65B0\u7248\u7531\u4F60\u5224\u65AD\u3002" : "")
+    );
+  }
   return lines.join("\n");
 }
 async function deliverDelegationReturn(deps, terminal) {
@@ -198203,9 +198210,7 @@ async function deliverDelegationReturn(deps, terminal) {
     { chatSessionId: record8.childSessionId, ...parentSession.companyId ? { companyId: parentSession.companyId } : {} },
     dirName,
     void 0,
-    known,
-    // 已经往老落点（工作区根的 `delegations/`）交过文件的委派继续落那儿——协调者手里的是老路径。
-    delegationOutboundRoot(record8.roundSummaries)
+    known
   ).catch((err) => {
     log3(`[delegation-return] \u4EA7\u7269\u642C\u8FD0\u5931\u8D25\uFF08delegation=${record8.id}\uFF09: ${String(err)}`);
     return {
@@ -198229,11 +198234,14 @@ async function deliverDelegationReturn(deps, terminal) {
     );
   };
   const bundleFiles = toBundleFiles(outbound.prepared);
+  const previouslyDelivered = new Set(record8.roundSummaries.flatMap((round) => (round.files ?? []).map((file) => file.name)));
   const text5 = delegationReturnText(terminal, {
     movedPaths: bundleFiles.paths,
     skipped: outbound.skipped,
     recentRounds: deps.recentRounds ?? DELEGATION_RETURN_RECENT_ROUNDS,
-    unchangedPaths: outbound.unchanged
+    unchangedPaths: outbound.unchanged,
+    // 「之前交回过」按台账里已经登记的文件名判——这一轮的文件要等投递之后才落账，此刻还不在里面。
+    updatedPaths: bundleFiles.paths.filter((p2) => previouslyDelivered.has(p2))
   });
   const movedFileRefs = outbound.prepared.map((f2) => ({
     name: f2.rel,
@@ -209369,8 +209377,12 @@ var init_memory_registry_store = __esm({
         const keptName = v2.name ?? ex?.name;
         const keptCreatedBy = ex?.createdBy ?? v2.createdBy;
         const keptCreatedAt = ex?.createdAt ?? v2.createdAt;
+        const keptAudience = v2.audience ?? ex?.audience;
+        const keptEnabled = v2.enabledActorIds ?? ex?.enabledActorIds;
         this.variables.set(mk, {
           ...v2,
+          ...keptAudience !== void 0 ? { audience: keptAudience } : {},
+          ...keptEnabled !== void 0 ? { enabledActorIds: [...keptEnabled] } : {},
           ...ex?.lastUsedAt !== void 0 ? { lastUsedAt: ex.lastUsedAt } : {},
           ...keptName ? { name: keptName } : {},
           ...keptCreatedBy ? { createdBy: keptCreatedBy } : {},
@@ -209388,12 +209400,30 @@ var init_memory_registry_store = __esm({
         const ex = this.variables.get(mk);
         if (ex) this.variables.set(mk, { ...ex, valueEncrypted, updatedAt });
       }
+      async patchVariableMeta(key, actorId, patch) {
+        const mk = this._varKey(key, actorId);
+        const ex = this.variables.get(mk);
+        if (!ex) return false;
+        const next = { ...ex, updatedAt: patch.updatedAt };
+        if (patch.audience !== void 0) next.audience = patch.audience;
+        if (patch.enabledActorIds !== void 0) next.enabledActorIds = [...patch.enabledActorIds];
+        if (patch.deliveryMode !== void 0) next.deliveryMode = patch.deliveryMode;
+        if (patch.expiresAt !== void 0) {
+          if (patch.expiresAt === null) delete next.expiresAt;
+          else next.expiresAt = patch.expiresAt;
+        }
+        if (patch.updatedBy !== void 0) next.updatedBy = patch.updatedBy;
+        this.variables.set(mk, next);
+        return true;
+      }
       async getVariableCiphertext(key, actorId) {
         return this.variables.get(this._varKey(key, actorId))?.valueEncrypted ?? null;
       }
       async listVariables(actorId) {
         const all2 = [...this.variables.values()];
-        if (actorId !== void 0) return all2.filter((v2) => v2.scope === "global" || v2.actorId === actorId).map((v2) => ({ ...v2 }));
+        if (actorId !== void 0) {
+          return all2.filter((v2) => v2.actorId === actorId || v2.scope === "global" && (v2.audience !== "selected" || (v2.enabledActorIds ?? []).includes(actorId))).map((v2) => ({ ...v2 }));
+        }
         return all2.map((v2) => ({ ...v2 }));
       }
       async resolveProjectVariables(projectId2) {
@@ -209832,6 +209862,27 @@ var init_memory_trace_store = __esm({
           usage: structuredClone(run.usage)
         }));
       }
+      /** 与 PostgresTraceStore.runtimeRunActivity 同语义：按实例数全部 run（不看状态 / usage），取最近开跑。 */
+      async runtimeRunActivity(runtimeInstanceId) {
+        let runCount = 0;
+        let lastRunStartedAt = null;
+        for (const run of this.runs.values()) {
+          if (run.runtimeInstanceId !== runtimeInstanceId) continue;
+          runCount += 1;
+          if (lastRunStartedAt === null || run.startedAt > lastRunStartedAt) lastRunStartedAt = run.startedAt;
+        }
+        return { runCount, lastRunStartedAt };
+      }
+      /** 与 PostgresTraceStore.listRuntimeRuns 同语义：时间窗内该实例的全部 run，按开跑正序。 */
+      async listRuntimeRuns(runtimeInstanceId, range) {
+        return [...this.runs.values()].filter((run) => run.runtimeInstanceId === runtimeInstanceId && run.startedAt >= range.from && run.startedAt <= range.to).sort((a, b2) => a.startedAt < b2.startedAt ? -1 : a.startedAt > b2.startedAt ? 1 : 0).map((run) => ({
+          actorId: run.actorId,
+          runtimeKind: run.runtimeKind,
+          effectiveModel: run.effectiveModel,
+          startedAt: run.startedAt,
+          usage: run.usage ? structuredClone(run.usage) : null
+        }));
+      }
       /* ---------- execution continuity ---------- */
       async getAttempt(attemptId) {
         return this.getRun(attemptId);
@@ -215905,6 +215956,9 @@ var init_company_scoped_registry = __esm({
       async patchVariableValue(...args) {
         return this.base.patchVariableValue(...args);
       }
+      async patchVariableMeta(...args) {
+        return this.base.patchVariableMeta(...args);
+      }
       async getVariableCiphertext(...args) {
         return this.base.getVariableCiphertext(...args);
       }
@@ -220486,6 +220540,9 @@ function variableKeyFromEnv(env = process.env) {
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
   return (0, import_node_crypto47.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
+function dedupe(ids2) {
+  return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
+}
 var import_node_crypto47, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
@@ -221469,7 +221526,31 @@ ${input.description}
           ...v2.by ? { createdBy: v2.by, createdAt: this.now(), updatedBy: v2.by } : {},
           // ADR 凭据保险库补章 §D2.2：expiresAt 写侧穿透——**显式带 key**（含 undefined），使清空（传空→undefined）
           // 也落到底（store 两实现都按此覆盖）。lastUsedAt 从不由写侧传，取用时另刷（§D2.3）。
-          expiresAt: v2.expiresAt
+          expiresAt: v2.expiresAt,
+          // 决策 0556：发给谁只对全局行有意义；个人档 / 项目档一律不带（存储层 COALESCE：不带 = 不动）。
+          ...v2.scope === "global" && v2.audience !== void 0 ? { audience: v2.audience } : {},
+          ...v2.scope === "global" && v2.enabledActorIds !== void 0 ? { enabledActorIds: dedupe(v2.enabledActorIds) } : {}
+        });
+      }
+      /**
+       * 只改一行变量的元数据、不碰值（决策 0556）。
+       *
+       * 两个用处：① 管理页「配置Agent」改发给谁（audience / enabledActorIds）——不用为了改名单去取明文重写；
+       * ② 改到期时间 / 注入方式不用连值一起重填（此前 `putVariable` 空值即静默不写，界面只能逼人重输一遍值）。
+       *
+       * 行不存在返回 false，**不会凭空造一条没有值的行**。audience / enabledActorIds 只允许写在全局行上。
+       */
+      async patchVariableMeta(key, selector, patch) {
+        if (selector.actorId !== void 0 && (patch.audience !== void 0 || patch.enabledActorIds !== void 0)) {
+          throw new ApiError(400, "BAD_REQUEST", "audience / enabledActorIds \u53EA\u80FD\u5199\u5728\u7EC4\u7EC7\u9ED8\u8BA4\u503C\uFF08\u5168\u5C40\u884C\uFF09\u4E0A\uFF0C\u4E2A\u4EBA\u6863\u6CA1\u6709\u300C\u53D1\u7ED9\u8C01\u300D");
+        }
+        return this.opts.store.patchVariableMeta(key, selector.actorId, {
+          ...patch.audience !== void 0 ? { audience: patch.audience } : {},
+          ...patch.enabledActorIds !== void 0 ? { enabledActorIds: dedupe(patch.enabledActorIds) } : {},
+          ...patch.deliveryMode !== void 0 ? { deliveryMode: patch.deliveryMode } : {},
+          ...patch.expiresAt !== void 0 ? { expiresAt: patch.expiresAt } : {},
+          ...patch.by ? { updatedBy: patch.by } : {},
+          updatedAt: this.now()
         });
       }
       /** ADR 凭据保险库补章 §D2.3：某一行变量「明文真被取用」→ 刷 lastUsedAt。行按 (key, actorId?, projectId?)
@@ -221544,7 +221625,10 @@ ${input.description}
             // 存量行没有这三格，原样不带出去——展示侧出「—」，不拿 updatedAt 冒充 createdAt。
             ...r.createdBy !== void 0 ? { createdBy: r.createdBy } : {},
             ...r.createdAt !== void 0 ? { createdAt: r.createdAt } : {},
-            ...r.updatedBy !== void 0 ? { updatedBy: r.updatedBy } : {}
+            ...r.updatedBy !== void 0 ? { updatedBy: r.updatedBy } : {},
+            // 决策 0556：发给谁。存量行没有 → 不带出去，读侧按「全员生效」理解。
+            ...r.audience !== void 0 ? { audience: r.audience } : {},
+            ...r.enabledActorIds !== void 0 ? { enabledActorIds: r.enabledActorIds } : {}
           };
         });
       }
@@ -222992,6 +223076,10 @@ function actorsDomain(opts) {
       const b2 = req.body;
       if (!b2?.key) throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 key");
       const expiresAt2 = normalizeExpiresAt(b2.expiresAt);
+      const audienceMeta = parseAudienceMeta(b2);
+      if ((audienceMeta.audience !== void 0 || audienceMeta.enabledActorIds !== void 0) && b2.scope !== "global") {
+        throw new ApiError(400, "BAD_REQUEST", "audience / enabledActorIds \u53EA\u80FD\u5199\u5728 scope=global \u7684\u7EC4\u7EC7\u9ED8\u8BA4\u503C\u4E0A");
+      }
       if (b2.scope !== "global" && b2.scope !== "personal" && b2.scope !== "project") {
         throw new ApiError(
           400,
@@ -223036,6 +223124,7 @@ function actorsDomain(opts) {
         ...b2.connectorId !== void 0 ? { connectorId: b2.connectorId } : {},
         ...b2.overrides !== void 0 ? { overrides: b2.overrides } : {},
         ...b2.encrypted !== void 0 ? { encrypted: b2.encrypted } : {},
+        ...audienceMeta,
         // 创建者/更新者取**当前登录人**，不接受 body 传入——自报的「谁建的」等于没有这一格。
         by: req.auth.actor,
         expiresAt: expiresAt2
@@ -223048,6 +223137,18 @@ function actorsDomain(opts) {
       );
       return { status: 201, body: { ok: true } };
     });
+    router.patch("/api/variables/:key", async (req) => {
+      requireVariableManager(req);
+      const { service } = await resolveCtx(req.auth.companyId);
+      const key = req.params.key;
+      const b2 = req.body ?? {};
+      const patch = parseMetaPatch(b2, { allowAudience: true });
+      await requireSecretOwner(req, service, key, {});
+      const ok3 = await service.patchVariableMeta(key, {}, { ...patch, by: req.auth.actor });
+      if (!ok3) throw new ApiError(404, "VARIABLE_NOT_FOUND", `\u6CA1\u6709\u53EB ${key} \u7684\u7EC4\u7EC7\u9ED8\u8BA4\u503C`);
+      await auditVariableChange(req, "credential_write", key, "global");
+      return { status: 200, body: { ok: true } };
+    });
     router.delete("/api/variables/:key", async (req) => {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
@@ -223118,6 +223219,19 @@ function actorsDomain(opts) {
       await auditVariableChange(req, "credential_write", b2.key, `personal:${actorId}`);
       return { status: 201, body: { ok: true } };
     });
+    router.patch("/api/actors/:id/variables/:key", async (req) => {
+      requireVariableManager(req);
+      const { service } = await resolveCtx(req.auth.companyId);
+      const actorId = req.params.id;
+      const key = req.params.key;
+      const b2 = req.body ?? {};
+      const patch = parseMetaPatch(b2, { allowAudience: false });
+      await requireSecretOwner(req, service, key, { actorId });
+      const ok3 = await service.patchVariableMeta(key, { actorId }, { ...patch, by: req.auth.actor });
+      if (!ok3) throw new ApiError(404, "VARIABLE_NOT_FOUND", `\u8FD9\u4F4D Agent \u6CA1\u6709\u5355\u72EC\u8BBE\u7F6E ${key}`);
+      await auditVariableChange(req, "credential_write", key, `personal:${actorId}`);
+      return { status: 200, body: { ok: true } };
+    });
     router.delete("/api/actors/:id/variables/:key", async (req) => {
       requireVariableManager(req);
       const { service } = await resolveCtx(req.auth.companyId);
@@ -223720,6 +223834,43 @@ function actorsDomain(opts) {
     });
   };
 }
+function parseAudienceMeta(b2) {
+  const out = {};
+  if (b2.audience !== void 0) {
+    if (b2.audience !== "all" && b2.audience !== "selected") {
+      throw new ApiError(400, "BAD_REQUEST", "audience \u53EA\u80FD\u662F all \u6216 selected");
+    }
+    out.audience = b2.audience;
+  }
+  if (b2.enabledActorIds !== void 0) {
+    if (!Array.isArray(b2.enabledActorIds) || b2.enabledActorIds.some((x2) => typeof x2 !== "string" || !x2)) {
+      throw new ApiError(400, "BAD_REQUEST", "enabledActorIds \u5FC5\u987B\u662F\u975E\u7A7A\u5B57\u7B26\u4E32\u6570\u7EC4");
+    }
+    out.enabledActorIds = b2.enabledActorIds;
+  }
+  return out;
+}
+function parseMetaPatch(b2, opts) {
+  const out = {};
+  const aud = parseAudienceMeta(b2);
+  if ((aud.audience !== void 0 || aud.enabledActorIds !== void 0) && !opts.allowAudience) {
+    throw new ApiError(400, "BAD_REQUEST", "\u4E2A\u4EBA\u6863\u6CA1\u6709\u300C\u53D1\u7ED9\u8C01\u300D\u2014\u2014audience / enabledActorIds \u8BF7\u5199\u5728\u7EC4\u7EC7\u9ED8\u8BA4\u503C\u4E0A");
+  }
+  Object.assign(out, aud);
+  if (b2.deliveryMode !== void 0) {
+    if (b2.deliveryMode !== "env" && b2.deliveryMode !== "ref" && b2.deliveryMode !== "broker") {
+      throw new ApiError(400, "BAD_REQUEST", "deliveryMode \u53EA\u80FD\u662F env\u3001ref \u6216 broker");
+    }
+    out.deliveryMode = b2.deliveryMode;
+  }
+  if (b2.expiresAt !== void 0) {
+    if (b2.expiresAt === null || b2.expiresAt === "") out.expiresAt = null;
+    else if (typeof b2.expiresAt === "string") out.expiresAt = normalizeExpiresAt(b2.expiresAt) ?? null;
+    else throw new ApiError(400, "BAD_REQUEST", "expiresAt \u5FC5\u987B\u662F ISO \u65F6\u95F4\u5B57\u7B26\u4E32\u6216 null");
+  }
+  if (Object.keys(out).length === 0) throw new ApiError(400, "BAD_REQUEST", "\u81F3\u5C11\u8981\u6539\u4E00\u6837\uFF1Aaudience / enabledActorIds / deliveryMode / expiresAt");
+  return out;
+}
 var CREDENTIAL_REVEAL_SOURCES, RevealRateLimiter;
 var init_routes3 = __esm({
   "../server/src/domains/actors/routes.ts"() {
@@ -231645,6 +231796,84 @@ var init_connect_script = __esm({
   }
 });
 
+// ../server/src/domains/nodes/runtime-activity.ts
+function isRuntimeRunReader(store) {
+  const s2 = store;
+  return !!s2 && typeof s2.runtimeRunActivity === "function" && typeof s2.listRuntimeRuns === "function";
+}
+function parseRuntimeUsageWindow(query, granularity, nowMs) {
+  const toRaw = query.get("to");
+  const fromRaw = query.get("from");
+  const toMs = toRaw ? Date.parse(toRaw) : nowMs;
+  if (!Number.isFinite(toMs)) return "to \u4E0D\u662F\u5408\u6CD5\u7684 ISO \u65F6\u95F4";
+  const fromMs = fromRaw ? Date.parse(fromRaw) : toMs - DEFAULT_WINDOW_MS[granularity];
+  if (!Number.isFinite(fromMs)) return "from \u4E0D\u662F\u5408\u6CD5\u7684 ISO \u65F6\u95F4";
+  if (fromMs > toMs) return "from \u4E0D\u80FD\u665A\u4E8E to";
+  if (toMs - fromMs > MAX_WINDOW_MS) return "\u65F6\u95F4\u7A97\u6700\u957F 92 \u5929";
+  return { from: new Date(fromMs).toISOString(), to: new Date(toMs).toISOString() };
+}
+function runtimeUsageBucket(startedAt, granularity) {
+  const ms = Date.parse(startedAt);
+  if (!Number.isFinite(ms)) return null;
+  const d = new Date(ms);
+  if (granularity === "day") return d.toISOString().slice(0, 10);
+  return new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), d.getUTCDate(), d.getUTCHours())).toISOString();
+}
+function bucketRuntimeRuns(runtimeInstanceId, runs, granularity) {
+  const rows = /* @__PURE__ */ new Map();
+  for (const run of runs) {
+    const bucket = runtimeUsageBucket(run.startedAt, granularity);
+    if (!bucket) continue;
+    const model = resolvedModel(run.effectiveModel);
+    const key = `${bucket}\0${run.actorId}\0${model ?? ""}`;
+    let row = rows.get(key);
+    if (!row) {
+      row = {
+        actorId: run.actorId,
+        runtimeInstanceId,
+        runtimeKind: run.runtimeKind,
+        effectiveModel: model,
+        bucket,
+        runCount: 0,
+        inputTokens: 0,
+        outputTokens: 0,
+        totalTokens: 0,
+        cacheReadTokens: 0,
+        cacheCreationTokens: 0,
+        costUsdMicros: 0
+      };
+      rows.set(key, row);
+    }
+    row.runCount += 1;
+    const usage = run.usage;
+    if (!usage) continue;
+    const input = nonNegative2(usage.inputTokens);
+    const output = nonNegative2(usage.outputTokens);
+    row.inputTokens += input;
+    row.outputTokens += output;
+    row.totalTokens += input + output;
+    row.cacheReadTokens += nonNegative2(usage.cacheReadTokens);
+    row.cacheCreationTokens += nonNegative2(usage.cacheCreationTokens);
+    const account = accountUsage(model, usage);
+    row.costUsdMicros += account ? account.displayUsdMicros : nonNegative2(usage.costUsdMicros);
+  }
+  return [...rows.values()].sort((a, b2) => {
+    if (a.bucket !== b2.bucket) return a.bucket < b2.bucket ? 1 : -1;
+    if (a.actorId !== b2.actorId) return a.actorId < b2.actorId ? -1 : 1;
+    return (a.effectiveModel ?? "").localeCompare(b2.effectiveModel ?? "");
+  });
+}
+var DEFAULT_WINDOW_MS, MAX_WINDOW_MS, nonNegative2;
+var init_runtime_activity = __esm({
+  "../server/src/domains/nodes/runtime-activity.ts"() {
+    "use strict";
+    init_accounting();
+    DEFAULT_WINDOW_MS = { hour: 24 * 36e5, day: 30 * 864e5 };
+    MAX_WINDOW_MS = 92 * 864e5;
+    nonNegative2 = (v2) => Math.max(v2 ?? 0, 0);
+  }
+});
+
 // ../server/src/node-health.ts
 function deriveNodeHealth(input) {
   const staleMs = input.staleMs ?? 9e4;
@@ -231944,6 +232173,14 @@ function nodesDomain(deps) {
         body: { error: "ORG_MANAGER_REQUIRED", message: `${verb}\u4EC5\u7EC4\u7EC7\u7BA1\u7406\u8005\u53EF\u64CD\u4F5C\uFF0C\u8BF7\u8054\u7CFB\u7EC4\u7EC7\u7BA1\u7406\u5458` }
       };
     }
+    async function runtimeInScope(req) {
+      const runtimeId = req.params["runtimeId"];
+      if (!runtimeId) return { denied: { status: 400, body: { error: "missing runtimeId" } } };
+      const scope = req.auth.companyId !== void 0 ? { companyId: req.auth.companyId } : void 0;
+      const rt = (await deps.nodeStore.listRuntimes(void 0, scope)).find((r) => r.id === runtimeId);
+      if (!rt) return { denied: { status: 404, body: { error: "runtime not found" } } };
+      return { runtimeId };
+    }
     async function syncConnectedDaemon(daemonId, hub) {
       const d = hub.connectedDaemons().find((c) => c.daemonId === daemonId);
       if (!d) return;
@@ -232247,6 +232484,23 @@ function nodesDomain(deps) {
       await deps.registry.upsertRuntimeModelOverride(override);
       return { status: 200, body: { override } };
     });
+    router.get("/api/runtimes/:runtimeId/activity", async (req) => {
+      const found = await runtimeInScope(req);
+      if (found.denied) return found.denied;
+      const reader = await deps.runtimeRuns?.(req.auth.companyId);
+      const activity = reader ? await reader.runtimeRunActivity(found.runtimeId) : null;
+      return { status: 200, body: { activity } };
+    });
+    router.get("/api/runtimes/:runtimeId/usage", async (req) => {
+      const found = await runtimeInScope(req);
+      if (found.denied) return found.denied;
+      const granularity = req.query.get("granularity") === "day" ? "day" : "hour";
+      const window2 = parseRuntimeUsageWindow(req.query, granularity, Date.now());
+      if (typeof window2 === "string") return { status: 400, body: { error: window2 } };
+      const reader = await deps.runtimeRuns?.(req.auth.companyId);
+      const runs = reader ? await reader.listRuntimeRuns(found.runtimeId, window2) : null;
+      return { status: 200, body: { items: bucketRuntimeRuns(found.runtimeId, runs ?? [], granularity) } };
+    });
     router.get("/api/runtimes/:runtimeId/config", async (req) => {
       const runtimeId = req.params["runtimeId"];
       if (!runtimeId) return { status: 400, body: { error: "missing runtimeId" } };
@@ -232295,6 +232549,7 @@ var init_routes7 = __esm({
     init_src();
     init_src6();
     init_connect_script();
+    init_runtime_activity();
     init_node_health();
   }
 });
@@ -242323,7 +242578,10 @@ function rowToVariable(row) {
     // 创建者 / 创建时间 / 更新者：2026-09-10 之前的行没有 → 不带这一格，展示侧出「—」。
     ...row.created_by ? { createdBy: row.created_by } : {},
     ...row.created_at ? { createdAt: row.created_at } : {},
-    ...row.updated_by ? { updatedBy: row.updated_by } : {}
+    ...row.updated_by ? { updatedBy: row.updated_by } : {},
+    // 决策 0556：NULL（存量行）不带出去——读侧按「全员生效」理解，与决策之前一致。
+    ...row.audience === "all" || row.audience === "selected" ? { audience: row.audience } : {},
+    ...Array.isArray(row.enabled_actor_ids) ? { enabledActorIds: row.enabled_actor_ids } : {}
   };
 }
 var ident4, PostgresRegistryStore, rowToActor, rowToConfig, rowToAgentPrefs;
@@ -242498,6 +242756,8 @@ var init_postgres_registry = __esm({
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS created_by text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS created_at text`);
         await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS updated_by text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS audience text`);
+        await pool.query(`ALTER TABLE IF EXISTS "${s2}".variables ADD COLUMN IF NOT EXISTS enabled_actor_ids text[]`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_key_actor_uq"`);
         await pool.query(`DROP INDEX IF EXISTS "${s2}"."${s2}_variables_scope_uq"`);
         await pool.query(`
@@ -243003,14 +243263,18 @@ var init_postgres_registry = __esm({
           /* created_by / created_at 走 COALESCE(**旧值**, 新值)：**第一次落行才写**，之后每次 upsert
              都保留原值——否则「谁建的」会被最后一次改的人顶掉，这一格就没有意义了。
              updated_by 反过来：每次都覆盖。三者与 name 的 COALESCE 方向相反，别照抄。 */
-          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at, name, created_by, created_at, updated_by)
-       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14)
+          /* audience / enabled_actor_ids（决策 0556）走 COALESCE(**新值**, 旧值)：不传 = 不动——
+             改默认值时手上不带「发给谁」，普通赋值会把「仅指定 Agent」悄悄打回全员生效。 */
+          `INSERT INTO ${this.s}.variables (key, scope, actor_id, project_id, connector_id, overrides, delivery_mode, value_encrypted, updated_at, expires_at, name, created_by, created_at, updated_by, audience, enabled_actor_ids)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16)
        ON CONFLICT (key, COALESCE(actor_id, ''), COALESCE(project_id, '')) DO UPDATE
          SET scope=$2, actor_id=$3, project_id=$4, connector_id=$5, overrides=$6, delivery_mode=$7, value_encrypted=$8, updated_at=$9, expires_at=$10,
              name=COALESCE($11, ${this.s}.variables.name),
              created_by=COALESCE(${this.s}.variables.created_by, $12),
              created_at=COALESCE(${this.s}.variables.created_at, $13),
-             updated_by=$14`,
+             updated_by=$14,
+             audience=COALESCE($15, ${this.s}.variables.audience),
+             enabled_actor_ids=COALESCE($16, ${this.s}.variables.enabled_actor_ids)`,
           [
             v2.key,
             v2.scope,
@@ -243025,7 +243289,9 @@ var init_postgres_registry = __esm({
             v2.name ?? null,
             v2.createdBy ?? null,
             v2.createdAt ?? null,
-            v2.updatedBy ?? null
+            v2.updatedBy ?? null,
+            v2.audience ?? null,
+            v2.enabledActorIds ?? null
           ]
         );
       }
@@ -243044,6 +243310,34 @@ var init_postgres_registry = __esm({
           [key, aid, valueEncrypted, updatedAt]
         );
       }
+      async patchVariableMeta(key, actorId, patch) {
+        const r = await this.pool.query(
+          `UPDATE ${this.s}.variables SET
+         audience          = CASE WHEN $3::boolean THEN $4::text   ELSE audience END,
+         enabled_actor_ids = CASE WHEN $5::boolean THEN $6::text[] ELSE enabled_actor_ids END,
+         delivery_mode     = CASE WHEN $7::boolean THEN $8::text   ELSE delivery_mode END,
+         expires_at        = CASE WHEN $9::boolean THEN $10::text  ELSE expires_at END,
+         updated_by        = CASE WHEN $11::boolean THEN $12::text ELSE updated_by END,
+         updated_at        = $13
+       WHERE key=$1 AND COALESCE(actor_id,'')=COALESCE($2::text,'') AND COALESCE(project_id,'')=''`,
+          [
+            key,
+            actorId ?? null,
+            patch.audience !== void 0,
+            patch.audience ?? null,
+            patch.enabledActorIds !== void 0,
+            patch.enabledActorIds ?? null,
+            patch.deliveryMode !== void 0,
+            patch.deliveryMode ?? null,
+            patch.expiresAt !== void 0,
+            patch.expiresAt ?? null,
+            patch.updatedBy !== void 0,
+            patch.updatedBy ?? null,
+            patch.updatedAt
+          ]
+        );
+        return (r.rowCount ?? 0) > 0;
+      }
       async getVariableCiphertext(key, actorId) {
         const aid = actorId ?? null;
         const r = await this.pool.query(
@@ -243056,7 +243350,14 @@ var init_postgres_registry = __esm({
         let r;
         if (actorId !== void 0) {
           r = await this.pool.query(
-            `SELECT * FROM ${this.s}.variables WHERE scope='global' OR actor_id=$1 ORDER BY key`,
+            /* 决策 0556：`audience='selected'` 的全局行**只给 enabled_actor_ids 里那几位**。
+               注入（resolveActorEnv / resolveActorProvisionEntries）、agent 侧 reveal、组织页 Agent 的密钥列表
+               全都读这一条查询——语义只改在这一处，别在上层各自再滤一遍（滤漏一处就是泄漏）。
+               audience 为 NULL（存量行）或 'all' 时行为与决策之前逐字一致。 */
+            `SELECT * FROM ${this.s}.variables
+          WHERE actor_id=$1
+             OR (scope='global' AND (audience IS DISTINCT FROM 'selected' OR $1 = ANY(COALESCE(enabled_actor_ids, '{}'::text[]))))
+          ORDER BY key`,
             [actorId]
           );
         } else {
@@ -245533,6 +245834,7 @@ var init_postgres_trace = __esm({
         AND left(job_key, char_length('produce::' || node_id || '::')) = 'produce::' || node_id || '::'`);
         await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_effective_model_idx ON "${s2}".agent_runs (effective_model)`);
         await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_actor_started_idx ON "${s2}".agent_runs (actor_id, started_at DESC)`);
+        await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_runtime_started_idx ON "${s2}".agent_runs (runtime_instance_id, started_at DESC)`);
         await pool.query(`CREATE INDEX IF NOT EXISTS agent_runs_workorder_idx ON "${s2}".agent_runs (work_order_id, node_id, attempt_no DESC)`);
         await pool.query(`CREATE UNIQUE INDEX IF NOT EXISTS agent_runs_node_attempt_uq ON "${s2}".agent_runs (node_id, attempt_no) WHERE node_id IS NOT NULL AND attempt_no IS NOT NULL`);
         await pool.query(`
@@ -246219,6 +246521,41 @@ var init_postgres_trace = __esm({
           usage: row.usage
         }));
       }
+      /* ---------- 运行时详情页：按实例直接读 run 行 ---------- */
+      /**
+       * 这个运行时实例上一共跑过几轮、最近一轮什么时候开跑。
+       *
+       * 读 `agent_runs` 而不是 `agent_usage_*` 聚合表：chat、工单节点（produce / integrate / review）、
+       * 协调者每一轮**开跑时**就先落一行 run，所以开跑即计入；聚合表只在 run 结束且带 usage 时才 +1，
+       * 失败 / 取消没 usage 的轮次永远不算。状态不过滤——每一轮都是一次运行。
+       */
+      async runtimeRunActivity(runtimeInstanceId) {
+        const r = await this.pool.query(
+          `SELECT count(*)::int AS run_count, max(started_at) AS last_started_at
+       FROM ${this.s}.agent_runs WHERE runtime_instance_id = $1`,
+          [runtimeInstanceId]
+        );
+        const row = r.rows[0] ?? {};
+        return { runCount: Number(row.run_count ?? 0), lastRunStartedAt: row.last_started_at ?? null };
+      }
+      /** 该实例在时间窗内开跑的全部 run（含还没有 usage 的在途 / 失败轮次），按开跑时刻正序。 */
+      async listRuntimeRuns(runtimeInstanceId, range) {
+        const r = await this.pool.query(
+          `SELECT actor_id, runtime_kind, effective_model, started_at, usage
+       FROM ${this.s}.agent_runs
+       WHERE runtime_instance_id = $1 AND started_at >= $2 AND started_at <= $3
+       ORDER BY started_at`,
+          [runtimeInstanceId, range.from, range.to]
+        );
+        return r.rows.map((row) => ({
+          actorId: row.actor_id,
+          runtimeKind: row.runtime_kind ?? "shell",
+          effectiveModel: row.effective_model ?? null,
+          startedAt: row.started_at,
+          // 历史行里有 JSONB 字面量 null，与 SQL NULL 一样当「还没有 usage」。
+          usage: row.usage && typeof row.usage === "object" ? row.usage : null
+        }));
+      }
       /* ---------- execution continuity ---------- */
       async getAttempt(attemptId) {
         return this.getRun(attemptId);
@@ -254234,6 +254571,9 @@ var init_cutover_aware_registry = __esm({
       async patchVariableValue(...args) {
         return (await this.orgStoreForWrite()).patchVariableValue(...args);
       }
+      async patchVariableMeta(...args) {
+        return (await this.orgStoreForWrite()).patchVariableMeta(...args);
+      }
       async getVariableCiphertext(...args) {
         return (await this.orgStore()).getVariableCiphertext(...args);
       }
@@ -254615,6 +254955,15 @@ var init_cutover_aware_trace = __esm({
       async listUsageRuns(filter) {
         return (await this.pick()).listUsageRuns(filter);
       }
+      // ── 运行时详情页的按实例读（不在 TraceStore 契约上：落点 store 没实现就当没有数据源）──────────
+      async runtimeRunActivity(runtimeInstanceId) {
+        const s2 = await this.pick();
+        return typeof s2.runtimeRunActivity === "function" ? s2.runtimeRunActivity(runtimeInstanceId) : null;
+      }
+      async listRuntimeRuns(runtimeInstanceId, range) {
+        const s2 = await this.pick();
+        return typeof s2.listRuntimeRuns === "function" ? s2.listRuntimeRuns(runtimeInstanceId, range) : null;
+      }
       // ── 事件 / 工具调用 / 链接 ────────────────────────────────────────────────
       async appendEvent(runId, event) {
         return (await this.pickWritable()).appendEvent(runId, event);
@@ -258704,7 +259053,7 @@ var init_run_settlement_wiring = __esm({
 });
 
 // ../server/src/deadline-clock.ts
-async function deadlineClockTick(deps, dedupe) {
+async function deadlineClockTick(deps, dedupe2) {
   const limit = deps.batchLimit ?? DEADLINE_CLOCK_BATCH_LIMIT;
   const lookahead = deps.lookaheadMs ?? DEADLINE_CLOCK_LOOKAHEAD_MS;
   const policy = deps.policy();
@@ -258733,14 +259082,14 @@ async function deadlineClockTick(deps, dedupe) {
     if (overdue > result.oldestDueDelayMs) result.oldestDueDelayMs = overdue;
     const phase = overdue >= 0 ? "due" : "early";
     const bucket = `${c.workId}@${deadline}@${phase}`;
-    if (dedupe.has(c.workorderId, bucket)) {
+    if (dedupe2.has(c.workorderId, bucket)) {
       result.deduped++;
       continue;
     }
     const buckets = toPing.get(c.workorderId) ?? [];
     buckets.push(bucket);
     toPing.set(c.workorderId, buckets);
-    dedupe.mark(c.workorderId, bucket);
+    dedupe2.mark(c.workorderId, bucket);
   }
   if (page.nextCursor) result.backlog = toPing.size + result.deduped;
   for (const [workorderId, buckets] of toPing) {
@@ -258749,7 +259098,7 @@ async function deadlineClockTick(deps, dedupe) {
       result.pinged++;
     } catch (err) {
       result.failed++;
-      for (const b2 of buckets) dedupe.unmark(workorderId, b2);
+      for (const b2 of buckets) dedupe2.unmark(workorderId, b2);
       deps.log?.(`[deadline-clock] ping ${workorderId} \u5931\u8D25: ${String(err)}`);
     }
   }
@@ -258913,6 +259262,7 @@ var init_src11 = __esm({
     init_auth();
     init_sender();
     init_routes7();
+    init_runtime_activity();
     init_runtime_drift();
     init_runtime_tenancy();
     init_types4();
@@ -259278,12 +259628,12 @@ ${detail}`.slice(0, 4200) } : {}
 init_src11();
 init_src();
 var BRAINSTORM_LEGACY_LINE = "\u8BF7\u76F4\u63A5\u56DE\u7B54\u7528\u6237\u95EE\u9898\u3002\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539 artifact\u3002";
-var BRAINSTORM_ARTIFACT_GUARD = "\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u521B\u5EFA\u6216\u4FEE\u6539 artifact\u3002";
+var BRAINSTORM_ARTIFACT_GUARD = "\u9664\u975E\u7528\u6237\u660E\u786E\u8981\u6C42\u5199\u5165\u7CFB\u7EDF\uFF0C\u5426\u5219\u4E0D\u8981\u76F4\u63A5\u521B\u5EFA\u6216\u4FEE\u6539 artifact\uFF1B\u5DE5\u5355\u8349\u6848\u8981\u7528\u6237\u786E\u8BA4\u624D\u751F\u6548\uFF0C\u4E0D\u5728\u6B64\u5217\u3002";
 var OUTPUTS_CONVENTION = [
   "## \u4EA7\u51FA\u653E\u54EA",
   "",
   "\u8981\u7ED9\u7528\u6237\u770B\u7684\u6210\u54C1\u6587\u4EF6\uFF0C**\u653E\u8FDB\u5DE5\u4F5C\u76EE\u5F55\u4E0B\u7684 `outputs/`**\uFF08\u53EF\u4EE5\u6709\u5B50\u76EE\u5F55\uFF0C\u7ED3\u6784\u81EA\u5DF1\u5B9A\uFF09\u3002",
-  "\u53EA\u6709\u8FD9\u4E2A\u76EE\u5F55\u91CC\u7684\u6587\u4EF6\u4F1A\u5728\u5BF9\u8BDD\u91CC\u663E\u793A\u6210\u53EF\u70B9\u5F00\u7684\u6587\u4EF6\u5361\u7247\uFF1B\u5199\u5728\u522B\u5904\u7684\u7528\u6237\u770B\u4E0D\u89C1\u3002",
+  "\u53EA\u6709\u8FD9\u4E2A\u76EE\u5F55\u91CC\u7684\u6587\u4EF6\u4F1A\u5728\u5BF9\u8BDD\u91CC\u663E\u793A\u6210\u53EF\u70B9\u5F00\u7684\u6587\u4EF6\u5361\u7247\uFF1B\u5199\u5728\u522B\u5904\u7684\u4E0D\u51FA\u5361\uFF0C\u7528\u6237\u53EA\u80FD\u53BB\u53F3\u4FA7\u300C\u76F8\u5173\u6587\u4EF6\u300D\u5217\u8868\u91CC\u81EA\u5DF1\u7FFB\u3002",
   "\u4E2D\u95F4\u4EA7\u7269\u3001\u4E34\u65F6\u811A\u672C\u3001\u8349\u7A3F\u4E0D\u8981\u653E\u8FD9\u91CC\u2014\u2014\u653E\u8FDB\u53BB\u5C31\u4F1A\u6446\u5230\u7528\u6237\u9762\u524D\u3002"
 ].join("\n");
 function buildChatTaskHeader(input) {
@@ -261728,6 +262078,11 @@ async function startServe(opts) {
   }) : dispatchLedger;
   const companyRegistryFor = async (companyId) => pgPool ? (await openCompanyPlane(companyId)).overlay : scopedRegistryFor(companyId);
   const defaultRegistry = await companyRegistryFor(defaultCompanyId);
+  const companyLiveTypeDefs = async (companyId) => {
+    if (!pgPool || !cutoverStore) return null;
+    if (!cutoverStore.readsCompanySchema(await cutoverStore.get(companyId, "types"))) return null;
+    return buildLiveSchema(await (await openCompanyPlane(companyId)).types.list());
+  };
   const engineRouter = new CompanyEngineRouter({
     // ★ 字节柜按公司取：`gc` 用的就是 `engine.blobs`，共享柜 + 单公司可达集 = 删光别家。
     defaultEngine: { kernel: defaultCompanyKernel, oplog, blobs: await blobStoreFor(defaultCompanyId), registry: defaultRegistry, assets },
@@ -261743,6 +262098,7 @@ async function startServe(opts) {
         // ★ 同默认公司：漏了这里，非默认公司的引擎照旧按代码默认 30min 判超时（策略文件形同虚设）。
         policy: () => activeTimeoutPolicy
       });
+      for (const d of await companyLiveTypeDefs(companyId) ?? []) engine2.kernel.setType(d);
       const registry2 = await companyRegistryFor(companyId);
       await ensureCompanyActors(controlPlaneStore, companyId, registry2);
       await ensureDefaultExpertTeam(registry2);
@@ -262279,7 +262635,7 @@ async function startServe(opts) {
             () => [engine2.kernel],
             async () => {
               if (primary) {
-                for (const d of await store.list()) engine2.kernel.setType(d);
+                for (const d of await companyLiveTypeDefs(cid) ?? []) engine2.kernel.setType(d);
                 return;
               }
               await rebuildLiveSchema();
@@ -262310,6 +262666,12 @@ async function startServe(opts) {
         resolveMemberRole: async (companyId, actorId) => {
           const members = await listCompanyMembers(companyId);
           return members.find((m2) => m2.actorId === actorId)?.role;
+        },
+        // 详情页「运行次数 / 最近工作时间」与用量 tab 按实例读 run 行：落到这家公司 trace 当前的读落点
+        //（切走了读公司 schema，没切走读 legacy）。dev 文件态的 FileTraceStore 同样实现了这两个读。
+        runtimeRuns: async (companyId) => {
+          const store = await traceStoreFor(companyId);
+          return isRuntimeRunReader(store) ? store : null;
         }
       }),
       collabDomain({
@@ -264925,7 +265287,7 @@ async function startServe(opts) {
       } else if (!deadlineStoreOf(newEngine.kernel)?.listOpenWorkDeadlines) {
         console.warn("[deadline-clock] engine store \u672A\u5B9E\u73B0 listOpenWorkDeadlines\uFF0C\u65F6\u949F\u672A\u542F\u52A8\u2014\u2014deadline \u65E0\u6700\u8FDF\u89E6\u53D1\u4FDD\u8BC1");
       } else {
-        const dedupe = new DeadlineDedupe();
+        const dedupe2 = new DeadlineDedupe();
         const clockCursors = /* @__PURE__ */ new Map();
         let clockTicking = false;
         void (async () => {
@@ -264975,7 +265337,7 @@ async function startServe(opts) {
             batchLimit: DEADLINE_CLOCK_BATCH_LIMIT,
             ...cursor ? { cursor } : {},
             log: (m2) => console.warn(m2)
-          }, dedupe);
+          }, dedupe2);
           clockCursors.set(companyId, r.nextCursor);
           if (r.pinged > 0) {
             console.log(`[deadline-clock] [${companyId}] \u6295\u51FA ${r.pinged} \u4E2A workorder.ping\uFF08\u53BB\u91CD ${r.deduped}\u3001\u8C41\u514D ${r.exempt}\uFF09`);
@@ -270610,7 +270972,7 @@ ${round.text}`);
         break;
       }
       println(`\u5DF2\u4EA4\u7ED9 ${to} \u53BB\u505A\uFF08\u5F02\u6B65\uFF0C\u4E0D\u7528\u7B49\uFF09\u3002`);
-      println(`  \u77ED\u540D\uFF08--continue \u7528\u8FD9\u4E2A\uFF09\uFF1A${started.label}`);
+      println(`  \u77ED\u540D\uFF08--follow-up \u7528\u8FD9\u4E2A\uFF09\uFF1A${started.label}`);
       println(`  delegationId\uFF1A${started.delegationId}`);
       if (started.attachedFiles?.length) println(`  \u5E26\u8FC7\u53BB\u7684\u6587\u4EF6\uFF1A${started.attachedFiles.join("\u3001")}`);
       println("\u7ED3\u679C\u5E72\u5B8C\u4E86\u4F1A\u81EA\u5DF1\u56DE\u5230\u8FD9\u6761\u5BF9\u8BDD\u3002\u8FD9\u4E00\u8F6E\u5148\u6536\u5C3E\u2014\u2014\u53EF\u4EE5\u987A\u624B\u8DDF\u7528\u6237\u8BF4\u4E00\u53E5\u4F60\u628A\u8FD9\u4EF6\u4E8B\u6D3E\u51FA\u53BB\u4E86\u3002");
@@ -273393,7 +273755,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.27" : "dev";
+var PKG_VERSION = true ? "2.2.29" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis_test_v2",
-  "version": "2.2.27",
+  "version": "2.2.29",
   "description": "Oasis node daemon + CLI — background daemon, auto-start, full server CLI",
   "bin": {
     "oasis": "./dist/index.js"
@@ -26,6 +26,6 @@
     "node": ">=20"
   },
   "oasisRelease": {
-    "sourceHead": "bab451bba29c8bbdea05ec83bdc381b8b6bcceeb"
+    "sourceHead": "68eff586a82e2fd668f109ffbdd672ebf77844ac"
   }
 }