oasis_test_v2 2.2.34 → 2.2.35

package/dist/index.js

@@ -149,6 +149,9 @@ function normalizeGitRemote(remote) {
 function projectActorKind(actorId) {
   return actorId.startsWith("actor:human:") ? "human" : "agent";
 }
+function projectIdFromUuid(uuid2) {
+  return `proj_${uuid2.replace(/-/g, "").slice(0, 8)}`;
+}
 var init_project = __esm({
   "../contract/src/project.ts"() {
     "use strict";
@@ -205734,10 +205737,10 @@ async function startOasisServer(opts) {
               ...fp(p2)
             }))
           ] : [];
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID42 } = await import("node:crypto");
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID42(),
               chatSessionId: input.chatSessionId,
               text: input.text,
               createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -205770,11 +205773,11 @@ async function startOasisServer(opts) {
               ...f2?.mtime ? { srcMtime: f2.mtime } : {}
             };
           });
-          const { randomUUID: randomUUID41 } = await import("node:crypto");
+          const { randomUUID: randomUUID42 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID41(),
+              id: randomUUID42(),
               chatSessionId: input.chatSessionId,
               text: "",
               createdAt: nowIso,
@@ -207102,7 +207105,7 @@ async function startOasisServer(opts) {
             const openRoom = async () => {
               let chatSessionId2;
               if (chatStore) {
-                const { randomUUID: randomUUID41 } = await import("node:crypto");
+                const { randomUUID: randomUUID42 } = await import("node:crypto");
                 const known = discussSessions.get(itemKey);
                 const knownSession = known ? await chatStore.getSession(known) : null;
                 if (knownSession && knownSession.workspace === ctx.workspace && knownSession.humanActorId === ctx.ownerId && (!body2.escalationId || knownSession.escalationId === body2.escalationId)) chatSessionId2 = known;
@@ -207111,7 +207114,7 @@ async function startOasisServer(opts) {
                   chatSessionId2 = existing[0]?.id;
                 }
                 if (!chatSessionId2) {
-                  chatSessionId2 = randomUUID41();
+                  chatSessionId2 = randomUUID42();
                   const now = (/* @__PURE__ */ new Date()).toISOString();
                   const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                   const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -207980,14 +207983,14 @@ ${composed}`;
                     runtimeSessionId: session.nativeSessionId ?? session.id
                   }).catch(() => void 0);
                 }
-                const { randomUUID: randomUUID42 } = await import("node:crypto");
+                const { randomUUID: randomUUID43 } = await import("node:crypto");
                 const persistAttachments = effectiveAttachments.map((a) => ({
                   name: a.name,
                   ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                   ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                 }));
                 await chatStore.appendMessage({
-                  id: randomUUID42(),
+                  id: randomUUID43(),
                   sessionId: persistTarget.id,
                   role: "user",
                   content: persistedUserMessage,
@@ -208462,8 +208465,8 @@ ${composed}`;
               }
             }
             const { spawn: spawn10 } = await import("node:child_process");
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const sessionId = body2.sessionId ?? randomUUID41();
+            const { randomUUID: randomUUID42 } = await import("node:crypto");
+            const sessionId = body2.sessionId ?? randomUUID42();
             const args = [
               "-p",
               body2.message,
@@ -208759,8 +208762,8 @@ ${composed}`;
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
               return;
             }
-            const { randomUUID: randomUUID41 } = await import("node:crypto");
-            const state = randomUUID41();
+            const { randomUUID: randomUUID42 } = await import("node:crypto");
+            const state = randomUUID42();
             const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
             const manifest = buildAppManifest({
               employeeSlug: nameSlug,
@@ -212824,6 +212827,19 @@ var init_stats = __esm({
   }
 });
 
+// ../server/src/domains/projects/project-id.ts
+function randomProjectId() {
+  return projectIdFromUuid((0, import_node_crypto41.randomUUID)());
+}
+var import_node_crypto41;
+var init_project_id = __esm({
+  "../server/src/domains/projects/project-id.ts"() {
+    "use strict";
+    import_node_crypto41 = require("node:crypto");
+    init_src();
+  }
+});
+
 // ../server/src/domains/projects/service.ts
 function sanitizeCreatorActorId(raw) {
   const id = raw?.trim();
@@ -212965,10 +212981,6 @@ function namedError(name, message) {
   err.name = name;
   return err;
 }
-function slugProjectId(name) {
-  const slug6 = name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
-  return `proj_${slug6 || Date.now()}`;
-}
 function dirname24(path41) {
   const norm = path41.replace(/^\/+|\/+$/g, "");
   const idx = norm.lastIndexOf("/");
@@ -213165,6 +213177,7 @@ var init_service4 = __esm({
     init_uncategorized_project();
     init_workorders();
     init_stats();
+    init_project_id();
     init_node_state();
     DEFAULT_AGENT_ACTOR = "actor:agent:system";
     CHAT_FOLDER_TASK_LABEL = "\u5BF9\u8BDD";
@@ -213454,9 +213467,14 @@ var init_service4 = __esm({
       async createProject(input) {
         if (!input.name.trim()) throw new Error("project name is required");
         const now = (/* @__PURE__ */ new Date()).toISOString();
-        const id = input.id ?? slugProjectId(input.name);
-        const existing = await this.projects.getProject(id);
-        if (existing) return this.withProjectDerivedState(existing);
+        let id;
+        if (input.id !== void 0 && input.id.trim() !== "") {
+          id = input.id;
+          const existing = await this.projects.getProject(id);
+          if (existing) return this.withProjectDerivedState(existing);
+        } else {
+          id = await this.allocateProjectId();
+        }
         const createdById = sanitizeCreatorActorId(input.createdBy);
         const project = {
           id,
@@ -213492,6 +213510,14 @@ var init_service4 = __esm({
         }
         return await this.getProject(id) ?? project;
       }
+      /** 给「没带 id 的新建」挑一个本公司还没用过的随机 id（`randomProjectId`）；连撞几次说明生成器坏了，直接报错。 */
+      async allocateProjectId() {
+        for (let attempt = 0; attempt < 5; attempt++) {
+          const id = randomProjectId();
+          if (!await this.projects.getProject(id)) return id;
+        }
+        throw new Error("project id allocation failed: random ids kept colliding");
+      }
       async getProject(id) {
         if (isUncategorizedProjectId(id)) return this.buildUncategorizedProject();
         const project = await this.projects.getProject(id);
@@ -214834,12 +214860,12 @@ var init_service4 = __esm({
 });
 
 // ../server/src/dev-store.ts
-var import_node_crypto41, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto42, fs20, path21, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
-    import_node_crypto41 = require("node:crypto");
+    import_node_crypto42 = require("node:crypto");
     fs20 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     init_src();
@@ -214893,7 +214919,7 @@ var init_dev_store = __esm({
         return path21.join(this.dir, hash2);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto41.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto42.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash2);
         if (!fs20.existsSync(file)) fs20.writeFileSync(file, bytes2);
         return hash2;
@@ -216093,7 +216119,7 @@ var init_company_engine_router = __esm({
 
 // ../server/src/skill-market-client.ts
 function digestOf2(bytes2) {
-  return `sha256:${(0, import_node_crypto42.createHash)("sha256").update(bytes2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto43.createHash)("sha256").update(bytes2).digest("hex")}`;
 }
 function createSkillMarketClientFromEnv(env = process.env) {
   const base = env["SKILL_MARKET_BASE_URL"];
@@ -216104,11 +216130,11 @@ function createSkillMarketClientFromEnv(env = process.env) {
 function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var import_node_crypto42, DisabledSkillMarketClient, HttpSkillMarketClient;
+var import_node_crypto43, DisabledSkillMarketClient, HttpSkillMarketClient;
 var init_skill_market_client = __esm({
   "../server/src/skill-market-client.ts"() {
     "use strict";
-    import_node_crypto42 = require("node:crypto");
+    import_node_crypto43 = require("node:crypto");
     init_src();
     DisabledSkillMarketClient = class {
       async listSkills(_input) {
@@ -217030,11 +217056,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto43, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto44, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
+    import_node_crypto44 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217161,7 +217187,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto43.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto44.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -217309,11 +217335,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto44, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto45, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     init_zod();
     init_src5();
     init_config_audit();
@@ -217338,7 +217364,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto44.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto45.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -219589,7 +219615,7 @@ function wireRecoveredChatTurn(deps) {
       const segText = itemLedger.projectContent();
       const segParts = collectedParts();
       const closingId = currentMsgId;
-      const nextId = (0, import_node_crypto45.randomUUID)();
+      const nextId = (0, import_node_crypto46.randomUUID)();
       currentMsgId = nextId;
       itemLedger.beginSegment();
       live.setAssistantMessageId(nextId);
@@ -219603,7 +219629,7 @@ function wireRecoveredChatTurn(deps) {
           ...segParts.length ? { parts: segParts } : {}
         }).catch(() => void 0);
         await store.appendMessage({
-          id: (0, import_node_crypto45.randomUUID)(),
+          id: (0, import_node_crypto46.randomUUID)(),
           sessionId: plan.chatSessionId,
           role: "user",
           content: text5,
@@ -220042,11 +220068,11 @@ async function recoverChatTurnsAcrossCompanies(deps) {
   }
   return { ...result, recovered };
 }
-var import_node_crypto45, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
+var import_node_crypto46, asObj3, partsOf, maxPartSeq, exitFailed, exitErrorText, runTerminalPatch;
 var init_chat_recovery = __esm({
   "../server/src/chat-recovery.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_chat_parts();
     init_sink();
     init_resilient_appender();
@@ -220076,8 +220102,8 @@ var init_chat_recovery = __esm({
 
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto46.randomBytes)(16);
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto47.randomBytes)(16);
+  const dk = (0, import_node_crypto47.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -220094,8 +220120,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto46.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto46.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto47.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto47.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -220103,17 +220129,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto47.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto46.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto47.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto46.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto47.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -220125,21 +220151,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto46.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto47.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto46.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto47.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto46.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto47.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto46, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto47, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto46 = require("node:crypto");
+    import_node_crypto47 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -221289,16 +221315,16 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto47.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto48.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto47, REDACTED_MARKER, ActorsService, mask, changedKeys;
+var import_node_crypto48, REDACTED_MARKER, ActorsService, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
-    import_node_crypto47 = require("node:crypto");
+    import_node_crypto48 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -221862,7 +221888,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path41, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path41, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -222514,15 +222540,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto47.randomBytes)(12);
-        const cipher = (0, import_node_crypto47.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto48.randomBytes)(12);
+        const cipher = (0, import_node_crypto48.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc4 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc4.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto47.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto48.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -223140,7 +223166,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto49.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -223165,11 +223191,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto49.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto49.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223190,11 +223216,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto48.createHash)("sha256");
+    const hasher = (0, import_node_crypto49.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto48.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto49.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -223214,7 +223240,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto49.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223238,7 +223264,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto48.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto49.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -223271,7 +223297,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path41,
     content: content3,
-    blobHash: (0, import_node_crypto48.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto49.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -223288,11 +223314,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto48;
+var import_node_crypto49;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto48 = require("node:crypto");
+    import_node_crypto49 = require("node:crypto");
   }
 });
 
@@ -224803,7 +224829,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto49.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto50.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -224843,11 +224869,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.isCompanyManager ? { isCompanyManager: opts.isCompanyManager } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
-var import_node_crypto49;
+var import_node_crypto50;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto49 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -225222,7 +225248,7 @@ async function findMaterializedAttachmentCopies(messageItems, workdirItems, read
       if (!result?.ok) continue;
       const bytes2 = Buffer.from(result.contentBase64, "base64");
       if (bytes2.length !== file.size) continue;
-      const hash2 = (0, import_node_crypto50.createHash)("sha256").update(bytes2).digest("hex");
+      const hash2 = (0, import_node_crypto51.createHash)("sha256").update(bytes2).digest("hex");
       if (candidates.some((attachment) => attachment.blob_ref === hash2)) copies.add(file.path);
     } catch {
     } finally {
@@ -225231,11 +225257,11 @@ async function findMaterializedAttachmentCopies(messageItems, workdirItems, read
   }
   return copies;
 }
-var import_node_crypto50, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
+var import_node_crypto51, WORKDIR_WALK_MAX_DEPTH, WORKDIR_WALK_MAX_ENTRIES, WORKDIR_WALK_MAX_LIST_CALLS, WORKDIR_WALK_BUDGET_MS, WORKDIR_TREE_MAX_ENTRIES;
 var init_files_view = __esm({
   "../server/src/domains/chat-sessions/files-view.ts"() {
     "use strict";
-    import_node_crypto50 = require("node:crypto");
+    import_node_crypto51 = require("node:crypto");
     init_chat_attachment_files();
     init_src();
     WORKDIR_WALK_MAX_DEPTH = 3;
@@ -228626,11 +228652,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto51, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto52, import_node_fs14, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
     import_node_fs14 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -228663,7 +228689,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto51.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto52.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -228786,7 +228812,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto51.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto52.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -229737,13 +229763,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs15, import_node_path20, import_node_crypto52, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs15, import_node_path20, import_node_crypto53, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs15 = __toESM(require("node:fs"), 1);
     import_node_path20 = __toESM(require("node:path"), 1);
-    import_node_crypto52 = __toESM(require("node:crypto"), 1);
+    import_node_crypto53 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -229761,7 +229787,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto52.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto53.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -231007,11 +231033,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto53, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto54, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -231103,7 +231129,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto54.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -231312,7 +231338,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto54.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -231443,7 +231469,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto53.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto54.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -231500,7 +231526,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto53.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto54.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -231738,11 +231764,11 @@ var init_service6 = __esm({
 });
 
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto54, MemberOffboardingService;
+var import_node_crypto55, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto55 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -231814,7 +231840,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto54.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto55.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -232324,18 +232350,18 @@ var init_routes6 = __esm({
 
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto55.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto56.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto55.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto56.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto55, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto56, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -232360,7 +232386,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto55.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto56.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -232780,7 +232806,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope = companyId?.trim();
-  const suffix = scope ? `c${(0, import_node_crypto56.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope ? `c${(0, import_node_crypto57.createHash)("sha256").update(`${gatewayUrl}\0${scope}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -233109,12 +233135,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto56;
+var import_node_crypto57;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto56 = require("node:crypto");
+    import_node_crypto57 = require("node:crypto");
   }
 });
 
@@ -233675,7 +233701,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto57.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto58.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -233858,13 +233884,13 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto57.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto58.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto57, import_node_fs16, import_node_url6, import_node_path21;
+var import_node_crypto58, import_node_fs16, import_node_url6, import_node_path21;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
     import_node_fs16 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path21 = require("node:path");
@@ -235055,7 +235081,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs26.statSync(absBundle).size;
-  const digest = (0, import_node_crypto58.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto59.createHash)("sha256").update(fs26.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -235151,12 +235177,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto58, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto59, fs26, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
     fs26 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path25 = __toESM(require("node:path"), 1);
@@ -235176,7 +235202,7 @@ var init_readonly_bundle = __esm({
 
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto59.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto60.randomUUID)().slice(0, 8)}`);
   return async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -235269,7 +235295,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key) {
-  return `ws:wo-${(0, import_node_crypto59.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto60.createHash)("sha256").update(key).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(kernel, workspace) {
   const arts = [...kernel.model.artifacts.values()].filter((a) => a.workspace === workspace);
@@ -235282,11 +235308,11 @@ function existingWorkorder(kernel, workspace) {
     spawned: arts.map((a) => ({ id: a.id, type: a.type, owner: a.owner }))
   };
 }
-var import_node_crypto59, enc2;
+var import_node_crypto60, enc2;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     init_uncategorized_project();
     init_src();
     init_planner();
@@ -236716,12 +236742,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto60, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto61, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service8 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
     init_src5();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -236952,7 +236978,7 @@ var init_service8 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto60.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto61.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -237879,6 +237905,10 @@ var init_project_bundle = __esm({
 });
 
 // ../server/src/domains/chat-sessions/index.ts
+function sessionProjectIdToStore(projectId2) {
+  if (typeof projectId2 !== "string" || projectId2.trim() === "") return null;
+  return isUncategorizedProjectId(projectId2) ? null : projectId2;
+}
 function parseDurationMs(raw) {
   if (!raw) return null;
   const m2 = /^(\d+)\s*(ms|s|m|h|d)?$/i.exec(raw.trim());
@@ -238052,7 +238082,7 @@ function createChatSessionsDomain(opts) {
       if (!text5.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto61.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto62.randomUUID)()}`;
       drafts.set(id, { text: text5, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -238104,7 +238134,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = await currentRuntimeId(body2.aiActorId) ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto62.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -238117,7 +238147,7 @@ function createChatSessionsDomain(opts) {
         // 决策 0030 缝合：绑定是会话的语义属性（工单频道/问题会话给、脑暴省略）——发消息端据它带 workspace，
         // 两个入口页面行为一致。区别于 linkWorkOrder（出处关联，建单脑暴也有、不构成绑定）。
         workspace: body2.workspace ?? null,
-        projectId: body2.projectId ?? null,
+        projectId: sessionProjectIdToStore(body2.projectId),
         // 会话级模型覆盖（口径 A）：建会话时就带上选择；空串/空白归 null = 沿用旧解析，不写员工全局配置。
         model: normalizeModel(body2.model),
         // ADR-0058：分析会话指向被分析 run；非空即"这是分析会话"（不进主聊天列表、进 trace 分析视图）。
@@ -238186,7 +238216,7 @@ function createChatSessionsDomain(opts) {
         ...body2.runtimeId !== void 0 ? { runtimeId: body2.runtimeId } : {},
         ...Object.prototype.hasOwnProperty.call(body2, "runtimeSessionId") ? { runtimeSessionId: body2.runtimeSessionId } : {},
         ...body2.title !== void 0 ? { title: body2.title } : {},
-        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: body2.projectId } : {},
+        ...Object.prototype.hasOwnProperty.call(body2, "projectId") ? { projectId: sessionProjectIdToStore(body2.projectId) } : {},
         // 会话级模型覆盖：显式传 null / 空串 = 清除覆盖（回到旧解析）；不传这一项 = 不动它。
         ...Object.prototype.hasOwnProperty.call(body2, "model") ? { model: normalizeModel(body2.model) } : {},
         // 只有显式传了才写——改标题 / 换项目 / 换模型都不是「有新动静」，不该顶掉列表顺序与已读水位。
@@ -238210,7 +238240,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto62.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -238251,7 +238281,7 @@ function createChatSessionsDomain(opts) {
       const known = key ? cur.find((x2) => x2.clientKey === key) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store.enqueuePendingMessage({
-        id: (0, import_node_crypto61.randomUUID)(),
+        id: (0, import_node_crypto62.randomUUID)(),
         chatSessionId: sid,
         text: text5,
         ...attachments.length ? { attachments } : {},
@@ -238702,11 +238732,11 @@ function createChatSessionsDomain(opts) {
     });
   };
 }
-var import_node_crypto61, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
+var import_node_crypto62, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS;
 var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     init_src();
     init_chat_session();
     init_files_view();
@@ -238723,6 +238753,7 @@ var init_chat_sessions2 = __esm({
     init_company_data_store_router();
     init_workorder_terminal();
     init_session_workdir();
+    init_uncategorized_project();
     init_project_bundle();
     DEFAULT_SNAPSHOT_ITEMS = 400;
     MAX_SNAPSHOT_ITEMS = 1e3;
@@ -240110,7 +240141,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto62.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto63.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -240166,11 +240197,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto62, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto63, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service9 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -240984,11 +241015,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto63.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto64.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto63.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto64.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -241018,11 +241049,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto63, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto64, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -242178,7 +242209,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto64.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto65.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -242195,11 +242226,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto64;
+var import_node_crypto65;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -242313,17 +242344,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto65.createHash)("sha256").update(canonical).digest("hex");
+  return (0, import_node_crypto66.createHash)("sha256").update(canonical).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto65.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto66.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto65, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto66, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -242534,7 +242565,7 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto66.randomUUID)();
+  const requestId = (0, import_node_crypto67.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve10) => {
@@ -242547,11 +242578,11 @@ function remoteAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs) {
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve10, timer });
   });
 }
-var import_node_crypto66, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto67, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_IDS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 500;
@@ -242901,7 +242932,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto66.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto67.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -243138,7 +243169,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto66.randomUUID)();
+        const requestId = (0, import_node_crypto67.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve10) => {
@@ -243246,13 +243277,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto67, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
+var import_node_crypto68, sha, enc3, dec, MirrorEngine, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto67.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto68.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc3 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -243499,11 +243530,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto68, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto69, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_src5();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -243772,7 +243803,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto68.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto69.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -244151,8 +244182,8 @@ ${ctx.nodeFault}
             this.deps.log?.(`[coordinator] ${workspace} \u5168\u5C40\u4E0A\u4E0B\u6587\u8BFB\u53D6\u5931\u8D25\uFF0C\u7EE7\u7EED\u6CBF\u7528\u539F\u534F\u8C03\u8005\u4EFB\u52A1\uFF1A${String(error2)}`);
           }
         }
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto68.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto68.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto69.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto69.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           task,
           ``,
@@ -244196,7 +244227,7 @@ ${ctx.nodeFault}
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto68.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto69.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -244401,11 +244432,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto69, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto70, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -244585,7 +244616,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash2 = (0, import_node_crypto69.createHash)("sha256").update(bytes2).digest("hex");
+        const hash2 = (0, import_node_crypto70.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash2, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -253212,11 +253243,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto70, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
+var import_node_crypto71, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -253433,7 +253464,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto70.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto71.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -253699,11 +253730,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto71, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto72, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -253913,7 +253944,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto71.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto72.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -255360,14 +255391,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto72.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto73.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto72, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto73, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -255441,7 +255472,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto74.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -255623,11 +255654,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto73, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto74, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -255707,11 +255738,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto74, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto75, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -256097,7 +256128,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto74.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto75.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -258694,7 +258725,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto75.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto76.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -259082,11 +259113,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto75, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto76, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -259318,8 +259349,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto76.randomBytes)(12);
-  const cipher = (0, import_node_crypto76.createCipheriv)("aes-256-gcm", bytes(key), iv);
+  const iv = (0, import_node_crypto77.randomBytes)(12);
+  const cipher = (0, import_node_crypto77.createCipheriv)("aes-256-gcm", bytes(key), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -259329,7 +259360,7 @@ function openSnapshot(snapshot, key) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto76.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto77.createDecipheriv)("aes-256-gcm", bytes(key), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -259337,11 +259368,11 @@ function openSnapshot(snapshot, key) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto76, PREFIX3, bytes, aad2;
+var import_node_crypto77, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key) => {
       const value2 = Buffer.from(key);
@@ -261588,20 +261619,20 @@ var fs45 = __toESM(require("node:fs"));
 var os14 = __toESM(require("node:os"));
 var path40 = __toESM(require("node:path"));
 var import_node_child_process23 = require("node:child_process");
-var import_node_crypto83 = require("node:crypto");
+var import_node_crypto84 = require("node:crypto");
 
 // ../cli/src/cli.ts
 var fs40 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path35 = __toESM(require("node:path"), 1);
-var import_node_crypto81 = require("node:crypto");
+var import_node_crypto82 = require("node:crypto");
 
 // ../cli/src/serve.ts
 var fs34 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto77 = require("node:crypto");
+var import_node_crypto78 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
 // ../cli/src/artifact-discovery-source.ts
@@ -262347,7 +262378,7 @@ init_src9();
 init_src();
 init_trajectory();
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto77.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto78.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -262547,7 +262578,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path29.join(repoRoot, "node_modules/.bin/tsx");
   const main = path29.join(repoRoot, "packages/cli/src/main.ts");
-  const key = (0, import_node_crypto77.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key = (0, import_node_crypto78.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path29.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key}`);
   let dir;
@@ -262928,7 +262959,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto77.randomUUID)();
+    const requestId = (0, import_node_crypto78.randomUUID)();
     const task = new Promise((resolve10) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -263680,7 +263711,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto77.randomUUID)(),
+                id: (0, import_node_crypto78.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -263726,7 +263757,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto77.randomUUID)();
+        const sessionId = (0, import_node_crypto78.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -264771,7 +264802,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto77.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto78.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -265673,10 +265704,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto77.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid2(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto78.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto77.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto77.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? `chat-run:${deterministicUuid2(`chat-trace:${requestDispatchId}`)}` : `chat-run:${(0, import_node_crypto78.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid2(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto78.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           return {
@@ -266803,7 +266834,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto78.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -266888,7 +266919,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto77.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto78.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -267266,7 +267297,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto77.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto78.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -269214,7 +269245,7 @@ var SessionProcessState = class {
 // ../cli/src/daemon/ws-client.ts
 init_wrapper();
 var import_node_os9 = require("node:os");
-var import_node_crypto78 = require("node:crypto");
+var import_node_crypto79 = require("node:crypto");
 init_src8();
 init_src6();
 
@@ -269986,7 +270017,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto78.randomUUID)();
+    const requestId = (0, import_node_crypto79.randomUUID)();
     return new Promise((resolve10, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -270388,7 +270419,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process21 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
-var import_node_crypto79 = require("node:crypto");
+var import_node_crypto80 = require("node:crypto");
 var import_node_os12 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -270454,7 +270485,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto79.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto80.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -271465,7 +271496,7 @@ var COMMAND_DECLS = {
     flags: [
       { name: "name", desc: "\u9879\u76EE\u540D", required: true },
       { name: "goal", desc: "\u9879\u76EE\u76EE\u6807" },
-      { name: "slug", desc: "URL slug" },
+      { name: "slug", desc: "\u81EA\u5B9A\u4E49\u9879\u76EE id\uFF08\u53EF\u9009\uFF09\u3002\u4E0D\u7ED9\u5219\u968F\u673A\u751F\u6210 proj_xxxxxxxx\uFF1B\u7ED9\u4E86\u4E14\u8BE5 id \u5DF2\u5B58\u5728\uFF0C\u8FD4\u56DE\u7684\u662F\u5DF2\u6709\u9879\u76EE\uFF08\u4F1A\u63D0\u793A\uFF09" },
       { name: "members", desc: "\u6210\u5458 JSON \u6570\u7EC4" }
     ],
     examples: ['oasis project create --name "My Project" --goal "\u6784\u5EFA\u534F\u4F5C\u5E73\u53F0"']
@@ -272225,13 +272256,13 @@ function ownFlagsFromDecl(command) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto80 = require("node:crypto");
+var import_node_crypto81 = require("node:crypto");
 var import_node_child_process22 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto80.createHash)("sha256").update(canonical).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto81.createHash)("sha256").update(canonical).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -272467,7 +272498,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto81.randomUUID)();
+  const waiterId = (0, import_node_crypto82.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -272890,7 +272921,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path35.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto81.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto82.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -273914,7 +273945,8 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         const name = need(flags, "name").trim();
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
-        const id = projectSlug(flags.get("slug") ?? name);
+        const slug6 = flags.get("slug");
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto82.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -273922,6 +273954,9 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
           ...flags.has("members") ? { member_ids: parseStringArrayFlag(flags.get("members"), "members") } : {}
         });
         println(JSON.stringify(result, null, 2));
+        if (typeof result?.name === "string" && result.name !== name) {
+          println(`\u26A0\uFE0F \u9879\u76EE id\u300C${result.project_id ?? id}\u300D\u5DF2\u88AB\u300C${result.name}\u300D\u5360\u7528\uFF0C\u4E0A\u9762\u8FD4\u56DE\u7684\u662F\u90A3\u4E2A\u5DF2\u6709\u9879\u76EE\uFF0C\u6CA1\u6709\u65B0\u5EFA\u3002\u6362\u4E00\u4E2A --slug \u6216\u53BB\u6389 --slug \u91CD\u8BD5\u3002`);
+        }
         break;
       }
       if (positional[0] === "member") {
@@ -275903,13 +275938,13 @@ var LEGACY_SYSTEMD_UNIT = "oasis-node.service";
 var LEGACY_LAUNCHD_LABEL = "com.oasis.node";
 
 // src/install.ts
-var import_node_crypto82 = require("node:crypto");
+var import_node_crypto83 = require("node:crypto");
 var fs44 = __toESM(require("node:fs"));
 var path39 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto82.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto83.createHash)("sha256").update(fs44.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -276032,7 +276067,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.34" : "dev";
+var PKG_VERSION = true ? "2.2.35" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -276317,7 +276352,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto83.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto84.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }