oasis_test_v2 2.2.7 → 2.2.8

package/dist/index.js

@@ -17406,6 +17406,7 @@ ${supplemental.taskAppend.trim()}
           ...Object.keys(jobEnv).length > 0 ? { env: jobEnv } : {},
           ...provisioned?.wrapperPaths && provisioned.wrapperPaths.length > 0 ? { wrapperPaths: provisioned.wrapperPaths } : {},
           ...provisioned?.requiredTools && provisioned.requiredTools.length > 0 ? { requiredTools: provisioned.requiredTools } : {},
+          ...provisioned?.requiredToolVersions && Object.keys(provisioned.requiredToolVersions).length > 0 ? { requiredToolVersions: provisioned.requiredToolVersions } : {},
           // 凭据本体随 job 下发，供**节点侧本机注入**（见上方 provision 注释）。
           ...provisioned?.connectorCreds && provisioned.connectorCreds.length > 0 ? { connectorCreds: provisioned.connectorCreds } : {},
           ...executionEnv !== void 0 ? { executionEnv } : {},
@@ -195837,7 +195838,15 @@ var init_service3 = __esm({
             ...companyId ? { companyId } : {},
             ...snapshot ? { parentConversationSnapshot: snapshot } : {},
             extraSystemPrompt: EXPERT_DELEGATION_SYSTEM_PROMPT,
-            ..._DelegationService.inboundBundle(inbound) ? { workspaceBundle: _DelegationService.inboundBundle(inbound) } : {}
+            ..._DelegationService.inboundBundle(inbound) ? { workspaceBundle: _DelegationService.inboundBundle(inbound) } : {},
+            /* 派发这一侧要拿它们建 `chat_items` 账本（见本文件 `DelegationDispatchRequest` 的注释）。
+               轮次口径与 `bindChildRunToPlaceholder` / `seedChildRoundRows` **逐字一致**：
+               `record.roundSummaries.length + 1`。三处一旦不同源，item 就会挂到上一轮那条回答行上。 */
+            assistantMessageId: childRoundMessageIds(
+              record8.childSessionId,
+              record8.roundSummaries.length + 1
+            ).placeholderId,
+            chatTurnId: turnId
           });
           outcomeSettled = true;
           await opts?.onDispatched?.().catch((err) => console.warn(`[delegation] \u5F85\u8F6C\u8FBE\u6807\u8BB0\u5DF2\u6D88\u8D39\u5931\u8D25\uFF08${record8.id}\uFF09: ${String(err)}`));
@@ -197101,7 +197110,11 @@ function toChatDispatchRequest(request2) {
     delegatedChildTurn: true,
     // §6.1.3 去程：`--file` 带来的字节就在这一格。**丢了它命令照样回 202**，
     // 而专家的工作区里什么都没有——这正是上一版真实发生过的形态。
-    ...request2.workspaceBundle ? { workspaceBundle: request2.workspaceBundle } : {}
+    ...request2.workspaceBundle ? { workspaceBundle: request2.workspaceBundle } : {},
+    // 这两格漏了同样**不报错**：子会话照跑、正文照回，只是 `chat_items` 的行没有 message_id、
+    // turnId 回落成 `chat-run-turn:<runId>`，右栏面板的增量流对不上轮——正是本文件存在的理由。
+    ...request2.assistantMessageId ? { assistantMessageId: request2.assistantMessageId } : {},
+    ...request2.chatTurnId ? { chatTurnId: request2.chatTurnId } : {}
   };
 }
 function applyWorkspaceBundle(target, bundle) {
@@ -197321,27 +197334,77 @@ var init_assembly = __esm({
 });
 
 // ../server/src/domains/delegations/child-live-turn.ts
-function registerDelegatedChildTurn(liveChat, childSessionId, session) {
+function registerDelegatedChildTurn(liveChat, childSessionId, session, deps = {}) {
+  const log3 = deps.log ?? ((m2) => console.warn(m2));
   const appendInput = session.appendInput;
-  if (typeof appendInput !== "function" || session.canAppendInput === false) return;
+  const canAppend = typeof appendInput === "function" && session.canAppendInput !== false;
+  const ledger = new ChatItemLedger({
+    ...deps.items ? { items: deps.items } : {},
+    sessionId: childSessionId,
+    turnId: deps.turnId ?? fallbackTurnId(session.runId),
+    ...session.runId ? { runId: session.runId } : {},
+    ...deps.assistantMessageId ? { messageId: deps.assistantMessageId } : {},
+    ...deps.versionSeed !== void 0 ? { versionSeed: deps.versionSeed } : {},
+    log: log3
+  });
   const ctrl = liveChat.start(childSessionId, {
     runtimeSessionId: session.id,
     ...session.runId ? { runId: session.runId } : {},
     kill: () => {
       void session.kill?.();
     },
-    appendInput: (input) => appendInput.call(session, input),
+    // 纪律 ①：插不进去的 runtime 也登记，只是这两格照实报。
+    ...canAppend && appendInput ? { appendInput: (input) => appendInput.call(session, input) } : {},
     // **每次现读**，不快照：一轮跑到收尾时 stdin 会先关，那之后 runtime 自己会回
     // `session-closing`，判断权本就该留在它那儿（同 `/api/chat` 那条路的写法）。
     get canAppendInput() {
-      return session.canAppendInput !== false;
+      return typeof session.appendInput === "function" && session.canAppendInput !== false;
+    }
+  }, { items: ledger });
+  if (deps.assistantMessageId) ctrl.setAssistantMessageId(deps.assistantMessageId);
+  const hasChannels = typeof session.onOutput === "function" || typeof session.onTelemetry === "function" || typeof session.onLiveEvent === "function";
+  const normalized4 = typeof session.onNormalizedProviderEvent === "function" ? {
+    onNormalizedProviderEvent: session.onNormalizedProviderEvent.bind(session),
+    finishTurn: (signal) => session.finishNormalizedTurn?.(signal)
+  } : hasChannels ? attachStreamNormalizer(
+    {
+      id: session.id,
+      onOutput: (cb) => session.onOutput?.(cb),
+      onTelemetry: (cb) => session.onTelemetry?.(cb),
+      onLiveEvent: (cb) => session.onLiveEvent?.(cb),
+      ...session.supportsLiveProtocol !== void 0 ? { supportsLiveProtocol: session.supportsLiveProtocol } : {}
+    },
+    {
+      providerName: deps.runtimeKind ?? "runtime",
+      fallbackTurnId: `oasis-turn:${session.runId ?? session.id}`
+    }
+  ) : null;
+  normalized4?.onNormalizedProviderEvent((event) => {
+    try {
+      ctrl.applyNormalizedEvent(event);
+    } catch {
     }
   });
-  void session.done.then(() => ctrl.finish("done"), () => ctrl.finish("error"));
+  const settle = async (signal) => {
+    try {
+      normalized4?.finishTurn(signal);
+    } catch {
+    }
+    try {
+      ledger.finish(signal);
+      await ledger.drain();
+    } catch (err) {
+      log3(`[delegation] \u5B50\u4F1A\u8BDD ${childSessionId} \u8D26\u672C\u6536\u5C3E\u5931\u8D25: ${String(err)}`);
+    }
+    ctrl.finish(signal === "completed" ? "done" : "error");
+  };
+  void session.done.then(() => settle("completed"), () => settle("failed"));
 }
 var init_child_live_turn = __esm({
   "../server/src/domains/delegations/child-live-turn.ts"() {
     "use strict";
+    init_src6();
+    init_chat_item_ledger();
   }
 });
 
@@ -197455,10 +197518,12 @@ var init_tool_home = __esm({
 });
 
 // ../connectors/src/_base/install.ts
-function installPlan(cmd, platform2, toolsPrefix) {
-  if (cmd === "lark-cli") {
+function installPlan(cmd, platform2, toolsPrefix, version2) {
+  const npmPkg = NPM_TOOL_PACKAGES[cmd];
+  if (npmPkg) {
     const npm = platform2 === "win32" ? "npm.cmd" : "npm";
-    return [{ file: npm, args: ["install", "-g", "--prefix", toolsPrefix, "@larksuite/cli"], ensureDir: toolsPrefix }];
+    const spec = version2 ? `${npmPkg}@${version2}` : npmPkg;
+    return [{ file: npm, args: ["install", "-g", "--prefix", toolsPrefix, spec], ensureDir: toolsPrefix }];
   }
   const pkg = cmd === "gh" ? { brew: "gh", apt: "gh", dnf: "gh", pacman: "github-cli", apk: "github-cli", winget: "GitHub.cli", choco: "gh", scoop: "gh" } : { brew: "git", apt: "git", dnf: "git", pacman: "git", apk: "git", winget: "Git.Git", choco: "git", scoop: "git" };
   if (platform2 === "darwin") {
@@ -197503,17 +197568,54 @@ function defaultDeps() {
     mkdirp: (dir) => {
       (0, import_node_fs9.mkdirSync)(dir, { recursive: true });
     },
-    log: (msg) => console.warn(msg)
+    log: (msg) => console.warn(msg),
+    installedVersion: async (pkg, prefix) => readInstalledVersion(pkg, prefix)
   };
 }
-async function ensureToolInstalled(cmd, deps = {}) {
+function readInstalledVersion(pkg, prefix) {
+  const parts = pkg.split("/");
+  for (const mid of [["lib", "node_modules"], ["node_modules"]]) {
+    const file = (0, import_node_path11.join)(prefix, ...mid, ...parts, "package.json");
+    if (!(0, import_node_fs9.existsSync)(file)) continue;
+    try {
+      const v2 = JSON.parse((0, import_node_fs9.readFileSync)(file, "utf8")).version;
+      if (typeof v2 === "string" && v2) return v2;
+    } catch {
+    }
+  }
+  return null;
+}
+async function alignToWantedVersion(cmd, wanted, d) {
+  if (alignedVersion.get(cmd) === wanted) return;
+  const pkg = NPM_TOOL_PACKAGES[cmd];
+  if (!pkg) return;
+  const installed = await d.installedVersion(pkg, d.toolsPrefix);
+  if (!installed) return;
+  if (installed === wanted) {
+    alignedVersion.set(cmd, wanted);
+    return;
+  }
+  const npm = d.platform === "win32" ? "npm.cmd" : "npm";
+  d.log(`[connector-install] ${cmd} ${installed} \u2192 ${wanted}\uFF08\u670D\u52A1\u7AEF\u767B\u8BB0\u7248\u672C\uFF09\uFF0C\u5B89\u88C5\u4E2D\u2026`);
+  try {
+    d.mkdirp(d.toolsPrefix);
+    await d.run(npm, ["install", "-g", "--prefix", d.toolsPrefix, `${pkg}@${wanted}`]);
+    alignedVersion.set(cmd, wanted);
+    d.log(`[connector-install] ${cmd} \u5DF2\u5BF9\u9F50\u5230 ${wanted}`);
+  } catch (err) {
+    d.log(`[connector-install] ${cmd} \u5BF9\u9F50\u5230 ${wanted} \u5931\u8D25\uFF0C\u7EE7\u7EED\u7528 ${installed}\uFF1A${String(err)}`);
+  }
+}
+async function ensureToolInstalled(cmd, opts = {}) {
+  const { versions, ...deps } = opts;
   const d = { ...defaultDeps(), ...deps };
-  if (confirmed.has(cmd)) return true;
-  if (await d.isPresent(cmd)) {
+  const wanted = versions?.[cmd];
+  if (confirmed.has(cmd) || await d.isPresent(cmd)) {
     confirmed.add(cmd);
+    if (wanted) await alignToWantedVersion(cmd, wanted, d);
     return true;
   }
-  const steps = installPlan(cmd, d.platform, d.toolsPrefix);
+  const steps = installPlan(cmd, d.platform, d.toolsPrefix, wanted);
   if (steps.length === 0) {
     d.log(`[connector-install] ${cmd} \u7F3A\u5931\uFF0C\u4E14 ${d.platform} \u4E0B\u65E0\u5DF2\u77E5\u81EA\u52A8\u5B89\u88C5\u6CD5\u2014\u2014\u8BF7\u624B\u52A8\u5B89\u88C5`);
     return false;
@@ -197526,6 +197628,7 @@ async function ensureToolInstalled(cmd, deps = {}) {
       await d.run(step.file, step.args);
       if (await d.isPresent(cmd)) {
         confirmed.add(cmd);
+        if (wanted) alignedVersion.set(cmd, wanted);
         d.log(`[connector-install] ${cmd} \u5B89\u88C5\u6210\u529F\uFF08${step.file} ${step.args.join(" ")}\uFF09`);
         return true;
       }
@@ -197536,15 +197639,15 @@ async function ensureToolInstalled(cmd, deps = {}) {
   d.log(`[connector-install] ${cmd} \u81EA\u52A8\u5B89\u88C5\u672A\u6210\u529F\u2014\u2014\u5C06\u56DE\u9000\u5230 wrapper/\u547D\u4EE4\u81EA\u8EAB\u62A5\u9519`);
   return false;
 }
-async function ensureConnectorTools(tools, deps = {}) {
+async function ensureConnectorTools(tools, opts = {}) {
   if (!tools || tools.length === 0) return [];
   const missing = [];
   for (const cmd of tools) {
-    if (!await ensureToolInstalled(cmd, deps)) missing.push(cmd);
+    if (!await ensureToolInstalled(cmd, opts)) missing.push(cmd);
   }
   return missing;
 }
-var import_node_child_process12, import_node_util2, import_node_fs9, import_node_path11, execFileAsync, confirmed;
+var import_node_child_process12, import_node_util2, import_node_fs9, import_node_path11, execFileAsync, NPM_TOOL_PACKAGES, confirmed, alignedVersion;
 var init_install = __esm({
   "../connectors/src/_base/install.ts"() {
     "use strict";
@@ -197554,7 +197657,9 @@ var init_install = __esm({
     import_node_path11 = require("node:path");
     init_tool_home();
     execFileAsync = (0, import_node_util2.promisify)(import_node_child_process12.execFile);
+    NPM_TOOL_PACKAGES = { "lark-cli": "@larksuite/cli" };
     confirmed = /* @__PURE__ */ new Set();
+    alignedVersion = /* @__PURE__ */ new Map();
   }
 });
 
@@ -201625,7 +201730,7 @@ var init_connector_adapter = __esm({
       async spawn(job) {
         const t0 = Date.now();
         if (job.requiredTools?.length) {
-          const missing = await ensureConnectorTools(job.requiredTools);
+          const missing = await ensureConnectorTools(job.requiredTools, { versions: job.requiredToolVersions });
           if (missing.length) log("[adapter]", `  connector tools still missing (agent may fail): ${missing.join(", ")}`);
         }
         const prepared = await prepareConnectorsForJob(job);
@@ -203289,13 +203394,22 @@ async function startOasisServer(opts) {
       resolveStore: opts.delegationStoreFor,
       resolveChatSessions: resolveChatSessionsForDelegation,
       resolveActors: async (companyId) => (await actorsDomain2.resolveCtx(companyId)).service,
-      // **派发完顺手把子会话这一轮登记进 live 注册表**（v2 bug 0088）。缺这一步时下面那行
-      // `appendToChild` 恒回 `no-live-turn`——注册表里从来没有以 `childSessionId` 为键的轮，
-      // 于是每一条 `--continue` 转达都落队列，专家要等本轮跑完才看见「手上这段作废」。
-      // 理由与两条纪律见 `child-live-turn.ts` 的文件头。
+      /* **派发完顺手把子会话这一轮登记进 live 注册表，并给它接上 `chat_items` 账本。**
+         两件事的成因不同，都在 `child-live-turn.ts` 的文件头：
+          · 不登记 → 下面那行 `appendToChild` 恒回 `no-live-turn`，每一条 `--follow-up` 转达
+            都落队列，专家要等本轮跑完才看见「手上这段作废」（v2 bug 0088）；
+          · 不接账本 → 子会话在 `chat_items` 里只有 storage 层镜像来的一问一答两行纯文字，
+            右栏面板只能靠详情接口拿 run_id 去轨迹表**现折**，跑的过程中一片空白。 */
       dispatchChat: async (request2) => {
         const session = await dispatchChat(request2);
-        registerDelegatedChildTurn(liveChat, request2.chatSessionId, session);
+        const itemStore = opts.resolveChatItems ? await opts.resolveChatItems(request2.companyId).catch(() => void 0) : opts.chatItems;
+        const versionSeed = itemStore ? await itemStore.sessionVersionCursor(request2.chatSessionId).catch(() => 0) : 0;
+        registerDelegatedChildTurn(liveChat, request2.chatSessionId, session, {
+          ...itemStore ? { items: itemStore } : {},
+          ...request2.chatTurnId ? { turnId: request2.chatTurnId } : {},
+          ...request2.assistantMessageId ? { assistantMessageId: request2.assistantMessageId } : {},
+          versionSeed
+        });
         return session;
       },
       appendToChild: (childSessionId, text5, extra) => liveChat.append(childSessionId, text5, extra),
@@ -204070,6 +204184,7 @@ async function startOasisServer(opts) {
         const rawBody = Buffer.concat(chunks).toString("utf8");
         const companyCtx = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname) : void 0;
         const currentCompanyId = companyCtx?.kind === "ok" ? companyCtx.companyId : void 0;
+        const connectorActorsService = async (companyId) => opts.actors ? (await opts.actors.resolveCtx(companyId ?? currentCompanyId)).service : void 0;
         const wodrafts = opts.resolveWorkorderDrafts ? await opts.resolveWorkorderDrafts(currentCompanyId) : opts.workorderDrafts;
         const wodraftPlannerIssues = (opts.resolveWorkorderDraftPlannerIssues && await opts.resolveWorkorderDraftPlannerIssues(currentCompanyId)) ?? opts.workorderDraftPlannerIssues ?? defaultDraftPlannerIssuesStore;
         const engine = await resolveEngine(currentCompanyId);
@@ -206133,12 +206248,12 @@ ${composed}`;
               const actorCtx = await opts.resolveActorContext(body2.actorId).catch(() => null);
               if (actorCtx) {
                 const { mkdtempSync: mkdtempSync6, mkdirSync: mkdirSync25, writeFileSync: writeFileSync18 } = await import("node:fs");
-                const { join: join39, dirname: dirname36 } = await import("node:path");
+                const { join: join40, dirname: dirname36 } = await import("node:path");
                 const { tmpdir: tmpdir12 } = await import("node:os");
-                const dir = mkdtempSync6(join39(tmpdir12(), "oasis-chat-"));
+                const dir = mkdtempSync6(join40(tmpdir12(), "oasis-chat-"));
                 if (actorCtx.config?.prompt) {
                   for (const [rel, content3] of Object.entries(splitIdentityFiles2(actorCtx.config.prompt))) {
-                    const file = join39(dir, rel);
+                    const file = join40(dir, rel);
                     mkdirSync25(dirname36(file), { recursive: true });
                     writeFileSync18(file, content3);
                   }
@@ -206150,12 +206265,12 @@ ${composed}`;
                     const s2 = byId.get(id);
                     return s2 ? `- **${s2.name}** (\`${s2.id}\`): ${s2.description}` : `- \`${id}\`\uFF08\u672A\u5728\u6280\u80FD\u5E93\u4E2D\uFF0C\u53EF\u80FD\u5DF2\u5378\u8F7D\uFF09`;
                   });
-                  writeFileSync18(join39(dir, "SKILLS.md"), ["# \u53EF\u7528\u6280\u80FD", "", "\u4EE5\u4E0B\u6280\u80FD\u5DF2\u4E3A\u4F60\u542F\u7528\uFF0C\u53EF\u5728\u672C\u6B21\u4F1A\u8BDD\u4E2D\u76F4\u63A5\u4F7F\u7528\uFF1A", "", ...lines].join("\n"));
+                  writeFileSync18(join40(dir, "SKILLS.md"), ["# \u53EF\u7528\u6280\u80FD", "", "\u4EE5\u4E0B\u6280\u80FD\u5DF2\u4E3A\u4F60\u542F\u7528\uFF0C\u53EF\u5728\u672C\u6B21\u4F1A\u8BDD\u4E2D\u76F4\u63A5\u4F7F\u7528\uFF1A", "", ...lines].join("\n"));
                 }
                 if (opts.materializeSkills) {
                   const skillFiles = await opts.materializeSkills(body2.actorId, "claude").catch(() => ({}));
                   for (const [rel, content3] of Object.entries(skillFiles)) {
-                    const file = join39(dir, rel);
+                    const file = join40(dir, rel);
                     mkdirSync25(dirname36(file), { recursive: true });
                     writeFileSync18(file, content3);
                   }
@@ -206169,7 +206284,7 @@ ${composed}`;
                     const modeNote = c.mode === "oauth" ? "OAuth \xB7 \u51ED\u8BC1\u7531\u5E73\u53F0\u7BA1\u7406\uFF0C\u901A\u8FC7\u5BF9\u5E94 CLI wrapper \u8C03\u7528" : "\u76F4\u63A5\u5199\u5165 \xB7 \u51ED\u8BC1\u5DF2\u6CE8\u5165\u73AF\u5883\u53D8\u91CF";
                     return `- **${c.name}** (\`${c.id}\`): ${statusNote} \xB7 ${modeNote}`;
                   });
-                  writeFileSync18(join39(dir, "CONNECTORS.md"), ["# \u53EF\u7528\u8FDE\u63A5\u5668", "", "\u4EE5\u4E0B\u8FDE\u63A5\u5668\u5DF2\u4E3A\u672C\u6B21\u4F1A\u8BDD\u914D\u7F6E\uFF0C\u51ED\u8BC1\u5DF2\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u6216 CLI wrapper \u6CE8\u5165\uFF0C\u65E0\u9700\u624B\u52A8\u914D\u7F6E\uFF1A", "", ...lines].join("\n"));
+                  writeFileSync18(join40(dir, "CONNECTORS.md"), ["# \u53EF\u7528\u8FDE\u63A5\u5668", "", "\u4EE5\u4E0B\u8FDE\u63A5\u5668\u5DF2\u4E3A\u672C\u6B21\u4F1A\u8BDD\u914D\u7F6E\uFF0C\u51ED\u8BC1\u5DF2\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u6216 CLI wrapper \u6CE8\u5165\uFF0C\u65E0\u9700\u624B\u52A8\u914D\u7F6E\uFF1A", "", ...lines].join("\n"));
                 }
                 spawnCwd = dir;
               }
@@ -206254,7 +206369,7 @@ ${composed}`;
         }
         if (req.method === "POST" && /^\/api\/connectors\/[^/]+\/disconnect$/.test(url.pathname)) {
           const connId = decodeURIComponent(url.pathname.split("/")[3] ?? "");
-          const svc = opts.actors?.service;
+          const svc = await connectorActorsService();
           if (!svc) {
             res.writeHead(501).end(JSON.stringify({ error: "actors service disabled" }));
             return;
@@ -206280,7 +206395,7 @@ ${composed}`;
         }
         if (req.method === "DELETE" && /^\/api\/connectors\/[^/]+$/.test(url.pathname)) {
           const connId = decodeURIComponent(url.pathname.slice("/api/connectors/".length));
-          const svc = opts.actors?.service;
+          const svc = await connectorActorsService();
           if (!svc) {
             res.writeHead(501).end(JSON.stringify({ error: "actors service disabled" }));
             return;
@@ -206299,6 +206414,31 @@ ${composed}`;
           }
           return;
         }
+        if (req.method === "DELETE" && /^\/api\/actors\/[^/]+\/connectors\/[^/]+$/.test(url.pathname)) {
+          const parts = url.pathname.split("/");
+          const actorId = decodeURIComponent(parts[3] ?? "");
+          const connId = decodeURIComponent(parts[5] ?? "");
+          const svc = await connectorActorsService();
+          if (!svc) {
+            res.writeHead(501).end(JSON.stringify({ error: "actors service disabled" }));
+            return;
+          }
+          try {
+            const { variablesDeleted } = await svc.deleteActorConnector(actorId, connId);
+            let channelDisabled = false;
+            if (connId === "feishu" && channelService) {
+              const b2 = await channelService.getBindingForActor(actorId);
+              if (b2 && b2.status !== "revoked") {
+                await channelService.disable(actorId);
+                channelDisabled = true;
+              }
+            }
+            res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, variablesDeleted, channelDisabled }));
+          } catch (e) {
+            res.writeHead(500).end(JSON.stringify({ error: String(e) }));
+          }
+          return;
+        }
         if (url.pathname === "/api/connectors/feishu/setup" && req.method === "GET") {
           res.writeHead(200, { "content-type": "text/event-stream", "cache-control": "no-cache", connection: "keep-alive" });
           const send = (obj2) => res.write(`data: ${JSON.stringify(obj2)}
@@ -206348,8 +206488,8 @@ ${composed}`;
               if (!errStr && pollData["client_id"]) {
                 const clientId = String(pollData["client_id"]);
                 const clientSecret = pollData["client_secret"] ? String(pollData["client_secret"]) : void 0;
-                if (opts.actors && clientSecret) {
-                  const svc = opts.actors.service;
+                const svc = clientSecret ? await connectorActorsService() : void 0;
+                if (svc && clientSecret) {
                   const credScope = actorIdParam ? { scope: "personal", actorId: actorIdParam } : { scope: "global" };
                   await svc.putVariable({ key: "FEISHU_APP_ID", value: clientId, ...credScope, connectorId: "feishu", encrypted: true });
                   await svc.putVariable({ key: "FEISHU_APP_SECRET", value: clientSecret, ...credScope, connectorId: "feishu", encrypted: true });
@@ -206412,6 +206552,8 @@ ${composed}`;
             });
             githubAppPending.put(state, {
               ...actorId ? { actorId } : {},
+              // 回调那一步没有鉴权头，解析不出公司——只能在这里记下来带过去。
+              ...currentCompanyId ? { companyId: currentCompanyId } : {},
               employeeSlug: nameSlug,
               createdAtMs: Date.now(),
               // 存下这次选的归属——回调时要拿它跟 GitHub 返回的 owner 比对。
@@ -206432,7 +206574,7 @@ ${composed}`;
         if (url.pathname === "/api/connectors/github/app/orgs" && req.method === "POST") {
           try {
             const { actorId } = JSON.parse(rawBody || "{}");
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const token = await svc.revealResolvedVariable("GITHUB_TOKEN", actorId);
             if (!token) {
@@ -206465,7 +206607,7 @@ ${composed}`;
         }
         if (url.pathname === "/api/connectors/github/app/available" && req.method === "POST") {
           try {
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const rows = await svc.listVariables();
             const plain = (key, actorId) => rows.find((r) => r.key === key && r.actorId === actorId && !r.encrypted)?.maskedValue ?? "";
@@ -206528,7 +206670,7 @@ ${composed}`;
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: "\u7F3A\u5C11 appId" }));
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const rows = await svc.listVariables();
             const owners = rows.filter((r) => r.key === "GITHUB_APP_ID" && !r.encrypted && r.maskedValue === appId);
@@ -206575,7 +206717,7 @@ ${composed}`;
               bad(400, "\u8FD9\u4E0D\u50CF\u4E00\u4E2A\u79C1\u94A5\u6587\u4EF6\u2014\u2014\u8BF7\u4E0A\u4F20 GitHub \u4E0B\u8F7D\u7684 .pem\uFF08\u5185\u5BB9\u4EE5 -----BEGIN ... PRIVATE KEY----- \u5F00\u5934\uFF09");
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             let meta;
             try {
@@ -206633,7 +206775,7 @@ ${composed}`;
         if (url.pathname === "/api/connectors/github/app/permissions" && req.method === "POST") {
           try {
             const { actorId } = JSON.parse(rawBody || "{}");
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const appId = await svc.revealResolvedVariable("GITHUB_APP_ID", actorId);
             const privateKeyPem = await svc.revealResolvedVariable("GITHUB_APP_PRIVATE_KEY", actorId);
@@ -206687,7 +206829,7 @@ ${composed}`;
               fail(problem.message);
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService(pending.companyId);
             if (!svc) throw new Error("actors service unavailable");
             const scope = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
             const put3 = (key, value2, encrypted) => svc.putVariable({ key, value: value2, ...scope, connectorId: "github", encrypted });
@@ -206756,7 +206898,7 @@ ${composed}`;
               reply({ ok: false, error: "pending" });
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const scope = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
             const put3 = (key, value2, encrypted) => svc.putVariable({ key, value: value2, ...scope, connectorId: "github", encrypted });
@@ -206845,8 +206987,8 @@ ${composed}`;
               throw new Error(String(data["error_description"] ?? errStr ?? "login failed"));
             }
             if (!data["access_token"]) throw new Error("no access_token in response");
-            if (opts.actors) {
-              const svc = opts.actors.service;
+            const svc = await connectorActorsService();
+            if (svc) {
               if (actorId) {
                 await svc.putVariable({ key: "FEISHU_APP_ID", value: appId, scope: "personal", actorId, connectorId: "feishu", encrypted: true });
               } else {
@@ -206947,8 +207089,8 @@ ${composed}`;
               });
               const p2 = await pr.json();
               if (p2.access_token) {
-                if (opts.actors) {
-                  const svc = opts.actors.service;
+                const svc = await connectorActorsService();
+                if (svc) {
                   const connId = "github";
                   await svc.upsertConnector({ id: connId, name: "GitHub", mode: "oauth", status: "connected", account: "github" });
                   for (const [k2, v2] of [["GIT_AUTHOR_NAME", actorNameParam], ["GIT_AUTHOR_EMAIL", ""], ["GIT_COMMITTER_NAME", actorNameParam], ["GIT_COMMITTER_EMAIL", ""], ["EMAIL", ""]])
@@ -218233,9 +218375,32 @@ var init_service5 = __esm({
         const a = await this.opts.store.getActor(id);
         if (!a) throw new Error(`actor not found: ${id}`);
         await this.upsertActor({ ...a, status: "disabled" }, by);
+        await this.dropRuntimeBindingOfDeletedAgent(a.id, a.kind, by);
         if (a.status === "active") await this.opts.onActorDisabled?.(id, by);
         return a;
       }
+      /**
+       * 删掉 Agent 时把它跟 runtime 的绑定一起撤掉。
+       *
+       * 为什么必须做（2026-09-09 线上实测）：删除只写 `status='disabled'`，`actor_bindings` 那行
+       * 原样留着且仍是 `active`。而 `GET /api/actors` 会把已删 Agent 过滤掉、`GET /api/bindings` 不会——
+       * 运行时管理页拿两份数据对着算「运行 Agent」，于是已删的 Agent 继续占着一格，
+       * 名字还查不回来，页面上直接露出 `asst-xxx-cbf34f` 这种裸 id。didi 组织实测：yx_claude 上
+       * 12 条 active 绑定里 7 条的 Agent 早被删了（其中 5 条是助理）。
+       *
+       * 顺带修好另一处：`pickAssistantRuntime` 用「(nodeId,kind) 上的 active 绑定数」当负载做均衡，
+       * 已删 Agent 的残留绑定会把负载算高，把新助理往别的机器上赶。
+       *
+       * 只对 agent 生效：真人被移出组织是「离岗」不是删除，PRD 明确其助理照常在岗、账号回来还能接上。
+       * 幂等：removeBinding 对没有绑定的 actor 是 no-op，所以重复删也安全（存量脏数据也能靠再删一次修好）。
+       */
+      async dropRuntimeBindingOfDeletedAgent(id, kind, by) {
+        if (kind !== "agent") return;
+        const existing = await this.opts.store.getBinding(id);
+        if (!existing) return;
+        await this.opts.store.removeBinding(id);
+        await this.audit({ kind: "binding_change", actorId: id, by, at: this.now(), detail: { removed: true, reason: "agent_deleted" } });
+      }
       /**
        * 原子「若当前 active 则停用」（QA R10）：与 disableActor 的区别在于——
        * 只在 actor 当前**确为 active** 时才写，返回 `ok:true + before + seq`；已被并发者/别的路径先 disable
@@ -218259,6 +218424,7 @@ var init_service5 = __esm({
         if (!res.ok) return res;
         this.opts.onRolesChanged?.(id, []);
         await this.audit({ kind: "actor_upsert", actorId: id, by, at: this.now(), detail: { status: "disabled", roles: res.before.roles } });
+        await this.dropRuntimeBindingOfDeletedAgent(id, res.before.kind, by);
         await this.opts.onActorDisabled?.(id, by);
         return { ok: true, before: res.before, seq };
       }
@@ -218859,39 +219025,42 @@ ${input.description}
         const c = cfg ?? await this.opts.store.latestConfig(actorId);
         return new Set(c?.connectorIds ?? []);
       }
-      /** 设置某员工×连接器的连接记录（启用/停用）。无则创建，有则翻转 enabled。 */
-      async setActorConnectorEnabled(actorId, connectorId, enabled) {
-        const conn = { actorId, connectorId, enabled, updatedAt: this.now() };
+      /**
+       * 设置某员工×连接器的连接记录（启用/停用）。无则创建，有则翻转 enabled。
+       *
+       * `configuredBy` 只在**授权流程走完**时传（「谁为这名员工把它接上的」）。普通开关不传，
+       * 此时把已有值原样带回——**只增不抹**：翻一次开关不该把授权时记下的人擦掉。
+       * pg 侧另有 `COALESCE` 兜同一条，两层都做是因为内存 store 是整行替换。
+       */
+      async setActorConnectorEnabled(actorId, connectorId, enabled, configuredBy) {
+        const keep = configuredBy ?? (await this.opts.store.listActorConnectorConnections(actorId)).find((c) => c.connectorId === connectorId)?.configuredBy;
+        const conn = {
+          actorId,
+          connectorId,
+          enabled,
+          updatedAt: this.now(),
+          ...keep ? { configuredBy: keep } : {}
+        };
         await this.opts.store.upsertActorConnectorConnection(conn);
         return conn;
       }
-      listActorConnectorConnections(actorId) {
-        return this.opts.store.listActorConnectorConnections(actorId);
-      }
       /**
-       * 移除某员工与某连接器的连接（组织页连接器详情的「移除连接」，2026-09-09 原型 1600:5765）。
+       * 删除**一条**「员工 × 连接器」连接：连接记录 + 该员工这个连接器的**个人凭据变量**。
        *
-       * 删两样东西，缺一不可：
-       *   ① 这名员工**自己**那份连接器凭据（`scope=personal` 且 `connectorId` 命中的变量行）——
-       *      不删的话，「移除」之后 `actorConnected` 里还有它，卡片照样在，读作「删不掉」；
-       *   ② 「员工×连接器」的连接记录——不删的话 `effective` 里还有它（enabled=false），
-       *      卡片变成一张「已停用」的僵尸卡，而人要的是它消失。
+       * 与开关的区别（发起人 2026-09-09 定的，两颗按钮并存）：开关是「暂时不用」，凭据留着、
+       * 打开就能接着用；删除是「不要了」，凭据清掉、再要用得重走一遍授权。
        *
-       * **不碰组织那条 connector 行**（决策 0080 修订五的同一条理由）：组织级连接是别人配的资产，
-       * 一名员工点「移除连接」不该把全组织的连接拆掉。组织级的断开在「管理 > 连接器」。
-       * 于是：组织已连接时，移除个人连接后这名员工会**回落到组织默认**——卡片仍在，但身份那一行
-       * 变回组织账号。这是对的，不是没删干净。
-       *
-       * 幂等：没有个人凭据、没有记录时照样返回成功（`variablesDeleted: 0`）——重复点、并发点都不该报错。
+       * **只动这名员工自己的东西**：组织级变量（scope=global）一个不碰——那是别人也在用的。
+       * 飞书对话通道的下线不在这里做（本服务够不到 channelService），由路由层在删完凭据后补一刀。
        */
-      async removeActorConnector(actorId, connectorId) {
-        const rows = await this.opts.store.listVariables(actorId);
-        const mine = rows.filter(
-          (v2) => v2.scope === "personal" && v2.actorId === actorId && v2.connectorId === connectorId
-        );
-        for (const v2 of mine) await this.opts.store.deleteVariable(v2.key, actorId);
+      async deleteActorConnector(actorId, connectorId) {
+        const personal = (await this.opts.store.listVariables(actorId)).filter((v2) => v2.scope === "personal" && v2.actorId === actorId && v2.connectorId === connectorId);
+        for (const v2 of personal) await this.deleteVariable(v2.key, actorId);
         await this.opts.store.deleteActorConnectorConnection(actorId, connectorId);
-        return { removed: true, variablesDeleted: mine.length };
+        return { variablesDeleted: personal.length };
+      }
+      listActorConnectorConnections(actorId) {
+        return this.opts.store.listActorConnectorConnections(actorId);
       }
       /**
        * 员工连接器面板所需状态：连接记录 + 组织级已连接集合 + 该员工已授权（有个人 connector 变量）集合。
@@ -220860,14 +221029,9 @@ function actorsDomain(opts) {
       const { service } = await resolveCtx(req.auth.companyId);
       const b2 = req.body;
       if (typeof b2?.enabled !== "boolean") throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 enabled (boolean)");
-      const conn = await service.setActorConnectorEnabled(req.params.id, req.params.connectorId, b2.enabled);
+      const conn = b2.enabled ? await service.setActorConnectorEnabled(req.params.id, req.params.connectorId, true, req.auth.actor) : await service.setActorConnectorEnabled(req.params.id, req.params.connectorId, false);
       return { status: 200, body: conn };
     });
-    router.delete("/api/actors/:id/connectors/:connectorId", async (req) => {
-      const { service } = await resolveCtx(req.auth.companyId);
-      const r = await service.removeActorConnector(req.params.id, req.params.connectorId);
-      return { status: 200, body: r };
-    });
     const requireVariableManager = (req) => {
       if (!isHumanActor(req.auth.actor)) {
         throw new ApiError(
@@ -226090,7 +226254,13 @@ function reviewSummary(snap, reviews, events) {
   const name = node2?.title ?? first.nodeId;
   const latest = latestActivityReviews(reviews, events);
   const requirements = snap.requirements.filter((r) => r.nodeId === first.nodeId && r.reviewerActorId === first.reviewerActorId);
-  const judgement = judgeWork({ requirements: requirements.length ? requirements : reviews, reviews });
+  for (const requirement of requirements) {
+    const current = reviews.find((r) => r.id === requirement.latestReviewId);
+    if (!current) continue;
+    const index2 = latest.findIndex((r) => r.reviewGroup === requirement.reviewGroup);
+    if (index2 >= 0) latest[index2] = current;
+  }
+  const judgement = judgeWork({ requirements: requirements.length ? requirements : latest, reviews: latest });
   const pending = latest.filter((r) => !r.cancelledAt && !r.verdict && reviewState(r) === "running");
   if (work?.acceptanceState === "accepted" || work?.acceptedAt || work?.acceptanceState !== "rejected" && judgement === "passed") {
     return { phase: "done", status: `\u300A${name}\u300B\u5BA1\u6838\u901A\u8FC7\u3002`, latest, pending: [] };
@@ -226126,6 +226296,66 @@ var init_review_activity = __esm({
   }
 });
 
+// ../server/src/domains/collab/review-requirement-activity.ts
+function reviewRequirementActivity(snap, events, ref2) {
+  const previous3 = /* @__PURE__ */ new Map();
+  const titles = new Map(snap.nodes.map((n) => [n.id, n.title]));
+  const cards = [];
+  const label = (r) => `${ref2(r.reviewerActorId).name || "\u672A\u547D\u540D\u5BA1\u6838\u4EBA"}${r.source === "closure" ? "\uFF08\u7ED3\u6848\u5BA1\u6838\uFF09" : ""}`;
+  const names = (rows) => [...new Set(rows.map(label))].join("\u3001") || "\u65E0";
+  for (const rec of [...events].sort((a, b2) => a.seq - b2.seq)) {
+    if (rec.status === "pending" || rec.status === "failed") continue;
+    const e = rec.event;
+    if (e.kind === "plan.changed") {
+      for (const node2 of e.addNodes ?? []) previous3.set(node2.id, node2.reviewers ?? []);
+      for (const id of e.removeNodes ?? []) previous3.delete(id);
+      continue;
+    }
+    if (e.kind === "plan.add_node") {
+      previous3.set(e.nodeId, e.reviewers ?? []);
+      continue;
+    }
+    if (e.kind !== "plan.update_review_requirements") continue;
+    const before = previous3.get(e.nodeId);
+    const after = e.reviewers;
+    const beforeKeys = new Set(before?.map(requirementKey));
+    const afterKeys = new Set(after.map(requirementKey));
+    const added = before ? after.filter((r) => !beforeKeys.has(requirementKey(r))) : [];
+    const removed = before?.filter((r) => !afterKeys.has(requirementKey(r))) ?? [];
+    const nodeTitle = titles.get(e.nodeId) || "\u5DF2\u79FB\u9664\u7684\u8282\u70B9";
+    const system = rec.actorId.startsWith("actor:system:");
+    const closureAdded = system && added.length > 0 && !removed.length && added.every((r) => r.source === "closure");
+    cards.push({
+      id: `wo:${rec.seq}`,
+      seq: rec.seq,
+      at: rec.createdAt,
+      updatedAt: rec.createdAt,
+      nodeId: e.nodeId,
+      nodeTitle,
+      executor: system ? { ...ref2(rec.actorId), name: "\u7CFB\u7EDF" } : ref2(rec.actorId),
+      ...rec.handActorId ? { handActor: ref2(rec.handActorId) } : {},
+      phase: "done",
+      status: closureAdded ? `\u4E3A\u300A${nodeTitle}\u300B\u8865\u5145\u4E86\u7ED3\u6848\u5BA1\u6838\u8981\u6C42\u3002` : `\u66F4\u65B0\u4E86\u300A${nodeTitle}\u300B\u7684\u5BA1\u6838\u5217\u8868\u3002`,
+      detail: [
+        ...added.length ? [`\u65B0\u589E\uFF1A${names(added)}`] : [],
+        ...removed.length ? [`\u79FB\u9664\uFF1A${names(removed)}`] : [],
+        `\u66F4\u65B0\u540E\uFF1A${names(after)}`
+      ].join("\n"),
+      artifacts: [],
+      actions: []
+    });
+    previous3.set(e.nodeId, after);
+  }
+  return cards;
+}
+var requirementKey;
+var init_review_requirement_activity = __esm({
+  "../server/src/domains/collab/review-requirement-activity.ts"() {
+    "use strict";
+    requirementKey = (r) => JSON.stringify([r.reviewerActorId, r.reviewGroup, r.source]);
+  }
+});
+
 // ../server/src/domains/collab/workorder-manager.ts
 function resolveWorkorderManager(snap) {
   const nodes = snap.nodes;
@@ -226806,6 +227036,8 @@ function buildWorkorderActivity(input) {
       .../* @__PURE__ */ ((r) => r ? { runId: r, traceAvailable: true } : {})(traced ? runIdOfCard(d) : void 0)
     };
   });
+  cards.push(...reviewRequirementActivity(snap, events, ref2));
+  cards.sort((a, b2) => a.updatedAt.localeCompare(b2.updatedAt) || a.seq - b2.seq || a.id.localeCompare(b2.id));
   return { workorderId, cards, truncated };
 }
 var ACTIVITY_EVENT_KINDS, ACTIVITY_EVENT_LIMIT, ACTIVITY_COPY, REWORK_ANNOTATION_PREFIX, ENGINE_RETRY_EXHAUSTED, BUTTON;
@@ -226815,9 +227047,12 @@ var init_activity2 = __esm({
     init_src();
     init_src4();
     init_review_activity();
+    init_review_requirement_activity();
     init_workorder_manager();
     ACTIVITY_EVENT_KINDS = [
       "plan.changed",
+      "plan.add_node",
+      "plan.update_review_requirements",
       "plan.update_spec",
       "plan.node_retry",
       "work.create",
@@ -228045,9 +228280,18 @@ function toAuditEntry(op) {
     summary: `${KIND_LABEL2[op.kind] ?? op.kind} \xB7 ${op.artifactId}`
   };
 }
+function nodeIdOfWorkId(workId) {
+  if (!workId || !workId.startsWith("wk:")) return null;
+  const body2 = workId.slice(3);
+  const cut = body2.lastIndexOf(":");
+  if (cut <= 0) return null;
+  if (!/^\d+$/.test(body2.slice(cut + 1))) return null;
+  const nodeId = body2.slice(0, cut);
+  return nodeId.startsWith("artifact:") ? nodeId : null;
+}
 function eventToAuditEntry(rec) {
   const ev = rec.event;
-  const artifactId = rec.nodeId ?? rec.workId ?? "";
+  const artifactId = rec.nodeId ?? nodeIdOfWorkId(rec.workId) ?? "";
   return {
     seq: rec.seq,
     at: rec.createdAt,
@@ -228057,7 +228301,11 @@ function eventToAuditEntry(rec) {
     summary: `${KIND_LABEL2[ev.kind] ?? ev.kind}${artifactId ? ` \xB7 ${artifactId}` : ""}`
   };
 }
-function enrichAudit(entry, model, titleOf) {
+function enrichAudit(entry, model, titleOf, workorderId) {
+  if (!entry.artifactId) {
+    const workspaceTitle2 = workorderId ? titleOf.get(workorderId) : void 0;
+    return { ...entry, ...workspaceTitle2 ? { workspaceTitle: workspaceTitle2 } : {}, visibility: "ok" };
+  }
   const a = model.artifacts.get(entry.artifactId);
   if (!a) return { ...entry, visibility: "deleted" };
   const workspaceTitle = titleOf.get(a.workspace);
@@ -228075,8 +228323,8 @@ async function buildAudit(source, q2 = {}, model) {
   const items = [];
   let lastCursor = null;
   let truncated = false;
-  const push2 = (entry, cursor) => {
-    items.push(model && titleOf ? enrichAudit(entry, model, titleOf) : entry);
+  const push2 = (entry, cursor, workorderId) => {
+    items.push(model && titleOf ? enrichAudit(entry, model, titleOf, workorderId) : entry);
     lastCursor = cursor;
   };
   const match = (actor, kind, at) => {
@@ -228087,30 +228335,33 @@ async function buildAudit(source, q2 = {}, model) {
     return true;
   };
   if (q2.latest) {
-    let collected = [];
+    const collected = [];
     if (source.engineStore) {
       const records = await source.engineStore.transaction((tx) => tx.listEvents(void 0, 0));
       for (const rec of records) {
         const ev = rec.event;
         if (!match(rec.actorId, ev.kind, rec.createdAt)) continue;
-        collected.push(eventToAuditEntry(rec));
+        collected.push({ entry: eventToAuditEntry(rec), workorderId: rec.workorderId });
       }
     } else if (source.oplog) {
       const src = source.oplog.readFilteredOps ? source.oplog.readFilteredOps({ ...q2.actor ? { actor: q2.actor } : {}, ...q2.kind ? { kind: q2.kind } : {} }, void 0, { latest: true }) : source.oplog.readAll();
       for await (const { op } of src) {
         if (!match(op.actor, op.kind, op.timestamp)) continue;
-        collected.push(toAuditEntry(op));
+        collected.push({ entry: toAuditEntry(op) });
       }
     }
     const tail = collected.slice(-limit).reverse();
-    return { items: model && titleOf ? tail.map((e) => enrichAudit(e, model, titleOf)) : tail, cursor: null };
+    return {
+      items: model && titleOf ? tail.map(({ entry, workorderId }) => enrichAudit(entry, model, titleOf, workorderId)) : tail.map(({ entry }) => entry),
+      cursor: null
+    };
   }
   if (source.engineStore) {
     const records = await source.engineStore.transaction((tx) => tx.listEvents(void 0, fromSeq));
     for (const rec of records) {
       const ev = rec.event;
       if (!match(rec.actorId, ev.kind, rec.createdAt)) continue;
-      push2(eventToAuditEntry(rec), String(rec.seq));
+      push2(eventToAuditEntry(rec), String(rec.seq), rec.workorderId);
       if (items.length >= limit) {
         truncated = true;
         break;
@@ -228156,6 +228407,30 @@ var init_audit = __esm({
       "workorder.paused": "\u6682\u505C\u6D3E\u53D1",
       "workorder.resumed": "\u6062\u590D\u6D3E\u53D1",
       "workorder.sealed": "\u5C01\u5B58",
+      // 其余新引擎事件 kind——缺标签时 summary 直接露英文 kind（生产实测：`plan.changed` 是量最大的
+      // 一类审计条目，界面上就写着「plan.changed」）。这张表按 EngineEvent 的 kind 全集补齐。
+      "plan.changed": "\u6539\u4EFB\u52A1\u56FE",
+      "plan.add_edge": "\u63A5\u4F9D\u8D56",
+      "plan.delete_edge": "\u65AD\u4F9D\u8D56",
+      "plan.update_review_requirements": "\u6539\u8BC4\u5BA1\u8981\u6C42",
+      "plan.update_fields": "\u6539\u5B57\u6BB5",
+      "work.started": "\u5F00\u5DE5",
+      "work.redispatch": "\u91CD\u6D3E",
+      "work.snapshot_recorded": "\u5B58\u5FEB\u7167",
+      "work.handoff_recorded": "\u8BB0\u4EA4\u63A5",
+      "work.reject": "\u6253\u56DE",
+      "work.content_edited": "\u6539\u5185\u5BB9",
+      "work.conclude": "\u5B9A\u7A3F",
+      "node.latest_proposed.rebased": "\u6362\u57FA\u7EBF",
+      "review.started": "\u5F00\u59CB\u8BC4\u5BA1",
+      "review.kill": "\u64A4\u8BC4\u5BA1",
+      "review.timeout": "\u8BC4\u5BA1\u8D85\u65F6",
+      "issue.resolution_proposed": "\u63D0\u89E3\u51B3\u65B9\u6848",
+      "issue.resolution_rejected": "\u9A73\u56DE\u89E3\u51B3\u65B9\u6848",
+      "workorder.created": "\u5EFA\u5DE5\u5355",
+      "workorder.root_set": "\u5B9A\u6839\u8282\u70B9",
+      "workorder.meta_changed": "\u6539\u5DE5\u5355\u4FE1\u606F",
+      "workorder.ping": "\u5524\u9192",
       // 旧 op kind（oplog 回退路径）
       spawn_artifact: "\u5EFA\u4EA7\u7269",
       propose_revision: "\u63D0\u4FEE\u8BA2",
@@ -237750,6 +238025,11 @@ var init_daemon_adapter = __esm({
           clearTimeout(entry.ackTimer);
           entry.ackTimer = void 0;
         }
+        const reapTimer = this.sessionReapTimers.get(dispatchId);
+        if (reapTimer) {
+          clearTimeout(reapTimer);
+          this.sessionReapTimers.delete(dispatchId);
+        }
         entry.exited = info;
         for (const w2 of entry.appendWaiters.splice(0)) {
           clearTimeout(w2.timer);
@@ -237845,6 +238125,10 @@ var init_daemon_adapter = __esm({
         for (const [dispatchId, entry] of this.pending) {
           if (entry.nodeId !== daemonId || entry.exited || present.has(dispatchId)) continue;
           if (this.hub.hasSession?.(dispatchId)) continue;
+          if (this.sessionReapTimers.has(dispatchId)) {
+            this.log(`[dispatch-delivery] ${dispatchId}\uFF1A\u8282\u70B9 ${daemonId} \u7A7A\u5E93\u5B58\u4E0D\u8986\u76D6\u72EC\u7ACB\u4F1A\u8BDD\u65AD\u7EBF\u5BBD\u9650\uFF0C\u7ED3\u8BBA=unknown\uFF08\u4F9D\u636E\uFF1A\u6570\u636E\u9762\u66FE\u8FDE\u63A5\uFF0C\u7B49\u5F85\u91CD\u8FDE\u6216\u539F ${this.sessionReapGraceMs}ms \u671F\u9650\uFF09`);
+            continue;
+          }
           absent.push(dispatchId);
         }
         for (const dispatchId of absent) {
@@ -237877,8 +238161,7 @@ var init_daemon_adapter = __esm({
        */
       onSessionDown(dispatchId) {
         if (this.sessionReapTimers.has(dispatchId)) return;
-        const entry = this.pending.get(dispatchId);
-        if (!entry || entry.exited) return;
+        if (this.settledDispatchIds.has(dispatchId)) return;
         const timer = setTimeout(() => {
           this.sessionReapTimers.delete(dispatchId);
           const e = this.pending.get(dispatchId);
@@ -239214,6 +239497,7 @@ ${ctx.nodeFault}
           env: { ...prov?.env ?? {}, OASIS_STAGE: "1", ...workspace ? { OASIS_WORKSPACE: workspace } : {} },
           ...prov?.wrapperPaths && prov.wrapperPaths.length > 0 ? { wrapperPaths: prov.wrapperPaths } : {},
           ...prov?.requiredTools && prov.requiredTools.length > 0 ? { requiredTools: prov.requiredTools } : {},
+          ...prov?.requiredToolVersions && Object.keys(prov.requiredToolVersions).length > 0 ? { requiredToolVersions: prov.requiredToolVersions } : {},
           ...prov?.connectorCreds && prov.connectorCreds.length > 0 ? { connectorCreds: prov.connectorCreds } : {}
         };
         this.deps.log?.(`[coordinator] ${logMsg}`);
@@ -239774,6 +240058,7 @@ var init_postgres_registry = __esm({
         updated_at   timestamptz NOT NULL,
         PRIMARY KEY (actor_id, connector_id)
       )`);
+        await pool.query(`ALTER TABLE "${s2}".actor_connector_connections ADD COLUMN IF NOT EXISTS configured_by text`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".skill_catalog (
         id          text PRIMARY KEY,            -- slug
@@ -240161,10 +240446,11 @@ var init_postgres_registry = __esm({
       }
       async upsertActorConnectorConnection(c) {
         await this.pool.query(
-          `INSERT INTO ${this.s}.actor_connector_connections (actor_id, connector_id, enabled, updated_at)
-       VALUES ($1, $2, $3, $4)
-       ON CONFLICT (actor_id, connector_id) DO UPDATE SET enabled = $3, updated_at = $4`,
-          [c.actorId, c.connectorId, c.enabled, c.updatedAt]
+          `INSERT INTO ${this.s}.actor_connector_connections (actor_id, connector_id, enabled, updated_at, configured_by)
+       VALUES ($1, $2, $3, $4, $5)
+       ON CONFLICT (actor_id, connector_id) DO UPDATE SET enabled = $3, updated_at = $4,
+         configured_by = COALESCE($5, ${this.s}.actor_connector_connections.configured_by)`,
+          [c.actorId, c.connectorId, c.enabled, c.updatedAt, c.configuredBy ?? null]
         );
       }
       async listActorConnectorConnections(actorId) {
@@ -240176,7 +240462,8 @@ var init_postgres_registry = __esm({
           actorId: row.actor_id,
           connectorId: row.connector_id,
           enabled: row.enabled,
-          updatedAt: new Date(row.updated_at).toISOString()
+          updatedAt: new Date(row.updated_at).toISOString(),
+          ...row.configured_by ? { configuredBy: row.configured_by } : {}
         }));
       }
       async listAllActorConnectorConnections() {
@@ -240187,7 +240474,8 @@ var init_postgres_registry = __esm({
           actorId: row.actor_id,
           connectorId: row.connector_id,
           enabled: row.enabled,
-          updatedAt: new Date(row.updated_at).toISOString()
+          updatedAt: new Date(row.updated_at).toISOString(),
+          ...row.configured_by ? { configuredBy: row.configured_by } : {}
         }));
       }
       async deleteActorConnectorConnection(actorId, connectorId) {
@@ -255201,6 +255489,98 @@ var init_chat_builtin_skills = __esm({
   }
 });
 
+// ../server/src/governance/connector-tool-versions.ts
+function connectorToolVersionsFile(dataDir) {
+  return (0, import_node_path25.join)(dataDir, "connector-tools", "versions.json");
+}
+function registryBase() {
+  const raw = process.env["npm_config_registry"] || process.env["NPM_CONFIG_REGISTRY"] || "https://registry.npmjs.org";
+  return raw.replace(/\/+$/, "");
+}
+async function fetchLatestNpmVersion(pkg) {
+  try {
+    const url = `${registryBase()}/${pkg.split("/").map(encodeURIComponent).join("%2F")}/latest`;
+    const res = await fetch(url, { headers: { accept: "application/json" }, signal: AbortSignal.timeout(NPM_PROBE_TIMEOUT_MS) });
+    if (!res.ok) return null;
+    const v2 = (await res.json()).version;
+    return typeof v2 === "string" && v2 ? v2 : null;
+  } catch {
+    return null;
+  }
+}
+async function readRegisteredToolVersions(dataDir) {
+  try {
+    const raw = JSON.parse(await (0, import_promises14.readFile)(connectorToolVersionsFile(dataDir), "utf8"));
+    if (!raw || typeof raw !== "object") return {};
+    const out = {};
+    for (const [k2, v2] of Object.entries(raw)) {
+      if (typeof v2 === "string" && v2) out[k2] = v2;
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+async function writeRegisteredToolVersions(dataDir, versions) {
+  const file = connectorToolVersionsFile(dataDir);
+  await (0, import_promises14.mkdir)((0, import_node_path25.join)(dataDir, "connector-tools"), { recursive: true });
+  const tmp = `${file}.${process.pid}.tmp`;
+  await (0, import_promises14.writeFile)(tmp, `${JSON.stringify(versions, null, 2)}
+`, "utf8");
+  await (0, import_promises14.rename)(tmp, file);
+}
+async function refreshConnectorToolVersions(opts) {
+  const fetchLatest = opts.fetchLatest ?? fetchLatestNpmVersion;
+  const log3 = opts.log ?? (() => {
+  });
+  const versions = await readRegisteredToolVersions(opts.dataDir);
+  const results = [];
+  let changed = false;
+  for (const [tool, pkg] of Object.entries(NPM_TOOL_PACKAGES)) {
+    const before = versions[tool];
+    const latest = await fetchLatest(pkg);
+    if (!latest) {
+      results.push({ tool, pkg, ...before ? { from: before, to: before } : {}, outcome: "unreachable" });
+      log3(`[connector-tools] ${pkg} \u95EE\u4E0D\u5230\u6700\u65B0\u7248\uFF0C\u6CBF\u7528\u767B\u8BB0\u7248\u672C ${before ?? "\uFF08\u65E0\uFF09"}`);
+      continue;
+    }
+    if (before === latest) {
+      results.push({ tool, pkg, from: before, to: latest, outcome: "unchanged" });
+      continue;
+    }
+    versions[tool] = latest;
+    changed = true;
+    results.push({ tool, pkg, ...before ? { from: before } : {}, to: latest, outcome: "updated" });
+    log3(`[connector-tools] ${pkg} \u767B\u8BB0\u7248\u672C ${before ?? "\uFF08\u65E0\uFF09"} \u2192 ${latest}`);
+  }
+  if (changed) {
+    try {
+      await writeRegisteredToolVersions(opts.dataDir, versions);
+    } catch (err) {
+      log3(`[connector-tools] \u767B\u8BB0\u7248\u672C\u843D\u76D8\u5931\u8D25\uFF08\u672C\u8FDB\u7A0B\u5185\u4ECD\u751F\u6548\uFF09\uFF1A${String(err)}`);
+    }
+  }
+  return { versions, results };
+}
+function pickToolVersions(registered, tools) {
+  const out = {};
+  for (const t of tools) {
+    const v2 = registered[t];
+    if (v2) out[t] = v2;
+  }
+  return out;
+}
+var import_promises14, import_node_path25, NPM_PROBE_TIMEOUT_MS;
+var init_connector_tool_versions = __esm({
+  "../server/src/governance/connector-tool-versions.ts"() {
+    "use strict";
+    import_promises14 = require("node:fs/promises");
+    import_node_path25 = require("node:path");
+    init_src8();
+    NPM_PROBE_TIMEOUT_MS = 3e3;
+  }
+});
+
 // ../server/src/design/board-watch.ts
 function decideBoardLetter(c, nowMs, quietMs) {
   if (c.hasOpenWatchLetter) return false;
@@ -255996,6 +256376,7 @@ var init_src11 = __esm({
     init_builtin_skills();
     init_chat_builtin_skills();
     init_connector_skills();
+    init_connector_tool_versions();
     init_board_watch();
     init_ephemeral_project();
     init_run_settlement();
@@ -256858,6 +257239,7 @@ function materializeBuiltins(builtins, runtimeKind, opts) {
 var CONNECTOR_SKILL_SOURCES = [
   { connectorId: "feishu", baseUrl: FEISHU_WELL_KNOWN_SKILLS_BASE }
 ];
+var registeredToolVersions = {};
 async function readAllConnectorSkills(dataDir) {
   const out = [];
   for (const src of CONNECTOR_SKILL_SOURCES) {
@@ -256889,11 +257271,18 @@ async function refreshConnectorSkillsNow(dataDir, apply) {
     }
   }
   if (out.length > 0) apply(out);
+  try {
+    const { versions } = await refreshConnectorToolVersions({ dataDir, log: (m2) => console.log(m2) });
+    registeredToolVersions = versions;
+  } catch (err) {
+    console.warn(`[serve] connector CLI \u767B\u8BB0\u7248\u672C\u5237\u65B0\u5931\u8D25\uFF0C\u6CBF\u7528\u4E0A\u4E00\u4EFD\uFF1A${String(err)}`);
+  }
   return results;
 }
 function refreshConnectorSkillsInBackground(dataDir, apply) {
   void refreshConnectorSkillsNow(dataDir, apply);
 }
+var CONNECTOR_SKILL_REFRESH_MS = 24 * 60 * 6e4;
 var SESSION_TOKEN_GRACE_MS = 15 * 6e4;
 function makeResumeRetryProxy(first, spawnFallback) {
   const relay = () => {
@@ -257087,6 +257476,8 @@ async function buildActorProvision(service, actorId, scope, onBrokerRefused) {
     env,
     wrapperPaths: [oasisWrapperScript(), ...provision.wrapperPaths],
     requiredTools: provision.requiredTools,
+    // 只挑本次真要用的那几个：job 里不塞无关工具的版本号。
+    requiredToolVersions: pickToolVersions(registeredToolVersions, provision.requiredTools),
     connectorCreds: provision.connectorCreds,
     cleanup: provision.cleanup
   };
@@ -258275,10 +258666,17 @@ async function startServe(opts) {
   });
   console.log(`[serve] loaded ${builtinSkills.length} builtin skill(s): ${builtinSkills.map((s2) => s2.id).join(", ") || "(none)"}`);
   connectorSkills = await readAllConnectorSkills(opts.dir);
+  registeredToolVersions = await readRegisteredToolVersions(opts.dir);
   console.log(`[serve] connector skills\uFF08\u843D\u76D8\u526F\u672C\uFF09\uFF1A${connectorSkills.length} \u4E2A`);
   refreshConnectorSkillsInBackground(opts.dir, (s2) => {
     connectorSkills = s2;
   });
+  const connectorSkillTimer = setInterval(() => {
+    refreshConnectorSkillsInBackground(opts.dir, (s2) => {
+      connectorSkills = s2;
+    });
+  }, CONNECTOR_SKILL_REFRESH_MS);
+  connectorSkillTimer.unref?.();
   if (defaultCompanyMigration.createdCompany) {
     const seededAt = (/* @__PURE__ */ new Date()).toISOString();
     for (const devActor of ["actor:human:yx"]) {
@@ -259148,6 +259546,7 @@ async function startServe(opts) {
         env: provision.env,
         wrapperPaths: provision.wrapperPaths,
         ...provision.requiredTools.length > 0 ? { requiredTools: provision.requiredTools } : {},
+        ...Object.keys(provision.requiredToolVersions).length > 0 ? { requiredToolVersions: provision.requiredToolVersions } : {},
         ...provision.connectorCreds.length > 0 ? { connectorCreds: provision.connectorCreds } : {}
       });
       const chunks = [];
@@ -260133,7 +260532,7 @@ async function startServe(opts) {
             console.warn(`[trace] chat run ${traceRunId} \u7EED\u8D26\u5F02\u5E38: ${String(err)}`);
           });
         };
-        const provision = isolatedKnowledgeTurn ? { env: {}, wrapperPaths: [], requiredTools: [], connectorCreds: [], cleanup: async () => void 0 } : await buildActorProvision(actorService, actorId);
+        const provision = isolatedKnowledgeTurn ? { env: {}, wrapperPaths: [], requiredTools: [], requiredToolVersions: {}, connectorCreds: [], cleanup: async () => void 0 } : await buildActorProvision(actorService, actorId);
         const actorCtx = await buildActorContext(actorService, actorId).catch(() => null);
         const chatResolvedModel = sessionModelOverride ?? actorCtx?.config?.model ?? void 0;
         const chatModel = chatResolvedModel ?? await registryStore.getRuntimeConfig(`runtime:${binding.nodeId}:${binding.runtimeKind}`).then((c) => c?.model).catch(() => void 0) ?? void 0;
@@ -260273,6 +260672,7 @@ async function startServe(opts) {
           },
           wrapperPaths: provision.wrapperPaths,
           ...provision.requiredTools.length > 0 ? { requiredTools: provision.requiredTools } : {},
+          ...Object.keys(provision.requiredToolVersions).length > 0 ? { requiredToolVersions: provision.requiredToolVersions } : {},
           ...provision.connectorCreds.length > 0 ? { connectorCreds: provision.connectorCreds } : {},
           ...requiredConnectors.length > 0 ? { requiredConnectorSlugs: requiredConnectors } : {}
         });
@@ -262894,6 +263294,7 @@ ${nodeFault}` : "");
       if (gitTimer) clearInterval(gitTimer);
       if (coordTimer) clearInterval(coordTimer);
       if (livenessTimer) clearInterval(livenessTimer);
+      clearInterval(connectorSkillTimer);
       if (orphanSweepTimer) clearInterval(orphanSweepTimer);
       for (const t of dropSweepTimers) clearInterval(t);
       if (deadlineClockTimer) clearInterval(deadlineClockTimer);
@@ -263092,7 +263493,7 @@ async function runSession(dispatchId, job, deps) {
       }
     }
     if (job.requiredTools?.length) {
-      const missing = await ensureConnectorTools(job.requiredTools);
+      const missing = await ensureConnectorTools(job.requiredTools, { versions: job.requiredToolVersions });
       if (missing.length) log2("[node-cli]", `  connector tools still missing (agent may fail): ${missing.join(", ")}`);
     }
     const prepared = await prepareConnectorsForJob(job);
@@ -263495,7 +263896,7 @@ function detectRuntimes() {
 
 // ../cli/src/daemon/workdir-handler.ts
 var import_node_fs19 = __toESM(require("node:fs"), 1);
-var import_node_path25 = __toESM(require("node:path"), 1);
+var import_node_path26 = __toESM(require("node:path"), 1);
 init_src6();
 init_src();
 var WORKDIR_READ_MAX_BYTES2 = 2 * 1024 * 1024;
@@ -263514,10 +263915,10 @@ function isSensitiveSegment(segment) {
 }
 function relPathIsSensitive(rel) {
   if (!rel) return false;
-  return rel.split(import_node_path25.default.sep).some((seg) => seg.length > 0 && isSensitiveSegment(seg));
+  return rel.split(import_node_path26.default.sep).some((seg) => seg.length > 0 && isSensitiveSegment(seg));
 }
 function withinBase(p2, base) {
-  return p2 === base || p2.startsWith(base + import_node_path25.default.sep);
+  return p2 === base || p2.startsWith(base + import_node_path26.default.sep);
 }
 function normalizeRel(raw) {
   const trimmed = (raw ?? "").trim();
@@ -263534,7 +263935,7 @@ async function trustedCanonicalContainer(req, logicalBase, dirKind) {
   } catch {
     return null;
   }
-  return isLegacy ? import_node_path25.default.join(trustedRootReal, "oasis-chat-sessions") : import_node_path25.default.join(trustedRootReal, "sessions", dirKind);
+  return isLegacy ? import_node_path26.default.join(trustedRootReal, "oasis-chat-sessions") : import_node_path26.default.join(trustedRootReal, "sessions", dirKind);
 }
 async function resolveWithinWorkdir(req) {
   const dirKind = sessionDirKind(req.runtimeKind);
@@ -263552,11 +263953,11 @@ async function resolveWithinWorkdir(req) {
   } catch {
     return { ok: false, code: "NOT_FOUND" };
   }
-  if (import_node_path25.default.dirname(base) !== canonicalContainer) return { ok: false, code: "PATH_ESCAPE" };
+  if (import_node_path26.default.dirname(base) !== canonicalContainer) return { ok: false, code: "PATH_ESCAPE" };
   const rel = normalizeRel(req.path);
-  const requested = import_node_path25.default.resolve(base, rel);
+  const requested = import_node_path26.default.resolve(base, rel);
   if (!withinBase(requested, base)) return { ok: false, code: "PATH_ESCAPE" };
-  const cleanRel = base === requested ? "" : import_node_path25.default.relative(base, requested);
+  const cleanRel = base === requested ? "" : import_node_path26.default.relative(base, requested);
   if (relPathIsSensitive(cleanRel)) return { ok: false, code: "SENSITIVE" };
   let real;
   try {
@@ -263566,7 +263967,7 @@ async function resolveWithinWorkdir(req) {
     return { ok: false, code: "PATH_ESCAPE" };
   }
   if (!withinBase(real, base)) return { ok: false, code: "PATH_ESCAPE" };
-  const realRel = base === real ? "" : import_node_path25.default.relative(base, real);
+  const realRel = base === real ? "" : import_node_path26.default.relative(base, real);
   if (relPathIsSensitive(realRel)) return { ok: false, code: "SENSITIVE" };
   return { ok: true, base, real };
 }
@@ -263602,7 +264003,7 @@ async function handleWorkdirList(req) {
       const slice = truncated ? visible.slice(0, WORKDIR_LIST_MAX_ENTRIES) : visible;
       const entries = [];
       for (const d of slice) {
-        const abs = import_node_path25.default.join(anchor, d.name);
+        const abs = import_node_path26.default.join(anchor, d.name);
         try {
           const st = await import_node_fs19.default.promises.lstat(abs);
           if (st.isSymbolicLink()) continue;
@@ -263634,7 +264035,7 @@ async function verifyOpenedFd(fh, base, fallback) {
   const fdReal = await fdCanonicalPath(fh);
   if (fdReal === null) return { anchor: fallback };
   if (!withinBase(fdReal, base)) return { error: { ok: false, code: "PATH_ESCAPE" } };
-  const fdRel = base === fdReal ? "" : import_node_path25.default.relative(base, fdReal);
+  const fdRel = base === fdReal ? "" : import_node_path26.default.relative(base, fdReal);
   if (relPathIsSensitive(fdRel)) return { error: { ok: false, code: "SENSITIVE" } };
   return { anchor: `/proc/self/fd/${fh.fd}` };
 }
@@ -263723,7 +264124,7 @@ function looksBinary(bytes2) {
 function contentTypeFor(absPath, bytes2) {
   const sniffed = sniffContentType(bytes2);
   if (sniffed) return sniffed;
-  const ext = import_node_path25.default.extname(absPath).toLowerCase();
+  const ext = import_node_path26.default.extname(absPath).toLowerCase();
   if (EXT_CONTENT_TYPE[ext]) return EXT_CONTENT_TYPE[ext];
   return looksBinary(bytes2) ? "application/octet-stream" : "text/plain; charset=utf-8";
 }
@@ -264319,17 +264720,17 @@ var RuntimeRouterAdapter = class {
 // ../cli/src/daemon/reap-claude-projects.ts
 var import_node_fs20 = __toESM(require("node:fs"), 1);
 var import_node_os10 = __toESM(require("node:os"), 1);
-var import_node_path26 = __toESM(require("node:path"), 1);
+var import_node_path27 = __toESM(require("node:path"), 1);
 function claudeProjectSlug(cwd) {
   return cwd.replace(/[^a-zA-Z0-9]/g, "-");
 }
 function claudeProjectsRoot() {
-  const configDir = process.env["CLAUDE_CONFIG_DIR"] || import_node_path26.default.join(import_node_os10.default.homedir(), ".claude");
-  return import_node_path26.default.join(configDir, "projects");
+  const configDir = process.env["CLAUDE_CONFIG_DIR"] || import_node_path27.default.join(import_node_os10.default.homedir(), ".claude");
+  return import_node_path27.default.join(configDir, "projects");
 }
 function reapClaudeProjects(workdir, runtimeKind) {
   if (runtimeKind !== "claude" && runtimeKind !== "claude-code") return;
-  const dir = import_node_path26.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
+  const dir = import_node_path27.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
   if (!import_node_fs20.default.existsSync(dir)) return;
   try {
     import_node_fs20.default.rmSync(dir, { recursive: true, force: true });
@@ -264338,7 +264739,7 @@ function reapClaudeProjects(workdir, runtimeKind) {
 }
 function measureClaudeProjects(workdir, runtimeKind) {
   if (runtimeKind !== "claude" && runtimeKind !== "claude-code") return 0;
-  const dir = import_node_path26.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
+  const dir = import_node_path27.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
   return dirSizeBytes2(dir);
 }
 function dirSizeBytes2(dir) {
@@ -264350,7 +264751,7 @@ function dirSizeBytes2(dir) {
     return 0;
   }
   for (const e of entries) {
-    const p2 = import_node_path26.default.join(dir, e.name);
+    const p2 = import_node_path27.default.join(dir, e.name);
     if (e.isSymbolicLink()) continue;
     if (e.isDirectory()) {
       total += dirSizeBytes2(p2);
@@ -266761,7 +267162,7 @@ function fieldsFromFlags(flags, ownFlags) {
   }
   return Object.keys(fields).length > 0 ? fields : void 0;
 }
-function buildStageOp(cmd, flags, positional, readFile8 = (file) => fs39.readFileSync(file, "utf8")) {
+function buildStageOp(cmd, flags, positional, readFile9 = (file) => fs39.readFileSync(file, "utf8")) {
   switch (cmd) {
     case "link":
       return {
@@ -266783,7 +267184,7 @@ function buildStageOp(cmd, flags, positional, readFile8 = (file) => fs39.readFil
         ...flags.get("title") !== void 0 ? { title: flags.get("title") } : {},
         ...(flags.get("brief") ?? flags.get("description")) !== void 0 ? { description: flags.get("brief") ?? flags.get("description") } : {},
         ...flags.get("input") !== void 0 ? { inputs: flags.get("input").split(",").map((to) => ({ to: to.trim() })) } : {},
-        ...partsFile !== void 0 ? { parts: JSON.parse(readFile8(partsFile)) } : {},
+        ...partsFile !== void 0 ? { parts: JSON.parse(readFile9(partsFile)) } : {},
         ...fields !== void 0 ? { fields } : {}
       };
     }
@@ -270150,7 +270551,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.7" : "dev";
+var PKG_VERSION = true ? "2.2.8" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis_test_v2",
-  "version": "2.2.7",
+  "version": "2.2.8",
   "description": "Oasis node daemon + CLI — background daemon, auto-start, full server CLI",
   "bin": {
     "oasis": "./dist/index.js"
@@ -26,6 +26,6 @@
     "node": ">=20"
   },
   "oasisRelease": {
-    "sourceHead": "b470dcedc3aa56cd5921435d5d01b17a5cab8ed3"
+    "sourceHead": "6677c1551a7015b5a37a4fc4c3d7f7e7aaf395e6"
   }
 }