oasis_test_v2 2.2.7 → 2.2.9

package/dist/index.js

@@ -665,7 +665,7 @@ function isAgentAvatarPresetRef(ref2) {
   const id = ref2.slice(AGENT_AVATAR_PRESET_PREFIX.length);
   return AGENT_AVATAR_PRESET_IDS.includes(id);
 }
-var AGENT_AVATAR_PRESET_PREFIX, AGENT_AVATAR_LEGACY_PRESET_IDS, AGENT_AVATAR_V2_PRESET_IDS, AGENT_AVATAR_PRESET_IDS;
+var AGENT_AVATAR_PRESET_PREFIX, AGENT_AVATAR_LEGACY_PRESET_IDS, AGENT_AVATAR_V2_PRESET_IDS, AGENT_AVATAR_PRESET_IDS, SYSTEM_AVATAR_REF;
 var init_avatar = __esm({
   "../contract/src/avatar.ts"() {
     "use strict";
@@ -695,6 +695,7 @@ var init_avatar = __esm({
       ...AGENT_AVATAR_LEGACY_PRESET_IDS,
       ...AGENT_AVATAR_V2_PRESET_IDS
     ];
+    SYSTEM_AVATAR_REF = "preset:system";
   }
 });
 
@@ -910,10 +911,15 @@ var init_link_windows = __esm({
 });
 
 // ../contract/src/registry.ts
-var AGENT_PREFS_DEFAULTS, SkillOwnedByAnotherCompanyError;
+function isSystemActorId(id) {
+  return typeof id === "string" && id.startsWith(SYSTEM_ACTOR_ID_PREFIX);
+}
+var SYSTEM_ACTOR_ID_PREFIX, SYSTEM_ACTOR_DISPLAY_NAME, AGENT_PREFS_DEFAULTS, SkillOwnedByAnotherCompanyError;
 var init_registry = __esm({
   "../contract/src/registry.ts"() {
     "use strict";
+    SYSTEM_ACTOR_ID_PREFIX = "actor:system";
+    SYSTEM_ACTOR_DISPLAY_NAME = "\u7CFB\u7EDF";
     AGENT_PREFS_DEFAULTS = { memoryEnabled: true };
     SkillOwnedByAnotherCompanyError = class extends Error {
       constructor(skillId, companyId) {
@@ -17406,6 +17412,7 @@ ${supplemental.taskAppend.trim()}
           ...Object.keys(jobEnv).length > 0 ? { env: jobEnv } : {},
           ...provisioned?.wrapperPaths && provisioned.wrapperPaths.length > 0 ? { wrapperPaths: provisioned.wrapperPaths } : {},
           ...provisioned?.requiredTools && provisioned.requiredTools.length > 0 ? { requiredTools: provisioned.requiredTools } : {},
+          ...provisioned?.requiredToolVersions && Object.keys(provisioned.requiredToolVersions).length > 0 ? { requiredToolVersions: provisioned.requiredToolVersions } : {},
           // 凭据本体随 job 下发，供**节点侧本机注入**（见上方 provision 注释）。
           ...provisioned?.connectorCreds && provisioned.connectorCreds.length > 0 ? { connectorCreds: provisioned.connectorCreds } : {},
           ...executionEnv !== void 0 ? { executionEnv } : {},
@@ -29522,7 +29529,7 @@ async function sweepStaleChatTurns(deps) {
       `[chat-turn-sweep] \u8F6E\u6B21 ${turn.id}\uFF08\u4F1A\u8BDD ${turn.chatSessionId}\uFF09\u6536\u53E3\u4E3A ${outcome.status}\uFF08${outcome.reason}\uFF09\uFF0C\u4F1A\u8BDD\u69FD\u5DF2\u91CA\u653E`
     );
     const settledStatus = outcome.settled ? outcome.status : void 0;
-    if (deps.onTurnSettled && settledStatus && settledStatus !== "succeeded") {
+    if (deps.onTurnSettled && settledStatus) {
       await deps.onTurnSettled({
         chatSessionId: turn.chatSessionId,
         turnId: turn.id,
@@ -162346,6 +162353,17 @@ var init_planner = __esm({
 });
 
 // ../server/src/domains/collab/workorders.ts
+function systemActorFallback(id) {
+  return isSystemActorId(id) ? { name: SYSTEM_ACTOR_DISPLAY_NAME, avatar: SYSTEM_AVATAR_REF } : void 0;
+}
+function actorRefFieldsOf(a) {
+  const avatar = a.avatar ?? (a.kind === "system" ? SYSTEM_AVATAR_REF : void 0);
+  return {
+    name: a.name,
+    ...a.roles[0] ? { role: a.roles[0] } : {},
+    ...avatar ? { avatar } : {}
+  };
+}
 function overviewRootIdOf(arts) {
   const roots = arts.filter((a) => a.inputs.length === 0);
   if (roots.length <= 1) return roots[0]?.id;
@@ -162606,6 +162624,7 @@ var init_workorders = __esm({
   "../server/src/domains/collab/workorders.ts"() {
     "use strict";
     init_src5();
+    init_src();
     init_node_state();
     init_planner();
     init_workorder_detail();
@@ -195837,7 +195856,15 @@ var init_service3 = __esm({
             ...companyId ? { companyId } : {},
             ...snapshot ? { parentConversationSnapshot: snapshot } : {},
             extraSystemPrompt: EXPERT_DELEGATION_SYSTEM_PROMPT,
-            ..._DelegationService.inboundBundle(inbound) ? { workspaceBundle: _DelegationService.inboundBundle(inbound) } : {}
+            ..._DelegationService.inboundBundle(inbound) ? { workspaceBundle: _DelegationService.inboundBundle(inbound) } : {},
+            /* 派发这一侧要拿它们建 `chat_items` 账本（见本文件 `DelegationDispatchRequest` 的注释）。
+               轮次口径与 `bindChildRunToPlaceholder` / `seedChildRoundRows` **逐字一致**：
+               `record.roundSummaries.length + 1`。三处一旦不同源，item 就会挂到上一轮那条回答行上。 */
+            assistantMessageId: childRoundMessageIds(
+              record8.childSessionId,
+              record8.roundSummaries.length + 1
+            ).placeholderId,
+            chatTurnId: turnId
           });
           outcomeSettled = true;
           await opts?.onDispatched?.().catch((err) => console.warn(`[delegation] \u5F85\u8F6C\u8FBE\u6807\u8BB0\u5DF2\u6D88\u8D39\u5931\u8D25\uFF08${record8.id}\uFF09: ${String(err)}`));
@@ -195996,11 +196023,12 @@ var init_service3 = __esm({
           );
         }
       }
-      async settleFromSweep(childSessionId, reason, companyId) {
+      async settleFromSweep(childSessionId, reason, companyId, opts) {
         const store = await this.options.resolveStore(companyId).catch(() => null);
         if (!store) return null;
         const record8 = await store.getByChildSession(childSessionId).catch(() => null);
         if (!record8 || record8.state !== "running") return record8;
+        if (opts?.outcome === "succeeded") return this.settleSucceededFromSweep(record8, companyId);
         const at = this.now();
         const settledSeqAtRound = record8.settledSeq + 1;
         const newSummary = {
@@ -196020,6 +196048,58 @@ var init_service3 = __esm({
         if (settled) await this.notifySettled(settled, companyId);
         return settled;
       }
+      /**
+       * 清扫拍把这一轮收成 **succeeded** 时的收口（2026-09-10 生产实测的那个洞）。
+       *
+       * 什么时候会走到这里：`settleRound` 是**派发那一刻建的闭包**，serve 一重启它就随老进程消失，
+       * 这一轮改由 `chat-recovery` 重挂、跑完、把 assistant 行写成 done；随后清扫拍按「行已终态」
+       * 把轮次收成 succeeded。此前这一支不外报，于是**没有任何人**去记这一轮、判终态、通知父会话、
+       * 把产物搬回主会话工作区——专家干完了，页面上却永远转圈。
+       * 现场：委派 e6196ab7 第 6 轮 04:02 写完 `outputs/org-collaboration-relationship.md` 并收尾，
+       * 轮次 04:03:30 succeeded，台账仍是 `running`/5 轮、`settled_at` 空。
+       *
+       * 与失败那一支的差别只有三处，其余（追加式记账、`settledSeq`、唯一出口 `notifySettled`）逐字相同：
+       *  ① 摘要正文取**子会话这一轮真正的回答**，不是「被时钟闭合」那句；
+       *  ② 收成 `done`，不带 `failureKind`，`consecutiveFails` 归零；
+       *  ③ 多一道幂等闸，见下。
+       *
+       * **幂等闸**：`roundSummaries.length > dispatchSeq` 就说明这一轮 `settleRound` 已经记过了
+       * （第 N 轮用的是 `dispatchSeq = N-1`），直接收手。没有它，「本进程没重启、`settleRound`
+       * 正在后台跑收尾」与这一拍撞车时会把同一轮记两遍——这正是这一支原先被整个关掉的理由，
+       * 现在用一道显式的闸换掉那个一刀切。
+       */
+      async settleSucceededFromSweep(record8, companyId) {
+        const store = await this.options.resolveStore(companyId).catch(() => null);
+        if (!store) return record8;
+        const roundsRecorded = record8.roundSummaries.length;
+        const thisRound = (record8.dispatchSeq ?? 0) + 1;
+        if (roundsRecorded >= thisRound) return record8;
+        const at = this.now();
+        const text5 = await this.readChildRoundAnswer(record8, thisRound, companyId);
+        const settledSeqAtRound = record8.settledSeq + 1;
+        const newSummary = {
+          round: (record8.roundSummaries[record8.roundSummaries.length - 1]?.round ?? 0) + 1,
+          text: text5 || "\u8FD9\u4E00\u8F6E\u5DF2\u5B8C\u6210\uFF08\u6536\u5C3E\u65F6\u6B63\u6587\u6CA1\u8BFB\u5230\uFF0C\u4EA7\u7269\u4EE5\u5DE5\u4F5C\u533A\u91CC\u7684\u6587\u4EF6\u4E3A\u51C6\uFF09\u3002",
+          at,
+          settledSeq: settledSeqAtRound
+        };
+        const settled = await store.appendRoundSummary(record8.id, newSummary, {
+          state: "done",
+          consecutiveFails: 0,
+          settledSeq: settledSeqAtRound,
+          settledAt: at
+        }).catch(() => null);
+        if (settled) await this.notifySettled(settled, companyId);
+        return settled;
+      }
+      /** 子会话第 `round` 轮那条回答行的正文（`childRoundMessageIds` 是唯一的 id 口径）。 */
+      async readChildRoundAnswer(record8, round, companyId) {
+        const chatStore = await this.options.resolveChatSessions(companyId).catch(() => null);
+        if (!chatStore?.listMessages) return "";
+        const { placeholderId } = childRoundMessageIds(record8.childSessionId, round);
+        const messages = await chatStore.listMessages(record8.childSessionId).catch(() => []);
+        return (messages.find((m2) => m2.id === placeholderId)?.content ?? "").trim();
+      }
       /**
        * 队列里还有话没送到专家眼前 → 起下一轮，**把队列内容拼进 message**（§6.2.1 第二条路径）。
        *
@@ -197101,7 +197181,11 @@ function toChatDispatchRequest(request2) {
     delegatedChildTurn: true,
     // §6.1.3 去程：`--file` 带来的字节就在这一格。**丢了它命令照样回 202**，
     // 而专家的工作区里什么都没有——这正是上一版真实发生过的形态。
-    ...request2.workspaceBundle ? { workspaceBundle: request2.workspaceBundle } : {}
+    ...request2.workspaceBundle ? { workspaceBundle: request2.workspaceBundle } : {},
+    // 这两格漏了同样**不报错**：子会话照跑、正文照回，只是 `chat_items` 的行没有 message_id、
+    // turnId 回落成 `chat-run-turn:<runId>`，右栏面板的增量流对不上轮——正是本文件存在的理由。
+    ...request2.assistantMessageId ? { assistantMessageId: request2.assistantMessageId } : {},
+    ...request2.chatTurnId ? { chatTurnId: request2.chatTurnId } : {}
   };
 }
 function applyWorkspaceBundle(target, bundle) {
@@ -197321,27 +197405,77 @@ var init_assembly = __esm({
 });
 
 // ../server/src/domains/delegations/child-live-turn.ts
-function registerDelegatedChildTurn(liveChat, childSessionId, session) {
+function registerDelegatedChildTurn(liveChat, childSessionId, session, deps = {}) {
+  const log3 = deps.log ?? ((m2) => console.warn(m2));
   const appendInput = session.appendInput;
-  if (typeof appendInput !== "function" || session.canAppendInput === false) return;
+  const canAppend = typeof appendInput === "function" && session.canAppendInput !== false;
+  const ledger = new ChatItemLedger({
+    ...deps.items ? { items: deps.items } : {},
+    sessionId: childSessionId,
+    turnId: deps.turnId ?? fallbackTurnId(session.runId),
+    ...session.runId ? { runId: session.runId } : {},
+    ...deps.assistantMessageId ? { messageId: deps.assistantMessageId } : {},
+    ...deps.versionSeed !== void 0 ? { versionSeed: deps.versionSeed } : {},
+    log: log3
+  });
   const ctrl = liveChat.start(childSessionId, {
     runtimeSessionId: session.id,
     ...session.runId ? { runId: session.runId } : {},
     kill: () => {
       void session.kill?.();
     },
-    appendInput: (input) => appendInput.call(session, input),
+    // 纪律 ①：插不进去的 runtime 也登记，只是这两格照实报。
+    ...canAppend && appendInput ? { appendInput: (input) => appendInput.call(session, input) } : {},
     // **每次现读**，不快照：一轮跑到收尾时 stdin 会先关，那之后 runtime 自己会回
     // `session-closing`，判断权本就该留在它那儿（同 `/api/chat` 那条路的写法）。
     get canAppendInput() {
-      return session.canAppendInput !== false;
+      return typeof session.appendInput === "function" && session.canAppendInput !== false;
+    }
+  }, { items: ledger });
+  if (deps.assistantMessageId) ctrl.setAssistantMessageId(deps.assistantMessageId);
+  const hasChannels = typeof session.onOutput === "function" || typeof session.onTelemetry === "function" || typeof session.onLiveEvent === "function";
+  const normalized4 = typeof session.onNormalizedProviderEvent === "function" ? {
+    onNormalizedProviderEvent: session.onNormalizedProviderEvent.bind(session),
+    finishTurn: (signal) => session.finishNormalizedTurn?.(signal)
+  } : hasChannels ? attachStreamNormalizer(
+    {
+      id: session.id,
+      onOutput: (cb) => session.onOutput?.(cb),
+      onTelemetry: (cb) => session.onTelemetry?.(cb),
+      onLiveEvent: (cb) => session.onLiveEvent?.(cb),
+      ...session.supportsLiveProtocol !== void 0 ? { supportsLiveProtocol: session.supportsLiveProtocol } : {}
+    },
+    {
+      providerName: deps.runtimeKind ?? "runtime",
+      fallbackTurnId: `oasis-turn:${session.runId ?? session.id}`
+    }
+  ) : null;
+  normalized4?.onNormalizedProviderEvent((event) => {
+    try {
+      ctrl.applyNormalizedEvent(event);
+    } catch {
     }
   });
-  void session.done.then(() => ctrl.finish("done"), () => ctrl.finish("error"));
+  const settle = async (signal) => {
+    try {
+      normalized4?.finishTurn(signal);
+    } catch {
+    }
+    try {
+      ledger.finish(signal);
+      await ledger.drain();
+    } catch (err) {
+      log3(`[delegation] \u5B50\u4F1A\u8BDD ${childSessionId} \u8D26\u672C\u6536\u5C3E\u5931\u8D25: ${String(err)}`);
+    }
+    ctrl.finish(signal === "completed" ? "done" : "error");
+  };
+  void session.done.then(() => settle("completed"), () => settle("failed"));
 }
 var init_child_live_turn = __esm({
   "../server/src/domains/delegations/child-live-turn.ts"() {
     "use strict";
+    init_src6();
+    init_chat_item_ledger();
   }
 });
 
@@ -197455,10 +197589,12 @@ var init_tool_home = __esm({
 });
 
 // ../connectors/src/_base/install.ts
-function installPlan(cmd, platform2, toolsPrefix) {
-  if (cmd === "lark-cli") {
+function installPlan(cmd, platform2, toolsPrefix, version2) {
+  const npmPkg = NPM_TOOL_PACKAGES[cmd];
+  if (npmPkg) {
     const npm = platform2 === "win32" ? "npm.cmd" : "npm";
-    return [{ file: npm, args: ["install", "-g", "--prefix", toolsPrefix, "@larksuite/cli"], ensureDir: toolsPrefix }];
+    const spec = version2 ? `${npmPkg}@${version2}` : npmPkg;
+    return [{ file: npm, args: ["install", "-g", "--prefix", toolsPrefix, spec], ensureDir: toolsPrefix }];
   }
   const pkg = cmd === "gh" ? { brew: "gh", apt: "gh", dnf: "gh", pacman: "github-cli", apk: "github-cli", winget: "GitHub.cli", choco: "gh", scoop: "gh" } : { brew: "git", apt: "git", dnf: "git", pacman: "git", apk: "git", winget: "Git.Git", choco: "git", scoop: "git" };
   if (platform2 === "darwin") {
@@ -197503,17 +197639,54 @@ function defaultDeps() {
     mkdirp: (dir) => {
       (0, import_node_fs9.mkdirSync)(dir, { recursive: true });
     },
-    log: (msg) => console.warn(msg)
+    log: (msg) => console.warn(msg),
+    installedVersion: async (pkg, prefix) => readInstalledVersion(pkg, prefix)
   };
 }
-async function ensureToolInstalled(cmd, deps = {}) {
+function readInstalledVersion(pkg, prefix) {
+  const parts = pkg.split("/");
+  for (const mid of [["lib", "node_modules"], ["node_modules"]]) {
+    const file = (0, import_node_path11.join)(prefix, ...mid, ...parts, "package.json");
+    if (!(0, import_node_fs9.existsSync)(file)) continue;
+    try {
+      const v2 = JSON.parse((0, import_node_fs9.readFileSync)(file, "utf8")).version;
+      if (typeof v2 === "string" && v2) return v2;
+    } catch {
+    }
+  }
+  return null;
+}
+async function alignToWantedVersion(cmd, wanted, d) {
+  if (alignedVersion.get(cmd) === wanted) return;
+  const pkg = NPM_TOOL_PACKAGES[cmd];
+  if (!pkg) return;
+  const installed = await d.installedVersion(pkg, d.toolsPrefix);
+  if (!installed) return;
+  if (installed === wanted) {
+    alignedVersion.set(cmd, wanted);
+    return;
+  }
+  const npm = d.platform === "win32" ? "npm.cmd" : "npm";
+  d.log(`[connector-install] ${cmd} ${installed} \u2192 ${wanted}\uFF08\u670D\u52A1\u7AEF\u767B\u8BB0\u7248\u672C\uFF09\uFF0C\u5B89\u88C5\u4E2D\u2026`);
+  try {
+    d.mkdirp(d.toolsPrefix);
+    await d.run(npm, ["install", "-g", "--prefix", d.toolsPrefix, `${pkg}@${wanted}`]);
+    alignedVersion.set(cmd, wanted);
+    d.log(`[connector-install] ${cmd} \u5DF2\u5BF9\u9F50\u5230 ${wanted}`);
+  } catch (err) {
+    d.log(`[connector-install] ${cmd} \u5BF9\u9F50\u5230 ${wanted} \u5931\u8D25\uFF0C\u7EE7\u7EED\u7528 ${installed}\uFF1A${String(err)}`);
+  }
+}
+async function ensureToolInstalled(cmd, opts = {}) {
+  const { versions, ...deps } = opts;
   const d = { ...defaultDeps(), ...deps };
-  if (confirmed.has(cmd)) return true;
-  if (await d.isPresent(cmd)) {
+  const wanted = versions?.[cmd];
+  if (confirmed.has(cmd) || await d.isPresent(cmd)) {
     confirmed.add(cmd);
+    if (wanted) await alignToWantedVersion(cmd, wanted, d);
     return true;
   }
-  const steps = installPlan(cmd, d.platform, d.toolsPrefix);
+  const steps = installPlan(cmd, d.platform, d.toolsPrefix, wanted);
   if (steps.length === 0) {
     d.log(`[connector-install] ${cmd} \u7F3A\u5931\uFF0C\u4E14 ${d.platform} \u4E0B\u65E0\u5DF2\u77E5\u81EA\u52A8\u5B89\u88C5\u6CD5\u2014\u2014\u8BF7\u624B\u52A8\u5B89\u88C5`);
     return false;
@@ -197526,6 +197699,7 @@ async function ensureToolInstalled(cmd, deps = {}) {
       await d.run(step.file, step.args);
       if (await d.isPresent(cmd)) {
         confirmed.add(cmd);
+        if (wanted) alignedVersion.set(cmd, wanted);
         d.log(`[connector-install] ${cmd} \u5B89\u88C5\u6210\u529F\uFF08${step.file} ${step.args.join(" ")}\uFF09`);
         return true;
       }
@@ -197536,15 +197710,15 @@ async function ensureToolInstalled(cmd, deps = {}) {
   d.log(`[connector-install] ${cmd} \u81EA\u52A8\u5B89\u88C5\u672A\u6210\u529F\u2014\u2014\u5C06\u56DE\u9000\u5230 wrapper/\u547D\u4EE4\u81EA\u8EAB\u62A5\u9519`);
   return false;
 }
-async function ensureConnectorTools(tools, deps = {}) {
+async function ensureConnectorTools(tools, opts = {}) {
   if (!tools || tools.length === 0) return [];
   const missing = [];
   for (const cmd of tools) {
-    if (!await ensureToolInstalled(cmd, deps)) missing.push(cmd);
+    if (!await ensureToolInstalled(cmd, opts)) missing.push(cmd);
   }
   return missing;
 }
-var import_node_child_process12, import_node_util2, import_node_fs9, import_node_path11, execFileAsync, confirmed;
+var import_node_child_process12, import_node_util2, import_node_fs9, import_node_path11, execFileAsync, NPM_TOOL_PACKAGES, confirmed, alignedVersion;
 var init_install = __esm({
   "../connectors/src/_base/install.ts"() {
     "use strict";
@@ -197554,7 +197728,9 @@ var init_install = __esm({
     import_node_path11 = require("node:path");
     init_tool_home();
     execFileAsync = (0, import_node_util2.promisify)(import_node_child_process12.execFile);
+    NPM_TOOL_PACKAGES = { "lark-cli": "@larksuite/cli" };
     confirmed = /* @__PURE__ */ new Set();
+    alignedVersion = /* @__PURE__ */ new Map();
   }
 });
 
@@ -201625,7 +201801,7 @@ var init_connector_adapter = __esm({
       async spawn(job) {
         const t0 = Date.now();
         if (job.requiredTools?.length) {
-          const missing = await ensureConnectorTools(job.requiredTools);
+          const missing = await ensureConnectorTools(job.requiredTools, { versions: job.requiredToolVersions });
           if (missing.length) log("[adapter]", `  connector tools still missing (agent may fail): ${missing.join(", ")}`);
         }
         const prepared = await prepareConnectorsForJob(job);
@@ -201746,7 +201922,7 @@ async function draftActorResolver(registry2) {
   const byId = new Map(actors.map((a) => [a.id, a]));
   return (id) => {
     const a = byId.get(id);
-    return a ? { name: a.name, ...a.roles[0] ? { role: a.roles[0] } : {}, ...a.avatar ? { avatar: a.avatar } : {} } : void 0;
+    return a ? actorRefFieldsOf(a) : systemActorFallback(id);
   };
 }
 async function draftRoleStaffingResolver(registry2) {
@@ -203289,13 +203465,22 @@ async function startOasisServer(opts) {
       resolveStore: opts.delegationStoreFor,
       resolveChatSessions: resolveChatSessionsForDelegation,
       resolveActors: async (companyId) => (await actorsDomain2.resolveCtx(companyId)).service,
-      // **派发完顺手把子会话这一轮登记进 live 注册表**（v2 bug 0088）。缺这一步时下面那行
-      // `appendToChild` 恒回 `no-live-turn`——注册表里从来没有以 `childSessionId` 为键的轮，
-      // 于是每一条 `--continue` 转达都落队列，专家要等本轮跑完才看见「手上这段作废」。
-      // 理由与两条纪律见 `child-live-turn.ts` 的文件头。
+      /* **派发完顺手把子会话这一轮登记进 live 注册表，并给它接上 `chat_items` 账本。**
+         两件事的成因不同，都在 `child-live-turn.ts` 的文件头：
+          · 不登记 → 下面那行 `appendToChild` 恒回 `no-live-turn`，每一条 `--follow-up` 转达
+            都落队列，专家要等本轮跑完才看见「手上这段作废」（v2 bug 0088）；
+          · 不接账本 → 子会话在 `chat_items` 里只有 storage 层镜像来的一问一答两行纯文字，
+            右栏面板只能靠详情接口拿 run_id 去轨迹表**现折**，跑的过程中一片空白。 */
       dispatchChat: async (request2) => {
         const session = await dispatchChat(request2);
-        registerDelegatedChildTurn(liveChat, request2.chatSessionId, session);
+        const itemStore = opts.resolveChatItems ? await opts.resolveChatItems(request2.companyId).catch(() => void 0) : opts.chatItems;
+        const versionSeed = itemStore ? await itemStore.sessionVersionCursor(request2.chatSessionId).catch(() => 0) : 0;
+        registerDelegatedChildTurn(liveChat, request2.chatSessionId, session, {
+          ...itemStore ? { items: itemStore } : {},
+          ...request2.chatTurnId ? { turnId: request2.chatTurnId } : {},
+          ...request2.assistantMessageId ? { assistantMessageId: request2.assistantMessageId } : {},
+          versionSeed
+        });
         return session;
       },
       appendToChild: (childSessionId, text5, extra) => liveChat.append(childSessionId, text5, extra),
@@ -204070,6 +204255,7 @@ async function startOasisServer(opts) {
         const rawBody = Buffer.concat(chunks).toString("utf8");
         const companyCtx = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname) : void 0;
         const currentCompanyId = companyCtx?.kind === "ok" ? companyCtx.companyId : void 0;
+        const connectorActorsService = async (companyId) => opts.actors ? (await opts.actors.resolveCtx(companyId ?? currentCompanyId)).service : void 0;
         const wodrafts = opts.resolveWorkorderDrafts ? await opts.resolveWorkorderDrafts(currentCompanyId) : opts.workorderDrafts;
         const wodraftPlannerIssues = (opts.resolveWorkorderDraftPlannerIssues && await opts.resolveWorkorderDraftPlannerIssues(currentCompanyId)) ?? opts.workorderDraftPlannerIssues ?? defaultDraftPlannerIssuesStore;
         const engine = await resolveEngine(currentCompanyId);
@@ -206133,12 +206319,12 @@ ${composed}`;
               const actorCtx = await opts.resolveActorContext(body2.actorId).catch(() => null);
               if (actorCtx) {
                 const { mkdtempSync: mkdtempSync6, mkdirSync: mkdirSync25, writeFileSync: writeFileSync18 } = await import("node:fs");
-                const { join: join39, dirname: dirname36 } = await import("node:path");
+                const { join: join40, dirname: dirname36 } = await import("node:path");
                 const { tmpdir: tmpdir12 } = await import("node:os");
-                const dir = mkdtempSync6(join39(tmpdir12(), "oasis-chat-"));
+                const dir = mkdtempSync6(join40(tmpdir12(), "oasis-chat-"));
                 if (actorCtx.config?.prompt) {
                   for (const [rel, content3] of Object.entries(splitIdentityFiles2(actorCtx.config.prompt))) {
-                    const file = join39(dir, rel);
+                    const file = join40(dir, rel);
                     mkdirSync25(dirname36(file), { recursive: true });
                     writeFileSync18(file, content3);
                   }
@@ -206150,12 +206336,12 @@ ${composed}`;
                     const s2 = byId.get(id);
                     return s2 ? `- **${s2.name}** (\`${s2.id}\`): ${s2.description}` : `- \`${id}\`\uFF08\u672A\u5728\u6280\u80FD\u5E93\u4E2D\uFF0C\u53EF\u80FD\u5DF2\u5378\u8F7D\uFF09`;
                   });
-                  writeFileSync18(join39(dir, "SKILLS.md"), ["# \u53EF\u7528\u6280\u80FD", "", "\u4EE5\u4E0B\u6280\u80FD\u5DF2\u4E3A\u4F60\u542F\u7528\uFF0C\u53EF\u5728\u672C\u6B21\u4F1A\u8BDD\u4E2D\u76F4\u63A5\u4F7F\u7528\uFF1A", "", ...lines].join("\n"));
+                  writeFileSync18(join40(dir, "SKILLS.md"), ["# \u53EF\u7528\u6280\u80FD", "", "\u4EE5\u4E0B\u6280\u80FD\u5DF2\u4E3A\u4F60\u542F\u7528\uFF0C\u53EF\u5728\u672C\u6B21\u4F1A\u8BDD\u4E2D\u76F4\u63A5\u4F7F\u7528\uFF1A", "", ...lines].join("\n"));
                 }
                 if (opts.materializeSkills) {
                   const skillFiles = await opts.materializeSkills(body2.actorId, "claude").catch(() => ({}));
                   for (const [rel, content3] of Object.entries(skillFiles)) {
-                    const file = join39(dir, rel);
+                    const file = join40(dir, rel);
                     mkdirSync25(dirname36(file), { recursive: true });
                     writeFileSync18(file, content3);
                   }
@@ -206169,7 +206355,7 @@ ${composed}`;
                     const modeNote = c.mode === "oauth" ? "OAuth \xB7 \u51ED\u8BC1\u7531\u5E73\u53F0\u7BA1\u7406\uFF0C\u901A\u8FC7\u5BF9\u5E94 CLI wrapper \u8C03\u7528" : "\u76F4\u63A5\u5199\u5165 \xB7 \u51ED\u8BC1\u5DF2\u6CE8\u5165\u73AF\u5883\u53D8\u91CF";
                     return `- **${c.name}** (\`${c.id}\`): ${statusNote} \xB7 ${modeNote}`;
                   });
-                  writeFileSync18(join39(dir, "CONNECTORS.md"), ["# \u53EF\u7528\u8FDE\u63A5\u5668", "", "\u4EE5\u4E0B\u8FDE\u63A5\u5668\u5DF2\u4E3A\u672C\u6B21\u4F1A\u8BDD\u914D\u7F6E\uFF0C\u51ED\u8BC1\u5DF2\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u6216 CLI wrapper \u6CE8\u5165\uFF0C\u65E0\u9700\u624B\u52A8\u914D\u7F6E\uFF1A", "", ...lines].join("\n"));
+                  writeFileSync18(join40(dir, "CONNECTORS.md"), ["# \u53EF\u7528\u8FDE\u63A5\u5668", "", "\u4EE5\u4E0B\u8FDE\u63A5\u5668\u5DF2\u4E3A\u672C\u6B21\u4F1A\u8BDD\u914D\u7F6E\uFF0C\u51ED\u8BC1\u5DF2\u901A\u8FC7\u73AF\u5883\u53D8\u91CF\u6216 CLI wrapper \u6CE8\u5165\uFF0C\u65E0\u9700\u624B\u52A8\u914D\u7F6E\uFF1A", "", ...lines].join("\n"));
                 }
                 spawnCwd = dir;
               }
@@ -206254,7 +206440,7 @@ ${composed}`;
         }
         if (req.method === "POST" && /^\/api\/connectors\/[^/]+\/disconnect$/.test(url.pathname)) {
           const connId = decodeURIComponent(url.pathname.split("/")[3] ?? "");
-          const svc = opts.actors?.service;
+          const svc = await connectorActorsService();
           if (!svc) {
             res.writeHead(501).end(JSON.stringify({ error: "actors service disabled" }));
             return;
@@ -206280,7 +206466,7 @@ ${composed}`;
         }
         if (req.method === "DELETE" && /^\/api\/connectors\/[^/]+$/.test(url.pathname)) {
           const connId = decodeURIComponent(url.pathname.slice("/api/connectors/".length));
-          const svc = opts.actors?.service;
+          const svc = await connectorActorsService();
           if (!svc) {
             res.writeHead(501).end(JSON.stringify({ error: "actors service disabled" }));
             return;
@@ -206299,6 +206485,31 @@ ${composed}`;
           }
           return;
         }
+        if (req.method === "DELETE" && /^\/api\/actors\/[^/]+\/connectors\/[^/]+$/.test(url.pathname)) {
+          const parts = url.pathname.split("/");
+          const actorId = decodeURIComponent(parts[3] ?? "");
+          const connId = decodeURIComponent(parts[5] ?? "");
+          const svc = await connectorActorsService();
+          if (!svc) {
+            res.writeHead(501).end(JSON.stringify({ error: "actors service disabled" }));
+            return;
+          }
+          try {
+            const { variablesDeleted } = await svc.deleteActorConnector(actorId, connId);
+            let channelDisabled = false;
+            if (connId === "feishu" && channelService) {
+              const b2 = await channelService.getBindingForActor(actorId);
+              if (b2 && b2.status !== "revoked") {
+                await channelService.disable(actorId);
+                channelDisabled = true;
+              }
+            }
+            res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, variablesDeleted, channelDisabled }));
+          } catch (e) {
+            res.writeHead(500).end(JSON.stringify({ error: String(e) }));
+          }
+          return;
+        }
         if (url.pathname === "/api/connectors/feishu/setup" && req.method === "GET") {
           res.writeHead(200, { "content-type": "text/event-stream", "cache-control": "no-cache", connection: "keep-alive" });
           const send = (obj2) => res.write(`data: ${JSON.stringify(obj2)}
@@ -206348,8 +206559,8 @@ ${composed}`;
               if (!errStr && pollData["client_id"]) {
                 const clientId = String(pollData["client_id"]);
                 const clientSecret = pollData["client_secret"] ? String(pollData["client_secret"]) : void 0;
-                if (opts.actors && clientSecret) {
-                  const svc = opts.actors.service;
+                const svc = clientSecret ? await connectorActorsService() : void 0;
+                if (svc && clientSecret) {
                   const credScope = actorIdParam ? { scope: "personal", actorId: actorIdParam } : { scope: "global" };
                   await svc.putVariable({ key: "FEISHU_APP_ID", value: clientId, ...credScope, connectorId: "feishu", encrypted: true });
                   await svc.putVariable({ key: "FEISHU_APP_SECRET", value: clientSecret, ...credScope, connectorId: "feishu", encrypted: true });
@@ -206412,6 +206623,8 @@ ${composed}`;
             });
             githubAppPending.put(state, {
               ...actorId ? { actorId } : {},
+              // 回调那一步没有鉴权头，解析不出公司——只能在这里记下来带过去。
+              ...currentCompanyId ? { companyId: currentCompanyId } : {},
               employeeSlug: nameSlug,
               createdAtMs: Date.now(),
               // 存下这次选的归属——回调时要拿它跟 GitHub 返回的 owner 比对。
@@ -206432,7 +206645,7 @@ ${composed}`;
         if (url.pathname === "/api/connectors/github/app/orgs" && req.method === "POST") {
           try {
             const { actorId } = JSON.parse(rawBody || "{}");
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const token = await svc.revealResolvedVariable("GITHUB_TOKEN", actorId);
             if (!token) {
@@ -206465,7 +206678,7 @@ ${composed}`;
         }
         if (url.pathname === "/api/connectors/github/app/available" && req.method === "POST") {
           try {
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const rows = await svc.listVariables();
             const plain = (key, actorId) => rows.find((r) => r.key === key && r.actorId === actorId && !r.encrypted)?.maskedValue ?? "";
@@ -206528,7 +206741,7 @@ ${composed}`;
               res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: "\u7F3A\u5C11 appId" }));
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const rows = await svc.listVariables();
             const owners = rows.filter((r) => r.key === "GITHUB_APP_ID" && !r.encrypted && r.maskedValue === appId);
@@ -206575,7 +206788,7 @@ ${composed}`;
               bad(400, "\u8FD9\u4E0D\u50CF\u4E00\u4E2A\u79C1\u94A5\u6587\u4EF6\u2014\u2014\u8BF7\u4E0A\u4F20 GitHub \u4E0B\u8F7D\u7684 .pem\uFF08\u5185\u5BB9\u4EE5 -----BEGIN ... PRIVATE KEY----- \u5F00\u5934\uFF09");
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             let meta;
             try {
@@ -206633,7 +206846,7 @@ ${composed}`;
         if (url.pathname === "/api/connectors/github/app/permissions" && req.method === "POST") {
           try {
             const { actorId } = JSON.parse(rawBody || "{}");
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const appId = await svc.revealResolvedVariable("GITHUB_APP_ID", actorId);
             const privateKeyPem = await svc.revealResolvedVariable("GITHUB_APP_PRIVATE_KEY", actorId);
@@ -206687,7 +206900,7 @@ ${composed}`;
               fail(problem.message);
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService(pending.companyId);
             if (!svc) throw new Error("actors service unavailable");
             const scope = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
             const put3 = (key, value2, encrypted) => svc.putVariable({ key, value: value2, ...scope, connectorId: "github", encrypted });
@@ -206756,7 +206969,7 @@ ${composed}`;
               reply({ ok: false, error: "pending" });
               return;
             }
-            const svc = opts.actors?.service;
+            const svc = await connectorActorsService();
             if (!svc) throw new Error("actors service unavailable");
             const scope = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
             const put3 = (key, value2, encrypted) => svc.putVariable({ key, value: value2, ...scope, connectorId: "github", encrypted });
@@ -206845,8 +207058,8 @@ ${composed}`;
               throw new Error(String(data["error_description"] ?? errStr ?? "login failed"));
             }
             if (!data["access_token"]) throw new Error("no access_token in response");
-            if (opts.actors) {
-              const svc = opts.actors.service;
+            const svc = await connectorActorsService();
+            if (svc) {
               if (actorId) {
                 await svc.putVariable({ key: "FEISHU_APP_ID", value: appId, scope: "personal", actorId, connectorId: "feishu", encrypted: true });
               } else {
@@ -206936,7 +207149,16 @@ ${composed}`;
               body: JSON.stringify({ client_id: GH_CLIENT_ID, scope: "repo,read:user,read:org" })
             });
             const d = await dr.json();
-            send({ type: "code", code: d.user_code, url: d.verification_uri });
+            const verifyUrl = (() => {
+              try {
+                const u = new URL(d.verification_uri);
+                u.searchParams.set("user_code", d.user_code);
+                return u.toString();
+              } catch {
+                return d.verification_uri;
+              }
+            })();
+            send({ type: "code", code: d.user_code, url: verifyUrl });
             const deadline = Date.now() + d.expires_in * 1e3;
             while (!closed && Date.now() < deadline) {
               await new Promise((r) => setTimeout(r, d.interval * 1e3));
@@ -206947,8 +207169,8 @@ ${composed}`;
               });
               const p2 = await pr.json();
               if (p2.access_token) {
-                if (opts.actors) {
-                  const svc = opts.actors.service;
+                const svc = await connectorActorsService();
+                if (svc) {
                   const connId = "github";
                   await svc.upsertConnector({ id: connId, name: "GitHub", mode: "oauth", status: "connected", account: "github" });
                   for (const [k2, v2] of [["GIT_AUTHOR_NAME", actorNameParam], ["GIT_AUTHOR_EMAIL", ""], ["GIT_COMMITTER_NAME", actorNameParam], ["GIT_COMMITTER_EMAIL", ""], ["EMAIL", ""]])
@@ -207051,7 +207273,7 @@ ${composed}`;
      * **接进既有那一拍，不新写一套扫描**——新写的那套迟早和既有判据漂移。
      * 委派域没装配时返回 null，调用方照常。
      */
-    settleDelegationFromSweep: (childSessionId, reason, companyId) => delegationService?.settleFromSweep(childSessionId, reason, companyId) ?? Promise.resolve(null),
+    settleDelegationFromSweep: (childSessionId, reason, companyId, opts2) => delegationService?.settleFromSweep(childSessionId, reason, companyId, opts2) ?? Promise.resolve(null),
     close: async () => {
       if (broadcastTimer) clearInterval(broadcastTimer);
       if (pendingSystemNoticesRecoveryTimer) clearInterval(pendingSystemNoticesRecoveryTimer);
@@ -218233,9 +218455,32 @@ var init_service5 = __esm({
         const a = await this.opts.store.getActor(id);
         if (!a) throw new Error(`actor not found: ${id}`);
         await this.upsertActor({ ...a, status: "disabled" }, by);
+        await this.dropRuntimeBindingOfDeletedAgent(a.id, a.kind, by);
         if (a.status === "active") await this.opts.onActorDisabled?.(id, by);
         return a;
       }
+      /**
+       * 删掉 Agent 时把它跟 runtime 的绑定一起撤掉。
+       *
+       * 为什么必须做（2026-09-09 线上实测）：删除只写 `status='disabled'`，`actor_bindings` 那行
+       * 原样留着且仍是 `active`。而 `GET /api/actors` 会把已删 Agent 过滤掉、`GET /api/bindings` 不会——
+       * 运行时管理页拿两份数据对着算「运行 Agent」，于是已删的 Agent 继续占着一格，
+       * 名字还查不回来，页面上直接露出 `asst-xxx-cbf34f` 这种裸 id。didi 组织实测：yx_claude 上
+       * 12 条 active 绑定里 7 条的 Agent 早被删了（其中 5 条是助理）。
+       *
+       * 顺带修好另一处：`pickAssistantRuntime` 用「(nodeId,kind) 上的 active 绑定数」当负载做均衡，
+       * 已删 Agent 的残留绑定会把负载算高，把新助理往别的机器上赶。
+       *
+       * 只对 agent 生效：真人被移出组织是「离岗」不是删除，PRD 明确其助理照常在岗、账号回来还能接上。
+       * 幂等：removeBinding 对没有绑定的 actor 是 no-op，所以重复删也安全（存量脏数据也能靠再删一次修好）。
+       */
+      async dropRuntimeBindingOfDeletedAgent(id, kind, by) {
+        if (kind !== "agent") return;
+        const existing = await this.opts.store.getBinding(id);
+        if (!existing) return;
+        await this.opts.store.removeBinding(id);
+        await this.audit({ kind: "binding_change", actorId: id, by, at: this.now(), detail: { removed: true, reason: "agent_deleted" } });
+      }
       /**
        * 原子「若当前 active 则停用」（QA R10）：与 disableActor 的区别在于——
        * 只在 actor 当前**确为 active** 时才写，返回 `ok:true + before + seq`；已被并发者/别的路径先 disable
@@ -218259,6 +218504,7 @@ var init_service5 = __esm({
         if (!res.ok) return res;
         this.opts.onRolesChanged?.(id, []);
         await this.audit({ kind: "actor_upsert", actorId: id, by, at: this.now(), detail: { status: "disabled", roles: res.before.roles } });
+        await this.dropRuntimeBindingOfDeletedAgent(id, res.before.kind, by);
         await this.opts.onActorDisabled?.(id, by);
         return { ok: true, before: res.before, seq };
       }
@@ -218859,39 +219105,42 @@ ${input.description}
         const c = cfg ?? await this.opts.store.latestConfig(actorId);
         return new Set(c?.connectorIds ?? []);
       }
-      /** 设置某员工×连接器的连接记录（启用/停用）。无则创建，有则翻转 enabled。 */
-      async setActorConnectorEnabled(actorId, connectorId, enabled) {
-        const conn = { actorId, connectorId, enabled, updatedAt: this.now() };
+      /**
+       * 设置某员工×连接器的连接记录（启用/停用）。无则创建，有则翻转 enabled。
+       *
+       * `configuredBy` 只在**授权流程走完**时传（「谁为这名员工把它接上的」）。普通开关不传，
+       * 此时把已有值原样带回——**只增不抹**：翻一次开关不该把授权时记下的人擦掉。
+       * pg 侧另有 `COALESCE` 兜同一条，两层都做是因为内存 store 是整行替换。
+       */
+      async setActorConnectorEnabled(actorId, connectorId, enabled, configuredBy) {
+        const keep = configuredBy ?? (await this.opts.store.listActorConnectorConnections(actorId)).find((c) => c.connectorId === connectorId)?.configuredBy;
+        const conn = {
+          actorId,
+          connectorId,
+          enabled,
+          updatedAt: this.now(),
+          ...keep ? { configuredBy: keep } : {}
+        };
         await this.opts.store.upsertActorConnectorConnection(conn);
         return conn;
       }
-      listActorConnectorConnections(actorId) {
-        return this.opts.store.listActorConnectorConnections(actorId);
-      }
       /**
-       * 移除某员工与某连接器的连接（组织页连接器详情的「移除连接」，2026-09-09 原型 1600:5765）。
-       *
-       * 删两样东西，缺一不可：
-       *   ① 这名员工**自己**那份连接器凭据（`scope=personal` 且 `connectorId` 命中的变量行）——
-       *      不删的话，「移除」之后 `actorConnected` 里还有它，卡片照样在，读作「删不掉」；
-       *   ② 「员工×连接器」的连接记录——不删的话 `effective` 里还有它（enabled=false），
-       *      卡片变成一张「已停用」的僵尸卡，而人要的是它消失。
+       * 删除**一条**「员工 × 连接器」连接：连接记录 + 该员工这个连接器的**个人凭据变量**。
        *
-       * **不碰组织那条 connector 行**（决策 0080 修订五的同一条理由）：组织级连接是别人配的资产，
-       * 一名员工点「移除连接」不该把全组织的连接拆掉。组织级的断开在「管理 > 连接器」。
-       * 于是：组织已连接时，移除个人连接后这名员工会**回落到组织默认**——卡片仍在，但身份那一行
-       * 变回组织账号。这是对的，不是没删干净。
+       * 与开关的区别（发起人 2026-09-09 定的，两颗按钮并存）：开关是「暂时不用」，凭据留着、
+       * 打开就能接着用；删除是「不要了」，凭据清掉、再要用得重走一遍授权。
        *
-       * 幂等：没有个人凭据、没有记录时照样返回成功（`variablesDeleted: 0`）——重复点、并发点都不该报错。
+       * **只动这名员工自己的东西**：组织级变量（scope=global）一个不碰——那是别人也在用的。
+       * 飞书对话通道的下线不在这里做（本服务够不到 channelService），由路由层在删完凭据后补一刀。
        */
-      async removeActorConnector(actorId, connectorId) {
-        const rows = await this.opts.store.listVariables(actorId);
-        const mine = rows.filter(
-          (v2) => v2.scope === "personal" && v2.actorId === actorId && v2.connectorId === connectorId
-        );
-        for (const v2 of mine) await this.opts.store.deleteVariable(v2.key, actorId);
+      async deleteActorConnector(actorId, connectorId) {
+        const personal = (await this.opts.store.listVariables(actorId)).filter((v2) => v2.scope === "personal" && v2.actorId === actorId && v2.connectorId === connectorId);
+        for (const v2 of personal) await this.deleteVariable(v2.key, actorId);
         await this.opts.store.deleteActorConnectorConnection(actorId, connectorId);
-        return { removed: true, variablesDeleted: mine.length };
+        return { variablesDeleted: personal.length };
+      }
+      listActorConnectorConnections(actorId) {
+        return this.opts.store.listActorConnectorConnections(actorId);
       }
       /**
        * 员工连接器面板所需状态：连接记录 + 组织级已连接集合 + 该员工已授权（有个人 connector 变量）集合。
@@ -220860,14 +221109,9 @@ function actorsDomain(opts) {
       const { service } = await resolveCtx(req.auth.companyId);
       const b2 = req.body;
       if (typeof b2?.enabled !== "boolean") throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 enabled (boolean)");
-      const conn = await service.setActorConnectorEnabled(req.params.id, req.params.connectorId, b2.enabled);
+      const conn = b2.enabled ? await service.setActorConnectorEnabled(req.params.id, req.params.connectorId, true, req.auth.actor) : await service.setActorConnectorEnabled(req.params.id, req.params.connectorId, false);
       return { status: 200, body: conn };
     });
-    router.delete("/api/actors/:id/connectors/:connectorId", async (req) => {
-      const { service } = await resolveCtx(req.auth.companyId);
-      const r = await service.removeActorConnector(req.params.id, req.params.connectorId);
-      return { status: 200, body: r };
-    });
     const requireVariableManager = (req) => {
       if (!isHumanActor(req.auth.actor)) {
         throw new ApiError(
@@ -226090,7 +226334,13 @@ function reviewSummary(snap, reviews, events) {
   const name = node2?.title ?? first.nodeId;
   const latest = latestActivityReviews(reviews, events);
   const requirements = snap.requirements.filter((r) => r.nodeId === first.nodeId && r.reviewerActorId === first.reviewerActorId);
-  const judgement = judgeWork({ requirements: requirements.length ? requirements : reviews, reviews });
+  for (const requirement of requirements) {
+    const current = reviews.find((r) => r.id === requirement.latestReviewId);
+    if (!current) continue;
+    const index2 = latest.findIndex((r) => r.reviewGroup === requirement.reviewGroup);
+    if (index2 >= 0) latest[index2] = current;
+  }
+  const judgement = judgeWork({ requirements: requirements.length ? requirements : latest, reviews: latest });
   const pending = latest.filter((r) => !r.cancelledAt && !r.verdict && reviewState(r) === "running");
   if (work?.acceptanceState === "accepted" || work?.acceptedAt || work?.acceptanceState !== "rejected" && judgement === "passed") {
     return { phase: "done", status: `\u300A${name}\u300B\u5BA1\u6838\u901A\u8FC7\u3002`, latest, pending: [] };
@@ -226126,6 +226376,66 @@ var init_review_activity = __esm({
   }
 });
 
+// ../server/src/domains/collab/review-requirement-activity.ts
+function reviewRequirementActivity(snap, events, ref2) {
+  const previous3 = /* @__PURE__ */ new Map();
+  const titles = new Map(snap.nodes.map((n) => [n.id, n.title]));
+  const cards = [];
+  const label = (r) => `${ref2(r.reviewerActorId).name || "\u672A\u547D\u540D\u5BA1\u6838\u4EBA"}${r.source === "closure" ? "\uFF08\u7ED3\u6848\u5BA1\u6838\uFF09" : ""}`;
+  const names = (rows) => [...new Set(rows.map(label))].join("\u3001") || "\u65E0";
+  for (const rec of [...events].sort((a, b2) => a.seq - b2.seq)) {
+    if (rec.status === "pending" || rec.status === "failed") continue;
+    const e = rec.event;
+    if (e.kind === "plan.changed") {
+      for (const node2 of e.addNodes ?? []) previous3.set(node2.id, node2.reviewers ?? []);
+      for (const id of e.removeNodes ?? []) previous3.delete(id);
+      continue;
+    }
+    if (e.kind === "plan.add_node") {
+      previous3.set(e.nodeId, e.reviewers ?? []);
+      continue;
+    }
+    if (e.kind !== "plan.update_review_requirements") continue;
+    const before = previous3.get(e.nodeId);
+    const after = e.reviewers;
+    const beforeKeys = new Set(before?.map(requirementKey));
+    const afterKeys = new Set(after.map(requirementKey));
+    const added = before ? after.filter((r) => !beforeKeys.has(requirementKey(r))) : [];
+    const removed = before?.filter((r) => !afterKeys.has(requirementKey(r))) ?? [];
+    const nodeTitle = titles.get(e.nodeId) || "\u5DF2\u79FB\u9664\u7684\u8282\u70B9";
+    const system = rec.actorId.startsWith("actor:system:");
+    const closureAdded = system && added.length > 0 && !removed.length && added.every((r) => r.source === "closure");
+    cards.push({
+      id: `wo:${rec.seq}`,
+      seq: rec.seq,
+      at: rec.createdAt,
+      updatedAt: rec.createdAt,
+      nodeId: e.nodeId,
+      nodeTitle,
+      executor: system ? { ...ref2(rec.actorId), name: "\u7CFB\u7EDF" } : ref2(rec.actorId),
+      ...rec.handActorId ? { handActor: ref2(rec.handActorId) } : {},
+      phase: "done",
+      status: closureAdded ? `\u4E3A\u300A${nodeTitle}\u300B\u8865\u5145\u4E86\u7ED3\u6848\u5BA1\u6838\u8981\u6C42\u3002` : `\u66F4\u65B0\u4E86\u300A${nodeTitle}\u300B\u7684\u5BA1\u6838\u5217\u8868\u3002`,
+      detail: [
+        ...added.length ? [`\u65B0\u589E\uFF1A${names(added)}`] : [],
+        ...removed.length ? [`\u79FB\u9664\uFF1A${names(removed)}`] : [],
+        `\u66F4\u65B0\u540E\uFF1A${names(after)}`
+      ].join("\n"),
+      artifacts: [],
+      actions: []
+    });
+    previous3.set(e.nodeId, after);
+  }
+  return cards;
+}
+var requirementKey;
+var init_review_requirement_activity = __esm({
+  "../server/src/domains/collab/review-requirement-activity.ts"() {
+    "use strict";
+    requirementKey = (r) => JSON.stringify([r.reviewerActorId, r.reviewGroup, r.source]);
+  }
+});
+
 // ../server/src/domains/collab/workorder-manager.ts
 function resolveWorkorderManager(snap) {
   const nodes = snap.nodes;
@@ -226299,12 +226609,16 @@ function buildWorkorderActivity(input) {
         const reasonKinds = new Set(reasons.map((r) => String(r.kind)));
         const executorId = w2?.assigneeActorId ?? rec.actorId;
         if (isPendingActor(executorId)) break;
-        const status = reasonKinds.has("rework") ? ACTIVITY_COPY.reworking(nodeName(nodeId)) : reasonKinds.has("resumed") ? ACTIVITY_COPY.resumed(nameOf(executorId), nodeName(nodeId)) : reasonKinds.has("spec_changed") ? ACTIVITY_COPY.specChanged(nodeName(nodeId)) : reasonKinds.has("issue") ? ACTIVITY_COPY.issueDriven(nodeName(nodeId)) : ACTIVITY_COPY.working(nodeName(nodeId));
-        const drivingIssueId = str4(reasons.find((r) => r.kind === "issue")?.issueId);
-        if (drivingIssueId) {
-          workOfIssue.set(drivingIssueId, workId);
-          const ic = plainCommentIssueIds.has(drivingIssueId) ? issueCards.get(drivingIssueId) : void 0;
-          const commentAuthor = issueById.get(drivingIssueId)?.authorActorId;
+        const forcedBy = str4(reasons.find((r) => r.kind === "forced")?.actorId);
+        const gapDriven = reasons.some((r) => r.kind === "issue" && r.issueKind === "gap");
+        const status = reasonKinds.has("rework") ? ACTIVITY_COPY.reworking(nodeName(nodeId)) : reasonKinds.has("resumed") ? ACTIVITY_COPY.resumed(nameOf(executorId), nodeName(nodeId)) : reasonKinds.has("spec_changed") ? ACTIVITY_COPY.specChanged(nodeName(nodeId)) : gapDriven ? ACTIVITY_COPY.gapReworked(nameOf(executorId), nodeName(nodeId)) : reasonKinds.has("issue") ? ACTIVITY_COPY.issueDriven(nodeName(nodeId)) : forcedBy ? ACTIVITY_COPY.forcedRerun(nameOf(forcedBy), nodeName(nodeId)) : ACTIVITY_COPY.working(nodeName(nodeId));
+        for (const r of reasons) {
+          if (r.kind !== "issue") continue;
+          const issueId = str4(r.issueId);
+          if (!issueId) continue;
+          workOfIssue.set(issueId, workId);
+          const ic = plainCommentIssueIds.has(issueId) ? issueCards.get(issueId) : void 0;
+          const commentAuthor = issueById.get(issueId)?.authorActorId;
           if (ic && commentAuthor) {
             touch(ic, rec);
             ic.executorId = executorId;
@@ -226806,6 +227120,8 @@ function buildWorkorderActivity(input) {
       .../* @__PURE__ */ ((r) => r ? { runId: r, traceAvailable: true } : {})(traced ? runIdOfCard(d) : void 0)
     };
   });
+  cards.push(...reviewRequirementActivity(snap, events, ref2));
+  cards.sort((a, b2) => a.updatedAt.localeCompare(b2.updatedAt) || a.seq - b2.seq || a.id.localeCompare(b2.id));
   return { workorderId, cards, truncated };
 }
 var ACTIVITY_EVENT_KINDS, ACTIVITY_EVENT_LIMIT, ACTIVITY_COPY, REWORK_ANNOTATION_PREFIX, ENGINE_RETRY_EXHAUSTED, BUTTON;
@@ -226815,9 +227131,12 @@ var init_activity2 = __esm({
     init_src();
     init_src4();
     init_review_activity();
+    init_review_requirement_activity();
     init_workorder_manager();
     ACTIVITY_EVENT_KINDS = [
       "plan.changed",
+      "plan.add_node",
+      "plan.update_review_requirements",
       "plan.update_spec",
       "plan.node_retry",
       "work.create",
@@ -226856,6 +227175,22 @@ var init_activity2 = __esm({
       reworking: (node2) => `\u6B63\u5728\u6839\u636E\u5BA1\u6838\u4E0D\u901A\u8FC7\u539F\u56E0\u4FEE\u6539\u300A${node2}\u300B\u3002`,
       specChanged: (node2) => `\u6B63\u5728\u6839\u636E\u4EFB\u52A1\u8BF4\u660E\u7684\u66F4\u65B0\u8C03\u6574\u300A${node2}\u300B\u3002`,
       issueDriven: (node2) => `\u6B63\u5728\u6839\u636E\u53CD\u9988\u8C03\u6574\u300A${node2}\u300B\u3002`,
+      /**
+       * 缺口解开后**带着答复重开工**的那一轮（`reasons` 里有 `{kind:"issue", issueKind:"gap"}`）。
+       *
+       * 与 {@link issueDriven} 分开：那句说的是「按反馈调整」，而这一轮的事实是**卡点解除、重新开始**
+       * ——中断链上最该看清的一拍。此前两者共用一句，恢复后的那一轮被说回泛泛的「正在根据反馈调整」。
+       * 实测 next 213 次 / 23 单、v2 4 次，最近一次 2026-09-09（`issue` 里第二多的一档）。
+       */
+      gapReworked: (executor, node2) => `\u7F3A\u53E3\u5DF2\u89E3\u51B3\uFF0C${executor} \u5E26\u7740\u7B54\u590D\u91CD\u65B0\u5F00\u5DE5\u300A${node2}\u300B\u3002`,
+      /**
+       * 人点了 UI 的「重新运行」（`kernel-bridge.rerunNode`，ADR 0137）——`reasons` 里那条
+       * `{kind:"forced", actorId}` 就是点的人。
+       *
+       * 此前没有自己的文案、落到 `working` 说成「正在处理《X》。」，**页面上完全看不出这一轮是
+       * 有人手动强推的**。实测两条生产线合计 80 次（next 73 / v2 7，最近一次 2026-09-09）。
+       */
+      forcedRerun: (by, node2) => `${by} \u91CD\u65B0\u8FD0\u884C\u4E86\u300A${node2}\u300B\u3002`,
       /* 自动判定的那一刻**只说事实，不断言谁介入了**。
          `work.timeout` 由引擎发（`engine/activate.ts` 与 `server/run-settlement.ts`），失败后的重试
          也是引擎做的（`activate.ts` 的 `tryToRun`）——管理者根本不知道这两件事，此前却写成
@@ -228045,9 +228380,33 @@ function toAuditEntry(op) {
     summary: `${KIND_LABEL2[op.kind] ?? op.kind} \xB7 ${op.artifactId}`
   };
 }
+function nodeIdOfWorkId(workId) {
+  if (!workId || !workId.startsWith("wk:")) return null;
+  const body2 = workId.slice(3);
+  const cut = body2.lastIndexOf(":");
+  if (cut <= 0) return null;
+  if (!/^\d+$/.test(body2.slice(cut + 1))) return null;
+  const nodeId = body2.slice(0, cut);
+  return nodeId.startsWith("artifact:") ? nodeId : null;
+}
+function nodeIdOfIssueId(issueId, model) {
+  if (!issueId) return null;
+  const anchored = model.annotations.get(issueId)?.anchor.target;
+  if (anchored) {
+    if (anchored.startsWith("artifact:")) return anchored;
+    const fromWork = nodeIdOfWorkId(anchored);
+    if (fromWork) return fromWork;
+  }
+  const body2 = issueId.replace(/^(?:ann:rework:)?(?:gap:|esc:|ann:)/, "");
+  if (!body2.startsWith("artifact:")) return null;
+  const cut = body2.lastIndexOf(":");
+  if (cut <= 0) return null;
+  const nodeId = body2.slice(0, cut);
+  return nodeId.startsWith("artifact:") ? nodeId : null;
+}
 function eventToAuditEntry(rec) {
   const ev = rec.event;
-  const artifactId = rec.nodeId ?? rec.workId ?? "";
+  const artifactId = rec.nodeId ?? nodeIdOfWorkId(rec.workId) ?? "";
   return {
     seq: rec.seq,
     at: rec.createdAt,
@@ -228057,16 +228416,25 @@ function eventToAuditEntry(rec) {
     summary: `${KIND_LABEL2[ev.kind] ?? ev.kind}${artifactId ? ` \xB7 ${artifactId}` : ""}`
   };
 }
-function enrichAudit(entry, model, titleOf) {
-  const a = model.artifacts.get(entry.artifactId);
-  if (!a) return { ...entry, visibility: "deleted" };
-  const workspaceTitle = titleOf.get(a.workspace);
-  return {
-    ...entry,
-    nodeName: nodeLabel(a),
-    ...workspaceTitle ? { workspaceTitle } : {},
-    visibility: "ok"
+function auditAnchorsOf(rec) {
+  const issueId = rec.event.issueId;
+  return { workorderId: rec.workorderId, ...typeof issueId === "string" && issueId ? { issueId } : {} };
+}
+function enrichAudit(entry, model, titleOf, anchors = {}) {
+  const withNode = (id, a) => {
+    const workspaceTitle2 = titleOf.get(a.workspace);
+    return { ...entry, artifactId: id, nodeName: nodeLabel(a), ...workspaceTitle2 ? { workspaceTitle: workspaceTitle2 } : {}, visibility: "ok" };
   };
+  if (entry.artifactId) {
+    const a = model.artifacts.get(entry.artifactId);
+    if (!a) return { ...entry, visibility: "deleted" };
+    return withNode(entry.artifactId, a);
+  }
+  const viaIssue = nodeIdOfIssueId(anchors.issueId, model);
+  const viaIssueArtifact = viaIssue ? model.artifacts.get(viaIssue) : void 0;
+  if (viaIssue && viaIssueArtifact) return withNode(viaIssue, viaIssueArtifact);
+  const workspaceTitle = anchors.workorderId ? titleOf.get(anchors.workorderId) : void 0;
+  return { ...entry, ...workspaceTitle ? { workspaceTitle } : {}, visibility: "ok" };
 }
 async function buildAudit(source, q2 = {}, model) {
   const limit = Math.min(Math.max(q2.limit ?? 100, 1), 500);
@@ -228075,8 +228443,8 @@ async function buildAudit(source, q2 = {}, model) {
   const items = [];
   let lastCursor = null;
   let truncated = false;
-  const push2 = (entry, cursor) => {
-    items.push(model && titleOf ? enrichAudit(entry, model, titleOf) : entry);
+  const push2 = (entry, cursor, anchors) => {
+    items.push(model && titleOf ? enrichAudit(entry, model, titleOf, anchors) : entry);
     lastCursor = cursor;
   };
   const match = (actor, kind, at) => {
@@ -228087,30 +228455,33 @@ async function buildAudit(source, q2 = {}, model) {
     return true;
   };
   if (q2.latest) {
-    let collected = [];
+    const collected = [];
     if (source.engineStore) {
       const records = await source.engineStore.transaction((tx) => tx.listEvents(void 0, 0));
       for (const rec of records) {
         const ev = rec.event;
         if (!match(rec.actorId, ev.kind, rec.createdAt)) continue;
-        collected.push(eventToAuditEntry(rec));
+        collected.push({ entry: eventToAuditEntry(rec), anchors: auditAnchorsOf(rec) });
       }
     } else if (source.oplog) {
       const src = source.oplog.readFilteredOps ? source.oplog.readFilteredOps({ ...q2.actor ? { actor: q2.actor } : {}, ...q2.kind ? { kind: q2.kind } : {} }, void 0, { latest: true }) : source.oplog.readAll();
       for await (const { op } of src) {
         if (!match(op.actor, op.kind, op.timestamp)) continue;
-        collected.push(toAuditEntry(op));
+        collected.push({ entry: toAuditEntry(op) });
       }
     }
     const tail = collected.slice(-limit).reverse();
-    return { items: model && titleOf ? tail.map((e) => enrichAudit(e, model, titleOf)) : tail, cursor: null };
+    return {
+      items: model && titleOf ? tail.map(({ entry, anchors }) => enrichAudit(entry, model, titleOf, anchors)) : tail.map(({ entry }) => entry),
+      cursor: null
+    };
   }
   if (source.engineStore) {
     const records = await source.engineStore.transaction((tx) => tx.listEvents(void 0, fromSeq));
     for (const rec of records) {
       const ev = rec.event;
       if (!match(rec.actorId, ev.kind, rec.createdAt)) continue;
-      push2(eventToAuditEntry(rec), String(rec.seq));
+      push2(eventToAuditEntry(rec), String(rec.seq), auditAnchorsOf(rec));
       if (items.length >= limit) {
         truncated = true;
         break;
@@ -228156,6 +228527,30 @@ var init_audit = __esm({
       "workorder.paused": "\u6682\u505C\u6D3E\u53D1",
       "workorder.resumed": "\u6062\u590D\u6D3E\u53D1",
       "workorder.sealed": "\u5C01\u5B58",
+      // 其余新引擎事件 kind——缺标签时 summary 直接露英文 kind（生产实测：`plan.changed` 是量最大的
+      // 一类审计条目，界面上就写着「plan.changed」）。这张表按 EngineEvent 的 kind 全集补齐。
+      "plan.changed": "\u6539\u4EFB\u52A1\u56FE",
+      "plan.add_edge": "\u63A5\u4F9D\u8D56",
+      "plan.delete_edge": "\u65AD\u4F9D\u8D56",
+      "plan.update_review_requirements": "\u6539\u8BC4\u5BA1\u8981\u6C42",
+      "plan.update_fields": "\u6539\u5B57\u6BB5",
+      "work.started": "\u5F00\u5DE5",
+      "work.redispatch": "\u91CD\u6D3E",
+      "work.snapshot_recorded": "\u5B58\u5FEB\u7167",
+      "work.handoff_recorded": "\u8BB0\u4EA4\u63A5",
+      "work.reject": "\u6253\u56DE",
+      "work.content_edited": "\u6539\u5185\u5BB9",
+      "work.conclude": "\u5B9A\u7A3F",
+      "node.latest_proposed.rebased": "\u6362\u57FA\u7EBF",
+      "review.started": "\u5F00\u59CB\u8BC4\u5BA1",
+      "review.kill": "\u64A4\u8BC4\u5BA1",
+      "review.timeout": "\u8BC4\u5BA1\u8D85\u65F6",
+      "issue.resolution_proposed": "\u63D0\u89E3\u51B3\u65B9\u6848",
+      "issue.resolution_rejected": "\u9A73\u56DE\u89E3\u51B3\u65B9\u6848",
+      "workorder.created": "\u5EFA\u5DE5\u5355",
+      "workorder.root_set": "\u5B9A\u6839\u8282\u70B9",
+      "workorder.meta_changed": "\u6539\u5DE5\u5355\u4FE1\u606F",
+      "workorder.ping": "\u5524\u9192",
       // 旧 op kind（oplog 回退路径）
       spawn_artifact: "\u5EFA\u4EA7\u7269",
       propose_revision: "\u63D0\u4FEE\u8BA2",
@@ -228974,11 +229369,7 @@ async function buildResolver(registry2) {
   const byId = new Map(actors.map((a) => [a.id, a]));
   return (id) => {
     const a = byId.get(id);
-    return a ? {
-      name: a.name,
-      ...a.roles[0] ? { role: a.roles[0] } : {},
-      ...a.avatar ? { avatar: a.avatar } : {}
-    } : void 0;
+    return a ? actorRefFieldsOf(a) : systemActorFallback(id);
   };
 }
 async function buildProjectResolver(artifacts) {
@@ -233555,7 +233946,7 @@ function createChatSessionsDomain(opts) {
       const byId = new Map(actors.map((a) => [a.id, a]));
       const resolver2 = (id) => {
         const a = byId.get(id);
-        return a ? { name: a.name } : void 0;
+        return a ? { name: a.name } : systemActorFallback(id);
       };
       const allSummaries = buildWorkorderSummaries(wkKernel.model, resolver2, (wo) => byWo.get(wo) ?? null, (wo) => held.has(wo), void 0, void 0, (role) => wkKernel.actorForRole(role));
       const summaryById = new Map(allSummaries.map((s2) => [s2.id, s2]));
@@ -237750,6 +238141,11 @@ var init_daemon_adapter = __esm({
           clearTimeout(entry.ackTimer);
           entry.ackTimer = void 0;
         }
+        const reapTimer = this.sessionReapTimers.get(dispatchId);
+        if (reapTimer) {
+          clearTimeout(reapTimer);
+          this.sessionReapTimers.delete(dispatchId);
+        }
         entry.exited = info;
         for (const w2 of entry.appendWaiters.splice(0)) {
           clearTimeout(w2.timer);
@@ -237845,6 +238241,10 @@ var init_daemon_adapter = __esm({
         for (const [dispatchId, entry] of this.pending) {
           if (entry.nodeId !== daemonId || entry.exited || present.has(dispatchId)) continue;
           if (this.hub.hasSession?.(dispatchId)) continue;
+          if (this.sessionReapTimers.has(dispatchId)) {
+            this.log(`[dispatch-delivery] ${dispatchId}\uFF1A\u8282\u70B9 ${daemonId} \u7A7A\u5E93\u5B58\u4E0D\u8986\u76D6\u72EC\u7ACB\u4F1A\u8BDD\u65AD\u7EBF\u5BBD\u9650\uFF0C\u7ED3\u8BBA=unknown\uFF08\u4F9D\u636E\uFF1A\u6570\u636E\u9762\u66FE\u8FDE\u63A5\uFF0C\u7B49\u5F85\u91CD\u8FDE\u6216\u539F ${this.sessionReapGraceMs}ms \u671F\u9650\uFF09`);
+            continue;
+          }
           absent.push(dispatchId);
         }
         for (const dispatchId of absent) {
@@ -237877,8 +238277,7 @@ var init_daemon_adapter = __esm({
        */
       onSessionDown(dispatchId) {
         if (this.sessionReapTimers.has(dispatchId)) return;
-        const entry = this.pending.get(dispatchId);
-        if (!entry || entry.exited) return;
+        if (this.settledDispatchIds.has(dispatchId)) return;
         const timer = setTimeout(() => {
           this.sessionReapTimers.delete(dispatchId);
           const e = this.pending.get(dispatchId);
@@ -239214,6 +239613,7 @@ ${ctx.nodeFault}
           env: { ...prov?.env ?? {}, OASIS_STAGE: "1", ...workspace ? { OASIS_WORKSPACE: workspace } : {} },
           ...prov?.wrapperPaths && prov.wrapperPaths.length > 0 ? { wrapperPaths: prov.wrapperPaths } : {},
           ...prov?.requiredTools && prov.requiredTools.length > 0 ? { requiredTools: prov.requiredTools } : {},
+          ...prov?.requiredToolVersions && Object.keys(prov.requiredToolVersions).length > 0 ? { requiredToolVersions: prov.requiredToolVersions } : {},
           ...prov?.connectorCreds && prov.connectorCreds.length > 0 ? { connectorCreds: prov.connectorCreds } : {}
         };
         this.deps.log?.(`[coordinator] ${logMsg}`);
@@ -239774,6 +240174,7 @@ var init_postgres_registry = __esm({
         updated_at   timestamptz NOT NULL,
         PRIMARY KEY (actor_id, connector_id)
       )`);
+        await pool.query(`ALTER TABLE "${s2}".actor_connector_connections ADD COLUMN IF NOT EXISTS configured_by text`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".skill_catalog (
         id          text PRIMARY KEY,            -- slug
@@ -240161,10 +240562,11 @@ var init_postgres_registry = __esm({
       }
       async upsertActorConnectorConnection(c) {
         await this.pool.query(
-          `INSERT INTO ${this.s}.actor_connector_connections (actor_id, connector_id, enabled, updated_at)
-       VALUES ($1, $2, $3, $4)
-       ON CONFLICT (actor_id, connector_id) DO UPDATE SET enabled = $3, updated_at = $4`,
-          [c.actorId, c.connectorId, c.enabled, c.updatedAt]
+          `INSERT INTO ${this.s}.actor_connector_connections (actor_id, connector_id, enabled, updated_at, configured_by)
+       VALUES ($1, $2, $3, $4, $5)
+       ON CONFLICT (actor_id, connector_id) DO UPDATE SET enabled = $3, updated_at = $4,
+         configured_by = COALESCE($5, ${this.s}.actor_connector_connections.configured_by)`,
+          [c.actorId, c.connectorId, c.enabled, c.updatedAt, c.configuredBy ?? null]
         );
       }
       async listActorConnectorConnections(actorId) {
@@ -240176,7 +240578,8 @@ var init_postgres_registry = __esm({
           actorId: row.actor_id,
           connectorId: row.connector_id,
           enabled: row.enabled,
-          updatedAt: new Date(row.updated_at).toISOString()
+          updatedAt: new Date(row.updated_at).toISOString(),
+          ...row.configured_by ? { configuredBy: row.configured_by } : {}
         }));
       }
       async listAllActorConnectorConnections() {
@@ -240187,7 +240590,8 @@ var init_postgres_registry = __esm({
           actorId: row.actor_id,
           connectorId: row.connector_id,
           enabled: row.enabled,
-          updatedAt: new Date(row.updated_at).toISOString()
+          updatedAt: new Date(row.updated_at).toISOString(),
+          ...row.configured_by ? { configuredBy: row.configured_by } : {}
         }));
       }
       async deleteActorConnectorConnection(actorId, connectorId) {
@@ -255201,6 +255605,98 @@ var init_chat_builtin_skills = __esm({
   }
 });
 
+// ../server/src/governance/connector-tool-versions.ts
+function connectorToolVersionsFile(dataDir) {
+  return (0, import_node_path25.join)(dataDir, "connector-tools", "versions.json");
+}
+function registryBase() {
+  const raw = process.env["npm_config_registry"] || process.env["NPM_CONFIG_REGISTRY"] || "https://registry.npmjs.org";
+  return raw.replace(/\/+$/, "");
+}
+async function fetchLatestNpmVersion(pkg) {
+  try {
+    const url = `${registryBase()}/${pkg.split("/").map(encodeURIComponent).join("%2F")}/latest`;
+    const res = await fetch(url, { headers: { accept: "application/json" }, signal: AbortSignal.timeout(NPM_PROBE_TIMEOUT_MS) });
+    if (!res.ok) return null;
+    const v2 = (await res.json()).version;
+    return typeof v2 === "string" && v2 ? v2 : null;
+  } catch {
+    return null;
+  }
+}
+async function readRegisteredToolVersions(dataDir) {
+  try {
+    const raw = JSON.parse(await (0, import_promises14.readFile)(connectorToolVersionsFile(dataDir), "utf8"));
+    if (!raw || typeof raw !== "object") return {};
+    const out = {};
+    for (const [k2, v2] of Object.entries(raw)) {
+      if (typeof v2 === "string" && v2) out[k2] = v2;
+    }
+    return out;
+  } catch {
+    return {};
+  }
+}
+async function writeRegisteredToolVersions(dataDir, versions) {
+  const file = connectorToolVersionsFile(dataDir);
+  await (0, import_promises14.mkdir)((0, import_node_path25.join)(dataDir, "connector-tools"), { recursive: true });
+  const tmp = `${file}.${process.pid}.tmp`;
+  await (0, import_promises14.writeFile)(tmp, `${JSON.stringify(versions, null, 2)}
+`, "utf8");
+  await (0, import_promises14.rename)(tmp, file);
+}
+async function refreshConnectorToolVersions(opts) {
+  const fetchLatest = opts.fetchLatest ?? fetchLatestNpmVersion;
+  const log3 = opts.log ?? (() => {
+  });
+  const versions = await readRegisteredToolVersions(opts.dataDir);
+  const results = [];
+  let changed = false;
+  for (const [tool, pkg] of Object.entries(NPM_TOOL_PACKAGES)) {
+    const before = versions[tool];
+    const latest = await fetchLatest(pkg);
+    if (!latest) {
+      results.push({ tool, pkg, ...before ? { from: before, to: before } : {}, outcome: "unreachable" });
+      log3(`[connector-tools] ${pkg} \u95EE\u4E0D\u5230\u6700\u65B0\u7248\uFF0C\u6CBF\u7528\u767B\u8BB0\u7248\u672C ${before ?? "\uFF08\u65E0\uFF09"}`);
+      continue;
+    }
+    if (before === latest) {
+      results.push({ tool, pkg, from: before, to: latest, outcome: "unchanged" });
+      continue;
+    }
+    versions[tool] = latest;
+    changed = true;
+    results.push({ tool, pkg, ...before ? { from: before } : {}, to: latest, outcome: "updated" });
+    log3(`[connector-tools] ${pkg} \u767B\u8BB0\u7248\u672C ${before ?? "\uFF08\u65E0\uFF09"} \u2192 ${latest}`);
+  }
+  if (changed) {
+    try {
+      await writeRegisteredToolVersions(opts.dataDir, versions);
+    } catch (err) {
+      log3(`[connector-tools] \u767B\u8BB0\u7248\u672C\u843D\u76D8\u5931\u8D25\uFF08\u672C\u8FDB\u7A0B\u5185\u4ECD\u751F\u6548\uFF09\uFF1A${String(err)}`);
+    }
+  }
+  return { versions, results };
+}
+function pickToolVersions(registered, tools) {
+  const out = {};
+  for (const t of tools) {
+    const v2 = registered[t];
+    if (v2) out[t] = v2;
+  }
+  return out;
+}
+var import_promises14, import_node_path25, NPM_PROBE_TIMEOUT_MS;
+var init_connector_tool_versions = __esm({
+  "../server/src/governance/connector-tool-versions.ts"() {
+    "use strict";
+    import_promises14 = require("node:fs/promises");
+    import_node_path25 = require("node:path");
+    init_src8();
+    NPM_PROBE_TIMEOUT_MS = 3e3;
+  }
+});
+
 // ../server/src/design/board-watch.ts
 function decideBoardLetter(c, nowMs, quietMs) {
   if (c.hasOpenWatchLetter) return false;
@@ -255953,6 +256449,7 @@ var init_src11 = __esm({
     init_node_store();
     init_tokens();
     init_collab();
+    init_workorders();
     init_collab();
     init_closure_report();
     init_workorders();
@@ -255996,6 +256493,7 @@ var init_src11 = __esm({
     init_builtin_skills();
     init_chat_builtin_skills();
     init_connector_skills();
+    init_connector_tool_versions();
     init_board_watch();
     init_ephemeral_project();
     init_run_settlement();
@@ -256858,6 +257356,7 @@ function materializeBuiltins(builtins, runtimeKind, opts) {
 var CONNECTOR_SKILL_SOURCES = [
   { connectorId: "feishu", baseUrl: FEISHU_WELL_KNOWN_SKILLS_BASE }
 ];
+var registeredToolVersions = {};
 async function readAllConnectorSkills(dataDir) {
   const out = [];
   for (const src of CONNECTOR_SKILL_SOURCES) {
@@ -256889,11 +257388,18 @@ async function refreshConnectorSkillsNow(dataDir, apply) {
     }
   }
   if (out.length > 0) apply(out);
+  try {
+    const { versions } = await refreshConnectorToolVersions({ dataDir, log: (m2) => console.log(m2) });
+    registeredToolVersions = versions;
+  } catch (err) {
+    console.warn(`[serve] connector CLI \u767B\u8BB0\u7248\u672C\u5237\u65B0\u5931\u8D25\uFF0C\u6CBF\u7528\u4E0A\u4E00\u4EFD\uFF1A${String(err)}`);
+  }
   return results;
 }
 function refreshConnectorSkillsInBackground(dataDir, apply) {
   void refreshConnectorSkillsNow(dataDir, apply);
 }
+var CONNECTOR_SKILL_REFRESH_MS = 24 * 60 * 6e4;
 var SESSION_TOKEN_GRACE_MS = 15 * 6e4;
 function makeResumeRetryProxy(first, spawnFallback) {
   const relay = () => {
@@ -257087,6 +257593,8 @@ async function buildActorProvision(service, actorId, scope, onBrokerRefused) {
     env,
     wrapperPaths: [oasisWrapperScript(), ...provision.wrapperPaths],
     requiredTools: provision.requiredTools,
+    // 只挑本次真要用的那几个：job 里不塞无关工具的版本号。
+    requiredToolVersions: pickToolVersions(registeredToolVersions, provision.requiredTools),
     connectorCreds: provision.connectorCreds,
     cleanup: provision.cleanup
   };
@@ -257658,7 +258166,8 @@ async function startServe(opts) {
     kernel: defaultCompanyKernel,
     // B2：读路径走 oplog 派生投影——同一 oplog 写后重放重建
     oplog,
-    actorNames: { resolve: (actorId) => registryActorNames.get(actorId) },
+    // 系统身份（`actor:system*`）不在名册里，缓存必然打空——补同一份展示名，别让它退成裸 id。
+    actorNames: { resolve: (actorId) => registryActorNames.get(actorId) ?? systemActorFallback(actorId)?.name },
     blobs,
     // 项目普通文件上传入 blob 库
     actorDirectory: registryStore,
@@ -257694,7 +258203,7 @@ async function startServe(opts) {
           ...engine2.blobs ? { blobs: engine2.blobs } : {},
           actorDirectory: companyRegistry,
           actorNames: {
-            resolve: (actorId) => perCompanyActorNames.get(companyId)?.get(actorId)
+            resolve: (actorId) => perCompanyActorNames.get(companyId)?.get(actorId) ?? systemActorFallback(actorId)?.name
           },
           resolveActorContext: async (actorId) => {
             const config2 = await companyRegistry.latestConfig(actorId).catch(() => null);
@@ -257755,7 +258264,8 @@ async function startServe(opts) {
       ops: [],
       nodeOutputs: persisted.nodeOutputs,
       workspaceBindings: persisted.workspaceBindings,
-      actorNames: { resolve: (actorId) => registryActorNames.get(actorId) }
+      // 系统身份（`actor:system*`）不在名册里，缓存必然打空——补同一份展示名，别让它退成裸 id。
+      actorNames: { resolve: (actorId) => registryActorNames.get(actorId) ?? systemActorFallback(actorId)?.name }
     });
   };
   const traceDsn = process.env["OASIS_TRACE_PG_DSN"] ?? pgDsn;
@@ -258275,10 +258785,17 @@ async function startServe(opts) {
   });
   console.log(`[serve] loaded ${builtinSkills.length} builtin skill(s): ${builtinSkills.map((s2) => s2.id).join(", ") || "(none)"}`);
   connectorSkills = await readAllConnectorSkills(opts.dir);
+  registeredToolVersions = await readRegisteredToolVersions(opts.dir);
   console.log(`[serve] connector skills\uFF08\u843D\u76D8\u526F\u672C\uFF09\uFF1A${connectorSkills.length} \u4E2A`);
   refreshConnectorSkillsInBackground(opts.dir, (s2) => {
     connectorSkills = s2;
   });
+  const connectorSkillTimer = setInterval(() => {
+    refreshConnectorSkillsInBackground(opts.dir, (s2) => {
+      connectorSkills = s2;
+    });
+  }, CONNECTOR_SKILL_REFRESH_MS);
+  connectorSkillTimer.unref?.();
   if (defaultCompanyMigration.createdCompany) {
     const seededAt = (/* @__PURE__ */ new Date()).toISOString();
     for (const devActor of ["actor:human:yx"]) {
@@ -259148,6 +259665,7 @@ async function startServe(opts) {
         env: provision.env,
         wrapperPaths: provision.wrapperPaths,
         ...provision.requiredTools.length > 0 ? { requiredTools: provision.requiredTools } : {},
+        ...Object.keys(provision.requiredToolVersions).length > 0 ? { requiredToolVersions: provision.requiredToolVersions } : {},
         ...provision.connectorCreds.length > 0 ? { connectorCreds: provision.connectorCreds } : {}
       });
       const chunks = [];
@@ -260133,7 +260651,7 @@ async function startServe(opts) {
             console.warn(`[trace] chat run ${traceRunId} \u7EED\u8D26\u5F02\u5E38: ${String(err)}`);
           });
         };
-        const provision = isolatedKnowledgeTurn ? { env: {}, wrapperPaths: [], requiredTools: [], connectorCreds: [], cleanup: async () => void 0 } : await buildActorProvision(actorService, actorId);
+        const provision = isolatedKnowledgeTurn ? { env: {}, wrapperPaths: [], requiredTools: [], requiredToolVersions: {}, connectorCreds: [], cleanup: async () => void 0 } : await buildActorProvision(actorService, actorId);
         const actorCtx = await buildActorContext(actorService, actorId).catch(() => null);
         const chatResolvedModel = sessionModelOverride ?? actorCtx?.config?.model ?? void 0;
         const chatModel = chatResolvedModel ?? await registryStore.getRuntimeConfig(`runtime:${binding.nodeId}:${binding.runtimeKind}`).then((c) => c?.model).catch(() => void 0) ?? void 0;
@@ -260273,6 +260791,7 @@ async function startServe(opts) {
           },
           wrapperPaths: provision.wrapperPaths,
           ...provision.requiredTools.length > 0 ? { requiredTools: provision.requiredTools } : {},
+          ...Object.keys(provision.requiredToolVersions).length > 0 ? { requiredToolVersions: provision.requiredToolVersions } : {},
           ...provision.connectorCreds.length > 0 ? { connectorCreds: provision.connectorCreds } : {},
           ...requiredConnectors.length > 0 ? { requiredConnectorSlugs: requiredConnectors } : {}
         });
@@ -260809,7 +261328,8 @@ async function startServe(opts) {
         await server.settleDelegationFromSweep(
           chatSessionId,
           `\u5B50\u4F1A\u8BDD\u8FD9\u4E00\u8F6E\u88AB\u6062\u590D\u5668\u6536\u53E3\u4E3A ${status}\uFF08${reason}\uFF09`,
-          companyId
+          companyId,
+          { outcome: status === "succeeded" ? "succeeded" : "failed" }
         );
       },
       log: (m2) => console.log(m2),
@@ -262894,6 +263414,7 @@ ${nodeFault}` : "");
       if (gitTimer) clearInterval(gitTimer);
       if (coordTimer) clearInterval(coordTimer);
       if (livenessTimer) clearInterval(livenessTimer);
+      clearInterval(connectorSkillTimer);
       if (orphanSweepTimer) clearInterval(orphanSweepTimer);
       for (const t of dropSweepTimers) clearInterval(t);
       if (deadlineClockTimer) clearInterval(deadlineClockTimer);
@@ -263092,7 +263613,7 @@ async function runSession(dispatchId, job, deps) {
       }
     }
     if (job.requiredTools?.length) {
-      const missing = await ensureConnectorTools(job.requiredTools);
+      const missing = await ensureConnectorTools(job.requiredTools, { versions: job.requiredToolVersions });
       if (missing.length) log2("[node-cli]", `  connector tools still missing (agent may fail): ${missing.join(", ")}`);
     }
     const prepared = await prepareConnectorsForJob(job);
@@ -263495,7 +264016,7 @@ function detectRuntimes() {
 
 // ../cli/src/daemon/workdir-handler.ts
 var import_node_fs19 = __toESM(require("node:fs"), 1);
-var import_node_path25 = __toESM(require("node:path"), 1);
+var import_node_path26 = __toESM(require("node:path"), 1);
 init_src6();
 init_src();
 var WORKDIR_READ_MAX_BYTES2 = 2 * 1024 * 1024;
@@ -263514,10 +264035,10 @@ function isSensitiveSegment(segment) {
 }
 function relPathIsSensitive(rel) {
   if (!rel) return false;
-  return rel.split(import_node_path25.default.sep).some((seg) => seg.length > 0 && isSensitiveSegment(seg));
+  return rel.split(import_node_path26.default.sep).some((seg) => seg.length > 0 && isSensitiveSegment(seg));
 }
 function withinBase(p2, base) {
-  return p2 === base || p2.startsWith(base + import_node_path25.default.sep);
+  return p2 === base || p2.startsWith(base + import_node_path26.default.sep);
 }
 function normalizeRel(raw) {
   const trimmed = (raw ?? "").trim();
@@ -263534,7 +264055,7 @@ async function trustedCanonicalContainer(req, logicalBase, dirKind) {
   } catch {
     return null;
   }
-  return isLegacy ? import_node_path25.default.join(trustedRootReal, "oasis-chat-sessions") : import_node_path25.default.join(trustedRootReal, "sessions", dirKind);
+  return isLegacy ? import_node_path26.default.join(trustedRootReal, "oasis-chat-sessions") : import_node_path26.default.join(trustedRootReal, "sessions", dirKind);
 }
 async function resolveWithinWorkdir(req) {
   const dirKind = sessionDirKind(req.runtimeKind);
@@ -263552,11 +264073,11 @@ async function resolveWithinWorkdir(req) {
   } catch {
     return { ok: false, code: "NOT_FOUND" };
   }
-  if (import_node_path25.default.dirname(base) !== canonicalContainer) return { ok: false, code: "PATH_ESCAPE" };
+  if (import_node_path26.default.dirname(base) !== canonicalContainer) return { ok: false, code: "PATH_ESCAPE" };
   const rel = normalizeRel(req.path);
-  const requested = import_node_path25.default.resolve(base, rel);
+  const requested = import_node_path26.default.resolve(base, rel);
   if (!withinBase(requested, base)) return { ok: false, code: "PATH_ESCAPE" };
-  const cleanRel = base === requested ? "" : import_node_path25.default.relative(base, requested);
+  const cleanRel = base === requested ? "" : import_node_path26.default.relative(base, requested);
   if (relPathIsSensitive(cleanRel)) return { ok: false, code: "SENSITIVE" };
   let real;
   try {
@@ -263566,7 +264087,7 @@ async function resolveWithinWorkdir(req) {
     return { ok: false, code: "PATH_ESCAPE" };
   }
   if (!withinBase(real, base)) return { ok: false, code: "PATH_ESCAPE" };
-  const realRel = base === real ? "" : import_node_path25.default.relative(base, real);
+  const realRel = base === real ? "" : import_node_path26.default.relative(base, real);
   if (relPathIsSensitive(realRel)) return { ok: false, code: "SENSITIVE" };
   return { ok: true, base, real };
 }
@@ -263602,7 +264123,7 @@ async function handleWorkdirList(req) {
       const slice = truncated ? visible.slice(0, WORKDIR_LIST_MAX_ENTRIES) : visible;
       const entries = [];
       for (const d of slice) {
-        const abs = import_node_path25.default.join(anchor, d.name);
+        const abs = import_node_path26.default.join(anchor, d.name);
         try {
           const st = await import_node_fs19.default.promises.lstat(abs);
           if (st.isSymbolicLink()) continue;
@@ -263634,7 +264155,7 @@ async function verifyOpenedFd(fh, base, fallback) {
   const fdReal = await fdCanonicalPath(fh);
   if (fdReal === null) return { anchor: fallback };
   if (!withinBase(fdReal, base)) return { error: { ok: false, code: "PATH_ESCAPE" } };
-  const fdRel = base === fdReal ? "" : import_node_path25.default.relative(base, fdReal);
+  const fdRel = base === fdReal ? "" : import_node_path26.default.relative(base, fdReal);
   if (relPathIsSensitive(fdRel)) return { error: { ok: false, code: "SENSITIVE" } };
   return { anchor: `/proc/self/fd/${fh.fd}` };
 }
@@ -263723,7 +264244,7 @@ function looksBinary(bytes2) {
 function contentTypeFor(absPath, bytes2) {
   const sniffed = sniffContentType(bytes2);
   if (sniffed) return sniffed;
-  const ext = import_node_path25.default.extname(absPath).toLowerCase();
+  const ext = import_node_path26.default.extname(absPath).toLowerCase();
   if (EXT_CONTENT_TYPE[ext]) return EXT_CONTENT_TYPE[ext];
   return looksBinary(bytes2) ? "application/octet-stream" : "text/plain; charset=utf-8";
 }
@@ -264319,17 +264840,17 @@ var RuntimeRouterAdapter = class {
 // ../cli/src/daemon/reap-claude-projects.ts
 var import_node_fs20 = __toESM(require("node:fs"), 1);
 var import_node_os10 = __toESM(require("node:os"), 1);
-var import_node_path26 = __toESM(require("node:path"), 1);
+var import_node_path27 = __toESM(require("node:path"), 1);
 function claudeProjectSlug(cwd) {
   return cwd.replace(/[^a-zA-Z0-9]/g, "-");
 }
 function claudeProjectsRoot() {
-  const configDir = process.env["CLAUDE_CONFIG_DIR"] || import_node_path26.default.join(import_node_os10.default.homedir(), ".claude");
-  return import_node_path26.default.join(configDir, "projects");
+  const configDir = process.env["CLAUDE_CONFIG_DIR"] || import_node_path27.default.join(import_node_os10.default.homedir(), ".claude");
+  return import_node_path27.default.join(configDir, "projects");
 }
 function reapClaudeProjects(workdir, runtimeKind) {
   if (runtimeKind !== "claude" && runtimeKind !== "claude-code") return;
-  const dir = import_node_path26.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
+  const dir = import_node_path27.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
   if (!import_node_fs20.default.existsSync(dir)) return;
   try {
     import_node_fs20.default.rmSync(dir, { recursive: true, force: true });
@@ -264338,7 +264859,7 @@ function reapClaudeProjects(workdir, runtimeKind) {
 }
 function measureClaudeProjects(workdir, runtimeKind) {
   if (runtimeKind !== "claude" && runtimeKind !== "claude-code") return 0;
-  const dir = import_node_path26.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
+  const dir = import_node_path27.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
   return dirSizeBytes2(dir);
 }
 function dirSizeBytes2(dir) {
@@ -264350,7 +264871,7 @@ function dirSizeBytes2(dir) {
     return 0;
   }
   for (const e of entries) {
-    const p2 = import_node_path26.default.join(dir, e.name);
+    const p2 = import_node_path27.default.join(dir, e.name);
     if (e.isSymbolicLink()) continue;
     if (e.isDirectory()) {
       total += dirSizeBytes2(p2);
@@ -266761,7 +267282,7 @@ function fieldsFromFlags(flags, ownFlags) {
   }
   return Object.keys(fields).length > 0 ? fields : void 0;
 }
-function buildStageOp(cmd, flags, positional, readFile8 = (file) => fs39.readFileSync(file, "utf8")) {
+function buildStageOp(cmd, flags, positional, readFile9 = (file) => fs39.readFileSync(file, "utf8")) {
   switch (cmd) {
     case "link":
       return {
@@ -266783,7 +267304,7 @@ function buildStageOp(cmd, flags, positional, readFile8 = (file) => fs39.readFil
         ...flags.get("title") !== void 0 ? { title: flags.get("title") } : {},
         ...(flags.get("brief") ?? flags.get("description")) !== void 0 ? { description: flags.get("brief") ?? flags.get("description") } : {},
         ...flags.get("input") !== void 0 ? { inputs: flags.get("input").split(",").map((to) => ({ to: to.trim() })) } : {},
-        ...partsFile !== void 0 ? { parts: JSON.parse(readFile8(partsFile)) } : {},
+        ...partsFile !== void 0 ? { parts: JSON.parse(readFile9(partsFile)) } : {},
         ...fields !== void 0 ? { fields } : {}
       };
     }
@@ -270150,7 +270671,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.7" : "dev";
+var PKG_VERSION = true ? "2.2.9" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;