oasis_test_v2 2.2.76 → 2.2.77

package/dist/index.js

@@ -2843,12 +2843,20 @@ function deriveBoardKey(artifactId) {
   const sha8 = (0, import_node_crypto2.createHash)("sha256").update(artifactId).digest("hex").slice(0, 8);
   return ascii ? `od-${ascii}-${sha8}` : `od-${sha8}`;
 }
+function withOdToken(fetchImpl, token) {
+  if (!token) return fetchImpl;
+  return (input, init) => {
+    const headers = new Headers(init?.headers);
+    headers.set("authorization", `Bearer ${token}`);
+    return fetchImpl(input, { ...init, headers });
+  };
+}
 async function odApi(base, fetchImpl, method, p2, body2) {
   const res = await fetchImpl(`${base}${p2}`, {
     method,
     ...body2 !== void 0 ? { body: JSON.stringify(body2), headers: { "content-type": "application/json" } } : {}
   });
-  if (!res.ok) throw new Error(`od ${method} ${p2} \u2192 ${res.status}: ${(await res.text()).slice(0, 200)}`);
+  if (!res.ok) throw new OdHttpError(`od ${method} ${p2} \u2192 ${res.status}: ${(await res.text()).slice(0, 200)}`, res.status);
   return await res.json();
 }
 async function ensureProject(base, fetchImpl, boardKey, title) {
@@ -2863,23 +2871,29 @@ async function ensureProject(base, fetchImpl, boardKey, title) {
     conversationId = c.conversations?.[0]?.id ?? null;
   }
   if (!conversationId) throw new Error(`od \u9879\u76EE ${boardKey} \u65E0\u53EF\u7528\u4F1A\u8BDD`);
-  let resolvedDir = null;
-  try {
-    const d = await odApi(base, fetchImpl, "GET", `/api/projects/${encodeURIComponent(boardKey)}`);
-    resolvedDir = d.resolvedDir ?? null;
-  } catch {
-  }
-  return { conversationId, resolvedDir };
+  return { conversationId };
 }
-function materializeContext(resolvedDir, files) {
-  if (!resolvedDir) return;
-  fs2.mkdirSync(resolvedDir, { recursive: true });
-  const root = path2.join(resolvedDir, "task-context");
-  fs2.rmSync(root, { recursive: true, force: true });
+function projectFilePath(boardKey, name) {
+  return `/api/projects/${encodeURIComponent(boardKey)}/files/${encodeURIComponent(name)}`;
+}
+async function materializeContext(base, fetchImpl, boardKey, files) {
+  const listing = await odApi(
+    base,
+    fetchImpl,
+    "GET",
+    `/api/projects/${encodeURIComponent(boardKey)}/files`
+  );
+  for (const f2 of listing.files ?? []) {
+    if (!f2.path.startsWith(TASK_CONTEXT_DIR)) continue;
+    await odApi(base, fetchImpl, "DELETE", projectFilePath(boardKey, f2.path)).catch((err) => {
+      throw new Error(`\u6E05\u7406\u753B\u677F\u65E7\u6750\u6599 ${f2.path} \u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}`);
+    });
+  }
   for (const [rel, content3] of Object.entries(files)) {
-    const f2 = path2.join(root, rel);
-    fs2.mkdirSync(path2.dirname(f2), { recursive: true });
-    fs2.writeFileSync(f2, content3);
+    const name = `${TASK_CONTEXT_DIR}${rel}`;
+    await odApi(base, fetchImpl, "POST", `/api/projects/${encodeURIComponent(boardKey)}/files`, { name, content: content3 }).catch((err) => {
+      throw new Error(`\u4E0A\u4F20\u6750\u6599 ${name} \u5230\u753B\u677F\u5931\u8D25\uFF1A${err instanceof Error ? err.message : String(err)}`);
+    });
   }
 }
 async function putVisibleUserTurn(base, fetchImpl, args) {
@@ -2929,7 +2943,8 @@ async function fetchBoardStatus(base, fetchImpl, artifactId) {
       `/api/projects/${encodeURIComponent(boardKey)}/files`
     );
     artifacts = (listing.files ?? []).filter((f2) => !f2.path.startsWith("task-context/") && f2.artifactManifest !== void 0).map((f2) => ({ path: f2.path, kind: f2.kind ?? null, status: f2.artifactManifest?.status ?? null, mtime: f2.mtime ?? null })).sort((a, b2) => (b2.mtime ?? 0) - (a.mtime ?? 0));
-  } catch {
+  } catch (err) {
+    if (err instanceof OdHttpError && (err.status === 401 || err.status === 403)) throw err;
     boardExists = false;
   }
   let runs = [];
@@ -3028,10 +3043,10 @@ async function harvestBoard(base, fetchImpl, publicBase, workRoot, boardKey, run
   return { dir, entry };
 }
 async function startDesignChatTurn(opts) {
-  const fetchImpl = opts.fetchImpl ?? fetch;
+  const fetchImpl = withOdToken(opts.fetchImpl ?? fetch, opts.token);
   const boardKey = deriveBoardKey(opts.artifactId);
-  const { conversationId, resolvedDir } = await ensureProject(opts.base, fetchImpl, boardKey, opts.title);
-  if (opts.contextFiles) materializeContext(resolvedDir, opts.contextFiles);
+  const { conversationId } = await ensureProject(opts.base, fetchImpl, boardKey, opts.title);
+  if (opts.contextFiles) await materializeContext(opts.base, fetchImpl, boardKey, opts.contextFiles);
   const userMessageId = await putVisibleUserTurn(opts.base, fetchImpl, { boardKey, conversationId, content: opts.message });
   const runId = await startDesignRun(opts.base, fetchImpl, {
     agentId: opts.agentId,
@@ -3043,7 +3058,7 @@ async function startDesignChatTurn(opts) {
   return { boardKey, conversationId, runId, userMessageId };
 }
 async function runDesignChatTurn(opts) {
-  const fetchImpl = opts.fetchImpl ?? fetch;
+  const fetchImpl = withOdToken(opts.fetchImpl ?? fetch, opts.token);
   const { boardKey, conversationId, runId, userMessageId } = await startDesignChatTurn(opts);
   if (opts.onLine) void pumpDesignEvents(opts.base, fetchImpl, runId, opts.onLine).catch(() => {
   });
@@ -3056,13 +3071,20 @@ async function runDesignChatTurn(opts) {
   const { artifacts, fileCount } = await fetchResultPackage(opts.base, fetchImpl, runId);
   return { boardKey, conversationId, runId, userMessageId, artifacts, fileCount };
 }
-var import_node_crypto2, fs2, path2;
+var import_node_crypto2, fs2, path2, OdHttpError, TASK_CONTEXT_DIR;
 var init_driver = __esm({
   "../adapters/src/open-design/driver.ts"() {
     "use strict";
     import_node_crypto2 = require("node:crypto");
     fs2 = __toESM(require("node:fs"), 1);
     path2 = __toESM(require("node:path"), 1);
+    OdHttpError = class extends Error {
+      constructor(message, status) {
+        super(message);
+        this.status = status;
+      }
+    };
+    TASK_CONTEXT_DIR = "task-context/";
   }
 });
 
@@ -204704,10 +204726,39 @@ async function writeSessionCredsFile(slug6, exports2, reuseDir) {
   await (0, import_promises6.writeFile)(file, body2 + "\n", { mode: 384 });
   return { dir, file };
 }
-var import_promises6, import_node_os5, import_node_path13;
+function readSessionCredsFile(file) {
+  const out = {};
+  for (const line2 of (0, import_node_fs10.readFileSync)(file, "utf8").split("\n")) {
+    const m2 = /^export ([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line2);
+    if (!m2) continue;
+    const value2 = unquoteShSingle(m2[2]);
+    if (value2 !== null) out[m2[1]] = value2;
+  }
+  return out;
+}
+function unquoteShSingle(raw) {
+  let out = "";
+  let i = 0;
+  while (i < raw.length) {
+    if (raw[i] === "'") {
+      const end = raw.indexOf("'", i + 1);
+      if (end < 0) return null;
+      out += raw.slice(i + 1, end);
+      i = end + 1;
+    } else if (raw.startsWith("\\'", i)) {
+      out += "'";
+      i += 2;
+    } else {
+      return null;
+    }
+  }
+  return out;
+}
+var import_node_fs10, import_promises6, import_node_os5, import_node_path13;
 var init_session_creds = __esm({
   "../connectors/src/_base/session-creds.ts"() {
     "use strict";
+    import_node_fs10 = require("node:fs");
     import_promises6 = require("node:fs/promises");
     import_node_os5 = require("node:os");
     import_node_path13 = require("node:path");
@@ -204893,9 +204944,27 @@ var init_cli_connector = __esm({
 });
 
 // ../connectors/src/_base/mcp-connector.ts
+var import_promises8, McpConnector;
 var init_mcp_connector = __esm({
   "../connectors/src/_base/mcp-connector.ts"() {
     "use strict";
+    import_promises8 = require("node:fs/promises");
+    McpConnector = class {
+      // ===== MCP 类的通用默认值 =====
+      commandName = "";
+      requiredCommands = [];
+      get envPrefix() {
+        return `${this.config.slug.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_`;
+      }
+      wrapperScriptPath() {
+        return null;
+      }
+      async cleanup(sessionEnv) {
+        const dir = sessionEnv.get(`${this.envPrefix}RUN_TMPDIR`);
+        if (dir) await (0, import_promises8.rm)(dir, { recursive: true, force: true });
+        for (const k2 of this.injectedEnvKeys) sessionEnv.delete(k2);
+      }
+    };
   }
 });
 
@@ -204968,7 +205037,7 @@ function parseFeishuTokenResponse(data, nowMs) {
     expiresAt: new Date(expiresAtMs)
   };
 }
-var import_node_child_process15, import_node_util4, import_node_path14, import_node_url3, import_promises8, execFileAsync2, __dirname2, FEISHU_WELL_KNOWN_SKILLS_BASE, FEISHU_TOKEN_URL, FeishuConnector;
+var import_node_child_process15, import_node_util4, import_node_path14, import_node_url3, import_promises9, execFileAsync2, __dirname2, FEISHU_WELL_KNOWN_SKILLS_BASE, FEISHU_TOKEN_URL, FeishuConnector;
 var init_feishu = __esm({
   "../connectors/src/feishu/index.ts"() {
     "use strict";
@@ -204976,7 +205045,7 @@ var init_feishu = __esm({
     import_node_util4 = require("node:util");
     import_node_path14 = require("node:path");
     import_node_url3 = require("node:url");
-    import_promises8 = require("node:fs/promises");
+    import_promises9 = require("node:fs/promises");
     init_base();
     execFileAsync2 = (0, import_node_util4.promisify)(import_node_child_process15.execFile);
     __dirname2 = (0, import_node_path14.dirname)((0, import_node_url3.fileURLToPath)(__esm_import_meta_url));
@@ -205118,7 +205187,7 @@ var init_feishu = __esm({
           ...userAccessToken ? { LARKSUITE_CLI_USER_ACCESS_TOKEN: userAccessToken } : {}
         }, sessionEnv.get("FEISHU_RUN_TMPDIR"));
         const configDir = (0, import_node_path14.join)(creds.dir, "lark-config");
-        await (0, import_promises8.mkdir)(configDir, { recursive: true, mode: 448 });
+        await (0, import_promises9.mkdir)(configDir, { recursive: true, mode: 448 });
         sessionEnv.set("LARK_BIN", await this.resolveAbsoluteLarkBin());
         sessionEnv.set("FEISHU_CREDS_FILE", creds.file);
         sessionEnv.set("FEISHU_RUN_TMPDIR", creds.dir);
@@ -205707,13 +205776,13 @@ function normalizedRepo(value2) {
   const repo = value2.trim().replace(/^https?:\/\/github\.com\//i, "").replace(/\.git$/i, "").replace(/^\/+|\/+$/g, "");
   return /^[^/\s]+\/[^/\s]+$/.test(repo) ? repo.toLowerCase() : null;
 }
-var import_node_path15, import_node_url4, import_promises9, __dirname3, GithubConnector;
+var import_node_path15, import_node_url4, import_promises10, __dirname3, GithubConnector;
 var init_github = __esm({
   "../connectors/src/github/index.ts"() {
     "use strict";
     import_node_path15 = require("node:path");
     import_node_url4 = require("node:url");
-    import_promises9 = require("node:fs/promises");
+    import_promises10 = require("node:fs/promises");
     init_base();
     init_app_auth();
     __dirname3 = (0, import_node_path15.dirname)((0, import_node_url4.fileURLToPath)(__esm_import_meta_url));
@@ -205919,7 +205988,7 @@ var init_github = __esm({
           GITHUB_TOKEN: token
         }, sessionEnv.get("GH_RUN_TMPDIR"));
         const configDir = (0, import_node_path15.join)(creds.dir, "gh-config");
-        await (0, import_promises9.mkdir)(configDir, { recursive: true, mode: 448 });
+        await (0, import_promises10.mkdir)(configDir, { recursive: true, mode: 448 });
         sessionEnv.set("GH_BIN", await this.resolveRealBin("gh"));
         sessionEnv.set("GH_CREDS_FILE", creds.file);
         sessionEnv.set("GH_RUN_TMPDIR", creds.dir);
@@ -208079,14 +208148,14 @@ function normalizeBaseUrl(value2) {
 function resolveBundledCli(wrapperDir) {
   const override = process.env["OASIS_CONNECTOR_ASSETS_DIR"];
   const candidates = override ? [(0, import_node_path16.resolve)(override, "outline", "outline-kb.mjs")] : [(0, import_node_path16.join)(wrapperDir, "outline-kb.mjs"), (0, import_node_path16.join)(wrapperDir, "outline", "outline-kb.mjs")];
-  return candidates.find((candidate) => (0, import_node_fs10.existsSync)(candidate)) ?? null;
+  return candidates.find((candidate) => (0, import_node_fs11.existsSync)(candidate)) ?? null;
 }
-var import_node_path16, import_node_fs10, import_node_url5, __dirname4, OutlineConnector;
+var import_node_path16, import_node_fs11, import_node_url5, __dirname4, OutlineConnector;
 var init_outline = __esm({
   "../connectors/src/outline/index.ts"() {
     "use strict";
     import_node_path16 = require("node:path");
-    import_node_fs10 = require("node:fs");
+    import_node_fs11 = require("node:fs");
     import_node_url5 = require("node:url");
     init_base();
     init_knowledge_curator_skill();
@@ -208201,6 +208270,75 @@ var init_outline = __esm({
   }
 });
 
+// ../connectors/src/open-design/index.ts
+function normalizeBaseUrl2(value2) {
+  const url = new URL(value2);
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    throw new Error("open-design connector: base_url must use http or https");
+  }
+  url.hash = "";
+  url.search = "";
+  return url.toString().replace(/\/$/, "");
+}
+function readOpenDesignCreds(env = process.env) {
+  const file = env[OPEN_DESIGN_CREDS_FILE_ENV];
+  if (!file) return null;
+  let vars;
+  try {
+    vars = readSessionCredsFile(file);
+  } catch (err) {
+    throw new Error(`open-design \u8FDE\u63A5\u5668\u51ED\u636E\u6587\u4EF6\u8BFB\u4E0D\u5230\uFF08${OPEN_DESIGN_CREDS_FILE_ENV}=${file}\uFF09\uFF1A${err instanceof Error ? err.message : String(err)}`);
+  }
+  const baseUrl = vars["OPEN_DESIGN_BASE_URL"];
+  const apiToken = vars["OPEN_DESIGN_API_TOKEN"];
+  if (!baseUrl || !apiToken) {
+    throw new Error(`open-design \u8FDE\u63A5\u5668\u51ED\u636E\u6587\u4EF6\u4E0D\u5B8C\u6574\uFF08${OPEN_DESIGN_CREDS_FILE_ENV}=${file}\uFF09\uFF1A\u7F3A OPEN_DESIGN_BASE_URL \u6216 OPEN_DESIGN_API_TOKEN`);
+  }
+  return { baseUrl, apiToken };
+}
+var OPEN_DESIGN_CREDS_FILE_ENV, OpenDesignConnector;
+var init_open_design2 = __esm({
+  "../connectors/src/open-design/index.ts"() {
+    "use strict";
+    init_base();
+    OPEN_DESIGN_CREDS_FILE_ENV = "OPEN_DESIGN_CREDS_FILE";
+    OpenDesignConnector = class extends McpConnector {
+      config = {
+        slug: "open-design",
+        type: "mcp",
+        schema: [
+          { key: "base_url", description: "open-design \u63A5\u53E3\u5730\u5740\uFF08\u4F8B\u5982 https://design.example.com\uFF09", secret: false, required: true },
+          { key: "api_token", description: "open-design API \u4EE4\u724C\uFF08od daemon \u7684 OD_API_TOKEN\uFF09", secret: true, required: true }
+        ]
+      };
+      credentialSources = [
+        { key: "base_url", from: "OPEN_DESIGN_BASE_URL", required: true },
+        { key: "api_token", from: "OPEN_DESIGN_API_TOKEN", required: true }
+      ];
+      sensitiveVars = ["OPEN_DESIGN_API_TOKEN"];
+      injectedEnvKeys = [OPEN_DESIGN_CREDS_FILE_ENV, "OPEN_DESIGN_RUN_TMPDIR"];
+      async connect(options = {}) {
+        const baseUrl = options["base_url"];
+        const apiToken = options["api_token"];
+        if (!baseUrl || !apiToken) throw new Error("open-design connector: base_url and api_token are required");
+        const normalized4 = normalizeBaseUrl2(baseUrl);
+        return { credentials: { base_url: normalized4, api_token: apiToken }, canonicalUrl: normalized4 };
+      }
+      async inject(credentials2, sessionEnv) {
+        const baseUrl = credentials2["base_url"];
+        const apiToken = credentials2["api_token"];
+        if (!baseUrl || !apiToken) throw new Error("open-design inject: missing base_url or api_token");
+        const creds = await writeSessionCredsFile(this.config.slug, {
+          OPEN_DESIGN_BASE_URL: normalizeBaseUrl2(baseUrl),
+          OPEN_DESIGN_API_TOKEN: apiToken
+        });
+        sessionEnv.set(OPEN_DESIGN_CREDS_FILE_ENV, creds.file);
+        sessionEnv.set("OPEN_DESIGN_RUN_TMPDIR", creds.dir);
+      }
+    };
+  }
+});
+
 // ../connectors/src/github/app-adopt.ts
 async function adoptGithubApp(store, args, deps = {}) {
   const scope2 = args.actorId ? { scope: "personal", actorId: args.actorId } : { scope: "global" };
@@ -208398,6 +208536,8 @@ function createConnectorBySlug(slug6) {
       return new GithubConnector();
     case "outline":
       return new OutlineConnector();
+    case "open-design":
+      return new OpenDesignConnector();
     default:
       return null;
   }
@@ -208412,7 +208552,8 @@ var init_registry2 = __esm({
     init_feishu();
     init_github();
     init_outline();
-    CONNECTOR_SLUGS = ["feishu", "github", "outline"];
+    init_open_design2();
+    CONNECTOR_SLUGS = ["feishu", "github", "outline", "open-design"];
   }
 });
 
@@ -208471,18 +208612,18 @@ async function buildConnectorProvision(ctx) {
   if (!hostIsolationEnabled()) {
     logHostIdentityFallback(pendingIsolation, "[provision]");
   } else {
-    const isolationRoot = await (0, import_promises10.mkdtemp)((0, import_node_path17.join)((0, import_node_os6.tmpdir)(), "oasis-isolate-"));
+    const isolationRoot = await (0, import_promises11.mkdtemp)((0, import_node_path17.join)((0, import_node_os6.tmpdir)(), "oasis-isolate-"));
     let isolationUsed = false;
     for (const key2 of isolationKeys) {
       if (envOverrides[key2]) continue;
       const dir = (0, import_node_path17.join)(isolationRoot, key2.toLowerCase());
-      await (0, import_promises10.mkdir)(dir, { recursive: true, mode: 448 });
+      await (0, import_promises11.mkdir)(dir, { recursive: true, mode: 448 });
       envOverrides[key2] = dir;
       isolationUsed = true;
     }
-    if (!isolationUsed) await (0, import_promises10.rm)(isolationRoot, { recursive: true, force: true });
+    if (!isolationUsed) await (0, import_promises11.rm)(isolationRoot, { recursive: true, force: true });
     else cleanups.push(async () => {
-      await (0, import_promises10.rm)(isolationRoot, { recursive: true, force: true });
+      await (0, import_promises11.rm)(isolationRoot, { recursive: true, force: true });
     });
   }
   const cleanup = async () => {
@@ -208498,7 +208639,7 @@ async function buildConnectorProvision(ctx) {
     cleanup
   };
 }
-var import_promises10, import_node_os6, import_node_path17;
+var import_promises11, import_node_os6, import_node_path17;
 var init_provision = __esm({
   "../connectors/src/provision.ts"() {
     "use strict";
@@ -208506,7 +208647,7 @@ var init_provision = __esm({
     init_registry2();
     init_host_isolation();
     init_logger();
-    import_promises10 = require("node:fs/promises");
+    import_promises11 = require("node:fs/promises");
     import_node_os6 = require("node:os");
     import_node_path17 = require("node:path");
   }
@@ -208518,7 +208659,7 @@ function loginShellShadow(commandName) {
   if (!home2) return "";
   for (const dir of [(0, import_node_path18.join)(home2, ".local", "bin"), (0, import_node_path18.join)(home2, "bin")]) {
     const candidate = (0, import_node_path18.join)(dir, commandName);
-    if ((0, import_node_fs11.existsSync)(candidate)) return candidate;
+    if ((0, import_node_fs12.existsSync)(candidate)) return candidate;
   }
   return "";
 }
@@ -208592,7 +208733,7 @@ async function prepareConnectorsForJob(job, deps) {
     throw new Error(detail);
   }
   const keptLocal = localWrappers.filter((p2) => isStagedWrapperUsable(p2));
-  const keptRemote = remoteWrappers.filter((p2) => (0, import_node_fs11.existsSync)(p2));
+  const keptRemote = remoteWrappers.filter((p2) => (0, import_node_fs12.existsSync)(p2));
   const droppedWrappers = remoteWrappers.length - keptRemote.length + (localWrappers.length - keptLocal.length);
   if (droppedWrappers > 0) log("[node-connectors]", `\u4E22\u5F03 ${droppedWrappers} \u6761\u672C\u673A\u4E0D\u53EF\u7528\u7684 wrapper \u8DEF\u5F84`);
   const staleKeys = /* @__PURE__ */ new Set();
@@ -208622,14 +208763,14 @@ async function prepareConnectorsForJob(job, deps) {
       "[node-connectors]"
     );
   } else if (isolationKeys.size > 0) {
-    const isolationRoot = await (0, import_promises11.mkdtemp)((0, import_node_path18.join)((0, import_node_os7.tmpdir)(), "oasis-node-isolate-"));
+    const isolationRoot = await (0, import_promises12.mkdtemp)((0, import_node_path18.join)((0, import_node_os7.tmpdir)(), "oasis-node-isolate-"));
     for (const key2 of isolationKeys) {
       const dir = (0, import_node_path18.join)(isolationRoot, key2.toLowerCase());
-      await (0, import_promises11.mkdir)(dir, { recursive: true, mode: 448 });
+      await (0, import_promises12.mkdir)(dir, { recursive: true, mode: 448 });
       jobEnv[key2] = dir;
     }
     cleanups.push(async () => {
-      await (0, import_promises11.rm)(isolationRoot, { recursive: true, force: true });
+      await (0, import_promises12.rm)(isolationRoot, { recursive: true, force: true });
     });
   }
   if (dropped > 0) {
@@ -208706,12 +208847,12 @@ function fetchCredentialsFromServer(job) {
     return body2.connectorCreds ?? [];
   };
 }
-var import_node_fs11, import_promises11, import_node_os7, import_node_path18, SESSION_CREDENTIAL_RENEW_INTERVAL_MS;
+var import_node_fs12, import_promises12, import_node_os7, import_node_path18, SESSION_CREDENTIAL_RENEW_INTERVAL_MS;
 var init_prepare_job = __esm({
   "../connectors/src/prepare-job.ts"() {
     "use strict";
-    import_node_fs11 = require("node:fs");
-    import_promises11 = require("node:fs/promises");
+    import_node_fs12 = require("node:fs");
+    import_promises12 = require("node:fs/promises");
     import_node_os7 = require("node:os");
     import_node_path18 = require("node:path");
     init_base();
@@ -208727,12 +208868,12 @@ function inspectConnectorRuntimeReadiness() {
   return createAllConnectors().map((connector) => {
     if (connector.config.type !== "cli") return { slug: connector.config.slug, ready: true };
     const wrapper = connector.wrapperScriptPath();
-    if (!wrapper || !isUsableFile(wrapper, import_node_fs12.constants.R_OK | import_node_fs12.constants.X_OK)) {
+    if (!wrapper || !isUsableFile(wrapper, import_node_fs13.constants.R_OK | import_node_fs13.constants.X_OK)) {
       return { slug: connector.config.slug, ready: false, error: "wrapper \u8D44\u4EA7\u7F3A\u5931" };
     }
     if (connector.bundledCommand) {
       const assets = connector.runtimeAssetPaths?.() ?? [];
-      if (assets.length === 0 || assets.some((asset) => !isUsableFile(asset, import_node_fs12.constants.R_OK))) {
+      if (assets.length === 0 || assets.some((asset) => !isUsableFile(asset, import_node_fs13.constants.R_OK))) {
         return { slug: connector.config.slug, ready: false, error: "\u968F\u5305\u547D\u4EE4\u8D44\u4EA7\u7F3A\u5931" };
       }
     }
@@ -208740,10 +208881,10 @@ function inspectConnectorRuntimeReadiness() {
   });
 }
 function isUsableFile(file, mode) {
-  if (!(0, import_node_fs12.existsSync)(file)) return false;
+  if (!(0, import_node_fs13.existsSync)(file)) return false;
   try {
-    if (!(0, import_node_fs12.statSync)(file).isFile()) return false;
-    (0, import_node_fs12.accessSync)(file, mode);
+    if (!(0, import_node_fs13.statSync)(file).isFile()) return false;
+    (0, import_node_fs13.accessSync)(file, mode);
     return true;
   } catch {
     return false;
@@ -208757,22 +208898,22 @@ function assertConnectorRuntimeReadiness() {
   }
   return statuses2;
 }
-var import_node_fs12;
+var import_node_fs13;
 var init_readiness = __esm({
   "../connectors/src/readiness.ts"() {
     "use strict";
-    import_node_fs12 = require("node:fs");
+    import_node_fs13 = require("node:fs");
     init_registry2();
   }
 });
 
 // ../connectors/src/connector-adapter.ts
-var import_promises12, import_node_fs13, import_node_os8, import_node_path19, ConnectorAwareAdapter;
+var import_promises13, import_node_fs14, import_node_os8, import_node_path19, ConnectorAwareAdapter;
 var init_connector_adapter = __esm({
   "../connectors/src/connector-adapter.ts"() {
     "use strict";
-    import_promises12 = require("node:fs/promises");
-    import_node_fs13 = require("node:fs");
+    import_promises13 = require("node:fs/promises");
+    import_node_fs14 = require("node:fs");
     import_node_os8 = require("node:os");
     import_node_path19 = require("node:path");
     init_src2();
@@ -208790,18 +208931,18 @@ var init_connector_adapter = __esm({
           if (missing.length) log("[adapter]", `  connector tools still missing (agent may fail): ${missing.join(", ")}`);
         }
         const prepared = await prepareConnectorsForJob(job);
-        const sentinelWrappers = Object.entries(prepared.job.env ?? {}).filter(([k2]) => k2.endsWith("_WRAPPER")).map(([, v2]) => v2).filter((p2) => (0, import_node_fs13.existsSync)(p2));
+        const sentinelWrappers = Object.entries(prepared.job.env ?? {}).filter(([k2]) => k2.endsWith("_WRAPPER")).map(([, v2]) => v2).filter((p2) => (0, import_node_fs14.existsSync)(p2));
         const strippedEnv = Object.fromEntries(
           Object.entries(prepared.job.env ?? {}).filter(([k2]) => !k2.endsWith("_WRAPPER"))
         );
         const wrapperPaths = [...prepared.job.wrapperPaths ?? [], ...sentinelWrappers];
         let extraEnv = { ...strippedEnv };
         if (wrapperPaths.length > 0) {
-          const wrapperBinDir = await (0, import_promises12.mkdtemp)((0, import_node_path19.join)((0, import_node_os8.tmpdir)(), "oasis-wrappers-"));
-          await (0, import_promises12.mkdir)(wrapperBinDir, { recursive: true });
+          const wrapperBinDir = await (0, import_promises13.mkdtemp)((0, import_node_path19.join)((0, import_node_os8.tmpdir)(), "oasis-wrappers-"));
+          await (0, import_promises13.mkdir)(wrapperBinDir, { recursive: true });
           for (const wp of wrapperPaths) {
             const linkName = (0, import_node_path19.basename)(wp).replace(/\.sh$/, "");
-            await (0, import_promises12.symlink)(wp, (0, import_node_path19.join)(wrapperBinDir, linkName));
+            await (0, import_promises13.symlink)(wp, (0, import_node_path19.join)(wrapperBinDir, linkName));
           }
           extraEnv = { ...extraEnv, PATH: [wrapperBinDir, extraEnv["PATH"] ?? ""].filter(Boolean).join(":") };
           log("[adapter]", `  connectors injected  +${Date.now() - t0}ms  wrappers=${wrapperPaths.length}`);
@@ -208838,6 +208979,7 @@ var init_src8 = __esm({
     init_well_known_skills();
     init_github();
     init_outline();
+    init_open_design2();
     init_app_auth();
     init_app_adopt();
     init_app_manifest();
@@ -214017,14 +214159,14 @@ ${composed}`;
               if (body2.actorId && opts.resolveActorContext) {
                 const actorCtx = await opts.resolveActorContext(body2.actorId).catch(() => null);
                 if (actorCtx) {
-                  const { mkdtempSync: mkdtempSync6, mkdirSync: mkdirSync25, writeFileSync: writeFileSync19 } = await import("node:fs");
-                  const { join: join47, dirname: dirname39 } = await import("node:path");
+                  const { mkdtempSync: mkdtempSync6, mkdirSync: mkdirSync24, writeFileSync: writeFileSync19 } = await import("node:fs");
+                  const { join: join47, dirname: dirname38 } = await import("node:path");
                   const { tmpdir: tmpdir11 } = await import("node:os");
                   const dir = mkdtempSync6(join47(tmpdir11(), "oasis-chat-"));
                   if (actorCtx.config?.prompt) {
                     for (const [rel, content3] of Object.entries(splitIdentityFiles2(actorCtx.config.prompt))) {
                       const file = join47(dir, rel);
-                      mkdirSync25(dirname39(file), { recursive: true });
+                      mkdirSync24(dirname38(file), { recursive: true });
                       writeFileSync19(file, content3);
                     }
                   }
@@ -214041,7 +214183,7 @@ ${composed}`;
                     const skillFiles = await opts.materializeSkills(body2.actorId, "claude").catch(() => ({}));
                     for (const [rel, content3] of Object.entries(skillFiles)) {
                       const file = join47(dir, rel);
-                      mkdirSync25(dirname39(file), { recursive: true });
+                      mkdirSync24(dirname38(file), { recursive: true });
                       writeFileSync19(file, content3);
                     }
                   }
@@ -219288,7 +219430,7 @@ function namedError(name, message) {
   err.name = name;
   return err;
 }
-function dirname24(path46) {
+function dirname23(path46) {
   const norm = path46.replace(/^\/+|\/+$/g, "");
   const idx = norm.lastIndexOf("/");
   return idx === -1 ? "" : norm.slice(0, idx);
@@ -220330,7 +220472,7 @@ var init_service4 = __esm({
         }
         for (const file of files) {
           const path46 = typeof file.path === "string" && file.path.trim() ? file.path : void 0;
-          if (path46) emitFolder(dirname24(path46), file.uploadedAt);
+          if (path46) emitFolder(dirname23(path46), file.uploadedAt);
           const projectIdForFile = isUncategorizedProjectId(projectId2) ? projectByWorkOrder.get(file.projectId) ?? null : null;
           items.push({
             kind: "file",
@@ -230902,17 +231044,17 @@ function parseConnectorSkillId(id) {
   return { connectorId: rest.slice(0, i), slug: rest.slice(i + 1) };
 }
 async function collect(root, dir, out) {
-  for (const e of await (0, import_promises13.readdir)(dir, { withFileTypes: true })) {
+  for (const e of await (0, import_promises14.readdir)(dir, { withFileTypes: true })) {
     const abs = (0, import_node_path20.join)(dir, e.name);
     if (e.isDirectory()) await collect(root, abs, out);
-    else if (e.isFile()) out[(0, import_node_path20.relative)(root, abs).split(/[\\/]/).join("/")] = await (0, import_promises13.readFile)(abs, "utf8");
+    else if (e.isFile()) out[(0, import_node_path20.relative)(root, abs).split(/[\\/]/).join("/")] = await (0, import_promises14.readFile)(abs, "utf8");
   }
 }
 async function readLocalPack(dataDir, connectorId) {
   const root = connectorSkillsDir(dataDir, connectorId);
   let slugs;
   try {
-    slugs = (await (0, import_promises13.readdir)(root, { withFileTypes: true })).filter((d) => d.isDirectory()).map((d) => d.name);
+    slugs = (await (0, import_promises14.readdir)(root, { withFileTypes: true })).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return [];
   }
@@ -230936,17 +231078,17 @@ async function readLocalPack(dataDir, connectorId) {
 async function writePack(dataDir, connectorId, pack) {
   const root = connectorSkillsDir(dataDir, connectorId);
   const tmp = `${root}.tmp`;
-  await (0, import_promises13.rm)(tmp, { recursive: true, force: true });
+  await (0, import_promises14.rm)(tmp, { recursive: true, force: true });
   for (const s2 of pack) {
     for (const [rel, content3] of Object.entries(s2.files)) {
       const abs = (0, import_node_path20.join)(tmp, s2.slug, rel);
-      await (0, import_promises13.mkdir)((0, import_node_path20.dirname)(abs), { recursive: true });
-      await (0, import_promises13.writeFile)(abs, content3, "utf8");
+      await (0, import_promises14.mkdir)((0, import_node_path20.dirname)(abs), { recursive: true });
+      await (0, import_promises14.writeFile)(abs, content3, "utf8");
     }
   }
-  await (0, import_promises13.rm)(root, { recursive: true, force: true });
-  await (0, import_promises13.mkdir)((0, import_node_path20.dirname)(root), { recursive: true });
-  await (0, import_promises13.rename)(tmp, root);
+  await (0, import_promises14.rm)(root, { recursive: true, force: true });
+  await (0, import_promises14.mkdir)((0, import_node_path20.dirname)(root), { recursive: true });
+  await (0, import_promises14.rename)(tmp, root);
 }
 function packMatches(local, remote) {
   if (local.length !== remote.length) return false;
@@ -230973,11 +231115,11 @@ async function syncConnectorSkills(args) {
   log3(`[connector-skills] ${args.connectorId}\uFF1A\u5DF2\u4ECE\u5382\u5546\u540C\u6B65 ${fresh.length} \u4E2A\u6280\u80FD`);
   return { skills: fresh, outcome: "fetched" };
 }
-var import_promises13, import_node_path20, toId;
+var import_promises14, import_node_path20, toId;
 var init_connector_skills = __esm({
   "../server/src/governance/connector-skills.ts"() {
     "use strict";
-    import_promises13 = require("node:fs/promises");
+    import_promises14 = require("node:fs/promises");
     import_node_path20 = require("node:path");
     init_src8();
     toId = (connectorId, slug6) => `connector:${connectorId}/${slug6}`;
@@ -232635,7 +232777,7 @@ var init_routes3 = __esm({
 async function readCredentialAuditLog(file, filter) {
   let raw;
   try {
-    raw = await import_node_fs14.promises.readFile(file, "utf8");
+    raw = await import_node_fs15.promises.readFile(file, "utf8");
   } catch {
     return [];
   }
@@ -232649,11 +232791,11 @@ async function readCredentialAuditLog(file, filter) {
   }
   return filterCredentialAudit(records, filter);
 }
-var import_node_fs14;
+var import_node_fs15;
 var init_credential_audit_log = __esm({
   "../server/src/domains/actors/credential-audit-log.ts"() {
     "use strict";
-    import_node_fs14 = require("node:fs");
+    import_node_fs15 = require("node:fs");
     init_service5();
   }
 });
@@ -237460,21 +237602,21 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto55, import_node_fs15, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto55, import_node_fs16, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
     import_node_crypto55 = require("node:crypto");
-    import_node_fs15 = __toESM(require("node:fs"), 1);
+    import_node_fs16 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
     pageSize = (limit) => Math.min(Math.max(limit ?? DEFAULT_PAGE, 1), MAX_PAGE);
     MemoryNotificationStore = class {
       constructor(file) {
         this.file = file;
-        if (file && import_node_fs15.default.existsSync(file)) {
+        if (file && import_node_fs16.default.existsSync(file)) {
           try {
-            const list2 = JSON.parse(import_node_fs15.default.readFileSync(file, "utf8"));
+            const list2 = JSON.parse(import_node_fs16.default.readFileSync(file, "utf8"));
             for (const r of list2) this.rows.set(r.id, r);
           } catch {
           }
@@ -237484,8 +237626,8 @@ var init_notification_store = __esm({
       save() {
         if (!this.file) return;
         const tmp = `${this.file}.tmp`;
-        import_node_fs15.default.writeFileSync(tmp, JSON.stringify([...this.rows.values()]));
-        import_node_fs15.default.renameSync(tmp, this.file);
+        import_node_fs16.default.writeFileSync(tmp, JSON.stringify([...this.rows.values()]));
+        import_node_fs16.default.renameSync(tmp, this.file);
       }
       findLive(recipient, sourceKey, category) {
         for (const r of this.rows.values()) {
@@ -239638,11 +239780,11 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs16, import_node_path21, import_node_crypto56, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs17, import_node_path21, import_node_crypto56, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
-    import_node_fs16 = __toESM(require("node:fs"), 1);
+    import_node_fs17 = __toESM(require("node:fs"), 1);
     import_node_path21 = __toESM(require("node:path"), 1);
     import_node_crypto56 = __toESM(require("node:crypto"), 1);
     SEP = "::";
@@ -239720,7 +239862,7 @@ var init_tags = __esm({
         super();
         this.file = file;
         try {
-          const raw = JSON.parse(import_node_fs16.default.readFileSync(file, "utf8"));
+          const raw = JSON.parse(import_node_fs17.default.readFileSync(file, "utf8"));
           for (const [k2, v2] of Object.entries(raw)) {
             if (v2 && typeof v2 === "object" && typeof v2.id === "string" && typeof v2.name === "string") this.map.set(k2, v2);
           }
@@ -239729,10 +239871,10 @@ var init_tags = __esm({
       }
       persist() {
         try {
-          import_node_fs16.default.mkdirSync(import_node_path21.default.dirname(this.file), { recursive: true });
+          import_node_fs17.default.mkdirSync(import_node_path21.default.dirname(this.file), { recursive: true });
           const tmp = `${this.file}.tmp`;
-          import_node_fs16.default.writeFileSync(tmp, JSON.stringify(Object.fromEntries(this.map), null, 2));
-          import_node_fs16.default.renameSync(tmp, this.file);
+          import_node_fs17.default.writeFileSync(tmp, JSON.stringify(Object.fromEntries(this.map), null, 2));
+          import_node_fs17.default.renameSync(tmp, this.file);
         } catch {
         }
       }
@@ -243660,7 +243802,7 @@ function nodesDomain(deps) {
       const here = (0, import_node_path22.dirname)((0, import_node_url6.fileURLToPath)(__esm_import_meta_url));
       for (const rel of ["../../../../node-daemon/package.json", "../../../../../node-daemon/package.json"]) {
         try {
-          const raw = (0, import_node_fs17.readFileSync)((0, import_node_path22.resolve)(here, rel), "utf8");
+          const raw = (0, import_node_fs18.readFileSync)((0, import_node_path22.resolve)(here, rel), "utf8");
           const pkg = JSON.parse(raw);
           if (pkg.version) return { version: pkg.version, source: "monorepo" };
         } catch {
@@ -244266,7 +244408,7 @@ function normalizeGatewayUrl(raw) {
 function newNodeId() {
   return "node-" + (0, import_node_crypto61.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto61, import_node_fs17, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
+var import_node_crypto61, import_node_fs18, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
@@ -244274,7 +244416,7 @@ var init_routes7 = __esm({
     init_faults();
     init_runtime_status();
     import_node_crypto61 = require("node:crypto");
-    import_node_fs17 = require("node:fs");
+    import_node_fs18 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path22 = require("node:path");
     init_src();
@@ -246627,10 +246769,10 @@ function tokenType(p2) {
 function parseOtlpMetricsUsage(body2) {
   const req = body2;
   const out = [];
-  for (const rm6 of req.resourceMetrics ?? []) {
-    const runId = attrString(rm6.resource?.attributes, "oasis.run_id");
+  for (const rm7 of req.resourceMetrics ?? []) {
+    const runId = attrString(rm7.resource?.attributes, "oasis.run_id");
     if (!runId) continue;
-    const actorId = attrString(rm6.resource?.attributes, "oasis.actor_id");
+    const actorId = attrString(rm7.resource?.attributes, "oasis.actor_id");
     let input = 0;
     let output = 0;
     let cacheRead = 0;
@@ -246638,7 +246780,7 @@ function parseOtlpMetricsUsage(body2) {
     let costUsd = 0;
     let sawToken = false;
     let sawCost = false;
-    for (const sm of rm6.scopeMetrics ?? []) {
+    for (const sm of rm7.scopeMetrics ?? []) {
       for (const m2 of sm.metrics ?? []) {
         const name = (m2.name ?? "").toLowerCase();
         const points = m2.sum?.dataPoints ?? m2.gauge?.dataPoints ?? [];
@@ -253662,11 +253804,11 @@ function normalize(patch) {
     ...reviewers !== void 0 ? { reviewers: [...new Set(reviewers.map((r) => r.trim()).filter(Boolean))] } : {}
   };
 }
-var import_node_fs18, import_node_path23, SEP2, keyOf2, prefixOf2, MemoryPlaybookOverrideStore, FilePlaybookOverrideStore;
+var import_node_fs19, import_node_path23, SEP2, keyOf2, prefixOf2, MemoryPlaybookOverrideStore, FilePlaybookOverrideStore;
 var init_overrides = __esm({
   "../server/src/domains/playbooks/overrides.ts"() {
     "use strict";
-    import_node_fs18 = __toESM(require("node:fs"), 1);
+    import_node_fs19 = __toESM(require("node:fs"), 1);
     import_node_path23 = __toESM(require("node:path"), 1);
     SEP2 = "::";
     keyOf2 = (companyId, ref2, nodeKey) => `${companyId}${SEP2}${ref2}${SEP2}${nodeKey}`;
@@ -253714,7 +253856,7 @@ var init_overrides = __esm({
         super();
         this.file = file;
         try {
-          const raw = JSON.parse(import_node_fs18.default.readFileSync(file, "utf8"));
+          const raw = JSON.parse(import_node_fs19.default.readFileSync(file, "utf8"));
           for (const [k2, v2] of Object.entries(raw)) {
             if (v2 && typeof v2 === "object") this.map.set(k2, v2);
           }
@@ -253723,10 +253865,10 @@ var init_overrides = __esm({
       }
       persist() {
         try {
-          import_node_fs18.default.mkdirSync(import_node_path23.default.dirname(this.file), { recursive: true });
+          import_node_fs19.default.mkdirSync(import_node_path23.default.dirname(this.file), { recursive: true });
           const tmp = `${this.file}.tmp`;
-          import_node_fs18.default.writeFileSync(tmp, JSON.stringify(Object.fromEntries(this.map), null, 2));
-          import_node_fs18.default.renameSync(tmp, this.file);
+          import_node_fs19.default.writeFileSync(tmp, JSON.stringify(Object.fromEntries(this.map), null, 2));
+          import_node_fs19.default.renameSync(tmp, this.file);
         } catch {
         }
       }
@@ -254825,17 +254967,17 @@ var init_dispatch_fence = __esm({
 });
 
 // ../server/src/side-map.ts
-var import_node_fs19, import_node_path24, FileSideMap;
+var import_node_fs20, import_node_path24, FileSideMap;
 var init_side_map = __esm({
   "../server/src/side-map.ts"() {
     "use strict";
-    import_node_fs19 = __toESM(require("node:fs"), 1);
+    import_node_fs20 = __toESM(require("node:fs"), 1);
     import_node_path24 = __toESM(require("node:path"), 1);
     FileSideMap = class {
       constructor(file) {
         this.file = file;
         try {
-          const raw = JSON.parse(import_node_fs19.default.readFileSync(file, "utf8"));
+          const raw = JSON.parse(import_node_fs20.default.readFileSync(file, "utf8"));
           for (const [k2, v2] of Object.entries(raw)) if (typeof v2 === "string") this.map.set(k2, v2);
         } catch {
         }
@@ -254857,10 +254999,10 @@ var init_side_map = __esm({
       }
       persist() {
         try {
-          import_node_fs19.default.mkdirSync(import_node_path24.default.dirname(this.file), { recursive: true });
+          import_node_fs20.default.mkdirSync(import_node_path24.default.dirname(this.file), { recursive: true });
           const tmp = `${this.file}.tmp`;
-          import_node_fs19.default.writeFileSync(tmp, JSON.stringify(Object.fromEntries(this.map), null, 2));
-          import_node_fs19.default.renameSync(tmp, this.file);
+          import_node_fs20.default.writeFileSync(tmp, JSON.stringify(Object.fromEntries(this.map), null, 2));
+          import_node_fs20.default.renameSync(tmp, this.file);
         } catch {
         }
       }
@@ -266946,10 +267088,10 @@ var init_postgres_model_prices = __esm({
 // ../storage/src/postgres-type-registry.ts
 async function backfillTypeRegistryFromFile(store, file) {
   if ((await store.list()).length > 0) return { filled: 0 };
-  if (!import_node_fs20.default.existsSync(file)) return { filled: 0 };
+  if (!import_node_fs21.default.existsSync(file)) return { filled: 0 };
   let defs;
   try {
-    defs = JSON.parse(import_node_fs20.default.readFileSync(file, "utf8"));
+    defs = JSON.parse(import_node_fs21.default.readFileSync(file, "utf8"));
   } catch {
     console.warn(`[type-registry-backfill] ${file} \u89E3\u6790\u5931\u8D25\uFF0C\u8DF3\u8FC7\u56DE\u586B\uFF08serve \u5C06\u7528\u4EE3\u7801\u5E38\u91CF\u64AD\u79CD\uFF09`);
     return { filled: 0 };
@@ -266959,11 +267101,11 @@ async function backfillTypeRegistryFromFile(store, file) {
   console.log(`[type-registry-backfill] \u51B3\u7B56 0062 \u56DE\u586B\uFF1A${defs.length} \u4E2A\u4EA7\u7269\u7C7B\u578B\u5DF2\u8FC1\u5165 Postgres`);
   return { filled: defs.length };
 }
-var import_node_fs20, PostgresTypeRegistryStore;
+var import_node_fs21, PostgresTypeRegistryStore;
 var init_postgres_type_registry = __esm({
   "../storage/src/postgres-type-registry.ts"() {
     "use strict";
-    import_node_fs20 = __toESM(require("node:fs"), 1);
+    import_node_fs21 = __toESM(require("node:fs"), 1);
     init_esm();
     init_pg_ident();
     PostgresTypeRegistryStore = class _PostgresTypeRegistryStore {
@@ -268605,11 +268747,11 @@ async function moveTenancyRows(pool, opts) {
           const insert = `INSERT INTO ${quoteIdent2(to)}.${quoteIdent2(spec.table)} (${colList}) SELECT ${colList} FROM ${quoteIdent2(from)}.${quoteIdent2(spec.table)} WHERE ${quoteIdent2(spec.key)} = ANY($1::text[])`;
           const del = `DELETE FROM ${quoteIdent2(from)}.${quoteIdent2(spec.table)} WHERE ${quoteIdent2(spec.key)} = ANY($1::text[])`;
           const ins = await client.query(insert, [ids2]);
-          const rm6 = await client.query(del, [ids2]);
+          const rm7 = await client.query(del, [ids2]);
           executed.push(insert, del);
-          log3(`[move] ${spec.table}: +${ins.rowCount ?? 0} \u2192 ${to} / -${rm6.rowCount ?? 0} \u2190 ${from}`);
-          if ((ins.rowCount ?? 0) !== (rm6.rowCount ?? 0)) {
-            throw new Error(`${spec.table}: \u63D2\u5165 ${ins.rowCount} \u884C\u3001\u5220\u9664 ${rm6.rowCount} \u884C\uFF0C\u4E0D\u4E00\u81F4 \u2014\u2014 \u5DF2\u56DE\u6EDA`);
+          log3(`[move] ${spec.table}: +${ins.rowCount ?? 0} \u2192 ${to} / -${rm7.rowCount ?? 0} \u2190 ${from}`);
+          if ((ins.rowCount ?? 0) !== (rm7.rowCount ?? 0)) {
+            throw new Error(`${spec.table}: \u63D2\u5165 ${ins.rowCount} \u884C\u3001\u5220\u9664 ${rm7.rowCount} \u884C\uFF0C\u4E0D\u4E00\u81F4 \u2014\u2014 \u5DF2\u56DE\u6EDA`);
           }
         }
         await client.query("COMMIT");
@@ -274630,26 +274772,26 @@ var init_cutover_aware_workorder_drafts = __esm({
 
 // ../server/src/governance/builtin-skills.ts
 async function collectDir(root, dir, out) {
-  const entries = await (0, import_promises14.readdir)(dir, { withFileTypes: true });
+  const entries = await (0, import_promises15.readdir)(dir, { withFileTypes: true });
   for (const e of entries) {
     const abs = (0, import_node_path25.join)(dir, e.name);
     if (e.isDirectory()) {
       await collectDir(root, abs, out);
     } else if (e.isFile()) {
-      const info = await (0, import_promises14.stat)(abs);
+      const info = await (0, import_promises15.stat)(abs);
       if (info.size > MAX_FILE_BYTES2) {
         console.warn(`[builtin-skills] skip oversized file (${info.size}B): ${abs}`);
         continue;
       }
       const rel = (0, import_node_path25.relative)(root, abs).split(/[\\/]/).join("/");
-      out[rel] = await (0, import_promises14.readFile)(abs, "utf8");
+      out[rel] = await (0, import_promises15.readFile)(abs, "utf8");
     }
   }
 }
 async function loadBuiltinSkills(skillsDir) {
   let dirents;
   try {
-    dirents = await (0, import_promises14.readdir)(skillsDir, { withFileTypes: true });
+    dirents = await (0, import_promises15.readdir)(skillsDir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -274697,11 +274839,11 @@ function applyBuiltinSkillVariants(builtins, opts) {
     return { ...skill, name: name || skill.id, description, files };
   });
 }
-var import_promises14, import_node_path25, MAX_FILE_BYTES2, BUILTIN_SKILL_DELEGATION_VARIANT;
+var import_promises15, import_node_path25, MAX_FILE_BYTES2, BUILTIN_SKILL_DELEGATION_VARIANT;
 var init_builtin_skills = __esm({
   "../server/src/governance/builtin-skills.ts"() {
     "use strict";
-    import_promises14 = require("node:fs/promises");
+    import_promises15 = require("node:fs/promises");
     import_node_path25 = require("node:path");
     init_skill_fetcher();
     init_skill_materializer();
@@ -274753,7 +274895,7 @@ async function fetchLatestNpmVersion(pkg) {
 }
 async function readRegisteredToolVersions(dataDir) {
   try {
-    const raw = JSON.parse(await (0, import_promises15.readFile)(connectorToolVersionsFile(dataDir), "utf8"));
+    const raw = JSON.parse(await (0, import_promises16.readFile)(connectorToolVersionsFile(dataDir), "utf8"));
     if (!raw || typeof raw !== "object") return {};
     const out = {};
     for (const [k2, v2] of Object.entries(raw)) {
@@ -274766,11 +274908,11 @@ async function readRegisteredToolVersions(dataDir) {
 }
 async function writeRegisteredToolVersions(dataDir, versions) {
   const file = connectorToolVersionsFile(dataDir);
-  await (0, import_promises15.mkdir)((0, import_node_path26.join)(dataDir, "connector-tools"), { recursive: true });
+  await (0, import_promises16.mkdir)((0, import_node_path26.join)(dataDir, "connector-tools"), { recursive: true });
   const tmp = `${file}.${process.pid}.tmp`;
-  await (0, import_promises15.writeFile)(tmp, `${JSON.stringify(versions, null, 2)}
+  await (0, import_promises16.writeFile)(tmp, `${JSON.stringify(versions, null, 2)}
 `, "utf8");
-  await (0, import_promises15.rename)(tmp, file);
+  await (0, import_promises16.rename)(tmp, file);
 }
 async function refreshConnectorToolVersions(opts) {
   const fetchLatest = opts.fetchLatest ?? fetchLatestNpmVersion;
@@ -274813,11 +274955,11 @@ function pickToolVersions(registered, tools) {
   }
   return out;
 }
-var import_promises15, import_node_path26, NPM_PROBE_TIMEOUT_MS;
+var import_promises16, import_node_path26, NPM_PROBE_TIMEOUT_MS;
 var init_connector_tool_versions = __esm({
   "../server/src/governance/connector-tool-versions.ts"() {
     "use strict";
-    import_promises15 = require("node:fs/promises");
+    import_promises16 = require("node:fs/promises");
     import_node_path26 = require("node:path");
     init_src8();
     NPM_PROBE_TIMEOUT_MS = 3e3;
@@ -274863,11 +275005,14 @@ var init_board_watch = __esm({
       constructor(deps) {
         this.deps = deps;
       }
+      odGet(path46) {
+        const fetchImpl = this.deps.fetchImpl ?? fetch;
+        return fetchImpl(`${this.deps.odBase}${path46}`, this.deps.odToken ? { headers: { authorization: `Bearer ${this.deps.odToken}` } } : void 0);
+      }
       /** 查一块板的交付物（排 task-context/、只算带 artifactManifest 的）。404/网络错 → null（板不存在）。 */
       async boardFiles(boardKey) {
-        const fetchImpl = this.deps.fetchImpl ?? fetch;
         try {
-          const res = await fetchImpl(`${this.deps.odBase}/api/projects/${encodeURIComponent(boardKey)}/files`);
+          const res = await this.odGet(`/api/projects/${encodeURIComponent(boardKey)}/files`);
           if (!res.ok) return null;
           const body2 = await res.json();
           return (body2.files ?? []).filter((f2) => !f2.path.startsWith("task-context/") && f2.artifactManifest !== void 0).map((f2) => ({ path: f2.path, kind: f2.kind ?? null, mtime: f2.mtime ?? null }));
@@ -274881,9 +275026,8 @@ var init_board_watch = __esm({
        * 由板文件 mtime 那条慢路径兜底，绝不因为查不到 run 就压掉写信。
        */
       async boardRuns(boardKey) {
-        const fetchImpl = this.deps.fetchImpl ?? fetch;
         try {
-          const res = await fetchImpl(`${this.deps.odBase}/api/runs?projectId=${encodeURIComponent(boardKey)}`);
+          const res = await this.odGet(`/api/runs?projectId=${encodeURIComponent(boardKey)}`);
           if (!res.ok) return [];
           const body2 = await res.json();
           return (body2.runs ?? []).map((r) => ({ runId: String(r["runId"] ?? r["id"] ?? ""), status: String(r["status"] ?? "unknown") })).filter((r) => r.runId.length > 0);
@@ -278486,7 +278630,7 @@ function createDiscussionRuntime(options) {
 
 // ../server/src/domains/discussions/store.ts
 var import_node_crypto86 = require("node:crypto");
-var import_promises16 = require("node:fs/promises");
+var import_promises17 = require("node:fs/promises");
 var import_node_path27 = require("node:path");
 var key = (kind, id) => JSON.stringify([kind, id]);
 var MemoryDiscussionStore = class _MemoryDiscussionStore {
@@ -278498,7 +278642,7 @@ var MemoryDiscussionStore = class _MemoryDiscussionStore {
   static async open(filename) {
     const store = new _MemoryDiscussionStore(filename);
     try {
-      store.rows = JSON.parse(await (0, import_promises16.readFile)(filename, "utf8"));
+      store.rows = JSON.parse(await (0, import_promises17.readFile)(filename, "utf8"));
     } catch (error2) {
       if (error2.code !== "ENOENT") throw error2;
     }
@@ -278529,10 +278673,10 @@ var MemoryDiscussionStore = class _MemoryDiscussionStore {
       const result = await run(tx);
       if (changed) {
         if (this.filename) {
-          await (0, import_promises16.mkdir)((0, import_node_path27.dirname)(this.filename), { recursive: true });
+          await (0, import_promises17.mkdir)((0, import_node_path27.dirname)(this.filename), { recursive: true });
           const temp = `${this.filename}.${(0, import_node_crypto86.randomUUID)()}.tmp`;
-          await (0, import_promises16.writeFile)(temp, JSON.stringify(next), "utf8");
-          await (0, import_promises16.rename)(temp, this.filename);
+          await (0, import_promises17.writeFile)(temp, JSON.stringify(next), "utf8");
+          await (0, import_promises17.rename)(temp, this.filename);
         }
         this.rows = next;
       }
@@ -286417,11 +286561,18 @@ ${nodeFault}` : "");
   const boardWatchFlag = (process.env["OASIS_BOARD_WATCH"] ?? "").trim().toLowerCase();
   if (!["0", "false", "off"].includes(boardWatchFlag)) {
     const odBase = (process.env["OASIS_OPEN_DESIGN_URL"] ?? "http://127.0.0.1:7457").replace(/\/$/, "");
-    const boardWatcher = new BoardWatcher({ kernel: defaultCompanyKernel, odBase, boardKeyOf: deriveBoardKey, log: (m2) => console.log(m2) });
+    const odToken = process.env["OASIS_OPEN_DESIGN_TOKEN"]?.trim() || void 0;
+    const boardWatcher = new BoardWatcher({
+      kernel: defaultCompanyKernel,
+      odBase,
+      ...odToken ? { odToken } : {},
+      boardKeyOf: deriveBoardKey,
+      log: (m2) => console.log(m2)
+    });
     boardWatchTimer = setInterval(() => {
       void boardWatcher.tick().catch((err) => console.error(`[board-watch] tick \u5931\u8D25: ${String(err)}`));
     }, 6e4);
-    console.log(`[serve] \u753B\u677F\u76D1\u89C6\u5668\u5DF2\u542F\u7528\uFF08od=${odBase}\uFF0C\u9759\u9ED8\u7A97 10min\uFF0C\u6BCF\u8F6E\u4E0A\u9650 2 \u5C01\u4FE1\uFF1BOASIS_BOARD_WATCH=0 \u53EF\u5173\uFF09`);
+    console.log(`[serve] \u753B\u677F\u76D1\u89C6\u5668\u5DF2\u542F\u7528\uFF08od=${odBase}${odToken ? "\uFF0C\u5E26\u4EE4\u724C" : ""}\uFF0C\u9759\u9ED8\u7A97 10min\uFF0C\u6BCF\u8F6E\u4E0A\u9650 2 \u5C01\u4FE1\uFF1BOASIS_BOARD_WATCH=0 \u53EF\u5173\uFF09`);
   } else {
     console.log(`[serve] \u753B\u677F\u76D1\u89C6\u5668\u5DF2\u88AB OASIS_BOARD_WATCH=${boardWatchFlag} \u663E\u5F0F\u5173\u95ED`);
   }
@@ -287454,7 +287605,7 @@ function readCodexQuota(binary, signal, timeoutMs = 15e3) {
 
 // ../cli/src/daemon/quota/claude.ts
 var import_node_child_process21 = require("node:child_process");
-var import_promises17 = require("node:fs/promises");
+var import_promises18 = require("node:fs/promises");
 var import_node_os10 = require("node:os");
 var import_node_path28 = require("node:path");
 var import_node_util6 = require("node:util");
@@ -287476,8 +287627,8 @@ async function credentials(env, signal) {
   }
   if (!raw) {
     const file = (0, import_node_path28.join)(env.CLAUDE_CONFIG_DIR || (0, import_node_path28.join)((0, import_node_os10.homedir)(), ".claude"), ".credentials.json");
-    if ((await (0, import_promises17.stat)(file)).size > 256 * 1024) return void 0;
-    raw = await (0, import_promises17.readFile)(file, { encoding: "utf8", ...signal ? { signal } : {} });
+    if ((await (0, import_promises18.stat)(file)).size > 256 * 1024) return void 0;
+    raw = await (0, import_promises18.readFile)(file, { encoding: "utf8", ...signal ? { signal } : {} });
   }
   const oauth = object6(object6(JSON.parse(raw)).claudeAiOauth);
   if (typeof oauth.expiresAt === "number" && oauth.expiresAt <= Date.now()) return void 0;
@@ -287677,7 +287828,7 @@ function detectRuntimes() {
 }
 
 // ../cli/src/daemon/workdir-handler.ts
-var import_node_fs21 = __toESM(require("node:fs"), 1);
+var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_path29 = __toESM(require("node:path"), 1);
 init_src2();
 init_src();
@@ -287715,7 +287866,7 @@ async function trustedCanonicalContainer(req, logicalBase, dirKind) {
   const trustedRoot = isLegacy ? resolveLegacyWorkRoot(req.workRoot) : resolveWorkRoot(req.workRoot);
   let trustedRootReal;
   try {
-    trustedRootReal = await import_node_fs21.default.promises.realpath(trustedRoot);
+    trustedRootReal = await import_node_fs22.default.promises.realpath(trustedRoot);
   } catch {
     return null;
   }
@@ -287733,7 +287884,7 @@ async function resolveWithinWorkdir(req) {
   if (canonicalContainer === null) return { ok: false, code: "NOT_FOUND" };
   let base;
   try {
-    base = await import_node_fs21.default.promises.realpath(logicalBase);
+    base = await import_node_fs22.default.promises.realpath(logicalBase);
   } catch {
     return { ok: false, code: "NOT_FOUND" };
   }
@@ -287745,7 +287896,7 @@ async function resolveWithinWorkdir(req) {
   if (relPathIsSensitive(cleanRel)) return { ok: false, code: "SENSITIVE" };
   let real;
   try {
-    real = await import_node_fs21.default.promises.realpath(requested);
+    real = await import_node_fs22.default.promises.realpath(requested);
   } catch (e) {
     if (e.code === "ENOENT") return { ok: false, code: "NOT_FOUND" };
     return { ok: false, code: "PATH_ESCAPE" };
@@ -287762,7 +287913,7 @@ async function handleWorkdirList(req) {
     const { base, real } = resolved;
     let dh;
     try {
-      dh = await import_node_fs21.default.promises.open(real, import_node_fs21.default.constants.O_RDONLY | import_node_fs21.default.constants.O_NOFOLLOW | import_node_fs21.default.constants.O_NONBLOCK);
+      dh = await import_node_fs22.default.promises.open(real, import_node_fs22.default.constants.O_RDONLY | import_node_fs22.default.constants.O_NOFOLLOW | import_node_fs22.default.constants.O_NONBLOCK);
     } catch (e) {
       const code2 = e.code;
       if (code2 === "ELOOP") return { ok: false, code: "PATH_ESCAPE" };
@@ -287776,7 +287927,7 @@ async function handleWorkdirList(req) {
       const anchor = verified.anchor;
       const dst = await dh.stat();
       if (!dst.isDirectory()) return { ok: false, code: "NOT_FOUND" };
-      const dirents = await import_node_fs21.default.promises.readdir(anchor, { withFileTypes: true });
+      const dirents = await import_node_fs22.default.promises.readdir(anchor, { withFileTypes: true });
       const visible = dirents.filter((d) => !isSensitiveSegment(d.name));
       visible.sort((a, b2) => {
         const ad = a.isDirectory() ? 0 : 1;
@@ -287789,7 +287940,7 @@ async function handleWorkdirList(req) {
       for (const d of slice) {
         const abs = import_node_path29.default.join(anchor, d.name);
         try {
-          const st = await import_node_fs21.default.promises.lstat(abs);
+          const st = await import_node_fs22.default.promises.lstat(abs);
           if (st.isSymbolicLink()) continue;
           entries.push({
             name: d.name,
@@ -287845,7 +287996,7 @@ async function handleWorkdirWalk(req, now = Date.now) {
 }
 async function fdCanonicalPath(fh) {
   try {
-    return await import_node_fs21.default.promises.readlink(`/proc/self/fd/${fh.fd}`);
+    return await import_node_fs22.default.promises.readlink(`/proc/self/fd/${fh.fd}`);
   } catch {
     return null;
   }
@@ -287866,7 +288017,7 @@ async function handleWorkdirRead(req) {
     const { base, real } = resolved;
     let fh;
     try {
-      fh = await import_node_fs21.default.promises.open(real, import_node_fs21.default.constants.O_RDONLY | import_node_fs21.default.constants.O_NOFOLLOW | import_node_fs21.default.constants.O_NONBLOCK);
+      fh = await import_node_fs22.default.promises.open(real, import_node_fs22.default.constants.O_RDONLY | import_node_fs22.default.constants.O_NOFOLLOW | import_node_fs22.default.constants.O_NONBLOCK);
     } catch (e) {
       const code2 = e.code;
       if (code2 === "ELOOP") return { ok: false, code: "PATH_ESCAPE" };
@@ -288682,7 +288833,7 @@ var RuntimeRouterAdapter = class {
 };
 
 // ../cli/src/daemon/reap-claude-projects.ts
-var import_node_fs22 = __toESM(require("node:fs"), 1);
+var import_node_fs23 = __toESM(require("node:fs"), 1);
 var import_node_os12 = __toESM(require("node:os"), 1);
 var import_node_path30 = __toESM(require("node:path"), 1);
 function claudeProjectSlug(cwd) {
@@ -288695,9 +288846,9 @@ function claudeProjectsRoot() {
 function reapClaudeProjects(workdir, runtimeKind) {
   if (runtimeKind !== "claude" && runtimeKind !== "claude-code") return;
   const dir = import_node_path30.default.join(claudeProjectsRoot(), claudeProjectSlug(workdir));
-  if (!import_node_fs22.default.existsSync(dir)) return;
+  if (!import_node_fs23.default.existsSync(dir)) return;
   try {
-    import_node_fs22.default.rmSync(dir, { recursive: true, force: true });
+    import_node_fs23.default.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
 }
@@ -288710,7 +288861,7 @@ function dirSizeBytes2(dir) {
   let total = 0;
   let entries;
   try {
-    entries = import_node_fs22.default.readdirSync(dir, { withFileTypes: true });
+    entries = import_node_fs23.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return 0;
   }
@@ -288722,7 +288873,7 @@ function dirSizeBytes2(dir) {
       continue;
     }
     try {
-      total += import_node_fs22.default.statSync(p2).size;
+      total += import_node_fs23.default.statSync(p2).size;
     } catch {
     }
   }
@@ -288919,13 +289070,13 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process23 = require("node:child_process");
-var import_node_fs23 = require("node:fs");
+var import_node_fs24 = require("node:fs");
 var import_node_crypto89 = require("node:crypto");
 var import_node_os14 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
     try {
-      const v2 = (0, import_node_fs23.readFileSync)(p2, "utf8").trim();
+      const v2 = (0, import_node_fs24.readFileSync)(p2, "utf8").trim();
       if (v2) return v2;
     } catch {
     }
@@ -288996,6 +289147,24 @@ init_src();
 init_src7();
 init_src2();
 
+// ../cli/src/design-endpoint.ts
+init_src8();
+var OD_LOCAL_DEFAULT = "http://127.0.0.1:7457";
+function resolveOpenDesignEndpoint(flagUrl, env = process.env) {
+  const creds = readOpenDesignCreds(env);
+  const trim = (u) => u.replace(/\/$/, "");
+  const picked = flagUrl ? { base: trim(flagUrl), source: "--od-url" } : creds ? { base: trim(creds.baseUrl), source: "\u8FDE\u63A5\u5668" } : env["OASIS_OPEN_DESIGN_URL"] ? { base: trim(env["OASIS_OPEN_DESIGN_URL"]), source: "OASIS_OPEN_DESIGN_URL" } : { base: OD_LOCAL_DEFAULT, source: "\u672C\u673A\u9ED8\u8BA4" };
+  if (creds && sameOrigin(picked.base, creds.baseUrl)) return { ...picked, token: creds.apiToken };
+  return picked;
+}
+function sameOrigin(a, b2) {
+  try {
+    return new URL(a).origin === new URL(b2).origin;
+  } catch {
+    return false;
+  }
+}
+
 // ../cli/src/workorder-attachments.ts
 var fs41 = __toESM(require("node:fs"), 1);
 var path35 = __toESM(require("node:path"), 1);
@@ -289608,7 +289777,7 @@ var COMMAND_DECLS = {
   design: {
     group: "\u8BBE\u8BA1\u7A3F",
     usage: "oasis design <chat|status> <artifactId> ...",
-    description: "\u8BBE\u8BA1\u4EA7\u7269\u76F8\u5173\u64CD\u4F5C\u3002",
+    description: "\u8BBE\u8BA1\u4EA7\u7269\u76F8\u5173\u64CD\u4F5C\u3002\u8FDE\u54EA\u4E2A open-design\uFF1A\u5458\u5DE5\u5F00\u4E86 open-design \u8FDE\u63A5\u5668\u5C31\u8FDE\u5B83\u767B\u8BB0\u7684\u5730\u5740\u5E76\u5E26\u4EE4\u724C\uFF08\u4EFB\u610F\u8282\u70B9\u53EF\u7528\uFF09\uFF0C\u5426\u5219 $OASIS_OPEN_DESIGN_URL\uFF0C\u518D\u5426\u5219\u672C\u673A\u3002",
     subCommands: ["design chat", "design status"],
     examples: ['oasis design chat artifact:design:xyz --message "\u8BBE\u8BA1\u767B\u5F55\u9875" --async']
   },
@@ -291485,7 +291654,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.76" ? "2.2.76" : "dev";
+var CLI_VERSION = "2.2.77" ? "2.2.77" : "dev";
 function apiHeaders(token, company) {
   const headers = {
     authorization: `Bearer ${token}`,
@@ -293217,7 +293386,9 @@ ${res.warning}`);
         const artifactId = needPos(positional, 1, "oasis design chat <artifactId> --message <t>");
         const message = flags.get("message") ?? (["DESIGN_BRIEF.md", "TASK.md"].map((f2) => fs43.existsSync(f2) ? fs43.readFileSync(f2, "utf8") : "").find((s2) => s2.trim()) ?? "");
         if (!message.trim()) throw new Error("\u65E0\u5BF9\u8BDD\u5185\u5BB9\uFF1A\u7ED9 --message <text>\uFF0C\u6216\u5728\u5F53\u524D\u76EE\u5F55\u653E DESIGN_BRIEF.md / TASK.md");
-        const odBase = (flags.get("od-url") ?? process.env["OASIS_OPEN_DESIGN_URL"] ?? "http://127.0.0.1:7457").replace(/\/$/, "");
+        const od = resolveOpenDesignEndpoint(flags.get("od-url"));
+        const odBase = od.base;
+        const odLabel = `${odBase}\uFF08\u5730\u5740\u6765\u81EA${od.source}${od.token ? "\uFF0C\u5E26\u4EE4\u724C" : ""}\uFF09`;
         const isContinue = flags.get("turn") === "continue";
         const contextFiles = {};
         if (!isContinue) {
@@ -293230,6 +293401,7 @@ ${res.warning}`);
         }
         const baseTurnOpts = {
           base: odBase,
+          ...od.token ? { token: od.token } : {},
           agentId: flags.get("agent") ?? "claude",
           artifactId,
           title: flags.get("title") ?? artifactId,
@@ -293238,13 +293410,13 @@ ${res.warning}`);
           ...isContinue ? {} : { contextFiles }
         };
         if (flags.get("async") === "true") {
-          println(`[design] \u753B\u677F ${deriveBoardKey(artifactId)} \u2190 ${artifactId}\uFF1B${isContinue ? "\u7EED\u8F6E" : "\u9996\u8F6E"}\uFF08--async\uFF09\u2192 od \u5F15\u64CE ${odBase} \u2026`);
+          println(`[design] \u753B\u677F ${deriveBoardKey(artifactId)} \u2190 ${artifactId}\uFF1B${isContinue ? "\u7EED\u8F6E" : "\u9996\u8F6E"}\uFF08--async\uFF09\u2192 od \u5F15\u64CE ${odLabel} \u2026`);
           const started = await startDesignChatTurn(baseTurnOpts);
           println(`[design] \u5DF2\u4E0B\u5355\uFF1Arun ${started.runId.slice(0, 8)}\uFF08board ${started.boardKey}, \u53EF\u89C1 user \u56DE\u5408 ${started.userMessageId.slice(0, 8)}\uFF09\u3002\u5F15\u64CE\u901A\u5E38\u8981 13\u201344 \u5206\u949F\u3002`);
           println(`[design] \u4E4B\u540E\u7528 oasis design status ${artifactId} \u67E5\u8FDB\u5EA6/\u53D6\u8D27\uFF08--pull \u62C9\u4EA7\u7269\u5230\u672C\u5730\u8BFB\uFF09\uFF1B\u4E0D\u5FC5\u5B88\u7740\u7B49\u3002`);
           break;
         }
-        println(`[design] \u753B\u677F ${deriveBoardKey(artifactId)} \u2190 ${artifactId}\uFF1B${isContinue ? "\u7EED\u8F6E" : "\u9996\u8F6E"}\u5BF9\u8BDD\u9A71\u52A8 od \u5F15\u64CE ${odBase} \u2026`);
+        println(`[design] \u753B\u677F ${deriveBoardKey(artifactId)} \u2190 ${artifactId}\uFF1B${isContinue ? "\u7EED\u8F6E" : "\u9996\u8F6E"}\u5BF9\u8BDD\u9A71\u52A8 od \u5F15\u64CE ${odLabel} \u2026`);
         const turn = await runDesignChatTurn({
           ...baseTurnOpts,
           onLine: (line2) => println(`[od] ${line2.length > 500 ? line2.slice(0, 500) + "\u2026" : line2}`)
@@ -293256,8 +293428,10 @@ ${res.warning}`);
       }
       if (sub === "status") {
         const artifactId = needPos(positional, 1, "oasis design status <artifactId> [--pull]");
-        const odBase = (flags.get("od-url") ?? process.env["OASIS_OPEN_DESIGN_URL"] ?? "http://127.0.0.1:7457").replace(/\/$/, "");
-        const st = await fetchBoardStatus(odBase, fetch, artifactId);
+        const od = resolveOpenDesignEndpoint(flags.get("od-url"));
+        const odBase = od.base;
+        const odFetch = withOdToken(fetch, od.token);
+        const st = await fetchBoardStatus(odBase, odFetch, artifactId);
         if (!st.boardExists) {
           println(`[design] \u753B\u677F ${st.boardKey} \u5C1A\u4E0D\u5B58\u5728\u2014\u2014\u8FD8\u6CA1\u8D77\u8FC7\u4EFB\u4F55\u4E00\u8F6E\u3002\u5F00\u5DE5\uFF1Aoasis design chat ${artifactId} --message "<\u8BBE\u8BA1\u9700\u6C42+\u771F\u5B9E\u6570\u636E>" --async`);
           break;
@@ -293278,7 +293452,7 @@ ${res.warning}`);
         for (const a of st.artifacts) println(`  - ${a.path}\uFF08${a.kind ?? "?"}\uFF09status=${a.status ?? "?"}${a.mtime ? ` \xB7 ${new Date(a.mtime).toISOString()}` : ""}`);
         if (flags.get("pull") === "true") {
           const odPublic = (flags.get("od-public-url") ?? process.env["OASIS_OPEN_DESIGN_PUBLIC_URL"] ?? "https://design.open-friday.com").replace(/\/$/, "");
-          const { dir: dir2, entry } = await harvestBoard(odBase, fetch, odPublic, os12.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
+          const { dir: dir2, entry } = await harvestBoard(odBase, odFetch, odPublic, os12.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
           println(`[design] \u5DF2\u62C9\u5230\u672C\u5730\uFF1A${dir2}\uFF08\u5165\u53E3 ${entry}\uFF09`);
           println(`[design] \u8BFB\u5B8C\u6EE1\u610F\u5373\u4EA4\u7A3F\uFF1Aoasis propose ${artifactId} --from-dir ${dir2} --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"`);
         } else {
@@ -295142,7 +295316,7 @@ function removeInstanceFiles(name, deps) {
   const inst = instancePaths(name);
   const never2 = new Set(sharedPathsNeverRemoved());
   const removed = [];
-  const rm6 = (target) => {
+  const rm7 = (target) => {
     const resolved = path42.resolve(target);
     if (never2.has(resolved)) {
       deps.log(`\u62D2\u7EDD\u5220\u9664\u5171\u4EAB\u8DEF\u5F84\uFF1A${resolved}`);
@@ -295166,19 +295340,19 @@ function removeInstanceFiles(name, deps) {
       deps.log(`\u5B9E\u4F8B\u76EE\u5F55 ${dir} \u4E0D\u5728 ${instancesRoot()} \u4E0B\uFF0C\u62D2\u7EDD\u5220\u9664`);
       return removed;
     }
-    rm6(dir);
+    rm7(dir);
     return removed;
   }
-  rm6(inst.configFile);
-  rm6(inst.pidFile);
-  rm6(inst.logFile);
-  rm6(inst.binDir);
-  rm6(inst.currentLink);
-  rm6(inst.sessionsDir);
+  rm7(inst.configFile);
+  rm7(inst.pidFile);
+  rm7(inst.logFile);
+  rm7(inst.binDir);
+  rm7(inst.currentLink);
+  rm7(inst.sessionsDir);
   try {
     const base = path42.basename(inst.logFile);
     for (const entry of fs47.readdirSync(path42.dirname(inst.logFile))) {
-      if (entry.startsWith(`${base}.`)) rm6(path42.join(path42.dirname(inst.logFile), entry));
+      if (entry.startsWith(`${base}.`)) rm7(path42.join(path42.dirname(inst.logFile), entry));
     }
   } catch {
   }
@@ -295379,7 +295553,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.76" : "dev";
+var PKG_VERSION = true ? "2.2.77" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;