oasis_test_v2 2.2.77 → 2.2.78

package/dist/index.js

@@ -455,6 +455,13 @@ var init_inbox_read = __esm({
   }
 });
 
+// ../contract/src/connector-auth-pending.ts
+var init_connector_auth_pending = __esm({
+  "../contract/src/connector-auth-pending.ts"() {
+    "use strict";
+  }
+});
+
 // ../contract/src/notifications.ts
 var LEDGER_INBOX_KINDS;
 var init_notifications = __esm({
@@ -2277,6 +2284,7 @@ var init_src = __esm({
     init_annotation();
     init_collab_view();
     init_inbox_read();
+    init_connector_auth_pending();
     init_notifications();
     init_workorder_quality();
     init_workorder_attachments();
@@ -2562,7 +2570,7 @@ var init_session_runtime_target = __esm({
         this.name = "SessionRuntimeOverrideError";
       }
     };
-    CLEAR_SESSION_RUNTIME_HINT = "\u5728\u8FD0\u884C\u65F6\u9009\u62E9\u91CC\u70B9\u300C\u6062\u590D\u4E3A\u5458\u5DE5\u9ED8\u8BA4\u8FD0\u884C\u914D\u7F6E\u300D\u5373\u53EF\u7EE7\u7EED\uFF08\u4F1A\u628A\u8FD9\u4F4D Agent \u6B64\u523B\u7684\u9ED8\u8BA4\u914D\u7F6E\u6284\u8FDB\u8FD9\u6761\u4F1A\u8BDD\uFF09\u3002";
+    CLEAR_SESSION_RUNTIME_HINT = "\u5728\u8F93\u5165\u6846\u5E95\u90E8\u7684\u8FD0\u884C\u65F6\u9009\u62E9\u91CC\u6362\u4E00\u53F0\u53EF\u7528\u7684\u670D\u52A1\u5668\u6216\u8FD0\u884C\u65F6\u5373\u53EF\u7EE7\u7EED\uFF08\u5458\u5DE5\u81EA\u5DF1\u7684\u90A3\u4E00\u5957\u6807\u7740\u300C\u5F53\u524D\u5458\u5DE5\u6240\u5728\u670D\u52A1\u5668\u300D\u300C\u5F53\u524D\u5458\u5DE5\u8FD0\u884C\u65F6\u300D\uFF09\u3002";
   }
 });
 
@@ -164597,7 +164605,7 @@ var init_initialize_workorder = __esm({
 function hasRejectionEvidence(reason) {
   return DEFINITELY_NOT_DELIVERED.has(reason ?? "");
 }
-var DEFINITELY_NOT_DELIVERED, INSERT_UNCERTAIN_NOTE;
+var DEFINITELY_NOT_DELIVERED, INSERT_UNCERTAIN_NOTE, INSERT_RETURNED_NOTE;
 var init_chat_insert_evidence = __esm({
   "../server/src/chat-insert-evidence.ts"() {
     "use strict";
@@ -164611,6 +164619,7 @@ var init_chat_insert_evidence = __esm({
       "not-consumed"
     ]);
     INSERT_UNCERTAIN_NOTE = "\u8FD9\u6B21\u63D2\u5165\u7ED3\u679C\u4E0D\u786E\u5B9A\uFF1A\u65E0\u6CD5\u786E\u8BA4 agent \u662F\u5426\u5DF2\u8BFB\u5230\u3002";
+    INSERT_RETURNED_NOTE = "\u8FD9\u53E5\u8BDD\u6CA1\u6709\u4EA4\u5230 agent \u624B\u4E0A\uFF1A\u63D2\u8BDD\u65F6\u9875\u9762\u5DF2\u5237\u65B0\u6216\u5173\u95ED\uFF0C\u6CA1\u80FD\u5728\u672C\u8F6E\u7ED3\u675F\u540E\u81EA\u52A8\u53D1\u51FA\u3002";
   }
 });
 
@@ -165880,14 +165889,15 @@ async function appendNowThroughQueue(chatSessionId, text7, deps, clientKey, atta
   if (!batch.length) {
     const state = submitted.state ?? "queued";
     const returned = state === "cancelled" && submitted.stateReason?.startsWith("client-retained:");
+    const landed = state === "cancelled" && submitted.stateReason?.startsWith("client-gone:");
     const reason = state === "delivering" ? "in-flight" : returned ? submitted.stateReason.slice("client-retained:".length) : "unconfirmed";
     return {
       accepted: state === "delivered",
       ...state !== "delivered" ? { reason } : {},
-      queued: !returned,
+      queued: !returned && !landed,
       delivered: "",
       batch: [submitted],
-      insertStatus: insertStatusOfRow(submitted)
+      insertStatus: landed ? "uncertain" : insertStatusOfRow(submitted)
     };
   }
   const prepared = await buildChatAttachmentFiles(
@@ -165909,8 +165919,13 @@ async function appendNowThroughQueue(chatSessionId, text7, deps, clientKey, atta
   const recordOutcome = async (res) => {
     const nextState = res.accepted ? "delivered" : hasRejectionEvidence(res.reason) ? "queued" : "unconfirmed";
     const stateReason = res.detail ? `${res.reason ?? (res.accepted ? "delivered" : "")}:${res.detail}` : res.reason;
-    const returnToClient = retainLocallyOnFailure && !!clientKey && nextState === "queued";
-    if (returnToClient && deps.store.markPendingMessages) {
+    const wantsReturn = retainLocallyOnFailure && !!clientKey && nextState === "queued";
+    const orphanedReturn = wantsReturn && deps.clientAttached?.() === false;
+    const returnToClient = wantsReturn && !orphanedReturn;
+    if (orphanedReturn && deps.store.markPendingMessages) {
+      await deps.store.markPendingMessages(chatSessionId, [submitted.id], "cancelled", `client-gone:${res.reason}`);
+      await deps.store.markPendingMessages(chatSessionId, ids2.filter((id) => id !== submitted.id), nextState, stateReason);
+    } else if (returnToClient && deps.store.markPendingMessages) {
       await deps.store.markPendingMessages(chatSessionId, [submitted.id], "cancelled", `client-retained:${res.reason}`);
       await deps.store.markPendingMessages(chatSessionId, ids2.filter((id) => id !== submitted.id), nextState, stateReason);
     } else {
@@ -165920,7 +165935,15 @@ async function appendNowThroughQueue(chatSessionId, text7, deps, clientKey, atta
       if (returnToClient) await deps.store.removePendingMessage(chatSessionId, submitted.id);
     }
     const insertStatus = nextState === "delivered" ? "inserted" : nextState === "unconfirmed" ? "uncertain" : "not-inserted";
-    return { ...res, queued: !returnToClient, delivered: merged, batch, insertStatus, ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {} };
+    return {
+      ...res,
+      queued: !returnToClient && !orphanedReturn,
+      delivered: merged,
+      batch,
+      insertStatus,
+      ...orphanedReturn ? { orphanedReturn: true } : {},
+      ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {}
+    };
   };
   let settle;
   const settled = new Promise((resolve12) => {
@@ -165954,82 +165977,6 @@ var init_append_now = __esm({
   }
 });
 
-// ../server/src/domains/chat-sessions/insert-status.ts
-async function resolveInsertStatus(deps, chatSessionId, clientKey) {
-  const id = insertRequestId(chatSessionId, clientKey);
-  if (!deps.store.getPendingMessage) return { status: "uncertain" };
-  let row = await deps.store.getPendingMessage(chatSessionId, id);
-  if (row?.state !== "delivering") return { status: insertStatusOfRow(row) };
-  if (deps.isTurnRunning(chatSessionId)) return { status: "in-flight" };
-  if (isInsertInflight(id)) {
-    await waitForInflightInsert(id, deps.settleWaitMs ?? 1e4);
-    row = await deps.store.getPendingMessage(chatSessionId, id);
-    return { status: insertStatusOfRow(row) };
-  }
-  const running = settlingOrphans.get(id);
-  if (running) return running;
-  const settling = settleOrphan(deps, chatSessionId, row).finally(() => {
-    settlingOrphans.delete(id);
-  });
-  settlingOrphans.set(id, settling);
-  return settling;
-}
-async function settleOrphan(deps, chatSessionId, row) {
-  const ref2 = row.deliveryRef;
-  const answer = ref2?.nodeId && ref2.dispatchId && deps.confirm ? await deps.confirm({ nodeId: ref2.nodeId, dispatchId: ref2.dispatchId, runtimeKey: ref2.runtimeKey }).catch(() => ({ status: "unknown", reason: "query-failed" })) : { status: "unknown", reason: ref2 ? "no-node" : "no-delivery-ref" };
-  const trace = ref2 && deps.store.listPendingTrace ? await deps.store.listPendingTrace(chatSessionId).catch(() => []) : [];
-  const batch = trace.filter((r) => r.state === "delivering" && r.deliveryRef?.runtimeKey === ref2?.runtimeKey);
-  if (!batch.some((r) => r.id === row.id)) batch.push(row);
-  const ids2 = batch.map((r) => r.id);
-  deps.log?.(`[chat-insert] \u5B64\u513F\u63D2\u5165\u7ED3\u7B97 sid=${chatSessionId} row=${row.id} \u2192 ${answer.status}${answer.reason ? `(${answer.reason})` : ""}`);
-  if (answer.status === "consumed") {
-    await backfill(deps, chatSessionId, batch, row).catch((err) => {
-      deps.log?.(`[chat-insert] \u8865\u884C\u5931\u8D25\uFF08\u4ECD\u6309\u5DF2\u63D2\u5165\u5904\u7406\uFF0Cruntime \u786E\u5B9E\u8BFB\u5230\u4E86\uFF09sid=${chatSessionId}: ${String(err)}`);
-    });
-    await deps.store.markPendingMessages?.(chatSessionId, ids2, "delivered", "delivered:node-confirmed-orphan");
-    return { status: "inserted" };
-  }
-  if (answer.status === "not-consumed") {
-    await deps.store.markPendingMessages?.(chatSessionId, [row.id], "cancelled", "client-retained:not-consumed");
-    const rest = ids2.filter((x2) => x2 !== row.id);
-    if (rest.length) await deps.store.markPendingMessages?.(chatSessionId, rest, "queued", `not-consumed:${answer.reason ?? ""}`);
-    return { status: "not-inserted" };
-  }
-  await deps.store.markPendingMessages?.(chatSessionId, ids2, "unconfirmed", `unconfirmed:${answer.reason ?? "unknown"}`);
-  return { status: "uncertain" };
-}
-async function backfill(deps, chatSessionId, batch, row) {
-  if (!deps.items) return;
-  const ref2 = row.deliveryRef;
-  const sorted = [...batch].sort((a, b2) => a.seq - b2.seq);
-  const ledger = new ChatItemLedger({
-    items: deps.items,
-    versionSeed: await deps.items.sessionVersionCursor(chatSessionId).catch(() => 0),
-    sessionId: chatSessionId,
-    turnId: ref2?.turnId ?? `insert-backfill:${row.id}`,
-    ...deps.log ? { log: deps.log } : {}
-  });
-  const text7 = sorted.map((m2) => m2.text).filter(Boolean).join("\n\n");
-  const attachments = sorted.flatMap((m2) => (m2.attachments ?? []).map((a) => ({
-    name: a.name,
-    ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
-    ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
-  })));
-  const clientKeys = sorted.map((m2) => m2.clientKey).filter((k2) => !!k2);
-  ledger.recordUserInput(text7, attachments, clientKeys, ref2?.ord !== void 0 ? { ord: ref2.ord } : void 0);
-  await ledger.drain();
-  if (ledger.failures > 0) throw new Error("chat_items \u5199\u5165\u5931\u8D25");
-}
-var settlingOrphans;
-var init_insert_status = __esm({
-  "../server/src/domains/chat-sessions/insert-status.ts"() {
-    "use strict";
-    init_chat_item_ledger();
-    init_append_now();
-    settlingOrphans = /* @__PURE__ */ new Map();
-  }
-});
-
 // ../server/src/domains/chat-sessions/append-progress.ts
 function wantsAppendProgress(req) {
   const accept = req.headers.accept;
@@ -169950,6 +169897,15 @@ async function probeChatSubmission(args) {
     }
   }
   const base = { persisted: message !== null, attempts: attempt };
+  if (!lastTurn && chatStore?.getPendingMessage) {
+    const insert = await read("message", () => chatStore.getPendingMessage(sid, insertRequestId(sid, csid)));
+    if (insert?.clientKey === csid) {
+      const landed = insert.state === "unconfirmed" || insert.state === "cancelled" && (insert.stateReason ?? "").startsWith("client-gone:");
+      if (insert.state === "delivered") return { status: { state: "delivered", persisted: true, attempts: attempt, retryable: false }, nextAttempt: attempt, message, lastTurn };
+      if (insert.state === "delivering") return { status: { state: "pending", ...base, retryable: false }, nextAttempt: attempt, message, lastTurn };
+      if (landed) return { status: { state: "not_delivered", ...base, retryable: true }, nextAttempt: attempt, message, lastTurn };
+    }
+  }
   let status;
   if (!turns) {
     if (message && messageDelivered(message)) status = { state: "delivered", ...base, retryable: false };
@@ -170067,6 +170023,7 @@ var init_chat_submission = __esm({
     init_src();
     init_chat_turn_gate();
     init_stable_chat_dispatch_ids();
+    init_append_now();
     MAX_SUBMIT_ATTEMPTS = 20;
     LEGACY_LOOKBACK_MESSAGES = 200;
     LEGACY_LATER_TURNS_LIMIT = 50;
@@ -170088,6 +170045,56 @@ var init_chat_submission = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/insert-undelivered.ts
+async function landUndeliveredInsert(input) {
+  const { store, itemStore, chatSessionId: sid, clientKey, text: text7, note } = input;
+  const log3 = input.log ?? ((m2) => console.warn(m2));
+  try {
+    if (!itemStore || !chatItemsDoubleWriteEnabled()) return;
+    const ledger = new ChatItemLedger({
+      items: itemStore,
+      versionSeed: await itemStore.sessionVersionCursor(sid).catch(() => 0),
+      sessionId: sid,
+      turnId: fallbackTurnId(),
+      log: log3
+    });
+    const refs = input.attachments.map((a) => ({
+      name: a.name,
+      ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
+      ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
+    }));
+    ledger.recordRejectedSubmission({
+      user: { text: text7, clientSubmitId: clientKey, ...refs.length ? { attachments: refs } : {} },
+      failure: { reason: note, retryable: true }
+    });
+    await ledger.drain();
+    if (ledger.failures > 0) return;
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    await store.appendMessage({
+      id: (0, import_node_crypto26.randomUUID)(),
+      sessionId: sid,
+      role: "user",
+      content: text7,
+      createdAt: now,
+      messageKey: chatSubmitMessageKey(sid, clientKey),
+      ...refs.length ? { attachments: refs } : {},
+      needsAgentDelivery: true
+    });
+    await store.updateSession(sid, { touchedAt: now }).catch(() => void 0);
+  } catch (err) {
+    log3(`[chat] \u63D2\u8BDD\u6CA1\u4EA4\u5230 agent \u624B\u4E0A\u3001\u843D\u672A\u9001\u8FBE user \u884C\u5931\u8D25\uFF08session=${sid} key=${clientKey}\uFF09: ${String(err)}`);
+  }
+}
+var import_node_crypto26;
+var init_insert_undelivered = __esm({
+  "../server/src/domains/chat-sessions/insert-undelivered.ts"() {
+    "use strict";
+    import_node_crypto26 = require("node:crypto");
+    init_src();
+    init_chat_item_ledger();
+  }
+});
+
 // ../server/src/chat-workorder-files.ts
 function workOrderFileEditTarget(workOrderId, file) {
   if (!isEditableFileName(file.name)) return null;
@@ -170097,7 +170104,7 @@ function workOrderFileEditTarget(workOrderId, file) {
   return { kind: "work-order-file", workOrderId, fileId: file.fileId, name: file.name };
 }
 function workOrderFileId(workOrderId, blobId, name) {
-  return `wof:${(0, import_node_crypto26.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
+  return `wof:${(0, import_node_crypto27.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
 }
 async function linkChatAttachmentsToWorkOrder(input) {
   const warnings = [];
@@ -170148,11 +170155,11 @@ async function linkChatAttachmentsToWorkOrder(input) {
   }
   return { linked, warnings };
 }
-var import_node_crypto26;
+var import_node_crypto27;
 var init_chat_workorder_files = __esm({
   "../server/src/chat-workorder-files.ts"() {
     "use strict";
-    import_node_crypto26 = require("node:crypto");
+    import_node_crypto27 = require("node:crypto");
     init_src();
   }
 });
@@ -170943,11 +170950,11 @@ var init_config_store = __esm({
 function clone2(value2) {
   return structuredClone(value2);
 }
-var import_node_crypto27, import_promises3, import_node_path6, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
+var import_node_crypto28, import_promises3, import_node_path6, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
 var init_run_store = __esm({
   "../server/src/domains/knowledge/run-store.ts"() {
     "use strict";
-    import_node_crypto27 = require("node:crypto");
+    import_node_crypto28 = require("node:crypto");
     import_promises3 = require("node:fs/promises");
     import_node_path6 = require("node:path");
     MemoryKnowledgeRunStore = class {
@@ -171064,7 +171071,7 @@ var init_run_store = __esm({
       }
       async persist(runs) {
         const shape = { version: 1, runs };
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto27.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto28.randomUUID)()}.tmp`;
         try {
           await (0, import_promises3.writeFile)(temp, `${JSON.stringify(shape, null, 2)}
 `, { mode: 384 });
@@ -171713,12 +171720,12 @@ function retryableKnowledgeRun(record9) {
   const latestAnswerAttempt = [...record9.attempts ?? []].reverse().find((attempt) => attempt.kind !== "fast");
   return record9.status === "succeeded" && record9.request.action === "ask" && record9.executionHealth === "degraded" && latestAnswerAttempt?.status === "failed";
 }
-var import_node_crypto28, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
+var import_node_crypto29, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
 var init_service2 = __esm({
   "../server/src/domains/knowledge/service.ts"() {
     "use strict";
     init_file_limits2();
-    import_node_crypto28 = require("node:crypto");
+    import_node_crypto29 = require("node:crypto");
     init_src7();
     init_config_store();
     init_run_store();
@@ -171761,7 +171768,7 @@ var init_service2 = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-        this.id = options.id ?? import_node_crypto28.randomUUID;
+        this.id = options.id ?? import_node_crypto29.randomUUID;
         this.runStore = options.runStore ?? new MemoryKnowledgeRunStore();
         this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
         this.leaseMs = options.leaseMs ?? LEASE_MS;
@@ -182712,7 +182719,7 @@ function stableJson2(value2) {
   return JSON.stringify(stableValue(value2));
 }
 function sha256(value2) {
-  return (0, import_node_crypto29.createHash)("sha256").update(value2).digest("hex");
+  return (0, import_node_crypto30.createHash)("sha256").update(value2).digest("hex");
 }
 function normalizeKnowledgeContent(title, content3) {
   const body2 = content3.normalize("NFC").replace(/\r\n?/gu, "\n").replace(PUBLISH_MARKER, "\n").split("\n").map((line2) => line2.replace(/[\t ]+$/gu, "")).join("\n").replace(/\n{3,}/gu, "\n\n").trim();
@@ -182954,11 +182961,11 @@ function renderUntrustedKnowledgeFragment(input) {
     "</knowledge>"
   ].join("\n");
 }
-var import_node_crypto29, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
+var import_node_crypto30, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
 var init_governance_content = __esm({
   "../server/src/domains/knowledge/governance-content.ts"() {
     "use strict";
-    import_node_crypto29 = require("node:crypto");
+    import_node_crypto30 = require("node:crypto");
     init_mdast_util_from_markdown();
     init_mdast_util_gfm();
     init_micromark_extension_gfm();
@@ -193125,11 +193132,11 @@ function approvedSnapshotBody(title, content3) {
 function uniqueStrings(values) {
   return [...new Set(values)].sort();
 }
-var import_node_crypto30, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
+var import_node_crypto31, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
 var init_governance_service = __esm({
   "../server/src/domains/knowledge/governance-service.ts"() {
     "use strict";
-    import_node_crypto30 = require("node:crypto");
+    import_node_crypto31 = require("node:crypto");
     init_governance_content();
     init_knowledge_policy();
     init_network_maintenance();
@@ -193151,7 +193158,7 @@ var init_governance_service = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => /* @__PURE__ */ new Date());
-        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto30.randomUUID)()}`);
+        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto31.randomUUID)()}`);
         this.versionViewBaseUrl = (options.versionViewBaseUrl ?? "/api/knowledge/items").replace(/\/$/u, "");
         this.projectProvisionRetryDelayMs = Math.max(0, options.projectProvisionRetryDelayMs ?? 6e4);
         this.projectProvisionMaxRetryDelayMs = Math.max(this.projectProvisionRetryDelayMs, options.projectProvisionMaxRetryDelayMs ?? 36e5);
@@ -198842,7 +198849,7 @@ function trustedKnowledgeInvocationId(body2, turn) {
   if (body2.action !== "ask") return void 0;
   const scope2 = turn?.artifactId ?? turn?.dispatchId;
   if (!scope2) return void 0;
-  const fingerprint2 = (0, import_node_crypto31.createHash)("sha256").update(JSON.stringify({
+  const fingerprint2 = (0, import_node_crypto32.createHash)("sha256").update(JSON.stringify({
     action: body2.action,
     message: body2.message?.trim() ?? "",
     queryMode: body2.queryMode === "deep" ? "deep" : "fast",
@@ -198997,11 +199004,11 @@ function knowledgeRoutes(service, options = {}) {
     });
   };
 }
-var import_node_crypto31, KNOWLEDGE_WORKORDER_ACTIONS;
+var import_node_crypto32, KNOWLEDGE_WORKORDER_ACTIONS;
 var init_routes = __esm({
   "../server/src/domains/knowledge/routes.ts"() {
     "use strict";
-    import_node_crypto31 = require("node:crypto");
+    import_node_crypto32 = require("node:crypto");
     init_src7();
     init_router();
     init_governance_service();
@@ -200629,7 +200636,7 @@ async function resolveChatAttachmentDiscoverySource(input) {
     sourceType: input.sourceType,
     sourceId: session.id,
     sourceVersionId: attachment.blobRef,
-    sourceFingerprint: (0, import_node_crypto32.createHash)("sha256").update(bytes2).digest("hex"),
+    sourceFingerprint: (0, import_node_crypto33.createHash)("sha256").update(bytes2).digest("hex"),
     sourceContent: new TextDecoder().decode(bytes2),
     sourceDisplayName: attachment.name,
     ...session.projectId ? { projectId: session.projectId } : {},
@@ -200640,11 +200647,11 @@ async function resolveChatAttachmentDiscoverySource(input) {
     }
   };
 }
-var import_node_crypto32, TEXT_CONTENT_TYPES;
+var import_node_crypto33, TEXT_CONTENT_TYPES;
 var init_chat_attachment_discovery = __esm({
   "../server/src/domains/knowledge/chat-attachment-discovery.ts"() {
     "use strict";
-    import_node_crypto32 = require("node:crypto");
+    import_node_crypto33 = require("node:crypto");
     TEXT_CONTENT_TYPES = /* @__PURE__ */ new Set([
       "application/json",
       "application/xml",
@@ -200820,8 +200827,8 @@ function aad(snapshot) {
 }
 function sealKnowledgeSnapshot(snapshot, key2) {
   if (snapshot.content.startsWith(PREFIX)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto33.randomBytes)(12);
-  const cipher = (0, import_node_crypto33.createCipheriv)("aes-256-gcm", keyBytes(key2), iv);
+  const iv = (0, import_node_crypto34.randomBytes)(12);
+  const cipher = (0, import_node_crypto34.createCipheriv)("aes-256-gcm", keyBytes(key2), iv);
   cipher.setAAD(aad(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return {
@@ -200834,7 +200841,7 @@ function openKnowledgeSnapshot(snapshot, key2) {
   const packed = snapshot.content.slice(PREFIX.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto33.createDecipheriv)("aes-256-gcm", keyBytes(key2), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto34.createDecipheriv)("aes-256-gcm", keyBytes(key2), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   const content3 = Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8");
@@ -200843,11 +200850,11 @@ function openKnowledgeSnapshot(snapshot, key2) {
 function isSealedKnowledgeSnapshotContent(content3) {
   return content3.startsWith(PREFIX);
 }
-var import_node_crypto33, PREFIX;
+var import_node_crypto34, PREFIX;
 var init_snapshot_crypto = __esm({
   "../server/src/domains/knowledge/snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto33 = require("node:crypto");
+    import_node_crypto34 = require("node:crypto");
     PREFIX = "oasis-knowledge:v1:";
   }
 });
@@ -200930,11 +200937,11 @@ function uniquenessKeys(kind, record9) {
       return [];
   }
 }
-var import_node_crypto34, import_promises4, import_node_path7, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
+var import_node_crypto35, import_promises4, import_node_path7, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
 var init_governance_store = __esm({
   "../server/src/domains/knowledge/governance-store.ts"() {
     "use strict";
-    import_node_crypto34 = require("node:crypto");
+    import_node_crypto35 = require("node:crypto");
     import_promises4 = require("node:fs/promises");
     import_node_path7 = require("node:path");
     init_snapshot_crypto();
@@ -201152,7 +201159,7 @@ var init_governance_store = __esm({
         return result;
       }
       async persist(shape) {
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto34.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto35.randomUUID)()}.tmp`;
         try {
           await (0, import_promises4.writeFile)(temp, `${JSON.stringify(this.sealSnapshots(shape), null, 2)}
 `, { mode: 384 });
@@ -201188,7 +201195,7 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     if (error2.code !== "ENOENT") throw error2;
   }
   await (0, import_promises5.mkdir)((0, import_node_path8.dirname)(file), { recursive: true });
-  const generated = `oasis-${(0, import_node_crypto35.randomUUID)()}`;
+  const generated = `oasis-${(0, import_node_crypto36.randomUUID)()}`;
   try {
     await (0, import_promises5.writeFile)(file, `${generated}
 `, { encoding: "utf8", mode: 384, flag: "wx" });
@@ -201198,11 +201205,11 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     return readDeploymentId(file);
   }
 }
-var import_node_crypto35, import_promises5, import_node_path8, VALID_DEPLOYMENT_ID;
+var import_node_crypto36, import_promises5, import_node_path8, VALID_DEPLOYMENT_ID;
 var init_deployment_id = __esm({
   "../server/src/domains/knowledge/deployment-id.ts"() {
     "use strict";
-    import_node_crypto35 = require("node:crypto");
+    import_node_crypto36 = require("node:crypto");
     import_promises5 = require("node:fs/promises");
     import_node_path8 = require("node:path");
     VALID_DEPLOYMENT_ID = /^oasis-[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
@@ -202083,7 +202090,7 @@ function roundFailureText(kind, error2) {
   return kind === "timeout" ? `\u8FD9\u4E00\u6B21\u6267\u884C\u8DD1\u6EE1\u4E86\u5355\u6B21\u8FD0\u884C\u7684\u65F6\u95F4\u4E0A\u9650\uFF08${wallClockText()}\uFF09\uFF0C\u88AB\u7CFB\u7EDF\u505C\u4E0B\u4E86\uFF08${error2}\uFF09` : `\u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u5B8C\uFF1A${error2}`;
 }
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto36.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto37.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -202138,11 +202145,11 @@ async function seedChildRoundRows(chatStore, childSessionId, round, prompt2, now
     createdAt: now
   });
 }
-var import_node_crypto36, DelegationError, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, roundTurnKey, roundTurnId, DelegationService;
+var import_node_crypto37, DelegationError, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, roundTurnKey, roundTurnId, DelegationService;
 var init_service3 = __esm({
   "../server/src/domains/delegations/service.ts"() {
     "use strict";
-    import_node_crypto36 = require("node:crypto");
+    import_node_crypto37 = require("node:crypto");
     init_src();
     init_chat_exit();
     init_parent_conversation();
@@ -203450,7 +203457,7 @@ var init_continue_outcome = __esm({
 function trustedDelegationInvocationId(body2, turn) {
   const scope2 = turn?.artifactId ?? turn?.dispatchId;
   if (!scope2) return void 0;
-  const fingerprint2 = (0, import_node_crypto37.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
+  const fingerprint2 = (0, import_node_crypto38.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
   return `dispatch:${scope2}:delegation:${fingerprint2}`;
 }
 function callerOf(req, invocationId) {
@@ -203545,11 +203552,11 @@ function delegationRoutes(service) {
     });
   };
 }
-var import_node_crypto37;
+var import_node_crypto38;
 var init_routes2 = __esm({
   "../server/src/domains/delegations/routes.ts"() {
     "use strict";
-    import_node_crypto37 = require("node:crypto");
+    import_node_crypto38 = require("node:crypto");
     init_router();
     init_continue_outcome();
     init_service3();
@@ -204460,6 +204467,60 @@ var init_child_live_turn = __esm({
   }
 });
 
+// ../server/src/domains/actors/registry-audit-sink.ts
+function createRegistryAuditSink(file) {
+  const listeners = /* @__PURE__ */ new Set();
+  const notify = (msg) => {
+    for (const listener of listeners) listener(msg);
+  };
+  return {
+    /** 登记审计：落盘 + 推 registry 通知（前端据此重拉登记类投影）。 */
+    registryAudit: (record9) => {
+      fs20.appendFile(file, JSON.stringify(record9) + "\n", () => {
+      });
+      notify({ kind: record9.kind, actor: record9.actor, target: record9.target, timestamp: record9.timestamp });
+    },
+    /**
+     * 凭据审计（ADR 凭据保险库 §4.7）：与登记审计同落一份旁账，按 kind 前缀 `credential_` 区分。
+     *
+     * **只落盘、不推 registry 通知**（D-10 推送面）。registry 通知是实例级的，`/api/events` 原样转发给
+     * 任何已认证的连接、不分组织；凭据事件推进去 = 别家组织开一条 SSE 就能实时看到「谁在读/改哪个变量」。
+     * 仓内没有任何消费方订它（2.0 前端只订无内容的 runtime-status，而后者本来就不被凭据事件唤醒）。
+     * 要看凭据审计走 `GET /api/variables/reveal-audit`（按请求方组织过滤）。将来若需要实时推送，
+     * 得先让通知带组织、`/api/events` 按组织过滤（recvvzbhOGiS7l 的完整修复），再放回来。
+     */
+    credentialAudit: (record9) => {
+      fs20.appendFile(file, JSON.stringify(record9) + "\n", () => {
+      });
+    },
+    /** runtime 状态变了：只发无内容的失效提示（ADR 0576）。 */
+    notifyRuntimeStatus: () => {
+      notify({ kind: "runtime_status_changed", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+    },
+    /** 这些人的铃铛有新通知了：各发一条无内容的失效提示，前端据此重拉台账、弹页内提示。 */
+    notifyNotificationsChanged: (recipients) => {
+      const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+      for (const target of new Set(recipients)) notify({ kind: NOTIFICATIONS_CHANGED, target, timestamp });
+    },
+    notifications: {
+      subscribe(listener) {
+        listeners.add(listener);
+        return () => {
+          listeners.delete(listener);
+        };
+      }
+    }
+  };
+}
+var fs20, NOTIFICATIONS_CHANGED;
+var init_registry_audit_sink = __esm({
+  "../server/src/domains/actors/registry-audit-sink.ts"() {
+    "use strict";
+    fs20 = __toESM(require("node:fs"), 1);
+    NOTIFICATIONS_CHANGED = "notifications_changed";
+  }
+});
+
 // ../connectors/src/_base/wrapper-assets.ts
 function isUsableWrapper(scriptPath) {
   if (!(0, import_node_fs7.existsSync)(scriptPath)) return false;
@@ -205588,7 +205649,7 @@ function createAppJwt(appId, privateKeyPem, nowMs) {
     exp: nowSec + JWT_TTL_SEC,
     iss: appId
   }));
-  const signer = (0, import_node_crypto38.createSign)("RSA-SHA256");
+  const signer = (0, import_node_crypto39.createSign)("RSA-SHA256");
   signer.update(`${header}.${payload2}`);
   signer.end();
   try {
@@ -205751,11 +205812,11 @@ async function exchangeManifestCode(code2, deps = {}) {
     ...typeof body2["client_secret"] === "string" ? { clientSecret: body2["client_secret"] } : {}
   };
 }
-var import_node_crypto38, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
+var import_node_crypto39, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
 var init_app_auth = __esm({
   "../connectors/src/github/app-auth.ts"() {
     "use strict";
-    import_node_crypto38 = require("node:crypto");
+    import_node_crypto39 = require("node:crypto");
     GITHUB_API = "https://api.github.com";
     JWT_TTL_SEC = 9 * 60;
     JWT_IAT_SKEW_SEC = 60;
@@ -206680,11 +206741,11 @@ function extractOutlineKnowledgeCandidateDrafts(events) {
   }
   return [...drafts.values()];
 }
-var import_node_crypto39, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
+var import_node_crypto40, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
 var init_knowledge_api = __esm({
   "../connectors/src/outline/knowledge-api.ts"() {
     "use strict";
-    import_node_crypto39 = require("node:crypto");
+    import_node_crypto40 = require("node:crypto");
     REQUEST_TIMEOUT_MS = 2e4;
     WRITE_ENDPOINTS = /* @__PURE__ */ new Set(["collections.create", "documents.create", "documents.update", "documents.publish"]);
     DEFAULT_WRITE_INTERVAL_MS = process.env["NODE_ENV"] === "test" ? 0 : 250;
@@ -206711,7 +206772,7 @@ var init_knowledge_api = __esm({
         this.baseUrl = canonicalUrl(baseUrl);
         this.lastResponseBaseUrl = this.baseUrl;
         this.token = token;
-        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto39.createHash)("sha256").update(token).digest("hex")}`;
+        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto40.createHash)("sha256").update(token).digest("hex")}`;
         this.writeIntervalMs = Math.max(0, options.writeIntervalMs ?? DEFAULT_WRITE_INTERVAL_MS);
         this.maxRateLimitRetries = Math.max(0, options.maxRateLimitRetries ?? DEFAULT_RATE_LIMIT_RETRIES);
         this.maxRateLimitDelayMs = Math.max(0, options.maxRateLimitDelayMs ?? DEFAULT_MAX_RATE_LIMIT_DELAY_MS);
@@ -208119,15 +208180,15 @@ function classifyOutlineGovernedMigrationDocument(document4) {
   if (path46.startsWith("wiki/sources/")) return { mapping: "formal", metadata: legacyMetadata(document4, "source_note"), reason: "legacy_source_note" };
   return { mapping: "excluded", reason: "legacy_unmapped_path" };
 }
-var import_node_crypto40, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
+var import_node_crypto41, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
 var init_governed_knowledge = __esm({
   "../connectors/src/outline/governed-knowledge.ts"() {
     "use strict";
-    import_node_crypto40 = require("node:crypto");
+    import_node_crypto41 = require("node:crypto");
     init_knowledge_api();
     value = (input) => input && typeof input === "object" && !Array.isArray(input) ? input : null;
     text4 = (input) => typeof input === "string" && input.trim() ? input.trim() : null;
-    hash = (input) => (0, import_node_crypto40.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
+    hash = (input) => (0, import_node_crypto41.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
     REVISION_VISIBILITY_RETRY_DELAYS_MS = [0, 100, 250, 500, 1e3, 2e3];
     governedProvisionRuns = /* @__PURE__ */ new Map();
     PUBLISH_MARKER2 = /\n?<!--\s*oasis-publish:[\s\S]*?-->\n?/giu;
@@ -208385,7 +208446,9 @@ function buildAppManifest(args) {
     default_permissions: { ...GITHUB_APP_DEFAULT_PERMISSIONS },
     // 暂不订阅 webhook：本方案只需要主动调 API，开着反而多一份要维护的密钥与端点。
     hook_attributes: { url: `${base}/api/connectors/github/app/webhook`, active: false },
-    callback_urls: [`${base}/api/connectors/github/app/oauth-callback`]
+    callback_urls: [`${base}/api/connectors/github/app/oauth-callback`],
+    setup_url: `${base}${args.setupPath}`,
+    setup_on_update: true
   };
 }
 function manifestFormAction(owner, state) {
@@ -208454,7 +208517,7 @@ function checkAppOwnership(conv, want) {
   }
   return null;
 }
-var GITHUB_APP_DEFAULT_PERMISSIONS, GITHUB_APP_PERMISSION_LABELS, PENDING_TTL_MS, PendingAppCreations, REQUIRED_WRITE_PERMISSIONS, PERMISSION_RANK, FORBIDDEN_IMPORT_PERMISSION_KEYS;
+var GITHUB_APP_DEFAULT_PERMISSIONS, GITHUB_APP_PERMISSION_LABELS, PENDING_TTL_MS, REQUIRED_WRITE_PERMISSIONS, PERMISSION_RANK, FORBIDDEN_IMPORT_PERMISSION_KEYS;
 var init_app_manifest = __esm({
   "../connectors/src/github/app-manifest.ts"() {
     "use strict";
@@ -208487,31 +208550,6 @@ var init_app_manifest = __esm({
       { key: "issues", label: "Issue\uFF08\u8BFB\u5199\uFF09", desc: "\u521B\u5EFA\u4E0E\u8BC4\u8BBA Issue" }
     ];
     PENDING_TTL_MS = 15 * 60 * 1e3;
-    PendingAppCreations = class {
-      map = /* @__PURE__ */ new Map();
-      put(state, v2) {
-        this.sweep(v2.createdAtMs);
-        this.map.set(state, v2);
-      }
-      get(state, nowMs) {
-        const v2 = this.map.get(state);
-        if (!v2) return void 0;
-        if (nowMs - v2.createdAtMs > PENDING_TTL_MS) {
-          this.map.delete(state);
-          return void 0;
-        }
-        return v2;
-      }
-      /** 过期条目清理——每次写入顺带做，不另起定时器。 */
-      sweep(nowMs) {
-        for (const [k2, v2] of this.map) {
-          if (nowMs - v2.createdAtMs > PENDING_TTL_MS) this.map.delete(k2);
-        }
-      }
-      get size() {
-        return this.map.size;
-      }
-    };
     REQUIRED_WRITE_PERMISSIONS = ["contents", "pull_requests"];
     PERMISSION_RANK = { read: 1, write: 2, admin: 3 };
     FORBIDDEN_IMPORT_PERMISSION_KEYS = [
@@ -208995,6 +209033,16 @@ var init_src8 = __esm({
 function isBundleFrozen(err) {
   return typeof err === "object" && err !== null && err.code === "TENANT_BUNDLE_FROZEN";
 }
+async function lookupGithubAppPending(store, state) {
+  const missing = "\u627E\u4E0D\u5230\u8FD9\u6B21\u8FDE\u63A5\u7684\u8BB0\u5F55\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D";
+  if (!store || !state) return { message: missing };
+  const hit = await store.get(state, Date.now());
+  if (hit.status === "expired") {
+    return { message: "\u8FD9\u6B21\u8FDE\u63A5\u4ECE\u5F00\u59CB\u5230\u73B0\u5728\u5DF2\u8D85\u8FC7 15 \u5206\u949F\uFF0C\u5DF2\u7ECF\u5931\u6548\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D" };
+  }
+  if (hit.status === "missing") return { message: missing };
+  return { pending: hit.value.value, message: "" };
+}
 function resolveCallbackBase(supplied, requestHost) {
   if (!supplied || !supplied.trim()) {
     throw new Error("\u7F3A\u5C11 callbackBase\uFF1A\u524D\u7AEF\u9700\u62A5\u4E0A window.location.origin + API_BASE");
@@ -210769,7 +210817,7 @@ async function startOasisServer(opts) {
     }
     return void 0;
   }
-  const appendNowThroughQueue2 = async (sid, text7, clientKey, attachments, perCompanyStore, retainLocallyOnFailure = false, onAwaitingConsumption, resend = false, itemStore) => {
+  const appendNowThroughQueue2 = async (sid, text7, clientKey, attachments, perCompanyStore, retainLocallyOnFailure = false, onAwaitingConsumption, resend = false, itemStore, clientAttached) => {
     if (perCompanyStore === null) {
       throw new Error(
         `appendNowThroughQueue: per-company chat store unresolved (sid=${sid})`
@@ -210802,52 +210850,22 @@ async function startOasisServer(opts) {
           }
         }
         throw new Error(`blob ${blobRef} \u4E24\u4E2A\u67DC\u91CC\u90FD\u6CA1\u6709`);
-      }
+      },
+      ...clientAttached ? { clientAttached } : {}
     }, clientKey, attachments, retainLocallyOnFailure, resend ? { resend: true } : void 0);
-    if (r.insertStatus === "uncertain" && clientKey) {
+    if ((r.insertStatus === "uncertain" || r.orphanedReturn) && clientKey) {
       const shown = r.batch.map((m2) => m2.text).filter(Boolean).join("\n\n") || text7;
-      await landUndeliveredInsert(sid, clientKey, shown, attachments ?? [], store, itemStore);
-    }
-    return { accepted: r.accepted, ...r.reason ? { reason: r.reason } : {}, queued: r.queued, insertStatus: r.insertStatus };
-  };
-  const landUndeliveredInsert = async (sid, clientKey, text7, attachments, store, itemStore) => {
-    try {
-      if (!itemStore || !chatItemsDoubleWriteEnabled()) return;
-      const ledger = new ChatItemLedger({
-        items: itemStore,
-        versionSeed: await itemStore.sessionVersionCursor(sid).catch(() => 0),
-        sessionId: sid,
-        turnId: fallbackTurnId(),
-        log: (m2) => console.warn(m2)
-      });
-      const refs = attachments.map((a) => ({
-        name: a.name,
-        ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
-        ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
-      }));
-      ledger.recordRejectedSubmission({
-        user: { text: text7, clientSubmitId: clientKey, ...refs.length ? { attachments: refs } : {} },
-        // 文案取自 turn-copy 那一句的前半（ADR 0615 决策 10）：行为上「不确定」与「没送到」完全一样
-        // （都不自动发、都等人点），所以只差这一句话。
-        failure: { reason: INSERT_UNCERTAIN_NOTE, retryable: true }
-      });
-      await ledger.drain();
-      if (ledger.failures > 0) return;
-      const now = (/* @__PURE__ */ new Date()).toISOString();
-      await store.appendMessage({
-        id: (0, import_node_crypto41.randomUUID)(),
-        sessionId: sid,
-        role: "user",
-        content: text7,
-        createdAt: now,
-        messageKey: chatSubmitMessageKey(sid, clientKey),
-        ...refs.length ? { attachments: refs } : {},
-        needsAgentDelivery: true
+      await landUndeliveredInsert({
+        store,
+        itemStore,
+        chatSessionId: sid,
+        clientKey,
+        text: shown,
+        attachments: attachments ?? [],
+        note: r.orphanedReturn ? INSERT_RETURNED_NOTE : INSERT_UNCERTAIN_NOTE
       });
-      await store.updateSession(sid, { touchedAt: now }).catch(() => void 0);
-    } catch (err) {
-      console.warn(`[chat] \u63D2\u8BDD\u7ED3\u679C\u4E0D\u786E\u5B9A\u3001\u843D\u672A\u9001\u8FBE user \u884C\u5931\u8D25\uFF08session=${sid} key=${clientKey}\uFF09: ${String(err)}`);
     }
+    return { accepted: r.accepted, ...r.reason ? { reason: r.reason } : {}, queued: r.queued, insertStatus: r.insertStatus };
   };
   const GRAPH_EDIT_SUMMARY_MAX = 60;
   const truncateSummary = (s2) => {
@@ -211109,10 +211127,10 @@ async function startOasisServer(opts) {
               ...fp(p2)
             }))
           ] : [];
-          const { randomUUID: randomUUID47 } = await import("node:crypto");
+          const { randomUUID: randomUUID48 } = await import("node:crypto");
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID47(),
+              id: randomUUID48(),
               chatSessionId: input.chatSessionId,
               text: input.text,
               createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -211145,11 +211163,11 @@ async function startOasisServer(opts) {
               ...f2?.mtime ? { srcMtime: f2.mtime } : {}
             };
           });
-          const { randomUUID: randomUUID47 } = await import("node:crypto");
+          const { randomUUID: randomUUID48 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID47(),
+              id: randomUUID48(),
               chatSessionId: input.chatSessionId,
               text: "",
               createdAt: nowIso,
@@ -211559,7 +211577,7 @@ async function startOasisServer(opts) {
           return;
         }
         if (url.pathname.startsWith("/api/files/")) {
-          const company = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname) : void 0;
+          const company = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname, req.method) : void 0;
           if (company?.kind === "ambiguous") {
             writeApiError(res, companyAmbiguousError(actor, company.companies));
             return;
@@ -211596,7 +211614,7 @@ async function startOasisServer(opts) {
           return;
         }
         const sessionKey = (req.headers.authorization ?? "").startsWith("Bearer ") ? req.headers.authorization.slice("Bearer ".length) : actor;
-        const companyCtx = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname) : void 0;
+        const companyCtx = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname, req.method) : void 0;
         const currentCompanyId = companyCtx?.kind === "ok" ? companyCtx.companyId : void 0;
         const fileLimits = await opts.fileLimits?.get(currentCompanyId) ?? { ...DEFAULT_FILE_LIMITS };
         const requestMaxBytes = fileUploadRequestMaxBytes(fileLimits);
@@ -212451,7 +212469,7 @@ async function startOasisServer(opts) {
             entry = {
               // 旧 CLI 未带 waiterId 时给它塞一个服务端本地生成的——它绝不可能出现在 leave 上，
               // 也就绝不会误命中 leftWaiterIds、绝不会被别人的 leave 摘掉。行为与旧 CLI 相同。
-              waiterId: clientWaiterId ?? `server:${(0, import_node_crypto41.randomUUID)()}`,
+              waiterId: clientWaiterId ?? `server:${(0, import_node_crypto42.randomUUID)()}`,
               onResolve,
               expiresAt: expiresAt2,
               cleanup: () => clearTimeout(expiryTimer),
@@ -212532,7 +212550,7 @@ async function startOasisServer(opts) {
               const openRoom = async () => {
                 let chatSessionId2;
                 if (chatStore) {
-                  const { randomUUID: randomUUID47 } = await import("node:crypto");
+                  const { randomUUID: randomUUID48 } = await import("node:crypto");
                   const known = discussSessions.get(itemKey);
                   const knownSession = known ? await chatStore.getSession(known) : null;
                   if (knownSession && knownSession.workspace === ctx.workspace && knownSession.humanActorId === ctx.ownerId && (!body2.escalationId || knownSession.escalationId === body2.escalationId)) chatSessionId2 = known;
@@ -212541,7 +212559,7 @@ async function startOasisServer(opts) {
                     chatSessionId2 = existing[0]?.id;
                   }
                   if (!chatSessionId2) {
-                    chatSessionId2 = randomUUID47();
+                    chatSessionId2 = randomUUID48();
                     const now = (/* @__PURE__ */ new Date()).toISOString();
                     const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                     const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -212796,6 +212814,19 @@ async function startOasisServer(opts) {
               changed();
               return;
             }
+            if (topics?.size === 1 && topics.has("notifications")) {
+              const changed = () => res.write('data: {"channel":"notifications"}\n\n');
+              const unsubscribe = opts.notifications?.subscribe((n) => {
+                if (n.kind === NOTIFICATIONS_CHANGED && n.target === actor) changed();
+              });
+              const heartbeat = setInterval(() => res.write(":heartbeat\n\n"), 15e3);
+              req.on("close", () => {
+                clearInterval(heartbeat);
+                unsubscribe?.();
+              });
+              changed();
+              return;
+            }
             const wantRegistry = topics === null || topics.has("registry");
             const wsAllowed = (ws) => topics === null || ws !== void 0 && topics.has(ws);
             let closed = false;
@@ -212804,9 +212835,10 @@ async function startOasisServer(opts) {
 
 `);
             };
-            const unsubNotify = wantRegistry ? opts.notifications?.subscribe(
-              (n) => send({ channel: "registry", kind: n.kind, actor: n.actor, target: n.target, timestamp: n.timestamp })
-            ) : void 0;
+            const unsubNotify = wantRegistry ? opts.notifications?.subscribe((n) => {
+              if (n.kind === NOTIFICATIONS_CHANGED) return;
+              send({ channel: "registry", kind: n.kind, actor: n.actor, target: n.target, timestamp: n.timestamp });
+            }) : void 0;
             if (engineEvents) {
               let lastSeq = 0;
               const unsub = engineEvents((records) => {
@@ -213245,31 +213277,11 @@ async function startOasisServer(opts) {
               timeoutMs: APPEND_TURN_START_WAIT_MS
             });
             const appendItemStore = opts.resolveChatItems ? await opts.resolveChatItems(currentCompanyId).catch(() => void 0) : opts.chatItems;
-            await respondAppend(res, wantsAppendProgress(req), (onAwaitingConsumption) => appendNowThroughQueue2(sid, text7, clientKey, insertAttachments, perCompanyStore, retainLocallyOnFailure, onAwaitingConsumption, resend, appendItemStore));
-            return;
-          }
-          if (req.method === "GET" && /^\/api\/chat-sessions\/[^/]+\/insert-status$/.test(url.pathname)) {
-            const sid = decodeURIComponent(url.pathname.split("/")[3] ?? "");
-            const perCompanyStore = await chatStoreNowOrNull();
-            const cs = await perCompanyStore?.getSession(sid).catch(() => null) ?? null;
-            if (!perCompanyStore || !cs || cs.humanActorId !== actor) {
-              res.writeHead(404, { "content-type": "application/json" }).end(JSON.stringify({ error: "CHAT_SESSION_NOT_FOUND" }));
-              return;
-            }
-            const clientKey = url.searchParams.get("clientKey") ?? "";
-            if (!clientKey) {
-              res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: "CLIENT_KEY_REQUIRED" }));
-              return;
-            }
-            const items = opts.resolveChatItems ? await opts.resolveChatItems(currentCompanyId).catch(() => void 0) : opts.chatItems;
-            const result = await resolveInsertStatus({
-              store: perCompanyStore,
-              isTurnRunning: (id) => liveChat.isRunning(id),
-              ...opts.confirmInputReceipt ? { confirm: opts.confirmInputReceipt } : {},
-              ...items ? { items } : {},
-              log: (m2) => console.warn(m2)
-            }, sid, clientKey);
-            res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ clientKey, ...result }));
+            let clientGone = false;
+            res.once("close", () => {
+              if (!res.writableEnded) clientGone = true;
+            });
+            await respondAppend(res, wantsAppendProgress(req), (onAwaitingConsumption) => appendNowThroughQueue2(sid, text7, clientKey, insertAttachments, perCompanyStore, retainLocallyOnFailure, onAwaitingConsumption, resend, appendItemStore, () => !clientGone));
             return;
           }
           if (url.pathname === "/api/chat" && req.method === "POST") {
@@ -213653,7 +213665,7 @@ ${composed}`;
                         if (rejectedLedger.failures === 0 && retriedRow) {
                           turnPersisted = true;
                         } else if (rejectedLedger.failures === 0) {
-                          const { randomUUID: randomUUID48 } = await import("node:crypto");
+                          const { randomUUID: randomUUID49 } = await import("node:crypto");
                           const now = (/* @__PURE__ */ new Date()).toISOString();
                           const rejectedAttachments = effectiveAttachments.map((a) => ({
                             name: a.name,
@@ -213661,7 +213673,7 @@ ${composed}`;
                             ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                           }));
                           await chatStore.appendMessage({
-                            id: randomUUID48(),
+                            id: randomUUID49(),
                             sessionId: persistTarget.id,
                             role: "user",
                             content: persistedUserMessage,
@@ -213746,14 +213758,14 @@ ${composed}`;
                       runtimeSessionId: session.nativeSessionId ?? session.id
                     }).catch(() => void 0);
                   }
-                  const { randomUUID: randomUUID48 } = await import("node:crypto");
+                  const { randomUUID: randomUUID49 } = await import("node:crypto");
                   const persistAttachments = effectiveAttachments.map((a) => ({
                     name: a.name,
                     ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                     ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                   }));
                   if (!retriedRow) await chatStore.appendMessage({
-                    id: randomUUID48(),
+                    id: randomUUID49(),
                     sessionId: persistTarget.id,
                     role: "user",
                     content: persistedUserMessage,
@@ -214202,8 +214214,8 @@ ${composed}`;
                 }
               }
               const { spawn: spawn11 } = await import("node:child_process");
-              const { randomUUID: randomUUID47 } = await import("node:crypto");
-              const sessionId = body2.sessionId ?? randomUUID47();
+              const { randomUUID: randomUUID48 } = await import("node:crypto");
+              const sessionId = body2.sessionId ?? randomUUID48();
               const args = [
                 "-p",
                 body2.message,
@@ -214292,33 +214304,32 @@ ${composed}`;
               }
               const svc = await connectorActorsService();
               if (!svc) throw new Error("actors service unavailable");
-              const cacheKey = `${currentCompanyId ?? ""}::${actorId}::${connectorId}`;
+              const snapshots2 = opts.connectorAuthPending?.snapshots;
+              if (!snapshots2) throw new Error("connector auth snapshot store unavailable");
+              const snapKey = { companyId: currentCompanyId ?? "", actorId, connectorId };
               const now = Date.now();
-              for (const [k2, v2] of connectorAuthSnapshots) {
-                if (now - v2.at > CONNECTOR_AUTH_SNAPSHOT_TTL_MS) connectorAuthSnapshots.delete(k2);
-              }
               if (op === "begin") {
                 const rows = await svc.snapshotActorConnectorVars(actorId, connectorId);
-                connectorAuthSnapshots.set(cacheKey, { rows, at: now });
+                await snapshots2.put(snapKey, rows, now, now + CONNECTOR_AUTH_SNAPSHOT_TTL_MS);
                 res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, snapshot: rows.length }));
                 return;
               }
               if (op === "commit") {
-                connectorAuthSnapshots.delete(cacheKey);
+                await snapshots2.delete(snapKey);
                 res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true }));
                 return;
               }
-              const snap = connectorAuthSnapshots.get(cacheKey);
-              if (!snap) {
+              const snapRows = await snapshots2.get(snapKey, now);
+              if (!snapRows) {
                 res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: false, reason: "no_snapshot" }));
                 return;
               }
               const out = await svc.restoreActorConnectorVars(
                 actorId,
                 connectorId,
-                snap.rows
+                snapRows
               );
-              connectorAuthSnapshots.delete(cacheKey);
+              await snapshots2.delete(snapKey);
               res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, ...out }));
             } catch (e) {
               res.writeHead(500).end(JSON.stringify({ error: String(e) }));
@@ -214499,24 +214510,35 @@ ${composed}`;
                 res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
                 return;
               }
-              const { randomUUID: randomUUID47 } = await import("node:crypto");
-              const state = randomUUID47();
+              const { randomUUID: randomUUID48 } = await import("node:crypto");
+              const state = randomUUID48();
               const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
               const manifest = buildAppManifest({
                 employeeSlug: nameSlug,
                 namePrefix: "oasis",
                 baseUrl: base,
-                redirectPath: "/api/connectors/github/app/manifest-callback"
+                redirectPath: "/api/connectors/github/app/manifest-callback",
+                setupPath: "/api/connectors/github/app/setup-callback"
               });
-              githubAppPending.put(state, {
+              const pendingStore = opts.connectorAuthPending?.githubApp;
+              if (!pendingStore) throw new Error("github app pending store unavailable");
+              const createdAtMs = Date.now();
+              const entry = {
                 ...actorId ? { actorId } : {},
                 // 回调那一步没有鉴权头，解析不出公司——只能在这里记下来带过去。
                 ...currentCompanyId ? { companyId: currentCompanyId } : {},
                 employeeSlug: nameSlug,
-                createdAtMs: Date.now(),
+                createdAtMs,
                 // 存下这次选的归属——回调时要拿它跟 GitHub 返回的 owner 比对。
                 wantOwnerKind: kind,
                 ...kind === "org" && owner?.login ? { wantOwnerLogin: owner.login } : {}
+              };
+              await pendingStore.put({
+                state,
+                ...currentCompanyId ? { companyId: currentCompanyId } : {},
+                value: { ...entry },
+                createdAtMs,
+                expiresAtMs: createdAtMs + PENDING_TTL_MS
               });
               res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
                 state,
@@ -214831,16 +214853,22 @@ ${composed}`;
           if (url.pathname === "/api/connectors/github/app/manifest-callback" && req.method === "GET") {
             const code2 = url.searchParams.get("code") ?? "";
             const state = url.searchParams.get("state") ?? "";
-            const pending = githubAppPending.get(state, Date.now());
-            const fail = (msg) => {
-              if (pending) {
-                pending.done = true;
-                pending.error = msg;
+            const pendingStore = opts.connectorAuthPending?.githubApp;
+            const found2 = await lookupGithubAppPending(pendingStore, state);
+            const pending = found2.pending;
+            const fail = async (msg) => {
+              if (pending && pendingStore) {
+                await pendingStore.patch(state, { done: true, error: msg }).catch(() => {
+                });
               }
               res.writeHead(200, { "content-type": "text/html; charset=utf-8" }).end(callbackHtml(false, msg));
             };
-            if (!code2 || !pending) {
-              fail("state \u5DF2\u8FC7\u671F\u6216\u65E0\u6548\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u8BD5");
+            if (!pending) {
+              await fail(found2.message);
+              return;
+            }
+            if (!code2) {
+              await fail("GitHub \u6CA1\u6709\u5E26\u56DE\u5EFA\u597D\u7684 App \u4FE1\u606F\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D");
               return;
             }
             try {
@@ -214850,7 +214878,7 @@ ${composed}`;
                 ...pending.wantOwnerKind ? { ownerKind: pending.wantOwnerKind } : {}
               });
               if (problem) {
-                fail(problem.message);
+                await fail(problem.message);
                 return;
               }
               const svc = await connectorActorsService(pending.companyId);
@@ -214862,29 +214890,77 @@ ${composed}`;
               if (conv.slug) await put3("GITHUB_APP_SLUG", conv.slug, false);
               if (conv.clientId) await put3("GITHUB_APP_CLIENT_ID", conv.clientId, false);
               if (conv.clientSecret) await put3("GITHUB_APP_CLIENT_SECRET", conv.clientSecret, true);
-              pending.appId = conv.appId;
-              pending.privateKeyPem = conv.privateKeyPem;
-              if (conv.slug) pending.slug = conv.slug;
-              pending.ownerLogin = conv.ownerLogin;
-              pending.ownerType = conv.ownerType;
-              pending.permissions = conv.permissions;
-              pending.account = conv.slug ? `${conv.slug}[bot]` : conv.appId;
+              const progress = {
+                appId: conv.appId,
+                ...conv.slug ? { slug: conv.slug } : {},
+                // 收尾那一屏要用：这个 bot 到手的是哪些权限、归属是谁（拼权限设置页地址要 ownerType）。
+                ownerLogin: conv.ownerLogin,
+                ownerType: conv.ownerType,
+                permissions: conv.permissions,
+                account: conv.slug ? `${conv.slug}[bot]` : conv.appId
+              };
+              await pendingStore.patch(state, progress);
               if (!conv.slug) {
                 res.writeHead(200, { "content-type": "text/html; charset=utf-8" }).end(callbackHtml(false, "App \u5DF2\u521B\u5EFA\uFF0C\u4F46\u672A\u62FF\u5230 slug\u2014\u2014\u8BF7\u624B\u52A8\u5728 GitHub \u4E0A\u5B89\u88C5\u5B83"));
                 return;
               }
               res.writeHead(302, { location: appInstallUrl(conv.slug, state) }).end();
             } catch (e) {
-              fail(String(e));
+              await fail(String(e));
             }
             return;
           }
+          const finishGithubAppInstall = async (state, pending, pendingStore) => {
+            if (pending.done && pending.error) return { ok: false, error: pending.error };
+            if (pending.done) return { ok: true, ...pending.account ? { account: pending.account } : {} };
+            if (!pending.appId) return { ok: false, error: "pending" };
+            try {
+              const keySvc = await connectorActorsService(pending.companyId);
+              if (!keySvc) throw new Error("actors service unavailable");
+              const privateKeyPem = await keySvc.revealVariable("GITHUB_APP_PRIVATE_KEY", pending.actorId);
+              if (!privateKeyPem) throw new Error("GitHub App \u7684\u79C1\u94A5\u4E0D\u5728\u53D8\u91CF\u91CC\u4E86\uFF08\u53EF\u80FD\u88AB\u5220\u9664\uFF09\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u8FDE\u63A5");
+              const installs = await listAppInstallations({
+                appId: pending.appId,
+                privateKeyPem
+              });
+              const first = installs[0];
+              if (!first) return { ok: false, error: "pending" };
+              const svc = await connectorActorsService(pending.companyId);
+              if (!svc) throw new Error("actors service unavailable");
+              const scope2 = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
+              const put3 = (key2, value2, encrypted) => svc.putVariable({ key: key2, value: value2, ...scope2, connectorId: "github", encrypted });
+              await put3("GITHUB_APP_INSTALLATION_ID", first.installationId, false);
+              const minted = await mintInstallationToken({
+                appId: pending.appId,
+                privateKeyPem,
+                installationId: first.installationId
+              });
+              if (pending.actorId) {
+                await put3("GITHUB_APP_TOKEN", minted.token, true);
+                await put3("GITHUB_APP_TOKEN_EXPIRES_AT", String(minted.expiresAtMs), false);
+              }
+              if (pending.slug) {
+                const bot = await fetchAppBotIdentity(pending.slug, { token: minted.token });
+                await put3("GITHUB_APP_BOT_EMAIL", bot?.email ?? "", false);
+                await put3("GITHUB_APP_BOT_NAME", bot?.login ?? `${pending.slug}[bot]`, false);
+              }
+              await pendingStore.patch(state, { done: true });
+              return { ok: true, account: pending.account ?? first.account };
+            } catch (e) {
+              const error2 = String(e);
+              await pendingStore.patch(state, { error: error2 }).catch(() => {
+              });
+              return { ok: false, error: error2 };
+            }
+          };
           if (url.pathname === "/api/connectors/github/app/status" && req.method === "POST") {
-            const { state } = JSON.parse(rawBody || "{}");
-            const pending = state ? githubAppPending.get(state, Date.now()) : void 0;
+            const { state = "" } = JSON.parse(rawBody || "{}");
+            const pendingStore = opts.connectorAuthPending?.githubApp;
+            const found2 = await lookupGithubAppPending(pendingStore, state);
+            const pending = found2.pending;
             const reply = (body2) => res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(body2));
-            if (!pending) {
-              reply({ ok: false, error: "expired" });
+            if (!pending || !pendingStore) {
+              reply({ ok: false, error: found2.message });
               return;
             }
             if (pending.error) {
@@ -214909,46 +214985,28 @@ ${composed}`;
               reply({ ok: true, account: pending.account, ...permissionView() });
               return;
             }
-            if (!pending.appId || !pending.privateKeyPem) {
-              reply({ ok: false, error: "pending" });
+            const result = await finishGithubAppInstall(state, pending, pendingStore);
+            if (result.ok) reply({ ok: true, account: result.account ?? pending.account, ...permissionView() });
+            else reply({ ok: false, error: result.error });
+            return;
+          }
+          if (url.pathname === "/api/connectors/github/app/setup-callback" && req.method === "GET") {
+            const state = url.searchParams.get("state") ?? "";
+            const html = (ok3, msg) => res.writeHead(200, { "content-type": "text/html; charset=utf-8" }).end(callbackHtml(ok3, msg));
+            const pendingStore = opts.connectorAuthPending?.githubApp;
+            const found2 = await lookupGithubAppPending(pendingStore, state);
+            if (!found2.pending || !pendingStore) {
+              html(false, state ? found2.message : "GitHub \u4E0A\u7684\u5B89\u88C5\u5DF2\u751F\u6548\uFF1B\u5982\u679C\u63A7\u5236\u53F0\u91CC\u8FD8\u6CA1\u663E\u793A\u5DF2\u8FDE\u63A5\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D");
               return;
             }
-            try {
-              const installs = await listAppInstallations({
-                appId: pending.appId,
-                privateKeyPem: pending.privateKeyPem
-              });
-              const first = installs[0];
-              if (!first) {
-                reply({ ok: false, error: "pending" });
-                return;
-              }
-              const svc = await connectorActorsService();
-              if (!svc) throw new Error("actors service unavailable");
-              const scope2 = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
-              const put3 = (key2, value2, encrypted) => svc.putVariable({ key: key2, value: value2, ...scope2, connectorId: "github", encrypted });
-              await put3("GITHUB_APP_INSTALLATION_ID", first.installationId, false);
-              const minted = await mintInstallationToken({
-                appId: pending.appId,
-                privateKeyPem: pending.privateKeyPem,
-                installationId: first.installationId
-              });
-              if (pending.actorId) {
-                await put3("GITHUB_APP_TOKEN", minted.token, true);
-                await put3("GITHUB_APP_TOKEN_EXPIRES_AT", String(minted.expiresAtMs), false);
-              }
-              if (pending.slug) {
-                const bot = await fetchAppBotIdentity(pending.slug, { token: minted.token });
-                await put3("GITHUB_APP_BOT_EMAIL", bot?.email ?? "", false);
-                await put3("GITHUB_APP_BOT_NAME", bot?.login ?? `${pending.slug}[bot]`, false);
-              }
-              pending.done = true;
-              delete pending.privateKeyPem;
-              reply({ ok: true, account: pending.account ?? first.account, ...permissionView() });
-            } catch (e) {
-              pending.error = String(e);
-              reply({ ok: false, error: pending.error });
+            if (url.searchParams.get("setup_action") === "request") {
+              html(false, "\u5DF2\u5411\u7EC4\u7EC7\u7BA1\u7406\u5458\u63D0\u4EA4\u5B89\u88C5\u7533\u8BF7\uFF0C\u6279\u51C6\u540E\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D");
+              return;
             }
+            const result = await finishGithubAppInstall(state, found2.pending, pendingStore);
+            if (result.ok) html(true, `\u5DF2\u8FDE\u63A5\u4E3A ${result.account ?? found2.pending.account ?? "GitHub App"}`);
+            else if (result.error === "pending") html(false, "GitHub \u8FD8\u6CA1\u67E5\u5230\u8FD9\u6B21\u5B89\u88C5\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u7A0D\u540E\u91CD\u8BD5");
+            else html(false, result.error);
             return;
           }
           if (url.pathname === "/api/connectors/feishu/login/start" && req.method === "POST") {
@@ -215325,14 +215383,14 @@ async function markDeliveredWithRetry(store, messageId, attempts = 3) {
   }
   return false;
 }
-var http, import_node_crypto41, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, APPEND_TURN_START_WAIT_MS, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
+var http, import_node_crypto42, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, APPEND_TURN_START_WAIT_MS, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
     init_src();
     init_file_limits2();
     http = __toESM(require("node:http"), 1);
-    import_node_crypto41 = require("node:crypto");
+    import_node_crypto42 = require("node:crypto");
     init_chat_session();
     init_chat_system_message();
     init_sealed_node_receipt();
@@ -215364,7 +215422,6 @@ var init_server3 = __esm({
     init_live_chat();
     init_chat_turn_wait();
     init_append_now();
-    init_insert_status();
     init_append_progress();
     init_workorder_drafts();
     init_draft_edit();
@@ -215385,6 +215442,7 @@ var init_server3 = __esm({
     init_chat_turn_gate();
     init_chat_submission();
     init_chat_insert_evidence();
+    init_insert_undelivered();
     init_chat_workorder_files();
     init_chat_item_ledger();
     init_chat_cancel_attribution();
@@ -215396,10 +215454,9 @@ var init_server3 = __esm({
     init_knowledge2();
     init_assembly();
     init_child_live_turn();
+    init_registry_audit_sink();
     init_src8();
     init_continuation3();
-    githubAppPending = new PendingAppCreations();
-    connectorAuthSnapshots = /* @__PURE__ */ new Map();
     CONNECTOR_AUTH_SNAPSHOT_TTL_MS = 30 * 60 * 1e3;
     defaultResolveActor = (token) => token.startsWith("token:") ? token.slice("token:".length) : null;
     enc = (s2) => new TextEncoder().encode(s2);
@@ -215495,25 +215552,25 @@ function createTokenIssuer(opts = {}) {
 function createNodeTokenStore(file) {
   const read3 = () => {
     try {
-      return JSON.parse(fs20.readFileSync(file, "utf8"));
+      return JSON.parse(fs21.readFileSync(file, "utf8"));
     } catch {
       return {};
     }
   };
-  const write = (table) => fs20.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
+  const write = (table) => fs21.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
   const revokedFile = file.replace(/(\.json)?$/, "-revoked.json");
   const readRevoked = () => {
     try {
-      return JSON.parse(fs20.readFileSync(revokedFile, "utf8"));
+      return JSON.parse(fs21.readFileSync(revokedFile, "utf8"));
     } catch {
       return {};
     }
   };
-  const writeRevoked = (table) => fs20.writeFileSync(revokedFile, JSON.stringify(table, null, 2), { mode: 384 });
+  const writeRevoked = (table) => fs21.writeFileSync(revokedFile, JSON.stringify(table, null, 2), { mode: 384 });
   return {
     issue(nodeId) {
       const table = read3();
-      const token = `ont_${(0, import_node_crypto42.randomBytes)(24).toString("base64url")}`;
+      const token = `ont_${(0, import_node_crypto43.randomBytes)(24).toString("base64url")}`;
       table[token] = nodeId;
       write(table);
       return token;
@@ -215553,14 +215610,14 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   const read3 = () => {
     if (!file) return table;
     try {
-      return new Map(Object.entries(JSON.parse(fs20.readFileSync(file, "utf8"))));
+      return new Map(Object.entries(JSON.parse(fs21.readFileSync(file, "utf8"))));
     } catch {
       return /* @__PURE__ */ new Map();
     }
   };
   const write = (m2) => {
     if (!file) return;
-    fs20.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
+    fs21.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
   };
   const table = /* @__PURE__ */ new Map();
   const prune = () => {
@@ -215573,7 +215630,7 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   return {
     issue(name, ttlMs = defaultTtlMs, companyId) {
       const m2 = prune();
-      const token = `ent_${(0, import_node_crypto42.randomBytes)(24).toString("base64url")}`;
+      const token = `ent_${(0, import_node_crypto43.randomBytes)(24).toString("base64url")}`;
       const expiresAt2 = Date.now() + ttlMs;
       m2.set(token, { name, expiresAt: expiresAt2, ...companyId !== void 0 ? { companyId } : {} });
       write(m2);
@@ -215622,33 +215679,33 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto42, fs20, path20, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
+var import_node_crypto43, fs21, path20, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
-    import_node_crypto42 = require("node:crypto");
-    fs20 = __toESM(require("node:fs"), 1);
+    import_node_crypto43 = require("node:crypto");
+    fs21 = __toESM(require("node:fs"), 1);
     path20 = __toESM(require("node:path"), 1);
     SESSION_TOKEN_PREFIX = "oat_v2_";
     b64url2 = (value2) => Buffer.from(value2).toString("base64url");
     fromB64url = (value2) => Buffer.from(value2, "base64url").toString("utf8");
     readOrCreateSecret = (file) => {
-      if (!file) return (0, import_node_crypto42.randomBytes)(32);
+      if (!file) return (0, import_node_crypto43.randomBytes)(32);
       try {
-        const raw = fs20.readFileSync(file, "utf8").trim();
+        const raw = fs21.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto42.randomBytes)(32);
-      fs20.mkdirSync(path20.dirname(file), { recursive: true });
-      fs20.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
+      const secret = (0, import_node_crypto43.randomBytes)(32);
+      fs21.mkdirSync(path20.dirname(file), { recursive: true });
+      fs21.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
-    sign = (secret, payload2) => (0, import_node_crypto42.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign = (secret, payload2) => (0, import_node_crypto43.createHmac)("sha256", secret).update(payload2).digest("base64url");
     signatureMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto42.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto43.timingSafeEqual)(a, b2);
     };
     isTokenClaims = (value2) => {
       if (value2 === null || typeof value2 !== "object") return false;
@@ -215670,6 +215727,9 @@ var init_tokens = __esm({
 function isOperatorRequest(auth) {
   return auth.scopes?.includes(OPERATOR_SCOPE) === true;
 }
+function operatorCrossCompanyRead(auth, method) {
+  return method === "GET" && isOperatorRequest(auth);
+}
 var OPERATOR_SCOPE;
 var init_operator = __esm({
   "../server/src/auth/operator.ts"() {
@@ -215707,33 +215767,33 @@ function createDataplaneTokenIssuer(opts = {}) {
     }
   };
 }
-var import_node_crypto43, fs21, path21, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
+var import_node_crypto44, fs22, path21, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
 var init_session_dataplane_token = __esm({
   "../server/src/session-dataplane-token.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
-    fs21 = __toESM(require("node:fs"), 1);
+    import_node_crypto44 = require("node:crypto");
+    fs22 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     init_src();
     PREFIX2 = "osd_";
     b64url3 = (v2) => Buffer.from(v2, "utf8").toString("base64url");
     fromB64url2 = (v2) => Buffer.from(v2, "base64url").toString("utf8");
-    sign2 = (secret, payload2) => (0, import_node_crypto43.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign2 = (secret, payload2) => (0, import_node_crypto44.createHmac)("sha256", secret).update(payload2).digest("base64url");
     sigMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto43.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto44.timingSafeEqual)(a, b2);
     };
     readOrCreateSecret2 = (file) => {
-      if (!file) return (0, import_node_crypto43.randomBytes)(32);
+      if (!file) return (0, import_node_crypto44.randomBytes)(32);
       try {
-        const raw = fs21.readFileSync(file, "utf8").trim();
+        const raw = fs22.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto43.randomBytes)(32);
-      fs21.mkdirSync(path21.dirname(file), { recursive: true });
-      fs21.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
+      const secret = (0, import_node_crypto44.randomBytes)(32);
+      fs22.mkdirSync(path21.dirname(file), { recursive: true });
+      fs22.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
     isClaims = (v2) => {
@@ -218406,11 +218466,11 @@ function onlyHits(pool, q2) {
   if (!q2.requireMatch || q2.keywords.length === 0) return [...pool];
   return pool.filter((r) => memoryMatchScore(r, q2.keywords) > 0);
 }
-var import_node_crypto44, MemoryActorMemoryStore, toIndexEntry;
+var import_node_crypto45, MemoryActorMemoryStore, toIndexEntry;
 var init_memory_actor_memory_store = __esm({
   "../testkit/src/memory-actor-memory-store.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     init_src();
     MemoryActorMemoryStore = class {
       rows = /* @__PURE__ */ new Map();
@@ -218464,7 +218524,7 @@ var init_memory_actor_memory_store = __esm({
       async write(input, now) {
         if (input.memId === void 0) {
           const rec2 = {
-            memId: `mem:${(0, import_node_crypto44.randomUUID)()}`,
+            memId: `mem:${(0, import_node_crypto45.randomUUID)()}`,
             actorId: input.actorId,
             projectId: input.projectId,
             keywords: [...input.keywords],
@@ -219275,13 +219335,13 @@ var init_stats = __esm({
 
 // ../server/src/domains/projects/project-id.ts
 function randomProjectId() {
-  return projectIdFromUuid((0, import_node_crypto45.randomUUID)());
+  return projectIdFromUuid((0, import_node_crypto46.randomUUID)());
 }
-var import_node_crypto45;
+var import_node_crypto46;
 var init_project_id = __esm({
   "../server/src/domains/projects/project-id.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_src();
   }
 });
@@ -221356,13 +221416,13 @@ function applyTurnPatch(t, patch) {
     ...patch.lastError !== void 0 ? { lastError: patch.lastError } : {}
   };
 }
-var import_node_crypto46, fs22, path22, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto47, fs23, path22, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
-    import_node_crypto46 = require("node:crypto");
-    fs22 = __toESM(require("node:fs"), 1);
+    import_node_crypto47 = require("node:crypto");
+    fs23 = __toESM(require("node:fs"), 1);
     path22 = __toESM(require("node:path"), 1);
     init_src();
     init_src9();
@@ -221376,8 +221436,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const memory = new MemoryOplogStore();
-        if (fs22.existsSync(file)) {
-          for (const line2 of fs22.readFileSync(file, "utf8").split("\n")) {
+        if (fs23.existsSync(file)) {
+          for (const line2 of fs23.readFileSync(file, "utf8").split("\n")) {
             if (!line2.trim()) continue;
             const stored = JSON.parse(line2);
             const { artifactId, seq, ...op } = stored;
@@ -221385,15 +221445,15 @@ var init_dev_store = __esm({
             if (assigned !== seq) throw new Error(`corrupt ndjson log: seq mismatch at ${line2}`);
           }
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, "");
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, "");
         }
         return new _NdjsonOplogStore(file, memory);
       }
       async append(artifactId, op, expectedSeq) {
         const seq = await this.memory.append(artifactId, op, expectedSeq);
         const stored = { ...op, artifactId, seq };
-        fs22.appendFileSync(this.file, JSON.stringify(stored) + "\n");
+        fs23.appendFileSync(this.file, JSON.stringify(stored) + "\n");
         return seq;
       }
       read(artifactId, fromSeq) {
@@ -221409,39 +221469,39 @@ var init_dev_store = __esm({
     DirBlobStore = class {
       constructor(dir) {
         this.dir = dir;
-        fs22.mkdirSync(dir, { recursive: true });
+        fs23.mkdirSync(dir, { recursive: true });
       }
       fileOf(hash3) {
         return path22.join(this.dir, hash3);
       }
       async put(bytes2) {
-        const hash3 = (0, import_node_crypto46.createHash)("sha256").update(bytes2).digest("hex");
+        const hash3 = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash3);
-        if (!fs22.existsSync(file)) fs22.writeFileSync(file, bytes2);
+        if (!fs23.existsSync(file)) fs23.writeFileSync(file, bytes2);
         return hash3;
       }
       async meta(hash3) {
         const file = this.fileOf(hash3);
-        if (!fs22.existsSync(file)) return null;
-        const size = fs22.statSync(file).size;
-        const fd = fs22.openSync(file, "r");
+        if (!fs23.existsSync(file)) return null;
+        const size = fs23.statSync(file).size;
+        const fd = fs23.openSync(file, "r");
         const head = Buffer.alloc(16);
-        fs22.readSync(fd, head, 0, 16, 0);
-        fs22.closeSync(fd);
+        fs23.readSync(fd, head, 0, 16, 0);
+        fs23.closeSync(fd);
         const contentType = sniffContentType(new Uint8Array(head));
         return { size, ...contentType ? { contentType } : {} };
       }
       async get(hash3) {
         const file = this.fileOf(hash3);
-        if (!fs22.existsSync(file)) throw new BlobNotFoundError(hash3);
-        return new Uint8Array(fs22.readFileSync(file));
+        if (!fs23.existsSync(file)) throw new BlobNotFoundError(hash3);
+        return new Uint8Array(fs23.readFileSync(file));
       }
       async has(hash3) {
-        return fs22.existsSync(this.fileOf(hash3));
+        return fs23.existsSync(this.fileOf(hash3));
       }
       async sweep(reachable) {
-        for (const name of fs22.readdirSync(this.dir)) {
-          if (!reachable.has(name)) fs22.unlinkSync(this.fileOf(name));
+        for (const name of fs23.readdirSync(this.dir)) {
+          if (!reachable.has(name)) fs23.unlinkSync(this.fileOf(name));
         }
       }
     };
@@ -221470,7 +221530,7 @@ var init_dev_store = __esm({
         this.file = file;
       }
       static async open(file) {
-        const seed = fs22.existsSync(file) ? JSON.parse(fs22.readFileSync(file, "utf8")) : [];
+        const seed = fs23.existsSync(file) ? JSON.parse(fs23.readFileSync(file, "utf8")) : [];
         return new _FileTypeRegistryStore(file, seed);
       }
       async put(def) {
@@ -221483,8 +221543,8 @@ var init_dev_store = __esm({
       }
       async save() {
         const tmp = `${this.file}.tmp`;
-        fs22.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
-        fs22.renameSync(tmp, this.file);
+        fs23.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
+        fs23.renameSync(tmp, this.file);
       }
     };
     FileRoleRegistryStore = class _FileRoleRegistryStore extends MemoryRoleRegistryStore {
@@ -221493,7 +221553,7 @@ var init_dev_store = __esm({
         this.file = file;
       }
       static async open(file) {
-        const seed = fs22.existsSync(file) ? JSON.parse(fs22.readFileSync(file, "utf8")) : [];
+        const seed = fs23.existsSync(file) ? JSON.parse(fs23.readFileSync(file, "utf8")) : [];
         return new _FileRoleRegistryStore(file, seed);
       }
       async put(def) {
@@ -221506,8 +221566,8 @@ var init_dev_store = __esm({
       }
       async save() {
         const tmp = `${this.file}.tmp`;
-        fs22.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
-        fs22.renameSync(tmp, this.file);
+        fs23.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
+        fs23.renameSync(tmp, this.file);
       }
     };
     FileRegistryStore = class _FileRegistryStore extends MemoryRegistryStore {
@@ -221525,8 +221585,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileRegistryStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const a of snap.actors) await MemoryRegistryStore.prototype.upsertActor.call(store, a);
           for (const c of snap.configs) await MemoryRegistryStore.prototype.appendConfig.call(store, c);
           for (const t of snap.teams) await MemoryRegistryStore.prototype.upsertTeam.call(store, t);
@@ -221567,7 +221627,7 @@ var init_dev_store = __esm({
           skillFiles: skillFilesEntries,
           connections
         };
-        fs22.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
     FileAssistantBindStore = class _FileAssistantBindStore extends MemoryAssistantBindStore {
@@ -221585,11 +221645,11 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileAssistantBindStore(file);
-        if (fs22.existsSync(file)) store._load(JSON.parse(fs22.readFileSync(file, "utf8")));
+        if (fs23.existsSync(file)) store._load(JSON.parse(fs23.readFileSync(file, "utf8")));
         return store;
       }
       async save() {
-        fs22.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
       }
     };
     FileHumanPrefsStore = class _FileHumanPrefsStore extends MemoryHumanPrefsStore {
@@ -221607,11 +221667,11 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileHumanPrefsStore(file);
-        if (fs22.existsSync(file)) store._load(JSON.parse(fs22.readFileSync(file, "utf8")));
+        if (fs23.existsSync(file)) store._load(JSON.parse(fs23.readFileSync(file, "utf8")));
         return store;
       }
       async save() {
-        fs22.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
       }
     };
     FileProjectStateStore = class _FileProjectStateStore extends MemoryProjectStateStore {
@@ -221621,8 +221681,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileProjectStateStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const project of snap.projects ?? []) await MemoryProjectStateStore.prototype.upsertProject.call(store, project);
           const membersByProject = /* @__PURE__ */ new Map();
           for (const member of snap.members ?? []) {
@@ -221634,8 +221694,8 @@ var init_dev_store = __esm({
             await MemoryProjectStateStore.prototype.replaceProjectMembers.call(store, projectId2, members);
           }
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
         }
         return store;
       }
@@ -221654,7 +221714,7 @@ var init_dev_store = __esm({
       async save() {
         const projects = await this.listProjects();
         const members = (await Promise.all(projects.map((project) => this.listProjectMembers(project.id)))).flat();
-        fs22.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
       }
     };
     FileArtifactStateStore = class _FileArtifactStateStore extends MemoryArtifactStateStore {
@@ -221664,8 +221724,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileArtifactStateStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const artifact of snap.artifacts ?? []) await MemoryArtifactStateStore.prototype.upsertArtifact.call(store, artifact);
           for (const revision of snap.revisions ?? []) await MemoryArtifactStateStore.prototype.upsertRevision.call(store, revision);
           for (const event of snap.events ?? []) await MemoryArtifactStateStore.prototype.appendEvent.call(store, event);
@@ -221675,8 +221735,8 @@ var init_dev_store = __esm({
           for (const ws of snap.workspaceDispatchHeld ?? []) await MemoryArtifactStateStore.prototype.setWorkspaceDispatchHold.call(store, ws, true);
           for (const f2 of snap.workOrderFiles ?? []) await MemoryArtifactStateStore.prototype.addWorkOrderFile.call(store, f2);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [], workOrderFiles: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [], workOrderFiles: [] }, null, 2));
         }
         return store;
       }
@@ -221713,7 +221773,7 @@ var init_dev_store = __esm({
         await this.save();
       }
       async save() {
-        fs22.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
       }
     };
     FileTraceStore = class _FileTraceStore extends MemoryTraceStore {
@@ -221740,25 +221800,25 @@ var init_dev_store = __esm({
         return path22.join(this.eventsDir, `${encodeURIComponent(runId)}.ndjson`);
       }
       appendLine(file, obj2) {
-        fs22.appendFileSync(file, JSON.stringify(obj2) + "\n");
+        fs23.appendFileSync(file, JSON.stringify(obj2) + "\n");
       }
       static replay(file, fn) {
-        if (!fs22.existsSync(file)) return;
-        for (const line2 of fs22.readFileSync(file, "utf8").split("\n")) {
+        if (!fs23.existsSync(file)) return;
+        for (const line2 of fs23.readFileSync(file, "utf8").split("\n")) {
           if (!line2.trim()) continue;
           fn(JSON.parse(line2));
         }
       }
       static async open(dir) {
         const store = new _FileTraceStore(dir);
-        fs22.mkdirSync(store.eventsDir, { recursive: true });
+        fs23.mkdirSync(store.eventsDir, { recursive: true });
         _FileTraceStore.replay(store.runsFile, (r) => store.restoreRun(r));
-        for (const name of fs22.readdirSync(store.eventsDir)) {
+        for (const name of fs23.readdirSync(store.eventsDir)) {
           _FileTraceStore.replay(path22.join(store.eventsDir, name), (e) => store.restoreEvent(e));
         }
         _FileTraceStore.replay(store.toolCallsFile, (c) => store.restoreToolCall(c));
         _FileTraceStore.replay(store.linksFile, (l) => store.restoreLink(l));
-        store.restoreContinuity(fs22.existsSync(store.continuityFile) ? JSON.parse(fs22.readFileSync(store.continuityFile, "utf8")) : {});
+        store.restoreContinuity(fs23.existsSync(store.continuityFile) ? JSON.parse(fs23.readFileSync(store.continuityFile, "utf8")) : {});
         return store;
       }
       async createRun(input) {
@@ -221810,8 +221870,8 @@ var init_dev_store = __esm({
       }
       saveContinuity() {
         const tmp = `${this.continuityFile}.tmp`;
-        fs22.writeFileSync(tmp, JSON.stringify(this.continuitySnapshot(), null, 2));
-        fs22.renameSync(tmp, this.continuityFile);
+        fs23.writeFileSync(tmp, JSON.stringify(this.continuitySnapshot(), null, 2));
+        fs23.renameSync(tmp, this.continuityFile);
       }
       async appendEvents(runId, inputs) {
         const existing = await super.listEvents(runId, {});
@@ -222276,8 +222336,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileChatSessionStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const [sid, copies] of Object.entries(snap.outputCopies ?? {})) store.outputCopies.set(sid, copies);
           for (const [sid, fps] of Object.entries(snap.outputFingerprints ?? {})) store.outputFingerprints.set(sid, fps);
           for (const [sid, issues] of Object.entries(snap.fileIssues ?? {})) store.fileIssues.set(sid, issues);
@@ -222287,8 +222347,8 @@ var init_dev_store = __esm({
           for (const [sid, kinds] of Object.entries(snap.sessionWorkOrderKinds ?? {})) store.sessionWorkOrderKinds.set(sid, new Map(Object.entries(kinds)));
           for (const [sid, list2] of Object.entries(snap.pending ?? {})) store.pending.set(sid, list2);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ sessions: [], messages: {}, sessionWorkOrders: {} }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ sessions: [], messages: {}, sessionWorkOrders: {} }, null, 2));
         }
         return store;
       }
@@ -222382,7 +222442,7 @@ var init_dev_store = __esm({
           sessionWorkOrderKinds: Object.fromEntries([...this.sessionWorkOrderKinds].map(([k2, v2]) => [k2, Object.fromEntries(v2)])),
           pending: Object.fromEntries(this.pending)
         };
-        fs22.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
     MemoryChatTurnStore = class {
@@ -222465,17 +222525,17 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileChatTurnStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const t of snap.turns ?? []) store.turns.set(t.id, t);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ turns: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ turns: [] }, null, 2));
         }
         return store;
       }
       persist() {
-        fs22.writeFileSync(this.file, JSON.stringify({ turns: [...this.turns.values()] }, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify({ turns: [...this.turns.values()] }, null, 2));
       }
     };
     MemoryReadMarkerStore = class _MemoryReadMarkerStore {
@@ -222501,12 +222561,12 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileReadMarkerStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const m2 of snap.markers ?? []) store.markers.set(`${m2.actorId}\0${m2.scope}`, m2);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ markers: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ markers: [] }, null, 2));
         }
         return store;
       }
@@ -222515,18 +222575,18 @@ var init_dev_store = __esm({
         this.save();
       }
       save() {
-        fs22.writeFileSync(this.file, JSON.stringify({ markers: [...this.markers.values()] }, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify({ markers: [...this.markers.values()] }, null, 2));
       }
     };
   }
 });
 
 // ../server/src/control-plane-file-store.ts
-var fs23, path23, MUTATORS2, SNAPSHOT_VERSION, FileControlPlaneStore;
+var fs24, path23, MUTATORS2, SNAPSHOT_VERSION, FileControlPlaneStore;
 var init_control_plane_file_store = __esm({
   "../server/src/control-plane-file-store.ts"() {
     "use strict";
-    fs23 = __toESM(require("node:fs"), 1);
+    fs24 = __toESM(require("node:fs"), 1);
     path23 = __toESM(require("node:path"), 1);
     init_src9();
     MUTATORS2 = [
@@ -222569,8 +222629,8 @@ var init_control_plane_file_store = __esm({
       }
       static async open(file) {
         const store = new _FileControlPlaneStore(file);
-        if (fs23.existsSync(file)) {
-          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
+        if (fs24.existsSync(file)) {
+          const snap = JSON.parse(fs24.readFileSync(file, "utf8"));
           const needsOnboardingBackfill = (snap.version ?? 1) < 2;
           const backfillAt = (/* @__PURE__ */ new Date()).toISOString();
           for (const c of snap.companies ?? []) await MemoryControlPlaneStore.prototype.createCompany.call(store, c);
@@ -222588,7 +222648,7 @@ var init_control_plane_file_store = __esm({
           for (const op of snap.offboardings ?? []) store.offboardings.set(`${op.companyId}\0${op.operationId}`, op);
           if (needsOnboardingBackfill) await store.save();
         } else {
-          fs23.mkdirSync(path23.dirname(file), { recursive: true });
+          fs24.mkdirSync(path23.dirname(file), { recursive: true });
         }
         return store;
       }
@@ -222625,7 +222685,7 @@ var init_control_plane_file_store = __esm({
           // 交接操作无按公司列举的读面（按 operationId / accountId 定位），直接读 protected map。
           offboardings: [...this.offboardings.values()]
         };
-        fs23.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs24.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
   }
@@ -222701,7 +222761,7 @@ var init_company_engine_router = __esm({
 
 // ../server/src/skill-market-client.ts
 function digestOf2(bytes2) {
-  return `sha256:${(0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex")}`;
 }
 function createSkillMarketClientFromEnv(env = process.env) {
   const base = env["SKILL_MARKET_BASE_URL"];
@@ -222712,11 +222772,11 @@ function createSkillMarketClientFromEnv(env = process.env) {
 function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var import_node_crypto47, DisabledSkillMarketClient, FakeSkillMarketClient, HttpSkillMarketClient;
+var import_node_crypto48, DisabledSkillMarketClient, FakeSkillMarketClient, HttpSkillMarketClient;
 var init_skill_market_client = __esm({
   "../server/src/skill-market-client.ts"() {
     "use strict";
-    import_node_crypto47 = require("node:crypto");
+    import_node_crypto48 = require("node:crypto");
     init_src();
     DisabledSkillMarketClient = class {
       async listSkills(_input) {
@@ -223567,7 +223627,7 @@ async function copySessionOutputs(deps) {
       continue;
     }
     const saved = existing?.[file.path];
-    if (saved && savedContentHash(saved) === (0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex")) {
+    if (saved && savedContentHash(saved) === (0, import_node_crypto49.createHash)("sha256").update(bytes2).digest("hex")) {
       const aligned = { ...saved, size: bytes2.length, mtime: file.mtime };
       delete aligned.editedAt;
       realigned.push(aligned);
@@ -223664,11 +223724,11 @@ function createOutputCopyScheduler(deps) {
     }
   };
 }
-var import_node_crypto48, OUTPUT_COPY_LIMITS;
+var import_node_crypto49, OUTPUT_COPY_LIMITS;
 var init_outputs_copy = __esm({
   "../server/src/domains/chat-sessions/outputs-copy.ts"() {
     "use strict";
-    import_node_crypto48 = require("node:crypto");
+    import_node_crypto49 = require("node:crypto");
     init_src();
     OUTPUT_COPY_LIMITS = {
       maxFileBytes: FILE_CONTENT_MAX_BYTES,
@@ -223883,11 +223943,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto49, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto50, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto49 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     init_zod();
     init_src7();
     init_config_audit();
@@ -224014,7 +224074,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto49.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto50.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -224162,11 +224222,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto50, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto51, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto50 = require("node:crypto");
+    import_node_crypto51 = require("node:crypto");
     init_zod();
     init_src7();
     init_config_audit();
@@ -224191,7 +224251,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto50.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto51.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -224204,8 +224264,13 @@ var init_roles_admin = __esm({
       list() {
         return this.deps.store.list();
       }
-      async usage(name) {
-        return (await this.usageMany([name]))[name];
+      /**
+       * @param companyId 按哪家公司的员工数人头（Bug 0245）。岗位目录全公司共用一份，但「谁在岗」是各公司自己的——
+       *   GET /api/roles 必须传请求所属公司，否则落到默认公司那份早已不再更新的旧名单，所有公司都报同一组错数。
+       *   缺省 = 默认公司（改名 / 弃用 / 删除这几条写路径暂维持原口径）。
+       */
+      async usage(name, companyId) {
+        return (await this.usageMany([name], companyId))[name];
       }
       /**
        * ADR 0088 D4：多个岗位的用量**一次取数**。此前 `/api/roles` 对每个岗位各调一次 `usage()`，
@@ -224213,9 +224278,9 @@ var init_roles_admin = __esm({
        * ——13 个岗位 = 13 份全表。员工页首屏门控在这条上（listRoles 与 listActors 并行等齐才渲染）。
        * 三份数据只取一次，逐岗位在内存算。单岗位口径与旧 `usage()` 逐字段一致（后者现转调本方法）。
        */
-      async usageMany(names) {
+      async usageMany(names, companyId) {
         const [actors, types2, owners] = await Promise.all([
-          this.deps.actors(),
+          this.deps.actors(companyId),
           this.deps.types(),
           this.deps.artifactOwners?.() ?? Promise.resolve([])
         ]);
@@ -227050,8 +227115,8 @@ var init_chat_recovery = __esm({
 
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto51.randomBytes)(16);
-  const dk = (0, import_node_crypto51.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto52.randomBytes)(16);
+  const dk = (0, import_node_crypto52.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -227068,8 +227133,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto51.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto51.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto52.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto52.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -227077,17 +227142,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto51.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto52.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto51.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto52.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto51.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto52.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -227099,21 +227164,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto51.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto52.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto51.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto52.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto51.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto52.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto51, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto52, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -228497,18 +228562,18 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto52.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto53.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe2(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto52, REDACTED_MARKER, ActorsService, MASK_TAIL_MIN_LENGTH, mask, changedKeys;
+var import_node_crypto53, REDACTED_MARKER, ActorsService, MASK_TAIL_MIN_LENGTH, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
     init_file_limits2();
     init_keyed_mutex();
-    import_node_crypto52 = require("node:crypto");
+    import_node_crypto53 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -229132,7 +229197,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path46, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto52.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto53.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path46, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -230255,15 +230320,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto52.randomBytes)(12);
-        const cipher = (0, import_node_crypto52.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto53.randomBytes)(12);
+        const cipher = (0, import_node_crypto53.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc3 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc3.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto52.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto53.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -230876,7 +230941,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto53.createHash)("sha256");
+    const hasher = (0, import_node_crypto54.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -230901,11 +230966,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto53.createHash)("sha256");
+    const hasher = (0, import_node_crypto54.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto53.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto54.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -230926,11 +230991,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto53.createHash)("sha256");
+    const hasher = (0, import_node_crypto54.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto53.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto54.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -230950,7 +231015,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path46,
     content: content3,
-    blobHash: (0, import_node_crypto53.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto54.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -230974,7 +231039,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto53.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto54.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -231007,7 +231072,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path46,
     content: content3,
-    blobHash: (0, import_node_crypto53.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto54.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -231024,11 +231089,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto53;
+var import_node_crypto54;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
   }
 });
 
@@ -232800,54 +232865,6 @@ var init_credential_audit_log = __esm({
   }
 });
 
-// ../server/src/domains/actors/registry-audit-sink.ts
-function createRegistryAuditSink(file) {
-  const listeners = /* @__PURE__ */ new Set();
-  const notify = (msg) => {
-    for (const listener of listeners) listener(msg);
-  };
-  return {
-    /** 登记审计：落盘 + 推 registry 通知（前端据此重拉登记类投影）。 */
-    registryAudit: (record9) => {
-      fs24.appendFile(file, JSON.stringify(record9) + "\n", () => {
-      });
-      notify({ kind: record9.kind, actor: record9.actor, target: record9.target, timestamp: record9.timestamp });
-    },
-    /**
-     * 凭据审计（ADR 凭据保险库 §4.7）：与登记审计同落一份旁账，按 kind 前缀 `credential_` 区分。
-     *
-     * **只落盘、不推 registry 通知**（D-10 推送面）。registry 通知是实例级的，`/api/events` 原样转发给
-     * 任何已认证的连接、不分组织；凭据事件推进去 = 别家组织开一条 SSE 就能实时看到「谁在读/改哪个变量」。
-     * 仓内没有任何消费方订它（2.0 前端只订无内容的 runtime-status，而后者本来就不被凭据事件唤醒）。
-     * 要看凭据审计走 `GET /api/variables/reveal-audit`（按请求方组织过滤）。将来若需要实时推送，
-     * 得先让通知带组织、`/api/events` 按组织过滤（recvvzbhOGiS7l 的完整修复），再放回来。
-     */
-    credentialAudit: (record9) => {
-      fs24.appendFile(file, JSON.stringify(record9) + "\n", () => {
-      });
-    },
-    /** runtime 状态变了：只发无内容的失效提示（ADR 0576）。 */
-    notifyRuntimeStatus: () => {
-      notify({ kind: "runtime_status_changed", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
-    },
-    notifications: {
-      subscribe(listener) {
-        listeners.add(listener);
-        return () => {
-          listeners.delete(listener);
-        };
-      }
-    }
-  };
-}
-var fs24;
-var init_registry_audit_sink = __esm({
-  "../server/src/domains/actors/registry-audit-sink.ts"() {
-    "use strict";
-    fs24 = __toESM(require("node:fs"), 1);
-  }
-});
-
 // ../server/src/domains/actors/stop-on-delete.ts
 function planStopForDeletedActor(actorId, open3) {
   const mine = open3.filter((row) => row.actorId === actorId);
@@ -233074,7 +233091,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto54.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto55.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -233114,11 +233131,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.companyMemberRole ? { companyMemberRole: opts.companyMemberRole } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
-var import_node_crypto54;
+var import_node_crypto55;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto55 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -237602,11 +237619,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto55, import_node_fs16, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto56, import_node_fs16, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     import_node_fs16 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -237639,7 +237656,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto55.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto56.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -237772,7 +237789,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto55.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto56.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -239780,13 +239797,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs17, import_node_path21, import_node_crypto56, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs17, import_node_path21, import_node_crypto57, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs17 = __toESM(require("node:fs"), 1);
     import_node_path21 = __toESM(require("node:path"), 1);
-    import_node_crypto56 = __toESM(require("node:crypto"), 1);
+    import_node_crypto57 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -239804,7 +239821,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto56.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto57.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -241193,11 +241210,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto57, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto58, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -241289,7 +241306,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto57.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto58.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -241498,7 +241515,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto57.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto58.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -241629,7 +241646,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto57.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto58.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -241686,7 +241703,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto57.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto58.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -241924,11 +241941,11 @@ var init_service6 = __esm({
 });
 
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto58, MemberOffboardingService;
+var import_node_crypto59, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -242000,7 +242017,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at2 = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto58.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto59.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -242510,18 +242527,18 @@ var init_routes6 = __esm({
 
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto59.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto60.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto59.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto60.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto59, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto60, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -242546,7 +242563,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto59.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto60.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -243037,7 +243054,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope2 = companyId?.trim();
-  const suffix = scope2 ? `c${(0, import_node_crypto60.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope2 ? `c${(0, import_node_crypto61.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -243366,12 +243383,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto60;
+var import_node_crypto61;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
   }
 });
 
@@ -244156,7 +244173,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto61.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto62.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -244406,16 +244423,16 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto61.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto62.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto61, import_node_fs18, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
+var import_node_crypto62, import_node_fs18, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
     init_src();
     init_faults();
     init_runtime_status();
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     import_node_fs18 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path22 = require("node:path");
@@ -244912,9 +244929,9 @@ var init_types4 = __esm({
 // ../server/src/domains/roles/index.ts
 function rolesDomain(deps) {
   return (router) => {
-    router.get("/api/roles", async () => {
+    router.get("/api/roles", async (req) => {
       const roles = await deps.admin.list();
-      const usageByRole = await deps.admin.usageMany(roles.map((r) => r.name));
+      const usageByRole = await deps.admin.usageMany(roles.map((r) => r.name), req.auth.companyId);
       const items = roles.map((r) => {
         const u = usageByRole[r.name];
         return {
@@ -244933,7 +244950,7 @@ function rolesDomain(deps) {
       if (!name) return { status: 400, body: { error: "missing name" } };
       const roles = await deps.admin.list();
       if (!roles.some((r) => r.name === name)) return { status: 404, body: { error: `\u5C97\u4F4D\u4E0D\u5B58\u5728: ${name}` } };
-      return { status: 200, body: { usage: await deps.admin.usage(name) } };
+      return { status: 200, body: { usage: await deps.admin.usage(name, req.auth.companyId) } };
     });
     router.post("/api/roles", async (req) => {
       const r = await deps.admin.add(req.body ?? {}, req.auth.actor);
@@ -245689,6 +245706,12 @@ var init_notification_reconciler = __esm({
           const ctx = await this.deps.load(companyId);
           if (!ctx) return EMPTY;
           const stats = await this.reconcileWith(companyId, st, ctx);
+          if (stats.notified) {
+            try {
+              this.deps.onNotified?.(companyId, stats.notified);
+            } catch {
+            }
+          }
           const tookMs = this.now - startedAt;
           if (tookMs > SLOW_RECONCILE_MS) {
             this.deps.log(`[notification-ledger] ${companyId} \u5BF9\u8D26\u8017\u65F6 ${tookMs}ms\uFF08\u6210\u5458 ${ctx.humans.length}\uFF0C\u5F85\u5904\u7406 ${stats.pending}\uFF0C\u672C\u6B21\u65B0\u589E ${stats.inserted} / \u7ED3\u675F ${stats.closed}\uFF09`);
@@ -245712,6 +245735,7 @@ var init_notification_reconciler = __esm({
         const nowMs = this.now;
         const nowIso = new Date(nowMs).toISOString();
         const stats = { inserted: 0, refreshed: 0, closed: 0, pending: 0 };
+        const notified = /* @__PURE__ */ new Set();
         const ttl = this.deps.snapshotTtlMs ?? 5 * 6e4;
         const loadSnapshot2 = async (wid) => {
           const hit = st.snaps.get(wid);
@@ -245789,6 +245813,7 @@ var init_notification_reconciler = __esm({
           });
           st.lastSeenAt.set(inserted.id, nowIso);
           stats.inserted++;
+          notified.add(c.recipient);
         }
         const eventsOf = /* @__PURE__ */ new Map();
         const cancelledOf = /* @__PURE__ */ new Map();
@@ -245805,7 +245830,7 @@ var init_notification_reconciler = __esm({
           st.lastSeenAt.delete(row.id);
         }
         stats.pending = current.size;
-        stats.notices = await this.reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2);
+        stats.notices = await this.reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2, notified);
         if (nowMs - st.lastPurgeAt > (this.deps.purgeEveryMs ?? 6 * 36e5)) {
           st.lastPurgeAt = nowMs;
           const purged = await ctx.store.purgeBefore(new Date(nowMs - (this.deps.retentionMs ?? 90 * DAY2)).toISOString());
@@ -245814,6 +245839,7 @@ var init_notification_reconciler = __esm({
         for (const [id, d] of st.drafts) if (nowMs - d.at > DRAFT_OUTCOME_TTL_MS) st.drafts.delete(id);
         if (waitingForGrace) this.schedule(companyId, this.graceMs);
         st.primed = true;
+        if (notified.size > 0) stats.notified = [...notified];
         return stats;
       }
       async judge(st, ctx, model, row, nowMs, nowIso, eventsOf, cancelledOf) {
@@ -245855,7 +245881,7 @@ var init_notification_reconciler = __esm({
        * 早就结束的任务不能在上线那一刻集体「任务已完成」一遍。之后每拍新看到的变化都发。
        * 来源键 = `<种类>:<工单>@<那件事的 seq>`：同一件事重启后再算一遍撞唯一约束即收手；任务重开后再完成是新的一件事。
        */
-      async reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2) {
+      async reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2, notified) {
         const store = ctx.engineStore;
         if (!store) return 0;
         const members = new Set(ctx.humans);
@@ -245877,6 +245903,7 @@ var init_notification_reconciler = __esm({
               ...trigger ? { actorId: trigger } : {},
               enteredAt: new Date(rec2.createdAt).toISOString()
             });
+            notified.add(recipient);
             sent++;
           }
         };
@@ -246072,7 +246099,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs28.statSync(absBundle).size;
-  const digest = (0, import_node_crypto62.createHash)("sha256").update(fs28.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto63.createHash)("sha256").update(fs28.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -246168,12 +246195,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine2(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto62, fs28, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto63, fs28, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     fs28 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path25 = __toESM(require("node:path"), 1);
@@ -246194,7 +246221,7 @@ var init_readonly_bundle = __esm({
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
   const locks = createKeyedMutex();
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto63.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto64.randomUUID)().slice(0, 8)}`);
   const create = async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -246281,7 +246308,7 @@ function makeSeededWorkorderCreator(deps) {
     return await finishCreation({ workspace, rootArtifactId: planned.rootArtifactId, spawned: planned.spawned });
   };
   return async (input) => {
-    const release = await locks.acquire(`${input.companyId ?? ""}\0${input.idempotencyKey ?? (0, import_node_crypto63.randomUUID)()}`);
+    const release = await locks.acquire(`${input.companyId ?? ""}\0${input.idempotencyKey ?? (0, import_node_crypto64.randomUUID)()}`);
     try {
       return await create(input);
     } finally {
@@ -246290,7 +246317,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key2) {
-  return `ws:wo-${(0, import_node_crypto63.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto64.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(snapshot, workspace, actor) {
   if (!snapshot?.nodes.length) return null;
@@ -246302,11 +246329,11 @@ function existingWorkorder(snapshot, workspace, actor) {
     spawned: snapshot.nodes.map((node2) => ({ id: node2.id, type: node2.type, owner: node2.assigneeActorId ?? actor }))
   };
 }
-var import_node_crypto63;
+var import_node_crypto64;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     init_uncategorized_project();
     init_src();
     init_planner();
@@ -247809,12 +247836,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto64, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto65, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service9 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_src7();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -248045,7 +248072,7 @@ var init_service9 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto64.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto65.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -248789,6 +248816,87 @@ var init_reply_anchors = __esm({
   }
 });
 
+// ../server/src/domains/chat-sessions/insert-status.ts
+async function resolveInsertStatus(deps, chatSessionId, clientKey) {
+  const id = insertRequestId(chatSessionId, clientKey);
+  if (!deps.store.getPendingMessage) return { status: "uncertain" };
+  let row = await deps.store.getPendingMessage(chatSessionId, id);
+  if (row?.state !== "delivering") return { status: insertStatusOfRow(row) };
+  if (deps.isTurnRunning(chatSessionId)) return { status: "in-flight" };
+  if (isInsertInflight(id)) {
+    await waitForInflightInsert(id, deps.settleWaitMs ?? 1e4);
+    row = await deps.store.getPendingMessage(chatSessionId, id);
+    return { status: insertStatusOfRow(row) };
+  }
+  const running = settlingOrphans.get(id);
+  if (running) return running;
+  const settling = settleOrphan(deps, chatSessionId, row).finally(() => {
+    settlingOrphans.delete(id);
+  });
+  settlingOrphans.set(id, settling);
+  return settling;
+}
+async function settleOrphan(deps, chatSessionId, row) {
+  const ref2 = row.deliveryRef;
+  const answer = ref2?.nodeId && ref2.dispatchId && deps.confirm ? await deps.confirm({ nodeId: ref2.nodeId, dispatchId: ref2.dispatchId, runtimeKey: ref2.runtimeKey }).catch(() => ({ status: "unknown", reason: "query-failed" })) : { status: "unknown", reason: ref2 ? "no-node" : "no-delivery-ref" };
+  const trace = ref2 && deps.store.listPendingTrace ? await deps.store.listPendingTrace(chatSessionId).catch(() => []) : [];
+  const batch = trace.filter((r) => r.state === "delivering" && r.deliveryRef?.runtimeKey === ref2?.runtimeKey);
+  if (!batch.some((r) => r.id === row.id)) batch.push(row);
+  const ids2 = batch.map((r) => r.id);
+  deps.log?.(`[chat-insert] \u5B64\u513F\u63D2\u5165\u7ED3\u7B97 sid=${chatSessionId} row=${row.id} \u2192 ${answer.status}${answer.reason ? `(${answer.reason})` : ""}`);
+  if (answer.status === "consumed") {
+    await backfill(deps, chatSessionId, batch, row).catch((err) => {
+      deps.log?.(`[chat-insert] \u8865\u884C\u5931\u8D25\uFF08\u4ECD\u6309\u5DF2\u63D2\u5165\u5904\u7406\uFF0Cruntime \u786E\u5B9E\u8BFB\u5230\u4E86\uFF09sid=${chatSessionId}: ${String(err)}`);
+    });
+    await deps.store.markPendingMessages?.(chatSessionId, ids2, "delivered", "delivered:node-confirmed-orphan");
+    return { status: "inserted" };
+  }
+  if (answer.status === "not-consumed") {
+    await deps.store.markPendingMessages?.(chatSessionId, [row.id], "cancelled", "client-gone:not-consumed");
+    const rest = ids2.filter((x2) => x2 !== row.id);
+    if (rest.length) await deps.store.markPendingMessages?.(chatSessionId, rest, "queued", `not-consumed:${answer.reason ?? ""}`);
+    if (row.clientKey) await deps.landUndelivered?.({ clientKey: row.clientKey, rows: [row], note: INSERT_RETURNED_NOTE });
+    return { status: "not-inserted" };
+  }
+  await deps.store.markPendingMessages?.(chatSessionId, ids2, "unconfirmed", `unconfirmed:${answer.reason ?? "unknown"}`);
+  if (row.clientKey) {
+    await deps.landUndelivered?.({ clientKey: row.clientKey, rows: [...batch].sort((a, b2) => a.seq - b2.seq), note: INSERT_UNCERTAIN_NOTE });
+  }
+  return { status: "uncertain" };
+}
+async function backfill(deps, chatSessionId, batch, row) {
+  if (!deps.items) return;
+  const ref2 = row.deliveryRef;
+  const sorted = [...batch].sort((a, b2) => a.seq - b2.seq);
+  const ledger = new ChatItemLedger({
+    items: deps.items,
+    versionSeed: await deps.items.sessionVersionCursor(chatSessionId).catch(() => 0),
+    sessionId: chatSessionId,
+    turnId: ref2?.turnId ?? `insert-backfill:${row.id}`,
+    ...deps.log ? { log: deps.log } : {}
+  });
+  const text7 = sorted.map((m2) => m2.text).filter(Boolean).join("\n\n");
+  const attachments = sorted.flatMap((m2) => (m2.attachments ?? []).map((a) => ({
+    name: a.name,
+    ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
+    ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
+  })));
+  const clientKeys = sorted.map((m2) => m2.clientKey).filter((k2) => !!k2);
+  ledger.recordUserInput(text7, attachments, clientKeys, ref2?.ord !== void 0 ? { ord: ref2.ord } : void 0);
+  await ledger.drain();
+  if (ledger.failures > 0) throw new Error("chat_items \u5199\u5165\u5931\u8D25");
+}
+var settlingOrphans;
+var init_insert_status = __esm({
+  "../server/src/domains/chat-sessions/insert-status.ts"() {
+    "use strict";
+    init_chat_item_ledger();
+    init_chat_insert_evidence();
+    init_append_now();
+    settlingOrphans = /* @__PURE__ */ new Map();
+  }
+});
+
 // ../server/src/domains/chat-sessions/agent-history.ts
 async function resolveChatHistoryViewer(auth, getSession) {
   if (isHumanActorId(auth.actor)) return { kind: "human", actor: auth.actor };
@@ -248991,6 +249099,29 @@ function throwWorkdirError(code2) {
   }
 }
 function createChatSessionsDomain(opts) {
+  const settleInFlightInserts = async ({ store: store2, items, chatSessionId }) => {
+    const rows = await store2.listInFlightInserts(chatSessionId);
+    for (const row of rows) {
+      if (!row.clientKey) continue;
+      await resolveInsertStatus({
+        store: store2,
+        isTurnRunning: (id) => opts.liveChat?.isRunning(id) ?? false,
+        ...opts.confirmInputReceipt ? { confirm: opts.confirmInputReceipt } : {},
+        items,
+        settleWaitMs: INFLIGHT_INSERT_SETTLE_WAIT_MS,
+        landUndelivered: ({ clientKey, rows: batch, note }) => landUndeliveredInsert({
+          store: store2,
+          itemStore: items,
+          chatSessionId,
+          clientKey,
+          text: batch.map((m2) => m2.text).filter(Boolean).join("\n\n"),
+          attachments: batch.flatMap((m2) => m2.attachments ?? []),
+          note
+        }),
+        log: (m2) => console.warn(m2)
+      }, chatSessionId, row.clientKey);
+    }
+  };
   const { store, registry: registry2 } = opts;
   const bindingFor = opts.resolveBinding ?? bindingResolverFromRegistry(registry2);
   async function storeFor(req) {
@@ -249123,7 +249254,7 @@ function createChatSessionsDomain(opts) {
       if (!text7.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto65.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto66.randomUUID)()}`;
       drafts.set(id, { text: text7, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -249200,7 +249331,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = agentDefault.binding?.nodeId ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto65.randomUUID)(),
+        id: (0, import_node_crypto66.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -249319,19 +249450,6 @@ function createChatSessionsDomain(opts) {
       });
       return { status: 200, body: await store2.getSession(req.params.id) };
     });
-    router.post("/api/chat-sessions/:id/runtime/reset-to-agent-default", async (req) => {
-      const store2 = await storeFor(req);
-      const session = await store2.getSession(req.params.id);
-      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
-      const agentDefault = await agentDefaultRuntime(req.auth.companyId, session.aiActorId);
-      const initial = chatSessionInitialRuntime({ binding: agentDefault.binding, agentModel: agentDefault.model });
-      await store2.updateSession(req.params.id, {
-        overrideNodeId: initial.overrideNodeId,
-        overrideRuntimeKind: initial.overrideRuntimeKind,
-        model: initial.model
-      });
-      return { status: 200, body: await store2.getSession(req.params.id) };
-    });
     router.delete("/api/chat-sessions/:id", async (req) => {
       const store2 = await storeFor(req);
       const session = await store2.getSession(req.params.id);
@@ -249348,7 +249466,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto65.randomUUID)(),
+        id: (0, import_node_crypto66.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -249390,7 +249508,7 @@ function createChatSessionsDomain(opts) {
       const known = key2 ? cur.find((x2) => x2.clientKey === key2) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store2.enqueuePendingMessage({
-        id: (0, import_node_crypto65.randomUUID)(),
+        id: (0, import_node_crypto66.randomUUID)(),
         chatSessionId: sid,
         text: text7,
         ...attachments.length ? { attachments } : {},
@@ -249440,6 +249558,11 @@ function createChatSessionsDomain(opts) {
         const stale = Number.isFinite(startedAt) && Date.now() - startedAt >= LINK_WINDOWS.chatTurnPhaseStaleAfterMs;
         return { turnId: activeTurnRow.id, phase: stale ? "recovering" : "running" };
       })();
+      if (sinceVersion === 0 && beforeOrd === void 0 && session?.humanActorId === req.auth.actor && store2.listInFlightInserts) {
+        await settleInFlightInserts({ store: store2, items, chatSessionId }).catch((e) => {
+          console.warn(`[chat] \u5728\u98DE\u63D2\u8BDD\u7ED3\u7B97\u5931\u8D25\uFF08session=${chatSessionId}\uFF09\uFF0C\u8FD9\u6B21\u5FEB\u7167\u7167\u65E7\u6295\u5F71: ${String(e)}`);
+        });
+      }
       const snapshotEntries = [];
       let nextSinceVersion = sinceVersion;
       let hasMoreBefore = false;
@@ -250238,12 +250361,12 @@ async function legacySendFailureCards(entries, deps) {
   }
   return out;
 }
-var import_node_crypto65, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS, PROJECTED_CARD_LIMIT, SUBMISSION_NOT_DELIVERED_NOTE, SUBMISSION_UNCONFIRMED_NOTE, LEGACY_CARD_LIMIT;
+var import_node_crypto66, DEFAULT_SNAPSHOT_ITEMS, INFLIGHT_INSERT_SETTLE_WAIT_MS, MAX_SNAPSHOT_ITEMS, PROJECTED_CARD_LIMIT, SUBMISSION_NOT_DELIVERED_NOTE, SUBMISSION_UNCONFIRMED_NOTE, LEGACY_CARD_LIMIT;
 var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
     init_file_limits2();
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     init_src();
     init_chat_session();
     init_persistent_files();
@@ -250259,6 +250382,8 @@ var init_chat_sessions2 = __esm({
     init_service3();
     init_reply_anchors();
     init_injected_context();
+    init_insert_status();
+    init_insert_undelivered();
     init_agent_history();
     init_deletion();
     init_chat_turn_gate();
@@ -250270,6 +250395,7 @@ var init_chat_sessions2 = __esm({
     init_chat_submission();
     init_project_bundle();
     DEFAULT_SNAPSHOT_ITEMS = 400;
+    INFLIGHT_INSERT_SETTLE_WAIT_MS = 6e3;
     MAX_SNAPSHOT_ITEMS = 1e3;
     PROJECTED_CARD_LIMIT = 10;
     SUBMISSION_NOT_DELIVERED_NOTE = "\u8FD9\u6761\u6D88\u606F\u6CA1\u6709\u53D1\u51FA\uFF0C\u53EF\u4EE5\u91CD\u8BD5";
@@ -251700,7 +251826,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto66.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto67.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -251756,11 +251882,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto66, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto67, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service10 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -252574,11 +252700,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto67.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto68.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto67.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto68.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -252608,11 +252734,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto67, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto68, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -253764,7 +253890,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto68.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto69.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -253781,11 +253907,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto68;
+var import_node_crypto69;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -253914,17 +254040,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto69.createHash)("sha256").update(canonical2).digest("hex");
+  return (0, import_node_crypto70.createHash)("sha256").update(canonical2).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto69.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto70.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto69, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto70, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -254134,7 +254260,7 @@ function queryInputReceipt(hub, nodeId, dispatchId, clientMessageKey, pending, t
     const viaSession = hub.hasSession?.(dispatchId) === true;
     const supported = viaSession ? hub.supportsInputReceiptQuery?.(dispatchId) === true : daemonMetaOf(hub, nodeId)?.supportsInputReceiptQuery === true;
     if (!supported) return Promise.resolve({ status: "unknown", reason: "unsupported" });
-    const requestId = (0, import_node_crypto70.randomUUID)();
+    const requestId = (0, import_node_crypto71.randomUUID)();
     return new Promise((resolve12) => {
       const timer = setTimeout(() => {
         pending.delete(requestId);
@@ -254196,7 +254322,7 @@ function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessi
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto70.randomUUID)();
+  const requestId = (0, import_node_crypto71.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve12) => {
@@ -254209,11 +254335,11 @@ function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessi
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve12, timer });
   });
 }
-var import_node_crypto70, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_TOTAL_FRAMES, STASH_MAX_IDS, STASH_LOSS_MAX_IDS, STASH_LOSS_TTL_MS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto71, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_TOTAL_FRAMES, STASH_MAX_IDS, STASH_LOSS_MAX_IDS, STASH_LOSS_TTL_MS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 1e4;
@@ -254653,7 +254779,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto70.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto71.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -254909,7 +255035,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto70.randomUUID)();
+        const requestId = (0, import_node_crypto71.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve12) => {
@@ -255017,13 +255143,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto71, sha, enc2, dec, MirrorEngine, MemoryMirrorStateStore, MapMirrorIdentities;
+var import_node_crypto72, sha, enc2, dec, MirrorEngine, MemoryMirrorStateStore, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto71.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto72.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc2 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -255304,11 +255430,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label2[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto72, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto73, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_src7();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -255578,7 +255704,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto72.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -255967,8 +256093,8 @@ ${ctx.nodeFault}
         const taskWithRejections = rejectedSection ? `${task}
 
 ${rejectedSection}` : task;
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto72.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto72.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto73.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto73.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           taskWithRejections,
           ``,
@@ -256012,7 +256138,7 @@ ${rejectedSection}` : task;
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto72.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto73.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -256223,11 +256349,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto73, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto74, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -256407,7 +256533,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash3 = (0, import_node_crypto73.createHash)("sha256").update(bytes2).digest("hex");
+        const hash3 = (0, import_node_crypto74.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash3, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -256455,7 +256581,7 @@ function stageAtLeast(stage, min2) {
   return STAGES.indexOf(stage) >= STAGES.indexOf(min2);
 }
 function newVariableId() {
-  return `var_${(0, import_node_crypto74.randomUUID)()}`;
+  return `var_${(0, import_node_crypto75.randomUUID)()}`;
 }
 async function declareRecordsAware(db) {
   await db.query(`SELECT set_config('${RECORDS_AWARE_SETTING}', 'on', true)`);
@@ -256811,11 +256937,11 @@ async function listBindingTargetIds(db, s2, kind) {
     [kind]
   )).rows.map((x2) => x2.target_id);
 }
-var import_node_crypto74, STAGES, RECORDS_AWARE_SETTING, markLockName;
+var import_node_crypto75, STAGES, RECORDS_AWARE_SETTING, markLockName;
 var init_variable_bindings = __esm({
   "../storage/src/variable-bindings.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_src();
     STAGES = ["off", "dual", "read", "records"];
     RECORDS_AWARE_SETTING = "oasis.variable_records_aware";
@@ -266543,11 +266669,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto75, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToFault, rowToQuota, rowToRuntime;
+var import_node_crypto76, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToFault, rowToQuota, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -266897,7 +267023,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto75.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto76.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -267199,11 +267325,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto76, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto77, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -267413,7 +267539,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto76.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto77.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -267651,6 +267777,124 @@ var init_postgres_inbox_read = __esm({
   }
 });
 
+// ../storage/src/postgres-connector-auth-pending.ts
+var ident17, PostgresGithubAppPendingStore, PostgresConnectorAuthSnapshotStore;
+var init_postgres_connector_auth_pending = __esm({
+  "../storage/src/postgres-connector-auth-pending.ts"() {
+    "use strict";
+    init_esm();
+    init_pg_ident();
+    ident17 = (s2) => {
+      quoteIdent2(s2);
+      return s2;
+    };
+    PostgresGithubAppPendingStore = class _PostgresGithubAppPendingStore {
+      constructor(pool, schema) {
+        this.pool = pool;
+        this.s = `"${ident17(schema)}"`;
+      }
+      s;
+      static async open(pool, schema = "public") {
+        const s2 = ident17(schema);
+        await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
+        await pool.query(`
+      CREATE TABLE IF NOT EXISTS "${s2}".github_app_pending (
+        state      text        PRIMARY KEY,
+        company_id text,
+        data       jsonb       NOT NULL,
+        created_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL
+      )`);
+        return new _PostgresGithubAppPendingStore(pool, schema);
+      }
+      async put(entry) {
+        await this.pool.query(
+          `DELETE FROM ${this.s}.github_app_pending WHERE expires_at < $1`,
+          [new Date(entry.createdAtMs)]
+        );
+        await this.pool.query(
+          `INSERT INTO ${this.s}.github_app_pending (state, company_id, data, created_at, expires_at)
+       VALUES ($1, $2, $3::jsonb, $4, $5)
+       ON CONFLICT (state) DO UPDATE SET company_id = EXCLUDED.company_id, data = EXCLUDED.data,
+         created_at = EXCLUDED.created_at, expires_at = EXCLUDED.expires_at`,
+          [
+            entry.state,
+            entry.companyId ?? null,
+            JSON.stringify(entry.value),
+            new Date(entry.createdAtMs),
+            new Date(entry.expiresAtMs)
+          ]
+        );
+      }
+      async get(state, nowMs) {
+        if (!state) return { status: "missing" };
+        const r = await this.pool.query(
+          `SELECT company_id, data, expires_at FROM ${this.s}.github_app_pending WHERE state = $1`,
+          [state]
+        );
+        const row = r.rows[0];
+        if (!row) return { status: "missing" };
+        if (row.expires_at.getTime() < nowMs) return { status: "expired" };
+        return { status: "found", value: { ...row.company_id ? { companyId: row.company_id } : {}, value: row.data } };
+      }
+      async patch(state, fields) {
+        await this.pool.query(
+          `UPDATE ${this.s}.github_app_pending SET data = data || $2::jsonb WHERE state = $1`,
+          [state, JSON.stringify(fields)]
+        );
+      }
+    };
+    PostgresConnectorAuthSnapshotStore = class _PostgresConnectorAuthSnapshotStore {
+      constructor(pool, schema) {
+        this.pool = pool;
+        this.s = `"${ident17(schema)}"`;
+      }
+      s;
+      static async open(pool, schema = "public") {
+        const s2 = ident17(schema);
+        await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
+        await pool.query(`
+      CREATE TABLE IF NOT EXISTS "${s2}".connector_auth_snapshots (
+        company_id   text        NOT NULL,
+        actor_id     text        NOT NULL,
+        connector_id text        NOT NULL,
+        rows         jsonb       NOT NULL,
+        created_at   timestamptz NOT NULL,
+        expires_at   timestamptz NOT NULL,
+        PRIMARY KEY (company_id, actor_id, connector_id)
+      )`);
+        return new _PostgresConnectorAuthSnapshotStore(pool, schema);
+      }
+      async put(key2, rows, nowMs, expiresAtMs) {
+        await this.pool.query(`DELETE FROM ${this.s}.connector_auth_snapshots WHERE expires_at < $1`, [new Date(nowMs)]);
+        await this.pool.query(
+          `INSERT INTO ${this.s}.connector_auth_snapshots (company_id, actor_id, connector_id, rows, created_at, expires_at)
+       VALUES ($1, $2, $3, $4::jsonb, $5, $6)
+       ON CONFLICT (company_id, actor_id, connector_id) DO UPDATE SET rows = EXCLUDED.rows,
+         created_at = EXCLUDED.created_at, expires_at = EXCLUDED.expires_at`,
+          [key2.companyId, key2.actorId, key2.connectorId, JSON.stringify(rows), new Date(nowMs), new Date(expiresAtMs)]
+        );
+      }
+      async get(key2, nowMs) {
+        const r = await this.pool.query(
+          `SELECT rows, expires_at FROM ${this.s}.connector_auth_snapshots
+       WHERE company_id = $1 AND actor_id = $2 AND connector_id = $3`,
+          [key2.companyId, key2.actorId, key2.connectorId]
+        );
+        const row = r.rows[0];
+        if (!row || row.expires_at.getTime() < nowMs) return void 0;
+        return row.rows;
+      }
+      async delete(key2) {
+        await this.pool.query(
+          `DELETE FROM ${this.s}.connector_auth_snapshots WHERE company_id = $1 AND actor_id = $2 AND connector_id = $3`,
+          [key2.companyId, key2.actorId, key2.connectorId]
+        );
+      }
+    };
+  }
+});
+
 // ../storage/src/postgres-dispatches.ts
 function rowToRecord2(r) {
   return {
@@ -267672,18 +267916,18 @@ function rowToRecord2(r) {
     protocolRecoveryRound: r.protocol_recovery_round ?? null
   };
 }
-var ident17, PostgresDispatchStore;
+var ident18, PostgresDispatchStore;
 var init_postgres_dispatches = __esm({
   "../storage/src/postgres-dispatches.ts"() {
     "use strict";
-    ident17 = (schema) => schema.replace(/[^a-zA-Z0-9_]/g, "");
+    ident18 = (schema) => schema.replace(/[^a-zA-Z0-9_]/g, "");
     PostgresDispatchStore = class _PostgresDispatchStore {
       constructor(pool, s2) {
         this.pool = pool;
         this.s = s2;
       }
       static async open(pool, schema = "public") {
-        const s2 = ident17(schema);
+        const s2 = ident18(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".dispatches (
@@ -268866,14 +269110,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto77.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto78.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto77, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto78, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto77 = require("node:crypto");
+    import_node_crypto78 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -268947,7 +269191,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto78.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto79.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -269129,11 +269373,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto78, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto79, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto78 = require("node:crypto");
+    import_node_crypto79 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -269212,11 +269456,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto79, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto80, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto79 = require("node:crypto");
+    import_node_crypto80 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -269601,7 +269845,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto79.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto80.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -272411,7 +272655,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto80.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto81.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -272803,11 +273047,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto80, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto81, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto80 = require("node:crypto");
+    import_node_crypto81 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -273043,8 +273287,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key2) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto81.randomBytes)(12);
-  const cipher = (0, import_node_crypto81.createCipheriv)("aes-256-gcm", bytes(key2), iv);
+  const iv = (0, import_node_crypto82.randomBytes)(12);
+  const cipher = (0, import_node_crypto82.createCipheriv)("aes-256-gcm", bytes(key2), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -273054,7 +273298,7 @@ function openSnapshot(snapshot, key2) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto81.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto82.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -273062,11 +273306,11 @@ function openSnapshot(snapshot, key2) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto81, PREFIX3, bytes, aad2;
+var import_node_crypto82, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto81 = require("node:crypto");
+    import_node_crypto82 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key2) => {
       const value2 = Buffer.from(key2);
@@ -273114,7 +273358,7 @@ function assertRecordScope(record9, scope2) {
 function equal(left, right) {
   return JSON.stringify(left) === JSON.stringify(right);
 }
-var ident18, TABLES, TABLE_BY_KIND, PostgresKnowledgeGovernanceStore;
+var ident19, TABLES, TABLE_BY_KIND, PostgresKnowledgeGovernanceStore;
 var init_postgres_knowledge = __esm({
   "../storage/src/postgres-knowledge.ts"() {
     "use strict";
@@ -273122,7 +273366,7 @@ var init_postgres_knowledge = __esm({
     init_pg_ident();
     init_pg_sanitize();
     init_knowledge_snapshot_crypto();
-    ident18 = (value2) => {
+    ident19 = (value2) => {
       quoteIdent2(value2);
       return value2;
     };
@@ -273280,11 +273524,11 @@ var init_postgres_knowledge = __esm({
       constructor(pool, schema, snapshotKey2) {
         this.pool = pool;
         this.snapshotKey = snapshotKey2;
-        this.s = `"${ident18(schema)}"`;
+        this.s = `"${ident19(schema)}"`;
       }
       s;
       static async open(pool, schema = "public", snapshotKey2) {
-        const safe = ident18(schema);
+        const safe = ident19(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${safe}"`);
         for (const spec of TABLES) {
           await pool.query(`
@@ -273958,7 +274202,7 @@ function reportedCost(v2) {
 }
 function newUsageBackfillManifestId(now = /* @__PURE__ */ new Date()) {
   const stamp = now.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z");
-  return `ulb-${stamp}-${(0, import_node_crypto82.randomBytes)(3).toString("hex")}`;
+  return `ulb-${stamp}-${(0, import_node_crypto83.randomBytes)(3).toString("hex")}`;
 }
 async function backfillUsageLedger(ledger, opts) {
   if (!opts.dryRun && !opts.manifestId) throw new Error("execute \u9700\u8981 manifestId");
@@ -274392,11 +274636,11 @@ async function audit(c, s2, manifestId, runId, field, before, after, createdAt)
     [manifestId, runId, field, before == null ? null : JSON.stringify(before), after == null ? null : JSON.stringify(after), createdAt]
   );
 }
-var import_node_crypto82, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, emptyStep, fourOf, sameUsage, ChatRunLookup;
+var import_node_crypto83, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, emptyStep, fourOf, sameUsage, ChatRunLookup;
 var init_usage_ledger_backfill = __esm({
   "../storage/src/usage-ledger-backfill.ts"() {
     "use strict";
-    import_node_crypto82 = require("node:crypto");
+    import_node_crypto83 = require("node:crypto");
     init_src();
     init_pg_ident();
     init_postgres_trace();
@@ -274528,9 +274772,11 @@ __export(src_exports, {
   PostgresChatItemStore: () => PostgresChatItemStore,
   PostgresChatSessionStore: () => PostgresChatSessionStore,
   PostgresChatTurnStore: () => PostgresChatTurnStore,
+  PostgresConnectorAuthSnapshotStore: () => PostgresConnectorAuthSnapshotStore,
   PostgresControlPlaneStore: () => PostgresControlPlaneStore,
   PostgresDelegationStore: () => PostgresDelegationStore,
   PostgresDispatchStore: () => PostgresDispatchStore,
+  PostgresGithubAppPendingStore: () => PostgresGithubAppPendingStore,
   PostgresHumanPrefsStore: () => PostgresHumanPrefsStore,
   PostgresKnowledgeGovernanceStore: () => PostgresKnowledgeGovernanceStore,
   PostgresModelPriceStore: () => PostgresModelPriceStore,
@@ -274664,6 +274910,7 @@ var init_src10 = __esm({
     init_postgres_type_registry();
     init_postgres_actor_memory();
     init_postgres_inbox_read();
+    init_postgres_connector_auth_pending();
     init_postgres_dispatches();
     init_tenancy_inventory();
     init_tenancy_move();
@@ -275893,6 +276140,7 @@ __export(src_exports2, {
   MirrorEngine: () => MirrorEngine,
   MissingCompanyContextError: () => MissingCompanyContextError,
   NODE_HEARTBEAT_STALE_MS: () => NODE_HEARTBEAT_STALE_MS,
+  NOTIFICATIONS_CHANGED: () => NOTIFICATIONS_CHANGED,
   NPM_PROBE_TIMEOUT_MS: () => NPM_PROBE_TIMEOUT_MS,
   NdjsonOplogStore: () => NdjsonOplogStore,
   NodeHealthTracker: () => NodeHealthTracker,
@@ -276210,6 +276458,7 @@ __export(src_exports2, {
   openChatTurn: () => openChatTurn,
   openKnowledgeSnapshot: () => openKnowledgeSnapshot,
   openNewEngine: () => openNewEngine,
+  operatorCrossCompanyRead: () => operatorCrossCompanyRead,
   outputsPartProvider: () => outputsPartProvider,
   packMatches: () => packMatches,
   parentConversationTaskLines: () => parentConversationTaskLines,
@@ -276811,14 +277060,14 @@ init_src();
 var os15 = __toESM(require("node:os"));
 var path45 = __toESM(require("node:path"));
 var import_node_child_process26 = require("node:child_process");
-var import_node_crypto93 = require("node:crypto");
+var import_node_crypto94 = require("node:crypto");
 
 // ../cli/src/cli.ts
 init_src();
 var fs43 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path38 = __toESM(require("node:path"), 1);
-var import_node_crypto91 = require("node:crypto");
+var import_node_crypto92 = require("node:crypto");
 
 // ../cli/src/serve.ts
 init_src11();
@@ -276830,11 +277079,11 @@ var fs35 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto87 = require("node:crypto");
+var import_node_crypto88 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
 // ../cli/src/artifact-discovery-source.ts
-var import_node_crypto83 = require("node:crypto");
+var import_node_crypto84 = require("node:crypto");
 init_src7();
 var ArtifactDiscoverySourceUnreadableError = class extends Error {
   constructor(message) {
@@ -276864,7 +277113,7 @@ async function resolveArtifactDiscoverySourceContent(blobs, input) {
     throw new ArtifactDiscoverySourceUnreadableError(`Artifact Revision ${input.revisionId} \u7684 contentKind \u4E0D\u53D7\u652F\u6301\uFF1A${String(input.contentKind)}`);
   }
   const rootBytes = await blobs.get(input.contentRef);
-  const sourceFingerprint = (0, import_node_crypto83.createHash)("sha256").update(rootBytes).digest("hex");
+  const sourceFingerprint = (0, import_node_crypto84.createHash)("sha256").update(rootBytes).digest("hex");
   if (input.contentKind === "inline-blob") {
     const sourceContent = decodeText3(rootBytes);
     if (sourceContent === null) {
@@ -276888,7 +277137,7 @@ ${entry.text}`).join("\n\n"),
 }
 
 // ../server/src/domains/discussions/service.ts
-var import_node_crypto84 = require("node:crypto");
+var import_node_crypto85 = require("node:crypto");
 init_zod();
 init_discussions();
 init_router();
@@ -276950,7 +277199,7 @@ function remapTopics(topics, removed) {
   return [...out].map(([topic_id, summary]) => ({ topic_id, summary }));
 }
 var entryId = (projectId2, id) => JSON.stringify([projectId2, id]);
-var hash2 = (s2) => (0, import_node_crypto84.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
+var hash2 = (s2) => (0, import_node_crypto85.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
 var canonical = (s2) => s2.normalize("NFKC").trim().toLocaleLowerCase();
 function decisionFingerprint(d) {
   return hash2(JSON.stringify([d.statement, d.rationale, d.alternatives]));
@@ -277170,7 +277419,7 @@ var DiscussionService = class {
         throw new ApiError(409, "DISCUSSION_CONFLICT", "\u9879\u76EE\u8BAE\u9898\u6216\u51B3\u7B56\u5DF2\u53D8\u5316\uFF0C\u8BF7\u8BFB\u53D6\u6700\u65B0\u5185\u5BB9\u540E\u4FEE\u6B63");
       }
     }
-    const operation = (value2) => tx.put("operation", (0, import_node_crypto84.randomUUID)(), {
+    const operation = (value2) => tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
       ...value2,
       projectId: projectId2,
       actorId: ctx.actorId,
@@ -277187,7 +277436,7 @@ var DiscussionService = class {
       if (id.startsWith("new:")) {
         if (BUG_TOPIC.test(t.title.trim())) invalid("topics.title", `\u300C${t.title}\u300D\u662F\u5355\u4E2A Bug\uFF1A\u4FEE\u590D\u60C5\u51B5\u5199\u8FDB\u8BA8\u8BBA\u8BB0\u5F55\uFF0C\u5B9A\u51FA\u7684\u89C4\u5219\u6302\u5230\u5BF9\u5E94\u529F\u80FD\u8BAE\u9898\u4E0B\uFF0C\u4E0D\u6309 Bug \u53F7\u5EFA\u8BAE\u9898`);
         const existing = [...topicMap.values()].find((x2) => canonical(x2.title) === canonical(t.title));
-        id = existing?.topicId ?? `topic_${(0, import_node_crypto84.randomUUID)()}`;
+        id = existing?.topicId ?? `topic_${(0, import_node_crypto85.randomUUID)()}`;
         if (!existing) createdTopics.add(id);
       } else if (!topicMap.has(id)) invalid("topics.topic_id", `\u8BAE\u9898 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u8BAE\u9898\u4F7F\u7528 new: \u524D\u7F00`);
       topicAliases.set(t.topic_id, id);
@@ -277239,7 +277488,7 @@ var DiscussionService = class {
       if (id.startsWith("new:")) {
         const candidateKey = JSON.stringify([topicId, canonical(d.record.statement)]);
         const existing = [...decisionMap.values()].find((x2) => x2.topicId === topicId && canonical(x2.record.statement) === canonical(d.record.statement));
-        id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto84.randomUUID)()}`;
+        id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto85.randomUUID)()}`;
         candidateIds.set(candidateKey, id);
       } else if (!decisionMap.has(id)) invalid("decision_id", `\u51B3\u7B56 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u51B3\u7B56\u4F7F\u7528 new: \u524D\u7F00`);
       decisionAliases.set(d.decision_id, id);
@@ -277501,7 +277750,7 @@ var DiscussionService = class {
           ...row.value.confirmation ? { confirmation: { ...row.value.confirmation, fingerprint: decisionFingerprint(record9) } } : {}
         };
         await tx.put("decision", row.id, value2);
-        await tx.put("operation", (0, import_node_crypto84.randomUUID)(), {
+        await tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
           action: "edit",
           kind: "decision",
           projectId: projectId2,
@@ -277565,7 +277814,7 @@ var DiscussionService = class {
         if (!current || current.revision !== row.revision) throw new ApiError(409, "DISCUSSION_CONFLICT", `\u8BA8\u8BBA ${row.id} \u5DF2\u88AB\u4FEE\u6539\uFF0C\u8BF7\u8BFB\u53D6\u6700\u65B0\u5185\u5BB9\u540E\u91CD\u8BD5`);
         const summary = given.get(row.id);
         await tx.put("discussion", row.id, { ...current.value, record: { ...current.value.record, summary } });
-        await tx.put("operation", (0, import_node_crypto84.randomUUID)(), {
+        await tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
           action: "edit",
           kind: "discussion",
           projectId: current.value.record.project_id,
@@ -277581,7 +277830,7 @@ var DiscussionService = class {
     });
   }
   async operation(tx, actorId, kind, id, from, to) {
-    await tx.put("operation", (0, import_node_crypto84.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
+    await tx.put("operation", (0, import_node_crypto85.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
   }
 };
 function pickDiscussionContent(d) {
@@ -277881,7 +278130,7 @@ var DiscussionContext = class {
 };
 
 // ../server/src/domains/discussions/worker.ts
-var import_node_crypto85 = require("node:crypto");
+var import_node_crypto86 = require("node:crypto");
 var DISCUSSION_IDLE_MS = 15 * 6e4;
 var DISCUSSION_MAX_CORRECTIONS = 3;
 var DISCUSSION_LEASE_MS = 2 * 6e4;
@@ -277907,7 +278156,7 @@ var DiscussionWorker = class {
     if (await this.isReplying(sessionId)) return false;
     const cutoff = eligibleCutoff(await this.service.chat.listMessages(sessionId), this.service.now());
     if (!cutoff) return false;
-    const owner = (0, import_node_crypto85.randomUUID)();
+    const owner = (0, import_node_crypto86.randomUUID)();
     const claimed = await this.service.store.transaction(async (tx) => {
       const old = (await tx.get("job", sessionId))?.value;
       if (old?.status === "running" && (old.leaseUntil ?? 0) > this.service.now()) return null;
@@ -278629,7 +278878,7 @@ function createDiscussionRuntime(options) {
 }
 
 // ../server/src/domains/discussions/store.ts
-var import_node_crypto86 = require("node:crypto");
+var import_node_crypto87 = require("node:crypto");
 var import_promises17 = require("node:fs/promises");
 var import_node_path27 = require("node:path");
 var key = (kind, id) => JSON.stringify([kind, id]);
@@ -278674,7 +278923,7 @@ var MemoryDiscussionStore = class _MemoryDiscussionStore {
       if (changed) {
         if (this.filename) {
           await (0, import_promises17.mkdir)((0, import_node_path27.dirname)(this.filename), { recursive: true });
-          const temp = `${this.filename}.${(0, import_node_crypto86.randomUUID)()}.tmp`;
+          const temp = `${this.filename}.${(0, import_node_crypto87.randomUUID)()}.tmp`;
           await (0, import_promises17.writeFile)(temp, JSON.stringify(next), "utf8");
           await (0, import_promises17.rename)(temp, this.filename);
         }
@@ -279623,7 +279872,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path29.join(repoRoot, "node_modules/.bin/tsx");
   const main = path29.join(repoRoot, "packages/cli/src/main.ts");
-  const key2 = (0, import_node_crypto87.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key2 = (0, import_node_crypto88.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path29.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key2}`);
   let dir;
@@ -280016,7 +280265,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto87.randomUUID)();
+    const requestId = (0, import_node_crypto88.randomUUID)();
     const task = new Promise((resolve12) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -280817,7 +281066,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto87.randomUUID)(),
+                id: (0, import_node_crypto88.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -280863,7 +281112,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto87.randomUUID)();
+        const sessionId = (0, import_node_crypto88.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -281056,7 +281305,8 @@ async function startServe(opts) {
     })();
   }
   await syncRegistryRolesToKernel(registryStore, defaultCompanyKernel);
-  const resolveCompanyContext = async (actor, headers, pathname) => {
+  const operatorScopesOf = (authorization) => authorization.startsWith("Bearer ") ? issuer.resolveClaims(authorization.slice("Bearer ".length))?.scopes : void 0;
+  const resolveCompanyContext = async (actor, headers, pathname, method) => {
     if (isCompanyCrossTenantPath(pathname)) {
       return { kind: "exempt" };
     }
@@ -281079,7 +281329,11 @@ async function startServe(opts) {
     }
     const ctx = await companies.service.resolveCurrentCompany(me.accountId, selector);
     if (!ctx) return { kind: "not-found", ...selector !== void 0 ? { selector } : {} };
-    return ctx.isMember ? { kind: "ok", companyId: ctx.company.id } : { kind: "forbidden" };
+    if (ctx.isMember) return { kind: "ok", companyId: ctx.company.id };
+    if (operatorCrossCompanyRead({ scopes: operatorScopesOf(authz) }, method)) {
+      return { kind: "ok", companyId: ctx.company.id };
+    }
+    return { kind: "forbidden" };
   };
   const resolveActor = (token) => issuer.resolve(token) ?? (opts.allowSimpleTokens && token.startsWith("token:") ? token.slice("token:".length) : null);
   const AGENT_PRINCIPAL_CACHE_MAX = 4096;
@@ -281625,9 +281879,9 @@ async function startServe(opts) {
     return engine2;
   };
   const liveKernels = () => engineRouter.liveEngines().map((e) => e.kernel);
-  const countRoleHolders = async (role) => (await roleHolders()).filter((a) => a.status !== "disabled" && a.roles?.includes(role)).length;
-  const roleHolders = async () => {
-    const employees = await registryStore.listActors();
+  const countRoleHolders = async (role, companyId) => (await roleHolders(companyId)).filter((a) => a.status !== "disabled" && a.roles?.includes(role)).length;
+  const roleHolders = async (companyId) => {
+    const employees = await (await actors.resolveCtx(companyId ?? defaultCompanyId)).service.listActors();
     const ids2 = new Set(employees.map((a) => a.id));
     const systemActors = kernelRegistry.filter((e) => !ids2.has(e.actor)).map((e) => ({ id: e.actor, roles: e.roles, status: "active" }));
     return [...employees, ...systemActors];
@@ -282163,6 +282417,11 @@ async function startServe(opts) {
     // CO-301 阶段1：请求热路径按当前公司经路由层取引擎（恒等到默认公司；per-company 懒建是后续阶段）。
     resolveEngine: (companyId) => getEngine(companyId ?? defaultCompanyId),
     actors,
+    // Bug 0246：GitHub App 待回调登记与重连快照落共享 schema——服务器重启 / 换副本都读得到。
+    connectorAuthPending: {
+      githubApp: await PostgresGithubAppPendingStore.open(pgPool, sharedSchema),
+      snapshots: await PostgresConnectorAuthSnapshotStore.open(pgPool, sharedSchema)
+    },
     port: opts.port ?? 7320,
     projectState: projectStateStore,
     artifactState: artifactStateStore,
@@ -282213,7 +282472,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto87.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto88.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -282302,7 +282561,7 @@ async function startServe(opts) {
               await rebuildLiveSchema();
               for (const d of schema) engine2.kernel.setType(d);
             },
-            countRoleHolders,
+            (role) => countRoleHolders(role, cid),
             registryAudit
           );
         }
@@ -282441,9 +282700,9 @@ async function startServe(opts) {
         // store（`public.actor_bindings`），org-registry cutover 之后它是冻结旧镜像——只留给
         // 本域其它老读口，工作区定位一律不许再用它。
         resolveBinding: resolveCompanyBinding,
-        /* ADR 0613：建会话 / 「恢复为员工默认运行配置」这两下要读员工详情页配的型号，按**当前公司**读
+        /* ADR 0613：建会话那一下要读员工详情页配的型号，按**当前公司**读
            （与 `resolveBinding` 同一条理由：全局 `registry` 对已切 `actor-config` 的公司是冻结旧镜像）。
-           ⚠ 只有这两下读它；解析每一轮的模型依旧不读员工配置（ADR 0610 D1）。 */
+           ⚠ 只有这一下读它；解析每一轮的模型依旧不读员工配置（ADR 0610 D1）。 */
         resolveActorModel: resolveAgentConfiguredModel,
         // 按 runId 路由：切换后新会话的事件落在本公司库里，共享 store 会一条都补不出 parts。
         // ⚠ `runRoutedTrace` 声明在本行**之后**：包成箭头函数避 TDZ（本域只需要 listEvents）。
@@ -282531,6 +282790,8 @@ async function startServe(opts) {
         // live 注册表算 `frameCursor`。与 server.ts 的双写解析同一层，与 attach 路径共享 registry。
         resolveChatItems: (companyId) => chatItemsFor(companyId),
         liveChat,
+        // ADR 0615 B3：快照读口给 serve 重启留下的孤儿插话落结论时问节点——与 `/append` 同一条网关。
+        confirmInputReceipt: (ref2) => chatRemoteAdapter ? chatRemoteAdapter.confirmInputReceipt(ref2.nodeId, ref2.dispatchId, ref2.runtimeKey) : Promise.resolve({ status: "unknown", reason: "node-gateway-not-ready" }),
         // ADR-0587：列表行派生 `unread`，与 collab 域收件箱读同一份按公司的水位（无 PG 时闭包自己回落单实例）。
         resolveReadMarkers: readMarkerStoreFor,
         // ADR 0610 D4：`GET /api/chat-sessions/:id/usage` 的取数口——**与 collab 域是同一个实例**，
@@ -283134,8 +283395,6 @@ async function startServe(opts) {
     discussSessions: new FileSideMap(path29.join(opts.dir, "discuss-sessions.json")),
     escalateDiscussRetain: new FileSideMap(path29.join(opts.dir, "escalate-discuss-retain.json")),
     // 切片 2b：代署 escalate 发起会话保留（落盘）
-    // Bug 0107：插入结果读口结算孤儿插入行（serve 在途中重启）时问节点——走 chat 那条网关。
-    confirmInputReceipt: (ref2) => chatRemoteAdapter ? chatRemoteAdapter.confirmInputReceipt(ref2.nodeId, ref2.dispatchId, ref2.runtimeKey) : Promise.resolve({ status: "unknown", reason: "node-gateway-not-ready" }),
     dispatchChat: automationDispatchChat = async (chatReq) => {
       const dispatchChatImpl = async ({ actorId, message, dispatchId: requestDispatchId, admitDispatch, executionProfile, knowledgeAttemptKind, requiredConnectorSlugs, env: requestEnv, sessionId, chatSessionId, chatTurnId, attachments, workspace, companyId, model: sessionModelOverride, parentConversationSnapshot, extraSystemPrompt, delegatedChildTurn, workspaceBundle }) => {
         const isolatedKnowledgeTurn = executionProfile === "knowledge-single-turn";
@@ -283158,10 +283417,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto87.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto88.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? stableChatTraceRunId(requestDispatchId) : `chat-run:${(0, import_node_crypto87.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto87.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? stableChatTraceRunId(requestDispatchId) : `chat-run:${(0, import_node_crypto88.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto88.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           if (isHumanSubmitDispatchId(requestDispatchId)) {
@@ -284611,7 +284870,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = opts2?.protocolRecovery?.dispatchId ?? `dispatch:${(0, import_node_crypto87.randomUUID)()}`;
+          const ledgerId = opts2?.protocolRecovery?.dispatchId ?? `dispatch:${(0, import_node_crypto88.randomUUID)()}`;
           try {
             const inserted = await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -284711,7 +284970,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto87.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto88.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -285105,7 +285364,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto87.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto88.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -285832,7 +286091,9 @@ async function startServe(opts) {
           slaMs: humanMs
         };
       },
-      log: (message) => console.warn(message)
+      log: (message) => console.warn(message),
+      // 新进了通知就推给收件人本人（/api/events?topics=notifications）：铃铛角标与页内提示不等 30 秒轮询。
+      onNotified: (_companyId, recipients) => auditSink.notifyNotificationsChanged(recipients)
     });
     notificationLedgerWorker = worker;
     const ledgerSubscribed = /* @__PURE__ */ new Set();
@@ -287763,7 +288024,7 @@ var RuntimeQuotaMonitor = class {
 init_wrapper();
 init_src();
 var import_node_os11 = require("node:os");
-var import_node_crypto88 = require("node:crypto");
+var import_node_crypto89 = require("node:crypto");
 init_src8();
 init_src2();
 
@@ -288660,7 +288921,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto88.randomUUID)();
+    const requestId = (0, import_node_crypto89.randomUUID)();
     return new Promise((resolve12, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -289071,7 +289332,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process23 = require("node:child_process");
 var import_node_fs24 = require("node:fs");
-var import_node_crypto89 = require("node:crypto");
+var import_node_crypto90 = require("node:crypto");
 var import_node_os14 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -289137,7 +289398,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto89.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto90.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -291009,13 +291270,13 @@ function ownFlagsFromDecl(command2) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto90 = require("node:crypto");
+var import_node_crypto91 = require("node:crypto");
 var import_node_child_process24 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical2 = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto90.createHash)("sha256").update(canonical2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto91.createHash)("sha256").update(canonical2).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -291570,7 +291831,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto91.randomUUID)();
+  const waiterId = (0, import_node_crypto92.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -291654,7 +291915,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.77" ? "2.2.77" : "dev";
+var CLI_VERSION = "2.2.78" ? "2.2.78" : "dev";
 function apiHeaders(token, company) {
   const headers = {
     authorization: `Bearer ${token}`,
@@ -292020,7 +292281,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path38.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto91.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto92.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -293159,7 +293420,7 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
         const slug6 = flags.get("slug");
-        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto91.randomUUID)());
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto92.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -295424,13 +295685,13 @@ function runtimeAssetSourceRoots(input) {
 }
 
 // src/install.ts
-var import_node_crypto92 = require("node:crypto");
+var import_node_crypto93 = require("node:crypto");
 var fs49 = __toESM(require("node:fs"));
 var path44 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto92.createHash)("sha256").update(fs49.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto93.createHash)("sha256").update(fs49.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -295553,7 +295814,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.77" : "dev";
+var PKG_VERSION = true ? "2.2.78" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -295861,7 +296122,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto93.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto94.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }