npm - oasis_test_v2 - Versions diffs - 2.2.77 → 2.2.79 - Mend

oasis_test_v2 2.2.77 → 2.2.79

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/index.js +1126 -717
package/package.json +2 -2

package/dist/index.js CHANGED Viewed

@@ -455,6 +455,13 @@ var init_inbox_read = __esm({
   }
 });
+// ../contract/src/connector-auth-pending.ts
+var init_connector_auth_pending = __esm({
+  "../contract/src/connector-auth-pending.ts"() {
+    "use strict";
+  }
+});
 // ../contract/src/notifications.ts
 var LEDGER_INBOX_KINDS;
 var init_notifications = __esm({
@@ -1047,12 +1054,13 @@ function sanitizeRuntimeQuotas(value2, now = Date.now()) {
   }
   return result;
 }
-var RUNTIME_QUOTA_POLL_MS, RUNTIME_QUOTA_STALE_MS, statuses;
+var RUNTIME_QUOTA_POLL_MS, RUNTIME_QUOTA_STALE_MS, RUNTIME_QUOTA_REFRESH_MIN_GAP_MS, statuses;
 var init_runtime_quota = __esm({
   "../contract/src/runtime-quota.ts"() {
     "use strict";
     RUNTIME_QUOTA_POLL_MS = 5 * 6e4;
     RUNTIME_QUOTA_STALE_MS = 2 * RUNTIME_QUOTA_POLL_MS;
+    RUNTIME_QUOTA_REFRESH_MIN_GAP_MS = 3e4;
     statuses = /* @__PURE__ */ new Set(["ok", "unavailable", "unauthenticated", "unsupported", "error", "rate_limited"]);
   }
 });
@@ -2277,6 +2285,7 @@ var init_src = __esm({
     init_annotation();
     init_collab_view();
     init_inbox_read();
+    init_connector_auth_pending();
     init_notifications();
     init_workorder_quality();
     init_workorder_attachments();
@@ -2562,7 +2571,7 @@ var init_session_runtime_target = __esm({
         this.name = "SessionRuntimeOverrideError";
       }
     };
-    CLEAR_SESSION_RUNTIME_HINT = "\u5728\u8FD0\u884C\u65F6\u9009\u62E9\u91CC\u70B9\u300C\u6062\u590D\u4E3A\u5458\u5DE5\u9ED8\u8BA4\u8FD0\u884C\u914D\u7F6E\u300D\u5373\u53EF\u7EE7\u7EED\uFF08\u4F1A\u628A\u8FD9\u4F4D Agent \u6B64\u523B\u7684\u9ED8\u8BA4\u914D\u7F6E\u6284\u8FDB\u8FD9\u6761\u4F1A\u8BDD\uFF09\u3002";
+    CLEAR_SESSION_RUNTIME_HINT = "\u5728\u8F93\u5165\u6846\u5E95\u90E8\u7684\u8FD0\u884C\u65F6\u9009\u62E9\u91CC\u6362\u4E00\u53F0\u53EF\u7528\u7684\u670D\u52A1\u5668\u6216\u8FD0\u884C\u65F6\u5373\u53EF\u7EE7\u7EED\uFF08\u5458\u5DE5\u81EA\u5DF1\u7684\u90A3\u4E00\u5957\u6807\u7740\u300C\u5F53\u524D\u5458\u5DE5\u6240\u5728\u670D\u52A1\u5668\u300D\u300C\u5F53\u524D\u5458\u5DE5\u8FD0\u884C\u65F6\u300D\uFF09\u3002";
   }
 });
@@ -164597,7 +164606,7 @@ var init_initialize_workorder = __esm({
 function hasRejectionEvidence(reason) {
   return DEFINITELY_NOT_DELIVERED.has(reason ?? "");
 }
-var DEFINITELY_NOT_DELIVERED, INSERT_UNCERTAIN_NOTE;
+var DEFINITELY_NOT_DELIVERED, INSERT_UNCERTAIN_NOTE, INSERT_RETURNED_NOTE;
 var init_chat_insert_evidence = __esm({
   "../server/src/chat-insert-evidence.ts"() {
     "use strict";
@@ -164611,6 +164620,7 @@ var init_chat_insert_evidence = __esm({
       "not-consumed"
     ]);
     INSERT_UNCERTAIN_NOTE = "\u8FD9\u6B21\u63D2\u5165\u7ED3\u679C\u4E0D\u786E\u5B9A\uFF1A\u65E0\u6CD5\u786E\u8BA4 agent \u662F\u5426\u5DF2\u8BFB\u5230\u3002";
+    INSERT_RETURNED_NOTE = "\u8FD9\u53E5\u8BDD\u6CA1\u6709\u4EA4\u5230 agent \u624B\u4E0A\uFF1A\u63D2\u8BDD\u65F6\u9875\u9762\u5DF2\u5237\u65B0\u6216\u5173\u95ED\uFF0C\u6CA1\u80FD\u5728\u672C\u8F6E\u7ED3\u675F\u540E\u81EA\u52A8\u53D1\u51FA\u3002";
   }
 });
@@ -165880,14 +165890,15 @@ async function appendNowThroughQueue(chatSessionId, text7, deps, clientKey, atta
   if (!batch.length) {
     const state = submitted.state ?? "queued";
     const returned = state === "cancelled" && submitted.stateReason?.startsWith("client-retained:");
+    const landed = state === "cancelled" && submitted.stateReason?.startsWith("client-gone:");
     const reason = state === "delivering" ? "in-flight" : returned ? submitted.stateReason.slice("client-retained:".length) : "unconfirmed";
     return {
       accepted: state === "delivered",
       ...state !== "delivered" ? { reason } : {},
-      queued: !returned,
+      queued: !returned && !landed,
       delivered: "",
       batch: [submitted],
-      insertStatus: insertStatusOfRow(submitted)
+      insertStatus: landed ? "uncertain" : insertStatusOfRow(submitted)
     };
   }
   const prepared = await buildChatAttachmentFiles(
@@ -165909,8 +165920,13 @@ async function appendNowThroughQueue(chatSessionId, text7, deps, clientKey, atta
   const recordOutcome = async (res) => {
     const nextState = res.accepted ? "delivered" : hasRejectionEvidence(res.reason) ? "queued" : "unconfirmed";
     const stateReason = res.detail ? `${res.reason ?? (res.accepted ? "delivered" : "")}:${res.detail}` : res.reason;
-    const returnToClient = retainLocallyOnFailure && !!clientKey && nextState === "queued";
-    if (returnToClient && deps.store.markPendingMessages) {
+    const wantsReturn = retainLocallyOnFailure && !!clientKey && nextState === "queued";
+    const orphanedReturn = wantsReturn && deps.clientAttached?.() === false;
+    const returnToClient = wantsReturn && !orphanedReturn;
+    if (orphanedReturn && deps.store.markPendingMessages) {
+      await deps.store.markPendingMessages(chatSessionId, [submitted.id], "cancelled", `client-gone:${res.reason}`);
+      await deps.store.markPendingMessages(chatSessionId, ids2.filter((id) => id !== submitted.id), nextState, stateReason);
+    } else if (returnToClient && deps.store.markPendingMessages) {
       await deps.store.markPendingMessages(chatSessionId, [submitted.id], "cancelled", `client-retained:${res.reason}`);
       await deps.store.markPendingMessages(chatSessionId, ids2.filter((id) => id !== submitted.id), nextState, stateReason);
     } else {
@@ -165920,7 +165936,15 @@ async function appendNowThroughQueue(chatSessionId, text7, deps, clientKey, atta
       if (returnToClient) await deps.store.removePendingMessage(chatSessionId, submitted.id);
     }
     const insertStatus = nextState === "delivered" ? "inserted" : nextState === "unconfirmed" ? "uncertain" : "not-inserted";
-    return { ...res, queued: !returnToClient, delivered: merged, batch, insertStatus, ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {} };
+    return {
+      ...res,
+      queued: !returnToClient && !orphanedReturn,
+      delivered: merged,
+      batch,
+      insertStatus,
+      ...orphanedReturn ? { orphanedReturn: true } : {},
+      ...prepared.paths.length ? { attachmentPaths: prepared.paths } : {}
+    };
   };
   let settle;
   const settled = new Promise((resolve12) => {
@@ -165954,82 +165978,6 @@ var init_append_now = __esm({
   }
 });
-// ../server/src/domains/chat-sessions/insert-status.ts
-async function resolveInsertStatus(deps, chatSessionId, clientKey) {
-  const id = insertRequestId(chatSessionId, clientKey);
-  if (!deps.store.getPendingMessage) return { status: "uncertain" };
-  let row = await deps.store.getPendingMessage(chatSessionId, id);
-  if (row?.state !== "delivering") return { status: insertStatusOfRow(row) };
-  if (deps.isTurnRunning(chatSessionId)) return { status: "in-flight" };
-  if (isInsertInflight(id)) {
-    await waitForInflightInsert(id, deps.settleWaitMs ?? 1e4);
-    row = await deps.store.getPendingMessage(chatSessionId, id);
-    return { status: insertStatusOfRow(row) };
-  }
-  const running = settlingOrphans.get(id);
-  if (running) return running;
-  const settling = settleOrphan(deps, chatSessionId, row).finally(() => {
-    settlingOrphans.delete(id);
-  });
-  settlingOrphans.set(id, settling);
-  return settling;
-}
-async function settleOrphan(deps, chatSessionId, row) {
-  const ref2 = row.deliveryRef;
-  const answer = ref2?.nodeId && ref2.dispatchId && deps.confirm ? await deps.confirm({ nodeId: ref2.nodeId, dispatchId: ref2.dispatchId, runtimeKey: ref2.runtimeKey }).catch(() => ({ status: "unknown", reason: "query-failed" })) : { status: "unknown", reason: ref2 ? "no-node" : "no-delivery-ref" };
-  const trace = ref2 && deps.store.listPendingTrace ? await deps.store.listPendingTrace(chatSessionId).catch(() => []) : [];
-  const batch = trace.filter((r) => r.state === "delivering" && r.deliveryRef?.runtimeKey === ref2?.runtimeKey);
-  if (!batch.some((r) => r.id === row.id)) batch.push(row);
-  const ids2 = batch.map((r) => r.id);
-  deps.log?.(`[chat-insert] \u5B64\u513F\u63D2\u5165\u7ED3\u7B97 sid=${chatSessionId} row=${row.id} \u2192 ${answer.status}${answer.reason ? `(${answer.reason})` : ""}`);
-  if (answer.status === "consumed") {
-    await backfill(deps, chatSessionId, batch, row).catch((err) => {
-      deps.log?.(`[chat-insert] \u8865\u884C\u5931\u8D25\uFF08\u4ECD\u6309\u5DF2\u63D2\u5165\u5904\u7406\uFF0Cruntime \u786E\u5B9E\u8BFB\u5230\u4E86\uFF09sid=${chatSessionId}: ${String(err)}`);
-    });
-    await deps.store.markPendingMessages?.(chatSessionId, ids2, "delivered", "delivered:node-confirmed-orphan");
-    return { status: "inserted" };
-  }
-  if (answer.status === "not-consumed") {
-    await deps.store.markPendingMessages?.(chatSessionId, [row.id], "cancelled", "client-retained:not-consumed");
-    const rest = ids2.filter((x2) => x2 !== row.id);
-    if (rest.length) await deps.store.markPendingMessages?.(chatSessionId, rest, "queued", `not-consumed:${answer.reason ?? ""}`);
-    return { status: "not-inserted" };
-  }
-  await deps.store.markPendingMessages?.(chatSessionId, ids2, "unconfirmed", `unconfirmed:${answer.reason ?? "unknown"}`);
-  return { status: "uncertain" };
-}
-async function backfill(deps, chatSessionId, batch, row) {
-  if (!deps.items) return;
-  const ref2 = row.deliveryRef;
-  const sorted = [...batch].sort((a, b2) => a.seq - b2.seq);
-  const ledger = new ChatItemLedger({
-    items: deps.items,
-    versionSeed: await deps.items.sessionVersionCursor(chatSessionId).catch(() => 0),
-    sessionId: chatSessionId,
-    turnId: ref2?.turnId ?? `insert-backfill:${row.id}`,
-    ...deps.log ? { log: deps.log } : {}
-  });
-  const text7 = sorted.map((m2) => m2.text).filter(Boolean).join("\n\n");
-  const attachments = sorted.flatMap((m2) => (m2.attachments ?? []).map((a) => ({
-    name: a.name,
-    ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
-    ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
-  })));
-  const clientKeys = sorted.map((m2) => m2.clientKey).filter((k2) => !!k2);
-  ledger.recordUserInput(text7, attachments, clientKeys, ref2?.ord !== void 0 ? { ord: ref2.ord } : void 0);
-  await ledger.drain();
-  if (ledger.failures > 0) throw new Error("chat_items \u5199\u5165\u5931\u8D25");
-}
-var settlingOrphans;
-var init_insert_status = __esm({
-  "../server/src/domains/chat-sessions/insert-status.ts"() {
-    "use strict";
-    init_chat_item_ledger();
-    init_append_now();
-    settlingOrphans = /* @__PURE__ */ new Map();
-  }
-});
 // ../server/src/domains/chat-sessions/append-progress.ts
 function wantsAppendProgress(req) {
   const accept = req.headers.accept;
@@ -169950,6 +169898,15 @@ async function probeChatSubmission(args) {
     }
   }
   const base = { persisted: message !== null, attempts: attempt };
+  if (!lastTurn && chatStore?.getPendingMessage) {
+    const insert = await read("message", () => chatStore.getPendingMessage(sid, insertRequestId(sid, csid)));
+    if (insert?.clientKey === csid) {
+      const landed = insert.state === "unconfirmed" || insert.state === "cancelled" && (insert.stateReason ?? "").startsWith("client-gone:");
+      if (insert.state === "delivered") return { status: { state: "delivered", persisted: true, attempts: attempt, retryable: false }, nextAttempt: attempt, message, lastTurn };
+      if (insert.state === "delivering") return { status: { state: "pending", ...base, retryable: false }, nextAttempt: attempt, message, lastTurn };
+      if (landed) return { status: { state: "not_delivered", ...base, retryable: true }, nextAttempt: attempt, message, lastTurn };
+    }
+  }
   let status;
   if (!turns) {
     if (message && messageDelivered(message)) status = { state: "delivered", ...base, retryable: false };
@@ -170067,6 +170024,7 @@ var init_chat_submission = __esm({
     init_src();
     init_chat_turn_gate();
     init_stable_chat_dispatch_ids();
+    init_append_now();
     MAX_SUBMIT_ATTEMPTS = 20;
     LEGACY_LOOKBACK_MESSAGES = 200;
     LEGACY_LATER_TURNS_LIMIT = 50;
@@ -170088,6 +170046,56 @@ var init_chat_submission = __esm({
   }
 });
+// ../server/src/domains/chat-sessions/insert-undelivered.ts
+async function landUndeliveredInsert(input) {
+  const { store, itemStore, chatSessionId: sid, clientKey, text: text7, note } = input;
+  const log3 = input.log ?? ((m2) => console.warn(m2));
+  try {
+    if (!itemStore || !chatItemsDoubleWriteEnabled()) return;
+    const ledger = new ChatItemLedger({
+      items: itemStore,
+      versionSeed: await itemStore.sessionVersionCursor(sid).catch(() => 0),
+      sessionId: sid,
+      turnId: fallbackTurnId(),
+      log: log3
+    });
+    const refs = input.attachments.map((a) => ({
+      name: a.name,
+      ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
+      ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
+    }));
+    ledger.recordRejectedSubmission({
+      user: { text: text7, clientSubmitId: clientKey, ...refs.length ? { attachments: refs } : {} },
+      failure: { reason: note, retryable: true }
+    });
+    await ledger.drain();
+    if (ledger.failures > 0) return;
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    await store.appendMessage({
+      id: (0, import_node_crypto26.randomUUID)(),
+      sessionId: sid,
+      role: "user",
+      content: text7,
+      createdAt: now,
+      messageKey: chatSubmitMessageKey(sid, clientKey),
+      ...refs.length ? { attachments: refs } : {},
+      needsAgentDelivery: true
+    });
+    await store.updateSession(sid, { touchedAt: now }).catch(() => void 0);
+  } catch (err) {
+    log3(`[chat] \u63D2\u8BDD\u6CA1\u4EA4\u5230 agent \u624B\u4E0A\u3001\u843D\u672A\u9001\u8FBE user \u884C\u5931\u8D25\uFF08session=${sid} key=${clientKey}\uFF09: ${String(err)}`);
+  }
+}
+var import_node_crypto26;
+var init_insert_undelivered = __esm({
+  "../server/src/domains/chat-sessions/insert-undelivered.ts"() {
+    "use strict";
+    import_node_crypto26 = require("node:crypto");
+    init_src();
+    init_chat_item_ledger();
+  }
+});
 // ../server/src/chat-workorder-files.ts
 function workOrderFileEditTarget(workOrderId, file) {
   if (!isEditableFileName(file.name)) return null;
@@ -170097,7 +170105,7 @@ function workOrderFileEditTarget(workOrderId, file) {
   return { kind: "work-order-file", workOrderId, fileId: file.fileId, name: file.name };
 }
 function workOrderFileId(workOrderId, blobId, name) {
-  return `wof:${(0, import_node_crypto26.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
+  return `wof:${(0, import_node_crypto27.createHash)("sha256").update(`${workOrderId}|${blobId}|${name}`).digest("hex").slice(0, 32)}`;
 }
 async function linkChatAttachmentsToWorkOrder(input) {
   const warnings = [];
@@ -170148,11 +170156,11 @@ async function linkChatAttachmentsToWorkOrder(input) {
   }
   return { linked, warnings };
 }
-var import_node_crypto26;
+var import_node_crypto27;
 var init_chat_workorder_files = __esm({
   "../server/src/chat-workorder-files.ts"() {
     "use strict";
-    import_node_crypto26 = require("node:crypto");
+    import_node_crypto27 = require("node:crypto");
     init_src();
   }
 });
@@ -170943,11 +170951,11 @@ var init_config_store = __esm({
 function clone2(value2) {
   return structuredClone(value2);
 }
-var import_node_crypto27, import_promises3, import_node_path6, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
+var import_node_crypto28, import_promises3, import_node_path6, MemoryKnowledgeRunStore, FileKnowledgeRunStore;
 var init_run_store = __esm({
   "../server/src/domains/knowledge/run-store.ts"() {
     "use strict";
-    import_node_crypto27 = require("node:crypto");
+    import_node_crypto28 = require("node:crypto");
     import_promises3 = require("node:fs/promises");
     import_node_path6 = require("node:path");
     MemoryKnowledgeRunStore = class {
@@ -171064,7 +171072,7 @@ var init_run_store = __esm({
       }
       async persist(runs) {
         const shape = { version: 1, runs };
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto27.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto28.randomUUID)()}.tmp`;
         try {
           await (0, import_promises3.writeFile)(temp, `${JSON.stringify(shape, null, 2)}
 `, { mode: 384 });
@@ -171713,12 +171721,12 @@ function retryableKnowledgeRun(record9) {
   const latestAnswerAttempt = [...record9.attempts ?? []].reverse().find((attempt) => attempt.kind !== "fast");
   return record9.status === "succeeded" && record9.request.action === "ask" && record9.executionHealth === "degraded" && latestAnswerAttempt?.status === "failed";
 }
-var import_node_crypto28, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
+var import_node_crypto29, ACTION_LABEL, STATUS_MARKER, FINAL_ANSWER_MARKER, ACTIVE_STATUSES, RETRYABLE_STATUSES, HEARTBEAT_INTERVAL_MS, LEASE_MS, MAX_CONCURRENT_READS, ACTION_FLOW, KnowledgeService;
 var init_service2 = __esm({
   "../server/src/domains/knowledge/service.ts"() {
     "use strict";
     init_file_limits2();
-    import_node_crypto28 = require("node:crypto");
+    import_node_crypto29 = require("node:crypto");
     init_src7();
     init_config_store();
     init_run_store();
@@ -171761,7 +171769,7 @@ var init_service2 = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-        this.id = options.id ?? import_node_crypto28.randomUUID;
+        this.id = options.id ?? import_node_crypto29.randomUUID;
         this.runStore = options.runStore ?? new MemoryKnowledgeRunStore();
         this.heartbeatIntervalMs = options.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
         this.leaseMs = options.leaseMs ?? LEASE_MS;
@@ -182712,7 +182720,7 @@ function stableJson2(value2) {
   return JSON.stringify(stableValue(value2));
 }
 function sha256(value2) {
-  return (0, import_node_crypto29.createHash)("sha256").update(value2).digest("hex");
+  return (0, import_node_crypto30.createHash)("sha256").update(value2).digest("hex");
 }
 function normalizeKnowledgeContent(title, content3) {
   const body2 = content3.normalize("NFC").replace(/\r\n?/gu, "\n").replace(PUBLISH_MARKER, "\n").split("\n").map((line2) => line2.replace(/[\t ]+$/gu, "")).join("\n").replace(/\n{3,}/gu, "\n\n").trim();
@@ -182954,11 +182962,11 @@ function renderUntrustedKnowledgeFragment(input) {
     "</knowledge>"
   ].join("\n");
 }
-var import_node_crypto29, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
+var import_node_crypto30, KNOWLEDGE_NORMALIZER_VERSION, KNOWLEDGE_PACK_TEMPLATE_VERSION, PUBLISH_MARKER, STOPWORDS, LEXICAL_STOPWORDS, lexicalSegmenters, KNOWLEDGE_LEXICAL_INDEX_VERSION, KNOWLEDGE_MAINTENANCE_RELEVANCE_THRESHOLD, KNOWLEDGE_LAYOUT_TERMS;
 var init_governance_content = __esm({
   "../server/src/domains/knowledge/governance-content.ts"() {
     "use strict";
-    import_node_crypto29 = require("node:crypto");
+    import_node_crypto30 = require("node:crypto");
     init_mdast_util_from_markdown();
     init_mdast_util_gfm();
     init_micromark_extension_gfm();
@@ -193125,11 +193133,11 @@ function approvedSnapshotBody(title, content3) {
 function uniqueStrings(values) {
   return [...new Set(values)].sort();
 }
-var import_node_crypto30, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
+var import_node_crypto31, KnowledgeGovernanceError, put2, REMEDIATION_ACTION_BY_TASK, KnowledgeGovernanceService;
 var init_governance_service = __esm({
   "../server/src/domains/knowledge/governance-service.ts"() {
     "use strict";
-    import_node_crypto30 = require("node:crypto");
+    import_node_crypto31 = require("node:crypto");
     init_governance_content();
     init_knowledge_policy();
     init_network_maintenance();
@@ -193151,7 +193159,7 @@ var init_governance_service = __esm({
       constructor(options) {
         this.options = options;
         this.now = options.now ?? (() => /* @__PURE__ */ new Date());
-        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto30.randomUUID)()}`);
+        this.id = options.id ?? ((prefix) => `${prefix}_${(0, import_node_crypto31.randomUUID)()}`);
         this.versionViewBaseUrl = (options.versionViewBaseUrl ?? "/api/knowledge/items").replace(/\/$/u, "");
         this.projectProvisionRetryDelayMs = Math.max(0, options.projectProvisionRetryDelayMs ?? 6e4);
         this.projectProvisionMaxRetryDelayMs = Math.max(this.projectProvisionRetryDelayMs, options.projectProvisionMaxRetryDelayMs ?? 36e5);
@@ -198842,7 +198850,7 @@ function trustedKnowledgeInvocationId(body2, turn) {
   if (body2.action !== "ask") return void 0;
   const scope2 = turn?.artifactId ?? turn?.dispatchId;
   if (!scope2) return void 0;
-  const fingerprint2 = (0, import_node_crypto31.createHash)("sha256").update(JSON.stringify({
+  const fingerprint2 = (0, import_node_crypto32.createHash)("sha256").update(JSON.stringify({
     action: body2.action,
     message: body2.message?.trim() ?? "",
     queryMode: body2.queryMode === "deep" ? "deep" : "fast",
@@ -198997,11 +199005,11 @@ function knowledgeRoutes(service, options = {}) {
     });
   };
 }
-var import_node_crypto31, KNOWLEDGE_WORKORDER_ACTIONS;
+var import_node_crypto32, KNOWLEDGE_WORKORDER_ACTIONS;
 var init_routes = __esm({
   "../server/src/domains/knowledge/routes.ts"() {
     "use strict";
-    import_node_crypto31 = require("node:crypto");
+    import_node_crypto32 = require("node:crypto");
     init_src7();
     init_router();
     init_governance_service();
@@ -200629,7 +200637,7 @@ async function resolveChatAttachmentDiscoverySource(input) {
     sourceType: input.sourceType,
     sourceId: session.id,
     sourceVersionId: attachment.blobRef,
-    sourceFingerprint: (0, import_node_crypto32.createHash)("sha256").update(bytes2).digest("hex"),
+    sourceFingerprint: (0, import_node_crypto33.createHash)("sha256").update(bytes2).digest("hex"),
     sourceContent: new TextDecoder().decode(bytes2),
     sourceDisplayName: attachment.name,
     ...session.projectId ? { projectId: session.projectId } : {},
@@ -200640,11 +200648,11 @@ async function resolveChatAttachmentDiscoverySource(input) {
     }
   };
 }
-var import_node_crypto32, TEXT_CONTENT_TYPES;
+var import_node_crypto33, TEXT_CONTENT_TYPES;
 var init_chat_attachment_discovery = __esm({
   "../server/src/domains/knowledge/chat-attachment-discovery.ts"() {
     "use strict";
-    import_node_crypto32 = require("node:crypto");
+    import_node_crypto33 = require("node:crypto");
     TEXT_CONTENT_TYPES = /* @__PURE__ */ new Set([
       "application/json",
       "application/xml",
@@ -200820,8 +200828,8 @@ function aad(snapshot) {
 }
 function sealKnowledgeSnapshot(snapshot, key2) {
   if (snapshot.content.startsWith(PREFIX)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto33.randomBytes)(12);
-  const cipher = (0, import_node_crypto33.createCipheriv)("aes-256-gcm", keyBytes(key2), iv);
+  const iv = (0, import_node_crypto34.randomBytes)(12);
+  const cipher = (0, import_node_crypto34.createCipheriv)("aes-256-gcm", keyBytes(key2), iv);
   cipher.setAAD(aad(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return {
@@ -200834,7 +200842,7 @@ function openKnowledgeSnapshot(snapshot, key2) {
   const packed = snapshot.content.slice(PREFIX.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto33.createDecipheriv)("aes-256-gcm", keyBytes(key2), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto34.createDecipheriv)("aes-256-gcm", keyBytes(key2), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   const content3 = Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8");
@@ -200843,11 +200851,11 @@ function openKnowledgeSnapshot(snapshot, key2) {
 function isSealedKnowledgeSnapshotContent(content3) {
   return content3.startsWith(PREFIX);
 }
-var import_node_crypto33, PREFIX;
+var import_node_crypto34, PREFIX;
 var init_snapshot_crypto = __esm({
   "../server/src/domains/knowledge/snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto33 = require("node:crypto");
+    import_node_crypto34 = require("node:crypto");
     PREFIX = "oasis-knowledge:v1:";
   }
 });
@@ -200930,11 +200938,11 @@ function uniquenessKeys(kind, record9) {
       return [];
   }
 }
-var import_node_crypto34, import_promises4, import_node_path7, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
+var import_node_crypto35, import_promises4, import_node_path7, RECORD_KINDS, MemoryKnowledgeGovernanceStore, FileKnowledgeGovernanceStore;
 var init_governance_store = __esm({
   "../server/src/domains/knowledge/governance-store.ts"() {
     "use strict";
-    import_node_crypto34 = require("node:crypto");
+    import_node_crypto35 = require("node:crypto");
     import_promises4 = require("node:fs/promises");
     import_node_path7 = require("node:path");
     init_snapshot_crypto();
@@ -201152,7 +201160,7 @@ var init_governance_store = __esm({
         return result;
       }
       async persist(shape) {
-        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto34.randomUUID)()}.tmp`;
+        const temp = `${this.file}.${process.pid}.${(0, import_node_crypto35.randomUUID)()}.tmp`;
         try {
           await (0, import_promises4.writeFile)(temp, `${JSON.stringify(this.sealSnapshots(shape), null, 2)}
 `, { mode: 384 });
@@ -201188,7 +201196,7 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     if (error2.code !== "ENOENT") throw error2;
   }
   await (0, import_promises5.mkdir)((0, import_node_path8.dirname)(file), { recursive: true });
-  const generated = `oasis-${(0, import_node_crypto35.randomUUID)()}`;
+  const generated = `oasis-${(0, import_node_crypto36.randomUUID)()}`;
   try {
     await (0, import_promises5.writeFile)(file, `${generated}
 `, { encoding: "utf8", mode: 384, flag: "wx" });
@@ -201198,11 +201206,11 @@ async function loadOrCreateKnowledgeDeploymentId(file) {
     return readDeploymentId(file);
   }
 }
-var import_node_crypto35, import_promises5, import_node_path8, VALID_DEPLOYMENT_ID;
+var import_node_crypto36, import_promises5, import_node_path8, VALID_DEPLOYMENT_ID;
 var init_deployment_id = __esm({
   "../server/src/domains/knowledge/deployment-id.ts"() {
     "use strict";
-    import_node_crypto35 = require("node:crypto");
+    import_node_crypto36 = require("node:crypto");
     import_promises5 = require("node:fs/promises");
     import_node_path8 = require("node:path");
     VALID_DEPLOYMENT_ID = /^oasis-[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
@@ -202083,7 +202091,7 @@ function roundFailureText(kind, error2) {
   return kind === "timeout" ? `\u8FD9\u4E00\u6B21\u6267\u884C\u8DD1\u6EE1\u4E86\u5355\u6B21\u8FD0\u884C\u7684\u65F6\u95F4\u4E0A\u9650\uFF08${wallClockText()}\uFF09\uFF0C\u88AB\u7CFB\u7EDF\u505C\u4E0B\u4E86\uFF08${error2}\uFF09` : `\u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u5B8C\uFF1A${error2}`;
 }
 function deterministicUuid2(seed) {
-  const h = (0, import_node_crypto36.createHash)("sha256").update(seed).digest();
+  const h = (0, import_node_crypto37.createHash)("sha256").update(seed).digest();
   const b2 = Buffer.from(h.subarray(0, 16));
   b2[6] = b2[6] & 15 | 80;
   b2[8] = b2[8] & 63 | 128;
@@ -202138,11 +202146,11 @@ async function seedChildRoundRows(chatStore, childSessionId, round, prompt2, now
     createdAt: now
   });
 }
-var import_node_crypto36, DelegationError, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, roundTurnKey, roundTurnId, DelegationService;
+var import_node_crypto37, DelegationError, DIGEST_CHARS, PENDING_QUEUE_OWNER, DISPATCH_LEASE_MS, CONSECUTIVE_FAIL_LIMIT, roundTurnKey, roundTurnId, DelegationService;
 var init_service3 = __esm({
   "../server/src/domains/delegations/service.ts"() {
     "use strict";
-    import_node_crypto36 = require("node:crypto");
+    import_node_crypto37 = require("node:crypto");
     init_src();
     init_chat_exit();
     init_parent_conversation();
@@ -203450,7 +203458,7 @@ var init_continue_outcome = __esm({
 function trustedDelegationInvocationId(body2, turn) {
   const scope2 = turn?.artifactId ?? turn?.dispatchId;
   if (!scope2) return void 0;
-  const fingerprint2 = (0, import_node_crypto37.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
+  const fingerprint2 = (0, import_node_crypto38.createHash)("sha256").update(JSON.stringify({ to: body2.to?.trim() ?? "", task: body2.task ?? "", as: body2.as?.trim() ?? "", files: body2.files ?? [] })).digest("hex").slice(0, 20);
   return `dispatch:${scope2}:delegation:${fingerprint2}`;
 }
 function callerOf(req, invocationId) {
@@ -203545,11 +203553,11 @@ function delegationRoutes(service) {
     });
   };
 }
-var import_node_crypto37;
+var import_node_crypto38;
 var init_routes2 = __esm({
   "../server/src/domains/delegations/routes.ts"() {
     "use strict";
-    import_node_crypto37 = require("node:crypto");
+    import_node_crypto38 = require("node:crypto");
     init_router();
     init_continue_outcome();
     init_service3();
@@ -204460,6 +204468,60 @@ var init_child_live_turn = __esm({
   }
 });
+// ../server/src/domains/actors/registry-audit-sink.ts
+function createRegistryAuditSink(file) {
+  const listeners = /* @__PURE__ */ new Set();
+  const notify = (msg) => {
+    for (const listener of listeners) listener(msg);
+  };
+  return {
+    /** 登记审计：落盘 + 推 registry 通知（前端据此重拉登记类投影）。 */
+    registryAudit: (record9) => {
+      fs20.appendFile(file, JSON.stringify(record9) + "\n", () => {
+      });
+      notify({ kind: record9.kind, actor: record9.actor, target: record9.target, timestamp: record9.timestamp });
+    },
+    /**
+     * 凭据审计（ADR 凭据保险库 §4.7）：与登记审计同落一份旁账，按 kind 前缀 `credential_` 区分。
+     *
+     * **只落盘、不推 registry 通知**（D-10 推送面）。registry 通知是实例级的，`/api/events` 原样转发给
+     * 任何已认证的连接、不分组织；凭据事件推进去 = 别家组织开一条 SSE 就能实时看到「谁在读/改哪个变量」。
+     * 仓内没有任何消费方订它（2.0 前端只订无内容的 runtime-status，而后者本来就不被凭据事件唤醒）。
+     * 要看凭据审计走 `GET /api/variables/reveal-audit`（按请求方组织过滤）。将来若需要实时推送，
+     * 得先让通知带组织、`/api/events` 按组织过滤（recvvzbhOGiS7l 的完整修复），再放回来。
+     */
+    credentialAudit: (record9) => {
+      fs20.appendFile(file, JSON.stringify(record9) + "\n", () => {
+      });
+    },
+    /** runtime 状态变了：只发无内容的失效提示（ADR 0576）。 */
+    notifyRuntimeStatus: () => {
+      notify({ kind: "runtime_status_changed", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
+    },
+    /** 这些人的铃铛有新通知了：各发一条无内容的失效提示，前端据此重拉台账、弹页内提示。 */
+    notifyNotificationsChanged: (recipients) => {
+      const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+      for (const target of new Set(recipients)) notify({ kind: NOTIFICATIONS_CHANGED, target, timestamp });
+    },
+    notifications: {
+      subscribe(listener) {
+        listeners.add(listener);
+        return () => {
+          listeners.delete(listener);
+        };
+      }
+    }
+  };
+}
+var fs20, NOTIFICATIONS_CHANGED;
+var init_registry_audit_sink = __esm({
+  "../server/src/domains/actors/registry-audit-sink.ts"() {
+    "use strict";
+    fs20 = __toESM(require("node:fs"), 1);
+    NOTIFICATIONS_CHANGED = "notifications_changed";
+  }
+});
 // ../connectors/src/_base/wrapper-assets.ts
 function isUsableWrapper(scriptPath) {
   if (!(0, import_node_fs7.existsSync)(scriptPath)) return false;
@@ -205588,7 +205650,7 @@ function createAppJwt(appId, privateKeyPem, nowMs) {
     exp: nowSec + JWT_TTL_SEC,
     iss: appId
   }));
-  const signer = (0, import_node_crypto38.createSign)("RSA-SHA256");
+  const signer = (0, import_node_crypto39.createSign)("RSA-SHA256");
   signer.update(`${header}.${payload2}`);
   signer.end();
   try {
@@ -205751,11 +205813,11 @@ async function exchangeManifestCode(code2, deps = {}) {
     ...typeof body2["client_secret"] === "string" ? { clientSecret: body2["client_secret"] } : {}
   };
 }
-var import_node_crypto38, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
+var import_node_crypto39, GITHUB_API, JWT_TTL_SEC, JWT_IAT_SKEW_SEC, defaultDeps2;
 var init_app_auth = __esm({
   "../connectors/src/github/app-auth.ts"() {
     "use strict";
-    import_node_crypto38 = require("node:crypto");
+    import_node_crypto39 = require("node:crypto");
     GITHUB_API = "https://api.github.com";
     JWT_TTL_SEC = 9 * 60;
     JWT_IAT_SKEW_SEC = 60;
@@ -206680,11 +206742,11 @@ function extractOutlineKnowledgeCandidateDrafts(events) {
   }
   return [...drafts.values()];
 }
-var import_node_crypto39, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
+var import_node_crypto40, REQUEST_TIMEOUT_MS, WRITE_ENDPOINTS, DEFAULT_WRITE_INTERVAL_MS, DEFAULT_RATE_LIMIT_RETRIES, DEFAULT_MAX_RATE_LIMIT_DELAY_MS, OutlineKnowledgeApiError, writeCoordinators, OutlineKnowledgeApi, INIT_DEFINITIONS, REPAIRABLE_LINT_CODES;
 var init_knowledge_api = __esm({
   "../connectors/src/outline/knowledge-api.ts"() {
     "use strict";
-    import_node_crypto39 = require("node:crypto");
+    import_node_crypto40 = require("node:crypto");
     REQUEST_TIMEOUT_MS = 2e4;
     WRITE_ENDPOINTS = /* @__PURE__ */ new Set(["collections.create", "documents.create", "documents.update", "documents.publish"]);
     DEFAULT_WRITE_INTERVAL_MS = process.env["NODE_ENV"] === "test" ? 0 : 250;
@@ -206711,7 +206773,7 @@ var init_knowledge_api = __esm({
         this.baseUrl = canonicalUrl(baseUrl);
         this.lastResponseBaseUrl = this.baseUrl;
         this.token = token;
-        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto39.createHash)("sha256").update(token).digest("hex")}`;
+        this.coordinatorKey = `${this.baseUrl}:${(0, import_node_crypto40.createHash)("sha256").update(token).digest("hex")}`;
         this.writeIntervalMs = Math.max(0, options.writeIntervalMs ?? DEFAULT_WRITE_INTERVAL_MS);
         this.maxRateLimitRetries = Math.max(0, options.maxRateLimitRetries ?? DEFAULT_RATE_LIMIT_RETRIES);
         this.maxRateLimitDelayMs = Math.max(0, options.maxRateLimitDelayMs ?? DEFAULT_MAX_RATE_LIMIT_DELAY_MS);
@@ -208119,15 +208181,15 @@ function classifyOutlineGovernedMigrationDocument(document4) {
   if (path46.startsWith("wiki/sources/")) return { mapping: "formal", metadata: legacyMetadata(document4, "source_note"), reason: "legacy_source_note" };
   return { mapping: "excluded", reason: "legacy_unmapped_path" };
 }
-var import_node_crypto40, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
+var import_node_crypto41, value, text4, hash, REVISION_VISIBILITY_RETRY_DELAYS_MS, governedProvisionRuns, PUBLISH_MARKER2, PUBLISH_MARKER_PRESENT;
 var init_governed_knowledge = __esm({
   "../connectors/src/outline/governed-knowledge.ts"() {
     "use strict";
-    import_node_crypto40 = require("node:crypto");
+    import_node_crypto41 = require("node:crypto");
     init_knowledge_api();
     value = (input) => input && typeof input === "object" && !Array.isArray(input) ? input : null;
     text4 = (input) => typeof input === "string" && input.trim() ? input.trim() : null;
-    hash = (input) => (0, import_node_crypto40.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
+    hash = (input) => (0, import_node_crypto41.createHash)("sha256").update(input.normalize("NFC").replace(/\r\n?/gu, "\n")).digest("hex");
     REVISION_VISIBILITY_RETRY_DELAYS_MS = [0, 100, 250, 500, 1e3, 2e3];
     governedProvisionRuns = /* @__PURE__ */ new Map();
     PUBLISH_MARKER2 = /\n?<!--\s*oasis-publish:[\s\S]*?-->\n?/giu;
@@ -208385,7 +208447,9 @@ function buildAppManifest(args) {
     default_permissions: { ...GITHUB_APP_DEFAULT_PERMISSIONS },
     // 暂不订阅 webhook：本方案只需要主动调 API，开着反而多一份要维护的密钥与端点。
     hook_attributes: { url: `${base}/api/connectors/github/app/webhook`, active: false },
-    callback_urls: [`${base}/api/connectors/github/app/oauth-callback`]
+    callback_urls: [`${base}/api/connectors/github/app/oauth-callback`],
+    setup_url: `${base}${args.setupPath}`,
+    setup_on_update: true
   };
 }
 function manifestFormAction(owner, state) {
@@ -208454,7 +208518,7 @@ function checkAppOwnership(conv, want) {
   }
   return null;
 }
-var GITHUB_APP_DEFAULT_PERMISSIONS, GITHUB_APP_PERMISSION_LABELS, PENDING_TTL_MS, PendingAppCreations, REQUIRED_WRITE_PERMISSIONS, PERMISSION_RANK, FORBIDDEN_IMPORT_PERMISSION_KEYS;
+var GITHUB_APP_DEFAULT_PERMISSIONS, GITHUB_APP_PERMISSION_LABELS, PENDING_TTL_MS, REQUIRED_WRITE_PERMISSIONS, PERMISSION_RANK, FORBIDDEN_IMPORT_PERMISSION_KEYS;
 var init_app_manifest = __esm({
   "../connectors/src/github/app-manifest.ts"() {
     "use strict";
@@ -208487,31 +208551,6 @@ var init_app_manifest = __esm({
       { key: "issues", label: "Issue\uFF08\u8BFB\u5199\uFF09", desc: "\u521B\u5EFA\u4E0E\u8BC4\u8BBA Issue" }
     ];
     PENDING_TTL_MS = 15 * 60 * 1e3;
-    PendingAppCreations = class {
-      map = /* @__PURE__ */ new Map();
-      put(state, v2) {
-        this.sweep(v2.createdAtMs);
-        this.map.set(state, v2);
-      }
-      get(state, nowMs) {
-        const v2 = this.map.get(state);
-        if (!v2) return void 0;
-        if (nowMs - v2.createdAtMs > PENDING_TTL_MS) {
-          this.map.delete(state);
-          return void 0;
-        }
-        return v2;
-      }
-      /** 过期条目清理——每次写入顺带做，不另起定时器。 */
-      sweep(nowMs) {
-        for (const [k2, v2] of this.map) {
-          if (nowMs - v2.createdAtMs > PENDING_TTL_MS) this.map.delete(k2);
-        }
-      }
-      get size() {
-        return this.map.size;
-      }
-    };
     REQUIRED_WRITE_PERMISSIONS = ["contents", "pull_requests"];
     PERMISSION_RANK = { read: 1, write: 2, admin: 3 };
     FORBIDDEN_IMPORT_PERMISSION_KEYS = [
@@ -208995,6 +209034,16 @@ var init_src8 = __esm({
 function isBundleFrozen(err) {
   return typeof err === "object" && err !== null && err.code === "TENANT_BUNDLE_FROZEN";
 }
+async function lookupGithubAppPending(store, state) {
+  const missing = "\u627E\u4E0D\u5230\u8FD9\u6B21\u8FDE\u63A5\u7684\u8BB0\u5F55\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D";
+  if (!store || !state) return { message: missing };
+  const hit = await store.get(state, Date.now());
+  if (hit.status === "expired") {
+    return { message: "\u8FD9\u6B21\u8FDE\u63A5\u4ECE\u5F00\u59CB\u5230\u73B0\u5728\u5DF2\u8D85\u8FC7 15 \u5206\u949F\uFF0C\u5DF2\u7ECF\u5931\u6548\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D" };
+  }
+  if (hit.status === "missing") return { message: missing };
+  return { pending: hit.value.value, message: "" };
+}
 function resolveCallbackBase(supplied, requestHost) {
   if (!supplied || !supplied.trim()) {
     throw new Error("\u7F3A\u5C11 callbackBase\uFF1A\u524D\u7AEF\u9700\u62A5\u4E0A window.location.origin + API_BASE");
@@ -210769,7 +210818,7 @@ async function startOasisServer(opts) {
     }
     return void 0;
   }
-  const appendNowThroughQueue2 = async (sid, text7, clientKey, attachments, perCompanyStore, retainLocallyOnFailure = false, onAwaitingConsumption, resend = false, itemStore) => {
+  const appendNowThroughQueue2 = async (sid, text7, clientKey, attachments, perCompanyStore, retainLocallyOnFailure = false, onAwaitingConsumption, resend = false, itemStore, clientAttached) => {
     if (perCompanyStore === null) {
       throw new Error(
         `appendNowThroughQueue: per-company chat store unresolved (sid=${sid})`
@@ -210802,52 +210851,22 @@ async function startOasisServer(opts) {
           }
         }
         throw new Error(`blob ${blobRef} \u4E24\u4E2A\u67DC\u91CC\u90FD\u6CA1\u6709`);
-      }
+      },
+      ...clientAttached ? { clientAttached } : {}
     }, clientKey, attachments, retainLocallyOnFailure, resend ? { resend: true } : void 0);
-    if (r.insertStatus === "uncertain" && clientKey) {
+    if ((r.insertStatus === "uncertain" || r.orphanedReturn) && clientKey) {
       const shown = r.batch.map((m2) => m2.text).filter(Boolean).join("\n\n") || text7;
-      await landUndeliveredInsert(sid, clientKey, shown, attachments ?? [], store, itemStore);
-    }
-    return { accepted: r.accepted, ...r.reason ? { reason: r.reason } : {}, queued: r.queued, insertStatus: r.insertStatus };
-  };
-  const landUndeliveredInsert = async (sid, clientKey, text7, attachments, store, itemStore) => {
-    try {
-      if (!itemStore || !chatItemsDoubleWriteEnabled()) return;
-      const ledger = new ChatItemLedger({
-        items: itemStore,
-        versionSeed: await itemStore.sessionVersionCursor(sid).catch(() => 0),
-        sessionId: sid,
-        turnId: fallbackTurnId(),
-        log: (m2) => console.warn(m2)
-      });
-      const refs = attachments.map((a) => ({
-        name: a.name,
-        ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
-        ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
-      }));
-      ledger.recordRejectedSubmission({
-        user: { text: text7, clientSubmitId: clientKey, ...refs.length ? { attachments: refs } : {} },
-        // 文案取自 turn-copy 那一句的前半（ADR 0615 决策 10）：行为上「不确定」与「没送到」完全一样
-        // （都不自动发、都等人点），所以只差这一句话。
-        failure: { reason: INSERT_UNCERTAIN_NOTE, retryable: true }
-      });
-      await ledger.drain();
-      if (ledger.failures > 0) return;
-      const now = (/* @__PURE__ */ new Date()).toISOString();
-      await store.appendMessage({
-        id: (0, import_node_crypto41.randomUUID)(),
-        sessionId: sid,
-        role: "user",
-        content: text7,
-        createdAt: now,
-        messageKey: chatSubmitMessageKey(sid, clientKey),
-        ...refs.length ? { attachments: refs } : {},
-        needsAgentDelivery: true
+      await landUndeliveredInsert({
+        store,
+        itemStore,
+        chatSessionId: sid,
+        clientKey,
+        text: shown,
+        attachments: attachments ?? [],
+        note: r.orphanedReturn ? INSERT_RETURNED_NOTE : INSERT_UNCERTAIN_NOTE
       });
-      await store.updateSession(sid, { touchedAt: now }).catch(() => void 0);
-    } catch (err) {
-      console.warn(`[chat] \u63D2\u8BDD\u7ED3\u679C\u4E0D\u786E\u5B9A\u3001\u843D\u672A\u9001\u8FBE user \u884C\u5931\u8D25\uFF08session=${sid} key=${clientKey}\uFF09: ${String(err)}`);
     }
+    return { accepted: r.accepted, ...r.reason ? { reason: r.reason } : {}, queued: r.queued, insertStatus: r.insertStatus };
   };
   const GRAPH_EDIT_SUMMARY_MAX = 60;
   const truncateSummary = (s2) => {
@@ -211109,10 +211128,10 @@ async function startOasisServer(opts) {
               ...fp(p2)
             }))
           ] : [];
-          const { randomUUID: randomUUID47 } = await import("node:crypto");
+          const { randomUUID: randomUUID48 } = await import("node:crypto");
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID47(),
+              id: randomUUID48(),
               chatSessionId: input.chatSessionId,
               text: input.text,
               createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -211145,11 +211164,11 @@ async function startOasisServer(opts) {
               ...f2?.mtime ? { srcMtime: f2.mtime } : {}
             };
           });
-          const { randomUUID: randomUUID47 } = await import("node:crypto");
+          const { randomUUID: randomUUID48 } = await import("node:crypto");
           const nowIso = (/* @__PURE__ */ new Date()).toISOString();
           try {
             await store.enqueuePendingMessage({
-              id: randomUUID47(),
+              id: randomUUID48(),
               chatSessionId: input.chatSessionId,
               text: "",
               createdAt: nowIso,
@@ -211559,7 +211578,7 @@ async function startOasisServer(opts) {
           return;
         }
         if (url.pathname.startsWith("/api/files/")) {
-          const company = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname) : void 0;
+          const company = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname, req.method) : void 0;
           if (company?.kind === "ambiguous") {
             writeApiError(res, companyAmbiguousError(actor, company.companies));
             return;
@@ -211596,7 +211615,7 @@ async function startOasisServer(opts) {
           return;
         }
         const sessionKey = (req.headers.authorization ?? "").startsWith("Bearer ") ? req.headers.authorization.slice("Bearer ".length) : actor;
-        const companyCtx = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname) : void 0;
+        const companyCtx = opts.resolveCompanyContext ? await opts.resolveCompanyContext(actor, req.headers, url.pathname, req.method) : void 0;
         const currentCompanyId = companyCtx?.kind === "ok" ? companyCtx.companyId : void 0;
         const fileLimits = await opts.fileLimits?.get(currentCompanyId) ?? { ...DEFAULT_FILE_LIMITS };
         const requestMaxBytes = fileUploadRequestMaxBytes(fileLimits);
@@ -212451,7 +212470,7 @@ async function startOasisServer(opts) {
             entry = {
               // 旧 CLI 未带 waiterId 时给它塞一个服务端本地生成的——它绝不可能出现在 leave 上，
               // 也就绝不会误命中 leftWaiterIds、绝不会被别人的 leave 摘掉。行为与旧 CLI 相同。
-              waiterId: clientWaiterId ?? `server:${(0, import_node_crypto41.randomUUID)()}`,
+              waiterId: clientWaiterId ?? `server:${(0, import_node_crypto42.randomUUID)()}`,
               onResolve,
               expiresAt: expiresAt2,
               cleanup: () => clearTimeout(expiryTimer),
@@ -212532,7 +212551,7 @@ async function startOasisServer(opts) {
               const openRoom = async () => {
                 let chatSessionId2;
                 if (chatStore) {
-                  const { randomUUID: randomUUID47 } = await import("node:crypto");
+                  const { randomUUID: randomUUID48 } = await import("node:crypto");
                   const known = discussSessions.get(itemKey);
                   const knownSession = known ? await chatStore.getSession(known) : null;
                   if (knownSession && knownSession.workspace === ctx.workspace && knownSession.humanActorId === ctx.ownerId && (!body2.escalationId || knownSession.escalationId === body2.escalationId)) chatSessionId2 = known;
@@ -212541,7 +212560,7 @@ async function startOasisServer(opts) {
                     chatSessionId2 = existing[0]?.id;
                   }
                   if (!chatSessionId2) {
-                    chatSessionId2 = randomUUID47();
+                    chatSessionId2 = randomUUID48();
                     const now = (/* @__PURE__ */ new Date()).toISOString();
                     const title = `\u89E3\u51B3\uFF1A${ctx.seed.slice(ctx.seed.indexOf("\uFF1A") + 1, ctx.seed.indexOf("\uFF1A") + 25) || "\u5DE5\u5355\u5361\u70B9"}`;
                     const reg0 = (await resolveEngine(currentCompanyId).catch(() => null))?.registry ?? opts.registry;
@@ -212796,6 +212815,19 @@ async function startOasisServer(opts) {
               changed();
               return;
             }
+            if (topics?.size === 1 && topics.has("notifications")) {
+              const changed = () => res.write('data: {"channel":"notifications"}\n\n');
+              const unsubscribe = opts.notifications?.subscribe((n) => {
+                if (n.kind === NOTIFICATIONS_CHANGED && n.target === actor) changed();
+              });
+              const heartbeat = setInterval(() => res.write(":heartbeat\n\n"), 15e3);
+              req.on("close", () => {
+                clearInterval(heartbeat);
+                unsubscribe?.();
+              });
+              changed();
+              return;
+            }
             const wantRegistry = topics === null || topics.has("registry");
             const wsAllowed = (ws) => topics === null || ws !== void 0 && topics.has(ws);
             let closed = false;
@@ -212804,9 +212836,10 @@ async function startOasisServer(opts) {
 `);
             };
-            const unsubNotify = wantRegistry ? opts.notifications?.subscribe(
-              (n) => send({ channel: "registry", kind: n.kind, actor: n.actor, target: n.target, timestamp: n.timestamp })
-            ) : void 0;
+            const unsubNotify = wantRegistry ? opts.notifications?.subscribe((n) => {
+              if (n.kind === NOTIFICATIONS_CHANGED) return;
+              send({ channel: "registry", kind: n.kind, actor: n.actor, target: n.target, timestamp: n.timestamp });
+            }) : void 0;
             if (engineEvents) {
               let lastSeq = 0;
               const unsub = engineEvents((records) => {
@@ -213245,31 +213278,11 @@ async function startOasisServer(opts) {
               timeoutMs: APPEND_TURN_START_WAIT_MS
             });
             const appendItemStore = opts.resolveChatItems ? await opts.resolveChatItems(currentCompanyId).catch(() => void 0) : opts.chatItems;
-            await respondAppend(res, wantsAppendProgress(req), (onAwaitingConsumption) => appendNowThroughQueue2(sid, text7, clientKey, insertAttachments, perCompanyStore, retainLocallyOnFailure, onAwaitingConsumption, resend, appendItemStore));
-            return;
-          }
-          if (req.method === "GET" && /^\/api\/chat-sessions\/[^/]+\/insert-status$/.test(url.pathname)) {
-            const sid = decodeURIComponent(url.pathname.split("/")[3] ?? "");
-            const perCompanyStore = await chatStoreNowOrNull();
-            const cs = await perCompanyStore?.getSession(sid).catch(() => null) ?? null;
-            if (!perCompanyStore || !cs || cs.humanActorId !== actor) {
-              res.writeHead(404, { "content-type": "application/json" }).end(JSON.stringify({ error: "CHAT_SESSION_NOT_FOUND" }));
-              return;
-            }
-            const clientKey = url.searchParams.get("clientKey") ?? "";
-            if (!clientKey) {
-              res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: "CLIENT_KEY_REQUIRED" }));
-              return;
-            }
-            const items = opts.resolveChatItems ? await opts.resolveChatItems(currentCompanyId).catch(() => void 0) : opts.chatItems;
-            const result = await resolveInsertStatus({
-              store: perCompanyStore,
-              isTurnRunning: (id) => liveChat.isRunning(id),
-              ...opts.confirmInputReceipt ? { confirm: opts.confirmInputReceipt } : {},
-              ...items ? { items } : {},
-              log: (m2) => console.warn(m2)
-            }, sid, clientKey);
-            res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ clientKey, ...result }));
+            let clientGone = false;
+            res.once("close", () => {
+              if (!res.writableEnded) clientGone = true;
+            });
+            await respondAppend(res, wantsAppendProgress(req), (onAwaitingConsumption) => appendNowThroughQueue2(sid, text7, clientKey, insertAttachments, perCompanyStore, retainLocallyOnFailure, onAwaitingConsumption, resend, appendItemStore, () => !clientGone));
             return;
           }
           if (url.pathname === "/api/chat" && req.method === "POST") {
@@ -213653,7 +213666,7 @@ ${composed}`;
                         if (rejectedLedger.failures === 0 && retriedRow) {
                           turnPersisted = true;
                         } else if (rejectedLedger.failures === 0) {
-                          const { randomUUID: randomUUID48 } = await import("node:crypto");
+                          const { randomUUID: randomUUID49 } = await import("node:crypto");
                           const now = (/* @__PURE__ */ new Date()).toISOString();
                           const rejectedAttachments = effectiveAttachments.map((a) => ({
                             name: a.name,
@@ -213661,7 +213674,7 @@ ${composed}`;
                             ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                           }));
                           await chatStore.appendMessage({
-                            id: randomUUID48(),
+                            id: randomUUID49(),
                             sessionId: persistTarget.id,
                             role: "user",
                             content: persistedUserMessage,
@@ -213746,14 +213759,14 @@ ${composed}`;
                       runtimeSessionId: session.nativeSessionId ?? session.id
                     }).catch(() => void 0);
                   }
-                  const { randomUUID: randomUUID48 } = await import("node:crypto");
+                  const { randomUUID: randomUUID49 } = await import("node:crypto");
                   const persistAttachments = effectiveAttachments.map((a) => ({
                     name: a.name,
                     ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
                     ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
                   }));
                   if (!retriedRow) await chatStore.appendMessage({
-                    id: randomUUID48(),
+                    id: randomUUID49(),
                     sessionId: persistTarget.id,
                     role: "user",
                     content: persistedUserMessage,
@@ -214202,8 +214215,8 @@ ${composed}`;
                 }
               }
               const { spawn: spawn11 } = await import("node:child_process");
-              const { randomUUID: randomUUID47 } = await import("node:crypto");
-              const sessionId = body2.sessionId ?? randomUUID47();
+              const { randomUUID: randomUUID48 } = await import("node:crypto");
+              const sessionId = body2.sessionId ?? randomUUID48();
               const args = [
                 "-p",
                 body2.message,
@@ -214292,33 +214305,32 @@ ${composed}`;
               }
               const svc = await connectorActorsService();
               if (!svc) throw new Error("actors service unavailable");
-              const cacheKey = `${currentCompanyId ?? ""}::${actorId}::${connectorId}`;
+              const snapshots2 = opts.connectorAuthPending?.snapshots;
+              if (!snapshots2) throw new Error("connector auth snapshot store unavailable");
+              const snapKey = { companyId: currentCompanyId ?? "", actorId, connectorId };
               const now = Date.now();
-              for (const [k2, v2] of connectorAuthSnapshots) {
-                if (now - v2.at > CONNECTOR_AUTH_SNAPSHOT_TTL_MS) connectorAuthSnapshots.delete(k2);
-              }
               if (op === "begin") {
                 const rows = await svc.snapshotActorConnectorVars(actorId, connectorId);
-                connectorAuthSnapshots.set(cacheKey, { rows, at: now });
+                await snapshots2.put(snapKey, rows, now, now + CONNECTOR_AUTH_SNAPSHOT_TTL_MS);
                 res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, snapshot: rows.length }));
                 return;
               }
               if (op === "commit") {
-                connectorAuthSnapshots.delete(cacheKey);
+                await snapshots2.delete(snapKey);
                 res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true }));
                 return;
               }
-              const snap = connectorAuthSnapshots.get(cacheKey);
-              if (!snap) {
+              const snapRows = await snapshots2.get(snapKey, now);
+              if (!snapRows) {
                 res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: false, reason: "no_snapshot" }));
                 return;
               }
               const out = await svc.restoreActorConnectorVars(
                 actorId,
                 connectorId,
-                snap.rows
+                snapRows
               );
-              connectorAuthSnapshots.delete(cacheKey);
+              await snapshots2.delete(snapKey);
               res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, ...out }));
             } catch (e) {
               res.writeHead(500).end(JSON.stringify({ error: String(e) }));
@@ -214499,24 +214511,35 @@ ${composed}`;
                 res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: `\u56DE\u8C03\u5730\u5740\u4E0D\u53EF\u7528\uFF0C\u5DF2\u4E2D\u6B62\uFF08\u907F\u514D\u5728 GitHub \u4E0A\u7559\u4E0B\u5B64\u513F App\uFF09\uFF1A${e.message}` }));
                 return;
               }
-              const { randomUUID: randomUUID47 } = await import("node:crypto");
-              const state = randomUUID47();
+              const { randomUUID: randomUUID48 } = await import("node:crypto");
+              const state = randomUUID48();
               const nameSlug = (actorName || actorId?.split(":").pop() || owner?.login || "bot").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "bot";
               const manifest = buildAppManifest({
                 employeeSlug: nameSlug,
                 namePrefix: "oasis",
                 baseUrl: base,
-                redirectPath: "/api/connectors/github/app/manifest-callback"
+                redirectPath: "/api/connectors/github/app/manifest-callback",
+                setupPath: "/api/connectors/github/app/setup-callback"
               });
-              githubAppPending.put(state, {
+              const pendingStore = opts.connectorAuthPending?.githubApp;
+              if (!pendingStore) throw new Error("github app pending store unavailable");
+              const createdAtMs = Date.now();
+              const entry = {
                 ...actorId ? { actorId } : {},
                 // 回调那一步没有鉴权头，解析不出公司——只能在这里记下来带过去。
                 ...currentCompanyId ? { companyId: currentCompanyId } : {},
                 employeeSlug: nameSlug,
-                createdAtMs: Date.now(),
+                createdAtMs,
                 // 存下这次选的归属——回调时要拿它跟 GitHub 返回的 owner 比对。
                 wantOwnerKind: kind,
                 ...kind === "org" && owner?.login ? { wantOwnerLogin: owner.login } : {}
+              };
+              await pendingStore.put({
+                state,
+                ...currentCompanyId ? { companyId: currentCompanyId } : {},
+                value: { ...entry },
+                createdAtMs,
+                expiresAtMs: createdAtMs + PENDING_TTL_MS
               });
               res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
                 state,
@@ -214831,16 +214854,22 @@ ${composed}`;
           if (url.pathname === "/api/connectors/github/app/manifest-callback" && req.method === "GET") {
             const code2 = url.searchParams.get("code") ?? "";
             const state = url.searchParams.get("state") ?? "";
-            const pending = githubAppPending.get(state, Date.now());
-            const fail = (msg) => {
-              if (pending) {
-                pending.done = true;
-                pending.error = msg;
+            const pendingStore = opts.connectorAuthPending?.githubApp;
+            const found2 = await lookupGithubAppPending(pendingStore, state);
+            const pending = found2.pending;
+            const fail = async (msg) => {
+              if (pending && pendingStore) {
+                await pendingStore.patch(state, { done: true, error: msg }).catch(() => {
+                });
               }
               res.writeHead(200, { "content-type": "text/html; charset=utf-8" }).end(callbackHtml(false, msg));
             };
-            if (!code2 || !pending) {
-              fail("state \u5DF2\u8FC7\u671F\u6216\u65E0\u6548\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u8BD5");
+            if (!pending) {
+              await fail(found2.message);
+              return;
+            }
+            if (!code2) {
+              await fail("GitHub \u6CA1\u6709\u5E26\u56DE\u5EFA\u597D\u7684 App \u4FE1\u606F\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D");
               return;
             }
             try {
@@ -214850,7 +214879,7 @@ ${composed}`;
                 ...pending.wantOwnerKind ? { ownerKind: pending.wantOwnerKind } : {}
               });
               if (problem) {
-                fail(problem.message);
+                await fail(problem.message);
                 return;
               }
               const svc = await connectorActorsService(pending.companyId);
@@ -214862,29 +214891,77 @@ ${composed}`;
               if (conv.slug) await put3("GITHUB_APP_SLUG", conv.slug, false);
               if (conv.clientId) await put3("GITHUB_APP_CLIENT_ID", conv.clientId, false);
               if (conv.clientSecret) await put3("GITHUB_APP_CLIENT_SECRET", conv.clientSecret, true);
-              pending.appId = conv.appId;
-              pending.privateKeyPem = conv.privateKeyPem;
-              if (conv.slug) pending.slug = conv.slug;
-              pending.ownerLogin = conv.ownerLogin;
-              pending.ownerType = conv.ownerType;
-              pending.permissions = conv.permissions;
-              pending.account = conv.slug ? `${conv.slug}[bot]` : conv.appId;
+              const progress = {
+                appId: conv.appId,
+                ...conv.slug ? { slug: conv.slug } : {},
+                // 收尾那一屏要用：这个 bot 到手的是哪些权限、归属是谁（拼权限设置页地址要 ownerType）。
+                ownerLogin: conv.ownerLogin,
+                ownerType: conv.ownerType,
+                permissions: conv.permissions,
+                account: conv.slug ? `${conv.slug}[bot]` : conv.appId
+              };
+              await pendingStore.patch(state, progress);
               if (!conv.slug) {
                 res.writeHead(200, { "content-type": "text/html; charset=utf-8" }).end(callbackHtml(false, "App \u5DF2\u521B\u5EFA\uFF0C\u4F46\u672A\u62FF\u5230 slug\u2014\u2014\u8BF7\u624B\u52A8\u5728 GitHub \u4E0A\u5B89\u88C5\u5B83"));
                 return;
               }
               res.writeHead(302, { location: appInstallUrl(conv.slug, state) }).end();
             } catch (e) {
-              fail(String(e));
+              await fail(String(e));
             }
             return;
           }
+          const finishGithubAppInstall = async (state, pending, pendingStore) => {
+            if (pending.done && pending.error) return { ok: false, error: pending.error };
+            if (pending.done) return { ok: true, ...pending.account ? { account: pending.account } : {} };
+            if (!pending.appId) return { ok: false, error: "pending" };
+            try {
+              const keySvc = await connectorActorsService(pending.companyId);
+              if (!keySvc) throw new Error("actors service unavailable");
+              const privateKeyPem = await keySvc.revealVariable("GITHUB_APP_PRIVATE_KEY", pending.actorId);
+              if (!privateKeyPem) throw new Error("GitHub App \u7684\u79C1\u94A5\u4E0D\u5728\u53D8\u91CF\u91CC\u4E86\uFF08\u53EF\u80FD\u88AB\u5220\u9664\uFF09\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u8FDE\u63A5");
+              const installs = await listAppInstallations({
+                appId: pending.appId,
+                privateKeyPem
+              });
+              const first = installs[0];
+              if (!first) return { ok: false, error: "pending" };
+              const svc = await connectorActorsService(pending.companyId);
+              if (!svc) throw new Error("actors service unavailable");
+              const scope2 = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
+              const put3 = (key2, value2, encrypted) => svc.putVariable({ key: key2, value: value2, ...scope2, connectorId: "github", encrypted });
+              await put3("GITHUB_APP_INSTALLATION_ID", first.installationId, false);
+              const minted = await mintInstallationToken({
+                appId: pending.appId,
+                privateKeyPem,
+                installationId: first.installationId
+              });
+              if (pending.actorId) {
+                await put3("GITHUB_APP_TOKEN", minted.token, true);
+                await put3("GITHUB_APP_TOKEN_EXPIRES_AT", String(minted.expiresAtMs), false);
+              }
+              if (pending.slug) {
+                const bot = await fetchAppBotIdentity(pending.slug, { token: minted.token });
+                await put3("GITHUB_APP_BOT_EMAIL", bot?.email ?? "", false);
+                await put3("GITHUB_APP_BOT_NAME", bot?.login ?? `${pending.slug}[bot]`, false);
+              }
+              await pendingStore.patch(state, { done: true });
+              return { ok: true, account: pending.account ?? first.account };
+            } catch (e) {
+              const error2 = String(e);
+              await pendingStore.patch(state, { error: error2 }).catch(() => {
+              });
+              return { ok: false, error: error2 };
+            }
+          };
           if (url.pathname === "/api/connectors/github/app/status" && req.method === "POST") {
-            const { state } = JSON.parse(rawBody || "{}");
-            const pending = state ? githubAppPending.get(state, Date.now()) : void 0;
+            const { state = "" } = JSON.parse(rawBody || "{}");
+            const pendingStore = opts.connectorAuthPending?.githubApp;
+            const found2 = await lookupGithubAppPending(pendingStore, state);
+            const pending = found2.pending;
             const reply = (body2) => res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(body2));
-            if (!pending) {
-              reply({ ok: false, error: "expired" });
+            if (!pending || !pendingStore) {
+              reply({ ok: false, error: found2.message });
               return;
             }
             if (pending.error) {
@@ -214909,46 +214986,28 @@ ${composed}`;
               reply({ ok: true, account: pending.account, ...permissionView() });
               return;
             }
-            if (!pending.appId || !pending.privateKeyPem) {
-              reply({ ok: false, error: "pending" });
+            const result = await finishGithubAppInstall(state, pending, pendingStore);
+            if (result.ok) reply({ ok: true, account: result.account ?? pending.account, ...permissionView() });
+            else reply({ ok: false, error: result.error });
+            return;
+          }
+          if (url.pathname === "/api/connectors/github/app/setup-callback" && req.method === "GET") {
+            const state = url.searchParams.get("state") ?? "";
+            const html = (ok3, msg) => res.writeHead(200, { "content-type": "text/html; charset=utf-8" }).end(callbackHtml(ok3, msg));
+            const pendingStore = opts.connectorAuthPending?.githubApp;
+            const found2 = await lookupGithubAppPending(pendingStore, state);
+            if (!found2.pending || !pendingStore) {
+              html(false, state ? found2.message : "GitHub \u4E0A\u7684\u5B89\u88C5\u5DF2\u751F\u6548\uFF1B\u5982\u679C\u63A7\u5236\u53F0\u91CC\u8FD8\u6CA1\u663E\u793A\u5DF2\u8FDE\u63A5\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D");
               return;
             }
-            try {
-              const installs = await listAppInstallations({
-                appId: pending.appId,
-                privateKeyPem: pending.privateKeyPem
-              });
-              const first = installs[0];
-              if (!first) {
-                reply({ ok: false, error: "pending" });
-                return;
-              }
-              const svc = await connectorActorsService();
-              if (!svc) throw new Error("actors service unavailable");
-              const scope2 = pending.actorId ? { scope: "personal", actorId: pending.actorId } : { scope: "global" };
-              const put3 = (key2, value2, encrypted) => svc.putVariable({ key: key2, value: value2, ...scope2, connectorId: "github", encrypted });
-              await put3("GITHUB_APP_INSTALLATION_ID", first.installationId, false);
-              const minted = await mintInstallationToken({
-                appId: pending.appId,
-                privateKeyPem: pending.privateKeyPem,
-                installationId: first.installationId
-              });
-              if (pending.actorId) {
-                await put3("GITHUB_APP_TOKEN", minted.token, true);
-                await put3("GITHUB_APP_TOKEN_EXPIRES_AT", String(minted.expiresAtMs), false);
-              }
-              if (pending.slug) {
-                const bot = await fetchAppBotIdentity(pending.slug, { token: minted.token });
-                await put3("GITHUB_APP_BOT_EMAIL", bot?.email ?? "", false);
-                await put3("GITHUB_APP_BOT_NAME", bot?.login ?? `${pending.slug}[bot]`, false);
-              }
-              pending.done = true;
-              delete pending.privateKeyPem;
-              reply({ ok: true, account: pending.account ?? first.account, ...permissionView() });
-            } catch (e) {
-              pending.error = String(e);
-              reply({ ok: false, error: pending.error });
+            if (url.searchParams.get("setup_action") === "request") {
+              html(false, "\u5DF2\u5411\u7EC4\u7EC7\u7BA1\u7406\u5458\u63D0\u4EA4\u5B89\u88C5\u7533\u8BF7\uFF0C\u6279\u51C6\u540E\u56DE\u5230\u63A7\u5236\u53F0\u91CD\u65B0\u70B9\u4E00\u6B21\u300C\u8FDE\u63A5\u300D");
+              return;
             }
+            const result = await finishGithubAppInstall(state, found2.pending, pendingStore);
+            if (result.ok) html(true, `\u5DF2\u8FDE\u63A5\u4E3A ${result.account ?? found2.pending.account ?? "GitHub App"}`);
+            else if (result.error === "pending") html(false, "GitHub \u8FD8\u6CA1\u67E5\u5230\u8FD9\u6B21\u5B89\u88C5\uFF0C\u8BF7\u56DE\u5230\u63A7\u5236\u53F0\u7A0D\u540E\u91CD\u8BD5");
+            else html(false, result.error);
             return;
           }
           if (url.pathname === "/api/connectors/feishu/login/start" && req.method === "POST") {
@@ -215325,14 +215384,14 @@ async function markDeliveredWithRetry(store, messageId, attempts = 3) {
   }
   return false;
 }
-var http, import_node_crypto41, githubAppPending, connectorAuthSnapshots, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, APPEND_TURN_START_WAIT_MS, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
+var http, import_node_crypto42, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, APPEND_TURN_START_WAIT_MS, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
     init_src();
     init_file_limits2();
     http = __toESM(require("node:http"), 1);
-    import_node_crypto41 = require("node:crypto");
+    import_node_crypto42 = require("node:crypto");
     init_chat_session();
     init_chat_system_message();
     init_sealed_node_receipt();
@@ -215364,7 +215423,6 @@ var init_server3 = __esm({
     init_live_chat();
     init_chat_turn_wait();
     init_append_now();
-    init_insert_status();
     init_append_progress();
     init_workorder_drafts();
     init_draft_edit();
@@ -215385,6 +215443,7 @@ var init_server3 = __esm({
     init_chat_turn_gate();
     init_chat_submission();
     init_chat_insert_evidence();
+    init_insert_undelivered();
     init_chat_workorder_files();
     init_chat_item_ledger();
     init_chat_cancel_attribution();
@@ -215396,10 +215455,9 @@ var init_server3 = __esm({
     init_knowledge2();
     init_assembly();
     init_child_live_turn();
+    init_registry_audit_sink();
     init_src8();
     init_continuation3();
-    githubAppPending = new PendingAppCreations();
-    connectorAuthSnapshots = /* @__PURE__ */ new Map();
     CONNECTOR_AUTH_SNAPSHOT_TTL_MS = 30 * 60 * 1e3;
     defaultResolveActor = (token) => token.startsWith("token:") ? token.slice("token:".length) : null;
     enc = (s2) => new TextEncoder().encode(s2);
@@ -215495,25 +215553,25 @@ function createTokenIssuer(opts = {}) {
 function createNodeTokenStore(file) {
   const read3 = () => {
     try {
-      return JSON.parse(fs20.readFileSync(file, "utf8"));
+      return JSON.parse(fs21.readFileSync(file, "utf8"));
     } catch {
       return {};
     }
   };
-  const write = (table) => fs20.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
+  const write = (table) => fs21.writeFileSync(file, JSON.stringify(table, null, 2), { mode: 384 });
   const revokedFile = file.replace(/(\.json)?$/, "-revoked.json");
   const readRevoked = () => {
     try {
-      return JSON.parse(fs20.readFileSync(revokedFile, "utf8"));
+      return JSON.parse(fs21.readFileSync(revokedFile, "utf8"));
     } catch {
       return {};
     }
   };
-  const writeRevoked = (table) => fs20.writeFileSync(revokedFile, JSON.stringify(table, null, 2), { mode: 384 });
+  const writeRevoked = (table) => fs21.writeFileSync(revokedFile, JSON.stringify(table, null, 2), { mode: 384 });
   return {
     issue(nodeId) {
       const table = read3();
-      const token = `ont_${(0, import_node_crypto42.randomBytes)(24).toString("base64url")}`;
+      const token = `ont_${(0, import_node_crypto43.randomBytes)(24).toString("base64url")}`;
       table[token] = nodeId;
       write(table);
       return token;
@@ -215553,14 +215611,14 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   const read3 = () => {
     if (!file) return table;
     try {
-      return new Map(Object.entries(JSON.parse(fs20.readFileSync(file, "utf8"))));
+      return new Map(Object.entries(JSON.parse(fs21.readFileSync(file, "utf8"))));
     } catch {
       return /* @__PURE__ */ new Map();
     }
   };
   const write = (m2) => {
     if (!file) return;
-    fs20.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
+    fs21.writeFileSync(file, JSON.stringify(Object.fromEntries(m2), null, 2), { mode: 384 });
   };
   const table = /* @__PURE__ */ new Map();
   const prune = () => {
@@ -215573,7 +215631,7 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   return {
     issue(name, ttlMs = defaultTtlMs, companyId) {
       const m2 = prune();
-      const token = `ent_${(0, import_node_crypto42.randomBytes)(24).toString("base64url")}`;
+      const token = `ent_${(0, import_node_crypto43.randomBytes)(24).toString("base64url")}`;
       const expiresAt2 = Date.now() + ttlMs;
       m2.set(token, { name, expiresAt: expiresAt2, ...companyId !== void 0 ? { companyId } : {} });
       write(m2);
@@ -215622,33 +215680,33 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto42, fs20, path20, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
+var import_node_crypto43, fs21, path20, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
-    import_node_crypto42 = require("node:crypto");
-    fs20 = __toESM(require("node:fs"), 1);
+    import_node_crypto43 = require("node:crypto");
+    fs21 = __toESM(require("node:fs"), 1);
     path20 = __toESM(require("node:path"), 1);
     SESSION_TOKEN_PREFIX = "oat_v2_";
     b64url2 = (value2) => Buffer.from(value2).toString("base64url");
     fromB64url = (value2) => Buffer.from(value2, "base64url").toString("utf8");
     readOrCreateSecret = (file) => {
-      if (!file) return (0, import_node_crypto42.randomBytes)(32);
+      if (!file) return (0, import_node_crypto43.randomBytes)(32);
       try {
-        const raw = fs20.readFileSync(file, "utf8").trim();
+        const raw = fs21.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto42.randomBytes)(32);
-      fs20.mkdirSync(path20.dirname(file), { recursive: true });
-      fs20.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
+      const secret = (0, import_node_crypto43.randomBytes)(32);
+      fs21.mkdirSync(path20.dirname(file), { recursive: true });
+      fs21.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
-    sign = (secret, payload2) => (0, import_node_crypto42.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign = (secret, payload2) => (0, import_node_crypto43.createHmac)("sha256", secret).update(payload2).digest("base64url");
     signatureMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto42.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto43.timingSafeEqual)(a, b2);
     };
     isTokenClaims = (value2) => {
       if (value2 === null || typeof value2 !== "object") return false;
@@ -215670,6 +215728,9 @@ var init_tokens = __esm({
 function isOperatorRequest(auth) {
   return auth.scopes?.includes(OPERATOR_SCOPE) === true;
 }
+function operatorCrossCompanyRead(auth, method) {
+  return method === "GET" && isOperatorRequest(auth);
+}
 var OPERATOR_SCOPE;
 var init_operator = __esm({
   "../server/src/auth/operator.ts"() {
@@ -215707,33 +215768,33 @@ function createDataplaneTokenIssuer(opts = {}) {
     }
   };
 }
-var import_node_crypto43, fs21, path21, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
+var import_node_crypto44, fs22, path21, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
 var init_session_dataplane_token = __esm({
   "../server/src/session-dataplane-token.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
-    fs21 = __toESM(require("node:fs"), 1);
+    import_node_crypto44 = require("node:crypto");
+    fs22 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     init_src();
     PREFIX2 = "osd_";
     b64url3 = (v2) => Buffer.from(v2, "utf8").toString("base64url");
     fromB64url2 = (v2) => Buffer.from(v2, "base64url").toString("utf8");
-    sign2 = (secret, payload2) => (0, import_node_crypto43.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign2 = (secret, payload2) => (0, import_node_crypto44.createHmac)("sha256", secret).update(payload2).digest("base64url");
     sigMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto43.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto44.timingSafeEqual)(a, b2);
     };
     readOrCreateSecret2 = (file) => {
-      if (!file) return (0, import_node_crypto43.randomBytes)(32);
+      if (!file) return (0, import_node_crypto44.randomBytes)(32);
       try {
-        const raw = fs21.readFileSync(file, "utf8").trim();
+        const raw = fs22.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto43.randomBytes)(32);
-      fs21.mkdirSync(path21.dirname(file), { recursive: true });
-      fs21.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
+      const secret = (0, import_node_crypto44.randomBytes)(32);
+      fs22.mkdirSync(path21.dirname(file), { recursive: true });
+      fs22.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
     isClaims = (v2) => {
@@ -218406,11 +218467,11 @@ function onlyHits(pool, q2) {
   if (!q2.requireMatch || q2.keywords.length === 0) return [...pool];
   return pool.filter((r) => memoryMatchScore(r, q2.keywords) > 0);
 }
-var import_node_crypto44, MemoryActorMemoryStore, toIndexEntry;
+var import_node_crypto45, MemoryActorMemoryStore, toIndexEntry;
 var init_memory_actor_memory_store = __esm({
   "../testkit/src/memory-actor-memory-store.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     init_src();
     MemoryActorMemoryStore = class {
       rows = /* @__PURE__ */ new Map();
@@ -218464,7 +218525,7 @@ var init_memory_actor_memory_store = __esm({
       async write(input, now) {
         if (input.memId === void 0) {
           const rec2 = {
-            memId: `mem:${(0, import_node_crypto44.randomUUID)()}`,
+            memId: `mem:${(0, import_node_crypto45.randomUUID)()}`,
             actorId: input.actorId,
             projectId: input.projectId,
             keywords: [...input.keywords],
@@ -219275,13 +219336,13 @@ var init_stats = __esm({
 // ../server/src/domains/projects/project-id.ts
 function randomProjectId() {
-  return projectIdFromUuid((0, import_node_crypto45.randomUUID)());
+  return projectIdFromUuid((0, import_node_crypto46.randomUUID)());
 }
-var import_node_crypto45;
+var import_node_crypto46;
 var init_project_id = __esm({
   "../server/src/domains/projects/project-id.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_src();
   }
 });
@@ -221356,13 +221417,13 @@ function applyTurnPatch(t, patch) {
     ...patch.lastError !== void 0 ? { lastError: patch.lastError } : {}
   };
 }
-var import_node_crypto46, fs22, path22, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto47, fs23, path22, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
-    import_node_crypto46 = require("node:crypto");
-    fs22 = __toESM(require("node:fs"), 1);
+    import_node_crypto47 = require("node:crypto");
+    fs23 = __toESM(require("node:fs"), 1);
     path22 = __toESM(require("node:path"), 1);
     init_src();
     init_src9();
@@ -221376,8 +221437,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const memory = new MemoryOplogStore();
-        if (fs22.existsSync(file)) {
-          for (const line2 of fs22.readFileSync(file, "utf8").split("\n")) {
+        if (fs23.existsSync(file)) {
+          for (const line2 of fs23.readFileSync(file, "utf8").split("\n")) {
             if (!line2.trim()) continue;
             const stored = JSON.parse(line2);
             const { artifactId, seq, ...op } = stored;
@@ -221385,15 +221446,15 @@ var init_dev_store = __esm({
             if (assigned !== seq) throw new Error(`corrupt ndjson log: seq mismatch at ${line2}`);
           }
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, "");
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, "");
         }
         return new _NdjsonOplogStore(file, memory);
       }
       async append(artifactId, op, expectedSeq) {
         const seq = await this.memory.append(artifactId, op, expectedSeq);
         const stored = { ...op, artifactId, seq };
-        fs22.appendFileSync(this.file, JSON.stringify(stored) + "\n");
+        fs23.appendFileSync(this.file, JSON.stringify(stored) + "\n");
         return seq;
       }
       read(artifactId, fromSeq) {
@@ -221409,39 +221470,39 @@ var init_dev_store = __esm({
     DirBlobStore = class {
       constructor(dir) {
         this.dir = dir;
-        fs22.mkdirSync(dir, { recursive: true });
+        fs23.mkdirSync(dir, { recursive: true });
       }
       fileOf(hash3) {
         return path22.join(this.dir, hash3);
       }
       async put(bytes2) {
-        const hash3 = (0, import_node_crypto46.createHash)("sha256").update(bytes2).digest("hex");
+        const hash3 = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash3);
-        if (!fs22.existsSync(file)) fs22.writeFileSync(file, bytes2);
+        if (!fs23.existsSync(file)) fs23.writeFileSync(file, bytes2);
         return hash3;
       }
       async meta(hash3) {
         const file = this.fileOf(hash3);
-        if (!fs22.existsSync(file)) return null;
-        const size = fs22.statSync(file).size;
-        const fd = fs22.openSync(file, "r");
+        if (!fs23.existsSync(file)) return null;
+        const size = fs23.statSync(file).size;
+        const fd = fs23.openSync(file, "r");
         const head = Buffer.alloc(16);
-        fs22.readSync(fd, head, 0, 16, 0);
-        fs22.closeSync(fd);
+        fs23.readSync(fd, head, 0, 16, 0);
+        fs23.closeSync(fd);
         const contentType = sniffContentType(new Uint8Array(head));
         return { size, ...contentType ? { contentType } : {} };
       }
       async get(hash3) {
         const file = this.fileOf(hash3);
-        if (!fs22.existsSync(file)) throw new BlobNotFoundError(hash3);
-        return new Uint8Array(fs22.readFileSync(file));
+        if (!fs23.existsSync(file)) throw new BlobNotFoundError(hash3);
+        return new Uint8Array(fs23.readFileSync(file));
       }
       async has(hash3) {
-        return fs22.existsSync(this.fileOf(hash3));
+        return fs23.existsSync(this.fileOf(hash3));
       }
       async sweep(reachable) {
-        for (const name of fs22.readdirSync(this.dir)) {
-          if (!reachable.has(name)) fs22.unlinkSync(this.fileOf(name));
+        for (const name of fs23.readdirSync(this.dir)) {
+          if (!reachable.has(name)) fs23.unlinkSync(this.fileOf(name));
         }
       }
     };
@@ -221470,7 +221531,7 @@ var init_dev_store = __esm({
         this.file = file;
       }
       static async open(file) {
-        const seed = fs22.existsSync(file) ? JSON.parse(fs22.readFileSync(file, "utf8")) : [];
+        const seed = fs23.existsSync(file) ? JSON.parse(fs23.readFileSync(file, "utf8")) : [];
         return new _FileTypeRegistryStore(file, seed);
       }
       async put(def) {
@@ -221483,8 +221544,8 @@ var init_dev_store = __esm({
       }
       async save() {
         const tmp = `${this.file}.tmp`;
-        fs22.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
-        fs22.renameSync(tmp, this.file);
+        fs23.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
+        fs23.renameSync(tmp, this.file);
       }
     };
     FileRoleRegistryStore = class _FileRoleRegistryStore extends MemoryRoleRegistryStore {
@@ -221493,7 +221554,7 @@ var init_dev_store = __esm({
         this.file = file;
       }
       static async open(file) {
-        const seed = fs22.existsSync(file) ? JSON.parse(fs22.readFileSync(file, "utf8")) : [];
+        const seed = fs23.existsSync(file) ? JSON.parse(fs23.readFileSync(file, "utf8")) : [];
         return new _FileRoleRegistryStore(file, seed);
       }
       async put(def) {
@@ -221506,8 +221567,8 @@ var init_dev_store = __esm({
       }
       async save() {
         const tmp = `${this.file}.tmp`;
-        fs22.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
-        fs22.renameSync(tmp, this.file);
+        fs23.writeFileSync(tmp, JSON.stringify(await this.list(), null, 2));
+        fs23.renameSync(tmp, this.file);
       }
     };
     FileRegistryStore = class _FileRegistryStore extends MemoryRegistryStore {
@@ -221525,8 +221586,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileRegistryStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const a of snap.actors) await MemoryRegistryStore.prototype.upsertActor.call(store, a);
           for (const c of snap.configs) await MemoryRegistryStore.prototype.appendConfig.call(store, c);
           for (const t of snap.teams) await MemoryRegistryStore.prototype.upsertTeam.call(store, t);
@@ -221567,7 +221628,7 @@ var init_dev_store = __esm({
           skillFiles: skillFilesEntries,
           connections
         };
-        fs22.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
     FileAssistantBindStore = class _FileAssistantBindStore extends MemoryAssistantBindStore {
@@ -221585,11 +221646,11 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileAssistantBindStore(file);
-        if (fs22.existsSync(file)) store._load(JSON.parse(fs22.readFileSync(file, "utf8")));
+        if (fs23.existsSync(file)) store._load(JSON.parse(fs23.readFileSync(file, "utf8")));
         return store;
       }
       async save() {
-        fs22.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
       }
     };
     FileHumanPrefsStore = class _FileHumanPrefsStore extends MemoryHumanPrefsStore {
@@ -221607,11 +221668,11 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileHumanPrefsStore(file);
-        if (fs22.existsSync(file)) store._load(JSON.parse(fs22.readFileSync(file, "utf8")));
+        if (fs23.existsSync(file)) store._load(JSON.parse(fs23.readFileSync(file, "utf8")));
         return store;
       }
       async save() {
-        fs22.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(this._dump(), null, 2));
       }
     };
     FileProjectStateStore = class _FileProjectStateStore extends MemoryProjectStateStore {
@@ -221621,8 +221682,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileProjectStateStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const project of snap.projects ?? []) await MemoryProjectStateStore.prototype.upsertProject.call(store, project);
           const membersByProject = /* @__PURE__ */ new Map();
           for (const member of snap.members ?? []) {
@@ -221634,8 +221695,8 @@ var init_dev_store = __esm({
             await MemoryProjectStateStore.prototype.replaceProjectMembers.call(store, projectId2, members);
           }
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ projects: [], members: [] }, null, 2));
         }
         return store;
       }
@@ -221654,7 +221715,7 @@ var init_dev_store = __esm({
       async save() {
         const projects = await this.listProjects();
         const members = (await Promise.all(projects.map((project) => this.listProjectMembers(project.id)))).flat();
-        fs22.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify({ projects, members }, null, 2));
       }
     };
     FileArtifactStateStore = class _FileArtifactStateStore extends MemoryArtifactStateStore {
@@ -221664,8 +221725,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileArtifactStateStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const artifact of snap.artifacts ?? []) await MemoryArtifactStateStore.prototype.upsertArtifact.call(store, artifact);
           for (const revision of snap.revisions ?? []) await MemoryArtifactStateStore.prototype.upsertRevision.call(store, revision);
           for (const event of snap.events ?? []) await MemoryArtifactStateStore.prototype.appendEvent.call(store, event);
@@ -221675,8 +221736,8 @@ var init_dev_store = __esm({
           for (const ws of snap.workspaceDispatchHeld ?? []) await MemoryArtifactStateStore.prototype.setWorkspaceDispatchHold.call(store, ws, true);
           for (const f2 of snap.workOrderFiles ?? []) await MemoryArtifactStateStore.prototype.addWorkOrderFile.call(store, f2);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [], workOrderFiles: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ artifacts: [], revisions: [], events: [], annotations: [], nodeOutputs: [], workspaceBindings: [], workspaceDispatchHeld: [], workOrderFiles: [] }, null, 2));
         }
         return store;
       }
@@ -221713,7 +221774,7 @@ var init_dev_store = __esm({
         await this.save();
       }
       async save() {
-        fs22.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(await this.listAll(), null, 2));
       }
     };
     FileTraceStore = class _FileTraceStore extends MemoryTraceStore {
@@ -221740,25 +221801,25 @@ var init_dev_store = __esm({
         return path22.join(this.eventsDir, `${encodeURIComponent(runId)}.ndjson`);
       }
       appendLine(file, obj2) {
-        fs22.appendFileSync(file, JSON.stringify(obj2) + "\n");
+        fs23.appendFileSync(file, JSON.stringify(obj2) + "\n");
       }
       static replay(file, fn) {
-        if (!fs22.existsSync(file)) return;
-        for (const line2 of fs22.readFileSync(file, "utf8").split("\n")) {
+        if (!fs23.existsSync(file)) return;
+        for (const line2 of fs23.readFileSync(file, "utf8").split("\n")) {
           if (!line2.trim()) continue;
           fn(JSON.parse(line2));
         }
       }
       static async open(dir) {
         const store = new _FileTraceStore(dir);
-        fs22.mkdirSync(store.eventsDir, { recursive: true });
+        fs23.mkdirSync(store.eventsDir, { recursive: true });
         _FileTraceStore.replay(store.runsFile, (r) => store.restoreRun(r));
-        for (const name of fs22.readdirSync(store.eventsDir)) {
+        for (const name of fs23.readdirSync(store.eventsDir)) {
           _FileTraceStore.replay(path22.join(store.eventsDir, name), (e) => store.restoreEvent(e));
         }
         _FileTraceStore.replay(store.toolCallsFile, (c) => store.restoreToolCall(c));
         _FileTraceStore.replay(store.linksFile, (l) => store.restoreLink(l));
-        store.restoreContinuity(fs22.existsSync(store.continuityFile) ? JSON.parse(fs22.readFileSync(store.continuityFile, "utf8")) : {});
+        store.restoreContinuity(fs23.existsSync(store.continuityFile) ? JSON.parse(fs23.readFileSync(store.continuityFile, "utf8")) : {});
         return store;
       }
       async createRun(input) {
@@ -221810,8 +221871,8 @@ var init_dev_store = __esm({
       }
       saveContinuity() {
         const tmp = `${this.continuityFile}.tmp`;
-        fs22.writeFileSync(tmp, JSON.stringify(this.continuitySnapshot(), null, 2));
-        fs22.renameSync(tmp, this.continuityFile);
+        fs23.writeFileSync(tmp, JSON.stringify(this.continuitySnapshot(), null, 2));
+        fs23.renameSync(tmp, this.continuityFile);
       }
       async appendEvents(runId, inputs) {
         const existing = await super.listEvents(runId, {});
@@ -222276,8 +222337,8 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileChatSessionStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const [sid, copies] of Object.entries(snap.outputCopies ?? {})) store.outputCopies.set(sid, copies);
           for (const [sid, fps] of Object.entries(snap.outputFingerprints ?? {})) store.outputFingerprints.set(sid, fps);
           for (const [sid, issues] of Object.entries(snap.fileIssues ?? {})) store.fileIssues.set(sid, issues);
@@ -222287,8 +222348,8 @@ var init_dev_store = __esm({
           for (const [sid, kinds] of Object.entries(snap.sessionWorkOrderKinds ?? {})) store.sessionWorkOrderKinds.set(sid, new Map(Object.entries(kinds)));
           for (const [sid, list2] of Object.entries(snap.pending ?? {})) store.pending.set(sid, list2);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ sessions: [], messages: {}, sessionWorkOrders: {} }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ sessions: [], messages: {}, sessionWorkOrders: {} }, null, 2));
         }
         return store;
       }
@@ -222382,7 +222443,7 @@ var init_dev_store = __esm({
           sessionWorkOrderKinds: Object.fromEntries([...this.sessionWorkOrderKinds].map(([k2, v2]) => [k2, Object.fromEntries(v2)])),
           pending: Object.fromEntries(this.pending)
         };
-        fs22.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
     MemoryChatTurnStore = class {
@@ -222465,17 +222526,17 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileChatTurnStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const t of snap.turns ?? []) store.turns.set(t.id, t);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ turns: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ turns: [] }, null, 2));
         }
         return store;
       }
       persist() {
-        fs22.writeFileSync(this.file, JSON.stringify({ turns: [...this.turns.values()] }, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify({ turns: [...this.turns.values()] }, null, 2));
       }
     };
     MemoryReadMarkerStore = class _MemoryReadMarkerStore {
@@ -222501,12 +222562,12 @@ var init_dev_store = __esm({
       }
       static async open(file) {
         const store = new _FileReadMarkerStore(file);
-        if (fs22.existsSync(file)) {
-          const snap = JSON.parse(fs22.readFileSync(file, "utf8"));
+        if (fs23.existsSync(file)) {
+          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
           for (const m2 of snap.markers ?? []) store.markers.set(`${m2.actorId}\0${m2.scope}`, m2);
         } else {
-          fs22.mkdirSync(path22.dirname(file), { recursive: true });
-          fs22.writeFileSync(file, JSON.stringify({ markers: [] }, null, 2));
+          fs23.mkdirSync(path22.dirname(file), { recursive: true });
+          fs23.writeFileSync(file, JSON.stringify({ markers: [] }, null, 2));
         }
         return store;
       }
@@ -222515,18 +222576,18 @@ var init_dev_store = __esm({
         this.save();
       }
       save() {
-        fs22.writeFileSync(this.file, JSON.stringify({ markers: [...this.markers.values()] }, null, 2));
+        fs23.writeFileSync(this.file, JSON.stringify({ markers: [...this.markers.values()] }, null, 2));
       }
     };
   }
 });
 // ../server/src/control-plane-file-store.ts
-var fs23, path23, MUTATORS2, SNAPSHOT_VERSION, FileControlPlaneStore;
+var fs24, path23, MUTATORS2, SNAPSHOT_VERSION, FileControlPlaneStore;
 var init_control_plane_file_store = __esm({
   "../server/src/control-plane-file-store.ts"() {
     "use strict";
-    fs23 = __toESM(require("node:fs"), 1);
+    fs24 = __toESM(require("node:fs"), 1);
     path23 = __toESM(require("node:path"), 1);
     init_src9();
     MUTATORS2 = [
@@ -222569,8 +222630,8 @@ var init_control_plane_file_store = __esm({
       }
       static async open(file) {
         const store = new _FileControlPlaneStore(file);
-        if (fs23.existsSync(file)) {
-          const snap = JSON.parse(fs23.readFileSync(file, "utf8"));
+        if (fs24.existsSync(file)) {
+          const snap = JSON.parse(fs24.readFileSync(file, "utf8"));
           const needsOnboardingBackfill = (snap.version ?? 1) < 2;
           const backfillAt = (/* @__PURE__ */ new Date()).toISOString();
           for (const c of snap.companies ?? []) await MemoryControlPlaneStore.prototype.createCompany.call(store, c);
@@ -222588,7 +222649,7 @@ var init_control_plane_file_store = __esm({
           for (const op of snap.offboardings ?? []) store.offboardings.set(`${op.companyId}\0${op.operationId}`, op);
           if (needsOnboardingBackfill) await store.save();
         } else {
-          fs23.mkdirSync(path23.dirname(file), { recursive: true });
+          fs24.mkdirSync(path23.dirname(file), { recursive: true });
         }
         return store;
       }
@@ -222625,7 +222686,7 @@ var init_control_plane_file_store = __esm({
           // 交接操作无按公司列举的读面（按 operationId / accountId 定位），直接读 protected map。
           offboardings: [...this.offboardings.values()]
         };
-        fs23.writeFileSync(this.file, JSON.stringify(snap, null, 2));
+        fs24.writeFileSync(this.file, JSON.stringify(snap, null, 2));
       }
     };
   }
@@ -222701,7 +222762,7 @@ var init_company_engine_router = __esm({
 // ../server/src/skill-market-client.ts
 function digestOf2(bytes2) {
-  return `sha256:${(0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex")}`;
 }
 function createSkillMarketClientFromEnv(env = process.env) {
   const base = env["SKILL_MARKET_BASE_URL"];
@@ -222712,11 +222773,11 @@ function createSkillMarketClientFromEnv(env = process.env) {
 function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var import_node_crypto47, DisabledSkillMarketClient, FakeSkillMarketClient, HttpSkillMarketClient;
+var import_node_crypto48, DisabledSkillMarketClient, FakeSkillMarketClient, HttpSkillMarketClient;
 var init_skill_market_client = __esm({
   "../server/src/skill-market-client.ts"() {
     "use strict";
-    import_node_crypto47 = require("node:crypto");
+    import_node_crypto48 = require("node:crypto");
     init_src();
     DisabledSkillMarketClient = class {
       async listSkills(_input) {
@@ -223567,7 +223628,7 @@ async function copySessionOutputs(deps) {
       continue;
     }
     const saved = existing?.[file.path];
-    if (saved && savedContentHash(saved) === (0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex")) {
+    if (saved && savedContentHash(saved) === (0, import_node_crypto49.createHash)("sha256").update(bytes2).digest("hex")) {
       const aligned = { ...saved, size: bytes2.length, mtime: file.mtime };
       delete aligned.editedAt;
       realigned.push(aligned);
@@ -223664,11 +223725,11 @@ function createOutputCopyScheduler(deps) {
     }
   };
 }
-var import_node_crypto48, OUTPUT_COPY_LIMITS;
+var import_node_crypto49, OUTPUT_COPY_LIMITS;
 var init_outputs_copy = __esm({
   "../server/src/domains/chat-sessions/outputs-copy.ts"() {
     "use strict";
-    import_node_crypto48 = require("node:crypto");
+    import_node_crypto49 = require("node:crypto");
     init_src();
     OUTPUT_COPY_LIMITS = {
       maxFileBytes: FILE_CONTENT_MAX_BYTES,
@@ -223883,11 +223944,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto49, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto50, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto49 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     init_zod();
     init_src7();
     init_config_audit();
@@ -224014,7 +224075,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto49.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto50.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -224162,11 +224223,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto50, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto51, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto50 = require("node:crypto");
+    import_node_crypto51 = require("node:crypto");
     init_zod();
     init_src7();
     init_config_audit();
@@ -224191,7 +224252,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto50.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto51.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -224204,8 +224265,13 @@ var init_roles_admin = __esm({
       list() {
         return this.deps.store.list();
       }
-      async usage(name) {
-        return (await this.usageMany([name]))[name];
+      /**
+       * @param companyId 按哪家公司的员工数人头（Bug 0245）。岗位目录全公司共用一份，但「谁在岗」是各公司自己的——
+       *   GET /api/roles 必须传请求所属公司，否则落到默认公司那份早已不再更新的旧名单，所有公司都报同一组错数。
+       *   缺省 = 默认公司（改名 / 弃用 / 删除这几条写路径暂维持原口径）。
+       */
+      async usage(name, companyId) {
+        return (await this.usageMany([name], companyId))[name];
       }
       /**
        * ADR 0088 D4：多个岗位的用量**一次取数**。此前 `/api/roles` 对每个岗位各调一次 `usage()`，
@@ -224213,9 +224279,9 @@ var init_roles_admin = __esm({
        * ——13 个岗位 = 13 份全表。员工页首屏门控在这条上（listRoles 与 listActors 并行等齐才渲染）。
        * 三份数据只取一次，逐岗位在内存算。单岗位口径与旧 `usage()` 逐字段一致（后者现转调本方法）。
        */
-      async usageMany(names) {
+      async usageMany(names, companyId) {
         const [actors, types2, owners] = await Promise.all([
-          this.deps.actors(),
+          this.deps.actors(companyId),
           this.deps.types(),
           this.deps.artifactOwners?.() ?? Promise.resolve([])
         ]);
@@ -227050,8 +227116,8 @@ var init_chat_recovery = __esm({
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto51.randomBytes)(16);
-  const dk = (0, import_node_crypto51.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto52.randomBytes)(16);
+  const dk = (0, import_node_crypto52.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -227068,8 +227134,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto51.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto51.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto52.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto52.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -227077,17 +227143,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto51.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto52.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto51.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto52.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto51.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto52.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -227099,21 +227165,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto51.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto52.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto51.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto52.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto51.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto52.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto51, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto52, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -228497,18 +228563,18 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto52.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto53.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe2(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto52, REDACTED_MARKER, ActorsService, MASK_TAIL_MIN_LENGTH, mask, changedKeys;
+var import_node_crypto53, REDACTED_MARKER, ActorsService, MASK_TAIL_MIN_LENGTH, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
     init_file_limits2();
     init_keyed_mutex();
-    import_node_crypto52 = require("node:crypto");
+    import_node_crypto53 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -229132,7 +229198,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path46, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto52.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto53.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path46, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -230255,15 +230321,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto52.randomBytes)(12);
-        const cipher = (0, import_node_crypto52.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto53.randomBytes)(12);
+        const cipher = (0, import_node_crypto53.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc3 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc3.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto52.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto53.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -230876,7 +230942,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto53.createHash)("sha256");
+    const hasher = (0, import_node_crypto54.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -230901,11 +230967,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto53.createHash)("sha256");
+    const hasher = (0, import_node_crypto54.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto53.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto54.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -230926,11 +230992,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto53.createHash)("sha256");
+    const hasher = (0, import_node_crypto54.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto53.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto54.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -230950,7 +231016,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path46,
     content: content3,
-    blobHash: (0, import_node_crypto53.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto54.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -230974,7 +231040,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto53.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto54.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -231007,7 +231073,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path46,
     content: content3,
-    blobHash: (0, import_node_crypto53.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto54.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -231024,11 +231090,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto53;
+var import_node_crypto54;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
   }
 });
@@ -232800,54 +232866,6 @@ var init_credential_audit_log = __esm({
   }
 });
-// ../server/src/domains/actors/registry-audit-sink.ts
-function createRegistryAuditSink(file) {
-  const listeners = /* @__PURE__ */ new Set();
-  const notify = (msg) => {
-    for (const listener of listeners) listener(msg);
-  };
-  return {
-    /** 登记审计：落盘 + 推 registry 通知（前端据此重拉登记类投影）。 */
-    registryAudit: (record9) => {
-      fs24.appendFile(file, JSON.stringify(record9) + "\n", () => {
-      });
-      notify({ kind: record9.kind, actor: record9.actor, target: record9.target, timestamp: record9.timestamp });
-    },
-    /**
-     * 凭据审计（ADR 凭据保险库 §4.7）：与登记审计同落一份旁账，按 kind 前缀 `credential_` 区分。
-     *
-     * **只落盘、不推 registry 通知**（D-10 推送面）。registry 通知是实例级的，`/api/events` 原样转发给
-     * 任何已认证的连接、不分组织；凭据事件推进去 = 别家组织开一条 SSE 就能实时看到「谁在读/改哪个变量」。
-     * 仓内没有任何消费方订它（2.0 前端只订无内容的 runtime-status，而后者本来就不被凭据事件唤醒）。
-     * 要看凭据审计走 `GET /api/variables/reveal-audit`（按请求方组织过滤）。将来若需要实时推送，
-     * 得先让通知带组织、`/api/events` 按组织过滤（recvvzbhOGiS7l 的完整修复），再放回来。
-     */
-    credentialAudit: (record9) => {
-      fs24.appendFile(file, JSON.stringify(record9) + "\n", () => {
-      });
-    },
-    /** runtime 状态变了：只发无内容的失效提示（ADR 0576）。 */
-    notifyRuntimeStatus: () => {
-      notify({ kind: "runtime_status_changed", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
-    },
-    notifications: {
-      subscribe(listener) {
-        listeners.add(listener);
-        return () => {
-          listeners.delete(listener);
-        };
-      }
-    }
-  };
-}
-var fs24;
-var init_registry_audit_sink = __esm({
-  "../server/src/domains/actors/registry-audit-sink.ts"() {
-    "use strict";
-    fs24 = __toESM(require("node:fs"), 1);
-  }
-});
 // ../server/src/domains/actors/stop-on-delete.ts
 function planStopForDeletedActor(actorId, open3) {
   const mine = open3.filter((row) => row.actorId === actorId);
@@ -233074,7 +233092,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto54.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto55.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -233114,11 +233132,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.companyMemberRole ? { companyMemberRole: opts.companyMemberRole } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {} })
   };
 }
-var import_node_crypto54;
+var import_node_crypto55;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto55 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -234811,6 +234829,9 @@ function isDispatchLayerFailure(detail) {
   const reason = detail?.reason;
   return typeof reason === "string" && reason.startsWith("dispatch ");
 }
+function externalRefOf(a) {
+  return a.contentKind === "external" && a.contentRef ? { externalRef: a.contentRef } : {};
+}
 function buildWorkorderActivity(input) {
   const { workorderId, snap, events } = input;
   const ref2 = input.ref ?? ((id) => ({ id }));
@@ -234838,7 +234859,7 @@ function buildWorkorderActivity(input) {
     } else if (isRootBrief) {
       list2.push({ id: a.id, revisionId: a.workId, name: "\u4EFB\u52A1\u76EE\u6807", path: "\u4EFB\u52A1\u76EE\u6807.md", nodeId });
     } else {
-      list2.push({ id: a.id, revisionId: a.workId, name: a.name, nodeId });
+      list2.push({ id: a.id, revisionId: a.workId, name: a.name, nodeId, ...externalRefOf(a) });
     }
     artifactsByWork.set(a.workId, list2);
   }
@@ -235197,6 +235218,7 @@ function buildWorkorderActivity(input) {
   const workOfIssue = /* @__PURE__ */ new Map();
   const reasonWorksOfIssue = /* @__PURE__ */ new Map();
   const recoveryLetterIssueIds = /* @__PURE__ */ new Set();
+  const backpressureIssueIds = /* @__PURE__ */ new Set();
   const plainComments = [];
   const escalations = [];
   const gapCreatedSeq = /* @__PURE__ */ new Map();
@@ -235428,6 +235450,7 @@ function buildWorkorderActivity(input) {
         const isGap = issueKind === "gap";
         const raisedFrom = str5(ev.raisedByNodeId);
         const isBackpressure = !isEscalation && !isGap && !!raisedFrom && raisedFrom !== nodeId;
+        if (isBackpressure) backpressureIssueIds.add(issueId);
         const body2 = str5(ev.body) ?? "";
         if (isEscalation) {
           const linkedGapId = str5(ev.gapId);
@@ -235475,6 +235498,11 @@ function buildWorkorderActivity(input) {
           /* 回压是**执行中断**（这一轮走不下去了，要外部介入）；唤醒信那档不是中断，仍是进行中。
              缺口走不到这里了（F4 在上面 break）。 */
           phase: isBackpressure ? "stuck" : "running",
+          /* 回压卡**不喊**：砖红只给「此刻等人动手」的那张（奕璇 2026-09-22）。轮到动手的是被回压节点的
+             负责人——真人时由他那一轮喊（砖红 + 去处理），agent 时它自己在跑（暖橙）。提要求这一段在
+             开口那一刻就结束了，与缺口中断的执行卡同一条先例（F1：上一段结束就转灰，该喊的是下游那张）。
+             不写这两个字段时前端退回老规则（开着 + stuck ⇒ 砖红），同一件事页面上会有两张红卡。 */
+          ...isBackpressure ? { segmentOpen: false, awaitingHuman: false } : {},
           status: isBackpressure ? ACTIVITY_COPY.backpressure(
             nameOf2(authorId),
             nodeName(nodeId),
@@ -235484,11 +235512,15 @@ function buildWorkorderActivity(input) {
              此前只有缺口/回压被排除，留言仍是「正文当小状态 + 展开区再印一遍」，
              全库实测最长 8096 字印两遍（`ws:wo-56bba3c1`），一张卡顶掉整屏。 */
           artifacts: [],
-          /* 缺口不出按钮（处置在缺口线上，由「任务内沟通」那一列进）；
-             留言给「查看沟通」直达留言线——线是投影出来的、恒存在，id 这里就能算；
-             回压仍给「去处理」落到产物预览栏（那儿才有批注的处置面）。
-             留言算不出对面是谁（该产物没负责人）时退回「去处理」，别给一个开不了的落点。 */
-          actions: isBackpressure || !commentTargetId ? [{ kind: "open_issue", label: BUTTON.handle, target: issueId }] : [{ kind: "open_thread", label: BUTTON.view, target: commentThreadSessionId(authorId, commentTargetId), variant: "quiet" }]
+          /* 按钮只长在「人能点、而且轮到人动手」的那张卡上（奕璇 2026-09-22）：
+             · 回压卡**一个按钮都没有**：它署名的是提要求的一方（多为 agent），轮到动手的是被回压节点的
+               负责人。负责人是真人时「去处理」挂在系统给他开的那一轮上（见事件循环之后
+               `backpressureAwaitingOwner` 那一段），落点、target 与原先这颗一样；负责人是 agent 时
+               它自己会跑，没有人要动手。
+             · 唤醒信给「查看沟通」直达留言线——线是投影出来的、恒存在，id 这里就能算。
+             · 唤醒信算不出对面是谁（该产物没负责人 / 负责人就是作者）时退回「去处理」，但**只在署名的
+               是真人时**给：agent / 系统署名的卡挂「去处理」，点的人进去没有一件是他该做的事。 */
+          actions: isBackpressure ? [] : !commentTargetId ? isHumanActorId(authorId) ? [{ kind: "open_issue", label: BUTTON.handle, target: issueId }] : [] : [{ kind: "open_thread", label: BUTTON.view, target: commentThreadSessionId(authorId, commentTargetId), variant: "quiet" }]
         });
         break;
       }
@@ -235799,6 +235831,18 @@ function buildWorkorderActivity(input) {
     const message = (input.runFailures ?? []).filter((f2) => f2.nodeId === card2.nodeId && f2.startedAt >= card2.at && f2.startedAt <= trip.at && f2.message.trim()).sort((a, b2) => a.startedAt.localeCompare(b2.startedAt)).at(-1)?.message;
     return message ? firstSentence(message) : void 0;
   };
+  for (const card2 of executionCards) {
+    const workId = card2.openWorkId;
+    if (!workId || !isHumanActorId(card2.executorId)) continue;
+    const issueId = [...backpressureIssueIds].find((id) => reasonWorksOfIssue.get(id)?.includes(workId) && !issueById.get(id)?.resolvedAt && !plainResolveEvents.has(id));
+    if (!issueId) continue;
+    card2.phase = "not_started";
+    card2.phaseLabel = PHASE_LABEL.escalationPending;
+    card2.segmentOpen = true;
+    card2.awaitingHuman = true;
+    card2.status = ACTIVITY_COPY.backpressureAwaitingOwner(nameOf2(card2.executorId), nodeName(card2.nodeId));
+    card2.actions = [{ kind: "open_issue", label: BUTTON.handle, target: issueId, variant: "primary" }];
+  }
   for (const card2 of executionCards) {
     const trips = card2.stopLossTrips;
     if (!trips?.length) continue;
@@ -236310,6 +236354,11 @@ var init_activity2 = __esm({
          ①「缺口卡」也删掉（F4）：它和执行卡挂的是同一段运行、同一份轨迹，点哪张打开的都一样。 */
       /** 回压（下游对上游提修改要求）——发起人 2026-09-08 认可的措辞。 */
       backpressure: (raiser, upstream, owner) => `${raiser} \u5BF9\u300A${upstream}\u300B\u63D0\u51FA\u4FEE\u6539\u8981\u6C42\uFF0C\u9700\u8981 @${owner} \u5904\u7406\u3002`,
+      /**
+       * 被回压节点的负责人是**真人**时，系统为他开的那一轮（奕璇 2026-09-22 定）：这一轮不会自己跑，
+       * 是在等他动手——不能再说「正在根据反馈调整」（`issueDriven`），那句会让一张没人在动的卡挂成「进行中」。
+       */
+      backpressureAwaitingOwner: (owner, node2) => `\u7B49 @${owner} \u6839\u636E\u4FEE\u6539\u8981\u6C42\u8C03\u6574\u300A${node2}\u300B\u3002`,
       /**
        * 留言 / 批注——**一句索引，正文不上卡**（发起人 2026-09-09 定）。
        *
@@ -236393,7 +236442,10 @@ var init_activity2 = __esm({
        * 所以仍然要 override，只是换成和 `stuck` 一族同一个词。
        */
       failed: "\u6267\u884C\u4E2D\u65AD",
-      /** 升级卡没人处理那一档。**不写「待你处理」**：别人看到的字要和该处理的人看到的一样。 */
+      /**
+       * 升级卡没人处理那一档。**不写「待你处理」**：别人看到的字要和该处理的人看到的一样。
+       * 被回压的真人负责人那一轮（等他按修改要求动手）也用这个词——同样是「这一段卡在人身上」。
+       */
       escalationPending: "\u5F85\u5904\u7406"
     };
     COORDINATOR_CARD_PREFIX = "coordinator:";
@@ -236552,7 +236604,7 @@ function artifactsOfWork(work, input) {
     } else if (isRootBrief) {
       list2.push({ id: a.id, revisionId: a.workId, name: "\u4EFB\u52A1\u76EE\u6807", path: "\u4EFB\u52A1\u76EE\u6807.md", nodeId: artifactNodeId });
     } else {
-      list2.push({ id: a.id, revisionId: a.workId, name: a.name, nodeId: artifactNodeId });
+      list2.push({ id: a.id, revisionId: a.workId, name: a.name, nodeId: artifactNodeId, ...externalRefOf(a) });
     }
   }
   return list2;
@@ -237602,11 +237654,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto55, import_node_fs16, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto56, import_node_fs16, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     import_node_fs16 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -237639,7 +237691,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto55.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto56.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -237772,7 +237824,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto55.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto56.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -239780,13 +239832,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs17, import_node_path21, import_node_crypto56, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs17, import_node_path21, import_node_crypto57, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs17 = __toESM(require("node:fs"), 1);
     import_node_path21 = __toESM(require("node:path"), 1);
-    import_node_crypto56 = __toESM(require("node:crypto"), 1);
+    import_node_crypto57 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -239804,7 +239856,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto56.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto57.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -241193,11 +241245,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto57, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto58, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto57 = require("node:crypto");
+    import_node_crypto58 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -241289,7 +241341,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto57.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto58.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -241498,7 +241550,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto57.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto58.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -241629,7 +241681,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto57.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto58.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -241686,7 +241738,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto57.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto58.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -241924,11 +241976,11 @@ var init_service6 = __esm({
 });
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto58, MemberOffboardingService;
+var import_node_crypto59, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
     init_service6();
     MemberOffboardingService = class {
       store;
@@ -242000,7 +242052,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at2 = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto58.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto59.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -242510,18 +242562,18 @@ var init_routes6 = __esm({
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto59.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto60.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto59.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto60.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto59, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto60, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -242546,7 +242598,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto59.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto60.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -243037,7 +243089,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope2 = companyId?.trim();
-  const suffix = scope2 ? `c${(0, import_node_crypto60.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope2 ? `c${(0, import_node_crypto61.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -243366,12 +243418,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto60;
+var import_node_crypto61;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
   }
 });
@@ -243731,6 +243783,10 @@ function nodesDomain(deps) {
     }
     if (rows.length > 0) console.log(`[nodes] \u989D\u5EA6\u6C34\u5408\uFF1A\u4ECE\u5E93\u91CC\u8BFB\u56DE ${rows.length} \u6761\u8FD0\u884C\u65F6\u989D\u5EA6`);
   }).catch((err) => console.warn(`[nodes] \u989D\u5EA6\u6C34\u5408\u5931\u8D25\uFF08\u7167\u65E7\u7B49\u4E0B\u4E00\u6B21\u91C7\u96C6\uFF09\uFF1A${err instanceof Error ? err.message : String(err)}`));
+  const quotaRefreshWaiters = /* @__PURE__ */ new Map();
+  const quotaRefreshInFlight = /* @__PURE__ */ new Map();
+  const QUOTA_REFRESH_TIMEOUT_MS = 4e4;
+  const QUOTA_CAPABLE_KINDS = /* @__PURE__ */ new Set(["codex", "claude-code"]);
   const UPDATE_TIMEOUT_MS = 15e4;
   const nodeUpdates = /* @__PURE__ */ new Map();
   function runtimeInfoOf(r) {
@@ -243812,6 +243868,45 @@ function nodesDomain(deps) {
     }
     return { version: null, source: null };
   }
+  async function refreshNodeQuotas(nodeId) {
+    const running = quotaRefreshInFlight.get(nodeId);
+    if (running) return running;
+    const hub = deps.getHub();
+    if (!hub) return { ok: false, code: "no-gateway", reason: "\u672C\u90E8\u7F72\u6CA1\u6709\u8282\u70B9\u7F51\u5173\uFF0C\u591F\u4E0D\u5230\u90A3\u53F0\u673A\u5668" };
+    const daemon = hub.connectedDaemons().find((d) => d.daemonId === nodeId);
+    if (!daemon) {
+      return { ok: false, code: "offline", reason: "\u8FD9\u53F0\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u770B\u5230\u7684\u662F\u5B83\u6700\u540E\u4E00\u6B21\u4E0A\u62A5\u7684\u989D\u5EA6\uFF1B\u628A\u673A\u5668\u8FDE\u56DE\u6765\u4E4B\u540E\u624D\u80FD\u91CD\u91C7" };
+    }
+    if (!daemon.meta.supportsQuotaRefresh) {
+      return { ok: false, code: "unsupported-version", reason: "\u8FD9\u53F0\u8282\u70B9\u7684\u7A0B\u5E8F\u7248\u672C\u8FD8\u4E0D\u652F\u6301\u989D\u5EA6\u91CD\u91C7\uFF0C\u66F4\u65B0\u8282\u70B9\u4E4B\u540E\u53EF\u7528" };
+    }
+    if (!daemon.meta.adapters.some((kind) => QUOTA_CAPABLE_KINDS.has(kind))) {
+      return { ok: false, code: "no-quota-runtime", reason: "\u8FD9\u53F0\u673A\u5668\u4E0A\u6CA1\u6709\u4F1A\u4E0A\u62A5\u989D\u5EA6\u7684\u8FD0\u884C\u65F6\uFF08\u53EA\u6709 Claude Code \u548C Codex \u80FD\u67E5\u5230\u8BA2\u9605\u989D\u5EA6\uFF09" };
+    }
+    const requestId = (0, import_node_crypto62.randomUUID)();
+    const task = new Promise((resolve12) => {
+      const timer = setTimeout(() => {
+        quotaRefreshWaiters.delete(requestId);
+        resolve12({ ok: false, code: "timeout", reason: `\u8FD9\u53F0\u8282\u70B9\u6CA1\u5728 ${Math.round(QUOTA_REFRESH_TIMEOUT_MS / 1e3)} \u79D2\u5185\u56DE\u8BDD\uFF0C\u9875\u9762\u4E0A\u4ECD\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u989D\u5EA6` });
+      }, QUOTA_REFRESH_TIMEOUT_MS);
+      quotaRefreshWaiters.set(requestId, {
+        // 节点自己说没采（连点被最小间隔挡下、这台机器上采集出错）→ 原样把它那句话带回前端。
+        resolve: (r) => resolve12(r.ok ? { ok: true } : { ok: false, code: "node", ...r.reason ? { reason: r.reason } : {} }),
+        timer
+      });
+      const sent = hub.dispatch(nodeId, { type: "refresh_quotas", requestId });
+      if (sent) return;
+      const waiter = quotaRefreshWaiters.get(requestId);
+      if (!waiter) return;
+      quotaRefreshWaiters.delete(requestId);
+      clearTimeout(waiter.timer);
+      resolve12({ ok: false, code: "offline", reason: "\u6307\u4EE4\u6CA1\u9001\u5230\u8FD9\u53F0\u8282\u70B9\uFF08\u8FDE\u63A5\u521A\u65AD\u5F00\uFF09\uFF0C\u9875\u9762\u4E0A\u4ECD\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u989D\u5EA6" });
+    }).finally(() => {
+      quotaRefreshInFlight.delete(nodeId);
+    });
+    quotaRefreshInFlight.set(nodeId, task);
+    return task;
+  }
   let hubWired = false;
   function wireHub(hub) {
     if (hubWired) return;
@@ -243848,6 +243943,14 @@ function nodesDomain(deps) {
         }
       })().catch((err) => console.warn(`[nodes] \u6545\u969C\u81EA\u52A8\u89E3\u9664\u5931\u8D25(node=${daemonId})\uFF1A${err instanceof Error ? err.message : String(err)}`));
     });
+    hub.addMessageListener((_daemonId, msg) => {
+      if (msg.type !== "quota_refresh_result") return;
+      const waiter = quotaRefreshWaiters.get(msg.requestId);
+      if (!waiter) return;
+      quotaRefreshWaiters.delete(msg.requestId);
+      clearTimeout(waiter.timer);
+      waiter.resolve({ ok: msg.ok, ...msg.reason ? { reason: msg.reason } : {} });
+    });
     hub.addMessageListener(async (daemonId, msg) => {
       if (msg.type !== "hello") return;
       const d = hub.connectedDaemons().find((c) => c.daemonId === daemonId);
@@ -244156,7 +244259,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto61.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto62.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -244269,6 +244372,22 @@ function nodesDomain(deps) {
       nodeUpdates.set(nodeId, tracked);
       return { status: 200, body: { ok: true, alreadyLatest: false, updateStatus: publicUpdateStatus(tracked, activeRunCount) } };
     });
+    router.post("/api/nodes/:nodeId/quotas/refresh", async (req) => {
+      const nodeId = req.params["nodeId"];
+      if (!nodeId) return { status: 400, body: { error: "missing nodeId" } };
+      const scope2 = req.auth.companyId !== void 0 ? { companyId: req.auth.companyId } : void 0;
+      const node2 = (await deps.nodeStore.listNodes(scope2)).find((n) => n.id === nodeId);
+      if (!node2) return { status: 404, body: { error: "NODE_NOT_FOUND", message: "\u8282\u70B9\u4E0D\u5B58\u5728\u6216\u4E0D\u5C5E\u4E8E\u5F53\u524D\u7EC4\u7EC7" } };
+      const outcome = await refreshNodeQuotas(nodeId);
+      return {
+        status: 200,
+        body: {
+          refreshed: outcome.ok,
+          ...outcome.code ? { code: outcome.code } : {},
+          ...outcome.reason ? { reason: outcome.reason } : {}
+        }
+      };
+    });
     router.delete("/api/runtimes/:runtimeId", async (req) => {
       const runtimeId = req.params["runtimeId"];
       if (!runtimeId) return { status: 400, body: { error: "missing runtimeId" } };
@@ -244406,16 +244525,16 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto61.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto62.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto61, import_node_fs18, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
+var import_node_crypto62, import_node_fs18, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
     init_src();
     init_faults();
     init_runtime_status();
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
     import_node_fs18 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path22 = require("node:path");
@@ -244912,9 +245031,9 @@ var init_types4 = __esm({
 // ../server/src/domains/roles/index.ts
 function rolesDomain(deps) {
   return (router) => {
-    router.get("/api/roles", async () => {
+    router.get("/api/roles", async (req) => {
       const roles = await deps.admin.list();
-      const usageByRole = await deps.admin.usageMany(roles.map((r) => r.name));
+      const usageByRole = await deps.admin.usageMany(roles.map((r) => r.name), req.auth.companyId);
       const items = roles.map((r) => {
         const u = usageByRole[r.name];
         return {
@@ -244933,7 +245052,7 @@ function rolesDomain(deps) {
       if (!name) return { status: 400, body: { error: "missing name" } };
       const roles = await deps.admin.list();
       if (!roles.some((r) => r.name === name)) return { status: 404, body: { error: `\u5C97\u4F4D\u4E0D\u5B58\u5728: ${name}` } };
-      return { status: 200, body: { usage: await deps.admin.usage(name) } };
+      return { status: 200, body: { usage: await deps.admin.usage(name, req.auth.companyId) } };
     });
     router.post("/api/roles", async (req) => {
       const r = await deps.admin.add(req.body ?? {}, req.auth.actor);
@@ -245689,6 +245808,12 @@ var init_notification_reconciler = __esm({
           const ctx = await this.deps.load(companyId);
           if (!ctx) return EMPTY;
           const stats = await this.reconcileWith(companyId, st, ctx);
+          if (stats.notified) {
+            try {
+              this.deps.onNotified?.(companyId, stats.notified);
+            } catch {
+            }
+          }
           const tookMs = this.now - startedAt;
           if (tookMs > SLOW_RECONCILE_MS) {
             this.deps.log(`[notification-ledger] ${companyId} \u5BF9\u8D26\u8017\u65F6 ${tookMs}ms\uFF08\u6210\u5458 ${ctx.humans.length}\uFF0C\u5F85\u5904\u7406 ${stats.pending}\uFF0C\u672C\u6B21\u65B0\u589E ${stats.inserted} / \u7ED3\u675F ${stats.closed}\uFF09`);
@@ -245712,6 +245837,7 @@ var init_notification_reconciler = __esm({
         const nowMs = this.now;
         const nowIso = new Date(nowMs).toISOString();
         const stats = { inserted: 0, refreshed: 0, closed: 0, pending: 0 };
+        const notified = /* @__PURE__ */ new Set();
         const ttl = this.deps.snapshotTtlMs ?? 5 * 6e4;
         const loadSnapshot2 = async (wid) => {
           const hit = st.snaps.get(wid);
@@ -245789,6 +245915,7 @@ var init_notification_reconciler = __esm({
           });
           st.lastSeenAt.set(inserted.id, nowIso);
           stats.inserted++;
+          notified.add(c.recipient);
         }
         const eventsOf = /* @__PURE__ */ new Map();
         const cancelledOf = /* @__PURE__ */ new Map();
@@ -245805,7 +245932,7 @@ var init_notification_reconciler = __esm({
           st.lastSeenAt.delete(row.id);
         }
         stats.pending = current.size;
-        stats.notices = await this.reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2);
+        stats.notices = await this.reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2, notified);
         if (nowMs - st.lastPurgeAt > (this.deps.purgeEveryMs ?? 6 * 36e5)) {
           st.lastPurgeAt = nowMs;
           const purged = await ctx.store.purgeBefore(new Date(nowMs - (this.deps.retentionMs ?? 90 * DAY2)).toISOString());
@@ -245814,6 +245941,7 @@ var init_notification_reconciler = __esm({
         for (const [id, d] of st.drafts) if (nowMs - d.at > DRAFT_OUTCOME_TTL_MS) st.drafts.delete(id);
         if (waitingForGrace) this.schedule(companyId, this.graceMs);
         st.primed = true;
+        if (notified.size > 0) stats.notified = [...notified];
         return stats;
       }
       async judge(st, ctx, model, row, nowMs, nowIso, eventsOf, cancelledOf) {
@@ -245855,7 +245983,7 @@ var init_notification_reconciler = __esm({
        * 早就结束的任务不能在上线那一刻集体「任务已完成」一遍。之后每拍新看到的变化都发。
        * 来源键 = `<种类>:<工单>@<那件事的 seq>`：同一件事重启后再算一遍撞唯一约束即收手；任务重开后再完成是新的一件事。
        */
-      async reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2) {
+      async reconcileTaskNotices(st, ctx, model, nowMs, loadSnapshot2, notified) {
         const store = ctx.engineStore;
         if (!store) return 0;
         const members = new Set(ctx.humans);
@@ -245877,6 +246005,7 @@ var init_notification_reconciler = __esm({
               ...trigger ? { actorId: trigger } : {},
               enteredAt: new Date(rec2.createdAt).toISOString()
             });
+            notified.add(recipient);
             sent++;
           }
         };
@@ -246072,7 +246201,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs28.statSync(absBundle).size;
-  const digest = (0, import_node_crypto62.createHash)("sha256").update(fs28.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto63.createHash)("sha256").update(fs28.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -246168,12 +246297,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine2(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto62, fs28, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto63, fs28, os7, path25, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     fs28 = __toESM(require("node:fs"), 1);
     os7 = __toESM(require("node:os"), 1);
     path25 = __toESM(require("node:path"), 1);
@@ -246194,7 +246323,7 @@ var init_readonly_bundle = __esm({
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
   const locks = createKeyedMutex();
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto63.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto64.randomUUID)().slice(0, 8)}`);
   const create = async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -246281,7 +246410,7 @@ function makeSeededWorkorderCreator(deps) {
     return await finishCreation({ workspace, rootArtifactId: planned.rootArtifactId, spawned: planned.spawned });
   };
   return async (input) => {
-    const release = await locks.acquire(`${input.companyId ?? ""}\0${input.idempotencyKey ?? (0, import_node_crypto63.randomUUID)()}`);
+    const release = await locks.acquire(`${input.companyId ?? ""}\0${input.idempotencyKey ?? (0, import_node_crypto64.randomUUID)()}`);
     try {
       return await create(input);
     } finally {
@@ -246290,7 +246419,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key2) {
-  return `ws:wo-${(0, import_node_crypto63.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto64.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(snapshot, workspace, actor) {
   if (!snapshot?.nodes.length) return null;
@@ -246302,11 +246431,11 @@ function existingWorkorder(snapshot, workspace, actor) {
     spawned: snapshot.nodes.map((node2) => ({ id: node2.id, type: node2.type, owner: node2.assigneeActorId ?? actor }))
   };
 }
-var import_node_crypto63;
+var import_node_crypto64;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     init_uncategorized_project();
     init_src();
     init_planner();
@@ -247809,12 +247938,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto64, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto65, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service9 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_src7();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -248045,7 +248174,7 @@ var init_service9 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto64.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto65.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -248789,6 +248918,87 @@ var init_reply_anchors = __esm({
   }
 });
+// ../server/src/domains/chat-sessions/insert-status.ts
+async function resolveInsertStatus(deps, chatSessionId, clientKey) {
+  const id = insertRequestId(chatSessionId, clientKey);
+  if (!deps.store.getPendingMessage) return { status: "uncertain" };
+  let row = await deps.store.getPendingMessage(chatSessionId, id);
+  if (row?.state !== "delivering") return { status: insertStatusOfRow(row) };
+  if (deps.isTurnRunning(chatSessionId)) return { status: "in-flight" };
+  if (isInsertInflight(id)) {
+    await waitForInflightInsert(id, deps.settleWaitMs ?? 1e4);
+    row = await deps.store.getPendingMessage(chatSessionId, id);
+    return { status: insertStatusOfRow(row) };
+  }
+  const running = settlingOrphans.get(id);
+  if (running) return running;
+  const settling = settleOrphan(deps, chatSessionId, row).finally(() => {
+    settlingOrphans.delete(id);
+  });
+  settlingOrphans.set(id, settling);
+  return settling;
+}
+async function settleOrphan(deps, chatSessionId, row) {
+  const ref2 = row.deliveryRef;
+  const answer = ref2?.nodeId && ref2.dispatchId && deps.confirm ? await deps.confirm({ nodeId: ref2.nodeId, dispatchId: ref2.dispatchId, runtimeKey: ref2.runtimeKey }).catch(() => ({ status: "unknown", reason: "query-failed" })) : { status: "unknown", reason: ref2 ? "no-node" : "no-delivery-ref" };
+  const trace = ref2 && deps.store.listPendingTrace ? await deps.store.listPendingTrace(chatSessionId).catch(() => []) : [];
+  const batch = trace.filter((r) => r.state === "delivering" && r.deliveryRef?.runtimeKey === ref2?.runtimeKey);
+  if (!batch.some((r) => r.id === row.id)) batch.push(row);
+  const ids2 = batch.map((r) => r.id);
+  deps.log?.(`[chat-insert] \u5B64\u513F\u63D2\u5165\u7ED3\u7B97 sid=${chatSessionId} row=${row.id} \u2192 ${answer.status}${answer.reason ? `(${answer.reason})` : ""}`);
+  if (answer.status === "consumed") {
+    await backfill(deps, chatSessionId, batch, row).catch((err) => {
+      deps.log?.(`[chat-insert] \u8865\u884C\u5931\u8D25\uFF08\u4ECD\u6309\u5DF2\u63D2\u5165\u5904\u7406\uFF0Cruntime \u786E\u5B9E\u8BFB\u5230\u4E86\uFF09sid=${chatSessionId}: ${String(err)}`);
+    });
+    await deps.store.markPendingMessages?.(chatSessionId, ids2, "delivered", "delivered:node-confirmed-orphan");
+    return { status: "inserted" };
+  }
+  if (answer.status === "not-consumed") {
+    await deps.store.markPendingMessages?.(chatSessionId, [row.id], "cancelled", "client-gone:not-consumed");
+    const rest = ids2.filter((x2) => x2 !== row.id);
+    if (rest.length) await deps.store.markPendingMessages?.(chatSessionId, rest, "queued", `not-consumed:${answer.reason ?? ""}`);
+    if (row.clientKey) await deps.landUndelivered?.({ clientKey: row.clientKey, rows: [row], note: INSERT_RETURNED_NOTE });
+    return { status: "not-inserted" };
+  }
+  await deps.store.markPendingMessages?.(chatSessionId, ids2, "unconfirmed", `unconfirmed:${answer.reason ?? "unknown"}`);
+  if (row.clientKey) {
+    await deps.landUndelivered?.({ clientKey: row.clientKey, rows: [...batch].sort((a, b2) => a.seq - b2.seq), note: INSERT_UNCERTAIN_NOTE });
+  }
+  return { status: "uncertain" };
+}
+async function backfill(deps, chatSessionId, batch, row) {
+  if (!deps.items) return;
+  const ref2 = row.deliveryRef;
+  const sorted = [...batch].sort((a, b2) => a.seq - b2.seq);
+  const ledger = new ChatItemLedger({
+    items: deps.items,
+    versionSeed: await deps.items.sessionVersionCursor(chatSessionId).catch(() => 0),
+    sessionId: chatSessionId,
+    turnId: ref2?.turnId ?? `insert-backfill:${row.id}`,
+    ...deps.log ? { log: deps.log } : {}
+  });
+  const text7 = sorted.map((m2) => m2.text).filter(Boolean).join("\n\n");
+  const attachments = sorted.flatMap((m2) => (m2.attachments ?? []).map((a) => ({
+    name: a.name,
+    ...a.blobRef !== void 0 ? { blobRef: a.blobRef } : {},
+    ...a.contentType !== void 0 ? { contentType: a.contentType } : {}
+  })));
+  const clientKeys = sorted.map((m2) => m2.clientKey).filter((k2) => !!k2);
+  ledger.recordUserInput(text7, attachments, clientKeys, ref2?.ord !== void 0 ? { ord: ref2.ord } : void 0);
+  await ledger.drain();
+  if (ledger.failures > 0) throw new Error("chat_items \u5199\u5165\u5931\u8D25");
+}
+var settlingOrphans;
+var init_insert_status = __esm({
+  "../server/src/domains/chat-sessions/insert-status.ts"() {
+    "use strict";
+    init_chat_item_ledger();
+    init_chat_insert_evidence();
+    init_append_now();
+    settlingOrphans = /* @__PURE__ */ new Map();
+  }
+});
 // ../server/src/domains/chat-sessions/agent-history.ts
 async function resolveChatHistoryViewer(auth, getSession) {
   if (isHumanActorId(auth.actor)) return { kind: "human", actor: auth.actor };
@@ -248991,6 +249201,29 @@ function throwWorkdirError(code2) {
   }
 }
 function createChatSessionsDomain(opts) {
+  const settleInFlightInserts = async ({ store: store2, items, chatSessionId }) => {
+    const rows = await store2.listInFlightInserts(chatSessionId);
+    for (const row of rows) {
+      if (!row.clientKey) continue;
+      await resolveInsertStatus({
+        store: store2,
+        isTurnRunning: (id) => opts.liveChat?.isRunning(id) ?? false,
+        ...opts.confirmInputReceipt ? { confirm: opts.confirmInputReceipt } : {},
+        items,
+        settleWaitMs: INFLIGHT_INSERT_SETTLE_WAIT_MS,
+        landUndelivered: ({ clientKey, rows: batch, note }) => landUndeliveredInsert({
+          store: store2,
+          itemStore: items,
+          chatSessionId,
+          clientKey,
+          text: batch.map((m2) => m2.text).filter(Boolean).join("\n\n"),
+          attachments: batch.flatMap((m2) => m2.attachments ?? []),
+          note
+        }),
+        log: (m2) => console.warn(m2)
+      }, chatSessionId, row.clientKey);
+    }
+  };
   const { store, registry: registry2 } = opts;
   const bindingFor = opts.resolveBinding ?? bindingResolverFromRegistry(registry2);
   async function storeFor(req) {
@@ -249123,7 +249356,7 @@ function createChatSessionsDomain(opts) {
       if (!text7.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto65.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto66.randomUUID)()}`;
       drafts.set(id, { text: text7, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -249200,7 +249433,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = agentDefault.binding?.nodeId ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto65.randomUUID)(),
+        id: (0, import_node_crypto66.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -249319,19 +249552,6 @@ function createChatSessionsDomain(opts) {
       });
       return { status: 200, body: await store2.getSession(req.params.id) };
     });
-    router.post("/api/chat-sessions/:id/runtime/reset-to-agent-default", async (req) => {
-      const store2 = await storeFor(req);
-      const session = await store2.getSession(req.params.id);
-      if (!session || session.humanActorId !== req.auth.actor) throw new ApiError(404, "NOT_FOUND", "session not found");
-      const agentDefault = await agentDefaultRuntime(req.auth.companyId, session.aiActorId);
-      const initial = chatSessionInitialRuntime({ binding: agentDefault.binding, agentModel: agentDefault.model });
-      await store2.updateSession(req.params.id, {
-        overrideNodeId: initial.overrideNodeId,
-        overrideRuntimeKind: initial.overrideRuntimeKind,
-        model: initial.model
-      });
-      return { status: 200, body: await store2.getSession(req.params.id) };
-    });
     router.delete("/api/chat-sessions/:id", async (req) => {
       const store2 = await storeFor(req);
       const session = await store2.getSession(req.params.id);
@@ -249348,7 +249568,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto65.randomUUID)(),
+        id: (0, import_node_crypto66.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -249390,7 +249610,7 @@ function createChatSessionsDomain(opts) {
       const known = key2 ? cur.find((x2) => x2.clientKey === key2) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store2.enqueuePendingMessage({
-        id: (0, import_node_crypto65.randomUUID)(),
+        id: (0, import_node_crypto66.randomUUID)(),
         chatSessionId: sid,
         text: text7,
         ...attachments.length ? { attachments } : {},
@@ -249440,6 +249660,11 @@ function createChatSessionsDomain(opts) {
         const stale = Number.isFinite(startedAt) && Date.now() - startedAt >= LINK_WINDOWS.chatTurnPhaseStaleAfterMs;
         return { turnId: activeTurnRow.id, phase: stale ? "recovering" : "running" };
       })();
+      if (sinceVersion === 0 && beforeOrd === void 0 && session?.humanActorId === req.auth.actor && store2.listInFlightInserts) {
+        await settleInFlightInserts({ store: store2, items, chatSessionId }).catch((e) => {
+          console.warn(`[chat] \u5728\u98DE\u63D2\u8BDD\u7ED3\u7B97\u5931\u8D25\uFF08session=${chatSessionId}\uFF09\uFF0C\u8FD9\u6B21\u5FEB\u7167\u7167\u65E7\u6295\u5F71: ${String(e)}`);
+        });
+      }
       const snapshotEntries = [];
       let nextSinceVersion = sinceVersion;
       let hasMoreBefore = false;
@@ -250238,12 +250463,12 @@ async function legacySendFailureCards(entries, deps) {
   }
   return out;
 }
-var import_node_crypto65, DEFAULT_SNAPSHOT_ITEMS, MAX_SNAPSHOT_ITEMS, PROJECTED_CARD_LIMIT, SUBMISSION_NOT_DELIVERED_NOTE, SUBMISSION_UNCONFIRMED_NOTE, LEGACY_CARD_LIMIT;
+var import_node_crypto66, DEFAULT_SNAPSHOT_ITEMS, INFLIGHT_INSERT_SETTLE_WAIT_MS, MAX_SNAPSHOT_ITEMS, PROJECTED_CARD_LIMIT, SUBMISSION_NOT_DELIVERED_NOTE, SUBMISSION_UNCONFIRMED_NOTE, LEGACY_CARD_LIMIT;
 var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
     init_file_limits2();
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     init_src();
     init_chat_session();
     init_persistent_files();
@@ -250259,6 +250484,8 @@ var init_chat_sessions2 = __esm({
     init_service3();
     init_reply_anchors();
     init_injected_context();
+    init_insert_status();
+    init_insert_undelivered();
     init_agent_history();
     init_deletion();
     init_chat_turn_gate();
@@ -250270,6 +250497,7 @@ var init_chat_sessions2 = __esm({
     init_chat_submission();
     init_project_bundle();
     DEFAULT_SNAPSHOT_ITEMS = 400;
+    INFLIGHT_INSERT_SETTLE_WAIT_MS = 6e3;
     MAX_SNAPSHOT_ITEMS = 1e3;
     PROJECTED_CARD_LIMIT = 10;
     SUBMISSION_NOT_DELIVERED_NOTE = "\u8FD9\u6761\u6D88\u606F\u6CA1\u6709\u53D1\u51FA\uFF0C\u53EF\u4EE5\u91CD\u8BD5";
@@ -251700,7 +251928,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto66.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto67.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -251756,11 +251984,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto66, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto67, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service10 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -252574,11 +252802,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto67.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto68.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto67.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto68.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -252608,11 +252836,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto67, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto68, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -253764,7 +253992,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto68.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto69.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -253781,11 +254009,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto68;
+var import_node_crypto69;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -253914,17 +254142,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto69.createHash)("sha256").update(canonical2).digest("hex");
+  return (0, import_node_crypto70.createHash)("sha256").update(canonical2).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto69.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto70.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto69, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto70, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -254134,7 +254362,7 @@ function queryInputReceipt(hub, nodeId, dispatchId, clientMessageKey, pending, t
     const viaSession = hub.hasSession?.(dispatchId) === true;
     const supported = viaSession ? hub.supportsInputReceiptQuery?.(dispatchId) === true : daemonMetaOf(hub, nodeId)?.supportsInputReceiptQuery === true;
     if (!supported) return Promise.resolve({ status: "unknown", reason: "unsupported" });
-    const requestId = (0, import_node_crypto70.randomUUID)();
+    const requestId = (0, import_node_crypto71.randomUUID)();
     return new Promise((resolve12) => {
       const timer = setTimeout(() => {
         pending.delete(requestId);
@@ -254196,7 +254424,7 @@ function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessi
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto70.randomUUID)();
+  const requestId = (0, import_node_crypto71.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve12) => {
@@ -254209,11 +254437,11 @@ function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessi
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve12, timer });
   });
 }
-var import_node_crypto70, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_TOTAL_FRAMES, STASH_MAX_IDS, STASH_LOSS_MAX_IDS, STASH_LOSS_TTL_MS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto71, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_TOTAL_FRAMES, STASH_MAX_IDS, STASH_LOSS_MAX_IDS, STASH_LOSS_TTL_MS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 1e4;
@@ -254653,7 +254881,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto70.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto71.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -254909,7 +255137,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto70.randomUUID)();
+        const requestId = (0, import_node_crypto71.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve12) => {
@@ -255017,13 +255245,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto71, sha, enc2, dec, MirrorEngine, MemoryMirrorStateStore, MapMirrorIdentities;
+var import_node_crypto72, sha, enc2, dec, MirrorEngine, MemoryMirrorStateStore, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto71.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto72.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc2 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -255304,11 +255532,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label2[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto72, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto73, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_src7();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -255578,7 +255806,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto72.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -255967,8 +256195,8 @@ ${ctx.nodeFault}
         const taskWithRejections = rejectedSection ? `${task}
 ${rejectedSection}` : task;
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto72.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto72.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto73.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto73.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           taskWithRejections,
           ``,
@@ -256012,7 +256240,7 @@ ${rejectedSection}` : task;
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto72.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto73.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -256223,11 +256451,11 @@ var init_pg_ident = __esm({
 });
 // ../storage/src/postgres.ts
-var import_node_crypto73, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto74, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -256407,7 +256635,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash3 = (0, import_node_crypto73.createHash)("sha256").update(bytes2).digest("hex");
+        const hash3 = (0, import_node_crypto74.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash3, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -256455,7 +256683,7 @@ function stageAtLeast(stage, min2) {
   return STAGES.indexOf(stage) >= STAGES.indexOf(min2);
 }
 function newVariableId() {
-  return `var_${(0, import_node_crypto74.randomUUID)()}`;
+  return `var_${(0, import_node_crypto75.randomUUID)()}`;
 }
 async function declareRecordsAware(db) {
   await db.query(`SELECT set_config('${RECORDS_AWARE_SETTING}', 'on', true)`);
@@ -256811,11 +257039,11 @@ async function listBindingTargetIds(db, s2, kind) {
     [kind]
   )).rows.map((x2) => x2.target_id);
 }
-var import_node_crypto74, STAGES, RECORDS_AWARE_SETTING, markLockName;
+var import_node_crypto75, STAGES, RECORDS_AWARE_SETTING, markLockName;
 var init_variable_bindings = __esm({
   "../storage/src/variable-bindings.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_src();
     STAGES = ["off", "dual", "read", "records"];
     RECORDS_AWARE_SETTING = "oasis.variable_records_aware";
@@ -266543,11 +266771,11 @@ var init_postgres_delegations = __esm({
 });
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto75, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToFault, rowToQuota, rowToRuntime;
+var import_node_crypto76, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToFault, rowToQuota, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -266897,7 +267125,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto75.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto76.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -267199,11 +267427,11 @@ var init_postgres_type_registry = __esm({
 });
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto76, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto77, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -267413,7 +267641,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto76.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto77.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -267651,6 +267879,124 @@ var init_postgres_inbox_read = __esm({
   }
 });
+// ../storage/src/postgres-connector-auth-pending.ts
+var ident17, PostgresGithubAppPendingStore, PostgresConnectorAuthSnapshotStore;
+var init_postgres_connector_auth_pending = __esm({
+  "../storage/src/postgres-connector-auth-pending.ts"() {
+    "use strict";
+    init_esm();
+    init_pg_ident();
+    ident17 = (s2) => {
+      quoteIdent2(s2);
+      return s2;
+    };
+    PostgresGithubAppPendingStore = class _PostgresGithubAppPendingStore {
+      constructor(pool, schema) {
+        this.pool = pool;
+        this.s = `"${ident17(schema)}"`;
+      }
+      s;
+      static async open(pool, schema = "public") {
+        const s2 = ident17(schema);
+        await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
+        await pool.query(`
+      CREATE TABLE IF NOT EXISTS "${s2}".github_app_pending (
+        state      text        PRIMARY KEY,
+        company_id text,
+        data       jsonb       NOT NULL,
+        created_at timestamptz NOT NULL,
+        expires_at timestamptz NOT NULL
+      )`);
+        return new _PostgresGithubAppPendingStore(pool, schema);
+      }
+      async put(entry) {
+        await this.pool.query(
+          `DELETE FROM ${this.s}.github_app_pending WHERE expires_at < $1`,
+          [new Date(entry.createdAtMs)]
+        );
+        await this.pool.query(
+          `INSERT INTO ${this.s}.github_app_pending (state, company_id, data, created_at, expires_at)
+       VALUES ($1, $2, $3::jsonb, $4, $5)
+       ON CONFLICT (state) DO UPDATE SET company_id = EXCLUDED.company_id, data = EXCLUDED.data,
+         created_at = EXCLUDED.created_at, expires_at = EXCLUDED.expires_at`,
+          [
+            entry.state,
+            entry.companyId ?? null,
+            JSON.stringify(entry.value),
+            new Date(entry.createdAtMs),
+            new Date(entry.expiresAtMs)
+          ]
+        );
+      }
+      async get(state, nowMs) {
+        if (!state) return { status: "missing" };
+        const r = await this.pool.query(
+          `SELECT company_id, data, expires_at FROM ${this.s}.github_app_pending WHERE state = $1`,
+          [state]
+        );
+        const row = r.rows[0];
+        if (!row) return { status: "missing" };
+        if (row.expires_at.getTime() < nowMs) return { status: "expired" };
+        return { status: "found", value: { ...row.company_id ? { companyId: row.company_id } : {}, value: row.data } };
+      }
+      async patch(state, fields) {
+        await this.pool.query(
+          `UPDATE ${this.s}.github_app_pending SET data = data || $2::jsonb WHERE state = $1`,
+          [state, JSON.stringify(fields)]
+        );
+      }
+    };
+    PostgresConnectorAuthSnapshotStore = class _PostgresConnectorAuthSnapshotStore {
+      constructor(pool, schema) {
+        this.pool = pool;
+        this.s = `"${ident17(schema)}"`;
+      }
+      s;
+      static async open(pool, schema = "public") {
+        const s2 = ident17(schema);
+        await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
+        await pool.query(`
+      CREATE TABLE IF NOT EXISTS "${s2}".connector_auth_snapshots (
+        company_id   text        NOT NULL,
+        actor_id     text        NOT NULL,
+        connector_id text        NOT NULL,
+        rows         jsonb       NOT NULL,
+        created_at   timestamptz NOT NULL,
+        expires_at   timestamptz NOT NULL,
+        PRIMARY KEY (company_id, actor_id, connector_id)
+      )`);
+        return new _PostgresConnectorAuthSnapshotStore(pool, schema);
+      }
+      async put(key2, rows, nowMs, expiresAtMs) {
+        await this.pool.query(`DELETE FROM ${this.s}.connector_auth_snapshots WHERE expires_at < $1`, [new Date(nowMs)]);
+        await this.pool.query(
+          `INSERT INTO ${this.s}.connector_auth_snapshots (company_id, actor_id, connector_id, rows, created_at, expires_at)
+       VALUES ($1, $2, $3, $4::jsonb, $5, $6)
+       ON CONFLICT (company_id, actor_id, connector_id) DO UPDATE SET rows = EXCLUDED.rows,
+         created_at = EXCLUDED.created_at, expires_at = EXCLUDED.expires_at`,
+          [key2.companyId, key2.actorId, key2.connectorId, JSON.stringify(rows), new Date(nowMs), new Date(expiresAtMs)]
+        );
+      }
+      async get(key2, nowMs) {
+        const r = await this.pool.query(
+          `SELECT rows, expires_at FROM ${this.s}.connector_auth_snapshots
+       WHERE company_id = $1 AND actor_id = $2 AND connector_id = $3`,
+          [key2.companyId, key2.actorId, key2.connectorId]
+        );
+        const row = r.rows[0];
+        if (!row || row.expires_at.getTime() < nowMs) return void 0;
+        return row.rows;
+      }
+      async delete(key2) {
+        await this.pool.query(
+          `DELETE FROM ${this.s}.connector_auth_snapshots WHERE company_id = $1 AND actor_id = $2 AND connector_id = $3`,
+          [key2.companyId, key2.actorId, key2.connectorId]
+        );
+      }
+    };
+  }
+});
 // ../storage/src/postgres-dispatches.ts
 function rowToRecord2(r) {
   return {
@@ -267672,18 +268018,18 @@ function rowToRecord2(r) {
     protocolRecoveryRound: r.protocol_recovery_round ?? null
   };
 }
-var ident17, PostgresDispatchStore;
+var ident18, PostgresDispatchStore;
 var init_postgres_dispatches = __esm({
   "../storage/src/postgres-dispatches.ts"() {
     "use strict";
-    ident17 = (schema) => schema.replace(/[^a-zA-Z0-9_]/g, "");
+    ident18 = (schema) => schema.replace(/[^a-zA-Z0-9_]/g, "");
     PostgresDispatchStore = class _PostgresDispatchStore {
       constructor(pool, s2) {
         this.pool = pool;
         this.s = s2;
       }
       static async open(pool, schema = "public") {
-        const s2 = ident17(schema);
+        const s2 = ident18(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${s2}"`);
         await pool.query(`
       CREATE TABLE IF NOT EXISTS "${s2}".dispatches (
@@ -268866,14 +269212,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto77.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto78.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto77, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto78, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto77 = require("node:crypto");
+    import_node_crypto78 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -268947,7 +269293,7 @@ var init_tenant_schema_mapping = __esm({
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto78.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto79.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -269129,11 +269475,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto78, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto79, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto78 = require("node:crypto");
+    import_node_crypto79 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -269212,11 +269558,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto79, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto80, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto79 = require("node:crypto");
+    import_node_crypto80 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -269601,7 +269947,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto79.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto80.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -272411,7 +272757,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto80.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto81.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -272803,11 +273149,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto80, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto81, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto80 = require("node:crypto");
+    import_node_crypto81 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -273043,8 +273389,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key2) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto81.randomBytes)(12);
-  const cipher = (0, import_node_crypto81.createCipheriv)("aes-256-gcm", bytes(key2), iv);
+  const iv = (0, import_node_crypto82.randomBytes)(12);
+  const cipher = (0, import_node_crypto82.createCipheriv)("aes-256-gcm", bytes(key2), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -273054,7 +273400,7 @@ function openSnapshot(snapshot, key2) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto81.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto82.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -273062,11 +273408,11 @@ function openSnapshot(snapshot, key2) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto81, PREFIX3, bytes, aad2;
+var import_node_crypto82, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto81 = require("node:crypto");
+    import_node_crypto82 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key2) => {
       const value2 = Buffer.from(key2);
@@ -273114,7 +273460,7 @@ function assertRecordScope(record9, scope2) {
 function equal(left, right) {
   return JSON.stringify(left) === JSON.stringify(right);
 }
-var ident18, TABLES, TABLE_BY_KIND, PostgresKnowledgeGovernanceStore;
+var ident19, TABLES, TABLE_BY_KIND, PostgresKnowledgeGovernanceStore;
 var init_postgres_knowledge = __esm({
   "../storage/src/postgres-knowledge.ts"() {
     "use strict";
@@ -273122,7 +273468,7 @@ var init_postgres_knowledge = __esm({
     init_pg_ident();
     init_pg_sanitize();
     init_knowledge_snapshot_crypto();
-    ident18 = (value2) => {
+    ident19 = (value2) => {
       quoteIdent2(value2);
       return value2;
     };
@@ -273280,11 +273626,11 @@ var init_postgres_knowledge = __esm({
       constructor(pool, schema, snapshotKey2) {
         this.pool = pool;
         this.snapshotKey = snapshotKey2;
-        this.s = `"${ident18(schema)}"`;
+        this.s = `"${ident19(schema)}"`;
       }
       s;
       static async open(pool, schema = "public", snapshotKey2) {
-        const safe = ident18(schema);
+        const safe = ident19(schema);
         await pool.query(`CREATE SCHEMA IF NOT EXISTS "${safe}"`);
         for (const spec of TABLES) {
           await pool.query(`
@@ -273958,7 +274304,7 @@ function reportedCost(v2) {
 }
 function newUsageBackfillManifestId(now = /* @__PURE__ */ new Date()) {
   const stamp = now.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z");
-  return `ulb-${stamp}-${(0, import_node_crypto82.randomBytes)(3).toString("hex")}`;
+  return `ulb-${stamp}-${(0, import_node_crypto83.randomBytes)(3).toString("hex")}`;
 }
 async function backfillUsageLedger(ledger, opts) {
   if (!opts.dryRun && !opts.manifestId) throw new Error("execute \u9700\u8981 manifestId");
@@ -274392,11 +274738,11 @@ async function audit(c, s2, manifestId, runId, field, before, after, createdAt)
     [manifestId, runId, field, before == null ? null : JSON.stringify(before), after == null ? null : JSON.stringify(after), createdAt]
   );
 }
-var import_node_crypto82, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, emptyStep, fourOf, sameUsage, ChatRunLookup;
+var import_node_crypto83, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, emptyStep, fourOf, sameUsage, ChatRunLookup;
 var init_usage_ledger_backfill = __esm({
   "../storage/src/usage-ledger-backfill.ts"() {
     "use strict";
-    import_node_crypto82 = require("node:crypto");
+    import_node_crypto83 = require("node:crypto");
     init_src();
     init_pg_ident();
     init_postgres_trace();
@@ -274528,9 +274874,11 @@ __export(src_exports, {
   PostgresChatItemStore: () => PostgresChatItemStore,
   PostgresChatSessionStore: () => PostgresChatSessionStore,
   PostgresChatTurnStore: () => PostgresChatTurnStore,
+  PostgresConnectorAuthSnapshotStore: () => PostgresConnectorAuthSnapshotStore,
   PostgresControlPlaneStore: () => PostgresControlPlaneStore,
   PostgresDelegationStore: () => PostgresDelegationStore,
   PostgresDispatchStore: () => PostgresDispatchStore,
+  PostgresGithubAppPendingStore: () => PostgresGithubAppPendingStore,
   PostgresHumanPrefsStore: () => PostgresHumanPrefsStore,
   PostgresKnowledgeGovernanceStore: () => PostgresKnowledgeGovernanceStore,
   PostgresModelPriceStore: () => PostgresModelPriceStore,
@@ -274664,6 +275012,7 @@ var init_src10 = __esm({
     init_postgres_type_registry();
     init_postgres_actor_memory();
     init_postgres_inbox_read();
+    init_postgres_connector_auth_pending();
     init_postgres_dispatches();
     init_tenancy_inventory();
     init_tenancy_move();
@@ -275893,6 +276242,7 @@ __export(src_exports2, {
   MirrorEngine: () => MirrorEngine,
   MissingCompanyContextError: () => MissingCompanyContextError,
   NODE_HEARTBEAT_STALE_MS: () => NODE_HEARTBEAT_STALE_MS,
+  NOTIFICATIONS_CHANGED: () => NOTIFICATIONS_CHANGED,
   NPM_PROBE_TIMEOUT_MS: () => NPM_PROBE_TIMEOUT_MS,
   NdjsonOplogStore: () => NdjsonOplogStore,
   NodeHealthTracker: () => NodeHealthTracker,
@@ -276210,6 +276560,7 @@ __export(src_exports2, {
   openChatTurn: () => openChatTurn,
   openKnowledgeSnapshot: () => openKnowledgeSnapshot,
   openNewEngine: () => openNewEngine,
+  operatorCrossCompanyRead: () => operatorCrossCompanyRead,
   outputsPartProvider: () => outputsPartProvider,
   packMatches: () => packMatches,
   parentConversationTaskLines: () => parentConversationTaskLines,
@@ -276811,14 +277162,14 @@ init_src();
 var os15 = __toESM(require("node:os"));
 var path45 = __toESM(require("node:path"));
 var import_node_child_process26 = require("node:child_process");
-var import_node_crypto93 = require("node:crypto");
+var import_node_crypto94 = require("node:crypto");
 // ../cli/src/cli.ts
 init_src();
 var fs43 = __toESM(require("node:fs"), 1);
 var os12 = __toESM(require("node:os"), 1);
 var path38 = __toESM(require("node:path"), 1);
-var import_node_crypto91 = require("node:crypto");
+var import_node_crypto92 = require("node:crypto");
 // ../cli/src/serve.ts
 init_src11();
@@ -276830,11 +277181,11 @@ var fs35 = __toESM(require("node:fs"), 1);
 var os8 = __toESM(require("node:os"), 1);
 var path29 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto87 = require("node:crypto");
+var import_node_crypto88 = require("node:crypto");
 var import_node_url7 = require("node:url");
 // ../cli/src/artifact-discovery-source.ts
-var import_node_crypto83 = require("node:crypto");
+var import_node_crypto84 = require("node:crypto");
 init_src7();
 var ArtifactDiscoverySourceUnreadableError = class extends Error {
   constructor(message) {
@@ -276864,7 +277215,7 @@ async function resolveArtifactDiscoverySourceContent(blobs, input) {
     throw new ArtifactDiscoverySourceUnreadableError(`Artifact Revision ${input.revisionId} \u7684 contentKind \u4E0D\u53D7\u652F\u6301\uFF1A${String(input.contentKind)}`);
   }
   const rootBytes = await blobs.get(input.contentRef);
-  const sourceFingerprint = (0, import_node_crypto83.createHash)("sha256").update(rootBytes).digest("hex");
+  const sourceFingerprint = (0, import_node_crypto84.createHash)("sha256").update(rootBytes).digest("hex");
   if (input.contentKind === "inline-blob") {
     const sourceContent = decodeText3(rootBytes);
     if (sourceContent === null) {
@@ -276888,7 +277239,7 @@ ${entry.text}`).join("\n\n"),
 }
 // ../server/src/domains/discussions/service.ts
-var import_node_crypto84 = require("node:crypto");
+var import_node_crypto85 = require("node:crypto");
 init_zod();
 init_discussions();
 init_router();
@@ -276950,7 +277301,7 @@ function remapTopics(topics, removed) {
   return [...out].map(([topic_id, summary]) => ({ topic_id, summary }));
 }
 var entryId = (projectId2, id) => JSON.stringify([projectId2, id]);
-var hash2 = (s2) => (0, import_node_crypto84.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
+var hash2 = (s2) => (0, import_node_crypto85.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
 var canonical = (s2) => s2.normalize("NFKC").trim().toLocaleLowerCase();
 function decisionFingerprint(d) {
   return hash2(JSON.stringify([d.statement, d.rationale, d.alternatives]));
@@ -277170,7 +277521,7 @@ var DiscussionService = class {
         throw new ApiError(409, "DISCUSSION_CONFLICT", "\u9879\u76EE\u8BAE\u9898\u6216\u51B3\u7B56\u5DF2\u53D8\u5316\uFF0C\u8BF7\u8BFB\u53D6\u6700\u65B0\u5185\u5BB9\u540E\u4FEE\u6B63");
       }
     }
-    const operation = (value2) => tx.put("operation", (0, import_node_crypto84.randomUUID)(), {
+    const operation = (value2) => tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
       ...value2,
       projectId: projectId2,
       actorId: ctx.actorId,
@@ -277187,7 +277538,7 @@ var DiscussionService = class {
       if (id.startsWith("new:")) {
         if (BUG_TOPIC.test(t.title.trim())) invalid("topics.title", `\u300C${t.title}\u300D\u662F\u5355\u4E2A Bug\uFF1A\u4FEE\u590D\u60C5\u51B5\u5199\u8FDB\u8BA8\u8BBA\u8BB0\u5F55\uFF0C\u5B9A\u51FA\u7684\u89C4\u5219\u6302\u5230\u5BF9\u5E94\u529F\u80FD\u8BAE\u9898\u4E0B\uFF0C\u4E0D\u6309 Bug \u53F7\u5EFA\u8BAE\u9898`);
         const existing = [...topicMap.values()].find((x2) => canonical(x2.title) === canonical(t.title));
-        id = existing?.topicId ?? `topic_${(0, import_node_crypto84.randomUUID)()}`;
+        id = existing?.topicId ?? `topic_${(0, import_node_crypto85.randomUUID)()}`;
         if (!existing) createdTopics.add(id);
       } else if (!topicMap.has(id)) invalid("topics.topic_id", `\u8BAE\u9898 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u8BAE\u9898\u4F7F\u7528 new: \u524D\u7F00`);
       topicAliases.set(t.topic_id, id);
@@ -277239,7 +277590,7 @@ var DiscussionService = class {
       if (id.startsWith("new:")) {
         const candidateKey = JSON.stringify([topicId, canonical(d.record.statement)]);
         const existing = [...decisionMap.values()].find((x2) => x2.topicId === topicId && canonical(x2.record.statement) === canonical(d.record.statement));
-        id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto84.randomUUID)()}`;
+        id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto85.randomUUID)()}`;
         candidateIds.set(candidateKey, id);
       } else if (!decisionMap.has(id)) invalid("decision_id", `\u51B3\u7B56 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u51B3\u7B56\u4F7F\u7528 new: \u524D\u7F00`);
       decisionAliases.set(d.decision_id, id);
@@ -277501,7 +277852,7 @@ var DiscussionService = class {
           ...row.value.confirmation ? { confirmation: { ...row.value.confirmation, fingerprint: decisionFingerprint(record9) } } : {}
         };
         await tx.put("decision", row.id, value2);
-        await tx.put("operation", (0, import_node_crypto84.randomUUID)(), {
+        await tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
           action: "edit",
           kind: "decision",
           projectId: projectId2,
@@ -277565,7 +277916,7 @@ var DiscussionService = class {
         if (!current || current.revision !== row.revision) throw new ApiError(409, "DISCUSSION_CONFLICT", `\u8BA8\u8BBA ${row.id} \u5DF2\u88AB\u4FEE\u6539\uFF0C\u8BF7\u8BFB\u53D6\u6700\u65B0\u5185\u5BB9\u540E\u91CD\u8BD5`);
         const summary = given.get(row.id);
         await tx.put("discussion", row.id, { ...current.value, record: { ...current.value.record, summary } });
-        await tx.put("operation", (0, import_node_crypto84.randomUUID)(), {
+        await tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
           action: "edit",
           kind: "discussion",
           projectId: current.value.record.project_id,
@@ -277581,7 +277932,7 @@ var DiscussionService = class {
     });
   }
   async operation(tx, actorId, kind, id, from, to) {
-    await tx.put("operation", (0, import_node_crypto84.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
+    await tx.put("operation", (0, import_node_crypto85.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
   }
 };
 function pickDiscussionContent(d) {
@@ -277881,7 +278232,7 @@ var DiscussionContext = class {
 };
 // ../server/src/domains/discussions/worker.ts
-var import_node_crypto85 = require("node:crypto");
+var import_node_crypto86 = require("node:crypto");
 var DISCUSSION_IDLE_MS = 15 * 6e4;
 var DISCUSSION_MAX_CORRECTIONS = 3;
 var DISCUSSION_LEASE_MS = 2 * 6e4;
@@ -277907,7 +278258,7 @@ var DiscussionWorker = class {
     if (await this.isReplying(sessionId)) return false;
     const cutoff = eligibleCutoff(await this.service.chat.listMessages(sessionId), this.service.now());
     if (!cutoff) return false;
-    const owner = (0, import_node_crypto85.randomUUID)();
+    const owner = (0, import_node_crypto86.randomUUID)();
     const claimed = await this.service.store.transaction(async (tx) => {
       const old = (await tx.get("job", sessionId))?.value;
       if (old?.status === "running" && (old.leaseUntil ?? 0) > this.service.now()) return null;
@@ -278629,7 +278980,7 @@ function createDiscussionRuntime(options) {
 }
 // ../server/src/domains/discussions/store.ts
-var import_node_crypto86 = require("node:crypto");
+var import_node_crypto87 = require("node:crypto");
 var import_promises17 = require("node:fs/promises");
 var import_node_path27 = require("node:path");
 var key = (kind, id) => JSON.stringify([kind, id]);
@@ -278674,7 +279025,7 @@ var MemoryDiscussionStore = class _MemoryDiscussionStore {
       if (changed) {
         if (this.filename) {
           await (0, import_promises17.mkdir)((0, import_node_path27.dirname)(this.filename), { recursive: true });
-          const temp = `${this.filename}.${(0, import_node_crypto86.randomUUID)()}.tmp`;
+          const temp = `${this.filename}.${(0, import_node_crypto87.randomUUID)()}.tmp`;
           await (0, import_promises17.writeFile)(temp, JSON.stringify(next), "utf8");
           await (0, import_promises17.rename)(temp, this.filename);
         }
@@ -279623,7 +279974,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path29.join(repoRoot, "node_modules/.bin/tsx");
   const main = path29.join(repoRoot, "packages/cli/src/main.ts");
-  const key2 = (0, import_node_crypto87.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key2 = (0, import_node_crypto88.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path29.join(os8.tmpdir(), `oasis-cli-wrapper-${uid}-${key2}`);
   let dir;
@@ -280016,7 +280367,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto87.randomUUID)();
+    const requestId = (0, import_node_crypto88.randomUUID)();
     const task = new Promise((resolve12) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -280817,7 +281168,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto87.randomUUID)(),
+                id: (0, import_node_crypto88.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -280863,7 +281214,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto87.randomUUID)();
+        const sessionId = (0, import_node_crypto88.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -281056,7 +281407,8 @@ async function startServe(opts) {
     })();
   }
   await syncRegistryRolesToKernel(registryStore, defaultCompanyKernel);
-  const resolveCompanyContext = async (actor, headers, pathname) => {
+  const operatorScopesOf = (authorization) => authorization.startsWith("Bearer ") ? issuer.resolveClaims(authorization.slice("Bearer ".length))?.scopes : void 0;
+  const resolveCompanyContext = async (actor, headers, pathname, method) => {
     if (isCompanyCrossTenantPath(pathname)) {
       return { kind: "exempt" };
     }
@@ -281079,7 +281431,11 @@ async function startServe(opts) {
     }
     const ctx = await companies.service.resolveCurrentCompany(me.accountId, selector);
     if (!ctx) return { kind: "not-found", ...selector !== void 0 ? { selector } : {} };
-    return ctx.isMember ? { kind: "ok", companyId: ctx.company.id } : { kind: "forbidden" };
+    if (ctx.isMember) return { kind: "ok", companyId: ctx.company.id };
+    if (operatorCrossCompanyRead({ scopes: operatorScopesOf(authz) }, method)) {
+      return { kind: "ok", companyId: ctx.company.id };
+    }
+    return { kind: "forbidden" };
   };
   const resolveActor = (token) => issuer.resolve(token) ?? (opts.allowSimpleTokens && token.startsWith("token:") ? token.slice("token:".length) : null);
   const AGENT_PRINCIPAL_CACHE_MAX = 4096;
@@ -281625,9 +281981,9 @@ async function startServe(opts) {
     return engine2;
   };
   const liveKernels = () => engineRouter.liveEngines().map((e) => e.kernel);
-  const countRoleHolders = async (role) => (await roleHolders()).filter((a) => a.status !== "disabled" && a.roles?.includes(role)).length;
-  const roleHolders = async () => {
-    const employees = await registryStore.listActors();
+  const countRoleHolders = async (role, companyId) => (await roleHolders(companyId)).filter((a) => a.status !== "disabled" && a.roles?.includes(role)).length;
+  const roleHolders = async (companyId) => {
+    const employees = await (await actors.resolveCtx(companyId ?? defaultCompanyId)).service.listActors();
     const ids2 = new Set(employees.map((a) => a.id));
     const systemActors = kernelRegistry.filter((e) => !ids2.has(e.actor)).map((e) => ({ id: e.actor, roles: e.roles, status: "active" }));
     return [...employees, ...systemActors];
@@ -282163,6 +282519,11 @@ async function startServe(opts) {
     // CO-301 阶段1：请求热路径按当前公司经路由层取引擎（恒等到默认公司；per-company 懒建是后续阶段）。
     resolveEngine: (companyId) => getEngine(companyId ?? defaultCompanyId),
     actors,
+    // Bug 0246：GitHub App 待回调登记与重连快照落共享 schema——服务器重启 / 换副本都读得到。
+    connectorAuthPending: {
+      githubApp: await PostgresGithubAppPendingStore.open(pgPool, sharedSchema),
+      snapshots: await PostgresConnectorAuthSnapshotStore.open(pgPool, sharedSchema)
+    },
     port: opts.port ?? 7320,
     projectState: projectStateStore,
     artifactState: artifactStateStore,
@@ -282213,7 +282574,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto87.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto88.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -282302,7 +282663,7 @@ async function startServe(opts) {
               await rebuildLiveSchema();
               for (const d of schema) engine2.kernel.setType(d);
             },
-            countRoleHolders,
+            (role) => countRoleHolders(role, cid),
             registryAudit
           );
         }
@@ -282441,9 +282802,9 @@ async function startServe(opts) {
         // store（`public.actor_bindings`），org-registry cutover 之后它是冻结旧镜像——只留给
         // 本域其它老读口，工作区定位一律不许再用它。
         resolveBinding: resolveCompanyBinding,
-        /* ADR 0613：建会话 / 「恢复为员工默认运行配置」这两下要读员工详情页配的型号，按**当前公司**读
+        /* ADR 0613：建会话那一下要读员工详情页配的型号，按**当前公司**读
            （与 `resolveBinding` 同一条理由：全局 `registry` 对已切 `actor-config` 的公司是冻结旧镜像）。
-           ⚠ 只有这两下读它；解析每一轮的模型依旧不读员工配置（ADR 0610 D1）。 */
+           ⚠ 只有这一下读它；解析每一轮的模型依旧不读员工配置（ADR 0610 D1）。 */
         resolveActorModel: resolveAgentConfiguredModel,
         // 按 runId 路由：切换后新会话的事件落在本公司库里，共享 store 会一条都补不出 parts。
         // ⚠ `runRoutedTrace` 声明在本行**之后**：包成箭头函数避 TDZ（本域只需要 listEvents）。
@@ -282531,6 +282892,8 @@ async function startServe(opts) {
         // live 注册表算 `frameCursor`。与 server.ts 的双写解析同一层，与 attach 路径共享 registry。
         resolveChatItems: (companyId) => chatItemsFor(companyId),
         liveChat,
+        // ADR 0615 B3：快照读口给 serve 重启留下的孤儿插话落结论时问节点——与 `/append` 同一条网关。
+        confirmInputReceipt: (ref2) => chatRemoteAdapter ? chatRemoteAdapter.confirmInputReceipt(ref2.nodeId, ref2.dispatchId, ref2.runtimeKey) : Promise.resolve({ status: "unknown", reason: "node-gateway-not-ready" }),
         // ADR-0587：列表行派生 `unread`，与 collab 域收件箱读同一份按公司的水位（无 PG 时闭包自己回落单实例）。
         resolveReadMarkers: readMarkerStoreFor,
         // ADR 0610 D4：`GET /api/chat-sessions/:id/usage` 的取数口——**与 collab 域是同一个实例**，
@@ -283134,8 +283497,6 @@ async function startServe(opts) {
     discussSessions: new FileSideMap(path29.join(opts.dir, "discuss-sessions.json")),
     escalateDiscussRetain: new FileSideMap(path29.join(opts.dir, "escalate-discuss-retain.json")),
     // 切片 2b：代署 escalate 发起会话保留（落盘）
-    // Bug 0107：插入结果读口结算孤儿插入行（serve 在途中重启）时问节点——走 chat 那条网关。
-    confirmInputReceipt: (ref2) => chatRemoteAdapter ? chatRemoteAdapter.confirmInputReceipt(ref2.nodeId, ref2.dispatchId, ref2.runtimeKey) : Promise.resolve({ status: "unknown", reason: "node-gateway-not-ready" }),
     dispatchChat: automationDispatchChat = async (chatReq) => {
       const dispatchChatImpl = async ({ actorId, message, dispatchId: requestDispatchId, admitDispatch, executionProfile, knowledgeAttemptKind, requiredConnectorSlugs, env: requestEnv, sessionId, chatSessionId, chatTurnId, attachments, workspace, companyId, model: sessionModelOverride, parentConversationSnapshot, extraSystemPrompt, delegatedChildTurn, workspaceBundle }) => {
         const isolatedKnowledgeTurn = executionProfile === "knowledge-single-turn";
@@ -283158,10 +283519,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto87.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto88.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? stableChatTraceRunId(requestDispatchId) : `chat-run:${(0, import_node_crypto87.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto87.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? stableChatTraceRunId(requestDispatchId) : `chat-run:${(0, import_node_crypto88.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto88.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           if (isHumanSubmitDispatchId(requestDispatchId)) {
@@ -284611,7 +284972,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = opts2?.protocolRecovery?.dispatchId ?? `dispatch:${(0, import_node_crypto87.randomUUID)()}`;
+          const ledgerId = opts2?.protocolRecovery?.dispatchId ?? `dispatch:${(0, import_node_crypto88.randomUUID)()}`;
           try {
             const inserted = await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -284711,7 +285072,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto87.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto88.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -285105,7 +285466,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto87.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto88.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -285832,7 +286193,9 @@ async function startServe(opts) {
           slaMs: humanMs
         };
       },
-      log: (message) => console.warn(message)
+      log: (message) => console.warn(message),
+      // 新进了通知就推给收件人本人（/api/events?topics=notifications）：铃铛角标与页内提示不等 30 秒轮询。
+      onNotified: (_companyId, recipients) => auditSink.notifyNotificationsChanged(recipients)
     });
     notificationLedgerWorker = worker;
     const ledgerSubscribed = /* @__PURE__ */ new Set();
@@ -287699,11 +288062,12 @@ async function readClaudeQuota(binary, signal, deps = {}) {
 // ../cli/src/daemon/quota/monitor.ts
 var read2 = (runtime, signal) => runtime.kind === "codex" ? readCodexQuota(runtime.binary ?? "codex", signal) : readClaudeQuota(runtime.binary ?? "claude", signal, { version: runtime.version });
 var RuntimeQuotaMonitor = class {
-  constructor(runtimes, send, reader = read2, intervalMs = RUNTIME_QUOTA_POLL_MS) {
+  constructor(runtimes, send, reader = read2, intervalMs = RUNTIME_QUOTA_POLL_MS, minGapMs = RUNTIME_QUOTA_REFRESH_MIN_GAP_MS) {
     this.runtimes = runtimes;
     this.send = send;
     this.reader = reader;
     this.intervalMs = intervalMs;
+    this.minGapMs = minGapMs;
   }
   cache = [];
   collectedAt;
@@ -287733,6 +288097,41 @@ var RuntimeQuotaMonitor = class {
     });
     return this.pending;
   }
+  /**
+   * 人点了页面上的「刷新」（服务端下发 `refresh_quotas`，ADR 0620）：**现在就去问上游**。
+   *
+   * 与 {@link refresh} 的唯一区别就是**不看那 5 分钟**——那条节流是背景轮询的节奏，
+   * 对一个正盯着页面等结果的人没有任何意义。换上的是一条窄得多的闸：
+   * {@link RUNTIME_QUOTA_REFRESH_MIN_GAP_MS}（30 秒）。连点被它挡下，且挡下时**如实说**
+   * 「刚在 N 秒前采过」，不假装采了一次（发起人方申的定则：会静默降级的动作必须回报走了哪条路）。
+   *
+   * provider 自己给的 `retryAt` 退避**不在**绕过范围内：那是上游明说的「别来了」，
+   * 谁点按钮都不该越过它。被它挡住的那个 runtime 在 `collect` 里照旧沿用上一次的结果。
+   */
+  forceRefresh() {
+    if (this.stopped) return Promise.resolve({ ok: false, reason: "\u8FD9\u53F0\u8282\u70B9\u6B63\u5728\u505C\u673A\uFF0C\u6CA1\u6709\u91CD\u91C7\u989D\u5EA6" });
+    if (this.collectableKinds().length === 0) {
+      return Promise.resolve({ ok: false, reason: "\u8FD9\u53F0\u673A\u5668\u4E0A\u6CA1\u6709\u4F1A\u4E0A\u62A5\u989D\u5EA6\u7684\u8FD0\u884C\u65F6\uFF08\u53EA\u6709 Claude Code \u548C Codex \u80FD\u67E5\u5230\u8BA2\u9605\u989D\u5EA6\uFF09" });
+    }
+    if (this.pending) return this.pending.then(() => ({ ok: true }));
+    const sinceMs = this.collectedAt === void 0 ? Number.POSITIVE_INFINITY : Date.now() - this.collectedAt;
+    if (sinceMs < this.minGapMs) {
+      return Promise.resolve({
+        ok: false,
+        reason: `\u989D\u5EA6\u521A\u5728 ${Math.max(1, Math.round(sinceMs / 1e3))} \u79D2\u524D\u91C7\u8FC7\uFF0C\u9875\u9762\u4E0A\u5C31\u662F\u6700\u65B0\u6570\u636E\uFF1B${Math.ceil((this.minGapMs - sinceMs) / 1e3)} \u79D2\u540E\u53EF\u4EE5\u518D\u91C7\u4E00\u6B21`
+      });
+    }
+    this.pending = this.collect().finally(() => {
+      this.pending = void 0;
+    });
+    return this.pending.then(() => ({ ok: true }));
+  }
+  /** 这台机器上真的会上报额度的 runtime（白名单硬编码在 collect 里，两处取同一份判据）。 */
+  collectableKinds() {
+    const kinds = [];
+    for (const r of this.runtimes) if (r.kind === "codex" || r.kind === "claude-code") kinds.push(r.kind);
+    return kinds;
+  }
   async collect() {
     const result = [];
     for (const runtime of this.runtimes) {
@@ -287763,7 +288162,7 @@ var RuntimeQuotaMonitor = class {
 init_wrapper();
 init_src();
 var import_node_os11 = require("node:os");
-var import_node_crypto88 = require("node:crypto");
+var import_node_crypto89 = require("node:crypto");
 init_src8();
 init_src2();
@@ -288582,6 +288981,13 @@ var DaemonWsClient = class {
         void this.reportRuntimeModels({ force: true, requestId: msg.requestId });
         break;
       }
+      case "refresh_quotas": {
+        const requestId = msg.requestId;
+        void this.quotaMonitor.forceRefresh().catch((err) => ({ ok: false, reason: `\u91CD\u91C7\u989D\u5EA6\u65F6\u51FA\u9519\uFF1A${err instanceof Error ? err.message : String(err)}` })).then((r) => {
+          this.send({ type: "quota_refresh_result", requestId, ok: r.ok, ...r.reason ? { reason: r.reason } : {} });
+        });
+        break;
+      }
       case "update": {
         this.pendingUpdatePkg = msg.pkg;
         if (!this.onUpdate) {
@@ -288660,7 +289066,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto88.randomUUID)();
+    const requestId = (0, import_node_crypto89.randomUUID)();
     return new Promise((resolve12, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -288808,6 +289214,9 @@ var DaemonWsClient = class {
       supportsChunkedMessages: true,
       // Bug 0107：本 daemon 认 `input_receipt_query`。恒 true——handler 随包发。
       supportsInputReceiptQuery: true,
+      // ADR 0620：本 daemon 认 `refresh_quotas`（人点刷新时现去问一遍上游额度）。恒 true——
+      // 采集器随包发。服务端据此对老节点当场回「升级后可用」，不必发一帧出去等超时。
+      supportsQuotaRefresh: true,
       ...activeSessions.length > 0 ? { activeSessions } : {},
       // 始终带字段（空数组也带）作为新协议能力标志；服务端仅对支持该字段的节点做缺席确认。
       pendingDispatchIds: [...this.pendingDispatchIds]
@@ -289071,7 +289480,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process23 = require("node:child_process");
 var import_node_fs24 = require("node:fs");
-var import_node_crypto89 = require("node:crypto");
+var import_node_crypto90 = require("node:crypto");
 var import_node_os14 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -289137,7 +289546,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto89.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto90.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
@@ -291009,13 +291418,13 @@ function ownFlagsFromDecl(command2) {
 }
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto90 = require("node:crypto");
+var import_node_crypto91 = require("node:crypto");
 var import_node_child_process24 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical2 = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto90.createHash)("sha256").update(canonical2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto91.createHash)("sha256").update(canonical2).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -291570,7 +291979,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto91.randomUUID)();
+  const waiterId = (0, import_node_crypto92.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -291654,7 +292063,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.77" ? "2.2.77" : "dev";
+var CLI_VERSION = "2.2.79" ? "2.2.79" : "dev";
 function apiHeaders(token, company) {
   const headers = {
     authorization: `Bearer ${token}`,
@@ -292020,7 +292429,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path38.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto91.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto92.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -293159,7 +293568,7 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
         const slug6 = flags.get("slug");
-        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto91.randomUUID)());
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto92.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -295424,13 +295833,13 @@ function runtimeAssetSourceRoots(input) {
 }
 // src/install.ts
-var import_node_crypto92 = require("node:crypto");
+var import_node_crypto93 = require("node:crypto");
 var fs49 = __toESM(require("node:fs"));
 var path44 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto92.createHash)("sha256").update(fs49.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto93.createHash)("sha256").update(fs49.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -295553,7 +295962,7 @@ function shimScript() {
 }
 // src/index.ts
-var PKG_VERSION = true ? "2.2.77" : "dev";
+var PKG_VERSION = true ? "2.2.79" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -295861,7 +296270,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto93.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto94.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }