oasis_test_v2 2.2.81 → 2.2.83

package/dist/index.js

@@ -2950,6 +2950,25 @@ async function fetchResultPackage(base, fetchImpl, runId) {
   }));
   return { artifacts, fileCount: body2.project?.fileCount ?? artifacts.length };
 }
+function toEpochMs(v2) {
+  if (typeof v2 === "number" && Number.isFinite(v2)) return v2;
+  if (typeof v2 === "string" && v2.length > 0) {
+    const ms = Date.parse(v2);
+    return Number.isNaN(ms) ? void 0 : ms;
+  }
+  return void 0;
+}
+function runTime(r) {
+  return r.createdAt ?? r.updatedAt ?? Number.NEGATIVE_INFINITY;
+}
+function latestSucceededRun(runs) {
+  let best;
+  for (const r of runs) {
+    if (r.status !== "succeeded") continue;
+    if (best === void 0 || runTime(r) > runTime(best)) best = r;
+  }
+  return best;
+}
 async function fetchBoardStatus(base, fetchImpl, artifactId) {
   const boardKey = deriveBoardKey(artifactId);
   let boardExists = true;
@@ -2975,10 +2994,20 @@ async function fetchBoardStatus(base, fetchImpl, artifactId) {
         "GET",
         `/api/runs?projectId=${encodeURIComponent(boardKey)}`
       );
-      runs = (body2.runs ?? []).map((r) => ({
-        runId: String(r["runId"] ?? r["id"] ?? ""),
-        status: String(r["status"] ?? "unknown")
-      }));
+      runs = (body2.runs ?? []).map((r) => {
+        const run = {
+          runId: String(r["runId"] ?? r["id"] ?? ""),
+          status: String(r["status"] ?? "unknown")
+        };
+        if (typeof r["agentId"] === "string" && r["agentId"].length > 0) run.agentId = r["agentId"];
+        if (typeof r["error"] === "string" && r["error"].trim().length > 0) run.error = r["error"];
+        const createdAt = toEpochMs(r["createdAt"]);
+        if (createdAt !== void 0) run.createdAt = createdAt;
+        const updatedAt = toEpochMs(r["updatedAt"]);
+        if (updatedAt !== void 0) run.updatedAt = updatedAt;
+        return run;
+      });
+      runs.sort((a, b2) => runTime(b2) - runTime(a) || 0);
     } catch {
     }
   }
@@ -35159,7 +35188,7 @@ var require_websocket = __commonJS({
     var http2 = require("http");
     var net = require("net");
     var tls = require("tls");
-    var { randomBytes: randomBytes14, createHash: createHash45 } = require("crypto");
+    var { randomBytes: randomBytes15, createHash: createHash45 } = require("crypto");
     var { Duplex, Readable } = require("stream");
     var { URL: URL2 } = require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -35697,7 +35726,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key2 = randomBytes14(16).toString("base64");
+      const key2 = randomBytes15(16).toString("base64");
       const request2 = isSecure ? https.request : http2.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -130108,7 +130137,7 @@ var require_utils3 = __commonJS({
     var nodeCrypto = require("crypto");
     module2.exports = {
       postgresMd5PasswordHash,
-      randomBytes: randomBytes14,
+      randomBytes: randomBytes15,
       deriveKey,
       sha256: sha2563,
       hashByName,
@@ -130118,7 +130147,7 @@ var require_utils3 = __commonJS({
     var webCrypto = nodeCrypto.webcrypto || globalThis.crypto;
     var subtleCrypto = webCrypto.subtle;
     var textEncoder = new TextEncoder();
-    function randomBytes14(length) {
+    function randomBytes15(length) {
       return webCrypto.getRandomValues(Buffer.alloc(length));
     }
     async function md5(string7) {
@@ -208676,11 +208705,17 @@ var init_app_adopt = __esm({
 });
 
 // ../connectors/src/github/app-manifest.ts
+function randomAppNameSuffix() {
+  const alphabet = "abcdefghijklmnopqrstuvwxyz0123456789";
+  return Array.from((0, import_node_crypto42.randomBytes)(4), (b2) => alphabet[b2 % alphabet.length]).join("");
+}
 function buildAppManifest(args) {
   const base = args.baseUrl.replace(/\/+$/, "");
+  const suffix = args.nameSuffix ?? randomAppNameSuffix();
+  const room = GITHUB_APP_NAME_MAX - args.namePrefix.length - suffix.length - 2;
+  const middle = args.employeeSlug.slice(0, Math.max(0, room)).replace(/-+$/, "");
   return {
-    name: `${args.namePrefix}-${args.employeeSlug}`.slice(0, 34),
-    // GitHub App 名上限 34 字符
+    name: [args.namePrefix, middle, suffix].filter(Boolean).join("-"),
     url: base,
     redirect_url: `${base}${args.redirectPath}`,
     public: false,
@@ -208758,10 +208793,11 @@ function checkAppOwnership(conv, want) {
   }
   return null;
 }
-var GITHUB_APP_DEFAULT_PERMISSIONS, GITHUB_APP_PERMISSION_LABELS, PENDING_TTL_MS, REQUIRED_WRITE_PERMISSIONS, PERMISSION_RANK, FORBIDDEN_IMPORT_PERMISSION_KEYS;
+var import_node_crypto42, GITHUB_APP_DEFAULT_PERMISSIONS, GITHUB_APP_PERMISSION_LABELS, GITHUB_APP_NAME_MAX, PENDING_TTL_MS, REQUIRED_WRITE_PERMISSIONS, PERMISSION_RANK, FORBIDDEN_IMPORT_PERMISSION_KEYS;
 var init_app_manifest = __esm({
   "../connectors/src/github/app-manifest.ts"() {
     "use strict";
+    import_node_crypto42 = require("node:crypto");
     GITHUB_APP_DEFAULT_PERMISSIONS = {
       contents: "write",
       // clone / push
@@ -208790,6 +208826,7 @@ var init_app_manifest = __esm({
       { key: "workflows", label: "\u5DE5\u4F5C\u6D41\u6587\u4EF6\uFF08\u8BFB\u5199\uFF09", desc: "\u4FEE\u6539 .github/workflows \u4E0B\u7684 CI \u914D\u7F6E" },
       { key: "issues", label: "Issue\uFF08\u8BFB\u5199\uFF09", desc: "\u521B\u5EFA\u4E0E\u8BC4\u8BBA Issue" }
     ];
+    GITHUB_APP_NAME_MAX = 34;
     PENDING_TTL_MS = 15 * 60 * 1e3;
     REQUIRED_WRITE_PERMISSIONS = ["contents", "pull_requests"];
     PERMISSION_RANK = { read: 1, write: 2, admin: 3 };
@@ -208806,6 +208843,195 @@ var init_app_manifest = __esm({
   }
 });
 
+// ../connectors/src/github/app-inventory.ts
+function permissionVerdict(perms) {
+  const missingRequired = REQUIRED_WRITE.filter((k2) => perms[k2] !== "write" && perms[k2] !== "admin");
+  const excess = excessAppPermissions(perms);
+  return {
+    missingRequired: [...missingRequired],
+    missing: missingAppPermissions(perms),
+    excess,
+    usable: missingRequired.length === 0 && excess.length === 0
+  };
+}
+async function listOrgInstalledApps(args, deps = {}) {
+  const d = { ...defaultDeps3, ...deps };
+  let resp;
+  try {
+    resp = await d.fetch(`${GITHUB_API2}/orgs/${encodeURIComponent(args.org)}/installations?per_page=100`, {
+      headers: {
+        authorization: `Bearer ${args.token}`,
+        accept: "application/vnd.github+json",
+        "x-github-api-version": "2022-11-28"
+      }
+    });
+  } catch (e) {
+    return { status: "error", message: String(e) };
+  }
+  if (resp.status === 401 || resp.status === 403) return { status: "needsAuth", httpStatus: resp.status };
+  const body2 = await resp.json().catch(() => ({}));
+  if (!resp.ok) return { status: "error", message: `GitHub \u8FD4\u56DE HTTP ${resp.status} ${String(body2["message"] ?? "")}`.trim() };
+  const list2 = Array.isArray(body2["installations"]) ? body2["installations"] : [];
+  const all2 = list2.flatMap((raw) => {
+    const item = raw;
+    const appId = item["app_id"] === void 0 ? "" : String(item["app_id"]);
+    const installationId = item["id"] === void 0 ? "" : String(item["id"]);
+    if (!appId || !installationId) return [];
+    const rawPerms = item["permissions"];
+    const permissions = {};
+    for (const [k2, v2] of Object.entries(rawPerms ?? {})) if (typeof v2 === "string") permissions[k2] = v2;
+    return [{ appId, slug: String(item["app_slug"] ?? ""), installationId, org: args.org, permissions }];
+  });
+  const owned = await Promise.all(all2.map(async (app) => {
+    if (!app.slug) return app;
+    try {
+      const r = await d.fetch(`${GITHUB_API2}/apps/${encodeURIComponent(app.slug)}`, {
+        headers: {
+          authorization: `Bearer ${args.token}`,
+          accept: "application/vnd.github+json",
+          "x-github-api-version": "2022-11-28"
+        }
+      });
+      if (!r.ok) return app;
+      const meta = await r.json().catch(() => ({}));
+      const login = meta.owner?.login;
+      return login && login.toLowerCase() !== args.org.toLowerCase() ? null : app;
+    } catch {
+      return app;
+    }
+  }));
+  return { status: "ok", apps: owned.filter((a) => a !== null) };
+}
+async function uninstallAppInstallation(args, deps = {}) {
+  const d = { ...defaultDeps3, ...deps };
+  const jwt = createAppJwt(args.appId, args.privateKeyPem, d.nowMs());
+  const resp = await d.fetch(`${GITHUB_API2}/app/installations/${encodeURIComponent(args.installationId)}`, {
+    method: "DELETE",
+    headers: {
+      authorization: `Bearer ${jwt}`,
+      accept: "application/vnd.github+json",
+      "x-github-api-version": "2022-11-28"
+    }
+  });
+  if (resp.status === 204 || resp.status === 404) return;
+  const body2 = await resp.json().catch(() => ({}));
+  throw new Error(`github app: uninstall failed HTTP ${resp.status} ${String(body2["message"] ?? "")}`.trim());
+}
+function appSettingsUrl(owner, slug6) {
+  const s2 = encodeURIComponent(slug6);
+  return owner.kind === "org" ? `https://github.com/organizations/${encodeURIComponent(owner.login)}/settings/apps/${s2}` : `https://github.com/settings/apps/${s2}`;
+}
+function appInstallPageUrl(slug6) {
+  return `https://github.com/apps/${encodeURIComponent(slug6)}/installations/new`;
+}
+function appDeleteUrl(owner, slug6) {
+  return `${appSettingsUrl(owner, slug6)}/advanced`;
+}
+function ownerMatches(app, owner) {
+  if (owner.kind === "org") {
+    return app.ownerType === "Organization" && app.ownerLogin.toLowerCase() === owner.login.toLowerCase();
+  }
+  if (app.ownerType !== "User") return false;
+  return !owner.login || app.ownerLogin.toLowerCase() === owner.login.toLowerCase();
+}
+function buildReuseCandidates(args) {
+  const { owner } = args;
+  const known = new Set(args.oasisApps.map((a2) => a2.appId));
+  const a = args.oasisApps.filter((app) => ownerMatches(app, owner)).map((app) => {
+    const verdict = app.permissions ? permissionVerdict(app.permissions) : null;
+    const selectable = verdict ? verdict.usable : true;
+    const action = !selectable ? "blocked" : app.installationIds.length === 0 ? "install" : "bind";
+    return {
+      kind: "oasis",
+      action,
+      appId: app.appId,
+      slug: app.slug,
+      ...app.installationIds[0] ? { installationId: app.installationIds[0] } : {},
+      usedBy: app.usedBy,
+      isOrgDefault: app.isOrgDefault,
+      permissionsUnknown: !verdict,
+      verdict,
+      selectable,
+      settingsUrl: appSettingsUrl(owner, app.slug),
+      permissionsUrl: `${appSettingsUrl(owner, app.slug)}/permissions`,
+      installUrl: appInstallPageUrl(app.slug)
+    };
+  });
+  const b2 = owner.kind === "org" ? args.installed.filter((i) => !known.has(i.appId) && i.org.toLowerCase() === owner.login.toLowerCase()).map((i) => {
+    const verdict = permissionVerdict(i.permissions);
+    return {
+      kind: "installed",
+      action: verdict.usable ? "import" : "blocked",
+      appId: i.appId,
+      slug: i.slug,
+      installationId: i.installationId,
+      usedBy: [],
+      isOrgDefault: false,
+      permissionsUnknown: false,
+      verdict,
+      selectable: verdict.usable,
+      settingsUrl: appSettingsUrl(owner, i.slug),
+      permissionsUrl: `${appSettingsUrl(owner, i.slug)}/permissions`,
+      installUrl: appInstallPageUrl(i.slug)
+    };
+  }) : [];
+  return [...a, ...b2].sort((x2, y) => Number(y.selectable) - Number(x2.selectable));
+}
+function buildAppInventory(args) {
+  const rows = /* @__PURE__ */ new Map();
+  const ownerOf = (login, type) => !login ? null : type === "Organization" ? { kind: "org", login } : { kind: "user", login };
+  for (const app of args.oasisApps) {
+    const inUse = app.isOrgDefault || app.usedBy.length > 0;
+    const owner = ownerOf(app.ownerLogin, app.ownerType);
+    rows.set(app.appId, {
+      appId: app.appId,
+      slug: app.slug,
+      ownerLogin: app.ownerLogin,
+      hasKey: true,
+      usedBy: app.usedBy,
+      isOrgDefault: app.isOrgDefault,
+      inUse,
+      installationIds: [...app.installationIds],
+      canUninstall: !inUse && app.installationIds.length > 0,
+      deleteUrl: owner && app.slug ? appDeleteUrl(owner, app.slug) : ""
+    });
+  }
+  for (const i of args.installed) {
+    const prev = rows.get(i.appId);
+    if (prev) {
+      if (!prev.installationIds.includes(i.installationId)) prev.installationIds.push(i.installationId);
+      prev.canUninstall = !prev.inUse && prev.installationIds.length > 0;
+      if (!prev.ownerLogin) prev.ownerLogin = i.org;
+      if (!prev.deleteUrl && prev.slug) prev.deleteUrl = appDeleteUrl({ kind: "org", login: i.org }, prev.slug);
+      continue;
+    }
+    rows.set(i.appId, {
+      appId: i.appId,
+      slug: i.slug,
+      ownerLogin: i.org,
+      hasKey: false,
+      usedBy: [],
+      isOrgDefault: false,
+      inUse: false,
+      installationIds: [i.installationId],
+      canUninstall: false,
+      deleteUrl: i.slug ? appDeleteUrl({ kind: "org", login: i.org }, i.slug) : ""
+    });
+  }
+  return [...rows.values()].sort((x2, y) => Number(x2.inUse) - Number(y.inUse) || x2.slug.localeCompare(y.slug));
+}
+var GITHUB_API2, defaultDeps3, REQUIRED_WRITE;
+var init_app_inventory = __esm({
+  "../connectors/src/github/app-inventory.ts"() {
+    "use strict";
+    init_app_auth();
+    init_app_manifest();
+    GITHUB_API2 = "https://api.github.com";
+    defaultDeps3 = { fetch: (...a) => globalThis.fetch(...a), nowMs: () => Date.now() };
+    REQUIRED_WRITE = ["contents", "pull_requests"];
+  }
+});
+
 // ../connectors/src/registry.ts
 function createConnectorBySlug(slug6) {
   switch (slug6) {
@@ -209262,6 +209488,7 @@ var init_src8 = __esm({
     init_app_auth();
     init_app_adopt();
     init_app_manifest();
+    init_app_inventory();
     init_registry2();
     init_provision();
     init_prepare_job();
@@ -209270,6 +209497,118 @@ var init_src8 = __esm({
   }
 });
 
+// ../server/src/github-app-inventory.ts
+async function collectOasisGithubApps(svc) {
+  const rows = (await svc.listVariables()).filter((r) => r.scope === "global" || r.scope === "personal");
+  const agents = await svc.listActors({ kind: "agent", status: "active" });
+  const nameOf2 = new Map(agents.map((a) => [a.id, a.name || a.id]));
+  const plain = (key2, actorId) => rows.find((r) => r.key === key2 && r.actorId === actorId && !r.encrypted)?.maskedValue ?? "";
+  const byAppId = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    if (r.key !== "GITHUB_APP_ID" || r.encrypted || !r.maskedValue) continue;
+    const e = byAppId.get(r.maskedValue) ?? {
+      slug: "",
+      installationId: "",
+      keyActorId: void 0,
+      usedBy: [],
+      isOrgDefault: false,
+      sources: []
+    };
+    e.sources.push(r.actorId);
+    if (!r.actorId) e.isOrgDefault = true;
+    else if (nameOf2.has(r.actorId) && !e.usedBy.includes(r.actorId)) e.usedBy.push(r.actorId);
+    byAppId.set(r.maskedValue, e);
+  }
+  const out = await Promise.all([...byAppId.entries()].map(async ([appId, e]) => {
+    let pem = null;
+    let keyActorId;
+    for (const src of [...e.sources].sort((a, b2) => Number(Boolean(a)) - Number(Boolean(b2)))) {
+      pem = await svc.revealVariable("GITHUB_APP_PRIVATE_KEY", src).catch(() => null);
+      if (pem) {
+        keyActorId = src;
+        break;
+      }
+    }
+    if (!pem) return null;
+    const slug6 = plain("GITHUB_APP_SLUG", keyActorId);
+    const storedInstallationId = plain("GITHUB_APP_INSTALLATION_ID", keyActorId);
+    const [meta, installs] = await Promise.all([
+      fetchAppSelfMetadata({ appId, privateKeyPem: pem }).catch(() => null),
+      listAppInstallations({ appId, privateKeyPem: pem }).catch(() => null)
+    ]);
+    const stored = installs?.find((i) => i.installationId === storedInstallationId) ?? installs?.[0];
+    const permissions = stored && Object.keys(stored.permissions).length > 0 ? stored.permissions : meta?.permissions ?? null;
+    const app = {
+      appId,
+      slug: meta?.slug || slug6,
+      ownerLogin: meta?.ownerLogin ?? "",
+      ownerType: meta?.ownerType ?? "",
+      usedBy: e.usedBy,
+      usedByNames: e.usedBy.map((id) => nameOf2.get(id) ?? id),
+      isOrgDefault: e.isOrgDefault,
+      // 列不出来（私钥失效等）时退回库里记的那一处，卸载时 404 也当成功。
+      installationIds: installs ? installs.map((i) => i.installationId) : storedInstallationId ? [storedInstallationId] : [],
+      permissions,
+      keyActorId
+    };
+    return app;
+  }));
+  return out.filter((a) => a !== null);
+}
+async function ghUser(token, path47) {
+  const r = await fetch(`https://api.github.com${path47}`, {
+    headers: {
+      authorization: `Bearer ${token}`,
+      accept: "application/vnd.github+json",
+      "x-github-api-version": "2022-11-28"
+    }
+  });
+  return { status: r.status, body: r.ok ? await r.json().catch(() => null) : null };
+}
+async function githubLoginOf(token) {
+  const r = await ghUser(token, "/user").catch(() => null);
+  return r?.body?.login ?? "";
+}
+async function listMemberships(token) {
+  const r = await ghUser(
+    token,
+    "/user/memberships/orgs?state=active&per_page=100"
+  );
+  if (!r.body) return null;
+  return r.body.flatMap((m2) => m2.organization?.login ? [{ login: m2.organization.login, role: m2.role ?? "member" }] : []);
+}
+async function orgInstalledAppsFor(token, org) {
+  if (!token) return { state: { status: "needsAuth" }, apps: [] };
+  const m2 = await ghUser(token, `/user/memberships/orgs/${encodeURIComponent(org)}`);
+  if (m2.status === 401) return { state: { status: "needsAuth" }, apps: [] };
+  if (m2.body && m2.body.role !== "admin") return { state: { status: "notAdmin" }, apps: [] };
+  if (!m2.body && m2.status === 404) return { state: { status: "notAdmin" }, apps: [] };
+  if (!m2.body) return { state: { status: "needsAuth" }, apps: [] };
+  const r = await listOrgInstalledApps({ token, org });
+  if (r.status === "ok") return { state: { status: "ok" }, apps: r.apps };
+  if (r.status === "needsAuth") return { state: { status: "needsAuth" }, apps: [] };
+  return { state: { status: "error", message: r.message }, apps: [] };
+}
+async function pickUserToken(svc) {
+  const rows = await svc.listVariables();
+  const sources = [void 0, ...rows.filter((r) => r.key === "GITHUB_TOKEN" && r.scope === "personal" && r.actorId).map((r) => r.actorId)];
+  const tried = /* @__PURE__ */ new Set();
+  for (const src of sources) {
+    const token = await svc.revealVariable("GITHUB_TOKEN", src).catch(() => null);
+    if (!token || tried.has(token)) continue;
+    tried.add(token);
+    const memberships = await listMemberships(token).catch(() => null);
+    if (memberships) return { token, memberships };
+  }
+  return null;
+}
+var init_github_app_inventory = __esm({
+  "../server/src/github-app-inventory.ts"() {
+    "use strict";
+    init_src8();
+  }
+});
+
 // ../server/src/server.ts
 function isBundleFrozen(err) {
   return typeof err === "object" && err !== null && err.code === "TENANT_BUNDLE_FROZEN";
@@ -212711,7 +213050,7 @@ async function startOasisServer(opts) {
             entry = {
               // 旧 CLI 未带 waiterId 时给它塞一个服务端本地生成的——它绝不可能出现在 leave 上，
               // 也就绝不会误命中 leftWaiterIds、绝不会被别人的 leave 摘掉。行为与旧 CLI 相同。
-              waiterId: clientWaiterId ?? `server:${(0, import_node_crypto42.randomUUID)()}`,
+              waiterId: clientWaiterId ?? `server:${(0, import_node_crypto43.randomUUID)()}`,
               onResolve,
               expiresAt: expiresAt2,
               cleanup: () => clearTimeout(expiryTimer),
@@ -214849,57 +215188,71 @@ ${composed}`;
           }
           if (url.pathname === "/api/connectors/github/app/available" && req.method === "POST") {
             try {
+              const { actorId, owner } = JSON.parse(rawBody || "{}");
               const svc = await connectorActorsService();
               if (!svc) throw new Error("actors service unavailable");
-              const rows = await svc.listVariables();
-              const plain = (key2, actorId) => rows.find((r) => r.key === key2 && r.actorId === actorId && !r.encrypted)?.maskedValue ?? "";
-              const byAppId = /* @__PURE__ */ new Map();
-              for (const r of rows) {
-                if (r.key !== "GITHUB_APP_ID" || r.encrypted || !r.maskedValue) continue;
-                const appId = r.maskedValue;
-                const prev = byAppId.get(appId);
-                if (prev) {
-                  prev.usedBy += 1;
-                  if (!r.actorId && prev.scope === "personal") {
-                    prev.scope = "global";
-                    delete prev.actorId;
-                    prev.installationId = plain("GITHUB_APP_INSTALLATION_ID");
-                    prev.slug = plain("GITHUB_APP_SLUG");
-                  }
-                  continue;
-                }
-                byAppId.set(appId, {
-                  appId,
-                  slug: plain("GITHUB_APP_SLUG", r.actorId),
-                  installationId: plain("GITHUB_APP_INSTALLATION_ID", r.actorId),
-                  scope: r.actorId ? "personal" : "global",
-                  ...r.actorId ? { actorId: r.actorId } : {},
-                  usedBy: 1
-                });
+              const token = await svc.revealResolvedVariable("GITHUB_TOKEN", actorId);
+              const appOwner = owner?.kind === "org" && owner.login ? { kind: "org", login: owner.login } : { kind: "user", ...token ? { login: await githubLoginOf(token) } : {} };
+              const [oasisApps, installed] = await Promise.all([
+                collectOasisGithubApps(svc),
+                appOwner.kind === "org" ? orgInstalledAppsFor(token, appOwner.login) : Promise.resolve({ state: { status: "ok" }, apps: [] })
+              ]);
+              const names = new Map(oasisApps.map((a) => [a.appId, a.usedByNames]));
+              const candidates = buildReuseCandidates({ owner: appOwner, oasisApps, installed: installed.apps }).map((c) => ({ ...c, usedBy: names.get(c.appId) ?? [] }));
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ candidates, installed: installed.state }));
+            } catch (e) {
+              res.writeHead(500, { "content-type": "application/json" }).end(JSON.stringify({ error: String(e) }));
+            }
+            return;
+          }
+          if (url.pathname === "/api/connectors/github/app/inventory" && req.method === "POST") {
+            try {
+              const svc = await connectorActorsService();
+              if (!svc) throw new Error("actors service unavailable");
+              const [oasisApps, picked] = await Promise.all([collectOasisGithubApps(svc), pickUserToken(svc)]);
+              const adminOrgs = picked ? picked.memberships.filter((m2) => m2.role === "admin").map((m2) => m2.login) : [];
+              const perOrg = picked ? await Promise.all(adminOrgs.map((org) => orgInstalledAppsFor(picked.token, org))) : [];
+              const rows = buildAppInventory({ oasisApps, installed: perOrg.flatMap((r) => r.apps) });
+              const names = new Map(oasisApps.map((a) => [a.appId, a.usedByNames]));
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
+                rows: rows.map((r) => ({ ...r, usedBy: names.get(r.appId) ?? [] })),
+                /** 组织里装着的那部分列没列出来：needsAuth = 没有可用的 GitHub 登录；notAdmin = 不是任何组织的管理员。 */
+                installed: !picked ? { status: "needsAuth" } : adminOrgs.length === 0 ? { status: "notAdmin" } : perOrg.find((r) => r.state.status !== "ok")?.state ?? { status: "ok" },
+                orgs: adminOrgs
+              }));
+            } catch (e) {
+              res.writeHead(500, { "content-type": "application/json" }).end(JSON.stringify({ error: String(e) }));
+            }
+            return;
+          }
+          if (url.pathname === "/api/connectors/github/app/uninstall" && req.method === "POST") {
+            try {
+              const { appIds } = JSON.parse(rawBody || "{}");
+              if (!Array.isArray(appIds) || appIds.length === 0 || !appIds.every((x2) => typeof x2 === "string")) {
+                res.writeHead(400, { "content-type": "application/json" }).end(JSON.stringify({ error: "\u8BF7\u5148\u52FE\u9009\u8981\u5378\u8F7D\u7684 App" }));
+                return;
               }
-              const apps = await Promise.all([...byAppId.values()].map(async (a) => {
-                const base = {
-                  appId: a.appId,
-                  slug: a.slug,
-                  account: a.slug ? `${a.slug}[bot]` : a.appId,
-                  isOrgDefault: a.scope === "global",
-                  usedBy: a.usedBy,
-                  ...a.slug ? { settingsUrl: appPermissionSettingsUrl({ slug: a.slug }) } : {}
-                };
+              const svc = await connectorActorsService();
+              if (!svc) throw new Error("actors service unavailable");
+              const apps = new Map((await collectOasisGithubApps(svc)).map((a) => [a.appId, a]));
+              const results = await Promise.all(appIds.map(async (appId) => {
+                const app = apps.get(appId);
+                if (!app) return { appId, ok: false, error: "Oasis \u6CA1\u6709\u8FD9\u4E2A App \u7684\u79C1\u94A5\uFF0C\u5378\u8F7D\u4E0D\u4E86\uFF0C\u8BF7\u53BB GitHub \u9875\u9762\u5904\u7406" };
+                if (app.isOrgDefault || app.usedBy.length > 0) {
+                  return { appId, slug: app.slug, ok: false, error: `\u8FD8\u6709 agent \u5728\u7528\uFF08${app.isOrgDefault ? "\u7EC4\u7EC7\u9ED8\u8BA4" : app.usedByNames.join("\u3001")}\uFF09\uFF0C\u4E0D\u80FD\u5378\u8F7D` };
+                }
+                const pem = await svc.revealVariable("GITHUB_APP_PRIVATE_KEY", app.keyActorId);
+                if (!pem) return { appId, slug: app.slug, ok: false, error: "\u79C1\u94A5\u8BFB\u4E0D\u51FA\u6765\uFF0C\u5378\u8F7D\u4E0D\u4E86" };
                 try {
-                  const pem = await svc.revealVariable("GITHUB_APP_PRIVATE_KEY", a.actorId);
-                  if (!pem || !a.installationId) return { ...base, permissionsUnknown: true };
-                  const perms = await fetchInstallationPermissions({
-                    appId: a.appId,
-                    privateKeyPem: pem,
-                    installationId: a.installationId
-                  });
-                  return { ...base, missing: missingAppPermissions(perms) };
-                } catch {
-                  return { ...base, permissionsUnknown: true };
+                  for (const installationId of app.installationIds) {
+                    await uninstallAppInstallation({ appId, privateKeyPem: pem, installationId });
+                  }
+                  return { appId, slug: app.slug, ok: true };
+                } catch (e) {
+                  return { appId, slug: app.slug, ok: false, error: `GitHub \u62D2\u7EDD\u4E86\u5378\u8F7D\uFF1A${String(e).replace(/^Error:\s*/, "")}` };
                 }
               }));
-              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ apps }));
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ results }));
             } catch (e) {
               res.writeHead(500, { "content-type": "application/json" }).end(JSON.stringify({ error: String(e) }));
             }
@@ -214928,9 +215281,11 @@ ${composed}`;
                 return;
               }
               const pick3 = (key2) => rows.find((r) => r.key === key2 && r.actorId === srcActor && !r.encrypted)?.maskedValue ?? "";
-              const installationId = pick3("GITHUB_APP_INSTALLATION_ID");
+              const storedInstallationId = pick3("GITHUB_APP_INSTALLATION_ID");
+              const live = await listAppInstallations({ appId, privateKeyPem: pem }).catch(() => null);
+              const installationId = live ? (live.find((i) => i.installationId === storedInstallationId) ?? live[0])?.installationId ?? "" : storedInstallationId;
               if (!installationId) {
-                res.writeHead(409, { "content-type": "application/json" }).end(JSON.stringify({ error: "\u8FD9\u4E2A App \u8FD8\u6CA1\u6709\u5B89\u88C5\u8BB0\u5F55\uFF0C\u65E0\u6CD5\u94F8 token" }));
+                res.writeHead(409, { "content-type": "application/json" }).end(JSON.stringify({ error: "\u8FD9\u4E2A App \u8FD8\u6CA1\u88C5\u5230\u4EFB\u4F55\u8D26\u53F7\u2014\u2014\u5148\u5728 GitHub \u4E0A\u5B89\u88C5\u5B83\uFF0C\u88C5\u597D\u540E\u518D\u70B9\u8FDE\u63A5" }));
                 return;
               }
               const slug6 = pick3("GITHUB_APP_SLUG");
@@ -214968,7 +215323,7 @@ ${composed}`;
                 const msg = String(e);
                 bad(
                   400,
-                  /HTTP 401/.test(msg) ? "App ID \u4E0E\u79C1\u94A5\u5BF9\u4E0D\u4E0A\u2014\u2014\u786E\u8BA4 App ID \u6284\u81EA\u540C\u4E00\u4E2A App \u7684\u8BBE\u7F6E\u9875" : /私钥解析失败/.test(msg) ? msg.replace(/^Error:\s*/, "").replace(/^github app:\s*/, "") : `GitHub \u62D2\u7EDD\u4E86\u8FD9\u5BF9\u51ED\u636E\uFF1A${msg}`
+                  /HTTP 401/.test(msg) ? "\u8FD9\u4E2A\u79C1\u94A5\u548C\u6240\u9009\u7684 App \u5BF9\u4E0D\u4E0A\u2014\u2014\u8BF7\u786E\u8BA4\u5B83\u662F\u5728\u8FD9\u4E2A App \u7684\u8BBE\u7F6E\u9875\u70B9 Generate a private key \u4E0B\u8F7D\u7684\u90A3\u4E00\u4EFD\uFF08\u624B\u586B App ID \u65F6\u4E5F\u6838\u5BF9\u4E00\u4E0B\u6709\u6CA1\u6709\u6284\u9519\uFF09" : /私钥解析失败/.test(msg) ? msg.replace(/^Error:\s*/, "").replace(/^github app:\s*/, "") : `GitHub \u62D2\u7EDD\u4E86\u8FD9\u5BF9\u51ED\u636E\uFF1A${msg}`
                 );
                 return;
               }
@@ -215638,14 +215993,14 @@ async function markDeliveredWithRetry(store, messageId, attempts = 3) {
   }
   return false;
 }
-var http, import_node_crypto42, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, APPEND_TURN_START_WAIT_MS, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
+var http, import_node_crypto43, CONNECTOR_AUTH_SNAPSHOT_TTL_MS, defaultResolveActor, enc, CHAT_OUTPUT_LIMIT, APPEND_TURN_START_WAIT_MS, STREAMING_PATHS, PLANNER_BLOCKING_CODES, WILL_VERBS, GOVERNANCE_COMMANDS, READ_ONLY_COMMANDS, isAgent, isHuman;
 var init_server3 = __esm({
   "../server/src/server.ts"() {
     "use strict";
     init_src();
     init_file_limits2();
     http = __toESM(require("node:http"), 1);
-    import_node_crypto42 = require("node:crypto");
+    import_node_crypto43 = require("node:crypto");
     init_chat_session();
     init_chat_system_message();
     init_sealed_node_receipt();
@@ -215711,6 +216066,7 @@ var init_server3 = __esm({
     init_child_live_turn();
     init_registry_audit_sink();
     init_src8();
+    init_github_app_inventory();
     init_continuation3();
     CONNECTOR_AUTH_SNAPSHOT_TTL_MS = 30 * 60 * 1e3;
     defaultResolveActor = (token) => token.startsWith("token:") ? token.slice("token:".length) : null;
@@ -215825,7 +216181,7 @@ function createNodeTokenStore(file) {
   return {
     issue(nodeId) {
       const table = read3();
-      const token = `ont_${(0, import_node_crypto43.randomBytes)(24).toString("base64url")}`;
+      const token = `ont_${(0, import_node_crypto44.randomBytes)(24).toString("base64url")}`;
       table[token] = nodeId;
       write(table);
       return token;
@@ -215885,7 +216241,7 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
   return {
     issue(name, ttlMs = defaultTtlMs, companyId) {
       const m2 = prune();
-      const token = `ent_${(0, import_node_crypto43.randomBytes)(24).toString("base64url")}`;
+      const token = `ent_${(0, import_node_crypto44.randomBytes)(24).toString("base64url")}`;
       const expiresAt2 = Date.now() + ttlMs;
       m2.set(token, { name, expiresAt: expiresAt2, ...companyId !== void 0 ? { companyId } : {} });
       write(m2);
@@ -215934,33 +216290,33 @@ function createEnrollTokenStore(defaultTtlMs = 30 * 60 * 1e3, file) {
     }
   };
 }
-var import_node_crypto43, fs22, path21, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
+var import_node_crypto44, fs22, path21, SESSION_TOKEN_PREFIX, b64url2, fromB64url, readOrCreateSecret, sign, signatureMatches, isTokenClaims;
 var init_tokens = __esm({
   "../server/src/tokens.ts"() {
     "use strict";
-    import_node_crypto43 = require("node:crypto");
+    import_node_crypto44 = require("node:crypto");
     fs22 = __toESM(require("node:fs"), 1);
     path21 = __toESM(require("node:path"), 1);
     SESSION_TOKEN_PREFIX = "oat_v2_";
     b64url2 = (value2) => Buffer.from(value2).toString("base64url");
     fromB64url = (value2) => Buffer.from(value2, "base64url").toString("utf8");
     readOrCreateSecret = (file) => {
-      if (!file) return (0, import_node_crypto43.randomBytes)(32);
+      if (!file) return (0, import_node_crypto44.randomBytes)(32);
       try {
         const raw = fs22.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto43.randomBytes)(32);
+      const secret = (0, import_node_crypto44.randomBytes)(32);
       fs22.mkdirSync(path21.dirname(file), { recursive: true });
       fs22.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
     };
-    sign = (secret, payload2) => (0, import_node_crypto43.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign = (secret, payload2) => (0, import_node_crypto44.createHmac)("sha256", secret).update(payload2).digest("base64url");
     signatureMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto43.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto44.timingSafeEqual)(a, b2);
     };
     isTokenClaims = (value2) => {
       if (value2 === null || typeof value2 !== "object") return false;
@@ -216022,31 +216378,31 @@ function createDataplaneTokenIssuer(opts = {}) {
     }
   };
 }
-var import_node_crypto44, fs23, path22, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
+var import_node_crypto45, fs23, path22, PREFIX2, b64url3, fromB64url2, sign2, sigMatches, readOrCreateSecret2, isClaims, isDataplaneToken;
 var init_session_dataplane_token = __esm({
   "../server/src/session-dataplane-token.ts"() {
     "use strict";
-    import_node_crypto44 = require("node:crypto");
+    import_node_crypto45 = require("node:crypto");
     fs23 = __toESM(require("node:fs"), 1);
     path22 = __toESM(require("node:path"), 1);
     init_src();
     PREFIX2 = "osd_";
     b64url3 = (v2) => Buffer.from(v2, "utf8").toString("base64url");
     fromB64url2 = (v2) => Buffer.from(v2, "base64url").toString("utf8");
-    sign2 = (secret, payload2) => (0, import_node_crypto44.createHmac)("sha256", secret).update(payload2).digest("base64url");
+    sign2 = (secret, payload2) => (0, import_node_crypto45.createHmac)("sha256", secret).update(payload2).digest("base64url");
     sigMatches = (actual, expected) => {
       const a = Buffer.from(actual);
       const b2 = Buffer.from(expected);
-      return a.length === b2.length && (0, import_node_crypto44.timingSafeEqual)(a, b2);
+      return a.length === b2.length && (0, import_node_crypto45.timingSafeEqual)(a, b2);
     };
     readOrCreateSecret2 = (file) => {
-      if (!file) return (0, import_node_crypto44.randomBytes)(32);
+      if (!file) return (0, import_node_crypto45.randomBytes)(32);
       try {
         const raw = fs23.readFileSync(file, "utf8").trim();
         if (raw) return Buffer.from(raw, "base64url");
       } catch {
       }
-      const secret = (0, import_node_crypto44.randomBytes)(32);
+      const secret = (0, import_node_crypto45.randomBytes)(32);
       fs23.mkdirSync(path22.dirname(file), { recursive: true });
       fs23.writeFileSync(file, secret.toString("base64url"), { mode: 384 });
       return secret;
@@ -218354,13 +218710,22 @@ function cloneOffboarding(op) {
     assignmentDecisions: op.assignmentDecisions.map((d) => ({ ...d, toPrincipal: { ...d.toPrincipal } }))
   };
 }
-var memberKey, scopedKey, bridgeKey, MemoryControlPlaneStore;
+var memberKey, scopedKey, bridgeKey, migrationRow, MemoryControlPlaneStore;
 var init_memory_control_plane_store = __esm({
   "../testkit/src/memory-control-plane-store.ts"() {
     "use strict";
     memberKey = (companyId, accountId) => `${companyId} ${accountId}`;
     scopedKey = (companyId, id) => `${companyId}\0${id}`;
     bridgeKey = (companyId, type, id) => `${companyId}\0${type}\0${id}`;
+    migrationRow = (companyId, accountId, roleBefore, roleAfter, audit2) => ({
+      companyId,
+      accountId,
+      roleBefore,
+      roleAfter,
+      evidence: audit2.evidence,
+      ...audit2.evidence === "manifest" && audit2.manifestVersion !== void 0 ? { manifestVersion: audit2.manifestVersion } : {},
+      appliedAt: audit2.appliedAt
+    });
     MemoryControlPlaneStore = class {
       companies = /* @__PURE__ */ new Map();
       members = /* @__PURE__ */ new Map();
@@ -218480,6 +218845,21 @@ var init_memory_control_plane_store = __esm({
         this.members.delete(key2);
         return { ok: true, member: { ...target } };
       }
+      async removeMemberAndReleaseOwnedAgents(companyId, accountId, at2) {
+        const target = this.members.get(memberKey(companyId, accountId));
+        if (!target) return { ok: false, reason: "not_found" };
+        if (target.role === "owner") return { ok: false, reason: "owner_protected" };
+        const releasedAgents = [];
+        for (const [key2, e] of this.digitalEmployees) {
+          if (e.companyId !== companyId || e.ownerAccountId !== accountId) continue;
+          const { ownerAccountId: _cleared, ...rest } = e;
+          this.digitalEmployees.set(key2, { ...rest, updatedAt: at2 });
+          releasedAgents.push(e.id);
+        }
+        this.principalBridges.delete(bridgeKey(companyId, "human", accountId));
+        this.members.delete(memberKey(companyId, accountId));
+        return { ok: true, member: { ...target }, releasedAgents };
+      }
       async updateMemberRoleIfNotLastOwner(companyId, accountId, role) {
         const key2 = memberKey(companyId, accountId);
         const target = this.members.get(key2);
@@ -218506,7 +218886,7 @@ var init_memory_control_plane_store = __esm({
           return { ok: false, reason: "target_not_listed" };
         }
         const acc = this.accounts.get(toAccountId);
-        if (acc && acc.status !== "active") return { ok: false, reason: "target_inactive" };
+        if (!acc || acc.status !== "active") return { ok: false, reason: "target_inactive" };
         const others = [];
         for (const m2 of this.members.values()) {
           if (m2.companyId === companyId && m2.role === "owner" && m2.accountId !== toAccountId) others.push(m2);
@@ -218523,6 +218903,37 @@ var init_memory_control_plane_store = __esm({
         this.members.set(memberKey(companyId, toAccountId), owner);
         return { ok: true, owner: { ...owner }, demoted };
       }
+      // —— 存量身份映射（ADR D3）——
+      async migrateSoleCompanyOwner(companyId, toAccountId, audit2) {
+        const target = this.members.get(memberKey(companyId, toAccountId));
+        if (!target) return { ok: false, reason: "not_found" };
+        const others = [];
+        for (const m2 of this.members.values()) {
+          if (m2.companyId === companyId && m2.role === "owner" && m2.accountId !== toAccountId) others.push(m2);
+        }
+        if (others.length === 0 && target.role === "owner") {
+          return { ok: true, owner: { ...target }, demoted: [], auditRows: [] };
+        }
+        const auditRows = [];
+        const demoted = others.map((m2) => {
+          const next = { ...m2, role: "admin" };
+          this.members.set(memberKey(companyId, m2.accountId), next);
+          auditRows.push(migrationRow(companyId, m2.accountId, "owner", "admin", audit2));
+          return { ...next };
+        });
+        if (target.role !== "owner") auditRows.push(migrationRow(companyId, toAccountId, target.role, "owner", audit2));
+        const owner = { ...target, role: "owner" };
+        this.members.set(memberKey(companyId, toAccountId), owner);
+        for (const r of auditRows) this.roleMigrations.push({ ...r });
+        return { ok: true, owner: { ...owner }, demoted, auditRows };
+      }
+      async setMemberRoleOnly(companyId, accountId, role) {
+        const key2 = memberKey(companyId, accountId);
+        const cur = this.members.get(key2);
+        if (!cur) return false;
+        this.members.set(key2, { ...cur, role });
+        return true;
+      }
       // —— 存量身份映射审计（ADR D3.4）：只追加 ——
       async appendMemberRoleMigrations(rows) {
         for (const r of rows) this.roleMigrations.push({ ...r });
@@ -218793,11 +219204,11 @@ function onlyHits(pool, q2) {
   if (!q2.requireMatch || q2.keywords.length === 0) return [...pool];
   return pool.filter((r) => memoryMatchScore(r, q2.keywords) > 0);
 }
-var import_node_crypto45, MemoryActorMemoryStore, toIndexEntry;
+var import_node_crypto46, MemoryActorMemoryStore, toIndexEntry;
 var init_memory_actor_memory_store = __esm({
   "../testkit/src/memory-actor-memory-store.ts"() {
     "use strict";
-    import_node_crypto45 = require("node:crypto");
+    import_node_crypto46 = require("node:crypto");
     init_src();
     MemoryActorMemoryStore = class {
       rows = /* @__PURE__ */ new Map();
@@ -218851,7 +219262,7 @@ var init_memory_actor_memory_store = __esm({
       async write(input, now) {
         if (input.memId === void 0) {
           const rec2 = {
-            memId: `mem:${(0, import_node_crypto45.randomUUID)()}`,
+            memId: `mem:${(0, import_node_crypto46.randomUUID)()}`,
             actorId: input.actorId,
             projectId: input.projectId,
             keywords: [...input.keywords],
@@ -220550,13 +220961,13 @@ var init_stats = __esm({
 
 // ../server/src/domains/projects/project-id.ts
 function randomProjectId() {
-  return projectIdFromUuid((0, import_node_crypto46.randomUUID)());
+  return projectIdFromUuid((0, import_node_crypto47.randomUUID)());
 }
-var import_node_crypto46;
+var import_node_crypto47;
 var init_project_id = __esm({
   "../server/src/domains/projects/project-id.ts"() {
     "use strict";
-    import_node_crypto46 = require("node:crypto");
+    import_node_crypto47 = require("node:crypto");
     init_src();
   }
 });
@@ -222631,12 +223042,12 @@ function applyTurnPatch(t, patch) {
     ...patch.lastError !== void 0 ? { lastError: patch.lastError } : {}
   };
 }
-var import_node_crypto47, fs24, path23, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
+var import_node_crypto48, fs24, path23, NdjsonOplogStore, DirBlobStore, MUTATORS, FileTypeRegistryStore, FileRoleRegistryStore, FileRegistryStore, FileAssistantBindStore, FileHumanPrefsStore, FileProjectStateStore, FileArtifactStateStore, FileTraceStore, MemoryChatSessionStore, FileChatSessionStore, MemoryChatTurnStore, FileChatTurnStore, MemoryReadMarkerStore, FileReadMarkerStore;
 var init_dev_store = __esm({
   "../server/src/dev-store.ts"() {
     "use strict";
     init_src();
-    import_node_crypto47 = require("node:crypto");
+    import_node_crypto48 = require("node:crypto");
     fs24 = __toESM(require("node:fs"), 1);
     path23 = __toESM(require("node:path"), 1);
     init_src();
@@ -222690,7 +223101,7 @@ var init_dev_store = __esm({
         return path23.join(this.dir, hash3);
       }
       async put(bytes2) {
-        const hash3 = (0, import_node_crypto47.createHash)("sha256").update(bytes2).digest("hex");
+        const hash3 = (0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex");
         const file = this.fileOf(hash3);
         if (!fs24.existsSync(file)) fs24.writeFileSync(file, bytes2);
         return hash3;
@@ -223813,6 +224224,9 @@ var init_control_plane_file_store = __esm({
       "removeMemberIfNotLastOwner",
       "updateMemberRoleIfNotLastOwner",
       "setSoleCompanyOwner",
+      "removeMemberAndReleaseOwnedAgents",
+      "migrateSoleCompanyOwner",
+      "setMemberRoleOnly",
       "appendMemberRoleMigrations",
       "createInvitation",
       "updateInvitationStatus",
@@ -223982,7 +224396,7 @@ var init_company_engine_router = __esm({
 
 // ../server/src/skill-market-client.ts
 function digestOf2(bytes2) {
-  return `sha256:${(0, import_node_crypto48.createHash)("sha256").update(bytes2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto49.createHash)("sha256").update(bytes2).digest("hex")}`;
 }
 function createSkillMarketClientFromEnv(env = process.env) {
   const base = env["SKILL_MARKET_BASE_URL"];
@@ -223993,11 +224407,11 @@ function createSkillMarketClientFromEnv(env = process.env) {
 function sleep4(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
-var import_node_crypto48, DisabledSkillMarketClient, FakeSkillMarketClient, HttpSkillMarketClient;
+var import_node_crypto49, DisabledSkillMarketClient, FakeSkillMarketClient, HttpSkillMarketClient;
 var init_skill_market_client = __esm({
   "../server/src/skill-market-client.ts"() {
     "use strict";
-    import_node_crypto48 = require("node:crypto");
+    import_node_crypto49 = require("node:crypto");
     init_src();
     DisabledSkillMarketClient = class {
       async listSkills(_input) {
@@ -224848,7 +225262,7 @@ async function copySessionOutputs(deps) {
       continue;
     }
     const saved = existing?.[file.path];
-    if (saved && savedContentHash(saved) === (0, import_node_crypto49.createHash)("sha256").update(bytes2).digest("hex")) {
+    if (saved && savedContentHash(saved) === (0, import_node_crypto50.createHash)("sha256").update(bytes2).digest("hex")) {
       const aligned = { ...saved, size: bytes2.length, mtime: file.mtime };
       delete aligned.editedAt;
       realigned.push(aligned);
@@ -224945,11 +225359,11 @@ function createOutputCopyScheduler(deps) {
     }
   };
 }
-var import_node_crypto49, OUTPUT_COPY_LIMITS;
+var import_node_crypto50, OUTPUT_COPY_LIMITS;
 var init_outputs_copy = __esm({
   "../server/src/domains/chat-sessions/outputs-copy.ts"() {
     "use strict";
-    import_node_crypto49 = require("node:crypto");
+    import_node_crypto50 = require("node:crypto");
     init_src();
     OUTPUT_COPY_LIMITS = {
       maxFileBytes: FILE_CONTENT_MAX_BYTES,
@@ -225260,38 +225674,17 @@ async function backfillOrgIdentity(deps, opts = {}) {
     const desc = row.changes.map((c) => `${c.accountId} ${c.roleBefore}\u2192${c.roleAfter}`).join("\uFF0C");
     log3(`  ${row.companyId}\uFF1A${desc}${opts.apply ? "" : "\uFF08dry-run\uFF09"}`);
     if (!opts.apply) continue;
-    const res = await deps.store.setSoleCompanyOwner(row.companyId, target);
-    if (!res.ok) {
-      throw new Error(
-        `${row.companyId} \u6536\u655B\u5230 ${target} \u5931\u8D25\uFF1A${res.reason}\uFF08target_not_listed = \u90A3\u4E2A\u4EBA\u8FD8\u6CA1\u8D70\u5B8C\u65B0\u624B\u6307\u5F15\uFF1Btarget_inactive = \u8D26\u53F7\u5DF2\u505C\u7528\uFF09`
-      );
-    }
-    applied += 1;
-    const at2 = now();
     const evidence = row.decision === "manifest" ? "manifest" : "E1";
-    const rows = res.demoted.map((m2) => ({
-      companyId: row.companyId,
-      accountId: m2.accountId,
-      roleBefore: "owner",
-      roleAfter: "admin",
+    const res = await deps.store.migrateSoleCompanyOwner(row.companyId, target, {
       evidence,
-      ...opts.manifest?.manifestVersion !== void 0 && evidence === "manifest" ? { manifestVersion: opts.manifest.manifestVersion } : {},
-      appliedAt: at2
-    }));
-    const promoted = row.changes.find((c) => c.accountId === target);
-    if (promoted) {
-      rows.push({
-        companyId: row.companyId,
-        accountId: target,
-        roleBefore: promoted.roleBefore,
-        roleAfter: "owner",
-        evidence,
-        ...opts.manifest?.manifestVersion !== void 0 && evidence === "manifest" ? { manifestVersion: opts.manifest.manifestVersion } : {},
-        appliedAt: at2
-      });
+      ...opts.manifest?.manifestVersion !== void 0 ? { manifestVersion: opts.manifest.manifestVersion } : {},
+      appliedAt: now()
+    });
+    if (!res.ok) {
+      throw new Error(`${row.companyId} \u6536\u655B\u5230 ${target} \u5931\u8D25\uFF1A${res.reason}\uFF08\u90A3\u4E00\u884C\u4E0D\u5728\u8BE5\u7EC4\u7EC7\u7684\u6210\u5458\u8868\u91CC\uFF09`);
     }
-    await deps.store.appendMemberRoleMigrations(rows);
-    auditRows += rows.length;
+    applied += 1;
+    auditRows += res.auditRows.length;
   }
   return { ...inv, applied, auditRows };
 }
@@ -225311,7 +225704,7 @@ async function rollbackOrgIdentity(deps, opts) {
     plan.push({ companyId: r.companyId, accountId: r.accountId, from: member.role, to: r.roleBefore });
     log3(`  ${r.companyId} ${r.accountId} ${member.role}\u2192${r.roleBefore}${opts.apply ? "" : "\uFF08dry-run\uFF09"}`);
     if (!opts.apply) continue;
-    await deps.store.upsertMember({ ...member, role: r.roleBefore });
+    await deps.store.setMemberRoleOnly(r.companyId, r.accountId, r.roleBefore);
     reverted += 1;
   }
   return { plan, reverted };
@@ -225355,11 +225748,11 @@ function typeDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto50, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
+var import_node_crypto51, RESERVED_FIELD_NAMES, ARTIFACT_TYPE_ACCENTS, TYPE_DEF_SCHEMA, TypesAdminService;
 var init_types_admin = __esm({
   "../server/src/types-admin.ts"() {
     "use strict";
-    import_node_crypto50 = require("node:crypto");
+    import_node_crypto51 = require("node:crypto");
     init_zod();
     init_src7();
     init_config_audit();
@@ -225486,7 +225879,7 @@ var init_types_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.audit?.({
-            id: `reg_${(0, import_node_crypto50.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto51.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -225634,11 +226027,11 @@ function roleDefError(def, mode) {
   }
   return null;
 }
-var import_node_crypto51, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
+var import_node_crypto52, ACCENTS, ROLE_DEF_SCHEMA, RolesAdminService;
 var init_roles_admin = __esm({
   "../server/src/roles-admin.ts"() {
     "use strict";
-    import_node_crypto51 = require("node:crypto");
+    import_node_crypto52 = require("node:crypto");
     init_zod();
     init_src7();
     init_config_audit();
@@ -225663,7 +226056,7 @@ var init_roles_admin = __esm({
       async trace(change, target, by, detail) {
         try {
           await this.deps.audit?.({
-            id: `reg_${(0, import_node_crypto51.randomUUID)()}`,
+            id: `reg_${(0, import_node_crypto52.randomUUID)()}`,
             actor: by ?? SYSTEM_CONFIG_ACTOR,
             kind: "registry_change",
             target,
@@ -228541,8 +228934,8 @@ var init_chat_recovery = __esm({
 
 // ../server/src/auth/crypto.ts
 function hashPassword(password) {
-  const salt = (0, import_node_crypto52.randomBytes)(16);
-  const dk = (0, import_node_crypto52.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
+  const salt = (0, import_node_crypto53.randomBytes)(16);
+  const dk = (0, import_node_crypto53.scryptSync)(password, salt, SCRYPT_KEYLEN, { N: SCRYPT_N, maxmem: 64 * 1024 * 1024 });
   return `scrypt$${SCRYPT_N}$${salt.toString("base64url")}$${dk.toString("base64url")}`;
 }
 function verifyPassword(password, stored) {
@@ -228559,8 +228952,8 @@ function verifyPassword(password, stored) {
     return false;
   }
   if (expected.length === 0) return false;
-  const dk = (0, import_node_crypto52.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
-  return dk.length === expected.length && (0, import_node_crypto52.timingSafeEqual)(dk, expected);
+  const dk = (0, import_node_crypto53.scryptSync)(password, salt, expected.length, { N, maxmem: 64 * 1024 * 1024 });
+  return dk.length === expected.length && (0, import_node_crypto53.timingSafeEqual)(dk, expected);
 }
 function b64urlJson(value2) {
   return Buffer.from(JSON.stringify(value2)).toString("base64url");
@@ -228568,17 +228961,17 @@ function b64urlJson(value2) {
 function signSession(claims, secret) {
   const head = b64urlJson({ alg: "HS256", typ: "JWT" });
   const body2 = b64urlJson(claims);
-  const sig = (0, import_node_crypto52.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const sig = (0, import_node_crypto53.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   return `${head}.${body2}.${sig}`;
 }
 function verifySession(token, secret, nowMs) {
   const parts = token.split(".");
   if (parts.length !== 3) return null;
   const [head, body2, sig] = parts;
-  const expected = (0, import_node_crypto52.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
+  const expected = (0, import_node_crypto53.createHmac)("sha256", secret).update(`${head}.${body2}`).digest("base64url");
   const got = Buffer.from(sig);
   const exp = Buffer.from(expected);
-  if (got.length !== exp.length || !(0, import_node_crypto52.timingSafeEqual)(got, exp)) return null;
+  if (got.length !== exp.length || !(0, import_node_crypto53.timingSafeEqual)(got, exp)) return null;
   let claims;
   try {
     claims = JSON.parse(Buffer.from(body2, "base64url").toString("utf8"));
@@ -228590,21 +228983,21 @@ function verifySession(token, secret, nowMs) {
   return claims;
 }
 function generateCode() {
-  return String((0, import_node_crypto52.randomInt)(0, 1e6)).padStart(6, "0");
+  return String((0, import_node_crypto53.randomInt)(0, 1e6)).padStart(6, "0");
 }
 function hashCode(code2, secret) {
-  return (0, import_node_crypto52.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
+  return (0, import_node_crypto53.createHmac)("sha256", secret).update(`code:${code2}`).digest("base64url");
 }
 function safeEqualHash(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto52.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto53.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto52, SCRYPT_N, SCRYPT_KEYLEN;
+var import_node_crypto53, SCRYPT_N, SCRYPT_KEYLEN;
 var init_crypto2 = __esm({
   "../server/src/auth/crypto.ts"() {
     "use strict";
-    import_node_crypto52 = require("node:crypto");
+    import_node_crypto53 = require("node:crypto");
     SCRYPT_N = 16384;
     SCRYPT_KEYLEN = 32;
   }
@@ -229988,18 +230381,18 @@ function variableKeyFromEnv(env = process.env) {
     return buf;
   }
   if (env.NODE_ENV === "production") throw new Error("OASIS_VAR_KEY is required in production");
-  return (0, import_node_crypto53.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
+  return (0, import_node_crypto54.createHash)("sha256").update("oasis-dev-only-variable-key").digest();
 }
 function dedupe2(ids2) {
   return [...new Set(ids2.filter((x2) => typeof x2 === "string" && x2.length > 0))];
 }
-var import_node_crypto53, REDACTED_MARKER, ActorsService, MASK_TAIL_MIN_LENGTH, mask, changedKeys;
+var import_node_crypto54, REDACTED_MARKER, ActorsService, MASK_TAIL_MIN_LENGTH, mask, changedKeys;
 var init_service5 = __esm({
   "../server/src/domains/actors/service.ts"() {
     "use strict";
     init_file_limits2();
     init_keyed_mutex();
-    import_node_crypto53 = require("node:crypto");
+    import_node_crypto54 = require("node:crypto");
     init_skill_fetcher();
     init_identity();
     init_migrate();
@@ -230623,7 +231016,7 @@ ${input.description}
        */
       buildSkillFile(skillId, path47, content3, now) {
         const bytes2 = new TextEncoder().encode(content3);
-        const blobHash = (0, import_node_crypto53.createHash)("sha256").update(bytes2).digest("hex");
+        const blobHash = (0, import_node_crypto54.createHash)("sha256").update(bytes2).digest("hex");
         return { skillId, path: path47, content: content3, blobHash, size: bytes2.length, updatedAt: now };
       }
       /**
@@ -231746,15 +232139,15 @@ ${input.description}
         return hit ? { value: hit.value, ...hit.origin ? { origin: hit.origin } : {} } : null;
       }
       encrypt(plain) {
-        const iv = (0, import_node_crypto53.randomBytes)(12);
-        const cipher = (0, import_node_crypto53.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
+        const iv = (0, import_node_crypto54.randomBytes)(12);
+        const cipher = (0, import_node_crypto54.createCipheriv)("aes-256-gcm", this.opts.variableKey, iv);
         const enc3 = Buffer.concat([cipher.update(plain, "utf8"), cipher.final()]);
         return [iv.toString("base64"), cipher.getAuthTag().toString("base64"), enc3.toString("base64")].join(".");
       }
       decrypt(packed) {
         const [iv, tag, data] = packed.split(".");
         if (!iv || !tag || typeof data !== "string") throw new Error("malformed ciphertext");
-        const decipher = (0, import_node_crypto53.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
+        const decipher = (0, import_node_crypto54.createDecipheriv)("aes-256-gcm", this.opts.variableKey, Buffer.from(iv, "base64"));
         decipher.setAuthTag(Buffer.from(tag, "base64"));
         return Buffer.concat([decipher.update(Buffer.from(data, "base64")), decipher.final()]).toString("utf8");
       }
@@ -232368,7 +232761,7 @@ async function listSkillMetadataForActor(args) {
     usedDirs.add(dir);
     const sorted = [...metas].sort((a, b2) => a.path.localeCompare(b2.path));
     let latest = "1970-01-01T00:00:00.000Z";
-    const hasher = (0, import_node_crypto54.createHash)("sha256");
+    const hasher = (0, import_node_crypto55.createHash)("sha256");
     for (const m2 of sorted) {
       if (m2.updatedAt > latest) latest = m2.updatedAt;
       hasher.update(m2.path);
@@ -232393,11 +232786,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(c.name, c.slug);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto54.createHash)("sha256");
+    const hasher = (0, import_node_crypto55.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto54.createHash)("sha256").update(c.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto55.createHash)("sha256").update(c.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -232418,11 +232811,11 @@ async function listSkillMetadataForActor(args) {
     const dir = sanitizeSkillDir(b2.name, b2.id);
     if (usedDirs.has(dir)) continue;
     usedDirs.add(dir);
-    const hasher = (0, import_node_crypto54.createHash)("sha256");
+    const hasher = (0, import_node_crypto55.createHash)("sha256");
     for (const p2 of paths) {
       hasher.update(p2);
       hasher.update("\0");
-      hasher.update((0, import_node_crypto54.createHash)("sha256").update(b2.files[p2]).digest("hex"));
+      hasher.update((0, import_node_crypto55.createHash)("sha256").update(b2.files[p2]).digest("hex"));
       hasher.update("\0");
     }
     out.push({
@@ -232442,7 +232835,7 @@ function builtinSkillToFiles(b2) {
     skillId: `builtin:${b2.id}`,
     path: path47,
     content: content3,
-    blobHash: (0, import_node_crypto54.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto55.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -232466,7 +232859,7 @@ function sanitizeSkillDir(name, fallbackId) {
   if (byName) return byName;
   const byId = fallbackId ? fold2(fallbackId) : "";
   if (byId) return byId;
-  return `skill-${(0, import_node_crypto54.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
+  return `skill-${(0, import_node_crypto55.createHash)("sha256").update(name).digest("hex").slice(0, 8)}`;
 }
 async function materializeSkillFiles(args) {
   const skills = await args.service.listInstalledSkillsForActor(args.actorId);
@@ -232499,7 +232892,7 @@ function connectorSkillToFiles(c) {
     skillId: c.id,
     path: path47,
     content: content3,
-    blobHash: (0, import_node_crypto54.createHash)("sha256").update(content3).digest("hex"),
+    blobHash: (0, import_node_crypto55.createHash)("sha256").update(content3).digest("hex"),
     size: Buffer.byteLength(content3, "utf8"),
     updatedAt: "1970-01-01T00:00:00.000Z"
   }));
@@ -232516,11 +232909,11 @@ function connectorSkillDisplayRows(connectorSkills, enabledConnectors) {
     ...s2.version !== void 0 ? { version: s2.version } : {}
   }));
 }
-var import_node_crypto54;
+var import_node_crypto55;
 var init_skill_materializer = __esm({
   "../server/src/domains/actors/skill-materializer.ts"() {
     "use strict";
-    import_node_crypto54 = require("node:crypto");
+    import_node_crypto55 = require("node:crypto");
   }
 });
 
@@ -232799,6 +233192,12 @@ function actorsDomain(opts) {
     }
     await asForbidden(() => assertMayManageAgent(opts.agentManageGuard, ctx, { id: actor.id, positions: actor.roles }));
   };
+  const guardPositionsChange = async (req, existing, nextPositions) => {
+    if (existing.kind !== "agent" || nextPositions === void 0) return;
+    if (isAssistantAgent({ positions: existing.roles }) === isAssistantAgent({ positions: nextPositions })) return;
+    const ctx = { companyId: req.auth.companyId, callerActorId: req.auth.actor };
+    await asForbidden(() => assertMayManageAgent(opts.agentManageGuard, ctx, { id: existing.id, positions: nextPositions }));
+  };
   const guardExistingActorWrite = async (req, service, actorId) => {
     const existing = await service.getActor(actorId);
     if (!existing) throw new ApiError(404, "NOT_FOUND", `\u6CA1\u6709\u8FD9\u4E2A\u5458\u5DE5\uFF1A${actorId}`);
@@ -232891,6 +233290,7 @@ function actorsDomain(opts) {
       const positions = positionsFromPayload(b2);
       const avatar = avatarRefFromPayload(b2);
       const tags = tagsFromPayload(b2);
+      await guardPositionsChange(req, existing, positions);
       const {
         positions: _positions,
         id: _id,
@@ -234620,7 +235020,7 @@ function createActorsDomain(opts) {
     ...kernel !== void 0 ? { onRolesChanged: (a, r) => kernel.setActorRoles(a, r) } : {},
     audit: async (entry) => {
       await opts.audit?.({
-        id: `reg_${(0, import_node_crypto55.randomUUID)()}`,
+        id: `reg_${(0, import_node_crypto56.randomUUID)()}`,
         actor: entry.by,
         kind: "registry_change",
         target: entry.actorId,
@@ -234660,11 +235060,11 @@ function createActorsDomain(opts) {
     register: actorsDomain({ resolveCtx, ...opts.resolveTrace ? { resolveTrace: opts.resolveTrace } : {}, ...opts.trace ? { trace: opts.trace } : {}, ...opts.listBuiltinSkills ? { listBuiltinSkills: opts.listBuiltinSkills } : {}, ...opts.getBuiltinSkills ? { getBuiltinSkills: opts.getBuiltinSkills } : {}, ...opts.getConnectorSkills ? { getConnectorSkills: opts.getConnectorSkills } : {}, ...opts.refreshConnectorSkills ? { refreshConnectorSkills: opts.refreshConnectorSkills } : {}, ...opts.memory ? { memory: opts.memory } : {}, ...opts.resolveDispatchScope ? { resolveDispatchScope: opts.resolveDispatchScope } : {}, ...opts.projectExists ? { projectExists: opts.projectExists } : {}, ...opts.companyMemberRole ? { companyMemberRole: opts.companyMemberRole } : {}, ...opts.credentialAudit ? { credentialAudit: opts.credentialAudit } : {}, ...opts.readCredentialAudit ? { readCredentialAudit: opts.readCredentialAudit } : {}, ...opts.credentialRevealLimits ? { credentialRevealLimits: opts.credentialRevealLimits } : {}, ...opts.skillMarket ? { skillMarket: opts.skillMarket } : {}, ...opts.resolveNodeTenancy ? { resolveNodeTenancy: opts.resolveNodeTenancy } : {}, ...opts.agentManageGuard ? { agentManageGuard: opts.agentManageGuard } : {} })
   };
 }
-var import_node_crypto55;
+var import_node_crypto56;
 var init_actors = __esm({
   "../server/src/domains/actors/index.ts"() {
     "use strict";
-    import_node_crypto55 = require("node:crypto");
+    import_node_crypto56 = require("node:crypto");
     init_service5();
     init_routes3();
     init_service5();
@@ -236353,6 +236753,13 @@ function isPendingActor(id) {
 function isAgentActor(id) {
   return typeof id === "string" && id.startsWith("actor:agent:");
 }
+function isBlockingBackpressure(i) {
+  if (i.kind === "gap" || i.kind === "escalation") return false;
+  if (i.intent === "advisory") return false;
+  const from = i.raisedByNodeId;
+  const about = i.aboutNodeId;
+  return !!from && !!about && from !== about;
+}
 function isDispatchLayerFailure(detail) {
   const reason = detail?.reason;
   return typeof reason === "string" && reason.startsWith("dispatch ");
@@ -236577,12 +236984,8 @@ function buildWorkorderActivity(input) {
     } else if (r.decision === "approved" || r.decision === "completed") h.to = h.to ?? r.decidedAt ?? r.at;
   }
   for (const i of snap.issues) {
-    if (i.kind === "gap" || i.kind === "escalation") continue;
-    if (i.intent === "advisory") continue;
-    const from = i.raisedByNodeId;
-    const about = i.aboutNodeId;
-    if (!from || !about || from === about) continue;
-    addHold(from, { kind: "backpressure", from: i.createdAt, to: i.resolvedAt ?? null, upstream: about });
+    if (!isBlockingBackpressure(i)) continue;
+    addHold(i.raisedByNodeId, { kind: "backpressure", from: i.createdAt, to: i.resolvedAt ?? null, upstream: i.aboutNodeId });
   }
   const HOLD_RANK = { paused: 0, continuationDenied: 1, continuation: 2, backpressure: 3 };
   const holdOf2 = (w2) => {
@@ -236602,11 +237005,50 @@ function buildWorkorderActivity(input) {
   };
   const lastStampOf = (w2) => [w2.createdAt, w2.startedAt, w2.endedAt, w2.deadAt, w2.cancelledAt].filter((t) => !!t).sort().at(-1);
   const concludedRootBriefNodeIds = /* @__PURE__ */ new Set();
+  const blockingBackpressure = snap.issues.filter((i) => isBlockingBackpressure(i));
+  const blockingBackpressureIds = new Set(blockingBackpressure.map((i) => i.id));
+  const backpressureRaisedBy = /* @__PURE__ */ new Map();
+  for (const i of [...blockingBackpressure].sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id))) {
+    const from = i.raisedByNodeId;
+    backpressureRaisedBy.set(from, [...backpressureRaisedBy.get(from) ?? [], i]);
+  }
+  const backpressureOnRaiserCard = /* @__PURE__ */ new Set();
+  const backpressureDriving = /* @__PURE__ */ new Map();
+  {
+    const add = (workId, issueId) => {
+      if (!issueId || !blockingBackpressureIds.has(issueId)) return;
+      const list2 = backpressureDriving.get(workId) ?? [];
+      if (!list2.includes(issueId)) list2.push(issueId);
+      backpressureDriving.set(workId, list2);
+    };
+    for (const rec2 of events) {
+      const ev = rec2.event;
+      if (ev.kind !== "work.create" || !ev.workId) continue;
+      for (const r of ev.reasons ?? []) if (r.kind === "issue") add(ev.workId, r.issueId);
+    }
+    for (const w2 of snap.works) for (const id of w2.frozenIssueIds ?? []) add(w2.id, id);
+  }
+  const backpressureTargetName = (nodeId) => nodeId && rootBriefNodeIds.has(nodeId) ? "\u4EFB\u52A1\u8BF4\u660E" : nodeName(nodeId);
+  const backpressureOwnerOf = (nodeId) => {
+    const assignee = nodeId ? nodeById.get(nodeId)?.assigneeActorId : void 0;
+    return assignee && !isPendingActor(assignee) ? assignee : ownerId;
+  };
+  const backpressureRaisersOf = (workId) => {
+    const ids2 = backpressureDriving.get(workId);
+    if (!ids2?.length) return void 0;
+    const authors = [...new Set(ids2.map((id) => issueById.get(id)?.authorActorId).filter((a) => !!a))];
+    return authors.length ? authors.map(nameOf2).join("\u3001") : void 0;
+  };
   for (const [nodeId, works] of worksOfNode) {
     const interrupts = [...interruptsOfNode.get(nodeId) ?? []].sort((a, b2) => a.at.localeCompare(b2.at) || a.issueId.localeCompare(b2.issueId));
     const trips = stopLossOfNode.get(nodeId) ?? [];
     const interventions = [...interventionsOfNode.get(nodeId) ?? []].sort();
     const humanBetween = (prev, w2) => !!prev && interventions.some((t) => t >= lastStampOf(prev) && t <= w2.createdAt);
+    const upstreamRoundBetween = (prev, w2) => {
+      if (!prev) return false;
+      const ancestors = ancestorsOf(nodeId);
+      return snap.works.some((u) => u.lane !== "reply" && ancestors.has(u.nodeId) && u.createdAt > prev.createdAt && u.createdAt <= w2.createdAt);
+    };
     const node2 = nodeById.get(nodeId);
     const nodeCancelledAt = node2?.cancelledAt ?? null;
     const name = nodeName(nodeId);
@@ -236618,17 +237060,20 @@ function buildWorkorderActivity(input) {
       const st = statusOf2(w2);
       const nextStart = nextStartOf.get(w2.id) ?? null;
       const interrupt = interrupts.find((t) => t.at >= w2.createdAt && (!nextStart || t.at < nextStart));
+      const roundEndedAt = w2.endedAt ?? w2.deadAt ?? w2.cancelledAt;
+      const raisedHere = !w2.conclusion && !interrupt ? (backpressureRaisedBy.get(nodeId) ?? []).filter((i) => i.createdAt >= w2.createdAt && (!nextStart || i.createdAt < nextStart) && (!roundEndedAt || i.createdAt <= roundEndedAt)) : [];
+      const halted = !!interrupt || raisedHere.length > 0;
       const tripsHere = trips.filter((t) => t.at >= w2.createdAt && (!nextStart || t.at < nextStart));
       const removedHere = !!nodeCancelledAt && nodeCancelledAt >= w2.createdAt && (!next || nodeCancelledAt < next.createdAt);
       const reassigned = !!next && next.assigneeActorId !== w2.assigneeActorId;
       const killedByPlan = !!(w2.deadAt || w2.cancelledAt) && !!next && (reassigned || (next.nodeVersion ?? 0) > (w2.nodeVersion ?? 0));
       const killedAtOfRound = w2.deadAt ?? w2.cancelledAt;
-      const supersededBy = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && killedAtOfRound && next && !killedByWorkorderPause(w2, killedAtOfRound) ? supersedingUpstreamVersion(nodeId, w2, killedAtOfRound, next) : void 0;
-      const failedRound = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && !supersededBy && (!!w2.deadAt || !!w2.cancelledAt || st === "failed" || st === "retry" || noOutputRound(w2));
+      const supersededBy = !w2.conclusion && !halted && !removedHere && !killedByPlan && killedAtOfRound && next && !killedByWorkorderPause(w2, killedAtOfRound) ? supersedingUpstreamVersion(nodeId, w2, killedAtOfRound, next) : void 0;
+      const failedRound = !w2.conclusion && !halted && !removedHere && !killedByPlan && !supersededBy && (!!w2.deadAt || !!w2.cancelledAt || st === "failed" || st === "retry" || noOutputRound(w2));
       const foldableFailure = failedRound && !(killedAtOfRound && killedByWorkorderPause(w2, killedAtOfRound));
-      const ackedRound = st === "success" && !!w2.upstreamAck && !w2.conclusion && artifacts.length === 0 && !interrupt && !removedHere && !killedByPlan && !supersededBy && !failedRound;
-      const held = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && !supersededBy && !failedRound && !ackedRound ? holdOf2(w2) : void 0;
-      const handedOverRound = !w2.conclusion && !interrupt && !removedHere && !killedByPlan && !supersededBy && !failedRound && !held && !ackedRound && st === "success" && !!w2.endedAt && !!next;
+      const ackedRound = st === "success" && !!w2.upstreamAck && !w2.conclusion && artifacts.length === 0 && !halted && !removedHere && !killedByPlan && !supersededBy && !failedRound;
+      const held = !w2.conclusion && !halted && !removedHere && !killedByPlan && !supersededBy && !failedRound && !ackedRound ? holdOf2(w2) : void 0;
+      const handedOverRound = !w2.conclusion && !halted && !removedHere && !killedByPlan && !supersededBy && !failedRound && !held && !ackedRound && st === "success" && !!w2.endedAt && !!next;
       const refiredByFuse = tripsHere.some((t) => t.kind === "output_stall");
       const brokenByHuman = humanBetween(works[idx - 1], w2) && !refiredByFuse;
       if (foldableFailure && fold2 && !brokenByHuman) {
@@ -236641,7 +237086,7 @@ function buildWorkorderActivity(input) {
         if (tripsHere.length) fold2.stopLossTrips = [...fold2.stopLossTrips ?? [], ...tripsHere];
         continue;
       }
-      const absorb2 = fold2 && !brokenByHuman && !!w2.conclusion && fold2.executorId === w2.assigneeActorId ? fold2 : null;
+      const absorb2 = fold2 && !brokenByHuman && !!w2.conclusion && fold2.executorId === w2.assigneeActorId && !upstreamRoundBetween(works[idx - 1], w2) ? fold2 : null;
       fold2 = null;
       if (handedOverRound && handoverFold && handoverFold.executorId === w2.assigneeActorId) {
         handoverFold.traceWorkIds.push(w2.id);
@@ -236676,6 +237121,7 @@ function buildWorkorderActivity(input) {
       }
       executionCards.push(card2);
       cardOfWork.set(w2.id, card2);
+      if (isHumanActorId(card2.executorId) && backpressureDriving.has(w2.id)) card2.humanTrace = true;
       if (w2.conclusion) {
         card2.phase = "done";
         if (rootBriefNodeIds.has(nodeId)) {
@@ -236691,6 +237137,10 @@ function buildWorkorderActivity(input) {
             card2.status = awaits ? ACTIVITY_COPY.doneAwaitingReview(name) : ACTIVITY_COPY.done(name);
           }
         }
+        const bpRaisers = backpressureRaisersOf(w2.id);
+        if (bpRaisers && (card2.status === ACTIVITY_COPY.done(name) || card2.status === ACTIVITY_COPY.goalConfirmed || card2.status === ACTIVITY_COPY.goalRevised)) {
+          card2.status = ACTIVITY_COPY.backpressureAddressed(bpRaisers, backpressureTargetName(nodeId));
+        }
       } else if (interrupt) {
         card2.phase = "stuck";
         card2.segmentOpen = false;
@@ -236699,6 +237149,18 @@ function buildWorkorderActivity(input) {
           card2.actions = [{ kind: "open_thread", label: BUTTON.view, target: gapThreadSessionId(interrupt.authorId), variant: "quiet" }];
         }
         if (interrupt.at > card2.updatedAt) card2.updatedAt = interrupt.at;
+      } else if (raisedHere.length) {
+        card2.phase = "stuck";
+        card2.segmentOpen = false;
+        card2.awaitingHuman = false;
+        const upstreams = [...new Set(raisedHere.map((i) => i.aboutNodeId))];
+        const targets = upstreams.map(backpressureTargetName);
+        const owners = [...new Set(upstreams.map((u) => nameOf2(backpressureOwnerOf(u))))];
+        card2.status = artifacts.length ? ACTIVITY_COPY.backpressureAfterStage(name, targets, owners) : ACTIVITY_COPY.backpressure(nameOf2(card2.executorId), targets, owners);
+        for (const i of raisedHere) {
+          backpressureOnRaiserCard.add(i.id);
+          if (i.createdAt > card2.updatedAt) card2.updatedAt = i.createdAt;
+        }
       } else if (supersededBy) {
         card2.phase = "stuck";
         card2.segmentOpen = false;
@@ -236861,7 +237323,7 @@ function buildWorkorderActivity(input) {
         const forcedBy = str5(reasons.find((r) => r.kind === "forced")?.actorId);
         const parentWorkId = str5(workById.get(workId)?.parentWorkId);
         const reworkOfRejected = !!parentWorkId && workById.get(parentWorkId)?.acceptanceState === "rejected";
-        const status = reasonKinds.has("rework") || reworkOfRejected ? ACTIVITY_COPY.reworking(nodeName(nodeId)) : reasonKinds.has("resumed") ? ACTIVITY_COPY.resumed(nameOf2(d.executorId), nodeName(nodeId)) : reasonKinds.has("spec_changed") ? ACTIVITY_COPY.specChanged(nodeName(nodeId)) : reasonKinds.has("issue") ? ACTIVITY_COPY.issueDriven(nodeName(nodeId)) : forcedBy ? ACTIVITY_COPY.forcedRerun(nameOf2(forcedBy), nodeName(nodeId)) : ACTIVITY_COPY.working(nodeName(nodeId));
+        const status = reasonKinds.has("rework") || reworkOfRejected ? ACTIVITY_COPY.reworking(nodeName(nodeId)) : reasonKinds.has("resumed") ? ACTIVITY_COPY.resumed(nameOf2(d.executorId), nodeName(nodeId)) : reasonKinds.has("spec_changed") ? ACTIVITY_COPY.specChanged(nodeName(nodeId)) : reasonKinds.has("issue") ? backpressureRaisersOf(workId) ? ACTIVITY_COPY.backpressureInProgress(backpressureRaisersOf(workId), backpressureTargetName(nodeId)) : ACTIVITY_COPY.issueDriven(nodeName(nodeId)) : forcedBy ? ACTIVITY_COPY.forcedRerun(nameOf2(forcedBy), nodeName(nodeId)) : ACTIVITY_COPY.working(nodeName(nodeId));
         for (const r of reasons) {
           if (r.kind !== "issue") continue;
           const issueId = str5(r.issueId);
@@ -236979,6 +237441,7 @@ function buildWorkorderActivity(input) {
         const raisedFrom = str5(ev.raisedByNodeId);
         const isBackpressure = !isEscalation && !isGap && !!raisedFrom && raisedFrom !== nodeId;
         if (isBackpressure) backpressureIssueIds.add(issueId);
+        if (isBackpressure && backpressureOnRaiserCard.has(issueId)) break;
         const body2 = str5(ev.body) ?? "";
         if (isEscalation) {
           const linkedGapId = str5(ev.gapId);
@@ -237033,8 +237496,8 @@ function buildWorkorderActivity(input) {
           ...isBackpressure ? { segmentOpen: false, awaitingHuman: false } : {},
           status: isBackpressure ? ACTIVITY_COPY.backpressure(
             nameOf2(authorId),
-            nodeName(nodeId),
-            nameOf2((nodeId ? nodeById.get(nodeId)?.assigneeActorId : void 0) ?? ownerId)
+            [backpressureTargetName(nodeId)],
+            [nameOf2((nodeId ? nodeById.get(nodeId)?.assigneeActorId : void 0) ?? ownerId)]
           ) : ACTIVITY_COPY.commentRaised(nameOf2(authorId), nameOf2(commentTargetId ?? ownerId), nodeName(nodeId)),
           /* **正文一律不上卡**：缺口去缺口线、回压去产物批注、留言去留言线。
              此前只有缺口/回压被排除，留言仍是「正文当小状态 + 展开区再印一遍」，
@@ -237368,7 +237831,7 @@ function buildWorkorderActivity(input) {
     card2.phaseLabel = PHASE_LABEL.escalationPending;
     card2.segmentOpen = true;
     card2.awaitingHuman = true;
-    card2.status = ACTIVITY_COPY.backpressureAwaitingOwner(nameOf2(card2.executorId), nodeName(card2.nodeId));
+    card2.status = ACTIVITY_COPY.backpressureAwaitingOwner(nameOf2(card2.executorId), backpressureTargetName(card2.nodeId));
     card2.actions = [{ kind: "open_issue", label: BUTTON.handle, target: issueId, variant: "primary" }];
   }
   for (const card2 of executionCards) {
@@ -237571,7 +238034,7 @@ function buildWorkorderActivity(input) {
       artifacts: d.artifacts,
       actions: d.actions,
       ...traced && d.traceAvailable ? { traceAvailable: true } : {},
-      ...d.traceWorkIds?.length ? { traceWorkIds: d.traceWorkIds, ...traced ? { traceAvailable: true } : {} } : {},
+      ...d.traceWorkIds?.length ? { traceWorkIds: d.traceWorkIds, ...traced || d.humanTrace ? { traceAvailable: true } : {} } : {},
       .../* @__PURE__ */ ((r) => r ? { runId: r, traceAvailable: true } : {})(traced ? runIdOfCard(d) : void 0)
     };
   });
@@ -237828,6 +238291,7 @@ var init_activity2 = __esm({
       heldByContinuation: (node2) => `\u300A${node2}\u300B\u5DF2\u4EA4\u4ED8\u9636\u6BB5\u6210\u679C\uFF0C\u672C\u6279\u7EED\u8DD1\u989D\u5EA6\u5DF2\u7528\u5B8C\uFF0C\u7B49\u5F85\u6279\u51C6\u7EE7\u7EED\u3002`,
       heldByContinuationDenied: (node2) => `\u300A${node2}\u300B\u5DF2\u4EA4\u4ED8\u9636\u6BB5\u6210\u679C\uFF0C\u7EED\u8DD1\u7533\u8BF7\u672A\u83B7\u6279\u51C6\uFF0C\u8282\u70B9\u5DF2\u6682\u505C\uFF0C\u7B49\u5F85\u653E\u884C\u3002`,
       heldByWorkorderPause: (node2) => `\u300A${node2}\u300B\u5DF2\u4EA4\u4ED8\u9636\u6BB5\u6210\u679C\uFF0C\u4EFB\u52A1\u5DF2\u6682\u505C\uFF0C\u7B49\u5F85\u6062\u590D\u3002`,
+      /** 只剩「交完稿、这一轮结束之后才补提」的那一档；同一轮里提的见 {@link ACTIVITY_COPY.backpressureAfterStage}（ADR 0623 补章）。 */
       heldByBackpressure: (node2, upstreams) => `\u300A${node2}\u300B\u5DF2\u4EA4\u4ED8\uFF0C\u7B49\u5F85${upstreams.map((u) => `\u300A${u}\u300B`).join("\u3001")}\u5904\u7406\u4FEE\u6539\u8981\u6C42\u540E\u518D\u6536\u53E3\u3002`,
       /** `works.status=retry`：这一轮没跑成，等引擎重派。谁按的重试由 `plan.node_retry` 补进这句。 */
       awaitingRedispatch: (executor, node2) => `${executor} \u8FD9\u4E00\u8F6E\u6CA1\u8DD1\u6210\u300A${node2}\u300B\uFF0C\u7B49\u5F85\u91CD\u6D3E\u3002`,
@@ -237880,8 +238344,27 @@ var init_activity2 = __esm({
          （「{X} 遇到处理不了的问题，需要 @{Y} 的协助」）——**别在别处复用**：系统代开的两种止损
          上报根本没有人「开口」，套这句话是假话（生产上它已经把 `actor:system` 渲染成了句子的主语）。
          ①「缺口卡」也删掉（F4）：它和执行卡挂的是同一段运行、同一份轨迹，点哪张打开的都一样。 */
-      /** 回压（下游对上游提修改要求）——发起人 2026-09-08 认可的措辞。 */
-      backpressure: (raiser, upstream, owner) => `${raiser} \u5BF9\u300A${upstream}\u300B\u63D0\u51FA\u4FEE\u6539\u8981\u6C42\uFF0C\u9700\u8981 @${owner} \u5904\u7406\u3002`,
+      /**
+       * 回压（下游对上游提修改要求）——发起人 2026-09-08 认可的措辞。
+       *
+       * 2026-09-23 起它是**提出方那一轮执行卡的结局句**（奕璇定，与缺口 F4 同一做法）：提要求这件事就发生在
+       * 那一轮里，不再单独出一张 `issue:` 卡。同一轮对几个上游提了要求时并成一句（《A》、《B》 / @X、@Y）。
+       * 🚨 **之后一个字不改**：要求关掉了也不翻署名、不改写成「已基于…更新了一版」——那是被要求方那张卡的事。
+       */
+      backpressure: (raiser, upstreams, owners) => `${raiser} \u5BF9${upstreams.map((u) => `\u300A${u}\u300B`).join("\u3001")}\u63D0\u51FA\u4FEE\u6539\u8981\u6C42\uFF0C\u9700\u8981 ${owners.map((o) => `@${o}`).join("\u3001")} \u5904\u7406\u3002`,
+      /**
+       * 同上，但提出方**这一轮先交了阶段成果**（propose 了、没 conclude）、同一轮又提了修改要求（奕璇 2026-09-23 定，
+       * ADR 0623 补章）：此前这一档出两张卡——自己那轮「已交付，等待《X》处理修改要求后再收口」+ 一张 `issue:` 回压卡。
+       * 合成这一句：「交了什么」由卡上 / 轨迹里的交付物说，句子说「停在哪、等谁」。之后同样一个字不改。
+       */
+      backpressureAfterStage: (node2, upstreams, owners) => `\u300A${node2}\u300B\u5DF2\u63D0\u4EA4\u9636\u6BB5\u6210\u679C\uFF0C\u5BF9${upstreams.map((u) => `\u300A${u}\u300B`).join("\u3001")}\u63D0\u51FA\u4FEE\u6539\u8981\u6C42\uFF0C\u9700\u8981 ${owners.map((o) => `@${o}`).join("\u3001")} \u5904\u7406\u3002`,
+      /** 被要求方是 agent、正在按修改要求改的那一轮（取代通用的「正在根据反馈调整」：说清是谁提的）。 */
+      backpressureInProgress: (raisers, node2) => `\u6B63\u5728\u6839\u636E ${raisers} \u7684\u4FEE\u6539\u8981\u6C42\u8C03\u6574\u300A${node2}\u300B\u3002`,
+      /**
+       * 被要求方按修改要求交出了新一版（agent / 真人同一句）。取代「《X》已完成」「已修订目标」——
+       * 此前同一件事还另有一张回压卡收口成「{X} 已基于 {Z} 的留言更新了一版」，一件事三张卡。
+       */
+      backpressureAddressed: (raisers, node2) => `\u5DF2\u6309 ${raisers} \u7684\u4FEE\u6539\u8981\u6C42\u66F4\u65B0\u300A${node2}\u300B\u3002`,
       /**
        * 被回压节点的负责人是**真人**时，系统为他开的那一轮（奕璇 2026-09-22 定）：这一轮不会自己跑，
        * 是在等他动手——不能再说「正在根据反馈调整」（`issueDriven`），那句会让一张没人在动的卡挂成「进行中」。
@@ -238040,6 +238523,26 @@ function buildWorkorderActivityTrace(input) {
       if (!briefing) continue;
       firstBriefing ??= briefing;
       const sources = sourcesOfWork(work, input, briefing);
+      const humanBackpressureRound = isHumanActorId(work.assigneeActorId) && sources.some((src) => {
+        const issue2 = src.kind === "comment" ? snap.issues.find((i) => i.id === src.issueId) : void 0;
+        return !!issue2 && isBlockingBackpressure(issue2);
+      });
+      if (humanBackpressureRound) {
+        const before = previousVersionOf(work, snap);
+        works.push({
+          workId,
+          at: work.createdAt,
+          nodeTitle: briefing.nodeTitle,
+          ...briefing.spec ? { spec: briefing.spec } : {},
+          sources,
+          attempts: [],
+          artifacts: [
+            ...before ? artifactsOfWork(before, input).map((a) => ({ ...a, name: `${a.name}\uFF08\u6539\u524D\uFF09` })) : [],
+            ...artifactsOfWork(work, input).map((a) => ({ ...a, name: `${a.name}\uFF08\u6539\u540E\uFF09` }))
+          ]
+        });
+        continue;
+      }
       const artifacts = single.attempts.at(-1)?.artifacts ?? artifactsOfWork(work, input);
       works.push({
         workId,
@@ -238113,6 +238616,13 @@ function sourcesOfWork(work, input, briefing) {
     ...briefing.spec ? { content: briefing.spec } : {}
   }];
 }
+function previousVersionOf(work, snap) {
+  const delivered = new Set(snap.artifacts.map((a) => a.workId));
+  const parentId = work.parentWorkId;
+  const parent = parentId ? snap.works.find((w2) => w2.id === parentId && delivered.has(w2.id)) : void 0;
+  if (parent) return parent;
+  return snap.works.filter((w2) => w2.nodeId === work.nodeId && w2.id !== work.id && w2.createdAt < work.createdAt && delivered.has(w2.id)).sort((a, b2) => a.createdAt.localeCompare(b2.createdAt) || a.id.localeCompare(b2.id)).at(-1);
+}
 function artifactsOfWork(work, input) {
   const snap = input.snap;
   const workId = work.id;
@@ -238271,6 +238781,7 @@ var init_activity_trace = __esm({
     "use strict";
     init_src6();
     init_review_activity();
+    init_src();
     init_activity2();
     init_workorder_manager();
     init_src7();
@@ -239182,11 +239693,11 @@ function fromRow(row) {
   for (const [k2, v2] of opt) if (v2 !== void 0 && v2 !== null) r[k2] = v2;
   return r;
 }
-var import_node_crypto56, import_node_fs16, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
+var import_node_crypto57, import_node_fs16, DEFAULT_PAGE, MAX_PAGE, pageSize, MemoryNotificationStore, ident3, iso2, str2, PostgresNotificationStore;
 var init_notification_store = __esm({
   "../server/src/domains/collab/notification-store.ts"() {
     "use strict";
-    import_node_crypto56 = require("node:crypto");
+    import_node_crypto57 = require("node:crypto");
     import_node_fs16 = __toESM(require("node:fs"), 1);
     DEFAULT_PAGE = 50;
     MAX_PAGE = 200;
@@ -239219,7 +239730,7 @@ var init_notification_store = __esm({
       async insert(n) {
         const existing = this.findLive(n.recipient, n.sourceKey, n.category);
         if (existing) return existing;
-        const row = { ...n, id: `ntf:${(0, import_node_crypto56.randomUUID)()}`, updatedAt: n.enteredAt };
+        const row = { ...n, id: `ntf:${(0, import_node_crypto57.randomUUID)()}`, updatedAt: n.enteredAt };
         this.rows.set(row.id, row);
         this.save();
         return row;
@@ -239352,7 +239863,7 @@ var init_notification_store = __esm({
         return new _PostgresNotificationStore(sql, schema);
       }
       async insert(n) {
-        const id = `ntf:${(0, import_node_crypto56.randomUUID)()}`;
+        const id = `ntf:${(0, import_node_crypto57.randomUUID)()}`;
         const r = await this.sql.query(
           `INSERT INTO ${this.t} (id, recipient, category, source_key, kind, workorder_id, node_id, card_id, actor_id,
          title, workspace_title, entered_at, updated_at, status, read_at, item)
@@ -240481,13 +240992,13 @@ function nameKey(name) {
 function cleanName(name) {
   return name.trim().replace(/\s+/g, " ");
 }
-var import_node_fs17, import_node_path21, import_node_crypto57, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
+var import_node_fs17, import_node_path21, import_node_crypto58, SEP, keyOf, prefixOf, MemoryWorkorderTagStore, FileWorkorderTagStore;
 var init_tags = __esm({
   "../server/src/domains/collab/tags.ts"() {
     "use strict";
     import_node_fs17 = __toESM(require("node:fs"), 1);
     import_node_path21 = __toESM(require("node:path"), 1);
-    import_node_crypto57 = __toESM(require("node:crypto"), 1);
+    import_node_crypto58 = __toESM(require("node:crypto"), 1);
     SEP = "::";
     keyOf = (companyId, id) => `${companyId}${SEP}${id}`;
     prefixOf = (companyId) => `${companyId}${SEP}`;
@@ -240505,7 +241016,7 @@ var init_tags = __esm({
         if (!name) return null;
         if (this.entries(companyId).some((t) => nameKey(t.name) === nameKey(name))) return null;
         const tag = {
-          id: `tag-${import_node_crypto57.default.randomBytes(6).toString("hex")}`,
+          id: `tag-${import_node_crypto58.default.randomBytes(6).toString("hex")}`,
           name,
           ...input.color?.trim() ? { color: input.color.trim() } : {},
           ...input.description?.trim() ? { description: input.description.trim() } : {}
@@ -241894,11 +242405,11 @@ async function isEmployedElsewhere(store, companyId, accountId) {
   const memberships = await store.listMembershipsForAccount(accountId);
   return memberships.some((m2) => m2.companyId !== companyId);
 }
-var import_node_crypto58, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
+var import_node_crypto59, ROLES, INVITABLE_ROLES, INVITATION_TTL_MS, INVITE_LINK_TTL_MS, INVITE_LINK_TOKEN_BYTES, INVITE_LINK_ROLE, SLUG_RE, CompanyError, CompaniesService;
 var init_service6 = __esm({
   "../server/src/domains/companies/service.ts"() {
     "use strict";
-    import_node_crypto58 = require("node:crypto");
+    import_node_crypto59 = require("node:crypto");
     init_console_url();
     ROLES = ["owner", "admin", "member"];
     INVITABLE_ROLES = ["admin", "member"];
@@ -241997,9 +242508,13 @@ var init_service6 = __esm({
         await this.store.updateCompany(id, { name });
         return { ...company, name };
       }
-      /** 设置/清除公司头像引用（"blob:<哈希>"；null = 回到默认首字母标识）。 */
+      /**
+       * 设置/清除公司头像引用（"blob:<哈希>"；null = 回到默认首字母标识）。
+       * 权限（本组织 owner/admin）由路由层 `requireOwnerOrAdmin` 强制；这里只守「组织还可用」
+       * ——与本域其余写面同一条判据（D8.2：闸不只长在路由上），解散之后 404 COMPANY_NOT_FOUND。
+       */
       async setAvatar(id, ref2) {
-        const company = await this.requireCompany(id);
+        const company = await this.requireActiveCompany(id);
         await this.store.updateCompany(id, { avatar: ref2 });
         const next = ref2 === null ? (({ avatar: _drop, ...rest }) => rest)(company) : { ...company, avatar: ref2 };
         return next;
@@ -242013,7 +242528,7 @@ var init_service6 = __esm({
         const existing = await this.store.getAccountByEmail(normalized4);
         if (existing) return existing;
         const account = {
-          id: `actor:human:${(0, import_node_crypto58.randomUUID)()}`,
+          id: `actor:human:${(0, import_node_crypto59.randomUUID)()}`,
           email: normalized4,
           name: name ?? normalized4,
           status: "active"
@@ -242321,8 +242836,8 @@ var init_service6 = __esm({
         const target = await this.store.getMember(companyId, accountId);
         if (!target) throw new CompanyError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}`);
         if (target.role === "owner") throw this.ownerProtected();
-        const res = await this.store.removeMemberIfNotLastOwner(companyId, accountId);
-        if (res.ok) return res.member;
+        const res = await this.store.removeMemberAndReleaseOwnedAgents(companyId, accountId, this.now());
+        if (res.ok) return { member: res.member, releasedAgents: res.releasedAgents };
         if (res.reason === "not_found") throw new CompanyError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}`);
         throw this.ownerProtected();
       }
@@ -242411,7 +242926,7 @@ var init_service6 = __esm({
         }
         const nowMs = Date.parse(this.now());
         const invitation = {
-          id: `invitation:${(0, import_node_crypto58.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto59.randomUUID)()}`,
           companyId,
           email: mail,
           role,
@@ -242542,7 +243057,7 @@ var init_service6 = __esm({
         const nowMs = Date.parse(this.now());
         const link = {
           companyId,
-          token: (0, import_node_crypto58.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
+          token: (0, import_node_crypto59.randomBytes)(INVITE_LINK_TOKEN_BYTES).toString("base64url"),
           role: INVITE_LINK_ROLE,
           createdAt: new Date(nowMs).toISOString(),
           expiresAt: new Date(nowMs + INVITE_LINK_TTL_MS).toISOString(),
@@ -242599,7 +243114,7 @@ var init_service6 = __esm({
         const reusable = existing.find((inv) => !this.isExpired(inv));
         if (reusable) return reusable;
         const invitation = {
-          id: `invitation:${(0, import_node_crypto58.randomUUID)()}`,
+          id: `invitation:${(0, import_node_crypto59.randomUUID)()}`,
           companyId: link.companyId,
           email: mail,
           role: link.role,
@@ -242645,9 +243160,9 @@ var init_service6 = __esm({
        * 登录身份查自己那条 membership；不是成员 → 404。
        */
       async completeMemberOnboarding(companyId, accountId) {
-        await this.requireCompany(companyId);
         const member = await this.store.getMember(companyId, accountId);
         if (!member) throw new CompanyError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}`);
+        await this.requireActiveCompany(companyId);
         if (member.onboardingCompletedAt) return member;
         const next = { ...member, onboardingCompletedAt: this.now() };
         await this.store.upsertMember(next);
@@ -242671,9 +243186,9 @@ var init_service6 = __esm({
       async setMemberOnboardingStep(companyId, accountId, step) {
         const trimmed = step?.trim();
         if (!trimmed) throw new CompanyError(400, "BAD_REQUEST", "step \u4E0D\u80FD\u4E3A\u7A7A");
-        await this.requireCompany(companyId);
         const member = await this.store.getMember(companyId, accountId);
         if (!member) throw new CompanyError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}`);
+        await this.requireActiveCompany(companyId);
         const next = { ...member, onboardingStep: trimmed };
         await this.store.upsertMember(next);
         return next;
@@ -242833,11 +243348,11 @@ var init_service6 = __esm({
 });
 
 // ../server/src/domains/companies/offboarding.ts
-var import_node_crypto59, OWNER_PROTECTED_MESSAGE, MemberOffboardingService;
+var import_node_crypto60, OWNER_PROTECTED_MESSAGE, MemberOffboardingService;
 var init_offboarding = __esm({
   "../server/src/domains/companies/offboarding.ts"() {
     "use strict";
-    import_node_crypto59 = require("node:crypto");
+    import_node_crypto60 = require("node:crypto");
     init_service6();
     OWNER_PROTECTED_MESSAGE = "\u7EC4\u7EC7\u7BA1\u7406\u5458\u4E0D\u53EF\u88AB\u79FB\u9664\uFF0C\u53EA\u80FD\u7531\u672C\u4EBA\u8F6C\u4EA4\u6216\u89E3\u6563\u7EC4\u7EC7";
     MemberOffboardingService = class {
@@ -242846,12 +243361,14 @@ var init_offboarding = __esm({
       listInFlight;
       transferAssignment;
       disableActor;
+      restoreActor;
       constructor(opts) {
         this.store = opts.store;
         this.now = opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
         this.listInFlight = opts.listInFlightAssignments;
         this.transferAssignment = opts.transferAssignment;
         this.disableActor = opts.disableActor;
+        this.restoreActor = opts.restoreActor;
       }
       /** 该成员是不是公司最后一个 owner（最后一个 owner 立即阻断，先于任何交接讨论）。 */
       async isLastOwner(companyId, accountId) {
@@ -242877,14 +243394,13 @@ var init_offboarding = __esm({
        */
       async blockersForRemoval(companyId, accountId) {
         const blockers = [];
-        const member = await this.store.getMember(companyId, accountId);
+        const members = await this.store.listMembers(companyId);
+        const member = members.find((m2) => m2.accountId === accountId);
         if (!member) {
           return [{ code: "NOT_FOUND", message: `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}` }];
         }
         if (member.role === "owner") {
           blockers.push({ code: "OWNER_PROTECTED", message: OWNER_PROTECTED_MESSAGE });
-        } else if (await this.isLastOwner(companyId, accountId)) {
-          blockers.push({ code: "LAST_OWNER", message: "\u516C\u53F8\u81F3\u5C11\u8981\u7559 1 \u4E2A owner\uFF0C\u4E0D\u80FD\u79FB\u9664\u6700\u540E\u4E00\u4E2A owner" });
         }
         return blockers;
       }
@@ -242913,7 +243429,7 @@ var init_offboarding = __esm({
         const { ownedAgents, inFlight } = await this.snapshot(companyId, accountId);
         const at2 = this.now();
         const started = await this.store.startMemberOffboarding({
-          operationId: `off:${(0, import_node_crypto59.randomUUID)()}`,
+          operationId: `off:${(0, import_node_crypto60.randomUUID)()}`,
           companyId,
           accountId,
           initiatedBy,
@@ -242953,12 +243469,9 @@ var init_offboarding = __esm({
         if (op.version !== expectedVersion) {
           throw new CompanyError(409, "STALE_PLAN", `\u8BA1\u5212\u7248\u672C\u5DF2\u53D8\uFF08\u5F53\u524D ${op.version}\uFF0C\u4F60\u7ED9\u7684\u662F ${expectedVersion}\uFF09\uFF0C\u8BF7\u91CD\u65B0\u53D6\u8BA1\u5212`);
         }
-        const target = await this.store.getMember(companyId, accountId);
+        const members = await this.store.listMembers(companyId);
+        const target = members.find((m2) => m2.accountId === accountId);
         if (target?.role === "owner") throw new CompanyError(403, "OWNER_PROTECTED", OWNER_PROTECTED_MESSAGE);
-        if (await this.isLastOwner(companyId, accountId)) {
-          throw new CompanyError(409, "LAST_OWNER", "\u516C\u53F8\u81F3\u5C11\u8981\u7559 1 \u4E2A owner\uFF0C\u4E0D\u80FD\u79FB\u9664\u6700\u540E\u4E00\u4E2A owner");
-        }
-        const released = await this.releaseOwnedAgents(companyId, accountId);
         const remaining = await this.blockersForRemoval(companyId, accountId);
         if (remaining.length > 0) {
           await this.store.updateMemberOffboardingIfVersion(
@@ -242970,7 +243483,7 @@ var init_offboarding = __esm({
           );
           throw new CompanyError(409, remaining[0].code, `\u4ECD\u6709\u672A\u4EA4\u63A5\u9879\uFF1A${remaining.map((b2) => b2.message).join("; ")}`);
         }
-        await this.applyMemberRemoval(companyId, accountId);
+        const released = await this.applyMemberRemoval(companyId, accountId);
         await this.store.updateMemberOffboardingIfVersion(
           companyId,
           operationId,
@@ -242981,35 +243494,63 @@ var init_offboarding = __esm({
         return { status: "removed", transferred: [], left: released };
       }
       /**
-       * 移除一条成员关系的**全套副作用**，顺序固定，三条移除路径共用：
-       *   ① 清名下 agent 的负责人字段（`digital_employee.owner` 的复合 FK 是 ON DELETE RESTRICT，
-       *      不清就是一个裸 FK 违例）；**只清 owner**——不改状态、不撤凭证、不解绑助理（PRD v1.5）；
-       *   ② 停用花名册里这个人（**还在别家公司在职就不停用**——停用打的是全局那一行）；
-       *   ③ 删 human principal bridge（对 company_member 是 CASCADE，但文件/内存实现没有级联，
-       *      显式删一次让「桥随主体走」在应用层也成立）；
-       *   ④ 删成员行（走 `removeMemberIfNotLastOwner`，组织管理员那一位在这里被纵深防御挡住）。
+       * 移除一条成员关系的**全套副作用**，三条移除路径共用（管理员移除他人 `commit`、
+       * 本人退出组织 `DELETE …/members/me`、注销账号 `DELETE /api/accounts/me`）。
        *
-       * 顺序不能反：成员行一删，本公司的 scoped registry 就不再认这个 actor，②会静默 no-op。
-       * 任何一步失败都停在「人已停用、成员还在」——可重试，每一步都幂等。
+       * 顺序与原子性（2026-09-23 代码评审打回后重排）：
+       *   ① 读一遍成员行：不存在 → 404；**已经是组织管理员 → 当场 403，一个副作用都不做**（D5.2）。
+       *   ② 停用花名册里这个人（**还在别家公司在职就不停用**——停用打的是全局那一行）。
+       *      这一步必须在③之前：成员行一删，本公司的 scoped registry 就不再认这个 actor，
+       *      停用会静默 no-op，人被移除了却还挂在花名册上（QA D3 修过一次的病）。
+       *   ③ **一个事务**做完控制面三件事：锁内复核目标不是组织管理员 → 清名下 agent 的负责人字段
+       *      （`digital_employee.owner` 的复合 FK 是 ON DELETE RESTRICT，不清就是裸 FK 违例；
+       *      **只清 owner**，不改状态、不撤凭证、不解绑助理，PRD v1.5）→ 删 human principal bridge
+       *      → 删成员行（`store.removeMemberAndReleaseOwnedAgents`）。
+       *   ④ ③失败（并发转交把这个人升成了组织管理员，A09）→ 把②CAS 还原回去。
        *
-       * 三个调用点：管理员移除他人（`commit`）、本人退出组织（`DELETE …/members/me`）、
-       * 注销账号（逐家执行，`DELETE /api/accounts/me`）。
+       * **为什么③非要是一个事务**：以前①②③是「先清负责人、再停用、再删桥，最后才去拿锁删成员行」
+       * 四段独立的写。A09 那条并发（`O` 转交给 `A1` 的同时另一位管理员删 `A1`）走到最后一步才被
+       * `OWNER_PROTECTED` 拒——而此刻 `A1` 名下 Agent 的负责人已经被清空、桥已经被删、人已经被停用。
+       * 请求失败了，破坏却留下了：新上任的组织管理员丢了名下全部 Agent 的归属、还从花名册上消失。
+       * 现在控制面那三件事共一把锁（与转交锁同一组行），失败时一行都没写；跨不进这把锁的只有员工侧
+       * 停用，用 CAS 补偿还原——「停用之后有别人写过这个 actor」就跳过，不撤销他人的合法写（QA R9）。
        */
       async applyMemberRemoval(companyId, accountId) {
-        const released = await this.releaseOwnedAgents(companyId, accountId);
         const member = await this.store.getMember(companyId, accountId);
-        if (member && !await isEmployedElsewhere(this.store, companyId, accountId)) {
-          await this.disableActor?.(companyId, member.actorId);
+        if (!member) throw new CompanyError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}`);
+        if (member.role === "owner") throw new CompanyError(403, "OWNER_PROTECTED", OWNER_PROTECTED_MESSAGE);
+        let ticket = null;
+        if (!await isEmployedElsewhere(this.store, companyId, accountId)) {
+          ticket = await this.disableActor?.(companyId, member.actorId) ?? null;
         }
-        await this.store.deletePrincipalBridge(companyId, "human", accountId);
-        const removed = await this.store.removeMemberIfNotLastOwner(companyId, accountId);
+        const removed = await this.store.removeMemberAndReleaseOwnedAgents(companyId, accountId, this.now()).catch(async (e) => {
+          await this.compensateDisable(companyId, ticket);
+          throw e;
+        });
         if (!removed.ok) {
+          await this.compensateDisable(companyId, ticket);
           if (removed.reason === "not_found") {
             throw new CompanyError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${accountId}`);
           }
           throw new CompanyError(403, "OWNER_PROTECTED", OWNER_PROTECTED_MESSAGE);
         }
-        return released;
+        return removed.releasedAgents;
+      }
+      /**
+       * 把②那次停用还原回去。**只还原本次自己造成的那一次**：`restoreActor` 走 CAS，
+       * 停用之后但凡有别人写过这个 actor 就跳过——留下「成员还在 + actor 已停用」这个合法终态
+       * （与员工页 `DELETE /api/actors/:id` 的终态同构），比静默撤销他人的合法停用安全。
+       * 补偿本身失败不改写主错误：调用方要看到的是「为什么没删成」，不是补偿的二级故障。
+       */
+      async compensateDisable(companyId, ticket) {
+        if (!ticket || !this.restoreActor) return;
+        try {
+          await this.restoreActor(companyId, ticket);
+        } catch (e) {
+          console.error(
+            `[offboarding] restore actor ${ticket.actorId} failed after removal was rejected: ${e instanceof Error ? e.message : String(e)}`
+          );
+        }
       }
       /**
        * 把该成员名下所有 agent 的负责人字段清空，返回被清的 agent id。
@@ -243098,10 +243639,18 @@ function companiesDomain(opts) {
     }
     return n;
   };
+  const requireActiveCompany = async (companyId) => {
+    const company = await service.get(companyId);
+    if (!company || company.status !== "active") {
+      throw new ApiError(404, "COMPANY_NOT_FOUND", `\u7EC4\u7EC7\u4E0D\u5B58\u5728\u6216\u5DF2\u4E0D\u53EF\u7528\uFF1A${companyId}`);
+    }
+  };
   const requireOwnerOrAdmin = async (req, companyId) => {
     const me = await whoami(req);
     const member = await service.getMember(companyId, me.accountId);
-    if (!member || member.role !== "owner" && member.role !== "admin") {
+    if (!member) throw new ApiError(403, "FORBIDDEN", "\u9700\u8981\u8BE5\u516C\u53F8\u7684 owner/admin \u6743\u9650");
+    await requireActiveCompany(companyId);
+    if (member.role !== "owner" && member.role !== "admin") {
       throw new ApiError(403, "FORBIDDEN", "\u9700\u8981\u8BE5\u516C\u53F8\u7684 owner/admin \u6743\u9650");
     }
   };
@@ -243109,8 +243658,16 @@ function companiesDomain(opts) {
     const me = await whoami(req);
     const member = await service.getMember(companyId, me.accountId);
     if (!member) throw new ApiError(403, "NOT_A_MEMBER", "\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF0C\u8BBF\u95EE\u88AB\u62D2");
+    await requireActiveCompany(companyId);
     return me;
   };
+  const requireActiveSelfMember = async (req, companyId) => {
+    const me = await whoami(req);
+    const member = await service.getMember(companyId, me.accountId);
+    if (!member) throw new ApiError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${me.accountId}`);
+    await requireActiveCompany(companyId);
+    return { me, member };
+  };
   return (router) => {
     router.get("/api/companies", async (req) => {
       const me = await whoami(req);
@@ -243160,13 +243717,17 @@ function companiesDomain(opts) {
       return { status: 201, body: company };
     });
     router.post("/api/companies/:id/avatar", async (req) => {
+      const cid = req.params.id;
+      await requireOwnerOrAdmin(req, cid);
       if (!blobs) throw new ApiError(501, "NOT_IMPLEMENTED", "blob \u5B58\u50A8\u672A\u63A5\u5165");
       const ref2 = await storeImageBlob(blobs, req.body?.data);
-      const company = await service.setAvatar(req.params.id, ref2).catch(mapErr);
+      const company = await service.setAvatar(cid, ref2).catch(mapErr);
       return { status: 201, body: { avatar: company.avatar } };
     });
     router.delete("/api/companies/:id/avatar", async (req) => {
-      await service.setAvatar(req.params.id, null).catch(mapErr);
+      const cid = req.params.id;
+      await requireOwnerOrAdmin(req, cid);
+      await service.setAvatar(cid, null).catch(mapErr);
       return { status: 200, body: { ok: true } };
     });
     router.get("/api/companies/:id/members", async (req) => {
@@ -243176,23 +243737,23 @@ function companiesDomain(opts) {
       return { status: 200, body: { items } };
     });
     router.get("/api/companies/:id/members/me", async (req) => {
-      const me = await whoami(req);
-      const member = await service.getMember(req.params.id, me.accountId);
-      if (!member) throw new ApiError(404, "NOT_FOUND", `\u4E0D\u662F\u8BE5\u516C\u53F8\u6210\u5458\uFF1A${me.accountId}`);
+      const { member } = await requireActiveSelfMember(req, req.params.id);
       return { status: 200, body: member };
     });
     router.post("/api/companies/:id/members/me/onboarding-complete", async (req) => {
-      const me = await whoami(req);
-      const member = await service.completeMemberOnboarding(req.params.id, me.accountId).catch(mapErr);
+      const cid = req.params.id;
+      const { me } = await requireActiveSelfMember(req, cid);
+      const member = await service.completeMemberOnboarding(cid, me.accountId).catch(mapErr);
       return { status: 200, body: member };
     });
     router.post("/api/companies/:id/members/me/onboarding-step", async (req) => {
-      const me = await whoami(req);
+      const cid = req.params.id;
+      const { me } = await requireActiveSelfMember(req, cid);
       const body2 = req.body ?? {};
       if (typeof body2.step !== "string") {
         throw new ApiError(400, "BAD_REQUEST", "\u7F3A\u5C11 step: string");
       }
-      const member = await service.setMemberOnboardingStep(req.params.id, me.accountId, body2.step).catch(mapErr);
+      const member = await service.setMemberOnboardingStep(cid, me.accountId, body2.step).catch(mapErr);
       return { status: 200, body: member };
     });
     router.patch("/api/companies/:id/members/:accountId", async (req) => {
@@ -243232,7 +243793,6 @@ function companiesDomain(opts) {
       const aid = req.params.accountId;
       await requireOwnerOrAdmin(req, cid);
       const member = await service.peekRemovableMember(cid, aid).catch(mapErr);
-      if (offboarding) await offboarding.releaseOwnedAgents(cid, aid).catch(mapErr);
       let actorsSvc;
       let ownedDisableBefore = null;
       let disableSeq = 0;
@@ -243491,18 +244051,18 @@ var init_routes6 = __esm({
 
 // ../server/src/domains/companies/agent-credentials.ts
 function hashAgentToken(token, secret) {
-  return HASH_PREFIX + (0, import_node_crypto60.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
+  return HASH_PREFIX + (0, import_node_crypto61.createHmac)("sha256", secret).update(`agent-token:${token}`).digest("base64url");
 }
 function safeEqual(a, b2) {
   const ba = Buffer.from(a);
   const bb = Buffer.from(b2);
-  return ba.length === bb.length && (0, import_node_crypto60.timingSafeEqual)(ba, bb);
+  return ba.length === bb.length && (0, import_node_crypto61.timingSafeEqual)(ba, bb);
 }
-var import_node_crypto60, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
+var import_node_crypto61, HASH_PREFIX, TOKEN_PREFIX, AgentCredentialService;
 var init_agent_credentials = __esm({
   "../server/src/domains/companies/agent-credentials.ts"() {
     "use strict";
-    import_node_crypto60 = require("node:crypto");
+    import_node_crypto61 = require("node:crypto");
     init_service6();
     HASH_PREFIX = "ac1$";
     TOKEN_PREFIX = "oak_";
@@ -243527,7 +244087,7 @@ var init_agent_credentials = __esm({
         if (employee.status !== "active") {
           throw new CompanyError(409, "AGENT_LEFT", `\u6570\u5B57\u5458\u5DE5\u5DF2\u79BB\u5F00\uFF0C\u4E0D\u80FD\u7B7E\u53D1\u51ED\u8BC1\uFF1A${agentId}`);
         }
-        const token = `${TOKEN_PREFIX}${(0, import_node_crypto60.randomBytes)(32).toString("base64url")}`;
+        const token = `${TOKEN_PREFIX}${(0, import_node_crypto61.randomBytes)(32).toString("base64url")}`;
         const credential = {
           tokenHash: hashAgentToken(token, this.secret),
           companyId,
@@ -243628,9 +244188,30 @@ function createCompaniesDomain(opts) {
     ...opts.resolveActorsCtx !== void 0 ? {
       // 未认领转 left 的 agent、以及 commit 移除掉的那位成员，都要把员工侧 ActorRecord
       // 一并软停用——否则控制面说「已离开/已移除」、花名册还显示在岗，两个事实源当场分叉。
+      //
+      // 用 `disableActorIfCurrentlyActive` 而不是 `disableActor`，并把 `{before, seq}` 回给
+      // offboarding：只有**真的把这个 actor 从 active 拉到 disabled** 的那一次调用才拿得到
+      // 返回值，也才「拥有」这次状态变更；已被并发请求或员工页先停用的一律 ok:false，
+      // 本次就不 own、移除失败也不补偿（QA R10 的判据，两条移除路径同一套）。
       disableActor: async (companyId, actorId) => {
         const ctx = await opts.resolveActorsCtx(companyId);
-        await ctx.service.disableActorIfCurrentlyActive(actorId, "system:offboarding");
+        const res = await ctx.service.disableActorIfCurrentlyActive(actorId, "system:offboarding");
+        return res.ok ? { actorId, before: res.before, seq: res.seq } : null;
+      },
+      // 移除最终失败时的补偿：**CAS** 写回停用前那一行。`expectedSeq` 对不上（停用之后
+      // 有任何第三方写过这个 actor）就跳过——不静默撤销他人的合法停用 / 改名（QA R9）。
+      restoreActor: async (companyId, ticket) => {
+        const ctx = await opts.resolveActorsCtx(companyId);
+        const res = await ctx.service.casUpsertActor(
+          { ...ticket.before, status: "active" },
+          ticket.seq,
+          "system:offboarding"
+        );
+        if (!res.ok) {
+          console.info(
+            `[companies] restore skipped for ${ticket.actorId}: another write intervened after the disable`
+          );
+        }
       }
     } : {}
   });
@@ -244018,7 +244599,7 @@ function gatewayInstanceSlug(gatewayUrl) {
 }
 function connectInstanceName(gatewayUrl, token, companyId) {
   const scope2 = companyId?.trim();
-  const suffix = scope2 ? `c${(0, import_node_crypto61.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
+  const suffix = scope2 ? `c${(0, import_node_crypto62.createHash)("sha256").update(`${gatewayUrl}\0${scope2}`).digest("hex").slice(0, 10)}` : token.replace(/[^a-z0-9]/gi, "").slice(-8).toLowerCase() || "enroll";
   const base = gatewayInstanceSlug(gatewayUrl);
   return base.slice(0, Math.max(1, 64 - suffix.length - 1)) + "-" + suffix;
 }
@@ -244347,12 +244928,12 @@ function buildNpxCmd(p2) {
   const prefix = daemonNpmPrefix();
   return `npm install -g --prefer-online --prefix ${prefix} ${DAEMON_NPM_PACKAGE}@latest && ${prefix}/bin/oasis daemon start --instance ${shellQuote(instanceName)} --server-ws ${shellQuote(p2.gatewayUrl)}${companyPart}${namePart} --pkg ${shellQuote(DAEMON_NPM_PACKAGE)} --upgrade --enroll-token ${shellQuote(p2.token)}`;
 }
-var import_node_crypto61;
+var import_node_crypto62;
 var init_connect_script = __esm({
   "../server/src/domains/nodes/connect-script.ts"() {
     "use strict";
     init_src();
-    import_node_crypto61 = require("node:crypto");
+    import_node_crypto62 = require("node:crypto");
   }
 });
 
@@ -244812,7 +245393,7 @@ function nodesDomain(deps) {
     if (!daemon.meta.adapters.some((kind) => QUOTA_CAPABLE_KINDS.has(kind))) {
       return { ok: false, code: "no-quota-runtime", reason: "\u8FD9\u53F0\u673A\u5668\u4E0A\u6CA1\u6709\u4F1A\u4E0A\u62A5\u989D\u5EA6\u7684\u8FD0\u884C\u65F6\uFF08\u53EA\u6709 Claude Code \u548C Codex \u80FD\u67E5\u5230\u8BA2\u9605\u989D\u5EA6\uFF09" };
     }
-    const requestId = (0, import_node_crypto62.randomUUID)();
+    const requestId = (0, import_node_crypto63.randomUUID)();
     const task = new Promise((resolve12) => {
       const timer = setTimeout(() => {
         quotaRefreshWaiters.delete(requestId);
@@ -245188,7 +245769,7 @@ function nodesDomain(deps) {
         }
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       } else {
-        nodeId = `node-${(0, import_node_crypto62.randomUUID)().slice(0, 8)}`;
+        nodeId = `node-${(0, import_node_crypto63.randomUUID)().slice(0, 8)}`;
         deps.enrollTokens.setIssuedNodeId(enrollToken, nodeId);
       }
       const existingNode = await deps.nodeStore.getNode(nodeId);
@@ -245454,16 +246035,16 @@ function normalizeGatewayUrl(raw) {
   }
 }
 function newNodeId() {
-  return "node-" + (0, import_node_crypto62.randomUUID)().replace(/-/g, "").slice(0, 12);
+  return "node-" + (0, import_node_crypto63.randomUUID)().replace(/-/g, "").slice(0, 12);
 }
-var import_node_crypto62, import_node_fs18, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
+var import_node_crypto63, import_node_fs18, import_node_url6, import_node_path22, NODE_NAME_MAX_LENGTH;
 var init_routes7 = __esm({
   "../server/src/domains/nodes/routes.ts"() {
     "use strict";
     init_src();
     init_faults();
     init_runtime_status();
-    import_node_crypto62 = require("node:crypto");
+    import_node_crypto63 = require("node:crypto");
     import_node_fs18 = require("node:fs");
     import_node_url6 = require("node:url");
     import_node_path22 = require("node:path");
@@ -247130,7 +247711,7 @@ function createBundle(root, target, input) {
     }
   }
   const bytes2 = fs29.statSync(absBundle).size;
-  const digest = (0, import_node_crypto63.createHash)("sha256").update(fs29.readFileSync(absBundle)).digest("hex");
+  const digest = (0, import_node_crypto64.createHash)("sha256").update(fs29.readFileSync(absBundle)).digest("hex");
   const relBase = `inputs/git-bundles/${safeRepo}-${commit.slice(0, 12)}`;
   return {
     absoluteBundlePath: absBundle,
@@ -247226,12 +247807,12 @@ function classifyGitError(fallback, err, where) {
 function oneLine2(msg) {
   return msg.split("\n").map((s2) => s2.trim()).filter(Boolean).slice(0, 3).join(" ");
 }
-var import_node_child_process17, import_node_crypto63, fs29, os8, path26, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
+var import_node_child_process17, import_node_crypto64, fs29, os8, path26, GitReadonlyBundleError, HEX40, FETCH_TIMEOUT_MS2;
 var init_readonly_bundle = __esm({
   "../server/src/git/readonly-bundle.ts"() {
     "use strict";
     import_node_child_process17 = require("node:child_process");
-    import_node_crypto63 = require("node:crypto");
+    import_node_crypto64 = require("node:crypto");
     fs29 = __toESM(require("node:fs"), 1);
     os8 = __toESM(require("node:os"), 1);
     path26 = __toESM(require("node:path"), 1);
@@ -247252,7 +247833,7 @@ var init_readonly_bundle = __esm({
 // ../server/src/domains/collab/create-seeded-workorder.ts
 function makeSeededWorkorderCreator(deps) {
   const locks = createKeyedMutex();
-  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto64.randomUUID)().slice(0, 8)}`);
+  const genWorkspace = deps.genWorkspace ?? (() => `ws:wo-${(0, import_node_crypto65.randomUUID)().slice(0, 8)}`);
   const create = async (input) => {
     const company = input.companyId && deps.resolveCompany ? await deps.resolveCompany(input.companyId) : void 0;
     const kernel = company?.kernel ?? deps.kernel;
@@ -247339,7 +247920,7 @@ function makeSeededWorkorderCreator(deps) {
     return await finishCreation({ workspace, rootArtifactId: planned.rootArtifactId, spawned: planned.spawned });
   };
   return async (input) => {
-    const release = await locks.acquire(`${input.companyId ?? ""}\0${input.idempotencyKey ?? (0, import_node_crypto64.randomUUID)()}`);
+    const release = await locks.acquire(`${input.companyId ?? ""}\0${input.idempotencyKey ?? (0, import_node_crypto65.randomUUID)()}`);
     try {
       return await create(input);
     } finally {
@@ -247348,7 +247929,7 @@ function makeSeededWorkorderCreator(deps) {
   };
 }
 function workspaceForKey(key2) {
-  return `ws:wo-${(0, import_node_crypto64.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
+  return `ws:wo-${(0, import_node_crypto65.createHash)("sha256").update(key2).digest("hex").slice(0, 8)}`;
 }
 function existingWorkorder(snapshot, workspace, actor) {
   if (!snapshot?.nodes.length) return null;
@@ -247360,11 +247941,11 @@ function existingWorkorder(snapshot, workspace, actor) {
     spawned: snapshot.nodes.map((node2) => ({ id: node2.id, type: node2.type, owner: node2.assigneeActorId ?? actor }))
   };
 }
-var import_node_crypto64;
+var import_node_crypto65;
 var init_create_seeded_workorder = __esm({
   "../server/src/domains/collab/create-seeded-workorder.ts"() {
     "use strict";
-    import_node_crypto64 = require("node:crypto");
+    import_node_crypto65 = require("node:crypto");
     init_uncategorized_project();
     init_src();
     init_planner();
@@ -248867,12 +249448,12 @@ function stateFromAttempt(attempt, handoff, checkpoint, now, stalledAfterMs, ope
   if (attempt.status === "no-output") return handoff?.unresolvedIssues.length ? "blocked" : "no_change";
   return "failed";
 }
-var import_node_crypto65, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
+var import_node_crypto66, BLOCKING_STATES, HANDOFF_OUTCOMES2, RESUME_EXTERNAL_EFFECT_LIMIT, RESUME_SNAPSHOT_PREFIX, RESUME_SNAPSHOT_SUFFIX, ExecutionContinuityService;
 var init_service9 = __esm({
   "../server/src/domains/execution-continuity/service.ts"() {
     "use strict";
     init_src();
-    import_node_crypto65 = require("node:crypto");
+    import_node_crypto66 = require("node:crypto");
     init_src7();
     BLOCKING_STATES = /* @__PURE__ */ new Set(["stalled", "failed", "blocked"]);
     HANDOFF_OUTCOMES2 = /* @__PURE__ */ new Set(["succeeded", "no-output", "failed", "cancelled", "timeout", "orphaned"]);
@@ -249103,7 +249684,7 @@ var init_service9 = __esm({
         if (typeof expectedHash !== "string" || !this.readBundleFile) return null;
         const injectedResume = this.readBundleFile(attempt.id, "execution/RESUME.md");
         if (!injectedResume) return null;
-        const actualHash = (0, import_node_crypto65.createHash)("sha256").update(injectedResume).digest("hex");
+        const actualHash = (0, import_node_crypto66.createHash)("sha256").update(injectedResume).digest("hex");
         if (actualHash !== expectedHash) return null;
         const recoverySnapshot = parseResumePackSnapshot(injectedResume);
         if (!recoverySnapshot || recoverySnapshot.scenario !== "redispatch" || !recoverySnapshot.previousAttempt || recoverySnapshot.node.nodeId !== attempt.nodeId || recoverySnapshot.jobKey !== attempt.jobKey || recoverySnapshot.part !== attempt.part) return null;
@@ -250285,7 +250866,7 @@ function createChatSessionsDomain(opts) {
       if (!text7.trim()) throw new ApiError(400, "BAD_REQUEST", "text required");
       const now = Date.now();
       sweepDrafts(now);
-      const id = `cd_${(0, import_node_crypto66.randomUUID)()}`;
+      const id = `cd_${(0, import_node_crypto67.randomUUID)()}`;
       drafts.set(id, { text: text7, actor: req.auth.actor, expiresAt: now + DRAFT_TTL_MS });
       return { status: 201, body: { id, expiresInMs: DRAFT_TTL_MS } };
     });
@@ -250362,7 +250943,7 @@ function createChatSessionsDomain(opts) {
       const runtimeId = agentDefault.binding?.nodeId ?? "unknown";
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const session = {
-        id: (0, import_node_crypto66.randomUUID)(),
+        id: (0, import_node_crypto67.randomUUID)(),
         humanActorId: req.auth.actor,
         // 注：这里**刻意不写 companyId**。新会话要不要带公司归属，按 ws:wo-6d588f8e 的 ADR
         // （每公司 schema、最终移除表内 company 列）统一定，不在本节点自行发明。
@@ -250497,7 +251078,7 @@ function createChatSessionsDomain(opts) {
       if (body2.role !== "user" && body2.role !== "assistant") throw new ApiError(400, "BAD_REQUEST", "role must be user or assistant");
       const role = body2.role;
       const msg = await store2.appendMessage({
-        id: (0, import_node_crypto66.randomUUID)(),
+        id: (0, import_node_crypto67.randomUUID)(),
         sessionId: req.params.id,
         role,
         content: role === "user" ? stripInjectedChatContext(body2.content) : body2.content,
@@ -250539,7 +251120,7 @@ function createChatSessionsDomain(opts) {
       const known = key2 ? cur.find((x2) => x2.clientKey === key2) : void 0;
       if (!known && cur.length >= QUEUE_MAX) throw new ApiError(409, "QUEUE_FULL", `\u961F\u5217\u5DF2\u6EE1\uFF08\u4E0A\u9650 ${QUEUE_MAX} \u6761\uFF09`);
       const item = await store2.enqueuePendingMessage({
-        id: (0, import_node_crypto66.randomUUID)(),
+        id: (0, import_node_crypto67.randomUUID)(),
         chatSessionId: sid,
         text: text7,
         ...attachments.length ? { attachments } : {},
@@ -251392,12 +251973,12 @@ async function legacySendFailureCards(entries, deps) {
   }
   return out;
 }
-var import_node_crypto66, DEFAULT_SNAPSHOT_ITEMS, INFLIGHT_INSERT_SETTLE_WAIT_MS, MAX_SNAPSHOT_ITEMS, PROJECTED_CARD_LIMIT, SUBMISSION_NOT_DELIVERED_NOTE, SUBMISSION_UNCONFIRMED_NOTE, LEGACY_CARD_LIMIT;
+var import_node_crypto67, DEFAULT_SNAPSHOT_ITEMS, INFLIGHT_INSERT_SETTLE_WAIT_MS, MAX_SNAPSHOT_ITEMS, PROJECTED_CARD_LIMIT, SUBMISSION_NOT_DELIVERED_NOTE, SUBMISSION_UNCONFIRMED_NOTE, LEGACY_CARD_LIMIT;
 var init_chat_sessions2 = __esm({
   "../server/src/domains/chat-sessions/index.ts"() {
     "use strict";
     init_file_limits2();
-    import_node_crypto66 = require("node:crypto");
+    import_node_crypto67 = require("node:crypto");
     init_src();
     init_chat_session();
     init_persistent_files();
@@ -252857,7 +253438,7 @@ function busyError(chatSessionId, blockedBy) {
   return `\u76EE\u6807\u4F1A\u8BDD ${chatSessionId} \u6B63\u6709\u4E00\u8F6E\u5728\u8DD1${blockedBy ? `\uFF08${blockedBy}\uFF09` : ""}\u2014\u2014\u672C\u6B21\u89E6\u53D1\u5DF2\u4E22\u5F03\uFF0C\u4E0D\u6392\u961F\u3001\u4E0D\u8865\u8DD1`;
 }
 function genWebhookToken() {
-  return `owt_${(0, import_node_crypto67.randomBytes)(32).toString("base64url")}`;
+  return `owt_${(0, import_node_crypto68.randomBytes)(32).toString("base64url")}`;
 }
 function validateTitleTemplate(tpl) {
   const residue = tpl.replace(DATE_TOKEN, "");
@@ -252913,11 +253494,11 @@ function appendSourceNote(brief, automation, source, atIso) {
 ---
 \u672C\u5DE5\u5355\u7531\u81EA\u52A8\u5316\u300C${automation.name}\u300D\u4E8E ${atIso} \u89E6\u53D1\uFF08\u6765\u6E90\uFF1A${source}\uFF09\u3002\u5F00\u5DE5\u540E\u8BF7\u628A\u5DE5\u5355\u6807\u9898\u6539\u6210\u51C6\u786E\u53CD\u6620\u5B9E\u9645\u5DE5\u4F5C\u7684\u63CF\u8FF0\u3002`;
 }
-var import_node_crypto67, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
+var import_node_crypto68, DATE_TOKEN, AutomationsService, EVENT_RETRY_BASE_MS, EVENT_RETRY_MAX_MS, EVENT_RETRY_MAX_ATTEMPTS, eventAttempts, eventLastAttemptAt, eventLastError, CHAT_REPLY_MAX;
 var init_service10 = __esm({
   "../server/src/domains/automations/service.ts"() {
     "use strict";
-    import_node_crypto67 = require("node:crypto");
+    import_node_crypto68 = require("node:crypto");
     init_src();
     init_registry3();
     init_attribution();
@@ -253731,11 +254312,11 @@ function verifySignature(rawBody, headers, secret) {
   if (!secret) return "not_required";
   const given = header1(headers, "x-hub-signature-256");
   if (!given) return "missing";
-  const expected = `sha256=${(0, import_node_crypto68.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
+  const expected = `sha256=${(0, import_node_crypto69.createHmac)("sha256", secret).update(rawBody).digest("hex")}`;
   const a = Buffer.from(given);
   const b2 = Buffer.from(expected);
   if (a.length !== b2.length) return "invalid";
-  return (0, import_node_crypto68.timingSafeEqual)(a, b2) ? "valid" : "invalid";
+  return (0, import_node_crypto69.timingSafeEqual)(a, b2) ? "valid" : "invalid";
 }
 function eventAllowed(filters, envelope) {
   if (!filters || filters.length === 0) return true;
@@ -253765,11 +254346,11 @@ function splitEvent(envelope) {
   }
   return { eventName, actionCandidates: candidates };
 }
-var import_node_crypto68, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
+var import_node_crypto69, MAX_BODY_BYTES, AutomationWebhookService, header1, PROVIDER_PREFIXES;
 var init_webhook = __esm({
   "../server/src/domains/automations/webhook.ts"() {
     "use strict";
-    import_node_crypto68 = require("node:crypto");
+    import_node_crypto69 = require("node:crypto");
     MAX_BODY_BYTES = 256 * 1024;
     AutomationWebhookService = class {
       store;
@@ -254921,7 +255502,7 @@ function playbooksDomain(opts) {
       opts.overrides.set(companyOf(req), ref2, nodeKey, nextOverride);
       try {
         await opts.audit?.({
-          id: `reg_${(0, import_node_crypto69.randomUUID)()}`,
+          id: `reg_${(0, import_node_crypto70.randomUUID)()}`,
           actor: req.auth.actor,
           kind: "registry_change",
           target: `playbook:${ref2}#${nodeKey}`,
@@ -254938,11 +255519,11 @@ function playbooksDomain(opts) {
     });
   };
 }
-var import_node_crypto69;
+var import_node_crypto70;
 var init_routes12 = __esm({
   "../server/src/domains/playbooks/routes.ts"() {
     "use strict";
-    import_node_crypto69 = require("node:crypto");
+    import_node_crypto70 = require("node:crypto");
     init_router();
     init_registry3();
     init_planner();
@@ -255071,17 +255652,17 @@ function completionFingerprint(workspace, members) {
     workspace,
     members: [...members].sort((a, b2) => a.artifactId < b2.artifactId ? -1 : a.artifactId > b2.artifactId ? 1 : 0).map((m2) => ({ artifactId: m2.artifactId, currentRevisionId: m2.currentRevisionId ?? null }))
   });
-  return (0, import_node_crypto70.createHash)("sha256").update(canonical2).digest("hex");
+  return (0, import_node_crypto71.createHash)("sha256").update(canonical2).digest("hex");
 }
 function eventConsumptionKey(args) {
   const raw = `project-event:${EVENT_KEY_VERSION}:${args.triggerId}:${args.event}:${args.workspace}:${args.fingerprint}`;
-  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto70.createHash)("sha256").update(raw).digest("hex")}`;
+  return raw.length <= 200 ? raw : `project-event:${EVENT_KEY_VERSION}:sha256:${(0, import_node_crypto71.createHash)("sha256").update(raw).digest("hex")}`;
 }
-var import_node_crypto70, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
+var import_node_crypto71, EVENT_KEY_VERSION, EMPTY_METRICS, AUTOMATION_EVENT_HANDLERS, ProjectEventPoller;
 var init_project_event_poller = __esm({
   "../server/src/automations/project-event-poller.ts"() {
     "use strict";
-    import_node_crypto70 = require("node:crypto");
+    import_node_crypto71 = require("node:crypto");
     EVENT_KEY_VERSION = "v1";
     EMPTY_METRICS = () => ({
       scanDurationMs: 0,
@@ -255291,7 +255872,7 @@ function queryInputReceipt(hub, nodeId, dispatchId, clientMessageKey, pending, t
     const viaSession = hub.hasSession?.(dispatchId) === true;
     const supported = viaSession ? hub.supportsInputReceiptQuery?.(dispatchId) === true : daemonMetaOf(hub, nodeId)?.supportsInputReceiptQuery === true;
     if (!supported) return Promise.resolve({ status: "unknown", reason: "unsupported" });
-    const requestId = (0, import_node_crypto71.randomUUID)();
+    const requestId = (0, import_node_crypto72.randomUUID)();
     return new Promise((resolve12) => {
       const timer = setTimeout(() => {
         pending.delete(requestId);
@@ -255353,7 +255934,7 @@ function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessi
   if (input.requireConsumptionReceipt && !hub.supportsInputConsumptionReceipts?.(dispatchId)) {
     return Promise.resolve({ accepted: false, reason: "consumption-unsupported" });
   }
-  const requestId = (0, import_node_crypto71.randomUUID)();
+  const requestId = (0, import_node_crypto72.randomUUID)();
   const sent = routeToSession(hub, nodeId, dispatchId, { type: "append_input", dispatchId, input, requestId });
   if (!sent) return Promise.resolve({ accepted: false, reason: "session-closing", ...unknownIfInterrupting });
   return new Promise((resolve12) => {
@@ -255366,11 +255947,11 @@ function sendAppendInput(hub, nodeId, dispatchId, entry, input, timeoutMs, sessi
     entry.appendWaiters.push({ requestId, requireConsumptionReceipt: input.requireConsumptionReceipt, resolve: resolve12, timer });
   });
 }
-var import_node_crypto71, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_TOTAL_FRAMES, STASH_MAX_IDS, STASH_LOSS_MAX_IDS, STASH_LOSS_TTL_MS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
+var import_node_crypto72, STASH_TTL_MS, STASH_MAX_FRAMES_PER_ID, STASH_MAX_TOTAL_FRAMES, STASH_MAX_IDS, STASH_LOSS_MAX_IDS, STASH_LOSS_TTL_MS, DaemonHubAdapter, BindingRouterAdapter, WorkdirBridge;
 var init_daemon_adapter = __esm({
   "../server/src/daemon-adapter.ts"() {
     "use strict";
-    import_node_crypto71 = require("node:crypto");
+    import_node_crypto72 = require("node:crypto");
     init_src();
     STASH_TTL_MS = 5 * 6e4;
     STASH_MAX_FRAMES_PER_ID = 1e4;
@@ -255810,7 +256391,7 @@ var init_daemon_adapter = __esm({
       async spawn(job) {
         const nodeId = job.binding?.nodeId;
         if (!nodeId) throw new Error("DaemonHubAdapter \u9700\u8981 job.binding.nodeId\uFF08\u8DEF\u7531\u9519\u8BEF\uFF09");
-        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto71.randomUUID)()}`;
+        const dispatchId = job.dispatchId ?? `dispatch:${(0, import_node_crypto72.randomUUID)()}`;
         if (job.dispatchId && this.pending.has(dispatchId)) {
           return this.recover(dispatchId, nodeId, job.binding?.runtimeKind, job.actor);
         }
@@ -256066,7 +256647,7 @@ var init_daemon_adapter = __esm({
         return daemon?.meta.supportsWorkdirWalk === true;
       }
       request(nodeId, buildFrame) {
-        const requestId = (0, import_node_crypto71.randomUUID)();
+        const requestId = (0, import_node_crypto72.randomUUID)();
         const sent = this.hub.dispatch(nodeId, buildFrame(requestId));
         if (!sent) return Promise.resolve({ ok: false, code: "NODE_OFFLINE" });
         return new Promise((resolve12) => {
@@ -256174,13 +256755,13 @@ function classifyPage(page, lastPushedHash, serviceAccount) {
   if (sha(body2) === lastPushedHash) return { kind: "echo" };
   return { kind: "human-edit", content: body2, updatedBy: page.updatedBy };
 }
-var import_node_crypto72, sha, enc2, dec, MirrorEngine, MemoryMirrorStateStore, MapMirrorIdentities;
+var import_node_crypto73, sha, enc2, dec, MirrorEngine, MemoryMirrorStateStore, MapMirrorIdentities;
 var init_engine = __esm({
   "../server/src/mirror/engine.ts"() {
     "use strict";
-    import_node_crypto72 = require("node:crypto");
+    import_node_crypto73 = require("node:crypto");
     init_src();
-    sha = (s2) => (0, import_node_crypto72.createHash)("sha256").update(s2, "utf8").digest("hex");
+    sha = (s2) => (0, import_node_crypto73.createHash)("sha256").update(s2, "utf8").digest("hex");
     enc2 = (s2) => new TextEncoder().encode(s2);
     dec = (b2) => new TextDecoder().decode(b2);
     MirrorEngine = class {
@@ -256461,11 +257042,11 @@ function humanExitCause(exit3) {
   const base = (exit3.reason ? label2[exit3.reason] : void 0) ?? `\u4F1A\u8BDD\u5F02\u5E38\u7ED3\u675F\uFF08${exit3.reason ?? "\u65E0\u9000\u51FA\u4FE1\u606F"}\uFF09`;
   return exit3.errorMessage ? `${base}\uFF1A${exit3.errorMessage.slice(0, 200)}` : base;
 }
-var import_node_crypto73, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
+var import_node_crypto74, AUTONOMOUS_ETHOS, CONVERSATIONAL_ETHOS, SHARED_GRAPH_BODY, AUTONOMOUS_RECOVERY_TOOLS, HIGH_RISK_COMMANDS, REJECTED_PROPOSALS_IN_TASK, COORDINATOR_SYSTEM_PROMPT, CONVERSATIONAL_RECOVERY_TOOLS, CONVERSATIONAL_ESCALATION_TOOLS, CONVERSATIONAL_MANAGER_BODY, MACHINE_EXIT_CODES, CoordinatorWorker;
 var init_worker = __esm({
   "../server/src/coordinator/worker.ts"() {
     "use strict";
-    import_node_crypto73 = require("node:crypto");
+    import_node_crypto74 = require("node:crypto");
     init_src7();
     init_identity();
     AUTONOMOUS_ETHOS = `\u4F60\u662F\u8FD9\u4E2A\u5DE5\u5355\u7684**\u7BA1\u7406\u8005**\u2014\u2014\u804C\u8D23\u662F\u8BA9\u5B83\u987A\u7545\u8DD1\u5B8C\u3002\u7CFB\u7EDF\u5728\u67D0\u4E2A\u8282\u70B9\u5361\u4F4F\u3001\u673A\u68B0\u5206\u8BCA\u786E\u8BA4"\u9700\u8981\u4F60"\u65F6\u5524\u8D77\u4F60\uFF08\u65E0\u4EBA\u5728\u573A\uFF0C\u4F60\u8FD9\u4E00\u8F6E\u628A\u80FD\u505A\u7684\u505A\u6389\uFF09\u3002\u4F60\u7684\u624B\u6BB5\u5F88\u5BBD\uFF1A
@@ -256735,7 +257316,7 @@ ${HIGH_RISK_COMMANDS}`;
         return this.deps.kernel.model.lastSeq.get(artifactId) ?? 0;
       }
       evaluationKey(kind, artifactId, evidence) {
-        const fingerprint2 = (0, import_node_crypto73.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
+        const fingerprint2 = (0, import_node_crypto74.createHash)("sha256").update(JSON.stringify(evidence)).digest("hex");
         return `${kind}:${artifactId}:${fingerprint2}`;
       }
       artifactEvidence(id) {
@@ -257124,8 +257705,8 @@ ${ctx.nodeFault}
         const taskWithRejections = rejectedSection ? `${task}
 
 ${rejectedSection}` : task;
-        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto73.randomUUID)();
-        const coordinatorRunId = `coordinate:${(0, import_node_crypto73.randomUUID)()}`;
+        const runtimeSessionId = opts?.resumeSessionId ?? (0, import_node_crypto74.randomUUID)();
+        const coordinatorRunId = `coordinate:${(0, import_node_crypto74.randomUUID)()}`;
         const taskWithContext = coordinatorContext ? [
           taskWithRejections,
           ``,
@@ -257169,7 +257750,7 @@ ${rejectedSection}` : task;
         const startedAtMs = Date.now();
         let trajectoryStarted = false;
         if (this.deps.trajectory) {
-          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto73.createHash)("sha256").update(content3).digest("hex")]));
+          const bundleManifest = Object.fromEntries(Object.entries(job.bundle.files).map(([name, content3]) => [name, (0, import_node_crypto74.createHash)("sha256").update(content3).digest("hex")]));
           const session = {
             runId: coordinatorRunId,
             runtimeSessionId,
@@ -257380,11 +257961,11 @@ var init_pg_ident = __esm({
 });
 
 // ../storage/src/postgres.ts
-var import_node_crypto74, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
+var import_node_crypto75, ident4, isUniqueViolation, PostgresOplogStore, PostgresBlobStore;
 var init_postgres = __esm({
   "../storage/src/postgres.ts"() {
     "use strict";
-    import_node_crypto74 = require("node:crypto");
+    import_node_crypto75 = require("node:crypto");
     init_pg_ident();
     init_esm();
     init_src();
@@ -257564,7 +258145,7 @@ var init_postgres = __esm({
         return new _PostgresBlobStore(pool, schema);
       }
       async put(bytes2) {
-        const hash3 = (0, import_node_crypto74.createHash)("sha256").update(bytes2).digest("hex");
+        const hash3 = (0, import_node_crypto75.createHash)("sha256").update(bytes2).digest("hex");
         await this.pool.query(
           `INSERT INTO ${this.t} (hash, bytes, size, content_type) VALUES ($1, $2, $3, $4) ON CONFLICT (hash) DO NOTHING`,
           [hash3, Buffer.from(bytes2), bytes2.byteLength, sniffContentType(bytes2) ?? null]
@@ -257612,7 +258193,7 @@ function stageAtLeast(stage, min2) {
   return STAGES.indexOf(stage) >= STAGES.indexOf(min2);
 }
 function newVariableId() {
-  return `var_${(0, import_node_crypto75.randomUUID)()}`;
+  return `var_${(0, import_node_crypto76.randomUUID)()}`;
 }
 async function declareRecordsAware(db) {
   await db.query(`SELECT set_config('${RECORDS_AWARE_SETTING}', 'on', true)`);
@@ -257968,11 +258549,11 @@ async function listBindingTargetIds(db, s2, kind) {
     [kind]
   )).rows.map((x2) => x2.target_id);
 }
-var import_node_crypto75, STAGES, RECORDS_AWARE_SETTING, markLockName;
+var import_node_crypto76, STAGES, RECORDS_AWARE_SETTING, markLockName;
 var init_variable_bindings = __esm({
   "../storage/src/variable-bindings.ts"() {
     "use strict";
-    import_node_crypto75 = require("node:crypto");
+    import_node_crypto76 = require("node:crypto");
     init_src();
     STAGES = ["off", "dual", "read", "records"];
     RECORDS_AWARE_SETTING = "oasis.variable_records_aware";
@@ -260652,7 +261233,7 @@ async function ensureOneOwnerInvariant(pool, s2) {
     );
   }
 }
-var ident8, PostgresControlPlaneStore, rowToDigitalEmployee, rowToAgentCredential, rowToBridge, rowToOffboarding, toIso, rowToCompany, rowToRoleMigration, rowToMember, rowToInvitation, rowToInviteLink, rowToAccount, rowToVerificationCode;
+var ident8, PostgresControlPlaneStore, rowToDigitalEmployee, rowToAgentCredential, rowToBridge, rowToOffboarding, toIso, rowToCompany, rowToRoleMigration, migrationRow2, rowToMember, rowToInvitation, rowToInviteLink, rowToAccount, rowToVerificationCode;
 var init_postgres_control_plane = __esm({
   "../storage/src/postgres-control-plane.ts"() {
     "use strict";
@@ -261043,6 +261624,48 @@ var init_postgres_control_plane = __esm({
           client.release();
         }
       }
+      async removeMemberAndReleaseOwnedAgents(companyId, accountId, at2) {
+        const client = await this.pool.connect();
+        try {
+          await client.query("BEGIN");
+          const all2 = await client.query(
+            `SELECT company_id, account_id, actor_id, role, display_name, onboarding_completed_at, onboarding_step
+           FROM ${this.s}.company_members WHERE company_id = $1 FOR UPDATE`,
+            [companyId]
+          );
+          const target = all2.rows.map(rowToMember).find((m2) => m2.accountId === accountId);
+          if (!target) {
+            await client.query("ROLLBACK");
+            return { ok: false, reason: "not_found" };
+          }
+          if (target.role === "owner") {
+            await client.query("ROLLBACK");
+            return { ok: false, reason: "owner_protected" };
+          }
+          const released = await client.query(
+            `UPDATE ${this.s}.digital_employees SET owner_account_id = NULL, updated_at = $3
+          WHERE company_id = $1 AND owner_account_id = $2
+        RETURNING id`,
+            [companyId, accountId, at2]
+          );
+          await client.query(
+            `DELETE FROM ${this.s}.principal_bridge WHERE company_id = $1 AND principal_type = 'human' AND principal_id = $2`,
+            [companyId, accountId]
+          );
+          await client.query(
+            `DELETE FROM ${this.s}.company_members WHERE company_id = $1 AND account_id = $2`,
+            [companyId, accountId]
+          );
+          await client.query("COMMIT");
+          return { ok: true, member: target, releasedAgents: released.rows.map((r) => r.id) };
+        } catch (e) {
+          await client.query("ROLLBACK").catch(() => {
+          });
+          throw e;
+        } finally {
+          client.release();
+        }
+      }
       async updateMemberRoleIfNotLastOwner(companyId, accountId, role) {
         const client = await this.pool.connect();
         try {
@@ -261111,7 +261734,7 @@ var init_postgres_control_plane = __esm({
             `SELECT status FROM ${this.s}.accounts WHERE id = $1`,
             [toAccountId]
           );
-          if (acc.rows[0] && acc.rows[0].status !== "active") {
+          if (!acc.rows[0] || acc.rows[0].status !== "active") {
             await client.query("ROLLBACK");
             return { ok: false, reason: "target_inactive" };
           }
@@ -261148,6 +261771,73 @@ var init_postgres_control_plane = __esm({
           client.release();
         }
       }
+      // —— 存量身份映射（ADR D3）——
+      async migrateSoleCompanyOwner(companyId, toAccountId, audit2) {
+        const client = await this.pool.connect();
+        try {
+          await client.query("BEGIN");
+          const all2 = await client.query(
+            `SELECT company_id, account_id, actor_id, role, display_name, onboarding_completed_at, onboarding_step
+           FROM ${this.s}.company_members WHERE company_id = $1 FOR UPDATE`,
+            [companyId]
+          );
+          const rows = all2.rows.map(rowToMember);
+          const target = rows.find((m2) => m2.accountId === toAccountId);
+          if (!target) {
+            await client.query("ROLLBACK");
+            return { ok: false, reason: "not_found" };
+          }
+          const others = rows.filter((m2) => m2.role === "owner" && m2.accountId !== toAccountId);
+          if (others.length === 0 && target.role === "owner") {
+            await client.query("COMMIT");
+            return { ok: true, owner: target, demoted: [], auditRows: [] };
+          }
+          if (others.length > 0) {
+            await client.query(
+              `UPDATE ${this.s}.company_members SET role = 'admin' WHERE company_id = $1 AND role = 'owner' AND account_id <> $2`,
+              [companyId, toAccountId]
+            );
+          }
+          if (target.role !== "owner") {
+            await client.query(
+              `UPDATE ${this.s}.company_members SET role = 'owner' WHERE company_id = $1 AND account_id = $2`,
+              [companyId, toAccountId]
+            );
+          }
+          const auditRows = [
+            ...others.map((m2) => migrationRow2(companyId, m2.accountId, "owner", "admin", audit2)),
+            ...target.role !== "owner" ? [migrationRow2(companyId, toAccountId, target.role, "owner", audit2)] : []
+          ];
+          for (const r of auditRows) {
+            await client.query(
+              `INSERT INTO ${this.s}.company_member_role_migrations
+             (company_id, account_id, role_before, role_after, evidence, manifest_version, applied_at)
+           VALUES ($1,$2,$3,$4,$5,$6,$7)`,
+              [r.companyId, r.accountId, r.roleBefore, r.roleAfter, r.evidence, r.manifestVersion ?? null, r.appliedAt]
+            );
+          }
+          await client.query("COMMIT");
+          return {
+            ok: true,
+            owner: { ...target, role: "owner" },
+            demoted: others.map((m2) => ({ ...m2, role: "admin" })),
+            auditRows
+          };
+        } catch (e) {
+          await client.query("ROLLBACK").catch(() => {
+          });
+          throw e;
+        } finally {
+          client.release();
+        }
+      }
+      async setMemberRoleOnly(companyId, accountId, role) {
+        const r = await this.pool.query(
+          `UPDATE ${this.s}.company_members SET role = $3 WHERE company_id = $1 AND account_id = $2`,
+          [companyId, accountId, role]
+        );
+        return (r.rowCount ?? 0) > 0;
+      }
       // —— 存量身份映射审计（ADR D3.4）——
       async appendMemberRoleMigrations(rows) {
         if (rows.length === 0) return;
@@ -261661,6 +262351,15 @@ var init_postgres_control_plane = __esm({
       ...row.manifest_version != null ? { manifestVersion: row.manifest_version } : {},
       appliedAt: toIso(row.applied_at)
     });
+    migrationRow2 = (companyId, accountId, roleBefore, roleAfter, audit2) => ({
+      companyId,
+      accountId,
+      roleBefore,
+      roleAfter,
+      evidence: audit2.evidence,
+      ...audit2.evidence === "manifest" && audit2.manifestVersion !== void 0 ? { manifestVersion: audit2.manifestVersion } : {},
+      appliedAt: audit2.appliedAt
+    });
     rowToMember = (row) => ({
       companyId: row.company_id,
       accountId: row.account_id,
@@ -267916,11 +268615,11 @@ var init_postgres_delegations = __esm({
 });
 
 // ../storage/src/postgres-nodes.ts
-var import_node_crypto76, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToFault, rowToQuota, rowToRuntime;
+var import_node_crypto77, ident13, PostgresNodeStore, PostgresNodeTokenStore, rowToNode, rowToFault, rowToQuota, rowToRuntime;
 var init_postgres_nodes = __esm({
   "../storage/src/postgres-nodes.ts"() {
     "use strict";
-    import_node_crypto76 = require("node:crypto");
+    import_node_crypto77 = require("node:crypto");
     init_pg_ident();
     init_esm();
     ident13 = (s2) => {
@@ -268270,7 +268969,7 @@ var init_postgres_nodes = __esm({
         return store;
       }
       issue(nodeId) {
-        const token = `ont_${(0, import_node_crypto76.randomBytes)(24).toString("base64url")}`;
+        const token = `ont_${(0, import_node_crypto77.randomBytes)(24).toString("base64url")}`;
         this.cache.set(token, nodeId);
         void this.pool.query(`INSERT INTO ${this.s}.node_tokens (token,node_id) VALUES ($1,$2)`, [token, nodeId]);
         return token;
@@ -268572,11 +269271,11 @@ var init_postgres_type_registry = __esm({
 });
 
 // ../storage/src/postgres-actor-memory.ts
-var import_node_crypto77, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
+var import_node_crypto78, matchClause, ident15, PostgresActorMemoryStore, rowToIndexEntry, rowToRecord;
 var init_postgres_actor_memory = __esm({
   "../storage/src/postgres-actor-memory.ts"() {
     "use strict";
-    import_node_crypto77 = require("node:crypto");
+    import_node_crypto78 = require("node:crypto");
     init_pg_ident();
     init_src();
     matchClause = (q2) => q2.requireMatch && q2.keywords.length > 0 ? " WHERE m > 0" : "";
@@ -268786,7 +269485,7 @@ var init_postgres_actor_memory = __esm({
       }
       async write(input, now) {
         if (input.memId === void 0) {
-          const memId = `mem:${(0, import_node_crypto77.randomUUID)()}`;
+          const memId = `mem:${(0, import_node_crypto78.randomUUID)()}`;
           const r2 = await this.pool.query(
             `INSERT INTO ${this.s}.actor_memories
            (mem_id, actor_id, project_id, keywords, content, version, created_at, updated_at, accessed_at, source_artifact_id, source_session_id)
@@ -270357,14 +271056,14 @@ function companySchemaName(companyId) {
   if (typeof companyId !== "string" || !companyId.trim()) {
     throw new Error("company schema mapping \u9700\u8981\u975E\u7A7A companyId\uFF08fail-closed\uFF1A\u4E0D\u56DE\u9000\u9ED8\u8BA4\u516C\u53F8\uFF09");
   }
-  const hex = (0, import_node_crypto78.createHash)("sha256").update(companyId, "utf8").digest("hex");
+  const hex = (0, import_node_crypto79.createHash)("sha256").update(companyId, "utf8").digest("hex");
   return `${COMPANY_SCHEMA_PREFIX}${hex.slice(0, DIGEST_HEX_LEN)}`;
 }
-var import_node_crypto78, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
+var import_node_crypto79, COMPANY_SCHEMA_PREFIX, DIGEST_HEX_LEN, SchemaMappingConflictError, TenantStorageLocationStore;
 var init_tenant_schema_mapping = __esm({
   "../storage/src/tenant-schema-mapping.ts"() {
     "use strict";
-    import_node_crypto78 = require("node:crypto");
+    import_node_crypto79 = require("node:crypto");
     init_esm();
     init_pg_ident();
     COMPANY_SCHEMA_PREFIX = "c_";
@@ -270438,7 +271137,7 @@ var init_tenant_schema_mapping = __esm({
 
 // ../storage/src/company-data-plane-schema.ts
 function canonicalTypeDefHash(def) {
-  return `sha256:${(0, import_node_crypto79.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
+  return `sha256:${(0, import_node_crypto80.createHash)("sha256").update(JSON.stringify(def), "utf8").digest("hex")}`;
 }
 function defaultArtifactTypeTemplate() {
   return [
@@ -270620,11 +271319,11 @@ async function seedDefaultArtifactTypes(pool, schema, templates = defaultArtifac
   }
   return { inserted };
 }
-var import_node_crypto79, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
+var import_node_crypto80, DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION;
 var init_company_data_plane_schema = __esm({
   "../storage/src/company-data-plane-schema.ts"() {
     "use strict";
-    import_node_crypto79 = require("node:crypto");
+    import_node_crypto80 = require("node:crypto");
     init_esm();
     init_pg_ident();
     DEFAULT_ARTIFACT_TYPE_TEMPLATE_VERSION = "4c368e5c-types-v1";
@@ -270703,11 +271402,11 @@ function rowToFile2(row) {
     updatedAt: new Date(row.updated_at).toISOString()
   };
 }
-var import_node_crypto80, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
+var import_node_crypto81, COMPANY_CONFLICT_MSG, CompanyIdentifierConflictError, CompanyOwnedRegistryStore;
 var init_company_owned_registry_store = __esm({
   "../storage/src/company-owned-registry-store.ts"() {
     "use strict";
-    import_node_crypto80 = require("node:crypto");
+    import_node_crypto81 = require("node:crypto");
     init_esm();
     init_src();
     init_pg_ident();
@@ -271092,7 +271791,7 @@ var init_company_owned_registry_store = __esm({
           enabled: skill.enabled,
           files: files.map((f2) => ({ path: f2.path, blobHash: f2.blobHash }))
         });
-        return (0, import_node_crypto80.createHash)("sha256").update(body2).digest("hex");
+        return (0, import_node_crypto81.createHash)("sha256").update(body2).digest("hex");
       }
     };
   }
@@ -273902,7 +274601,7 @@ function sourceSetConservation(input) {
   return input.sourceFinal === input.copied + input.approvedRuntimeConversion + input.approvedArchive + input.approvedDiscard;
 }
 function payloadChecksum(value2) {
-  return (0, import_node_crypto81.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
+  return (0, import_node_crypto82.createHash)("sha256").update(JSON.stringify(value2)).digest("hex");
 }
 async function copyWorkorderDraftsIdempotent(pool, companyId, companySchema, manifestId, opts) {
   const cs = quoteIdent2(companySchema);
@@ -274294,11 +274993,11 @@ async function copyTraceFamilyIdempotent(pool, companyId, companySchema, manifes
     sequences
   };
 }
-var import_node_crypto81, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
+var import_node_crypto82, MissingInstallerActorsError, TypeCatalogNotCoveredError, ORG_REGISTRY_TABLES, TRACE_FAMILY;
 var init_tenant_migration_operator = __esm({
   "../storage/src/tenant-migration-operator.ts"() {
     "use strict";
-    import_node_crypto81 = require("node:crypto");
+    import_node_crypto82 = require("node:crypto");
     init_esm();
     init_pg_ident();
     init_tenancy_attribution();
@@ -274534,8 +275233,8 @@ var init_tenant_new_company_provision = __esm({
 // ../storage/src/knowledge-snapshot-crypto.ts
 function sealSnapshot(snapshot, key2) {
   if (snapshot.content.startsWith(PREFIX3)) return structuredClone(snapshot);
-  const iv = (0, import_node_crypto82.randomBytes)(12);
-  const cipher = (0, import_node_crypto82.createCipheriv)("aes-256-gcm", bytes(key2), iv);
+  const iv = (0, import_node_crypto83.randomBytes)(12);
+  const cipher = (0, import_node_crypto83.createCipheriv)("aes-256-gcm", bytes(key2), iv);
   cipher.setAAD(aad2(snapshot));
   const encrypted = Buffer.concat([cipher.update(snapshot.content, "utf8"), cipher.final()]);
   return { ...structuredClone(snapshot), content: `${PREFIX3}${iv.toString("base64url")}.${cipher.getAuthTag().toString("base64url")}.${encrypted.toString("base64url")}` };
@@ -274545,7 +275244,7 @@ function openSnapshot(snapshot, key2) {
   const packed = snapshot.content.slice(PREFIX3.length).split(".");
   if (packed.length !== 3 || packed.some((part) => !part)) throw new Error(`knowledge snapshot ${snapshot.ref} ciphertext is malformed`);
   const [iv, tag, data] = packed;
-  const decipher = (0, import_node_crypto82.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
+  const decipher = (0, import_node_crypto83.createDecipheriv)("aes-256-gcm", bytes(key2), Buffer.from(iv, "base64url"));
   decipher.setAAD(aad2(snapshot));
   decipher.setAuthTag(Buffer.from(tag, "base64url"));
   return {
@@ -274553,11 +275252,11 @@ function openSnapshot(snapshot, key2) {
     content: Buffer.concat([decipher.update(Buffer.from(data, "base64url")), decipher.final()]).toString("utf8")
   };
 }
-var import_node_crypto82, PREFIX3, bytes, aad2;
+var import_node_crypto83, PREFIX3, bytes, aad2;
 var init_knowledge_snapshot_crypto = __esm({
   "../storage/src/knowledge-snapshot-crypto.ts"() {
     "use strict";
-    import_node_crypto82 = require("node:crypto");
+    import_node_crypto83 = require("node:crypto");
     PREFIX3 = "oasis-knowledge:v1:";
     bytes = (key2) => {
       const value2 = Buffer.from(key2);
@@ -275449,7 +276148,7 @@ function reportedCost(v2) {
 }
 function newUsageBackfillManifestId(now = /* @__PURE__ */ new Date()) {
   const stamp = now.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z");
-  return `ulb-${stamp}-${(0, import_node_crypto83.randomBytes)(3).toString("hex")}`;
+  return `ulb-${stamp}-${(0, import_node_crypto84.randomBytes)(3).toString("hex")}`;
 }
 async function backfillUsageLedger(ledger, opts) {
   if (!opts.dryRun && !opts.manifestId) throw new Error("execute \u9700\u8981 manifestId");
@@ -275998,11 +276697,11 @@ async function audit(c, s2, manifestId, runId, field, before, after, createdAt)
     [manifestId, runId, field, before == null ? null : JSON.stringify(before), after == null ? null : JSON.stringify(after), createdAt]
   );
 }
-var import_node_crypto83, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, ALLOWED_MODEL_EVIDENCE_TIERS, emptyStep, MODEL_BACKFILL_SOURCE, fourOf, sameUsage, ChatRunLookup;
+var import_node_crypto84, BUCKETS, ENDED_SQL, START_EVIDENCE_SQL, CHAT_RUN_SQL, ALLOWED_MODEL_EVIDENCE_TIERS, emptyStep, MODEL_BACKFILL_SOURCE, fourOf, sameUsage, ChatRunLookup;
 var init_usage_ledger_backfill = __esm({
   "../storage/src/usage-ledger-backfill.ts"() {
     "use strict";
-    import_node_crypto83 = require("node:crypto");
+    import_node_crypto84 = require("node:crypto");
     init_src();
     init_pg_ident();
     init_postgres_trace();
@@ -276581,31 +277280,64 @@ var init_connector_tool_versions = __esm({
 });
 
 // ../server/src/design/board-watch.ts
-function decideBoardLetter(c, nowMs, quietMs) {
-  if (c.hasOpenWatchLetter) return false;
-  if (c.freshTerminalRunId !== null) return true;
-  if (c.boardMtime === null) return false;
-  if (!c.hasRevision) return false;
-  if (c.lastOpAtMs === null || c.boardMtime <= c.lastOpAtMs) return false;
-  if (nowMs - c.boardMtime < quietMs) return false;
-  if (c.lastWatchMtime !== null && c.boardMtime <= c.lastWatchMtime) return false;
-  return true;
+function parseOdTime(v2) {
+  if (typeof v2 === "number") return Number.isFinite(v2) ? v2 : null;
+  if (typeof v2 !== "string" || v2.trim().length === 0) return null;
+  const s2 = v2.trim();
+  if (/^\d+(\.\d+)?$/.test(s2)) return Number(s2);
+  const t = Date.parse(s2);
+  return Number.isFinite(t) ? t : null;
+}
+function nonEmpty2(v2) {
+  return typeof v2 === "string" && v2.trim().length > 0 ? v2 : null;
+}
+function roundOfMessage(m2, conversationId = null) {
+  if (m2["role"] !== "assistant") return null;
+  const status = nonEmpty2(m2["runStatus"]);
+  if (status === null || !TERMINAL_RUN_STATUS.has(status)) return null;
+  const endedAt = parseOdTime(m2["endedAt"]);
+  if (endedAt === null) return null;
+  const runId = nonEmpty2(m2["runId"]);
+  const messageId = nonEmpty2(m2["id"]);
+  if (runId === null && messageId === null) return null;
+  const files = Array.isArray(m2["producedFiles"]) ? m2["producedFiles"] : [];
+  const producedFiles = files.map((f2) => typeof f2 === "string" ? f2 : f2 && typeof f2 === "object" ? nonEmpty2(f2["path"]) ?? nonEmpty2(f2["name"]) : null).filter((s2) => s2 !== null);
+  const { error: error2, errorCode } = messageError(m2, status);
+  return {
+    key: runId ?? `msg:${messageId}`,
+    conversationId,
+    runId,
+    status,
+    agentId: nonEmpty2(m2["agentId"]),
+    endedAt,
+    producedFiles,
+    error: error2,
+    errorCode
+  };
+}
+function messageError(m2, status) {
+  const events = Array.isArray(m2["events"]) ? m2["events"] : [];
+  for (let i = events.length - 1; i >= 0; i--) {
+    const e = events[i];
+    if (!e || typeof e !== "object") continue;
+    const ev = e;
+    if (ev["kind"] !== "status" || ev["label"] !== "error") continue;
+    const detail = nonEmpty2(ev["detail"]);
+    if (detail !== null) return { error: detail, errorCode: nonEmpty2(ev["code"]) };
+  }
+  if (status !== "succeeded") {
+    const content3 = nonEmpty2(m2["content"]);
+    if (content3 !== null) return { error: content3, errorCode: null };
+  }
+  return { error: null, errorCode: null };
 }
-var MARKER_PREFIX, boardWatchMarker, parseMarker, RUN_MARKER_PREFIX, boardWatchRunMarker, parseRunMarker, TERMINAL_RUN_STATUS, BoardWatcher;
+var RUN_MARKER_PREFIX, boardWatchRunMarker, parseRunMarker, SINCE_MARKER_PREFIX, boardWatchSinceMarker, parseSinceMarker, TERMINAL_RUN_STATUS, MAX_REASON_CHARS, MAX_LISTED_FILES, BoardWatcher;
 var init_board_watch = __esm({
   "../server/src/design/board-watch.ts"() {
     "use strict";
     init_src7();
-    MARKER_PREFIX = "[od-board-watch mtime:";
-    boardWatchMarker = (mtimeMs) => `${MARKER_PREFIX}${mtimeMs}]`;
-    parseMarker = (body2) => {
-      const i = body2.indexOf(MARKER_PREFIX);
-      if (i < 0) return null;
-      const n = Number.parseInt(body2.slice(i + MARKER_PREFIX.length), 10);
-      return Number.isFinite(n) ? n : null;
-    };
     RUN_MARKER_PREFIX = "[od-board-watch run:";
-    boardWatchRunMarker = (runId) => `${RUN_MARKER_PREFIX}${runId}]`;
+    boardWatchRunMarker = (roundKey) => `${RUN_MARKER_PREFIX}${roundKey}]`;
     parseRunMarker = (body2) => {
       const i = body2.indexOf(RUN_MARKER_PREFIX);
       if (i < 0) return null;
@@ -276614,113 +277346,183 @@ var init_board_watch = __esm({
       const id = body2.slice(i + RUN_MARKER_PREFIX.length, j);
       return id.length > 0 ? id : null;
     };
+    SINCE_MARKER_PREFIX = "[od-board-watch since:";
+    boardWatchSinceMarker = (sinceMs) => `${SINCE_MARKER_PREFIX}${sinceMs}]`;
+    parseSinceMarker = (body2) => {
+      const i = body2.indexOf(SINCE_MARKER_PREFIX);
+      if (i < 0) return null;
+      const n = Number.parseInt(body2.slice(i + SINCE_MARKER_PREFIX.length), 10);
+      return Number.isFinite(n) ? n : null;
+    };
     TERMINAL_RUN_STATUS = /* @__PURE__ */ new Set(["succeeded", "failed", "canceled", "cancelled"]);
+    MAX_REASON_CHARS = 500;
+    MAX_LISTED_FILES = 10;
     BoardWatcher = class {
       constructor(deps) {
         this.deps = deps;
-      }
-      odGet(path47) {
+        if (!deps.kernel && !(deps.listCompanies && deps.kernelFor)) throw new Error("BoardWatcher \u9700\u8981 kernel\uFF0C\u6216 listCompanies + kernelFor");
+      }
+      /** `<公司>\0<artifactId>` → 本进程第一次读成功时钉住的起算点（还没写过带 since 的信时用），免得在第一封信之前随时间往后漂。 */
+      pinnedSince = /* @__PURE__ */ new Map();
+      /** `<公司>\0<boardKey>\0<conversationId>` → 本进程上次把这个对话的轮次处理完时它的 updatedAt。 */
+      seenConvAt = /* @__PURE__ */ new Map();
+      /** 公司 → 上次记下的失败原文（同样的错只记一次；成功一轮就清掉）。 */
+      companyLastError = /* @__PURE__ */ new Map();
+      async odGet(path47) {
         const fetchImpl = this.deps.fetchImpl ?? fetch;
-        return fetchImpl(`${this.deps.odBase}${path47}`, this.deps.odToken ? { headers: { authorization: `Bearer ${this.deps.odToken}` } } : void 0);
-      }
-      /** 查一块板的交付物（排 task-context/、只算带 artifactManifest 的）。404/网络错 → null（板不存在）。 */
-      async boardFiles(boardKey) {
         try {
-          const res = await this.odGet(`/api/projects/${encodeURIComponent(boardKey)}/files`);
-          if (!res.ok) return null;
-          const body2 = await res.json();
-          return (body2.files ?? []).filter((f2) => !f2.path.startsWith("task-context/") && f2.artifactManifest !== void 0).map((f2) => ({ path: f2.path, kind: f2.kind ?? null, mtime: f2.mtime ?? null }));
-        } catch {
-          return null;
+          const res = await fetchImpl(`${this.deps.odBase}${path47}`, this.deps.odToken ? { headers: { authorization: `Bearer ${this.deps.odToken}` } } : void 0);
+          if (res.status === 401 || res.status === 403) return { kind: "denied", status: res.status };
+          if (res.status === 404) return { kind: "missing" };
+          if (!res.ok) return { kind: "error", detail: `HTTP ${res.status}` };
+          return { kind: "ok", value: await res.json() };
+        } catch (err) {
+          return { kind: "error", detail: String(err) };
         }
       }
       /**
-       * 查一块板的 run 列表（`GET /api/runs?projectId=`，与 CLI `design status` 同源）。
-       * run 注册表是 od 的**内存态**——重启即空，查不到不代表没跑过；所以这里失败一律降级成空数组，
-       * 由板文件 mtime 那条慢路径兜底，绝不因为查不到 run 就压掉写信。
+       * 列出一块板上结束时间可能晚于 since 的轮次（跨对话；顺序不重要，调用方按 endedAt 排）。
+       *
+       * 省流：od 的 assistant 消息带整段 events 与 content，每分钟把每个对话的 /messages 全拉一遍，轮次多的板
+       * 一分钟就是几 MB。所以先用 /conversations 列表里的 updatedAt / latestRun.endedAt（取较大）筛：
+       * - 不晚于 since → 这个对话里不可能有要写信的轮次，跳过；
+       * - 和本进程上次看完时一样 → 没变，跳过（seenConvAt，serve 重启即清空，退回只按 since 筛，run marker 去重兜着）。
+       * 两个时间都没有的对话照拉，不猜。返回每个拉过的对话的 updatedAt，由 tick 在它的轮次都写完信后记进 seenConvAt。
        */
-      async boardRuns(boardKey) {
-        try {
-          const res = await this.odGet(`/api/runs?projectId=${encodeURIComponent(boardKey)}`);
-          if (!res.ok) return [];
-          const body2 = await res.json();
-          return (body2.runs ?? []).map((r) => ({ runId: String(r["runId"] ?? r["id"] ?? ""), status: String(r["status"] ?? "unknown") })).filter((r) => r.runId.length > 0);
-        } catch {
-          return [];
-        }
+      async boardRounds(company, boardKey, since) {
+        const base = `/api/projects/${encodeURIComponent(boardKey)}/conversations`;
+        const convs = await this.odGet(base);
+        if (convs.kind !== "ok") return convs;
+        const rounds = [];
+        const fetched = /* @__PURE__ */ new Map();
+        for (const c of convs.value.conversations ?? []) {
+          const cid = nonEmpty2(c["id"]);
+          if (cid === null) continue;
+          const latestRun = c["latestRun"] && typeof c["latestRun"] === "object" ? c["latestRun"] : {};
+          const times = [parseOdTime(c["updatedAt"]), parseOdTime(latestRun["endedAt"])].filter((t) => t !== null);
+          const convAt = times.length > 0 ? Math.max(...times) : null;
+          if (convAt !== null && (convAt <= since || this.seenConvAt.get(`${company}\0${boardKey}\0${cid}`) === convAt)) continue;
+          const msgs = await this.odGet(`${base}/${encodeURIComponent(cid)}/messages`);
+          if (msgs.kind === "missing") continue;
+          if (msgs.kind !== "ok") return msgs;
+          fetched.set(cid, convAt);
+          for (const m2 of msgs.value.messages ?? []) {
+            if (!m2 || typeof m2 !== "object") continue;
+            const r = roundOfMessage(m2, cid);
+            if (r !== null) rounds.push(r);
+          }
+        }
+        return { kind: "ok", value: { rounds, fetched } };
+      }
+      /** 失败轮消息上没有错误原文时，去 `/api/runs` 按 runId 找 od 记的 error；找不到（含 od 重启过）→ null。 */
+      async runErrorFromRegistry(boardKey, runId) {
+        const res = await this.odGet(`/api/runs?projectId=${encodeURIComponent(boardKey)}`);
+        if (res.kind !== "ok") return null;
+        const hit = (res.value.runs ?? []).find((r) => String(r["runId"] ?? r["id"] ?? "") === runId);
+        return hit ? nonEmpty2(hit["error"]) : null;
       }
       async tick(now = Date.now()) {
-        const { kernel, boardKeyOf, log: log3 } = this.deps;
-        const quietMs = this.deps.quietMs ?? 10 * 6e4;
+        const { log: log3 } = this.deps;
+        const denied = [];
+        const { listCompanies, kernelFor } = this.deps;
+        if (listCompanies && kernelFor) {
+          for (const companyId of await listCompanies()) {
+            try {
+              await this.tickCompany(companyId, await kernelFor(companyId), now, denied);
+              this.companyLastError.delete(companyId);
+            } catch (err) {
+              const msg = String(err);
+              if (this.companyLastError.get(companyId) === msg) continue;
+              this.companyLastError.set(companyId, msg);
+              log3?.(`[board-watch] [${companyId}] \u8FD9\u4E00\u8F6E\u6CA1\u5DE1\u6210\uFF08\u5176\u4F59\u516C\u53F8\u7EE7\u7EED\uFF09\uFF1A${msg}`);
+            }
+          }
+        } else {
+          await this.tickCompany("", this.deps.kernel, now, denied);
+        }
+        if (denied.length > 0) {
+          const codes = [...new Set(denied.map((d) => d.status))].join("/");
+          const eg = denied[0];
+          log3?.(
+            `[board-watch] od \u62D2\u7EDD\u4E86\u5DE1\u68C0\u8BF7\u6C42\uFF08HTTP ${codes}\uFF0C${denied.length} \u5757\u677F\uFF0C\u5982 ${eg.company ? `[${eg.company}] ` : ""}${eg.boardKey}\uFF09\uFF1A${this.deps.odToken ? "\u5E26\u4E86 OASIS_OPEN_DESIGN_TOKEN \u4F46 od \u4E0D\u8BA4\uFF0C\u6838\u5BF9\u5B83\u4E0E od \u7684 OD_API_TOKEN \u662F\u5426\u4E00\u81F4" : "\u6CA1\u914D OASIS_OPEN_DESIGN_TOKEN\uFF0Cod \u8981\u4EE4\u724C"}\u3002\u8FD9\u4E9B\u677F\u672C\u8F6E\u6CA1\u770B\u6210`
+          );
+        }
+      }
+      /** 巡一家公司（company 为空串 = 单 kernel 模式）；被拒的板记进 denied，由 tick 统一汇总成一行。 */
+      async tickCompany(company, kernel, now, denied) {
+        const { boardKeyOf, log: log3 } = this.deps;
+        const graceMs = this.deps.firstLookGraceMs ?? 10 * 6e4;
         const maxPerTick = this.deps.maxLettersPerTick ?? 2;
         const actor = this.deps.actor ?? "actor:system";
+        const tag = company ? `[${company}] ` : "";
         const model = kernel.model;
         let written = 0;
-        for (const a of model.artifacts.values()) {
-          if (a.type !== "design") continue;
-          if (lifecycleOf(model, a.id) !== "active") continue;
+        for (const a of [...model.artifacts.values()]) {
           if (written >= maxPerTick) {
-            log3?.(`[board-watch] \u672C\u8F6E\u5199\u4FE1\u5DF2\u8FBE\u4E0A\u9650 ${maxPerTick}\uFF0C\u5176\u4F59\u677F\u4E0B\u8F6E\u518D\u770B`);
+            log3?.(`[board-watch] ${tag}\u672C\u8F6E\u5199\u4FE1\u5DF2\u8FBE\u4E0A\u9650 ${maxPerTick}\uFF0C\u5176\u4F59\u677F\u4E0B\u8F6E\u518D\u770B`);
             break;
           }
+          if (a.type !== "design") continue;
+          if (lifecycleOf(model, a.id) !== "active") continue;
           const boardKey = boardKeyOf(a.id);
-          const files = await this.boardFiles(boardKey);
-          if (files === null) continue;
-          const runs = await this.boardRuns(boardKey);
-          if (files.length === 0 && runs.length === 0) continue;
-          const boardMtime = files.reduce((mx, f2) => f2.mtime !== null && (mx === null || f2.mtime > mx) ? f2.mtime : mx, null);
-          const watchLetters = annotationsOf(model, a.id).filter(
-            (x2) => x2.author === actor && (parseMarker(x2.body) !== null || parseRunMarker(x2.body) !== null)
-          );
-          const letteredRuns = new Set(
-            watchLetters.map((x2) => parseRunMarker(x2.body)).filter((s2) => s2 !== null)
-          );
-          const newestTerminalRun = runs.find((r) => TERMINAL_RUN_STATUS.has(r.status)) ?? null;
-          const lastOpAt = model.lastOpAt.get(a.id);
-          const candidate = {
-            boardMtime,
-            hasRevision: revisionsOf(model, a.id).length > 0,
-            lastOpAtMs: lastOpAt ? Date.parse(lastOpAt) : null,
-            hasOpenWatchLetter: watchLetters.some((x2) => x2.state === "open"),
-            lastWatchMtime: watchLetters.reduce((mx, x2) => {
-              const m2 = parseMarker(x2.body);
-              return m2 !== null && (mx === null || m2 > mx) ? m2 : mx;
-            }, null),
-            freshTerminalRunId: newestTerminalRun !== null && !letteredRuns.has(newestTerminalRun.runId) ? newestTerminalRun.runId : null
-          };
-          if (!decideBoardLetter(candidate, now, quietMs)) continue;
-          const fmt = (fs52) => fs52.slice(0, 5).map((f2) => `- ${f2.path}\uFF08${f2.kind ?? "?"}\uFF09\xB7 ${f2.mtime ? new Date(f2.mtime).toISOString() : "?"}`).join("\n");
-          let body2;
-          let logLine;
-          if (candidate.freshTerminalRunId !== null) {
-            const status = newestTerminalRun.status;
-            const ok3 = status === "succeeded";
-            const listed = files.length > 0 ? fmt([...files].sort((x2, y) => (y.mtime ?? 0) - (x2.mtime ?? 0))) : "\uFF08\u677F\u4E0A\u6682\u65E0\u4EA4\u4ED8\u7269\uFF09";
-            body2 = [
-              // 两个 marker 都带：run marker 管快路径去重，mtime marker 顺手把慢路径也盖住——
-              // 否则这封信被 resolve 后，慢路径会就**同一批板内容**再写一封（两路去重各管各的）。
-              boardMtime !== null ? `${boardWatchRunMarker(candidate.freshTerminalRunId)} ${boardWatchMarker(boardMtime)}` : boardWatchRunMarker(candidate.freshTerminalRunId),
-              ok3 ? `\u753B\u677F ${boardKey} \u7684\u5F15\u64CE\u8DD1\u5B8C\u4E86\uFF08run ${candidate.freshTerminalRunId.slice(0, 8)} \u7EC8\u6001=${status}\uFF09\uFF0C\u8D27\u5728\u677F\u4E0A\u7B49\u4F60\u6536\uFF1A` : `\u753B\u677F ${boardKey} \u7684\u5F15\u64CE\u8FD9\u4E00\u8F6E**\u6CA1\u8DD1\u6210**\uFF08run ${candidate.freshTerminalRunId.slice(0, 8)} \u7EC8\u6001=${status}\uFF09\u3002\u677F\u4E0A\u5F53\u524D\u5185\u5BB9\uFF1A`,
-              listed,
-              ``,
-              ok3 ? `\u53D6\u8D27\u6838\u5BF9\uFF1A\`oasis design status ${a.id} --pull\` \u2192 \u5BF9\u7740 DESIGN_BRIEF.md \u4E0E inputs/ \u9010\u5B57\u6BB5\u6838\uFF08\u6570\u636E\u5BF9\u4E0D\u5BF9\u3001\u72B6\u6001\u5168\u4E0D\u5168\u3001\u6709\u6CA1\u6709\u7F16\u9020\uFF09\u3002\u591F\u597D\u5C31 \`oasis propose ${a.id} --from-dir <\u76EE\u5F55> --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"\`\uFF1B\u8981\u6539\u5C31\u56DE\u677F\u4E0A\u518D\u6765\u4E00\u8F6E \`oasis design chat ${a.id} --turn continue --message "<\u8981\u6539\u4EC0\u4E48>" --async\`\uFF08\u26D4 \u522B\u628A --pull \u4E0B\u6765\u7684\u6587\u4EF6\u5728\u672C\u5730\u624B\u6539\u540E propose\uFF09\u3002` : `\u5148 \`oasis design status ${a.id}\` \u770B\u677F\u4E0A\u6709\u6CA1\u6709\u53EF\u7528\u7684\u4E0A\u4E00\u7248\uFF1A\u6709\u5C31\u7167\u5E38\u53D6\u8D27\u6838\u5BF9\uFF1B\u6CA1\u6709\u5C31\u628A\u9700\u6C42\u4E0E\u771F\u5B9E\u6570\u636E\u9489\u5F97\u66F4\u6B7B\u540E\u91CD\u8D77\u4E00\u8F6E \`oasis design chat ${a.id} --message "<\u2026>" --async\`\uFF0C\u4ECD\u4E0D\u884C\u7528 \`oasis gap ${a.id} --desc "<\u5361\u5728\u54EA>"\` \u5192\u6CE1\u7ED9\u4EBA\u3002`
-            ].join("\n");
-            logLine = `[board-watch] ${a.id} \u2190 \u677F ${boardKey} \u5F15\u64CE\u6536\u5C3E\uFF08run ${candidate.freshTerminalRunId.slice(0, 8)} ${status}\uFF09\u2192 \u5DF2\u5199\u4FE1\u5524 owner`;
-          } else {
-            const newest = files.filter((f2) => f2.mtime !== null && candidate.lastOpAtMs !== null && f2.mtime > candidate.lastOpAtMs).sort((x2, y) => (y.mtime ?? 0) - (x2.mtime ?? 0));
-            body2 = [
-              boardWatchMarker(boardMtime),
-              `\u753B\u677F ${boardKey} \u4E0A\u6709 Oasis \u4E4B\u5916\u7684\u65B0\u52A8\u9759\uFF08\u4EBA\u5728\u677F\u4E0A\u5BF9\u8BDD/\u6539\u7A3F\uFF0C\u6216\u5F15\u64CE\u4EA7\u4E86\u6CA1\u4EBA\u6536\u7684\u65B0\u7248\uFF09\uFF0C\u6BD4\u672C\u4EA7\u7269\u6700\u8FD1\u4E00\u6B21\u64CD\u4F5C\uFF08${lastOpAt ?? "?"}\uFF09\u65B0\u3001\u4E14\u5DF2\u9759\u9ED8 ${Math.round(quietMs / 6e4)} \u5206\u949F\uFF1A`,
-              fmt(newest.length > 0 ? newest : files),
-              ``,
-              `\u8BF7\u53D6\u8D27\u6838\u5BF9\uFF1A\`oasis design status ${a.id} --pull\` \u2192 \u5185\u5BB9\u5408\u610F\u5C31 \`oasis propose ${a.id} --from-dir <\u76EE\u5F55> --reason "<\u6536\u5F55\u677F\u4E0A\u4EBA\u5DE5\u8FED\u4EE3>"\` \u6536\u5F55\u4E3A\u65B0\u7248\u672C\uFF1B\u4E0D\u5408\u610F/\u4E0D\u5FC5\u6536\u5F55\uFF0C\u56DE\u5E16\u8BF4\u660E\u540E\u6309 wontfix \u5904\u7406\u5373\u53EF\uFF08\u540C\u4E00\u7248\u4E0D\u4F1A\u518D\u6765\u4FE1\uFF09\u3002`
-            ].join("\n");
-            logLine = `[board-watch] ${a.id} \u2190 \u677F ${boardKey} \u6709\u65B0\u5185\u5BB9\uFF08mtime=${new Date(boardMtime).toISOString()}\uFF09\u2192 \u5DF2\u5199\u4FE1\u5524 owner`;
+          const pinKey = `${company}\0${a.id}`;
+          const watchLetters = annotationsOf(model, a.id).filter((x2) => x2.author === actor && x2.body.includes("[od-board-watch "));
+          const lettered = new Set(watchLetters.map((x2) => parseRunMarker(x2.body)).filter((s2) => s2 !== null));
+          const recordedSince = watchLetters.reduce((mn, x2) => {
+            const s2 = parseSinceMarker(x2.body);
+            return s2 !== null && (mn === null || s2 < mn) ? s2 : mn;
+          }, null);
+          const since = recordedSince ?? this.pinnedSince.get(pinKey) ?? now - graceMs;
+          const read3 = await this.boardRounds(company, boardKey, since);
+          if (read3.kind === "missing") continue;
+          if (read3.kind === "denied") {
+            denied.push({ company, boardKey, status: read3.status });
+            continue;
           }
-          await kernel.annotate({ artifactId: a.id, actor, body: body2, kind: "comment" });
-          written++;
-          log3?.(logLine);
+          if (read3.kind === "error") {
+            log3?.(`[board-watch] ${tag}\u8BFB\u753B\u677F ${boardKey} \u5931\u8D25\uFF08${read3.detail}\uFF09\uFF0C\u672C\u8F6E\u8DF3\u8FC7`);
+            continue;
+          }
+          if (recordedSince === null && !this.pinnedSince.has(pinKey)) this.pinnedSince.set(pinKey, since);
+          const fresh = read3.value.rounds.filter((r) => r.endedAt > since && !lettered.has(r.key)).sort((x2, y) => x2.endedAt - y.endedAt);
+          const seen = /* @__PURE__ */ new Set();
+          for (const r of fresh) {
+            if (written >= maxPerTick) break;
+            if (seen.has(r.key)) continue;
+            seen.add(r.key);
+            const ok3 = r.status === "succeeded";
+            const reason = ok3 ? null : r.error ?? (r.runId !== null ? await this.runErrorFromRegistry(boardKey, r.runId) : null);
+            await kernel.annotate({ artifactId: a.id, actor, body: this.letterBody(a.id, boardKey, r, since, reason), kind: "comment" });
+            written++;
+            log3?.(`[board-watch] ${tag}${a.id} \u2190 \u677F ${boardKey} \u4E00\u8F6E\u5BF9\u8BDD\u7ED3\u675F\uFF08${r.key.slice(0, 12)} ${r.status}${r.agentId ? ` ${r.agentId}` : ""}\uFF09\u2192 \u5DF2\u5199\u4FE1\u5524 owner`);
+          }
+          const pending = new Set(fresh.filter((r) => !seen.has(r.key)).map((r) => r.conversationId));
+          for (const [cid, convAt] of read3.value.fetched) {
+            if (convAt !== null && !pending.has(cid)) this.seenConvAt.set(`${company}\0${boardKey}\0${cid}`, convAt);
+          }
+        }
+      }
+      letterBody(artifactId, boardKey, r, since, reason) {
+        const marker = `${boardWatchRunMarker(r.key)} ${boardWatchSinceMarker(since)}`;
+        const round = `${r.runId !== null ? `run ${r.runId.slice(0, 8)}` : `\u6D88\u606F ${r.key.slice(4, 12)}`}\uFF0C\u5F15\u64CE=${r.agentId ?? "?"}\uFF0C\u7ED3\u675F\u4E8E ${new Date(r.endedAt).toISOString()}`;
+        if (r.status === "succeeded") {
+          const files = r.producedFiles.length > 0 ? [...r.producedFiles.slice(0, MAX_LISTED_FILES).map((f2) => `- ${f2}`), ...r.producedFiles.length > MAX_LISTED_FILES ? [`- \u2026\u53E6 ${r.producedFiles.length - MAX_LISTED_FILES} \u4E2A`] : []].join("\n") : "\uFF08\u8FD9\u4E00\u8F6E\u6CA1\u6709\u767B\u8BB0\u4EA7\u51FA\u6587\u4EF6\uFF09";
+          return [
+            marker,
+            `\u753B\u677F ${boardKey} \u4E0A\u6709\u4E00\u8F6E\u5BF9\u8BDD\u8DD1\u5B8C\u4E86\uFF08${round}\uFF09\uFF0C\u8FD9\u4E00\u8F6E\u4EA7\u51FA\uFF1A`,
+            files,
+            ``,
+            `\u53D6\u8D27\u6838\u5BF9\uFF1A\`oasis design status ${artifactId} --pull\` \u2192 \u5BF9\u7740 DESIGN_BRIEF.md \u4E0E inputs/ \u9010\u5B57\u6BB5\u6838\uFF08\u6570\u636E\u5BF9\u4E0D\u5BF9\u3001\u72B6\u6001\u5168\u4E0D\u5168\u3001\u6709\u6CA1\u6709\u7F16\u9020\uFF09\u3002\u591F\u597D\u5C31 \`oasis propose ${artifactId} --from-dir <\u76EE\u5F55> --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"\`\uFF1B\u8981\u6539\u5C31\u56DE\u677F\u4E0A\u518D\u6765\u4E00\u8F6E \`oasis design chat ${artifactId} --turn continue --message "<\u8981\u6539\u4EC0\u4E48>" --async\`\uFF08\u26D4 \u522B\u628A --pull \u4E0B\u6765\u7684\u6587\u4EF6\u5728\u672C\u5730\u624B\u6539\u540E propose\uFF09\u3002\u8FD9\u4E00\u8F6E\u82E5\u662F\u4EBA\u76F4\u63A5\u5728\u677F\u4E0A\u804A\u51FA\u6765\u7684\u3001\u5185\u5BB9\u4E0D\u5FC5\u6536\u5F55\uFF0C\u56DE\u5E16\u8BF4\u660E\u540E\u6309 wontfix \u5904\u7406\u5373\u53EF\uFF08\u540C\u4E00\u8F6E\u4E0D\u4F1A\u518D\u6765\u4FE1\uFF09\u3002`
+          ].join("\n");
         }
+        const quoted = reason === null ? null : reason.length > MAX_REASON_CHARS ? `${reason.slice(0, MAX_REASON_CHARS)}\u2026` : reason;
+        return [
+          marker,
+          `\u753B\u677F ${boardKey} \u4E0A\u6709\u4E00\u8F6E\u5BF9\u8BDD**\u6CA1\u8DD1\u6210**\uFF08\u7EC8\u6001=${r.status}\uFF0C${round}\uFF09\u3002`,
+          quoted !== null ? `od \u8BB0\u7684\u539F\u56E0\uFF08\u539F\u6587\uFF09\uFF1A${quoted}${r.errorCode !== null ? `\uFF08\u9519\u8BEF\u7801 ${r.errorCode}\uFF09` : ""}` : `od \u6CA1\u6709\u8BB0\u5F55\u8FD9\u4E00\u8F6E\u7684\u5931\u8D25\u539F\u56E0\u3002`,
+          ``,
+          `\u5148 \`oasis design status ${artifactId}\` \u770B\u677F\u4E0A\u6709\u6CA1\u6709\u53EF\u7528\u7684\u4E0A\u4E00\u7248\uFF1A\u6709\u5C31\u7167\u5E38\u53D6\u8D27\u6838\u5BF9\u3002\u8981\u91CD\u8DD1\u5C31\u81EA\u5DF1\u5224\u65AD\uFF1A\u50CF\u662F\u989D\u5EA6/\u9650\u6D41\u5C31\u7B49\u6062\u590D\u540E\u518D\u6765\uFF0C\u6216\u6362\u4E2A\u5F15\u64CE \`oasis design chat ${artifactId} --agent <\u5F15\u64CE> --message "<\u2026>" --async\`\uFF1B\u50CF\u662F\u9700\u6C42/\u6570\u636E\u95EE\u9898\u5C31\u628A\u5B83\u4EEC\u9489\u5F97\u66F4\u6B7B\u540E\u91CD\u8D77\u4E00\u8F6E\uFF1B\u4ECD\u4E0D\u884C\u7528 \`oasis gap ${artifactId} --desc "<\u5361\u5728\u54EA>"\` \u5192\u6CE1\u7ED9\u4EBA\u3002`
+        ].join("\n");
       }
     };
   }
@@ -277602,8 +278404,8 @@ __export(src_exports2, {
   bindWorkorderProject: () => bindWorkorderProject,
   bindingResolverFromRegistry: () => bindingResolverFromRegistry,
   bindingRuntimeState: () => bindingRuntimeState,
-  boardWatchMarker: () => boardWatchMarker,
   boardWatchRunMarker: () => boardWatchRunMarker,
+  boardWatchSinceMarker: () => boardWatchSinceMarker,
   broadcastMessageId: () => broadcastMessageId,
   broadcastMessageText: () => broadcastMessageText,
   bucketRuntimeRuns: () => bucketRuntimeRuns,
@@ -277707,7 +278509,6 @@ __export(src_exports2, {
   cronNext: () => cronNext,
   cronNextN: () => cronNextN,
   deadlineClockTick: () => deadlineClockTick,
-  decideBoardLetter: () => decideBoardLetter,
   defaultAvatarRefOf: () => defaultAvatarRefOf,
   delegationArtifactsView: () => delegationArtifactsView,
   delegationBundleAdditions: () => delegationBundleAdditions,
@@ -277858,6 +278659,7 @@ __export(src_exports2, {
   parseConnectorSkillId: () => parseConnectorSkillId,
   parseKnowledgeAnswerOutput: () => parseKnowledgeAnswerOutput,
   parseKnowledgePlan: () => parseKnowledgePlan,
+  parseOdTime: () => parseOdTime,
   parseReadScope: () => parseReadScope,
   parseSkillFrontmatter: () => parseSkillFrontmatter,
   parseSymrefHead: () => parseSymrefHead,
@@ -277947,6 +278749,7 @@ __export(src_exports2, {
   retireCdGateInTypeStore: () => retireCdGateInTypeStore,
   rolesDomain: () => rolesDomain,
   rollbackOrgIdentity: () => rollbackOrgIdentity,
+  roundOfMessage: () => roundOfMessage,
   routeFusedSignal: () => routeFusedSignal,
   runtimeConnectionStatus: () => runtimeConnectionStatus,
   runtimeDriftBlock: () => runtimeDriftBlock,
@@ -278512,14 +279315,14 @@ init_src();
 var os16 = __toESM(require("node:os"));
 var path46 = __toESM(require("node:path"));
 var import_node_child_process26 = require("node:child_process");
-var import_node_crypto94 = require("node:crypto");
+var import_node_crypto95 = require("node:crypto");
 
 // ../cli/src/cli.ts
 init_src();
 var fs44 = __toESM(require("node:fs"), 1);
 var os13 = __toESM(require("node:os"), 1);
 var path39 = __toESM(require("node:path"), 1);
-var import_node_crypto92 = require("node:crypto");
+var import_node_crypto93 = require("node:crypto");
 
 // ../cli/src/serve.ts
 init_src11();
@@ -278531,11 +279334,11 @@ var fs36 = __toESM(require("node:fs"), 1);
 var os9 = __toESM(require("node:os"), 1);
 var path30 = __toESM(require("node:path"), 1);
 var import_node_child_process18 = require("node:child_process");
-var import_node_crypto88 = require("node:crypto");
+var import_node_crypto89 = require("node:crypto");
 var import_node_url7 = require("node:url");
 
 // ../cli/src/artifact-discovery-source.ts
-var import_node_crypto84 = require("node:crypto");
+var import_node_crypto85 = require("node:crypto");
 init_src7();
 var ArtifactDiscoverySourceUnreadableError = class extends Error {
   constructor(message) {
@@ -278565,7 +279368,7 @@ async function resolveArtifactDiscoverySourceContent(blobs, input) {
     throw new ArtifactDiscoverySourceUnreadableError(`Artifact Revision ${input.revisionId} \u7684 contentKind \u4E0D\u53D7\u652F\u6301\uFF1A${String(input.contentKind)}`);
   }
   const rootBytes = await blobs.get(input.contentRef);
-  const sourceFingerprint = (0, import_node_crypto84.createHash)("sha256").update(rootBytes).digest("hex");
+  const sourceFingerprint = (0, import_node_crypto85.createHash)("sha256").update(rootBytes).digest("hex");
   if (input.contentKind === "inline-blob") {
     const sourceContent = decodeText3(rootBytes);
     if (sourceContent === null) {
@@ -278589,7 +279392,7 @@ ${entry.text}`).join("\n\n"),
 }
 
 // ../server/src/domains/discussions/service.ts
-var import_node_crypto85 = require("node:crypto");
+var import_node_crypto86 = require("node:crypto");
 init_zod();
 init_discussions();
 init_router();
@@ -278651,7 +279454,7 @@ function remapTopics(topics, removed) {
   return [...out].map(([topic_id, summary]) => ({ topic_id, summary }));
 }
 var entryId = (projectId2, id) => JSON.stringify([projectId2, id]);
-var hash2 = (s2) => (0, import_node_crypto85.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
+var hash2 = (s2) => (0, import_node_crypto86.createHash)("sha256").update(s2).digest("hex").slice(0, 24);
 var canonical = (s2) => s2.normalize("NFKC").trim().toLocaleLowerCase();
 function decisionFingerprint(d) {
   return hash2(JSON.stringify([d.statement, d.rationale, d.alternatives]));
@@ -278871,7 +279674,7 @@ var DiscussionService = class {
         throw new ApiError(409, "DISCUSSION_CONFLICT", "\u9879\u76EE\u8BAE\u9898\u6216\u51B3\u7B56\u5DF2\u53D8\u5316\uFF0C\u8BF7\u8BFB\u53D6\u6700\u65B0\u5185\u5BB9\u540E\u4FEE\u6B63");
       }
     }
-    const operation = (value2) => tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
+    const operation = (value2) => tx.put("operation", (0, import_node_crypto86.randomUUID)(), {
       ...value2,
       projectId: projectId2,
       actorId: ctx.actorId,
@@ -278888,7 +279691,7 @@ var DiscussionService = class {
       if (id.startsWith("new:")) {
         if (BUG_TOPIC.test(t.title.trim())) invalid("topics.title", `\u300C${t.title}\u300D\u662F\u5355\u4E2A Bug\uFF1A\u4FEE\u590D\u60C5\u51B5\u5199\u8FDB\u8BA8\u8BBA\u8BB0\u5F55\uFF0C\u5B9A\u51FA\u7684\u89C4\u5219\u6302\u5230\u5BF9\u5E94\u529F\u80FD\u8BAE\u9898\u4E0B\uFF0C\u4E0D\u6309 Bug \u53F7\u5EFA\u8BAE\u9898`);
         const existing = [...topicMap.values()].find((x2) => canonical(x2.title) === canonical(t.title));
-        id = existing?.topicId ?? `topic_${(0, import_node_crypto85.randomUUID)()}`;
+        id = existing?.topicId ?? `topic_${(0, import_node_crypto86.randomUUID)()}`;
         if (!existing) createdTopics.add(id);
       } else if (!topicMap.has(id)) invalid("topics.topic_id", `\u8BAE\u9898 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u8BAE\u9898\u4F7F\u7528 new: \u524D\u7F00`);
       topicAliases.set(t.topic_id, id);
@@ -278940,7 +279743,7 @@ var DiscussionService = class {
       if (id.startsWith("new:")) {
         const candidateKey = JSON.stringify([topicId, canonical(d.record.statement)]);
         const existing = [...decisionMap.values()].find((x2) => x2.topicId === topicId && canonical(x2.record.statement) === canonical(d.record.statement));
-        id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto85.randomUUID)()}`;
+        id = existing?.decisionId ?? candidateIds.get(candidateKey) ?? `decision_${(0, import_node_crypto86.randomUUID)()}`;
         candidateIds.set(candidateKey, id);
       } else if (!decisionMap.has(id)) invalid("decision_id", `\u51B3\u7B56 ${id} \u4E0D\u5B58\u5728\uFF1B\u65B0\u51B3\u7B56\u4F7F\u7528 new: \u524D\u7F00`);
       decisionAliases.set(d.decision_id, id);
@@ -279202,7 +280005,7 @@ var DiscussionService = class {
           ...row.value.confirmation ? { confirmation: { ...row.value.confirmation, fingerprint: decisionFingerprint(record9) } } : {}
         };
         await tx.put("decision", row.id, value2);
-        await tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
+        await tx.put("operation", (0, import_node_crypto86.randomUUID)(), {
           action: "edit",
           kind: "decision",
           projectId: projectId2,
@@ -279266,7 +280069,7 @@ var DiscussionService = class {
         if (!current || current.revision !== row.revision) throw new ApiError(409, "DISCUSSION_CONFLICT", `\u8BA8\u8BBA ${row.id} \u5DF2\u88AB\u4FEE\u6539\uFF0C\u8BF7\u8BFB\u53D6\u6700\u65B0\u5185\u5BB9\u540E\u91CD\u8BD5`);
         const summary = given.get(row.id);
         await tx.put("discussion", row.id, { ...current.value, record: { ...current.value.record, summary } });
-        await tx.put("operation", (0, import_node_crypto85.randomUUID)(), {
+        await tx.put("operation", (0, import_node_crypto86.randomUUID)(), {
           action: "edit",
           kind: "discussion",
           projectId: current.value.record.project_id,
@@ -279282,7 +280085,7 @@ var DiscussionService = class {
     });
   }
   async operation(tx, actorId, kind, id, from, to) {
-    await tx.put("operation", (0, import_node_crypto85.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
+    await tx.put("operation", (0, import_node_crypto86.randomUUID)(), { actorId, kind, id, from, to, at: new Date(this.now()).toISOString() });
   }
 };
 function pickDiscussionContent(d) {
@@ -279582,7 +280385,7 @@ var DiscussionContext = class {
 };
 
 // ../server/src/domains/discussions/worker.ts
-var import_node_crypto86 = require("node:crypto");
+var import_node_crypto87 = require("node:crypto");
 var DISCUSSION_IDLE_MS = 15 * 6e4;
 var DISCUSSION_MAX_CORRECTIONS = 3;
 var DISCUSSION_LEASE_MS = 2 * 6e4;
@@ -279608,7 +280411,7 @@ var DiscussionWorker = class {
     if (await this.isReplying(sessionId)) return false;
     const cutoff = eligibleCutoff(await this.service.chat.listMessages(sessionId), this.service.now());
     if (!cutoff) return false;
-    const owner = (0, import_node_crypto86.randomUUID)();
+    const owner = (0, import_node_crypto87.randomUUID)();
     const claimed = await this.service.store.transaction(async (tx) => {
       const old = (await tx.get("job", sessionId))?.value;
       if (old?.status === "running" && (old.leaseUntil ?? 0) > this.service.now()) return null;
@@ -280330,7 +281133,7 @@ function createDiscussionRuntime(options) {
 }
 
 // ../server/src/domains/discussions/store.ts
-var import_node_crypto87 = require("node:crypto");
+var import_node_crypto88 = require("node:crypto");
 var import_promises17 = require("node:fs/promises");
 var import_node_path27 = require("node:path");
 var key = (kind, id) => JSON.stringify([kind, id]);
@@ -280375,7 +281178,7 @@ var MemoryDiscussionStore = class _MemoryDiscussionStore {
       if (changed) {
         if (this.filename) {
           await (0, import_promises17.mkdir)((0, import_node_path27.dirname)(this.filename), { recursive: true });
-          const temp = `${this.filename}.${(0, import_node_crypto87.randomUUID)()}.tmp`;
+          const temp = `${this.filename}.${(0, import_node_crypto88.randomUUID)()}.tmp`;
           await (0, import_promises17.writeFile)(temp, JSON.stringify(next), "utf8");
           await (0, import_promises17.rename)(temp, this.filename);
         }
@@ -281324,7 +282127,7 @@ function oasisWrapperScript() {
   const repoRoot = (0, import_node_url7.fileURLToPath)(new URL("../../../", __esm_import_meta_url));
   const tsx = path30.join(repoRoot, "node_modules/.bin/tsx");
   const main = path30.join(repoRoot, "packages/cli/src/main.ts");
-  const key2 = (0, import_node_crypto88.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
+  const key2 = (0, import_node_crypto89.createHash)("sha256").update(repoRoot).digest("hex").slice(0, 12);
   const uid = typeof process.getuid === "function" ? process.getuid() : "na";
   const stable = path30.join(os9.tmpdir(), `oasis-cli-wrapper-${uid}-${key2}`);
   let dir;
@@ -281717,7 +282520,7 @@ async function startServe(opts) {
     if (!hub) return Promise.resolve({ ok: false, reason: "\u672C\u8FDB\u7A0B\u6CA1\u6709\u8282\u70B9\u7F51\u5173" });
     const online = hub.connectedDaemons().some((d) => d.daemonId === nodeId);
     if (!online) return Promise.resolve({ ok: false, reason: "\u8282\u70B9\u5F53\u524D\u4E0D\u5728\u7EBF\uFF0C\u7528\u7684\u662F\u5B83\u4E0A\u6B21\u62A5\u7684\u6E05\u5355" });
-    const requestId = (0, import_node_crypto88.randomUUID)();
+    const requestId = (0, import_node_crypto89.randomUUID)();
     const task = new Promise((resolve12) => {
       const timer = setTimeout(() => {
         modelRefreshWaiters.delete(requestId);
@@ -282546,7 +283349,7 @@ async function startServe(opts) {
             const finishedAt = (/* @__PURE__ */ new Date()).toISOString();
             if (buf || session.runId) {
               await turnStore.appendMessage({
-                id: (0, import_node_crypto88.randomUUID)(),
+                id: (0, import_node_crypto89.randomUUID)(),
                 sessionId: chatSessionId,
                 role: "assistant",
                 content: buf,
@@ -282592,7 +283395,7 @@ async function startServe(opts) {
     chatTargets: {
       inspect: inspectChatTarget,
       createTargetSession: async ({ companyId, agentId, ownerHumanActorId, title }) => {
-        const sessionId = (0, import_node_crypto88.randomUUID)();
+        const sessionId = (0, import_node_crypto89.randomUUID)();
         const nowIso = (/* @__PURE__ */ new Date()).toISOString();
         const binding = await registryStore.getBinding(agentId).catch(() => null);
         await (await chatStoreFor(companyId)).createSession({
@@ -283994,7 +284797,7 @@ async function startServe(opts) {
         }));
       }
       const limits = { wallClockMs: wallClockForKind("planner") };
-      const artifactId = `artifact:planner:${(0, import_node_crypto88.randomUUID)()}`;
+      const artifactId = `artifact:planner:${(0, import_node_crypto89.randomUUID)()}`;
       const handle = await chatRemoteAdapter.spawn({
         actor: planner.id,
         // companyId 同协调者：planner 用的就是默认公司的 actors 服务，漏签会让它一调公司域端点就 404。
@@ -284915,10 +285718,10 @@ async function startServe(opts) {
         if (isDeletedActor(dispatchTarget)) {
           throw new ApiError(409, ACTOR_DELETED_ERROR_CODE, ACTOR_DELETED_CHAT_MESSAGE);
         }
-        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto88.randomUUID)());
+        const runtimeSessionId = sessionId ?? (requestDispatchId ? deterministicUuid(`chat-runtime:${requestDispatchId}`) : (0, import_node_crypto89.randomUUID)());
         const resumeRuntimeSession = Boolean(sessionId);
-        const traceRunId = requestDispatchId ? stableChatTraceRunId(requestDispatchId) : `chat-run:${(0, import_node_crypto88.randomUUID)()}`;
-        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto88.randomUUID)()}`;
+        const traceRunId = requestDispatchId ? stableChatTraceRunId(requestDispatchId) : `chat-run:${(0, import_node_crypto89.randomUUID)()}`;
+        const artifactId = requestDispatchId ? `artifact:chat:${deterministicUuid(`chat-artifact:${requestDispatchId}`)}` : `artifact:chat:${(0, import_node_crypto89.randomUUID)()}`;
         let stableDispatch = requestDispatchId ? await resolveStableChatDispatch({ store: await traceStoreFor(runCompanyId), runId: traceRunId }) : null;
         if (stableDispatch && !stableDispatch.shouldDispatch) {
           if (isHumanSubmitDispatchId(requestDispatchId)) {
@@ -286376,7 +287179,7 @@ async function startServe(opts) {
             console.log(`[new-engine] dispatchWork ${workId} \u662F human work\u2014\u2014\u4E0D\u6D3E runtime\uFF0C\u7B49\u5F85\u4EBA\u5DE5\u5904\u7406`);
             return;
           }
-          const ledgerId = opts2?.protocolRecovery?.dispatchId ?? `dispatch:${(0, import_node_crypto88.randomUUID)()}`;
+          const ledgerId = opts2?.protocolRecovery?.dispatchId ?? `dispatch:${(0, import_node_crypto89.randomUUID)()}`;
           try {
             const inserted = await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -286476,7 +287279,7 @@ async function startServe(opts) {
           const kernelModel = newKernel.model;
           const art = kernelModel.artifacts.get(nodeId);
           const revWid = art?.workspace ?? "";
-          const ledgerId = `dispatch:${(0, import_node_crypto88.randomUUID)()}`;
+          const ledgerId = `dispatch:${(0, import_node_crypto89.randomUUID)()}`;
           try {
             await (await dispatchLedgerFor(companyId)).insertOpen({
               id: ledgerId,
@@ -286870,7 +287673,7 @@ async function startServe(opts) {
         resolveSupplementalContext: server.knowledgeGovernance ? async ({ actorId, artifactId, workOrderId, action, part, runtimeKind, taskMarkdown }) => {
           try {
             const governance = server.knowledgeGovernance;
-            const taskFingerprint = (0, import_node_crypto88.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
+            const taskFingerprint = (0, import_node_crypto89.createHash)("sha256").update(JSON.stringify({ artifactId, workOrderId, action, part: part ?? null, taskMarkdown })).digest("hex");
             const requestContext = {
               organizationId: companyId,
               actorId,
@@ -288333,7 +289136,12 @@ ${nodeFault}` : "");
     const odBase = (process.env["OASIS_OPEN_DESIGN_URL"] ?? "http://127.0.0.1:7457").replace(/\/$/, "");
     const odToken = process.env["OASIS_OPEN_DESIGN_TOKEN"]?.trim() || void 0;
     const boardWatcher = new BoardWatcher({
-      kernel: defaultCompanyKernel,
+      listCompanies: async () => {
+        if (!chatStoreRouter) return [defaultCompanyId];
+        const active = (await controlPlaneStore.listCompanies()).filter((c) => c.status === "active").map((c) => c.id);
+        return [defaultCompanyId, ...active.filter((id) => id !== defaultCompanyId)];
+      },
+      kernelFor: async (companyId) => (await getEngine(companyId)).kernel,
       odBase,
       ...odToken ? { odToken } : {},
       boardKeyOf: deriveBoardKey,
@@ -288342,7 +289150,7 @@ ${nodeFault}` : "");
     boardWatchTimer = setInterval(() => {
       void boardWatcher.tick().catch((err) => console.error(`[board-watch] tick \u5931\u8D25: ${String(err)}`));
     }, 6e4);
-    console.log(`[serve] \u753B\u677F\u76D1\u89C6\u5668\u5DF2\u542F\u7528\uFF08od=${odBase}${odToken ? "\uFF0C\u5E26\u4EE4\u724C" : ""}\uFF0C\u9759\u9ED8\u7A97 10min\uFF0C\u6BCF\u8F6E\u4E0A\u9650 2 \u5C01\u4FE1\uFF1BOASIS_BOARD_WATCH=0 \u53EF\u5173\uFF09`);
+    console.log(`[serve] \u753B\u677F\u76D1\u89C6\u5668\u5DF2\u542F\u7528\uFF08od=${odBase}${odToken ? "\uFF0C\u5E26\u4EE4\u724C" : ""}\uFF0C\u5DE1\u6240\u6709\u516C\u53F8\uFF0C\u6BCF\u7ED3\u675F\u4E00\u8F6E\u5BF9\u8BDD\u5199\u4E00\u5C01\u4FE1\uFF0C\u6BCF\u8F6E\u6BCF\u5BB6\u516C\u53F8\u4E0A\u9650 2 \u5C01\uFF1BOASIS_BOARD_WATCH=0 \u53EF\u5173\uFF09`);
   } else {
     console.log(`[serve] \u753B\u677F\u76D1\u89C6\u5668\u5DF2\u88AB OASIS_BOARD_WATCH=${boardWatchFlag} \u663E\u5F0F\u5173\u95ED`);
   }
@@ -289589,7 +290397,7 @@ var RuntimeQuotaMonitor = class {
 init_wrapper();
 init_src();
 var import_node_os11 = require("node:os");
-var import_node_crypto89 = require("node:crypto");
+var import_node_crypto90 = require("node:crypto");
 init_src8();
 init_src2();
 
@@ -290493,7 +291301,7 @@ var DaemonWsClient = class {
    */
   async queryArtifactStates(artifactIds, timeoutMs = 15e3) {
     if (artifactIds.length === 0) return {};
-    const requestId = (0, import_node_crypto89.randomUUID)();
+    const requestId = (0, import_node_crypto90.randomUUID)();
     return new Promise((resolve12, reject) => {
       const timer = setTimeout(() => {
         this.gcPending.delete(requestId);
@@ -290907,7 +291715,7 @@ function forwardSignal(child, sig, killGroup = (pgid, signal) => {
 // ../cli/src/daemon/machine-id.ts
 var import_node_child_process23 = require("node:child_process");
 var import_node_fs24 = require("node:fs");
-var import_node_crypto90 = require("node:crypto");
+var import_node_crypto91 = require("node:crypto");
 var import_node_os14 = require("node:os");
 function linuxMachineId() {
   for (const p2 of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
@@ -290973,7 +291781,7 @@ var defaultSources = {
 function resolveNodeId(sources = {}) {
   const s2 = { ...defaultSources, ...sources };
   const material = `${s2.machineFingerprint()}:${s2.osUser()}`;
-  const digest = (0, import_node_crypto90.createHash)("sha256").update(material).digest("hex").slice(0, 12);
+  const digest = (0, import_node_crypto91.createHash)("sha256").update(material).digest("hex").slice(0, 12);
   return `node-${digest}`;
 }
 
@@ -292845,13 +293653,13 @@ function ownFlagsFromDecl(command2) {
 }
 
 // ../cli/src/connector-effect-runner.ts
-var import_node_crypto91 = require("node:crypto");
+var import_node_crypto92 = require("node:crypto");
 var import_node_child_process24 = require("node:child_process");
 init_src8();
 function stableKey(effect) {
   const keyFields = Object.fromEntries(Object.entries(effect.keyFields).sort(([a], [b2]) => a.localeCompare(b2)));
   const canonical2 = JSON.stringify({ kind: effect.kind, target: effect.target, keyFields });
-  return `sha256:${(0, import_node_crypto91.createHash)("sha256").update(canonical2).digest("hex")}`;
+  return `sha256:${(0, import_node_crypto92.createHash)("sha256").update(canonical2).digest("hex")}`;
 }
 async function runConnectorEffect(connector, toolArgs, deps) {
   const effect = connector.describeExternalEffect?.(toolArgs) ?? null;
@@ -293406,7 +294214,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
   const timeoutMs = resolveAuthWaitMs();
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), timeoutMs);
-  const waiterId = (0, import_node_crypto92.randomUUID)();
+  const waiterId = (0, import_node_crypto93.randomUUID)();
   process.stderr.write(
     `\u7B49\u5F85\u4EBA\u5DE5\u6388\u6743\u4E2D\u2026\u2026\u6700\u591A ${Math.round(timeoutMs / 1e3)} \u79D2\uFF0C\u8D85\u65F6\u4F1A\u81EA\u52A8\u8F6C\u4E3A\u5F85\u5BA1\uFF1B\u8FD9\u4E0D\u662F\u9519\u8BEF\uFF0C\u8BF7\u52FF\u91CD\u8BD5\u540C\u4E00\u6761\u547D\u4EE4\u3002
 `
@@ -293490,7 +294298,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.81" ? "2.2.81" : "dev";
+var CLI_VERSION = "2.2.83" ? "2.2.83" : "dev";
 function apiHeaders(token, company) {
   const headers = {
     authorization: `Bearer ${token}`,
@@ -293856,7 +294664,7 @@ async function runCli(argv, println = console.log, progressln = console.error) {
     const store = createNodeTokenStore(path39.join(dir, "node-tokens.json"));
     const sub = positional[0];
     if (sub === "issue") {
-      const id = flags.get("id") ?? `node-${(0, import_node_crypto92.randomUUID)()}`;
+      const id = flags.get("id") ?? `node-${(0, import_node_crypto93.randomUUID)()}`;
       const token2 = store.issue(id);
       println(token2);
       process.stderr.write(
@@ -295006,7 +295814,7 @@ ${t.ref}  ${t.name}  [\u5267\u672C=${t.playbookRef}]`);
         if (!name) throw new Error("\u9879\u76EE\u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A");
         const goal = flags.get("goal")?.trim();
         const slug6 = flags.get("slug");
-        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto92.randomUUID)());
+        const id = slug6 !== void 0 ? projectSlug(slug6) : projectIdFromUuid((0, import_node_crypto93.randomUUID)());
         const result = await api.request("POST", "/api/projects", {
           ...id ? { id } : {},
           name,
@@ -295287,7 +296095,13 @@ ${res.warning}`);
         if (live.length > 0) {
           for (const r of live) println(`[design] \u5F15\u64CE\u5728\u8DD1\uFF1Arun ${r.runId.slice(0, 8)} \u72B6\u6001=${r.status}\u2014\u2014\u522B\u518D\u8D77\u65B0\u8F6E\uFF1B\u8FC7\u51E0\u5206\u949F\u518D status\uFF0C\u6216\u672C\u8F6E\u6536\u5DE5\u7B49\u91CD\u6D3E\u3002`);
         } else if (st.runs.length > 0) {
-          for (const r of st.runs.slice(0, 3)) println(`[design] \u8FD1\u671F run\uFF1A${r.runId.slice(0, 8)} \u7EC8\u6001=${r.status}`);
+          for (const r of st.runs.slice(0, 3)) {
+            println(`[design] \u8FD1\u671F run\uFF1A${r.runId.slice(0, 8)} \u7EC8\u6001=${r.status}${r.agentId ? ` \u5F15\u64CE=${r.agentId}` : ""}`);
+            if (r.status === "failed" && r.error) {
+              const reason = r.error.length > 300 ? `${r.error.slice(0, 300)}\u2026` : r.error;
+              println(`[design]   \u5931\u8D25\u539F\u56E0\uFF08od \u539F\u6587\uFF09\uFF1A${reason}`);
+            }
+          }
         } else {
           println(`[design] \u65E0\u5728\u4E16 run \u8BB0\u5F55\uFF08od \u91CD\u542F\u540E\u4E3A\u7A7A\uFF0C\u5C5E\u6B63\u5E38\uFF09\u2014\u2014\u770B\u4E0B\u9762\u677F\u4E0A\u4EA7\u7269\u5373\u6301\u4E45\u771F\u76F8\u3002`);
         }
@@ -295299,7 +296113,7 @@ ${res.warning}`);
         for (const a of st.artifacts) println(`  - ${a.path}\uFF08${a.kind ?? "?"}\uFF09status=${a.status ?? "?"}${a.mtime ? ` \xB7 ${new Date(a.mtime).toISOString()}` : ""}`);
         if (flags.get("pull") === "true") {
           const odPublic = (flags.get("od-public-url") ?? process.env["OASIS_OPEN_DESIGN_PUBLIC_URL"] ?? "https://design.open-friday.com").replace(/\/$/, "");
-          const { dir: dir2, entry } = await harvestBoard(odBase, odFetch, odPublic, os13.tmpdir(), st.boardKey, st.runs[0]?.runId ?? "status-pull");
+          const { dir: dir2, entry } = await harvestBoard(odBase, odFetch, odPublic, os13.tmpdir(), st.boardKey, latestSucceededRun(st.runs)?.runId ?? "status-pull");
           println(`[design] \u5DF2\u62C9\u5230\u672C\u5730\uFF1A${dir2}\uFF08\u5165\u53E3 ${entry}\uFF09`);
           println(`[design] \u8BFB\u5B8C\u6EE1\u610F\u5373\u4EA4\u7A3F\uFF1Aoasis propose ${artifactId} --from-dir ${dir2} --reason "<\u8FD9\u7248\u505A\u4E86\u4EC0\u4E48>"`);
         } else {
@@ -297271,13 +298085,13 @@ function runtimeAssetSourceRoots(input) {
 }
 
 // src/install.ts
-var import_node_crypto93 = require("node:crypto");
+var import_node_crypto94 = require("node:crypto");
 var fs50 = __toESM(require("node:fs"));
 var path45 = __toESM(require("node:path"));
 function versionLabel(sourceFile, pkgVersion, npmPrefixDir, pkgName = LEGACY_PKG_NAME) {
   const tag = pkgName === LEGACY_PKG_NAME ? "" : `+pkg.${pkgName.replace(/[^A-Za-z0-9-]/g, "-")}`;
   if (isFromNpmPrefix(sourceFile, npmPrefixDir)) return `${pkgVersion}${tag}`;
-  const digest = (0, import_node_crypto93.createHash)("sha256").update(fs50.readFileSync(sourceFile)).digest("hex").slice(0, 8);
+  const digest = (0, import_node_crypto94.createHash)("sha256").update(fs50.readFileSync(sourceFile)).digest("hex").slice(0, 8);
   return tag ? `${pkgVersion}${tag}.local.${digest}` : `${pkgVersion}+local.${digest}`;
 }
 function isFromNpmPrefix(sourceFile, npmPrefixDir) {
@@ -297400,7 +298214,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.81" : "dev";
+var PKG_VERSION = true ? "2.2.83" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;
@@ -297708,7 +298522,7 @@ function newInstanceName() {
   const existing = new Set(listInstances());
   if (!existing.has(DEFAULT_INSTANCE)) return DEFAULT_INSTANCE;
   for (; ; ) {
-    const n = `inst-${(0, import_node_crypto94.randomBytes)(3).toString("hex")}`;
+    const n = `inst-${(0, import_node_crypto95.randomBytes)(3).toString("hex")}`;
     if (!existing.has(n)) return n;
   }
 }