From 0a4710871475bd09ae255a2822ff198e556f1d4e Mon Sep 17 00:00:00 2001
From: theater <1347507191@qq.com>
Date: Wed, 23 Sep 2026 15:40:44 +0800
Subject: [PATCH 01/39] fix(update): checkpoint SQLite WAL before desktop
 process restart (#918)

* fix(update): checkpoint SQLite WAL before desktop process restart

In desktop/portable mode, POST /api/update/restart replaced the process
image with os.execv without flushing the SQLite WAL. Because SqlitePool
uses WAL mode with a large autocheckpoint window, all writes since the
last checkpoint were lost on restart (#800).

Change _restart_desktop_process to accept the OctopServer, and before
execv run PRAGMA wal_checkpoint(TRUNCATE) and close the pool when the
database is SQLite. The restart endpoint now injects the server via
Depends(get_server).

Fixes #800.

* style(tests): format desktop restart regression cases
---
 src/octop/api/routers/update.py      |  17 +++-
 tests/unit/api/test_update_router.py | 116 +++++++++++++++++++++++++--
 2 files changed, 126 insertions(+), 7 deletions(-)

diff --git a/src/octop/api/routers/update.py b/src/octop/api/routers/update.py
index 20761ab7..c1899d8f 100644
--- a/src/octop/api/routers/update.py
+++ b/src/octop/api/routers/update.py
@@ -22,6 +22,7 @@
     update_task,
 )
 from octop.infra.errors import ErrorCode, OctopError
+from octop.infra.server import OctopServer
 from octop.infra.setup.github_releases import SOURCE_LABEL
 from octop.infra.setup.self_update import (
     UpgradeResult,
@@ -368,8 +369,19 @@ def _is_desktop_process() -> bool:
     return raw in {"1", "true", "yes", "on"}
 
 
-def _restart_desktop_process() -> None:
+def _restart_desktop_process(server: OctopServer) -> None:
     time.sleep(0.4)
+
+    # Flush SQLite WAL before replacing the process image, otherwise uncheckpointed
+    # writes (common in WAL mode) are lost when the connection FD is closed by execv.
+    if server.services is not None and getattr(server.services.db, "dialect", None) == "sqlite":
+        try:
+            with server.services.db.connect() as conn:
+                conn.execute("PRAGMA wal_checkpoint(TRUNCATE)")
+            server.services.db.close()
+        except Exception:
+            logger.exception("failed to checkpoint/close database before desktop restart")
+
     argv = list(getattr(sys, "orig_argv", None) or [sys.executable, *sys.argv])
     os.execv(argv[0], argv)
 
@@ -384,10 +396,11 @@ def _restart_service_task(runtime: ServiceRuntime) -> None:
 @router.post("/restart")
 async def restart_service_endpoint(
     background_tasks: BackgroundTasks,
+    server: OctopServer = Depends(get_server),
     _: Any = Depends(require_permission("update")),
 ) -> dict[str, Any]:
     if _is_desktop_process():
-        background_tasks.add_task(_restart_desktop_process)
+        background_tasks.add_task(_restart_desktop_process, server)
         return {"status": "restarting", "service_mode": "desktop"}
     mode = detect_service_mode()
     if mode is None:
diff --git a/tests/unit/api/test_update_router.py b/tests/unit/api/test_update_router.py
index 08cbbbc9..ba18bac5 100644
--- a/tests/unit/api/test_update_router.py
+++ b/tests/unit/api/test_update_router.py
@@ -134,24 +134,130 @@ async def test_restart_endpoint_rejects_when_service_not_installed(
 async def test_restart_endpoint_desktop_schedules_process_exec(
     monkeypatch: pytest.MonkeyPatch,
 ) -> None:
-    called: list[bool] = []
+    received: list[object] = []
     monkeypatch.setattr(update_router, "_is_desktop_process", lambda: True)
     monkeypatch.setattr(
         update_router,
         "_restart_desktop_process",
-        lambda: called.append(True),
+        lambda server: received.append(server),
     )
 
     from fastapi import BackgroundTasks
 
+    fake_server = object()
     bg = BackgroundTasks()
-    result = await update_router.restart_service_endpoint(bg, _=None)
+    result = await update_router.restart_service_endpoint(bg, server=fake_server, _=None)
 
     assert result == {"status": "restarting", "service_mode": "desktop"}
-    assert called == []
+    assert received == []
     for task in bg.tasks:
         await task()
-    assert called == [True]
+    assert received == [fake_server]
+
+
+@pytest.mark.asyncio
+async def test_restart_desktop_process_checkpoints_sqlite_wal(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    """Regression for #800: desktop restart must flush WAL before execv."""
+    checkpoints: list[str] = []
+    closes: list[bool] = []
+    exec_args: list[tuple[str, list[str]]] = []
+
+    class FakeConn:
+        def execute(self, sql: str) -> None:
+            checkpoints.append(sql)
+
+    class FakePool:
+        dialect = "sqlite"
+
+        def connect(self):
+            class Ctx:
+                def __enter__(_self):
+                    return FakeConn()
+
+                def __exit__(_self, *args):
+                    return None
+
+            return Ctx()
+
+        def close(self) -> None:
+            closes.append(True)
+
+    class FakeServices:
+        db = FakePool()
+
+    class FakeServer:
+        services = FakeServices()
+
+    monkeypatch.setattr(
+        update_router,
+        "os",
+        type("os", (), {"execv": lambda _self, p, a: exec_args.append((p, a))})(),
+    )
+    monkeypatch.setattr(
+        update_router,
+        "sys",
+        type(
+            "sys", (), {"executable": "/bin/python", "argv": ["octop", "run"], "orig_argv": None}
+        )(),
+    )
+    monkeypatch.setattr(update_router.time, "sleep", lambda _s: None)
+
+    update_router._restart_desktop_process(FakeServer())
+
+    assert len(checkpoints) == 1
+    assert "PRAGMA wal_checkpoint(TRUNCATE)" in checkpoints[0]
+    assert closes == [True]
+    assert len(exec_args) == 1
+
+
+@pytest.mark.asyncio
+async def test_restart_desktop_process_swallows_checkpoint_errors(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    """A failing checkpoint should not prevent restart; data loss is logged."""
+    exec_args: list[tuple[str, list[str]]] = []
+
+    class BadPool:
+        dialect = "sqlite"
+
+        def connect(self):
+            class Ctx:
+                def __enter__(_self):
+                    raise RuntimeError("db busy")
+
+                def __exit__(_self, *args):
+                    return None
+
+            return Ctx()
+
+        def close(self) -> None:
+            pass
+
+    class FakeServices:
+        db = BadPool()
+
+    class FakeServer:
+        services = FakeServices()
+
+    monkeypatch.setattr(
+        update_router,
+        "os",
+        type("os", (), {"execv": lambda _self, p, a: exec_args.append((p, a))})(),
+    )
+    monkeypatch.setattr(
+        update_router,
+        "sys",
+        type(
+            "sys", (), {"executable": "/bin/python", "argv": ["octop", "run"], "orig_argv": None}
+        )(),
+    )
+    monkeypatch.setattr(update_router.time, "sleep", lambda _s: None)
+
+    update_router._restart_desktop_process(FakeServer())
+
+    assert len(exec_args) == 1
 
 
 @pytest.mark.asyncio

From 0b2ac8b66e9e43343df94993c14a7d485d5ccec2 Mon Sep 17 00:00:00 2001
From: Codex <codex@local>
Date: Sat, 3 Oct 2026 23:42:50 +0800
Subject: [PATCH 02/39] fix(ollama): discover user-started local daemon

---
 CHANGELOG.md                                  |  4 ++
 src/octop/api/routers/ollama_models.py        | 12 ++++--
 src/octop/infra/utils/ollama_manager.py       |  6 +--
 tests/unit/api/test_ollama_service_default.py | 41 +++++++++++++++++++
 4 files changed, 56 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f87fb586..1a7ed040 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@
 
 ## [Unreleased]
 
+### Fixed
+
+- Detect models from an already-running Ollama daemon even when FreeOS-managed Ollama startup is disabled; model discovery never starts Ollama unless the user enabled it.
+
 ## [0.0.10] - 2026-10-03
 
 ### Fixed
diff --git a/src/octop/api/routers/ollama_models.py b/src/octop/api/routers/ollama_models.py
index 4d42e2c8..334f517e 100644
--- a/src/octop/api/routers/ollama_models.py
+++ b/src/octop/api/routers/ollama_models.py
@@ -81,15 +81,19 @@ async def list_ollama_models(
     _: Any = Depends(require_permission("ollama_models")),
 ) -> list[OllamaModelResponse]:
     """Return the current Ollama model list via the SDK."""
-    if not _ollama_service_enabled(server):
+    from octop.infra.utils.ollama_manager import (
+        OllamaModelManager,
+        is_ollama_reachable,
+    )
+
+    service_enabled = _ollama_service_enabled(server)
+    if not service_enabled and not is_ollama_reachable():
         raise HTTPException(
             status_code=503,
             detail="Ollama service is disabled. Enable it from the provider card.",
         )
     try:
-        from octop.infra.utils.ollama_manager import OllamaModelManager
-
-        models = OllamaModelManager.list_models()
+        models = OllamaModelManager.list_models(start_if_needed=service_enabled)
     except (OSError, ImportError) as exc:
         logger.warning("Ollama bootstrap failed: %s", exc)
         raise HTTPException(
diff --git a/src/octop/infra/utils/ollama_manager.py b/src/octop/infra/utils/ollama_manager.py
index e29d0c3a..1558922c 100644
--- a/src/octop/infra/utils/ollama_manager.py
+++ b/src/octop/infra/utils/ollama_manager.py
@@ -387,9 +387,9 @@ class OllamaModelManager:
     """High-level wrapper around the Ollama SDK for model lifecycle."""
 
     @staticmethod
-    def list_models() -> list[OllamaModelInfo]:
-        """Return the current model list from ``ollama.list()``."""
-        ollama = _ensure_ollama()
+    def list_models(*, start_if_needed: bool = True) -> list[OllamaModelInfo]:
+        """Return models without starting Ollama unless explicitly allowed."""
+        ollama = _ensure_ollama() if start_if_needed else _ensure_ollama_sdk()
         models: list[OllamaModelInfo] = []
         for m in _iter_ollama_list_models(ollama.list()):
             name = str(m.get("model") or m.get("name") or "")
diff --git a/tests/unit/api/test_ollama_service_default.py b/tests/unit/api/test_ollama_service_default.py
index de913972..53370dda 100644
--- a/tests/unit/api/test_ollama_service_default.py
+++ b/tests/unit/api/test_ollama_service_default.py
@@ -5,6 +5,9 @@
 from types import SimpleNamespace
 from unittest.mock import MagicMock
 
+import pytest
+from fastapi import HTTPException
+
 from octop.api.routers import ollama_models
 
 
@@ -18,3 +21,41 @@ def test_ollama_service_respects_stored_true() -> None:
     server = SimpleNamespace(services=SimpleNamespace(settings_repo=MagicMock()))
     server.services.settings_repo.get.return_value = "true"
     assert ollama_models._ollama_service_enabled(server) is True
+
+
+@pytest.mark.asyncio
+async def test_list_uses_running_daemon_when_service_disabled(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    from octop.infra.utils import ollama_manager as om
+    from octop.infra.utils.ollama_manager import OllamaModelInfo
+
+    monkeypatch.setattr(om, "is_ollama_reachable", lambda: True)
+    listed = MagicMock(return_value=[OllamaModelInfo(name="llama3.2:latest")])
+    monkeypatch.setattr(om.OllamaModelManager, "list_models", listed)
+    server = SimpleNamespace(services=SimpleNamespace(settings_repo=MagicMock()))
+    server.services.settings_repo.get.return_value = "false"
+
+    result = await ollama_models.list_ollama_models(server=server, _=None)
+
+    assert [model.name for model in result] == ["llama3.2:latest"]
+    listed.assert_called_once_with(start_if_needed=False)
+
+
+@pytest.mark.asyncio
+async def test_list_does_not_start_unreachable_daemon_when_service_disabled(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    from octop.infra.utils import ollama_manager as om
+
+    monkeypatch.setattr(om, "is_ollama_reachable", lambda: False)
+    listed = MagicMock()
+    monkeypatch.setattr(om.OllamaModelManager, "list_models", listed)
+    server = SimpleNamespace(services=SimpleNamespace(settings_repo=MagicMock()))
+    server.services.settings_repo.get.return_value = "false"
+
+    with pytest.raises(HTTPException) as exc_info:
+        await ollama_models.list_ollama_models(server=server, _=None)
+
+    assert exc_info.value.status_code == 503
+    listed.assert_not_called()

From fff84117a1cf940ff22620ee2eedf9e756f268f9 Mon Sep 17 00:00:00 2001
From: HUANG Cheng <cheng@duck.com>
Date: Thu, 17 Sep 2026 00:36:40 -0700
Subject: [PATCH 03/39] fix(config): never rewrite an unparseable config.json
 as empty (#730) (#738)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* fix(config): never rewrite an unparseable config.json as empty (#730)

Four call sites read config.json, treated a parse failure as an empty dict and
wrote that back, destroying every other key. One trailing comma plus one
`octop run --port 8088` wiped 17 of 18 keys including the whole `database`
section; the next boot silently came up as a greenfield SQLite instance (fresh
setup-wizard password, zero warnings) while the PostgreSQL data sat unreachable.
Losing `bind_host` the same way is what makes #730's reporter unable to reach
the server from the LAN.

A torn write creates the same precondition with no user error: three of the four
sites wrote config.json with a bare write_text, so a crash / OOM / full disk
mid-write left invalid JSON that the next plugin toggle then wiped.

One shared policy in a new leaf helper, infra/utils/json_file.py:

  absent file            -> {} and write (first run, unchanged)
  valid JSON object      -> merge and write (unchanged)
  unparseable/non-object -> raise CONFIG_FILE_CORRUPT, write nothing

The error names the file and the parser line/column but never the contents,
which hold database credentials. Writes now go through write_json_atomic (temp +
os.replace, fd closed on every path, temp removed on failure) so no reader can
observe a torn file.

Sites: cli/commands/run.py (_save_configfile_overrides, plus
_load_configfile_overrides which used to fall back to launch defaults),
infra/agents/plugins/manager.py (_write_global_plugin_enabled = the dashboard
toggle), infra/setup/service.py (persist_bind_options),
infra/agents/plugins/seed.py. `octop run` / `octop service start` report the
error and exit 1 via fail_octop (now NoReturn) instead of a traceback.

Supersedes the pinned "treat a malformed file as empty so the next run rewrites
it cleanly" contract: its fixture (`{not valid json`) had nothing to lose, so
the test could not observe the destruction. Rewritten as
test_run_reports_corrupt_config_cleanly and
test_run_does_not_overwrite_corrupt_config.

Verified end-to-end against a real OctopServer + real PostgreSQL. Before: one
`octop run --port` flipped driver postgresql -> sqlite, the instance reverted to
the first-run wizard, and users=1/agents=1 were orphaned in PG with no warning.
After: exit 1, config.json byte-identical, boot fails loudly instead of
switching backends. Mutation check: restoring the lenient policy in the helper
reddens 9 tests spanning all four sites.

make all green (3299 passed, 16 skipped); mypy --strict clean; dashboard
`npx tsc --noEmit` clean.

* fix(config): name the file when config.json is corrupt (#730)

`load_config` let a bare `json.JSONDecodeError` escape: it reports a line and
column but never says *which* file failed, and this entry point is reached from
boot, backup and several CLI commands — not only `octop run`. Raise a ValueError
naming the path and the parser position, refuse a non-object document, and never
echo file contents (config.json holds database credentials).

Same policy as infra/utils/json_file.py, duplicated here because octop.config
must stay free of infra imports (AGENTS.md §5).

`octop run` already exits cleanly on a corrupt config through resolve_bind; this
covers the remaining entry points.

make all green (3301 passed, 16 skipped); mypy --strict clean.

* fix(config): preserve config.json permissions in atomic writes

Self-review against CONTRIBUTING.md / AGENTS.md §7 caught a regression in the
atomic writer added earlier in this branch: tempfile.mkstemp creates the temp
file 0600, so replacing config.json silently tightened an existing 0644 file to
0600. Under `octop service start --scope system` that runs as root and writes
into the service user's home, a root-owned 0600 config.json is unreadable by the
service user and the unit cannot start; the bare write_text it replaced produced
the umask default.

write_json_atomic now chmods the temp file to the mode of the file being
replaced, or to `0o666 & ~umask` for a new file — matching the two pre-existing
config.json writers (infra/db/rebind.py, infra/backup/auto.py; both
write_text + replace) rather than mkstemp's 0600. POSIX-guarded, so Windows
behaviour is unchanged and no test asserts mode bits off POSIX (AGENTS.md §7).

Also adds the missing CHANGELOG line for the load_config error-message change.

Verified: new file -> 0644, existing 0644 -> 0644, existing 0600 -> 0600.
make all green (3303 passed, 16 skipped); make typecheck-frontend green;
eslint 0 errors (67 pre-existing react-hooks warnings).

Note: `make check-all` is red on develop itself — prettier --check fails on
dashboard/src/pages/Agent/Skills/components/SkillsTabs.tsx exactly as committed
by 83378876. Left untouched here; confirmed pre-existing by checking develop's
version of that file in isolation.
---
 CHANGELOG.md                               |   1 +
 dashboard/src/locales/en.json              |   3 +-
 dashboard/src/locales/zh.json              |   3 +-
 src/octop/cli/commands/run.py              |  99 +++++++++----------
 src/octop/cli/commands/service.py          |  13 ++-
 src/octop/cli/support/errors.py            |   4 +-
 src/octop/config.py                        |  22 ++++-
 src/octop/i18n/en.json                     |   3 +-
 src/octop/i18n/zh.json                     |   3 +-
 src/octop/infra/agents/plugins/manager.py  |  31 +++---
 src/octop/infra/agents/plugins/seed.py     |  27 +++--
 src/octop/infra/errors.py                  |  11 +++
 src/octop/infra/setup/service.py           |  30 +++---
 src/octop/infra/utils/json_file.py         | 109 +++++++++++++++++++++
 tests/unit/cli/test_run_bind_resolution.py |  78 ++++++++++++++-
 tests/unit/cli/test_run_cmd.py             |  49 ++++++---
 tests/unit/i18n/test_errors.py             |   9 ++
 tests/unit/infra/setup/test_service.py     |  13 +++
 tests/unit/infra/utils/test_json_file.py   | 107 ++++++++++++++++++++
 tests/unit/test_config.py                  |  22 +++++
 tests/unit/test_plugin_manager.py          |  35 +++++++
 tests/unit/test_plugin_seed.py             |  18 ++++
 22 files changed, 577 insertions(+), 113 deletions(-)
 create mode 100644 src/octop/infra/utils/json_file.py
 create mode 100644 tests/unit/infra/utils/test_json_file.py

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1a7ed040..95e96071 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@
 ### Fixed
 
 - Detect models from an already-running Ollama daemon even when FreeOS-managed Ollama startup is disabled; model discovery never starts Ollama unless the user enabled it.
+- Preserve `config.json` when it is malformed: startup and all configuration writers now report the file and parser position, avoid leaking stored credentials, and use atomic replacement instead of silently rebuilding an empty configuration.
 
 ## [0.0.10] - 2026-10-03
 
diff --git a/dashboard/src/locales/en.json b/dashboard/src/locales/en.json
index d361d312..a80b207a 100644
--- a/dashboard/src/locales/en.json
+++ b/dashboard/src/locales/en.json
@@ -440,7 +440,8 @@
     "INVITE_RATE_LIMITED": "Too many invite attempts. Try again later.",
     "WORKSPACE_ROOT_RESTRICTED": "The selected storage root is outside the allowed directory for this account.",
     "TOKEN_QUOTA_EXCEEDED": "This account has reached its token quota. Please contact an administrator to raise the limit ({{used}}/{{quota}}).",
-    "LOCAL_MODEL_REGISTER_FAILED": "Could not register the local model: {{reason}}"
+    "LOCAL_MODEL_REGISTER_FAILED": "Could not register the local model: {{reason}}",
+    "CONFIG_FILE_CORRUPT": "Cannot update {{path}}: the file is not valid JSON ({{detail}}). Fix the syntax and retry — no settings were changed."
   },
   "nav": {
     "chat": "Conversation",
diff --git a/dashboard/src/locales/zh.json b/dashboard/src/locales/zh.json
index 3cc0ad3e..edb2a764 100644
--- a/dashboard/src/locales/zh.json
+++ b/dashboard/src/locales/zh.json
@@ -440,7 +440,8 @@
     "INVITE_RATE_LIMITED": "邀请尝试次数过多，请稍后再试。",
     "WORKSPACE_ROOT_RESTRICTED": "所选存储根目录超出了该账号允许的范围。",
     "TOKEN_QUOTA_EXCEEDED": "该账号已达到 token 配额上限，请联系管理员提升额度（{{used}}/{{quota}}）。",
-    "LOCAL_MODEL_REGISTER_FAILED": "无法注册本地模型：{{reason}}"
+    "LOCAL_MODEL_REGISTER_FAILED": "无法注册本地模型：{{reason}}",
+    "CONFIG_FILE_CORRUPT": "无法更新 {{path}}：该文件不是合法 JSON（{{detail}}）。请修正语法后重试；现有配置未被改动。"
   },
   "nav": {
     "chat": "对话",
diff --git a/src/octop/cli/commands/run.py b/src/octop/cli/commands/run.py
index 643cf90e..5ce91c7c 100644
--- a/src/octop/cli/commands/run.py
+++ b/src/octop/cli/commands/run.py
@@ -2,15 +2,16 @@
 
 from __future__ import annotations
 
-import contextlib
-import json
-import os
-import tempfile
-from pathlib import Path
-
 import click
 
+from octop.cli.support.errors import fail_octop
 from octop.config import env_bind_overrides
+from octop.infra.errors import OctopError, corrupt_config_error
+from octop.infra.utils.json_file import (
+    JsonFileCorruptError,
+    read_json_object,
+    write_json_atomic,
+)
 from octop.infra.utils.paths import PathLayout
 
 
@@ -69,20 +70,29 @@ def _maybe_generate_self_signed(
 
 
 def _load_configfile_overrides() -> tuple[str | None, int | None]:
+    """Read ``bind_host`` / ``port`` from ``config.json``.
+
+    An absent or unreadable file falls back to the launch defaults, but a
+    *corrupt* one raises: silently ignoring it would bind defaults while
+    discarding every other setting, and boot would then die with a bare
+    ``JSONDecodeError`` traceback instead of an actionable message.
+    """
     cfg_path = PathLayout.from_env().config
-    if not cfg_path.exists():
+    try:
+        data = read_json_object(cfg_path)
+    except JsonFileCorruptError as exc:
+        raise corrupt_config_error(exc.path, exc.detail) from exc
+    except OSError:
         return None, None
-    with contextlib.suppress(OSError, json.JSONDecodeError):
-        data = json.loads(cfg_path.read_text(encoding="utf-8"))
-        if isinstance(data, dict):
-            # Prefer new key "bind_host"; fall back to legacy "host" for old configs.
-            host = data.get("bind_host") or data.get("host")
-            port = data.get("port")
-            return (
-                host if isinstance(host, str) else None,
-                port if isinstance(port, int) and not isinstance(port, bool) else None,
-            )
-    return None, None
+    if data is None:
+        return None, None
+    # Prefer new key "bind_host"; fall back to legacy "host" for old configs.
+    host = data.get("bind_host") or data.get("host")
+    port = data.get("port")
+    return (
+        host if isinstance(host, str) else None,
+        port if isinstance(port, int) and not isinstance(port, bool) else None,
+    )
 
 
 def resolve_bind(host: str | None, port: int | None) -> tuple[str | None, int | None]:
@@ -96,48 +106,30 @@ def resolve_bind(host: str | None, port: int | None) -> tuple[str | None, int |
     return resolved_host, resolved_port
 
 
-def _atomic_write_json(path: Path, data: dict[str, object]) -> None:
-    """Write JSON atomically: temp file + ``os.replace`` to avoid torn writes.
+def _save_configfile_overrides(host: str | None, port: int | None) -> None:
+    """Persist resolved host/port to config.json (read-merge-write, atomic).
 
-    Uses ``os.write`` with pre-encoded bytes (instead of ``os.fdopen``) so the
-    file descriptor is owned and closed deterministically, even if encoding
-    is unavailable or the process is interrupted mid-write.
+    A corrupt config.json is a hard error, never an empty base: merging into
+    ``{}`` and writing back destroys every other setting (issue #730 — one
+    trailing comma plus ``octop run --port`` wiped the ``database`` section and
+    silently flipped a PostgreSQL instance back to greenfield SQLite).
     """
-    payload = (json.dumps(data, indent=2) + "\n").encode("utf-8")
-    fd, tmp_name = tempfile.mkstemp(dir=path.parent, prefix=".config.", suffix=".tmp")
-    try:
-        try:
-            os.write(fd, payload)
-        finally:
-            # Always close — covers the case where ``os.write`` itself raises
-            # (disk full, EIO, EPIPE) so the fd does not leak.
-            os.close(fd)
-        os.replace(tmp_name, path)
-    except BaseException:  # also covers KeyboardInterrupt / SystemExit
-        # Best-effort cleanup of the temp file on any failure path.
-        with contextlib.suppress(OSError):
-            os.unlink(tmp_name)
-        raise
-
-
-def _save_configfile_overrides(host: str | None, port: int | None) -> None:
-    """Persist resolved host/port to config.json (read-merge-write, atomic)."""
     paths = PathLayout.from_env()
     paths.ensure_root()
     cfg_path = paths.config
-    data: dict[str, object] = {}
-    if cfg_path.exists():
-        with contextlib.suppress(OSError, json.JSONDecodeError):
-            loaded = json.loads(cfg_path.read_text(encoding="utf-8"))
-            if isinstance(loaded, dict):
-                data = loaded
+    try:
+        data = read_json_object(cfg_path)
+    except JsonFileCorruptError as exc:
+        raise corrupt_config_error(exc.path, exc.detail) from exc
+    if data is None:
+        data = {}
     if host is not None:
         data["bind_host"] = host
     if port is not None:
         data["port"] = port
     click.echo(f"Saved config to {cfg_path}")
     try:
-        _atomic_write_json(cfg_path, data)
+        write_json_atomic(cfg_path, data)
     except OSError as exc:
         click.echo(f"Warning: could not save config.json: {exc}", err=True)
 
@@ -181,9 +173,12 @@ def run(
     starts.
     """
     cli_host, cli_port = host, port
-    host, port = resolve_bind(host, port)
-    if cli_host is not None or cli_port is not None:
-        _save_configfile_overrides(cli_host, cli_port)
+    try:
+        host, port = resolve_bind(host, port)
+        if cli_host is not None or cli_port is not None:
+            _save_configfile_overrides(cli_host, cli_port)
+    except OctopError as exc:
+        fail_octop(exc)
     certfile, keyfile = _maybe_generate_self_signed(ssl, ssl_certfile, ssl_keyfile)
     _run_uvicorn(
         host=host,
diff --git a/src/octop/cli/commands/service.py b/src/octop/cli/commands/service.py
index b23f9af5..168a9cbd 100644
--- a/src/octop/cli/commands/service.py
+++ b/src/octop/cli/commands/service.py
@@ -2,8 +2,11 @@
 
 from __future__ import annotations
 
+from typing import NoReturn
+
 import click
 
+from octop.infra.errors import OctopError
 from octop.infra.setup.service import (
     DEFAULT_HEALTH_ATTEMPTS,
     DEFAULT_HEALTH_DELAY_SECONDS,
@@ -35,7 +38,7 @@ def _runtime(host: str | None, port: int | None, scope: ServiceScope | None) ->
         raise SystemExit(1) from exc
 
 
-def _fail(exc: Exception) -> None:
+def _fail(exc: Exception) -> NoReturn:
     click.echo(f"error: {exc}", err=True)
     raise SystemExit(1) from exc
 
@@ -125,13 +128,13 @@ def _echo_summary_for(runtime: ServiceRuntime, *, warn_health: bool) -> None:
 def start(host: str | None, port: int | None, force_install: bool, scope: str) -> None:
     """Install if needed, ensure the NOFILE drop-in, then start the service."""
     runtime = _runtime(host, port, _resolve_scope(scope))
-    if host is not None or port is not None:
-        persist_bind_options(runtime.home, host=host, port=port)
-        runtime = _runtime(host, port, _resolve_scope(scope))
     try:
+        if host is not None or port is not None:
+            persist_bind_options(runtime.home, host=host, port=port)
+            runtime = _runtime(host, port, _resolve_scope(scope))
         wrote = install_service(runtime, force=force_install)
         start_service(runtime, apply_unit=wrote)
-    except RuntimeError as exc:
+    except (RuntimeError, OctopError) as exc:
         _fail(exc)
     _echo_summary_for(runtime, warn_health=True)
 
diff --git a/src/octop/cli/support/errors.py b/src/octop/cli/support/errors.py
index efa4f2b3..d445a176 100644
--- a/src/octop/cli/support/errors.py
+++ b/src/octop/cli/support/errors.py
@@ -2,11 +2,13 @@
 
 from __future__ import annotations
 
+from typing import NoReturn
+
 import click
 
 from octop.infra.errors import OctopError
 
 
-def fail_octop(exc: OctopError) -> None:
+def fail_octop(exc: OctopError) -> NoReturn:
     click.echo(f"error: {exc.message}", err=True)
     raise SystemExit(1) from exc
diff --git a/src/octop/config.py b/src/octop/config.py
index 8a396882..4d61334a 100644
--- a/src/octop/config.py
+++ b/src/octop/config.py
@@ -410,10 +410,28 @@ def env_bind_overrides() -> tuple[str | None, int | None]:
 
 
 def load_config(path: Path) -> OctopConfig:
-    """Load ``config.json``; write defaults if absent. Apply env overrides."""
+    """Load ``config.json``; write defaults if absent. Apply env overrides.
+
+    A corrupt file raises with the path and parser position named, and is never
+    treated as empty: this is the same policy as ``infra/utils/json_file.py``,
+    duplicated here because ``octop.config`` must stay free of ``infra`` imports
+    (AGENTS.md §5). The message never echoes file contents — they hold database
+    credentials.
+    """
     file_defaults = _defaults_for_file()
     if path.exists():
-        raw = json.loads(path.read_text(encoding="utf-8"))
+        try:
+            raw = json.loads(path.read_text(encoding="utf-8"))
+        except json.JSONDecodeError as exc:
+            raise ValueError(
+                f"{path} is not valid JSON (line {exc.lineno}, column {exc.colno});"
+                " fix it and retry — no settings were changed"
+            ) from exc
+        if not isinstance(raw, dict):
+            raise ValueError(
+                f"{path} must contain a JSON object, got {type(raw).__name__};"
+                " fix it and retry — no settings were changed"
+            )
         database_in_file = "database" in raw
     else:
         path.parent.mkdir(parents=True, exist_ok=True)
diff --git a/src/octop/i18n/en.json b/src/octop/i18n/en.json
index ab42ce25..a51f35e9 100644
--- a/src/octop/i18n/en.json
+++ b/src/octop/i18n/en.json
@@ -405,7 +405,8 @@
     "INVITE_RATE_LIMITED": "Too many invite attempts. Try again later.",
     "WORKSPACE_ROOT_RESTRICTED": "The selected storage root is outside the allowed directory for this account.",
     "TOKEN_QUOTA_EXCEEDED": "This account has reached its token quota. Please contact an administrator to raise the limit ({used}/{quota}).",
-    "LOCAL_MODEL_REGISTER_FAILED": "Could not register the local model: {reason}"
+    "LOCAL_MODEL_REGISTER_FAILED": "Could not register the local model: {reason}",
+    "CONFIG_FILE_CORRUPT": "Cannot update {path}: the file is not valid JSON ({detail}). Fix the syntax and retry — no settings were changed."
   },
   "desktop": {
     "install_log_deps": "Installing Python dependencies…",
diff --git a/src/octop/i18n/zh.json b/src/octop/i18n/zh.json
index 9ed4b607..0f9f7c5d 100644
--- a/src/octop/i18n/zh.json
+++ b/src/octop/i18n/zh.json
@@ -405,7 +405,8 @@
     "INVITE_RATE_LIMITED": "邀请尝试次数过多，请稍后再试。",
     "WORKSPACE_ROOT_RESTRICTED": "所选存储根目录超出了该账号允许的范围。",
     "TOKEN_QUOTA_EXCEEDED": "该账号已达到 token 配额上限，请联系管理员提升额度（{used}/{quota}）。",
-    "LOCAL_MODEL_REGISTER_FAILED": "无法注册本地模型：{reason}"
+    "LOCAL_MODEL_REGISTER_FAILED": "无法注册本地模型：{reason}",
+    "CONFIG_FILE_CORRUPT": "无法更新 {path}：该文件不是合法 JSON（{detail}）。请修正语法后重试；现有配置未被改动。"
   },
   "desktop": {
     "install_log_deps": "正在安装 Python 依赖…",
diff --git a/src/octop/infra/agents/plugins/manager.py b/src/octop/infra/agents/plugins/manager.py
index 56596498..1ad51d27 100644
--- a/src/octop/infra/agents/plugins/manager.py
+++ b/src/octop/infra/agents/plugins/manager.py
@@ -24,7 +24,12 @@
     unload_plugin,
 )
 
-from octop.infra.errors import ErrorCode, OctopError
+from octop.infra.errors import ErrorCode, OctopError, corrupt_config_error
+from octop.infra.utils.json_file import (
+    JsonFileCorruptError,
+    read_json_object,
+    write_json_atomic,
+)
 
 logger = logging.getLogger(__name__)
 
@@ -73,15 +78,18 @@ def _read_global_plugins(config_path: Path) -> dict[str, bool]:
 
 
 def _write_global_plugin_enabled(config_path: Path, plugin_id: str, enabled: bool) -> None:
-    """Merge ``plugins.<id>.enabled`` into ``config.json`` without dropping other keys."""
-    data: dict[str, Any] = {}
-    if config_path.is_file():
-        try:
-            raw = json.loads(config_path.read_text(encoding="utf-8"))
-            if isinstance(raw, dict):
-                data = raw
-        except Exception:
-            data = {}
+    """Merge ``plugins.<id>.enabled`` into ``config.json`` without dropping other keys.
+
+    A corrupt config.json raises instead of being treated as empty: merging into
+    ``{}`` and writing back destroys every other setting, including the
+    ``database`` section (issue #730).
+    """
+    try:
+        data = read_json_object(config_path)
+    except JsonFileCorruptError as exc:
+        raise corrupt_config_error(exc.path, exc.detail) from exc
+    if data is None:
+        data = {}
     plugins = data.get("plugins")
     if not isinstance(plugins, dict):
         plugins = {}
@@ -91,8 +99,7 @@ def _write_global_plugin_enabled(config_path: Path, plugin_id: str, enabled: boo
         entry = {}
     entry["enabled"] = bool(enabled)
     plugins[plugin_id] = entry
-    config_path.parent.mkdir(parents=True, exist_ok=True)
-    config_path.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
+    write_json_atomic(config_path, data)
 
 
 def _assert_http_url(url: str) -> None:
diff --git a/src/octop/infra/agents/plugins/seed.py b/src/octop/infra/agents/plugins/seed.py
index ba2dcbac..9fa79a61 100644
--- a/src/octop/infra/agents/plugins/seed.py
+++ b/src/octop/infra/agents/plugins/seed.py
@@ -2,27 +2,36 @@
 
 from __future__ import annotations
 
-import json
 import shutil
 from pathlib import Path
 from typing import Any
 
 import yaml
 
+from octop.infra.errors import corrupt_config_error
+from octop.infra.utils.json_file import (
+    JsonFileCorruptError,
+    read_json_object,
+    write_json_atomic,
+)
+
 
 def _read_config(config_path: Path) -> dict[str, Any]:
-    if not config_path.is_file():
-        return {}
+    """Load ``config.json`` for merging; ``{}`` when absent.
+
+    A corrupt file raises instead of reading as empty: ``seed_bundled_plugins``
+    always writes back, so merging into ``{}`` would destroy every other setting
+    (issue #730).
+    """
     try:
-        raw = json.loads(config_path.read_text(encoding="utf-8"))
-    except Exception:
-        return {}
-    return raw if isinstance(raw, dict) else {}
+        data = read_json_object(config_path)
+    except JsonFileCorruptError as exc:
+        raise corrupt_config_error(exc.path, exc.detail) from exc
+    return data if data is not None else {}
 
 
 def _write_config(config_path: Path, data: dict[str, Any]) -> None:
-    config_path.parent.mkdir(parents=True, exist_ok=True)
-    config_path.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
+    write_json_atomic(config_path, data)
 
 
 def _plugin_version(plugin_dir: Path) -> tuple[int, ...]:
diff --git a/src/octop/infra/errors.py b/src/octop/infra/errors.py
index 23344cc8..5033812c 100644
--- a/src/octop/infra/errors.py
+++ b/src/octop/infra/errors.py
@@ -110,6 +110,7 @@ class ErrorCode(StrEnum):
     WORKSPACE_ROOT_RESTRICTED = "WORKSPACE_ROOT_RESTRICTED"
     TOKEN_QUOTA_EXCEEDED = "TOKEN_QUOTA_EXCEEDED"
     LOCAL_MODEL_REGISTER_FAILED = "LOCAL_MODEL_REGISTER_FAILED"
+    CONFIG_FILE_CORRUPT = "CONFIG_FILE_CORRUPT"
 
 
 _DEFAULT_STATUS: dict[ErrorCode, int] = {
@@ -211,6 +212,7 @@ class ErrorCode(StrEnum):
     ErrorCode.WORKSPACE_ROOT_RESTRICTED: 400,
     ErrorCode.TOKEN_QUOTA_EXCEEDED: 403,
     ErrorCode.LOCAL_MODEL_REGISTER_FAILED: 400,
+    ErrorCode.CONFIG_FILE_CORRUPT: 400,
 }
 
 
@@ -260,3 +262,12 @@ def to_envelope(self, *, locale: str | Locale | None = None) -> dict[str, Any]:
                 "details": self.details,
             }
         }
+
+
+def corrupt_config_error(path: object, detail: str) -> OctopError:
+    """Report invalid JSON without exposing configuration contents."""
+    return OctopError(
+        ErrorCode.CONFIG_FILE_CORRUPT,
+        f"{path} is not valid JSON ({detail}); fix it and retry — no settings were changed",
+        details={"path": str(path), "detail": detail},
+    )
diff --git a/src/octop/infra/setup/service.py b/src/octop/infra/setup/service.py
index a81abfee..f84fc77a 100644
--- a/src/octop/infra/setup/service.py
+++ b/src/octop/infra/setup/service.py
@@ -2,7 +2,6 @@
 
 from __future__ import annotations
 
-import json
 import logging
 import os
 import platform
@@ -11,13 +10,18 @@
 import sys
 import tempfile
 import time
-from contextlib import suppress
 from dataclasses import dataclass
 from pathlib import Path
 from typing import Literal
 
 from octop.config import load_config
+from octop.infra.errors import corrupt_config_error
 from octop.infra.utils import posix_compat as pwd
+from octop.infra.utils.json_file import (
+    JsonFileCorruptError,
+    read_json_object,
+    write_json_atomic,
+)
 from octop.infra.utils.paths import PathLayout
 from octop.infra.utils.posix_compat import chown, geteuid, getuid, is_root
 
@@ -232,22 +236,26 @@ def resolve_service_home(*, run_as_user: str | None = None) -> Path:
 
 
 def persist_bind_options(home: Path, *, host: str | None = None, port: int | None = None) -> None:
-    """Write bind host/port into ``config.json`` before (re)installing the unit."""
+    """Write bind host/port into ``config.json`` before (re)installing the unit.
+
+    Raises on a corrupt config.json rather than treating it as empty — writing a
+    merged-into-``{}`` dict would destroy every other setting, including the
+    ``database`` section (issue #730).
+    """
     if host is None and port is None:
         return
     config_path = home / "config.json"
-    data: dict[str, object] = {}
-    if config_path.is_file():
-        with suppress(OSError, json.JSONDecodeError):
-            loaded = json.loads(config_path.read_text(encoding="utf-8"))
-            if isinstance(loaded, dict):
-                data = loaded
+    try:
+        data = read_json_object(config_path)
+    except JsonFileCorruptError as exc:
+        raise corrupt_config_error(exc.path, exc.detail) from exc
+    if data is None:
+        data = {}
     if host is not None:
         data["bind_host"] = host
     if port is not None:
         data["port"] = port
-    home.mkdir(parents=True, exist_ok=True)
-    config_path.write_text(json.dumps(data, indent=2) + "\n", encoding="utf-8")
+    write_json_atomic(config_path, data)
 
 
 def resolve_bind_options(home: Path | None = None) -> tuple[str, int]:
diff --git a/src/octop/infra/utils/json_file.py b/src/octop/infra/utils/json_file.py
new file mode 100644
index 00000000..184904d4
--- /dev/null
+++ b/src/octop/infra/utils/json_file.py
@@ -0,0 +1,109 @@
+"""Safe read/write helpers for the small JSON config files under ``OCTOP_HOME``.
+
+Leaf module (AGENTS.md §5): stdlib only, no ``infra`` imports. Callers translate
+:class:`JsonFileCorruptError` into ``OctopError`` via
+``octop.infra.errors.corrupt_config_error``.
+
+Both helpers exist because of issue #730: four call sites used to treat an
+unparseable ``config.json`` as an empty dict and then wrote that back, silently
+destroying every other key. One trailing comma plus one ``octop run --port``
+wiped the ``database`` section and flipped a running PostgreSQL instance back to
+a greenfield SQLite one, with no warning in the log. A torn write from a crash or
+a full disk creates the same precondition without any user error, so writes here
+are atomic too.
+"""
+
+from __future__ import annotations
+
+import contextlib
+import json
+import os
+import stat
+import tempfile
+from pathlib import Path
+from typing import Any
+
+__all__ = ["JsonFileCorruptError", "read_json_object", "write_json_atomic"]
+
+
+def _default_file_mode() -> int:
+    """The mode a plain ``write_text`` would produce (``0o666 & ~umask``).
+
+    POSIX has no get-only umask call, so read it by set-and-restore. Matches the
+    two pre-existing config.json writers (``db/rebind.py``, ``backup/auto.py``)
+    instead of leaving ``mkstemp``'s 0600, which would make a root-created
+    config.json unreadable to the service user after
+    ``octop service start --scope system``.
+    """
+    mask = os.umask(0o022)
+    os.umask(mask)
+    return 0o666 & ~mask
+
+
+class JsonFileCorruptError(ValueError):
+    """A JSON file exists but cannot be parsed into an object.
+
+    Carries the path and the parser position only — never the file contents or
+    any value from them, since ``config.json`` holds database credentials and
+    secrets (precedent: ``octop.config`` refuses to log raw env values).
+    """
+
+    def __init__(self, path: Path, detail: str) -> None:
+        self.path = path
+        self.detail = detail
+        super().__init__(f"{path} is not valid JSON ({detail})")
+
+
+def read_json_object(path: Path) -> dict[str, Any] | None:
+    """Return the JSON object at ``path``, or ``None`` when the file is absent.
+
+    Raises :class:`JsonFileCorruptError` when the file exists but is not valid
+    JSON or is not a JSON object. Callers must **not** fall back to an empty
+    dict: merging into ``{}`` and writing back is what destroys every other
+    setting. An absent file is legitimate (first run) and yields ``None``.
+    """
+    if not path.is_file():
+        return None
+    try:
+        raw = path.read_text(encoding="utf-8")
+    except UnicodeDecodeError as exc:
+        raise JsonFileCorruptError(path, "not valid UTF-8") from exc
+    try:
+        parsed = json.loads(raw)
+    except json.JSONDecodeError as exc:
+        raise JsonFileCorruptError(path, f"line {exc.lineno}, column {exc.colno}") from exc
+    if not isinstance(parsed, dict):
+        raise JsonFileCorruptError(path, f"expected a JSON object, got {type(parsed).__name__}")
+    return parsed
+
+
+def write_json_atomic(path: Path, data: dict[str, Any]) -> None:
+    """Write ``data`` as pretty JSON via temp file + ``os.replace``.
+
+    Readers never observe a partially written file, so an interrupted write
+    cannot leave the truncated JSON that :func:`read_json_object` then refuses
+    to merge. The temp file is unique per call (``mkstemp``), so concurrent
+    writers cannot share one ``.tmp`` name.
+
+    Permissions follow the file being replaced, or the process umask for a new
+    file — a config write must never silently tighten or loosen the mode of a
+    file the user already had.
+    """
+    payload = (json.dumps(data, indent=2) + "\n").encode("utf-8")
+    path.parent.mkdir(parents=True, exist_ok=True)
+    existing_mode: int | None = None
+    if os.name == "posix" and path.exists():
+        existing_mode = stat.S_IMODE(path.stat().st_mode)
+    fd, tmp_name = tempfile.mkstemp(dir=path.parent, prefix=f".{path.name}.", suffix=".tmp")
+    try:
+        try:
+            os.write(fd, payload)
+        finally:
+            os.close(fd)
+        if os.name == "posix":
+            os.chmod(tmp_name, _default_file_mode() if existing_mode is None else existing_mode)
+        os.replace(tmp_name, path)
+    except BaseException:  # also covers KeyboardInterrupt / SystemExit
+        with contextlib.suppress(OSError):
+            os.unlink(tmp_name)
+        raise
diff --git a/tests/unit/cli/test_run_bind_resolution.py b/tests/unit/cli/test_run_bind_resolution.py
index ff7c72ac..a5985647 100644
--- a/tests/unit/cli/test_run_bind_resolution.py
+++ b/tests/unit/cli/test_run_bind_resolution.py
@@ -4,10 +4,13 @@
 
 import json
 from pathlib import Path
+from unittest.mock import patch
 
 import pytest
+from click.testing import CliRunner
 
-from octop.cli.commands.run import resolve_bind
+from octop.cli.commands.run import _save_configfile_overrides, resolve_bind, run
+from octop.infra.errors import ErrorCode, OctopError
 
 
 @pytest.fixture
@@ -55,3 +58,76 @@ def test_invalid_env_port_falls_back_to_file(
 def test_legacy_host_key(octop_home: Path) -> None:
     _write_config(octop_home, host="192.168.1.10", port=1234)
     assert resolve_bind(None, None) == ("192.168.1.10", 1234)
+
+
+# --- issue #730: a corrupt config.json must never be treated as empty --------
+
+
+def _corrupt(text: str) -> str:
+    """Append a trailing comma before the closing brace (classic hand-edit slip)."""
+    stripped = text.rstrip()
+    assert stripped.endswith("}")
+    return stripped[:-1].rstrip() + ",}"
+
+
+def test_corrupt_config_raises_instead_of_silently_using_defaults(octop_home: Path) -> None:
+    (octop_home / "config.json").write_text('{"bind_host": "0.0.0.0",}', encoding="utf-8")
+    with pytest.raises(OctopError) as excinfo:
+        resolve_bind(None, None)
+    assert excinfo.value.code is ErrorCode.CONFIG_FILE_CORRUPT
+
+
+def test_save_overrides_on_corrupt_config_preserves_bytes(octop_home: Path) -> None:
+    cfg = octop_home / "config.json"
+    corrupt = _corrupt(
+        json.dumps({"bind_host": "0.0.0.0", "database": {"driver": "postgresql"}}, indent=2)
+    )
+    cfg.write_text(corrupt, encoding="utf-8")
+    with pytest.raises(OctopError) as excinfo:
+        _save_configfile_overrides(None, 8088)
+    assert excinfo.value.code is ErrorCode.CONFIG_FILE_CORRUPT
+    assert cfg.read_text(encoding="utf-8") == corrupt
+
+
+def test_save_overrides_merges_without_dropping_keys(octop_home: Path) -> None:
+    cfg = octop_home / "config.json"
+    cfg.write_text(
+        json.dumps(
+            {
+                "bind_host": "0.0.0.0",
+                "database": {"driver": "postgresql", "host": "db.internal"},
+                "log_level": "debug",
+            }
+        ),
+        encoding="utf-8",
+    )
+    _save_configfile_overrides(None, 8088)
+    data = json.loads(cfg.read_text(encoding="utf-8"))
+    assert data["port"] == 8088
+    assert data["bind_host"] == "0.0.0.0"
+    assert data["database"] == {"driver": "postgresql", "host": "db.internal"}
+    assert data["log_level"] == "debug"
+
+
+def test_run_cli_on_corrupt_config_refuses_and_preserves_file(octop_home: Path) -> None:
+    """POC regression: ``octop run --port`` used to wipe config.json to one key."""
+    cfg = octop_home / "config.json"
+    cfg.write_text(
+        json.dumps(
+            {
+                "bind_host": "0.0.0.0",
+                "database": {"driver": "postgresql", "host": "db.internal"},
+            },
+            indent=2,
+        ),
+        encoding="utf-8",
+    )
+    corrupt = _corrupt(cfg.read_text(encoding="utf-8"))
+    cfg.write_text(corrupt, encoding="utf-8")
+
+    with patch("octop.cli.commands.run._run_uvicorn") as mocked:
+        result = CliRunner().invoke(run, ["--port", "8088"])
+
+    assert result.exit_code != 0
+    assert not mocked.called
+    assert cfg.read_text(encoding="utf-8") == corrupt
diff --git a/tests/unit/cli/test_run_cmd.py b/tests/unit/cli/test_run_cmd.py
index 445e66b8..341b49bc 100644
--- a/tests/unit/cli/test_run_cmd.py
+++ b/tests/unit/cli/test_run_cmd.py
@@ -2,8 +2,10 @@
 
 from __future__ import annotations
 
+import contextlib
 import json
 from pathlib import Path
+from typing import Any
 
 import pytest
 from click.testing import CliRunner
@@ -182,10 +184,22 @@ def _fake(**_kw: object) -> None:
     assert data == {"theme": "dark", "bind_host": "0.0.0.0", "port": 80}
 
 
-def test_run_handles_corrupt_config_without_crashing(
+def _all_output(result: Any) -> str:
+    """stdout + stderr across click versions (8.2+ can separate the streams)."""
+    text = result.output or ""
+    with contextlib.suppress(ValueError, AttributeError):
+        text += result.stderr
+    return text
+
+
+def test_run_reports_corrupt_config_cleanly(
     monkeypatch: pytest.MonkeyPatch, tmp_path: Path
 ) -> None:
-    """A malformed config.json must not block the run command."""
+    """A malformed config.json must fail cleanly, not with a traceback (#730).
+
+    The command cannot guess the ~18 settings the file holds, and boot would die
+    in ``load_config`` anyway, so the CLI names the file and position and stops.
+    """
     _patch_home(monkeypatch, tmp_path)
     (tmp_path / "config.json").write_text("{not valid json", encoding="utf-8")
 
@@ -200,22 +214,28 @@ def _fake(**kw: object) -> None:
 
     runner = CliRunner()
     r = runner.invoke(cli, ["run", "--port", "80"])
-    assert r.exit_code == 0, r.output
-    # Falls back to launch defaults for host, CLI for port.
-    assert captured["port"] == 80
-    assert captured["host"] is None
+    assert r.exit_code == 1, _all_output(r)
+    # Never starts with the settings it could not read.
+    assert captured == {}
+    out = _all_output(r)
+    assert "Traceback" not in out
+    assert "not valid JSON" in out
 
 
-def test_run_overwrites_corrupt_config_with_resolved_values(
+def test_run_does_not_overwrite_corrupt_config(
     monkeypatch: pytest.MonkeyPatch, tmp_path: Path
 ) -> None:
-    """A corrupt config.json is replaced with the resolved values on save.
+    """A corrupt config.json is preserved byte-for-byte, never rewritten as empty.
 
-    Documents the deliberate ``read-merge-write`` contract: a malformed file
-    is treated as empty, so the next run rewrites it cleanly.
+    Supersedes the old "treat a malformed file as empty so the next run rewrites
+    it cleanly" contract. That rewrite destroyed every other setting: one
+    trailing comma plus ``octop run --port`` wiped the ``database`` section and
+    silently flipped a PostgreSQL instance back to a greenfield SQLite one, with
+    no warning in the log (issue #730).
     """
     _patch_home(monkeypatch, tmp_path)
-    (tmp_path / "config.json").write_text("{not valid json", encoding="utf-8")
+    corrupt = '{"bind_host": "0.0.0.0", "database": {"driver": "postgresql"},}'
+    (tmp_path / "config.json").write_text(corrupt, encoding="utf-8")
 
     def _fake(**_kw: object) -> None:
         return None
@@ -226,11 +246,8 @@ def _fake(**_kw: object) -> None:
 
     runner = CliRunner()
     r = runner.invoke(cli, ["run", "--host", "0.0.0.0", "--port", "80"])
-    assert r.exit_code == 0, r.output
-
-    config_path = tmp_path / "config.json"
-    data = json.loads(config_path.read_text(encoding="utf-8"))
-    assert data == {"bind_host": "0.0.0.0", "port": 80}
+    assert r.exit_code == 1, _all_output(r)
+    assert (tmp_path / "config.json").read_text(encoding="utf-8") == corrupt
 
 
 def test_run_port_zero_not_overridden_by_config(
diff --git a/tests/unit/i18n/test_errors.py b/tests/unit/i18n/test_errors.py
index a66ff708..377a9848 100644
--- a/tests/unit/i18n/test_errors.py
+++ b/tests/unit/i18n/test_errors.py
@@ -94,3 +94,12 @@ def test_localized_message_falls_back_when_key_missing(monkeypatch: pytest.Monke
         lambda *_a, **_k: (_ for _ in ()).throw(KeyError("errors.X")),
     )
     assert err.localized_message("zh") == "custom detail"
+
+
+def test_config_file_corrupt_interpolates_path_and_detail():
+    kwargs = {"path": "~/.octop/config.json", "detail": "line 3, column 1"}
+    assert "~/.octop/config.json" in error_message("CONFIG_FILE_CORRUPT", "en", **kwargs)
+    assert "line 3, column 1" in error_message("CONFIG_FILE_CORRUPT", "zh", **kwargs)
+    for locale in ("en", "zh"):
+        msg = error_message("CONFIG_FILE_CORRUPT", locale, **kwargs)
+        assert "{path}" not in msg and "{detail}" not in msg
diff --git a/tests/unit/infra/setup/test_service.py b/tests/unit/infra/setup/test_service.py
index 72129bee..ddcc33a5 100644
--- a/tests/unit/infra/setup/test_service.py
+++ b/tests/unit/infra/setup/test_service.py
@@ -12,6 +12,7 @@
 
 import pytest
 
+from octop.infra.errors import ErrorCode, OctopError
 from octop.infra.setup import service as service_mod
 from octop.infra.setup.service import (
     ServiceRuntime,
@@ -864,3 +865,15 @@ def access(self, _path: object, _mode: int) -> bool:
     def unlink(self, _path: object) -> None:
         # The tmp file is `delete=False`, so this is called in `finally`.
         return None
+
+
+def test_persist_bind_options_refuses_corrupt_config(tmp_path: Path) -> None:
+    """issue #730: must not merge into an empty dict and wipe every other key."""
+    home = tmp_path / "octop"
+    home.mkdir()
+    corrupt = '{"bind_host": "0.0.0.0", "database": {"driver": "postgresql"},}'
+    (home / "config.json").write_text(corrupt, encoding="utf-8")
+    with pytest.raises(OctopError) as excinfo:
+        service_mod.persist_bind_options(home, host="127.0.0.1", port=443)
+    assert excinfo.value.code is ErrorCode.CONFIG_FILE_CORRUPT
+    assert (home / "config.json").read_text(encoding="utf-8") == corrupt
diff --git a/tests/unit/infra/utils/test_json_file.py b/tests/unit/infra/utils/test_json_file.py
new file mode 100644
index 00000000..f4506c27
--- /dev/null
+++ b/tests/unit/infra/utils/test_json_file.py
@@ -0,0 +1,107 @@
+"""Unit tests for the shared JSON config helpers (issue #730)."""
+
+from __future__ import annotations
+
+import json
+import os
+import stat
+from pathlib import Path
+
+import pytest
+
+from octop.infra.utils.json_file import (
+    JsonFileCorruptError,
+    read_json_object,
+    write_json_atomic,
+)
+
+posix_only = pytest.mark.skipif(os.name != "posix", reason="POSIX file modes only")
+
+
+def test_read_absent_file_returns_none(tmp_path: Path) -> None:
+    assert read_json_object(tmp_path / "missing.json") is None
+
+
+def test_read_valid_object(tmp_path: Path) -> None:
+    path = tmp_path / "config.json"
+    path.write_text(json.dumps({"bind_host": "0.0.0.0", "port": 8088}), encoding="utf-8")
+    assert read_json_object(path) == {"bind_host": "0.0.0.0", "port": 8088}
+
+
+def test_read_corrupt_raises_with_position_and_never_leaks_contents(tmp_path: Path) -> None:
+    path = tmp_path / "config.json"
+    # Trailing comma — the classic hand-edit slip. The password must not surface.
+    path.write_text('{"database": {"password": "s3cret"},}', encoding="utf-8")
+    with pytest.raises(JsonFileCorruptError) as excinfo:
+        read_json_object(path)
+    err = excinfo.value
+    assert err.path == path
+    assert "line" in err.detail and "column" in err.detail
+    assert "s3cret" not in err.detail
+    assert "s3cret" not in str(err)
+
+
+def test_read_non_object_raises(tmp_path: Path) -> None:
+    path = tmp_path / "config.json"
+    path.write_text("[1, 2]", encoding="utf-8")
+    with pytest.raises(JsonFileCorruptError) as excinfo:
+        read_json_object(path)
+    assert "list" in excinfo.value.detail
+
+
+def test_write_is_pretty_newline_terminated_and_leaves_no_temp_files(tmp_path: Path) -> None:
+    path = tmp_path / "config.json"
+    write_json_atomic(path, {"a": 1})
+    text = path.read_text(encoding="utf-8")
+    assert json.loads(text) == {"a": 1}
+    assert text.endswith("\n")
+    assert [p.name for p in tmp_path.iterdir()] == ["config.json"]
+
+
+def test_write_creates_missing_parent(tmp_path: Path) -> None:
+    path = tmp_path / "nested" / "config.json"
+    write_json_atomic(path, {"a": 1})
+    assert json.loads(path.read_text(encoding="utf-8")) == {"a": 1}
+
+
+def test_failed_replace_leaves_original_intact_and_cleans_temp(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    """A torn write must not be observable: the old file survives byte-for-byte."""
+    path = tmp_path / "config.json"
+    original = '{"bind_host": "0.0.0.0", "database": {"driver": "postgresql"}}'
+    path.write_text(original, encoding="utf-8")
+
+    def boom(*_args: object, **_kwargs: object) -> None:
+        raise OSError("disk full")
+
+    monkeypatch.setattr("octop.infra.utils.json_file.os.replace", boom)
+    with pytest.raises(OSError, match="disk full"):
+        write_json_atomic(path, {"port": 1})
+    assert path.read_text(encoding="utf-8") == original
+    assert [p.name for p in tmp_path.iterdir()] == ["config.json"]
+
+
+@posix_only
+def test_write_preserves_existing_file_mode(tmp_path: Path) -> None:
+    """A config write must never silently change an existing file's mode."""
+    path = tmp_path / "config.json"
+    path.write_text("{}", encoding="utf-8")
+    os.chmod(path, 0o640)
+    write_json_atomic(path, {"a": 1})
+    assert stat.S_IMODE(path.stat().st_mode) == 0o640
+
+
+@posix_only
+def test_write_new_file_uses_umask_default_not_mkstemp_0600(tmp_path: Path) -> None:
+    """mkstemp's 0600 must not leak into a new config.json.
+
+    A root-created 0600 file would be unreadable to the service user after
+    ``octop service start --scope system``; the two pre-existing config.json
+    writers (``db/rebind.py``, ``backup/auto.py``) produce the umask default.
+    """
+    mask = os.umask(0o022)
+    os.umask(mask)
+    path = tmp_path / "fresh.json"
+    write_json_atomic(path, {"a": 1})
+    assert stat.S_IMODE(path.stat().st_mode) == 0o666 & ~mask
diff --git a/tests/unit/test_config.py b/tests/unit/test_config.py
index c5e8cda3..cb24af34 100644
--- a/tests/unit/test_config.py
+++ b/tests/unit/test_config.py
@@ -408,3 +408,25 @@ def test_loads_mobile_capabilities(tmp_path: Path) -> None:
     cfg = load_config(cfg_path)
     assert cfg.capabilities.mobile.enabled is True
     assert cfg.capabilities.mobile.backend == "physical"
+
+
+def test_corrupt_config_names_file_and_position_without_leaking_contents(tmp_path: Path):
+    """issue #730: a bare JSONDecodeError never says *which* config file failed."""
+    cfg_path = tmp_path / "config.json"
+    original = '{"database": {"password": "s3cret"},}'  # trailing comma
+    cfg_path.write_text(original, encoding="utf-8")
+    with pytest.raises(ValueError, match=r"line \d+, column \d+") as excinfo:
+        load_config(cfg_path)
+    msg = str(excinfo.value)
+    assert str(cfg_path) in msg
+    assert "s3cret" not in msg
+    # the file is left exactly as the user wrote it
+    assert cfg_path.read_text(encoding="utf-8") == original
+
+
+def test_non_object_config_raises(tmp_path: Path):
+    cfg_path = tmp_path / "config.json"
+    cfg_path.write_text("[1, 2]", encoding="utf-8")
+    with pytest.raises(ValueError, match="JSON object"):
+        load_config(cfg_path)
+    assert cfg_path.read_text(encoding="utf-8") == "[1, 2]"
diff --git a/tests/unit/test_plugin_manager.py b/tests/unit/test_plugin_manager.py
index 87bb2d2d..70a516de 100644
--- a/tests/unit/test_plugin_manager.py
+++ b/tests/unit/test_plugin_manager.py
@@ -289,3 +289,38 @@ def test_parse_plugin_icon(tmp_path: Path) -> None:
     )
     assert parse_plugin_icon(plugin_dir) == "🧩"
     assert parse_plugin_icon(tmp_path / "missing") is None
+
+
+def test_set_enabled_refuses_corrupt_config_and_preserves_bytes(tmp_path: Path) -> None:
+    """issue #730: the dashboard toggle must not wipe an unparseable config.json."""
+    config_path = tmp_path / "config.json"
+    config_path.write_text("{}", encoding="utf-8")
+    mgr = PluginManager(plugins_dir=tmp_path / "plugins", config_path=config_path)
+    mgr.install_path(_FIXTURE, force=True)
+
+    corrupt = '{"bind_host": "0.0.0.0", "database": {"driver": "postgresql"},}'
+    config_path.write_text(corrupt, encoding="utf-8")
+    with pytest.raises(OctopError) as excinfo:
+        mgr.set_enabled("echo-tool", False)
+    assert excinfo.value.code is ErrorCode.CONFIG_FILE_CORRUPT
+    assert config_path.read_text(encoding="utf-8") == corrupt
+
+
+def test_set_enabled_preserves_unrelated_keys(tmp_path: Path) -> None:
+    config_path = tmp_path / "config.json"
+    config_path.write_text(
+        json.dumps(
+            {
+                "bind_host": "0.0.0.0",
+                "database": {"driver": "postgresql", "host": "db.internal"},
+            }
+        ),
+        encoding="utf-8",
+    )
+    mgr = PluginManager(plugins_dir=tmp_path / "plugins", config_path=config_path)
+    mgr.install_path(_FIXTURE, force=True)
+    mgr.set_enabled("echo-tool", False)
+    data = json.loads(config_path.read_text(encoding="utf-8"))
+    assert data["bind_host"] == "0.0.0.0"
+    assert data["database"] == {"driver": "postgresql", "host": "db.internal"}
+    assert data["plugins"]["echo-tool"]["enabled"] is False
diff --git a/tests/unit/test_plugin_seed.py b/tests/unit/test_plugin_seed.py
index e88dbea4..08468dae 100644
--- a/tests/unit/test_plugin_seed.py
+++ b/tests/unit/test_plugin_seed.py
@@ -11,6 +11,7 @@
 
 from octop.infra.agents.plugins.manager import PluginManager
 from octop.infra.agents.plugins.seed import seed_bundled_plugins
+from octop.infra.errors import ErrorCode, OctopError
 
 
 def _write_plugin(root: Path, plugin_id: str, *, version: str = "0.1.0") -> Path:
@@ -172,3 +173,20 @@ def test_load_installed_clears_stale_registry_entries(tmp_path: Path) -> None:
     assert [item.manifest.id for item in loaded] == ["weather"]
     assert PluginRegistry().get("stale") is None
     assert PluginRegistry().get("weather") is not None
+
+
+def test_seed_refuses_corrupt_config_and_preserves_bytes(tmp_path: Path) -> None:
+    """issue #730: seeding always writes back, so a corrupt file must not read as ``{}``."""
+    bundled = tmp_path / "bundled"
+    _write_plugin(bundled, "weather")
+    config_path = tmp_path / "config.json"
+    original = '{\n  "bind_host": "0.0.0.0",\n  "database": {"driver": "postgresql"}\n,}'
+    config_path.write_text(original, encoding="utf-8")
+    with pytest.raises(OctopError) as excinfo:
+        seed_bundled_plugins(
+            bundled_root=bundled,
+            plugins_dir=tmp_path / "plugins",
+            config_path=config_path,
+        )
+    assert excinfo.value.code is ErrorCode.CONFIG_FILE_CORRUPT
+    assert config_path.read_text(encoding="utf-8") == original

From 6acc1777d74c816bc0d3ee963022e741760bda4d Mon Sep 17 00:00:00 2001
From: XYAIStudio <XYAIStudio@users.noreply.github.com>
Date: Wed, 7 Oct 2026 23:06:57 +0800
Subject: [PATCH 04/39] chore(release): prepare FreeOS 0.1.0

---
 .github/workflows/release.yml                 |   34 +-
 CHANGELOG.md                                  |   16 +
 CONTRIBUTING.md                               |    2 +-
 Makefile                                      |    2 +-
 dashboard/package-lock.json                   | 1481 ++++-------------
 dashboard/package.json                        |   15 +-
 .../pages/employees/EmployeesPage.test.tsx    |    3 +
 .../pages/workspace/WorkspacePage.test.tsx    |    2 +-
 .../src/pages/Admin/Users/SsoPanel.test.tsx   |   10 +-
 .../Agent/Memory/ProfileOverview.test.tsx     |    2 +-
 .../Chat/components/ChatDockReviewContent.tsx |    4 +-
 .../Chat/components/ChatDockStartState.tsx    |    8 +-
 .../Chat/components/ChatDockTasksContent.tsx  |    4 +-
 .../pages/Chat/components/ChatPanelPicker.tsx |    5 +-
 .../components/TrajectoryInspector.test.tsx   |   21 +-
 .../src/pages/Chat/hooks/useChatDockPanel.ts  |   15 +-
 .../src/pages/Chat/utils/chatMessages.test.ts |   14 +-
 .../src/pages/Chat/utils/expertMention.ts     |    4 +-
 .../components/modals/CustomProviderModal.tsx |    4 +-
 dashboard/src/test/setup.ts                   |    2 +
 docs/cli.md                                   |    9 +-
 docs/node-runtime.md                          |   10 +-
 docs/node-runtime.zh-CN.md                    |    8 +-
 docs/user-guide.md                            |    4 +-
 pyproject.toml                                |    2 +-
 scripts/README.md                             |   15 +-
 scripts/install-octop.sh                      |   16 +-
 scripts/install.bat                           |   14 +-
 scripts/install.ps1                           |   11 +-
 scripts/install.sh                            |   16 +-
 src/octop/__init__.py                         |    2 +-
 src/octop/cli/registry.py                     |    4 +-
 src/octop/infra/agents/manager.py             |    4 +
 .../middleware/system_message_cleanup.py      |   34 +
 .../unit/agents/test_octop_builtin_skills.py  |    8 +-
 .../agents/test_system_message_cleanup.py     |   62 +
 tests/unit/cli/test_completion_cmd.py         |    4 +-
 tests/unit/db/test_clip_thread_title.py       |    2 +-
 tests/unit/db/test_db_pool.py                 |   20 +-
 tests/unit/db/test_published_experts_repo.py  |    6 +-
 tests/unit/db/test_repo_knowledge.py          |    2 +-
 tests/unit/db/test_skill_package_icons.py     |   10 +-
 tests/unit/db/test_skill_packages_repo.py     |    6 +-
 uv.lock                                       |    2 +-
 44 files changed, 643 insertions(+), 1276 deletions(-)
 create mode 100644 src/octop/infra/agents/middleware/system_message_cleanup.py
 create mode 100644 tests/unit/agents/test_system_message_cleanup.py

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cf626dad..199093df 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,6 +1,6 @@
 name: Release
 
-# 版本标签 v* → 测包、发 PyPI、建 GitHub Release，再级联：
+# 版本标签 v* → 测包、构建 GitHub Release 制品，再级联：
 #   - Sync Main Into Develop
 #   - Build Octop FPK（复用本 Release 的 wheel；等待 docker-publish 的 GHCR 镜像）
 #
@@ -18,7 +18,6 @@ on:
 permissions:
   contents: write
   actions: write
-  id-token: write
 
 concurrency:
   group: release-${{ github.ref }}
@@ -43,6 +42,11 @@ jobs:
             echo "Refusing release: tag $GITHUB_REF_NAME does not match pyproject.toml $package_version" >&2
             exit 1
           fi
+          git fetch origin main
+          if ! git merge-base --is-ancestor "$GITHUB_SHA" origin/main; then
+            echo "Refusing release: production tags must point to a commit on main" >&2
+            exit 1
+          fi
 
       - uses: astral-sh/setup-uv@v4
         with:
@@ -73,26 +77,9 @@ jobs:
           name: dist
           path: dist/
 
-  publish:
-    name: Publish to PyPI
-    needs: build
-    runs-on: ubuntu-latest
-    environment: pypi
-    steps:
-      - name: Download distributions
-        uses: actions/download-artifact@v4
-        with:
-          name: dist
-          path: dist/
-
-      - name: Publish package
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
-
   github-release:
     name: Create GitHub Release
-    needs: publish
+    needs: build
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -128,8 +115,9 @@ jobs:
               echo ""
               echo "## Install"
               echo ""
+              echo "Download the Python wheel from this GitHub Release and install it with:"
               echo '```bash'
-              echo "pip install octop==$version"
+              echo "uv pip install ./octop-$version-py3-none-any.whl"
               echo '```'
             } > .release-notes.md
           fi
@@ -165,7 +153,7 @@ jobs:
             -f version="${{ github.ref_name }}"
 
   # FnOS FPK：复用本 Release 的 wheel + docker-publish 的 GHCR 镜像。
-  # 与 sync-develop 并行。Dispatch 失败必须让本 workflow 变红（PyPI 已发布仍如此）。
+  # 与 sync-develop 并行。Dispatch 失败必须让本 workflow 变红，以便发现下游构建漏触发。
   trigger-fnos:
     name: Trigger FnOS FPK build
     needs: github-release
@@ -175,7 +163,7 @@ jobs:
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          # --ref 用版本 tag，保证 FPK 打在与 PyPI / 镜像相同的 commit 上
+          # --ref 用版本 tag，保证 FPK 打在与 GitHub Release / 镜像相同的 commit 上
           gh workflow run fnos-build-fpk.yml \
             --repo "${{ github.repository }}" \
             --ref "${{ github.ref_name }}"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 95e96071..15367e0a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,11 +6,27 @@
 
 ## [Unreleased]
 
+### Changed
+
+- Publish Python distributions as GitHub Release assets only; the FreeOS release workflow no longer publishes the colliding `octop` package name to PyPI, and install scripts default to the FreeOS GitHub source.
+
 ### Fixed
 
+- Remove checkpoint-resident system messages before model calls while preserving the active compiled prompt, preventing strict Qwen chat templates from failing when an older conversation contains a stale bootstrap message.
 - Detect models from an already-running Ollama daemon even when FreeOS-managed Ollama startup is disabled; model discovery never starts Ollama unless the user enabled it.
 - Preserve `config.json` when it is malformed: startup and all configuration writers now report the file and parser position, avoid leaking stored credentials, and use atomic replacement instead of silently rebuilding an empty configuration.
 
+## [0.1.0] - 2026-10-07
+
+### Changed
+
+- Publish the successor to 0.0.10 as 0.1.0, with Python distributions attached to GitHub Releases only.
+
+### Fixed
+
+- Remove stale checkpoint system messages before model calls, detect models from an already-running Ollama daemon without starting it, and preserve malformed `config.json` files instead of silently replacing them.
+- Improve desktop update safety by checkpointing SQLite WAL before restart.
+
 ## [0.0.10] - 2026-10-03
 
 ### Fixed
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 6d1cd7ad..cba35a82 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -73,7 +73,7 @@ See [AGENTS.md](AGENTS.md) for module boundaries and coding conventions.
 
 1. Cut `release/x.y.z` from latest `develop` (version bump + CHANGELOG on that branch)
 2. Open PR: `release/x.y.z` → `main` and merge when green
-3. Tag `v<version>` on **main tip** and push — GitHub Actions builds, publishes to PyPI, and creates the GitHub Release
+3. Tag `v<version>` on **main tip** and push — GitHub Actions builds Python distributions and creates a GitHub Release with the artifacts; FreeOS does not publish the `octop` distribution to PyPI
 4. Delete `release/x.y.z`; Actions syncs `main` → `develop` (or opens `chore/sync-develop-after-*` if merge conflicts / branch protection)
 
 Agent-assisted publish: `.cursor/skills/publish` (`/publish <version>`).
diff --git a/Makefile b/Makefile
index cdf862e8..3b73053c 100644
--- a/Makefile
+++ b/Makefile
@@ -29,7 +29,7 @@ RUN  := $(if $(UV),uv run,)
 PYTHON := $(if $(UV),uv run python,python3)
 PIP  := $(if $(UV),uv pip,python3 -m pip)
 # Parallel workers for make test / make test-fast (override: make test PYTEST_JOBS=4)
-PYTEST_JOBS ?= auto
+PYTEST_JOBS ?= 4
 
 # ─── Help ────────────────────────────────────────────────────────────────────
 
diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
index ff1fc723..9ef4a83a 100644
--- a/dashboard/package-lock.json
+++ b/dashboard/package-lock.json
@@ -17,12 +17,11 @@
         "ahooks": "^3.9.6",
         "antd": "^5.29.1",
         "antd-style": "^3.7.1",
-        "build": "^0.1.4",
         "docx-preview": "^0.3.2",
         "i18next": "^25.8.4",
         "jszip": "^3.10.1",
         "lucide-react": "^0.562.0",
-        "mermaid": "^11.13.0",
+        "mermaid": "^12.1.0",
         "qrcode.react": "^4.2.0",
         "react": "^18",
         "react-dom": "^18",
@@ -30,14 +29,14 @@
         "react-json-view-lite": "^2.5.0",
         "react-markdown": "^10.1.0",
         "react-pdf": "^10.5.0",
-        "react-router-dom": "^7.13.0",
+        "react-router-dom": "^7.18.4",
         "react-syntax-highlighter": "^16.1.1",
         "react-virtuoso": "^4.18.10",
         "recharts": "^3.10.1",
         "rehype-katex": "^7.0.1",
         "remark-gfm": "^4.0.1",
         "remark-math": "^6.0.0",
-        "xlsx": "^0.18.5"
+        "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
       },
       "devDependencies": {
         "@eslint/js": "^9.25.0",
@@ -51,7 +50,7 @@
         "@types/react-dom": "^18",
         "@types/react-syntax-highlighter": "^15.5.13",
         "@vitejs/plugin-react": "^4.4.1",
-        "@vitest/coverage-v8": "^3.2.6",
+        "@vitest/coverage-v8": "^4.1.11",
         "eslint": "^9.25.0",
         "eslint-plugin-react-hooks": "^5.2.0",
         "eslint-plugin-react-refresh": "^0.4.19",
@@ -65,7 +64,7 @@
         "typescript-eslint": "^8.30.1",
         "vite": "^6.3.5",
         "vite-plugin-pwa": "^0.21.2",
-        "vitest": "^3.2.6"
+        "vitest": "^4.1.11"
       }
     },
     "node_modules/@adobe/css-tools": {
@@ -93,20 +92,6 @@
         }
       }
     },
-    "node_modules/@ampproject/remapping": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
-      "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@jridgewell/gen-mapping": "^0.3.5",
-        "@jridgewell/trace-mapping": "^0.3.24"
-      },
-      "engines": {
-        "node": ">=6.0.0"
-      }
-    },
     "node_modules/@ant-design/colors": {
       "version": "7.2.1",
       "resolved": "https://mirrors.tencent.com/npm/@ant-design/colors/-/colors-7.2.1.tgz",
@@ -1807,20 +1792,54 @@
       "integrity": "sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA==",
       "license": "MIT"
     },
+    "node_modules/@chevrotain/cst-dts-gen": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/cst-dts-gen/-/cst-dts-gen-13.2.0.tgz",
+      "integrity": "sha512-bA9dvWlhAUcHkNwU+8w9yiUxJPlj/Lm3VqS7MD+NbIR/7LmpNLuK/AWNFdCo/T3SK5ND0/UHf3IJvl/Jn/i6yg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@chevrotain/gast": "13.2.0",
+        "@chevrotain/types": "13.2.0"
+      }
+    },
+    "node_modules/@chevrotain/cst-dts-gen/node_modules/@chevrotain/types": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/types/-/types-13.2.0.tgz",
+      "integrity": "sha512-7qrYHRlKfWf2AvBfJi5eVOrKAkbxvMFsy/iIHTGIiApNcEecCaVIdR+mIQhyCBsTDJxBz4JWXHMo6krbhR9hVg==",
+      "license": "Apache-2.0"
+    },
+    "node_modules/@chevrotain/gast": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/gast/-/gast-13.2.0.tgz",
+      "integrity": "sha512-bCARdAsG+eEbOveSXcOAC7pVxA04I1ionzeMOwIYf5NX7SaS7zgn4Dgug2BSqoL+iyKeMNSorQjsFSHJHsCNwg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@chevrotain/types": "13.2.0"
+      }
+    },
+    "node_modules/@chevrotain/gast/node_modules/@chevrotain/types": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/types/-/types-13.2.0.tgz",
+      "integrity": "sha512-7qrYHRlKfWf2AvBfJi5eVOrKAkbxvMFsy/iIHTGIiApNcEecCaVIdR+mIQhyCBsTDJxBz4JWXHMo6krbhR9hVg==",
+      "license": "Apache-2.0"
+    },
+    "node_modules/@chevrotain/regexp-to-ast": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/regexp-to-ast/-/regexp-to-ast-13.2.0.tgz",
+      "integrity": "sha512-kxpUkLtiaK09ph+dib+Yvm+3sWSnuwlo25gqfKRgTPNmF6H7uW4gVkMjaRdtnN783S9sM6vUNWh9CsxYX4QwKw==",
+      "license": "Apache-2.0"
+    },
     "node_modules/@chevrotain/types": {
       "version": "11.1.2",
       "resolved": "https://mirrors.tencent.com/npm/@chevrotain/types/-/types-11.1.2.tgz",
       "integrity": "sha512-U+HFai5+zmJCkK86QsaJtoITlboZHBqrVketcO2ROv865xfCMSFpELQoz1GkX5GzME8pTa+3kbKrZHQtI0gdbw==",
       "license": "Apache-2.0"
     },
-    "node_modules/@colors/colors": {
-      "version": "1.6.0",
-      "resolved": "https://mirrors.tencent.com/npm/@colors/colors/-/colors-1.6.0.tgz",
-      "integrity": "sha512-Ir+AOibqzrIsL6ajt3Rz3LskB7OiMVHqltZmspbW/TJuTVuyOMirVqAkjfY6JISiLHgyNqicAC8AyHHGzNd/dA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.1.90"
-      }
+    "node_modules/@chevrotain/utils": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/utils/-/utils-13.2.0.tgz",
+      "integrity": "sha512-SzKYY68rseOrb9KILVzPsl6SjkQtdWw01SRGB5aCVI5kFcHltQsOYV3JB0Ffst72DgkvHCyDQ0NLwxtmCCf97Q==",
+      "license": "Apache-2.0"
     },
     "node_modules/@csstools/color-helpers": {
       "version": "5.1.0",
@@ -1939,17 +1958,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/@dabh/diagnostics": {
-      "version": "2.0.8",
-      "resolved": "https://mirrors.tencent.com/npm/@dabh/diagnostics/-/diagnostics-2.0.8.tgz",
-      "integrity": "sha512-R4MSXTVnuMzGD7bzHdW2ZhhdPC/igELENcq5IjEverBvq5hn1SXCWcsi6eSsdWP0/Ur+SItRRjAktmdoX/8R/Q==",
-      "license": "MIT",
-      "dependencies": {
-        "@so-ric/colorspace": "^1.1.6",
-        "enabled": "2.0.x",
-        "kuler": "^2.0.0"
-      }
-    },
     "node_modules/@emotion/babel-plugin": {
       "version": "11.13.5",
       "resolved": "https://mirrors.tencent.com/npm/@emotion/babel-plugin/-/babel-plugin-11.13.5.tgz",
@@ -2798,16 +2806,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/@istanbuljs/schema": {
-      "version": "0.1.6",
-      "resolved": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.6.tgz",
-      "integrity": "sha512-+Sg6GCR/wy1oSmQDFq4LQDAhm3ETKnorxN+y5nbLULOR3P0c14f2Wurzj3/xqPXtasLFfHd5iRFQ7AJt4KH2cw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/@jridgewell/gen-mapping": {
       "version": "0.3.13",
       "resolved": "https://mirrors.tencent.com/npm/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
@@ -3146,17 +3144,6 @@
         "url": "https://github.com/sponsors/Brooooooklyn"
       }
     },
-    "node_modules/@pkgjs/parseargs": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
-      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "engines": {
-        "node": ">=14"
-      }
-    },
     "node_modules/@rc-component/async-validator": {
       "version": "5.1.0",
       "resolved": "https://mirrors.tencent.com/npm/@rc-component/async-validator/-/async-validator-5.1.0.tgz",
@@ -3805,16 +3792,6 @@
         "win32"
       ]
     },
-    "node_modules/@so-ric/colorspace": {
-      "version": "1.1.6",
-      "resolved": "https://mirrors.tencent.com/npm/@so-ric/colorspace/-/colorspace-1.1.6.tgz",
-      "integrity": "sha512-/KiKkpHNOBgkFJwu9sh48LkHSMYGyuTcSFK/qMBdnOAlrRJzRSXAOFB5qwzaVQuDl8wAvHVMkaASQDReTahxuw==",
-      "license": "MIT",
-      "dependencies": {
-        "color": "^5.0.2",
-        "text-hex": "1.0.x"
-      }
-    },
     "node_modules/@standard-schema/spec": {
       "version": "1.1.0",
       "resolved": "https://mirrors.tencent.com/npm/@standard-schema/spec/-/spec-1.1.0.tgz",
@@ -4409,12 +4386,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/@types/triple-beam": {
-      "version": "1.3.5",
-      "resolved": "https://mirrors.tencent.com/npm/@types/triple-beam/-/triple-beam-1.3.5.tgz",
-      "integrity": "sha512-6WaYesThRMCl19iryMYP7/x2OVgCtbIVflDGFpWnb9irXI3UjYE4AzmYuiUKY1AJstGijoY+MgUszMgRxIYTYw==",
-      "license": "MIT"
-    },
     "node_modules/@types/trusted-types": {
       "version": "2.0.7",
       "resolved": "https://mirrors.tencent.com/npm/@types/trusted-types/-/trusted-types-2.0.7.tgz",
@@ -4631,15 +4602,16 @@
       }
     },
     "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
-      "version": "5.0.6",
-      "resolved": "https://mirrors.tencent.com/npm/brace-expansion/-/brace-expansion-5.0.6.tgz",
-      "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/@typescript-eslint/typescript-estree/node_modules/minimatch": {
@@ -4761,32 +4733,30 @@
       }
     },
     "node_modules/@vitest/coverage-v8": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-3.2.6.tgz",
-      "integrity": "sha512-LsAdmUapA0qSN306d8+zOyawM0hFm2m2Hg9IwVNIKBm+qJV8cijiq2c+gxKZcB1HCfIWAy+0qEZDCUQA58A1cw==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.11.tgz",
+      "integrity": "sha512-8MVGEFnJIcdGjcbfKmeq8z0pZHH0JlVtoVZH9Q/qwUp6wyFnEJUBMrw9DCaj+ra3vShGmhavjalMIhPNxZAUcw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
-        "@ampproject/remapping": "^2.3.0",
         "@bcoe/v8-coverage": "^1.0.2",
-        "ast-v8-to-istanbul": "^0.3.3",
-        "debug": "^4.4.1",
+        "@vitest/utils": "4.1.11",
+        "ast-v8-to-istanbul": "^1.0.0",
         "istanbul-lib-coverage": "^3.2.2",
         "istanbul-lib-report": "^3.0.1",
-        "istanbul-lib-source-maps": "^5.0.6",
-        "istanbul-reports": "^3.1.7",
-        "magic-string": "^0.30.17",
-        "magicast": "^0.3.5",
-        "std-env": "^3.9.0",
-        "test-exclude": "^7.0.1",
-        "tinyrainbow": "^2.0.0"
+        "istanbul-reports": "^3.2.0",
+        "magicast": "^0.5.2",
+        "obug": "^2.1.1",
+        "std-env": "^4.0.0-rc.1",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
-        "@vitest/browser": "3.2.6",
-        "vitest": "3.2.6"
+        "@vitest/browser": "4.1.11",
+        "vitest": "4.1.11"
       },
       "peerDependenciesMeta": {
         "@vitest/browser": {
@@ -4795,39 +4765,40 @@
       }
     },
     "node_modules/@vitest/expect": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-3.2.6.tgz",
-      "integrity": "sha512-1+7q9BtaKzEmO+fmNT3kYvoNn5Y71XWAx2Q5HRim4tTVRQVRv4uJFAQ5FbK0OPUeNP/WmVCpxYxoJdvuHVjzBQ==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.11.tgz",
+      "integrity": "sha512-VX2x5vNJXET47KAFzwERI+KRMtTTCSWTfSMKsW7JsUsXV4psq++e3DvZpuTDOpHcxytiDs6p2nhVb2tVDiiUYw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
+        "@standard-schema/spec": "^1.1.0",
         "@types/chai": "^5.2.2",
-        "@vitest/spy": "3.2.6",
-        "@vitest/utils": "3.2.6",
-        "chai": "^5.2.0",
-        "tinyrainbow": "^2.0.0"
+        "@vitest/spy": "4.1.11",
+        "@vitest/utils": "4.1.11",
+        "chai": "^6.2.2",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/mocker": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-3.2.6.tgz",
-      "integrity": "sha512-EZOrpDbkKotFAP7wPAQV1UIyoGOk4oX7ynWhBhLB7v+meMHbQhU16oPpIYGTTe4oFlhpryGpgpcZP/sin3hYuw==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.11.tgz",
+      "integrity": "sha512-2XJVD55d1o5AZous5CCGKS74g/riOj9odEt2bQpCVZeblHyHdnMeFl4jl0XjU21stf4mbjUkew2eXQZt65g5CQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "3.2.6",
+        "@vitest/spy": "4.1.11",
         "estree-walker": "^3.0.3",
-        "magic-string": "^0.30.17"
+        "magic-string": "^0.30.21"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
         "msw": "^2.4.9",
-        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0"
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
       },
       "peerDependenciesMeta": {
         "msw": {
@@ -4849,42 +4820,42 @@
       }
     },
     "node_modules/@vitest/pretty-format": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-3.2.6.tgz",
-      "integrity": "sha512-lb7XXXzmm2h2ASzFnRvQpDo6onT1NmMJA3tkGTWiBFtRJ9lxGY3d3mm/Apt36gej2bkkOVLL/yTOtufDaFa/jA==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.11.tgz",
+      "integrity": "sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "tinyrainbow": "^2.0.0"
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/runner": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-3.2.6.tgz",
-      "integrity": "sha512-HYcoSj1w5tcgUnzoF0HcyaAQjpA1gj9ftUJ7iSJSuipc02jW9gKkigwZbjFldAfYHA1fa8UZVRftdMY5msWM9Q==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.11.tgz",
+      "integrity": "sha512-LztvUgdwMNJMIkj3hQnnxiC2Xy1zNxq928W/xhjCLaNCzqTZOudjwbQf6v9IntZGPw132i2Lq2rgTRZHD3JHNw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "3.2.6",
-        "pathe": "^2.0.3",
-        "strip-literal": "^3.0.0"
+        "@vitest/utils": "4.1.11",
+        "pathe": "^2.0.3"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/snapshot": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-3.2.6.tgz",
-      "integrity": "sha512-H+ZjNTWGpObenh0YnlBctAPnJSI20P81PL8BPzWpx54YXLLTm8hEsWawtcYLMrwvpK48hGxLLbCS+1KRXhsKhw==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.11.tgz",
+      "integrity": "sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.6",
-        "magic-string": "^0.30.17",
+        "@vitest/pretty-format": "4.1.11",
+        "@vitest/utils": "4.1.11",
+        "magic-string": "^0.30.21",
         "pathe": "^2.0.3"
       },
       "funding": {
@@ -4892,28 +4863,25 @@
       }
     },
     "node_modules/@vitest/spy": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-3.2.6.tgz",
-      "integrity": "sha512-oq6BbH68WzcWmwtBrU9nqLeaXTR4XwJF7FSLkKEZo4i6eoXcrxjcwSuTvWBIRUTC6VC72nXYunzqgZA+IKdtxg==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.11.tgz",
+      "integrity": "sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "tinyspy": "^4.0.3"
-      },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
     "node_modules/@vitest/utils": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-3.2.6.tgz",
-      "integrity": "sha512-lI23nIs4bnT3T8NIoh+vFaz5s2/DdP0Jgt2jxwgWljvwn82cLJtyi/If+fjFyoLMGIOz0U/fKvWE0d4jsNQEfg==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.11.tgz",
+      "integrity": "sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "3.2.6",
-        "loupe": "^3.1.4",
-        "tinyrainbow": "^2.0.0"
+        "@vitest/pretty-format": "4.1.11",
+        "convert-source-map": "^2.0.0",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
@@ -4967,15 +4935,6 @@
         "acorn": "^6.0.0 || ^7.0.0 || ^8.0.0"
       }
     },
-    "node_modules/adler-32": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/adler-32/-/adler-32-1.3.1.tgz",
-      "integrity": "sha512-ynZ4w/nUUv5rrsR8UUGoe1VC9hZj6V5hU9Qw1HlMDJGEJw5S7TfTErWTjMys6M7vr0YWcPqs3qAr4ss0nDfP+A==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
     "node_modules/agent-base": {
       "version": "7.1.4",
       "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
@@ -5207,9 +5166,9 @@
       }
     },
     "node_modules/ast-v8-to-istanbul": {
-      "version": "0.3.12",
-      "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-0.3.12.tgz",
-      "integrity": "sha512-BRRC8VRZY2R4Z4lFIL35MwNXmwVqBityvOIwETtsCSwvjl0IdgFsy9NhdaA6j74nUdtJJlIypeRhpDam19Wq3g==",
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.7.tgz",
+      "integrity": "sha512-kFL68AG6ajd8fg248zwM9GQrUWEp79gsmjum34OEXjs4yHuUMZfYKwOLW9GMmB4oNvVrj+EAGxsP7ye2UR9UlA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -5238,7 +5197,8 @@
     "node_modules/async": {
       "version": "3.2.6",
       "resolved": "https://mirrors.tencent.com/npm/async/-/async-3.2.6.tgz",
-      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA=="
+      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
+      "dev": true
     },
     "node_modules/async-function": {
       "version": "1.0.0",
@@ -5355,9 +5315,9 @@
       "dev": true
     },
     "node_modules/baseline-browser-mapping": {
-      "version": "2.10.33",
-      "resolved": "https://mirrors.tencent.com/npm/baseline-browser-mapping/-/baseline-browser-mapping-2.10.33.tgz",
-      "integrity": "sha512-bA6+tcSLpz2tIEdDXZPpPTIuxBcC4+w6SieaYyfigIa4h8GlFxbA17v22Vx3JUtuZQj9SgOsnbK+aTBzyDyEuw==",
+      "version": "2.11.27",
+      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.27.tgz",
+      "integrity": "sha512-ElY12DaROGuan+lMmZ8Cvo/ZUbXPe7Enc/9VU/b1T3Kp4dwytRcNdR8DoSJN5SNJT/CuvcCA0DHDVmMOCePdRQ==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {
@@ -5368,19 +5328,20 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.15",
-      "resolved": "https://mirrors.tencent.com/npm/brace-expansion/-/brace-expansion-1.1.15.tgz",
-      "integrity": "sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0",
         "concat-map": "0.0.1"
       }
     },
     "node_modules/browserslist": {
-      "version": "4.28.2",
-      "resolved": "https://mirrors.tencent.com/npm/browserslist/-/browserslist-4.28.2.tgz",
-      "integrity": "sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==",
+      "version": "4.29.3",
+      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.29.3.tgz",
+      "integrity": "sha512-1R4kiYKXGViqEN0CnoDrXc1StD9niAwu+j2dukWzrD4bJgsD4lDmEp0CRbc6E/vYJIfTHwPmwyaKtVSudICdPA==",
       "dev": true,
       "funding": [
         {
@@ -5396,13 +5357,14 @@
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "peer": true,
       "dependencies": {
-        "baseline-browser-mapping": "^2.10.12",
-        "caniuse-lite": "^1.0.30001782",
-        "electron-to-chromium": "^1.5.328",
-        "node-releases": "^2.0.36",
-        "update-browserslist-db": "^1.2.3"
+        "baseline-browser-mapping": "^2.11.26",
+        "caniuse-lite": "^1.0.30001813",
+        "electron-to-chromium": "^1.5.439",
+        "node-releases": "^2.0.57",
+        "update-browserslist-db": "^1.3.3"
       },
       "bin": {
         "browserslist": "cli.js"
@@ -5417,36 +5379,6 @@
       "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
       "dev": true
     },
-    "node_modules/build": {
-      "version": "0.1.4",
-      "resolved": "https://mirrors.tencent.com/npm/build/-/build-0.1.4.tgz",
-      "integrity": "sha512-KwbDJ/zrsU8KZRRMfoURG14cKIAStUlS8D5jBDvtrZbwO5FEkYqc3oB8HIhRiyD64A48w1lc+sOmQ+mmBw5U/Q==",
-      "dependencies": {
-        "cssmin": "0.3.x",
-        "jsmin": "1.x",
-        "jxLoader": "*",
-        "moo-server": "*",
-        "promised-io": "*",
-        "timespan": "2.x",
-        "uglify-js": "1.x",
-        "walker": "1.x",
-        "winston": "*",
-        "wrench": "1.3.x"
-      },
-      "engines": {
-        "node": ">v0.4.12"
-      }
-    },
-    "node_modules/cac": {
-      "version": "6.7.14",
-      "resolved": "https://registry.npmjs.org/cac/-/cac-6.7.14.tgz",
-      "integrity": "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/call-bind": {
       "version": "1.0.9",
       "resolved": "https://mirrors.tencent.com/npm/call-bind/-/call-bind-1.0.9.tgz",
@@ -5505,9 +5437,9 @@
       }
     },
     "node_modules/caniuse-lite": {
-      "version": "1.0.30001793",
-      "resolved": "https://mirrors.tencent.com/npm/caniuse-lite/-/caniuse-lite-1.0.30001793.tgz",
-      "integrity": "sha512-iwSsYWaCOoh26cV8NwNRViHlrfUvYsHDfRVcbtmw0Kg6PJIZZXwMkj1442FYLBGkeUf1juAsU3DTfxW579mrPA==",
+      "version": "1.0.30001814",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001814.tgz",
+      "integrity": "sha512-/Uaf1lAzr59XcMpW0o96WoEfr+VXK2OX4U9AgFoiSHsVJ4HppnIFUjtYzsyDH2+tgANaQb2/oxYGwCPapN1FpA==",
       "dev": true,
       "funding": [
         {
@@ -5535,32 +5467,12 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/cfb": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/cfb/-/cfb-1.2.2.tgz",
-      "integrity": "sha512-KfdUZsSOw19/ObEWasvBP/Ac4reZvAGauZhs6S/gqNhXhI7cKwvlH7ulj+dOEYnca4bm4SGo8C1bTAQvnTjgQA==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "adler-32": "~1.3.0",
-        "crc-32": "~1.2.0"
-      },
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
     "node_modules/chai": {
-      "version": "5.3.3",
-      "resolved": "https://registry.npmjs.org/chai/-/chai-5.3.3.tgz",
-      "integrity": "sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==",
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/chai/-/chai-6.3.0.tgz",
+      "integrity": "sha512-XWAtwJ6OHO+tj0EKCs0Y2UamnyOxseZWltU4x2U2wh8g4AigdjwvtUjvLP2tqkA/avxHEtzxNaqGq/YGNwckKg==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "assertion-error": "^2.0.1",
-        "check-error": "^2.1.1",
-        "deep-eql": "^5.0.1",
-        "loupe": "^3.1.0",
-        "pathval": "^2.0.0"
-      },
       "engines": {
         "node": ">=18"
       }
@@ -5618,16 +5530,28 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/check-error": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/check-error/-/check-error-2.1.3.tgz",
-      "integrity": "sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==",
-      "dev": true,
-      "license": "MIT",
+    "node_modules/chevrotain": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/chevrotain/-/chevrotain-13.2.0.tgz",
+      "integrity": "sha512-GTouk5YzgBxlTPCaDn5q0q2EJKkrYmnPF+HmF8v0Qo4r3iyPG7HJivkN1wthCXZcm3sIcZFpGTRovLPNdJNRCA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@chevrotain/cst-dts-gen": "13.2.0",
+        "@chevrotain/gast": "13.2.0",
+        "@chevrotain/regexp-to-ast": "13.2.0",
+        "@chevrotain/types": "13.2.0",
+        "@chevrotain/utils": "13.2.0"
+      },
       "engines": {
-        "node": ">= 16"
+        "node": ">=22.0.0"
       }
     },
+    "node_modules/chevrotain/node_modules/@chevrotain/types": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/types/-/types-13.2.0.tgz",
+      "integrity": "sha512-7qrYHRlKfWf2AvBfJi5eVOrKAkbxvMFsy/iIHTGIiApNcEecCaVIdR+mIQhyCBsTDJxBz4JWXHMo6krbhR9hVg==",
+      "license": "Apache-2.0"
+    },
     "node_modules/classnames": {
       "version": "2.5.1",
       "resolved": "https://mirrors.tencent.com/npm/classnames/-/classnames-2.5.1.tgz",
@@ -5657,27 +5581,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/codepage": {
-      "version": "1.15.0",
-      "resolved": "https://registry.npmjs.org/codepage/-/codepage-1.15.0.tgz",
-      "integrity": "sha512-3g6NUTPd/YtuuGrhMnOMRjFc+LJw/bnMp3+0r/Wcz3IXUuCosKRJvMphm5+Q+bvTVGcJJuRvVLuYba+WojaFaA==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
-    "node_modules/color": {
-      "version": "5.0.3",
-      "resolved": "https://mirrors.tencent.com/npm/color/-/color-5.0.3.tgz",
-      "integrity": "sha512-ezmVcLR3xAVp8kYOm4GS45ZLLgIE6SPAFoduLr6hTDajwb3KZ2F46gulK3XpcwRFb5KKGCSezCBAY4Dw4HsyXA==",
-      "dependencies": {
-        "color-convert": "^3.1.3",
-        "color-string": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
     "node_modules/color-convert": {
       "version": "2.0.1",
       "resolved": "https://mirrors.tencent.com/npm/color-convert/-/color-convert-2.0.1.tgz",
@@ -5696,44 +5599,6 @@
       "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
       "dev": true
     },
-    "node_modules/color-string": {
-      "version": "2.1.4",
-      "resolved": "https://mirrors.tencent.com/npm/color-string/-/color-string-2.1.4.tgz",
-      "integrity": "sha512-Bb6Cq8oq0IjDOe8wJmi4JeNn763Xs9cfrBcaylK1tPypWzyoy2G3l90v9k64kjphl/ZJjPIShFztenRomi8WTg==",
-      "dependencies": {
-        "color-name": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/color-string/node_modules/color-name": {
-      "version": "2.1.0",
-      "resolved": "https://mirrors.tencent.com/npm/color-name/-/color-name-2.1.0.tgz",
-      "integrity": "sha512-1bPaDNFm0axzE4MEAzKPuqKWeRaT43U/hyxKPBdqTfmPF+d6n7FSoTFxLVULUJOmiLp01KjhIPPH+HrXZJN4Rg==",
-      "engines": {
-        "node": ">=12.20"
-      }
-    },
-    "node_modules/color/node_modules/color-convert": {
-      "version": "3.1.3",
-      "resolved": "https://mirrors.tencent.com/npm/color-convert/-/color-convert-3.1.3.tgz",
-      "integrity": "sha512-fasDH2ont2GqF5HpyO4w0+BcewlhHEZOFn9c1ckZdHpJ56Qb7MHhH/IcJZbBGgvdtwdwNbLvxiBEdg336iA9Sg==",
-      "dependencies": {
-        "color-name": "^2.0.0"
-      },
-      "engines": {
-        "node": ">=14.6"
-      }
-    },
-    "node_modules/color/node_modules/color-name": {
-      "version": "2.1.0",
-      "resolved": "https://mirrors.tencent.com/npm/color-name/-/color-name-2.1.0.tgz",
-      "integrity": "sha512-1bPaDNFm0axzE4MEAzKPuqKWeRaT43U/hyxKPBdqTfmPF+d6n7FSoTFxLVULUJOmiLp01KjhIPPH+HrXZJN4Rg==",
-      "engines": {
-        "node": ">=12.20"
-      }
-    },
     "node_modules/combined-stream": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
@@ -5796,7 +5661,7 @@
     },
     "node_modules/cookie": {
       "version": "1.1.1",
-      "resolved": "https://mirrors.tencent.com/npm/cookie/-/cookie-1.1.1.tgz",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-1.1.1.tgz",
       "integrity": "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==",
       "license": "MIT",
       "engines": {
@@ -5877,18 +5742,6 @@
         "node": ">= 6"
       }
     },
-    "node_modules/crc-32": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/crc-32/-/crc-32-1.2.2.tgz",
-      "integrity": "sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==",
-      "license": "Apache-2.0",
-      "bin": {
-        "crc32": "bin/crc32.njs"
-      },
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
     "node_modules/cross-spawn": {
       "version": "7.0.6",
       "resolved": "https://mirrors.tencent.com/npm/cross-spawn/-/cross-spawn-7.0.6.tgz",
@@ -5920,14 +5773,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/cssmin": {
-      "version": "0.3.2",
-      "resolved": "https://mirrors.tencent.com/npm/cssmin/-/cssmin-0.3.2.tgz",
-      "integrity": "sha512-bynxGIAJ8ybrnFobjsQotIjA8HFDDgPwbeUWNXXXfR+B4f9kkxdcUyagJoQCSUOfMV+ZZ6bMn8bvbozlCzUGwQ==",
-      "bin": {
-        "cssmin": "bin/cssmin"
-      }
-    },
     "node_modules/cssstyle": {
       "version": "4.6.0",
       "resolved": "https://registry.npmjs.org/cssstyle/-/cssstyle-4.6.0.tgz",
@@ -5956,9 +5801,9 @@
       "license": "MIT"
     },
     "node_modules/cytoscape": {
-      "version": "3.33.4",
-      "resolved": "https://mirrors.tencent.com/npm/cytoscape/-/cytoscape-3.33.4.tgz",
-      "integrity": "sha512-HIN5Pmd9MrX9BkV7tDwnOcEJCSFvCpc8X97h3f508J6I5FsqAY65wKOCvgH2CuP42CaahWaz4tuh32SOOIH7ww==",
+      "version": "3.34.3",
+      "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.34.3.tgz",
+      "integrity": "sha512-yfYGhRcGAntq6YBD583j4n0Eg3jIxvWmZtz/5uz9UYkeIStSlMxuUja+ec5j3iBD8nv1rwaOAYMW09tBdkSeaQ==",
       "license": "MIT",
       "peer": true,
       "engines": {
@@ -6604,16 +6449,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/deep-eql": {
-      "version": "5.0.2",
-      "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-5.0.2.tgz",
-      "integrity": "sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/deep-is": {
       "version": "0.1.4",
       "resolved": "https://mirrors.tencent.com/npm/deep-is/-/deep-is-0.1.4.tgz",
@@ -6733,9 +6568,9 @@
       "license": "MIT"
     },
     "node_modules/dompurify": {
-      "version": "3.4.7",
-      "resolved": "https://mirrors.tencent.com/npm/dompurify/-/dompurify-3.4.7.tgz",
-      "integrity": "sha512-2jBxDJY4RR06tQNy4w5FlFH7kfxsQZlufd0sbv+chfHCxeJwrFw2baUDsSwvBISD4K4RDbd0PTfy3uNXsR6siA==",
+      "version": "3.4.16",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz",
+      "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -6756,13 +6591,6 @@
         "node": ">= 0.4"
       }
     },
-    "node_modules/eastasianwidth": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
-      "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/echarts": {
       "version": "6.1.0",
       "resolved": "https://mirrors.tencent.com/npm/echarts/-/echarts-6.1.0.tgz",
@@ -6795,10 +6623,17 @@
       }
     },
     "node_modules/electron-to-chromium": {
-      "version": "1.5.364",
-      "resolved": "https://mirrors.tencent.com/npm/electron-to-chromium/-/electron-to-chromium-1.5.364.tgz",
-      "integrity": "sha512-G/dYE3+AYhyHwzTwg8UbnXf7zqMERYh7l2jJ3QujhFsH8agSYwtnGAR2aZ7f0AakIKJXd5En/Hre4igIUrdlYw==",
-      "dev": true
+      "version": "1.5.445",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.445.tgz",
+      "integrity": "sha512-iX7o1nF+qNb3Bv5mLYgqfgF9Znh9e/8MKXdmbb8Gv2Q47OKIzTwEPD1oda1HrgEwYatTLJj0wQjHvIFt8Db53Q==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/elkjs": {
+      "version": "0.9.3",
+      "resolved": "https://registry.npmjs.org/elkjs/-/elkjs-0.9.3.tgz",
+      "integrity": "sha512-f/ZeWvW/BCXbhGEf1Ujp29EASo/lk1FDnETgNKwJrsVvGZhUWCZyg3xLJjAsxfOmt8KjswHmI5EwCQcPMpOYhQ==",
+      "license": "EPL-2.0"
     },
     "node_modules/emoji-regex": {
       "version": "8.0.0",
@@ -6806,12 +6641,6 @@
       "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
       "dev": true
     },
-    "node_modules/enabled": {
-      "version": "2.0.0",
-      "resolved": "https://mirrors.tencent.com/npm/enabled/-/enabled-2.0.0.tgz",
-      "integrity": "sha512-AKrN98kuwOzMIdAizXGI86UFBoo26CL21UM763y1h/GMSJ4/OHU9k2YlsmBpyScFo/wbLzWQJBMCW4+IO3/+OQ==",
-      "license": "MIT"
-    },
     "node_modules/entities": {
       "version": "6.0.1",
       "resolved": "https://mirrors.tencent.com/npm/entities/-/entities-6.0.1.tgz",
@@ -6935,9 +6764,9 @@
       }
     },
     "node_modules/es-module-lexer": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-1.7.0.tgz",
-      "integrity": "sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.3.2.tgz",
+      "integrity": "sha512-poHGpORABojJJucnV9KbOavETW8lBVnphkW77ER5/BQ5Fz7oXSoCNek7IH3vR5nRjdsEz926ibFYX8KtLQmdyw==",
       "dev": true,
       "license": "MIT"
     },
@@ -7300,9 +7129,9 @@
       "dev": true
     },
     "node_modules/fast-uri": {
-      "version": "3.1.2",
-      "resolved": "https://mirrors.tencent.com/npm/fast-uri/-/fast-uri-3.1.2.tgz",
-      "integrity": "sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==",
+      "version": "3.1.8",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
       "dev": true,
       "funding": [
         {
@@ -7313,7 +7142,8 @@
           "type": "opencollective",
           "url": "https://opencollective.com/fastify"
         }
-      ]
+      ],
+      "license": "BSD-3-Clause"
     },
     "node_modules/fault": {
       "version": "1.0.4",
@@ -7346,12 +7176,6 @@
         }
       }
     },
-    "node_modules/fecha": {
-      "version": "4.2.3",
-      "resolved": "https://mirrors.tencent.com/npm/fecha/-/fecha-4.2.3.tgz",
-      "integrity": "sha512-OP2IUU6HeYKJi3i0z4A19kHMQoLVs4Hc+DPqqxI2h/DPZHTm/vjsfC6P0b4jCMy14XizLBqvndQ+UilD7707Jw==",
-      "license": "MIT"
-    },
     "node_modules/file-entry-cache": {
       "version": "8.0.0",
       "resolved": "https://mirrors.tencent.com/npm/file-entry-cache/-/file-entry-cache-8.0.0.tgz",
@@ -7375,10 +7199,11 @@
       }
     },
     "node_modules/filelist/node_modules/brace-expansion": {
-      "version": "2.1.1",
-      "resolved": "https://mirrors.tencent.com/npm/brace-expansion/-/brace-expansion-2.1.1.tgz",
-      "integrity": "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==",
+      "version": "2.1.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.7.tgz",
+      "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0"
       }
@@ -7436,12 +7261,6 @@
       "integrity": "sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==",
       "dev": true
     },
-    "node_modules/fn.name": {
-      "version": "1.1.0",
-      "resolved": "https://mirrors.tencent.com/npm/fn.name/-/fn.name-1.1.0.tgz",
-      "integrity": "sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw==",
-      "license": "MIT"
-    },
     "node_modules/for-each": {
       "version": "0.3.5",
       "resolved": "https://mirrors.tencent.com/npm/for-each/-/for-each-0.3.5.tgz",
@@ -7500,15 +7319,6 @@
         "node": ">=0.4.x"
       }
     },
-    "node_modules/frac": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/frac/-/frac-1.1.2.tgz",
-      "integrity": "sha512-w/XBfkibaTl3YDqASwfDUqkna4Z2p9cFSr1aHDt0WoMTECnRfBOv2WArlZILlqgWlmdIlALXGpM2AOhEk5W3IA==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
     "node_modules/fs-extra": {
       "version": "9.1.0",
       "resolved": "https://mirrors.tencent.com/npm/fs-extra/-/fs-extra-9.1.0.tgz",
@@ -7717,15 +7527,16 @@
       }
     },
     "node_modules/glob/node_modules/brace-expansion": {
-      "version": "5.0.6",
-      "resolved": "https://mirrors.tencent.com/npm/brace-expansion/-/brace-expansion-5.0.6.tgz",
-      "integrity": "sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/glob/node_modules/minimatch": {
@@ -8730,6 +8541,7 @@
       "version": "2.0.1",
       "resolved": "https://mirrors.tencent.com/npm/is-stream/-/is-stream-2.0.1.tgz",
       "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -8924,21 +8736,6 @@
         "node": ">=10"
       }
     },
-    "node_modules/istanbul-lib-source-maps": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-5.0.6.tgz",
-      "integrity": "sha512-yg2d+Em4KizZC5niWhQaIomgf5WlL4vOOjZ5xGCmF8SnPE/mDWWXgvRExdcpCgh9lLRRa1/fSYp2ymmbJ1pI+A==",
-      "dev": true,
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "@jridgewell/trace-mapping": "^0.3.23",
-        "debug": "^4.1.1",
-        "istanbul-lib-coverage": "^3.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/istanbul-reports": {
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz",
@@ -8999,9 +8796,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://mirrors.tencent.com/npm/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz",
+      "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==",
       "dev": true,
       "funding": [
         {
@@ -9110,18 +8907,6 @@
         "node": ">=6"
       }
     },
-    "node_modules/jsmin": {
-      "version": "1.0.1",
-      "resolved": "https://mirrors.tencent.com/npm/jsmin/-/jsmin-1.0.1.tgz",
-      "integrity": "sha512-OPuL5X/bFKgVdMvEIX3hnpx3jbVpFCrEM8pKPXjFkZUqg521r41ijdyTz7vACOhW6o1neVlcLyd+wkbK5fNHRg==",
-      "license": "Doug Crockford's license that allows this module to be used for Good but not for Evil",
-      "bin": {
-        "jsmin": "bin/jsmin"
-      },
-      "engines": {
-        "node": ">=0.1.93"
-      }
-    },
     "node_modules/json-buffer": {
       "version": "3.0.1",
       "resolved": "https://mirrors.tencent.com/npm/json-buffer/-/json-buffer-3.0.1.tgz",
@@ -9201,51 +8986,29 @@
         "setimmediate": "^1.0.5"
       }
     },
-    "node_modules/jxLoader": {
-      "version": "0.1.1",
-      "resolved": "https://mirrors.tencent.com/npm/jxLoader/-/jxLoader-0.1.1.tgz",
-      "integrity": "sha512-ClEvAj3K68y8uKhub3RgTmcRPo5DfIWvtxqrKQdDPyZ1UVHIIKvVvjrAsJFSVL5wjv0rt5iH9SMCZ0XRKNzeUA==",
-      "dependencies": {
-        "js-yaml": "0.3.x",
-        "moo-server": "1.3.x",
-        "promised-io": "*",
-        "walker": "1.x"
-      },
-      "engines": {
-        "node": ">v0.4.10"
-      }
-    },
-    "node_modules/jxLoader/node_modules/js-yaml": {
-      "version": "0.3.7",
-      "resolved": "https://mirrors.tencent.com/npm/js-yaml/-/js-yaml-0.3.7.tgz",
-      "integrity": "sha512-/7PsVDNP2tVe2Z1cF9kTEkjamIwz4aooDpRKmN1+g/9eePCgcxsv4QDvEbxO0EH+gdDD7MLyDoR6BASo3hH51g==",
-      "engines": {
-        "node": "> 0.4.11"
-      }
-    },
     "node_modules/katex": {
-      "version": "0.16.47",
-      "resolved": "https://mirrors.tencent.com/npm/katex/-/katex-0.16.47.tgz",
-      "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==",
+      "version": "0.19.0",
+      "resolved": "https://registry.npmjs.org/katex/-/katex-0.19.0.tgz",
+      "integrity": "sha512-v6Tznz3zJ7u3niRCoDTsumM2+HA2XXcCu+WAacCeHD2z3p9A9Ks987o5FzfTGBN0e8A0vjEgIDvLbICrXpdw/Q==",
       "funding": [
         "https://opencollective.com/katex",
         "https://github.com/sponsors/katex"
       ],
       "license": "MIT",
       "dependencies": {
-        "commander": "^8.3.0"
+        "commander": "^15.0.0"
       },
       "bin": {
         "katex": "cli.js"
       }
     },
     "node_modules/katex/node_modules/commander": {
-      "version": "8.3.0",
-      "resolved": "https://mirrors.tencent.com/npm/commander/-/commander-8.3.0.tgz",
-      "integrity": "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==",
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz",
+      "integrity": "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg==",
       "license": "MIT",
       "engines": {
-        "node": ">= 12"
+        "node": ">=22.12.0"
       }
     },
     "node_modules/keyv": {
@@ -9262,12 +9025,6 @@
       "resolved": "https://mirrors.tencent.com/npm/khroma/-/khroma-2.1.0.tgz",
       "integrity": "sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw=="
     },
-    "node_modules/kuler": {
-      "version": "2.0.0",
-      "resolved": "https://mirrors.tencent.com/npm/kuler/-/kuler-2.0.0.tgz",
-      "integrity": "sha512-Xq9nH7KlWZmXAtodXDDRE7vs6DU1gTU8zYDHDiWLSip45Egwq3plLHzPn27NgvzL2r1LMPC1vdqh98sQxtqj4A==",
-      "license": "MIT"
-    },
     "node_modules/layout-base": {
       "version": "1.0.2",
       "resolved": "https://mirrors.tencent.com/npm/layout-base/-/layout-base-1.0.2.tgz",
@@ -9393,23 +9150,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/logform": {
-      "version": "2.7.0",
-      "resolved": "https://mirrors.tencent.com/npm/logform/-/logform-2.7.0.tgz",
-      "integrity": "sha512-TFYA4jnP7PVbmlBIfhlSe+WKxs9dklXMTEGcBCIvLhE/Tn3H6Gk1norupVW7m5Cnd4bLcr08AytbyV/xj7f/kQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@colors/colors": "1.6.0",
-        "@types/triple-beam": "^1.3.2",
-        "fecha": "^4.2.0",
-        "ms": "^2.1.1",
-        "safe-stable-stringify": "^2.3.1",
-        "triple-beam": "^1.3.0"
-      },
-      "engines": {
-        "node": ">= 12.0.0"
-      }
-    },
     "node_modules/longest-streak": {
       "version": "3.1.0",
       "resolved": "https://mirrors.tencent.com/npm/longest-streak/-/longest-streak-3.1.0.tgz",
@@ -9431,13 +9171,6 @@
         "loose-envify": "cli.js"
       }
     },
-    "node_modules/loupe": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/loupe/-/loupe-3.2.1.tgz",
-      "integrity": "sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/lowlight": {
       "version": "1.20.0",
       "resolved": "https://mirrors.tencent.com/npm/lowlight/-/lowlight-1.20.0.tgz",
@@ -9491,15 +9224,15 @@
       }
     },
     "node_modules/magicast": {
-      "version": "0.3.5",
-      "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.3.5.tgz",
-      "integrity": "sha512-L0WhttDl+2BOsybvEOLK7fW3UA0OQ0IQ2d6Zl2x/a6vVRs3bAY0ECOSHHeL5jD+SbOpOCUEi0y1DgHEn9Qn1AQ==",
+      "version": "0.5.5",
+      "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.5.tgz",
+      "integrity": "sha512-UicdXN8zQ3JHlxVq+28afMXPr1z7WNY6+7EJnzTdQWkTAlMLF5fNCCKxJHBQwGaNGR11581EiQmQzx73+MvszA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/parser": "^7.25.4",
-        "@babel/types": "^7.25.4",
-        "source-map-js": "^1.2.0"
+        "@babel/parser": "^7.29.7",
+        "@babel/types": "^7.29.7",
+        "source-map-js": "^1.2.1"
       }
     },
     "node_modules/make-cancellable-promise": {
@@ -9545,14 +9278,6 @@
         "url": "https://github.com/wojtekmaj/make-event-props?sponsor=1"
       }
     },
-    "node_modules/makeerror": {
-      "version": "1.0.12",
-      "resolved": "https://mirrors.tencent.com/npm/makeerror/-/makeerror-1.0.12.tgz",
-      "integrity": "sha512-JmqCvUhmt43madlpFzG4BQzG2Z3m6tvQDNKdClZnO3VbIudJYmxsT0FNJMeiB2+JTSlTQTSbU8QdesVmwJcmLg==",
-      "dependencies": {
-        "tmpl": "1.0.5"
-      }
-    },
     "node_modules/markdown-table": {
       "version": "3.0.4",
       "resolved": "https://mirrors.tencent.com/npm/markdown-table/-/markdown-table-3.0.4.tgz",
@@ -9902,39 +9627,63 @@
       }
     },
     "node_modules/mermaid": {
-      "version": "11.15.0",
-      "resolved": "https://mirrors.tencent.com/npm/mermaid/-/mermaid-11.15.0.tgz",
-      "integrity": "sha512-pTMbcf3rWdtLiYGpmoTjHEpeY8seiy6sR+9nD7LOs8KfUbHE4lOUAprTRqRAcWSQ6MQpdX+YEsxShtGsINtPtw==",
+      "version": "12.1.0",
+      "resolved": "https://registry.npmjs.org/mermaid/-/mermaid-12.1.0.tgz",
+      "integrity": "sha512-wlVCp+8eTupfCeeFvoZNNiTuHrvag0P2jz/ILgb/f/6jkVokUefOcujefi8qUe/j2asHiSePncVsz/xzzA80LQ==",
+      "license": "MIT",
       "dependencies": {
-        "@braintree/sanitize-url": "^7.1.1",
+        "@braintree/sanitize-url": "^7.1.2",
         "@iconify/utils": "^3.0.2",
-        "@mermaid-js/parser": "^1.1.1",
+        "@mermaid-js/parser": "^2.0.1",
         "@types/d3": "^7.4.3",
         "@upsetjs/venn.js": "^2.0.0",
-        "cytoscape": "^3.33.1",
+        "chevrotain": "~13.2.0",
+        "cytoscape": "^3.34.0",
         "cytoscape-cose-bilkent": "^4.1.0",
         "cytoscape-fcose": "^2.2.0",
         "d3": "^7.9.0",
         "d3-sankey": "^0.12.3",
         "dagre-d3-es": "7.0.14",
-        "dayjs": "^1.11.19",
-        "dompurify": "^3.3.1",
+        "dayjs": "^1.11.21",
+        "dompurify": "^3.4.12",
+        "elkjs": "^0.9.3",
         "es-toolkit": "^1.45.1",
-        "katex": "^0.16.25",
+        "katex": "^0.16.47",
         "khroma": "^2.1.0",
         "marked": "^16.3.0",
         "roughjs": "^4.6.6",
         "stylis": "^4.3.6",
         "ts-dedent": "^2.2.0",
         "uuid": "^11.1.0 || ^12 || ^13 || ^14.0.0"
+      },
+      "engines": {
+        "node": ">=22.12.0"
       }
     },
-    "node_modules/micromark": {
-      "version": "4.0.2",
-      "resolved": "https://mirrors.tencent.com/npm/micromark/-/micromark-4.0.2.tgz",
-      "integrity": "sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==",
-      "funding": [
-        {
+    "node_modules/mermaid/node_modules/@chevrotain/types": {
+      "version": "13.2.0",
+      "resolved": "https://registry.npmjs.org/@chevrotain/types/-/types-13.2.0.tgz",
+      "integrity": "sha512-7qrYHRlKfWf2AvBfJi5eVOrKAkbxvMFsy/iIHTGIiApNcEecCaVIdR+mIQhyCBsTDJxBz4JWXHMo6krbhR9hVg==",
+      "license": "Apache-2.0"
+    },
+    "node_modules/mermaid/node_modules/@mermaid-js/parser": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/@mermaid-js/parser/-/parser-2.0.1.tgz",
+      "integrity": "sha512-j37dj/h6p6pots1L7pLPPNuABEEu9WP4OYg9pW1g+nYG331j0+3canE9OagtYdytYvdSAMG+2fKU5cxep6LgjA==",
+      "license": "MIT",
+      "dependencies": {
+        "@chevrotain/types": "~13.2.0"
+      },
+      "engines": {
+        "node": ">=22.12.0"
+      }
+    },
+    "node_modules/micromark": {
+      "version": "4.0.2",
+      "resolved": "https://mirrors.tencent.com/npm/micromark/-/micromark-4.0.2.tgz",
+      "integrity": "sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==",
+      "funding": [
+        {
           "type": "GitHub Sponsors",
           "url": "https://github.com/sponsors/unifiedjs"
         },
@@ -10579,24 +10328,15 @@
       }
     },
     "node_modules/monaco-editor": {
-      "version": "0.55.1",
-      "resolved": "https://mirrors.tencent.com/npm/monaco-editor/-/monaco-editor-0.55.1.tgz",
-      "integrity": "sha512-jz4x+TJNFHwHtwuV9vA9rMujcZRb0CEilTEwG2rRSpe/A7Jdkuj8xPKttCgOh+v/lkHy7HsZ64oj+q3xoAFl9A==",
+      "version": "0.57.0",
+      "resolved": "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.57.0.tgz",
+      "integrity": "sha512-5BkI9KGoqrNvBGUe15/QlZq3OooZ8WLg1AxTpaqHRCP3HNpzPPZKE2EDz8M7c+VRmCeUw1Brp4cx/PWm3kI/5A==",
       "license": "MIT",
       "dependencies": {
-        "dompurify": "3.2.7",
+        "dompurify": "3.4.15",
         "marked": "14.0.0"
       }
     },
-    "node_modules/monaco-editor/node_modules/dompurify": {
-      "version": "3.2.7",
-      "resolved": "https://mirrors.tencent.com/npm/dompurify/-/dompurify-3.2.7.tgz",
-      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
-      "license": "(MPL-2.0 OR Apache-2.0)",
-      "optionalDependencies": {
-        "@types/trusted-types": "^2.0.7"
-      }
-    },
     "node_modules/monaco-editor/node_modules/marked": {
       "version": "14.0.0",
       "resolved": "https://mirrors.tencent.com/npm/marked/-/marked-14.0.0.tgz",
@@ -10608,23 +10348,15 @@
         "node": ">= 18"
       }
     },
-    "node_modules/moo-server": {
-      "version": "1.3.0",
-      "resolved": "https://mirrors.tencent.com/npm/moo-server/-/moo-server-1.3.0.tgz",
-      "integrity": "sha512-9A8/eor2DXwpv1+a4pZAAydqLFVrWoKoO1fzdzqLUhYVXAO1Kgd1FR2gFZi7YdHzF0s4W8cDNwCfKJQrvLqxDw==",
-      "engines": {
-        "node": ">v0.4.10"
-      }
-    },
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://mirrors.tencent.com/npm/ms/-/ms-2.1.3.tgz",
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
     },
     "node_modules/nanoid": {
-      "version": "3.3.12",
-      "resolved": "https://mirrors.tencent.com/npm/nanoid/-/nanoid-3.3.12.tgz",
-      "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==",
+      "version": "3.3.20",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
+      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
       "dev": true,
       "funding": [
         {
@@ -10665,10 +10397,11 @@
       }
     },
     "node_modules/node-releases": {
-      "version": "2.0.46",
-      "resolved": "https://mirrors.tencent.com/npm/node-releases/-/node-releases-2.0.46.tgz",
-      "integrity": "sha512-GYVXHE2KnrzAfsAjl4uP++evGFCrAU1jta4ubEjIG7YWt/64Gqv66a30yKwWczVjA6j3bM4nBwH7Pk1JmDHaxQ==",
+      "version": "2.0.57",
+      "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.57.tgz",
+      "integrity": "sha512-kQK9LGGFiHtrWiNhZtA7Qbw17AQz+dmsEKODRIVTXA9+e5MS/2gZEBhYJt13GrAz5/IOZKddH/0Z3TP/Zgo+yw==",
       "dev": true,
+      "license": "MIT",
       "engines": {
         "node": ">=18"
       }
@@ -10721,13 +10454,18 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/one-time": {
-      "version": "1.0.0",
-      "resolved": "https://mirrors.tencent.com/npm/one-time/-/one-time-1.0.0.tgz",
-      "integrity": "sha512-5DXOiRKwuSEcQ/l0kGCF6Q3jcADFv5tSmRaJck/OqkVFcOzutB134KRSfF0xDrL39MNnqxbHBbUUcjZIhTgb2g==",
+    "node_modules/obug": {
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/obug/-/obug-2.2.1.tgz",
+      "integrity": "sha512-XrsrhT5sybtKI6wakr2SPOlGZWWYbUXZ7a0jT8/QOeAPau+1X/bSegNe5YR75oJmEZQbKningirmGOEJCIk61Q==",
+      "dev": true,
+      "funding": [
+        "https://github.com/sponsors/sxzz",
+        "https://opencollective.com/debug"
+      ],
       "license": "MIT",
-      "dependencies": {
-        "fn.name": "1.x.x"
+      "engines": {
+        "node": ">=12.20.0"
       }
     },
     "node_modules/open": {
@@ -10978,16 +10716,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/pathval": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/pathval/-/pathval-2.0.1.tgz",
-      "integrity": "sha512-//nshmD55c46FuFw26xV/xFAaB5HF9Xdap7HJBBnrKdAd6/GxDBaNA1870O79+9ueg61cZLSVc+OaFlfmObYVQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 14.16"
-      }
-    },
     "node_modules/pdfjs-dist": {
       "version": "5.4.296",
       "resolved": "https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-5.4.296.tgz",
@@ -11067,9 +10795,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.15",
-      "resolved": "https://mirrors.tencent.com/npm/postcss/-/postcss-8.5.15.tgz",
-      "integrity": "sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==",
+      "version": "8.5.29",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.29.tgz",
+      "integrity": "sha512-49cGhUbXj8Qenv0iTMxA1cFBzxXoctpC9Ujd77t1WcbJIr6nF/eI7g/8MgxrYldFRuAXvja7xQRwavoW7kgrxQ==",
       "dev": true,
       "funding": [
         {
@@ -11085,10 +10813,11 @@
           "url": "https://github.com/sponsors/ai"
         }
       ],
+      "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.12",
+        "nanoid": "^3.3.19",
         "picocolors": "^1.1.1",
-        "source-map-js": "^1.2.1"
+        "source-map-js": "^1.2.2"
       },
       "engines": {
         "node": "^10 || ^12 || >=14"
@@ -11181,11 +10910,6 @@
       "resolved": "https://mirrors.tencent.com/npm/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
       "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="
     },
-    "node_modules/promised-io": {
-      "version": "0.3.6",
-      "resolved": "https://mirrors.tencent.com/npm/promised-io/-/promised-io-0.3.6.tgz",
-      "integrity": "sha512-bNwZusuNIW4m0SPR8jooSyndD35ggirHlxVl/UhIaZD/F0OBv9ebfc6tNmbpZts3QXHggkjIBH8lvtnzhtcz0A=="
-    },
     "node_modules/property-information": {
       "version": "7.2.0",
       "resolved": "https://mirrors.tencent.com/npm/property-information/-/property-information-7.2.0.tgz",
@@ -12011,9 +11735,9 @@
       }
     },
     "node_modules/react-router": {
-      "version": "7.16.0",
-      "resolved": "https://mirrors.tencent.com/npm/react-router/-/react-router-7.16.0.tgz",
-      "integrity": "sha512-wArC8lVyJb3+jM9OpDyW6hLCizACWkvQR/sSGqSs+o5uEXEtGlqdZ4v8hENR3Jad6i+LRkK93q/+bQAcvl6V1A==",
+      "version": "7.18.4",
+      "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.18.4.tgz",
+      "integrity": "sha512-PUPQcMhMGRAslLcvtlPz/kmzBEWPhLdgLFrL7pLNepBL6dX0lWj4WD2cUYVgYCuT3jxvghYFg81cDTj44DhetQ==",
       "license": "MIT",
       "dependencies": {
         "cookie": "^1.0.1",
@@ -12033,12 +11757,12 @@
       }
     },
     "node_modules/react-router-dom": {
-      "version": "7.16.0",
-      "resolved": "https://mirrors.tencent.com/npm/react-router-dom/-/react-router-dom-7.16.0.tgz",
-      "integrity": "sha512-kMUAbimWB5FVbF4Bce4bJsiKJWLIUHq/mEG8+CFDnCSgltptBiG5nguducmsJeGKytlCvQud9Qhzpn49iduTlA==",
+      "version": "7.18.4",
+      "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-7.18.4.tgz",
+      "integrity": "sha512-yrfmJHIpDG7taCpqKjT1G5B6q3O2K+RN8/fgNf0lTjCwiPbQ0ei6vXX9ZjQR+7ld8Tr7Z5xmyMnZ8YJrphWQUw==",
       "license": "MIT",
       "dependencies": {
-        "react-router": "7.16.0"
+        "react-router": "7.18.4"
       },
       "engines": {
         "node": ">=20.0.0"
@@ -12620,15 +12344,6 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/safe-stable-stringify": {
-      "version": "2.5.0",
-      "resolved": "https://mirrors.tencent.com/npm/safe-stable-stringify/-/safe-stable-stringify-2.5.0.tgz",
-      "integrity": "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/safer-buffer": {
       "version": "2.1.2",
       "resolved": "https://mirrors.tencent.com/npm/safer-buffer/-/safer-buffer-2.1.2.tgz",
@@ -12702,7 +12417,7 @@
     },
     "node_modules/set-cookie-parser": {
       "version": "2.7.2",
-      "resolved": "https://mirrors.tencent.com/npm/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz",
+      "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz",
       "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==",
       "license": "MIT"
     },
@@ -12896,10 +12611,11 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://mirrors.tencent.com/npm/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "dev": true,
+      "license": "BSD-3-Clause",
       "engines": {
         "node": ">=0.10.0"
       }
@@ -12935,27 +12651,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/ssf": {
-      "version": "0.11.2",
-      "resolved": "https://registry.npmjs.org/ssf/-/ssf-0.11.2.tgz",
-      "integrity": "sha512-+idbmIXoYET47hH+d7dfm2epdOMUDjqcB4648sTZ+t2JwoyBFL/insLfB/racrDmsKB3diwsDA696pZMieAC5g==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "frac": "~1.1.2"
-      },
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
-    "node_modules/stack-trace": {
-      "version": "0.0.10",
-      "resolved": "https://mirrors.tencent.com/npm/stack-trace/-/stack-trace-0.0.10.tgz",
-      "integrity": "sha512-KGzahc7puUKkzyMt+IqAep+TVNbKP+k2Lmwhub39m1AsTSkaDutx56aDCo+HLDzf/D26BIHTJWNiTG1KAJiQCg==",
-      "license": "MIT",
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/stackback": {
       "version": "0.0.2",
       "resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
@@ -12970,9 +12665,9 @@
       "license": "MIT"
     },
     "node_modules/std-env": {
-      "version": "3.10.0",
-      "resolved": "https://registry.npmjs.org/std-env/-/std-env-3.10.0.tgz",
-      "integrity": "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==",
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.3.0.tgz",
+      "integrity": "sha512-OtU/EgQ1kIm5KwqQpBC6ZEMXrZRui11w8zgfTWp8cdO9B8OaPsbA8bTHO2P+HNo1VlUTGMVBwPhydu6poeXiag==",
       "dev": true,
       "license": "MIT"
     },
@@ -13020,22 +12715,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/string-width-cjs": {
-      "name": "string-width",
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/string.prototype.matchall": {
       "version": "4.0.12",
       "resolved": "https://mirrors.tencent.com/npm/string.prototype.matchall/-/string.prototype.matchall-4.0.12.tgz",
@@ -13162,20 +12841,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/strip-ansi-cjs": {
-      "name": "strip-ansi",
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/strip-comments": {
       "version": "2.0.1",
       "resolved": "https://mirrors.tencent.com/npm/strip-comments/-/strip-comments-2.0.1.tgz",
@@ -13211,26 +12876,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/strip-literal": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/strip-literal/-/strip-literal-3.1.0.tgz",
-      "integrity": "sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "js-tokens": "^9.0.1"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/antfu"
-      }
-    },
-    "node_modules/strip-literal/node_modules/js-tokens": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-9.0.1.tgz",
-      "integrity": "sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/style-to-js": {
       "version": "1.1.21",
       "resolved": "https://mirrors.tencent.com/npm/style-to-js/-/style-to-js-1.1.21.tgz",
@@ -13341,264 +12986,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/test-exclude": {
-      "version": "7.0.2",
-      "resolved": "https://registry.npmjs.org/test-exclude/-/test-exclude-7.0.2.tgz",
-      "integrity": "sha512-u9E6A+ZDYdp7a4WnarkXPZOx8Ilz46+kby6p1yZ8zsGTz9gYa6FIS7lj2oezzNKmtdyyJNNmmXDppga5GB7kSw==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "@istanbuljs/schema": "^0.1.2",
-        "glob": "^10.4.1",
-        "minimatch": "^10.2.2"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/test-exclude/node_modules/@isaacs/cliui": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
-      "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "string-width": "^5.1.2",
-        "string-width-cjs": "npm:string-width@^4.2.0",
-        "strip-ansi": "^7.0.1",
-        "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
-        "wrap-ansi": "^8.1.0",
-        "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
-      },
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/test-exclude/node_modules/ansi-regex": {
-      "version": "6.2.2",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
-      "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
-      }
-    },
-    "node_modules/test-exclude/node_modules/ansi-styles": {
-      "version": "6.2.3",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
-      "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
-      }
-    },
-    "node_modules/test-exclude/node_modules/balanced-match": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
-      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "18 || 20 || >=22"
-      }
-    },
-    "node_modules/test-exclude/node_modules/brace-expansion": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
-      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "balanced-match": "^4.0.2"
-      },
-      "engines": {
-        "node": "18 || 20 || >=22"
-      }
-    },
-    "node_modules/test-exclude/node_modules/emoji-regex": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
-      "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/test-exclude/node_modules/glob": {
-      "version": "10.5.0",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz",
-      "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==",
-      "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "foreground-child": "^3.1.0",
-        "jackspeak": "^3.1.2",
-        "minimatch": "^9.0.4",
-        "minipass": "^7.1.2",
-        "package-json-from-dist": "^1.0.0",
-        "path-scurry": "^1.11.1"
-      },
-      "bin": {
-        "glob": "dist/esm/bin.mjs"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
-    "node_modules/test-exclude/node_modules/glob/node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/test-exclude/node_modules/glob/node_modules/brace-expansion": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.1.tgz",
-      "integrity": "sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "balanced-match": "^1.0.0"
-      }
-    },
-    "node_modules/test-exclude/node_modules/glob/node_modules/minimatch": {
-      "version": "9.0.9",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
-      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "brace-expansion": "^2.0.2"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
-    "node_modules/test-exclude/node_modules/jackspeak": {
-      "version": "3.4.3",
-      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz",
-      "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==",
-      "dev": true,
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "@isaacs/cliui": "^8.0.2"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      },
-      "optionalDependencies": {
-        "@pkgjs/parseargs": "^0.11.0"
-      }
-    },
-    "node_modules/test-exclude/node_modules/lru-cache": {
-      "version": "10.4.3",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
-      "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
-      "dev": true,
-      "license": "ISC"
-    },
-    "node_modules/test-exclude/node_modules/minimatch": {
-      "version": "10.2.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.5.tgz",
-      "integrity": "sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==",
-      "dev": true,
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "brace-expansion": "^5.0.5"
-      },
-      "engines": {
-        "node": "18 || 20 || >=22"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
-    "node_modules/test-exclude/node_modules/path-scurry": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz",
-      "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==",
-      "dev": true,
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "lru-cache": "^10.2.0",
-        "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.18"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
-    "node_modules/test-exclude/node_modules/string-width": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
-      "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "eastasianwidth": "^0.2.0",
-        "emoji-regex": "^9.2.2",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/test-exclude/node_modules/strip-ansi": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz",
-      "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^6.2.2"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
-      }
-    },
-    "node_modules/test-exclude/node_modules/wrap-ansi": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
-      "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^6.1.0",
-        "string-width": "^5.0.1",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
-    "node_modules/text-hex": {
-      "version": "1.0.0",
-      "resolved": "https://mirrors.tencent.com/npm/text-hex/-/text-hex-1.0.0.tgz",
-      "integrity": "sha512-uuVGNWzgJ4yhRaNSiubPY7OjISw4sw4E5Uv0wbjp+OzcbmVU/rsT8ujgcXJhn9ypzsgr5vlzpPqP+MBBKcGvbg==",
-      "license": "MIT"
-    },
     "node_modules/throttle-debounce": {
       "version": "5.0.2",
       "resolved": "https://mirrors.tencent.com/npm/throttle-debounce/-/throttle-debounce-5.0.2.tgz",
@@ -13608,14 +12995,6 @@
         "node": ">=12.22"
       }
     },
-    "node_modules/timespan": {
-      "version": "2.3.0",
-      "resolved": "https://mirrors.tencent.com/npm/timespan/-/timespan-2.3.0.tgz",
-      "integrity": "sha512-0Jq9+58T2wbOyLth0EU+AUb6JMGCLaTWIykJFa7hyAybjVH9gpVMTfUAwo5fWAvtFt2Tjh/Elg8JtgNpnMnM8g==",
-      "engines": {
-        "node": ">= 0.2.0"
-      }
-    },
     "node_modules/tiny-invariant": {
       "version": "1.3.3",
       "resolved": "https://mirrors.tencent.com/npm/tiny-invariant/-/tiny-invariant-1.3.3.tgz",
@@ -13655,30 +13034,10 @@
         "url": "https://github.com/sponsors/SuperchupuDev"
       }
     },
-    "node_modules/tinypool": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/tinypool/-/tinypool-1.1.1.tgz",
-      "integrity": "sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^18.0.0 || >=20.0.0"
-      }
-    },
     "node_modules/tinyrainbow": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-2.0.0.tgz",
-      "integrity": "sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14.0.0"
-      }
-    },
-    "node_modules/tinyspy": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/tinyspy/-/tinyspy-4.0.4.tgz",
-      "integrity": "sha512-azl+t0z7pw/z958Gy9svOTuzqIk6xq+NSheJzn5MMWtWTFywIacg2wUlzKFGtt3cthx0r2SxMK0yzJOR0IES7Q==",
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.2.0.tgz",
+      "integrity": "sha512-LgO3D9yZJjApUiuUfl9iFAwrtaX4+lok3wJIqttGoKCHlWUqHqbQpnxCf82L8FjgKsh4iGo78hqJwgL8F6To2A==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -13705,11 +13064,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/tmpl": {
-      "version": "1.0.5",
-      "resolved": "https://mirrors.tencent.com/npm/tmpl/-/tmpl-1.0.5.tgz",
-      "integrity": "sha512-3f0uOEAQwIqGuWW2MVzYg8fV/QNnc/IpuJNG837rLuczAaLVHslWHZQj4IGiEl5Hs3kkbhwL9Ab7Hrsmuj+Smw=="
-    },
     "node_modules/toggle-selection": {
       "version": "1.0.6",
       "resolved": "https://registry.npmjs.org/toggle-selection/-/toggle-selection-1.0.6.tgz",
@@ -13748,14 +13102,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/triple-beam": {
-      "version": "1.4.1",
-      "resolved": "https://mirrors.tencent.com/npm/triple-beam/-/triple-beam-1.4.1.tgz",
-      "integrity": "sha512-aZbgViZrg1QNcG+LULa7nhZpJTZSLm/mXnHXnbAbjmN5aSa0y7V+wvv6+4WaBtpISJzThKy+PIPxc1Nq1EJ9mg==",
-      "engines": {
-        "node": ">= 14.0.0"
-      }
-    },
     "node_modules/trough": {
       "version": "2.2.0",
       "resolved": "https://mirrors.tencent.com/npm/trough/-/trough-2.2.0.tgz",
@@ -13932,14 +13278,6 @@
         "typescript": ">=4.8.4 <6.1.0"
       }
     },
-    "node_modules/uglify-js": {
-      "version": "1.3.5",
-      "resolved": "https://mirrors.tencent.com/npm/uglify-js/-/uglify-js-1.3.5.tgz",
-      "integrity": "sha512-YPX1DjKtom8l9XslmPFQnqWzTBkvI4N0pbkzLuPZZ4QTyig0uQqvZz9NgUdfEV+qccJzi7fVcGWdESvRIjWptQ==",
-      "bin": {
-        "uglifyjs": "bin/uglifyjs"
-      }
-    },
     "node_modules/unbox-primitive": {
       "version": "1.1.0",
       "resolved": "https://mirrors.tencent.com/npm/unbox-primitive/-/unbox-primitive-1.1.0.tgz",
@@ -14157,9 +13495,9 @@
       }
     },
     "node_modules/update-browserslist-db": {
-      "version": "1.2.3",
-      "resolved": "https://mirrors.tencent.com/npm/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz",
-      "integrity": "sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==",
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.3.tgz",
+      "integrity": "sha512-pJ2sYawQS0R/WI928Gj5GlPhTGzbMelq0+4INtSYNDV9ErKJcX6xjGWkoG/VnB3dpUm00zALaqkrUD77pO5TDQ==",
       "dev": true,
       "funding": [
         {
@@ -14373,29 +13711,6 @@
         }
       }
     },
-    "node_modules/vite-node": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmjs.org/vite-node/-/vite-node-3.2.4.tgz",
-      "integrity": "sha512-EbKSKh+bh1E1IFxeO0pg1n4dvoOTt0UDiXMd/qn++r98+jPO1xtJilvXldeuQ8giIB5IkpjCgMleHMNEsGH6pg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "cac": "^6.7.14",
-        "debug": "^4.4.1",
-        "es-module-lexer": "^1.7.0",
-        "pathe": "^2.0.3",
-        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0"
-      },
-      "bin": {
-        "vite-node": "vite-node.mjs"
-      },
-      "engines": {
-        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
-    },
     "node_modules/vite-plugin-pwa": {
       "version": "0.21.2",
       "resolved": "https://mirrors.tencent.com/npm/vite-plugin-pwa/-/vite-plugin-pwa-0.21.2.tgz",
@@ -14428,66 +13743,80 @@
       }
     },
     "node_modules/vitest": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-3.2.6.tgz",
-      "integrity": "sha512-xejya+bT/j/+R/AGa1XOfRxLmNUlLtlwjRsFUILF+xHfzElmGcmFydy2gqqIrd62ptIEfwVMofd19uNWD9L7Nw==",
+      "version": "4.1.11",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.11.tgz",
+      "integrity": "sha512-fhACrNXUidIbGSBr5FlbuBkO7VWC1ZyLl0DO4CU2DrQoAPxX84Ysxs+HeGQpii5lZWV1Q4gBZTTu49mF+A6Edw==",
       "dev": true,
       "license": "MIT",
       "peer": true,
       "dependencies": {
-        "@types/chai": "^5.2.2",
-        "@vitest/expect": "3.2.6",
-        "@vitest/mocker": "3.2.6",
-        "@vitest/pretty-format": "^3.2.6",
-        "@vitest/runner": "3.2.6",
-        "@vitest/snapshot": "3.2.6",
-        "@vitest/spy": "3.2.6",
-        "@vitest/utils": "3.2.6",
-        "chai": "^5.2.0",
-        "debug": "^4.4.1",
-        "expect-type": "^1.2.1",
-        "magic-string": "^0.30.17",
+        "@vitest/expect": "4.1.11",
+        "@vitest/mocker": "4.1.11",
+        "@vitest/pretty-format": "4.1.11",
+        "@vitest/runner": "4.1.11",
+        "@vitest/snapshot": "4.1.11",
+        "@vitest/spy": "4.1.11",
+        "@vitest/utils": "4.1.11",
+        "es-module-lexer": "^2.0.0",
+        "expect-type": "^1.3.0",
+        "magic-string": "^0.30.21",
+        "obug": "^2.1.1",
         "pathe": "^2.0.3",
-        "picomatch": "^4.0.2",
-        "std-env": "^3.9.0",
+        "picomatch": "^4.0.3",
+        "std-env": "^4.0.0-rc.1",
         "tinybench": "^2.9.0",
-        "tinyexec": "^0.3.2",
-        "tinyglobby": "^0.2.14",
-        "tinypool": "^1.1.1",
-        "tinyrainbow": "^2.0.0",
-        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0-0",
-        "vite-node": "3.2.4",
+        "tinyexec": "^1.0.2",
+        "tinyglobby": "^0.2.15",
+        "tinyrainbow": "^3.1.0",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0",
         "why-is-node-running": "^2.3.0"
       },
       "bin": {
         "vitest": "vitest.mjs"
       },
       "engines": {
-        "node": "^18.0.0 || ^20.0.0 || >=22.0.0"
+        "node": "^20.0.0 || ^22.0.0 || >=24.0.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
         "@edge-runtime/vm": "*",
-        "@types/debug": "^4.1.12",
-        "@types/node": "^18.0.0 || ^20.0.0 || >=22.0.0",
-        "@vitest/browser": "3.2.6",
-        "@vitest/ui": "3.2.6",
+        "@opentelemetry/api": "^1.9.0",
+        "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
+        "@vitest/browser-playwright": "4.1.11",
+        "@vitest/browser-preview": "4.1.11",
+        "@vitest/browser-webdriverio": "4.1.11",
+        "@vitest/coverage-istanbul": "4.1.11",
+        "@vitest/coverage-v8": "4.1.11",
+        "@vitest/ui": "4.1.11",
         "happy-dom": "*",
-        "jsdom": "*"
+        "jsdom": "*",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
       },
       "peerDependenciesMeta": {
         "@edge-runtime/vm": {
           "optional": true
         },
-        "@types/debug": {
+        "@opentelemetry/api": {
           "optional": true
         },
         "@types/node": {
           "optional": true
         },
-        "@vitest/browser": {
+        "@vitest/browser-playwright": {
+          "optional": true
+        },
+        "@vitest/browser-preview": {
+          "optional": true
+        },
+        "@vitest/browser-webdriverio": {
+          "optional": true
+        },
+        "@vitest/coverage-istanbul": {
+          "optional": true
+        },
+        "@vitest/coverage-v8": {
           "optional": true
         },
         "@vitest/ui": {
@@ -14498,16 +13827,12 @@
         },
         "jsdom": {
           "optional": true
+        },
+        "vite": {
+          "optional": false
         }
       }
     },
-    "node_modules/vitest/node_modules/tinyexec": {
-      "version": "0.3.2",
-      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-0.3.2.tgz",
-      "integrity": "sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/void-elements": {
       "version": "3.1.0",
       "resolved": "https://mirrors.tencent.com/npm/void-elements/-/void-elements-3.1.0.tgz",
@@ -14530,14 +13855,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/walker": {
-      "version": "1.0.8",
-      "resolved": "https://mirrors.tencent.com/npm/walker/-/walker-1.0.8.tgz",
-      "integrity": "sha512-ts/8E8l5b7kY0vlWLewOkDXMmPdLcVV4GmOQLyxuSswIJsweeFZtAsMF7k1Nszz+TYBQrlYRmzOnr398y1JemQ==",
-      "dependencies": {
-        "makeerror": "1.0.12"
-      }
-    },
     "node_modules/warning": {
       "version": "4.0.3",
       "resolved": "https://registry.npmjs.org/warning/-/warning-4.0.3.tgz",
@@ -14727,85 +14044,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/winston": {
-      "version": "3.19.0",
-      "resolved": "https://mirrors.tencent.com/npm/winston/-/winston-3.19.0.tgz",
-      "integrity": "sha512-LZNJgPzfKR+/J3cHkxcpHKpKKvGfDZVPS4hfJCc4cCG0CgYzvlD6yE/S3CIL/Yt91ak327YCpiF/0MyeZHEHKA==",
-      "license": "MIT",
-      "dependencies": {
-        "@colors/colors": "^1.6.0",
-        "@dabh/diagnostics": "^2.0.8",
-        "async": "^3.2.3",
-        "is-stream": "^2.0.0",
-        "logform": "^2.7.0",
-        "one-time": "^1.0.0",
-        "readable-stream": "^3.4.0",
-        "safe-stable-stringify": "^2.3.1",
-        "stack-trace": "0.0.x",
-        "triple-beam": "^1.3.0",
-        "winston-transport": "^4.9.0"
-      },
-      "engines": {
-        "node": ">= 12.0.0"
-      }
-    },
-    "node_modules/winston-transport": {
-      "version": "4.9.0",
-      "resolved": "https://mirrors.tencent.com/npm/winston-transport/-/winston-transport-4.9.0.tgz",
-      "integrity": "sha512-8drMJ4rkgaPo1Me4zD/3WLfI/zPdA9o2IipKODunnGDcuqbHwjsbB79ylv04LCGGzU0xQ6vTznOMpQGaLhhm6A==",
-      "dependencies": {
-        "logform": "^2.7.0",
-        "readable-stream": "^3.6.2",
-        "triple-beam": "^1.3.0"
-      },
-      "engines": {
-        "node": ">= 12.0.0"
-      }
-    },
-    "node_modules/winston-transport/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://mirrors.tencent.com/npm/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
-    "node_modules/winston/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://mirrors.tencent.com/npm/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
-    "node_modules/wmf": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/wmf/-/wmf-1.0.2.tgz",
-      "integrity": "sha512-/p9K7bEh0Dj6WbXg4JG0xvLQmIadrner1bi45VMJTfnbVHsc7yIajZyoSoK60/dtVBs12Fm6WkUI5/3WAVsNMw==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
-    "node_modules/word": {
-      "version": "0.3.0",
-      "resolved": "https://registry.npmjs.org/word/-/word-0.3.0.tgz",
-      "integrity": "sha512-OELeY0Q61OXpdUfTp+oweA/vtLVg5VDOXh+3he3PNzLGG/y0oylSOC1xRVj0+l4vQ3tj/bB1HVHv1ocXkQceFA==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=0.8"
-      }
-    },
     "node_modules/word-wrap": {
       "version": "1.2.5",
       "resolved": "https://mirrors.tencent.com/npm/word-wrap/-/word-wrap-1.2.5.tgz",
@@ -15107,34 +14345,6 @@
         "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
       }
     },
-    "node_modules/wrap-ansi-cjs": {
-      "name": "wrap-ansi",
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
-      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^4.0.0",
-        "string-width": "^4.1.0",
-        "strip-ansi": "^6.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
-    "node_modules/wrench": {
-      "version": "1.3.9",
-      "resolved": "https://mirrors.tencent.com/npm/wrench/-/wrench-1.3.9.tgz",
-      "integrity": "sha512-srTJQmLTP5YtW+F5zDuqjMEZqLLr/eJOZfDI5ibfPfRMeDh3oBUefAscuH0q5wBKE339ptH/S/0D18ZkfOfmKQ==",
-      "deprecated": "wrench.js is deprecated! You should check out fs-extra (https://github.com/jprichardson/node-fs-extra) for any operations you were using wrench for. Thanks for all the usage over the years.",
-      "engines": {
-        "node": ">=0.1.97"
-      }
-    },
     "node_modules/ws": {
       "version": "8.21.0",
       "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.0.tgz",
@@ -15158,19 +14368,10 @@
       }
     },
     "node_modules/xlsx": {
-      "version": "0.18.5",
-      "resolved": "https://registry.npmjs.org/xlsx/-/xlsx-0.18.5.tgz",
-      "integrity": "sha512-dmg3LCjBPHZnQp5/F/+nnTa+miPJxUXB6vtk42YjBBKayDNagxGEeIdWApkYPOf3Z3pm3k62Knjzp7lMeTEtFQ==",
+      "version": "0.20.3",
+      "resolved": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz",
+      "integrity": "sha512-oLDq3jw7AcLqKWH2AhCpVTZl8mf6X2YReP+Neh0SJUzV/BdZYjth94tG5toiMB1PPrYtxOCfaoUCkvtuH+3AJA==",
       "license": "Apache-2.0",
-      "dependencies": {
-        "adler-32": "~1.3.0",
-        "cfb": "~1.2.1",
-        "codepage": "~1.15.0",
-        "crc-32": "~1.2.1",
-        "ssf": "~0.11.2",
-        "wmf": "~1.0.1",
-        "word": "~0.3.0"
-      },
       "bin": {
         "xlsx": "bin/xlsx.njs"
       },
diff --git a/dashboard/package.json b/dashboard/package.json
index 4d62cdec..e0e6d198 100644
--- a/dashboard/package.json
+++ b/dashboard/package.json
@@ -29,12 +29,11 @@
     "ahooks": "^3.9.6",
     "antd": "^5.29.1",
     "antd-style": "^3.7.1",
-    "build": "^0.1.4",
     "docx-preview": "^0.3.2",
     "i18next": "^25.8.4",
     "jszip": "^3.10.1",
     "lucide-react": "^0.562.0",
-    "mermaid": "^11.13.0",
+    "mermaid": "^12.1.0",
     "qrcode.react": "^4.2.0",
     "react": "^18",
     "react-dom": "^18",
@@ -42,18 +41,20 @@
     "react-json-view-lite": "^2.5.0",
     "react-markdown": "^10.1.0",
     "react-pdf": "^10.5.0",
-    "react-router-dom": "^7.13.0",
+    "react-router-dom": "^7.18.4",
     "react-syntax-highlighter": "^16.1.1",
     "react-virtuoso": "^4.18.10",
     "recharts": "^3.10.1",
     "rehype-katex": "^7.0.1",
     "remark-gfm": "^4.0.1",
     "remark-math": "^6.0.0",
-    "xlsx": "^0.18.5"
+    "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz"
   },
   "overrides": {
     "serialize-javascript": "^7.0.3",
-    "@rollup/plugin-terser": "^1.0.0"
+    "@rollup/plugin-terser": "^1.0.0",
+    "katex": "^0.19.0",
+    "dompurify": "^3.4.16"
   },
   "devDependencies": {
     "@eslint/js": "^9.25.0",
@@ -67,7 +68,7 @@
     "@types/react-dom": "^18",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@vitejs/plugin-react": "^4.4.1",
-    "@vitest/coverage-v8": "^3.2.6",
+    "@vitest/coverage-v8": "^4.1.11",
     "eslint": "^9.25.0",
     "eslint-plugin-react-hooks": "^5.2.0",
     "eslint-plugin-react-refresh": "^0.4.19",
@@ -81,6 +82,6 @@
     "typescript-eslint": "^8.30.1",
     "vite": "^6.3.5",
     "vite-plugin-pwa": "^0.21.2",
-    "vitest": "^3.2.6"
+    "vitest": "^4.1.11"
   }
 }
diff --git a/dashboard/src/org-ui/pages/employees/EmployeesPage.test.tsx b/dashboard/src/org-ui/pages/employees/EmployeesPage.test.tsx
index ce5f2998..5c3db84c 100644
--- a/dashboard/src/org-ui/pages/employees/EmployeesPage.test.tsx
+++ b/dashboard/src/org-ui/pages/employees/EmployeesPage.test.tsx
@@ -68,6 +68,9 @@ describe("EmployeesPage", () => {
         onOpenEmployee={onOpenEmployee}
       />,
     );
+    await waitFor(() => expect(client.listDepartments).toHaveBeenCalledOnce());
+    await client.listDepartments.mock.results[0]?.value;
+    await screen.findByTestId("org-employees-empty");
     fireEvent.click(await screen.findByTestId("org-employees-create"));
     fireEvent.change(screen.getByTestId("org-employees-name"), {
       target: { value: "Ada" },
diff --git a/dashboard/src/org-ui/pages/workspace/WorkspacePage.test.tsx b/dashboard/src/org-ui/pages/workspace/WorkspacePage.test.tsx
index 7ea315e3..50302c56 100644
--- a/dashboard/src/org-ui/pages/workspace/WorkspacePage.test.tsx
+++ b/dashboard/src/org-ui/pages/workspace/WorkspacePage.test.tsx
@@ -118,7 +118,7 @@ describe("WorkspacePage", () => {
   it("hides governance and settings from non-admins", async () => {
     const client = mockClient();
     render(<WorkspacePage client={client} session={member} locale="en" />);
-    await screen.findByTestId("org-ui-workspace");
+    await screen.findByTestId("org-workspace-module-employees");
     expect(screen.queryByTestId("org-workspace-module-governance")).toBeNull();
     expect(screen.queryByTestId("org-workspace-module-settings")).toBeNull();
     expect(
diff --git a/dashboard/src/pages/Admin/Users/SsoPanel.test.tsx b/dashboard/src/pages/Admin/Users/SsoPanel.test.tsx
index d563d94c..df92b9f1 100644
--- a/dashboard/src/pages/Admin/Users/SsoPanel.test.tsx
+++ b/dashboard/src/pages/Admin/Users/SsoPanel.test.tsx
@@ -64,9 +64,15 @@ describe("<SsoPanel />", () => {
     render(<SsoPanel />);
 
     await waitFor(() => expect(getOidcConfig).toHaveBeenCalledOnce());
-    await user.click(
-      screen.getByRole("button", { name: "adminSso.presetGoogle" }),
+    const googlePreset = screen.getByRole("button", {
+      name: "adminSso.presetGoogle",
+    });
+    await waitFor(() =>
+      expect(window.getComputedStyle(googlePreset).pointerEvents).not.toBe(
+        "none",
+      ),
     );
+    await user.click(googlePreset);
     expect(screen.getByDisplayValue("Google")).toBeInTheDocument();
   });
 });
diff --git a/dashboard/src/pages/Agent/Memory/ProfileOverview.test.tsx b/dashboard/src/pages/Agent/Memory/ProfileOverview.test.tsx
index e5604b82..7f85a0d6 100644
--- a/dashboard/src/pages/Agent/Memory/ProfileOverview.test.tsx
+++ b/dashboard/src/pages/Agent/Memory/ProfileOverview.test.tsx
@@ -108,7 +108,7 @@ describe("<ProfileOverview />", () => {
     await waitFor(() => {
       expect(screen.getAllByText(/用户画像/).length).toBeGreaterThan(0);
     });
-    expect(screen.getByText(/Octop 还在了解你/)).toBeInTheDocument();
+    expect(await screen.findByText(/Octop 还在了解你/)).toBeInTheDocument();
   });
 
   it("caps a section at 6 rows and shows 查看全部 that calls onViewAll", async () => {
diff --git a/dashboard/src/pages/Chat/components/ChatDockReviewContent.tsx b/dashboard/src/pages/Chat/components/ChatDockReviewContent.tsx
index 5e9adcf2..5f23d75b 100644
--- a/dashboard/src/pages/Chat/components/ChatDockReviewContent.tsx
+++ b/dashboard/src/pages/Chat/components/ChatDockReviewContent.tsx
@@ -63,9 +63,7 @@ export default function ChatDockReviewContent({
         <Empty
           description={
             <div>
-              <div>
-                {t("chat.rightRail.reviewEmpty", "还没有可审查的操作")}
-              </div>
+              <div>{t("chat.rightRail.reviewEmpty", "还没有可审查的操作")}</div>
               <p className={styles.rightRailPanelEmptyHint}>
                 {t(
                   "chat.rightRail.reviewEmptyHint",
diff --git a/dashboard/src/pages/Chat/components/ChatDockStartState.tsx b/dashboard/src/pages/Chat/components/ChatDockStartState.tsx
index 3702c964..1ccd9680 100644
--- a/dashboard/src/pages/Chat/components/ChatDockStartState.tsx
+++ b/dashboard/src/pages/Chat/components/ChatDockStartState.tsx
@@ -23,7 +23,9 @@ interface ChatDockStartStateProps {
   onOpen: (kind: WorkspacePanelKind) => void;
 }
 
-export default function ChatDockStartState({ onOpen }: ChatDockStartStateProps) {
+export default function ChatDockStartState({
+  onOpen,
+}: ChatDockStartStateProps) {
   const { t } = useTranslation();
 
   const title = (kind: WorkspacePanelKind) => {
@@ -89,7 +91,9 @@ export default function ChatDockStartState({ onOpen }: ChatDockStartStateProps)
                 <span className={styles.rightRailStartItemTitle}>
                   {title(kind)}
                 </span>
-                <span className={styles.rightRailStartItemHint}>{hint(kind)}</span>
+                <span className={styles.rightRailStartItemHint}>
+                  {hint(kind)}
+                </span>
               </span>
               <ChevronRight
                 className={styles.rightRailStartItemChevron}
diff --git a/dashboard/src/pages/Chat/components/ChatDockTasksContent.tsx b/dashboard/src/pages/Chat/components/ChatDockTasksContent.tsx
index 740c746f..4e0dba55 100644
--- a/dashboard/src/pages/Chat/components/ChatDockTasksContent.tsx
+++ b/dashboard/src/pages/Chat/components/ChatDockTasksContent.tsx
@@ -82,9 +82,7 @@ export default function ChatDockTasksContent({
         <Empty
           description={
             <div>
-              <div>
-                {t("chat.rightRail.tasksEmpty", "当前没有后台任务")}
-              </div>
+              <div>{t("chat.rightRail.tasksEmpty", "当前没有后台任务")}</div>
               <p className={styles.rightRailPanelEmptyHint}>
                 {t(
                   "chat.rightRail.tasksEmptyHint",
diff --git a/dashboard/src/pages/Chat/components/ChatPanelPicker.tsx b/dashboard/src/pages/Chat/components/ChatPanelPicker.tsx
index d8d2f02b..3045d46d 100644
--- a/dashboard/src/pages/Chat/components/ChatPanelPicker.tsx
+++ b/dashboard/src/pages/Chat/components/ChatPanelPicker.tsx
@@ -10,10 +10,7 @@ import type { WorkspacePanelKind } from "../utils/workspacePanels";
 import { WORKSPACE_PANEL_KINDS } from "../utils/workspacePanels";
 import styles from "../index.module.less";
 
-const ICONS: Record<
-  WorkspacePanelKind,
-  typeof FileText
-> = {
+const ICONS: Record<WorkspacePanelKind, typeof FileText> = {
   files: FileText,
   review: ScanSearch,
   tasks: ListChecks,
diff --git a/dashboard/src/pages/Chat/components/TrajectoryInspector.test.tsx b/dashboard/src/pages/Chat/components/TrajectoryInspector.test.tsx
index f35af7d4..134f5963 100644
--- a/dashboard/src/pages/Chat/components/TrajectoryInspector.test.tsx
+++ b/dashboard/src/pages/Chat/components/TrajectoryInspector.test.tsx
@@ -181,17 +181,16 @@ describe("TrajectoryInspector", () => {
 
     fireEvent.click(screen.getByRole("tab", { name: "Preview" }));
 
-    await waitFor(() => {
-      expect(eventMock).toHaveBeenCalledWith("A1", "T1", "ctx-1");
-      const preview = screen.getByTestId("trajectory-preview");
-      expect(preview).toHaveTextContent("Prefer BackendWorkspace paths");
-      // Rendered markdown — not the raw ## / ** markers.
-      expect(preview.querySelector("h2")).toHaveTextContent("Rules");
-      expect(preview.querySelector("strong")).toHaveTextContent(
-        "BackendWorkspace",
-      );
-      expect(preview).not.toHaveTextContent("summary: meta");
-    });
+    await screen.findByRole("heading", { name: "Rules" }, { timeout: 5000 });
+    expect(eventMock).toHaveBeenCalledWith("A1", "T1", "ctx-1");
+    const preview = screen.getByTestId("trajectory-preview");
+    expect(preview).toHaveTextContent("Prefer BackendWorkspace paths");
+    // Rendered markdown — not the raw ## / ** markers.
+    expect(preview.querySelector("h2")).toHaveTextContent("Rules");
+    expect(preview.querySelector("strong")).toHaveTextContent(
+      "BackendWorkspace",
+    );
+    expect(preview).not.toHaveTextContent("summary: meta");
   });
 
   it("labels the middle tab Result for tool events", () => {
diff --git a/dashboard/src/pages/Chat/hooks/useChatDockPanel.ts b/dashboard/src/pages/Chat/hooks/useChatDockPanel.ts
index d28cb929..03caf059 100644
--- a/dashboard/src/pages/Chat/hooks/useChatDockPanel.ts
+++ b/dashboard/src/pages/Chat/hooks/useChatDockPanel.ts
@@ -327,7 +327,12 @@ export function useChatDockPanel(isMobile: boolean, agentId?: string | null) {
 
   /** Toggle dock open/closed around a dedicated tab (browser / terminal). */
   const toggleDockTab = useCallback(
-    (tab: Extract<DockTab, { kind: "browser" | "terminal" | "review" | "tasks" }>) => {
+    (
+      tab: Extract<
+        DockTab,
+        { kind: "browser" | "terminal" | "review" | "tasks" }
+      >,
+    ) => {
       setDockOpen((prevOpen) => {
         if (prevOpen && activeTabId === tab.id) {
           persistRailOpen(false);
@@ -376,7 +381,13 @@ export function useChatDockPanel(isMobile: boolean, agentId?: string | null) {
       }
       openTerminalTab();
     },
-    [openBrowserTab, openFileList, openReviewTab, openTasksTab, openTerminalTab],
+    [
+      openBrowserTab,
+      openFileList,
+      openReviewTab,
+      openTasksTab,
+      openTerminalTab,
+    ],
   );
 
   const closeTab = useCallback((id: DockTabId) => {
diff --git a/dashboard/src/pages/Chat/utils/chatMessages.test.ts b/dashboard/src/pages/Chat/utils/chatMessages.test.ts
index 3b0f3c94..aee173e5 100644
--- a/dashboard/src/pages/Chat/utils/chatMessages.test.ts
+++ b/dashboard/src/pages/Chat/utils/chatMessages.test.ts
@@ -31,13 +31,15 @@ describe("formatRunUsage", () => {
 
 describe("composer permissionMode", () => {
   it("stamps and normalizes permissionMode", () => {
+    expect(buildComposerContext({ permissionMode: "auto" })).toEqual({
+      permissionMode: "auto",
+    });
+    expect(normalizeComposerContext({ permissionMode: "full" })).toEqual({
+      permissionMode: "full",
+    });
     expect(
-      buildComposerContext({ permissionMode: "auto" }),
-    ).toEqual({ permissionMode: "auto" });
-    expect(
-      normalizeComposerContext({ permissionMode: "full" }),
-    ).toEqual({ permissionMode: "full" });
-    expect(normalizeComposerContext({ permissionMode: "yolo" })).toBeUndefined();
+      normalizeComposerContext({ permissionMode: "yolo" }),
+    ).toBeUndefined();
   });
 });
 
diff --git a/dashboard/src/pages/Chat/utils/expertMention.ts b/dashboard/src/pages/Chat/utils/expertMention.ts
index c6764291..856d2c84 100644
--- a/dashboard/src/pages/Chat/utils/expertMention.ts
+++ b/dashboard/src/pages/Chat/utils/expertMention.ts
@@ -30,7 +30,9 @@ export function textHasExpertMention(text: string, name: string): boolean {
 export const EVERYONE_MENTION_NAMES = ["所有人", "everyone"] as const;
 
 export function textHasEveryoneMention(text: string): boolean {
-  return EVERYONE_MENTION_NAMES.some((name) => textHasExpertMention(text, name));
+  return EVERYONE_MENTION_NAMES.some((name) =>
+    textHasExpertMention(text, name),
+  );
 }
 
 export function mentionedExpertIds(
diff --git a/dashboard/src/pages/Settings/Models/components/modals/CustomProviderModal.tsx b/dashboard/src/pages/Settings/Models/components/modals/CustomProviderModal.tsx
index b0673971..ef0c49bf 100644
--- a/dashboard/src/pages/Settings/Models/components/modals/CustomProviderModal.tsx
+++ b/dashboard/src/pages/Settings/Models/components/modals/CustomProviderModal.tsx
@@ -263,8 +263,8 @@ export function CustomProviderModal({
                 k.value === "openai"
                   ? t("models.kindOpenaiCompat")
                   : k.value === "anthropic"
-                    ? "Anthropic"
-                    : "AWS Bedrock",
+                  ? "Anthropic"
+                  : "AWS Bedrock",
             }))}
           />
         </Form.Item>
diff --git a/dashboard/src/test/setup.ts b/dashboard/src/test/setup.ts
index 72ae7d13..f2b1ad82 100644
--- a/dashboard/src/test/setup.ts
+++ b/dashboard/src/test/setup.ts
@@ -14,6 +14,7 @@
 import "@testing-library/jest-dom/vitest";
 import { afterEach, vi } from "vitest";
 import { cleanup } from "@testing-library/react";
+import { message } from "@/utils/antdMessage";
 
 // Auto-mock react-i18next so components' ``t(key, fallback)`` calls
 // resolve synchronously to ``fallback`` without needing the real
@@ -56,6 +57,7 @@ vi.mock("react-i18next", async (importOriginal) => {
 
 afterEach(() => {
   cleanup();
+  message.destroy();
 });
 
 if (typeof window !== "undefined") {
diff --git a/docs/cli.md b/docs/cli.md
index b2a78e48..ae5249eb 100644
--- a/docs/cli.md
+++ b/docs/cli.md
@@ -1,6 +1,6 @@
 # CLI Reference
 
-`octop` is a single Click app installed as `octop` on `pip install octop`.
+`octop` and `freeos` are compatibility command names for the FreeOS CLI. The supported installer obtains FreeOS from the XYAIStudio GitHub repository; Python release artifacts are attached to GitHub Releases.
 It is registered in `src/octop/cli/main.py`; commands are loaded
 lazily from `src/octop/cli/registry.py`.
 
@@ -363,8 +363,7 @@ retention only deletes those files and never touches manual
 
 ## `octop update`
 
-Check for and install a newer Octop release from the configured
-channel (PyPI by default).
+Check for and install a newer FreeOS desktop release from GitHub Releases.
 
 ```
 Usage: octop update [OPTIONS]
@@ -373,7 +372,9 @@ Usage: octop update [OPTIONS]
 
 Options:
   --check / --no-check     Only check; do not install.
-  --channel TEXT           Release channel (pypi, testpypi, custom index).
+  --allow-prerelease       Include alpha / beta / rc / dev releases.
+  --yes, -y                Skip upgrade confirmation.
+  --verbose, -v            Show installer output.
   -h, --help               Show this message and exit.
 ```
 
diff --git a/docs/node-runtime.md b/docs/node-runtime.md
index 78aaa7c2..c9f6cd51 100644
--- a/docs/node-runtime.md
+++ b/docs/node-runtime.md
@@ -65,15 +65,15 @@ expanding `SHIP_OPENXYOS_RUNTIME=1` to new flavors.
 | GHCR image | `ghcr.io/xyaistudio/freeos:{version\|latest}` |
 | Local Compose tag | `octop:latest` (compatibility alias; one Python process) |
 | Security advisories | [XYAIStudio/FreeOS](https://github.com/XYAIStudio/FreeOS/security/advisories/new) |
-| PyPI package name | `octop` (intentional remaining identifier; CLI is `freeos`) |
+| Python distribution identifier | `octop` (internal compatibility name; distributed through GitHub Releases only) |
 
-### Release / PyPI / Docker gates
+### Release / Docker gates
 
 - **Docker Publish** pushes GHCR always. Docker Hub login is **optional**
   (`DOCKERHUB_USERNAME` / `DOCKERHUB_TOKEN`). Missing Hub secrets must not
   fail the workflow.
-- **PyPI** still publishes the `octop` distribution (`PYPI_API_TOKEN` on the
-  `pypi` environment). That name is the Python package, not a pointer at
-  Tencent Cloud advisories.
+- **Python distributions** are attached to GitHub Releases. Do not publish the
+  `octop` distribution to PyPI: that name is already used by the upstream
+  Octop project and would create an installation identity collision.
 - **FnOS Docker `.fpk`** compose must pull `ghcr.io/xyaistudio/freeos`, not
   `ghcr.io/tencentcloud/octop`.
diff --git a/docs/node-runtime.zh-CN.md b/docs/node-runtime.zh-CN.md
index 73647c4a..b24736fe 100644
--- a/docs/node-runtime.zh-CN.md
+++ b/docs/node-runtime.zh-CN.md
@@ -60,13 +60,13 @@ GitHub 工作流 **FreeOS Desktop Package**（`.github/workflows/octop-desktop.y
 | GHCR 镜像 | `ghcr.io/xyaistudio/freeos:{version\|latest}` |
 | 本地 Compose 标签 | `octop:latest`（兼容别名；单 Python 进程） |
 | 安全公告 | [XYAIStudio/FreeOS](https://github.com/XYAIStudio/FreeOS/security/advisories/new) |
-| PyPI 包名 | `octop`（有意保留的标识；CLI 是 `freeos`） |
+| Python 发行包标识 | `octop`（内部兼容名；仅通过 GitHub Releases 分发） |
 
-### 发版 / PyPI / Docker 门禁
+### 发版 / Docker 门禁
 
 - **Docker Publish** 始终推 GHCR。Docker Hub 登录是 **可选**
   （`DOCKERHUB_USERNAME` / `DOCKERHUB_TOKEN`）。没有 Hub secrets 不得让工作流变红。
-- **PyPI** 仍发布名为 `octop` 的发行版（`pypi` 环境的 `PYPI_API_TOKEN`）。这是
-  Python 包名，不是腾讯云安全公告地址。
+- **Python 发行包**随 GitHub Release 附件发布。不要将 `octop` 发行包发布到
+  PyPI：该名称已被上游 Octop 项目使用，会造成安装身份冲突。
 - **飞牛 Docker `.fpk`** 的 compose 必须拉 `ghcr.io/xyaistudio/freeos`，不是
   `ghcr.io/tencentcloud/octop`。
diff --git a/docs/user-guide.md b/docs/user-guide.md
index 960404d8..1f3bd784 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -100,7 +100,7 @@ source ~/.bashrc  # Bash
 
 安装脚本会把 `octop` 命令放入 `~/.octop/bin` 并加入 PATH，并在 `~/.octop/venv` 创建隔离环境；**不会改动系统 Python**。
 
-> **可选附加组件**：安装脚本支持通过 `--extras` 追加能力，例如浏览器自动化 `--extras browser`、飞书通道 `--extras channels-feishu`；也可用 `--version` 指定版本、`--mirror <url>` 使用国内 PyPI 镜像。更多选项见 [scripts/README.md](scripts/README.md)。
+> **可选附加组件**：安装脚本默认从 FreeOS GitHub 仓库安装，支持通过 `--extras` 追加能力，例如浏览器自动化 `--extras browser`、飞书通道 `--extras channels-feishu`；也可用 `--version` 指定 GitHub 版本标签、`--mirror <url>` 使用国内 PyPI 镜像下载 Python 依赖。更多选项见 [scripts/README.md](../scripts/README.md)。
 
 ### 2.3 验证安装
 
@@ -466,7 +466,7 @@ Octop 支持两个方向的 ACP 集成：
 ```
 
 **Q：如何升级？**
-- `octop update`（若通过一键安装）；或从 PyPI / 源码重新安装后重启服务。
+- `octop update`（若通过一键安装）；或下载 GitHub Release 中的 Python 制品 / 从 FreeOS 源码重新安装后重启服务。
 
 **Q：如何加入客户企业微信服务群？**
 - 请扫描下方二维码加入：
diff --git a/pyproject.toml b/pyproject.toml
index 63fae65b..0b9c75a9 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "octop"
-version = "0.0.10"
+version = "0.1.0"
 description = "FreeOS — self-hosted multi-user multi-agent assistant with an optional organization OS module (Octop-compatible package name)"
 readme = "README.md"
 license = { text = "MIT" }
diff --git a/scripts/README.md b/scripts/README.md
index 72997813..556c04cb 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -25,12 +25,15 @@
 ### 常用选项
 
 ```bash
-# 从 PyPI 安装最新版（默认）
+# 从 FreeOS GitHub 源码安装最新版（默认）
 bash scripts/install.sh
 
-# 指定版本
+# 从 FreeOS GitHub v0.1.0 标签安装
 bash scripts/install.sh --version 0.1.0
 
+# 显式安装 PyPI 上游 Octop（不包含 FreeOS 下游修改）
+bash scripts/install.sh --from-pypi
+
 # 安装可选附加组件
 bash scripts/install.sh --extras browser
 bash scripts/install.sh --extras browser,channels-feishu
@@ -39,11 +42,11 @@ bash scripts/install.sh --extras browser,channels-feishu
 bash scripts/install.sh --from-source
 bash scripts/install.sh --from-source /path/to/orca
 
-# 使用国内 PyPI 镜像加速依赖
+# 使用国内 PyPI 镜像加速 Python 依赖下载
 bash scripts/install.sh --mirror https://mirrors.cloud.tencent.com/pypi/simple
 ```
 
-Windows PowerShell 等价参数：`-Version`、`-FromSource`、`-SourceDir`、`-Extras`。
+Windows PowerShell 等价参数：`-Version`、`-FromSource`、`-FromPyPI`、`-SourceDir`、`-Extras`。
 
 ### 环境变量
 
@@ -65,7 +68,7 @@ octop run     # 启动服务 → http://127.0.0.1:8088
 
 ---
 
-## 构建 PyPI wheel
+## 构建 Python wheel（随 GitHub Release 分发）
 
 先构建前端（产物写入 `src/octop/dashboard/`，与 `dashboard/vite.config.ts` 的 `outDir` 一致），再打包 wheel。
 
@@ -81,7 +84,7 @@ powershell -File scripts/wheel_build.ps1
 
 输出：`dist/*.whl`、`dist/*.tar.gz`
 
-发布前请确认 `pyproject.toml` 中的 `orcakit-harness-agent`、`harness-gateway` 等依赖已发布到 PyPI（`[tool.uv.sources]` 仅对 uv 本地开发生效，pip/PyPI 不读取）。
+Release workflow 将构建出的 wheel 和源码包附加到 GitHub Release。`octop` 是内部兼容用的发行包名，不要把 FreeOS 制品发布到 PyPI；安装脚本默认从 FreeOS GitHub 仓库安装。
 
 ---
 
diff --git a/scripts/install-octop.sh b/scripts/install-octop.sh
index 493da44e..17703d34 100644
--- a/scripts/install-octop.sh
+++ b/scripts/install-octop.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # Octop 安装脚本 (macOS / Linux)
-# 用法: bash scripts/install.sh              # 从 PyPI 安装（默认）
-#   或: bash scripts/install.sh --from-source  # 从本地源码安装
+# 用法: bash scripts/install-octop.sh        # 从 FreeOS GitHub 源码安装（默认）
+#   或: bash scripts/install-octop.sh --from-pypi # 从 PyPI 安装 Octop（不含 FreeOS 下游改动）
 #   或: curl -fsSL <url>/install.sh | bash   # 远程安装
 #
 # 将 Octop 安装到 ~/.octop，使用 uv 管理 Python 环境。
@@ -34,7 +34,7 @@ else
 fi
 
 VERSION=""
-FROM_SOURCE=false
+FROM_SOURCE=true
 EXTRAS=""
 PYPI_MIRROR=""
 
@@ -81,9 +81,9 @@ Octop installer (macOS / Linux)
 Usage: bash install.sh [OPTIONS]
 
 Options:
-  --version <VER>       Install a specific version (e.g. 0.1.0) [PyPI only]
+  --version <VER>       Install a specific GitHub tag (e.g. 0.1.0; tag v0.1.0)
   --from-source [DIR]   Install from source; clones the git repo if DIR is omitted
-  --from-pypi           Install from PyPI (default)
+  --from-pypi           Install upstream Octop from PyPI (does not include FreeOS changes)
   --extras <EXTRAS>     Extra optional components (e.g. desktop, browser)
   --mirror <URL>        Use a specific PyPI mirror (e.g. https://mirrors.aliyun.com/pypi/simple)
   -h, --help            Show this help
@@ -648,7 +648,11 @@ _clone_source_workspace() {
     git clone --depth 1 "$HARNESS_AGENT_REPO" "$workdir/harness-agent"
     git clone --depth 1 "$HARNESS_GATEWAY_REPO" "$workdir/harness-gateway"
     git clone --depth 1 "$HARNESS_BROWSER_REPO" "$workdir/harness-browser"
-    git clone --depth 1 "$OCTOP_REPO" "$workdir/orca"
+    if [ -n "$VERSION" ]; then
+        git clone --depth 1 --branch "v$VERSION" "$OCTOP_REPO" "$workdir/orca"
+    else
+        git clone --depth 1 "$OCTOP_REPO" "$workdir/orca"
+    fi
 }
 
 if [ "$FROM_SOURCE" = true ]; then
diff --git a/scripts/install.bat b/scripts/install.bat
index 8c500688..3980721e 100644
--- a/scripts/install.bat
+++ b/scripts/install.bat
@@ -2,16 +2,16 @@
 setlocal EnableDelayedExpansion
 
 REM Octop Installer for Windows (cmd.exe)
-REM Usage: install.bat [-Version X.Y.Z] [-FromSource] [-SourceDir DIR] [-Extras browser] [-Help]
+REM Usage: install.bat [-Version X.Y.Z] [-FromSource | -FromPyPI] [-SourceDir DIR] [-Extras browser] [-Help]
 
 if defined OCTOP_HOME (set "OCTOP_HOME=%OCTOP_HOME%") else (set "OCTOP_HOME=%USERPROFILE%\.octop")
 set "OCTOP_VENV=%OCTOP_HOME%\venv"
 set "OCTOP_BIN=%OCTOP_HOME%\bin"
 set "PYTHON_VERSION=3.12"
-if defined OCTOP_REPO (set "OCTOP_REPO=%OCTOP_REPO%") else (set "OCTOP_REPO=https://github.com/TencentCloud/Octop.git")
+if defined OCTOP_REPO (set "OCTOP_REPO=%OCTOP_REPO%") else (set "OCTOP_REPO=https://github.com/XYAIStudio/FreeOS.git")
 
 set "ARG_VERSION="
-set "ARG_FROM_SOURCE=0"
+set "ARG_FROM_SOURCE=1"
 set "ARG_SOURCE_DIR="
 set "ARG_EXTRAS="
 set "ARG_UV_PATH="
@@ -21,6 +21,7 @@ set "CONSOLE_AVAILABLE=0"
 if "%~1"=="" goto :done_args
 if /i "%~1"=="-Version"    (set "ARG_VERSION=%~2" & shift & shift & goto :parse_args)
 if /i "%~1"=="-FromSource" (set "ARG_FROM_SOURCE=1" & shift & goto :parse_args)
+if /i "%~1"=="-FromPyPI" (set "ARG_FROM_SOURCE=0" & shift & goto :parse_args)
 if /i "%~1"=="-SourceDir"  (set "ARG_SOURCE_DIR=%~2" & shift & shift & goto :parse_args)
 if /i "%~1"=="-Extras"     (set "ARG_EXTRAS=%~2" & shift & shift & goto :parse_args)
 if /i "%~1"=="-UvPath"     (set "ARG_UV_PATH=%~2" & shift & shift & goto :parse_args)
@@ -34,6 +35,7 @@ echo.
 echo Usage: install.bat [OPTIONS]
 echo   -Version ^<VER^>     Install specific version
 echo   -FromSource        Install from source
+echo   -FromPyPI          Install upstream Octop from PyPI (does not include FreeOS changes)
 echo   -SourceDir ^<DIR^>   Local source directory
 echo   -Extras ^<EXTRAS^>  Extra components (e.g. desktop, browser)
 echo   -UvPath ^<PATH^>     Pre-installed uv.exe
@@ -86,7 +88,11 @@ goto :install_verify
 where git >nul 2>&1
 if errorlevel 1 (echo [octop] ERROR: git required & exit /b 1)
 set "CLONE_DIR=%TEMP%\octop-install-%RANDOM%"
-git clone --depth 1 %OCTOP_REPO% "%CLONE_DIR%"
+if defined ARG_VERSION (
+  git clone --depth 1 --branch "v%ARG_VERSION%" %OCTOP_REPO% "%CLONE_DIR%"
+) else (
+  git clone --depth 1 %OCTOP_REPO% "%CLONE_DIR%"
+)
 if errorlevel 1 exit /b 1
 call :prepare_console "%CLONE_DIR%"
 uv pip install "%CLONE_DIR%%EXTRAS_SUFFIX%" --python "%VENV_PYTHON%"
diff --git a/scripts/install.ps1 b/scripts/install.ps1
index 48c4cb1c..4b891c1d 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -8,6 +8,7 @@
 param(
     [string]$Version   = "",
     [switch]$FromSource,
+    [switch]$FromPyPI,
     [string]$SourceDir = "",
     [string]$Extras    = "",
     [string]$UvPath    = "",
@@ -20,12 +21,15 @@ $OctopHome     = if ($env:OCTOP_HOME) { $env:OCTOP_HOME } else { Join-Path $HOME
 $OctopVenv     = Join-Path $OctopHome "venv"
 $OctopBin      = Join-Path $OctopHome "bin"
 $PythonVersion = "3.12"
-$OctopRepo     = if ($env:OCTOP_REPO) { $env:OCTOP_REPO } else { "https://github.com/TencentCloud/Octop.git" }
+$OctopRepo     = if ($env:OCTOP_REPO) { $env:OCTOP_REPO } else { "https://github.com/XYAIStudio/FreeOS.git" }
 
 function Write-Info { param([string]$Message) Write-Host "[octop] " -ForegroundColor Green  -NoNewline; Write-Host $Message }
 function Write-Warn { param([string]$Message) Write-Host "[octop] " -ForegroundColor Yellow -NoNewline; Write-Host $Message }
 function Stop-WithError { param([string]$Message) Write-Host "[octop] ERROR: $Message" -ForegroundColor Red; exit 1 }
 
+if ($FromSource -and $FromPyPI) { Stop-WithError "Choose only one of -FromSource or -FromPyPI." }
+if (-not $FromPyPI) { $FromSource = $true }
+
 if ($Help) {
     @"
 Octop Installer for Windows
@@ -35,6 +39,7 @@ Usage: .\install.ps1 [OPTIONS]
 Options:
   -Version <VER>        Install a specific version (e.g. 0.1.0)
   -FromSource           Install from source (requires git, or use -SourceDir)
+  -FromPyPI             Install upstream Octop from PyPI (does not include FreeOS changes)
   -SourceDir <DIR>      Local source directory (used with -FromSource)
   -Extras <EXTRAS>      Extra optional components (e.g. desktop, browser)
   -UvPath <PATH>        Path to a pre-installed uv.exe
@@ -226,7 +231,11 @@ if ($FromSource) {
         }
         $cloneDir = Join-Path $env:TEMP "octop-install-$(Get-Random)"
         try {
+        if ($Version) {
+            git clone --depth 1 --branch "v$Version" $OctopRepo $cloneDir
+        } else {
             git clone --depth 1 $OctopRepo $cloneDir
+        }
             Prepare-Console $cloneDir
             uv pip install "${cloneDir}${ExtrasSuffix}" --python $VenvPython
         } finally {
diff --git a/scripts/install.sh b/scripts/install.sh
index 15138c8c..c90570ca 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # Octop 安装脚本 (macOS / Linux)
-# 用法: bash scripts/install.sh              # 从 PyPI 安装（默认）
-#   或: bash scripts/install.sh --from-source  # 从本地源码安装
+# 用法: bash scripts/install.sh              # 从 FreeOS GitHub 源码安装（默认）
+#   或: bash scripts/install.sh --from-pypi   # 从 PyPI 安装 Octop（不含 FreeOS 下游改动）
 #   或: curl -fsSL <url>/install.sh | bash   # 远程安装
 #
 # 将 Octop 安装到 ~/.octop，使用 uv 管理 Python 环境。
@@ -34,7 +34,7 @@ else
 fi
 
 VERSION=""
-FROM_SOURCE=false
+FROM_SOURCE=true
 EXTRAS=""
 PYPI_MIRROR=""
 
@@ -81,9 +81,9 @@ Octop installer (macOS / Linux)
 Usage: bash install.sh [OPTIONS]
 
 Options:
-  --version <VER>       Install a specific version (e.g. 0.1.0) [PyPI only]
+  --version <VER>       Install a specific GitHub tag (e.g. 0.1.0; tag v0.1.0)
   --from-source [DIR]   Install from source; clones the git repo if DIR is omitted
-  --from-pypi           Install from PyPI (default)
+  --from-pypi           Install upstream Octop from PyPI (does not include FreeOS changes)
   --extras <EXTRAS>     Extra optional components (e.g. desktop, browser)
   --mirror <URL>        Use a specific PyPI mirror (e.g. https://mirrors.cloud.tencent.com/pypi/simple)
   -h, --help            Show this help
@@ -648,7 +648,11 @@ _clone_source_workspace() {
     git clone --depth 1 "$HARNESS_AGENT_REPO" "$workdir/harness-agent"
     git clone --depth 1 "$HARNESS_GATEWAY_REPO" "$workdir/harness-gateway"
     git clone --depth 1 "$HARNESS_BROWSER_REPO" "$workdir/harness-browser"
-    git clone --depth 1 "$OCTOP_REPO" "$workdir/orca"
+    if [ -n "$VERSION" ]; then
+        git clone --depth 1 --branch "v$VERSION" "$OCTOP_REPO" "$workdir/orca"
+    else
+        git clone --depth 1 "$OCTOP_REPO" "$workdir/orca"
+    fi
 }
 
 if [ "$FROM_SOURCE" = true ]; then
diff --git a/src/octop/__init__.py b/src/octop/__init__.py
index 307eb09e..d7857b72 100644
--- a/src/octop/__init__.py
+++ b/src/octop/__init__.py
@@ -2,4 +2,4 @@
 
 from __future__ import annotations
 
-__version__ = "0.0.10"
+__version__ = "0.1.0"
diff --git a/src/octop/cli/registry.py b/src/octop/cli/registry.py
index 815890b7..d3887746 100644
--- a/src/octop/cli/registry.py
+++ b/src/octop/cli/registry.py
@@ -23,7 +23,7 @@
     "admin": (".commands.admin", "admin", "Admin commands."),
     "version": (".commands.version", "version", "Show the installed octop version."),
     "completion": (".commands.completion", "completion", "Shell completion utilities."),
-    "update": (".commands.update", "update", "Check for and install a newer Octop release."),
+    "update": (".commands.update", "update", "Check for and install a newer FreeOS release."),
     "clean": (".commands.clean", "clean", "Remove CLI state or wipe all of ~/.octop."),
     "backup": (".commands.backup", "backup", "Export and restore Octop backups."),
     "acp": (".commands.acp", "acp_cmd", "Run Octop agent as ACP server (stdio)."),
@@ -31,6 +31,6 @@
     "org": (
         ".commands.org",
         "org",
-        "Organization self-growth loop, governance, and module↔skill bridge.",
+        "Organization self-growth loop, governance, and module/skill bridge.",
     ),
 }
diff --git a/src/octop/infra/agents/manager.py b/src/octop/infra/agents/manager.py
index c9d42eb9..6764813e 100644
--- a/src/octop/infra/agents/manager.py
+++ b/src/octop/infra/agents/manager.py
@@ -2787,6 +2787,9 @@ def _build_harness_config(self, row: AgentRow) -> HarnessAgentConfig:
         )
         from octop.infra.agents.middleware.org_governance import OrgGovernanceMiddleware
         from octop.infra.agents.middleware.reasoning import ReasoningRequestMiddleware
+        from octop.infra.agents.middleware.system_message_cleanup import (
+            SystemMessageCleanupMiddleware,
+        )
         from octop.infra.agents.middleware.thread_artifacts import ThreadArtifactsMiddleware
         from octop.infra.agents.middleware.token_quota import TokenQuotaMiddleware
         from octop.infra.agents.middleware.workspace_image import (
@@ -2807,6 +2810,7 @@ def _build_harness_config(self, row: AgentRow) -> HarnessAgentConfig:
             ),
             ReasoningRequestMiddleware(),
             OllamaToolFallbackMiddleware(),
+            SystemMessageCleanupMiddleware(),
             GroupMentionMiddleware(lambda: self._harness_manager),
             KnowledgeSearchHintMiddleware(),
             BrowserProfileMiddleware(),
diff --git a/src/octop/infra/agents/middleware/system_message_cleanup.py b/src/octop/infra/agents/middleware/system_message_cleanup.py
new file mode 100644
index 00000000..8485fa12
--- /dev/null
+++ b/src/octop/infra/agents/middleware/system_message_cleanup.py
@@ -0,0 +1,34 @@
+"""Keep checkpoint-resident system messages out of model requests."""
+
+from __future__ import annotations
+
+from collections.abc import Awaitable, Callable
+from typing import Any
+
+from langchain.agents.middleware import AgentMiddleware, ModelRequest, ModelResponse
+from langchain_core.messages import AnyMessage, SystemMessage
+
+
+class SystemMessageCleanupMiddleware(AgentMiddleware[Any, Any]):
+    """Remove stale system messages while preserving the compiled system prompt.
+
+    Harness injects the active prompt through ``request.system_message``. Older
+    checkpoints may still contain ``SystemMessage`` entries in ``messages``;
+    strict chat templates such as Qwen reject those entries when they appear
+    after conversation messages.
+    """
+
+    async def awrap_model_call(
+        self,
+        request: ModelRequest[Any],
+        handler: Callable[[ModelRequest[Any]], Awaitable[ModelResponse[Any]]],
+    ) -> ModelResponse[Any]:
+        messages: list[AnyMessage] = [
+            message for message in request.messages if not isinstance(message, SystemMessage)
+        ]
+        if len(messages) != len(request.messages):
+            request = request.override(messages=messages)
+        return await handler(request)
+
+
+__all__ = ["SystemMessageCleanupMiddleware"]
diff --git a/tests/unit/agents/test_octop_builtin_skills.py b/tests/unit/agents/test_octop_builtin_skills.py
index 65e7b79c..447412a4 100644
--- a/tests/unit/agents/test_octop_builtin_skills.py
+++ b/tests/unit/agents/test_octop_builtin_skills.py
@@ -175,11 +175,15 @@ def test_manager_refuses_overwrite_without_force(tmp_path: Path) -> None:
     refused = _run_manager(tmp_path, "install", str(source))
     assert refused.returncode == 1
     assert "ask before using --force" in refused.stdout
-    assert "First version" in (tmp_path / "skills" / "stable" / "SKILL.md").read_text()
+    assert "First version" in (tmp_path / "skills" / "stable" / "SKILL.md").read_text(
+        encoding="utf-8"
+    )
 
     replaced = _run_manager(tmp_path, "install", str(source), "--force")
     assert replaced.returncode == 0, replaced.stderr or replaced.stdout
-    assert "Second version" in (tmp_path / "skills" / "stable" / "SKILL.md").read_text()
+    assert "Second version" in (tmp_path / "skills" / "stable" / "SKILL.md").read_text(
+        encoding="utf-8"
+    )
 
 
 def test_manager_refuses_to_replace_itself(tmp_path: Path) -> None:
diff --git a/tests/unit/agents/test_system_message_cleanup.py b/tests/unit/agents/test_system_message_cleanup.py
new file mode 100644
index 00000000..a961f0b9
--- /dev/null
+++ b/tests/unit/agents/test_system_message_cleanup.py
@@ -0,0 +1,62 @@
+from __future__ import annotations
+
+from typing import Any
+from unittest.mock import Mock
+
+import pytest
+from langchain.agents.middleware import ModelRequest, ModelResponse
+from langchain_core.messages import AIMessage, HumanMessage, SystemMessage
+
+from octop.infra.agents.middleware.system_message_cleanup import (
+    SystemMessageCleanupMiddleware,
+)
+
+
+@pytest.mark.asyncio
+async def test_removes_checkpoint_system_messages_and_keeps_compiled_prompt() -> None:
+    middleware = SystemMessageCleanupMiddleware()
+    compiled = SystemMessage(content="current prompt")
+    request = ModelRequest(
+        model=Mock(),
+        system_message=compiled,
+        messages=[
+            HumanMessage(content="first"),
+            SystemMessage(content="stale bootstrap"),
+            AIMessage(content="reply"),
+            HumanMessage(content="next"),
+        ],
+        tools=[],
+    )
+    seen: list[ModelRequest[Any]] = []
+    expected = Mock(spec=ModelResponse)
+
+    async def handler(value: ModelRequest[Any]) -> ModelResponse[Any]:
+        seen.append(value)
+        return expected
+
+    result = await middleware.awrap_model_call(request, handler)
+
+    assert result is expected
+    assert seen[0].system_message is compiled
+    assert [type(message) for message in seen[0].messages] == [
+        HumanMessage,
+        AIMessage,
+        HumanMessage,
+    ]
+
+
+@pytest.mark.asyncio
+async def test_forwards_clean_request_without_replacing_it() -> None:
+    middleware = SystemMessageCleanupMiddleware()
+    request = ModelRequest(model=Mock(), messages=[HumanMessage(content="hello")], tools=[])
+    seen: list[ModelRequest[Any]] = []
+    expected = Mock(spec=ModelResponse)
+
+    async def handler(value: ModelRequest[Any]) -> ModelResponse[Any]:
+        seen.append(value)
+        return expected
+
+    result = await middleware.awrap_model_call(request, handler)
+
+    assert result is expected
+    assert seen == [request]
diff --git a/tests/unit/cli/test_completion_cmd.py b/tests/unit/cli/test_completion_cmd.py
index d913958a..ebf7aeb7 100644
--- a/tests/unit/cli/test_completion_cmd.py
+++ b/tests/unit/cli/test_completion_cmd.py
@@ -28,13 +28,13 @@ def test_completion_install_appends_eval_line_idempotent(
     runner = CliRunner()
     r1 = runner.invoke(cli, ["completion", "install", "--shell", "bash", "--rc-file", str(rc)])
     assert r1.exit_code == 0, r1.output
-    contents = rc.read_text()
+    contents = rc.read_text(encoding="utf-8")
     assert "_OCTOP_COMPLETE" in contents
     line_count_first = contents.count("_OCTOP_COMPLETE")
 
     r2 = runner.invoke(cli, ["completion", "install", "--shell", "bash", "--rc-file", str(rc)])
     assert r2.exit_code == 0
-    assert rc.read_text().count("_OCTOP_COMPLETE") == line_count_first
+    assert rc.read_text(encoding="utf-8").count("_OCTOP_COMPLETE") == line_count_first
 
 
 def test_completion_in_help() -> None:
diff --git a/tests/unit/db/test_clip_thread_title.py b/tests/unit/db/test_clip_thread_title.py
index c8eb211d..f78aa440 100644
--- a/tests/unit/db/test_clip_thread_title.py
+++ b/tests/unit/db/test_clip_thread_title.py
@@ -56,7 +56,7 @@ def test_migration_003_repairs_stored_hard_cuts(tmp_path: Path) -> None:
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         # Partial v2 columns so full migrate can finish.
         conn.execute("ALTER TABLE cron_jobs ADD COLUMN mcp_servers TEXT NOT NULL DEFAULT '[]'")
diff --git a/tests/unit/db/test_db_pool.py b/tests/unit/db/test_db_pool.py
index f6be371b..ce0f1e4e 100644
--- a/tests/unit/db/test_db_pool.py
+++ b/tests/unit/db/test_db_pool.py
@@ -136,7 +136,7 @@ def test_repair_legacy_schema_ensures_columns(tmp_path: Path) -> None:
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         # Simulate a schema version ahead of what the columns reflect
         conn.execute("UPDATE _schema_version SET version = 2")
@@ -156,7 +156,7 @@ def test_migration_002_idempotent_when_column_already_present(tmp_path: Path) ->
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         conn.execute("ALTER TABLE cron_jobs ADD COLUMN mcp_servers TEXT NOT NULL DEFAULT '[]'")
     run_migrations(pool)
@@ -179,7 +179,7 @@ def test_migration_005_preserves_populated_users_and_constraints(tmp_path: Path)
         Path(__file__).resolve().parents[3] / "src/octop/infra/db/migrations/001_initial.sql"
     )
     with pool.connect() as conn:
-        conn.executescript(initial_migration.read_text())
+        conn.executescript(initial_migration.read_text(encoding="utf-8"))
         conn.execute("UPDATE _schema_version SET version = 4")
         conn.execute(
             """
@@ -293,7 +293,7 @@ def test_stuck_version_6_without_permissions_column_is_repaired(tmp_path: Path)
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         conn.execute("UPDATE _schema_version SET version = 6")
     run_migrations(pool)
@@ -313,7 +313,7 @@ def test_schema_v10_without_projection_tables_is_repaired(tmp_path: Path) -> Non
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         conn.execute("UPDATE _schema_version SET version = 10")
     run_migrations(pool)
@@ -346,7 +346,7 @@ def test_ahead_of_max_schema_version_clamps_to_max(tmp_path: Path) -> None:
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         conn.execute("UPDATE _schema_version SET version = 8")
     run_migrations(pool)
@@ -374,7 +374,7 @@ def test_current_watermark_repairs_pre_v13_connectors_schema(tmp_path: Path) ->
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         conn.execute("UPDATE _schema_version SET version = 13")
         conn.execute(
@@ -427,7 +427,7 @@ def test_pre_squash_schema_version_clamped_and_knowledge_tables_filled(
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         # Simulate a develop DB whose recorded version is ahead of the
         # consolidated max, so reconcile clamps and repairs knowledge tables.
@@ -591,7 +591,9 @@ def test_v7_sqlite_sql_upgrades_legacy_text_pks(tmp_path: Path) -> None:
             "id, kb_id, filename, content_type, byte_size, created_at, updated_at) "
             "VALUES ('doc1', 'kb1', 'a.md', 'text/markdown', 1, 1, 1)"
         )
-        conn.executescript((migrations / "007_resource_identity_and_profile.sql").read_text())
+        conn.executescript(
+            (migrations / "007_resource_identity_and_profile.sql").read_text(encoding="utf-8")
+        )
 
     with pool.connect() as conn:
         version = conn.execute("SELECT version FROM _schema_version").fetchone()[0]
diff --git a/tests/unit/db/test_published_experts_repo.py b/tests/unit/db/test_published_experts_repo.py
index ddf33df4..2b872893 100644
--- a/tests/unit/db/test_published_experts_repo.py
+++ b/tests/unit/db/test_published_experts_repo.py
@@ -114,8 +114,10 @@ def test_legacy_text_pk_published_experts_keep_public_id(tmp_path: Path) -> None
     pool = SqlitePool(tmp_path / "octop.db")
     migrations = Path(__file__).resolve().parents[3] / "src/octop/infra/db/migrations"
     with pool.connect() as conn:
-        conn.executescript((migrations / "001_initial.sql").read_text())
-        conn.executescript((migrations / "005_shared_experts_sso_knowledge.sql").read_text())
+        conn.executescript((migrations / "001_initial.sql").read_text(encoding="utf-8"))
+        conn.executescript(
+            (migrations / "005_shared_experts_sso_knowledge.sql").read_text(encoding="utf-8")
+        )
         conn.execute(
             "INSERT INTO published_experts("
             "id, slug, name, description, created_by, source_agent_id, "
diff --git a/tests/unit/db/test_repo_knowledge.py b/tests/unit/db/test_repo_knowledge.py
index ddb95d02..84b5859f 100644
--- a/tests/unit/db/test_repo_knowledge.py
+++ b/tests/unit/db/test_repo_knowledge.py
@@ -169,7 +169,7 @@ def test_migration_007_rebuilds_text_primary_keys(tmp_path: Path) -> None:
             (
                 Path(__file__).resolve().parents[3]
                 / "src/octop/infra/db/migrations/001_initial.sql"
-            ).read_text()
+            ).read_text(encoding="utf-8")
         )
         conn.execute("UPDATE _schema_version SET version = 6")
         conn.executescript(
diff --git a/tests/unit/db/test_skill_package_icons.py b/tests/unit/db/test_skill_package_icons.py
index 46f0cff0..746a8f01 100644
--- a/tests/unit/db/test_skill_package_icons.py
+++ b/tests/unit/db/test_skill_package_icons.py
@@ -58,8 +58,10 @@ def test_repair_legacy_schema_ensures_name_unique_index(tmp_path: Path) -> None:
     db_path = tmp_path / "octop.db"
     pool = SqlitePool(db_path)
     with pool.connect() as conn:
-        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text())
-        conn.executescript((_MIGRATIONS / "002_cron_mcp_and_skill_packages.sql").read_text())
+        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text(encoding="utf-8"))
+        conn.executescript(
+            (_MIGRATIONS / "002_cron_mcp_and_skill_packages.sql").read_text(encoding="utf-8")
+        )
         conn.execute("DROP INDEX IF EXISTS idx_skill_packages_name")
     run_migrations(pool)
     with pool.connect() as conn:
@@ -77,7 +79,7 @@ def test_migration_002_idempotent_when_icon_columns_already_present(tmp_path: Pa
     db_path = tmp_path / "octop.db"
     pool = SqlitePool(db_path)
     with pool.connect() as conn:
-        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text())
+        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text(encoding="utf-8"))
         conn.executescript(_LEGACY_SKILL_PACKAGES_WITHOUT_ICONS)
         conn.execute("ALTER TABLE skill_packages ADD COLUMN icon_name TEXT NOT NULL DEFAULT ''")
         conn.execute("ALTER TABLE skill_packages ADD COLUMN icon_url TEXT NOT NULL DEFAULT ''")
@@ -103,7 +105,7 @@ def test_repair_legacy_schema_adds_icon_columns_at_version_2(tmp_path: Path) ->
     db_path = tmp_path / "octop.db"
     pool = SqlitePool(db_path)
     with pool.connect() as conn:
-        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text())
+        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text(encoding="utf-8"))
         conn.executescript(_LEGACY_SKILL_PACKAGES_WITHOUT_ICONS)
         conn.execute("UPDATE _schema_version SET version = 2")
     run_migrations(pool)
diff --git a/tests/unit/db/test_skill_packages_repo.py b/tests/unit/db/test_skill_packages_repo.py
index f340b39d..4d4354e9 100644
--- a/tests/unit/db/test_skill_packages_repo.py
+++ b/tests/unit/db/test_skill_packages_repo.py
@@ -52,8 +52,10 @@ def test_skill_package_repo_create_get(db: SqlitePool) -> None:
 def test_legacy_text_pk_skill_packages_keep_public_id(tmp_path: Path) -> None:
     pool = SqlitePool(tmp_path / "octop.db")
     with pool.connect() as conn:
-        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text())
-        conn.executescript((_MIGRATIONS / "002_cron_mcp_and_skill_packages.sql").read_text())
+        conn.executescript((_MIGRATIONS / "001_initial.sql").read_text(encoding="utf-8"))
+        conn.executescript(
+            (_MIGRATIONS / "002_cron_mcp_and_skill_packages.sql").read_text(encoding="utf-8")
+        )
         conn.execute(
             "INSERT INTO skill_packages("
             "id, name, description, created_by, skill_count, icon_name, icon_url, "
diff --git a/uv.lock b/uv.lock
index 75ee7d32..6b273614 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2503,7 +2503,7 @@ wheels = [
 
 [[package]]
 name = "octop"
-version = "0.0.10"
+version = "0.1.0"
 source = { editable = "." }
 dependencies = [
     { name = "acme" },

From 61ee8c2b0ec8116e2683bae94acc3a4437af7736 Mon Sep 17 00:00:00 2001
From: XYAIStudio <XYAIStudio@users.noreply.github.com>
Date: Sat, 10 Oct 2026 09:20:39 +0800
Subject: [PATCH 05/39] fix(release): enforce native checks and repair
 organization dependency drift

---
 .github/workflows/octop-desktop.yml           |  39 +-
 .github/workflows/release.yml                 |   2 +-
 Makefile                                      |   3 +-
 desktop/portable/bundle-org-sidecar.sh        |   2 +-
 desktop/portable/verify_imports.py            |  12 +-
 .../openxyos/backend/services/doc-parser.ts   |  12 +-
 modules/openxyos/package-lock.json            | 461 ++++++++----------
 modules/openxyos/package.json                 |  16 +-
 modules/openxyos/scripts/test-doc-parser.ts   |  47 ++
 tests/unit/desktop/test_verify_imports.py     |  38 ++
 10 files changed, 361 insertions(+), 271 deletions(-)
 create mode 100644 modules/openxyos/scripts/test-doc-parser.ts
 create mode 100644 tests/unit/desktop/test_verify_imports.py

diff --git a/.github/workflows/octop-desktop.yml b/.github/workflows/octop-desktop.yml
index 65d5c623..25633a9d 100644
--- a/.github/workflows/octop-desktop.yml
+++ b/.github/workflows/octop-desktop.yml
@@ -77,6 +77,16 @@ jobs:
       - name: Build frontend → src/octop/dashboard
         run: make build-frontend
 
+      - name: Check dashboard dependencies
+        working-directory: dashboard
+        run: npm audit --registry=https://registry.npmjs.org
+
+      - name: Test dashboard
+        working-directory: dashboard
+        env:
+          NODE_OPTIONS: "--no-experimental-webstorage"
+        run: npm run lint && npm test
+
       - uses: actions/upload-artifact@v7
         with:
           name: dashboard-dist
@@ -84,6 +94,27 @@ jobs:
           if-no-files-found: error
           retention-days: 7
 
+  organization-quality:
+    name: Verify organization module
+    if: github.event_name != 'workflow_dispatch' || github.event.inputs.attach_from_run == ''
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-node@v5
+        with:
+          node-version: "24"
+          cache: npm
+          cache-dependency-path: modules/openxyos/package-lock.json
+      - name: Install organization dependencies
+        working-directory: modules/openxyos
+        run: npm ci
+      - name: Check organization module
+        working-directory: modules/openxyos
+        run: npm run ci
+      - name: Check organization dependencies
+        working-directory: modules/openxyos
+        run: npm audit --registry=https://registry.npmjs.org
+
   # Job-level `if` cannot read `matrix.*` (GitHub 422). Filter here so only
   # selected runners start — PRs → darwin-* + windows-*; dispatch honors `platforms`.
   select-platforms:
@@ -134,7 +165,7 @@ jobs:
 
   package:
     name: "${{ matrix.plat }}"
-    needs: [frontend, select-platforms]
+    needs: [frontend, select-platforms, organization-quality]
     runs-on: ${{ matrix.os }}
     # Matrix runners are native for each plat; pin host detection so x64 Git Bash
     # on windows-11-arm does not mis-classify the job as windows-amd64 cross-build.
@@ -177,7 +208,7 @@ jobs:
 
       - uses: actions/setup-node@v5
         with:
-          node-version: "20"
+          node-version: "24"
           cache: npm
           cache-dependency-path: modules/openxyos/package-lock.json
 
@@ -260,6 +291,10 @@ jobs:
       - name: Install Wails v3 CLI
         run: go install github.com/wailsapp/wails/v3/cmd/wails3@v3.0.0-beta.13
 
+      - name: Test native desktop lifecycle and updater
+        working-directory: desktop/src
+        run: go test ./...
+
       - name: Install NSIS
         if: runner.os == 'Windows'
         shell: pwsh
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 199093df..b23978e7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -58,7 +58,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: "20"
+          node-version: "24"
           cache: npm
           cache-dependency-path: dashboard/package-lock.json
 
diff --git a/Makefile b/Makefile
index 3b73053c..811bf76f 100644
--- a/Makefile
+++ b/Makefile
@@ -18,6 +18,7 @@ REPO_ROOT     := $(shell pwd)
 DASHBOARD_DIR := $(REPO_ROOT)/dashboard
 DASHBOARD_DEST := $(REPO_ROOT)/src/octop/dashboard
 DIST_DIR      := $(REPO_ROOT)/dist
+FRONTEND_NODE_OPTIONS ?= --max-old-space-size=4096
 
 # PyPI repository (override: make publish PYPI_REPO=testpypi)
 PYPI_REPO  ?= pypi
@@ -98,7 +99,7 @@ build-frontend:
 	@echo "[build-frontend] Installing npm dependencies..."
 	cd $(DASHBOARD_DIR) && npm ci
 	@echo "[build-frontend] Building dashboard (output: $(DASHBOARD_DEST))..."
-	cd $(DASHBOARD_DIR) && NODE_ENV=production NODE_OPTIONS="--max-old-space-size=2048" npm run build
+	cd $(DASHBOARD_DIR) && NODE_ENV=production NODE_OPTIONS="$(FRONTEND_NODE_OPTIONS)" npm run build
 	@echo "[build-frontend] Done."
 
 .PHONY: build-wheel
diff --git a/desktop/portable/bundle-org-sidecar.sh b/desktop/portable/bundle-org-sidecar.sh
index d275c458..d688c518 100755
--- a/desktop/portable/bundle-org-sidecar.sh
+++ b/desktop/portable/bundle-org-sidecar.sh
@@ -17,7 +17,7 @@ REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
 # shellcheck source=desktop/portable/_common.sh
 source "${REPO_ROOT}/desktop/portable/_common.sh"
 
-NODE_VERSION="${NODE_VERSION:-20.19.5}"
+NODE_VERSION="${NODE_VERSION:-24.21.0}"
 NODE_BASE_URL="${NODE_BASE_URL:-https://nodejs.org/dist/v${NODE_VERSION}}"
 
 node_archive_name() {
diff --git a/desktop/portable/verify_imports.py b/desktop/portable/verify_imports.py
index 7f08cf8c..a5179a0c 100755
--- a/desktop/portable/verify_imports.py
+++ b/desktop/portable/verify_imports.py
@@ -27,6 +27,9 @@
     "cryptography.fernet",
     "langchain_core",
     "langchain_openai",
+    "octop.infra.agents.middleware.system_message_cleanup",
+    "octop.infra.server",
+    "octop.api.app",
 )
 
 
@@ -117,11 +120,12 @@ def main() -> int:
         except Exception as exc:
             errors.append(f"import {mod}: {type(exc).__name__}: {exc}")
 
-    # Sanity: launch.py must stay importable as a file (no compile errors).
+    # Compile the launcher shipped alongside packages/, not this checker.
+    launcher = packages.parent / "launch.py"
     try:
-        ast.parse(Path(__file__).read_text(encoding="utf-8"))
-    except SyntaxError as exc:
-        errors.append(f"self-parse: {exc}")
+        ast.parse(launcher.read_text(encoding="utf-8"), filename=str(launcher))
+    except (OSError, SyntaxError) as exc:
+        errors.append(f"launch.py: {exc}")
 
     if errors:
         print("verify_imports FAILED:", file=sys.stderr)
diff --git a/modules/openxyos/backend/services/doc-parser.ts b/modules/openxyos/backend/services/doc-parser.ts
index 8c322942..c2aed9f0 100644
--- a/modules/openxyos/backend/services/doc-parser.ts
+++ b/modules/openxyos/backend/services/doc-parser.ts
@@ -5,11 +5,15 @@ export async function extractText(filePath: string, fileType: string): Promise<s
   const ext = fileType.startsWith(".") ? fileType : `.${fileType}`;
 
   if (ext === ".pdf") {
-    const pdf = await import("pdf-parse");
+    const { PDFParse } = await import("pdf-parse");
     const buffer = fs.readFileSync(filePath);
-    const parseFn = (pdf as any).default || pdf;
-    const data = await parseFn(buffer);
-    return cleanText(data.text).slice(0, 15000);
+    const parser = new PDFParse({ data: buffer });
+    try {
+      const data = await parser.getText();
+      return cleanText(data.text).slice(0, 15000);
+    } finally {
+      await parser.destroy();
+    }
   }
 
   if (ext === ".docx") {
diff --git a/modules/openxyos/package-lock.json b/modules/openxyos/package-lock.json
index caa4fcbf..af9c00c1 100644
--- a/modules/openxyos/package-lock.json
+++ b/modules/openxyos/package-lock.json
@@ -36,7 +36,7 @@
         "sql.js": "^1.11.0",
         "ssh2": "^1.17.0",
         "unzipper": "^0.12.3",
-        "uuid": "^10.0.0",
+        "uuid": "^11.1.1",
         "ws": "^8.21.0"
       },
       "devDependencies": {
@@ -191,6 +191,7 @@
       "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@babel/code-frame": "^7.29.7",
         "@babel/generator": "^7.29.7",
@@ -1848,6 +1849,7 @@
         }
       ],
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=20.19.0"
       },
@@ -1896,6 +1898,7 @@
         }
       ],
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=20.19.0"
       }
@@ -1917,6 +1920,7 @@
       "resolved": "https://registry.npmmirror.com/@dnd-kit/core/-/core-6.3.1.tgz",
       "integrity": "sha512-xkGBRQQab4RLwgXxoqETICr6S5JlogafbhNsidmrkVv2YRs5MLwpjoF2qpiGjQt8S9AoxtIV603s0GIUpY5eYQ==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@dnd-kit/accessibility": "^3.1.1",
         "@dnd-kit/utilities": "^3.2.2",
@@ -1953,29 +1957,6 @@
         "react": ">=16.8.0"
       }
     },
-    "node_modules/@emnapi/core": {
-      "version": "1.11.3",
-      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.11.3.tgz",
-      "integrity": "sha512-zLpS5asjEb7lq8jYLq37N6XKaE41DIexlY1rF/z4/tIl3wo13Sqm28fRyfIsKZD+NZ8mM5RoKkpW/rBcuoSZSg==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "@emnapi/wasi-threads": "1.2.3",
-        "tslib": "^2.4.0"
-      }
-    },
-    "node_modules/@emnapi/runtime": {
-      "version": "1.11.3",
-      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz",
-      "integrity": "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "tslib": "^2.4.0"
-      }
-    },
     "node_modules/@emnapi/wasi-threads": {
       "version": "1.2.3",
       "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.3.tgz",
@@ -2752,9 +2733,9 @@
       }
     },
     "node_modules/@img/sharp-darwin-arm64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.4.tgz",
-      "integrity": "sha512-Uhfl4V4lhP2nbUVF9+hyH1+luj86f1gUFeo8ALYxFoULoU+G87D43BfeMP8XHsk9boxAnCY/bf2EHwhA7MuGsA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.5.tgz",
+      "integrity": "sha512-QRUlFQ0WxvdWyqqG/WtI3iupfD5rBzmCHXSdPsY91sAtVtTo7Q4cb6zOccZ3gqEqkr0f1As1ehLqmEpDsRf+lg==",
       "cpu": [
         "arm64"
       ],
@@ -2771,13 +2752,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-darwin-arm64": "1.3.3"
+        "@img/sharp-libvips-darwin-arm64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-darwin-x64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.4.tgz",
-      "integrity": "sha512-hWniXY3bG5qKpkKrAwPe4y+VTPmf086YQAnkxWh7uA1YrlRouWGa0M0Mxj3ZjnXFkv7/TD1bTy9lGUK26vRvWw==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.5.tgz",
+      "integrity": "sha512-+BR255RhDlpygUpOc/Jdt1nT6DQ3XG/ERo5wbcdOf5Q320dKtPCKPLR1LJs9VGXRaMa8l1uUa0tkCNOXiAxZUw==",
       "cpu": [
         "x64"
       ],
@@ -2794,13 +2775,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-darwin-x64": "1.3.3"
+        "@img/sharp-libvips-darwin-x64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-freebsd-wasm32": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.4.tgz",
-      "integrity": "sha512-lIsKw/BU+kjB4eZjxrYrZmwOJYi3Ajrv66iAlBmUPyKc3HpnloevB1g3wxGD9P/5BbQ1brBGl65VRRrCvQDEqA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.5.tgz",
+      "integrity": "sha512-Y/z91nEZ4uIBX5X3nfTovjU9lHNKFYbL2lpHCLVNmXQK03VIZvXBBt0KxbPGp2SdGSF+2mQU4e+hQaWOt86iAw==",
       "dev": true,
       "license": "Apache-2.0",
       "optional": true,
@@ -2808,7 +2789,7 @@
         "freebsd"
       ],
       "dependencies": {
-        "@img/sharp-wasm32": "0.35.4"
+        "@img/sharp-wasm32": "0.35.5"
       },
       "engines": {
         "node": ">=20.9.0"
@@ -2818,9 +2799,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-darwin-arm64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.3.tgz",
-      "integrity": "sha512-suTBPTDGrI9WodccaDdwZItTSaBYASlBk1NSfElSHrUfzu3szG6lvIF58+WiFvnfzuK8ZBFS5zE00PxqxnRiPg==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.4.tgz",
+      "integrity": "sha512-5R89nBYiRdUlSWJxPhO+GVtaXzXSxKnRu/xqMn3KTA3L9EB9Oy/P+Nn2f2vlhPuUdy/Zusb2DarbyTpGCfEDuw==",
       "cpu": [
         "arm64"
       ],
@@ -2835,9 +2816,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-darwin-x64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.3.tgz",
-      "integrity": "sha512-FVJZ5mITMobmXIz/hPDTw0EintTW5H3WfrxwLqEqjiIihlu+hVRyGrFQ60xl0Lxn7Bt3zdpevPaQi0HEzqz9fw==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.4.tgz",
+      "integrity": "sha512-iR2OKH80yi0U+dUplyh3/xdpFvps6YkCwsXenIJxqxR1v9o+xtKTGbS9H7cps+2Vxjc8B1j96p75NmTGjIhtpQ==",
       "cpu": [
         "x64"
       ],
@@ -2852,9 +2833,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-arm": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.3.tgz",
-      "integrity": "sha512-3rbU4vqXXc3hY/OiXdl52xZvT0F1yEngWfvqudtPJg/KkyiaQw2DRsFrNzpmLvfavbwOq3qXn36GP8obHRULQA==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.4.tgz",
+      "integrity": "sha512-LmRtTsOHuvM2+wlO2Db37dx5MiZhB0FvSunciw48YjdOkZz9KAiRbm8ujeMOA1INqmei5NapFxYEK1D1ZSidmw==",
       "cpu": [
         "arm"
       ],
@@ -2869,9 +2850,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-arm64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.3.tgz",
-      "integrity": "sha512-0DaL0A6Xu6sQSQFwe4iVCrKWU2cCTItnRsYsCdxAMm9NF6twAA9BKnoqy4hqz4+azQ0JHuA26qiUKsf1XJ/v5A==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.4.tgz",
+      "integrity": "sha512-Y3dgX/6lE2QhQb+Gxy0WZxfg9MEm/JBjamZpS2IklP7xIQoKN4hzAm7KcMVGtaVDt3neE9OKBC7vAfonA/Lr1A==",
       "cpu": [
         "arm64"
       ],
@@ -2886,9 +2867,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-ppc64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.3.tgz",
-      "integrity": "sha512-cdn1OvUBwsXhbC0zSzJnNzf5MZ/mTrobawDvNXBTxe8VtqKAm0sRuEY2Evzovb/w9JMk4TvRxqt1mekSuJz64w==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.4.tgz",
+      "integrity": "sha512-Le6boB8Tai0Nis+gIxIpKx68UDVVIqdR8Tin5Yf1z2LJJQLDJvCDRqRu+jC2qCoD+eIomonmOwB4smBRxfVpYQ==",
       "cpu": [
         "ppc64"
       ],
@@ -2903,9 +2884,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-riscv64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.3.tgz",
-      "integrity": "sha512-HjPVx7yKz+0lqdhDlTw1tt90wamBoxhiXpvl1XZpJLiHH4RCJ5yDTqH+VlYPv2fwFs89JFw4c1IexYOcQUi4IQ==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.4.tgz",
+      "integrity": "sha512-aHkkIEHPRdQEegJN20MLmGtxYD9R2wQr3Cwpddnu5+YKMt6Uzax7S9h5gpZTo8wyrGuZSlfQ63OevL5mTyOC7Q==",
       "cpu": [
         "riscv64"
       ],
@@ -2920,9 +2901,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-s390x": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.3.tgz",
-      "integrity": "sha512-neWLh+3yCNThxnfy3c4BbVBeGgt9aftno+XbT56iK28RgeDs3UOFWviLWlUu0bArYVYJaFDK+RRohbicUNCm8Q==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.4.tgz",
+      "integrity": "sha512-ra/mB6MikESDUO7Yg+Mi95bFBb9GsObURuhnOv3OqknjGe9sZrG8tCe9q0xSIGrtLgvgw0gKnFWcK4blSgQOuQ==",
       "cpu": [
         "s390x"
       ],
@@ -2937,9 +2918,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linux-x64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.3.tgz",
-      "integrity": "sha512-4vKmvAst9nrowcqquKFAyZJUDolUaIp8uRiN0mWFguJ1IplC9/pitXtlnnlU4aa/eJw3J7i67V+pwUL+wZGdsA==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.4.tgz",
+      "integrity": "sha512-GJ//SSXbnwSDes02umB3nDJLFcQzw8a18V8fyhqr6tV515tOEMdImjjxj1AoafMRz56F3PHgftnj1QEKSU1zkw==",
       "cpu": [
         "x64"
       ],
@@ -2954,9 +2935,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.3.tgz",
-      "integrity": "sha512-Y9kQaLMuNoB0bPYOOdcZMaseNrFpPodIWWMrx+CZyydf2xn68j9WYc6sWWRrDwNkzCQjKYfc68L7jKjGlHMibw==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.4.tgz",
+      "integrity": "sha512-hvulFwtjUcagsis6BBxHwGFwWoNZjgYmULGVrZcyfNbjA8hKILbRxGg15/7w5HDyXHXUos/j6baAWqnCyQ2DWA==",
       "cpu": [
         "arm64"
       ],
@@ -2971,9 +2952,9 @@
       }
     },
     "node_modules/@img/sharp-libvips-linuxmusl-x64": {
-      "version": "1.3.3",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.3.tgz",
-      "integrity": "sha512-fj8Mv0HHfD1Rr+4I68+3agJynxDWtBFgicTbSOb9Bke6pIwzGcJ+RX/yHjmiEGFMCavY/dxvem7MyNaJF+wDiw==",
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.4.tgz",
+      "integrity": "sha512-6zXKeE/p39I1AmA3cJG35eyBGNqNddLnUXjhwBnsGjFPWqf5VKkDBEqaEkPDoTEtkxwi2vv8Tcr2mDyP4So7Fg==",
       "cpu": [
         "x64"
       ],
@@ -2988,9 +2969,9 @@
       }
     },
     "node_modules/@img/sharp-linux-arm": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.4.tgz",
-      "integrity": "sha512-7OAS8gI0EReKGVN2HssHlM6umJgxF5VI3xN0p9FA91p/YO+ou5hiNghLdZ5BEHztwaaK5+bLKRf8x/o2L2nk9A==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.5.tgz",
+      "integrity": "sha512-LEaXK2WdXVK5ykcw0buWyPMsmLLL2vpHLD6yrNSW+JGEL3BZPA4tpKN6iaMc4AxTTAoaX/sU1rOL51lcIz48ZQ==",
       "cpu": [
         "arm"
       ],
@@ -3007,13 +2988,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm": "1.3.3"
+        "@img/sharp-libvips-linux-arm": "1.3.4"
       }
     },
     "node_modules/@img/sharp-linux-arm64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.4.tgz",
-      "integrity": "sha512-De4jpEnAU8Hd5oT0j1G3uL4ZvTuipVMn7YC6vPaJhy6/7EwEae0SVAoBrUMYQbkLGDm85taVWwuPc1a44LTzCQ==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.5.tgz",
+      "integrity": "sha512-LYVx5JTsOM2CBzmxreh+nl64/3H6Xb09iSLknqH47z2T2DFFxDeFLP5y4dJwe6H7uGQlHPyEEtIqyo3DYsRwdQ==",
       "cpu": [
         "arm64"
       ],
@@ -3030,13 +3011,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm64": "1.3.3"
+        "@img/sharp-libvips-linux-arm64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-linux-ppc64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.4.tgz",
-      "integrity": "sha512-2oYZJeIl4kCcMGk4ouZVjnkCtFrpQFlNEtJ6GbxzhHQchwH0NH/qEb9ykmOl29dqwMq+JhFdZn+1ak2FKhI9fQ==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.5.tgz",
+      "integrity": "sha512-QVxAAq8evVRI9ia2vqgwrmWucn5Dfv+JdWzj75pD8omHLPSP7f8p20O8jxzjCcuCEQEOtYOZUmX1hkiZ0kdevA==",
       "cpu": [
         "ppc64"
       ],
@@ -3053,13 +3034,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-ppc64": "1.3.3"
+        "@img/sharp-libvips-linux-ppc64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-linux-riscv64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.4.tgz",
-      "integrity": "sha512-cPbNChoRURAWdebDIHSenxRpgEdy7JkPydSnUxRm9VvKD7m0/xVaR/8Fzlu81pk5nHEvHH87UZUA7cTtwnbJSA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.5.tgz",
+      "integrity": "sha512-LtdreXguaavKODPIfzJ4kffx7UNt1omwtK0rch4EBbbSTXPnxWmYSayXdLJw0fJzQ97kHt1gL/yh4tvU+nCyRQ==",
       "cpu": [
         "riscv64"
       ],
@@ -3076,13 +3057,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-riscv64": "1.3.3"
+        "@img/sharp-libvips-linux-riscv64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-linux-s390x": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.4.tgz",
-      "integrity": "sha512-RY0JFY8Fd6RonCBtHz+DvadaPkXDSI1AUn6yWL9TipqkZ1vY8w8evqdgyDFnkm4/K1ve1TvZiaePP5oSd4+WVQ==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.5.tgz",
+      "integrity": "sha512-UZasTOFiYzotTsGOCu42BfUzP6Tu6Do/947iRm1RsLKvlllxwGcn4RN27LibGWceix4Y+Pmw3jsnTcCQIgWjqA==",
       "cpu": [
         "s390x"
       ],
@@ -3099,13 +3080,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-s390x": "1.3.3"
+        "@img/sharp-libvips-linux-s390x": "1.3.4"
       }
     },
     "node_modules/@img/sharp-linux-x64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.4.tgz",
-      "integrity": "sha512-9qvvEAuk8k89TfWUoX2htWjbAMX8p+NxCppjpcg5k6xMsjhBQPTsoIh36h9Qde4WRuGpJeYnOjdosDn/cnv+OA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.5.tgz",
+      "integrity": "sha512-SxFtLTeJInhAA9Q836kux2vZNeOBQEx658qvbboZScr0wIARym3IcGmW7KpVD5sbVg0Ojy+udFQdayYIZyoNog==",
       "cpu": [
         "x64"
       ],
@@ -3122,13 +3103,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linux-x64": "1.3.3"
+        "@img/sharp-libvips-linux-x64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-linuxmusl-arm64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.4.tgz",
-      "integrity": "sha512-KB5jxpfWQTr0nc3xdHtWChdbifHrBGsd2SM62Eyxrl8afikm+f5qGBU75SJIZBT/S1MC8XyacdlXBMSWq6OURA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.5.tgz",
+      "integrity": "sha512-9HbMclmI1zlNkFRs3z9/eBtDjfD0sGlrX1z6b1qwmiFY5ElDLh4BC0LPBdVp7z1DXFiKlIcznf+ZlsuZzLxQqg==",
       "cpu": [
         "arm64"
       ],
@@ -3145,13 +3126,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-arm64": "1.3.3"
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-linuxmusl-x64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.4.tgz",
-      "integrity": "sha512-f+eZJZIQNEEd26RPSW+76chwOf1XtA2Y/O+5ocVyLliHkeih3e+jhLVBdNTd2rS3IbNXK8+ug93Vf5ZXtF5Lxg==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.5.tgz",
+      "integrity": "sha512-4KOphqB035HrVdqLZfCgMzzERrQkkzOwRhl4OAkRO1YCldbaFjySXMaK534Mo0V+LndnlJk+sbUyLeU0ULyD1A==",
       "cpu": [
         "x64"
       ],
@@ -3168,13 +3149,13 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-x64": "1.3.3"
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.4"
       }
     },
     "node_modules/@img/sharp-wasm32": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.4.tgz",
-      "integrity": "sha512-zQnl4Kwp7Q6NHsENtU2T/00Zi+w3AQNwz3+UaTyVBy2FpXrzXzGjndpK61onhZjRtRpQXxCTeqw19bVyXOh7jA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.5.tgz",
+      "integrity": "sha512-Ptsga1su4tQx+LLF1ECS9U6nz5kmrXKo6XVbtR48Ke3ZRxxgaWBu7IDtEe1quo8hiupwm6WFqxVlXaSf7IINGQ==",
       "dev": true,
       "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
       "optional": true,
@@ -3189,9 +3170,9 @@
       }
     },
     "node_modules/@img/sharp-webcontainers-wasm32": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.4.tgz",
-      "integrity": "sha512-ESfNkywmCfPNyaZjxooddJQiQ+l/nTpGEOGthxiLnIHXC/CmcBixnfwUleX9mCz9ovrUUvKMap/pm8RYbzfwaA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.5.tgz",
+      "integrity": "sha512-hfhF/FmoQyTUkA0bIKFOtw536BQSeBMe6BF6QyWlrPxT754+TFLaZ7sKKTfvvM0yJgKgaYTwnFCIZ/GuDw5SUA==",
       "cpu": [
         "wasm32"
       ],
@@ -3199,7 +3180,7 @@
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
-        "@img/sharp-wasm32": "0.35.4"
+        "@img/sharp-wasm32": "0.35.5"
       },
       "engines": {
         "node": ">=20.9.0"
@@ -3209,9 +3190,9 @@
       }
     },
     "node_modules/@img/sharp-win32-arm64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.4.tgz",
-      "integrity": "sha512-iNdlBX9gLVvqe2I3uIJSIKTq6wckP/DYxZtcqxm09x5Gi24DnFBmPAWZmr60ZyYMG0xlzo6goG3670ar+RXvRw==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.5.tgz",
+      "integrity": "sha512-X4t7g+7ZA5DKblCBEXGjUqqemj4vczING/5viFwAL8h4N3qYeyjwdCvRLHi4EdOUI+2Z7UFlp1VM+p/AuEtm6Q==",
       "cpu": [
         "arm64"
       ],
@@ -3229,9 +3210,9 @@
       }
     },
     "node_modules/@img/sharp-win32-ia32": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.4.tgz",
-      "integrity": "sha512-kqRsbaa5CS6KHlpxnN7WhE6vAAugXyZButpRdvDWetlv6Qv4N9WTcrWzF7tXfB9T7MsoadqdI8hmwLq6UlLvtw==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.5.tgz",
+      "integrity": "sha512-5Zm82LoBc43nhwNybZlG7Y1KO//Zhsn306fQl29ZOuStHLGTo3BWL83q3cznX0poxSAMuYL1On/BHBxkBeKr6A==",
       "cpu": [
         "ia32"
       ],
@@ -3249,9 +3230,9 @@
       }
     },
     "node_modules/@img/sharp-win32-x64": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.4.tgz",
-      "integrity": "sha512-XtmnYhBcrORsJ4XJngyzr/EWP0hRZLAZRFaApdKuviyqF78+ylxh2y06ZmtULAMOnObJ3ucpN0AcwSWnMowTRg==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.5.tgz",
+      "integrity": "sha512-x76eH0vEiHlcMQu8Y8IenntaACtddpT6W0wmXtWrnKcnKI7ME5DdgqhAD6SEWOEl1v2zDvkZDhFA9KnURwpfqg==",
       "cpu": [
         "x64"
       ],
@@ -4791,6 +4772,7 @@
       "resolved": "https://registry.npmmirror.com/@types/express/-/express-5.0.6.tgz",
       "integrity": "sha512-sKYVuV7Sv9fbPIt/442koC7+IIwK5olP1KWeD88e/idgoJqDm3JV/YUiPwkoKK92ylff2MGxSz1CSjsXelx0YA==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@types/body-parser": "*",
         "@types/express-serve-static-core": "^5.0.0",
@@ -4929,6 +4911,7 @@
       "integrity": "sha512-MXfmqaVPEVgkBT/aY0aGCkRWWtByiYQXo3xdQ8r5RzuFrPiRn8Gar2tQdXSUQ2GKV3bkXckek89V8wQBY2Q/Aw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "csstype": "^3.2.2"
       }
@@ -5048,6 +5031,7 @@
       "integrity": "sha512-KA0OshtlcCCXmbfqyZkM5pV3/WNraJf7DkJRLpyrmwPtud57H5BDX7C3k0LPSPxpprfRL+cJDGabF10mvNCoCw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@typescript-eslint/scope-manager": "8.64.0",
         "@typescript-eslint/types": "8.64.0",
@@ -5202,9 +5186,9 @@
       }
     },
     "node_modules/@typescript-eslint/typescript-estree/node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -5358,6 +5342,7 @@
       "integrity": "sha512-xRQbDb9BnwDafYNn6Vwl839DYVjqXYb1XVGtWAZ1kcDc6iwAL4hg3B1dZlRiuENFeO2H53gFG3in621AdERVAg==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -5393,6 +5378,7 @@
       "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
         "fast-uri": "^3.0.1",
@@ -5506,13 +5492,10 @@
       }
     },
     "node_modules/argparse": {
-      "version": "1.0.10",
-      "resolved": "https://registry.npmmirror.com/argparse/-/argparse-1.0.10.tgz",
-      "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==",
-      "license": "MIT",
-      "dependencies": {
-        "sprintf-js": "~1.0.2"
-      }
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
+      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
+      "license": "Python-2.0"
     },
     "node_modules/array-buffer-byte-length": {
       "version": "1.0.2",
@@ -5617,13 +5600,13 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.18.1",
-      "resolved": "https://registry.npmmirror.com/axios/-/axios-1.18.1.tgz",
-      "integrity": "sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==",
+      "version": "1.20.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz",
+      "integrity": "sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",
-        "form-data": "^4.0.5",
+        "form-data": "^4.0.6",
         "https-proxy-agent": "^5.0.1",
         "proxy-from-env": "^2.1.0"
       }
@@ -5835,9 +5818,9 @@
       "license": "MIT"
     },
     "node_modules/brace-expansion": {
-      "version": "1.1.18",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
-      "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
+      "version": "1.1.21",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.21.tgz",
+      "integrity": "sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0",
@@ -5888,6 +5871,7 @@
         }
       ],
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "baseline-browser-mapping": "^2.11.20",
         "caniuse-lite": "^1.0.30001810",
@@ -5945,6 +5929,7 @@
       "version": "1.1.2",
       "resolved": "https://registry.npmmirror.com/buffer-from/-/buffer-from-1.1.2.tgz",
       "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/buffer-indexof-polyfill": {
@@ -6228,31 +6213,16 @@
       "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
       "license": "MIT"
     },
-    "node_modules/concat-stream": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmmirror.com/concat-stream/-/concat-stream-2.0.0.tgz",
-      "integrity": "sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==",
-      "engines": [
-        "node >= 6.0"
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "buffer-from": "^1.0.0",
-        "inherits": "^2.0.3",
-        "readable-stream": "^3.0.2",
-        "typedarray": "^0.0.6"
-      }
-    },
     "node_modules/concurrently": {
-      "version": "9.2.4",
-      "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-9.2.4.tgz",
-      "integrity": "sha512-TZ0CEhyzvFjgtAvHTusDMgj7wNdihCh7LLLrzdUOXIhdlnL2JBBGA9eJxR24rtqgmdjh3OA3hrN1rCHj6HM8qA==",
+      "version": "9.2.5",
+      "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-9.2.5.tgz",
+      "integrity": "sha512-YMZlvWrTPQEhjKp60XSmMGt60+pffbv6DyRnOMvVO98+J7aF8w8Ui9FhdcOwvSixc/kyR6SoVvmejcn/2lZBqg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "chalk": "4.1.2",
         "rxjs": "7.8.2",
-        "shell-quote": "1.9.0",
+        "shell-quote": "1.12.0",
         "supports-color": "8.1.1",
         "tree-kill": "1.2.2",
         "yargs": "17.7.2"
@@ -6484,6 +6454,7 @@
       "integrity": "sha512-62rNSrioXw93uliKFBwjukeQyeWwH2PqDrTac31r2P6464u3AUvTk0xS4LVvT251g7IgkFunrI48ZEZGjywSOg==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=0.10"
       }
@@ -6941,6 +6912,7 @@
       "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==",
       "dev": true,
       "license": "ISC",
+      "peer": true,
       "engines": {
         "node": ">=12"
       }
@@ -7324,9 +7296,9 @@
       "license": "MIT"
     },
     "node_modules/dompurify": {
-      "version": "3.4.15",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.15.tgz",
-      "integrity": "sha512-EUBjM+B+lkDE41iE82DDSCfkoPGfXx8IxFxPMjNzm/Uk4xDet77rTN9wqlxlVg71kK7XGuUMv6wUxJUwwv+Xyw==",
+      "version": "3.4.16",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz",
+      "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -7738,6 +7710,7 @@
       "integrity": "sha512-DgZS62aPLXKlnxILS/AYCoRvHaZeXceIzlXPkkGGzJWSow1aEk0lbTlxUSlyjC8jcaKxAdOnTDz+o1JFSBsyjw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.8.0",
         "@eslint-community/regexpp": "^4.12.1",
@@ -8007,15 +7980,6 @@
         "util-deprecate": "~1.0.1"
       }
     },
-    "node_modules/exceljs/node_modules/uuid": {
-      "version": "8.3.2",
-      "resolved": "https://registry.npmmirror.com/uuid/-/uuid-8.3.2.tgz",
-      "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
-      "license": "MIT",
-      "bin": {
-        "uuid": "dist/bin/uuid"
-      }
-    },
     "node_modules/express": {
       "version": "4.22.2",
       "resolved": "https://registry.npmmirror.com/express/-/express-4.22.2.tgz",
@@ -8140,9 +8104,9 @@
       }
     },
     "node_modules/fast-uri": {
-      "version": "3.1.7",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
-      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
+      "version": "3.1.8",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
       "dev": true,
       "funding": [
         {
@@ -8214,9 +8178,9 @@
       }
     },
     "node_modules/filelist/node_modules/brace-expansion": {
-      "version": "2.1.4",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz",
-      "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==",
+      "version": "2.1.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.7.tgz",
+      "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -9017,9 +8981,9 @@
       "license": "MIT"
     },
     "node_modules/ip-address": {
-      "version": "10.7.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.0.tgz",
-      "integrity": "sha512-BGFsyJd5mpXp3rK6jIdADLNgpJUK1jnjzvYF8lK+VyDab9JAmqN0YOKDdP17HlgKb2+ehPgDc8EtnRLbGCAMhA==",
+      "version": "10.7.3",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.3.tgz",
+      "integrity": "sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -9582,13 +9546,6 @@
         "js-yaml": "bin/js-yaml.js"
       }
     },
-    "node_modules/js-yaml/node_modules/argparse": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmmirror.com/argparse/-/argparse-2.0.1.tgz",
-      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
-      "dev": true,
-      "license": "Python-2.0"
-    },
     "node_modules/jsdom": {
       "version": "29.1.1",
       "resolved": "https://registry.npmmirror.com/jsdom/-/jsdom-29.1.1.tgz",
@@ -9881,9 +9838,9 @@
       }
     },
     "node_modules/katex": {
-      "version": "0.16.47",
-      "resolved": "https://registry.npmmirror.com/katex/-/katex-0.16.47.tgz",
-      "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==",
+      "version": "0.18.10",
+      "resolved": "https://registry.npmjs.org/katex/-/katex-0.18.10.tgz",
+      "integrity": "sha512-/B6p9eY9DX7aHBfpkHdpirDTZ5QH9xTwL9y837PWuzuv41O5jFdqNQwVQEQsimY0/iVNkwBY4+4hMfhQ7d4Dbw==",
       "dev": true,
       "funding": [
         "https://opencollective.com/katex",
@@ -9891,20 +9848,20 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "commander": "^8.3.0"
+        "commander": "^15.0.0"
       },
       "bin": {
         "katex": "cli.js"
       }
     },
     "node_modules/katex/node_modules/commander": {
-      "version": "8.3.0",
-      "resolved": "https://registry.npmmirror.com/commander/-/commander-8.3.0.tgz",
-      "integrity": "sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==",
+      "version": "15.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-15.0.0.tgz",
+      "integrity": "sha512-z67u4ZhzCL/Tydu1lJARtEZYWbWaN7oYLHbsuzocr6y4N6WZAagG3RQ4FW61V1/0+jImpj293XfrcYnd1qxtPg==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">= 12"
+        "node": ">=22.12.0"
       }
     },
     "node_modules/keyv": {
@@ -10486,19 +10443,17 @@
       }
     },
     "node_modules/mammoth": {
-      "version": "1.12.0",
-      "resolved": "https://registry.npmmirror.com/mammoth/-/mammoth-1.12.0.tgz",
-      "integrity": "sha512-cwnK1RIcRdDMi2HRx2EXGYlxqIEh0Oo3bLhorgnsVJi2UkbX1+jKxuBNR9PC5+JaX7EkmJxFPmo6mjLpqShI2w==",
+      "version": "1.13.0",
+      "resolved": "https://registry.npmjs.org/mammoth/-/mammoth-1.13.0.tgz",
+      "integrity": "sha512-2cawcYFcP7ISfXbBcL9lmVgTNWo88v/52ND1gnywHtVT/pX0//puPnf0iMPV9ZgmuvNOE+zkIhDgZ9M2c2dDDg==",
       "license": "BSD-2-Clause",
       "dependencies": {
         "@xmldom/xmldom": "^0.8.6",
         "argparse": "~1.0.3",
         "base64-js": "^1.5.1",
-        "bluebird": "~3.4.0",
         "dingbat-to-unicode": "^1.0.1",
         "jszip": "^3.7.1",
         "lop": "^0.4.2",
-        "path-is-absolute": "^1.0.0",
         "underscore": "^1.13.1",
         "xmlbuilder": "^10.0.0"
       },
@@ -10699,14 +10654,13 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-2.3.0.tgz",
-      "integrity": "sha512-cjNbm3sttszgZeGfJR124D+jFEfkXCVAsoPBmFn9X7UxmDSFHWqE2CoEj0vrmSpuAFnqWR1Szcm9QTsiHr60Xw==",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.4.0.tgz",
+      "integrity": "sha512-7dqa0ZcFfzbefdTuIkzOSMvZWC0J7FLqBOjJUZvDCXShIURWKxAyTT1wHhnE5q19c7jOJf43IYYKjBmZVZmvhg==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
         "busboy": "^1.6.0",
-        "concat-stream": "^2.0.0",
         "type-is": "^1.6.18"
       },
       "engines": {
@@ -11129,6 +11083,7 @@
       "resolved": "https://registry.npmmirror.com/pg/-/pg-8.23.0.tgz",
       "integrity": "sha512-Ip2EQCngowJLGOfCwkFhPXU7/ljlhn6Rxlmy4XYfL2Y+vyRM59+8uR2xqRWKdYmbXmxCFOAmKxBuSUCdF34qLg==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "pg-connection-string": "^2.14.0",
         "pg-pool": "^3.14.0",
@@ -11386,9 +11341,9 @@
       "license": "MIT"
     },
     "node_modules/proxy-addr": {
-      "version": "2.0.7",
-      "resolved": "https://registry.npmmirror.com/proxy-addr/-/proxy-addr-2.0.7.tgz",
-      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "version": "2.0.8",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.8.tgz",
+      "integrity": "sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==",
       "license": "MIT",
       "dependencies": {
         "forwarded": "0.2.0",
@@ -11396,6 +11351,10 @@
       },
       "engines": {
         "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
       }
     },
     "node_modules/proxy-from-env": {
@@ -11484,6 +11443,7 @@
       "resolved": "https://registry.npmmirror.com/react/-/react-19.2.7.tgz",
       "integrity": "sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ==",
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=0.10.0"
       }
@@ -11493,6 +11453,7 @@
       "resolved": "https://registry.npmmirror.com/react-dom/-/react-dom-19.2.7.tgz",
       "integrity": "sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "scheduler": "^0.27.0"
       },
@@ -11588,9 +11549,9 @@
       }
     },
     "node_modules/readdir-glob/node_modules/brace-expansion": {
-      "version": "2.1.4",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz",
-      "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==",
+      "version": "2.1.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.7.tgz",
+      "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==",
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0"
@@ -12145,9 +12106,9 @@
       "license": "ISC"
     },
     "node_modules/sharp": {
-      "version": "0.35.4",
-      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.4.tgz",
-      "integrity": "sha512-n++8XWcj+jCOr2IOl7h8LbKnGBDY4aPbmprMONBNFdn0ImXqpGVv5zliDs0V9HbmbCQLpbuo2ej9rAoOQTvMDA==",
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.5.tgz",
+      "integrity": "sha512-Ywn4OnzGukp7CDMrp08RQ50YKmuwG47brZgIVPTvBaaAfQlRlygrRqSrxdCiL9M+LlzLBiJ68IR1QqvzHyjC7g==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -12162,31 +12123,31 @@
         "url": "https://opencollective.com/libvips"
       },
       "optionalDependencies": {
-        "@img/sharp-darwin-arm64": "0.35.4",
-        "@img/sharp-darwin-x64": "0.35.4",
-        "@img/sharp-freebsd-wasm32": "0.35.4",
-        "@img/sharp-libvips-darwin-arm64": "1.3.3",
-        "@img/sharp-libvips-darwin-x64": "1.3.3",
-        "@img/sharp-libvips-linux-arm": "1.3.3",
-        "@img/sharp-libvips-linux-arm64": "1.3.3",
-        "@img/sharp-libvips-linux-ppc64": "1.3.3",
-        "@img/sharp-libvips-linux-riscv64": "1.3.3",
-        "@img/sharp-libvips-linux-s390x": "1.3.3",
-        "@img/sharp-libvips-linux-x64": "1.3.3",
-        "@img/sharp-libvips-linuxmusl-arm64": "1.3.3",
-        "@img/sharp-libvips-linuxmusl-x64": "1.3.3",
-        "@img/sharp-linux-arm": "0.35.4",
-        "@img/sharp-linux-arm64": "0.35.4",
-        "@img/sharp-linux-ppc64": "0.35.4",
-        "@img/sharp-linux-riscv64": "0.35.4",
-        "@img/sharp-linux-s390x": "0.35.4",
-        "@img/sharp-linux-x64": "0.35.4",
-        "@img/sharp-linuxmusl-arm64": "0.35.4",
-        "@img/sharp-linuxmusl-x64": "0.35.4",
-        "@img/sharp-webcontainers-wasm32": "0.35.4",
-        "@img/sharp-win32-arm64": "0.35.4",
-        "@img/sharp-win32-ia32": "0.35.4",
-        "@img/sharp-win32-x64": "0.35.4"
+        "@img/sharp-darwin-arm64": "0.35.5",
+        "@img/sharp-darwin-x64": "0.35.5",
+        "@img/sharp-freebsd-wasm32": "0.35.5",
+        "@img/sharp-libvips-darwin-arm64": "1.3.4",
+        "@img/sharp-libvips-darwin-x64": "1.3.4",
+        "@img/sharp-libvips-linux-arm": "1.3.4",
+        "@img/sharp-libvips-linux-arm64": "1.3.4",
+        "@img/sharp-libvips-linux-ppc64": "1.3.4",
+        "@img/sharp-libvips-linux-riscv64": "1.3.4",
+        "@img/sharp-libvips-linux-s390x": "1.3.4",
+        "@img/sharp-libvips-linux-x64": "1.3.4",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4",
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.4",
+        "@img/sharp-linux-arm": "0.35.5",
+        "@img/sharp-linux-arm64": "0.35.5",
+        "@img/sharp-linux-ppc64": "0.35.5",
+        "@img/sharp-linux-riscv64": "0.35.5",
+        "@img/sharp-linux-s390x": "0.35.5",
+        "@img/sharp-linux-x64": "0.35.5",
+        "@img/sharp-linuxmusl-arm64": "0.35.5",
+        "@img/sharp-linuxmusl-x64": "0.35.5",
+        "@img/sharp-webcontainers-wasm32": "0.35.5",
+        "@img/sharp-win32-arm64": "0.35.5",
+        "@img/sharp-win32-ia32": "0.35.5",
+        "@img/sharp-win32-x64": "0.35.5"
       },
       "peerDependenciesMeta": {
         "@types/node": {
@@ -12231,9 +12192,9 @@
       }
     },
     "node_modules/shell-quote": {
-      "version": "1.9.0",
-      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz",
-      "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==",
+      "version": "1.12.0",
+      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.12.0.tgz",
+      "integrity": "sha512-PcByqNyT/38F2kDNi006HAMRJaULuBzq/FOsw3qdZvX/GA9W/jamDaRskgHjubHiftXK5sIFxLNkvrXUwcof6Q==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -12353,9 +12314,9 @@
       }
     },
     "node_modules/source-map-js": {
-      "version": "1.2.1",
-      "resolved": "https://registry.npmmirror.com/source-map-js/-/source-map-js-1.2.1.tgz",
-      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {
@@ -12392,12 +12353,6 @@
         "node": ">= 10.x"
       }
     },
-    "node_modules/sprintf-js": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmmirror.com/sprintf-js/-/sprintf-js-1.0.3.tgz",
-      "integrity": "sha512-D9cPgkvLlV3t3IzL0D0YLvGA9Ahk4PcvVwUbN0dSGr1aP0Nrt4AEnTUbuGvquEC0mA64Gqt1fzirlRs5ibXx8g==",
-      "license": "BSD-3-Clause"
-    },
     "node_modules/sql.js": {
       "version": "1.14.1",
       "resolved": "https://registry.npmmirror.com/sql.js/-/sql.js-1.14.1.tgz",
@@ -12757,6 +12712,7 @@
       "integrity": "sha512-J/9An6vs9Us6wKRriSFXBWdRZapREHqFzdNUKk0pmu804EMR6dr6winwo7e5JDxN4xahxQsuysyYFwlwj4XN/Q==",
       "dev": true,
       "license": "BSD-2-Clause",
+      "peer": true,
       "dependencies": {
         "@jridgewell/source-map": "^0.3.3",
         "acorn": "^8.15.0",
@@ -12928,6 +12884,7 @@
       "integrity": "sha512-X8EX+XV4QR5xCsrgxaED954zTDfY8KqlDtskKEL0cHhyS/P8b4IFOvGDQpsC9Q1XnLq915wEfwwY/zzskCtmhg==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "esbuild": "~0.28.0"
       },
@@ -13064,18 +13021,13 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/typedarray": {
-      "version": "0.0.6",
-      "resolved": "https://registry.npmmirror.com/typedarray/-/typedarray-0.0.6.tgz",
-      "integrity": "sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==",
-      "license": "MIT"
-    },
     "node_modules/typescript": {
       "version": "5.9.3",
       "resolved": "https://registry.npmmirror.com/typescript/-/typescript-5.9.3.tgz",
       "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
       "dev": true,
       "license": "Apache-2.0",
+      "peer": true,
       "bin": {
         "tsc": "bin/tsc",
         "tsserver": "bin/tsserver"
@@ -13347,16 +13299,16 @@
       }
     },
     "node_modules/uuid": {
-      "version": "10.0.0",
-      "resolved": "https://registry.npmmirror.com/uuid/-/uuid-10.0.0.tgz",
-      "integrity": "sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==",
+      "version": "11.1.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
+      "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==",
       "funding": [
         "https://github.com/sponsors/broofa",
         "https://github.com/sponsors/ctavan"
       ],
       "license": "MIT",
       "bin": {
-        "uuid": "dist/bin/uuid"
+        "uuid": "dist/esm/bin/uuid"
       }
     },
     "node_modules/vary": {
@@ -13374,6 +13326,7 @@
       "integrity": "sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "esbuild": "^0.25.0",
         "fdir": "^6.4.4",
@@ -14203,9 +14156,9 @@
       }
     },
     "node_modules/workbox-build/node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 9a9bf822..84671b5b 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -11,7 +11,7 @@
     "postinstall": "node scripts/patch-express-types.cjs",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts,.tsx --max-warnings 0",
-    "test": "npm run test:db-persistence && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test": "npm run test:db-persistence && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
     "test:db-persistence": "tsx scripts/test-db-persistence.ts",
     "test:runtime-config": "tsx scripts/test-runtime-config.ts",
     "test:cors-origins": "tsx scripts/test-cors-origins.ts",
@@ -35,7 +35,8 @@
     "test:module-settings": "tsx scripts/test-module-settings.ts",
     "test:agent-studio": "tsx scripts/test-agent-studio.ts",
     "test:llm-onboarding": "tsx scripts/test-llm-onboarding.ts",
-    "test:freeos-ingest": "tsx scripts/test-freeos-ingest.ts"
+    "test:freeos-ingest": "tsx scripts/test-freeos-ingest.ts",
+    "test:doc-parser": "tsx scripts/test-doc-parser.ts"
   },
   "dependencies": {
     "@dnd-kit/core": "^6.3.1",
@@ -65,7 +66,7 @@
     "sql.js": "^1.11.0",
     "ssh2": "^1.17.0",
     "unzipper": "^0.12.3",
-    "uuid": "^10.0.0",
+    "uuid": "^11.1.1",
     "ws": "^8.21.0"
   },
   "devDependencies": {
@@ -108,6 +109,13 @@
     "node": ">=20.19"
   },
   "overrides": {
-    "qs": "6.16.0"
+    "qs": "6.16.0",
+    "katex": "^0.18.2",
+    "exceljs": {
+      "uuid": "^11.1.1"
+    },
+    "mammoth": {
+      "argparse": "^2.0.1"
+    }
   }
 }
diff --git a/modules/openxyos/scripts/test-doc-parser.ts b/modules/openxyos/scripts/test-doc-parser.ts
new file mode 100644
index 00000000..eb6791d3
--- /dev/null
+++ b/modules/openxyos/scripts/test-doc-parser.ts
@@ -0,0 +1,47 @@
+import assert from "node:assert/strict";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import PDFDocument from "pdfkit";
+import { Document, Packer, Paragraph } from "docx";
+import ExcelJS from "exceljs";
+import { extractText } from "../backend/services/doc-parser";
+
+async function main() {
+  const root = await fs.mkdtemp(path.join(os.tmpdir(), "freeos-doc-parser-"));
+  try {
+    const text = "FreeOS document import acceptance";
+    const pdf = new PDFDocument();
+    const chunks: Buffer[] = [];
+    const finished = new Promise<Buffer>((resolve, reject) => {
+      pdf.on("data", (chunk: Buffer) => chunks.push(chunk));
+      pdf.on("end", () => resolve(Buffer.concat(chunks)));
+      pdf.on("error", reject);
+    });
+    pdf.text(text);
+    pdf.end();
+    const pdfPath = path.join(root, "sample.pdf");
+    await fs.writeFile(pdfPath, await finished);
+    assert.ok((await extractText(pdfPath, ".pdf")).includes(text));
+
+    const docxPath = path.join(root, "sample.docx");
+    const docx = new Document({ sections: [{ children: [new Paragraph(text)] }] });
+    await fs.writeFile(docxPath, await Packer.toBuffer(docx));
+    assert.equal(await extractText(docxPath, ".docx"), text);
+
+    // Exercise ExcelJS with the patched, CommonJS-compatible UUID dependency.
+    const workbook = new ExcelJS.Workbook();
+    workbook.addWorksheet("Import").addRow([text]);
+    const restored = new ExcelJS.Workbook();
+    await restored.xlsx.load(await workbook.xlsx.writeBuffer());
+    assert.equal(restored.getWorksheet("Import")?.getCell("A1").value, text);
+    console.log("PDF, DOCX and XLSX import/export acceptance passed");
+  } finally {
+    await fs.rm(root, { recursive: true, force: true });
+  }
+}
+
+main().catch((error: unknown) => {
+  console.error(error);
+  process.exitCode = 1;
+});
diff --git a/tests/unit/desktop/test_verify_imports.py b/tests/unit/desktop/test_verify_imports.py
new file mode 100644
index 00000000..22a2a3c2
--- /dev/null
+++ b/tests/unit/desktop/test_verify_imports.py
@@ -0,0 +1,38 @@
+"""The portable smoke gate must inspect the launcher that users will run."""
+
+from __future__ import annotations
+
+import importlib.util
+import sys
+from pathlib import Path
+
+import pytest
+
+
+@pytest.mark.parametrize("launcher", ["print('ready')\n", "def broken(\n", None])
+def test_shipped_launcher_is_checked(tmp_path: Path, monkeypatch, capsys, launcher):
+    checker = Path(__file__).parents[3] / "desktop/portable/verify_imports.py"
+    spec = importlib.util.spec_from_file_location("portable_verify_imports", checker)
+    assert spec is not None and spec.loader is not None
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    packages = tmp_path / "packages"
+    packages.mkdir()
+    requirements = tmp_path / "requirements.txt"
+    requirements.write_text("", encoding="utf-8")
+    if launcher is not None:
+        (tmp_path / "launch.py").write_text(launcher, encoding="utf-8")
+    monkeypatch.setattr(module, "_SMOKE_IMPORTS", ())
+    monkeypatch.setattr(module.site, "addsitedir", lambda _: None)
+    monkeypatch.setattr(module, "_installed_version", lambda _: None)
+    monkeypatch.setattr(
+        sys,
+        "argv",
+        [str(checker), "--packages", str(packages), "--requirements", str(requirements)],
+    )
+    result = module.main()
+    if launcher == "print('ready')\n":
+        assert result == 0
+    else:
+        assert result == 1
+        assert "launch.py:" in capsys.readouterr().err

From 75e9e517268432208fb8ce44d57cb2f5e874eb03 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Wed, 21 Oct 2026 21:37:53 +0000
Subject: [PATCH 06/39] fix(release): close 0.1.0 CI and sidecar security
 blockers

Refresh the openXYOS lock so npm ci resolves on Node 24 and require Node >=22.12.
Wait for the SearchConfig source label before asserting it; that was the Node 24
dashboard failure while the spinner was still mounted.

Bind the organization sidecar to 127.0.0.1 from the server default and every
desktop launcher. Seed local accounts only under FREEOS_ORG_LOCAL_TEST, with a
random password stored beside the database and a forced change on first sign-in.
The UI no longer shows a shared demo password.

Mark rc/a/b/dev tags as GitHub prereleases in the release, desktop attach, and
FNOS attach workflows. Collapse the changelog to a single 0.1.0 section and
stop README_CN from directing installs at PyPI octop. Order desktop version
compare so a final release sorts above its rc.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .github/workflows/fnos-build-fpk.yml          |   6 +
 .github/workflows/octop-desktop.yml           |   9 ++
 .github/workflows/release.yml                 |   6 +
 CHANGELOG.md                                  |  28 ++--
 README.md                                     |   4 +-
 README_CN.md                                  |  14 +-
 .../Settings/SearchConfig/index.test.tsx      |  12 +-
 desktop/portable/bundle-org-sidecar.sh        |   6 +
 .../src/build/windows/nsis/start-sidecar.ps1  |   8 +-
 desktop/src/download.go                       |  83 ++++++++++-
 desktop/src/download_test.go                  |   7 +
 desktop/src/process.go                        |  28 ++--
 desktop/src/process_sidecar.go                |   3 +
 desktop/src/process_sidecar_test.go           |   6 +
 docs/adr/001-single-process-model.md          |   2 +-
 modules/openxyos/backend/db.ts                |   6 +
 modules/openxyos/backend/middleware.ts        |  24 +++
 modules/openxyos/backend/routes/auth.ts       |  40 +++++
 modules/openxyos/backend/seed.ts              | 139 ++++++++++++++----
 modules/openxyos/backend/server.ts            |   2 +-
 .../openxyos/frontend/src/pages/AuthPage.tsx  |  73 +++++++--
 .../frontend/src/pages/OpenHomePage.tsx       |  36 +----
 modules/openxyos/frontend/src/stores/auth.ts  |  40 ++++-
 modules/openxyos/package-lock.json            |  51 +++----
 modules/openxyos/package.json                 |   2 +-
 scripts/release_prerelease.py                 |  32 ++++
 src/octop/modules/org_os/sidecar_launch.py    |   1 +
 .../unit/desktop/test_openxyos_provisioner.py |   2 +
 tests/unit/test_release_prerelease.py         |  27 ++++
 tests/unit/test_sidecar_launch.py             |   1 +
 30 files changed, 549 insertions(+), 149 deletions(-)
 create mode 100644 scripts/release_prerelease.py
 create mode 100644 tests/unit/test_release_prerelease.py

diff --git a/.github/workflows/fnos-build-fpk.yml b/.github/workflows/fnos-build-fpk.yml
index 6786038e..f8c06e06 100644
--- a/.github/workflows/fnos-build-fpk.yml
+++ b/.github/workflows/fnos-build-fpk.yml
@@ -273,6 +273,10 @@ jobs:
             exit 1
           fi
 
+      - name: Classify pre-release
+        id: channel
+        run: python3 scripts/release_prerelease.py "${{ needs.version.outputs.tag }}" >> "$GITHUB_OUTPUT"
+
       - name: Attach fpk to GitHub Release
         uses: softprops/action-gh-release@v2
         with:
@@ -280,5 +284,7 @@ jobs:
           files: dist/*.fpk
           fail_on_unmatched_files: true
           generate_release_notes: false
+          prerelease: ${{ steps.channel.outputs.prerelease }}
+          make_latest: ${{ steps.channel.outputs.prerelease == 'true' && 'false' || 'true' }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/octop-desktop.yml b/.github/workflows/octop-desktop.yml
index 25633a9d..1c508e60 100644
--- a/.github/workflows/octop-desktop.yml
+++ b/.github/workflows/octop-desktop.yml
@@ -360,6 +360,8 @@ jobs:
       contents: write
       actions: read
     steps:
+      - uses: actions/checkout@v4
+
       - name: Resolve release tag
         id: rel
         run: |
@@ -374,6 +376,10 @@ jobs:
           fi
           echo "tag=${tag}" >> "$GITHUB_OUTPUT"
 
+      - name: Classify pre-release
+        id: channel
+        run: python3 scripts/release_prerelease.py "${{ steps.rel.outputs.tag }}" >> "$GITHUB_OUTPUT"
+
       # v8 required for archive:false artifacts. skip-decompress keeps the
       # uploaded .zip / .tar.gz / .dmg / .exe intact — default unzip turns portable
       # zips into directories, so files: release-assets/* would skip them.
@@ -404,4 +410,7 @@ jobs:
           files: release-assets/*
           fail_on_unmatched_files: true
           # Upsert: works whether Release workflow already created the release.
+          # Keep rc/a/b/dev tags as prereleases so attaching assets cannot mark them latest.
           generate_release_notes: false
+          prerelease: ${{ steps.channel.outputs.prerelease }}
+          make_latest: ${{ steps.channel.outputs.prerelease == 'true' && 'false' || 'true' }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b23978e7..95ffa435 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -125,12 +125,18 @@ jobs:
             python3 scripts/release_download_links.py "$version" >> .release-notes.md
           fi
 
+      - name: Classify pre-release
+        id: channel
+        run: python3 scripts/release_prerelease.py "${GITHUB_REF_NAME}" >> "$GITHUB_OUTPUT"
+
       - name: Create release
         uses: softprops/action-gh-release@v2
         with:
           body_path: .release-notes.md
           files: dist/*
           generate_release_notes: true
+          prerelease: ${{ steps.channel.outputs.prerelease }}
+          make_latest: ${{ steps.channel.outputs.prerelease == 'true' && 'false' || 'true' }}
 
   # workflow_run / release:published are unreliable when Release itself was
   # started via GITHUB_TOKEN workflow_dispatch (Auto Tag). Explicitly cascade.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 15367e0a..09aa70ac 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,28 +4,32 @@
 
 格式遵循 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)，版本号遵循 [语义化版本规范](https://semver.org/spec/v2.0.0.html)。
 
-## [Unreleased]
+## [0.1.0] - TBD
+
+FreeOS **0.1.0** is an independent semver baseline. It does not track or align with Octop 1.0.x. Python wheels stay on GitHub Releases; this release does not publish the colliding `octop` name to PyPI.
+
+### Upgrade from 0.0.10
+
+- In-app update and a manual reinstall both keep `~/.freeos` (legacy `~/.octop` is still recognized): sessions, local models, knowledge bases, organization data, and `config.json`.
+- Desktop portable upgrades copy a SQLite backup under `$FREEOS_HOME/backups` before replacing the runtime, and checkpoint the WAL before the process restarts.
+- A `config.json` that cannot be parsed is left in place and reported. It is not rewritten as an empty file.
+- Roll back by installing the **v0.0.10** desktop package again, or restore a backup with `octop backup restore`. Do not point install scripts at PyPI `octop`; that package is upstream Octop, not this release. Use [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) or `scripts/install.sh` (add `--from-pypi` only when you explicitly want upstream Octop).
 
 ### Changed
 
-- Publish Python distributions as GitHub Release assets only; the FreeOS release workflow no longer publishes the colliding `octop` package name to PyPI, and install scripts default to the FreeOS GitHub source.
+- Publish Python distributions as GitHub Release assets only. The release workflow no longer publishes to PyPI, and install scripts default to the FreeOS GitHub source.
+- The bundled openXYOS sidecar listens on `127.0.0.1` by default. Local bootstrap accounts are created only when `FREEOS_ORG_LOCAL_TEST=1`, with a random password in `{data}/bootstrap-credentials.txt` that must be changed on first sign-in. The UI no longer embeds a shared demo password.
 
 ### Fixed
 
 - Remove checkpoint-resident system messages before model calls while preserving the active compiled prompt, preventing strict Qwen chat templates from failing when an older conversation contains a stale bootstrap message.
 - Detect models from an already-running Ollama daemon even when FreeOS-managed Ollama startup is disabled; model discovery never starts Ollama unless the user enabled it.
-- Preserve `config.json` when it is malformed: startup and all configuration writers now report the file and parser position, avoid leaking stored credentials, and use atomic replacement instead of silently rebuilding an empty configuration.
-
-## [0.1.0] - 2026-10-07
+- Preserve `config.json` when it is malformed: startup and configuration writers now report the file and parser position, avoid leaking stored credentials, and use atomic replacement instead of silently rebuilding an empty configuration. Absorbed from upstream Octop #730 / #738.
+- Checkpoint the SQLite WAL before the desktop process restarts so an in-app update does not drop the latest writes. Absorbed from upstream Octop #918.
 
-### Changed
-
-- Publish the successor to 0.0.10 as 0.1.0, with Python distributions attached to GitHub Releases only.
-
-### Fixed
+### Not in 0.1.0
 
-- Remove stale checkpoint system messages before model calls, detect models from an already-running Ollama daemon without starting it, and preserve malformed `config.json` files instead of silently replacing them.
-- Improve desktop update safety by checkpointing SQLite WAL before restart.
+Harness migration, cloud bridge default-on, default LDAP/SSO, Teams, and a whole-repo catch-up to Octop are out of scope.
 
 ## [0.0.10] - 2026-10-03
 
diff --git a/README.md b/README.md
index 55df7923..237b8afa 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://www.python.org/downloads/"><img alt="Python 3.12+" src="https://img.shields.io/badge/python-3.12%2B-blue?logo=python&logoColor=white" /></a>
-  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.0.6-orange" /></a>
+  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.1.0-orange" /></a>
   <a href="LICENSE"><img alt="License: MIT + Apache-2.0" src="https://img.shields.io/badge/license-MIT%20%2B%20Apache--2.0-green" /></a>
   <a href="https://github.com/TencentCloud/Octop"><img alt="Upstream: Octop" src="https://img.shields.io/badge/Upstream-Octop-1677ff.svg?style=flat" /></a>
   <a href="https://github.com/XYAIStudio/openXYOS"><img alt="Organization module: openXYOS" src="https://img.shields.io/badge/Organization-openXYOS-0f766e.svg?style=flat" /></a>
@@ -136,7 +136,7 @@ Operator detail: [docs/asset-loop.md](docs/asset-loop.md).
    `FreeOS-desktop-windows-arm64-<version>.exe`（ARM 电脑）。
 2. 双击安装包。安装程序会放到「程序文件」并创建开始菜单和桌面快捷方式。
 3. 打开 **FreeOS**。第一次启动会解压内置运行环境（可能要一两分钟），然后直接进入可用会话，无需先登录。
-4. 保存、导出或发布到账号时再在本机完成注册或登录（更广的服务或授权不挡起步）。侧栏 **Organization** 当前默认走宿主内组织能力；桌面 0.0.6 托管 Node + iframe（延续 0.0.3 过渡桥）、以及可选的完整 openXYOS Node 栈（`127.0.0.1:3780`，导出/同步/高级部署）都是 **过渡桥**，终态是把 openXYOS 迁入宿主。组织能力像工作室里另一间可独立布置的房间，与日常对话、助手协作同在一个 FreeOS，两种进入方式不捏成一种。
+4. 保存、导出或发布到账号时再在本机完成注册或登录（更广的服务或授权不挡起步）。侧栏 **Organization** 当前默认走宿主内组织能力；桌面安装包附带的托管 Node + iframe（延续 0.0.3 过渡桥）、以及可选的完整 openXYOS Node 栈（`127.0.0.1:3780`，导出/同步/高级部署）都是 **过渡桥**，终态是把 openXYOS 迁入宿主。组织能力像工作室里另一间可独立布置的房间，与日常对话、助手协作同在一个 FreeOS，两种进入方式不捏成一种。
 
 数据目录默认是 `%USERPROFILE%\.freeos`（可用环境变量 `FREEOS_HOME` 改）。旧版 Octop 的 `~/.octop` 仍会被识别。卸载安装包会清空安装目录（默认为 `Program Files\FreeOS`）并删除快捷方式，但**不会**删除该用户数据目录；详见 [desktop/README.md](desktop/README.md#windows-uninstall)。
 
diff --git a/README_CN.md b/README_CN.md
index fd7b3dcc..93505529 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -11,10 +11,9 @@
 <p align="center">
   <a href="https://www.python.org/downloads/"><img alt="Python 3.12+" src="https://img.shields.io/badge/python-3.12%2B-blue?logo=python&logoColor=white" /></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-green" /></a>
-  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.0.6-orange" /></a>
+  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.1.0-orange" /></a>
   <a href="https://github.com/TencentCloud/Octop"><img alt="上游：Octop" src="https://img.shields.io/badge/上游-Octop-1677ff.svg?style=flat" /></a>
   <a href="https://github.com/XYAIStudio/openXYOS"><img alt="组织模块：openXYOS" src="https://img.shields.io/badge/组织模块-openXYOS-0f766e.svg?style=flat" /></a>
-  <a href="https://pypi.org/project/octop/"><img src="https://img.shields.io/pypi/v/octop" alt="PyPI" /></a>
   <a href="https://github.com/astral-sh/ruff"><img alt="Code Style: Ruff" src="https://img.shields.io/badge/code%20style-ruff-000000?logo=ruff&logoColor=white" /></a>
   <a href="https://github.com/XYAIStudio/FreeOS"><img alt="GitHub stars" src="https://img.shields.io/github/stars/XYAIStudio/FreeOS?style=social" /></a>
   <a href="https://github.com/XYAIStudio/FreeOS/fork"><img alt="GitHub forks" src="https://img.shields.io/github/forks/XYAIStudio/FreeOS?style=social" /></a>
@@ -248,14 +247,7 @@ curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install
 
 桌面客户端说明见 [desktop/README.md](desktop/README.md)，飞牛打包指南见 [fnos/README.md](fnos/README.md)。独立商业组织站见 [docs/org-export.md](docs/org-export.md)（`freeos org export-standalone`，默认导出完整 openXYOS 源码树），不是默认安装器里的第二套 Node。
 
-**备选 — PyPI**（若你已自行管理 Python 环境）：
-
-```bash
-pip install octop
-# 可选：pip install "octop[browser]"
-# 可选本地 ONNX Embedding 模型缓存（设置 → 模型 → 本地）：pip install "octop[local-embedding]"
-# 仅下载目录模型到 ~/.octop/embedding_models；不用于对话，也不接入 Memory。
-```
+**不要**从 PyPI 安装 `octop`。PyPI 上的 `octop` 是上游 Octop，不是 FreeOS 0.1.0。桌面安装包从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) 下载；终端安装用上面的安装脚本（默认拉取 FreeOS GitHub 源码）。只有在你明确要上游 Octop 时才加 `--from-pypi`。可选组件仍通过安装脚本传递，例如 `--extras browser`。
 
 从源码用 uv 开发时：
 
@@ -343,7 +335,7 @@ docker run -d \
 | 远程一键安装 | Windows | `irm …/octop/install.ps1 \| iex` 或 `install.bat` |
 | 本地脚本 | macOS / Linux | `bash scripts/install.sh` |
 | 本地脚本 | Windows | `scripts\install.bat` 或 `install.ps1` |
-| PyPI | 全平台 | `pip install octop` 或 `pip install "octop[browser]"` |
+| GitHub Releases | 全平台 | 桌面安装包与 wheel。不要安装 PyPI 上的上游 `octop` |
 | Docker | 全平台 | `docker/docker-compose.yml` |
 
 所有安装脚本均在 `~/.octop/venv` 创建隔离环境，并通过 `~/.octop/bin/octop` 包装 CLI，不会影响系统 Python。
diff --git a/dashboard/src/pages/Settings/SearchConfig/index.test.tsx b/dashboard/src/pages/Settings/SearchConfig/index.test.tsx
index d743f693..4f1ebec2 100644
--- a/dashboard/src/pages/Settings/SearchConfig/index.test.tsx
+++ b/dashboard/src/pages/Settings/SearchConfig/index.test.tsx
@@ -35,17 +35,21 @@ describe("<SearchConfigPage />", () => {
     api.listEnvs.mockResolvedValue(envResp([]));
 
     render(<SearchConfigPage />);
-    await waitFor(() => expect(api.listEnvs).toHaveBeenCalled());
 
-    expect(screen.getByText("当前搜索源：内置搜索")).toBeInTheDocument();
+    await waitFor(() => {
+      expect(screen.getByText("当前搜索源：内置搜索")).toBeInTheDocument();
+    });
+    expect(api.listEnvs).toHaveBeenCalled();
   });
 
   it("shows the configured provider as the current search source", async () => {
     api.listEnvs.mockResolvedValue(envResp(["TAVILY_API_KEY"]));
 
     render(<SearchConfigPage />);
-    await waitFor(() => expect(api.listEnvs).toHaveBeenCalled());
 
-    expect(screen.getByText("当前搜索源：Tavily")).toBeInTheDocument();
+    await waitFor(() => {
+      expect(screen.getByText("当前搜索源：Tavily")).toBeInTheDocument();
+    });
+    expect(api.listEnvs).toHaveBeenCalled();
   });
 });
diff --git a/desktop/portable/bundle-org-sidecar.sh b/desktop/portable/bundle-org-sidecar.sh
index d688c518..f8172c22 100755
--- a/desktop/portable/bundle-org-sidecar.sh
+++ b/desktop/portable/bundle-org-sidecar.sh
@@ -213,11 +213,14 @@ ENV
 fi
 export NODE_ENV=production
 export PORT
+export HOST=127.0.0.1
 export DB_DIALECT=sqlite
 export DATABASE_PATH="${DATA_DIR}/xiongyuan.db"
 export AIR_GAP_MODE=true
 export ALLOW_PUBLIC_REGISTRATION="${ALLOW_PUBLIC_REGISTRATION:-false}"
 export SEED_DEMO_DATA="${SEED_DEMO_DATA:-false}"
+export FREEOS_ORG_INTEGRATED="${FREEOS_ORG_INTEGRATED:-1}"
+export FREEOS_ORG_LOCAL_TEST="${FREEOS_ORG_LOCAL_TEST:-1}"
 export JWT_SECRET COOKIE_SECRET
 export CORS_ORIGIN="${CORS_ORIGIN:-http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:18900,http://localhost:18900}"
 cd "${APP}"
@@ -252,11 +255,14 @@ if not defined COOKIE_SECRET (
 >> "%FREEOS_ORG_DATA%\sidecar.env" echo COOKIE_SECRET=%COOKIE_SECRET%
 set "NODE_ENV=production"
 set "PORT=%FREEOS_ORG_SIDECAR_PORT%"
+set "HOST=127.0.0.1"
 set "DB_DIALECT=sqlite"
 set "DATABASE_PATH=%FREEOS_ORG_DATA%\xiongyuan.db"
 set "AIR_GAP_MODE=true"
 if not defined ALLOW_PUBLIC_REGISTRATION set "ALLOW_PUBLIC_REGISTRATION=false"
 if not defined SEED_DEMO_DATA set "SEED_DEMO_DATA=false"
+if not defined FREEOS_ORG_INTEGRATED set "FREEOS_ORG_INTEGRATED=1"
+if not defined FREEOS_ORG_LOCAL_TEST set "FREEOS_ORG_LOCAL_TEST=1"
 if not defined CORS_ORIGIN set "CORS_ORIGIN=http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:18900,http://localhost:18900"
 cd /d "%APP%"
 "%NODE%" --import tsx backend/server.ts
diff --git a/desktop/src/build/windows/nsis/start-sidecar.ps1 b/desktop/src/build/windows/nsis/start-sidecar.ps1
index 81cb9563..84aed5d9 100644
--- a/desktop/src/build/windows/nsis/start-sidecar.ps1
+++ b/desktop/src/build/windows/nsis/start-sidecar.ps1
@@ -234,6 +234,7 @@ if (-not $ingest) { $ingest = [guid]::NewGuid().ToString('N') + [guid]::NewGuid(
 
 $env:NODE_ENV = 'production'
 $env:PORT = '3780'
+$env:HOST = '127.0.0.1'
 $env:DB_DIALECT = 'sqlite'
 $env:DATABASE_PATH = Join-Path $data 'xiongyuan.db'
 $env:AIR_GAP_MODE = 'true'
@@ -249,6 +250,8 @@ $env:CORS_ORIGIN = 'http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1
 $env:FREEOS_HOME = $freeosHome
 $env:OCTOP_HOME = $freeosHome
 $env:FREEOS_ORG_SIDECAR_PORT = '3780'
+$env:FREEOS_ORG_INTEGRATED = '1'
+$env:FREEOS_ORG_LOCAL_TEST = '1'
 $compiled = Join-Path $app 'backend-dist\server.js'
 if (Test-Path -LiteralPath $compiled) {
     $argv = @('backend-dist/server.js')
@@ -273,6 +276,7 @@ if ($app -eq $live) { $layout = 'top-level' }
     "argv=$($argv -join ' ')"
     "NODE_ENV=$($env:NODE_ENV)"
     "PORT=$($env:PORT)"
+    "HOST=$($env:HOST)"
     "JWT_SECRET set=$([bool]$env:JWT_SECRET)"
     "COOKIE_SECRET set=$([bool]$env:COOKIE_SECRET)"
     "CORS_ORIGIN=$($env:CORS_ORIGIN)"
@@ -294,10 +298,10 @@ $psi.Arguments = [string]::Join(' ', $quoted)
 $psi.RedirectStandardOutput = $true
 $psi.RedirectStandardError = $true
 foreach ($name in @(
-        'NODE_ENV', 'PORT', 'DB_DIALECT', 'DATABASE_PATH', 'AIR_GAP_MODE',
+        'NODE_ENV', 'PORT', 'HOST', 'DB_DIALECT', 'DATABASE_PATH', 'AIR_GAP_MODE',
         'SEED_DEMO_DATA', 'ALLOW_PUBLIC_REGISTRATION', 'JWT_SECRET', 'COOKIE_SECRET',
         'FREEOS_INGEST_TOKEN', 'CORS_ORIGIN', 'FREEOS_HOME', 'OCTOP_HOME',
-        'FREEOS_ORG_SIDECAR_PORT'
+        'FREEOS_ORG_SIDECAR_PORT', 'FREEOS_ORG_INTEGRATED', 'FREEOS_ORG_LOCAL_TEST'
     )) {
     $val = [Environment]::GetEnvironmentVariable($name, 'Process')
     if ($null -ne $val -and $val -ne '') {
diff --git a/desktop/src/download.go b/desktop/src/download.go
index 194f4db2..49c2122d 100644
--- a/desktop/src/download.go
+++ b/desktop/src/download.go
@@ -546,7 +546,88 @@ func compareVersions(left, right string) int {
 			return 1
 		}
 	}
-	return 0
+	return compareVersionSuffix(versionSuffix(left), versionSuffix(right))
+}
+
+// versionSuffix is the non-numeric tail of a PEP 440-ish version (rc1, a1, dev1).
+func versionSuffix(version string) string {
+	var suffix strings.Builder
+	for _, segment := range strings.Split(version, ".") {
+		index := 0
+		for index < len(segment) && segment[index] >= '0' && segment[index] <= '9' {
+			index++
+		}
+		if index < len(segment) {
+			suffix.WriteString(segment[index:])
+		}
+	}
+	return suffix.String()
+}
+
+func compareVersionSuffix(left, right string) int {
+	if left == right {
+		return 0
+	}
+	// 0.1.0rc1 < 0.1.0. The Python update client does full PEP 440 ordering;
+	// this tie-break only keeps a downloaded pre-release behind its final.
+	if left == "" {
+		return 1
+	}
+	if right == "" {
+		return -1
+	}
+	leftKind, leftN, leftOK := preReleaseRank(left)
+	rightKind, rightN, rightOK := preReleaseRank(right)
+	if leftOK && rightOK {
+		if leftKind != rightKind {
+			if leftKind < rightKind {
+				return -1
+			}
+			return 1
+		}
+		if leftN < rightN {
+			return -1
+		}
+		if leftN > rightN {
+			return 1
+		}
+		return 0
+	}
+	if left < right {
+		return -1
+	}
+	return 1
+}
+
+func preReleaseRank(suffix string) (kind int, n int, ok bool) {
+	for _, item := range []struct {
+		prefix string
+		kind   int
+	}{
+		{"alpha", 1},
+		{"beta", 2},
+		{"preview", 2},
+		{"pre", 2},
+		{"rc", 3},
+		{"dev", 0},
+		{"a", 1},
+		{"b", 2},
+		{"c", 2},
+	} {
+		if !strings.HasPrefix(suffix, item.prefix) {
+			continue
+		}
+		rest := strings.TrimLeft(suffix[len(item.prefix):], "._-")
+		if rest == "" {
+			return item.kind, 0, true
+		}
+		value, err := strconv.Atoi(rest)
+		if err != nil {
+			return 0, 0, false
+		}
+		return item.kind, value, true
+	}
+	return 0, 0, false
 }
 
 func versionPart(segment string) int {
diff --git a/desktop/src/download_test.go b/desktop/src/download_test.go
index aeb62c9e..34a70e1e 100644
--- a/desktop/src/download_test.go
+++ b/desktop/src/download_test.go
@@ -693,6 +693,13 @@ func TestCompareVersions(t *testing.T) {
 		{"0.9.31", "0.9.32", -1},
 		{"1.0", "1.0.0", 0},
 		{"0.9.32rc1", "0.9.31", 1},
+		{"0.1.0rc1", "0.0.10", 1},
+		{"0.1.0rc1", "0.1.0", -1},
+		{"0.1.0", "0.1.0rc1", 1},
+		{"0.1.0rc1", "0.1.0rc2", -1},
+		{"0.1.0rc2", "0.1.0rc10", -1},
+		{"0.1.0a1", "0.1.0rc1", -1},
+		{"0.1.0.dev1", "0.1.0a1", -1},
 	} {
 		if got := compareVersions(test.left, test.right); got != test.want {
 			t.Fatalf("compareVersions(%q, %q) = %d, want %d", test.left, test.right, got, test.want)
diff --git a/desktop/src/process.go b/desktop/src/process.go
index fc85cfac..e1beda64 100644
--- a/desktop/src/process.go
+++ b/desktop/src/process.go
@@ -12,10 +12,18 @@ import (
 )
 
 func mustEnv(cmd *exec.Cmd, extra map[string]string) {
-	cmd.Env = os.Environ()
+	filtered := make([]string, 0, len(os.Environ())+len(extra))
+	for _, item := range os.Environ() {
+		key, _, _ := strings.Cut(item, "=")
+		if _, override := extra[key]; override {
+			continue
+		}
+		filtered = append(filtered, item)
+	}
 	for key, value := range extra {
-		cmd.Env = append(cmd.Env, key+"="+value)
+		filtered = append(filtered, key+"="+value)
 	}
+	cmd.Env = filtered
 }
 
 const defaultSidecarPort = 3780
@@ -23,14 +31,14 @@ const defaultSidecarPort = 3780
 func hostLaunchEnv(root string, port int) map[string]string {
 	home := productHome()
 	env := map[string]string{
-		"FREEOS_HOME":           home,
-		"OCTOP_HOME":            home,
-		"OCTOP_GREEN_PACKAGES":  filepath.Join(root, "packages"),
-		"PYTHONNOUSERSITE":      "1",
-		"PYTHONUTF8":            "1",
-		"PYTHONIOENCODING":      "utf-8",
-		"PYTHONPATH":            "",
-		"FREEOS_ORG_ENABLE":     "1",
+		"FREEOS_HOME":          home,
+		"OCTOP_HOME":           home,
+		"OCTOP_GREEN_PACKAGES": filepath.Join(root, "packages"),
+		"PYTHONNOUSERSITE":     "1",
+		"PYTHONUTF8":           "1",
+		"PYTHONIOENCODING":     "utf-8",
+		"PYTHONPATH":           "",
+		"FREEOS_ORG_ENABLE":    "1",
 		// Desktop always claims the openXYOS module. Missing Node is a
 		// packaging/startup failure, not a reason to unset this flag.
 		"FREEOS_ORG_INTEGRATED": "1",
diff --git a/desktop/src/process_sidecar.go b/desktop/src/process_sidecar.go
index 76684392..e6540a18 100644
--- a/desktop/src/process_sidecar.go
+++ b/desktop/src/process_sidecar.go
@@ -304,6 +304,7 @@ func sidecarLaunchEnv(home string, dashboardPort int) (map[string]string, error)
 	return map[string]string{
 		"NODE_ENV":                  "production",
 		"PORT":                      strconv.Itoa(defaultSidecarPort),
+		"HOST":                      "127.0.0.1",
 		"DB_DIALECT":                "sqlite",
 		"DATABASE_PATH":             filepath.Join(sidecarDataDir(home), "xiongyuan.db"),
 		"AIR_GAP_MODE":              "true",
@@ -316,6 +317,8 @@ func sidecarLaunchEnv(home string, dashboardPort int) (map[string]string, error)
 		"FREEOS_HOME":               home,
 		"OCTOP_HOME":                home,
 		"FREEOS_ORG_SIDECAR_PORT":   strconv.Itoa(defaultSidecarPort),
+		"FREEOS_ORG_INTEGRATED":     "1",
+		"FREEOS_ORG_LOCAL_TEST":     "1",
 	}, nil
 }
 
diff --git a/desktop/src/process_sidecar_test.go b/desktop/src/process_sidecar_test.go
index 62fa0f3b..52265cda 100644
--- a/desktop/src/process_sidecar_test.go
+++ b/desktop/src/process_sidecar_test.go
@@ -58,6 +58,12 @@ func TestSidecarLaunchEnvPointsAtHomeDatabase(t *testing.T) {
 	if !strings.Contains(env["CORS_ORIGIN"], "http://[::1]:3780") {
 		t.Fatalf("CORS_ORIGIN missing ipv6 self origin: %q", env["CORS_ORIGIN"])
 	}
+	if env["HOST"] != "127.0.0.1" {
+		t.Fatalf("HOST=%q want 127.0.0.1", env["HOST"])
+	}
+	if env["FREEOS_ORG_LOCAL_TEST"] != "1" {
+		t.Fatalf("FREEOS_ORG_LOCAL_TEST=%q", env["FREEOS_ORG_LOCAL_TEST"])
+	}
 }
 
 func TestSidecarReadyRequiresFrontendBuild(t *testing.T) {
diff --git a/docs/adr/001-single-process-model.md b/docs/adr/001-single-process-model.md
index aa4539aa..09fbfcbd 100644
--- a/docs/adr/001-single-process-model.md
+++ b/docs/adr/001-single-process-model.md
@@ -15,7 +15,7 @@ Everything runs in a single Python process served by uvicorn. There is no extern
 
 ## Rationale
 
-- **Self-hosted target:** Operators install with `pip install octop && octop init`. Adding Redis or a process supervisor doubles the ops burden for the primary audience.
+- **Self-hosted target:** Operators install with `pip install octop && octop init`. Adding Redis or a process supervisor doubles the ops burden for the primary audience. Historical note (2026-10): that command describes the upstream-era install path. FreeOS 0.1.0 is installed from GitHub Releases or `scripts/install.sh`, not from the PyPI `octop` package.
 - **Workload profile:** Agent calls are LLM-bound (seconds to minutes of I/O wait). Python's asyncio handles this fan-out efficiently without threads or processes.
 - **SQLite is sufficient:** Concurrent writes are rare (one writer per agent at a time); WAL mode handles the load. Migrating to Postgres requires only a new `SqlitePool` implementation.
 - **Restart semantics are simple:** `OctopServer.start()` rebuilds the entire runtime tree from the SQLite file. No external state to reconcile.
diff --git a/modules/openxyos/backend/db.ts b/modules/openxyos/backend/db.ts
index 4bc0c5a2..ace2776f 100644
--- a/modules/openxyos/backend/db.ts
+++ b/modules/openxyos/backend/db.ts
@@ -49,6 +49,7 @@ export async function initDatabase(): Promise<void> {
       role TEXT DEFAULT 'user',
       tenant_id INTEGER DEFAULT 1,
       token_version INTEGER NOT NULL DEFAULT 0,
+      must_change_password INTEGER NOT NULL DEFAULT 0,
       created_at DATETIME DEFAULT CURRENT_TIMESTAMP
     );
     CREATE TABLE IF NOT EXISTS companies (
@@ -327,6 +328,11 @@ export async function initDatabase(): Promise<void> {
   } catch (error: any) {
     if (!error.message?.includes("duplicate column")) throw error;
   }
+  try {
+    db.run("ALTER TABLE users ADD COLUMN must_change_password INTEGER NOT NULL DEFAULT 0");
+  } catch (error: any) {
+    if (!error.message?.includes("duplicate column")) throw error;
+  }
 
   saveDb();
   console.log("[数据库] Schema 初始化完成（含扩展表）");
diff --git a/modules/openxyos/backend/middleware.ts b/modules/openxyos/backend/middleware.ts
index 5cb566f1..49727a4d 100644
--- a/modules/openxyos/backend/middleware.ts
+++ b/modules/openxyos/backend/middleware.ts
@@ -25,6 +25,15 @@ export interface AuthRequest extends Request {
   user?: AuthUser;
 }
 
+function passwordChangeAllowed(req: AuthRequest): boolean {
+  const path = (req.originalUrl || req.url || "").split("?")[0];
+  return (
+    path === "/api/auth/change-password"
+    || path === "/api/auth/me"
+    || path === "/api/auth/revoke"
+  );
+}
+
 export async function authenticate(req: AuthRequest, res: Response, next: NextFunction) {
   const authHeader = req.headers.authorization;
   if (!authHeader?.startsWith("Bearer ")) {
@@ -37,6 +46,21 @@ export async function authenticate(req: AuthRequest, res: Response, next: NextFu
       return res.status(401).json({ success: false, error: result.error || localizedError(req, "登录已过期", "Your session has expired") });
     }
     req.user = result.user;
+    const gate = dbGet(
+      "SELECT must_change_password AS flag FROM users WHERE id = ?",
+      [result.user.id],
+    ) as { flag?: number } | undefined;
+    if (Number(gate?.flag) === 1 && !passwordChangeAllowed(req)) {
+      return res.status(403).json({
+        success: false,
+        code: "PASSWORD_CHANGE_REQUIRED",
+        error: localizedError(
+          req,
+          "请先修改本机引导密码",
+          "Change the local bootstrap password before continuing",
+        ),
+      });
+    }
     runWithRequestContext(
       { tenantId: result.user.tenant_id, userId: result.user.id },
       next,
diff --git a/modules/openxyos/backend/routes/auth.ts b/modules/openxyos/backend/routes/auth.ts
index 37020015..357098c0 100644
--- a/modules/openxyos/backend/routes/auth.ts
+++ b/modules/openxyos/backend/routes/auth.ts
@@ -94,11 +94,16 @@ authRoutes.post("/login", async (req, res) => {
       return res.status(status).json({ success: false, error: authError(req, result.error || "") });
     }
 
+    const gate = dbGet(
+      "SELECT must_change_password AS flag FROM users WHERE email = ?",
+      [email],
+    ) as { flag?: number } | undefined;
     res.json({
       success: true,
       data: {
         user: result.user,
         tokens: result.tokens,
+        must_change_password: Number(gate?.flag) === 1,
       },
     });
   } catch (err: unknown) {
@@ -136,6 +141,41 @@ authRoutes.post("/refresh", async (req, res) => {
   }
 });
 
+// POST /change-password — required before other APIs when the bootstrap flag is set
+authRoutes.post("/change-password", authenticate, (req: AuthRequest, res) => {
+  try {
+    const current = String(req.body?.current_password || "");
+    const next = String(req.body?.new_password || "");
+    if (next.length < 12) {
+      return res.status(400).json({
+        success: false,
+        error: localizedError(req, "新密码至少 12 位", "New password must be at least 12 characters"),
+      });
+    }
+    const row = dbGet("SELECT password_hash FROM users WHERE id = ?", [req.user!.id]) as
+      | { password_hash: string }
+      | undefined;
+    if (!row || !bcrypt.compareSync(current, row.password_hash)) {
+      return res.status(401).json({
+        success: false,
+        error: localizedError(req, "当前密码不正确", "Current password is incorrect"),
+      });
+    }
+    dbRun(
+      "UPDATE users SET password_hash = ?, must_change_password = 0 WHERE id = ?",
+      [bcrypt.hashSync(next, 10), req.user!.id],
+    );
+    res.json({ success: true });
+  } catch (err: unknown) {
+    const tid = logError("POST /change-password", err);
+    res.status(500).json({
+      success: false,
+      error: localizedError(req, "暂时无法修改密码", "Unable to change the password right now"),
+      traceId: tid,
+    });
+  }
+});
+
 // GET /me — 当前用户信息
 authRoutes.get("/me", authenticate, (req: AuthRequest, res) => {
   const user = dbGet("SELECT id, email, nickname, role, tenant_id FROM users WHERE id = ?", [req.user!.id]);
diff --git a/modules/openxyos/backend/seed.ts b/modules/openxyos/backend/seed.ts
index 77176a70..638fa01b 100644
--- a/modules/openxyos/backend/seed.ts
+++ b/modules/openxyos/backend/seed.ts
@@ -1,4 +1,7 @@
 import bcrypt from "bcryptjs";
+import { randomBytes } from "crypto";
+import fs from "fs";
+import path from "path";
 import { dbAll, dbGet, dbRun, getDb, saveDb } from "./db";
 
 function requiredSeedSecret(name: "SEED_ADMIN_PASSWORD" | "SEED_DEMO_PASSWORD"): string {
@@ -13,12 +16,79 @@ function seedAdminEmail(): string {
   return process.env.SEED_ADMIN_EMAIL?.trim() || "admin@example.com";
 }
 
-const LOCAL_BOOTSTRAP_PASSWORD = "openxyos-demo-2026";
-
-function localBootstrapPassword(name: "SEED_ADMIN_PASSWORD" | "SEED_DEMO_PASSWORD"): string {
+function explicitSeedPassword(name: "SEED_ADMIN_PASSWORD" | "SEED_DEMO_PASSWORD"): string | null {
   const value = process.env[name]?.trim();
-  if (value && value.length >= 12) return value;
-  return LOCAL_BOOTSTRAP_PASSWORD;
+  if (!value) return null;
+  if (value.length < 12) {
+    throw new Error(`${name} must be at least 12 characters`);
+  }
+  return value;
+}
+
+function bootstrapCredentialsPath(): string {
+  const dbPath = process.env.DATABASE_PATH || path.join(__dirname, "data/xiongyuan.db");
+  return path.join(path.dirname(dbPath), "bootstrap-credentials.txt");
+}
+
+function readBootstrapPassword(file: string): string | null {
+  if (!fs.existsSync(file)) return null;
+  const match = /^password=(.+)$/m.exec(fs.readFileSync(file, "utf8"));
+  const value = match?.[1]?.trim() ?? "";
+  return value.length >= 12 ? value : null;
+}
+
+/** Random local password, stored once beside the database. Never logged. */
+function generatedBootstrapPassword(): { password: string; created: boolean } {
+  const file = bootstrapCredentialsPath();
+  const existing = readBootstrapPassword(file);
+  if (existing) return { password: existing, created: false };
+  const password = randomBytes(24).toString("base64url");
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  fs.writeFileSync(
+    file,
+    [
+      "# Local bootstrap credentials for this machine only.",
+      "# Sign in once, then change the password. Do not commit this file.",
+      `password=${password}`,
+      "",
+    ].join("\n"),
+    { encoding: "utf8", mode: 0o600 },
+  );
+  try {
+    fs.chmodSync(file, 0o600);
+  } catch {
+    // Windows ACLs are not POSIX modes; the file still stays under the user profile.
+  }
+  console.log(`[seed] local bootstrap credentials written to ${file}`);
+  return { password, created: true };
+}
+
+function upsertBootstrapUser(opts: {
+  email: string;
+  password: string;
+  nickname: string;
+  role: string;
+  tenantId: number;
+  mustChange: boolean;
+  rotate: boolean;
+}): void {
+  const hash = bcrypt.hashSync(opts.password, 10);
+  const existing = dbGet("SELECT id FROM users WHERE email = ?", [opts.email]);
+  if (!existing) {
+    dbRun(
+      "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, ?, ?, ?)",
+      [opts.email, hash, opts.nickname, opts.role, opts.tenantId, opts.mustChange ? 1 : 0],
+    );
+    console.log(`[seed] local bootstrap account ${opts.email}`);
+    return;
+  }
+  if (opts.rotate) {
+    dbRun(
+      "UPDATE users SET password_hash = ?, must_change_password = 1 WHERE email = ?",
+      [hash, opts.email],
+    );
+    console.log(`[seed] rotated bootstrap password for ${opts.email}; change it on next sign-in`);
+  }
 }
 
 /** First-run local accounts when demo seed is off (FreeOS desktop sidecar). */
@@ -35,30 +105,42 @@ export function ensureLocalBootstrap(): void {
     "UPDATE tenants SET status = 'active' WHERE id IN (1, 2) AND status NOT IN ('active', 'trial')",
   );
 
-  const demoHash = bcrypt.hashSync(localBootstrapPassword("SEED_DEMO_PASSWORD"), 10);
-  const adminHash = bcrypt.hashSync(localBootstrapPassword("SEED_ADMIN_PASSWORD"), 10);
+  const demoExplicit = explicitSeedPassword("SEED_DEMO_PASSWORD");
+  const adminExplicit = explicitSeedPassword("SEED_ADMIN_PASSWORD");
+  const generated = demoExplicit && adminExplicit ? null : generatedBootstrapPassword();
+  const demoPassword = demoExplicit ?? generated!.password;
+  const adminPassword = adminExplicit ?? generated!.password;
+  const rotateGenerated = Boolean(generated?.created);
   const adminEmail = seedAdminEmail();
 
-  if (!dbGet("SELECT id FROM users WHERE email = ?", ["demo@demo.com"])) {
-    dbRun(
-      "INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, 'admin', 2)",
-      ["demo@demo.com", demoHash, "管理员"],
-    );
-    console.log("[seed] local bootstrap admin demo@demo.com");
-  }
-  if (!dbGet("SELECT id FROM users WHERE email = ?", ["user@demo.com"])) {
-    dbRun(
-      "INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, 'user', 2)",
-      ["user@demo.com", demoHash, "同事"],
-    );
-    console.log("[seed] local bootstrap user user@demo.com");
-  }
-  if (adminEmail !== "demo@demo.com" && !dbGet("SELECT id FROM users WHERE email = ?", [adminEmail])) {
-    dbRun(
-      "INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, 'super_admin', 1)",
-      [adminEmail, adminHash, "超级管理员"],
-    );
-    console.log(`[seed] local bootstrap super admin ${adminEmail}`);
+  upsertBootstrapUser({
+    email: "demo@demo.com",
+    password: demoPassword,
+    nickname: "管理员",
+    role: "admin",
+    tenantId: 2,
+    mustChange: demoExplicit === null,
+    rotate: demoExplicit === null && rotateGenerated,
+  });
+  upsertBootstrapUser({
+    email: "user@demo.com",
+    password: demoPassword,
+    nickname: "同事",
+    role: "user",
+    tenantId: 2,
+    mustChange: demoExplicit === null,
+    rotate: demoExplicit === null && rotateGenerated,
+  });
+  if (adminEmail !== "demo@demo.com") {
+    upsertBootstrapUser({
+      email: adminEmail,
+      password: adminPassword,
+      nickname: "超级管理员",
+      role: "super_admin",
+      tenantId: 1,
+      mustChange: adminExplicit === null,
+      rotate: adminExplicit === null && rotateGenerated,
+    });
   }
 }
 
@@ -79,8 +161,7 @@ export function seedDatabase() {
     return;
   }
   if (process.env.SEED_DEMO_DATA !== "true") {
-    console.log("[seed] Demo data is disabled. Seeding local first-login accounts only.");
-    ensureLocalBootstrap();
+    console.log("[seed] Demo data is disabled. Local accounts are seeded only when FREEOS_ORG_LOCAL_TEST=1.");
     return;
   }
 
diff --git a/modules/openxyos/backend/server.ts b/modules/openxyos/backend/server.ts
index c8b9c1c5..39052c49 100644
--- a/modules/openxyos/backend/server.ts
+++ b/modules/openxyos/backend/server.ts
@@ -282,7 +282,7 @@ app.get("/admin/database", (req, res) => {
 
   setupWebSocket(server);
 
-  server.listen(PORT, process.env.HOST || '0.0.0.0', () => {
+  server.listen(PORT, process.env.HOST || '127.0.0.1', () => {
     console.log(`\n  🌐 openXYOS Community — Human + Agent OS`);
     console.log(`  ─────────────────────────────────────`);
     console.log(`  Server:     http://localhost:${PORT}`);
diff --git a/modules/openxyos/frontend/src/pages/AuthPage.tsx b/modules/openxyos/frontend/src/pages/AuthPage.tsx
index 15e27d01..7700352e 100644
--- a/modules/openxyos/frontend/src/pages/AuthPage.tsx
+++ b/modules/openxyos/frontend/src/pages/AuthPage.tsx
@@ -8,7 +8,7 @@ const R = "[border-radius:1.5px]";
 
 export default function AuthPage() {
   const navigate = useNavigate();
-  const { login, register } = useAuthStore();
+  const { login, register, changePassword } = useAuthStore();
   const { isEnglish } = useLocale();
   const tx = (zh: string, en: string) => (isEnglish ? en : zh);
   const [tab, setTab] = useState<"login" | "register">("login");
@@ -18,6 +18,9 @@ export default function AuthPage() {
   const [error, setError] = useState("");
   const [loading, setLoading] = useState(false);
   const [agreed, setAgreed] = useState(false);
+  const [mustChange, setMustChange] = useState(false);
+  const [currentPassword, setCurrentPassword] = useState("");
+  const [nextPassword, setNextPassword] = useState("");
 
   const enterAfterAuthentication = async () => {
     try {
@@ -34,14 +37,22 @@ export default function AuthPage() {
     }
   };
 
-  const enterTestAccount = async () => {
+  const handlePasswordChange = async (e: React.FormEvent) => {
+    e.preventDefault();
     setLoading(true);
     setError("");
     try {
-      await login("demo@demo.com", "openxyos-demo-2026");
+      if (nextPassword.length < 12) {
+        setError(tx("新密码至少 12 位", "New password must be at least 12 characters."));
+        return;
+      }
+      await changePassword(currentPassword, nextPassword);
+      setMustChange(false);
+      setCurrentPassword("");
+      setNextPassword("");
       await enterAfterAuthentication();
     } catch (err: any) {
-      setError(err.message || tx("测试账号暂时不可用", "The test account is unavailable."));
+      setError(err.message || tx("暂时无法修改密码", "Unable to change the password right now."));
     } finally {
       setLoading(false);
     }
@@ -53,7 +64,13 @@ export default function AuthPage() {
     setError("");
     try {
       if (tab === "login") {
-        await login(email, password);
+        const needsChange = await login(email, password);
+        if (needsChange) {
+          setMustChange(true);
+          setCurrentPassword(password);
+          setPassword("");
+          return;
+        }
       } else {
         if (!agreed) {
           setError(
@@ -186,19 +203,11 @@ export default function AuthPage() {
               <br />
               <span className="text-text-muted">
                 {tx(
-                  "试用、布置这里的流程；钥匙只开这扇门。",
-                  "Try and arrange the workflows here. This key opens only this door.",
+                  "本机引导口令只写在数据目录的 bootstrap-credentials.txt，登录后必须修改。页面不再内置演示口令。",
+                  "The local bootstrap password is written only to bootstrap-credentials.txt in the data directory. Change it after signing in. This page does not embed a demo password.",
                 )}
               </span>
             </span>
-            <button
-              type="button"
-              onClick={() => void enterTestAccount()}
-              disabled={loading}
-              className={`ml-auto px-3.5 py-2 bg-primary text-white text-xs font-semibold ${R} hover:opacity-90 disabled:opacity-60 whitespace-nowrap`}
-            >
-              {tx("一键登录", "One-click sign in")}
-            </button>
           </div>
 
           <div className={`flex bg-bg-card border border-border ${R} p-1 mb-6`}>
@@ -213,6 +222,39 @@ export default function AuthPage() {
             ))}
           </div>
 
+          {mustChange ? (
+            <form onSubmit={(e) => void handlePasswordChange(e)}>
+              <p className="text-sm text-text mb-4">
+                {tx(
+                  "这是本机引导账号。请先设置一个新密码，然后才能继续。",
+                  "This is a local bootstrap account. Set a new password before continuing.",
+                )}
+              </p>
+              <div className="mb-4">
+                <label className="block text-[13px] font-medium mb-2 text-text">
+                  {tx("新密码", "New password")}
+                </label>
+                <input
+                  type="password"
+                  value={nextPassword}
+                  onChange={(e) => setNextPassword(e.target.value)}
+                  placeholder={tx("至少 12 位", "At least 12 characters")}
+                  required
+                  autoComplete="new-password"
+                  className={`w-full px-3.5 py-2.5 border-[1.5px] border-border ${R} text-sm bg-bg-card text-text outline-none transition-all focus:border-primary`}
+                />
+              </div>
+              {error && <p className="text-danger text-xs mb-3">{error}</p>}
+              <button
+                type="submit"
+                disabled={loading}
+                className={`w-full py-3 ${R} text-[15px] font-semibold text-white transition-all disabled:opacity-85`}
+                style={{ background: "linear-gradient(135deg, #10B981, #059669)" }}
+              >
+                {loading ? tx("处理中...", "Working...") : tx("修改密码并继续", "Change password and continue")}
+              </button>
+            </form>
+          ) : (
           <form onSubmit={handleSubmit}>
             <div className="mb-4">
               <label className="block text-[13px] font-medium mb-2 text-text">
@@ -310,6 +352,7 @@ export default function AuthPage() {
               </p>
             )}
           </form>
+          )}
         </div>
       </div>
     </div>
diff --git a/modules/openxyos/frontend/src/pages/OpenHomePage.tsx b/modules/openxyos/frontend/src/pages/OpenHomePage.tsx
index f160ae10..42d9021e 100644
--- a/modules/openxyos/frontend/src/pages/OpenHomePage.tsx
+++ b/modules/openxyos/frontend/src/pages/OpenHomePage.tsx
@@ -1,8 +1,6 @@
 import { useEffect, useRef, useState } from "react";
 import { useNavigate } from "react-router-dom";
 import { ArrowRight, Blocks, Bot, Braces, Building2, Check, ChevronDown, CircleDot, Code2, Copy, Eye, EyeOff, GitBranch, Github, KeyRound, Layers3, LockKeyhole, Menu, MessageSquareMore, Network, Play, ShieldCheck, Sparkles, Terminal, Users, X } from "lucide-react";
-import { useAuthStore } from "../stores/auth";
-import { authFetch } from "../api/authFetch";
 import { EXPERIENCE_MODELS, type ExperienceModelId } from "../llm-providers";
 import "../openxyos.css";
 import AgentJourneyDemo from "../components/AgentJourneyDemo";
@@ -385,37 +383,19 @@ function HeroRippleField() {
 export default function OpenHomePage() {
   const { isEnglish } = useLocale();
   const tx = (zh: string, en: string) => isEnglish ? en : zh;
-  const navigate = useNavigate(), { login } = useAuthStore();
+  const navigate = useNavigate();
   const [demoOpen, setDemoOpen] = useState(false), [demoPhase, setDemoPhase] = useState<"model" | "account">("model"), [loginState, setLoginState] = useState<"idle" | "admin" | "user">("idle"), [loginError, setLoginError] = useState(""), [copied, setCopied] = useState(false), [navOpen, setNavOpen] = useState(false);
   const [providerId, setProviderId] = useState<ExperienceModelId>("ollama"), [apiKey, setApiKey] = useState(""), [showKey, setShowKey] = useState(false);
   const openDemo = (phase: "model" | "account") => {
     setDemoPhase(phase); setLoginError(""); setLoginState("idle"); setDemoOpen(true);
   };
-  const enterDemo = async (kind: "admin" | "user") => {
-    setLoginState(kind); setLoginError("");
-    try { await login(kind === "admin" ? "demo@demo.com" : "user@demo.com", "openxyos-demo-2026"); navigate("/app"); }
-    catch (error) { setLoginError(error instanceof Error ? error.message : tx("演示环境暂时不可用，请使用登录页进入。", "The demo is temporarily unavailable. Please use the sign-in page.")); setLoginState("idle"); }
+  const enterDemo = (_kind: "admin" | "user") => {
+    setDemoOpen(false);
+    navigate("/auth");
   };
-  const saveModelAndEnter = async () => {
-    const selected = EXPERIENCE_MODELS.find(model => model.id === providerId);
-    const isLocal = Boolean(selected && "local" in selected && selected.local);
-    if (!isLocal && (apiKey.trim().length < 8 || /\s/.test(apiKey.trim()))) { setLoginError(tx("请输入有效的 API Key（不能包含空格）", "Enter a valid API key without spaces.")); return; }
-    setLoginState("admin"); setLoginError("");
-    try {
-      await login("demo@demo.com", "openxyos-demo-2026");
-      const response = await authFetch("/api/settings/ai/onboarding", {
-        method: "PUT",
-        body: JSON.stringify({ providerId, apiKey: isLocal ? (apiKey.trim() || "ollama") : apiKey.trim() }),
-      });
-      const body = await response.text();
-      const result = body ? JSON.parse(body) : null;
-      if (!response.ok || !result?.success) throw new Error(result?.error || tx("模型配置保存失败", "Unable to save model configuration."));
-      setApiKey("");
-      navigate("/app");
-    } catch (error) {
-      setLoginError(error instanceof Error ? error.message : tx("模型配置保存失败", "Unable to save model configuration."));
-      setLoginState("idle");
-    }
+  const saveModelAndEnter = () => {
+    setDemoOpen(false);
+    navigate("/auth");
   };
   const copyInstall = async () => { await navigator.clipboard.writeText("npm ci && npm run dev"); setCopied(true); window.setTimeout(() => setCopied(false), 1600); };
   const closeNav = () => setNavOpen(false);
@@ -465,6 +445,6 @@ export default function OpenHomePage() {
       <section id="contribute" className="ox-contribute"><div><Users size={31}/></div><small>BUILD WITH US</small><h2>{tx("不只使用系统，一起定义人机组织的未来", "Do more than use the system—define the future of human–AI organizations")}</h2><p>{tx("欢迎从组织模型、智能体协作、治理策略、模块生态和工程质量开始贡献。", "Contribute through organization models, agent collaboration, governance policy, module ecosystems, and engineering quality.")}</p><div className="ox-actions">{GITHUB_URL ? <a className="ox-primary" href={GITHUB_URL + "/issues"} target="_blank" rel="noreferrer"><Github size={18}/> {tx("查看 Issues", "View issues")}</a> : <a className="ox-primary" href="#source"><Code2 size={18}/> {tx("阅读源码边界", "Read source boundary")}</a>}<button className="ox-secondary" onClick={() => openDemo("model")}>{tx("进入系统", "Enter system")} <ArrowRight size={16}/></button></div></section>
     </main>
     <footer className="ox-footer"><span className="ox-brand"><i><Network size={16}/></i><b>open<span>XYOS</span></b></span><p>Open-source operating system for human–agent organizations.</p><small>Apache License 2.0 · Built in the open</small></footer>
-    {demoOpen && <div className="ox-overlay" onMouseDown={() => setDemoOpen(false)}><div className={`ox-dialog ${demoPhase === "model" ? "model-dialog" : ""}`} role="dialog" aria-modal="true" aria-labelledby="demo-title" onMouseDown={e => e.stopPropagation()}><button className="close" onClick={() => setDemoOpen(false)} aria-label={tx("关闭", "Close")}><X size={18}/></button>{demoPhase === "model" ? <><i className="icon"><KeyRound size={22}/></i><h2 id="demo-title">{tx("接入大模型，体验完整智能能力", "Connect a model to experience full intelligence")}</h2><p>{tx("优先使用本机 Ollama；云厂商需要你自己的 API Key，安装包不会预填密钥。密钥保存到当前本地演示租户，页面不会回显原文；之后可在“系统设置 → AI 大模型”中更换。", "Prefer local Ollama first. Cloud providers need your own API key — installers never prefill one. The key is stored only in the current demo tenant and is never shown back in plain text; change it later in System Settings → AI Models.")}</p><div className="model-presets">{EXPERIENCE_MODELS.map(model => <button key={model.id} className={providerId === model.id ? "selected" : ""} onClick={() => setProviderId(model.id)}><b>{model.name}</b><span>{model.provider}</span><small>{isEnglish ? model.hintEn : model.hint}</small></button>)}</div><label className="api-key-field"><span>API Key</span><div><KeyRound size={15}/><input type={showKey ? "text" : "password"} value={apiKey} onChange={event => setApiKey(event.target.value)} placeholder={tx("输入所选模型服务商的 API Key", "Enter the selected provider API key")} autoComplete="off" spellCheck={false}/><button onClick={() => setShowKey(value => !value)} aria-label={showKey ? tx("隐藏 API Key", "Hide API key") : tx("显示 API Key", "Show API key")}>{showKey ? <EyeOff size={16}/> : <Eye size={16}/>}</button></div></label><div className="key-notice"><ShieldCheck size={15}/><span>{tx("Key 仅发送到当前 openXYOS 后端，不写入浏览器日志，也不会再次明文返回。", "The key is sent only to the current openXYOS backend, never logged in the browser, and never returned in plain text.")}</span></div>{loginState !== "idle" && <p className="feedback">{tx("正在登录演示租户并保存模型配置…", "Signing in to the demo tenant and saving model configuration…")}</p>}{loginError && <p className="error">{loginError}</p>}<div className="model-actions"><button className="ox-primary" onClick={() => void saveModelAndEnter()} disabled={loginState !== "idle"}>{tx("保存并进入智能体验", "Save and enter intelligent experience")} <ArrowRight size={16}/></button><button className="ox-secondary" onClick={() => { setDemoPhase("account"); setLoginError(""); }}>{tx("暂不配置，只体验基础功能", "Skip for now and explore core functions")}</button></div></> : <><i className="icon"><LockKeyhole size={22}/></i><h2 id="demo-title">{tx("选择测试视角", "Choose a demo perspective")}</h2><p>{tx("使用本地演示租户进入真实系统。管理员可体验模块开关和名称编辑，普通员工只看到已授权能力。", "Enter the live system with the local demo tenant. Administrators can manage modules and labels; users see only authorized capabilities.")}</p><button className="account" onClick={() => void enterDemo("admin")} disabled={loginState !== "idle"}><span><b>{tx("管理员", "Administrator")}</b><small>demo@demo.com · {tx("密码", "password")} openxyos-demo-2026</small></span><ArrowRight size={17}/></button><button className="account" onClick={() => void enterDemo("user")} disabled={loginState !== "idle"}><span><b>{tx("普通员工", "Employee")}</b><small>user@demo.com · {tx("密码", "password")} openxyos-demo-2026</small></span><ArrowRight size={17}/></button>{loginState !== "idle" && <p className="feedback">{tx("正在连接演示环境…", "Connecting to the demo environment…")}</p>}{loginError && <p className="error">{loginError}</p>}<button className="manual" onClick={() => navigate("/auth")}>{tx("使用其他账号登录", "Sign in with another account")}</button></>}</div></div>}
+    {demoOpen && <div className="ox-overlay" onMouseDown={() => setDemoOpen(false)}><div className={`ox-dialog ${demoPhase === "model" ? "model-dialog" : ""}`} role="dialog" aria-modal="true" aria-labelledby="demo-title" onMouseDown={e => e.stopPropagation()}><button className="close" onClick={() => setDemoOpen(false)} aria-label={tx("关闭", "Close")}><X size={18}/></button>{demoPhase === "model" ? <><i className="icon"><KeyRound size={22}/></i><h2 id="demo-title">{tx("接入大模型，体验完整智能能力", "Connect a model to experience full intelligence")}</h2><p>{tx("优先使用本机 Ollama；云厂商需要你自己的 API Key，安装包不会预填密钥。密钥保存到当前本地演示租户，页面不会回显原文；之后可在“系统设置 → AI 大模型”中更换。", "Prefer local Ollama first. Cloud providers need your own API key — installers never prefill one. The key is stored only in the current demo tenant and is never shown back in plain text; change it later in System Settings → AI Models.")}</p><div className="model-presets">{EXPERIENCE_MODELS.map(model => <button key={model.id} className={providerId === model.id ? "selected" : ""} onClick={() => setProviderId(model.id)}><b>{model.name}</b><span>{model.provider}</span><small>{isEnglish ? model.hintEn : model.hint}</small></button>)}</div><label className="api-key-field"><span>API Key</span><div><KeyRound size={15}/><input type={showKey ? "text" : "password"} value={apiKey} onChange={event => setApiKey(event.target.value)} placeholder={tx("输入所选模型服务商的 API Key", "Enter the selected provider API key")} autoComplete="off" spellCheck={false}/><button onClick={() => setShowKey(value => !value)} aria-label={showKey ? tx("隐藏 API Key", "Hide API key") : tx("显示 API Key", "Show API key")}>{showKey ? <EyeOff size={16}/> : <Eye size={16}/>}</button></div></label><div className="key-notice"><ShieldCheck size={15}/><span>{tx("Key 仅发送到当前 openXYOS 后端，不写入浏览器日志，也不会再次明文返回。", "The key is sent only to the current openXYOS backend, never logged in the browser, and never returned in plain text.")}</span></div>{loginState !== "idle" && <p className="feedback">{tx("正在登录演示租户并保存模型配置…", "Signing in to the demo tenant and saving model configuration…")}</p>}{loginError && <p className="error">{loginError}</p>}<div className="model-actions"><button className="ox-primary" onClick={() => void saveModelAndEnter()} disabled={loginState !== "idle"}>{tx("保存并进入智能体验", "Save and enter intelligent experience")} <ArrowRight size={16}/></button><button className="ox-secondary" onClick={() => { setDemoPhase("account"); setLoginError(""); }}>{tx("暂不配置，只体验基础功能", "Skip for now and explore core functions")}</button></div></> : <><i className="icon"><LockKeyhole size={22}/></i><h2 id="demo-title">{tx("选择测试视角", "Choose a demo perspective")}</h2><p>{tx("使用本地演示租户进入真实系统。管理员可体验模块开关和名称编辑，普通员工只看到已授权能力。", "Enter the live system with the local demo tenant. Administrators can manage modules and labels; users see only authorized capabilities.")}</p><button className="account" onClick={() => void enterDemo("admin")} disabled={loginState !== "idle"}><span><b>{tx("管理员", "Administrator")}</b><small>demo@demo.com</small></span><ArrowRight size={17}/></button><button className="account" onClick={() => void enterDemo("user")} disabled={loginState !== "idle"}><span><b>{tx("普通员工", "Employee")}</b><small>user@demo.com</small></span><ArrowRight size={17}/></button>{loginState !== "idle" && <p className="feedback">{tx("正在连接演示环境…", "Connecting to the demo environment…")}</p>}{loginError && <p className="error">{loginError}</p>}<button className="manual" onClick={() => navigate("/auth")}>{tx("使用其他账号登录", "Sign in with another account")}</button></>}</div></div>}
   </div>;
 }
diff --git a/modules/openxyos/frontend/src/stores/auth.ts b/modules/openxyos/frontend/src/stores/auth.ts
index a447b041..8c2cff83 100644
--- a/modules/openxyos/frontend/src/stores/auth.ts
+++ b/modules/openxyos/frontend/src/stores/auth.ts
@@ -13,7 +13,8 @@ interface AuthState {
   user: User | null;
   token: string | null;
   loading: boolean;
-  login: (email: string, password: string) => Promise<void>;
+  login: (email: string, password: string) => Promise<boolean>;
+  changePassword: (currentPassword: string, newPassword: string) => Promise<void>;
   register: (
     email: string,
     password: string,
@@ -47,16 +48,41 @@ export const useAuthStore = create<AuthState>((set) => ({
     localStorage.setItem("token", token);
     localStorage.setItem("user", JSON.stringify(data.data.user));
     set({ user: data.data.user, token });
-    // 记录登录事件
-    authFetch("/api/admin/visitor-log", {
+    const mustChange = Boolean(data.data?.must_change_password);
+    if (!mustChange) {
+      // 记录登录事件
+      authFetch("/api/admin/visitor-log", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          event_type: "login",
+          user_id: data.data.user.id,
+          tenant_id: data.data.user.tenant_id,
+        }),
+      }).catch(() => {});
+    }
+    return mustChange;
+  },
+
+  changePassword: async (currentPassword, newPassword) => {
+    const res = await authFetch("/api/auth/change-password", {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
-        event_type: "login",
-        user_id: data.data.user.id,
-        tenant_id: data.data.user.tenant_id,
+        current_password: currentPassword,
+        new_password: newPassword,
       }),
-    }).catch(() => {});
+    });
+    const body = await res.text();
+    let data: any = {};
+    if (body) {
+      try {
+        data = JSON.parse(body);
+      } catch {
+        throw new Error("后端返回了无法识别的响应");
+      }
+    }
+    if (!res.ok || !data.success) throw new Error(data.error || "修改密码失败");
   },
 
   register: async (email, password, nickname) => {
diff --git a/modules/openxyos/package-lock.json b/modules/openxyos/package-lock.json
index af9c00c1..19d726a1 100644
--- a/modules/openxyos/package-lock.json
+++ b/modules/openxyos/package-lock.json
@@ -75,7 +75,7 @@
         "zustand": "^5.0.0"
       },
       "engines": {
-        "node": ">=20.19"
+        "node": ">=22.12"
       }
     },
     "node_modules/@antfu/install-pkg": {
@@ -191,7 +191,6 @@
       "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/code-frame": "^7.29.7",
         "@babel/generator": "^7.29.7",
@@ -1849,7 +1848,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=20.19.0"
       },
@@ -1898,7 +1896,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=20.19.0"
       }
@@ -1920,7 +1917,6 @@
       "resolved": "https://registry.npmmirror.com/@dnd-kit/core/-/core-6.3.1.tgz",
       "integrity": "sha512-xkGBRQQab4RLwgXxoqETICr6S5JlogafbhNsidmrkVv2YRs5MLwpjoF2qpiGjQt8S9AoxtIV603s0GIUpY5eYQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@dnd-kit/accessibility": "^3.1.1",
         "@dnd-kit/utilities": "^3.2.2",
@@ -1957,10 +1953,10 @@
         "react": ">=16.8.0"
       }
     },
-    "node_modules/@emnapi/wasi-threads": {
-      "version": "1.2.3",
-      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.3.tgz",
-      "integrity": "sha512-ELEBe8PsLvvJ6QMr0zLt8ffvOHW/dc1m3CEzNMg7aJUv3bMaoDtw2TXyDAwkYBuroxxuHEwhRTLJSe5sya547g==",
+    "node_modules/@emnapi/runtime": {
+      "version": "1.11.3",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz",
+      "integrity": "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==",
       "dev": true,
       "license": "MIT",
       "optional": true,
@@ -4247,6 +4243,27 @@
         "node": ">=14.0.0"
       }
     },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/core": {
+      "version": "1.10.0",
+      "dev": true,
+      "inBundle": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/wasi-threads": "1.2.1",
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/runtime": {
+      "version": "1.10.0",
+      "dev": true,
+      "inBundle": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
     "node_modules/@tailwindcss/oxide-wasm32-wasi/node_modules/@emnapi/wasi-threads": {
       "version": "1.2.1",
       "dev": true,
@@ -4772,7 +4789,6 @@
       "resolved": "https://registry.npmmirror.com/@types/express/-/express-5.0.6.tgz",
       "integrity": "sha512-sKYVuV7Sv9fbPIt/442koC7+IIwK5olP1KWeD88e/idgoJqDm3JV/YUiPwkoKK92ylff2MGxSz1CSjsXelx0YA==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@types/body-parser": "*",
         "@types/express-serve-static-core": "^5.0.0",
@@ -4911,7 +4927,6 @@
       "integrity": "sha512-MXfmqaVPEVgkBT/aY0aGCkRWWtByiYQXo3xdQ8r5RzuFrPiRn8Gar2tQdXSUQ2GKV3bkXckek89V8wQBY2Q/Aw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "csstype": "^3.2.2"
       }
@@ -5031,7 +5046,6 @@
       "integrity": "sha512-KA0OshtlcCCXmbfqyZkM5pV3/WNraJf7DkJRLpyrmwPtud57H5BDX7C3k0LPSPxpprfRL+cJDGabF10mvNCoCw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@typescript-eslint/scope-manager": "8.64.0",
         "@typescript-eslint/types": "8.64.0",
@@ -5342,7 +5356,6 @@
       "integrity": "sha512-xRQbDb9BnwDafYNn6Vwl839DYVjqXYb1XVGtWAZ1kcDc6iwAL4hg3B1dZlRiuENFeO2H53gFG3in621AdERVAg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -5378,7 +5391,6 @@
       "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
         "fast-uri": "^3.0.1",
@@ -5871,7 +5883,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "baseline-browser-mapping": "^2.11.20",
         "caniuse-lite": "^1.0.30001810",
@@ -6454,7 +6465,6 @@
       "integrity": "sha512-62rNSrioXw93uliKFBwjukeQyeWwH2PqDrTac31r2P6464u3AUvTk0xS4LVvT251g7IgkFunrI48ZEZGjywSOg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=0.10"
       }
@@ -6912,7 +6922,6 @@
       "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==",
       "dev": true,
       "license": "ISC",
-      "peer": true,
       "engines": {
         "node": ">=12"
       }
@@ -7710,7 +7719,6 @@
       "integrity": "sha512-DgZS62aPLXKlnxILS/AYCoRvHaZeXceIzlXPkkGGzJWSow1aEk0lbTlxUSlyjC8jcaKxAdOnTDz+o1JFSBsyjw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.8.0",
         "@eslint-community/regexpp": "^4.12.1",
@@ -11083,7 +11091,6 @@
       "resolved": "https://registry.npmmirror.com/pg/-/pg-8.23.0.tgz",
       "integrity": "sha512-Ip2EQCngowJLGOfCwkFhPXU7/ljlhn6Rxlmy4XYfL2Y+vyRM59+8uR2xqRWKdYmbXmxCFOAmKxBuSUCdF34qLg==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "pg-connection-string": "^2.14.0",
         "pg-pool": "^3.14.0",
@@ -11443,7 +11450,6 @@
       "resolved": "https://registry.npmmirror.com/react/-/react-19.2.7.tgz",
       "integrity": "sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ==",
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=0.10.0"
       }
@@ -11453,7 +11459,6 @@
       "resolved": "https://registry.npmmirror.com/react-dom/-/react-dom-19.2.7.tgz",
       "integrity": "sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "scheduler": "^0.27.0"
       },
@@ -12712,7 +12717,6 @@
       "integrity": "sha512-J/9An6vs9Us6wKRriSFXBWdRZapREHqFzdNUKk0pmu804EMR6dr6winwo7e5JDxN4xahxQsuysyYFwlwj4XN/Q==",
       "dev": true,
       "license": "BSD-2-Clause",
-      "peer": true,
       "dependencies": {
         "@jridgewell/source-map": "^0.3.3",
         "acorn": "^8.15.0",
@@ -12884,7 +12888,6 @@
       "integrity": "sha512-X8EX+XV4QR5xCsrgxaED954zTDfY8KqlDtskKEL0cHhyS/P8b4IFOvGDQpsC9Q1XnLq915wEfwwY/zzskCtmhg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "esbuild": "~0.28.0"
       },
@@ -13027,7 +13030,6 @@
       "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
       "dev": true,
       "license": "Apache-2.0",
-      "peer": true,
       "bin": {
         "tsc": "bin/tsc",
         "tsserver": "bin/tsserver"
@@ -13326,7 +13328,6 @@
       "integrity": "sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "esbuild": "^0.25.0",
         "fdir": "^6.4.4",
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 84671b5b..6f9d77ba 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -106,7 +106,7 @@
   },
   "description": "Open-source operating system for governed human-agent organizations",
   "engines": {
-    "node": ">=20.19"
+    "node": ">=22.12"
   },
   "overrides": {
     "qs": "6.16.0",
diff --git a/scripts/release_prerelease.py b/scripts/release_prerelease.py
new file mode 100644
index 00000000..3a93ed5f
--- /dev/null
+++ b/scripts/release_prerelease.py
@@ -0,0 +1,32 @@
+#!/usr/bin/env python3
+"""Print whether a FreeOS tag must be a GitHub prerelease.
+
+After a leading ``v`` is stripped, PEP 440 pre-releases match
+``(a|b|rc)[0-9]+$`` or ``.dev[0-9]+$``. ``v0.1.0rc1`` is a prerelease;
+``v0.1.0`` is not. Output is a GitHub Actions assignment: ``prerelease=true``.
+"""
+
+from __future__ import annotations
+
+import re
+import sys
+
+_PRE = re.compile(r"(?:(?:a|b|rc)[0-9]+|\.dev[0-9]+)$")
+
+
+def is_release_prerelease(tag: str) -> bool:
+    version = tag[1:] if tag.startswith("v") else tag
+    return _PRE.search(version) is not None
+
+
+def main(argv: list[str]) -> int:
+    if len(argv) != 2:
+        print("usage: release_prerelease.py <tag>", file=sys.stderr)
+        return 2
+    flag = "true" if is_release_prerelease(argv[1]) else "false"
+    print(f"prerelease={flag}")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main(sys.argv))
diff --git a/src/octop/modules/org_os/sidecar_launch.py b/src/octop/modules/org_os/sidecar_launch.py
index 4556b33a..1e0bfe91 100644
--- a/src/octop/modules/org_os/sidecar_launch.py
+++ b/src/octop/modules/org_os/sidecar_launch.py
@@ -374,6 +374,7 @@ def sidecar_launch_env(home: Path, *, dashboard_port: int | None = None) -> dict
         {
             "NODE_ENV": "production",
             "PORT": port,
+            "HOST": "127.0.0.1",
             "DB_DIALECT": "sqlite",
             "DATABASE_PATH": str(sidecar_data_dir(home) / "xiongyuan.db"),
             "AIR_GAP_MODE": "true",
diff --git a/tests/unit/desktop/test_openxyos_provisioner.py b/tests/unit/desktop/test_openxyos_provisioner.py
index 01d16323..52d25d80 100644
--- a/tests/unit/desktop/test_openxyos_provisioner.py
+++ b/tests/unit/desktop/test_openxyos_provisioner.py
@@ -159,6 +159,8 @@ def test_start_sidecar_cors_origin_is_parseorigins_safe() -> None:
     assert origins
     assert "*" not in origins
     assert "http://127.0.0.1:3780" in origins
+    assert "$env:HOST = '127.0.0.1'" in text
+    assert "$env:FREEOS_ORG_LOCAL_TEST = '1'" in text
     assert "http://localhost:3780" in origins
     for origin in origins:
         parsed = urlparse(origin)
diff --git a/tests/unit/test_release_prerelease.py b/tests/unit/test_release_prerelease.py
new file mode 100644
index 00000000..de64da09
--- /dev/null
+++ b/tests/unit/test_release_prerelease.py
@@ -0,0 +1,27 @@
+"""GitHub Release prerelease classification for FreeOS tags."""
+
+from __future__ import annotations
+
+import importlib.util
+from pathlib import Path
+
+_SCRIPT = Path(__file__).resolve().parents[2] / "scripts" / "release_prerelease.py"
+_spec = importlib.util.spec_from_file_location("release_prerelease", _SCRIPT)
+assert _spec is not None and _spec.loader is not None
+_mod = importlib.util.module_from_spec(_spec)
+_spec.loader.exec_module(_mod)
+
+
+def test_rc_alpha_beta_and_dev_are_prereleases() -> None:
+    assert _mod.is_release_prerelease("v0.1.0rc1") is True
+    assert _mod.is_release_prerelease("0.1.0rc1") is True
+    assert _mod.is_release_prerelease("v0.1.0a1") is True
+    assert _mod.is_release_prerelease("v0.1.0b2") is True
+    assert _mod.is_release_prerelease("v0.1.0.dev1") is True
+    assert _mod.is_release_prerelease("0.1.0.dev3") is True
+
+
+def test_production_tags_are_not_prereleases() -> None:
+    assert _mod.is_release_prerelease("v0.1.0") is False
+    assert _mod.is_release_prerelease("0.0.10") is False
+    assert _mod.is_release_prerelease("v0.1.0-rc.1") is False
diff --git a/tests/unit/test_sidecar_launch.py b/tests/unit/test_sidecar_launch.py
index 6a170536..b15fe657 100644
--- a/tests/unit/test_sidecar_launch.py
+++ b/tests/unit/test_sidecar_launch.py
@@ -305,6 +305,7 @@ def test_sidecar_launch_env_writes_secrets(tmp_path: Path) -> None:
     assert env["FREEOS_INGEST_TOKEN"]
     assert env["FREEOS_ORG_INTEGRATED"] == "1"
     assert env["FREEOS_ORG_LOCAL_TEST"] == "1"
+    assert env["HOST"] == "127.0.0.1"
 
 
 def test_sidecar_launch_env_merges_existing_cors(

From 17bc806d7fe63eddf7d370b15809a6adde771a63 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Wed, 21 Oct 2026 22:00:13 +0000
Subject: [PATCH 07/39] fix(release): brand new FnOS packages and clear npm
 audit

Name new FnOS artifacts FreeOS-fnos-*.fpk in the workflow, build script,
release links, and user docs. Older Release assets may still be named
Octop-fnos-*.

Remove the expired WeCom QR from the user guide and README_CN. Readers
go to GitHub Discussions or the existing Discord link.

Bump vite to 6.4.5, vitest to 4.1.12, and follow-redirects to 1.16.1 so
Desktop Package npm audit exits 0.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .github/workflows/fnos-build-fpk.yml      |  12 +-
 README_CN.md                              |  10 +-
 dashboard/package-lock.json               | 154 ++++++++++------------
 dashboard/package.json                    |   9 +-
 docs/assets/qrcode.png                    | Bin 4766 -> 0 bytes
 docs/user-guide.md                        |   9 +-
 fnos/README.md                            |  16 +--
 modules/openxyos/package-lock.json        |  14 +-
 modules/openxyos/package.json             |   4 +-
 scripts/build-fpk.sh                      |  16 +--
 scripts/release_download_links.py         |   4 +-
 tests/unit/test_release_download_links.py |   4 +-
 12 files changed, 115 insertions(+), 137 deletions(-)
 delete mode 100644 docs/assets/qrcode.png

diff --git a/.github/workflows/fnos-build-fpk.yml b/.github/workflows/fnos-build-fpk.yml
index f8c06e06..7b14e4e1 100644
--- a/.github/workflows/fnos-build-fpk.yml
+++ b/.github/workflows/fnos-build-fpk.yml
@@ -25,7 +25,7 @@ permissions:
   packages: read
 
 concurrency:
-  group: build-octop-fnos
+  group: build-freeos-fnos
   cancel-in-progress: false
 
 jobs:
@@ -99,14 +99,14 @@ jobs:
 
       - name: Build Docker FPK
         env:
-          FPK_NAME_PREFIX: Octop-fnos
+          FPK_NAME_PREFIX: FreeOS-fnos
         run: bash scripts/build-fpk.sh docker
 
       - name: Upload docker fpk artifact
         uses: actions/upload-artifact@v4
         with:
           name: docker-fpk
-          path: dist/Octop-fnos-docker-*.fpk
+          path: dist/FreeOS-fnos-docker-*.fpk
           if-no-files-found: error
 
   native:
@@ -203,18 +203,18 @@ jobs:
       - name: Build native FPK
         id: build_native
         env:
-          FPK_NAME_PREFIX: Octop-fnos
+          FPK_NAME_PREFIX: FreeOS-fnos
         run: bash scripts/build-fpk.sh native
 
       - name: Show native fpk size
-        run: ls -lh dist/Octop-fnos-native-*.fpk
+        run: ls -lh dist/FreeOS-fnos-native-*.fpk
 
       - name: Upload native fpk artifact
         id: upload_native
         uses: actions/upload-artifact@v4
         with:
           name: native-fpk
-          path: dist/Octop-fnos-native-*.fpk
+          path: dist/FreeOS-fnos-native-*.fpk
           if-no-files-found: error
 
       - name: Upload native install log (for debugging)
diff --git a/README_CN.md b/README_CN.md
index 93505529..a708ad06 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -243,7 +243,7 @@ curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install
 | Windows | `FreeOS-desktop-windows-amd64-<version>.exe`（64 位）/ `FreeOS-desktop-windows-arm64-<version>.exe`（ARM64）— NSIS 安装程序，单进程 FreeOS + 宿主内 Organization；不捆绑也不自动拉起 openXYOS Node |
 | macOS | `FreeOS-desktop-darwin-arm64-<version>.dmg`（Apple 芯片）/ `FreeOS-desktop-darwin-amd64-<version>.dmg`（Intel） |
 | Linux | `FreeOS-desktop-linux-amd64-<version>.tar.gz` / `FreeOS-desktop-linux-arm64-<version>.tar.gz` |
-| 飞牛 NAS（FnOS） | `Octop-fnos-docker-<version>.fpk`（依赖 Docker）/ `Octop-fnos-native-<version>.fpk`（无需 Docker）— 通过应用中心安装 |
+| 飞牛 NAS（FnOS） | `FreeOS-fnos-docker-<version>.fpk`（依赖 Docker）/ `FreeOS-fnos-native-<version>.fpk`（无需 Docker）— 通过应用中心安装。更早的 Release 资产可能仍叫 `Octop-fnos-*` |
 
 桌面客户端说明见 [desktop/README.md](desktop/README.md)，飞牛打包指南见 [fnos/README.md](fnos/README.md)。独立商业组织站见 [docs/org-export.md](docs/org-export.md)（`freeos org export-standalone`，默认导出完整 openXYOS 源码树），不是默认安装器里的第二套 Node。
 
@@ -545,13 +545,7 @@ cd dashboard && npx tsc --noEmit
 
 ### 💬 客户企业微信群
 
-如需加入客户企业微信服务群，请扫码：
-
-<p align="center">
-  <img src="docs/assets/qrcode.png" alt="客户企业微信服务群二维码" width="220" />
-</p>
-
-> 请扫码进入工作群，如有任何疑问或需求，请直接联系群管理员对接处理。
+客户企业微信群二维码已失效（有效期至 2026-08-03），本文不再提供该图。请到 [GitHub Discussions](https://github.com/XYAIStudio/FreeOS/discussions) 讨论，或使用页首 [Discord](https://discord.gg/jPas5J8Ua) 徽章加入社区。
 
 ### 📄 许可证
 
diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
index 9ef4a83a..b53fed4f 100644
--- a/dashboard/package-lock.json
+++ b/dashboard/package-lock.json
@@ -50,7 +50,7 @@
         "@types/react-dom": "^18",
         "@types/react-syntax-highlighter": "^15.5.13",
         "@vitejs/plugin-react": "^4.4.1",
-        "@vitest/coverage-v8": "^4.1.11",
+        "@vitest/coverage-v8": "^4.1.12",
         "eslint": "^9.25.0",
         "eslint-plugin-react-hooks": "^5.2.0",
         "eslint-plugin-react-refresh": "^0.4.19",
@@ -62,9 +62,9 @@
         "rollup-plugin-visualizer": "^5.14.0",
         "typescript": "~5.8.3",
         "typescript-eslint": "^8.30.1",
-        "vite": "^6.3.5",
+        "vite": "^6.4.5",
         "vite-plugin-pwa": "^0.21.2",
-        "vitest": "^4.1.11"
+        "vitest": "^4.1.12"
       }
     },
     "node_modules/@adobe/css-tools": {
@@ -253,7 +253,6 @@
       "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@babel/code-frame": "^7.29.7",
         "@babel/generator": "^7.29.7",
@@ -1929,7 +1928,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=18"
       },
@@ -1953,7 +1951,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=18"
       }
@@ -3915,7 +3912,8 @@
       "resolved": "https://registry.npmjs.org/@types/aria-query/-/aria-query-5.0.4.tgz",
       "integrity": "sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/@types/babel__core": {
       "version": "7.20.5",
@@ -4353,7 +4351,6 @@
       "resolved": "https://mirrors.tencent.com/npm/@types/react/-/react-18.3.30.tgz",
       "integrity": "sha512-3ek6mwJL5/VBewBcY4S66cqlCtK3qi4WIq37Z0m/NHw1hjhI7274Mx1qz/+ggSzyBCOEf7eHjBN6INjPAWYfYw==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@types/prop-types": "*",
         "csstype": "^3.2.2"
@@ -4364,7 +4361,6 @@
       "resolved": "https://mirrors.tencent.com/npm/@types/react-dom/-/react-dom-18.3.7.tgz",
       "integrity": "sha512-MEe3UeoENYVFXzoXEWsvcpg6ZvlrFNlOQ7EOsvhI3CfAXwzPfO8Qwuxd40nepsYKqyyVQnTdEfv68q91yLcKrQ==",
       "dev": true,
-      "peer": true,
       "peerDependencies": {
         "@types/react": "^18.0.0"
       }
@@ -4448,7 +4444,6 @@
       "integrity": "sha512-A0M6ua6H252bVjPvvtSgl2QA4+ET9S5Mtkb2GDyTxIhH/C4qDItT7RQNO5PhMC6NXGYXOR9dIalcDDgBKT7oFA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@typescript-eslint/scope-manager": "8.60.1",
         "@typescript-eslint/types": "8.60.1",
@@ -4733,15 +4728,14 @@
       }
     },
     "node_modules/@vitest/coverage-v8": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.11.tgz",
-      "integrity": "sha512-8MVGEFnJIcdGjcbfKmeq8z0pZHH0JlVtoVZH9Q/qwUp6wyFnEJUBMrw9DCaj+ra3vShGmhavjalMIhPNxZAUcw==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.12.tgz",
+      "integrity": "sha512-6S7/iVknKglLAxMFxQGNppBI0iqJS2NgM6FBxavitj7KaDq/vywOWGf6dGu7F2L1Qy0G6S3uTp7aGshHrzK8JA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@bcoe/v8-coverage": "^1.0.2",
-        "@vitest/utils": "4.1.11",
+        "@vitest/utils": "4.1.12",
         "ast-v8-to-istanbul": "^1.0.0",
         "istanbul-lib-coverage": "^3.2.2",
         "istanbul-lib-report": "^3.0.1",
@@ -4755,8 +4749,8 @@
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
-        "@vitest/browser": "4.1.11",
-        "vitest": "4.1.11"
+        "@vitest/browser": "4.1.12",
+        "vitest": "4.1.12"
       },
       "peerDependenciesMeta": {
         "@vitest/browser": {
@@ -4765,16 +4759,16 @@
       }
     },
     "node_modules/@vitest/expect": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.11.tgz",
-      "integrity": "sha512-VX2x5vNJXET47KAFzwERI+KRMtTTCSWTfSMKsW7JsUsXV4psq++e3DvZpuTDOpHcxytiDs6p2nhVb2tVDiiUYw==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.12.tgz",
+      "integrity": "sha512-vFlTt+YEu9WBpNjdGayNmlMVzrWPi1+sv853/7t2FU7hpO5gAFBKHzQmkCq5Xjpr+evegF2994LQT3hF3mRlqQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@standard-schema/spec": "^1.1.0",
         "@types/chai": "^5.2.2",
-        "@vitest/spy": "4.1.11",
-        "@vitest/utils": "4.1.11",
+        "@vitest/spy": "4.1.12",
+        "@vitest/utils": "4.1.12",
         "chai": "^6.2.2",
         "tinyrainbow": "^3.1.0"
       },
@@ -4783,13 +4777,13 @@
       }
     },
     "node_modules/@vitest/mocker": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.11.tgz",
-      "integrity": "sha512-2XJVD55d1o5AZous5CCGKS74g/riOj9odEt2bQpCVZeblHyHdnMeFl4jl0XjU21stf4mbjUkew2eXQZt65g5CQ==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.12.tgz",
+      "integrity": "sha512-fKShNpKZzupWZuY0z7egydvL0sqW4INEZBEExMBMAa6izlENEVHwoXgdaTCaBZ5fwlr4xf2o1wXC83n9RpO+NA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "4.1.11",
+        "@vitest/spy": "4.1.12",
         "estree-walker": "^3.0.3",
         "magic-string": "^0.30.21"
       },
@@ -4820,9 +4814,9 @@
       }
     },
     "node_modules/@vitest/pretty-format": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.11.tgz",
-      "integrity": "sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.12.tgz",
+      "integrity": "sha512-XW9O8+Mxx4VpCtkYdMJLZQQwsVryP9wk7cPKDxtXFfwSak6yRh5+2fep/Y0XF/ElBvJHq8bcYdi6aeuai0opZA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -4833,13 +4827,13 @@
       }
     },
     "node_modules/@vitest/runner": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.11.tgz",
-      "integrity": "sha512-LztvUgdwMNJMIkj3hQnnxiC2Xy1zNxq928W/xhjCLaNCzqTZOudjwbQf6v9IntZGPw132i2Lq2rgTRZHD3JHNw==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.12.tgz",
+      "integrity": "sha512-NKlVKCr5QnCe8jijdMnmkpHHU+WTqiLFR6G0pHji9uRjXK9xJl1k1nTw6F3pOOj2PDcsDt2GKQMI7wIsaT491w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "4.1.11",
+        "@vitest/utils": "4.1.12",
         "pathe": "^2.0.3"
       },
       "funding": {
@@ -4847,14 +4841,14 @@
       }
     },
     "node_modules/@vitest/snapshot": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.11.tgz",
-      "integrity": "sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.12.tgz",
+      "integrity": "sha512-ko1y1Qgb/slzQ9mr+b89Cuqud8WG1TKtsPD8r7ZUBdvVOGt85Af2HwCqHujrhwJq95hs/9RM7fcAPg57o1vlzw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.11",
-        "@vitest/utils": "4.1.11",
+        "@vitest/pretty-format": "4.1.12",
+        "@vitest/utils": "4.1.12",
         "magic-string": "^0.30.21",
         "pathe": "^2.0.3"
       },
@@ -4863,9 +4857,9 @@
       }
     },
     "node_modules/@vitest/spy": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.11.tgz",
-      "integrity": "sha512-apNa/prQy2qCeywhnixOHPRCgGNhvg7T4Dapfl1GahLp/R+uhBm5cPyFoNVyqsNd2h1nJxL6BqqdIjiABL60YA==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.12.tgz",
+      "integrity": "sha512-RGq9x4JNGNTZHEJxvN0oSiJjeSCExm0n2gZKKJZHY9cX5AVA6M7VJILBT3ZJ/tJ/0J9uWT7fETV9/btoi//vSg==",
       "dev": true,
       "license": "MIT",
       "funding": {
@@ -4873,13 +4867,13 @@
       }
     },
     "node_modules/@vitest/utils": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.11.tgz",
-      "integrity": "sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.12.tgz",
+      "integrity": "sha512-Q3awXrwOfEV+qc3WmO5ONyE0yO7Q1gQ9/oyHxGLZ/pl7N3NO/ZztqQwKLuwMkV+CA1JYSIeO3gkHnRDIo4AVaA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/pretty-format": "4.1.11",
+        "@vitest/pretty-format": "4.1.12",
         "convert-source-map": "^2.0.0",
         "tinyrainbow": "^3.1.0"
       },
@@ -4909,8 +4903,7 @@
       "version": "5.5.0",
       "resolved": "https://mirrors.tencent.com/npm/@xterm/xterm/-/xterm-5.5.0.tgz",
       "integrity": "sha512-hqJHYaQb5OptNunnyAnkHyM8aCjZ1MEIDTQu1iIbbTD/xops91NB5yq1ZK/dC2JDbVWtF23zUtl9JE2NqwT87A==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
     },
     "node_modules/acorn": {
       "version": "8.16.0",
@@ -4918,7 +4911,6 @@
       "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -5358,7 +5350,6 @@
         }
       ],
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "baseline-browser-mapping": "^2.11.26",
         "caniuse-lite": "^1.0.30001813",
@@ -5805,7 +5796,6 @@
       "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.34.3.tgz",
       "integrity": "sha512-yfYGhRcGAntq6YBD583j4n0Eg3jIxvWmZtz/5uz9UYkeIStSlMxuUja+ec5j3iBD8nv1rwaOAYMW09tBdkSeaQ==",
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=0.10"
       }
@@ -6203,7 +6193,6 @@
       "resolved": "https://mirrors.tencent.com/npm/d3-selection/-/d3-selection-3.0.0.tgz",
       "integrity": "sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==",
       "license": "ISC",
-      "peer": true,
       "engines": {
         "node": ">=12"
       }
@@ -6565,7 +6554,8 @@
       "resolved": "https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.5.16.tgz",
       "integrity": "sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/dompurify": {
       "version": "3.4.16",
@@ -6890,7 +6880,6 @@
       "resolved": "https://mirrors.tencent.com/npm/eslint/-/eslint-9.39.4.tgz",
       "integrity": "sha512-XoMjdBOwe/esVgEvLmNsD3IRHkm7fbKIUGvrleloJXUZgDHig2IPWNniv+GwjyJXzuNqVjlr5+4yVUZjycJwfQ==",
       "dev": true,
-      "peer": true,
       "dependencies": {
         "@eslint-community/eslint-utils": "^4.8.0",
         "@eslint-community/regexpp": "^4.12.1",
@@ -7984,7 +7973,6 @@
           "url": "https://www.locize.com"
         }
       ],
-      "peer": true,
       "dependencies": {
         "@babel/runtime": "^7.29.2"
       },
@@ -9209,6 +9197,7 @@
       "integrity": "sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "bin": {
         "lz-string": "bin/bin.js"
       }
@@ -10332,6 +10321,7 @@
       "resolved": "https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.57.0.tgz",
       "integrity": "sha512-5BkI9KGoqrNvBGUe15/QlZq3OooZ8WLg1AxTpaqHRCP3HNpzPPZKE2EDz8M7c+VRmCeUw1Brp4cx/PWm3kI/5A==",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "dompurify": "3.4.15",
         "marked": "14.0.0"
@@ -10341,6 +10331,7 @@
       "version": "14.0.0",
       "resolved": "https://mirrors.tencent.com/npm/marked/-/marked-14.0.0.tgz",
       "integrity": "sha512-uIj4+faQ+MgHgwUW1l2PsPglZLOLOT1uErt06dAPtx2kjteLAkbsd/0FiYg/MGS+i7ZKLb7w2WClxHkzOOuryQ==",
+      "peer": true,
       "bin": {
         "marked": "bin/marked.js"
       },
@@ -10721,7 +10712,6 @@
       "resolved": "https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-5.4.296.tgz",
       "integrity": "sha512-DlOzet0HO7OEnmUmB6wWGJrrdvbyJKftI1bhMitK7O2N8W2gc757yyYBbINy9IDafXAV9wmKr9t7xsTaNKRG5Q==",
       "license": "Apache-2.0",
-      "peer": true,
       "engines": {
         "node": ">=20.16.0 || >=22.3.0"
       },
@@ -10867,6 +10857,7 @@
       "integrity": "sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "ansi-regex": "^5.0.1",
         "ansi-styles": "^5.0.0",
@@ -10882,6 +10873,7 @@
       "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=10"
       },
@@ -10894,7 +10886,8 @@
       "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz",
       "integrity": "sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "peer": true
     },
     "node_modules/prismjs": {
       "version": "1.30.0",
@@ -11563,7 +11556,6 @@
       "resolved": "https://mirrors.tencent.com/npm/react/-/react-18.3.1.tgz",
       "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "loose-envify": "^1.1.0"
       },
@@ -11576,7 +11568,6 @@
       "resolved": "https://mirrors.tencent.com/npm/react-dom/-/react-dom-18.3.1.tgz",
       "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "loose-envify": "^1.1.0",
         "scheduler": "^0.23.2"
@@ -11706,7 +11697,6 @@
       "resolved": "https://mirrors.tencent.com/npm/react-redux/-/react-redux-9.3.0.tgz",
       "integrity": "sha512-KQopgqFo/p/fgmAs5qz6p5RWaNAzq40WAu7fJIXnQpYxFPbJYtsJPWvGeF2rOBaY/kEuV77AVsX8TsQzKm+A/g==",
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "@types/use-sync-external-store": "^0.0.6",
         "use-sync-external-store": "^1.4.0"
@@ -11864,8 +11854,7 @@
       "version": "5.0.1",
       "resolved": "https://mirrors.tencent.com/npm/redux/-/redux-5.0.1.tgz",
       "integrity": "sha512-M9/ELqF6fy8FwmkpnF0S3YKOqMyoWJ4+CS5Efg2ct3oY9daQvd/Pc71FpGZsVsbl3Cpb+IIcjBDUnnyBdQbq4w==",
-      "license": "MIT",
-      "peer": true
+      "license": "MIT"
     },
     "node_modules/redux-thunk": {
       "version": "3.1.0",
@@ -12166,7 +12155,6 @@
       "resolved": "https://mirrors.tencent.com/npm/rollup/-/rollup-4.61.0.tgz",
       "integrity": "sha512-T9mWdbWfQtp0B5lv/HX+wrhYsmXRlcWnXXmJbXqKJhlRaoS6KMhq0gpyzW4UJfclcxrEdLnTgjT2NjruLONu0g==",
       "dev": true,
-      "peer": true,
       "dependencies": {
         "@types/estree": "1.0.9"
       },
@@ -13245,7 +13233,6 @@
       "integrity": "sha512-p1diW6TqL9L07nNxvRMM7hMMw4c5XOo/1ibL4aAIGmSAt9slTE1Xgw5KWuof2uTOvCg9BY7ZRi+GaF+7sfgPeQ==",
       "devOptional": true,
       "license": "Apache-2.0",
-      "peer": true,
       "bin": {
         "tsc": "bin/tsc",
         "tsserver": "bin/tsserver"
@@ -13636,12 +13623,11 @@
       }
     },
     "node_modules/vite": {
-      "version": "6.4.3",
-      "resolved": "https://mirrors.tencent.com/npm/vite/-/vite-6.4.3.tgz",
-      "integrity": "sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==",
+      "version": "6.4.5",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.5.tgz",
+      "integrity": "sha512-4enwjFfi4IwtEh0w+jPzpLVOFQiPHmmzPxcHXQOyEur47o6u0jE573DmGpjA+7irXoMLYRZD5ZaFUEneS3abPg==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
         "esbuild": "^0.25.0",
         "fdir": "^6.4.4",
@@ -13743,20 +13729,19 @@
       }
     },
     "node_modules/vitest": {
-      "version": "4.1.11",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.11.tgz",
-      "integrity": "sha512-fhACrNXUidIbGSBr5FlbuBkO7VWC1ZyLl0DO4CU2DrQoAPxX84Ysxs+HeGQpii5lZWV1Q4gBZTTu49mF+A6Edw==",
+      "version": "4.1.12",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.12.tgz",
+      "integrity": "sha512-5eWdz2yb3ajxWF3C8C4TjkXl7FGm3n2E/VlazALrQHzK7nYMSGFnCZto0bbPNl77AwkOZVLk0YnBAejUu0NiWA==",
       "dev": true,
       "license": "MIT",
-      "peer": true,
       "dependencies": {
-        "@vitest/expect": "4.1.11",
-        "@vitest/mocker": "4.1.11",
-        "@vitest/pretty-format": "4.1.11",
-        "@vitest/runner": "4.1.11",
-        "@vitest/snapshot": "4.1.11",
-        "@vitest/spy": "4.1.11",
-        "@vitest/utils": "4.1.11",
+        "@vitest/expect": "4.1.12",
+        "@vitest/mocker": "4.1.12",
+        "@vitest/pretty-format": "4.1.12",
+        "@vitest/runner": "4.1.12",
+        "@vitest/snapshot": "4.1.12",
+        "@vitest/spy": "4.1.12",
+        "@vitest/utils": "4.1.12",
         "es-module-lexer": "^2.0.0",
         "expect-type": "^1.3.0",
         "magic-string": "^0.30.21",
@@ -13784,12 +13769,12 @@
         "@edge-runtime/vm": "*",
         "@opentelemetry/api": "^1.9.0",
         "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
-        "@vitest/browser-playwright": "4.1.11",
-        "@vitest/browser-preview": "4.1.11",
-        "@vitest/browser-webdriverio": "4.1.11",
-        "@vitest/coverage-istanbul": "4.1.11",
-        "@vitest/coverage-v8": "4.1.11",
-        "@vitest/ui": "4.1.11",
+        "@vitest/browser-playwright": "4.1.12",
+        "@vitest/browser-preview": "4.1.12",
+        "@vitest/browser-webdriverio": "^4.1.11",
+        "@vitest/coverage-istanbul": "4.1.12",
+        "@vitest/coverage-v8": "4.1.12",
+        "@vitest/ui": "4.1.12",
         "happy-dom": "*",
         "jsdom": "*",
         "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
@@ -14145,7 +14130,6 @@
       "resolved": "https://mirrors.tencent.com/npm/ajv/-/ajv-8.20.0.tgz",
       "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
       "dev": true,
-      "peer": true,
       "dependencies": {
         "fast-deep-equal": "^3.1.3",
         "fast-uri": "^3.0.1",
diff --git a/dashboard/package.json b/dashboard/package.json
index e0e6d198..9c5cf999 100644
--- a/dashboard/package.json
+++ b/dashboard/package.json
@@ -54,7 +54,8 @@
     "serialize-javascript": "^7.0.3",
     "@rollup/plugin-terser": "^1.0.0",
     "katex": "^0.19.0",
-    "dompurify": "^3.4.16"
+    "dompurify": "^3.4.16",
+    "vite": "^6.4.5"
   },
   "devDependencies": {
     "@eslint/js": "^9.25.0",
@@ -68,7 +69,7 @@
     "@types/react-dom": "^18",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@vitejs/plugin-react": "^4.4.1",
-    "@vitest/coverage-v8": "^4.1.11",
+    "@vitest/coverage-v8": "^4.1.12",
     "eslint": "^9.25.0",
     "eslint-plugin-react-hooks": "^5.2.0",
     "eslint-plugin-react-refresh": "^0.4.19",
@@ -80,8 +81,8 @@
     "rollup-plugin-visualizer": "^5.14.0",
     "typescript": "~5.8.3",
     "typescript-eslint": "^8.30.1",
-    "vite": "^6.3.5",
+    "vite": "^6.4.5",
     "vite-plugin-pwa": "^0.21.2",
-    "vitest": "^4.1.11"
+    "vitest": "^4.1.12"
   }
 }
diff --git a/docs/assets/qrcode.png b/docs/assets/qrcode.png
deleted file mode 100644
index 6703b9d7870f9c2167a954ecbb786b1e59d99ad3..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 4766
zcmZ{oc{H2b*T>UVQA1U4D`}MuI>waT8j5PGDr#;eC~AI<xvGW;A+%cR)^uwqts#_@
z7@`9~5K0Y~nv#$!NQxRFB`snee!0W@d)ICI{_(75o%5`{&))m&v!3tg{CdOOP*Uu$
z7ytl}G`fDx5&+l{|K}qrB$#o7IJ^_Qggo`k^Z<a@N#YwWy9MK8Zr3f%007Ks0N~z3
z0ANipb#EE~KtTY28D{`MI|Bd!-pwN4yeRmv)78ZA8escT(uW2BV85)<H9bTKb9Tfp
z_6T3D?Q73d#o-63j-0efJ^6xtko%(2KRwSK+ii(Zvw~8ef?v`t<I-OCy5b){mQjXT
z5?W%V4<4|u0DXNg`m|slwB`EFoW--}9KCaGOgXyMO?u^bj-Kor%I3{=f9CN%P@FD7
z19cWMpAGeN;dmPnG@q*7x$yP#1O}j8`W-+*XcuIkMB^0*VAqcakb!l>GCG&E(?VOr
zKqtSUMHxH1;OUn3H1%2cG)WOl{H&HfvC1NWX33>aDW86FI;QZgOZr-{?_lOb-$&jm
zoeTB8P$tT@;q++i4iH!#>bjBLP8drBty$$_33mSFd;-E23T9I-1M`b<VJO{G=J@X;
zQ}D0VfK3c7Pq`xaf#t-)_tLu{As1Y$5yggI{iHkYa%AW7lUdd9bL_OCtm0vn*_TWb
zc?==;U8cR&LzNW8DlMxT2c}u2FRDf0NKlO%TsR>Mb_Q+RkkzZXp_B-^ci$Nx9JK=^
zD(rmhuR)9*o7m+Y6p+sE+=FfI851NU_*Nu{-dq7Y#ZuK?rf_TiO!2=K|Ckr?XPH^B
zweEVSpgAlfu=(%E)i^w%fIj1m`eK2HIjcMAp@GFG82;G~{@~p|bTM2qtg<i}^!9Bc
z_w!=~!O9`;?}ip?IwL(-{_;`0^+$O3Y#^$UaNwVa|1bQ!{<%;a<-)K|K863tqVoKj
z{V=sn*XBH~Qs`&uRP2uU(%^A0o4|r+ub-VX^VXF4(H795_fCM>_oAJhgZNtZGxn=X
z4kL@3dpU@-8ASdI#%t!q54`!$&DiWD*`*w7>&j3q*MC>=&v=T$-Gcb?YUv%C&c{I@
z2dr=tVR%XhW<~y`mXe+h-}Yu(>`BdL;3b{7mSr8YwO1o#41dt8X@0q}f4R7q7l7j-
z4o(l3aJBeJs_QjbYXv|>wtJ0Djq(xb_kDz*-2XcXfUs(Q_7uxT+p1p^<}{ZTVMrl$
z)kkV#Dff?kyMwv&k_T?C3M&ci%I};CqXc3^(B@prwh4T3j1-$_GLg9)zN`CtqlCVe
zFv@)&QDGS46;DvDRr$(dKe>s8brivoHYF<>^-YHfgV|T4)BGB*LJr5K0ML~YJ?Oy+
zJd=d5V@*oF#ff0M>s2+=cn@b}k4V5EF_ZJ?Lp2H@{ZX&JAR)K2N0gr@{_U_Re3t=&
zvP1k`<MiR+ia?+i;znR;c+ZS(mydO!diieU>&d6p^7`%aQRG{h6)M+jRo1~U*$FWF
zDWw04GXtcB9qo)z`2=*=qha8Wf;>K+u|XQ!%-ETQ__E!dTD%mDAZzi81`z9Tl@CC7
zTR)DG8M20Ydz=ibnh~?$ek7H<R_H-~-pblm?RewZ`#@WLaU-+BklkDTNZo(X2Fh$#
z2Hg%9S&Y)~s?t{~NMV*KW7PRE@yDX1+e=B@(}g#(H1oL?@IZp5*ZY0($K+`S+GGBq
zG-fW)(vN;UZ+>><#hrn7`*E4{ht@`R^cRyR%Bvc);=%RMWXs#(NyS>TbW<G8Zvekm
zJb=Wu*@W8$u3c$EA=)bFo^x^-gAz+W*T8-8w<as<r}`T`MhavrJR0}Qpl&qK@^UoM
z4DKuILe__uAPo={rqkmY<cqF%gW|)~tz3)>`9(|17lKO}IysLcwMM|IZ408)!^DJ9
z)1+Ia3>P`#0denyC64}x&(<&2jAh-CC@G=llvCKw*p`fl7e5`;_h<R&;+yS|8=qq5
zuGiNj7(y<tMzg@CnY~ENd(I_lDvP1sy0{CY!WY&&!T>oQ>04^5sKn@V>y<X;b#G;8
z<SmOhwo5gs3o}4^%AB@nZ)DIPaHRr~AU_voRNv{1;~@FZjNggp#xcLwX@dr^Yc4L#
zPDdnn`kGwxU^2zB==SCQ@kHvErzopYu!r#@xL<g^KlmVZ>#9<4Xi~J=OHZ->IE5qU
zqmF~R<+*Fi)$)6&-G^tDO~bVLtqgmd{{k3ijK@?3$A>=h9xqbiK7V7l4lZ*D?PT`y
zkF8g4N#}`|p6c?Na@R@<?k1#`u+f`gx6#5#q$wJ0W=rJ~&{y=OB@9QTGI*kEvFs}G
zwnzGZ&z&h0PrCnEjLFIfMw@9p#{kt1yt_MJ*pynbtExJm%MLsx{7DZb)NF*t%~d{^
z7#=$neeP%hYfr*8NLG-D8~lsR8L@+?7$ecV`F+_c(euMoWh~gTcRbe(>t0H;^BpLV
zQ7=)@PMJn@EMHQNAWnSIK|fnAb#`MU#zYe%A6<HqT)?ot*iI?Xk4D{-63P#5)!Eu6
z(@SVKZW`+JcxRYh#%hsuj<;|Ew9BS~>{0|Be^S=`%tngnR~E;2G<LM0c35UBJkm&$
zI}x~jxoj6E0jeMMk(ipYf{vBnIw_MJbenBbFMjy3^99aaK02U%BDJ!}DcJ1Uz*o9X
z-V@Q7l(^b0?CHB|9`Pj^RdC)z*a?vN0Fd}IOM=PTj`z+>vdsV0`NAQ^_(P~;USU8G
z+Jtr3$7ovh7KACc&Cjt8W+8kfsGDlDgxnFcGvXEu<HD4SF5EZU9bH2+EA+Osmo?+D
zqti1@zteT~hQi*5$j9v^ZV9&Ir)am<KIiffTe_b*5xw}EMsSv;Zcp|(UY!Ikh2|CY
z)llgoUee*glEuumdu@AwsI<fgYJT|5wncKzWgE-k0(4B#{X)zW&y^>loQ3TBC^7-r
zaR^&D))^<FgZI@YkG)&6V&-AjYL~n%sYaW}_;<WOQKRqbqZ<bNLN{NiAR9<tFskDS
z^=pd%Y~P;Q-xihnzC4DXQ<WcZi1v<%>3c@&#LVA*R5Y~saP`?jj|H~C$mp#$zMqL0
zgI+MlV>GWp>TV5ajPG2@#CS{>Isq3e5;-f63(E&)dUVrCrR#iy**>EY|GCLopH0li
zMhT&Ow7%eQ+WPjny3APDU!Z^Ne!KSE9BrmkgcSLpp6@Hiy?cdSR#)B;k?1T@lb0_e
z!Eqn)G94*JE2?_m1j^*l97?1_x~t6Ew6}Egq}CJR*C80qPZMLczwBn>EoZ|VHiqyb
z@q}gsD8lU`C4$yiV~%dQYS&wmwrn-n6I~u|KW5cjqd3tw(kkw#vG?^6u5^;3a5p~(
znjn2G#z5*)`CLj+WLv6*$n{K`xLq%vT-U?tdSU%c?tj`ULY;@Kvs@**drh$qo~%!Q
zQdx*0&sAG&Q^yszuuGhwQ@X_>l_$N+TPqwhD{mqz>~QIeM>p-a=~*5@miGJ?1qsn-
zJT%j*Yf-Nt?%|Equ>>Md*sNqxUUw~=VKC*y={zMzl~auIupfx`z<dZJZ7<DY>PiAA
z_79FIN^G4T;qXzO`O!!To^=FAlN%pA10FX)>JUSXxQiu;gxbZ;`+>pe&}_OsS(Q&L
zf<}#wbnN@Uy=rEYfwoODPQJsCb|~&C#wTd!rmK}JV{r}IE5H9r2Uggta`dqUI6O<b
z(t1^wjR$6}){Xke;?9d<ClWXb2Z5hWrijWfE8$cWrmt=wgQn4CvX&e{v<KI@{ECdv
z2_X+u(ac}}_7t`GIQ?B#(mQpg0w<S*BthEhh}61*k+ryp)ae$tE`7+wbtDc~2CjT)
zfUW=1Wa5nrHqw3>S5e4yc_OP`0@b}!*MG2iT$i1rJ2Gz73ddZrM_KxDtId5#ck6qT
zD_}sc64K261w~4c@>C+w?K$-z86jI~Oyy%7RA*x7vMi;DoV2FGIcjsXH=JCBRD0sy
z#r4w;yi+j0r;M6j8T?UtLdt;$Kg>{OmiQ~*XkSQhURk0MtNelbqpo2t63Gb|&B4ZQ
zN$btA+WxP&bv2-S`qX;hW@)LqAJs)}2_#<9s|hc1uAXfG(S*x72UXpNGGwHH>>M-B
zp0cMERwAe-<k^!PyYZXRo^Zba1*=PG9rZke_#R2pt@*tOlzqI&;I_`E6kSSWI)!Dk
zfBsNWa*^9ZX|T+I+vk#ykII0ko9A`J;6&4U<AnDF`aYbAw{1FVkuJ;lwaH$)V+>Jz
z#vDK6VOm~#!KbuuvG?_r%XFv@CrSIoDPOuI9nzHBC<3~Wwo}P*ZV^u|TB@(pz8${)
zsg@mAK4B%R3jScA{Ue39`%-S~PMprx8#U>7cPH~xRFbC`G?hC$(1RM5x^tI&T(=`i
ztSXuj?f;+3tPGRM6DT1Wf#{5?pBi!x)sifDN~<G)S17`kf$Y8MU`>J6I`l09At+F?
zz^s3tL_G1*2w%~LLPJ~}Z<qs57EME!(s;A&o)rs_3qO>$|Hv+Ygd<F+s$fP@&Mn(*
zvCZ7dAqm>0%36@TrvEK-{a43=9P-!;z67@hFLoLa;hXA^6ZhND%`%MOKYB&&Te`Zj
z+B!XRo*DW|TNswW2a?p^2V7MyKOD6~l_}lbQ7<)i1XB^nV$YJcZ_{6I*EqSr45r3p
zzeAxb6S9u<H;H|ofoH!QKPFf=L{vD+e^vbGxG3GC?7<Uwi|(>9#=L*+i=ZHS-y-7;
z?og$>-;vgptWL8Jpg(y_&90j}d<LX7n;3${O4~6h!|wb&Fmq2^t>^<PrH_N(d*&LK
z2xuq8@C<s;F`bY6Q}FKlHaP)0mhpUuypDikv6{{`b^YFssuAaqu1%EQB>HRv89m|r
zzUanebtdHcAloj{>W)d71zyQ4A`)%BNunXTn&W@DGx}||Y8ylZ&s$|d11||A+$pY#
z-}d9L)WCJ>4RxxX$NJl=Sk>NjJ2<zI=wSc0uiJrAabV%O?+On#b2(Z*YBb>47-=;-
zuqvxC&9_;T?OXlJ(5v;12$|09Q>6^Hd+qWgBsQV1W@xCJ)<KeX({WYmS*D2f;O8C6
zu68?|`!{Oe;MQ6airb+ih1U6SUJ2+nm~93ABrgD9CtH(=+C-n#93BfLA!rw;rlU5l
z@->Hn5^Mn<7FX~>vE{fPls9Mmti_4y(m*|&$6+)$4erDN<)^ewht1aF)^fe)3QfB=
z8;6F|cK#dm6KWkY;ZEM{g_p&~>k&=Py=q5?K9TEMM~J&GehgN2_8umr@@A059aWtq
zJTnqHpk?i}*_v(KQbZ+}#>FA>Go}{Q^fI<a26hTg^LM^w^NqQ0RG=hfn5@=CvyUZ_
zRa%j>JB*$3E7J?vG|>KgN9CiQFv2piHn6~QM~1&6+xKC}iCllxM1Mj%IlS9_GhoI>
z-i;M-yLeatY5!(0*o%3&@jw-BI=o>Xw6K>3>j$HS(|EttDtOd3o+-AbtVX%2AtYdq
z=_d(mzHK3XA#*%Mi%L1iq3MMj-s3_`!XJvyirFOIrCzN{?i;6YU&Bgc)L=&yw5%u2
zZC+al@a%8M|6gQBP3TxP%z}85J)78x<5l@H<fmofBH=w~@Bta=#=E@L?sFhr4P=PB
zW;a?E3XAmWI4d(6Y1n*l<=zv6`%<sIJuKf|wlssJh$mir#+mB!wpAv77ZF?a)D&DA
O0gMdHuMw|0NBsvY@&N<@

diff --git a/docs/user-guide.md b/docs/user-guide.md
index 1f3bd784..0729a0cc 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -469,11 +469,8 @@ Octop 支持两个方向的 ACP 集成：
 - `octop update`（若通过一键安装）；或下载 GitHub Release 中的 Python 制品 / 从 FreeOS 源码重新安装后重启服务。
 
 **Q：如何加入客户企业微信服务群？**
-- 请扫描下方二维码加入：
-
-![客户企业微信服务群二维码](assets/qrcode.png)
-
-> 二维码有效期至 **2026-08-03**，过期后请联系管理员更新。
+- 客户企业微信群二维码已于 **2026-08-03** 失效，指南不再附带该图。
+- 请改用 [GitHub Discussions](https://github.com/XYAIStudio/FreeOS/discussions)，或加入 [Discord](https://discord.gg/jPas5J8Ua)。
 
 ---
 
@@ -497,4 +494,4 @@ Octop 支持两个方向的 ACP 集成：
 | 图 5.6 | 5.8 设置 | `use-06-settings.png` | ✅ 已就位 | 应用设置页面 |
 | 图 5.7 | 5.9 远程桌面 | `use-07-remote-desktop.png` | ✅ 已就位 | 远程桌面连接页 |
 | 图 5.8 | 5.9 浏览器 AI | `use-08-browser-ai.png` | ✅ 已就位 | 浏览器 AI+ 会话页 |
-| 图 7.1 | 七、常见问题 | `qrcode.png` | ✅ 已就位 | 客户企业微信服务群二维码（有效期至 2026-08-03） |
+| 图 7.1 | 七、常见问题 | `qrcode.png` | 已撤下 | 客户企业微信群码已于 2026-08-03 失效，不再随文档分发；请用 GitHub Discussions 或 Discord |
diff --git a/fnos/README.md b/fnos/README.md
index db66a974..19f9bec1 100644
--- a/fnos/README.md
+++ b/fnos/README.md
@@ -39,13 +39,13 @@ octop backup --help     # 备份/恢复
 
 | 版本 | 包名 | 体积 | 运行方式 | 依赖 |
 |------|------|------|----------|------|
-| **Docker 版** | `octop-<ver>.fpk` | ~8 KB | 飞牛自动从 GHCR 拉取 `ghcr.io/xyaistudio/freeos:latest` 镜像运行 | 宿主需有 Docker 运行时 |
-| **本地版（非 Docker）** | `octop-native-<ver>.fpk` | ~560 MB | 自带 Python 3.12 运行时 + 前端 + 核心依赖，原生运行在飞牛主机 | 无需 Docker |
+| **Docker 版** | `FreeOS-fnos-docker-<ver>.fpk` | ~8 KB | 飞牛自动从 GHCR 拉取 `ghcr.io/xyaistudio/freeos:latest` 镜像运行 | 宿主需有 Docker 运行时 |
+| **本地版（非 Docker）** | `FreeOS-fnos-native-<ver>.fpk` | ~560 MB | 自带 Python 3.12 运行时 + 前端 + 核心依赖，原生运行在飞牛主机 | 无需 Docker |
 
 - **Docker 版**实现为 FnOS `docker-project`：包体只含 `docker-compose.yaml` 与向导配置，运行时由飞牛从 GHCR 拉取镜像。镜像已内置 `desktop` 桌面控制与前端；Playwright Chromium 不预装，可在控制台按需安装。
 - **本地版**实现为 FnOS 原生 `app`：包内自带独立 Python 3.12 运行时、Octop 核心依赖、前端构建产物，以及 `data-share` 共享数据目录，直接以进程方式运行，不依赖 Docker。
 
-> 两款包随正式版一起挂在 **`v*` GitHub Release** 上（例如 [Releases](https://github.com/XYAIStudio/FreeOS/releases/latest)）：`Octop-fnos-docker-<ver>.fpk` / `Octop-fnos-native-<ver>.fpk`。
+> 两款包随正式版一起挂在 **`v*` GitHub Release** 上（例如 [Releases](https://github.com/XYAIStudio/FreeOS/releases/latest)）：`FreeOS-fnos-docker-<ver>.fpk` / `FreeOS-fnos-native-<ver>.fpk`。更早的 Release 资产可能仍使用 `Octop-fnos-*` 文件名。
 
 ## 目录结构
 
@@ -89,14 +89,14 @@ fnos/
 1. **发版链路**：`v*` tag → `release.yml`（PyPI + GitHub Release）与 `docker-publish.yml`（GHCR / Hub）并行；Release 成功后自动 `workflow_dispatch` 本工作流。
 2. **镜像复用**：不再重新 build 镜像；`ensure-image` 轮询等待 `ghcr.io/xyaistudio/freeos:{version}`（由 docker-publish 推送）。Docker 版 `.fpk` 仅打包 compose，运行时拉取该镜像。
 3. **Wheel 复用**：Native 版优先从同版本 GitHub Release（`v*`）下载 `octop-*.whl`；若缺失再回退源码构建前端 + wheel。
-4. **安装包构建**：`fpk` / `native` job 用 `scripts/build-fpk.sh` 打包，产物 `Octop-fnos-docker-<ver>.fpk` / `Octop-fnos-native-<ver>.fpk` 挂到同一个 `v*` GitHub Release（与 wheel、桌面包并列）。
+4. **安装包构建**：`fpk` / `native` job 用 `scripts/build-fpk.sh` 打包，产物 `FreeOS-fnos-docker-<ver>.fpk` / `FreeOS-fnos-native-<ver>.fpk` 挂到同一个 `v*` GitHub Release（与 wheel、桌面包并列）。
 
 ## 本地构建 .fpk（无需 Docker）
 
 ```bash
-bash scripts/build-fpk.sh            # 仅 Docker 版  → dist/Octop-fnos-docker-<version>.fpk
+bash scripts/build-fpk.sh            # 仅 Docker 版  → dist/FreeOS-fnos-docker-<version>.fpk
 bash scripts/build-fpk.sh docker     # 仅 Docker 版
-bash scripts/build-fpk.sh native     # 仅本地版      → dist/Octop-fnos-native-<version>.fpk
+bash scripts/build-fpk.sh native     # 仅本地版      → dist/FreeOS-fnos-native-<version>.fpk
 ```
 
 `.fpk` 为「双层 gzip tar」：外层含 `app.tgz / cmd / config / wizard / ICON.PNG / ICON_256.PNG / LICENSE / manifest`，内层 `app.tgz` 含 `app/` 内容。
@@ -104,8 +104,8 @@ bash scripts/build-fpk.sh native     # 仅本地版      → dist/Octop-fnos-nat
 ## 在飞牛上安装
 
 1. 飞牛「应用中心 → 设置 → 手动安装应用」选择对应 `.fpk`：
-   - 想用 Docker 跑、主机已装 Docker → 选 `Octop-fnos-docker-<version>.fpk`
-   - 不想依赖 Docker、希望自带运行时原生运行 → 选 `Octop-fnos-native-<version>.fpk`
+   - 想用 Docker 跑、主机已装 Docker → 选 `FreeOS-fnos-docker-<version>.fpk`
+   - 不想依赖 Docker、希望自带运行时原生运行 → 选 `FreeOS-fnos-native-<version>.fpk`
 2. 安装向导中设置管理员账号/密码、日志级别、LLM 密钥（可选）。
 3. 安装完成后桌面出现「Octop AI 助手」图标，浏览器打开 `http://<设备IP>:8088`。
 4. Docker 版镜像首次会从 GHCR `ghcr.io/xyaistudio/freeos:latest` 拉取；请确保该包为 Public（首次推送后可在 GitHub Packages 设置）。本地版无需联网拉镜像。Playwright Chromium 不预装，需要远程浏览器时在控制台按需安装。
diff --git a/modules/openxyos/package-lock.json b/modules/openxyos/package-lock.json
index 19d726a1..f2561f3b 100644
--- a/modules/openxyos/package-lock.json
+++ b/modules/openxyos/package-lock.json
@@ -70,7 +70,7 @@
         "tsx": "^4.19.0",
         "typescript": "^5.6.0",
         "typescript-eslint": "^8.64.0",
-        "vite": "^6.0.0",
+        "vite": "^6.4.5",
         "vite-plugin-pwa": "^1.3.0",
         "zustand": "^5.0.0"
       },
@@ -8280,9 +8280,9 @@
       "license": "ISC"
     },
     "node_modules/follow-redirects": {
-      "version": "1.16.0",
-      "resolved": "https://registry.npmmirror.com/follow-redirects/-/follow-redirects-1.16.0.tgz",
-      "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==",
+      "version": "1.16.1",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz",
+      "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==",
       "funding": [
         {
           "type": "individual",
@@ -13323,9 +13323,9 @@
       }
     },
     "node_modules/vite": {
-      "version": "6.4.3",
-      "resolved": "https://registry.npmmirror.com/vite/-/vite-6.4.3.tgz",
-      "integrity": "sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==",
+      "version": "6.4.5",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-6.4.5.tgz",
+      "integrity": "sha512-4enwjFfi4IwtEh0w+jPzpLVOFQiPHmmzPxcHXQOyEur47o6u0jE573DmGpjA+7irXoMLYRZD5ZaFUEneS3abPg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 6f9d77ba..b515bd71 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -100,7 +100,7 @@
     "tsx": "^4.19.0",
     "typescript": "^5.6.0",
     "typescript-eslint": "^8.64.0",
-    "vite": "^6.0.0",
+    "vite": "^6.4.5",
     "vite-plugin-pwa": "^1.3.0",
     "zustand": "^5.0.0"
   },
@@ -110,6 +110,8 @@
   },
   "overrides": {
     "qs": "6.16.0",
+    "follow-redirects": "1.16.1",
+    "vite": "^6.4.5",
     "katex": "^0.18.2",
     "exceljs": {
       "uuid": "^11.1.1"
diff --git a/scripts/build-fpk.sh b/scripts/build-fpk.sh
index c827e0b0..dc1846e5 100644
--- a/scripts/build-fpk.sh
+++ b/scripts/build-fpk.sh
@@ -1,18 +1,18 @@
 #!/usr/bin/env bash
 # =============================================================================
-# 构建 Octop 飞牛 FnOS 安装包 (.fpk)
+# 构建 FreeOS 飞牛 FnOS 安装包 (.fpk)
 #
 # 直接使用官方 fnpack CLI 打包（fnpack 在生成 .fpk 前会校验 manifest / cmd /
 # config / wizard / app 等结构，确保产物与飞牛 fnOS 安装校验完全一致）。
 #
 # 用法（在仓库根目录执行):
-#   bash scripts/build-fpk.sh docker      # 构建 Docker 版  -> dist/Octop-fnos-docker-<ver>.fpk
-#   bash scripts/build-fpk.sh native      # 构建本地版(非Docker) -> dist/Octop-fnos-native-<ver>.fpk
+#   bash scripts/build-fpk.sh docker      # 构建 Docker 版  -> dist/FreeOS-fnos-docker-<ver>.fpk
+#   bash scripts/build-fpk.sh native      # 构建本地版(非Docker) -> dist/FreeOS-fnos-native-<ver>.fpk
 #   bash scripts/build-fpk.sh             # 两个都构建
 #
 # 环境变量：
-#   FPK_NAME_PREFIX  输出文件名前缀，默认 "octop"
-#                    例如 FPK_NAME_PREFIX=Octop-fnos 会生成 Octop-fnos-docker-<ver>.fpk / Octop-fnos-native-<ver>.fpk
+#   FPK_NAME_PREFIX  输出文件名前缀，默认 "FreeOS-fnos"
+#                    生成 FreeOS-fnos-docker-<ver>.fpk / FreeOS-fnos-native-<ver>.fpk
 #   FPK_ITER         迭代号，默认空
 #                    例如 FPK_ITER=01 会生成 ...-<ver>-01.fpk（通常不需要，按版本号发布）
 #
@@ -34,10 +34,10 @@ trap cleanup EXIT
 
 VER="$(grep -m1 '^version' "$ROOT/pyproject.toml" | sed -E 's/.*"([0-9][0-9.]*[0-9])".*/\1/')"
 [ -n "$VER" ] || { echo "无法从 pyproject.toml 解析版本"; exit 1; }
-echo "[build-fpk] Octop 版本: $VER"
+echo "[build-fpk] FreeOS 版本: $VER"
 
-# 输出文件名前缀与迭代号（由 CI 传入，实现 Octop-fnos-docker-0.9.30.fpk 风格）
-PREFIX="${FPK_NAME_PREFIX:-octop}"
+# 输出文件名前缀与迭代号（默认 FreeOS-fnos-docker-<ver>.fpk）
+PREFIX="${FPK_NAME_PREFIX:-FreeOS-fnos}"
 ITER_SUFFIX=""
 if [ -n "${FPK_ITER:-}" ]; then
   ITER_SUFFIX="-$FPK_ITER"
diff --git a/scripts/release_download_links.py b/scripts/release_download_links.py
index 00378222..98251e69 100644
--- a/scripts/release_download_links.py
+++ b/scripts/release_download_links.py
@@ -55,8 +55,8 @@ def render_download_section(raw_version: str) -> str:
     linux_arm = md_link("ARM64", tag, desktop_name("linux", "arm64", version, "tar.gz"))
     linux64_zip = md_link("64-bit", tag, portable_name("linux", "amd64", version))
     linux_arm_zip = md_link("ARM64", tag, portable_name("linux", "arm64", version))
-    fnos_docker = md_link("Docker", tag, f"Octop-fnos-docker-{version}.fpk")
-    fnos_native = md_link("Native", tag, f"Octop-fnos-native-{version}.fpk")
+    fnos_docker = md_link("Docker", tag, f"FreeOS-fnos-docker-{version}.fpk")
+    fnos_native = md_link("Native", tag, f"FreeOS-fnos-native-{version}.fpk")
     return "\n".join(
         [
             "",
diff --git a/tests/unit/test_release_download_links.py b/tests/unit/test_release_download_links.py
index 53ccc266..8dca01d6 100644
--- a/tests/unit/test_release_download_links.py
+++ b/tests/unit/test_release_download_links.py
@@ -38,7 +38,7 @@ def test_render_download_section_matches_github_asset_names() -> None:
     assert f"{base}/FreeOS-desktop-linux-arm64-0.9.31.tar.gz" in body
     assert f"{base}/FreeOS-portable-linux-amd64-0.9.31.zip" in body
     assert f"{base}/FreeOS-portable-linux-arm64-0.9.31.zip" in body
-    assert f"{base}/Octop-fnos-docker-0.9.31.fpk" in body
-    assert f"{base}/Octop-fnos-native-0.9.31.fpk" in body
+    assert f"{base}/FreeOS-fnos-docker-0.9.31.fpk" in body
+    assert f"{base}/FreeOS-fnos-native-0.9.31.fpk" in body
     assert "pip install" not in body
     assert "## Downloads" in body

From 65c5b5601c502096a503b65fcfddb59e9e05bd94 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Wed, 21 Oct 2026 22:06:15 +0000
Subject: [PATCH 08/39] fix(release): publish GitHub wheels as freeos-0.1.0

Set the distribution name to freeos so the wheel and sdist are freeos-0.1.0*.
The import package and the octop CLI alias stay. FnOS, portable packaging,
and release notes use the new filenames and say not to pip install octop.

User-facing paths in the docs this change touches name ~/.octop as the data
directory. FREEOS_HOME applies only when it is already set; this release
does not migrate that directory to ~/.freeos.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .github/workflows/fnos-build-fpk.yml      | 10 +++++-----
 .github/workflows/release.yml             |  5 +++--
 CHANGELOG.md                              |  6 +++---
 README.md                                 | 14 +++++--------
 README_CN.md                              |  4 ++--
 desktop/README.md                         | 24 +++++++++--------------
 desktop/portable/package.sh               | 10 +++++-----
 docs/architecture-integration.md          | 11 +++++------
 docs/user-guide.md                        |  2 +-
 fnos/README.md                            |  2 +-
 pyproject.toml                            |  4 ++--
 scripts/release_download_links.py         |  9 +++++++++
 src/octop/cli/repl/render.py              |  2 +-
 src/octop/infra/setup/self_update.py      |  4 ++--
 tests/unit/test_release_download_links.py |  5 ++++-
 uv.lock                                   |  2 +-
 16 files changed, 58 insertions(+), 56 deletions(-)

diff --git a/.github/workflows/fnos-build-fpk.yml b/.github/workflows/fnos-build-fpk.yml
index 7b14e4e1..21829870 100644
--- a/.github/workflows/fnos-build-fpk.yml
+++ b/.github/workflows/fnos-build-fpk.yml
@@ -131,8 +131,8 @@ jobs:
           set -euo pipefail
           mkdir -p dist
           REL_TAG="v${VER}"
-          if gh release download "$REL_TAG" --repo "${{ github.repository }}" -p 'octop-*.whl' -D dist 2>/tmp/wheel-dl.err; then
-            ls -lh dist/octop-*.whl
+          if gh release download "$REL_TAG" --repo "${{ github.repository }}" -p 'freeos-*.whl' -D dist 2>/tmp/wheel-dl.err; then
+            ls -lh dist/freeos-*.whl
             echo "source=release" >> "$GITHUB_OUTPUT"
             echo "Reusing wheel from GitHub Release ${REL_TAG}"
           else
@@ -169,7 +169,7 @@ jobs:
           python3 -m pip install --quiet build
           python3 -m build --wheel
           echo "=== built wheel ==="
-          ls -lh dist/octop-*.whl
+          ls -lh dist/freeos-*.whl
 
       - name: Install Octop core into app/site-packages (no Chromium, no preinstalled skills)
         id: install_core
@@ -185,7 +185,7 @@ jobs:
           {
             python3 -m pip install --quiet uv
             python3 -m uv pip install --python python3.12 \
-              --target "$SP" --no-cache "$(ls dist/octop-*.whl | head -1)"
+              --target "$SP" --no-cache "$(ls dist/freeos-*.whl | head -1)"
             rm -rf "$SP/mcp" "$SP"/mcp-*.dist-info \
                    "$SP/langchain_mcp_adapters" "$SP"/langchain_mcp_adapters-*.dist-info
             mkdir -p /tmp/octop-pinned
@@ -195,7 +195,7 @@ jobs:
               echo "Extracting pinned wheel: $whl"
               python3.12 -m zipfile -e "$whl" "$SP"
             done
-            cp dist/octop-*.whl "$SP/octop.whl"
+            cp dist/freeos-*.whl "$SP/freeos.whl"
             PYTHONPATH="$SP" python3.12 \
               -c "import octop, mcp, langchain_mcp_adapters; from octop.launch import run_foreground_blocking; print('octop', octop.__version__, '| mcp', mcp.__version__, '| lcma', langchain_mcp_adapters.__version__)"
           } 2>&1 | tee -a "$LOG"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 95ffa435..03c305ff 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -115,9 +115,10 @@ jobs:
               echo ""
               echo "## Install"
               echo ""
-              echo "Download the Python wheel from this GitHub Release and install it with:"
+              echo "**Do not** \`pip install octop\`. PyPI \`octop\` is upstream Octop, not this FreeOS release."
+              echo "Install the wheel attached to this GitHub Release:"
               echo '```bash'
-              echo "uv pip install ./octop-$version-py3-none-any.whl"
+              echo "uv pip install ./freeos-$version-py3-none-any.whl"
               echo '```'
             } > .release-notes.md
           fi
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 09aa70ac..83341437 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,12 +6,12 @@
 
 ## [0.1.0] - TBD
 
-FreeOS **0.1.0** is an independent semver baseline. It does not track or align with Octop 1.0.x. Python wheels stay on GitHub Releases; this release does not publish the colliding `octop` name to PyPI.
+FreeOS **0.1.0** is an independent semver baseline. It does not track or align with Octop 1.0.x. GitHub Release Python artifacts are `freeos-0.1.0*` (sdist and wheel). The import package stays `octop`. This release does not publish to PyPI, and `pip install octop` installs upstream Octop, not FreeOS. Older Release files may still be named `octop-0.0.10*`.
 
 ### Upgrade from 0.0.10
 
-- In-app update and a manual reinstall both keep `~/.freeos` (legacy `~/.octop` is still recognized): sessions, local models, knowledge bases, organization data, and `config.json`.
-- Desktop portable upgrades copy a SQLite backup under `$FREEOS_HOME/backups` before replacing the runtime, and checkpoint the WAL before the process restarts.
+- In-app update and a manual reinstall keep the data directory the process already uses. Today that directory is `~/.octop` (`OCTOP_HOME`): sessions, local models, knowledge bases, organization data, and `config.json`. `FREEOS_HOME` is honored only when it is already set. This release does not migrate `~/.octop` to `~/.freeos`.
+- Desktop portable upgrades copy a SQLite backup under the data directory's `backups/` before replacing the runtime, and checkpoint the WAL before the process restarts.
 - A `config.json` that cannot be parsed is left in place and reported. It is not rewritten as an empty file.
 - Roll back by installing the **v0.0.10** desktop package again, or restore a backup with `octop backup restore`. Do not point install scripts at PyPI `octop`; that package is upstream Octop, not this release. Use [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) or `scripts/install.sh` (add `--from-pypi` only when you explicitly want upstream Octop).
 
diff --git a/README.md b/README.md
index 237b8afa..369537f8 100644
--- a/README.md
+++ b/README.md
@@ -138,7 +138,9 @@ Operator detail: [docs/asset-loop.md](docs/asset-loop.md).
 3. 打开 **FreeOS**。第一次启动会解压内置运行环境（可能要一两分钟），然后直接进入可用会话，无需先登录。
 4. 保存、导出或发布到账号时再在本机完成注册或登录（更广的服务或授权不挡起步）。侧栏 **Organization** 当前默认走宿主内组织能力；桌面安装包附带的托管 Node + iframe（延续 0.0.3 过渡桥）、以及可选的完整 openXYOS Node 栈（`127.0.0.1:3780`，导出/同步/高级部署）都是 **过渡桥**，终态是把 openXYOS 迁入宿主。组织能力像工作室里另一间可独立布置的房间，与日常对话、助手协作同在一个 FreeOS，两种进入方式不捏成一种。
 
-数据目录默认是 `%USERPROFILE%\.freeos`（可用环境变量 `FREEOS_HOME` 改）。旧版 Octop 的 `~/.octop` 仍会被识别。卸载安装包会清空安装目录（默认为 `Program Files\FreeOS`）并删除快捷方式，但**不会**删除该用户数据目录；详见 [desktop/README.md](desktop/README.md#windows-uninstall)。
+**不要**执行 `pip install octop`。PyPI 上的 `octop` 是上游 Octop，不是 FreeOS。本仓库的 Python 制品在 GitHub Releases 上，文件名是 `freeos-<version>-py3-none-any.whl` 和 `freeos-<version>.tar.gz`（导入包仍是 `octop`）。桌面安装包仍是 `FreeOS-desktop-*`。
+
+数据目录是 `%USERPROFILE%\.octop`（也可用 `OCTOP_HOME` 指定）。已经设置的 `FREEOS_HOME` 会被沿用；这一版不会把 `~/.octop` 迁到 `~/.freeos`。卸载安装包会清空安装目录（默认为 `Program Files\FreeOS`）并删除快捷方式，但**不会**删除该用户数据目录；详见 [desktop/README.md](desktop/README.md#windows-uninstall)。
 
 安装包由 CI 工作流 **FreeOS Desktop Package**（文件名仍是 `.github/workflows/octop-desktop.yml`，给现有发版脚本用）在 Windows runner 上打出来。本仓库的云环境打不出 `.exe`；合并后由该 job 产出。
 
@@ -168,13 +170,7 @@ FreeOS prefers runtimes and files on this computer. Cloud vendors are optional.
 | Knowledge | Sidebar **Knowledge Bases**: mount a local folder first. Local ONNX embeddings are the default vector path. ima / WeKnora remain optional connectors. |
 | Detail | [User guide](docs/user-guide.md#四配置模型llm-供应商) · [Configuration](docs/configuration.md#local-models-and-knowledge-bases) · [Product contract](docs/product-contract.md#local-models-and-knowledge-bases) |
 
-Data directory precedence:
-
-1. `FREEOS_HOME`
-2. `OCTOP_HOME` (legacy)
-3. existing `~/.freeos`
-4. existing `~/.octop`
-5. new installs → `~/.freeos`
+Data directory: `~/.octop` (`OCTOP_HOME`). If `FREEOS_HOME` is already set, that path is used. This release does not migrate `~/.octop` to `~/.freeos`.
 
 ### Rebuild the dashboard (optional)
 
@@ -239,7 +235,7 @@ Inbound import compiles the blueprint **and** registers a FreeOS agent (`org-pol
 
 ## Host platform features (from Octop)
 
-Unchanged in this fork: multi-user JWT, multi-agent chat, expert library, connectors, ACP, knowledge bases, bundled plugins, cron, terminal/browser/desktop surfaces. The **Windows desktop installer** is branded **FreeOS** and defaults to `~/.freeos` / `FREEOS_HOME`. The Python package, `octop` CLI alias, `OCTOP_*` env vars, and `octop.db` stay for compatibility.
+Unchanged in this fork: multi-user JWT, multi-agent chat, expert library, connectors, ACP, knowledge bases, bundled plugins, cron, terminal/browser/desktop surfaces. The **Windows desktop installer** is branded **FreeOS**. User data stays in `~/.octop` (`OCTOP_HOME`); `FREEOS_HOME` is honored only when it is already set. The import package, `octop` CLI alias, `OCTOP_*` env vars, and `octop.db` stay for compatibility. GitHub Release wheels are named `freeos-<version>*`.
 
 Longer host docs: [docs/user-guide.md](docs/user-guide.md), [docs/configuration.md](docs/configuration.md), [docs/architecture.md](docs/architecture.md), [README_CN.md](README_CN.md).
 
diff --git a/README_CN.md b/README_CN.md
index a708ad06..c02c6de7 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -247,7 +247,7 @@ curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install
 
 桌面客户端说明见 [desktop/README.md](desktop/README.md)，飞牛打包指南见 [fnos/README.md](fnos/README.md)。独立商业组织站见 [docs/org-export.md](docs/org-export.md)（`freeos org export-standalone`，默认导出完整 openXYOS 源码树），不是默认安装器里的第二套 Node。
 
-**不要**从 PyPI 安装 `octop`。PyPI 上的 `octop` 是上游 Octop，不是 FreeOS 0.1.0。桌面安装包从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) 下载；终端安装用上面的安装脚本（默认拉取 FreeOS GitHub 源码）。只有在你明确要上游 Octop 时才加 `--from-pypi`。可选组件仍通过安装脚本传递，例如 `--extras browser`。
+**不要** `pip install octop`。PyPI 上的 `octop` 是上游 Octop，不是 FreeOS 0.1.0。本仓库发到 GitHub Releases 的 Python 制品是 `freeos-<version>-py3-none-any.whl` 和 `freeos-<version>.tar.gz`（导入包仍叫 `octop`）。更早的 Release 里可能还有 `octop-0.0.10*` 文件名，那是旧制品名，不是 PyPI 安装命令。桌面安装包从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) 下载；终端安装用上面的安装脚本（默认拉取 FreeOS GitHub 源码）。只有在你明确要上游 Octop 时才加 `--from-pypi`。可选组件仍通过安装脚本传递，例如 `--extras browser`。
 
 从源码用 uv 开发时：
 
@@ -335,7 +335,7 @@ docker run -d \
 | 远程一键安装 | Windows | `irm …/octop/install.ps1 \| iex` 或 `install.bat` |
 | 本地脚本 | macOS / Linux | `bash scripts/install.sh` |
 | 本地脚本 | Windows | `scripts\install.bat` 或 `install.ps1` |
-| GitHub Releases | 全平台 | 桌面安装包与 wheel。不要安装 PyPI 上的上游 `octop` |
+| GitHub Releases | 全平台 | 桌面安装包，以及 `freeos-<version>-py3-none-any.whl` / `freeos-<version>.tar.gz`。**不要** `pip install octop`（那是上游 PyPI 包） |
 | Docker | 全平台 | `docker/docker-compose.yml` |
 
 所有安装脚本均在 `~/.octop/venv` 创建隔离环境，并通过 `~/.octop/bin/octop` 包装 CLI，不会影响系统 Python。
diff --git a/desktop/README.md b/desktop/README.md
index 9513b7c1..03f26972 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -14,13 +14,7 @@ Windows end-user product: **download the NSIS `.exe` → install → open FreeOS
 
 ## Data directory
 
-Same precedence as the FreeOS CLI/server:
-
-1. `FREEOS_HOME`
-2. `OCTOP_HOME` (legacy)
-3. existing `~/.freeos`
-4. existing `~/.octop`
-5. new installs → `~/.freeos`
+Today the data directory is `~/.octop` (`OCTOP_HOME`). If `FREEOS_HOME` is already set, that path is used. This release does not migrate `~/.octop` to `~/.freeos`.
 
 - Green runtime extract → `{home}/portable/`
 - Organization data (in-host) → `{home}/tenants/`, `{home}/openxyos-mirror/`, `{home}/org-skills/`
@@ -48,7 +42,7 @@ The finish page offers **运行 FreeOS** / **Run FreeOS**, checked by
 default: leave it checked and click Finish to start FreeOS from `$INSTDIR`,
 or uncheck it and click Finish to close Setup without launching. Setup
 does **not** auto-launch or auto-close. The launch uses the unelevated
-explorer token so the first run does not stamp `%USERPROFILE%\.freeos`
+explorer token so the first run does not stamp `%USERPROFILE%\.octop`
 as High integrity. Silent (`/S`) installs stay headless and do not launch.
 Chinese installer strings are compiled with `makensis -INPUTCHARSET UTF8`
 from a UTF-8 BOM `project.nsi`.
@@ -60,12 +54,12 @@ Upgrade / reinstall (same version included) refreshes the extracted runtime:
    handed off to the old process.
 2. Setup writes `$INSTDIR\FREEOS_INSTALL_STAMP` (product version + tick
    count, unique per Setup run) and deletes
-   `%USERPROFILE%\.freeos\portable\FREEOS_STAMP` (also `FREEOS_HOME` /
-   `OCTOP_HOME` / leftover `~/.octop/portable` when those env vars are
-   set). User data (`octop.db`, settings, chats) is not deleted.
+   `%USERPROFILE%\.octop\portable\FREEOS_STAMP` (also `OCTOP_HOME`, or
+   `FREEOS_HOME` when that variable is already set). User data
+   (`octop.db`, settings, chats) is not deleted.
 3. The next launch compares the install stamp and the zip `FREEOS_STAMP`.
    Either mismatch re-extracts `packages/` and the embedded dashboard from
-   the new installer into `~/.freeos/portable`, then copies the install
+   the new installer into `~/.octop/portable`, then copies the install
    stamp into that tree. Later opens skip the extract until the next
    Setup run. If renaming the live `portable` directory to
    `portable.previous` fails because Windows still has the folder open
@@ -114,7 +108,7 @@ the sidecar-era `v0.0.1` Windows builds.
 
 **Keeps**
 
-- `%USERPROFILE%\.freeos` (or `FREEOS_HOME` / `OCTOP_HOME` / legacy `~/.octop`):
+- `%USERPROFILE%\.octop` (or `OCTOP_HOME`; `FREEOS_HOME` only when already set):
   workspaces, `octop.db`, memories, settings, logs, and the extracted portable
   runtime under `{home}/portable/`
 - Documented exceptions **inside** the install directory, if you created them:
@@ -202,7 +196,7 @@ cd desktop/src
 OCTOP_DESKTOP_URL=http://127.0.0.1:8088 wails3 dev
 ```
 
-Without `OCTOP_DESKTOP_URL`, first launch uses `~/.freeos/portable/` if valid
+Without `OCTOP_DESKTOP_URL`, first launch uses `~/.octop/portable/` if valid
 **and** it already matches this install (same `FREEOS_STAMP` / install stamp);
 otherwise it extracts the matching zip shipped with the desktop package
 (embedded in the Windows and Linux binaries, under `Contents/Resources` on
@@ -226,7 +220,7 @@ GitHub Release names follow `FreeOS-<kind>-<os>-<arch>-<version>.<ext>`:
   into `Program Files\FreeOS` and creates Start Menu + desktop shortcuts),
   `.tar.gz` (Linux)
 - Green runtime zip: `FreeOS-portable-<plat>-<version>.zip`
-- PyPI wheels stay `octop-<version>-py3-none-any.whl` (PEP 427)
+- Python wheels on GitHub Releases are `freeos-<version>-py3-none-any.whl` (import package remains `octop`). Do not `pip install octop`; PyPI `octop` is upstream Octop. This repo does not publish that name.
 
 Older `Octop-portable-*` / `Octop-<plat>.zip` files beside the binary are still
 accepted when extracting a local/dev build. They are **not** published anymore.
diff --git a/desktop/portable/package.sh b/desktop/portable/package.sh
index e8eeb411..067b4011 100755
--- a/desktop/portable/package.sh
+++ b/desktop/portable/package.sh
@@ -31,8 +31,8 @@ require_uv
 build_octop_wheel() {
   local wheel_dir="$1"
   mkdir -p "$wheel_dir"
-  # Drop previous local octop wheels so we pick the fresh build.
-  find "$wheel_dir" -maxdepth 1 -type f -name 'octop-*.whl' -delete 2>/dev/null || true
+  # Drop previous local wheels so we pick the fresh build.
+  find "$wheel_dir" -maxdepth 1 -type f \( -name 'octop-*.whl' -o -name 'freeos-*.whl' \) -delete 2>/dev/null || true
   if [[ ! -f "${REPO_ROOT}/src/octop/dashboard/index.html" ]]; then
     echo "[package] dashboard not built (src/octop/dashboard/index.html missing)." >&2
     echo "  Run: make build-frontend" >&2
@@ -42,12 +42,12 @@ build_octop_wheel() {
     echo "[package] dashboard boot splash is missing xyai-mark.png — refuse to ship Octop-branded UI." >&2
     exit 1
   fi
-  echo "[package] building octop wheel → ${wheel_dir}" >&2
+  echo "[package] building freeos wheel → ${wheel_dir}" >&2
   uv build --wheel --out-dir "$wheel_dir" "$REPO_ROOT" >&2
   local whl
-  whl="$(ls -1 "${wheel_dir}"/octop-*.whl 2>/dev/null | sort | tail -1 || true)"
+  whl="$(ls -1 "${wheel_dir}"/freeos-*.whl 2>/dev/null | sort | tail -1 || true)"
   if [[ -z "$whl" ]]; then
-    echo "[package] failed to build octop-*.whl" >&2
+    echo "[package] failed to build freeos-*.whl" >&2
     exit 1
   fi
   # stdout: wheel path only (captured by caller)
diff --git a/docs/architecture-integration.md b/docs/architecture-integration.md
index cf2dc5ba..9e8b098a 100644
--- a/docs/architecture-integration.md
+++ b/docs/architecture-integration.md
@@ -100,7 +100,7 @@ and applies asset packs onto openXYOS-shaped **in-host** surfaces
                  │  in-host org storage + xyos-governance-mcp   │
                  └───────┬───────────────────┬─────────────────┘
                          │ optional HTTP     │ durable pause
-                         │ if opted in       │ ~/.freeos/governance/
+                         │ if opted in       │ ~/.octop/governance/
                  ┌───────▼─────────┐   ┌─────▼─────────────────┐
   Optional       │ openXYOS :3780  │   │ Pause + audit JSONL   │
   Node sidecar   │ export / sync   │   │ Human must approve    │
@@ -128,7 +128,7 @@ Agent → tool (outbound / delete / pay / prod)
      → optional POST {sidecar}/api/governance/validate
      → no matching allow rule → DEFAULT DENY
      → write audit.jsonl (and sidecar log when reachable)
-     → create durable pause  ~/.freeos/governance/pauses/<id>.json
+     → create durable pause  ~/.octop/governance/pauses/<id>.json
      → return execute=false  (caller MUST stop)
 Human → FreeOS/Octop IM /approve  or  `freeos org governance approve <id>`
      → pause status=approved
@@ -287,9 +287,8 @@ The Phase A work sits on the existing FreeOS bootstrap:
 - Octop history as the host (`src/octop/`, `dashboard/`)
 - openXYOS vendored at `modules/openxyos/` (subtree `@ 1bdba35f`)
 - Bundled plugin `org-os`, BFF `/api/org-module`, CLI `freeos org`
-- PathLayout: `FREEOS_HOME` > `OCTOP_HOME` > existing `~/.freeos` >
-  existing `~/.octop` > new `~/.freeos`
-- Package name stays `octop`; CLI alias `freeos`
+- Data directory today: `~/.octop` (`OCTOP_HOME`). `FREEOS_HOME` is honored when already set. This release does not migrate `~/.octop` to `~/.freeos`.
+- Distribution name is `freeos` (GitHub Release wheels). Imports stay `octop.*`. CLI aliases: `freeos` and `octop`.
 
 ### Capability map (host + sidecar)
 
@@ -348,7 +347,7 @@ without `includes_org` leave those live directories untouched on restore.
 
 ## Remaining `octop` identifiers (intentional)
 
-- Python package / imports: `octop.*` (`pyproject.toml` `name = "octop"`)
+- Python imports stay `octop.*`. The distribution name in `pyproject.toml` is `freeos` (GitHub Release wheels `freeos-<version>*`, not PyPI)
 - CLI: `octop` still works; `freeos` is the same entry point
 - Env: `OCTOP_*` still honored; prefer `FREEOS_*`
 - SQLite filename: `octop.db`
diff --git a/docs/user-guide.md b/docs/user-guide.md
index 0729a0cc..96b6cf98 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -1,6 +1,6 @@
 # Octop 用户帮助文档
 
-> **Historical vs Current.** 本文沿自 Octop 宿主操作说明（安装、向导、模型、对话）。**Current：** 产品是 [FreeOS](../README.zh-CN.md)；权威意图见 [产品契约](product-contract.zh-CN.md)。数据目录优先 `FREEOS_HOME` / `~/.freeos`（仍识别 `~/.octop`）。先在本机安顿好；组织能力像工作室里另一间可独立布置的房间。
+> **Historical vs Current.** 本文沿自 Octop 宿主操作说明（安装、向导、模型、对话）。**Current：** 产品是 [FreeOS](../README.zh-CN.md)；权威意图见 [产品契约](product-contract.zh-CN.md)。数据目录今天是 `~/.octop`（`OCTOP_HOME`）。已经设置的 `FREEOS_HOME` 会沿用；这一版不会把 `~/.octop` 迁到 `~/.freeos`。先在本机安顿好；组织能力像工作室里另一间可独立布置的房间。
 
 > 本帮助文档面向最终用户，介绍 **安装 → 设置向导 → 配置模型 → 基本使用** 的完整流程。
 > 所有运行时数据默认存放在 `~/.octop/`（可通过 `OCTOP_HOME` 覆盖）。
diff --git a/fnos/README.md b/fnos/README.md
index 19f9bec1..b8483e5a 100644
--- a/fnos/README.md
+++ b/fnos/README.md
@@ -88,7 +88,7 @@ fnos/
 
 1. **发版链路**：`v*` tag → `release.yml`（PyPI + GitHub Release）与 `docker-publish.yml`（GHCR / Hub）并行；Release 成功后自动 `workflow_dispatch` 本工作流。
 2. **镜像复用**：不再重新 build 镜像；`ensure-image` 轮询等待 `ghcr.io/xyaistudio/freeos:{version}`（由 docker-publish 推送）。Docker 版 `.fpk` 仅打包 compose，运行时拉取该镜像。
-3. **Wheel 复用**：Native 版优先从同版本 GitHub Release（`v*`）下载 `octop-*.whl`；若缺失再回退源码构建前端 + wheel。
+3. **Wheel 复用**：Native 版优先从同版本 GitHub Release（`v*`）下载 `freeos-*.whl`；若缺失再回退源码构建前端 + wheel。更早的 Release 上可能仍是 `octop-*.whl`，那不是 PyPI 上的上游包。
 4. **安装包构建**：`fpk` / `native` job 用 `scripts/build-fpk.sh` 打包，产物 `FreeOS-fnos-docker-<ver>.fpk` / `FreeOS-fnos-native-<ver>.fpk` 挂到同一个 `v*` GitHub Release（与 wheel、桌面包并列）。
 
 ## 本地构建 .fpk（无需 Docker）
diff --git a/pyproject.toml b/pyproject.toml
index 0b9c75a9..37553b83 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -3,9 +3,9 @@ requires = ["hatchling>=1.18"]
 build-backend = "hatchling.build"
 
 [project]
-name = "octop"
+name = "freeos"
 version = "0.1.0"
-description = "FreeOS — self-hosted multi-user multi-agent assistant with an optional organization OS module (Octop-compatible package name)"
+description = "FreeOS — self-hosted multi-user multi-agent assistant. GitHub Release artifacts are named freeos-*; the import package stays octop. Not published to PyPI."
 readme = "README.md"
 license = { text = "MIT" }
 requires-python = ">=3.12"
diff --git a/scripts/release_download_links.py b/scripts/release_download_links.py
index 98251e69..38c7954a 100644
--- a/scripts/release_download_links.py
+++ b/scripts/release_download_links.py
@@ -89,6 +89,15 @@ def render_download_section(raw_version: str) -> str:
             "### fnOS NAS",
             f"- {fnos_docker} | {fnos_native}",
             "",
+            "### Python wheel and sdist",
+            "",
+            "**Do not** `pip install octop`. PyPI `octop` is upstream Octop, not FreeOS.",
+            "These GitHub Release files are the FreeOS distribution"
+            " (import package remains `octop`):",
+            "",
+            f"- {md_link('Wheel', tag, f'freeos-{version}-py3-none-any.whl')}",
+            f"- {md_link('sdist', tag, f'freeos-{version}.tar.gz')}",
+            "",
         ]
     )
 
diff --git a/src/octop/cli/repl/render.py b/src/octop/cli/repl/render.py
index 34d7d246..55155f1f 100644
--- a/src/octop/cli/repl/render.py
+++ b/src/octop/cli/repl/render.py
@@ -288,7 +288,7 @@ def print_welcome(*, agent_id: str, model: str, session_key: str, thread_id: str
 
     console = Console()
     try:
-        ver = pkg_version("octop")
+        ver = pkg_version("freeos")
     except Exception:
         ver = "unknown"
     console.print(f"  [bold green]Octop[/] [dim]v{ver}[/] — interactive chat")
diff --git a/src/octop/infra/setup/self_update.py b/src/octop/infra/setup/self_update.py
index 695b82ba..5aed9f1e 100644
--- a/src/octop/infra/setup/self_update.py
+++ b/src/octop/infra/setup/self_update.py
@@ -29,7 +29,7 @@
 
 logger = logging.getLogger(__name__)
 
-_PACKAGE_NAME = "octop"
+_PACKAGE_NAME = "freeos"
 _GREEN_PACKAGES_ENV = "OCTOP_GREEN_PACKAGES"
 PENDING_PORTABLE_NAME = "pending-portable.zip"
 PENDING_META_NAME = "pending.json"
@@ -429,7 +429,7 @@ def get_version_in_dir(python_exe: str, target: str) -> str | None:
     try:
         code = (
             "import sys; sys.path.insert(0, sys.argv[1]); "
-            "from importlib.metadata import version; print(version('octop'))"
+            "from importlib.metadata import version; print(version('freeos'))"
         )
         result = subprocess.run(
             [python_exe, "-c", code, target],
diff --git a/tests/unit/test_release_download_links.py b/tests/unit/test_release_download_links.py
index 8dca01d6..b52a9aa4 100644
--- a/tests/unit/test_release_download_links.py
+++ b/tests/unit/test_release_download_links.py
@@ -40,5 +40,8 @@ def test_render_download_section_matches_github_asset_names() -> None:
     assert f"{base}/FreeOS-portable-linux-arm64-0.9.31.zip" in body
     assert f"{base}/FreeOS-fnos-docker-0.9.31.fpk" in body
     assert f"{base}/FreeOS-fnos-native-0.9.31.fpk" in body
-    assert "pip install" not in body
+    assert f"{base}/freeos-0.9.31-py3-none-any.whl" in body
+    assert f"{base}/freeos-0.9.31.tar.gz" in body
+    assert "octop-0.9.31" not in body
+    assert "Do not** `pip install octop`" in body
     assert "## Downloads" in body
diff --git a/uv.lock b/uv.lock
index 6b273614..0662c6ff 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2502,7 +2502,7 @@ wheels = [
 ]
 
 [[package]]
-name = "octop"
+name = "freeos"
 version = "0.1.0"
 source = { editable = "." }
 dependencies = [

From b2f696451a6998d30a6718db5947f6b208278eff Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Wed, 21 Oct 2026 22:13:44 +0000
Subject: [PATCH 09/39] fix(install): stop pointing users at the upstream Octop
 script

README and the user guide no longer recommend the Tencent COS
octop/install URLs. Those scripts install PyPI octop. Desktop packages
on GitHub Releases are the primary install path; CLI installs use this
repo's develop scripts.

New installs use ~/.freeos. install.sh, install.ps1, and install.bat
follow PathLayout: FREEOS_HOME, OCTOP_HOME, an existing ~/.freeos, an
existing ~/.octop when ~/.freeos is absent, otherwise ~/.freeos. The
desktop app still does not adopt a leftover ~/.octop.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 CHANGELOG.md                     |  2 +-
 README.md                        |  6 +--
 README_CN.md                     | 57 +++++++++++++-------------
 desktop/README.md                | 17 ++++----
 docs/architecture-integration.md |  6 +--
 docs/user-guide.html             | 26 ++++++------
 docs/user-guide.md               | 36 +++++++++--------
 scripts/README.md                | 17 +++++---
 scripts/install.bat              | 18 +++++++--
 scripts/install.ps1              | 50 ++++++++++++++++++++---
 scripts/install.sh               | 69 +++++++++++++++++++++++++++++---
 11 files changed, 208 insertions(+), 96 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 83341437..07eaa8eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,7 +10,7 @@ FreeOS **0.1.0** is an independent semver baseline. It does not track or align w
 
 ### Upgrade from 0.0.10
 
-- In-app update and a manual reinstall keep the data directory the process already uses. Today that directory is `~/.octop` (`OCTOP_HOME`): sessions, local models, knowledge bases, organization data, and `config.json`. `FREEOS_HOME` is honored only when it is already set. This release does not migrate `~/.octop` to `~/.freeos`.
+- In-app update and a manual reinstall keep the data directory the process already uses. New installs use `~/.freeos` (`FREEOS_HOME`, then `OCTOP_HOME`, then an existing `~/.freeos`; the desktop app does not adopt a leftover `~/.octop`). CLI installs keep an existing `~/.octop` when `~/.freeos` is not there yet. Sessions, local models, knowledge bases, organization data, and `config.json` stay in that directory. This release does not copy one tree into the other.
 - Desktop portable upgrades copy a SQLite backup under the data directory's `backups/` before replacing the runtime, and checkpoint the WAL before the process restarts.
 - A `config.json` that cannot be parsed is left in place and reported. It is not rewritten as an empty file.
 - Roll back by installing the **v0.0.10** desktop package again, or restore a backup with `octop backup restore`. Do not point install scripts at PyPI `octop`; that package is upstream Octop, not this release. Use [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) or `scripts/install.sh` (add `--from-pypi` only when you explicitly want upstream Octop).
diff --git a/README.md b/README.md
index 369537f8..09bbf633 100644
--- a/README.md
+++ b/README.md
@@ -140,7 +140,7 @@ Operator detail: [docs/asset-loop.md](docs/asset-loop.md).
 
 **不要**执行 `pip install octop`。PyPI 上的 `octop` 是上游 Octop，不是 FreeOS。本仓库的 Python 制品在 GitHub Releases 上，文件名是 `freeos-<version>-py3-none-any.whl` 和 `freeos-<version>.tar.gz`（导入包仍是 `octop`）。桌面安装包仍是 `FreeOS-desktop-*`。
 
-数据目录是 `%USERPROFILE%\.octop`（也可用 `OCTOP_HOME` 指定）。已经设置的 `FREEOS_HOME` 会被沿用；这一版不会把 `~/.octop` 迁到 `~/.freeos`。卸载安装包会清空安装目录（默认为 `Program Files\FreeOS`）并删除快捷方式，但**不会**删除该用户数据目录；详见 [desktop/README.md](desktop/README.md#windows-uninstall)。
+新安装的数据目录是 `%USERPROFILE%\.freeos`（`FREEOS_HOME` 优先于 `OCTOP_HOME`）。桌面端不会把残留的 `~/.octop` 当成家目录。命令行安装在还没有 `~/.freeos`、但已经有 `~/.octop` 时继续用旧目录。卸载安装包会清空安装目录（默认为 `Program Files\FreeOS`）并删除快捷方式，但**不会**删除该用户数据目录；详见 [desktop/README.md](desktop/README.md#windows-uninstall)。
 
 安装包由 CI 工作流 **FreeOS Desktop Package**（文件名仍是 `.github/workflows/octop-desktop.yml`，给现有发版脚本用）在 Windows runner 上打出来。本仓库的云环境打不出 `.exe`；合并后由该 job 产出。
 
@@ -170,7 +170,7 @@ FreeOS prefers runtimes and files on this computer. Cloud vendors are optional.
 | Knowledge | Sidebar **Knowledge Bases**: mount a local folder first. Local ONNX embeddings are the default vector path. ima / WeKnora remain optional connectors. |
 | Detail | [User guide](docs/user-guide.md#四配置模型llm-供应商) · [Configuration](docs/configuration.md#local-models-and-knowledge-bases) · [Product contract](docs/product-contract.md#local-models-and-knowledge-bases) |
 
-Data directory: `~/.octop` (`OCTOP_HOME`). If `FREEOS_HOME` is already set, that path is used. This release does not migrate `~/.octop` to `~/.freeos`.
+Data directory for a new install: `~/.freeos`. Order: `FREEOS_HOME`, `OCTOP_HOME`, an existing `~/.freeos`, an existing `~/.octop` (CLI only; the desktop app does not adopt a leftover `~/.octop`), otherwise `~/.freeos`. This release does not copy an old tree into the new one.
 
 ### Rebuild the dashboard (optional)
 
@@ -235,7 +235,7 @@ Inbound import compiles the blueprint **and** registers a FreeOS agent (`org-pol
 
 ## Host platform features (from Octop)
 
-Unchanged in this fork: multi-user JWT, multi-agent chat, expert library, connectors, ACP, knowledge bases, bundled plugins, cron, terminal/browser/desktop surfaces. The **Windows desktop installer** is branded **FreeOS**. User data stays in `~/.octop` (`OCTOP_HOME`); `FREEOS_HOME` is honored only when it is already set. The import package, `octop` CLI alias, `OCTOP_*` env vars, and `octop.db` stay for compatibility. GitHub Release wheels are named `freeos-<version>*`.
+Unchanged in this fork: multi-user JWT, multi-agent chat, expert library, connectors, ACP, knowledge bases, bundled plugins, cron, terminal/browser/desktop surfaces. The **Windows desktop installer** is branded **FreeOS** and stores new data in `~/.freeos`. The import package, `octop` CLI alias, `OCTOP_*` env vars, and `octop.db` stay for compatibility. GitHub Release wheels are named `freeos-<version>*`. Do not install from the Tencent COS `octop/install.*` URLs; those scripts install upstream PyPI `octop`.
 
 Longer host docs: [docs/user-guide.md](docs/user-guide.md), [docs/configuration.md](docs/configuration.md), [docs/architecture.md](docs/architecture.md), [README_CN.md](README_CN.md).
 
diff --git a/README_CN.md b/README_CN.md
index c02c6de7..d0706fe3 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -91,7 +91,7 @@ FreeOS 诞生于一个简单而清晰的目标：在 Octop 的自托管多智能
 | 💻 | **终端 AI+** | 浏览器内交互式 Shell，AI 辅助命令执行与排障 |
 | 🌐 | **浏览器 AI+** | 基于 Chromium 的无头浏览器会话，支持网页自动化、截图与远程操控 |
 | 🖥️ | **远程桌面** | 控制台内实时看屏与键鼠操控，跨 Linux / Windows / macOS；适合远程办公、GUI 软件操作，无图形 Linux 可一键搭建隔离桌面 |
-| 🏠 | **可自托管** | 一条 `octop run` 即可运行控制台、CLI、IM 通道与定时任务，数据存于 `~/.octop/` |
+| 🏠 | **可自托管** | 一条 `octop run` 即可运行控制台、CLI、IM 通道与定时任务，新安装的数据在 `~/.freeos/` |
 
 <details>
 <summary>🐾 你能用 Octop 做什么</summary>
@@ -128,7 +128,7 @@ Octop 基于一系列 Harness 工程实践构建——它将这些专注的运
 - **harness-memory** — 分层记忆与全文检索，让 Agent 的记忆随工作区一同迁移。
 - **harness-browser** — 基于 CDP 的浏览器自动化，支持持久化配置，用于网页类任务。
 
-Octop 不依赖外部消息队列或中间件，而是通过进程内的 `HarnessProcessor` 统一路由所有入口——Web UI、IM 与定时任务。最终呈现为一个可重启恢复的单进程：启动时整个状态都从控制面数据库重建（默认 `~/.octop/octop.db`，亦可配置 PostgreSQL）。
+Octop 不依赖外部消息队列或中间件，而是通过进程内的 `HarnessProcessor` 统一路由所有入口——Web UI、IM 与定时任务。最终呈现为一个可重启恢复的单进程：启动时整个状态都从控制面数据库重建（新安装默认 `~/.freeos/octop.db`；已有 `~/.octop` 且没有 `~/.freeos` 时仍用旧目录，亦可配置 PostgreSQL）。
 
 ## 🤔 功能特性
 
@@ -192,30 +192,32 @@ Octop 支持两个方向的 ACP 集成：
 ### 环境要求
 
 - **macOS / Linux / Windows**
-- 无需预先安装 Python — 安装脚本通过 [uv](https://docs.astral.sh/uv/) 在 `~/.octop/` 下创建隔离的 Python 3.12 虚拟环境
+- 无需预先安装 Python — 安装脚本通过 [uv](https://docs.astral.sh/uv/) 在 `~/.freeos/` 下创建隔离的 Python 3.12 虚拟环境（若还没有 `~/.freeos`、但已有 `~/.octop`，则继续用旧目录）
 - 现代多核 CPU，并预留数 GB 内存供进程与模型/Embedding 缓存使用；磁盘需容纳数据库、Agent 工作区与文档语料
 
 ### 1. 安装
 
-**macOS / Linux** — 一键安装（推荐）：
+**推荐：桌面安装包。** 从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases/latest) 下载 `FreeOS-desktop-*`，安装后打开 FreeOS。
+
+**命令行 / 源码**（安装本仓库脚本，不是上游 Octop）。打出版本标签之后，Release 说明会改成固定标签；当前用 `develop`：
 
 ```bash
-curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash
 ```
 
-**Windows（PowerShell）**：
-
 ```powershell
-irm https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.ps1 | iex
+irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.ps1 | iex
 ```
 
-**Windows（cmd）** — 下载后运行，或从已克隆的仓库执行：
-
 ```bat
-curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.bat -o install.bat
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.bat -o install.bat
 install.bat
 ```
 
+已克隆本仓库时：`bash scripts/install.sh`，或 Windows 的 `scripts\install.ps1` / `scripts\install.bat`。
+
+**不要**使用 `finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.sh`（以及同目录的 `.ps1` / `.bat`）。那是上游 Octop 脚本，默认安装 PyPI 上的 `octop`，不是 FreeOS。
+
 安装完成后，请打开**新终端**，或重新加载 shell 配置：
 
 ```bash
@@ -224,14 +226,11 @@ source ~/.zshrc   # Zsh
 source ~/.bashrc  # Bash
 ```
 
-安装脚本会将 `octop` 加入 PATH（`~/.octop/bin`）。可选附加组件：
+新安装会把 `octop` 加入 PATH（`~/.freeos/bin`）。可选附加组件：
 
 ```bash
-# 浏览器自动化（Playwright Chromium）
-curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.sh | bash -s -- --extras browser
-
-# 飞书通道支持
-curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.sh | bash -s -- --extras channels-feishu
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash -s -- --extras browser
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash -s -- --extras channels-feishu
 ```
 
 完整安装选项见 [scripts/README.md](scripts/README.md)（`--version`、`--from-source`、`--mirror` 及 Windows 参数）。
@@ -331,18 +330,16 @@ docker run -d \
 
 | 方式 | 平台 | 说明 |
 |------|------|------|
-| 远程一键安装 | macOS / Linux | `curl …/octop/install.sh \| bash` |
-| 远程一键安装 | Windows | `irm …/octop/install.ps1 \| iex` 或 `install.bat` |
-| 本地脚本 | macOS / Linux | `bash scripts/install.sh` |
-| 本地脚本 | Windows | `scripts\install.bat` 或 `install.ps1` |
-| GitHub Releases | 全平台 | 桌面安装包，以及 `freeos-<version>-py3-none-any.whl` / `freeos-<version>.tar.gz`。**不要** `pip install octop`（那是上游 PyPI 包） |
+| GitHub Releases（推荐） | 全平台 | `FreeOS-desktop-*` 桌面安装包，以及 `freeos-<version>-py3-none-any.whl` / `freeos-<version>.tar.gz`。**不要** `pip install octop`（那是上游 PyPI 包） |
+| 本仓库脚本 | macOS / Linux | `bash scripts/install.sh`，或 `raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh` |
+| 本仓库脚本 | Windows | `scripts\install.ps1` / `install.bat`，或同路径的 develop raw 脚本 |
 | Docker | 全平台 | `docker/docker-compose.yml` |
 
-所有安装脚本均在 `~/.octop/venv` 创建隔离环境，并通过 `~/.octop/bin/octop` 包装 CLI，不会影响系统 Python。
+新安装的数据目录是 `~/.freeos`：脚本在 `~/.freeos/venv` 创建隔离环境，并用 `~/.freeos/bin/octop` 包装 CLI，不会影响系统 Python。若还没有 `~/.freeos`、但已经有 `~/.octop`，脚本和 CLI 继续用旧目录。`FREEOS_HOME` 优先于 `OCTOP_HOME`。桌面端不会把残留的 `~/.octop` 当成家目录。
 
 ### 升级
 
-`octop update` 只替换 wheel / 二进制，你的 `~/.octop/` 数据库、工作区、密钥与 `config.json` 均会保留：
+`octop update` 只替换 wheel / 二进制。数据留在当前家目录（新安装是 `~/.freeos/`；已在使用的 `~/.octop/` 会保留）里的数据库、工作区、密钥与 `config.json`：
 
 ```bash
 octop update          # 获取并安装最新版 Octop，若已注册系统服务则自动重启
@@ -352,7 +349,7 @@ octop update          # 获取并安装最新版 Octop，若已注册系统服
 
 ### ⚙️ 配置
 
-所有运行时数据存放在 `~/.octop/`。可通过 CLI 管理，也可直接编辑文件。
+新安装的运行时数据在 `~/.freeos/`。已有 `~/.octop/` 且还没有 `~/.freeos/` 时，CLI 继续用旧目录。可通过 CLI 管理，也可直接编辑文件。
 
 ```bash
 # LLM 供应商与模型
@@ -393,7 +390,7 @@ octop user list
 
 | 命令 | 说明 |
 |------|------|
-| `octop init` | 初始化 `~/.octop/`（数据库、管理员、JWT 密钥） |
+| `octop init` | 初始化数据目录（新安装为 `~/.freeos/`；数据库、管理员、JWT 密钥） |
 | `octop run` | 前台启动 Octop |
 | `octop service start` | 安装并启动系统服务 |
 | `octop service stop` | 停止系统服务 |
@@ -406,7 +403,7 @@ octop user list
 | `octop skills` | 按 Agent 启用/禁用 Skill |
 | `octop plugin` | 安装并管理第三方插件 |
 | `octop backup` | 导出 / 恢复备份 |
-| `octop clean` | 清理 CLI 状态或清空 `~/.octop/` |
+| `octop clean` | 清理 CLI 状态或清空当前数据目录 |
 | `octop update` | 检查并安装更新 |
 
 完整参考：**[docs/cli.md](docs/cli.md)**。
@@ -434,7 +431,7 @@ octop user list
 ### 📁 数据目录
 
 ```
-~/.octop/                          ← 安装与数据根目录
+~/.freeos/                         ← 新安装的数据根目录（已有 ~/.octop 且没有 ~/.freeos 时仍用旧目录）
 ├── config.json                    # 进程配置（含可选 database 段）
 ├── octop.db                       # 默认 SQLite 控制面（用户、Agent、通道、定时任务 …）
 ├── secrets/                       # JWT 密钥、通道 Token
@@ -509,10 +506,10 @@ cd dashboard && npx tsc --noEmit
 
 ### 🔒 安全与隐私
 
-- **本地优先**：配置、对话、工作区与凭证均存储在 `~/.octop/`。
+- **本地优先**：配置、对话、工作区与凭证存在本机数据目录。新安装是 `~/.freeos/`；已有的 `~/.octop/` 在没有 `~/.freeos/` 时继续使用。
 - **多用户隔离**：JWT 认证，按用户隔离 Agent 与工作区。
 - **敏感信息脱敏与工具审批**：离开工作区前自动脱敏敏感数据；高风险工具或 Shell 命令需依据护栏规则显式审批。
-- **工具护栏**：可在 `~/.octop/security/tool_guard/` 编辑 Shell 命令规则。
+- **工具护栏**：可在数据目录的 `security/tool_guard/` 编辑 Shell 命令规则（新安装为 `~/.freeos/security/tool_guard/`）。
 - **无厂商锁定**：可自由切换 LLM 供应商、存储后端与 IM 通道。
 
 ### 🤝 参与贡献
diff --git a/desktop/README.md b/desktop/README.md
index 03f26972..48ede4e9 100644
--- a/desktop/README.md
+++ b/desktop/README.md
@@ -14,7 +14,7 @@ Windows end-user product: **download the NSIS `.exe` → install → open FreeOS
 
 ## Data directory
 
-Today the data directory is `~/.octop` (`OCTOP_HOME`). If `FREEOS_HOME` is already set, that path is used. This release does not migrate `~/.octop` to `~/.freeos`.
+New desktop installs use `~/.freeos`. Order: `FREEOS_HOME`, then `OCTOP_HOME`, then `~/.freeos`. A leftover `~/.octop` is not the desktop home. CLI installs still keep that legacy tree when `~/.freeos` does not exist yet. This release does not copy one tree into the other.
 
 - Green runtime extract → `{home}/portable/`
 - Organization data (in-host) → `{home}/tenants/`, `{home}/openxyos-mirror/`, `{home}/org-skills/`
@@ -42,7 +42,7 @@ The finish page offers **运行 FreeOS** / **Run FreeOS**, checked by
 default: leave it checked and click Finish to start FreeOS from `$INSTDIR`,
 or uncheck it and click Finish to close Setup without launching. Setup
 does **not** auto-launch or auto-close. The launch uses the unelevated
-explorer token so the first run does not stamp `%USERPROFILE%\.octop`
+explorer token so the first run does not stamp `%USERPROFILE%\.freeos`
 as High integrity. Silent (`/S`) installs stay headless and do not launch.
 Chinese installer strings are compiled with `makensis -INPUTCHARSET UTF8`
 from a UTF-8 BOM `project.nsi`.
@@ -54,12 +54,13 @@ Upgrade / reinstall (same version included) refreshes the extracted runtime:
    handed off to the old process.
 2. Setup writes `$INSTDIR\FREEOS_INSTALL_STAMP` (product version + tick
    count, unique per Setup run) and deletes
-   `%USERPROFILE%\.octop\portable\FREEOS_STAMP` (also `OCTOP_HOME`, or
-   `FREEOS_HOME` when that variable is already set). User data
-   (`octop.db`, settings, chats) is not deleted.
+   `%USERPROFILE%\.freeos\portable\FREEOS_STAMP` (also `FREEOS_HOME` /
+   `OCTOP_HOME` when those variables are set). A leftover `~/.octop`
+   is not the desktop home. User data (`octop.db`, settings, chats) is
+   not deleted.
 3. The next launch compares the install stamp and the zip `FREEOS_STAMP`.
    Either mismatch re-extracts `packages/` and the embedded dashboard from
-   the new installer into `~/.octop/portable`, then copies the install
+   the new installer into `~/.freeos/portable`, then copies the install
    stamp into that tree. Later opens skip the extract until the next
    Setup run. If renaming the live `portable` directory to
    `portable.previous` fails because Windows still has the folder open
@@ -108,7 +109,7 @@ the sidecar-era `v0.0.1` Windows builds.
 
 **Keeps**
 
-- `%USERPROFILE%\.octop` (or `OCTOP_HOME`; `FREEOS_HOME` only when already set):
+- `%USERPROFILE%\.freeos` (or `FREEOS_HOME` / `OCTOP_HOME`; not a leftover `~/.octop`):
   workspaces, `octop.db`, memories, settings, logs, and the extracted portable
   runtime under `{home}/portable/`
 - Documented exceptions **inside** the install directory, if you created them:
@@ -196,7 +197,7 @@ cd desktop/src
 OCTOP_DESKTOP_URL=http://127.0.0.1:8088 wails3 dev
 ```
 
-Without `OCTOP_DESKTOP_URL`, first launch uses `~/.octop/portable/` if valid
+Without `OCTOP_DESKTOP_URL`, first launch uses `~/.freeos/portable/` if valid
 **and** it already matches this install (same `FREEOS_STAMP` / install stamp);
 otherwise it extracts the matching zip shipped with the desktop package
 (embedded in the Windows and Linux binaries, under `Contents/Resources` on
diff --git a/docs/architecture-integration.md b/docs/architecture-integration.md
index 9e8b098a..cbc35039 100644
--- a/docs/architecture-integration.md
+++ b/docs/architecture-integration.md
@@ -100,7 +100,7 @@ and applies asset packs onto openXYOS-shaped **in-host** surfaces
                  │  in-host org storage + xyos-governance-mcp   │
                  └───────┬───────────────────┬─────────────────┘
                          │ optional HTTP     │ durable pause
-                         │ if opted in       │ ~/.octop/governance/
+                         │ if opted in       │ ~/.freeos/governance/
                  ┌───────▼─────────┐   ┌─────▼─────────────────┐
   Optional       │ openXYOS :3780  │   │ Pause + audit JSONL   │
   Node sidecar   │ export / sync   │   │ Human must approve    │
@@ -128,7 +128,7 @@ Agent → tool (outbound / delete / pay / prod)
      → optional POST {sidecar}/api/governance/validate
      → no matching allow rule → DEFAULT DENY
      → write audit.jsonl (and sidecar log when reachable)
-     → create durable pause  ~/.octop/governance/pauses/<id>.json
+     → create durable pause  ~/.freeos/governance/pauses/<id>.json
      → return execute=false  (caller MUST stop)
 Human → FreeOS/Octop IM /approve  or  `freeos org governance approve <id>`
      → pause status=approved
@@ -287,7 +287,7 @@ The Phase A work sits on the existing FreeOS bootstrap:
 - Octop history as the host (`src/octop/`, `dashboard/`)
 - openXYOS vendored at `modules/openxyos/` (subtree `@ 1bdba35f`)
 - Bundled plugin `org-os`, BFF `/api/org-module`, CLI `freeos org`
-- Data directory today: `~/.octop` (`OCTOP_HOME`). `FREEOS_HOME` is honored when already set. This release does not migrate `~/.octop` to `~/.freeos`.
+- Data directory for a new install: `~/.freeos`. Order matches `PathLayout.from_env`: `FREEOS_HOME`, `OCTOP_HOME`, existing `~/.freeos`, existing `~/.octop` (not for the desktop app), else `~/.freeos`. This release does not copy one tree into the other.
 - Distribution name is `freeos` (GitHub Release wheels). Imports stay `octop.*`. CLI aliases: `freeos` and `octop`.
 
 ### Capability map (host + sidecar)
diff --git a/docs/user-guide.html b/docs/user-guide.html
index d47006d8..8f864402 100644
--- a/docs/user-guide.html
+++ b/docs/user-guide.html
@@ -173,7 +173,7 @@
   <article class="article">
 <blockquote>
 <p>本帮助文档面向最终用户，介绍 <strong>安装 → 设置向导 → 配置模型 → 基本使用</strong> 的完整流程。
-所有运行时数据默认存放在 <code>~/.octop/</code>（可通过 <code>OCTOP_HOME</code> 覆盖）。</p>
+新安装的运行时数据在 <code>~/.freeos/</code>。已有 <code>~/.octop/</code> 且还没有 <code>~/.freeos/</code> 时，CLI 继续用旧目录。</p>
 </blockquote>
 <hr />
 <h2 id="h1">一、简介</h2>
@@ -193,26 +193,26 @@ <h2 id="h2">二、安装 Octop</h2>
 <h3 id="h2-1">2.1 环境要求</h3>
 <ul>
 <li>操作系统：<strong>macOS / Linux / Windows</strong>。</li>
-<li><strong>无需</strong> 预先安装 Python —— 安装脚本会通过 <a href="https://docs.astral.sh/uv/">uv</a> 在 <code>~/.octop/</code> 下自动创建隔离的 Python 3.12 虚拟环境。</li>
+<li><strong>无需</strong> 预先安装 Python —— 本仓库安装脚本会通过 <a href="https://docs.astral.sh/uv/">uv</a> 在 <code>~/.freeos/</code> 下自动创建隔离的 Python 3.12 虚拟环境（已有 <code>~/.octop/</code> 且还没有 <code>~/.freeos/</code> 时继续用旧目录）。</li>
 <li>需要可访问外网，用于下载安装脚本与依赖。</li>
 </ul>
-<h3 id="h2-2">2.2 一键脚本安装（推荐）</h3>
-<p><strong>macOS / Linux</strong></p>
-<pre><code class="language-bash">curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.sh | bash
+<h3 id="h2-2">2.2 安装</h3>
+<p><strong>推荐：</strong>从 <a href="https://github.com/XYAIStudio/FreeOS/releases/latest">GitHub Releases</a> 下载 <code>FreeOS-desktop-*</code>。</p>
+<p><strong>命令行</strong>使用本仓库脚本（当前 <code>develop</code>；打 tag 后由 Release 说明固定标签）：</p>
+<pre><code class="language-bash">curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash
 </code></pre>
-<p><strong>Windows（PowerShell）</strong></p>
-<pre><code class="language-powershell">irm https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.ps1 | iex
+<pre><code class="language-powershell">irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.ps1 | iex
 </code></pre>
-<p><strong>Windows（cmd）</strong> —— 先下载再运行：</p>
-<pre><code class="language-bat">curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.bat -o install.bat
+<pre><code class="language-bat">curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.bat -o install.bat
 install.bat
 </code></pre>
+<p><strong>不要</strong>使用腾讯云 COS 上的 <code>…/octop/install.sh</code>（以及 <code>.ps1</code> / <code>.bat</code>）。那是上游 Octop，默认安装 PyPI 上的 <code>octop</code>，不是 FreeOS。</p>
 <p>安装完成后，<strong>打开一个新终端</strong> 或重新加载 shell 配置，使 PATH 生效：</p>
 <pre><code class="language-bash">source ~/.zshrc   # Zsh
 # 或
 source ~/.bashrc  # Bash
 </code></pre>
-<p>安装脚本会把 <code>octop</code> 命令放入 <code>~/.octop/bin</code> 并加入 PATH，并在 <code>~/.octop/venv</code> 创建隔离环境；<strong>不会改动系统 Python</strong>。</p>
+<p>新安装会把 <code>octop</code> 放入 <code>~/.freeos/bin</code> 并加入 PATH，并在 <code>~/.freeos/venv</code> 创建隔离环境；<strong>不会改动系统 Python</strong>。</p>
 <blockquote>
 <p><strong>可选附加组件</strong>：安装脚本支持通过 <code>--extras</code> 追加能力，例如浏览器自动化 <code>--extras browser</code>、飞书通道 <code>--extras channels-feishu</code>；也可用 <code>--version</code> 指定版本、<code>--mirror &lt;url&gt;</code> 使用国内 PyPI 镜像。更多选项见 <a href="scripts/README.md">scripts/README.md</a>。</p>
 </blockquote>
@@ -220,7 +220,7 @@ <h3 id="h2-3">2.3 验证安装</h3>
 <pre><code class="language-bash">octop --version
 octop run --help
 </code></pre>
-<p>若提示 <code>command not found: octop</code>，请确认已重新加载 shell 或检查 <code>~/.octop/bin</code> 是否在 PATH 中。</p>
+<p>若提示 <code>command not found: octop</code>，请确认已重新加载 shell，或检查 <code>~/.freeos/bin</code>（旧安装则是 <code>~/.octop/bin</code>）是否在 PATH 中。</p>
 <h3 id="h2-4">2.4 Docker 安装（生产推荐）</h3>
 <pre><code class="language-bash"># 构建并后台启动
 docker compose -f docker/docker-compose.yml up -d
@@ -579,8 +579,8 @@ <h2 id="h7">七、常见问题</h2>
 <p><strong>Q：如何修改监听地址让局域网访问？</strong>
 - 启动时：<code>octop run --host 0.0.0.0 --port 8088</code>；或设置环境变量 <code>OCTOP_BIND_HOST=0.0.0.0</code>、<code>OCTOP_PORT=8088</code>。</p>
 <p><strong>Q：数据存放在哪里？</strong>
-- 全部在 <code>~/.octop/</code>：</p>
-<pre><code>~/.octop/
+- 新安装在 <code>~/.freeos/</code>。还没有 <code>~/.freeos/</code> 时，已有的 <code>~/.octop/</code> 仍给 CLI 使用。桌面端不用残留的 <code>~/.octop</code> 当家目录。</p>
+<pre><code>~/.freeos/
 ├── config.json              # 进程级配置（地址、端口、CORS、TLS …）
 ├── octop.db                 # SQLite — 用户、Agent、通道、定时任务 …
 ├── secrets/                 # JWT 密钥、通道 Token
diff --git a/docs/user-guide.md b/docs/user-guide.md
index 96b6cf98..1220316e 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -1,9 +1,9 @@
 # Octop 用户帮助文档
 
-> **Historical vs Current.** 本文沿自 Octop 宿主操作说明（安装、向导、模型、对话）。**Current：** 产品是 [FreeOS](../README.zh-CN.md)；权威意图见 [产品契约](product-contract.zh-CN.md)。数据目录今天是 `~/.octop`（`OCTOP_HOME`）。已经设置的 `FREEOS_HOME` 会沿用；这一版不会把 `~/.octop` 迁到 `~/.freeos`。先在本机安顿好；组织能力像工作室里另一间可独立布置的房间。
+> **Historical vs Current.** 本文沿自 Octop 宿主操作说明（安装、向导、模型、对话）。**Current：** 产品是 [FreeOS](../README.zh-CN.md)；权威意图见 [产品契约](product-contract.zh-CN.md)。新安装的数据目录是 `~/.freeos`。`FREEOS_HOME` 优先于 `OCTOP_HOME`；还没有 `~/.freeos` 时，已有的 `~/.octop` 仍给 CLI 使用。桌面端不会把残留的 `~/.octop` 当成家目录。先在本机安顿好；组织能力像工作室里另一间可独立布置的房间。
 
 > 本帮助文档面向最终用户，介绍 **安装 → 设置向导 → 配置模型 → 基本使用** 的完整流程。
-> 所有运行时数据默认存放在 `~/.octop/`（可通过 `OCTOP_HOME` 覆盖）。
+> 新安装的运行时数据在 `~/.freeos/`。已有 `~/.octop/` 且还没有 `~/.freeos/` 时，CLI 继续用旧目录。
 
 ---
 
@@ -66,30 +66,32 @@
 ### 2.1 环境要求
 
 - 操作系统：**macOS / Linux / Windows**。
-- **无需** 预先安装 Python —— 安装脚本会通过 [uv](https://docs.astral.sh/uv/) 在 `~/.octop/` 下自动创建隔离的 Python 3.12 虚拟环境。
+- **无需** 预先安装 Python —— 本仓库安装脚本会通过 [uv](https://docs.astral.sh/uv/) 在 `~/.freeos/` 下自动创建隔离的 Python 3.12 虚拟环境（已有 `~/.octop/` 且还没有 `~/.freeos/` 时继续用旧目录）。
 - 需要可访问外网，用于下载安装脚本与依赖。
 
-### 2.2 一键脚本安装（推荐）
+### 2.2 安装
 
-**macOS / Linux**
+**推荐：桌面安装包。** 从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases/latest) 下载 `FreeOS-desktop-*`。
+
+**命令行**使用本仓库脚本。打出版本标签之后，Release 说明会改成固定标签；当前用 `develop`：
 
 ```bash
-curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash
 ```
 
-**Windows（PowerShell）**
-
 ```powershell
-irm https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.ps1 | iex
+irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.ps1 | iex
 ```
 
-**Windows（cmd）** —— 先下载再运行：
-
 ```bat
-curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.bat -o install.bat
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.bat -o install.bat
 install.bat
 ```
 
+已克隆仓库时：`bash scripts/install.sh`。
+
+**不要**使用腾讯云 COS 上的 `…/octop/install.sh`（以及 `.ps1` / `.bat`）。那是上游 Octop，默认安装 PyPI 上的 `octop`，不是 FreeOS。
+
 安装完成后，**打开一个新终端** 或重新加载 shell 配置，使 PATH 生效：
 
 ```bash
@@ -98,9 +100,9 @@ source ~/.zshrc   # Zsh
 source ~/.bashrc  # Bash
 ```
 
-安装脚本会把 `octop` 命令放入 `~/.octop/bin` 并加入 PATH，并在 `~/.octop/venv` 创建隔离环境；**不会改动系统 Python**。
+新安装会把 `octop` 放入 `~/.freeos/bin` 并加入 PATH，并在 `~/.freeos/venv` 创建隔离环境；**不会改动系统 Python**。
 
-> **可选附加组件**：安装脚本默认从 FreeOS GitHub 仓库安装，支持通过 `--extras` 追加能力，例如浏览器自动化 `--extras browser`、飞书通道 `--extras channels-feishu`；也可用 `--version` 指定 GitHub 版本标签、`--mirror <url>` 使用国内 PyPI 镜像下载 Python 依赖。更多选项见 [scripts/README.md](../scripts/README.md)。
+> **可选附加组件**：本仓库脚本支持 `--extras browser`、`--extras channels-feishu`，也可用 `--version` 指定 GitHub 版本标签。更多选项见 [scripts/README.md](../scripts/README.md)。
 
 ### 2.3 验证安装
 
@@ -109,7 +111,7 @@ octop --version
 octop run --help
 ```
 
-若提示 `command not found: octop`，请确认已重新加载 shell 或检查 `~/.octop/bin` 是否在 PATH 中。
+若提示 `command not found: octop`，请确认已重新加载 shell，或检查 `~/.freeos/bin`（旧安装则是 `~/.octop/bin`）是否在 PATH 中。
 
 ### 2.4 Docker 安装（生产推荐）
 
@@ -452,10 +454,10 @@ Octop 支持两个方向的 ACP 集成：
 - 启动时：`octop run --host 0.0.0.0 --port 8088`；或设置环境变量 `OCTOP_BIND_HOST=0.0.0.0`、`OCTOP_PORT=8088`。
 
 **Q：数据存放在哪里？**
-- 全部在 `~/.octop/`：
+- 新安装在 `~/.freeos/`。还没有 `~/.freeos/` 时，已有的 `~/.octop/` 仍给 CLI 使用。桌面端不用残留的 `~/.octop` 当家目录。
 
 ```
-~/.octop/
+~/.freeos/
 ├── config.json              # 进程级配置（地址、端口、CORS、TLS、database …）
 ├── octop.db                 # 默认 SQLite 控制面 — 用户、Agent、通道、定时任务 …
 ├── secrets/                 # JWT 密钥、通道 Token
diff --git a/scripts/README.md b/scripts/README.md
index 556c04cb..61228121 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -4,15 +4,19 @@
 
 ## 安装 Octop（终端用户）
 
-将 Octop 安装到隔离虚拟环境 `~/.octop/venv`，并创建 `~/.octop/bin/octop` 包装脚本加入 PATH。
+新安装使用 `~/.freeos/venv` 与 `~/.freeos/bin/octop`。还没有 `~/.freeos`、但已经有 `~/.octop` 时，继续用旧目录。
 
-### 远程一键安装（推荐）
+**不要**使用腾讯云 COS 上的 `…/octop/install.*`。那是上游 Octop，默认安装 PyPI `octop`，不是 FreeOS。
+
+桌面用户优先下载 GitHub Releases 的 `FreeOS-desktop-*`。
+
+### 远程脚本（develop；打 tag 后由 Release 说明固定标签）
 
 | 平台 | 命令 |
 |------|------|
-| macOS / Linux | `curl -fsSL https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.sh \| bash` |
-| Windows (PowerShell) | `irm https://finnie-1258344699.cos.ap-guangzhou.myqcloud.com/octop/install.ps1 \| iex` |
-| Windows (cmd) | 下载 `…/octop/install.bat` 后运行，或使用下方本地脚本 |
+| macOS / Linux | `curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh \| bash` |
+| Windows (PowerShell) | `irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.ps1 \| iex` |
+| Windows (cmd) | 下载 `https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.bat` 后运行 |
 
 ### 本地脚本（仓库内）
 
@@ -52,7 +56,8 @@ Windows PowerShell 等价参数：`-Version`、`-FromSource`、`-FromPyPI`、`-S
 
 | 变量 | 说明 |
 |------|------|
-| `OCTOP_HOME` | 安装根目录，默认 `~/.octop` |
+| `FREEOS_HOME` | 安装根目录（优先） |
+| `OCTOP_HOME` | 旧安装根目录覆盖。未设置时：已有 `~/.freeos`，否则已有 `~/.octop`，否则新建 `~/.freeos` |
 | `OCTOP_REPO` | `--from-source` 无本地目录时的 git 克隆地址 |
 | `OCTOP_PYPI_MIRROR` | PyPI 镜像（与 `--mirror` 等效） |
 | `PLAYWRIGHT_DOWNLOAD_HOST` | Playwright 浏览器下载镜像（仅 `--extras browser`） |
diff --git a/scripts/install.bat b/scripts/install.bat
index 3980721e..cbdc1003 100644
--- a/scripts/install.bat
+++ b/scripts/install.bat
@@ -4,7 +4,17 @@ setlocal EnableDelayedExpansion
 REM Octop Installer for Windows (cmd.exe)
 REM Usage: install.bat [-Version X.Y.Z] [-FromSource | -FromPyPI] [-SourceDir DIR] [-Extras browser] [-Help]
 
-if defined OCTOP_HOME (set "OCTOP_HOME=%OCTOP_HOME%") else (set "OCTOP_HOME=%USERPROFILE%\.octop")
+if defined FREEOS_HOME (
+    set "OCTOP_HOME=%FREEOS_HOME%"
+) else if not defined OCTOP_HOME (
+    if exist "%USERPROFILE%\.freeos" (
+        set "OCTOP_HOME=%USERPROFILE%\.freeos"
+    ) else if exist "%USERPROFILE%\.octop" (
+        set "OCTOP_HOME=%USERPROFILE%\.octop"
+    ) else (
+        set "OCTOP_HOME=%USERPROFILE%\.freeos"
+    )
+)
 set "OCTOP_VENV=%OCTOP_HOME%\venv"
 set "OCTOP_BIN=%OCTOP_HOME%\bin"
 set "PYTHON_VERSION=3.12"
@@ -147,8 +157,10 @@ if errorlevel 1 (
 if not exist "%OCTOP_BIN%" mkdir "%OCTOP_BIN%"
 
 echo @echo off > "%OCTOP_BIN%\octop.cmd"
-echo set "OCTOP_HOME=%%OCTOP_HOME%%" >> "%OCTOP_BIN%\octop.cmd"
-echo if "%%OCTOP_HOME%%"=="" set "OCTOP_HOME=%%USERPROFILE%%\.octop" >> "%OCTOP_BIN%\octop.cmd"
+echo if defined FREEOS_HOME set "OCTOP_HOME=%%FREEOS_HOME%%" >> "%OCTOP_BIN%\octop.cmd"
+echo if not defined OCTOP_HOME if exist "%%USERPROFILE%%\.freeos" set "OCTOP_HOME=%%USERPROFILE%%\.freeos" >> "%OCTOP_BIN%\octop.cmd"
+echo if not defined OCTOP_HOME if exist "%%USERPROFILE%%\.octop" set "OCTOP_HOME=%%USERPROFILE%%\.octop" >> "%OCTOP_BIN%\octop.cmd"
+echo if not defined OCTOP_HOME set "OCTOP_HOME=%%USERPROFILE%%\.freeos" >> "%OCTOP_BIN%\octop.cmd"
 echo "%%OCTOP_HOME%%\venv\Scripts\octop.exe" %%* >> "%OCTOP_BIN%\octop.cmd"
 
 set "OCTOP_BIN_FOR_PS=%OCTOP_BIN%"
diff --git a/scripts/install.ps1 b/scripts/install.ps1
index 4b891c1d..506f4875 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -2,7 +2,8 @@
 # Usage: irm <url>/install.ps1 | iex
 #    or: .\install.ps1 [-Version X.Y.Z] [-FromSource] [-SourceDir DIR] [-Extras "browser"]
 #
-# Installs Octop into ~/.octop with a uv-managed Python environment.
+# New installs use ~/.freeos. An existing ~/.octop is kept when ~/.freeos
+# does not exist yet (same order as PathLayout.from_env).
 
 & {
 param(
@@ -17,7 +18,20 @@ param(
 
 $ErrorActionPreference = "Stop"
 
-$OctopHome     = if ($env:OCTOP_HOME) { $env:OCTOP_HOME } else { Join-Path $HOME ".octop" }
+function Resolve-FreeOSHome {
+    if ($env:FREEOS_HOME) { return $env:FREEOS_HOME }
+    if ($env:OCTOP_HOME) { return $env:OCTOP_HOME }
+    $freeos = Join-Path $HOME ".freeos"
+    $legacy = Join-Path $HOME ".octop"
+    if (Test-Path $freeos) { return $freeos }
+    foreach ($flag in @($env:OCTOP_DESKTOP, $env:FREEOS_DESKTOP)) {
+        if ($flag -match '^(1|true|yes|on)$') { return $freeos }
+    }
+    if (Test-Path $legacy) { return $legacy }
+    return $freeos
+}
+
+$OctopHome     = Resolve-FreeOSHome
 $OctopVenv     = Join-Path $OctopHome "venv"
 $OctopBin      = Join-Path $OctopHome "bin"
 $PythonVersion = "3.12"
@@ -50,7 +64,10 @@ to install it, or install later from the dashboard. If a system Chrome already
 exists, that download is skipped even with -Extras browser.
 
 Environment:
-  OCTOP_HOME            Installation directory (default: ~/.octop)
+  FREEOS_HOME           Installation directory (preferred)
+  OCTOP_HOME            Legacy installation directory override
+                        New installs use ~/.freeos. An existing ~/.octop is
+                        kept when ~/.freeos does not exist yet.
   OCTOP_REPO            Git clone URL for -FromSource without -SourceDir
 "@
     exit 0
@@ -318,7 +335,19 @@ New-Item -ItemType Directory -Path $OctopBin -Force | Out-Null
 $wrapperPs1 = Join-Path $OctopBin "octop.ps1"
 @'
 $ErrorActionPreference = "Stop"
-$OctopHome = if ($env:OCTOP_HOME) { $env:OCTOP_HOME } else { Join-Path $HOME ".octop" }
+function Resolve-FreeOSHome {
+    if ($env:FREEOS_HOME) { return $env:FREEOS_HOME }
+    if ($env:OCTOP_HOME) { return $env:OCTOP_HOME }
+    $freeos = Join-Path $HOME ".freeos"
+    $legacy = Join-Path $HOME ".octop"
+    if (Test-Path $freeos) { return $freeos }
+    foreach ($flag in @($env:OCTOP_DESKTOP, $env:FREEOS_DESKTOP)) {
+        if ($flag -match '^(1|true|yes|on)$') { return $freeos }
+    }
+    if (Test-Path $legacy) { return $legacy }
+    return $freeos
+}
+$OctopHome = Resolve-FreeOSHome
 $RealBin = Join-Path $OctopHome "venv\Scripts\octop.exe"
 if (-not (Test-Path $RealBin)) {
     Write-Error "Octop environment not found at $OctopHome\venv"
@@ -330,8 +359,17 @@ if (-not (Test-Path $RealBin)) {
 $cmdWrapper = Join-Path $OctopBin "octop.cmd"
 @'
 @echo off
-set "OCTOP_HOME=%OCTOP_HOME%"
-if "%OCTOP_HOME%"=="" set "OCTOP_HOME=%USERPROFILE%\.octop"
+if defined FREEOS_HOME (
+  set "OCTOP_HOME=%FREEOS_HOME%"
+) else if defined OCTOP_HOME (
+  rem keep the legacy override
+) else if exist "%USERPROFILE%\.freeos" (
+  set "OCTOP_HOME=%USERPROFILE%\.freeos"
+) else if exist "%USERPROFILE%\.octop" (
+  set "OCTOP_HOME=%USERPROFILE%\.octop"
+) else (
+  set "OCTOP_HOME=%USERPROFILE%\.freeos"
+)
 set "REAL_BIN=%OCTOP_HOME%\venv\Scripts\octop.exe"
 if not exist "%REAL_BIN%" (
     echo Error: Octop environment not found at %OCTOP_HOME%\venv >&2
diff --git a/scripts/install.sh b/scripts/install.sh
index c90570ca..246a398b 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -4,14 +4,42 @@
 #   或: bash scripts/install.sh --from-pypi   # 从 PyPI 安装 Octop（不含 FreeOS 下游改动）
 #   或: curl -fsSL <url>/install.sh | bash   # 远程安装
 #
-# 将 Octop 安装到 ~/.octop，使用 uv 管理 Python 环境。
+# 新安装目录是 ~/.freeos（已有 ~/.octop 且还没有 ~/.freeos 时继续用旧目录）。
 # 用户无需预先安装 Python — uv 会处理一切。
 # 安装后会尽量把 octop 链接到已在 PATH 中的目录（如 /usr/local/bin），
 # 当前终端无需 source / 重开即可直接使用。
 set -euo pipefail
 
 # ── 默认配置 ──────────────────────────────────────────────────────────────────
-OCTOP_HOME="${OCTOP_HOME:-$HOME/.octop}"
+# Same order as src/octop/infra/utils/paths.py PathLayout.from_env:
+# FREEOS_HOME, OCTOP_HOME, existing ~/.freeos, existing ~/.octop
+# (skipped when the desktop flag is set), else ~/.freeos.
+resolve_install_home() {
+    if [ -n "${FREEOS_HOME:-}" ]; then
+        printf '%s\n' "$FREEOS_HOME"
+        return
+    fi
+    if [ -n "${OCTOP_HOME:-}" ]; then
+        printf '%s\n' "$OCTOP_HOME"
+        return
+    fi
+    if [ -e "$HOME/.freeos" ]; then
+        printf '%s\n' "$HOME/.freeos"
+        return
+    fi
+    _skip_legacy=0
+    for _flag in "${OCTOP_DESKTOP:-}" "${FREEOS_DESKTOP:-}"; do
+        case "$(printf '%s' "$_flag" | tr '[:upper:]' '[:lower:]')" in
+            1|true|yes|on) _skip_legacy=1 ;;
+        esac
+    done
+    if [ "$_skip_legacy" -eq 0 ] && [ -e "$HOME/.octop" ]; then
+        printf '%s\n' "$HOME/.octop"
+        return
+    fi
+    printf '%s\n' "$HOME/.freeos"
+}
+OCTOP_HOME="$(resolve_install_home)"
 OCTOP_VENV="$OCTOP_HOME/venv"
 OCTOP_BIN="$OCTOP_HOME/bin"
 PYTHON_VERSION="3.12"
@@ -94,7 +122,10 @@ Note: Playwright Chromium is not downloaded by default. Pass
   even with --extras browser.
 
 Environment variables:
-  OCTOP_HOME              Install directory (default: ~/.octop)
+  FREEOS_HOME             Install directory (preferred)
+  OCTOP_HOME              Legacy install directory override
+                          New installs use ~/.freeos. An existing ~/.octop is
+                          kept when ~/.freeos does not exist yet.
   OCTOP_PYPI_MIRROR       PyPI mirror URL (same as --mirror)
   OCTOP_REPO              Git URL to clone (used by --from-source with no local dir)
   HARNESS_AGENT_REPO      harness-agent repo (derived from OCTOP_REPO by default)
@@ -104,7 +135,8 @@ Environment variables:
   PLAYWRIGHT_INSTALL_TIMEOUT  Per-mirror download timeout in seconds (default 600)
 
 Details:
-  Everything is installed into an isolated virtualenv (~/.octop/venv), so the
+  Everything is installed into an isolated virtualenv (~/.freeos/venv, or the
+  existing ~/.octop/venv when that legacy tree is still the home), so the
   system Python is untouched. Playwright Chromium is opt-in (--extras browser):
   1. Playwright Chromium browser (skipped if a system browser exists)
   2. System libraries (Linux: apt/dnf/yum/pacman/zypper; only needed for Chromium)
@@ -950,10 +982,35 @@ mkdir -p "$OCTOP_BIN"
 
 cat > "$OCTOP_BIN/octop" << 'WRAPPER'
 #!/usr/bin/env bash
-# Octop CLI 包装脚本 — 委托给 uv 管理的环境。
+# FreeOS CLI wrapper — delegates to the uv-managed environment.
 set -euo pipefail
 
-OCTOP_HOME="${OCTOP_HOME:-$HOME/.octop}"
+resolve_install_home() {
+    if [ -n "${FREEOS_HOME:-}" ]; then
+        printf '%s\n' "$FREEOS_HOME"
+        return
+    fi
+    if [ -n "${OCTOP_HOME:-}" ]; then
+        printf '%s\n' "$OCTOP_HOME"
+        return
+    fi
+    if [ -e "$HOME/.freeos" ]; then
+        printf '%s\n' "$HOME/.freeos"
+        return
+    fi
+    _skip_legacy=0
+    for _flag in "${OCTOP_DESKTOP:-}" "${FREEOS_DESKTOP:-}"; do
+        case "$(printf '%s' "$_flag" | tr '[:upper:]' '[:lower:]')" in
+            1|true|yes|on) _skip_legacy=1 ;;
+        esac
+    done
+    if [ "$_skip_legacy" -eq 0 ] && [ -e "$HOME/.octop" ]; then
+        printf '%s\n' "$HOME/.octop"
+        return
+    fi
+    printf '%s\n' "$HOME/.freeos"
+}
+OCTOP_HOME="$(resolve_install_home)"
 REAL_BIN="$OCTOP_HOME/venv/bin/octop"
 
 if [ ! -x "$REAL_BIN" ]; then

From 26a153a57b25b70a5c9c3c35f286b7b692a96bf3 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Mon, 26 Oct 2026 15:34:28 +0000
Subject: [PATCH 10/39] chore(release): cut 0.1.0rc1 and publish SHA256SUMS

Point the package version at 0.1.0rc1 so tag v0.1.0rc1 matches
pyproject and stays a GitHub prerelease. Attach SHA256SUMS for desktop
installers, portable zips, wheels, and sdists. Align the employee
password hint and backup home help with the code.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .github/workflows/octop-desktop.yml           |   8 ++
 .github/workflows/release.yml                 |  10 ++
 CHANGELOG.md                                  |   6 +-
 README.md                                     |   2 +-
 README_CN.md                                  |   4 +-
 dashboard/package-lock.json                   |   4 +-
 dashboard/package.json                        |   2 +-
 docs/adr/001-single-process-model.md          |   2 +-
 docs/cli.md                                   |  18 ++-
 .../frontend/src/pages/EmployeesPage.tsx      |   2 +-
 pyproject.toml                                |   2 +-
 scripts/README.md                             |   4 +-
 scripts/org-export/template/package.json      |   2 +-
 scripts/publish_sha256sums.sh                 |  96 +++++++++++++++
 scripts/release_download_links.py             |   4 +
 scripts/write_sha256sums.py                   | 109 ++++++++++++++++++
 src/octop/__init__.py                         |   2 +-
 src/octop/api/app.py                          |   3 +-
 src/octop/api/routers/backup.py               |   5 +-
 src/octop/cli/commands/backup.py              |  37 +++---
 .../infra/connectors/gateway/protocol.py      |   3 +-
 tests/unit/cli/test_backup_help.py            |  30 +++++
 tests/unit/test_release_download_links.py     |   1 +
 tests/unit/test_write_sha256sums.py           | 102 ++++++++++++++++
 uv.lock                                       |   2 +-
 25 files changed, 420 insertions(+), 40 deletions(-)
 create mode 100644 scripts/publish_sha256sums.sh
 create mode 100644 scripts/write_sha256sums.py
 create mode 100644 tests/unit/cli/test_backup_help.py
 create mode 100644 tests/unit/test_write_sha256sums.py

diff --git a/.github/workflows/octop-desktop.yml b/.github/workflows/octop-desktop.yml
index 1c508e60..f2a7420f 100644
--- a/.github/workflows/octop-desktop.yml
+++ b/.github/workflows/octop-desktop.yml
@@ -414,3 +414,11 @@ jobs:
           generate_release_notes: false
           prerelease: ${{ steps.channel.outputs.prerelease }}
           make_latest: ${{ steps.channel.outputs.prerelease == 'true' && 'false' || 'true' }}
+
+      # Refresh SHA256SUMS after desktop installers and portable zips land.
+      # Release publishes the same file for wheel/sdist; this pass adds the
+      # packages just uploaded and any freeos-* assets already on the release.
+      - name: Publish SHA256SUMS
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: bash scripts/publish_sha256sums.sh "${{ steps.rel.outputs.tag }}" release-assets
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 03c305ff..4a7a57d4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -139,6 +139,16 @@ jobs:
           prerelease: ${{ steps.channel.outputs.prerelease }}
           make_latest: ${{ steps.channel.outputs.prerelease == 'true' && 'false' || 'true' }}
 
+      # Hash wheel/sdist plus any desktop installers and portable zips already
+      # attached by Desktop Package. That workflow runs the same script again
+      # after its own upload, so the last publisher leaves one SHA256SUMS that
+      # covers every class. v0.1.0rc1 is a prerelease via release_prerelease.py
+      # (PEP 440 rcN). v0.1.0-rc.1 is not.
+      - name: Publish SHA256SUMS
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: bash scripts/publish_sha256sums.sh "${GITHUB_REF_NAME}" dist
+
   # workflow_run / release:published are unreliable when Release itself was
   # started via GITHUB_TOKEN workflow_dispatch (Auto Tag). Explicitly cascade.
   #
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 07eaa8eb..36d8dd5e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,9 +4,9 @@
 
 格式遵循 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)，版本号遵循 [语义化版本规范](https://semver.org/spec/v2.0.0.html)。
 
-## [0.1.0] - TBD
+## [0.1.0rc1] - TBD
 
-FreeOS **0.1.0** is an independent semver baseline. It does not track or align with Octop 1.0.x. GitHub Release Python artifacts are `freeos-0.1.0*` (sdist and wheel). The import package stays `octop`. This release does not publish to PyPI, and `pip install octop` installs upstream Octop, not FreeOS. Older Release files may still be named `octop-0.0.10*`.
+FreeOS **0.1.0rc1** is a prerelease of an independent semver baseline. It does not track or align with Octop 1.0.x. The release tag is `v0.1.0rc1`. GitHub Release Python artifacts are `freeos-0.1.0rc1*` (sdist and wheel). The import package stays `octop`. This release does not publish to PyPI, and `pip install octop` installs upstream Octop, not FreeOS. Older Release files may still be named `octop-0.0.10*`.
 
 ### Upgrade from 0.0.10
 
@@ -27,7 +27,7 @@ FreeOS **0.1.0** is an independent semver baseline. It does not track or align w
 - Preserve `config.json` when it is malformed: startup and configuration writers now report the file and parser position, avoid leaking stored credentials, and use atomic replacement instead of silently rebuilding an empty configuration. Absorbed from upstream Octop #730 / #738.
 - Checkpoint the SQLite WAL before the desktop process restarts so an in-app update does not drop the latest writes. Absorbed from upstream Octop #918.
 
-### Not in 0.1.0
+### Not in 0.1.0rc1
 
 Harness migration, cloud bridge default-on, default LDAP/SSO, Teams, and a whole-repo catch-up to Octop are out of scope.
 
diff --git a/README.md b/README.md
index 09bbf633..3b58bd6f 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,7 @@
 
 <p align="center">
   <a href="https://www.python.org/downloads/"><img alt="Python 3.12+" src="https://img.shields.io/badge/python-3.12%2B-blue?logo=python&logoColor=white" /></a>
-  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.1.0-orange" /></a>
+  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.1.0rc1-orange" /></a>
   <a href="LICENSE"><img alt="License: MIT + Apache-2.0" src="https://img.shields.io/badge/license-MIT%20%2B%20Apache--2.0-green" /></a>
   <a href="https://github.com/TencentCloud/Octop"><img alt="Upstream: Octop" src="https://img.shields.io/badge/Upstream-Octop-1677ff.svg?style=flat" /></a>
   <a href="https://github.com/XYAIStudio/openXYOS"><img alt="Organization module: openXYOS" src="https://img.shields.io/badge/Organization-openXYOS-0f766e.svg?style=flat" /></a>
diff --git a/README_CN.md b/README_CN.md
index d0706fe3..be49352b 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -11,7 +11,7 @@
 <p align="center">
   <a href="https://www.python.org/downloads/"><img alt="Python 3.12+" src="https://img.shields.io/badge/python-3.12%2B-blue?logo=python&logoColor=white" /></a>
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-green" /></a>
-  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.1.0-orange" /></a>
+  <a href="https://github.com/XYAIStudio/FreeOS/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.1.0rc1-orange" /></a>
   <a href="https://github.com/TencentCloud/Octop"><img alt="上游：Octop" src="https://img.shields.io/badge/上游-Octop-1677ff.svg?style=flat" /></a>
   <a href="https://github.com/XYAIStudio/openXYOS"><img alt="组织模块：openXYOS" src="https://img.shields.io/badge/组织模块-openXYOS-0f766e.svg?style=flat" /></a>
   <a href="https://github.com/astral-sh/ruff"><img alt="Code Style: Ruff" src="https://img.shields.io/badge/code%20style-ruff-000000?logo=ruff&logoColor=white" /></a>
@@ -246,7 +246,7 @@ curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/i
 
 桌面客户端说明见 [desktop/README.md](desktop/README.md)，飞牛打包指南见 [fnos/README.md](fnos/README.md)。独立商业组织站见 [docs/org-export.md](docs/org-export.md)（`freeos org export-standalone`，默认导出完整 openXYOS 源码树），不是默认安装器里的第二套 Node。
 
-**不要** `pip install octop`。PyPI 上的 `octop` 是上游 Octop，不是 FreeOS 0.1.0。本仓库发到 GitHub Releases 的 Python 制品是 `freeos-<version>-py3-none-any.whl` 和 `freeos-<version>.tar.gz`（导入包仍叫 `octop`）。更早的 Release 里可能还有 `octop-0.0.10*` 文件名，那是旧制品名，不是 PyPI 安装命令。桌面安装包从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) 下载；终端安装用上面的安装脚本（默认拉取 FreeOS GitHub 源码）。只有在你明确要上游 Octop 时才加 `--from-pypi`。可选组件仍通过安装脚本传递，例如 `--extras browser`。
+**不要** `pip install octop`。PyPI 上的 `octop` 是上游 Octop，不是 FreeOS 0.1.0rc1。本仓库发到 GitHub Releases 的 Python 制品是 `freeos-<version>-py3-none-any.whl` 和 `freeos-<version>.tar.gz`（导入包仍叫 `octop`）。更早的 Release 里可能还有 `octop-0.0.10*` 文件名，那是旧制品名，不是 PyPI 安装命令。桌面安装包从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases) 下载；终端安装用上面的安装脚本（默认拉取 FreeOS GitHub 源码）。只有在你明确要上游 Octop 时才加 `--from-pypi`。可选组件仍通过安装脚本传递，例如 `--extras browser`。
 
 从源码用 uv 开发时：
 
diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
index b53fed4f..c97d3d08 100644
--- a/dashboard/package-lock.json
+++ b/dashboard/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "octop-dashboard",
-  "version": "0.1.0",
+  "version": "0.1.0rc1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "octop-dashboard",
-      "version": "0.1.0",
+      "version": "0.1.0rc1",
       "dependencies": {
         "@aiden0z/pptx-renderer": "^1.2.4",
         "@mermaid-js/parser": "^1.1.0",
diff --git a/dashboard/package.json b/dashboard/package.json
index 9c5cf999..c5ea36b2 100644
--- a/dashboard/package.json
+++ b/dashboard/package.json
@@ -1,7 +1,7 @@
 {
   "name": "octop-dashboard",
   "private": true,
-  "version": "0.1.0",
+  "version": "0.1.0rc1",
   "type": "module",
   "scripts": {
     "dev": "vite --host",
diff --git a/docs/adr/001-single-process-model.md b/docs/adr/001-single-process-model.md
index 09fbfcbd..f2447a21 100644
--- a/docs/adr/001-single-process-model.md
+++ b/docs/adr/001-single-process-model.md
@@ -15,7 +15,7 @@ Everything runs in a single Python process served by uvicorn. There is no extern
 
 ## Rationale
 
-- **Self-hosted target:** Operators install with `pip install octop && octop init`. Adding Redis or a process supervisor doubles the ops burden for the primary audience. Historical note (2026-10): that command describes the upstream-era install path. FreeOS 0.1.0 is installed from GitHub Releases or `scripts/install.sh`, not from the PyPI `octop` package.
+- **Self-hosted target:** Operators install with `pip install octop && octop init`. Adding Redis or a process supervisor doubles the ops burden for the primary audience. Historical note (2026-10): that command describes the upstream-era install path. FreeOS 0.1.0rc1 is installed from GitHub Releases or `scripts/install.sh`, not from the PyPI `octop` package.
 - **Workload profile:** Agent calls are LLM-bound (seconds to minutes of I/O wait). Python's asyncio handles this fan-out efficiently without threads or processes.
 - **SQLite is sufficient:** Concurrent writes are rare (one writer per agent at a time); WAL mode handles the load. Migrating to Postgres requires only a new `SqlitePool` implementation.
 - **Restart semantics are simple:** `OctopServer.start()` rebuilds the entire runtime tree from the SQLite file. No external state to reconcile.
diff --git a/docs/cli.md b/docs/cli.md
index ae5249eb..18713f10 100644
--- a/docs/cli.md
+++ b/docs/cli.md
@@ -60,7 +60,7 @@ Octop commands pick one of three transports:
 
 | Layer | When | Login? | Examples |
 |-------|------|--------|----------|
-| **Offline** (local DB only) | Need to read/write `~/.octop` without a running server | No | `init`, `backup`, `plugin`, `agent list`, `chats list/get/create/update/delete`, `cron list`, `user *`, `admin overview/audit`, `models presets/list/active` |
+| **Offline** (local DB only) | Need to read/write `~/.freeos` without a running server. An existing `~/.octop` is used when `~/.freeos` is absent, unless `OCTOP_DESKTOP` or `FREEOS_DESKTOP` is set. `FREEOS_HOME` overrides `OCTOP_HOME`. | No | `init`, `backup`, `plugin`, `agent list`, `chats list/get/create/update/delete`, `cron list`, `user *`, `admin overview/audit`, `models presets/list/active` |
 | **Attach** (HTTP / WS) | Need a live `octop run` process (IM, streams, model pulls) | Yes (`octop user login`) | `chats send/repl`, `channel test/probe`, `models ollama-*`, `skills enable/disable`, `provider test` |
 | **Embedded** (in-process) | CLI boots `OctopServer` for a single command | No | `octop acp`, `octop chats repl`, `octop chats send` (defaults to embedded), `octop agent create/from-expert/start/stop/reload` |
 
@@ -327,17 +327,23 @@ Commands:
 
 ## `octop backup`
 
-Export and restore Octop backups. Works fully offline.
+Export and restore FreeOS backups. Works fully offline.
+
+New installs use `~/.freeos`. When `~/.freeos` does not exist yet, an existing `~/.octop` is used, unless `OCTOP_DESKTOP` or `FREEOS_DESKTOP` is set. `FREEOS_HOME` overrides `OCTOP_HOME`. That is the same order as `PathLayout.from_env`.
 
 ```
 Usage: octop backup [OPTIONS] COMMAND [ARGS]...
 
-  Backup and restore database + local agent workspaces.
+  Backup and restore the database and local agent workspaces.
+
+  New installs use ~/.freeos. An existing ~/.octop is used when ~/.freeos is
+  absent, unless OCTOP_DESKTOP or FREEOS_DESKTOP is set. FREEOS_HOME overrides
+  OCTOP_HOME.
 
 Commands:
-  create     Create a backup archive (DB + workspaces + config).
-  restore    Restore a backup archive into ~/.octop.
-  auto       Automatic backup status and one-shot run.
+  auto     Automatic backup status and one-shot run (schedule requires...
+  create   Create a selected-content backup archive.
+  restore  Restore a backup into ~/.freeos, or ~/.octop when that legacy...
 ```
 
 ### `octop backup auto`
diff --git a/modules/openxyos/frontend/src/pages/EmployeesPage.tsx b/modules/openxyos/frontend/src/pages/EmployeesPage.tsx
index 957bcc7c..ffa3ea49 100644
--- a/modules/openxyos/frontend/src/pages/EmployeesPage.tsx
+++ b/modules/openxyos/frontend/src/pages/EmployeesPage.tsx
@@ -618,7 +618,7 @@ function CreateEmployeeModal({ form, departments, skillsList, selectedSkills, on
               <label className="text-xs font-medium text-text-muted mb-1 block">{t("邮箱", "Email")} *</label>
               <input type="email" value={form.email || ""} onChange={e => onChange({ ...form, email: e.target.value })}
                 placeholder={t("员工登录邮箱", "Employee sign-in email")} className="w-full px-3 py-2 bg-bg border border-border rounded-lg text-sm focus:outline-none focus:border-primary" />
-              <p className="text-[10px] text-text-muted mt-1">{t("自动创建系统账号，默认密码 emp123456", "A system account is created automatically. Default password: emp123456")}</p>
+              <p className="text-[10px] text-text-muted mt-1">{t("自动创建系统账号，初始密码由系统随机生成。", "A system account is created automatically. The initial password is generated at random.")}</p>
             </div>
           )}
 
diff --git a/pyproject.toml b/pyproject.toml
index 37553b83..4dba70a0 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "freeos"
-version = "0.1.0"
+version = "0.1.0rc1"
 description = "FreeOS — self-hosted multi-user multi-agent assistant. GitHub Release artifacts are named freeos-*; the import package stays octop. Not published to PyPI."
 readme = "README.md"
 license = { text = "MIT" }
diff --git a/scripts/README.md b/scripts/README.md
index 61228121..7312c870 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -32,8 +32,8 @@
 # 从 FreeOS GitHub 源码安装最新版（默认）
 bash scripts/install.sh
 
-# 从 FreeOS GitHub v0.1.0 标签安装
-bash scripts/install.sh --version 0.1.0
+# 从 FreeOS GitHub v0.1.0rc1 标签安装
+bash scripts/install.sh --version 0.1.0rc1
 
 # 显式安装 PyPI 上游 Octop（不包含 FreeOS 下游修改）
 bash scripts/install.sh --from-pypi
diff --git a/scripts/org-export/template/package.json b/scripts/org-export/template/package.json
index 01e0c0f1..6aadfa9a 100644
--- a/scripts/org-export/template/package.json
+++ b/scripts/org-export/template/package.json
@@ -1,7 +1,7 @@
 {
   "name": "openxyos-web",
   "private": true,
-  "version": "0.1.0",
+  "version": "0.1.0rc1",
   "description": "Standalone Organization web generated from dashboard/src/org-ui. Interim API talks to a FreeOS host /api/org-module via proxy.",
   "type": "module",
   "scripts": {
diff --git a/scripts/publish_sha256sums.sh b/scripts/publish_sha256sums.sh
new file mode 100644
index 00000000..79fa6423
--- /dev/null
+++ b/scripts/publish_sha256sums.sh
@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# Upload SHA256SUMS for the desktop installers, portable zips, wheels, and
+# sdists on a GitHub Release. Local directories are overlaid on assets already
+# attached, so Release and Desktop Package can each refresh the same file.
+#
+#   bash scripts/publish_sha256sums.sh v0.1.0rc1 dist
+#   bash scripts/publish_sha256sums.sh v0.1.0rc1 release-assets
+set -euo pipefail
+
+if [[ $# -lt 1 ]]; then
+  echo "usage: publish_sha256sums.sh <vTAG> [extra_dir ...]" >&2
+  exit 2
+fi
+
+tag="$1"
+shift
+if [[ "$tag" != v* ]]; then
+  echo "tag must start with v: $tag" >&2
+  exit 2
+fi
+
+repo="${GITHUB_REPOSITORY:?GITHUB_REPOSITORY is required}"
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+stage="$(mktemp -d)"
+trap 'rm -rf "$stage"' EXIT
+
+EXTRAS=("$@")
+
+download_pattern_if_present() {
+  local pattern="$1"
+  local name saw=0
+  for name in "${ASSET_NAMES[@]}"; do
+    # shellcheck disable=SC2254
+    if [[ "$name" == $pattern ]]; then
+      saw=1
+      break
+    fi
+  done
+  if [[ "$saw" -eq 1 ]]; then
+    gh release download "$tag" --repo "$repo" --pattern "$pattern" --dir "$stage" --skip-existing
+  fi
+}
+
+stage_assets() {
+  local extra f base
+  rm -rf "$stage"
+  mkdir -p "$stage"
+  shopt -s nullglob
+  for extra in "${EXTRAS[@]}"; do
+    if [[ -d "$extra" ]]; then
+      for f in "$extra"/*; do
+        [[ -f "$f" ]] || continue
+        base="$(basename "$f")"
+        [[ "$base" == "SHA256SUMS" ]] && continue
+        if [[ ! -e "$stage/$base" ]]; then
+          cp "$f" "$stage/$base"
+        fi
+      done
+    fi
+  done
+  ASSET_NAMES=()
+  if gh release view "$tag" --repo "$repo" >/dev/null 2>&1; then
+    local listed
+    listed="$(gh release view "$tag" --repo "$repo" --json assets --jq '.assets[].name')"
+    if [[ -n "$listed" ]]; then
+      mapfile -t ASSET_NAMES <<<"$listed"
+    fi
+    download_pattern_if_present 'freeos-*'
+    download_pattern_if_present 'FreeOS-*'
+  fi
+  rm -f "$stage/SHA256SUMS"
+}
+
+refresh_if_release_grew() {
+  local listed status
+  listed="$(gh release view "$tag" --repo "$repo" --json assets --jq '.assets[].name')"
+  set +e
+  printf '%s\n' "$listed" | python3 "$script_dir/write_sha256sums.py" --missing-from "$stage/SHA256SUMS"
+  status=$?
+  set -e
+  if [[ "$status" -eq 0 ]]; then
+    return 0
+  fi
+  if [[ "$status" -ne 3 ]]; then
+    exit "$status"
+  fi
+  echo "Release gained artifacts after the first hash; rewriting SHA256SUMS"
+  stage_assets
+  python3 "$script_dir/write_sha256sums.py" "$stage"
+  gh release upload "$tag" "$stage/SHA256SUMS" --clobber --repo "$repo"
+}
+
+stage_assets
+python3 "$script_dir/write_sha256sums.py" "$stage"
+gh release upload "$tag" "$stage/SHA256SUMS" --clobber --repo "$repo"
+refresh_if_release_grew
diff --git a/scripts/release_download_links.py b/scripts/release_download_links.py
index 38c7954a..deb68c8d 100644
--- a/scripts/release_download_links.py
+++ b/scripts/release_download_links.py
@@ -98,6 +98,10 @@ def render_download_section(raw_version: str) -> str:
             f"- {md_link('Wheel', tag, f'freeos-{version}-py3-none-any.whl')}",
             f"- {md_link('sdist', tag, f'freeos-{version}.tar.gz')}",
             "",
+            "### Checksums",
+            "",
+            f"- {md_link('SHA256SUMS', tag, 'SHA256SUMS')}",
+            "",
         ]
     )
 
diff --git a/scripts/write_sha256sums.py b/scripts/write_sha256sums.py
new file mode 100644
index 00000000..1d8717a6
--- /dev/null
+++ b/scripts/write_sha256sums.py
@@ -0,0 +1,109 @@
+#!/usr/bin/env python3
+"""Write GNU SHA256SUMS for FreeOS GitHub Release artifacts.
+
+Covers desktop installers (``FreeOS-desktop-*``), portable zips
+(``FreeOS-portable-*.zip``), wheels (``*.whl``), and sdists
+(``freeos-*.tar.gz``). ``SHA256SUMS`` itself is not hashed.
+
+    python3 scripts/write_sha256sums.py dist/
+"""
+
+from __future__ import annotations
+
+import argparse
+import hashlib
+import sys
+from pathlib import Path
+
+
+def is_checksum_target(name: str) -> bool:
+    """Return whether ``name`` is a desktop installer, zip, wheel, or sdist."""
+    if not name or name == "SHA256SUMS" or name.startswith("."):
+        return False
+    if name.startswith("FreeOS-desktop-"):
+        return True
+    if name.startswith("FreeOS-portable-") and name.endswith(".zip"):
+        return True
+    if name.endswith(".whl"):
+        return True
+    # Linux desktop packages are FreeOS-desktop-*.tar.gz, already matched.
+    return name.startswith("freeos-") and name.endswith(".tar.gz")
+
+
+def _sha256(path: Path) -> str:
+    digest = hashlib.sha256()
+    with path.open("rb") as handle:
+        for chunk in iter(lambda: handle.read(1024 * 1024), b""):
+            digest.update(chunk)
+    return digest.hexdigest()
+
+
+def write_sha256sums(directory: Path) -> Path:
+    """Write ``directory/SHA256SUMS`` and return that path.
+
+    Lines use the GNU coreutils form ``<hex>  <filename>`` so
+    ``sha256sum -c SHA256SUMS`` can verify them. Names are sorted.
+    """
+    if not directory.is_dir():
+        raise SystemExit(f"not a directory: {directory}")
+    files = sorted(
+        path for path in directory.iterdir() if path.is_file() and is_checksum_target(path.name)
+    )
+    if not files:
+        raise SystemExit(f"no desktop, zip, wheel, or sdist artifacts in {directory}")
+    lines = [f"{_sha256(path)}  {path.name}" for path in files]
+    destination = directory / "SHA256SUMS"
+    destination.write_text("\n".join(lines) + "\n", encoding="utf-8")
+    return destination
+
+
+def covered_names(checksum_file: Path) -> set[str]:
+    names: set[str] = set()
+    text = checksum_file.read_text(encoding="utf-8")
+    for line in text.splitlines():
+        if not line.strip():
+            continue
+        _digest, _sep, name = line.partition("  ")
+        if name:
+            names.add(name)
+    return names
+
+
+def missing_targets(checksum_file: Path, remote_names: list[str]) -> list[str]:
+    covered = covered_names(checksum_file)
+    return [name for name in remote_names if is_checksum_target(name) and name not in covered]
+
+
+def main(argv: list[str] | None = None) -> int:
+    parser = argparse.ArgumentParser(description="Write SHA256SUMS for FreeOS release artifacts.")
+    parser.add_argument("directory", nargs="?", type=Path)
+    parser.add_argument(
+        "--is-target",
+        metavar="NAME",
+        help="Exit 0 when NAME should be covered, else 1.",
+    )
+    parser.add_argument(
+        "--missing-from",
+        type=Path,
+        metavar="SHA256SUMS",
+        help="Read release asset names on stdin. Print targets absent from the file "
+        "and exit 3 when any are missing.",
+    )
+    args = parser.parse_args(argv)
+    if args.is_target is not None:
+        return 0 if is_checksum_target(args.is_target) else 1
+    if args.missing_from is not None:
+        remote = [line.strip() for line in sys.stdin if line.strip()]
+        missing = missing_targets(args.missing_from, remote)
+        if missing:
+            sys.stdout.write("\n".join(missing) + "\n")
+            return 3
+        return 0
+    if args.directory is None:
+        parser.error("directory is required")
+    write_sha256sums(args.directory)
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())
diff --git a/src/octop/__init__.py b/src/octop/__init__.py
index d7857b72..ca29e732 100644
--- a/src/octop/__init__.py
+++ b/src/octop/__init__.py
@@ -2,4 +2,4 @@
 
 from __future__ import annotations
 
-__version__ = "0.1.0"
+__version__ = "0.1.0rc1"
diff --git a/src/octop/api/app.py b/src/octop/api/app.py
index e92136dc..f7c9fd15 100644
--- a/src/octop/api/app.py
+++ b/src/octop/api/app.py
@@ -13,6 +13,7 @@
 from fastapi.responses import FileResponse, HTMLResponse, JSONResponse, PlainTextResponse
 from scalar_fastapi import get_scalar_api_reference
 
+from octop import __version__
 from octop.api.middleware.jwt_auth import install as install_jwt_auth
 from octop.api.middleware.setup_lockdown import install as install_setup_lockdown
 from octop.api.openapi_meta import API_DESCRIPTION, OPENAPI_TAGS, configure_openapi
@@ -108,7 +109,7 @@ def build_app(server: OctopServer) -> FastAPI:
 
     app = FastAPI(
         title="FreeOS API",
-        version="0.1.0",
+        version=__version__,
         description=API_DESCRIPTION,
         openapi_url="/api/openapi.json" if enable_api_docs else None,
         openapi_tags=OPENAPI_TAGS,
diff --git a/src/octop/api/routers/backup.py b/src/octop/api/routers/backup.py
index b9ce428d..0d86dabe 100644
--- a/src/octop/api/routers/backup.py
+++ b/src/octop/api/routers/backup.py
@@ -216,8 +216,11 @@ async def list_backups(
     _: Any = Depends(require_permission("backup")),
     server: Any = Depends(get_server),
 ) -> dict[str, Any]:
-    """List ``.tar.gz`` files in ``~/.octop/backups/``.
+    """List ``.tar.gz`` files in the data directory's ``backups/``.
 
+    New installs use ``~/.freeos/backups/``. An existing ``~/.octop/backups/``
+    is used when ``~/.freeos`` is absent, unless ``OCTOP_DESKTOP`` or
+    ``FREEOS_DESKTOP`` is set. ``FREEOS_HOME`` overrides ``OCTOP_HOME``.
     Disk/manifest peek runs in a worker thread so the event loop stays free.
     """
     files = await asyncio.to_thread(list_backup_files, server.paths)
diff --git a/src/octop/cli/commands/backup.py b/src/octop/cli/commands/backup.py
index b90ddb40..64698ec7 100644
--- a/src/octop/cli/commands/backup.py
+++ b/src/octop/cli/commands/backup.py
@@ -16,6 +16,13 @@
 from octop.infra.db.services import build_shared_services
 from octop.infra.utils.paths import PathLayout
 
+# Same order as PathLayout.from_env. Do not describe ~/.octop as the default.
+_HOME_HELP = (
+    "Data directory. Precedence: FREEOS_HOME, OCTOP_HOME, an existing ~/.freeos, "
+    "an existing ~/.octop (skipped when OCTOP_DESKTOP or FREEOS_DESKTOP is set), "
+    "otherwise ~/.freeos."
+)
+
 
 def _paths(home: Path | None = None) -> PathLayout:
     return PathLayout(home) if home is not None else PathLayout.from_env()
@@ -23,16 +30,19 @@ def _paths(home: Path | None = None) -> PathLayout:
 
 @click.group()
 def backup() -> None:
-    """Backup and restore database + local agent workspaces."""
+    """Backup and restore the database and local agent workspaces.
+
+    New installs use ~/.freeos. An existing ~/.octop is used when ~/.freeos
+    is absent, unless OCTOP_DESKTOP or FREEOS_DESKTOP is set. FREEOS_HOME
+    overrides OCTOP_HOME.
+    """
 
 
 @backup.command("create")
 @click.option(
     "-o", "--output", type=click.Path(path_type=Path), default=None, help="Output .tar.gz path."
 )
-@click.option(
-    "--home", type=click.Path(path_type=Path), default=None, help="Octop home (default ~/.octop)."
-)
+@click.option("--home", type=click.Path(path_type=Path), default=None, help=_HOME_HELP)
 @click.option("--no-config", is_flag=True, help="Do not include config.json / env.")
 @click.option("--no-workspaces", is_flag=True, help="Do not include agent workspaces.")
 @click.option("--no-skill-packages", is_flag=True, help="Do not include global skill packages.")
@@ -93,9 +103,7 @@ def auto() -> None:
 
 
 @auto.command("status")
-@click.option(
-    "--home", type=click.Path(path_type=Path), default=None, help="Octop home (default ~/.octop)."
-)
+@click.option("--home", type=click.Path(path_type=Path), default=None, help=_HOME_HELP)
 def auto_status(home: Path | None) -> None:
     """Print automatic backup settings from config.json."""
     paths = _paths(home)
@@ -114,9 +122,7 @@ def auto_status(home: Path | None) -> None:
 
 
 @auto.command("run")
-@click.option(
-    "--home", type=click.Path(path_type=Path), default=None, help="Octop home (default ~/.octop)."
-)
+@click.option("--home", type=click.Path(path_type=Path), default=None, help=_HOME_HELP)
 def auto_run(home: Path | None) -> None:
     """Create one automatic backup now and apply retention pruning."""
     paths = _paths(home)
@@ -148,9 +154,7 @@ def auto_run(home: Path | None) -> None:
 
 @backup.command("restore")
 @click.argument("archive", type=click.Path(exists=True, path_type=Path))
-@click.option(
-    "--home", type=click.Path(path_type=Path), default=None, help="Octop home (default ~/.octop)."
-)
+@click.option("--home", type=click.Path(path_type=Path), default=None, help=_HOME_HELP)
 @click.option("--no-config", is_flag=True, default=False, help="Do not restore config.json / env.")
 @click.option(
     "--owner-user-id",
@@ -167,7 +171,12 @@ def restore(
     owner_user_id: int | None,
     yes: bool,
 ) -> None:
-    """Restore from a backup archive. Stop ``octop run`` first for a clean restore."""
+    """Restore a backup into ~/.freeos, or ~/.octop when that legacy home is still in use.
+
+    Stop ``octop run`` first for a clean restore. An existing ~/.octop is
+    selected only when ~/.freeos is absent and OCTOP_DESKTOP / FREEOS_DESKTOP
+    are unset. FREEOS_HOME overrides OCTOP_HOME.
+    """
     if not yes:
         click.confirm(
             "This overwrites the database and local workspaces. Continue?",
diff --git a/src/octop/infra/connectors/gateway/protocol.py b/src/octop/infra/connectors/gateway/protocol.py
index 1f738f68..5b82599e 100644
--- a/src/octop/infra/connectors/gateway/protocol.py
+++ b/src/octop/infra/connectors/gateway/protocol.py
@@ -5,6 +5,7 @@
 import logging
 from typing import Any
 
+from octop import __version__
 from octop.infra.connectors.gateway.registry import call_gateway_tool, mcp_tools_for_kind
 
 logger = logging.getLogger(__name__)
@@ -28,7 +29,7 @@ def handle_mcp_request(
             {
                 "protocolVersion": MCP_PROTOCOL_VERSION,
                 "capabilities": {"tools": {}},
-                "serverInfo": {"name": f"octop-{kind}", "version": "0.1.0"},
+                "serverInfo": {"name": f"octop-{kind}", "version": __version__},
             },
         )
 
diff --git a/tests/unit/cli/test_backup_help.py b/tests/unit/cli/test_backup_help.py
new file mode 100644
index 00000000..df8da660
--- /dev/null
+++ b/tests/unit/cli/test_backup_help.py
@@ -0,0 +1,30 @@
+"""``octop backup --help`` names the FreeOS home and the legacy Octop home."""
+
+from __future__ import annotations
+
+from click.testing import CliRunner
+
+from octop.cli.main import cli
+
+
+def test_backup_help_uses_freeos_home_and_legacy_octop() -> None:
+    runner = CliRunner()
+    result = runner.invoke(cli, ["backup", "--help"])
+    assert result.exit_code == 0, result.output
+    assert "~/.freeos" in result.output
+    assert "~/.octop" in result.output
+    assert "default ~/.octop" not in result.output
+    assert "FREEOS_HOME" in result.output
+    assert "OCTOP_DESKTOP" in result.output
+
+    create = runner.invoke(cli, ["backup", "create", "--help"])
+    assert create.exit_code == 0, create.output
+    assert "~/.freeos" in create.output
+    assert "existing ~/.octop" in create.output
+    assert "default ~/.octop" not in create.output
+
+    restore = runner.invoke(cli, ["backup", "restore", "--help"])
+    assert restore.exit_code == 0, restore.output
+    assert "~/.freeos" in restore.output
+    assert "~/.octop" in restore.output
+    assert "default ~/.octop" not in restore.output
diff --git a/tests/unit/test_release_download_links.py b/tests/unit/test_release_download_links.py
index b52a9aa4..1fd3b3ae 100644
--- a/tests/unit/test_release_download_links.py
+++ b/tests/unit/test_release_download_links.py
@@ -42,6 +42,7 @@ def test_render_download_section_matches_github_asset_names() -> None:
     assert f"{base}/FreeOS-fnos-native-0.9.31.fpk" in body
     assert f"{base}/freeos-0.9.31-py3-none-any.whl" in body
     assert f"{base}/freeos-0.9.31.tar.gz" in body
+    assert f"{base}/SHA256SUMS" in body
     assert "octop-0.9.31" not in body
     assert "Do not** `pip install octop`" in body
     assert "## Downloads" in body
diff --git a/tests/unit/test_write_sha256sums.py b/tests/unit/test_write_sha256sums.py
new file mode 100644
index 00000000..e1c1182b
--- /dev/null
+++ b/tests/unit/test_write_sha256sums.py
@@ -0,0 +1,102 @@
+"""SHA256SUMS generation for FreeOS release artifacts."""
+
+from __future__ import annotations
+
+import hashlib
+import importlib.util
+import subprocess
+from pathlib import Path
+
+_SCRIPT = Path(__file__).resolve().parents[2] / "scripts" / "write_sha256sums.py"
+
+
+def _load():
+    spec = importlib.util.spec_from_file_location("write_sha256sums", _SCRIPT)
+    assert spec is not None and spec.loader is not None
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+def test_checksum_covers_desktop_zip_wheel_and_sdist(tmp_path: Path) -> None:
+    mod = _load()
+    names = {
+        "FreeOS-desktop-windows-amd64-0.1.0rc1.exe": b"exe",
+        "FreeOS-desktop-darwin-arm64-0.1.0rc1.dmg": b"dmg",
+        "FreeOS-desktop-linux-amd64-0.1.0rc1.tar.gz": b"linux-desktop",
+        "FreeOS-portable-linux-amd64-0.1.0rc1.zip": b"zip",
+        "freeos-0.1.0rc1-py3-none-any.whl": b"wheel",
+        "freeos-0.1.0rc1.tar.gz": b"sdist",
+        "FreeOS-fnos-docker-0.1.0rc1.fpk": b"not-a-target",
+        "notes.txt": b"nope",
+    }
+    for name, payload in names.items():
+        (tmp_path / name).write_bytes(payload)
+
+    destination = mod.write_sha256sums(tmp_path)
+    text = destination.read_text(encoding="utf-8")
+    lines = text.splitlines()
+    covered = [line.split("  ", 1)[1] for line in lines]
+    assert covered == [
+        "FreeOS-desktop-darwin-arm64-0.1.0rc1.dmg",
+        "FreeOS-desktop-linux-amd64-0.1.0rc1.tar.gz",
+        "FreeOS-desktop-windows-amd64-0.1.0rc1.exe",
+        "FreeOS-portable-linux-amd64-0.1.0rc1.zip",
+        "freeos-0.1.0rc1-py3-none-any.whl",
+        "freeos-0.1.0rc1.tar.gz",
+    ]
+    assert "FreeOS-fnos" not in text
+    assert "notes.txt" not in text
+    assert text.endswith("\n")
+    wheel_line = next(line for line in lines if line.endswith("freeos-0.1.0rc1-py3-none-any.whl"))
+    assert wheel_line.startswith(hashlib.sha256(b"wheel").hexdigest() + "  ")
+
+
+def test_empty_directory_is_rejected(tmp_path: Path) -> None:
+    mod = _load()
+    try:
+        mod.write_sha256sums(tmp_path)
+    except SystemExit as exc:
+        assert "no desktop" in str(exc)
+    else:
+        raise AssertionError("expected SystemExit")
+
+
+def test_missing_from_reports_assets_added_after_the_hash(tmp_path: Path) -> None:
+    mod = _load()
+    (tmp_path / "freeos-0.1.0rc1-py3-none-any.whl").write_bytes(b"wheel")
+    checksum = mod.write_sha256sums(tmp_path)
+    missing = mod.missing_targets(
+        checksum,
+        [
+            "freeos-0.1.0rc1-py3-none-any.whl",
+            "SHA256SUMS",
+            "FreeOS-desktop-windows-amd64-0.1.0rc1.exe",
+            "FreeOS-fnos-native-0.1.0rc1.fpk",
+        ],
+    )
+    assert missing == ["FreeOS-desktop-windows-amd64-0.1.0rc1.exe"]
+
+
+def test_cli_missing_from_exits_3(tmp_path: Path) -> None:
+    (tmp_path / "freeos-0.1.0rc1.tar.gz").write_bytes(b"sdist")
+    spec_mod = _load()
+    checksum = spec_mod.write_sha256sums(tmp_path)
+    completed = subprocess.run(
+        ["python3", str(_SCRIPT), "--missing-from", str(checksum)],
+        input="FreeOS-portable-darwin-arm64-0.1.0rc1.zip\n",
+        text=True,
+        capture_output=True,
+        check=False,
+    )
+    assert completed.returncode == 3
+    assert completed.stdout.strip() == "FreeOS-portable-darwin-arm64-0.1.0rc1.zip"
+
+
+def test_release_workflows_publish_sha256sums() -> None:
+    root = Path(__file__).resolve().parents[2]
+    release = (root / ".github/workflows/release.yml").read_text(encoding="utf-8")
+    desktop = (root / ".github/workflows/octop-desktop.yml").read_text(encoding="utf-8")
+    assert "bash scripts/publish_sha256sums.sh" in release
+    assert "bash scripts/publish_sha256sums.sh" in desktop
+    assert 'scripts/release_prerelease.py "${GITHUB_REF_NAME}"' in release
diff --git a/uv.lock b/uv.lock
index 0662c6ff..d66146e5 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2503,7 +2503,7 @@ wheels = [
 
 [[package]]
 name = "freeos"
-version = "0.1.0"
+version = "0.1.0rc1"
 source = { editable = "." }
 dependencies = [
     { name = "acme" },

From 7d4f7e847f75b8261f030052bec712bde3697fbc Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Mon, 26 Oct 2026 15:48:50 +0000
Subject: [PATCH 11/39] fix(deps): patch npm audit findings without major bumps

npm audit fix updates DOMPurify, fast-uri, and serialize-javascript in
the dashboard lock, and those plus body-parser, ip-address, multer, and
undici in the organization module. All stay on the current major.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 dashboard/package-lock.json        | 18 ++++++-------
 modules/openxyos/package-lock.json | 42 +++++++++++++++---------------
 2 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
index c97d3d08..25e4dd81 100644
--- a/dashboard/package-lock.json
+++ b/dashboard/package-lock.json
@@ -6558,9 +6558,9 @@
       "peer": true
     },
     "node_modules/dompurify": {
-      "version": "3.4.16",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz",
-      "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
+      "version": "3.4.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
+      "integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -7118,9 +7118,9 @@
       "dev": true
     },
     "node_modules/fast-uri": {
-      "version": "3.1.8",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
-      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
+      "version": "3.1.9",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
+      "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
       "dev": true,
       "funding": [
         {
@@ -12394,9 +12394,9 @@
       }
     },
     "node_modules/serialize-javascript": {
-      "version": "7.0.5",
-      "resolved": "https://mirrors.tencent.com/npm/serialize-javascript/-/serialize-javascript-7.0.5.tgz",
-      "integrity": "sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==",
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.4.tgz",
+      "integrity": "sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {
diff --git a/modules/openxyos/package-lock.json b/modules/openxyos/package-lock.json
index f2561f3b..8d6c8323 100644
--- a/modules/openxyos/package-lock.json
+++ b/modules/openxyos/package-lock.json
@@ -5779,9 +5779,9 @@
       "license": "MIT"
     },
     "node_modules/body-parser": {
-      "version": "1.20.8",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.8.tgz",
-      "integrity": "sha512-JNcyFQ64OiijEkPzUBTCe+hyPXUD/3LEldGQ6iF5LR1w00mx9o7xtDWHXBY2iItjdCFGoilOLNQbH943ut7pHA==",
+      "version": "1.20.9",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.9.tgz",
+      "integrity": "sha512-FISIQxV5u91Y9gvuFq3q/tA/qTqLJn3AhRcEvyozyhJTh5OBFFtv827AdHU7Rbyct4r+Ba1/99oFa1Y3yuFsdw==",
       "license": "MIT",
       "dependencies": {
         "bytes": "~3.1.2",
@@ -7305,9 +7305,9 @@
       "license": "MIT"
     },
     "node_modules/dompurify": {
-      "version": "3.4.16",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz",
-      "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
+      "version": "3.4.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
+      "integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -8112,9 +8112,9 @@
       }
     },
     "node_modules/fast-uri": {
-      "version": "3.1.8",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
-      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
+      "version": "3.1.9",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
+      "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
       "dev": true,
       "funding": [
         {
@@ -8989,9 +8989,9 @@
       "license": "MIT"
     },
     "node_modules/ip-address": {
-      "version": "10.7.3",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.3.tgz",
-      "integrity": "sha512-A1kdq/tSb5QjvKvAMgIoEvDBIgL7qaqVP/jkvSwYYRZ9iEzvPpopxp2wQfu3SuZRHtpHNxMn8Fs0bS+gf5Xmwg==",
+      "version": "10.7.5",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.7.5.tgz",
+      "integrity": "sha512-t2v0rkILYv9WXmSL7TpAaU3HXgaFYOPUcH3QHgwQ++gpJuH3bqyMy4Fvt/DJCTKwzH3Cf+bAp5W/mFL39KPLzA==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -10662,9 +10662,9 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "2.4.0",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-2.4.0.tgz",
-      "integrity": "sha512-7dqa0ZcFfzbefdTuIkzOSMvZWC0J7FLqBOjJUZvDCXShIURWKxAyTT1wHhnE5q19c7jOJf43IYYKjBmZVZmvhg==",
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.5.0.tgz",
+      "integrity": "sha512-BsqOzYGVq49JcW2IzoSAxeKYRevb+dGGPPWleOR8Lrlk4igwxu1/9pwSXlByhCb7MVZDrNJFC0IBP5/O5nLYRw==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
@@ -12018,9 +12018,9 @@
       "license": "MIT"
     },
     "node_modules/serialize-javascript": {
-      "version": "7.0.7",
-      "resolved": "https://registry.npmmirror.com/serialize-javascript/-/serialize-javascript-7.0.7.tgz",
-      "integrity": "sha512-YAy8Od6KV+uuwUuU50np8fGB/Aues6Y0nAhA9y/hId74PlKUcme4pXcBD46NWKr1Q4osN/iseZ17YqO1XfmI8g==",
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.1.4.tgz",
+      "integrity": "sha512-FqlEuoTq/zRmA4Lg6aOqyH3lCHbUtCB0bmHCeFniX2GBdDqMJM3FwdvEhlE5Pim1dlt2FfBdVPmUNNiGhhKqpw==",
       "dev": true,
       "license": "BSD-3-Clause",
       "engines": {
@@ -13088,9 +13088,9 @@
       "license": "MIT"
     },
     "node_modules/undici": {
-      "version": "7.29.1",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz",
-      "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==",
+      "version": "7.30.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.1.tgz",
+      "integrity": "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==",
       "dev": true,
       "license": "MIT",
       "engines": {

From b8bcd2ad73f813a350ca452c7811c1bf420e1a83 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Mon, 26 Oct 2026 15:52:19 +0000
Subject: [PATCH 12/39] fix(release): include FnOS packages in SHA256SUMS

Hash FreeOS-fnos-*.fpk with the other release artifacts, and refresh
SHA256SUMS after the FnOS workflow attaches those packages.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .github/workflows/fnos-build-fpk.yml |  8 ++++++++
 scripts/publish_sha256sums.sh        |  9 ++++++---
 scripts/write_sha256sums.py          |  9 ++++++---
 tests/unit/test_write_sha256sums.py  | 18 +++++++++++++++---
 4 files changed, 35 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/fnos-build-fpk.yml b/.github/workflows/fnos-build-fpk.yml
index 21829870..8c8cf082 100644
--- a/.github/workflows/fnos-build-fpk.yml
+++ b/.github/workflows/fnos-build-fpk.yml
@@ -288,3 +288,11 @@ jobs:
           make_latest: ${{ steps.channel.outputs.prerelease == 'true' && 'false' || 'true' }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      # Refresh SHA256SUMS after FreeOS-fnos-*.fpk lands. Release and Desktop
+      # Package publish the same file earlier; this pass adds the FnOS packages
+      # and keeps installers, zips, wheels, and sdists already on the release.
+      - name: Publish SHA256SUMS
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: bash scripts/publish_sha256sums.sh "${{ needs.version.outputs.tag }}" dist
diff --git a/scripts/publish_sha256sums.sh b/scripts/publish_sha256sums.sh
index 79fa6423..a9b2613d 100644
--- a/scripts/publish_sha256sums.sh
+++ b/scripts/publish_sha256sums.sh
@@ -1,7 +1,8 @@
 #!/usr/bin/env bash
-# Upload SHA256SUMS for the desktop installers, portable zips, wheels, and
-# sdists on a GitHub Release. Local directories are overlaid on assets already
-# attached, so Release and Desktop Package can each refresh the same file.
+# Upload SHA256SUMS for the desktop installers, portable zips, FnOS packages
+# (FreeOS-fnos-*.fpk), wheels, and sdists on a GitHub Release. Local
+# directories are overlaid on assets already attached, so Release, Desktop
+# Package, and FnOS can each refresh the same file.
 #
 #   bash scripts/publish_sha256sums.sh v0.1.0rc1 dist
 #   bash scripts/publish_sha256sums.sh v0.1.0rc1 release-assets
@@ -65,6 +66,8 @@ stage_assets() {
     if [[ -n "$listed" ]]; then
       mapfile -t ASSET_NAMES <<<"$listed"
     fi
+    # freeos-* is the wheel and sdist. FreeOS-* is desktop installers,
+    # portable zips, and FnOS packages named FreeOS-fnos-*.fpk.
     download_pattern_if_present 'freeos-*'
     download_pattern_if_present 'FreeOS-*'
   fi
diff --git a/scripts/write_sha256sums.py b/scripts/write_sha256sums.py
index 1d8717a6..8675f9b2 100644
--- a/scripts/write_sha256sums.py
+++ b/scripts/write_sha256sums.py
@@ -2,8 +2,9 @@
 """Write GNU SHA256SUMS for FreeOS GitHub Release artifacts.
 
 Covers desktop installers (``FreeOS-desktop-*``), portable zips
-(``FreeOS-portable-*.zip``), wheels (``*.whl``), and sdists
-(``freeos-*.tar.gz``). ``SHA256SUMS`` itself is not hashed.
+(``FreeOS-portable-*.zip``), FnOS packages (``FreeOS-fnos-*.fpk``),
+wheels (``*.whl``), and sdists (``freeos-*.tar.gz``). ``SHA256SUMS``
+itself is not hashed.
 
     python3 scripts/write_sha256sums.py dist/
 """
@@ -17,13 +18,15 @@
 
 
 def is_checksum_target(name: str) -> bool:
-    """Return whether ``name`` is a desktop installer, zip, wheel, or sdist."""
+    """Return whether ``name`` is a desktop installer, zip, FnOS package, wheel, or sdist."""
     if not name or name == "SHA256SUMS" or name.startswith("."):
         return False
     if name.startswith("FreeOS-desktop-"):
         return True
     if name.startswith("FreeOS-portable-") and name.endswith(".zip"):
         return True
+    if name.startswith("FreeOS-fnos-") and name.endswith(".fpk"):
+        return True
     if name.endswith(".whl"):
         return True
     # Linux desktop packages are FreeOS-desktop-*.tar.gz, already matched.
diff --git a/tests/unit/test_write_sha256sums.py b/tests/unit/test_write_sha256sums.py
index e1c1182b..eef08c07 100644
--- a/tests/unit/test_write_sha256sums.py
+++ b/tests/unit/test_write_sha256sums.py
@@ -27,7 +27,9 @@ def test_checksum_covers_desktop_zip_wheel_and_sdist(tmp_path: Path) -> None:
         "FreeOS-portable-linux-amd64-0.1.0rc1.zip": b"zip",
         "freeos-0.1.0rc1-py3-none-any.whl": b"wheel",
         "freeos-0.1.0rc1.tar.gz": b"sdist",
-        "FreeOS-fnos-docker-0.1.0rc1.fpk": b"not-a-target",
+        "FreeOS-fnos-docker-0.1.0rc1.fpk": b"fnos-docker",
+        "FreeOS-fnos-native-0.1.0rc1.fpk": b"fnos-native",
+        "Octop-fnos-docker-0.1.0rc1.fpk": b"legacy-name",
         "notes.txt": b"nope",
     }
     for name, payload in names.items():
@@ -41,15 +43,19 @@ def test_checksum_covers_desktop_zip_wheel_and_sdist(tmp_path: Path) -> None:
         "FreeOS-desktop-darwin-arm64-0.1.0rc1.dmg",
         "FreeOS-desktop-linux-amd64-0.1.0rc1.tar.gz",
         "FreeOS-desktop-windows-amd64-0.1.0rc1.exe",
+        "FreeOS-fnos-docker-0.1.0rc1.fpk",
+        "FreeOS-fnos-native-0.1.0rc1.fpk",
         "FreeOS-portable-linux-amd64-0.1.0rc1.zip",
         "freeos-0.1.0rc1-py3-none-any.whl",
         "freeos-0.1.0rc1.tar.gz",
     ]
-    assert "FreeOS-fnos" not in text
+    assert "Octop-fnos" not in text
     assert "notes.txt" not in text
     assert text.endswith("\n")
     wheel_line = next(line for line in lines if line.endswith("freeos-0.1.0rc1-py3-none-any.whl"))
     assert wheel_line.startswith(hashlib.sha256(b"wheel").hexdigest() + "  ")
+    fpk_line = next(line for line in lines if line.endswith("FreeOS-fnos-docker-0.1.0rc1.fpk"))
+    assert fpk_line.startswith(hashlib.sha256(b"fnos-docker").hexdigest() + "  ")
 
 
 def test_empty_directory_is_rejected(tmp_path: Path) -> None:
@@ -73,9 +79,13 @@ def test_missing_from_reports_assets_added_after_the_hash(tmp_path: Path) -> Non
             "SHA256SUMS",
             "FreeOS-desktop-windows-amd64-0.1.0rc1.exe",
             "FreeOS-fnos-native-0.1.0rc1.fpk",
+            "Octop-fnos-docker-0.1.0rc1.fpk",
         ],
     )
-    assert missing == ["FreeOS-desktop-windows-amd64-0.1.0rc1.exe"]
+    assert missing == [
+        "FreeOS-desktop-windows-amd64-0.1.0rc1.exe",
+        "FreeOS-fnos-native-0.1.0rc1.fpk",
+    ]
 
 
 def test_cli_missing_from_exits_3(tmp_path: Path) -> None:
@@ -97,6 +107,8 @@ def test_release_workflows_publish_sha256sums() -> None:
     root = Path(__file__).resolve().parents[2]
     release = (root / ".github/workflows/release.yml").read_text(encoding="utf-8")
     desktop = (root / ".github/workflows/octop-desktop.yml").read_text(encoding="utf-8")
+    fnos = (root / ".github/workflows/fnos-build-fpk.yml").read_text(encoding="utf-8")
     assert "bash scripts/publish_sha256sums.sh" in release
     assert "bash scripts/publish_sha256sums.sh" in desktop
+    assert "bash scripts/publish_sha256sums.sh" in fnos
     assert 'scripts/release_prerelease.py "${GITHUB_REF_NAME}"' in release

From 43997488e4d73b8e0e31f08dccbe814bc812373a Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Mon, 26 Oct 2026 16:07:06 +0000
Subject: [PATCH 13/39] fix(desktop): map prerelease versions onto numeric
 Windows resources

NSIS VIProductVersion and go-winres file_version reject 0.1.0rc1.
Keep the display string, and write 0.1.0.0 for the numeric fields.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .gitignore                                 |  1 +
 desktop/src/build/stamp_version.py         | 59 +++++++++++++++++++++-
 desktop/src/build/windows/Taskfile.yml     |  4 ++
 desktop/src/build/windows/nsis/project.nsi |  8 ++-
 tests/unit/desktop/test_stamp_version.py   | 53 +++++++++++++++++++
 5 files changed, 122 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 2f413793..b091066d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,6 +2,7 @@
 build/
 !desktop/src/build/
 !desktop/src/build/**
+desktop/src/build/windows/nsis/product_version.nsh
 dist/
 
 # OS
diff --git a/desktop/src/build/stamp_version.py b/desktop/src/build/stamp_version.py
index 02ece8fe..91b3391e 100644
--- a/desktop/src/build/stamp_version.py
+++ b/desktop/src/build/stamp_version.py
@@ -15,6 +15,10 @@
     r'(<assemblyIdentity\b[^>]*\bname="com\.xyaistudio\.freeos"[^>]*\bversion=")[^"]+(")',
     re.IGNORECASE,
 )
+# 0.1.0rc1 / 0.1.0a1 / 0.1.0b1 / 0.1.0.dev1 → release core 0.1.0.
+_PEP440_CORE = re.compile(r"^(?P<core>\d+(?:\.\d+)*)(?:(?:a|b|rc)\d+|\.dev\d+)?$")
+# wails_tools.nsh fallback INFO_PRODUCTVERSION, plus the extra ".0" NSIS appends.
+_NSIS_DEV_FALLBACK = "0.0.2.0"
 
 
 def should_stamp(version: str) -> bool:
@@ -32,6 +36,44 @@ def four_part_version(version: str) -> str | None:
     return ".".join(parts[:4])
 
 
+def release_core(version: str) -> str | None:
+    """Numeric core of a PEP 440 version, dropping a/b/rc/.dev suffixes."""
+    if not should_stamp(version):
+        return None
+    match = _PEP440_CORE.fullmatch(version)
+    if match is None:
+        return None
+    return match.group("core")
+
+
+def nsis_vi_version(version: str) -> str:
+    """Four integers for NSIS VIProductVersion / VIFileVersion.
+
+    ``0.1.0`` stays ``0.1.0.0``. ``0.1.0rc1`` uses the same numeric fields;
+    the installer display string keeps the prerelease text separately.
+    ``dev`` matches the local makensis fallback in ``wails_tools.nsh``.
+    """
+    if not should_stamp(version):
+        return _NSIS_DEV_FALLBACK
+    core = release_core(version)
+    if core is None:
+        raise SystemExit(f"cannot map {version!r} to an NSIS version")
+    dotted = four_part_version(core)
+    if dotted is None:
+        raise SystemExit(f"cannot map {version!r} to an NSIS version")
+    return dotted
+
+
+def write_nsis_numeric(version: str, dest: Path) -> None:
+    """Write the ``!define`` included by ``project.nsi``."""
+    numeric = nsis_vi_version(version)
+    dest.parent.mkdir(parents=True, exist_ok=True)
+    dest.write_text(
+        f'!define INFO_PRODUCTVERSION_NUMERIC "{numeric}"\n',
+        encoding="utf-8",
+    )
+
+
 def stamp_plist(path: Path, version: str) -> None:
     if not should_stamp(version):
         return
@@ -48,7 +90,10 @@ def stamp_info_json(src: Path, dest: Path, version: str) -> None:
     if not should_stamp(version):
         return
     data = json.loads(dest.read_text(encoding="utf-8"))
-    data["fixed"]["file_version"] = version
+    # go-winres parses file_version as integers. A prerelease string such as
+    # 0.1.0rc1 stays on the ProductVersion display field only.
+    file_version = version if four_part_version(version) is not None else nsis_vi_version(version)
+    data["fixed"]["file_version"] = file_version
     data["info"]["0000"]["ProductVersion"] = version
     dest.write_text(json.dumps(data, indent=4) + "\n", encoding="utf-8")
 
@@ -60,6 +105,9 @@ def stamp_manifest(src: Path, dest: Path, version: str) -> None:
     if not should_stamp(version):
         return
     dotted = four_part_version(version)
+    if dotted is None:
+        core = release_core(version)
+        dotted = four_part_version(core) if core is not None else None
     if dotted is None:
         return
     text = dest.read_text(encoding="utf-8")
@@ -87,11 +135,20 @@ def main(argv: list[str] | None = None) -> int:
     man_p.add_argument("dest", type=Path)
     man_p.add_argument("version")
 
+    nsis_p = sub.add_parser(
+        "nsis-numeric",
+        help="Write product_version.nsh with a four-integer VIProductVersion",
+    )
+    nsis_p.add_argument("version")
+    nsis_p.add_argument("dest", type=Path)
+
     args = parser.parse_args(argv)
     if args.cmd == "plist":
         stamp_plist(args.path, args.version)
     elif args.cmd == "json":
         stamp_info_json(args.src, args.dest, args.version)
+    elif args.cmd == "nsis-numeric":
+        write_nsis_numeric(args.version, args.dest)
     else:
         stamp_manifest(args.src, args.dest, args.version)
     return 0
diff --git a/desktop/src/build/windows/Taskfile.yml b/desktop/src/build/windows/Taskfile.yml
index 9f7a33f6..6288510b 100644
--- a/desktop/src/build/windows/Taskfile.yml
+++ b/desktop/src/build/windows/Taskfile.yml
@@ -115,6 +115,10 @@ tasks:
           powershell -NoProfile -Command
           "Remove-Item -Force '{{.ROOT_DIR}}/{{.ARCHIVE}}' -ErrorAction SilentlyContinue;
           New-Item -ItemType Directory -Force '{{.ROOT_DIR}}/{{.BIN_DIR}}' | Out-Null"
+      - cmd: python ../../stamp_version.py nsis-numeric "{{.VERSION}}" product_version.nsh
+        platforms: [windows]
+      - cmd: python3 ../../stamp_version.py nsis-numeric "{{.VERSION}}" product_version.nsh
+        platforms: [linux, darwin]
       - |
         {{if eq OS "windows"}}
         makensis -INPUTCHARSET UTF8 {{.VERSION_NSIS_DEFINE}}-DARG_WAILS_{{.ARG_FLAG}}_BINARY="{{.ROOT_DIR}}\{{.BIN_DIR}}\{{.APP_NAME}}.exe" -DINSTALLER_OUTFILE="{{.ROOT_DIR}}\{{.ARCHIVE}}" project.nsi
diff --git a/desktop/src/build/windows/nsis/project.nsi b/desktop/src/build/windows/nsis/project.nsi
index c9385c06..4125fc5c 100644
--- a/desktop/src/build/windows/nsis/project.nsi
+++ b/desktop/src/build/windows/nsis/project.nsi
@@ -11,12 +11,16 @@
 # "è¿è¡Œ FreeOS". Keep this file UTF-8 with BOM.
 
 !include "wails_tools.nsh"
+# Written by `stamp_version.py nsis-numeric` before makensis.
+# VIProductVersion / VIFileVersion must be four integers (0.1.0rc1 -> 0.1.0.0).
+# String keys below keep the full product version, including a prerelease suffix.
+!include "product_version.nsh"
 
 SetCompressor /SOLID lzma
 
 # The version information for this two must consist of 4 parts
-VIProductVersion "${INFO_PRODUCTVERSION}.0"
-VIFileVersion    "${INFO_PRODUCTVERSION}.0"
+VIProductVersion "${INFO_PRODUCTVERSION_NUMERIC}"
+VIFileVersion    "${INFO_PRODUCTVERSION_NUMERIC}"
 
 VIAddVersionKey "CompanyName"     "${INFO_COMPANYNAME}"
 VIAddVersionKey "FileDescription" "${INFO_PRODUCTNAME} Installer"
diff --git a/tests/unit/desktop/test_stamp_version.py b/tests/unit/desktop/test_stamp_version.py
index 00562856..e59fd8fb 100644
--- a/tests/unit/desktop/test_stamp_version.py
+++ b/tests/unit/desktop/test_stamp_version.py
@@ -65,6 +65,59 @@ def test_four_part_version_pads_semver() -> None:
     assert stamp_version.four_part_version("1.2.3") == "1.2.3.0"
     assert stamp_version.four_part_version("1.2.3.4") == "1.2.3.4"
     assert stamp_version.four_part_version("dev") is None
+    assert stamp_version.four_part_version("0.1.0rc1") is None
+
+
+def test_nsis_vi_version_strips_prerelease() -> None:
+    assert stamp_version.nsis_vi_version("0.1.0") == "0.1.0.0"
+    assert stamp_version.nsis_vi_version("0.1.0rc1") == "0.1.0.0"
+    assert stamp_version.nsis_vi_version("1.2.3a1") == "1.2.3.0"
+    assert stamp_version.nsis_vi_version("1.2.3.dev2") == "1.2.3.0"
+    assert stamp_version.nsis_vi_version("dev") == "0.0.2.0"
+
+
+def test_stamp_info_json_keeps_prerelease_on_display_string(tmp_path: Path) -> None:
+    src = (
+        Path(__file__).resolve().parents[3] / "desktop" / "src" / "build" / "windows" / "info.json"
+    )
+    dest = tmp_path / "info.generated.json"
+    stamp_version.stamp_info_json(src, dest, "0.1.0rc1")
+    data = json.loads(dest.read_text(encoding="utf-8"))
+    assert data["fixed"]["file_version"] == "0.1.0.0"
+    assert data["info"]["0000"]["ProductVersion"] == "0.1.0rc1"
+
+
+def test_stamp_manifest_uses_numeric_core_for_prerelease(tmp_path: Path) -> None:
+    src = (
+        Path(__file__).resolve().parents[3]
+        / "desktop"
+        / "src"
+        / "build"
+        / "windows"
+        / "wails.exe.manifest"
+    )
+    dest = tmp_path / "wails.exe.generated.manifest"
+    stamp_version.stamp_manifest(src, dest, "0.1.0rc1")
+    text = dest.read_text(encoding="utf-8")
+    assert 'name="com.xyaistudio.freeos" version="0.1.0.0"' in text
+
+
+def test_write_nsis_numeric_and_installer_wiring(tmp_path: Path) -> None:
+    dest = tmp_path / "product_version.nsh"
+    stamp_version.write_nsis_numeric("0.1.0rc1", dest)
+    assert dest.read_text(encoding="utf-8") == '!define INFO_PRODUCTVERSION_NUMERIC "0.1.0.0"\n'
+    root = Path(__file__).resolve().parents[3]
+    nsi = (root / "desktop" / "src" / "build" / "windows" / "nsis" / "project.nsi").read_text(
+        encoding="utf-8"
+    )
+    task = (root / "desktop" / "src" / "build" / "windows" / "Taskfile.yml").read_text(
+        encoding="utf-8"
+    )
+    assert 'VIProductVersion "${INFO_PRODUCTVERSION_NUMERIC}"' in nsi
+    assert 'VIFileVersion    "${INFO_PRODUCTVERSION_NUMERIC}"' in nsi
+    assert 'VIAddVersionKey "ProductVersion"  "${INFO_PRODUCTVERSION}"' in nsi
+    assert "stamp_version.py nsis-numeric" in task
+    assert '!include "product_version.nsh"' in nsi
 
 
 def test_stamp_manifest_sets_octop_identity_only(tmp_path: Path) -> None:

From 5ca8e23bec1098d9cf7a19d9bbcc90a1490e5b95 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Mon, 26 Oct 2026 16:22:24 +0000
Subject: [PATCH 14/39] fix(release): sort SHA256SUMS by filename on every
 platform

Windows pathlib orders paths case-insensitively, so freeos-* sorted
ahead of FreeOS-*. Compare the filename string instead.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 scripts/write_sha256sums.py | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/scripts/write_sha256sums.py b/scripts/write_sha256sums.py
index 8675f9b2..8c5e9a5b 100644
--- a/scripts/write_sha256sums.py
+++ b/scripts/write_sha256sums.py
@@ -49,8 +49,11 @@ def write_sha256sums(directory: Path) -> Path:
     """
     if not directory.is_dir():
         raise SystemExit(f"not a directory: {directory}")
+    # Sort by the filename string. pathlib.Path ordering on Windows is
+    # case-insensitive, which would place freeos-* ahead of FreeOS-*.
     files = sorted(
-        path for path in directory.iterdir() if path.is_file() and is_checksum_target(path.name)
+        (path for path in directory.iterdir() if path.is_file() and is_checksum_target(path.name)),
+        key=lambda path: path.name,
     )
     if not files:
         raise SystemExit(f"no desktop, zip, wheel, or sdist artifacts in {directory}")

From b6f4b9c12b562943a6396dfb231929b870649bb1 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Tue, 27 Oct 2026 00:56:13 +0000
Subject: [PATCH 15/39] fix(install): label user-visible install logs as FreeOS

Operators still saw [octop] and "Installing Octop" while installing FreeOS.
Log prefixes, success lines, and install prompts now say FreeOS. Paths, the
octop CLI, and notes about upstream PyPI Octop stay unchanged.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 desktop/package-dev.sh             |  6 +--
 docker/docker-entrypoint.sh        |  8 ++--
 fnos/README.md                     |  4 +-
 fnos/docker/app/ui/config          |  2 +-
 fnos/docker/cmd/config_callback    | 10 ++---
 fnos/docker/cmd/config_init        |  4 +-
 fnos/docker/cmd/install_callback   |  6 +--
 fnos/docker/cmd/install_init       |  4 +-
 fnos/docker/cmd/uninstall_callback |  2 +-
 fnos/docker/cmd/uninstall_init     |  2 +-
 fnos/docker/manifest               |  2 +-
 fnos/docker/wizard/install         |  2 +-
 fnos/native/app/bin/octop          | 16 ++++----
 fnos/native/app/bin/octop-cli      |  4 +-
 fnos/native/app/ui/config          |  2 +-
 fnos/native/cmd/config_callback    | 12 +++---
 fnos/native/cmd/config_init        |  4 +-
 fnos/native/cmd/install_callback   | 24 +++++------
 fnos/native/cmd/install_init       |  4 +-
 fnos/native/cmd/main               | 12 +++---
 fnos/native/cmd/uninstall_callback |  6 +--
 fnos/native/cmd/uninstall_init     |  2 +-
 fnos/native/manifest               |  4 +-
 fnos/native/wizard/install         |  2 +-
 scripts/fnos/common.sh             | 16 ++++----
 scripts/install-octop.sh           | 30 +++++++-------
 scripts/install.bat                | 66 +++++++++++++++---------------
 scripts/install.ps1                | 20 ++++-----
 scripts/install.sh                 | 26 ++++++------
 src/octop/infra/setup/service.py   |  2 +-
 30 files changed, 152 insertions(+), 152 deletions(-)

diff --git a/desktop/package-dev.sh b/desktop/package-dev.sh
index 75c6507b..a4f9ab61 100644
--- a/desktop/package-dev.sh
+++ b/desktop/package-dev.sh
@@ -42,7 +42,7 @@ cleanup() {
 trap cleanup EXIT INT TERM
 
 if curl -sf -o /dev/null --max-time 1 "$HEALTH"; then
-  echo "Octop already listening at ${URL}; stop it first so this script can own the process." >&2
+  echo "FreeOS already listening at ${URL}; stop it first so this script can own the process." >&2
   exit 1
 fi
 
@@ -58,14 +58,14 @@ for _ in $(seq 1 60); do
     break
   fi
   if ! kill -0 "$octop_pid" 2>/dev/null; then
-    echo "Octop 进程在就绪前退出了，请查看上方日志。" >&2
+    echo "FreeOS 进程在就绪前退出了，请查看上方日志。" >&2
     exit 1
   fi
   sleep 0.5
 done
 
 if ! curl -sf -o /dev/null --max-time 1 "$HEALTH"; then
-  echo "Octop 未在 30 秒内就绪（${URL}）。" >&2
+  echo "FreeOS 未在 30 秒内就绪（${URL}）。" >&2
   echo "请查看上方 octop run 的输出；常见原因：端口被占用、依赖缺失，或服务启动失败。" >&2
   exit 1
 fi
diff --git a/docker/docker-entrypoint.sh b/docker/docker-entrypoint.sh
index b212c4bf..a5de348c 100644
--- a/docker/docker-entrypoint.sh
+++ b/docker/docker-entrypoint.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # =============================================================================
-# Octop 容器入口脚本
+# FreeOS 容器入口脚本
 #
 # 环境变量:
 #   HOME                      — 必须为 /data，使 ~/.octop 映射到数据卷
@@ -47,7 +47,7 @@ octop_random_password() {
 DEFAULT_PASSWORD="${OCTOP_DEFAULT_PASSWORD:-}"
 
 if [ ! -f "$DB_FILE" ]; then
-    echo "[entrypoint] 首次启动，正在初始化 Octop..."
+    echo "[entrypoint] 首次启动，正在初始化 FreeOS..."
 
     if [ -z "$DEFAULT_PASSWORD" ]; then
         DEFAULT_PASSWORD="$(octop_random_password)"
@@ -69,7 +69,7 @@ if [ ! -f "$DB_FILE" ]; then
     fi
 
     cat > "$CREDENTIAL_FILE" << EOF
-Octop Login Credential
+FreeOS Login Credential
 ======================
 URL:      http://<host>:${PORT}
 Username: ${ADMIN_USERNAME}
@@ -87,7 +87,7 @@ EOF
 fi
 
 if [ $# -eq 0 ]; then
-    echo "[entrypoint] 正在启动 Octop，端口 $PORT..."
+    echo "[entrypoint] 正在启动 FreeOS，端口 $PORT..."
     exec octop run --host 0.0.0.0 --port "$PORT"
 fi
 
diff --git a/fnos/README.md b/fnos/README.md
index b8483e5a..03190861 100644
--- a/fnos/README.md
+++ b/fnos/README.md
@@ -11,7 +11,7 @@
 
 生成的 / 设置的密码通过以下两种方式**双保险**送达用户：
 
-- **应用「设置」窗口**：飞牛应用中心 → Octop → 设置，窗口顶部直接显示当前管理员账号与密码，也可在此随时改密（保持不变 / 随机生成 / 自己设置）；
+- **应用「设置」窗口**：飞牛应用中心 → FreeOS → 设置，窗口顶部直接显示当前管理员账号与密码，也可在此随时改密（保持不变 / 随机生成 / 自己设置）；
 - **回落备份文件**：数据共享目录下的 `octop-login.txt`（本地版在 data-share 共享目录，Docker 版在 `/var/apps/octop/share/octop/data/`），永久保留并随改密同步更新。
 
 > 若你在 Web 控制台「头像菜单 → 修改密码」中改过密码，则以 Web 密码为准（`octop-login.txt` 与「设置」窗口显示的是安装/配置阶段写入的凭据）。
@@ -107,7 +107,7 @@ bash scripts/build-fpk.sh native     # 仅本地版      → dist/FreeOS-fnos-na
    - 想用 Docker 跑、主机已装 Docker → 选 `FreeOS-fnos-docker-<version>.fpk`
    - 不想依赖 Docker、希望自带运行时原生运行 → 选 `FreeOS-fnos-native-<version>.fpk`
 2. 安装向导中设置管理员账号/密码、日志级别、LLM 密钥（可选）。
-3. 安装完成后桌面出现「Octop AI 助手」图标，浏览器打开 `http://<设备IP>:8088`。
+3. 安装完成后桌面出现「FreeOS」图标，浏览器打开 `http://<设备IP>:8088`。
 4. Docker 版镜像首次会从 GHCR `ghcr.io/xyaistudio/freeos:latest` 拉取；请确保该包为 Public（首次推送后可在 GitHub Packages 设置）。本地版无需联网拉镜像。Playwright Chromium 不预装，需要远程浏览器时在控制台按需安装。
 
 > 服务端口固定为 `8088`（飞牛端口映射与桌面图标均据此）。`desktop` 桌面控制已在镜像中默认安装。
diff --git a/fnos/docker/app/ui/config b/fnos/docker/app/ui/config
index a8260225..c6f9903f 100644
--- a/fnos/docker/app/ui/config
+++ b/fnos/docker/app/ui/config
@@ -1,7 +1,7 @@
 {
     ".url": {
         "octop.Application": {
-            "title": "OCTOP",
+            "title": "FreeOS",
             "icon": "images/icon_{0}.png",
             "type": "iframe",
             "protocol": "http",
diff --git a/fnos/docker/cmd/config_callback b/fnos/docker/cmd/config_callback
index b12b018c..2e9d13c0 100644
--- a/fnos/docker/cmd/config_callback
+++ b/fnos/docker/cmd/config_callback
@@ -42,8 +42,8 @@ OPENAI_NEW="$(octop_sanitize_value "${wizard_openai_api_key:-}")"
 DASHSCOPE_NEW="$(octop_sanitize_value "${wizard_dashscope_api_key:-}")"
 
 fail_config() {
-    echo "[octop] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop] $1" >&2 || true
+    echo "[freeos] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos] $1" >&2 || true
     exit 1
 }
 
@@ -95,9 +95,9 @@ DASHSCOPE="$CUR_DASH"
 if [ "$PASS_CHANGED" = "1" ]; then
     if docker ps --format '{{.Names}}' 2>/dev/null | grep -qx "$CONTAINER" \
         && docker exec "$CONTAINER" octop user passwd "$ADMIN_USER" --password "$ADMIN_PASS" > "$LOG" 2>&1; then
-        echo "[octop] 已通过官方 CLI（docker exec octop octop user passwd）修改管理员密码" > "$LOG" 2>&1 || true
+        echo "[freeos] 已通过官方 CLI（docker exec octop octop user passwd）修改管理员密码" > "$LOG" 2>&1 || true
     else
-        echo "[octop] 提示：容器未运行或在线改密未成功，密码将写入 .env；重建容器/重新初始化时生效。" > "$LOG" 2>&1 || true
+        echo "[freeos] 提示：容器未运行或在线改密未成功，密码将写入 .env；重建容器/重新初始化时生效。" > "$LOG" 2>&1 || true
     fi
 fi
 
@@ -113,7 +113,7 @@ octop_env_set "$ENV_FILE" OCTOP_ADMIN_DISPLAY_NAME "Admin"
 octop_env_set "$ENV_FILE" OPENAI_API_KEY "$OPENAI"
 octop_env_set "$ENV_FILE" DASHSCOPE_API_KEY "$DASHSCOPE"
 
-echo "[octop] 配置已更新: $ENV_FILE" > "$LOG" 2>&1 || true
+echo "[freeos] 配置已更新: $ENV_FILE" > "$LOG" 2>&1 || true
 
 # 凭据回落保存 + 「设置」窗口当前密码显示刷新
 octop_write_login_file "$DATA_DIR" "$ADMIN_USER" "$ADMIN_PASS" 8088
diff --git a/fnos/docker/cmd/config_init b/fnos/docker/cmd/config_init
index f293bcf2..2d8147af 100644
--- a/fnos/docker/cmd/config_init
+++ b/fnos/docker/cmd/config_init
@@ -11,8 +11,8 @@ _OCTOP_COMMON="$(dirname "$0")/common.sh"
 [ -f "$_OCTOP_COMMON" ] && source "$_OCTOP_COMMON"
 
 fail_config() {
-    echo "[octop] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop] $1" >&2 || true
+    echo "[freeos] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos] $1" >&2 || true
     exit 1
 }
 
diff --git a/fnos/docker/cmd/install_callback b/fnos/docker/cmd/install_callback
index b77b6dc9..47504d75 100644
--- a/fnos/docker/cmd/install_callback
+++ b/fnos/docker/cmd/install_callback
@@ -31,8 +31,8 @@ DATA_DIR="/var/apps/octop/share/octop/data"
 mkdir -p "$DATA_DIR"
 
 fail_install() {
-    echo "[octop] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop] $1" >&2 || true
+    echo "[freeos] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos] $1" >&2 || true
     exit 1
 }
 
@@ -86,7 +86,7 @@ esac
 } > "$ENV_FILE"
 
 chmod 600 "$ENV_FILE"
-echo "[octop] 已写入配置: $ENV_FILE" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
+echo "[freeos] 已写入配置: $ENV_FILE" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
 
 # ---------------------------------------------------------------------------
 # 凭据回落保存（octop-login.txt）+ 「设置」窗口当前密码显示渲染
diff --git a/fnos/docker/cmd/install_init b/fnos/docker/cmd/install_init
index 8a034a6d..cf444907 100644
--- a/fnos/docker/cmd/install_init
+++ b/fnos/docker/cmd/install_init
@@ -11,8 +11,8 @@ _OCTOP_COMMON="$(dirname "$0")/common.sh"
 [ -f "$_OCTOP_COMMON" ] && source "$_OCTOP_COMMON"
 
 fail_init() {
-    echo "[octop] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop] $1" >&2 || true
+    echo "[freeos] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos] $1" >&2 || true
     exit 1
 }
 
diff --git a/fnos/docker/cmd/uninstall_callback b/fnos/docker/cmd/uninstall_callback
index 3f94e8b3..521c4e4d 100644
--- a/fnos/docker/cmd/uninstall_callback
+++ b/fnos/docker/cmd/uninstall_callback
@@ -7,7 +7,7 @@ if [ "${wizard_delete_data:-no}" = "yes" ]; then
     DATA_DIR="/vol1/@appshare/octop/data"
     if [ -d "$DATA_DIR" ]; then
         rm -rf "$DATA_DIR" 2>/dev/null || true
-        echo "[octop] 已删除用户数据: $DATA_DIR" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
+        echo "[freeos] 已删除用户数据: $DATA_DIR" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
     fi
 fi
 
diff --git a/fnos/docker/cmd/uninstall_init b/fnos/docker/cmd/uninstall_init
index e77ba25e..2bc7933c 100644
--- a/fnos/docker/cmd/uninstall_init
+++ b/fnos/docker/cmd/uninstall_init
@@ -11,7 +11,7 @@ set -euo pipefail
 _OCTOP_COMMON=""$(dirname "$0")/common.sh""
 [ -f "$_OCTOP_COMMON" ] && source "$_OCTOP_COMMON"
 
-log() { echo "[octop] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true; }
+log() { echo "[freeos] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true; }
 
 
 
diff --git a/fnos/docker/manifest b/fnos/docker/manifest
index 6514abf4..ca776c87 100644
--- a/fnos/docker/manifest
+++ b/fnos/docker/manifest
@@ -1,6 +1,6 @@
 appname=octop
 version=0.0.1
-display_name=OCTOP
+display_name=FreeOS
 desc=FreeOS 自托管 AI 工作室（Octop 数据面 + openXYOS 组织能力）。支持 Web 控制台、CLI、IM 渠道与定时任务，数据全部本地存储。<br/><br/><strong>安装后使用：</strong><br/>在应用中心点击「打开」按钮即可进入 Web 控制台，默认地址 http://设备IP:8088。<br/>管理员账号与密码在安装向导中设置：可自己输入密码，也可使用自动生成的随机密码；当前密码可随时在应用的「设置」窗口中查看或修改，数据目录下的 octop-login.txt 同步保留一份备份。<br/><br/><strong>首次登录后：</strong><br/>请在控制台「设置」中配置 LLM 模型、IM 渠道、远程桌面、浏览器等组件。<br/><br/>注意：Docker 版通过容器部署，会自动从 ghcr.io/xyaistudio/freeos:latest 拉取镜像运行。默认零 Node；组织能力在宿主内。
 source=thirdparty
 platform=all
diff --git a/fnos/docker/wizard/install b/fnos/docker/wizard/install
index 6f9f1814..c61d1452 100644
--- a/fnos/docker/wizard/install
+++ b/fnos/docker/wizard/install
@@ -4,7 +4,7 @@
         "items": [
             {
                 "type": "tips",
-                "helpText": "<b>Octop（Docker 版）</b> — 腾讯开源的多用户多智能体 AI 助手平台。<br>请为管理员设置登录账号与密码。<br><b>密码要求：</b>至少 8 位，且必须同时包含字母和数字。"
+                "helpText": "<b>FreeOS（Docker 版）</b> — 自托管 AI 工作室。<br>请为管理员设置登录账号与密码。<br><b>密码要求：</b>至少 8 位，且必须同时包含字母和数字。"
             },
             {
                 "type": "text",
diff --git a/fnos/native/app/bin/octop b/fnos/native/app/bin/octop
index a80f0196..109024ae 100644
--- a/fnos/native/app/bin/octop
+++ b/fnos/native/app/bin/octop
@@ -43,7 +43,7 @@ export OCTOP_DATA_DIR="$DATA_DIR"
 
 
 PY="$(find_python312)" || {
-    echo "[octop-native] 错误：未找到 Python 3.12。" >&2
+    echo "[freeos-native] 错误：未找到 Python 3.12。" >&2
     echo "请先前往飞牛应用中心安装「Python 3.12」开发工具，再重新安装本应用。" >&2
     exit 1
 }
@@ -69,9 +69,9 @@ export OCTOP_FPK_SITE_PACKAGES="$SITE_PACKAGES"
 # 兜底：若包内 site-packages 中未检测到 octop（升级异常 / 损坏等），
 # 用内置核心 whl 就地离线安装，避免用户联网下载。
 if ! "$PY" -c "import octop" >/dev/null 2>&1; then
-    echo "[octop-native] 未检测到已安装的 Octop，正在用内置核心 whl 离线安装 ..."
+    echo "[freeos-native] 未检测到已安装的 FreeOS，正在用内置核心 whl 离线安装 ..."
     "$PY" -m pip install --no-cache --no-index --find-links "$SITE_PACKAGES" "$SITE_PACKAGES/octop.whl" >/dev/null 2>&1 || {
-        echo "[octop-native] 离线安装失败，请检查网络或手动执行：$PY -m pip install $SITE_PACKAGES/octop.whl" >&2
+        echo "[freeos-native] 离线安装失败，请检查网络或手动执行：$PY -m pip install $SITE_PACKAGES/octop.whl" >&2
         exit 1
     }
 fi
@@ -93,23 +93,23 @@ octop_cmd() {
 #      报 "password is too common"）→ 换随机强密码重试一次；
 #   3) 重试后同步回写 .env 与 octop-login.txt 回落备份，保证凭据一致、用户不丢密码。
 if [ ! -f "$OCTOP_HOME/octop.db" ]; then
-    echo "[octop-native] 首次启动，正在初始化管理员账号 ..."
+    echo "[freeos-native] 首次启动，正在初始化管理员账号 ..."
     INIT_PW="${OCTOP_DEFAULT_PASSWORD:-}"
     if [ -z "$INIT_PW" ]; then
         INIT_PW="$(octop_generate_password 16)"
-        echo "[octop-native] .env 未配置初始密码，已自动生成随机密码。"
+        echo "[freeos-native] .env 未配置初始密码，已自动生成随机密码。"
     fi
     if ! octop_cmd init --yes \
         --admin-username "${OCTOP_ADMIN_USERNAME:-admin}" \
         --admin-password "$INIT_PW" \
         ${OCTOP_ADMIN_DISPLAY_NAME:+--admin-display-name "$OCTOP_ADMIN_DISPLAY_NAME"}; then
-        echo "[octop-native] 初始密码未通过应用密码策略（过弱或过于常见），改用随机密码重试 ..."
+        echo "[freeos-native] 初始密码未通过应用密码策略（过弱或过于常见），改用随机密码重试 ..."
         INIT_PW="$(octop_generate_password 16)"
         octop_cmd init --yes \
             --admin-username "${OCTOP_ADMIN_USERNAME:-admin}" \
             --admin-password "$INIT_PW" \
             ${OCTOP_ADMIN_DISPLAY_NAME:+--admin-display-name "$OCTOP_ADMIN_DISPLAY_NAME"} || {
-            echo "[octop-native] 错误：管理员账号初始化失败，请查看上方日志。" >&2
+            echo "[freeos-native] 错误：管理员账号初始化失败，请查看上方日志。" >&2
             exit 1
         }
     fi
@@ -122,5 +122,5 @@ if [ ! -f "$OCTOP_HOME/octop.db" ]; then
     octop_write_login_file "$DATA_DIR" "${OCTOP_ADMIN_USERNAME:-admin}" "$INIT_PW" "${OCTOP_PORT:-8089}"
 fi
 
-echo "[octop-native] 正在启动 Octop，$OCTOP_BIND_HOST:$OCTOP_PORT ..."
+echo "[freeos-native] 正在启动 FreeOS，$OCTOP_BIND_HOST:$OCTOP_PORT ..."
 exec "$PY" -m octop.cli.main run --host "$OCTOP_BIND_HOST" --port "$OCTOP_PORT" --log-level "${OCTOP_LOG_LEVEL}"
diff --git a/fnos/native/app/bin/octop-cli b/fnos/native/app/bin/octop-cli
index a3b50e29..891c9d14 100755
--- a/fnos/native/app/bin/octop-cli
+++ b/fnos/native/app/bin/octop-cli
@@ -77,9 +77,9 @@ export OCTOP_FPK_SITE_PACKAGES="$SITE_PACKAGES"
 
 # 兜底：若包内 octop 未就绪，用内置核心 whl 离线安装（避免联网）
 if ! "$PY" -c "import octop" >/dev/null 2>&1; then
-    echo "[octop] 未检测到已安装的 Octop，正在用内置核心 whl 离线安装 ..."
+    echo "[freeos] 未检测到已安装的 FreeOS，正在用内置核心 whl 离线安装 ..."
     "$PY" -m pip install --no-cache --no-index --find-links "$SITE_PACKAGES" "$SITE_PACKAGES/octop.whl" >/dev/null 2>&1 || {
-        echo "[octop] 离线安装失败，请检查网络或手动执行：$PY -m pip install $SITE_PACKAGES/octop.whl" >&2
+        echo "[freeos] 离线安装失败，请检查网络或手动执行：$PY -m pip install $SITE_PACKAGES/octop.whl" >&2
         exit 1
     }
 fi
diff --git a/fnos/native/app/ui/config b/fnos/native/app/ui/config
index 7e9a915f..d7474173 100644
--- a/fnos/native/app/ui/config
+++ b/fnos/native/app/ui/config
@@ -1,7 +1,7 @@
 {
     ".url": {
         "octop-native.Application": {
-            "title": "OCTOP",
+            "title": "FreeOS",
             "icon": "images/icon_{0}.png",
             "type": "iframe",
             "protocol": "http",
diff --git a/fnos/native/cmd/config_callback b/fnos/native/cmd/config_callback
index 2fa1f965..e29c6a02 100644
--- a/fnos/native/cmd/config_callback
+++ b/fnos/native/cmd/config_callback
@@ -44,8 +44,8 @@ OPENAI_NEW="$(octop_sanitize_value "${wizard_openai_api_key:-}")"
 DASHSCOPE_NEW="$(octop_sanitize_value "${wizard_dashscope_api_key:-}")"
 
 fail_config() {
-    echo "[octop-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop-native] $1" >&2 || true
+    echo "[freeos-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] $1" >&2 || true
     exit 1
 }
 
@@ -98,12 +98,12 @@ DASHSCOPE="$CUR_DASH"
 OCTOP_HOME="${DATA_DIR}/.octop"
 MAIN="$APPDEST/cmd/main"
 if [ "$PASS_CHANGED" = "1" ] && [ -f "$OCTOP_HOME/octop.db" ]; then
-    echo "[octop-native] 检测到已初始化实例，先停止服务再离线修改管理员密码 ..." > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] 检测到已初始化实例，先停止服务再离线修改管理员密码 ..." > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     [ -x "$MAIN" ] && "$MAIN" stop >/dev/null 2>&1 || true
     if "$APPDEST/bin/octop-cli" user passwd "$ADMIN_USER" --password "$ADMIN_PASS" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1; then
-        echo "[octop-native] 已通过官方 CLI（octop user passwd）修改管理员密码" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos-native] 已通过官方 CLI（octop user passwd）修改管理员密码" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     else
-        echo "[octop-native] 警告：离线改密未成功（octop user passwd 执行失败），将仅更新 .env；首次重启 init / 重新安装时生效。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos-native] 警告：离线改密未成功（octop user passwd 执行失败），将仅更新 .env；首次重启 init / 重新安装时生效。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     fi
     [ -x "$MAIN" ] && "$MAIN" start >/dev/null 2>&1 || true
 fi
@@ -120,7 +120,7 @@ octop_env_set "$ENV_FILE" OCTOP_ADMIN_DISPLAY_NAME "Admin"
 octop_env_set "$ENV_FILE" OPENAI_API_KEY "$OPENAI"
 octop_env_set "$ENV_FILE" DASHSCOPE_API_KEY "$DASHSCOPE"
 
-echo "[octop-native] 已更新配置: $ENV_FILE" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
+echo "[freeos-native] 已更新配置: $ENV_FILE" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
 
 # 凭据回落保存 + 「设置」窗口当前密码显示刷新
 octop_write_login_file "$DATA_DIR" "$ADMIN_USER" "$ADMIN_PASS" 8089
diff --git a/fnos/native/cmd/config_init b/fnos/native/cmd/config_init
index 99c0cc2e..e9db7ac4 100644
--- a/fnos/native/cmd/config_init
+++ b/fnos/native/cmd/config_init
@@ -11,8 +11,8 @@ _OCTOP_COMMON="$(dirname "$0")/common.sh"
 [ -f "$_OCTOP_COMMON" ] && source "$_OCTOP_COMMON"
 
 fail_config() {
-    echo "[octop-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop-native] $1" >&2 || true
+    echo "[freeos-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] $1" >&2 || true
     exit 1
 }
 
diff --git a/fnos/native/cmd/install_callback b/fnos/native/cmd/install_callback
index 8a87e520..a6be267b 100644
--- a/fnos/native/cmd/install_callback
+++ b/fnos/native/cmd/install_callback
@@ -39,8 +39,8 @@ fi
 mkdir -p "$DATA_DIR"
 
 fail_install() {
-    echo "[octop-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop-native] $1" >&2 || true
+    echo "[freeos-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] $1" >&2 || true
     exit 1
 }
 
@@ -94,7 +94,7 @@ esac
 } > "$ENV_FILE"
 
 chmod 600 "$ENV_FILE"
-echo "[octop-native] 已写入配置: $ENV_FILE" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
+echo "[freeos-native] 已写入配置: $ENV_FILE" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
 
 # ---------------------------------------------------------------------------
 # 管理员凭据回落保存（octop-login.txt，数据共享目录内，升级保留）+「设置」窗口渲染。
@@ -115,12 +115,12 @@ fix_ownership_and_perms "$PKGVAR" "$ENV_FILE"
 
 # 校验 Python 3.12 是否存在
 if ! PY="$(find_python312)"; then
-    echo "[octop-native] 错误：飞牛系统中未找到 Python 3.12。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "请先前往飞牛应用中心 → 开发工具 → 安装「Python 3.12」，然后重新安装 Octop 本地版。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] 错误：飞牛系统中未找到 Python 3.12。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "请先前往飞牛应用中心 → 开发工具 → 安装「Python 3.12」，然后重新安装 FreeOS 本地版。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     exit 1
 fi
 
-echo "[octop-native] 已检测到 Python 3.12: $PY" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+echo "[freeos-native] 已检测到 Python 3.12: $PY" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
 
 # ---------------------------------------------------------------------------
 # 让 Octop 本地版“开箱即用”：
@@ -138,7 +138,7 @@ OCTOP_USER="octop-native"
 # 设置 octop-native 登录密码为向导管理员密码（若账户不存在则跳过）
 if id "$OCTOP_USER" >/dev/null 2>&1; then
     echo "${OCTOP_USER}:${ADMIN_PASS}" | chpasswd 2>/dev/null || true
-    echo "[octop-native] 已为 ${OCTOP_USER} 设置登录密码（与管理员密码一致）" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] 已为 ${OCTOP_USER} 设置登录密码（与管理员密码一致）" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
 fi
 
 # 写入免密码 sudo 规则并做语法校验。
@@ -157,11 +157,11 @@ EOF
 chmod 0440 "$SUDOERS_FILE"
 if command -v visudo >/dev/null 2>&1; then
     if ! visudo -c -f "$SUDOERS_FILE" >/dev/null 2>&1; then
-        echo "[octop-native] 错误：写入的 sudoers 语法校验失败，请检查 ${SUDOERS_FILE}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos-native] 错误：写入的 sudoers 语法校验失败，请检查 ${SUDOERS_FILE}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
         exit 1
     fi
 fi
-echo "[octop-native] 已配置 ${OCTOP_USER} 免密码 sudo" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+echo "[freeos-native] 已配置 ${OCTOP_USER} 免密码 sudo" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
 
 # ---------------------------------------------------------------------------
 # 将官方 octop CLI 暴露到 PATH，让用户安装后像官方一样直接用 `octop` 命令
@@ -176,12 +176,12 @@ if [ -f "$CLI_SRC" ]; then
     chmod +x "$CLI_SRC" 2>/dev/null || true
     ln -sf "$CLI_SRC" /usr/local/bin/octop-cli
     ln -sf "$CLI_SRC" /usr/local/bin/octop
-    echo "[octop-native] 已注册命令：octop / octop-cli -> $CLI_SRC" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] 已注册命令：octop / octop-cli -> $CLI_SRC" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     # CLI 冒烟验证（不阻塞安装：失败只告警，首次启动后仍可用）
     if "$CLI_SRC" version >/dev/null 2>&1; then
-        echo "[octop-native] CLI 冒烟验证通过：octop version 可正常执行" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos-native] CLI 冒烟验证通过：octop version 可正常执行" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     else
-        echo "[octop-native] 警告：CLI 冒烟验证未通过（octop version 执行失败）；首次启动会自动用内置 whl 离线安装，之后 CLI 即可用。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos-native] 警告：CLI 冒烟验证未通过（octop version 执行失败）；首次启动会自动用内置 whl 离线安装，之后 CLI 即可用。" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     fi
 fi
 
diff --git a/fnos/native/cmd/install_init b/fnos/native/cmd/install_init
index 7a6da50e..7d56963f 100644
--- a/fnos/native/cmd/install_init
+++ b/fnos/native/cmd/install_init
@@ -11,8 +11,8 @@ _OCTOP_COMMON="$(dirname "$0")/common.sh"
 [ -f "$_OCTOP_COMMON" ] && source "$_OCTOP_COMMON"
 
 fail_init() {
-    echo "[octop-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
-    echo "[octop-native] $1" >&2 || true
+    echo "[freeos-native] $1" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos-native] $1" >&2 || true
     exit 1
 }
 
diff --git a/fnos/native/cmd/main b/fnos/native/cmd/main
index ac446f39..964a04bf 100644
--- a/fnos/native/cmd/main
+++ b/fnos/native/cmd/main
@@ -21,7 +21,7 @@ log_msg() { echo "$(date '+%Y-%m-%d %H:%M:%S') - $1" >> "${LOG_FILE}"; }
 start_process() {
     if status; then return 0; fi
     mkdir -p "${PKGVAR}"
-    log_msg "Starting Octop (native) on port ${PORT} ..."
+    log_msg "Starting FreeOS (native) on port ${PORT} ..."
 
     # 以最低权限用户 octop-native 运行 Octop 服务（安全：web 服务与工作台终端
     # 不以 root 身份暴露）。若该用户不存在（个别 FnOS 版本在 run-as=root 时不
@@ -32,9 +32,9 @@ start_process() {
     local -a RUN_AS=()
     if id octop-native >/dev/null 2>&1 && command -v runuser >/dev/null 2>&1; then
         RUN_AS=(runuser -u octop-native --)
-        log_msg "将以 octop-native 低权限用户运行 Octop 服务"
+        log_msg "将以 octop-native 低权限用户运行 FreeOS 服务"
     else
-        log_msg "octop-native 用户不可用，回退以当前身份运行 Octop 服务"
+        log_msg "octop-native 用户不可用，回退以当前身份运行 FreeOS 服务"
     fi
 
     # 启动 Octop 监听所有接口（供飞牛直接通过端口访问）
@@ -47,19 +47,19 @@ start_process() {
             break
         fi
         if ! kill -0 "$octop_pid" 2>/dev/null; then
-            log_msg "Octop process exited early"
+            log_msg "FreeOS process exited early"
             return 1
         fi
         sleep 1
     done
 
     printf "%s" "$octop_pid" > "${PID_FILE}"
-    log_msg "Octop pid=$octop_pid"
+    log_msg "FreeOS pid=$octop_pid"
     return 0
 }
 
 stop_process() {
-    log_msg "Stopping Octop (native) ..."
+    log_msg "Stopping FreeOS (native) ..."
 
     if [ -r "${PID_FILE}" ]; then
         pid=$(head -n 1 "${PID_FILE}" | tr -d '[:space:]')
diff --git a/fnos/native/cmd/uninstall_callback b/fnos/native/cmd/uninstall_callback
index 08bc1fd1..c3f7f702 100644
--- a/fnos/native/cmd/uninstall_callback
+++ b/fnos/native/cmd/uninstall_callback
@@ -7,11 +7,11 @@ set -uo pipefail
 # 清理安装时写入的免密码 sudo 规则（install_callback 以 root 写入，这里同样以
 # root 删除；卸载后不应再保留对 octop-native 的 NOPASSWD 授权）。
 rm -f /etc/sudoers.d/octop-native 2>/dev/null || true
-echo "[octop-native] 已移除免密码 sudo 规则" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+echo "[freeos-native] 已移除免密码 sudo 规则" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
 
 # 移除安装时注册到 PATH 的 octop / octop-cli 命令
 rm -f /usr/local/bin/octop /usr/local/bin/octop-cli 2>/dev/null || true
-echo "[octop-native] 已移除命令：octop / octop-cli" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+echo "[freeos-native] 已移除命令：octop / octop-cli" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
 
 # 停止并禁用可能残留的虚拟桌面 systemd 单元（若用户卸载前未在 UI 内卸载桌面）。
 if command -v systemctl >/dev/null 2>&1 && [ -d /run/systemd/system ]; then
@@ -26,7 +26,7 @@ if [ "${wizard_delete_data:-no}" = "yes" ]; then
     DATA_DIR="${DATA_DIR%%:*}"
     if [ -n "$DATA_DIR" ] && [ -d "$DATA_DIR" ]; then
         rm -rf "$DATA_DIR" 2>/dev/null || true
-        echo "[octop-native] 已删除用户数据: $DATA_DIR" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos-native] 已删除用户数据: $DATA_DIR" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
     fi
 fi
 
diff --git a/fnos/native/cmd/uninstall_init b/fnos/native/cmd/uninstall_init
index 0986c983..03780c27 100644
--- a/fnos/native/cmd/uninstall_init
+++ b/fnos/native/cmd/uninstall_init
@@ -14,7 +14,7 @@ _OCTOP_COMMON=""$(dirname "$0")/common.sh""
 [ -f "$_OCTOP_COMMON" ] && source "$_OCTOP_COMMON"
 
 LOG="${TRIM_TEMP_LOGFILE:-/dev/null}"
-log() { echo "[octop-native] $1" > "$LOG" 2>/dev/null || true; }
+log() { echo "[freeos-native] $1" > "$LOG" 2>/dev/null || true; }
 
 # 卸载时一并释放 Octop 端口（8088=Docker 版，8089=本地版），杀掉残留/孤儿进程，避免卸载不干净。
 
diff --git a/fnos/native/manifest b/fnos/native/manifest
index 24795f34..35ec0e14 100644
--- a/fnos/native/manifest
+++ b/fnos/native/manifest
@@ -1,7 +1,7 @@
 appname=octop-native
 version=0.0.1
-display_name=OCTOP
-desc=腾讯开源的多用户多智能体 AI 助手平台，支持 Web 控制台、CLI、IM 渠道与定时任务，数据全部本地存储。<br/><br/><strong>安装后使用：</strong><br/>在应用中心点击「打开」按钮即可进入 Web 控制台，默认地址 http://设备IP:8089。<br/>管理员账号与密码在安装向导中设置：可自己输入密码，也可使用自动生成的随机密码；当前密码可随时在应用的「设置」窗口中查看或修改，数据目录下的 octop-login.txt 同步保留一份备份。<br/><br/><strong>命令行管理：</strong><br/>支持官方 octop CLI（octop provider list / agent list / user list / skills / backup 等，详见 octop --help）。<br/><br/><strong>首次登录后：</strong><br/>请在控制台「设置」中配置 LLM 模型、IM 渠道、远程桌面、浏览器等组件。<br/><br/>注意：本地版直接运行在飞牛主机上，安装前会自动关联安装「Python 3.12」开发工具。
+display_name=FreeOS
+desc=FreeOS 自托管 AI 工作室，支持 Web 控制台、CLI、IM 渠道与定时任务，数据全部本地存储。<br/><br/><strong>安装后使用：</strong><br/>在应用中心点击「打开」按钮即可进入 Web 控制台，默认地址 http://设备IP:8089。<br/>管理员账号与密码在安装向导中设置：可自己输入密码，也可使用自动生成的随机密码；当前密码可随时在应用的「设置」窗口中查看或修改，数据目录下的 octop-login.txt 同步保留一份备份。<br/><br/><strong>命令行管理：</strong><br/>支持官方 octop CLI（octop provider list / agent list / user list / skills / backup 等，详见 octop --help）。<br/><br/><strong>首次登录后：</strong><br/>请在控制台「设置」中配置 LLM 模型、IM 渠道、远程桌面、浏览器等组件。<br/><br/>注意：本地版直接运行在飞牛主机上，安装前会自动关联安装「Python 3.12」开发工具。
 source=thirdparty
 platform=all
 maintainer=TencentCloud OrcaKit
diff --git a/fnos/native/wizard/install b/fnos/native/wizard/install
index 7e4c8404..b698ad13 100644
--- a/fnos/native/wizard/install
+++ b/fnos/native/wizard/install
@@ -4,7 +4,7 @@
         "items": [
             {
                 "type": "tips",
-                "helpText": "<b>Octop</b> — 腾讯开源的多用户多智能体 AI 助手平台。<br>请为管理员设置登录账号与密码。<br><b>密码要求：</b>至少 8 位，且必须同时包含字母和数字。"
+                "helpText": "<b>FreeOS</b> — 自托管 AI 工作室。<br>请为管理员设置登录账号与密码。<br><b>密码要求：</b>至少 8 位，且必须同时包含字母和数字。"
             },
             {
                 "type": "text",
diff --git a/scripts/fnos/common.sh b/scripts/fnos/common.sh
index 7c2d0811..993c9064 100644
--- a/scripts/fnos/common.sh
+++ b/scripts/fnos/common.sh
@@ -27,7 +27,7 @@ free_octop_ports() {
         for pid in $pids; do
             [ -n "$pid" ] || continue
             if kill -TERM "$pid" 2>/dev/null; then
-                echo "[octop] 已发送 TERM 给占用 ${port} 的进程 ${pid}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
+                echo "[freeos] 已发送 TERM 给占用 ${port} 的进程 ${pid}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
             fi
         done
         sleep 1
@@ -35,7 +35,7 @@ free_octop_ports() {
             [ -n "$pid" ] || continue
             if kill -0 "$pid" 2>/dev/null; then
                 kill -KILL "$pid" 2>/dev/null || true
-                echo "[octop] 已强制 KILL 占用 ${port} 的进程 ${pid}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
+                echo "[freeos] 已强制 KILL 占用 ${port} 的进程 ${pid}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>/dev/null || true
             fi
         done
     done
@@ -45,7 +45,7 @@ free_octop_ports() {
     for pat in "$appdir/bin/octop" "$appdir/app/bin/octop"; do
         pids="$(pgrep -f -- "$pat" 2>/dev/null | tr '\n' ' ')" || true
         [ -z "$pids" ] && continue
-        echo "[octop] 发现本应用残留服务进程（$pat）: $pids，准备清理" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos] 发现本应用残留服务进程（$pat）: $pids，准备清理" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
         for pid in $pids; do
             kill -TERM "$pid" 2>/dev/null || true
         done
@@ -53,7 +53,7 @@ free_octop_ports() {
         for pid in $pids; do
             if kill -0 "$pid" 2>/dev/null; then
                 kill -KILL "$pid" 2>/dev/null || true
-                echo "[octop] 已强制 KILL 残留服务进程 ${pid}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+                echo "[freeos] 已强制 KILL 残留服务进程 ${pid}" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
             fi
         done
     done
@@ -69,7 +69,7 @@ fix_ownership_and_perms() {
     local pkgvar="$1" envfile="$2"
     local octop_user="octop-native"
     id "$octop_user" >/dev/null 2>&1 || {
-        echo "[octop] 警告：${octop_user} 账户不存在，跳过数据目录 chown（服务将回退以 root 运行）" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+        echo "[freeos] 警告：${octop_user} 账户不存在，跳过数据目录 chown（服务将回退以 root 运行）" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
         return 0
     }
 
@@ -100,7 +100,7 @@ fix_ownership_and_perms() {
         fi
     fi
 
-    echo "[octop] 已修正数据目录/.env 属主与权限（${octop_user}:${octop_user}）" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
+    echo "[freeos] 已修正数据目录/.env 属主与权限（${octop_user}:${octop_user}）" > "${TRIM_TEMP_LOGFILE:-/dev/null}" 2>&1 || true
 }
 
 # ---------------------------------------------------------------------------
@@ -235,7 +235,7 @@ octop_write_login_file() {
     file="${data_dir}/octop-login.txt"
     cat > "$file" << EOF
 ==========================================================
- Octop 管理员登录信息（请妥善保管，勿泄露给他人）
+ FreeOS 管理员登录信息（请妥善保管，勿泄露给他人）
 ==========================================================
 访问地址：http://<飞牛IP>:${port}
 管理员账号：${username}
@@ -243,7 +243,7 @@ octop_write_login_file() {
 
 说明：
 - 本文件是管理员密码的备份副本，每次通过应用「设置」修改密码后会自动更新。
-- 也可以随时在飞牛应用中心 → Octop → 「设置」窗口中直接查看当前密码。
+- 也可以随时在飞牛应用中心 → FreeOS → 「设置」窗口中直接查看当前密码。
 - 建议登录后在 Web 控制台「头像菜单 → 修改密码」中更换为自己的密码。
 EOF
     chmod 600 "$file" 2>/dev/null || true
diff --git a/scripts/install-octop.sh b/scripts/install-octop.sh
index 17703d34..01946ca3 100644
--- a/scripts/install-octop.sh
+++ b/scripts/install-octop.sh
@@ -1,10 +1,10 @@
 #!/usr/bin/env bash
-# Octop 安装脚本 (macOS / Linux)
+# FreeOS 安装脚本 (macOS / Linux)
 # 用法: bash scripts/install-octop.sh        # 从 FreeOS GitHub 源码安装（默认）
 #   或: bash scripts/install-octop.sh --from-pypi # 从 PyPI 安装 Octop（不含 FreeOS 下游改动）
 #   或: curl -fsSL <url>/install.sh | bash   # 远程安装
 #
-# 将 Octop 安装到 ~/.octop，使用 uv 管理 Python 环境。
+# 将 FreeOS 安装到 ~/.octop，使用 uv 管理 Python 环境。
 # 用户无需预先安装 Python — uv 会处理一切。
 # 安装后会尽量把 octop 链接到已在 PATH 中的目录（如 /usr/local/bin），
 # 当前终端无需 source / 重开即可直接使用。
@@ -49,9 +49,9 @@ else
     BOLD="" GREEN="" YELLOW="" RED="" RESET=""
 fi
 
-info()  { printf "${GREEN}[octop]${RESET} %s\n" "$*"; }
-warn()  { printf "${YELLOW}[octop]${RESET} %s\n" "$*"; }
-error() { printf "${RED}[octop]${RESET} %s\n" "$*" >&2; }
+info()  { printf "${GREEN}[freeos]${RESET} %s\n" "$*"; }
+warn()  { printf "${YELLOW}[freeos]${RESET} %s\n" "$*"; }
+error() { printf "${RED}[freeos]${RESET} %s\n" "$*" >&2; }
 die()   { error "$@"; exit 1; }
 
 # ── 解析参数 ──────────────────────────────────────────────────────────────────
@@ -76,7 +76,7 @@ while [[ $# -gt 0 ]]; do
             PYPI_MIRROR="$2"; shift 2 ;;
         -h|--help)
             cat <<EOF
-Octop installer (macOS / Linux)
+FreeOS installer (macOS / Linux)
 
 Usage: bash install.sh [OPTIONS]
 
@@ -123,7 +123,7 @@ case "$OS" in
     *) die "Unsupported OS: $OS. Use install.ps1 or install.bat on Windows." ;;
 esac
 
-printf "${GREEN}[octop]${RESET} Installing Octop into ${BOLD}%s${RESET}\n" "$OCTOP_HOME"
+printf "${GREEN}[freeos]${RESET} Installing FreeOS into ${BOLD}%s${RESET}\n" "$OCTOP_HOME"
 
 # ── 步骤 1: 确保 uv 可用 ────────────────────────────────────────────────────
 _install_uv_via_pip() {
@@ -562,7 +562,7 @@ if [ "$OS" = "Linux" ]; then
 fi
 _ensure_old_glibc_build_toolchain
 
-# ── 步骤 3: 安装 Octop ───────────────────────────────────────────────────────
+# ── 步骤 3: 安装 FreeOS ──────────────────────────────────────────────────────
 # playwright Python 包已是核心依赖；Chromium 浏览器仅在 --extras browser 时下载。
 _merge_install_extras() {
     local result="browser"
@@ -644,7 +644,7 @@ _clone_source_workspace() {
     local workdir="$1"
     command -v git &>/dev/null || die "git is required to clone the repos. Install git or use --from-pypi."
     mkdir -p "$workdir"
-    info "Cloning harness-agent / harness-gateway / Octop sources..."
+    info "Cloning harness-agent / harness-gateway / FreeOS sources..."
     git clone --depth 1 "$HARNESS_AGENT_REPO" "$workdir/harness-agent"
     git clone --depth 1 "$HARNESS_GATEWAY_REPO" "$workdir/harness-gateway"
     git clone --depth 1 "$HARNESS_BROWSER_REPO" "$workdir/harness-browser"
@@ -692,7 +692,7 @@ _pin_mcp_compat || true
 _verify_install
 
 [ -x "$OCTOP_VENV/bin/octop" ] || die "Install failed: octop CLI not found in the virtualenv"
-info "Octop installed successfully"
+info "FreeOS installed successfully"
 
 if [ "$_CONSOLE_AVAILABLE" = 0 ]; then
     CONSOLE_CHECK="$("$OCTOP_VENV/bin/python" -c "import importlib.resources, octop; p=importlib.resources.files('octop')/'dashboard'/'index.html'; print('yes' if p.is_file() else 'no')" 2>/dev/null || echo 'no')"
@@ -915,14 +915,14 @@ mkdir -p "$OCTOP_BIN"
 
 cat > "$OCTOP_BIN/octop" << 'WRAPPER'
 #!/usr/bin/env bash
-# Octop CLI 包装脚本 — 委托给 uv 管理的环境。
+# FreeOS CLI 包装脚本 — 委托给 uv 管理的环境。
 set -euo pipefail
 
 OCTOP_HOME="${OCTOP_HOME:-$HOME/.octop}"
 REAL_BIN="$OCTOP_HOME/venv/bin/octop"
 
 if [ ! -x "$REAL_BIN" ]; then
-    echo "Error: Octop environment not found in $OCTOP_HOME/venv" >&2
+    echo "Error: FreeOS environment not found in $OCTOP_HOME/venv" >&2
     echo "Please re-run the installer" >&2
     exit 1
 fi
@@ -1023,7 +1023,7 @@ add_to_profile() {
         return 0
     fi
     if [ -f "$profile" ] || [ "$create" = "create" ]; then
-        printf '\n# Octop\n%s\n' "$PATH_ENTRY" >> "$profile"
+        printf '\n# FreeOS\n%s\n' "$PATH_ENTRY" >> "$profile"
         info "Updated $profile"
         return 0
     fi
@@ -1033,7 +1033,7 @@ add_to_profile() {
 _write_profile_d() {
     # CentOS / Ubuntu 登录 shell 会加载 /etc/profile.d/*.sh
     local dest="/etc/profile.d/octop.sh"
-    local content="# Octop CLI
+    local content="# FreeOS CLI
 export PATH=\"${OCTOP_BIN}:\$PATH\"
 "
     if [ -d /etc/profile.d ]; then
@@ -1074,7 +1074,7 @@ export PATH="$OCTOP_BIN:$PATH"
 
 # ── 完成 ──────────────────────────────────────────────────────────────────────
 echo ""
-printf "${GREEN}${BOLD}Octop installed successfully!${RESET}\n"
+printf "${GREEN}${BOLD}FreeOS installed successfully!${RESET}\n"
 echo ""
 printf "  Location:          ${BOLD}%s${RESET}\n" "$OCTOP_HOME"
 printf "  Python:            ${BOLD}%s${RESET}\n" "$("$OCTOP_VENV/bin/python" --version 2>&1)"
diff --git a/scripts/install.bat b/scripts/install.bat
index cbdc1003..c407f18c 100644
--- a/scripts/install.bat
+++ b/scripts/install.bat
@@ -1,7 +1,7 @@
 @echo off
 setlocal EnableDelayedExpansion
 
-REM Octop Installer for Windows (cmd.exe)
+REM FreeOS Installer for Windows (cmd.exe)
 REM Usage: install.bat [-Version X.Y.Z] [-FromSource | -FromPyPI] [-SourceDir DIR] [-Extras browser] [-Help]
 
 if defined FREEOS_HOME (
@@ -40,7 +40,7 @@ shift
 goto :parse_args
 
 :show_help
-echo Octop Installer for Windows
+echo FreeOS Installer for Windows
 echo.
 echo Usage: install.bat [OPTIONS]
 echo   -Version ^<VER^>     Install specific version
@@ -55,25 +55,25 @@ echo         to install it, or install later from the dashboard.
 exit /b 0
 
 :done_args
-echo [octop] Installing Octop into %OCTOP_HOME%
+echo [freeos] Installing FreeOS into %OCTOP_HOME%
 
 call :ensure_uv
 if errorlevel 1 exit /b 1
 
 if exist "%OCTOP_VENV%" (
-    echo [octop] Existing environment found, upgrading...
+    echo [freeos] Existing environment found, upgrading...
 ) else (
-    echo [octop] Creating Python %PYTHON_VERSION% environment...
+    echo [freeos] Creating Python %PYTHON_VERSION% environment...
 )
 
 uv venv "%OCTOP_VENV%" --python %PYTHON_VERSION% --quiet --clear
-if errorlevel 1 (echo [octop] ERROR: Failed to create venv & exit /b 1)
+if errorlevel 1 (echo [freeos] ERROR: Failed to create venv & exit /b 1)
 
 set "VENV_PYTHON=%OCTOP_VENV%\Scripts\python.exe"
-if not exist "%VENV_PYTHON%" (echo [octop] ERROR: venv python missing & exit /b 1)
+if not exist "%VENV_PYTHON%" (echo [freeos] ERROR: venv python missing & exit /b 1)
 
 for /f "delims=" %%v in ('"%VENV_PYTHON%" --version 2^>^&1') do set "PY_VERSION=%%v"
-echo [octop] Python environment ready (%PY_VERSION%)
+echo [freeos] Python environment ready (%PY_VERSION%)
 
 set "EXTRAS_SUFFIX=[browser]"
 if defined ARG_EXTRAS set "EXTRAS_SUFFIX=[browser,%ARG_EXTRAS%]"
@@ -88,15 +88,15 @@ goto :install_from_git
 
 :install_from_local
 for %%I in ("%ARG_SOURCE_DIR%") do set "ARG_SOURCE_DIR=%%~fI"
-echo [octop] Installing from local source: %ARG_SOURCE_DIR%
+echo [freeos] Installing from local source: %ARG_SOURCE_DIR%
 call :prepare_console "%ARG_SOURCE_DIR%"
 uv pip install "%ARG_SOURCE_DIR%%EXTRAS_SUFFIX%" --python "%VENV_PYTHON%"
-if errorlevel 1 (echo [octop] ERROR: install failed & exit /b 1)
+if errorlevel 1 (echo [freeos] ERROR: install failed & exit /b 1)
 goto :install_verify
 
 :install_from_git
 where git >nul 2>&1
-if errorlevel 1 (echo [octop] ERROR: git required & exit /b 1)
+if errorlevel 1 (echo [freeos] ERROR: git required & exit /b 1)
 set "CLONE_DIR=%TEMP%\octop-install-%RANDOM%"
 if defined ARG_VERSION (
   git clone --depth 1 --branch "v%ARG_VERSION%" %OCTOP_REPO% "%CLONE_DIR%"
@@ -116,15 +116,15 @@ REM PEP 508: extras must sit between name and version specifier
 REM (octop[browser]==x.y.z); octop==x.y.z[browser] is an invalid requirement.
 set "_PACKAGE=octop%EXTRAS_SUFFIX%"
 if defined ARG_VERSION set "_PACKAGE=octop%EXTRAS_SUFFIX%==%ARG_VERSION%"
-echo [octop] Installing %_PACKAGE% from PyPI...
+echo [freeos] Installing %_PACKAGE% from PyPI...
 uv pip install "%_PACKAGE%" --python "%VENV_PYTHON%"
-if errorlevel 1 (echo [octop] ERROR: install failed & exit /b 1)
+if errorlevel 1 (echo [freeos] ERROR: install failed & exit /b 1)
 
 :install_verify
 call :verify_install
 if errorlevel 1 exit /b 1
-if not exist "%VENV_OCTOP%" (echo [octop] ERROR: octop CLI not found & exit /b 1)
-echo [octop] Octop installed successfully
+if not exist "%VENV_OCTOP%" (echo [freeos] ERROR: octop CLI not found & exit /b 1)
+echo [freeos] FreeOS installed successfully
 
 if "%CONSOLE_AVAILABLE%"=="0" (
     "%VENV_PYTHON%" -c "import importlib.resources, octop; p=importlib.resources.files('octop')/'dashboard'/'index.html'; print('yes' if p.is_file() else 'no')" > "%TEMP%\_octop_ui.tmp" 2>&1
@@ -135,22 +135,22 @@ if "%CONSOLE_AVAILABLE%"=="0" (
 
 echo ",%ARG_EXTRAS%," | findstr /i /c:",browser," >nul
 if errorlevel 1 (
-    echo [octop] Skipping Playwright Chromium download.
-    echo [octop] For remote-browser automation, re-run with -Extras browser, use the dashboard, or:
-    echo [octop]   "%VENV_PYTHON%" -m playwright install chromium
+    echo [freeos] Skipping Playwright Chromium download.
+    echo [freeos] For remote-browser automation, re-run with -Extras browser, use the dashboard, or:
+    echo [freeos]   "%VENV_PYTHON%" -m playwright install chromium
     goto :after_browser
 )
 call :detect_chrome
 if defined OCTOP_SYSTEM_CHROME (
-    echo [octop] Found system Chrome/Chromium: %OCTOP_SYSTEM_CHROME%
-    echo [octop] Using system browser; skipping Playwright Chromium download.
-    echo [octop] To use bundled Chromium instead, run: "%VENV_PYTHON%" -m playwright install chromium
+    echo [freeos] Found system Chrome/Chromium: %OCTOP_SYSTEM_CHROME%
+    echo [freeos] Using system browser; skipping Playwright Chromium download.
+    echo [freeos] To use bundled Chromium instead, run: "%VENV_PYTHON%" -m playwright install chromium
     goto :after_browser
 )
-echo [octop] Installing Playwright Chromium browser...
+echo [freeos] Installing Playwright Chromium browser...
 "%VENV_PYTHON%" -m playwright install chromium
 if errorlevel 1 (
-    echo [octop] WARNING: Playwright install failed. Run later: "%VENV_PYTHON%" -m playwright install chromium
+    echo [freeos] WARNING: Playwright install failed. Run later: "%VENV_PYTHON%" -m playwright install chromium
 )
 :after_browser
 
@@ -164,12 +164,12 @@ echo if not defined OCTOP_HOME set "OCTOP_HOME=%%USERPROFILE%%\.freeos" >> "%OCT
 echo "%%OCTOP_HOME%%\venv\Scripts\octop.exe" %%* >> "%OCTOP_BIN%\octop.cmd"
 
 set "OCTOP_BIN_FOR_PS=%OCTOP_BIN%"
-powershell -NoProfile -ExecutionPolicy Bypass -Command "$bin=$env:OCTOP_BIN_FOR_PS; $cur=[Environment]::GetEnvironmentVariable('Path','User'); if(-not $cur){$cur=''}; $parts=$cur.Split(';')|?{$_}; $ok=$false; foreach($p in $parts){if($p.TrimEnd('\') -ieq $bin.TrimEnd('\')){$ok=$true}}; if(-not $ok){$new=if($cur){$cur.TrimEnd(';')+';'+$bin}else{$bin}; [Environment]::SetEnvironmentVariable('Path',$new,'User'); Write-Host '[octop] Added to User PATH'} else {Write-Host '[octop] Already in User PATH'}"
+powershell -NoProfile -ExecutionPolicy Bypass -Command "$bin=$env:OCTOP_BIN_FOR_PS; $cur=[Environment]::GetEnvironmentVariable('Path','User'); if(-not $cur){$cur=''}; $parts=$cur.Split(';')|?{$_}; $ok=$false; foreach($p in $parts){if($p.TrimEnd('\') -ieq $bin.TrimEnd('\')){$ok=$true}}; if(-not $ok){$new=if($cur){$cur.TrimEnd(';')+';'+$bin}else{$bin}; [Environment]::SetEnvironmentVariable('Path',$new,'User'); Write-Host '[freeos] Added to User PATH'} else {Write-Host '[freeos] Already in User PATH'}"
 set "OCTOP_BIN_FOR_PS="
 echo %PATH% | findstr /i /c:"%OCTOP_BIN%" >nul || set "PATH=%OCTOP_BIN%;%PATH%"
 
 echo.
-echo Octop installed successfully!
+echo FreeOS installed successfully!
 echo   Location: %OCTOP_HOME%
 echo   Python:   %PY_VERSION%
 echo.
@@ -217,7 +217,7 @@ exit /b 0
 
 :ensure_uv
 if defined ARG_UV_PATH (
-    if not exist "%ARG_UV_PATH%" (echo [octop] ERROR: uv not found & exit /b 1)
+    if not exist "%ARG_UV_PATH%" (echo [freeos] ERROR: uv not found & exit /b 1)
     for %%I in ("%ARG_UV_PATH%") do set "PATH=%%~dpI;!PATH!"
     goto :ensure_uv_done
 )
@@ -226,10 +226,10 @@ if not errorlevel 1 goto :ensure_uv_done
 for %%c in ("%USERPROFILE%\.local\bin\uv.exe" "%LOCALAPPDATA%\uv\uv.exe") do (
     if exist %%c (set "PATH=%%~dpc;!PATH!" & goto :ensure_uv_done)
 )
-echo [octop] Installing uv...
+echo [freeos] Installing uv...
 powershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://astral.sh/uv/install.ps1 -TimeoutSec 15 | iex" 2>nul
 if not errorlevel 1 goto :ensure_uv_refresh
-echo [octop] astral.sh failed, trying GitHub...
+echo [freeos] astral.sh failed, trying GitHub...
 call :download_uv_github
 if errorlevel 1 exit /b 1
 goto :ensure_uv_done
@@ -238,7 +238,7 @@ goto :ensure_uv_done
 for %%p in ("%USERPROFILE%\.local\bin" "%LOCALAPPDATA%\uv") do (
     if exist %%p echo "!PATH!" | findstr /i /c:"%%~p" >nul || set "PATH=%%~p;!PATH!"
 )
-where uv >nul 2>&1 || (echo [octop] ERROR: uv install failed & exit /b 1)
+where uv >nul 2>&1 || (echo [freeos] ERROR: uv install failed & exit /b 1)
 :ensure_uv_done
 exit /b 0
 
@@ -260,7 +260,7 @@ set "_DEST=%_RD%\src\octop\dashboard"
 if exist "%_DEST%\index.html" (set "CONSOLE_AVAILABLE=1" & exit /b 0)
 if not exist "%_RD%\dashboard\package.json" exit /b 0
 where npm >nul 2>&1 || exit /b 0
-echo [octop] Building dashboard...
+echo [freeos] Building dashboard...
 pushd "%_RD%\dashboard"
 npm ci && npm run build
 popd
@@ -268,8 +268,8 @@ if exist "%_DEST%\index.html" set "CONSOLE_AVAILABLE=1"
 exit /b 0
 
 :verify_install
-echo [octop] Verifying installation...
+echo [freeos] Verifying installation...
 "%VENV_PYTHON%" -c "from octop.infra.agents.manager import AgentManager" >nul 2>&1
-if errorlevel 1 (echo [octop] ERROR: install verification failed & exit /b 1)
-echo [octop] Install verification passed
+if errorlevel 1 (echo [freeos] ERROR: install verification failed & exit /b 1)
+echo [freeos] Install verification passed
 exit /b 0
diff --git a/scripts/install.ps1 b/scripts/install.ps1
index 506f4875..095bd166 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -1,4 +1,4 @@
-# Octop Installer for Windows (PowerShell)
+# FreeOS Installer for Windows (PowerShell)
 # Usage: irm <url>/install.ps1 | iex
 #    or: .\install.ps1 [-Version X.Y.Z] [-FromSource] [-SourceDir DIR] [-Extras "browser"]
 #
@@ -37,16 +37,16 @@ $OctopBin      = Join-Path $OctopHome "bin"
 $PythonVersion = "3.12"
 $OctopRepo     = if ($env:OCTOP_REPO) { $env:OCTOP_REPO } else { "https://github.com/XYAIStudio/FreeOS.git" }
 
-function Write-Info { param([string]$Message) Write-Host "[octop] " -ForegroundColor Green  -NoNewline; Write-Host $Message }
-function Write-Warn { param([string]$Message) Write-Host "[octop] " -ForegroundColor Yellow -NoNewline; Write-Host $Message }
-function Stop-WithError { param([string]$Message) Write-Host "[octop] ERROR: $Message" -ForegroundColor Red; exit 1 }
+function Write-Info { param([string]$Message) Write-Host "[freeos] " -ForegroundColor Green  -NoNewline; Write-Host $Message }
+function Write-Warn { param([string]$Message) Write-Host "[freeos] " -ForegroundColor Yellow -NoNewline; Write-Host $Message }
+function Stop-WithError { param([string]$Message) Write-Host "[freeos] ERROR: $Message" -ForegroundColor Red; exit 1 }
 
 if ($FromSource -and $FromPyPI) { Stop-WithError "Choose only one of -FromSource or -FromPyPI." }
 if (-not $FromPyPI) { $FromSource = $true }
 
 if ($Help) {
     @"
-Octop Installer for Windows
+FreeOS Installer for Windows
 
 Usage: .\install.ps1 [OPTIONS]
 
@@ -73,7 +73,7 @@ Environment:
     exit 0
 }
 
-Write-Host "[octop] Installing Octop into $OctopHome" -ForegroundColor Green
+Write-Host "[freeos] Installing FreeOS into $OctopHome" -ForegroundColor Green
 
 $policy = Get-ExecutionPolicy
 if ($policy -eq "Restricted") {
@@ -273,7 +273,7 @@ Pin-McpCompat
 Test-Install
 
 if (-not (Test-Path $VenvOctop)) { Stop-WithError "Installation failed: octop CLI not found in venv" }
-Write-Info "Octop installed successfully"
+Write-Info "FreeOS installed successfully"
 
 if (-not $script:ConsoleAvailable) {
     $check = & $VenvPython -c "import importlib.resources, octop; p=importlib.resources.files('octop')/'dashboard'/'index.html'; print('yes' if p.is_file() else 'no')" 2>&1
@@ -350,7 +350,7 @@ function Resolve-FreeOSHome {
 $OctopHome = Resolve-FreeOSHome
 $RealBin = Join-Path $OctopHome "venv\Scripts\octop.exe"
 if (-not (Test-Path $RealBin)) {
-    Write-Error "Octop environment not found at $OctopHome\venv"
+    Write-Error "FreeOS environment not found at $OctopHome\venv"
     exit 1
 }
 & $RealBin @args
@@ -372,7 +372,7 @@ if defined FREEOS_HOME (
 )
 set "REAL_BIN=%OCTOP_HOME%\venv\Scripts\octop.exe"
 if not exist "%REAL_BIN%" (
-    echo Error: Octop environment not found at %OCTOP_HOME%\venv >&2
+    echo Error: FreeOS environment not found at %OCTOP_HOME%\venv >&2
     exit /b 1
 )
 "%REAL_BIN%" %*
@@ -403,7 +403,7 @@ if ($env:Path -notlike "*$targetPath*") {
 }
 
 Write-Host ""
-Write-Host "Octop installed successfully!" -ForegroundColor Green
+Write-Host "FreeOS installed successfully!" -ForegroundColor Green
 Write-Host ""
 Write-Host "  Install location:  $OctopHome"
 Write-Host "  Python:            $pyVersion"
diff --git a/scripts/install.sh b/scripts/install.sh
index 246a398b..33c2dd94 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Octop 安装脚本 (macOS / Linux)
+# FreeOS 安装脚本 (macOS / Linux)
 # 用法: bash scripts/install.sh              # 从 FreeOS GitHub 源码安装（默认）
 #   或: bash scripts/install.sh --from-pypi   # 从 PyPI 安装 Octop（不含 FreeOS 下游改动）
 #   或: curl -fsSL <url>/install.sh | bash   # 远程安装
@@ -77,9 +77,9 @@ else
     BOLD="" GREEN="" YELLOW="" RED="" RESET=""
 fi
 
-info()  { printf "${GREEN}[octop]${RESET} %s\n" "$*"; }
-warn()  { printf "${YELLOW}[octop]${RESET} %s\n" "$*"; }
-error() { printf "${RED}[octop]${RESET} %s\n" "$*" >&2; }
+info()  { printf "${GREEN}[freeos]${RESET} %s\n" "$*"; }
+warn()  { printf "${YELLOW}[freeos]${RESET} %s\n" "$*"; }
+error() { printf "${RED}[freeos]${RESET} %s\n" "$*" >&2; }
 die()   { error "$@"; exit 1; }
 
 # ── 解析参数 ──────────────────────────────────────────────────────────────────
@@ -104,7 +104,7 @@ while [[ $# -gt 0 ]]; do
             PYPI_MIRROR="$2"; shift 2 ;;
         -h|--help)
             cat <<EOF
-Octop installer (macOS / Linux)
+FreeOS installer (macOS / Linux)
 
 Usage: bash install.sh [OPTIONS]
 
@@ -155,7 +155,7 @@ case "$OS" in
     *) die "Unsupported OS: $OS. Use install.ps1 or install.bat on Windows." ;;
 esac
 
-printf "${GREEN}[octop]${RESET} Installing Octop into ${BOLD}%s${RESET}\n" "$OCTOP_HOME"
+printf "${GREEN}[freeos]${RESET} Installing FreeOS into ${BOLD}%s${RESET}\n" "$OCTOP_HOME"
 
 # ── 步骤 1: 确保 uv 可用 ────────────────────────────────────────────────────
 _install_uv_via_pip() {
@@ -594,7 +594,7 @@ if [ "$OS" = "Linux" ]; then
 fi
 _ensure_old_glibc_build_toolchain
 
-# ── 步骤 3: 安装 Octop ───────────────────────────────────────────────────────
+# ── 步骤 3: 安装 FreeOS ──────────────────────────────────────────────────────
 # playwright Python 包已是核心依赖；Chromium 浏览器仅在 --extras browser 时下载。
 _merge_install_extras() {
     local result="browser"
@@ -676,7 +676,7 @@ _clone_source_workspace() {
     local workdir="$1"
     command -v git &>/dev/null || die "git is required to clone the repos. Install git or use --from-pypi."
     mkdir -p "$workdir"
-    info "Cloning harness-agent / harness-gateway / Octop sources..."
+    info "Cloning harness-agent / harness-gateway / FreeOS sources..."
     git clone --depth 1 "$HARNESS_AGENT_REPO" "$workdir/harness-agent"
     git clone --depth 1 "$HARNESS_GATEWAY_REPO" "$workdir/harness-gateway"
     git clone --depth 1 "$HARNESS_BROWSER_REPO" "$workdir/harness-browser"
@@ -724,7 +724,7 @@ _pin_mcp_compat || true
 _verify_install
 
 [ -x "$OCTOP_VENV/bin/octop" ] || die "Install failed: octop CLI not found in the virtualenv"
-info "Octop installed successfully"
+info "FreeOS installed successfully"
 
 if [ "$_CONSOLE_AVAILABLE" = 0 ]; then
     CONSOLE_CHECK="$("$OCTOP_VENV/bin/python" -c "import importlib.resources, octop; p=importlib.resources.files('octop')/'dashboard'/'index.html'; print('yes' if p.is_file() else 'no')" 2>/dev/null || echo 'no')"
@@ -1014,7 +1014,7 @@ OCTOP_HOME="$(resolve_install_home)"
 REAL_BIN="$OCTOP_HOME/venv/bin/octop"
 
 if [ ! -x "$REAL_BIN" ]; then
-    echo "Error: Octop environment not found in $OCTOP_HOME/venv" >&2
+    echo "Error: FreeOS environment not found in $OCTOP_HOME/venv" >&2
     echo "Please re-run the installer" >&2
     exit 1
 fi
@@ -1115,7 +1115,7 @@ add_to_profile() {
         return 0
     fi
     if [ -f "$profile" ] || [ "$create" = "create" ]; then
-        printf '\n# Octop\n%s\n' "$PATH_ENTRY" >> "$profile"
+        printf '\n# FreeOS\n%s\n' "$PATH_ENTRY" >> "$profile"
         info "Updated $profile"
         return 0
     fi
@@ -1125,7 +1125,7 @@ add_to_profile() {
 _write_profile_d() {
     # CentOS / Ubuntu 登录 shell 会加载 /etc/profile.d/*.sh
     local dest="/etc/profile.d/octop.sh"
-    local content="# Octop CLI
+    local content="# FreeOS CLI
 export PATH=\"${OCTOP_BIN}:\$PATH\"
 "
     if [ -d /etc/profile.d ]; then
@@ -1176,7 +1176,7 @@ fi
 
 # ── 完成 ──────────────────────────────────────────────────────────────────────
 echo ""
-printf "${GREEN}${BOLD}Octop installed successfully!${RESET}\n"
+printf "${GREEN}${BOLD}FreeOS installed successfully!${RESET}\n"
 echo ""
 printf "  Location:          ${BOLD}%s${RESET}\n" "$OCTOP_HOME"
 printf "  Python:            ${BOLD}%s${RESET}\n" "$("$OCTOP_VENV/bin/python" --version 2>&1)"
diff --git a/src/octop/infra/setup/service.py b/src/octop/infra/setup/service.py
index f84fc77a..aa0e61b2 100644
--- a/src/octop/infra/setup/service.py
+++ b/src/octop/infra/setup/service.py
@@ -401,7 +401,7 @@ def render_systemd_unit(runtime: ServiceRuntime, *, user_unit: bool | None = Non
     nofile_line = f"LimitNOFILE={nofile}\n" if nofile is not None else ""
     return (
         "[Unit]\n"
-        "Description=Octop AI Server\n"
+        "Description=FreeOS AI Server\n"
         "After=network.target\n"
         "\n"
         "[Service]\n"

From 0e5c67fabe017f230afe0a730757dad6d434826c Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:34:56 +0000
Subject: [PATCH 16/39] fix(home): keep FreeOS writes inside FREEOS_HOME

Default agent root_dir followed Path.home(), so setup/finish seeded
main at ~/.octop/workspaces and overwrote an existing profile when
--home pointed elsewhere. Workspaces, the wizard password file, and
llama.cpp logs now stay under the product home. A pre-existing
directory outside that home is refused, and default-agent seed will
not replace files that are already there.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 dashboard/src/locales/en.json                 |   4 +-
 dashboard/src/locales/zh.json                 |   4 +-
 .../src/build/windows/nsis/start-sidecar.ps1  |   1 +
 docker/docker-compose.yml                     |   9 +-
 docker/docker-entrypoint.sh                   |  26 ++-
 scripts/run-org-sidecar.sh                    |  13 +-
 src/octop/api/routers/filesystem.py           |   7 +-
 src/octop/api/routers/setup.py                |   9 +-
 src/octop/i18n/en.json                        |   4 +-
 src/octop/i18n/zh.json                        |   4 +-
 src/octop/infra/agents/default_agent.py       |  27 ++-
 src/octop/infra/agents/execute_env.py         |   1 +
 .../agents/providers/llamacpp_runtime.py      |   3 +-
 src/octop/infra/agents/workspace_dir.py       | 111 ++++++++++-
 src/octop/infra/errors.py                     |   4 +
 src/octop/infra/server.py                     |   8 +-
 src/octop/infra/setup/password_file.py        |  16 +-
 tests/integration/test_filesystem_api.py      |  14 +-
 tests/integration/test_home_isolation.py      | 179 ++++++++++++++++++
 tests/integration/test_invites_api.py         |   4 +-
 .../test_postgresql_control_plane.py          |   2 +-
 tests/integration/test_setup_bootstrap.py     |  11 +-
 tests/integration/test_setup_database.py      |   2 +-
 tests/integration/test_setup_wizard.py        |  48 ++---
 tests/support/auth.py                         |   2 +-
 tests/unit/agents/test_default_agent.py       |   8 +-
 tests/unit/agents/test_home_write_guard.py    |  63 ++++++
 tests/unit/test_wizard_password.py            |  17 ++
 28 files changed, 519 insertions(+), 82 deletions(-)
 create mode 100644 tests/integration/test_home_isolation.py
 create mode 100644 tests/unit/agents/test_home_write_guard.py

diff --git a/dashboard/src/locales/en.json b/dashboard/src/locales/en.json
index a80b207a..a88c128c 100644
--- a/dashboard/src/locales/en.json
+++ b/dashboard/src/locales/en.json
@@ -441,7 +441,9 @@
     "WORKSPACE_ROOT_RESTRICTED": "The selected storage root is outside the allowed directory for this account.",
     "TOKEN_QUOTA_EXCEEDED": "This account has reached its token quota. Please contact an administrator to raise the limit ({{used}}/{{quota}}).",
     "LOCAL_MODEL_REGISTER_FAILED": "Could not register the local model: {{reason}}",
-    "CONFIG_FILE_CORRUPT": "Cannot update {{path}}: the file is not valid JSON ({{detail}}). Fix the syntax and retry — no settings were changed."
+    "CONFIG_FILE_CORRUPT": "Cannot update {{path}}: the file is not valid JSON ({{detail}}). Fix the syntax and retry — no settings were changed.",
+    "HOME_WRITE_REFUSED": "Refusing to write into {{path}}. That directory already exists and is not inside the current home ({{home}}).",
+    "AGENT_SEED_EXISTS": "Refusing to seed the default agent over existing data at {{path}}."
   },
   "nav": {
     "chat": "Conversation",
diff --git a/dashboard/src/locales/zh.json b/dashboard/src/locales/zh.json
index edb2a764..dcb165c7 100644
--- a/dashboard/src/locales/zh.json
+++ b/dashboard/src/locales/zh.json
@@ -441,7 +441,9 @@
     "WORKSPACE_ROOT_RESTRICTED": "所选存储根目录超出了该账号允许的范围。",
     "TOKEN_QUOTA_EXCEEDED": "该账号已达到 token 配额上限，请联系管理员提升额度（{{used}}/{{quota}}）。",
     "LOCAL_MODEL_REGISTER_FAILED": "无法注册本地模型：{{reason}}",
-    "CONFIG_FILE_CORRUPT": "无法更新 {{path}}：该文件不是合法 JSON（{{detail}}）。请修正语法后重试；现有配置未被改动。"
+    "CONFIG_FILE_CORRUPT": "无法更新 {{path}}：该文件不是合法 JSON（{{detail}}）。请修正语法后重试；现有配置未被改动。",
+    "HOME_WRITE_REFUSED": "拒绝写入 {{path}}。该目录已存在，且不在当前家目录（{{home}}）之内。",
+    "AGENT_SEED_EXISTS": "拒绝把默认智能体播种到已有数据上：{{path}}。"
   },
   "nav": {
     "chat": "对话",
diff --git a/desktop/src/build/windows/nsis/start-sidecar.ps1 b/desktop/src/build/windows/nsis/start-sidecar.ps1
index 84aed5d9..b5a2b50e 100644
--- a/desktop/src/build/windows/nsis/start-sidecar.ps1
+++ b/desktop/src/build/windows/nsis/start-sidecar.ps1
@@ -209,6 +209,7 @@ if (-not (Test-Path -LiteralPath $node)) { exit 6 }
 # $ErrorActionPreference = Continue the script keeps going and $home stays
 # the user profile root, so SQLite lands at %USERPROFILE%\org-os\...
 $freeosHome = $env:FREEOS_HOME
+if (-not $freeosHome) { $freeosHome = $env:OCTOP_HOME }
 if (-not $freeosHome) { $freeosHome = Join-Path $env:USERPROFILE '.freeos' }
 $data = Join-Path $freeosHome 'org-os'
 New-Item -ItemType Directory -Force -Path $data | Out-Null
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index a5001987..26236f8a 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -2,7 +2,8 @@
 # FreeOS / Octop — Docker Compose (single Python process)
 #
 # One service. No Node / openXYOS sidecar. Organization is in-host.
-# Product home name is FREEOS_HOME; OCTOP_* and ~/.octop remain aliases.
+# Product home is FREEOS_HOME (/data/.freeos). OCTOP_HOME is the same path.
+# Host default mount is ~/.freeos. Set OCTOP_DATA to point at an existing tree.
 # Published image: ghcr.io/xyaistudio/freeos
 # Local build tag remains octop:latest (compatibility).
 #
@@ -19,7 +20,7 @@
 #   OCTOP_DATABASE_URL=postgresql://octop:octop@host.docker.internal:5432/octop
 #
 # 注意: docker/.env 仅用于 Compose 插值；变量必须列在下方 environment
-# 才会进入容器。也可写入数据卷内的 ~/.octop/env（宿主机挂载目录下的 env）。
+# 才会进入容器。也可写入数据卷内的 env（宿主机挂载目录下的 env）。
 # 密码须 ≥8 位且同时包含字母与数字（与控制台改密策略一致）。
 # 后续计划：首次启动可改为随机生成密码并写入 credential.txt。
 # =============================================================================
@@ -35,9 +36,11 @@ services:
     ports:
       - "${OCTOP_PORT:-8088}:${OCTOP_PORT:-8088}"
     volumes:
-      - ${OCTOP_DATA:-~/.octop}:/data/.octop
+      - ${OCTOP_DATA:-~/.freeos}:/data/.freeos
     environment:
       - HOME=/data
+      - FREEOS_HOME=/data/.freeos
+      - OCTOP_HOME=/data/.freeos
       - OCTOP_BIND_HOST=0.0.0.0
       - OCTOP_PORT=${OCTOP_PORT:-8088}
       - OCTOP_LOG_LEVEL=${OCTOP_LOG_LEVEL:-info}
diff --git a/docker/docker-entrypoint.sh b/docker/docker-entrypoint.sh
index a5de348c..6b10405d 100644
--- a/docker/docker-entrypoint.sh
+++ b/docker/docker-entrypoint.sh
@@ -4,8 +4,8 @@
 #
 # 环境变量:
 #   HOME                      — 必须为 /data，使 ~/.octop 映射到数据卷
-#   FREEOS_HOME               — 产品家目录（可选；应用优先于 OCTOP_HOME）
-#   OCTOP_HOME                — 遗留别名。入口脚本仍用 ~/.octop 做首次 init
+#   FREEOS_HOME               — 产品家目录（优先于 OCTOP_HOME）
+#   OCTOP_HOME                — 遗留别名。未设置 FREEOS_HOME 时使用
 #   OCTOP_DEFAULT_PASSWORD    — 首次管理员密码（须 ≥8 位且含字母和数字；
 #                               不设置则自动生成随机密码，凭据写入
 #                               /data/.octop/credential.txt）
@@ -21,9 +21,25 @@
 set -euo pipefail
 
 export HOME="${HOME:-/data}"
-OCTOP_HOME="${HOME}/.octop"
-DB_FILE="${OCTOP_HOME}/octop.db"
-CREDENTIAL_FILE="${OCTOP_HOME}/credential.txt"
+# Honor an explicit product home. Otherwise follow PathLayout: an existing
+# ~/.freeos, an existing ~/.octop, else a new ~/.freeos. Do not ignore
+# FREEOS_HOME in favor of ${HOME}/.octop.
+if [ -n "${FREEOS_HOME:-}" ]; then
+    PRODUCT_HOME="$FREEOS_HOME"
+elif [ -n "${OCTOP_HOME:-}" ]; then
+    PRODUCT_HOME="$OCTOP_HOME"
+elif [ -d "${HOME}/.freeos" ]; then
+    PRODUCT_HOME="${HOME}/.freeos"
+elif [ -d "${HOME}/.octop" ]; then
+    PRODUCT_HOME="${HOME}/.octop"
+else
+    PRODUCT_HOME="${HOME}/.freeos"
+fi
+export FREEOS_HOME="$PRODUCT_HOME"
+export OCTOP_HOME="$PRODUCT_HOME"
+mkdir -p "$PRODUCT_HOME"
+DB_FILE="${PRODUCT_HOME}/octop.db"
+CREDENTIAL_FILE="${PRODUCT_HOME}/credential.txt"
 ADMIN_USERNAME="${OCTOP_ADMIN_USERNAME:-admin}"
 ADMIN_DISPLAY_NAME="${OCTOP_ADMIN_DISPLAY_NAME:-Admin}"
 PORT="${OCTOP_PORT:-8088}"
diff --git a/scripts/run-org-sidecar.sh b/scripts/run-org-sidecar.sh
index ba07ad2e..41968057 100755
--- a/scripts/run-org-sidecar.sh
+++ b/scripts/run-org-sidecar.sh
@@ -15,9 +15,10 @@ fi
 mkdir -p "${DATA_DIR}"
 cd "${APP}"
 
-if [[ ! -f .env ]]; then
+# Secrets stay under the product home. Do not write .env into the source tree.
+if [[ ! -f "${DATA_DIR}/sidecar.env" ]]; then
   umask 077
-  cat > .env <<EOF
+  cat > "${DATA_DIR}/sidecar.env" <<EOF
 NODE_ENV=development
 PORT=${PORT}
 CORS_ORIGIN=http://127.0.0.1:18900,http://localhost:18900,http://127.0.0.1:5173,http://localhost:5173
@@ -25,11 +26,17 @@ JWT_SECRET=$(python3 -c 'import secrets; print(secrets.token_hex(32))')
 COOKIE_SECRET=$(python3 -c 'import secrets; print(secrets.token_hex(32))')
 AIR_GAP_MODE=true
 DB_DIALECT=sqlite
+DATABASE_PATH=${DATA_DIR}/xiongyuan.db
 ALLOW_PUBLIC_REGISTRATION=false
 SEED_DEMO_DATA=false
 EOF
-  echo "Wrote ${APP}/.env (local secrets; do not commit)."
+  echo "Wrote ${DATA_DIR}/sidecar.env"
 fi
+set -a
+# shellcheck disable=SC1091
+source "${DATA_DIR}/sidecar.env"
+set +a
+export DATABASE_PATH="${DATABASE_PATH:-${DATA_DIR}/xiongyuan.db}"
 
 if [[ ! -d node_modules ]]; then
   npm install
diff --git a/src/octop/api/routers/filesystem.py b/src/octop/api/routers/filesystem.py
index de098856..79f5afff 100644
--- a/src/octop/api/routers/filesystem.py
+++ b/src/octop/api/routers/filesystem.py
@@ -8,7 +8,7 @@
   ``/etc``, ``/root`` on POSIX). The process home is never denied (so uid 0
   with home ``/root`` can use the default picker path).
 - All authenticated users may browse from host root ``/`` (denylist still applies).
-  The UI default ``root_dir`` remains the process home directory.
+  The UI default ``root_dir`` is the FreeOS product home (``FREEOS_HOME`` / ``--home``).
 - Directory listing is capped and skips unreadable entries.
 - Write probe creates a short-lived dotfile only for non-``/`` selections.
 - mkdir / rename only allow basename-safe names under already-browsable parents.
@@ -73,8 +73,9 @@ async def filesystem_defaults(
     user: User = Depends(current_user),
     server: Any = Depends(get_server),
 ) -> dict[str, Any]:
-    """Return the process home path and browse-tree root (host ``/`` on POSIX)."""
+    """Return the OS profile path and the product-home default ``root_dir``."""
     home = host_path_text(host_home_dir())
+    product_home = host_path_text(server.paths.root)
     allowed = _user_workspace_root(server, user)
     if allowed:
         return {
@@ -85,7 +86,7 @@ async def filesystem_defaults(
         }
     return {
         "home": home,
-        "default_root_dir": home,
+        "default_root_dir": product_home,
         "allow_outside_home": True,
         "tree_root": host_fs_tree_root(allow_outside_home=True),
     }
diff --git a/src/octop/api/routers/setup.py b/src/octop/api/routers/setup.py
index ca63b209..4cf275ce 100644
--- a/src/octop/api/routers/setup.py
+++ b/src/octop/api/routers/setup.py
@@ -4,7 +4,6 @@
 
 import json
 import logging
-from pathlib import Path
 from typing import Any
 
 from fastapi import APIRouter, Depends, Header, Request
@@ -176,6 +175,7 @@ async def _bootstrap_default_agent(server: Any, *, user_id: int, locale: str = "
         user_id=user_id,
         locale=locale,
         agent_id=SETUP_DEFAULT_AGENT_ID,
+        product_home=server.paths.root,
     )
 
 
@@ -250,7 +250,8 @@ async def status(server: Any = Depends(get_server)) -> dict[str, Any]:
     """Whether initial admin creation is still required and wizard password file state."""
     from octop.infra.agents.permission_mode import supports_request_interrupt_override
 
-    wizard_path = str(Path.home() / _wizard.WIZARD_FILE_NAME)
+    wizard_home = server.paths.root
+    wizard_path = str(wizard_home / _wizard.WIZARD_FILE_NAME)
     password_required = _setup_password_required(server)
     um = server.user_manager
     setup_required = um is None or um.count() == 0
@@ -263,7 +264,7 @@ async def status(server: Any = Depends(get_server)) -> dict[str, Any]:
         "setup_required": setup_required,
         "wizard_password_required": password_required,
         "wizard_password_exists": (
-            password_required and _wizard.read_password(Path.home()) is not None
+            password_required and _wizard.read_password(wizard_home) is not None
         ),
         "wizard_password_path": wizard_path if password_required else None,
         "database_driver": database_driver,
@@ -354,7 +355,7 @@ async def verify_password(
         server.wizard_tokens.record_attempt(client_ip)
     except RateLimited:
         raise OctopError(ErrorCode.SETUP_RATE_LIMITED, "too many attempts") from None
-    expected = _wizard.read_password(Path.home())
+    expected = _wizard.read_password(server.paths.root)
     if expected is None or body.password != expected:
         raise OctopError(ErrorCode.SETUP_PASSWORD_WRONG, "wrong password")
     token, ttl = server.wizard_tokens.issue()
diff --git a/src/octop/i18n/en.json b/src/octop/i18n/en.json
index a51f35e9..c45f4f5c 100644
--- a/src/octop/i18n/en.json
+++ b/src/octop/i18n/en.json
@@ -406,7 +406,9 @@
     "WORKSPACE_ROOT_RESTRICTED": "The selected storage root is outside the allowed directory for this account.",
     "TOKEN_QUOTA_EXCEEDED": "This account has reached its token quota. Please contact an administrator to raise the limit ({used}/{quota}).",
     "LOCAL_MODEL_REGISTER_FAILED": "Could not register the local model: {reason}",
-    "CONFIG_FILE_CORRUPT": "Cannot update {path}: the file is not valid JSON ({detail}). Fix the syntax and retry — no settings were changed."
+    "CONFIG_FILE_CORRUPT": "Cannot update {path}: the file is not valid JSON ({detail}). Fix the syntax and retry — no settings were changed.",
+    "HOME_WRITE_REFUSED": "Refusing to write into {path}. That directory already exists and is not inside the current home ({home}).",
+    "AGENT_SEED_EXISTS": "Refusing to seed the default agent over existing data at {path}."
   },
   "desktop": {
     "install_log_deps": "Installing Python dependencies…",
diff --git a/src/octop/i18n/zh.json b/src/octop/i18n/zh.json
index 0f9f7c5d..57385a9a 100644
--- a/src/octop/i18n/zh.json
+++ b/src/octop/i18n/zh.json
@@ -406,7 +406,9 @@
     "WORKSPACE_ROOT_RESTRICTED": "所选存储根目录超出了该账号允许的范围。",
     "TOKEN_QUOTA_EXCEEDED": "该账号已达到 token 配额上限，请联系管理员提升额度（{used}/{quota}）。",
     "LOCAL_MODEL_REGISTER_FAILED": "无法注册本地模型：{reason}",
-    "CONFIG_FILE_CORRUPT": "无法更新 {path}：该文件不是合法 JSON（{detail}）。请修正语法后重试；现有配置未被改动。"
+    "CONFIG_FILE_CORRUPT": "无法更新 {path}：该文件不是合法 JSON（{detail}）。请修正语法后重试；现有配置未被改动。",
+    "HOME_WRITE_REFUSED": "拒绝写入 {path}。该目录已存在，且不在当前家目录（{home}）之内。",
+    "AGENT_SEED_EXISTS": "拒绝把默认智能体播种到已有数据上：{path}。"
   },
   "desktop": {
     "install_log_deps": "正在安装 Python 依赖…",
diff --git a/src/octop/infra/agents/default_agent.py b/src/octop/infra/agents/default_agent.py
index c2810110..11ec053a 100644
--- a/src/octop/infra/agents/default_agent.py
+++ b/src/octop/infra/agents/default_agent.py
@@ -7,12 +7,14 @@
 from __future__ import annotations
 
 import logging
+from pathlib import Path
 from typing import Any
 
 from octop.infra.agents.experts.catalog import ExpertCatalog, build_create_spec_from_expert
 from octop.infra.errors import ErrorCode, OctopError
-from octop.infra.utils.host_dirs import host_home_dir, host_path_text
+from octop.infra.utils.host_dirs import host_path_text
 from octop.infra.utils.locale import normalize_locale
+from octop.infra.utils.paths import PathLayout
 
 logger = logging.getLogger(__name__)
 
@@ -20,11 +22,17 @@
 SETUP_DEFAULT_AGENT_ID = "main"
 
 
-def default_home_local_backend() -> dict[str, Any]:
-    """Same local backend as the dashboard create-from-expert default (home-scoped)."""
+def default_home_local_backend(product_home: Path | None = None) -> dict[str, Any]:
+    """Local backend rooted at the FreeOS home (``FREEOS_HOME`` / ``--home``).
+
+    The OS profile (``Path.home()``) is not a data root. Scoped workspaces are
+    ``{root_dir}/.octop/workspaces/<id>``, so a profile root writes into
+    ``~/.octop`` even when the process was started with a separate home.
+    """
+    root = product_home if product_home is not None else PathLayout.from_env().root
     return {
         "type": "local_shell",
-        "root_dir": host_path_text(host_home_dir()),
+        "root_dir": host_path_text(root),
         "virtual_mode": True,
     }
 
@@ -36,6 +44,7 @@ async def bootstrap_default_agent(
     user_id: int,
     locale: str = "zh",
     agent_id: str | None = None,
+    product_home: Path | None = None,
 ) -> Any | None:
     """Create ``general-assistant`` for *user_id* when they have no agents yet.
 
@@ -61,7 +70,7 @@ async def bootstrap_default_agent(
         user_id=user_id,
         agent_id=agent_id,
         locale=loc,
-        config_extra={"backend": default_home_local_backend()},
+        config_extra={"backend": default_home_local_backend(product_home)},
     )
     return await registry.create(spec, defer_bootstrap=True)
 
@@ -72,11 +81,18 @@ async def try_bootstrap_default_agent(
     user_id: int,
     locale: str = "zh",
     agent_id: str | None = None,
+    product_home: Path | None = None,
 ) -> None:
     """Best-effort wrapper used by HTTP adapters (setup / invite)."""
     if server.app_runtime is None:
         logger.warning("skip default agent bootstrap: app_runtime not ready")
         return
+    home = product_home
+    if home is None:
+        paths = getattr(server, "paths", None)
+        root = getattr(paths, "root", None)
+        if isinstance(root, Path):
+            home = root
     try:
         await bootstrap_default_agent(
             server.app_runtime.agent_registry,
@@ -84,6 +100,7 @@ async def try_bootstrap_default_agent(
             user_id=user_id,
             locale=locale,
             agent_id=agent_id,
+            product_home=home,
         )
     except Exception as exc:  # pragma: no cover - logged; user creation should still succeed
         logger.warning("could not auto-create default agent for user %s: %s", user_id, exc)
diff --git a/src/octop/infra/agents/execute_env.py b/src/octop/infra/agents/execute_env.py
index 4b9d9a15..49c05ee4 100644
--- a/src/octop/infra/agents/execute_env.py
+++ b/src/octop/infra/agents/execute_env.py
@@ -85,6 +85,7 @@ def agent_execute_env_defaults(
     return {
         "OCTOP_AGENT_ID": agent_id,
         "OCTOP_AUTH_DIR": auth_env,
+        "FREEOS_HOME": str(paths.root),
         "OCTOP_HOME": str(paths.root),
         "OCTOP_SKILLS_DIR": skills_env,
     }
diff --git a/src/octop/infra/agents/providers/llamacpp_runtime.py b/src/octop/infra/agents/providers/llamacpp_runtime.py
index 55de5d1e..6d2b864f 100644
--- a/src/octop/infra/agents/providers/llamacpp_runtime.py
+++ b/src/octop/infra/agents/providers/llamacpp_runtime.py
@@ -108,8 +108,7 @@ def _validated_model_path(raw: str) -> Path:
 
 
 def _log_path() -> Path:
-    configured = os.environ.get("OCTOP_HOME", "").strip()
-    root = Path(configured).expanduser() if configured else Path.home() / ".octop"
+    root = PathLayout.from_env().root
     path = root / "logs" / "llama-sidecar.log"
     path.parent.mkdir(parents=True, exist_ok=True)
     return path
diff --git a/src/octop/infra/agents/workspace_dir.py b/src/octop/infra/agents/workspace_dir.py
index e0dd456e..3624b1b3 100644
--- a/src/octop/infra/agents/workspace_dir.py
+++ b/src/octop/infra/agents/workspace_dir.py
@@ -30,6 +30,7 @@
 from pathlib import Path
 from typing import Any
 
+from octop.infra.errors import ErrorCode, OctopError
 from octop.infra.utils.paths import PathLayout
 
 DEFAULT_SYSTEM_FILES_PATH = ".octop"
@@ -42,6 +43,98 @@ def _running_on_windows() -> bool:
     return os.name == "nt"
 
 
+def path_is_within(child: str, root: str) -> bool:
+    """True when *child* is *root* or a descendant.
+
+    Drive-letter paths are compared case-insensitively so Windows
+    ``C:\\Users\\...`` and ``c:/Users/...`` match. POSIX paths stay
+    case-sensitive. Used to keep FreeOS writes inside the product home.
+    """
+
+    def norm(raw: str) -> str:
+        text = raw.strip().replace("\\", "/")
+        if len(text) > 1:
+            text = text.rstrip("/")
+        windows = os.name == "nt" or bool(re.match(r"^[A-Za-z]:", text))
+        if windows and len(text) >= 2 and text[1] == ":":
+            text = text[0].lower() + text[1:]
+            return text.casefold()
+        if os.name == "nt":
+            return text.casefold()
+        return text
+
+    child_n = norm(child)
+    root_n = norm(root)
+    if not child_n or not root_n:
+        return False
+    return child_n == root_n or child_n.startswith(root_n + "/")
+
+
+def _resolved_text(path: Path) -> str:
+    try:
+        return str(path.resolve())
+    except OSError:
+        return str(path.absolute())
+
+
+def path_is_under_home(path: Path, home: Path) -> bool:
+    """True when *path* is the product home or a directory inside it."""
+    return path_is_within(_resolved_text(path), _resolved_text(home))
+
+
+def workspace_has_user_payload(path: Path) -> bool:
+    """True when *path* already holds agent files FreeOS must not replace."""
+    if not path.exists():
+        return False
+    if not path.is_dir():
+        return True
+    names = (
+        "SOUL.md",
+        "manifest.json",
+        "memory.sqlite",
+        "memory.sqlite-wal",
+        "memory.sqlite-shm",
+    )
+    if any((path / name).exists() for name in names):
+        return True
+    nested = path / DEFAULT_SYSTEM_FILES_PATH
+    if nested.is_dir() and any(
+        (nested / name).exists() for name in ("manifest.json", "memory.sqlite", "skills")
+    ):
+        return True
+    skills = path / "skills"
+    if skills.is_dir():
+        for skill_md in skills.rglob("SKILL.md"):
+            if skill_md.is_file():
+                return True
+    return False
+
+
+def refuse_existing_outside_home(path: Path, home: Path) -> None:
+    """Refuse to adopt a directory that already exists outside the product home."""
+    if path_is_under_home(path, home) or not path.exists():
+        return
+    raise OctopError(
+        ErrorCode.HOME_WRITE_REFUSED,
+        (
+            f"refusing to write into {path}: it already exists and is not inside "
+            f"the current home {home}"
+        ),
+        details={"path": str(path), "home": str(home)},
+    )
+
+
+def refuse_seed_over_existing(path: Path) -> None:
+    """Refuse to seed a default agent workspace that already has user files."""
+    if not workspace_has_user_payload(path):
+        return
+    raise OctopError(
+        ErrorCode.AGENT_SEED_EXISTS,
+        f"refusing to seed the default agent over existing data at {path}",
+        details={"path": str(path)},
+    )
+
+
 def _is_host_root_sentinel(root: str | Path | None) -> bool:
     if root is None:
         return True
@@ -102,9 +195,12 @@ def default_agent_workspace_dir(
             return paths.agent_workspace(agent_id)
         out = root / DEFAULT_SYSTEM_FILES_PATH / SCOPED_WORKSPACE_DIRNAME / agent_id
         if ensure:
+            refuse_existing_outside_home(out, paths.root)
             out.mkdir(parents=True, exist_ok=True)
         return out
     if ensure:
+        target = paths.agent_workspace(agent_id)
+        refuse_existing_outside_home(target, paths.root)
         return paths.ensure_agent_workspace(agent_id)
     return paths.agent_workspace(agent_id)
 
@@ -117,14 +213,19 @@ def seed_workspace_dir_on_create(
 ) -> Path:
     """Ensure ``config["workspace_dir"]`` at create; return on-disk Path for seeding."""
     raw = config.get("workspace_dir")
-    if isinstance(raw, str) and raw.strip():
-        text = raw.strip()
+    text = raw.strip() if isinstance(raw, str) else ""
+    if text:
         host = resolve_workspace_host_path(text, config)
+        refuse_existing_outside_home(host, paths.root)
         host.mkdir(parents=True, exist_ok=True)
         config["workspace_dir"] = text
         return host.resolve()
 
-    host = default_agent_workspace_dir(paths, agent_id, cfg=config).resolve()
+    host = default_agent_workspace_dir(paths, agent_id, cfg=config, ensure=False)
+    refuse_existing_outside_home(host, paths.root)
+    refuse_seed_over_existing(host)
+    host.mkdir(parents=True, exist_ok=True)
+    host = host.resolve()
     if uses_scoped_workspace_default(config):
         config["workspace_dir"] = scoped_workspace_dir_str(agent_id)
     else:
@@ -374,6 +475,10 @@ def workspace_dir_from_config_json(
     "host_system_dir",
     "join_agent_facing",
     "local_backend_root_dir",
+    "path_is_under_home",
+    "path_is_within",
+    "refuse_existing_outside_home",
+    "refuse_seed_over_existing",
     "resolve_workspace_host_path",
     "scoped_workspace_dir_str",
     "seed_workspace_dir_on_create",
diff --git a/src/octop/infra/errors.py b/src/octop/infra/errors.py
index 5033812c..1851b2f9 100644
--- a/src/octop/infra/errors.py
+++ b/src/octop/infra/errors.py
@@ -111,6 +111,8 @@ class ErrorCode(StrEnum):
     TOKEN_QUOTA_EXCEEDED = "TOKEN_QUOTA_EXCEEDED"
     LOCAL_MODEL_REGISTER_FAILED = "LOCAL_MODEL_REGISTER_FAILED"
     CONFIG_FILE_CORRUPT = "CONFIG_FILE_CORRUPT"
+    HOME_WRITE_REFUSED = "HOME_WRITE_REFUSED"
+    AGENT_SEED_EXISTS = "AGENT_SEED_EXISTS"
 
 
 _DEFAULT_STATUS: dict[ErrorCode, int] = {
@@ -213,6 +215,8 @@ class ErrorCode(StrEnum):
     ErrorCode.TOKEN_QUOTA_EXCEEDED: 403,
     ErrorCode.LOCAL_MODEL_REGISTER_FAILED: 400,
     ErrorCode.CONFIG_FILE_CORRUPT: 400,
+    ErrorCode.HOME_WRITE_REFUSED: 409,
+    ErrorCode.AGENT_SEED_EXISTS: 409,
 }
 
 
diff --git a/src/octop/infra/server.py b/src/octop/infra/server.py
index 85844edd..5f201d5b 100644
--- a/src/octop/infra/server.py
+++ b/src/octop/infra/server.py
@@ -527,7 +527,7 @@ def _emit_wizard_password(self, *, user_count: int) -> None:
         config = self.config
         if config is None:
             return
-        wizard_home = Path.home()
+        wizard_home = self.paths.root
         if config.require_setup_password:
             try:
                 new_pw = _wizard_pw.boot_self_heal(wizard_home, user_count=user_count)
@@ -543,15 +543,11 @@ def _emit_wizard_password(self, *, user_count: int) -> None:
                 "║  FreeOS first-run wizard password (one-time use):         ║\n"
                 f"║  {new_pw:<54}  ║\n"
                 "║  Open the dashboard and paste it into the setup wizard.  ║\n"
-                "║  File: ~/octop-login.txt                                   ║\n"
                 "╚══════════════════════════════════════════════════════════╝"
                 "\033[0m\n"
             )
             print(banner, flush=True)
-            logger.info(
-                "wizard password generated; file=%s",
-                wizard_home / WIZARD_FILE_NAME,
-            )
+            print(f"Wizard password file: {wizard_home / WIZARD_FILE_NAME}", flush=True)
 
     async def stop(self) -> None:
         if not self._started:
diff --git a/src/octop/infra/setup/password_file.py b/src/octop/infra/setup/password_file.py
index 4e65d636..e1833ec9 100644
--- a/src/octop/infra/setup/password_file.py
+++ b/src/octop/infra/setup/password_file.py
@@ -1,11 +1,18 @@
-"""Setup wizard password file at ``<home>/octop-login.txt``."""
+"""Setup wizard password file at ``<product-home>/octop-login.txt``.
+
+``home`` is the FreeOS data directory (``FREEOS_HOME`` / ``--home``), not the
+OS profile. The password itself is never written to logs.
+"""
 
 from __future__ import annotations
 
+import logging
 import os
 import secrets
 from pathlib import Path
 
+logger = logging.getLogger(__name__)
+
 WIZARD_FILE_NAME = "octop-login.txt"
 _TOKEN_BYTES = 16
 _PASSWORD_LABEL_PREFIX = "Password:"
@@ -77,5 +84,10 @@ def boot_self_heal(home: Path, user_count: int) -> str | None:
     """
     if user_count > 0:
         return None
+    target = _password_path(home)
     created = ensure_password(home)
-    return created if created is not None else read_password(home)
+    if created is not None:
+        logger.info("wizard password file created; path=%s", target)
+        return created
+    logger.info("wizard password file reused; path=%s", target)
+    return read_password(home)
diff --git a/tests/integration/test_filesystem_api.py b/tests/integration/test_filesystem_api.py
index 3c369e44..566c7e25 100644
--- a/tests/integration/test_filesystem_api.py
+++ b/tests/integration/test_filesystem_api.py
@@ -96,13 +96,13 @@ async def test_ensure_bwrap_returns_status_shape(
 
 @pytest.mark.asyncio
 async def test_filesystem_defaults_for_admin(
-    env_admin_client: tuple[httpx.AsyncClient, dict[str, str]],
+    env: tuple[httpx.AsyncClient, Any, dict[str, str]],
     monkeypatch: pytest.MonkeyPatch,
     tmp_path: Path,
 ) -> None:
-    from octop.infra.utils.host_dirs import host_fs_tree_root
+    from octop.infra.utils.host_dirs import host_fs_tree_root, host_path_text
 
-    client, auth = env_admin_client
+    client, srv, auth = env
     home = tmp_path / "os_home"
     home.mkdir()
     monkeypatch.setattr("octop.infra.utils.host_dirs.Path.home", lambda: home)
@@ -111,7 +111,7 @@ async def test_filesystem_defaults_for_admin(
     assert r.status_code == 200, r.text
     body = r.json()
     assert body["home"] == home.resolve().as_posix()
-    assert body["default_root_dir"] == home.resolve().as_posix()
+    assert body["default_root_dir"] == host_path_text(srv.paths.root)
     assert body["allow_outside_home"] is True
     assert body["tree_root"] == host_fs_tree_root(allow_outside_home=True)
 
@@ -122,10 +122,10 @@ async def test_non_admin_can_list_outside_home(
     monkeypatch: pytest.MonkeyPatch,
     tmp_path: Path,
 ) -> None:
-    from octop.infra.utils.host_dirs import host_fs_tree_root
+    from octop.infra.utils.host_dirs import host_fs_tree_root, host_path_text
     from tests.support.auth import create_user
 
-    client, _srv, admin_auth = env
+    client, srv, admin_auth = env
     home = tmp_path / "os_home"
     home.mkdir()
     outside = tmp_path / "outside"
@@ -138,7 +138,7 @@ async def test_non_admin_can_list_outside_home(
     assert defaults.status_code == 200, defaults.text
     body = defaults.json()
     assert body["allow_outside_home"] is True
-    assert body["default_root_dir"] == home.resolve().as_posix()
+    assert body["default_root_dir"] == host_path_text(srv.paths.root)
     assert body["tree_root"] == host_fs_tree_root(allow_outside_home=True)
 
     listed = await client.get(
diff --git a/tests/integration/test_home_isolation.py b/tests/integration/test_home_isolation.py
new file mode 100644
index 00000000..ffc760f0
--- /dev/null
+++ b/tests/integration/test_home_isolation.py
@@ -0,0 +1,179 @@
+"""First-start with --home must not touch a populated OS profile."""
+
+from __future__ import annotations
+
+import hashlib
+from pathlib import Path
+from unittest.mock import patch
+
+import httpx
+import pytest
+
+from octop.api.app import build_app
+from octop.api.routers.chat.models import ChatTurnBody
+from octop.api.routers.chat.turn import prepare_dashboard_turn
+from octop.infra.agents.providers.llamacpp_runtime import _log_path
+from octop.infra.server import OctopServer
+from octop.infra.setup.password_file import WIZARD_FILE_NAME, read_password
+from octop.infra.utils.paths import PathLayout
+from octop.modules.org_os.service import org_module_from_paths
+from octop.modules.org_os.sidecar_launch import restart_sidecar
+from tests.support.app import ensure_control_plane_bound
+from tests.support.auth import TEST_PASSWORD
+from tests.support.harness import patch_harness
+
+
+def _snapshot(root: Path) -> dict[str, tuple[str, int]]:
+    found: dict[str, tuple[str, int]] = {}
+    if not root.exists():
+        return found
+    for path in root.rglob("*"):
+        if not path.is_file():
+            continue
+        stat = path.stat()
+        digest = hashlib.sha256(path.read_bytes()).hexdigest()
+        found[path.relative_to(root).as_posix()] = (digest, stat.st_mtime_ns)
+    return found
+
+
+def _seed_profile(root: Path) -> None:
+    workspace = root / ".octop" / "workspaces" / "main"
+    workspace.mkdir(parents=True)
+    (workspace / "SOUL.md").write_text("user soul\n", encoding="utf-8")
+    (workspace / "manifest.json").write_text("{}\n", encoding="utf-8")
+    (workspace / "memory.sqlite").write_bytes(b"sqlite")
+    (workspace / "memory.sqlite-wal").write_bytes(b"wal")
+    (workspace / "memory.sqlite-shm").write_bytes(b"shm")
+    skill_a = workspace / "skills" / "one"
+    skill_b = workspace / ".octop" / "skills" / "two"
+    skill_a.mkdir(parents=True)
+    skill_b.mkdir(parents=True)
+    (skill_a / "SKILL.md").write_text("# one\n", encoding="utf-8")
+    (skill_b / "SKILL.md").write_text("# two\n", encoding="utf-8")
+    (skill_b / "manage_skills.py").write_text("print('keep')\n", encoding="utf-8")
+    freeos = root / ".freeos"
+    freeos.mkdir()
+    (freeos / "config.json").write_text("{}\n", encoding="utf-8")
+    (freeos / "octop.db").write_bytes(b"db")
+
+
+class _QuietProc:
+    pid = 0
+
+    def poll(self) -> int:
+        return 0
+
+    def wait(self, timeout: float | None = None) -> int:
+        return 0
+
+    def __enter__(self) -> _QuietProc:
+        return self
+
+    def __exit__(self, *args: object) -> None:
+        return None
+
+
+async def test_first_start_with_home_does_not_touch_profile(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    sentinel = tmp_path / "sentinel-profile"
+    isolated = tmp_path / "isolated-home"
+    _seed_profile(sentinel)
+    before = _snapshot(sentinel)
+
+    monkeypatch.setenv("HOME", str(sentinel))
+    monkeypatch.setenv("USERPROFILE", str(sentinel))
+    monkeypatch.setenv("FREEOS_HOME", str(isolated))
+    monkeypatch.delenv("OCTOP_HOME", raising=False)
+    monkeypatch.delenv("OCTOP_DESKTOP", raising=False)
+    monkeypatch.delenv("FREEOS_DESKTOP", raising=False)
+    monkeypatch.setattr(
+        "octop.infra.agents.providers.llamacpp_runtime.find_llama_server",
+        lambda: None,
+    )
+
+    assert PathLayout.from_env().root.resolve() == isolated.resolve()
+    log_path = _log_path()
+    assert log_path.is_relative_to(isolated.resolve())
+
+    with patch_harness(None):
+        server = OctopServer()
+        await server.start()
+        await ensure_control_plane_bound(server)
+        if server.app_runtime is not None:
+            await server.app_runtime.proactive_scheduler.shutdown()
+            server.app_runtime.proactive_scheduler.suspend()
+        app = build_app(server)
+        try:
+            async with httpx.AsyncClient(
+                transport=httpx.ASGITransport(app=app),
+                base_url="http://testserver",
+            ) as client:
+                assert (isolated / WIZARD_FILE_NAME).is_file()
+                assert not (sentinel / WIZARD_FILE_NAME).exists()
+                password = read_password(isolated)
+                assert password
+                token = (
+                    await client.post("/api/setup/verify-password", json={"password": password})
+                ).json()["wizard_token"]
+                admin = await client.post(
+                    "/api/setup/initial-admin",
+                    json={"username": "admin", "password": TEST_PASSWORD},
+                    headers={"Authorization": f"Bearer {token}"},
+                )
+                assert admin.status_code == 201, admin.text
+                finished = await client.post(
+                    "/api/setup/finish",
+                    json={"provider_draft": None},
+                    headers={"Authorization": f"Bearer {token}"},
+                )
+                assert finished.status_code == 200, finished.text
+                auth = {
+                    "Authorization": f"Bearer {admin.json()['access_token']}",
+                }
+                created = await client.post(
+                    "/api/admin/providers",
+                    headers=auth,
+                    json={
+                        "name": "Ollama",
+                        "kind": "openai",
+                        "base_url": "http://127.0.0.1:11434/v1",
+                        "api_key": "ollama",
+                        "models": [
+                            {
+                                "id": "llama3.2",
+                                "name": "llama3.2",
+                                "enabled": True,
+                                "input": ["text"],
+                            }
+                        ],
+                    },
+                )
+                assert created.status_code in {200, 201}, created.text
+                user = server.user_manager.get("admin")
+                assert user is not None
+                prepared = await prepare_dashboard_turn(
+                    server,
+                    agent_id="main",
+                    user=user,
+                    turn=ChatTurnBody(
+                        messages=[{"role": "user", "content": "hello"}],
+                        default_model="Ollama/llama3.2",
+                    ),
+                )
+                assert prepared.model_ref == "Ollama/llama3.2"
+
+            service = org_module_from_paths(server.paths)
+            service.set_enabled(True)
+            with patch(
+                "octop.modules.org_os.sidecar_launch.subprocess.Popen",
+                return_value=_QuietProc(),
+            ):
+                restart_sidecar(service, wait=0.4)
+        finally:
+            await server.stop()
+
+    workspace = isolated / ".octop" / "workspaces" / "main"
+    assert (workspace / "SOUL.md").is_file()
+    assert _snapshot(sentinel) == before
+    assert not any(sentinel.rglob("*.tmp"))
diff --git a/tests/integration/test_invites_api.py b/tests/integration/test_invites_api.py
index 0a4d1adb..f30e004c 100644
--- a/tests/integration/test_invites_api.py
+++ b/tests/integration/test_invites_api.py
@@ -5,7 +5,7 @@
 import json
 
 from octop.infra.agents.default_agent import default_home_local_backend
-from octop.infra.utils.host_dirs import host_home_dir, host_path_text
+from octop.infra.utils.host_dirs import host_path_text
 
 
 async def test_invite_create_list_redeem_and_one_time(env) -> None:
@@ -72,7 +72,7 @@ async def test_invite_create_list_redeem_and_one_time(env) -> None:
     assert bob_row is not None
     bob_cfg = json.loads(bob_row.config_json or "{}")
     assert bob_cfg["backend"] == default_home_local_backend()
-    assert bob_cfg["backend"]["root_dir"] == host_path_text(host_home_dir())
+    assert bob_cfg["backend"]["root_dir"] == host_path_text(srv.paths.root)
     assert bob_cfg["workspace_dir"] == f"/.octop/workspaces/{bob_agents[0]['agent_id']}"
 
     again = await c.post(
diff --git a/tests/integration/test_postgresql_control_plane.py b/tests/integration/test_postgresql_control_plane.py
index 9ddba0dc..554b2fd2 100644
--- a/tests/integration/test_postgresql_control_plane.py
+++ b/tests/integration/test_postgresql_control_plane.py
@@ -267,7 +267,7 @@ async def test_setup_database_postgresql_bind(tmp_octop_home: Path) -> None:
         assert status.json()["database_bound"] is True
         assert status.json()["database_driver"] == "postgresql"
 
-        pw = read_password(tmp_octop_home.parent)
+        pw = read_password(tmp_octop_home)
         assert pw is not None
         verified = await client.post("/api/setup/verify-password", json={"password": pw})
         assert verified.status_code == 200, verified.text
diff --git a/tests/integration/test_setup_bootstrap.py b/tests/integration/test_setup_bootstrap.py
index 3a123007..db4ac13d 100644
--- a/tests/integration/test_setup_bootstrap.py
+++ b/tests/integration/test_setup_bootstrap.py
@@ -8,6 +8,7 @@
 
 from octop.infra.server import OctopServer
 from octop.infra.setup.password_file import read_password
+from octop.infra.utils.host_dirs import host_path_text
 from tests.support.app import write_octop_config
 from tests.support.auth import auth_header, bootstrap_admin
 
@@ -41,7 +42,7 @@ async def test_bootstrap_creates_default_main_agent(patched_app_client: Any) ->
 
 async def test_main_not_created_until_finish(patched_app_client: Any) -> None:
     c, _srv, home = patched_app_client
-    pw = read_password(home.parent)
+    pw = read_password(home)
     assert pw is not None
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     admin = (
@@ -83,7 +84,8 @@ async def test_start_writes_wizard_password_when_no_users(tmp_octop_home: Path)
     srv = OctopServer(home=tmp_octop_home)
     await srv.start()
     try:
-        assert (tmp_octop_home.parent / "octop-login.txt").exists()
+        assert (tmp_octop_home / "octop-login.txt").exists()
+        assert not (tmp_octop_home.parent / "octop-login.txt").exists()
     finally:
         await srv.stop()
 
@@ -94,6 +96,7 @@ async def test_start_skips_wizard_password_when_disabled(tmp_octop_home: Path) -
     await srv.start()
     try:
         assert not (tmp_octop_home / "octop-login.txt").exists()
+        assert not (tmp_octop_home.parent / "octop-login.txt").exists()
     finally:
         await srv.stop()
 
@@ -102,7 +105,7 @@ async def test_main_agent_seeds_general_assistant_workspace(patched_app_client:
     """Finish creates main with expert files even when no provider is configured yet."""
     c, _srv, home = patched_app_client
     await bootstrap_admin(c, home)
-    ws = home / "workspaces" / "main"
+    ws = home / ".octop" / "workspaces" / "main"
     assert (ws / "SOUL.md").is_file()
     # New agents use system_files_path=.octop — BackendWorkspace remaps skills/.
     assert (ws / ".octop" / "skills" / "octop-assistant" / "SKILL.md").is_file()
@@ -118,7 +121,7 @@ async def test_main_agent_uses_home_scoped_backend(patched_app_client: Any) -> N
     cfg = json.loads(row.config_json or "{}")
     assert cfg["backend"] == {
         "type": "local_shell",
-        "root_dir": home.parent.resolve().as_posix(),
+        "root_dir": host_path_text(home),
         "virtual_mode": True,
     }
     assert cfg["workspace_dir"] == "/.octop/workspaces/main"
diff --git a/tests/integration/test_setup_database.py b/tests/integration/test_setup_database.py
index 45bc93ee..e90821be 100644
--- a/tests/integration/test_setup_database.py
+++ b/tests/integration/test_setup_database.py
@@ -83,7 +83,7 @@ async def test_deferred_verify_password_then_bind(tmp_octop_home: Path) -> None:
         assert health.status_code == 200
         assert health.json()["db"] is False
 
-        pw = read_password(tmp_octop_home.parent)
+        pw = read_password(tmp_octop_home)
         assert pw is not None
         verified = await client.post("/api/setup/verify-password", json={"password": pw})
         assert verified.status_code == 200, verified.text
diff --git a/tests/integration/test_setup_wizard.py b/tests/integration/test_setup_wizard.py
index e05b9d80..f1ea96d7 100644
--- a/tests/integration/test_setup_wizard.py
+++ b/tests/integration/test_setup_wizard.py
@@ -26,7 +26,7 @@ async def env(patched_app_client):
 
 async def test_verify_password_returns_token_on_match(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     assert pw is not None
     r = await c.post("/api/setup/verify-password", json={"password": pw})
     assert r.status_code == 200
@@ -66,7 +66,7 @@ async def test_initial_admin_requires_wizard_token(env: Any) -> None:
 
 async def test_initial_admin_succeeds_with_token(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     r = await c.post(
         "/api/setup/initial-admin",
@@ -77,12 +77,12 @@ async def test_initial_admin_succeeds_with_token(env: Any) -> None:
     body = r.json()
     assert isinstance(body["access_token"], str)
     # The wizard password file is kept permanently, even after setup completes.
-    assert (Path.home() / WIZARD_FILE_NAME).exists()
+    assert (home / WIZARD_FILE_NAME).exists()
 
 
 async def test_initial_admin_rejects_weak_password(env: Any) -> None:
-    c, _srv, _home = env
-    pw = read_password(Path.home())
+    c, _srv, home = env
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     r = await c.post(
         "/api/setup/initial-admin",
@@ -94,8 +94,8 @@ async def test_initial_admin_rejects_weak_password(env: Any) -> None:
 
 
 async def test_initial_admin_respects_locale_body(env: Any) -> None:
-    c, srv, _home = env
-    pw = read_password(Path.home())
+    c, srv, home = env
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     r = await c.post(
         "/api/setup/initial-admin",
@@ -119,7 +119,7 @@ async def test_status_reports_wizard_password_exists(env: Any) -> None:
     assert body["setup_required"] is True
     assert body["wizard_password_required"] is True
     assert body["wizard_password_exists"] is True
-    assert body["wizard_password_path"] == str(Path.home() / WIZARD_FILE_NAME)
+    assert body["wizard_password_path"] == str(home / WIZARD_FILE_NAME)
     assert body["desktop"] is False
     assert body["has_providers"] is False
 
@@ -148,7 +148,7 @@ async def test_validate_token_rejects_missing_header(env: Any) -> None:
 
 async def test_validate_token_accepts_fresh_token(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     r = await c.get(
         "/api/setup/validate-token",
@@ -179,7 +179,7 @@ async def test_finish_requires_wizard_token(env: Any) -> None:
 
 async def test_finish_returns_ok_with_valid_token(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     r = await c.post(
         "/api/setup/finish",
@@ -192,7 +192,7 @@ async def test_finish_returns_ok_with_valid_token(env: Any) -> None:
 
 async def test_finish_works_after_admin_created(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     await c.post(
         "/api/setup/initial-admin",
@@ -210,7 +210,7 @@ async def test_finish_works_after_admin_created(env: Any) -> None:
 
 async def test_validate_token_still_valid_after_admin_created(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     await c.post(
         "/api/setup/initial-admin",
@@ -241,7 +241,7 @@ async def test_test_provider_requires_wizard_token(env: Any) -> None:
 
 async def test_test_provider_returns_error_for_bad_key(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     r = await c.post(
         "/api/setup/test-provider",
@@ -259,7 +259,7 @@ async def test_test_provider_returns_error_for_bad_key(env: Any) -> None:
 
 async def test_resume_wizard_after_admin_created(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     await c.post(
         "/api/setup/initial-admin",
@@ -275,7 +275,7 @@ async def test_resume_wizard_after_admin_created(env: Any) -> None:
 
 async def test_test_provider_accepts_admin_jwt_after_admin_created(env: Any) -> None:
     c, srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     admin = (
         await c.post(
@@ -302,7 +302,7 @@ async def test_test_provider_accepts_admin_jwt_after_admin_created(env: Any) ->
 
 async def test_finish_saves_provider_with_admin_jwt(env: Any) -> None:
     c, srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     admin = (
         await c.post(
@@ -363,7 +363,7 @@ async def test_finish_saves_provider_with_admin_jwt(env: Any) -> None:
 
 async def test_setup_410_after_admin_exists(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     await c.post(
         "/api/setup/initial-admin",
@@ -371,11 +371,11 @@ async def test_setup_410_after_admin_exists(env: Any) -> None:
         headers={"Authorization": f"Bearer {tok}"},
     )
     # Plant a stale file to verify the 410 guard does not touch it.
-    (Path.home() / WIZARD_FILE_NAME).write_text("stale\n", encoding="utf-8")
+    (home / WIZARD_FILE_NAME).write_text("stale\n", encoding="utf-8")
     r = await c.post("/api/setup/verify-password", json={"password": "stale"})
     assert r.status_code == 410
     # The wizard password file is never deleted by the app, even on the 410 path.
-    assert (Path.home() / WIZARD_FILE_NAME).exists()
+    assert (home / WIZARD_FILE_NAME).exists()
 
 
 # ─── lockdown middleware ───────────────────────────────────────────
@@ -403,7 +403,7 @@ async def test_lockdown_allows_health_path(env: Any) -> None:
 
 async def test_lockdown_lifts_after_admin_created(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     await c.post(
         "/api/setup/initial-admin",
@@ -417,7 +417,7 @@ async def test_lockdown_lifts_after_admin_created(env: Any) -> None:
 
 async def test_finish_rejects_invalid_token_after_admin_exists(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     await c.post(
         "/api/setup/initial-admin",
@@ -434,7 +434,7 @@ async def test_finish_rejects_invalid_token_after_admin_exists(env: Any) -> None
 
 async def test_finish_rejects_empty_cloud_api_key(env: Any) -> None:
     c, srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     admin = (
         await c.post(
@@ -471,7 +471,7 @@ async def test_finish_ignores_cloud_api_key_environment(
     monkeypatch.setenv("OPENAI_API_KEY", "sk-" + "b" * 32)
     monkeypatch.setenv("LLM_API_KEY", "sk-" + "c" * 32)
     c, srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     admin = (
         await c.post(
@@ -503,7 +503,7 @@ async def test_finish_ignores_cloud_api_key_environment(
 
 async def test_test_provider_rejects_empty_cloud_api_key(env: Any) -> None:
     c, _srv, home = env
-    pw = read_password(Path.home())
+    pw = read_password(home)
     tok = (await c.post("/api/setup/verify-password", json={"password": pw})).json()["wizard_token"]
     r = await c.post(
         "/api/setup/test-provider",
diff --git a/tests/support/auth.py b/tests/support/auth.py
index e0b498e5..c0b9ae80 100644
--- a/tests/support/auth.py
+++ b/tests/support/auth.py
@@ -14,7 +14,7 @@
 
 
 def _wizard_password_home(home: Path) -> Path:
-    """Resolve wizard password dir: file lives at ``~/octop-login.txt``, not under ``~/.octop/``."""
+    """Resolve the wizard password dir inside the product home."""
     for cand in (home, home.parent, Path.home()):
         if (cand / WIZARD_FILE_NAME).exists():
             return cand
diff --git a/tests/unit/agents/test_default_agent.py b/tests/unit/agents/test_default_agent.py
index 5e6395fd..b64cb574 100644
--- a/tests/unit/agents/test_default_agent.py
+++ b/tests/unit/agents/test_default_agent.py
@@ -15,6 +15,8 @@
 )
 from octop.infra.agents.experts.catalog import ExpertCatalog, default_library_root
 from octop.infra.errors import OctopError
+from octop.infra.utils.host_dirs import host_path_text
+from octop.infra.utils.paths import PathLayout
 
 
 @pytest.fixture(scope="module")
@@ -67,7 +69,8 @@ async def test_bootstrap_creates_general_assistant(
     assert spec.agent_id is None
     assert spec.template_name == DEFAULT_EXPERT_ID
     assert spec.config["backend"] == default_home_local_backend()
-    assert spec.config["backend"]["root_dir"] == _isolated_user_home.resolve().as_posix()
+    assert spec.config["backend"]["root_dir"] == host_path_text(PathLayout.from_env().root)
+    assert spec.config["backend"]["root_dir"] != _isolated_user_home.resolve().as_posix()
     assert registry.create.await_args.kwargs["defer_bootstrap"] is True
 
 
@@ -89,7 +92,8 @@ async def test_bootstrap_main_uses_home_backend(
 
     spec = registry.create.await_args.args[0]
     assert spec.config["backend"] == default_home_local_backend()
-    assert spec.config["backend"]["root_dir"] == _isolated_user_home.resolve().as_posix()
+    assert spec.config["backend"]["root_dir"] == host_path_text(PathLayout.from_env().root)
+    assert spec.config["backend"]["root_dir"] != _isolated_user_home.resolve().as_posix()
 
 
 async def test_bootstrap_requires_catalog() -> None:
diff --git a/tests/unit/agents/test_home_write_guard.py b/tests/unit/agents/test_home_write_guard.py
new file mode 100644
index 00000000..5c541226
--- /dev/null
+++ b/tests/unit/agents/test_home_write_guard.py
@@ -0,0 +1,63 @@
+"""Product-home write guards and Windows path containment."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+import pytest
+
+from octop.infra.agents.workspace_dir import (
+    path_is_within,
+    seed_workspace_dir_on_create,
+)
+from octop.infra.errors import ErrorCode, OctopError
+from octop.infra.utils.paths import PathLayout
+
+
+def _scoped(root: Path) -> dict:
+    return {
+        "backend": {
+            "type": "local_shell",
+            "root_dir": str(root),
+            "virtual_mode": True,
+        }
+    }
+
+
+def test_windows_profile_workspace_is_outside_isolated_home() -> None:
+    profile = r"C:\Users\alice\.octop\workspaces\main"
+    isolated = r"D:\freeos-data"
+    assert path_is_within(profile, isolated) is False
+    assert path_is_within(r"D:\freeos-data\.octop\workspaces\main", isolated) is True
+    assert path_is_within(r"c:/Users/alice/.octop/workspaces/main", r"C:\Users\alice") is True
+
+
+def test_refuse_preexisting_directory_outside_home(tmp_path: Path) -> None:
+    product = tmp_path / "freeos-home"
+    product.mkdir()
+    user = tmp_path / "Users" / "alice"
+    existing = user / ".octop" / "workspaces" / "main"
+    existing.mkdir(parents=True)
+    (existing / "SOUL.md").write_text("keep", encoding="utf-8")
+    (existing / "memory.sqlite").write_bytes(b"db")
+
+    with pytest.raises(OctopError) as exc:
+        seed_workspace_dir_on_create(_scoped(user), paths=PathLayout(product), agent_id="main")
+
+    assert exc.value.code == ErrorCode.HOME_WRITE_REFUSED
+    assert (existing / "SOUL.md").read_text(encoding="utf-8") == "keep"
+    assert (existing / "memory.sqlite").read_bytes() == b"db"
+
+
+def test_refuse_seed_over_existing_data_inside_home(tmp_path: Path) -> None:
+    product = tmp_path / "freeos-home"
+    existing = product / ".octop" / "workspaces" / "main"
+    existing.mkdir(parents=True)
+    (existing / "SOUL.md").write_text("keep", encoding="utf-8")
+
+    with pytest.raises(OctopError) as exc:
+        seed_workspace_dir_on_create(_scoped(product), paths=PathLayout(product), agent_id="main")
+
+    assert exc.value.code == ErrorCode.AGENT_SEED_EXISTS
+    assert (existing / "SOUL.md").read_text(encoding="utf-8") == "keep"
+    assert not (existing / "manifest.json").exists()
diff --git a/tests/unit/test_wizard_password.py b/tests/unit/test_wizard_password.py
index 5f0f9f5f..c9fa3a78 100644
--- a/tests/unit/test_wizard_password.py
+++ b/tests/unit/test_wizard_password.py
@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import logging
 import os
 import stat
 from pathlib import Path
@@ -52,6 +53,22 @@ def test_read_password_returns_none_when_missing(tmp_path: Path) -> None:
     assert read_password(tmp_path) is None
 
 
+def test_boot_self_heal_logs_created_or_reused_without_password(
+    tmp_path: Path, caplog: pytest.LogCaptureFixture
+) -> None:
+    with caplog.at_level(logging.INFO):
+        created = boot_self_heal(tmp_path, user_count=0)
+    assert created is not None
+    assert created not in caplog.text
+    assert "wizard password file created" in caplog.text
+    caplog.clear()
+    with caplog.at_level(logging.INFO):
+        reused = boot_self_heal(tmp_path, user_count=0)
+    assert reused == created
+    assert created not in caplog.text
+    assert "wizard password file reused" in caplog.text
+
+
 def test_boot_self_heal_generates_when_no_users(tmp_path: Path) -> None:
     pw = boot_self_heal(tmp_path, user_count=0)
     assert pw is not None

From 3fe1cd275424257dd9f656895d886de302ecb0a0 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:35:07 +0000
Subject: [PATCH 17/39] fix(models): note missing llama.cpp when another
 provider is up

The built-in runtime warning stays red only when no provider answers a
connectivity check. Ollama or another reachable base URL turns it into
a grey note, and an Ollama model can still be selected for chat.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 dashboard/src/api/modules/localModels.ts      |  2 +
 .../components/LocalHardwarePanel.test.tsx    | 45 +++++++++++++++++++
 .../Models/components/LocalHardwarePanel.tsx  | 38 +++++++++++-----
 src/octop/api/routers/local_models.py         | 15 ++++++-
 .../infra/agents/providers/local_probe.py     | 23 ++++++++++
 tests/unit/test_local_probe.py                | 38 +++++++++++++++-
 6 files changed, 149 insertions(+), 12 deletions(-)

diff --git a/dashboard/src/api/modules/localModels.ts b/dashboard/src/api/modules/localModels.ts
index edc99ef2..c89652f4 100644
--- a/dashboard/src/api/modules/localModels.ts
+++ b/dashboard/src/api/modules/localModels.ts
@@ -67,6 +67,8 @@ export interface LocalProbe {
   deps?: LocalDep[];
   installed: LocalInstalledModel[];
   recommended: LocalRecommendedModel[];
+  /** True after an HTTP connectivity check (Ollama, llama.cpp, or a provider base URL). */
+  reachable_provider?: boolean;
   default_ref?: string;
   default_provider_name?: string;
   default_model?: string;
diff --git a/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.test.tsx b/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.test.tsx
index 18d19996..afa97184 100644
--- a/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.test.tsx
+++ b/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.test.tsx
@@ -306,4 +306,49 @@ describe("<LocalHardwarePanel />", () => {
       "FreeOS llama.cpp",
     );
   });
+
+  it("uses a grey note when a reachable provider exists and llama.cpp is missing", async () => {
+    probe.mockResolvedValue({
+      ...installedStopped,
+      hardware: {
+        ...installedStopped.hardware,
+        ollama_reachable: true,
+        llamacpp_binary: false,
+        llamacpp_reachable: false,
+      },
+      reachable_provider: true,
+      deps: [
+        {
+          id: "llamacpp",
+          kind: "bundled_runtime",
+          automatable: false,
+          method: "repair_freeos",
+        },
+      ],
+    });
+    renderPanel();
+    const note = await screen.findByText("models.localBuiltinMissing", {
+      exact: false,
+    });
+    expect(note.closest(".ant-alert-error")).toBeNull();
+  });
+
+  it("keeps a red error when nothing is reachable and llama.cpp is missing", async () => {
+    probe.mockResolvedValue({
+      ...installedStopped,
+      hardware: {
+        ...installedStopped.hardware,
+        ollama_installed: false,
+        ollama_binary: false,
+        ollama_reachable: false,
+        llamacpp_binary: false,
+        llamacpp_reachable: false,
+      },
+      reachable_provider: false,
+      deps: [{ id: "llamacpp", kind: "bundled_runtime", automatable: false }],
+    });
+    renderPanel();
+    const note = await screen.findByText("models.localBuiltinMissing");
+    expect(note.closest(".ant-alert-error")).not.toBeNull();
+  });
 });
diff --git a/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.tsx b/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.tsx
index 80d0f4cd..0fb4fc01 100644
--- a/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.tsx
+++ b/dashboard/src/pages/Settings/Models/components/LocalHardwarePanel.tsx
@@ -655,6 +655,9 @@ export function LocalHardwarePanel({
   const ollamaUp = Boolean(hw?.ollama_reachable);
   const llamaCppInstalled = Boolean(hw?.llamacpp_binary);
   const llamaCppUp = Boolean(hw?.llamacpp_reachable);
+  const providerReachable = Boolean(
+    probe?.reachable_provider || hw?.ollama_reachable || llamaCppUp,
+  );
   const deps = probe?.deps ?? [];
   const models = useMemo(
     () => mergeModels(probe?.installed, scan?.found),
@@ -699,7 +702,15 @@ export function LocalHardwarePanel({
               : t("organization.off")}
           </Tag>
           <Tag
-            color={llamaCppUp ? "green" : llamaCppInstalled ? "blue" : "red"}
+            color={
+              llamaCppUp
+                ? "green"
+                : llamaCppInstalled
+                ? "blue"
+                : providerReachable
+                ? "default"
+                : "red"
+            }
           >
             {t("models.localBuiltinRuntime")}{" "}
             {llamaCppUp ? t("organization.on") : t("organization.off")}
@@ -751,15 +762,22 @@ export function LocalHardwarePanel({
           }
         />
       )}
-      {deps.some((dep) => dep.id === "llamacpp") && (
-        <Alert
-          type="error"
-          showIcon
-          style={{ marginBottom: 12 }}
-          message={t("models.localBuiltinMissing")}
-          description={t("models.localBuiltinMissingHelp")}
-        />
-      )}
+      {deps.some((dep) => dep.id === "llamacpp") &&
+        (providerReachable ? (
+          <Typography.Paragraph type="secondary" style={{ marginBottom: 12 }}>
+            {`${t("models.localBuiltinMissing")} — ${t(
+              "models.localBuiltinMissingHelp",
+            )}`}
+          </Typography.Paragraph>
+        ) : (
+          <Alert
+            type="error"
+            showIcon
+            style={{ marginBottom: 12 }}
+            message={t("models.localBuiltinMissing")}
+            description={t("models.localBuiltinMissingHelp")}
+          />
+        ))}
 
       <Button
         size="small"
diff --git a/src/octop/api/routers/local_models.py b/src/octop/api/routers/local_models.py
index 342f29d7..1cb02964 100644
--- a/src/octop/api/routers/local_models.py
+++ b/src/octop/api/routers/local_models.py
@@ -39,7 +39,10 @@
     list_download_jobs,
     start_download_job,
 )
-from octop.infra.agents.providers.local_probe import probe_local_models
+from octop.infra.agents.providers.local_probe import (
+    http_endpoint_reachable,
+    probe_local_models,
+)
 from octop.infra.agents.providers.local_register import (
     ensure_ollama_service_flag,
     find_ollama_row,
@@ -183,6 +186,16 @@ async def local_models_probe(
     server: Any = Depends(get_server),
 ) -> dict[str, Any]:
     payload = await asyncio.to_thread(probe_local_models)
+    if not payload.get("reachable_provider") and server.services is not None:
+        for row in server.services.provider_repo.list_all():
+            if not getattr(row, "enabled", 0):
+                continue
+            base = str(getattr(row, "base_url", "") or "").strip()
+            if not base:
+                continue
+            if await asyncio.to_thread(http_endpoint_reachable, base):
+                payload["reachable_provider"] = True
+                break
     registered = await asyncio.to_thread(load_registered, server.services.settings_repo)
     merged = _merge_registered(payload, registered)
     user_row = server.services.user_repo.get(user.id)
diff --git a/src/octop/infra/agents/providers/local_probe.py b/src/octop/infra/agents/providers/local_probe.py
index 29910e40..641ea9b3 100644
--- a/src/octop/infra/agents/providers/local_probe.py
+++ b/src/octop/infra/agents/providers/local_probe.py
@@ -6,6 +6,8 @@
 import platform
 import shutil
 import subprocess
+import urllib.error
+import urllib.request
 from pathlib import Path
 from typing import Any
 
@@ -178,4 +180,25 @@ def probe_local_models() -> dict[str, Any]:
         ),
         "installed": discovered,
         "recommended": recommended_catalog(ram),
+        "reachable_provider": bool(ollama_up or llamacpp_up),
     }
+
+
+def http_endpoint_reachable(base_url: str, *, timeout: float = 2.0) -> bool:
+    """True when *base_url* answers an HTTP request (including 401/404).
+
+    Connection failures are not reachable. A response under 500 means the
+    provider process is up; this is a connectivity check, not a chat completion.
+    """
+    raw = (base_url or "").strip().rstrip("/")
+    if not raw.startswith(("http://", "https://")):
+        return False
+    target = raw if raw.endswith("/models") else f"{raw}/models"
+    request = urllib.request.Request(target, method="GET")
+    try:
+        with urllib.request.urlopen(request, timeout=timeout) as response:  # noqa: S310
+            return int(response.status) < 500
+    except urllib.error.HTTPError as exc:
+        return int(exc.code) < 500
+    except (OSError, TimeoutError, urllib.error.URLError, ValueError):
+        return False
diff --git a/tests/unit/test_local_probe.py b/tests/unit/test_local_probe.py
index e2be7bdb..4f6f30df 100644
--- a/tests/unit/test_local_probe.py
+++ b/tests/unit/test_local_probe.py
@@ -1,4 +1,11 @@
-from octop.infra.agents.providers.local_probe import probe_local_models
+import urllib.error
+
+import pytest
+
+from octop.infra.agents.providers.local_probe import (
+    http_endpoint_reachable,
+    probe_local_models,
+)
 
 
 def test_probe_local_models_shape() -> None:
@@ -13,3 +20,32 @@ def test_probe_local_models_shape() -> None:
     assert "ram_gb" in hw
     assert "ollama_installed" in hw
     assert "ollama_reachable" in hw
+    assert payload["reachable_provider"] is bool(
+        hw["ollama_reachable"] or hw.get("llamacpp_reachable")
+    )
+
+
+def test_http_endpoint_reachable_treats_auth_failure_as_up(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    def _denied(*_args: object, **_kwargs: object) -> None:
+        raise urllib.error.HTTPError("http://127.0.0.1:11434/models", 401, "no", hdrs=None, fp=None)
+
+    monkeypatch.setattr(
+        "octop.infra.agents.providers.local_probe.urllib.request.urlopen",
+        _denied,
+    )
+    assert http_endpoint_reachable("http://127.0.0.1:11434") is True
+
+
+def test_http_endpoint_reachable_rejects_connection_errors(
+    monkeypatch: pytest.MonkeyPatch,
+) -> None:
+    def _down(*_args: object, **_kwargs: object) -> None:
+        raise urllib.error.URLError("refused")
+
+    monkeypatch.setattr(
+        "octop.infra.agents.providers.local_probe.urllib.request.urlopen",
+        _down,
+    )
+    assert http_endpoint_reachable("http://127.0.0.1:9") is False

From 71f5c8ac98b45edcf1f550c672e592369a66e03b Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:35:07 +0000
Subject: [PATCH 18/39] docs: point one-click install at this branch

Install snippets no longer fetch the develop script. Node is described
as absent from the default single-process install, and Docker is no
longer called the production recommendation. Data-directory examples
use ~/.freeos / FREEOS_HOME.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 README.md           |  2 +-
 README_CN.md        | 30 +++++++++++++++++-------------
 docker/README.md    | 23 ++++++++++++-----------
 docker/README_CN.md | 21 +++++++++++----------
 docs/user-guide.md  | 20 ++++++++++++--------
 scripts/README.md   |  6 +++---
 6 files changed, 56 insertions(+), 46 deletions(-)

diff --git a/README.md b/README.md
index 3b58bd6f..c2382be1 100644
--- a/README.md
+++ b/README.md
@@ -147,7 +147,7 @@ Operator detail: [docs/asset-loop.md](docs/asset-loop.md).
 ### Prerequisites
 
 - Python 3.12+ (the project uses [uv](https://docs.astral.sh/uv/))
-- Node.js 20.19+ only if you opt into the organization sidecar (`FREEOS_ORG_SIDECAR=1`) from source, or rebuild the dashboard. A fresh FreeOS install does not need Node. The sidecar / iframe path is a [transition bridge](docs/product-contract.md), not the destination.
+- Node.js 20.19+ only if you opt into the organization sidecar (`FREEOS_ORG_SIDECAR=1`) from source, or rebuild the dashboard. A fresh FreeOS install does not bundle or start Node: the default desktop packages and `docker/docker-compose.yml` are a single Python process (locked by `tests/unit/desktop/test_phase5_defaults.py`). The sidecar / iframe path is a [transition bridge](docs/product-contract.md), not the destination.
 
 ### From this repository
 
diff --git a/README_CN.md b/README_CN.md
index be49352b..89fa979f 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -199,18 +199,18 @@ Octop 支持两个方向的 ACP 集成：
 
 **推荐：桌面安装包。** 从 [GitHub Releases](https://github.com/XYAIStudio/FreeOS/releases/latest) 下载 `FreeOS-desktop-*`，安装后打开 FreeOS。
 
-**命令行 / 源码**（安装本仓库脚本，不是上游 Octop）。打出版本标签之后，Release 说明会改成固定标签；当前用 `develop`：
+**命令行 / 源码**（安装本分支的脚本，不是上游 Octop，也不是 `develop` 上的旧脚本）：
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.sh | bash
 ```
 
 ```powershell
-irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.ps1 | iex
+irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.ps1 | iex
 ```
 
 ```bat
-curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.bat -o install.bat
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.bat -o install.bat
 install.bat
 ```
 
@@ -229,8 +229,8 @@ source ~/.bashrc  # Bash
 新安装会把 `octop` 加入 PATH（`~/.freeos/bin`）。可选附加组件：
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash -s -- --extras browser
-curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash -s -- --extras channels-feishu
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.sh | bash -s -- --extras browser
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.sh | bash -s -- --extras channels-feishu
 ```
 
 完整安装选项见 [scripts/README.md](scripts/README.md)（`--version`、`--from-source`、`--mirror` 及 Windows 参数）。
@@ -267,9 +267,11 @@ octop run --host 0.0.0.0 --port 8088
 octop service start
 ```
 
-打开 **http://127.0.0.1:8088**。Docker 首次初始化会自动生成随机管理员密码（写入 `/data/.octop/credential.txt`），除非设置了 `OCTOP_DEFAULT_PASSWORD`。交互式 `octop init` / 设置向导会让你自行设置密码（至少 8 位，且同时包含字母和数字）。向导模型步默认先选本机 Ollama；知识库默认走本机文件夹 + ONNX 向量，云厂商与 ima 是可选项。详见 [docs/user-guide.md](docs/user-guide.md)。
+打开 **http://127.0.0.1:8088**。交互式 `octop init` / 设置向导会让你自行设置密码（至少 8 位，且同时包含字母和数字）。向导密码文件在产品家目录里的 `octop-login.txt`（`FREEOS_HOME` / `--home`，不是操作系统用户目录）。向导模型步默认先选本机 Ollama；知识库默认走本机文件夹 + ONNX 向量，云厂商与 ima 是可选项。详见 [docs/user-guide.md](docs/user-guide.md)。
 
-### Docker（推荐用于生产部署）
+### Docker
+
+仓库里的 Compose 是**单进程 FreeOS**（不启动 Node sidecar）。`tests/unit/desktop/test_phase5_defaults.py` 与 `tests/unit/test_docker_compose_database_env.py` 锁定了这份文件的形状和环境变量。这不是单独认证过的生产配置；要用时按下面的家目录挂载。
 
 ```bash
 # 构建并启动
@@ -279,13 +281,15 @@ docker compose -f docker/docker-compose.yml up -d
 bash docker/docker_build.sh
 docker run -d \
   -p 8088:8088 \
-  -v octop-data:/data/.octop \
+  -v freeos-data:/data/.freeos \
   -e HOME=/data \
+  -e FREEOS_HOME=/data/.freeos \
+  -e OCTOP_HOME=/data/.freeos \
   -e OCTOP_DEFAULT_PASSWORD="<自定义强密码，留空则自动生成随机密码>" \
   octop:latest
 ```
 
-打开 `http://localhost:8088`。首次初始化会创建管理员账号，并把凭据写入容器内 `/data/.octop/credential.txt`。未设置 `OCTOP_DEFAULT_PASSWORD` 时自动生成随机强密码；自行设置的密码须 ≥8 位且同时包含字母和数字（被应用密码策略拒绝的常见弱密码会自动回退为随机密码）。可通过 `OCTOP_ADMIN_USERNAME` 覆盖用户名。
+打开 `http://localhost:8088`。首次初始化会创建管理员账号，并把凭据写入容器内 `/data/.freeos/credential.txt`。未设置 `OCTOP_DEFAULT_PASSWORD` 时自动生成随机强密码；自行设置的密码须 ≥8 位且同时包含字母和数字（被应用密码策略拒绝的常见弱密码会自动回退为随机密码）。可通过 `OCTOP_ADMIN_USERNAME` 覆盖用户名。
 
 > **密码策略：** 至少 8 位，且同时包含字母和数字。
 
@@ -294,7 +298,7 @@ docker run -d \
 | `OCTOP_PORT` | `8088` | HTTP 监听端口 |
 | `OCTOP_DEFAULT_PASSWORD` | _(未设置)_ | 首次运行管理员密码（Docker 引导）。未设置 = 自动生成随机密码并写入 `credential.txt` |
 | `OCTOP_ADMIN_USERNAME` | `admin` | 首次运行管理员用户名 |
-| `OCTOP_DATA` | `~/.octop` | 宿主机数据目录（compose 挂载） |
+| `OCTOP_DATA` | `~/.freeos` | 宿主机数据目录（compose 挂载到容器 `FREEOS_HOME`） |
 
 完整变量列表见 [`.env.example`](.env.example)。
 
@@ -331,8 +335,8 @@ docker run -d \
 | 方式 | 平台 | 说明 |
 |------|------|------|
 | GitHub Releases（推荐） | 全平台 | `FreeOS-desktop-*` 桌面安装包，以及 `freeos-<version>-py3-none-any.whl` / `freeos-<version>.tar.gz`。**不要** `pip install octop`（那是上游 PyPI 包） |
-| 本仓库脚本 | macOS / Linux | `bash scripts/install.sh`，或 `raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh` |
-| 本仓库脚本 | Windows | `scripts\install.ps1` / `install.bat`，或同路径的 develop raw 脚本 |
+| 本仓库脚本 | macOS / Linux | `bash scripts/install.sh`，或 `raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.sh` |
+| 本仓库脚本 | Windows | `scripts\install.ps1` / `install.bat`，或同分支的 raw 脚本 |
 | Docker | 全平台 | `docker/docker-compose.yml` |
 
 新安装的数据目录是 `~/.freeos`：脚本在 `~/.freeos/venv` 创建隔离环境，并用 `~/.freeos/bin/octop` 包装 CLI，不会影响系统 Python。若还没有 `~/.freeos`、但已经有 `~/.octop`，脚本和 CLI 继续用旧目录。`FREEOS_HOME` 优先于 `OCTOP_HOME`。桌面端不会把残留的 `~/.octop` 当成家目录。
diff --git a/docker/README.md b/docker/README.md
index e481c213..cc621147 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -14,10 +14,11 @@ docker pull ghcr.io/xyaistudio/freeos:latest
 Local Compose still tags `octop:latest` as a compatibility alias. See
 [docs/node-runtime.md](../docs/node-runtime.md).
 
-**Home directory names:** the product name is `FREEOS_HOME`. Compose and
-this image still use `OCTOP_*` and `~/.octop` as compatibility aliases
-(`HOME=/data` → `/data/.octop`). Set `FREEOS_HOME` (or `OCTOP_HOME`) if
-you want an explicit path; the app honors `FREEOS_HOME` first.
+**Home directory names:** the product home is `FREEOS_HOME`. Compose sets
+it to `/data/.freeos` and mounts the host directory `~/.freeos` there
+(`OCTOP_DATA` overrides the host path). `OCTOP_HOME` is set to the same
+path. The entrypoint honors `FREEOS_HOME` first, then `OCTOP_HOME`, then
+an existing `~/.freeos` or `~/.octop` under `HOME`.
 
 ### Files
 
@@ -41,7 +42,7 @@ From the repository root:
 docker compose -f docker/docker-compose.yml up -d --build
 ```
 
-Open `http://localhost:8088`. If `OCTOP_DEFAULT_PASSWORD` is unset, a strong random password is generated on first init and written to `/data/.octop/credential.txt`; if it is set, it is used as-is (must be ≥8 characters with letters and digits; passwords rejected by the app password policy — e.g. common ones — fall back to a random one automatically). Change the password immediately after first login.
+Open `http://localhost:8088`. If `OCTOP_DEFAULT_PASSWORD` is unset, a strong random password is generated on first init and written to `/data/.freeos/credential.txt`; if it is set, it is used as-is (must be ≥8 characters with letters and digits; passwords rejected by the app password policy — e.g. common ones — fall back to a random one automatically). Change the password immediately after first login.
 
 **Option 2: Build script**
 
@@ -50,7 +51,7 @@ bash docker/docker_build.sh
 docker run -d \
   --name octop \
   -p 8088:8088 \
-  -v octop-data:/data/.octop \
+  -v octop-data:/data/.freeos \
   -e HOME=/data \
   octop:latest
 ```
@@ -71,8 +72,8 @@ bash docker/docker_build.sh
 
 | Variable | Default | Description |
 |----------|---------|-------------|
-| `HOME` | `/data` | Must be `/data` so `~/.octop` maps to the data volume |
-| `FREEOS_HOME` | _(unset)_ | Product home. When set, wins over `OCTOP_HOME` / `~/.octop` |
+| `HOME` | `/data` | Process home inside the container |
+| `FREEOS_HOME` | `/data/.freeos` | Product home. Wins over `OCTOP_HOME` |
 | `OCTOP_HOME` | _(unset)_ | Legacy alias for the same home directory |
 | `OCTOP_PORT` | `8088` | HTTP listen port |
 | `OCTOP_DEFAULT_PASSWORD` | _(unset)_ | First-run admin password (≥8 chars, letters + digits). When unset, a random password is generated and written to `credential.txt` |
@@ -82,13 +83,13 @@ bash docker/docker_build.sh
 | `OPENAI_API_KEY` | — | OpenAI-compatible API key |
 | `DASHSCOPE_API_KEY` | — | Alibaba DashScope API key |
 
-For Compose, put these in `docker/.env`. Values only reach the container if listed under `environment:` in `docker-compose.yml` (Compose interpolates `.env`; it does not auto-export every key). Alternatively write the same keys into the mounted data dir as `~/.octop/env`.
+For Compose, put these in `docker/.env`. Values only reach the container if listed under `environment:` in `docker-compose.yml` (Compose interpolates `.env`; it does not auto-export every key). Alternatively write the same keys into the mounted data dir as `env`.
 
 ### Data persistence
 
-- Compose mounts host `~/.octop` → container `/data/.octop`
+- Compose mounts host `~/.freeos` (`OCTOP_DATA`) → container `/data/.freeos`
 - `docker run` example uses named volume `octop-data`
-- First boot runs `octop init`; credentials are written to `/data/.octop/credential.txt`. With `OCTOP_DEFAULT_PASSWORD` unset a random password is generated; a specified password that the app password policy rejects falls back to a random one automatically (the container must never fail its first init because of a weak default).
+- First boot runs `octop init`; credentials are written to `/data/.freeos/credential.txt`. With `OCTOP_DEFAULT_PASSWORD` unset a random password is generated; a specified password that the app password policy rejects falls back to a random one automatically (the container must never fail its first init because of a weak default).
 
 ### Health check
 
diff --git a/docker/README_CN.md b/docker/README_CN.md
index 023f2fae..b76514fd 100644
--- a/docker/README_CN.md
+++ b/docker/README_CN.md
@@ -13,9 +13,10 @@ docker pull ghcr.io/xyaistudio/freeos:latest
 本地 Compose 仍用 `octop:latest` 作兼容标签。说明见
 [docs/node-runtime.zh-CN.md](../docs/node-runtime.zh-CN.md)。
 
-**目录命名：** 产品名是 `FREEOS_HOME`。本镜像与 Compose 仍用 `OCTOP_*` 和
-`~/.octop` 作为兼容别名（`HOME=/data` → `/data/.octop`）。需要显式路径时
-设置 `FREEOS_HOME`（或遗留的 `OCTOP_HOME`）；应用优先读 `FREEOS_HOME`。
+**目录命名：** 产品家目录是 `FREEOS_HOME`。Compose 把它设为 `/data/.freeos`，
+并把宿主机 `~/.freeos` 挂进去（`OCTOP_DATA` 可改宿主机路径）。`OCTOP_HOME`
+与它相同。入口脚本优先 `FREEOS_HOME`，然后 `OCTOP_HOME`，再是 `HOME` 下已有的
+`~/.freeos` 或 `~/.octop`。
 
 ### 文件说明
 
@@ -39,7 +40,7 @@ docker pull ghcr.io/xyaistudio/freeos:latest
 docker compose -f docker/docker-compose.yml up -d --build
 ```
 
-访问 `http://localhost:8088`。未设置 `OCTOP_DEFAULT_PASSWORD` 时，首次初始化会自动生成随机密码并写入 `/data/.octop/credential.txt`；设置了则按设置值初始化（须 ≥8 位且同时包含字母和数字；被应用密码策略拒绝的常见弱密码会自动回退为随机密码）。首次登录后请立即修改密码。
+访问 `http://localhost:8088`。未设置 `OCTOP_DEFAULT_PASSWORD` 时，首次初始化会自动生成随机密码并写入 `/data/.freeos/credential.txt`；设置了则按设置值初始化（须 ≥8 位且同时包含字母和数字；被应用密码策略拒绝的常见弱密码会自动回退为随机密码）。首次登录后请立即修改密码。
 
 **方式二：构建脚本**
 
@@ -48,7 +49,7 @@ bash docker/docker_build.sh
 docker run -d \
   --name octop \
   -p 8088:8088 \
-  -v octop-data:/data/.octop \
+  -v octop-data:/data/.freeos \
   -e HOME=/data \
   octop:latest
 ```
@@ -69,8 +70,8 @@ bash docker/docker_build.sh
 
 | 变量 | 默认值 | 说明 |
 |------|--------|------|
-| `HOME` | `/data` | 必须为 `/data`，数据目录映射到 `~/.octop` |
-| `FREEOS_HOME` | _(未设置)_ | 产品家目录。设置后优先于 `OCTOP_HOME` / `~/.octop` |
+| `HOME` | `/data` | 容器内进程家目录 |
+| `FREEOS_HOME` | `/data/.freeos` | 产品家目录。优先于 `OCTOP_HOME` |
 | `OCTOP_HOME` | _(未设置)_ | 同一家目录的遗留别名 |
 | `OCTOP_PORT` | `8088` | HTTP 服务端口 |
 | `OCTOP_DEFAULT_PASSWORD` | _(未设置)_ | 首次管理员密码（≥8 位，字母+数字）。未设置时自动生成随机密码并写入 `credential.txt` |
@@ -80,13 +81,13 @@ bash docker/docker_build.sh
 | `OPENAI_API_KEY` | — | OpenAI 兼容 API Key |
 | `DASHSCOPE_API_KEY` | — | 阿里云通义千问 API Key |
 
-Compose 可在 `docker/.env` 中配置上述变量。注意：`.env` 只参与 Compose 插值，变量必须出现在 `docker-compose.yml` 的 `environment:` 中才会进入容器。也可把相同键写入挂载数据目录下的 `~/.octop/env`。
+Compose 可在 `docker/.env` 中配置上述变量。注意：`.env` 只参与 Compose 插值，变量必须出现在 `docker-compose.yml` 的 `environment:` 中才会进入容器。也可把相同键写入挂载数据目录下的 `env`。
 
 ### 数据持久化
 
-- Compose 默认将宿主机 `~/.octop` 挂载到容器 `/data/.octop`
+- Compose 默认将宿主机 `~/.freeos`（`OCTOP_DATA`）挂载到容器 `/data/.freeos`
 - `docker run` 示例使用命名卷 `octop-data`
-- 首次启动会自动执行 `octop init`，凭据写入容器内 `/data/.octop/credential.txt`。未设置 `OCTOP_DEFAULT_PASSWORD` 时自动生成随机密码；指定的密码被应用密码策略拒绝时自动回退为随机密码（首次初始化绝不因弱默认密码而失败）。
+- 首次启动会自动执行 `octop init`，凭据写入容器内 `/data/.freeos/credential.txt`。未设置 `OCTOP_DEFAULT_PASSWORD` 时自动生成随机密码；指定的密码被应用密码策略拒绝时自动回退为随机密码（首次初始化绝不因弱默认密码而失败）。
 
 ### 健康检查
 
diff --git a/docs/user-guide.md b/docs/user-guide.md
index 1220316e..4c111df2 100644
--- a/docs/user-guide.md
+++ b/docs/user-guide.md
@@ -76,15 +76,15 @@
 **命令行**使用本仓库脚本。打出版本标签之后，Release 说明会改成固定标签；当前用 `develop`：
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.sh | bash
 ```
 
 ```powershell
-irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.ps1 | iex
+irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.ps1 | iex
 ```
 
 ```bat
-curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.bat -o install.bat
+curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.bat -o install.bat
 install.bat
 ```
 
@@ -113,7 +113,9 @@ octop run --help
 
 若提示 `command not found: octop`，请确认已重新加载 shell，或检查 `~/.freeos/bin`（旧安装则是 `~/.octop/bin`）是否在 PATH 中。
 
-### 2.4 Docker 安装（生产推荐）
+### 2.4 Docker 安装
+
+Compose 文件是单进程 FreeOS（不捆绑 Node）。单元测试锁定了它的服务形状，这不是单独认证过的生产配置。
 
 ```bash
 # 构建并后台启动
@@ -123,8 +125,10 @@ docker compose -f docker/docker-compose.yml up -d
 bash docker/docker_build.sh
 docker run -d \
   -p 8088:8088 \
-  -v octop-data:/data/.octop \
+  -v freeos-data:/data/.freeos \
   -e HOME=/data \
+  -e FREEOS_HOME=/data/.freeos \
+  -e OCTOP_HOME=/data/.freeos \
   -e OCTOP_DEFAULT_PASSWORD="<自定义强密码，留空则自动生成随机密码>" \
   octop:latest
 ```
@@ -136,7 +140,7 @@ docker run -d \
 | `OCTOP_PORT` | `8088` | HTTP 监听端口 |
 | `OCTOP_DEFAULT_PASSWORD` | _(空)_ | 首次运行管理员密码（Docker 引导；≥8 位且含字母+数字；留空则自动生成随机密码并写入 credential.txt） |
 | `OCTOP_ADMIN_USERNAME` | `admin` | 首次运行管理员用户名 |
-| `OCTOP_DATA` | `~/.octop` | 宿主机数据目录（compose 挂载） |
+| `OCTOP_DATA` | `~/.freeos` | 宿主机数据目录（compose 挂载到容器 `FREEOS_HOME`） |
 
 > 后续计划：Docker 首次启动可改为随机生成管理员密码，并仅写入 `credential.txt`。
 
@@ -171,12 +175,12 @@ octop service start   # Linux(systemd) / macOS(launchd) / Windows 服务
 **步骤 1：设置密码（可选）**
 
 - 首次配置需要一个临时「设置密码」作为保护（默认开启）。
-- 密码打印在启动终端，并写入服务器上的引导文件（常见为 `~/octop-login.txt`）。
+- 密码打印在启动终端，并写入产品家目录里的 `octop-login.txt`（`FREEOS_HOME` / `--home`，不是操作系统用户目录下的 `~/octop-login.txt`）。
 - 此步**不依赖**控制面数据库是否已打开。
 
 **步骤 2：选择控制面数据库**
 
-- 默认使用本地 **SQLite**（路径相对 `~/.octop/`，通常为 `octop.db`），点击「保存并继续」即可。
+- 默认使用本地 **SQLite**（路径相对产品家目录，通常为 `octop.db`），点击「保存并继续」即可。
 - 「展开更多」可配置 **PostgreSQL**（内测）：填写主机等并先「测试连接」，再「使用 PostgreSQL 并继续」。
 - 向导会把选择写入 `config.json` 的 `database` 段，并在服务进程内**首次绑定**连接池、跑迁移。
 - 也可事先用环境变量指定（见 [configuration.md](configuration.md) 的 `OCTOP_DATABASE_*`）；已有库文件的升级安装不会延后建连。
diff --git a/scripts/README.md b/scripts/README.md
index 7312c870..74e61d01 100644
--- a/scripts/README.md
+++ b/scripts/README.md
@@ -14,9 +14,9 @@
 
 | 平台 | 命令 |
 |------|------|
-| macOS / Linux | `curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.sh \| bash` |
-| Windows (PowerShell) | `irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.ps1 \| iex` |
-| Windows (cmd) | 下载 `https://raw.githubusercontent.com/XYAIStudio/FreeOS/develop/scripts/install.bat` 后运行 |
+| macOS / Linux | `curl -fsSL https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.sh \| bash` |
+| Windows (PowerShell) | `irm https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.ps1 \| iex` |
+| Windows (cmd) | 下载 `https://raw.githubusercontent.com/XYAIStudio/FreeOS/codex/freeos-0.1.0-upstream-foundation/scripts/install.bat` 后运行 |
 
 ### 本地脚本（仓库内）
 

From 9884feabfb982acbba85c15be75f2e8460f4def9 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:49:19 +0000
Subject: [PATCH 19/39] fix(org): stop forcing demo bootstrap on sidecar launch

FREEOS_ORG_LOCAL_TEST is set only when FREEOS_ORG_DEV_BOOTSTRAP or
FREEOS_ORG_LOCAL_TEST is already explicitly on. Release launches leave
it unset. FREEOS_ORG_INTEGRATED stays, because real installs use it for
distinct organization tenants and host identity, not for demo accounts.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 desktop/portable/bundle-org-sidecar.sh        | 23 ++++++++++++--
 .../src/build/windows/nsis/start-sidecar.ps1  |  8 ++++-
 desktop/src/process_sidecar.go                | 24 ++++++++++++---
 desktop/src/process_sidecar_test.go           | 12 ++++++++
 src/octop/modules/org_os/managed_runtime.py   | 11 +++----
 src/octop/modules/org_os/sidecar_launch.py    | 30 +++++++++++++++----
 .../unit/desktop/test_openxyos_provisioner.py |  3 +-
 tests/unit/test_sidecar_launch.py             | 12 +++++++-
 8 files changed, 102 insertions(+), 21 deletions(-)

diff --git a/desktop/portable/bundle-org-sidecar.sh b/desktop/portable/bundle-org-sidecar.sh
index f8172c22..99fb5ebe 100755
--- a/desktop/portable/bundle-org-sidecar.sh
+++ b/desktop/portable/bundle-org-sidecar.sh
@@ -220,7 +220,17 @@ export AIR_GAP_MODE=true
 export ALLOW_PUBLIC_REGISTRATION="${ALLOW_PUBLIC_REGISTRATION:-false}"
 export SEED_DEMO_DATA="${SEED_DEMO_DATA:-false}"
 export FREEOS_ORG_INTEGRATED="${FREEOS_ORG_INTEGRATED:-1}"
-export FREEOS_ORG_LOCAL_TEST="${FREEOS_ORG_LOCAL_TEST:-1}"
+org_local_test=0
+for value in "${FREEOS_ORG_DEV_BOOTSTRAP:-}" "${FREEOS_ORG_LOCAL_TEST:-}"; do
+  case "$(printf '%s' "$value" | tr '[:upper:]' '[:lower:]')" in
+    1|true|yes|on) org_local_test=1 ;;
+  esac
+done
+if [ "$org_local_test" = 1 ]; then
+  export FREEOS_ORG_LOCAL_TEST=1
+else
+  unset FREEOS_ORG_LOCAL_TEST || true
+fi
 export JWT_SECRET COOKIE_SECRET
 export CORS_ORIGIN="${CORS_ORIGIN:-http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:18900,http://localhost:18900}"
 cd "${APP}"
@@ -262,7 +272,16 @@ set "AIR_GAP_MODE=true"
 if not defined ALLOW_PUBLIC_REGISTRATION set "ALLOW_PUBLIC_REGISTRATION=false"
 if not defined SEED_DEMO_DATA set "SEED_DEMO_DATA=false"
 if not defined FREEOS_ORG_INTEGRATED set "FREEOS_ORG_INTEGRATED=1"
-if not defined FREEOS_ORG_LOCAL_TEST set "FREEOS_ORG_LOCAL_TEST=1"
+set "ORG_LOCAL_TEST="
+if /I "%FREEOS_ORG_DEV_BOOTSTRAP%"=="1" set "ORG_LOCAL_TEST=1"
+if /I "%FREEOS_ORG_DEV_BOOTSTRAP%"=="true" set "ORG_LOCAL_TEST=1"
+if /I "%FREEOS_ORG_LOCAL_TEST%"=="1" set "ORG_LOCAL_TEST=1"
+if /I "%FREEOS_ORG_LOCAL_TEST%"=="true" set "ORG_LOCAL_TEST=1"
+if defined ORG_LOCAL_TEST (
+  set "FREEOS_ORG_LOCAL_TEST=1"
+) else (
+  set "FREEOS_ORG_LOCAL_TEST="
+)
 if not defined CORS_ORIGIN set "CORS_ORIGIN=http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:18900,http://localhost:18900"
 cd /d "%APP%"
 "%NODE%" --import tsx backend/server.ts
diff --git a/desktop/src/build/windows/nsis/start-sidecar.ps1 b/desktop/src/build/windows/nsis/start-sidecar.ps1
index b5a2b50e..6c971d7b 100644
--- a/desktop/src/build/windows/nsis/start-sidecar.ps1
+++ b/desktop/src/build/windows/nsis/start-sidecar.ps1
@@ -252,7 +252,13 @@ $env:FREEOS_HOME = $freeosHome
 $env:OCTOP_HOME = $freeosHome
 $env:FREEOS_ORG_SIDECAR_PORT = '3780'
 $env:FREEOS_ORG_INTEGRATED = '1'
-$env:FREEOS_ORG_LOCAL_TEST = '1'
+# Demo accounts (demo@demo.com) only when an operator opts in. Release launches
+# leave FREEOS_ORG_LOCAL_TEST unset so the sidecar does not seed or rotate them.
+if ($env:FREEOS_ORG_DEV_BOOTSTRAP -match '^(1|true|yes|on)$') {
+    $env:FREEOS_ORG_LOCAL_TEST = '1'
+} else {
+    Remove-Item Env:\FREEOS_ORG_LOCAL_TEST -ErrorAction SilentlyContinue
+}
 $compiled = Join-Path $app 'backend-dist\server.js'
 if (Test-Path -LiteralPath $compiled) {
     $argv = @('backend-dist/server.js')
diff --git a/desktop/src/process_sidecar.go b/desktop/src/process_sidecar.go
index e6540a18..b0f4ec5c 100644
--- a/desktop/src/process_sidecar.go
+++ b/desktop/src/process_sidecar.go
@@ -301,7 +301,7 @@ func sidecarLaunchEnv(home string, dashboardPort int) (map[string]string, error)
 		"http://127.0.0.1:%d,http://localhost:%d,http://127.0.0.1:18900,http://localhost:18900,http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:%d,http://localhost:%d,http://[::1]:%d",
 		dashboardPort, dashboardPort, defaultSidecarPort, defaultSidecarPort, defaultSidecarPort,
 	)
-	return map[string]string{
+	env := map[string]string{
 		"NODE_ENV":                  "production",
 		"PORT":                      strconv.Itoa(defaultSidecarPort),
 		"HOST":                      "127.0.0.1",
@@ -317,9 +317,25 @@ func sidecarLaunchEnv(home string, dashboardPort int) (map[string]string, error)
 		"FREEOS_HOME":               home,
 		"OCTOP_HOME":                home,
 		"FREEOS_ORG_SIDECAR_PORT":   strconv.Itoa(defaultSidecarPort),
-		"FREEOS_ORG_INTEGRATED":     "1",
-		"FREEOS_ORG_LOCAL_TEST":     "1",
-	}, nil
+		// Integrated mode is the real FreeOS organization bridge (distinct
+		// tenants, host identity). Demo accounts stay off unless a dev switch
+		// is already set in the parent environment.
+		"FREEOS_ORG_INTEGRATED": "1",
+	}
+	if orgLocalTestRequested() {
+		env["FREEOS_ORG_LOCAL_TEST"] = "1"
+	}
+	return env, nil
+}
+
+func orgLocalTestRequested() bool {
+	for _, key := range []string{"FREEOS_ORG_DEV_BOOTSTRAP", "FREEOS_ORG_LOCAL_TEST"} {
+		switch strings.ToLower(strings.TrimSpace(os.Getenv(key))) {
+		case "1", "true", "yes", "on":
+			return true
+		}
+	}
+	return false
 }
 
 func fileExists(path string) bool {
diff --git a/desktop/src/process_sidecar_test.go b/desktop/src/process_sidecar_test.go
index 52265cda..b290ee8e 100644
--- a/desktop/src/process_sidecar_test.go
+++ b/desktop/src/process_sidecar_test.go
@@ -61,6 +61,18 @@ func TestSidecarLaunchEnvPointsAtHomeDatabase(t *testing.T) {
 	if env["HOST"] != "127.0.0.1" {
 		t.Fatalf("HOST=%q want 127.0.0.1", env["HOST"])
 	}
+	if value, ok := env["FREEOS_ORG_LOCAL_TEST"]; ok && value != "" {
+		t.Fatalf("release launch must not set FREEOS_ORG_LOCAL_TEST, got %q", value)
+	}
+}
+
+func TestSidecarLaunchEnvLocalTestRequiresDevSwitch(t *testing.T) {
+	t.Setenv("FREEOS_ORG_DEV_BOOTSTRAP", "1")
+	t.Setenv("FREEOS_ORG_LOCAL_TEST", "")
+	env, err := sidecarLaunchEnv(t.TempDir(), 8088)
+	if err != nil {
+		t.Fatal(err)
+	}
 	if env["FREEOS_ORG_LOCAL_TEST"] != "1" {
 		t.Fatalf("FREEOS_ORG_LOCAL_TEST=%q", env["FREEOS_ORG_LOCAL_TEST"])
 	}
diff --git a/src/octop/modules/org_os/managed_runtime.py b/src/octop/modules/org_os/managed_runtime.py
index 541a069c..f66d11cf 100644
--- a/src/octop/modules/org_os/managed_runtime.py
+++ b/src/octop/modules/org_os/managed_runtime.py
@@ -194,13 +194,10 @@ async def start(self) -> None:
             port=port,
         )
         env = await asyncio.to_thread(sidecar_launch_env, self.home)
-        env.update(
-            {
-                "FREEOS_ORG_INTEGRATED": "1",
-                "FREEOS_ORG_LOCAL_TEST": "1",
-                "HOST": "127.0.0.1",
-            }
-        )
+        env["HOST"] = "127.0.0.1"
+        from octop.modules.org_os.sidecar_launch import apply_org_launch_flags  # noqa: PLC0415
+
+        apply_org_launch_flags(env)
         log_path = self.home / "logs" / "organization-runtime.log"
         await asyncio.to_thread(log_path.parent.mkdir, parents=True, exist_ok=True)
 
diff --git a/src/octop/modules/org_os/sidecar_launch.py b/src/octop/modules/org_os/sidecar_launch.py
index 1e0bfe91..9dafa0bd 100644
--- a/src/octop/modules/org_os/sidecar_launch.py
+++ b/src/octop/modules/org_os/sidecar_launch.py
@@ -348,6 +348,30 @@ def sidecar_node_command(runtime: SidecarRuntime) -> str:
     return " ".join(sidecar_node_argv(runtime))
 
 
+_ENV_TRUTHY = {"1", "true", "yes", "on"}
+
+
+def _env_truthy(source: dict[str, str], key: str) -> bool:
+    return (source.get(key) or "").strip().lower() in _ENV_TRUTHY
+
+
+def apply_org_launch_flags(env: dict[str, str]) -> None:
+    """Mark the sidecar as the FreeOS organization module, without demo users.
+
+    ``FREEOS_ORG_INTEGRATED`` is required for a real install: registration
+    creates a distinct tenant instead of the shared demo tenant, and the host
+    accepts organization identity. ``FREEOS_ORG_LOCAL_TEST`` seeds
+    ``demo@demo.com`` and is set only when ``FREEOS_ORG_DEV_BOOTSTRAP`` or
+    ``FREEOS_ORG_LOCAL_TEST`` is already explicitly on. Release launches leave
+    it unset.
+    """
+    env["FREEOS_ORG_INTEGRATED"] = "1"
+    if _env_truthy(env, "FREEOS_ORG_DEV_BOOTSTRAP") or _env_truthy(env, "FREEOS_ORG_LOCAL_TEST"):
+        env["FREEOS_ORG_LOCAL_TEST"] = "1"
+        return
+    env.pop("FREEOS_ORG_LOCAL_TEST", None)
+
+
 def sidecar_launch_env(home: Path, *, dashboard_port: int | None = None) -> dict[str, str]:
     secrets = load_or_create_sidecar_secrets(home)
     jwt = secrets["JWT_SECRET"]
@@ -387,13 +411,9 @@ def sidecar_launch_env(home: Path, *, dashboard_port: int | None = None) -> dict
             "FREEOS_HOME": str(home),
             "OCTOP_HOME": str(home),
             "FREEOS_ORG_SIDECAR_PORT": port,
-            # Independent openXYOS test environment: keep its own login and
-            # bootstrap demo@demo.com / user@demo.com. Restart/recover must
-            # not inherit a host INTEGRATED=1 without LOCAL_TEST (that skips seed).
-            "FREEOS_ORG_INTEGRATED": "1",
-            "FREEOS_ORG_LOCAL_TEST": "1",
         }
     )
+    apply_org_launch_flags(env)
     return env
 
 
diff --git a/tests/unit/desktop/test_openxyos_provisioner.py b/tests/unit/desktop/test_openxyos_provisioner.py
index 52d25d80..2fe00491 100644
--- a/tests/unit/desktop/test_openxyos_provisioner.py
+++ b/tests/unit/desktop/test_openxyos_provisioner.py
@@ -160,7 +160,8 @@ def test_start_sidecar_cors_origin_is_parseorigins_safe() -> None:
     assert "*" not in origins
     assert "http://127.0.0.1:3780" in origins
     assert "$env:HOST = '127.0.0.1'" in text
-    assert "$env:FREEOS_ORG_LOCAL_TEST = '1'" in text
+    assert "FREEOS_ORG_DEV_BOOTSTRAP" in text
+    assert "$env:FREEOS_ORG_LOCAL_TEST = '1'" not in text.split("FREEOS_ORG_DEV_BOOTSTRAP", 1)[0]
     assert "http://localhost:3780" in origins
     for origin in origins:
         parsed = urlparse(origin)
diff --git a/tests/unit/test_sidecar_launch.py b/tests/unit/test_sidecar_launch.py
index b15fe657..da533ea7 100644
--- a/tests/unit/test_sidecar_launch.py
+++ b/tests/unit/test_sidecar_launch.py
@@ -304,10 +304,20 @@ def test_sidecar_launch_env_writes_secrets(tmp_path: Path) -> None:
     assert "FREEOS_INGEST_TOKEN=" in secrets
     assert env["FREEOS_INGEST_TOKEN"]
     assert env["FREEOS_ORG_INTEGRATED"] == "1"
-    assert env["FREEOS_ORG_LOCAL_TEST"] == "1"
+    assert "FREEOS_ORG_LOCAL_TEST" not in env
     assert env["HOST"] == "127.0.0.1"
 
 
+def test_sidecar_launch_env_local_test_requires_explicit_switch(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    monkeypatch.delenv("FREEOS_ORG_LOCAL_TEST", raising=False)
+    monkeypatch.setenv("FREEOS_ORG_DEV_BOOTSTRAP", "1")
+    env = sidecar_launch_env(tmp_path, dashboard_port=8099)
+    assert env["FREEOS_ORG_INTEGRATED"] == "1"
+    assert env["FREEOS_ORG_LOCAL_TEST"] == "1"
+
+
 def test_sidecar_launch_env_merges_existing_cors(
     tmp_path: Path, monkeypatch: pytest.MonkeyPatch
 ) -> None:

From a6c4cc86b15e26e0b3a56c9a7c566b16853c30bc Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:51:08 +0000
Subject: [PATCH 20/39] fix(org): seed demo accounts at most once, and never on
 release

ensureLocalBootstrap runs only when FREEOS_ORG_DEV_BOOTSTRAP or
FREEOS_ORG_LOCAL_TEST is explicit, and only when the database has no
users and no one-time marker. It no longer reactivates tenants, recreates
deleted accounts, or rotates passwords. Release starts do not create
demo@demo.com or user@demo.com.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 modules/openxyos/backend/seed.ts              | 64 ++++++++++---------
 modules/openxyos/package.json                 |  3 +-
 .../scripts/test-no-release-bootstrap.ts      | 50 +++++++++++++++
 3 files changed, 87 insertions(+), 30 deletions(-)
 create mode 100644 modules/openxyos/scripts/test-no-release-bootstrap.ts

diff --git a/modules/openxyos/backend/seed.ts b/modules/openxyos/backend/seed.ts
index 638fa01b..020bc87c 100644
--- a/modules/openxyos/backend/seed.ts
+++ b/modules/openxyos/backend/seed.ts
@@ -70,29 +70,41 @@ function upsertBootstrapUser(opts: {
   role: string;
   tenantId: number;
   mustChange: boolean;
-  rotate: boolean;
 }): void {
-  const hash = bcrypt.hashSync(opts.password, 10);
   const existing = dbGet("SELECT id FROM users WHERE email = ?", [opts.email]);
-  if (!existing) {
-    dbRun(
-      "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, ?, ?, ?)",
-      [opts.email, hash, opts.nickname, opts.role, opts.tenantId, opts.mustChange ? 1 : 0],
-    );
-    console.log(`[seed] local bootstrap account ${opts.email}`);
-    return;
-  }
-  if (opts.rotate) {
-    dbRun(
-      "UPDATE users SET password_hash = ?, must_change_password = 1 WHERE email = ?",
-      [hash, opts.email],
-    );
-    console.log(`[seed] rotated bootstrap password for ${opts.email}; change it on next sign-in`);
+  if (existing) return;
+  const hash = bcrypt.hashSync(opts.password, 10);
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, ?, ?, ?)",
+    [opts.email, hash, opts.nickname, opts.role, opts.tenantId, opts.mustChange ? 1 : 0],
+  );
+  console.log(`[seed] local bootstrap account ${opts.email}`);
+}
+
+function devBootstrapRequested(): boolean {
+  for (const key of ["FREEOS_ORG_DEV_BOOTSTRAP", "FREEOS_ORG_LOCAL_TEST"]) {
+    const value = (process.env[key] || "").trim().toLowerCase();
+    if (value === "1" || value === "true" || value === "yes" || value === "on") return true;
   }
+  return false;
+}
+
+function bootstrapMarkerPath(): string {
+  const dbPath = process.env.DATABASE_PATH || path.join(__dirname, "data/xiongyuan.db");
+  return path.join(path.dirname(dbPath), "local-bootstrap.done");
 }
 
-/** First-run local accounts when demo seed is off (FreeOS desktop sidecar). */
+/** Dev-only first empty database. Release installs never create demo accounts. */
 export function ensureLocalBootstrap(): void {
+  if (!devBootstrapRequested()) return;
+  const marker = bootstrapMarkerPath();
+  if (fs.existsSync(marker)) return;
+  const userCount = dbGet("SELECT COUNT(*) as c FROM users") as { c?: number } | undefined;
+  if (userCount && Number(userCount.c) > 0) {
+    fs.mkdirSync(path.dirname(marker), { recursive: true });
+    fs.writeFileSync(marker, "skipped-existing-users\n", "utf8");
+    return;
+  }
   dbRun(
     "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (1, ?, ?, 'active', 'community')",
     ["openXYOS", "openxyos"],
@@ -101,16 +113,12 @@ export function ensureLocalBootstrap(): void {
     "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, ?, ?, 'active', 'community')",
     ["openXYOS 本地租户", "openxyos-local"],
   );
-  dbRun(
-    "UPDATE tenants SET status = 'active' WHERE id IN (1, 2) AND status NOT IN ('active', 'trial')",
-  );
 
   const demoExplicit = explicitSeedPassword("SEED_DEMO_PASSWORD");
   const adminExplicit = explicitSeedPassword("SEED_ADMIN_PASSWORD");
   const generated = demoExplicit && adminExplicit ? null : generatedBootstrapPassword();
   const demoPassword = demoExplicit ?? generated!.password;
   const adminPassword = adminExplicit ?? generated!.password;
-  const rotateGenerated = Boolean(generated?.created);
   const adminEmail = seedAdminEmail();
 
   upsertBootstrapUser({
@@ -120,7 +128,6 @@ export function ensureLocalBootstrap(): void {
     role: "admin",
     tenantId: 2,
     mustChange: demoExplicit === null,
-    rotate: demoExplicit === null && rotateGenerated,
   });
   upsertBootstrapUser({
     email: "user@demo.com",
@@ -129,7 +136,6 @@ export function ensureLocalBootstrap(): void {
     role: "user",
     tenantId: 2,
     mustChange: demoExplicit === null,
-    rotate: demoExplicit === null && rotateGenerated,
   });
   if (adminEmail !== "demo@demo.com") {
     upsertBootstrapUser({
@@ -139,9 +145,10 @@ export function ensureLocalBootstrap(): void {
       role: "super_admin",
       tenantId: 1,
       mustChange: adminExplicit === null,
-      rotate: adminExplicit === null && rotateGenerated,
     });
   }
+  fs.mkdirSync(path.dirname(marker), { recursive: true });
+  fs.writeFileSync(marker, "created\n", "utf8");
 }
 
 // 辅助：日期加月份 → ISO日期字符串
@@ -154,14 +161,13 @@ function addMonths(dateStr: string | null | undefined, months: number): string |
 
 export function seedDatabase() {
   if (process.env.FREEOS_ORG_INTEGRATED === "1") {
-    // The bundled organization environment is local and exploratory.  Create
-    // only local bootstrap accounts when FreeOS explicitly launches it as a
-    // test environment; never use a FreeOS account as its identity provider.
-    if (process.env.FREEOS_ORG_LOCAL_TEST === "1") ensureLocalBootstrap();
+    // Real installs keep their own accounts. Demo users exist only behind an
+    // explicit dev switch, and only on a database that has never had a user.
+    if (devBootstrapRequested()) ensureLocalBootstrap();
     return;
   }
   if (process.env.SEED_DEMO_DATA !== "true") {
-    console.log("[seed] Demo data is disabled. Local accounts are seeded only when FREEOS_ORG_LOCAL_TEST=1.");
+    console.log("[seed] Demo data is disabled. Release installs do not create demo@demo.com.");
     return;
   }
 
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index b515bd71..01356479 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -11,7 +11,8 @@
     "postinstall": "node scripts/patch-express-types.cjs",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts,.tsx --max-warnings 0",
-    "test": "npm run test:db-persistence && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test:no-release-bootstrap": "tsx scripts/test-no-release-bootstrap.ts",
     "test:db-persistence": "tsx scripts/test-db-persistence.ts",
     "test:runtime-config": "tsx scripts/test-runtime-config.ts",
     "test:cors-origins": "tsx scripts/test-cors-origins.ts",
diff --git a/modules/openxyos/scripts/test-no-release-bootstrap.ts b/modules/openxyos/scripts/test-no-release-bootstrap.ts
new file mode 100644
index 00000000..33f3f277
--- /dev/null
+++ b/modules/openxyos/scripts/test-no-release-bootstrap.ts
@@ -0,0 +1,50 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+async function main() {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "freeos-seed-"));
+  const dbPath = path.join(dir, "xiongyuan.db");
+  process.env.DATABASE_PATH = dbPath;
+  process.env.FREEOS_ORG_INTEGRATED = "1";
+  delete process.env.FREEOS_ORG_LOCAL_TEST;
+  delete process.env.FREEOS_ORG_DEV_BOOTSTRAP;
+  delete process.env.SEED_DEMO_DATA;
+  delete process.env.SEED_ADMIN_PASSWORD;
+  delete process.env.SEED_DEMO_PASSWORD;
+
+  const { initDatabase, saveDb, dbRun, dbGet } = await import("../backend/db");
+  const { seedDatabase } = await import("../backend/seed");
+  await initDatabase();
+  dbRun(
+    "INSERT INTO tenants (name, slug, status, plan) VALUES (?, ?, 'suspended', 'community')",
+    ["Acme", "acme-suspended"],
+  );
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, 'admin', 1, 0)",
+    ["owner@example.com", "hash-keep", "Owner"],
+  );
+  saveDb();
+
+  const snapshot = () => ({
+    users: dbGet("SELECT email, password_hash, must_change_password FROM users WHERE email = ?", [
+      "owner@example.com",
+    ]),
+    tenant: dbGet("SELECT status FROM tenants WHERE slug = ?", ["acme-suspended"]),
+    demo: dbGet("SELECT id FROM users WHERE email = ?", ["demo@demo.com"]),
+    colleague: dbGet("SELECT id FROM users WHERE email = ?", ["user@demo.com"]),
+  });
+  const before = snapshot();
+  for (let i = 0; i < 3; i += 1) seedDatabase();
+  assert.deepEqual(snapshot(), before);
+  assert.equal(before.demo, undefined);
+  assert.equal(before.users.password_hash, "hash-keep");
+  assert.equal(before.tenant.status, "suspended");
+  assert.equal(fs.existsSync(path.join(dir, "bootstrap-credentials.txt")), false);
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});

From 95ce119c0c4096c85272709267f1f7e196718a7b Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:51:34 +0000
Subject: [PATCH 21/39] fix(org): stop reinserting P16 deployment reflections

Startup no longer writes the internal deployment-rules reflections into
tenant 1. Deleting those rows stays deleted across later starts.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 modules/openxyos/backend/db.ts                | 43 -------------------
 .../scripts/test-no-release-bootstrap.ts      | 12 ++++++
 2 files changed, 12 insertions(+), 43 deletions(-)

diff --git a/modules/openxyos/backend/db.ts b/modules/openxyos/backend/db.ts
index ace2776f..094b085a 100644
--- a/modules/openxyos/backend/db.ts
+++ b/modules/openxyos/backend/db.ts
@@ -1882,49 +1882,6 @@ function runMigrations() {
     console.error("[迁移] V4.1 人在回路 错误:", err);
   }
 
-  // ===== P16: 部署铁律反思种子（系统级 employee_id=0） =====
-  try {
-    // 插入 const 死区崩溃反思记录（error_learning）
-    const tdZExists = dbGet(
-      "SELECT id FROM reflections WHERE tenant_id = 1 AND employee_id = 0 AND reflection_type = 'error_learning' AND failure_reasons LIKE '%const 死区%'"
-    );
-    if (!tdZExists) {
-      db.run(
-        `INSERT INTO reflections (tenant_id, employee_id, task_id, reflection_type, success_factors, failure_reasons, knowledge_gaps, improvement_plans, extracted_skills, learned_knowledge, importance_score, created_at)
-         VALUES (1, 0, NULL, 'error_learning', NULL, ?, ?, ?, ?, ?, 95, datetime('now'))`,
-        [
-          "const 临时死区（TDZ）导致员工详情页白屏崩溃。isOwnProfile 在 useState 声明前访问了 employee 变量（line 48 引用，line 51 声明），触发 ReferenceError。根因：replace_in_file 只改了局部代码，未 re-read 确认变量声明顺序。",
-          "批量编辑时仅依赖单文件上下文，缺乏跨行预检步骤。AI 对大文件编辑缺乏变量声明顺序的静态扫描。",
-          "【铁律1】部署前必须 npx tsc --noEmit；【铁律2】每次 replace_in_file 后必须 re-read 改动位置前后 10 行，确认 const/let/var 声明顺序；【铁律3】改 5+ 文件时按模块分批 build，不一次性全改。",
-          "TypeScript 静态检查; const TDZ 预防; replace_in_file 安全编辑",
-          "JavaScript const 声明在块级作用域中不会被提升（hoisting），在声明行之前访问会导致 ReferenceError。这与 var 不同（var 会被提升但值为 undefined）。在批量编辑多文件时，必须 TS 编译检查 + 逐文件 re-read 验证变量声明顺序，不能依赖单次 read_file 的碎片上下文。"
-        ]
-      );
-      console.log("[迁移] P16 已插入 const 死区反思记录");
-    }
-
-    // 插入部署铁律知识沉淀（knowledge_capture）
-    const lawsExists = dbGet(
-      "SELECT id FROM reflections WHERE tenant_id = 1 AND employee_id = 0 AND reflection_type = 'knowledge_capture' AND learned_knowledge LIKE '%部署铁律%'"
-    );
-    if (!lawsExists) {
-      db.run(
-        `INSERT INTO reflections (tenant_id, employee_id, task_id, reflection_type, success_factors, failure_reasons, knowledge_gaps, improvement_plans, extracted_skills, learned_knowledge, importance_score, created_at)
-         VALUES (1, 0, NULL, 'knowledge_capture', ?, NULL, NULL, NULL, ?, ?, 98, datetime('now'))`,
-        [
-          "7条部署铁律从多次事故中提炼：①TS编译检查；②re-read上下文；③分批build；④本地冒烟；⑤部署后文件状态确认；⑥PM2日志验证；⑦浏览器最终验证。这些规则是系统稳定性的最后防线，不可违背。",
-          "部署SOP; 安全生产; 反思引擎",
-          "XYOS 部署 SOP 铁律（2026-06-27 制定）：\n【铁律1-TS检查】部署前必须跑 npx tsc --noEmit，比 read_lints 更严。\n【铁律2-re-read上下文】每次 replace_in_file 后必须 re-read 改动位置前后 10 行，确认变量声明顺序、导入完整性、引用存在性。\n【铁律3-分批验证】改 5+ 文件时按模块分批 build，不在全部改完后再 build。\n【铁律4-本地冒烟】关键页面改完后本地 vite 预览确认不白屏。\n【铁律5-部署后验证文件】确认 dist/ 文件数正确，plink 查看文件清单。\n【铁律6-部署后验证PM2】pm2 logs --lines 20，排查 Cannot find module / ReferenceError。\n【铁律7-浏览器验证】关键页面逐个确认可访问、头像正常、权限正确。"
-        ]
-      );
-      console.log("[迁移] P16 已插入部署铁律知识记录");
-    }
-
-    saveDb();
-  } catch (err: any) {
-    console.error("[迁移] P16 部署铁律反思种子 错误:", err.message);
-  }
-
   // ===== P17: 资产管理模块 =====
   try {
     db.run(`
diff --git a/modules/openxyos/scripts/test-no-release-bootstrap.ts b/modules/openxyos/scripts/test-no-release-bootstrap.ts
index 33f3f277..2fb7227e 100644
--- a/modules/openxyos/scripts/test-no-release-bootstrap.ts
+++ b/modules/openxyos/scripts/test-no-release-bootstrap.ts
@@ -42,6 +42,18 @@ async function main() {
   assert.equal(before.users.password_hash, "hash-keep");
   assert.equal(before.tenant.status, "suspended");
   assert.equal(fs.existsSync(path.join(dir, "bootstrap-credentials.txt")), false);
+
+  dbRun(
+    "DELETE FROM reflections WHERE tenant_id = 1 AND employee_id = 0 AND (failure_reasons LIKE '%const 死区%' OR learned_knowledge LIKE '%部署铁律%')",
+  );
+  saveDb();
+  const reflectionCount = () =>
+    dbGet(
+      "SELECT COUNT(*) as c FROM reflections WHERE tenant_id = 1 AND employee_id = 0 AND (failure_reasons LIKE '%const 死区%' OR learned_knowledge LIKE '%部署铁律%')",
+    );
+  assert.equal(Number(reflectionCount().c), 0);
+  for (let i = 0; i < 3; i += 1) await initDatabase();
+  assert.equal(Number(reflectionCount().c), 0);
 }
 
 main().catch((error) => {

From 7b270b5cd5feb1cc8839d9e46e7072e7a3eeeb76 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:51:54 +0000
Subject: [PATCH 22/39] fix(org): do not auto-install the paid contract plugin
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Startup no longer inserts AI合同智能解析 for every tenant. Uninstalling
it stays uninstalled. The catalog entry for an explicit install remains.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 modules/openxyos/backend/db.ts                     | 14 --------------
 .../openxyos/scripts/test-no-release-bootstrap.ts  |  6 ++++++
 2 files changed, 6 insertions(+), 14 deletions(-)

diff --git a/modules/openxyos/backend/db.ts b/modules/openxyos/backend/db.ts
index 094b085a..68b4fe35 100644
--- a/modules/openxyos/backend/db.ts
+++ b/modules/openxyos/backend/db.ts
@@ -1778,20 +1778,6 @@ function runMigrations() {
 
     saveDb();
     console.log("[迁移] 合同管理模块表已就绪");
-
-    // AI合同智能解析插件 - 为已有租户自动安装
-    const tenants = dbAll("SELECT DISTINCT tenant_id FROM users") as any[];
-    for (const t of tenants) {
-      const exists = dbGet("SELECT id FROM plugins WHERE tenant_id = ? AND slug = ?", [t.tenant_id, "ai合同智能解析"]);
-      if (!exists) {
-        dbRun(
-          `INSERT INTO plugins (tenant_id, name, slug, category, description, icon, version, author, price, tags, install_count, rating, status)
-           VALUES (?, 'AI合同智能解析', 'ai合同智能解析', '法务合规', '上传PDF/DOCX合同文档，AI自动提取合同信息与收/付款节点，一键入库', '🤖', '1.0.0', '雄元科技', '¥99/月', 'AI,合同,解析,文档', 0, 5.0, 'active')`,
-          [t.tenant_id]
-        );
-      }
-    }
-    saveDb();
   } catch (err) {
     console.error("[迁移] 合同管理模块 错误:", err);
   }
diff --git a/modules/openxyos/scripts/test-no-release-bootstrap.ts b/modules/openxyos/scripts/test-no-release-bootstrap.ts
index 2fb7227e..f3c70f73 100644
--- a/modules/openxyos/scripts/test-no-release-bootstrap.ts
+++ b/modules/openxyos/scripts/test-no-release-bootstrap.ts
@@ -52,8 +52,14 @@ async function main() {
       "SELECT COUNT(*) as c FROM reflections WHERE tenant_id = 1 AND employee_id = 0 AND (failure_reasons LIKE '%const 死区%' OR learned_knowledge LIKE '%部署铁律%')",
     );
   assert.equal(Number(reflectionCount().c), 0);
+  dbRun("DELETE FROM plugins WHERE slug = ?", ["ai合同智能解析"]);
+  saveDb();
+  const pluginCount = () =>
+    dbGet("SELECT COUNT(*) as c FROM plugins WHERE slug = ?", ["ai合同智能解析"]);
+  assert.equal(Number(pluginCount().c), 0);
   for (let i = 0; i < 3; i += 1) await initDatabase();
   assert.equal(Number(reflectionCount().c), 0);
+  assert.equal(Number(pluginCount().c), 0);
 }
 
 main().catch((error) => {

From d581aa7bad52e80e3b67fa55bf79975afee72fc7 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:53:57 +0000
Subject: [PATCH 23/39] fix(backup): restore workspaces under --home

New archives store workspace_dir relative to the product home. Restore
remaps old absolute paths onto the home given to --home and refuses a
target outside that directory, so a live workspace is not overwritten.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 src/octop/infra/agents/workspace_dir.py       |  99 +++++++++++++
 src/octop/infra/backup/system_archive.py      |  62 +++++++-
 .../unit/backup/test_restore_home_confine.py  | 132 ++++++++++++++++++
 3 files changed, 292 insertions(+), 1 deletion(-)
 create mode 100644 tests/unit/backup/test_restore_home_confine.py

diff --git a/src/octop/infra/agents/workspace_dir.py b/src/octop/infra/agents/workspace_dir.py
index 3624b1b3..29ea5f19 100644
--- a/src/octop/infra/agents/workspace_dir.py
+++ b/src/octop/infra/agents/workspace_dir.py
@@ -449,6 +449,105 @@ def skills_discovery_roots(workspace_dir: Path) -> list[Path]:
     return [workspace_dir / DEFAULT_SYSTEM_FILES_PATH / "skills", workspace_dir / "skills"]
 
 
+def _looks_host_absolute(raw: str) -> bool:
+    text = raw.strip()
+    if _is_windows_style_host_path(text):
+        return True
+    return Path(text).is_absolute()
+
+
+def _outside_product_home(raw: str, home: Path) -> bool:
+    text = raw.strip()
+    if not text or text in {"/", "\\"} or text.startswith("/.octop/"):
+        return False
+    if _is_windows_style_host_path(text) and os.name != "nt":
+        return True
+    if not _looks_host_absolute(text):
+        return False
+    try:
+        return not path_is_under_home(Path(text), home)
+    except OSError:
+        return True
+
+
+def workspace_suffix_for_agent(raw: str, agent_id: str) -> str:
+    """Archive-relative workspace tail, independent of the machine that wrote it."""
+    text = raw.replace("\\", "/").strip()
+    lowered = text.lower()
+    for needle in (
+        f"/.octop/workspaces/{agent_id}",
+        f"/agents/{agent_id}",
+        f"/workspaces/{agent_id}",
+    ):
+        idx = lowered.rfind(needle.lower())
+        if idx >= 0:
+            return text[idx + 1 :].lstrip("/")
+    return f"agents/{agent_id}"
+
+
+def confine_workspace_config(cfg: dict[str, Any], *, home: Path, agent_id: str) -> dict[str, Any]:
+    """Copy *cfg* so workspace files stay inside *home*.
+
+    Absolute paths from another install are rewritten to a suffix under *home*.
+    Agent-facing ``/.octop/...`` paths stay, with ``root_dir`` clamped to *home*
+    when it pointed outside.
+    """
+    out = dict(cfg)
+    home_r = home.resolve()
+    backend = out.get("backend")
+    if isinstance(backend, dict):
+        backend = dict(backend)
+        root = backend.get("root_dir")
+        if isinstance(root, str) and _outside_product_home(root, home_r):
+            backend["root_dir"] = str(home_r)
+        out["backend"] = backend
+    raw = out.get("workspace_dir")
+    if isinstance(raw, str) and raw.strip():
+        text = raw.strip()
+        if text.startswith("/.octop/") or text == "/":
+            out["workspace_dir"] = text
+        elif not _looks_host_absolute(text):
+            out["workspace_dir"] = text.replace("\\", "/").lstrip("/")
+        elif _outside_product_home(text, home_r):
+            out["workspace_dir"] = workspace_suffix_for_agent(text, agent_id)
+        else:
+            out["workspace_dir"] = Path(text).resolve().relative_to(home_r).as_posix()
+    else:
+        out["workspace_dir"] = f"agents/{agent_id}"
+    return out
+
+
+def restored_workspace_dir(
+    config_json: str | None,
+    *,
+    paths: PathLayout,
+    agent_id: str,
+    ensure: bool = False,
+) -> Path:
+    """On-disk restore target that is always inside ``paths.root``.
+
+    Relative paths and ``/.octop/...`` paths are joined onto the product home.
+    Absolute paths from another machine are remapped by their workspace suffix.
+    """
+    try:
+        parsed = json.loads(config_json or "{}")
+    except (json.JSONDecodeError, TypeError):
+        parsed = {}
+    cfg = parsed if isinstance(parsed, dict) else {}
+    confined = confine_workspace_config(cfg, home=paths.root, agent_id=agent_id)
+    text = str(confined.get("workspace_dir") or f"agents/{agent_id}").strip()
+    host = (paths.root / text.replace("\\", "/").lstrip("/")).resolve()
+    if not path_is_under_home(host, paths.root):
+        raise OctopError(
+            ErrorCode.HOME_WRITE_REFUSED,
+            f"refusing to restore agent {agent_id} workspace outside {paths.root}",
+            details={"path": str(host), "home": str(paths.root)},
+        )
+    if ensure:
+        host.mkdir(parents=True, exist_ok=True)
+    return host
+
+
 def workspace_dir_from_config_json(
     config_json: str | None,
     *,
diff --git a/src/octop/infra/backup/system_archive.py b/src/octop/infra/backup/system_archive.py
index 01d9daa4..4ca0709b 100644
--- a/src/octop/infra/backup/system_archive.py
+++ b/src/octop/infra/backup/system_archive.py
@@ -16,6 +16,8 @@
 from octop import __version__
 from octop.config import DatabaseConfig
 from octop.infra.agents.workspace_dir import (
+    confine_workspace_config,
+    restored_workspace_dir,
     system_files_path_from_config,
     workspace_dir_from_config_json,
 )
@@ -196,6 +198,56 @@ def _build_manifest(
     )
 
 
+def _relativize_sqlite_workspace_paths(db_file: Path, home: Path) -> None:
+    """Store workspace paths relative to *home* in a backup snapshot, not the live DB."""
+    import sqlite3
+
+    conn = sqlite3.connect(db_file)
+    try:
+        try:
+            rows = conn.execute("SELECT agent_id, config_json FROM agents").fetchall()
+        except sqlite3.Error:
+            return
+        for agent_id, raw in rows:
+            try:
+                cfg = json.loads(raw or "{}")
+            except json.JSONDecodeError:
+                continue
+            if not isinstance(cfg, dict):
+                continue
+            confined = confine_workspace_config(cfg, home=home, agent_id=str(agent_id))
+            encoded = json.dumps(confined)
+            if encoded != (raw or ""):
+                conn.execute(
+                    "UPDATE agents SET config_json = ? WHERE agent_id = ?",
+                    (encoded, agent_id),
+                )
+        conn.commit()
+    finally:
+        conn.close()
+
+
+def _persist_restored_workspace_paths(agent_repo: AgentRepo, paths: PathLayout) -> None:
+    """Rewrite restored agent configs so later reads stay inside ``paths.root``."""
+    for row in agent_repo.list_all():
+        dest = restored_workspace_dir(row.config_json, paths=paths, agent_id=row.agent_id)
+        try:
+            cfg = json.loads(row.config_json or "{}")
+        except json.JSONDecodeError:
+            cfg = {}
+        if not isinstance(cfg, dict):
+            cfg = {}
+        cfg = confine_workspace_config(cfg, home=paths.root, agent_id=row.agent_id)
+        cfg["workspace_dir"] = str(dest)
+        agent_repo.update_config(row.agent_id, config_json=json.dumps(cfg))
+
+
+def _path_is_under(path: Path, home: Path) -> bool:
+    from octop.infra.agents.workspace_dir import path_is_under_home
+
+    return path_is_under_home(path, home)
+
+
 def create_system_backup(
     *,
     paths: PathLayout,
@@ -281,6 +333,7 @@ def create_system_backup(
                 snapshot_sqlite_file(pool.path, db_dest)
                 if not include_chats:
                     strip_chat_tables_from_sqlite_file(db_dest)
+                _relativize_sqlite_workspace_paths(db_dest, paths.root)
 
             manifest_path = root / _MANIFEST_NAME
             manifest_path.write_text(manifest.to_json(), encoding="utf-8")
@@ -594,6 +647,7 @@ def restore_system_backup(
         restored_workspaces = 0
         prefix = f"{_WORKSPACES_DIR}/"
         agent_repo = AgentRepo(pool)
+        _persist_restored_workspace_paths(agent_repo, paths)
         workspace_by_agent: dict[str, Path] = {}
         system_path_by_agent: dict[str, str] = {}
         for rel, src_file in _iter_extracted_files(extracted, _WORKSPACES_DIR):
@@ -606,7 +660,7 @@ def restore_system_backup(
             dest_root = workspace_by_agent.get(agent_id)
             if dest_root is None:
                 agent_row = agent_repo.get(agent_id)
-                dest_root = workspace_dir_from_config_json(
+                dest_root = restored_workspace_dir(
                     None if agent_row is None else agent_row.config_json,
                     paths=paths,
                     agent_id=agent_id,
@@ -616,6 +670,12 @@ def restore_system_backup(
                     _system_files_path_from_row(agent_row) if agent_row is not None else ""
                 )
             dest = dest_root / rest
+            if not _path_is_under(dest, paths.root):
+                raise OctopError(
+                    ErrorCode.HOME_WRITE_REFUSED,
+                    f"refusing to restore {dest} outside {paths.root}",
+                    details={"path": str(dest), "home": str(paths.root)},
+                )
             if not manifest.includes_chats and is_chat_workspace_rel(
                 Path(rest),
                 system_files_path=system_path_by_agent.get(agent_id, ""),
diff --git a/tests/unit/backup/test_restore_home_confine.py b/tests/unit/backup/test_restore_home_confine.py
new file mode 100644
index 00000000..db87a8d4
--- /dev/null
+++ b/tests/unit/backup/test_restore_home_confine.py
@@ -0,0 +1,132 @@
+"""Restore must not write agent workspaces outside ``--home``."""
+
+from __future__ import annotations
+
+import hashlib
+import io
+import json
+import sqlite3
+import tarfile
+from pathlib import Path
+
+from octop.config import DatabaseConfig
+from octop.infra.backup.system_archive import create_system_backup, restore_system_backup
+from octop.infra.db.migrate import run_migrations
+from octop.infra.db.pool import SqlitePool
+from octop.infra.db.repos.agents import AgentRepo
+from octop.infra.utils.paths import PathLayout
+
+
+def _fingerprint(path: Path) -> tuple[str, int]:
+    stat = path.stat()
+    return hashlib.sha256(path.read_bytes()).hexdigest(), stat.st_mtime_ns
+
+
+def _repack(archive: Path, edits: dict[str, bytes]) -> None:
+    members: dict[str, bytes] = {}
+    with tarfile.open(archive, mode="r:gz") as tf:
+        for member in tf.getmembers():
+            if not member.isfile():
+                continue
+            extracted = tf.extractfile(member)
+            assert extracted is not None
+            members[member.name] = extracted.read()
+    members.update(edits)
+    with tarfile.open(archive, mode="w:gz") as tf:
+        for name, blob in members.items():
+            info = tarfile.TarInfo(name=name)
+            info.size = len(blob)
+            tf.addfile(info, io.BytesIO(blob))
+
+
+def test_restore_home_does_not_overwrite_live_absolute_workspace(tmp_path: Path) -> None:
+    source = PathLayout(tmp_path / "old-home")
+    source.root.mkdir()
+    live = source.root / "agents" / "main"
+    live.mkdir(parents=True)
+    soul = live / "SOUL.md"
+    soul.write_text("archived\n", encoding="utf-8")
+    pool = SqlitePool(source.db)
+    run_migrations(pool)
+    with pool.connect() as conn:
+        conn.execute(
+            "INSERT INTO users(username, password_hash, role, created_at) VALUES (?, ?, ?, ?)",
+            ("admin", "hash", "admin", 1),
+        )
+    repo = AgentRepo(pool)
+    repo.create(
+        agent_id="main",
+        user_id=1,
+        name="Main",
+        config_json=json.dumps(
+            {
+                "workspace_dir": str(live.resolve()),
+                "backend": {
+                    "type": "local_shell",
+                    "root_dir": str(source.root.resolve()),
+                    "virtual_mode": True,
+                },
+            }
+        ),
+    )
+    archive = tmp_path / "backup.tar.gz"
+    create_system_backup(
+        paths=source,
+        agent_rows=[repo.get("main")],
+        pool=pool,
+        db_config=DatabaseConfig(),
+        dest=archive,
+        include_workspaces=True,
+        include_config=False,
+    )
+    pool.close()
+
+    with tarfile.open(archive, mode="r:gz") as tf:
+        raw_db = tf.extractfile("db/octop.db")
+        assert raw_db is not None
+        db_bytes = raw_db.read()
+    # Check the packed database records a home-relative workspace path.
+    disk = tmp_path / "snap.db"
+    disk.write_bytes(db_bytes)
+    recorded = sqlite3.connect(disk).execute("SELECT config_json FROM agents").fetchone()
+    assert recorded is not None
+    recorded_cfg = json.loads(recorded[0])
+    assert recorded_cfg["workspace_dir"] == "agents/main"
+    assert not Path(recorded_cfg["workspace_dir"]).is_absolute()
+
+    # Old archives stored the absolute path. Put that back and restore elsewhere.
+    old = json.dumps(
+        {
+            "workspace_dir": str(live.resolve()),
+            "backend": {
+                "type": "local_shell",
+                "root_dir": str(source.root.resolve()),
+                "virtual_mode": True,
+            },
+        }
+    )
+    conn = sqlite3.connect(disk)
+    conn.execute("UPDATE agents SET config_json = ?", (old,))
+    conn.commit()
+    conn.close()
+    _repack(archive, {"db/octop.db": disk.read_bytes()})
+
+    soul.write_text("live-do-not-touch\n", encoding="utf-8")
+    before = _fingerprint(soul)
+
+    target = PathLayout(tmp_path / "new-home")
+    target.root.mkdir()
+    target_pool = SqlitePool(target.db)
+    run_migrations(target_pool)
+    restore_system_backup(
+        archive,
+        paths=target,
+        pool=target_pool,
+        db_config=DatabaseConfig(),
+        restore_config=False,
+    )
+    assert _fingerprint(soul) == before
+    assert (target.root / "agents" / "main" / "SOUL.md").read_text(encoding="utf-8") == "archived\n"
+    restored = json.loads(AgentRepo(target_pool).get("main").config_json or "{}")
+    assert Path(restored["workspace_dir"]).resolve().is_relative_to(target.root.resolve())
+    target_pool.close()

From b2769edbb4976eaeacc76899435e82f0d15adbbd Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 07:55:04 +0000
Subject: [PATCH 24/39] fix(upgrade): full backup with sha256 before replacing
 an install

install.sh, install.ps1, and the desktop in-app upgrade now run
octop backup create --include-chats before replacing the runtime.
The archive sha256 is recorded beside it, and a failed backup aborts
the upgrade.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 desktop/src/download_test.go      | 21 +++++++------
 desktop/src/portable_upgrade.go   | 51 ++++++++++++++++++++-----------
 scripts/install.ps1               | 15 +++++++++
 scripts/install.sh                | 38 +++++++++++++++++++++++
 tests/unit/test_upgrade_backup.py | 40 ++++++++++++++++++++++++
 5 files changed, 138 insertions(+), 27 deletions(-)
 create mode 100644 tests/unit/test_upgrade_backup.py

diff --git a/desktop/src/download_test.go b/desktop/src/download_test.go
index 34a70e1e..a2c76106 100644
--- a/desktop/src/download_test.go
+++ b/desktop/src/download_test.go
@@ -129,14 +129,14 @@ func TestEnsurePortableUpgradesBundledVersionAfterDatabaseBackup(t *testing.T) {
 	writeTestGreenZip(t, newZip, "0.9.32")
 	t.Setenv("OCTOP_DESKTOP_PORTABLE_ZIP", newZip)
 
-	previousBackup := runSQLiteBackup
-	runSQLiteBackup = func(_ string, source string, destination string) error {
-		if source != database {
-			t.Fatalf("backup source = %q, want %q", source, database)
+	previousBackup := runPreUpgradeBackup
+	runPreUpgradeBackup = func(_, _, gotHome, destination string) error {
+		if gotHome != home {
+			t.Fatalf("backup home = %q, want %q", gotHome, home)
 		}
 		return os.WriteFile(destination, []byte("backup"), 0o600)
 	}
-	t.Cleanup(func() { runSQLiteBackup = previousBackup })
+	t.Cleanup(func() { runPreUpgradeBackup = previousBackup })
 
 	if err := ensurePortable(LocaleZH, func(string) {}); err != nil {
 		t.Fatal(err)
@@ -144,10 +144,13 @@ func TestEnsurePortableUpgradesBundledVersionAfterDatabaseBackup(t *testing.T) {
 	if got := portableVersion(root); got != "0.9.32" {
 		t.Fatalf("portable version = %q, want 0.9.32", got)
 	}
-	backups, err := filepath.Glob(filepath.Join(home, "backups", "octop-desktop-pre-upgrade-*.db"))
+	backups, err := filepath.Glob(filepath.Join(home, "backups", "freeos-pre-upgrade-*.tar.gz"))
 	if err != nil || len(backups) != 1 {
 		t.Fatalf("upgrade backup = %v, err = %v", backups, err)
 	}
+	if _, err := os.Stat(backups[0] + ".sha256"); err != nil {
+		t.Fatalf("backup sha256 missing: %v", err)
+	}
 }
 
 func TestEnsurePortableKeepsRuntimeWhenDatabaseBackupFails(t *testing.T) {
@@ -167,9 +170,9 @@ func TestEnsurePortableKeepsRuntimeWhenDatabaseBackupFails(t *testing.T) {
 	writeTestGreenZip(t, newZip, "0.9.32")
 	t.Setenv("OCTOP_DESKTOP_PORTABLE_ZIP", newZip)
 
-	previousBackup := runSQLiteBackup
-	runSQLiteBackup = func(_, _, _ string) error { return errors.New("backup unavailable") }
-	t.Cleanup(func() { runSQLiteBackup = previousBackup })
+	previousBackup := runPreUpgradeBackup
+	runPreUpgradeBackup = func(_, _, _, _ string) error { return errors.New("backup unavailable") }
+	t.Cleanup(func() { runPreUpgradeBackup = previousBackup })
 
 	if err := ensurePortable(LocaleZH, func(string) {}); err == nil {
 		t.Fatal("backup failure should abort the runtime upgrade")
diff --git a/desktop/src/portable_upgrade.go b/desktop/src/portable_upgrade.go
index 22d1bb3a..f9bb2b01 100644
--- a/desktop/src/portable_upgrade.go
+++ b/desktop/src/portable_upgrade.go
@@ -1,8 +1,11 @@
 package main
 
 import (
+	"crypto/sha256"
+	"encoding/hex"
 	"encoding/json"
 	"fmt"
+	"io"
 	"os"
 	"os/exec"
 	"path/filepath"
@@ -10,16 +13,27 @@ import (
 	"time"
 )
 
-const sqliteBackupScript = "import sqlite3,sys; src=sqlite3.connect(sys.argv[1]); dst=sqlite3.connect(sys.argv[2]); src.backup(dst); dst.close(); src.close()"
-
-var runSQLiteBackup = func(python, source, destination string) error {
-	cmd := exec.Command(python, "-c", sqliteBackupScript, source, destination)
+var runPreUpgradeBackup = func(python, launch, home, dest string) error {
+	cmd := exec.Command(python, launch, "backup", "create", "--home", home, "--include-chats", "-o", dest)
 	if output, err := cmd.CombinedOutput(); err != nil {
-		return fmt.Errorf("SQLite backup failed: %w: %s", err, strings.TrimSpace(string(output)))
+		return fmt.Errorf("pre-upgrade backup failed: %w: %s", err, strings.TrimSpace(string(output)))
 	}
 	return nil
 }
 
+func sha256File(path string) (string, error) {
+	file, err := os.Open(path)
+	if err != nil {
+		return "", err
+	}
+	defer file.Close()
+	sum := sha256.New()
+	if _, err := io.Copy(sum, file); err != nil {
+		return "", err
+	}
+	return hex.EncodeToString(sum.Sum(nil)), nil
+}
+
 type desktopDatabaseConfig struct {
 	Database struct {
 		Driver     string `json:"driver"`
@@ -83,34 +97,35 @@ func safeVersion(value string) string {
 
 func backupSQLiteBeforeUpgrade(root, currentVersion, nextVersion string) (string, error) {
 	home := octopHome()
-	source, isSQLite, err := desktopSQLitePath(home)
-	if err != nil || !isSQLite {
-		return "", err
-	}
-	if _, err := os.Stat(source); os.IsNotExist(err) {
-		return "", nil
-	} else if err != nil {
-		return "", fmt.Errorf("inspect SQLite database: %w", err)
+	if strings.TrimSpace(home) == "" {
+		return "", fmt.Errorf("product home is empty")
 	}
-
 	backupDir := filepath.Join(home, "backups")
 	if err := os.MkdirAll(backupDir, 0o700); err != nil {
 		return "", fmt.Errorf("create backup directory: %w", err)
 	}
 	name := fmt.Sprintf(
-		"octop-desktop-pre-upgrade-%s-to-%s-%s.db",
+		"freeos-pre-upgrade-%s-to-%s-%s.tar.gz",
 		safeVersion(currentVersion),
 		safeVersion(nextVersion),
 		time.Now().UTC().Format("20060102T150405.000000000Z"),
 	)
 	destination := filepath.Join(backupDir, name)
-	if err := runSQLiteBackup(pythonExe(root), source, destination); err != nil {
+	launch := filepath.Join(root, "launch.py")
+	if err := runPreUpgradeBackup(pythonExe(root), launch, home, destination); err != nil {
 		_ = os.Remove(destination)
 		return "", err
 	}
-	if err := os.Chmod(destination, 0o600); err != nil {
+	sum, err := sha256File(destination)
+	if err != nil {
+		_ = os.Remove(destination)
+		return "", fmt.Errorf("hash pre-upgrade backup: %w", err)
+	}
+	record := sum + "  " + filepath.Base(destination) + "\n"
+	if err := os.WriteFile(destination+".sha256", []byte(record), 0o600); err != nil {
 		_ = os.Remove(destination)
-		return "", fmt.Errorf("secure SQLite backup: %w", err)
+		_ = os.Remove(destination + ".sha256")
+		return "", fmt.Errorf("record backup sha256: %w", err)
 	}
 	return destination, nil
 }
diff --git a/scripts/install.ps1 b/scripts/install.ps1
index 095bd166..e74bba83 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -163,6 +163,21 @@ Ensure-Uv
 
 if (Test-Path $OctopVenv) {
     Write-Info "Existing environment found, upgrading..."
+    $existingCli = Join-Path $OctopVenv "Scripts\octop.exe"
+    $hasData = (Test-Path (Join-Path $OctopHome "octop.db")) -or (Test-Path (Join-Path $OctopHome "config.json"))
+    if ((Test-Path $existingCli) -and $hasData) {
+        $backupDir = Join-Path $OctopHome "backups"
+        New-Item -ItemType Directory -Force -Path $backupDir | Out-Null
+        $stamp = [DateTime]::UtcNow.ToString("yyyyMMddTHHmmssZ")
+        $backupOut = Join-Path $backupDir "pre-upgrade-$stamp.tar.gz"
+        Write-Info "Full backup before upgrade: $backupOut"
+        & $existingCli backup create --home $OctopHome --include-chats -o $backupOut
+        if ($LASTEXITCODE -ne 0) { Stop-WithError "Upgrade aborted: backup failed" }
+        $hash = (Get-FileHash -Algorithm SHA256 -Path $backupOut).Hash.ToLower()
+        $leaf = Split-Path -Leaf $backupOut
+        Set-Content -Encoding ascii -Path "$backupOut.sha256" -Value "$hash  $leaf"
+        Write-Info "Backup sha256 written to $backupOut.sha256"
+    }
 } else {
     Write-Info "Creating Python $PythonVersion environment..."
 }
diff --git a/scripts/install.sh b/scripts/install.sh
index 33c2dd94..56804724 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -687,6 +687,44 @@ _clone_source_workspace() {
     fi
 }
 
+_sha256_file() {
+    local file="$1"
+    if command -v sha256sum >/dev/null 2>&1; then
+        sha256sum "$file" > "${file}.sha256"
+    elif command -v shasum >/dev/null 2>&1; then
+        shasum -a 256 "$file" > "${file}.sha256"
+    else
+        return 1
+    fi
+}
+
+# Existing installs get a full archive before the package is replaced.
+# A failed backup aborts the upgrade; the recorded sha256 is the checksum of that archive.
+_backup_before_upgrade() {
+    local cli="$OCTOP_VENV/bin/octop"
+    if [ ! -x "$cli" ]; then
+        return 0
+    fi
+    if [ ! -e "$OCTOP_HOME/octop.db" ] && [ ! -e "$OCTOP_HOME/config.json" ]; then
+        info "No existing database or config; skipping pre-upgrade backup"
+        return 0
+    fi
+    mkdir -p "$OCTOP_HOME/backups" || die "Upgrade aborted: cannot create $OCTOP_HOME/backups"
+    local stamp out
+    stamp="$(date -u +%Y%m%dT%H%M%SZ)"
+    out="$OCTOP_HOME/backups/pre-upgrade-${stamp}.tar.gz"
+    info "Full backup before upgrade: $out"
+    if ! "$cli" backup create --home "$OCTOP_HOME" --include-chats -o "$out"; then
+        die "Upgrade aborted: backup failed"
+    fi
+    if ! _sha256_file "$out"; then
+        die "Upgrade aborted: could not record sha256 for $out"
+    fi
+    info "Backup sha256 written to ${out}.sha256"
+}
+
+_backup_before_upgrade
+
 if [ "$FROM_SOURCE" = true ]; then
     if [ -n "$SOURCE_DIR" ]; then
         info "Installing from local source: $SOURCE_DIR"
diff --git a/tests/unit/test_upgrade_backup.py b/tests/unit/test_upgrade_backup.py
new file mode 100644
index 00000000..7902b6a5
--- /dev/null
+++ b/tests/unit/test_upgrade_backup.py
@@ -0,0 +1,40 @@
+"""Upgrades must take a full backup and record its sha256 before replacing bits."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+REPO = Path(__file__).resolve().parents[2]
+
+
+def test_install_sh_backs_up_before_package_install() -> None:
+    text = (REPO / "scripts" / "install.sh").read_text(encoding="utf-8")
+    backup = text.index("_backup_before_upgrade")
+    call = text.index("\n_backup_before_upgrade\n")
+    package = text.index('uv pip install "${SOURCE_DIR}${EXTRAS_SUFFIX}"', call)
+    assert "backup create" in text[backup:package]
+    assert "--include-chats" in text[backup:package]
+    assert "--home" in text[backup:package]
+    assert "Upgrade aborted: backup failed" in text
+    assert "sha256" in text[backup:package]
+
+
+def test_install_ps1_backs_up_before_venv_clear() -> None:
+    text = (REPO / "scripts" / "install.ps1").read_text(encoding="utf-8")
+    backup = text.index("backup create")
+    clear = text.index("uv venv $OctopVenv")
+    assert backup < clear
+    assert "--include-chats" in text
+    assert "Upgrade aborted: backup failed" in text
+    assert "SHA256" in text
+
+
+def test_in_app_upgrade_runs_full_backup_not_only_sqlite() -> None:
+    text = (REPO / "desktop" / "src" / "portable_upgrade.go").read_text(encoding="utf-8")
+    assert '"backup", "create"' in text
+    assert '"--include-chats"' in text
+    assert '"--home"' in text
+    assert "sha256File" in text
+    assert ".sha256" in text
+    assert "sqlite3" not in text
+    assert "pre-upgrade backup failed" in text

From 94c1bfdd768295f041c7fdf617cef12be804c5ad Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:11:53 +0000
Subject: [PATCH 25/39] F10 upgrade cleanup: invalidate seeded accounts and
 disable the auto-installed contract plugin once

After the pre-upgrade backup, one marker-gated pass replaces seeded demo and bootstrap-admin passwords, disables accounts that own no data, deletes exact P16 reflections, and disables the v0.0.x contract plugin row without removing it.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 modules/openxyos/backend/db.ts                |   4 +
 .../backend/services/auth-provider.ts         |  23 +-
 modules/openxyos/backend/upgrade-cleanup.ts   | 292 ++++++++++++++++++
 modules/openxyos/package.json                 |   3 +-
 .../scripts/test-f10-upgrade-cleanup.ts       | 140 +++++++++
 5 files changed, 456 insertions(+), 6 deletions(-)
 create mode 100644 modules/openxyos/backend/upgrade-cleanup.ts
 create mode 100644 modules/openxyos/scripts/test-f10-upgrade-cleanup.ts

diff --git a/modules/openxyos/backend/db.ts b/modules/openxyos/backend/db.ts
index 68b4fe35..b784269c 100644
--- a/modules/openxyos/backend/db.ts
+++ b/modules/openxyos/backend/db.ts
@@ -339,6 +339,10 @@ export async function initDatabase(): Promise<void> {
   
   // 运行迁移
   runMigrations();
+  // F10 runs after the F9 pre-upgrade backup: install.sh, install.ps1, and the
+  // desktop upgrade all archive the database before this process starts.
+  const { cleanupV010SeedResidue } = await import("./upgrade-cleanup");
+  cleanupV010SeedResidue();
 }
 
 /**
diff --git a/modules/openxyos/backend/services/auth-provider.ts b/modules/openxyos/backend/services/auth-provider.ts
index f3f88a21..63c81af1 100644
--- a/modules/openxyos/backend/services/auth-provider.ts
+++ b/modules/openxyos/backend/services/auth-provider.ts
@@ -71,6 +71,15 @@ export interface AuthProvider {
 const ACCESS_TOKEN_TTL = "1h";
 const REFRESH_TOKEN_TTL = "24h";
 
+function passwordMatches(password: string, hash: string): boolean {
+  if (!hash || hash.startsWith("!")) return false;
+  try {
+    return bcrypt.compareSync(password, hash);
+  } catch {
+    return false;
+  }
+}
+
 export class LTSProvider implements AuthProvider {
   readonly name = "lts";
 
@@ -92,7 +101,11 @@ export class LTSProvider implements AuthProvider {
       return { success: false, error: "邮箱或密码错误", code: "INVALID_CREDENTIALS" };
     }
 
-    const valid = bcrypt.compareSync(password, row.password_hash);
+    if (row.status === "disabled") {
+      return { success: false, error: "账号已被禁用", code: "ACCOUNT_LOCKED" };
+    }
+
+    const valid = passwordMatches(password, row.password_hash);
     // V0.60 审计 AUTH-01: 登录性能非关键路径，保留 compareSync 避免阻塞策略变更
     // 未来迁移到 async compare 需要处理异常流。当前 bcrypt 成本因子默认 10，
     // 配合 login 10/min 限流，阻塞风险可控。
@@ -131,13 +144,13 @@ export class LTSProvider implements AuthProvider {
 
       // 检查用户/租户状态
       const principal = dbGet(
-        `SELECT u.id, u.nickname, u.role, u.tenant_id, u.token_version, t.status as tenant_status
+        `SELECT u.id, u.nickname, u.role, u.tenant_id, u.token_version, u.status as user_status, t.status as tenant_status
          FROM users u INNER JOIN tenants t ON t.id = u.tenant_id
          WHERE u.id = ?`,
         [decoded.id]
       ) as any;
 
-      if (!principal || (principal.tenant_status !== "active" && principal.tenant_status !== "trial")) {
+      if (!principal || principal.user_status === "disabled" || (principal.tenant_status !== "active" && principal.tenant_status !== "trial")) {
         return { success: false, error: "账户或租户已停用", code: "ACCOUNT_LOCKED" };
       }
 
@@ -174,13 +187,13 @@ export class LTSProvider implements AuthProvider {
 
       // 验证用户仍然活跃
       const principal = dbGet(
-        `SELECT u.id, u.nickname, u.role, u.tenant_id, u.token_version, t.status as tenant_status
+        `SELECT u.id, u.nickname, u.role, u.tenant_id, u.token_version, u.status as user_status, t.status as tenant_status
          FROM users u INNER JOIN tenants t ON t.id = u.tenant_id
          WHERE u.id = ?`,
         [decoded.id]
       ) as any;
 
-      if (!principal || (principal.tenant_status !== "active" && principal.tenant_status !== "trial")) {
+      if (!principal || principal.user_status === "disabled" || (principal.tenant_status !== "active" && principal.tenant_status !== "trial")) {
         return { success: false, error: "账户已停用", code: "ACCOUNT_LOCKED" };
       }
 
diff --git a/modules/openxyos/backend/upgrade-cleanup.ts b/modules/openxyos/backend/upgrade-cleanup.ts
new file mode 100644
index 00000000..c92c6a00
--- /dev/null
+++ b/modules/openxyos/backend/upgrade-cleanup.ts
@@ -0,0 +1,292 @@
+/**
+ * One-time cleanup of residue left by FreeOS v0.0.x organization seeding.
+ *
+ * Runs from initDatabase, which the upgraded process reaches only after the
+ * F9 full backup in scripts/install.sh, scripts/install.ps1, and the desktop
+ * in-app upgrade (backupSQLiteBeforeUpgrade before the package is replaced).
+ * A database that never had these rows is a no-op. A marker row makes the
+ * second start a no-op as well. Tenant status is never updated.
+ */
+import bcrypt from "bcryptjs";
+import { randomBytes } from "crypto";
+import { dbAll, dbGet, dbRun } from "./db";
+
+export const F10_MARKER = "f10_v010_seed_residue";
+
+const DEMO_EMAILS = ["demo@demo.com", "user@demo.com"] as const;
+
+export const P16_ERROR_LEARNING = {
+  failure_reasons:
+    "const 临时死区（TDZ）导致员工详情页白屏崩溃。isOwnProfile 在 useState 声明前访问了 employee 变量（line 48 引用，line 51 声明），触发 ReferenceError。根因：replace_in_file 只改了局部代码，未 re-read 确认变量声明顺序。",
+  knowledge_gaps:
+    "批量编辑时仅依赖单文件上下文，缺乏跨行预检步骤。AI 对大文件编辑缺乏变量声明顺序的静态扫描。",
+  improvement_plans:
+    "【铁律1】部署前必须 npx tsc --noEmit；【铁律2】每次 replace_in_file 后必须 re-read 改动位置前后 10 行，确认 const/let/var 声明顺序；【铁律3】改 5+ 文件时按模块分批 build，不一次性全改。",
+  extracted_skills: "TypeScript 静态检查; const TDZ 预防; replace_in_file 安全编辑",
+  learned_knowledge:
+    "JavaScript const 声明在块级作用域中不会被提升（hoisting），在声明行之前访问会导致 ReferenceError。这与 var 不同（var 会被提升但值为 undefined）。在批量编辑多文件时，必须 TS 编译检查 + 逐文件 re-read 验证变量声明顺序，不能依赖单次 read_file 的碎片上下文。",
+};
+
+export const P16_KNOWLEDGE = {
+  success_factors:
+    "7条部署铁律从多次事故中提炼：①TS编译检查；②re-read上下文；③分批build；④本地冒烟；⑤部署后文件状态确认；⑥PM2日志验证；⑦浏览器最终验证。这些规则是系统稳定性的最后防线，不可违背。",
+  extracted_skills: "部署SOP; 安全生产; 反思引擎",
+  learned_knowledge:
+    "XYOS 部署 SOP 铁律（2026-06-27 制定）：\n【铁律1-TS检查】部署前必须跑 npx tsc --noEmit，比 read_lints 更严。\n【铁律2-re-read上下文】每次 replace_in_file 后必须 re-read 改动位置前后 10 行，确认变量声明顺序、导入完整性、引用存在性。\n【铁律3-分批验证】改 5+ 文件时按模块分批 build，不在全部改完后再 build。\n【铁律4-本地冒烟】关键页面改完后本地 vite 预览确认不白屏。\n【铁律5-部署后验证文件】确认 dist/ 文件数正确，plink 查看文件清单。\n【铁律6-部署后验证PM2】pm2 logs --lines 20，排查 Cannot find module / ReferenceError。\n【铁律7-浏览器验证】关键页面逐个确认可访问、头像正常、权限正确。",
+};
+
+export const SEED_PLUGIN = {
+  name: "AI合同智能解析",
+  slug: "ai合同智能解析",
+  category: "法务合规",
+  description: "上传PDF/DOCX合同文档，AI自动提取合同信息与收/付款节点，一键入库",
+  version: "1.0.0",
+  author: "雄元科技",
+  price: "¥99/月",
+  tags: "AI,合同,解析,文档",
+};
+
+const OWNERSHIP: Array<{ table: string; column: string; extra?: string }> = [
+  { table: "chats", column: "created_by" },
+  { table: "messages", column: "sender_id", extra: "AND sender_type = 'user'" },
+  { table: "tasks", column: "created_by" },
+  { table: "task_comments", column: "user_id" },
+  { table: "task_attachments", column: "uploaded_by" },
+  { table: "knowledge_files", column: "uploaded_by" },
+  { table: "contracts", column: "created_by" },
+  { table: "employees", column: "user_id" },
+  { table: "announcements", column: "created_by" },
+  { table: "assets", column: "created_by" },
+  { table: "workflow_instances", column: "started_by" },
+  { table: "pending_reviews", column: "initiator_user_id" },
+  { table: "projects", column: "created_by" },
+  { table: "projects", column: "owner_id" },
+  { table: "documents", column: "created_by" },
+  { table: "documents", column: "owner_id" },
+  { table: "docs", column: "created_by" },
+  { table: "knowledge_notes", column: "user_id" },
+  { table: "knowledge_documents", column: "created_by" },
+];
+
+function tableHasColumn(table: string, column: string): boolean {
+  const exists = dbGet(
+    "SELECT name FROM sqlite_master WHERE type = 'table' AND name = ?",
+    [table],
+  );
+  if (!exists) return false;
+  const cols = dbAll(`PRAGMA table_info(${table})`) as Array<{ name?: string }>;
+  return cols.some((col) => col.name === column);
+}
+
+function userOwnsData(userId: number): boolean {
+  for (const item of OWNERSHIP) {
+    if (!tableHasColumn(item.table, item.column)) continue;
+    const hit = dbGet(
+      `SELECT 1 AS hit FROM ${item.table} WHERE ${item.column} = ? ${item.extra || ""} LIMIT 1`,
+      [userId],
+    );
+    if (hit) return true;
+  }
+  return false;
+}
+
+function ensureUserStatusColumn(): void {
+  if (tableHasColumn("users", "status")) return;
+  try {
+    dbRun("ALTER TABLE users ADD COLUMN status TEXT NOT NULL DEFAULT 'active'");
+  } catch (error: any) {
+    if (!String(error?.message || "").includes("duplicate column")) throw error;
+  }
+}
+
+function ensureMarkerTable(): void {
+  dbRun(`CREATE TABLE IF NOT EXISTS org_upgrade_markers (
+    marker TEXT PRIMARY KEY,
+    applied_at TEXT DEFAULT CURRENT_TIMESTAMP,
+    detail TEXT
+  )`);
+}
+
+function ensureAuditTable(): void {
+  dbRun(`CREATE TABLE IF NOT EXISTS workflow_audit_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    tenant_id INTEGER NOT NULL,
+    user_id INTEGER NOT NULL,
+    action TEXT NOT NULL,
+    target_type TEXT NOT NULL,
+    target_id INTEGER,
+    old_value TEXT,
+    new_value TEXT,
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+  )`);
+}
+
+function audit(tenantId: number, userId: number, action: string, targetType: string, targetId: number, detail: string): void {
+  if (!tableHasColumn("workflow_audit_log", "action")) {
+    console.log(`[迁移] F10 ${action} tenant=${tenantId} target=${targetType}#${targetId} ${detail}`);
+    return;
+  }
+  dbRun(
+    `INSERT INTO workflow_audit_log (tenant_id, user_id, action, target_type, target_id, new_value)
+     VALUES (?, ?, ?, ?, ?, ?)`,
+    [tenantId, userId, action, targetType, targetId, detail],
+  );
+  console.log(`[迁移] F10 ${action} ${targetType}#${targetId} ${detail}`);
+}
+
+function unusablePasswordHash(): string {
+  return bcrypt.hashSync(randomBytes(32).toString("hex"), 10);
+}
+
+function isBootstrapSuperAdmin(row: {
+  email?: string;
+  role?: string;
+  tenant_id?: number;
+  nickname?: string;
+}): boolean {
+  return row.email === "admin@example.com"
+    && row.role === "super_admin"
+    && Number(row.tenant_id) === 1
+    && row.nickname === "超级管理员";
+}
+
+function cleanupSeedUsers(actions: string[]): void {
+  const rows = dbAll(
+    "SELECT id, email, role, tenant_id, nickname, status FROM users WHERE email IN ('demo@demo.com', 'user@demo.com', 'admin@example.com')",
+  ) as Array<{ id: number; email: string; role: string; tenant_id: number; nickname: string; status?: string }>;
+  for (const row of rows) {
+    const demo = (DEMO_EMAILS as readonly string[]).includes(row.email);
+    const seededAdmin = isBootstrapSuperAdmin(row);
+    if (!demo && !seededAdmin) {
+      const note = `left ${row.email}; not the seeded bootstrap super-admin`;
+      actions.push(note);
+      audit(Number(row.tenant_id) || 0, Number(row.id), "f10_leave_user", "user", Number(row.id), note);
+      continue;
+    }
+    const owns = userOwnsData(Number(row.id));
+    const status = owns ? "active" : "disabled";
+    dbRun(
+      `UPDATE users
+       SET password_hash = ?, must_change_password = 1, token_version = COALESCE(token_version, 0) + 1, status = ?
+       WHERE id = ?`,
+      [unusablePasswordHash(), status, row.id],
+    );
+    const note = owns
+      ? `${row.email} kept enabled; seeded password invalidated; password reset required`
+      : `${row.email} disabled; seeded password invalidated`;
+    actions.push(note);
+    audit(Number(row.tenant_id) || 0, Number(row.id), owns ? "f10_reset_seed_user" : "f10_disable_seed_user", "user", Number(row.id), note);
+  }
+}
+
+function textEq(actual: unknown, expected: string | null): boolean {
+  if (expected === null) return actual === null || actual === undefined || actual === "";
+  return actual === expected;
+}
+
+function cleanupP16(actions: string[]): void {
+  if (!tableHasColumn("reflections", "learned_knowledge")) return;
+  const rows = dbAll(
+    `SELECT id, tenant_id, employee_id, task_id, reflection_type, success_factors, failure_reasons,
+            knowledge_gaps, improvement_plans, extracted_skills, learned_knowledge, importance_score
+     FROM reflections
+     WHERE tenant_id = 1 AND employee_id = 0
+       AND reflection_type IN ('error_learning', 'knowledge_capture')`,
+  ) as Array<Record<string, unknown>>;
+  for (const row of rows) {
+    const exactError = row.reflection_type === "error_learning"
+      && (row.task_id === null || row.task_id === undefined)
+      && textEq(row.success_factors, null)
+      && textEq(row.failure_reasons, P16_ERROR_LEARNING.failure_reasons)
+      && textEq(row.knowledge_gaps, P16_ERROR_LEARNING.knowledge_gaps)
+      && textEq(row.improvement_plans, P16_ERROR_LEARNING.improvement_plans)
+      && textEq(row.extracted_skills, P16_ERROR_LEARNING.extracted_skills)
+      && textEq(row.learned_knowledge, P16_ERROR_LEARNING.learned_knowledge)
+      && Number(row.importance_score) === 95;
+    const exactKnowledge = row.reflection_type === "knowledge_capture"
+      && (row.task_id === null || row.task_id === undefined)
+      && textEq(row.success_factors, P16_KNOWLEDGE.success_factors)
+      && textEq(row.failure_reasons, null)
+      && textEq(row.knowledge_gaps, null)
+      && textEq(row.improvement_plans, null)
+      && textEq(row.extracted_skills, P16_KNOWLEDGE.extracted_skills)
+      && textEq(row.learned_knowledge, P16_KNOWLEDGE.learned_knowledge)
+      && Number(row.importance_score) === 98;
+    if (exactError || exactKnowledge) {
+      dbRun("DELETE FROM reflections WHERE id = ?", [row.id]);
+      const note = `removed exact P16 ${row.reflection_type} row`;
+      actions.push(note);
+      audit(1, 0, "f10_remove_p16_seed", "reflection", Number(row.id), note);
+      continue;
+    }
+    const blob = `${row.failure_reasons || ""}\n${row.learned_knowledge || ""}\n${row.success_factors || ""}`;
+    if (!blob.includes("部署铁律") && !blob.includes("const 死区") && !blob.includes("const 临时死区")) continue;
+    const note = `kept user-edited P16 ${row.reflection_type} row ${row.id}`;
+    actions.push(note);
+    audit(1, 0, "f10_keep_edited_p16", "reflection", Number(row.id), note);
+  }
+}
+
+function pluginIsSeedFingerprint(row: Record<string, unknown>): boolean {
+  const config = row.config_json;
+  const configEmpty = config === null || config === undefined || config === "";
+  return row.name === SEED_PLUGIN.name
+    && row.slug === SEED_PLUGIN.slug
+    && row.category === SEED_PLUGIN.category
+    && row.description === SEED_PLUGIN.description
+    && row.version === SEED_PLUGIN.version
+    && row.author === SEED_PLUGIN.author
+    && row.price === SEED_PLUGIN.price
+    && row.tags === SEED_PLUGIN.tags
+    && Number(row.install_count) === 0
+    && Number(row.rating) === 5
+    && configEmpty;
+}
+
+function cleanupSeedPlugin(actions: string[]): void {
+  if (!tableHasColumn("plugins", "slug")) return;
+  const rows = dbAll(
+    "SELECT * FROM plugins WHERE slug = ? OR name = ?",
+    [SEED_PLUGIN.slug, SEED_PLUGIN.name],
+  ) as Array<Record<string, unknown>>;
+  for (const row of rows) {
+    const id = Number(row.id);
+    const tenantId = Number(row.tenant_id) || 0;
+    if (!pluginIsSeedFingerprint(row)) {
+      const note = `left plugin #${id}; not the v0.0.x auto-install fingerprint`;
+      actions.push(note);
+      audit(tenantId, 0, "f10_leave_plugin", "plugin", id, note);
+      continue;
+    }
+    const installed = tableHasColumn("tenant_plugin_installs", "plugin_id")
+      ? dbGet("SELECT id FROM tenant_plugin_installs WHERE plugin_id = ?", [id])
+      : undefined;
+    if (installed) {
+      const note = `left plugin #${id}; an install record makes it indistinguishable from a user install`;
+      actions.push(note);
+      audit(tenantId, 0, "f10_leave_plugin", "plugin", id, note);
+      continue;
+    }
+    dbRun("UPDATE plugins SET status = 'disabled', updated_at = CURRENT_TIMESTAMP WHERE id = ?", [id]);
+    const note = `disabled auto-installed plugin #${id} without deleting the catalog row`;
+    actions.push(note);
+    audit(tenantId, 0, "f10_disable_seed_plugin", "plugin", id, note);
+  }
+}
+
+export function cleanupV010SeedResidue(): void {
+  ensureMarkerTable();
+  const marker = dbGet("SELECT marker FROM org_upgrade_markers WHERE marker = ?", [F10_MARKER]);
+  if (marker) return;
+  ensureAuditTable();
+  ensureUserStatusColumn();
+  const actions: string[] = [];
+  if (tableHasColumn("users", "email")) cleanupSeedUsers(actions);
+  cleanupP16(actions);
+  cleanupSeedPlugin(actions);
+  if (actions.length === 0) actions.push("no v0.0.x seed residue");
+  dbRun(
+    "INSERT INTO org_upgrade_markers (marker, detail) VALUES (?, ?)",
+    [F10_MARKER, actions.join("\n")],
+  );
+}
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 01356479..8d4067a9 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -11,7 +11,8 @@
     "postinstall": "node scripts/patch-express-types.cjs",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts,.tsx --max-warnings 0",
-    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:f10-upgrade-cleanup && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test:f10-upgrade-cleanup": "tsx scripts/test-f10-upgrade-cleanup.ts",
     "test:no-release-bootstrap": "tsx scripts/test-no-release-bootstrap.ts",
     "test:db-persistence": "tsx scripts/test-db-persistence.ts",
     "test:runtime-config": "tsx scripts/test-runtime-config.ts",
diff --git a/modules/openxyos/scripts/test-f10-upgrade-cleanup.ts b/modules/openxyos/scripts/test-f10-upgrade-cleanup.ts
new file mode 100644
index 00000000..c49a2979
--- /dev/null
+++ b/modules/openxyos/scripts/test-f10-upgrade-cleanup.ts
@@ -0,0 +1,140 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+async function main() {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "freeos-f10-"));
+  process.env.DATABASE_PATH = path.join(dir, "xiongyuan.db");
+  process.env.FREEOS_ORG_INTEGRATED = "1";
+  delete process.env.FREEOS_ORG_LOCAL_TEST;
+  delete process.env.FREEOS_ORG_DEV_BOOTSTRAP;
+  delete process.env.FREEOS_DEV_BUILD;
+  delete process.env.SEED_DEMO_DATA;
+
+  const { initDatabase, dbRun, dbGet } = await import("../backend/db");
+  const { cleanupV010SeedResidue, F10_MARKER, P16_ERROR_LEARNING, P16_KNOWLEDGE, SEED_PLUGIN } = await import("../backend/upgrade-cleanup");
+
+  await initDatabase();
+  assert.equal(dbGet("SELECT id FROM users WHERE email = ?", ["demo@demo.com"]), undefined);
+  assert.equal(
+    dbGet("SELECT marker FROM org_upgrade_markers WHERE marker = ?", [F10_MARKER])?.marker,
+    F10_MARKER,
+  );
+  const emptyDetail = dbGet("SELECT detail FROM org_upgrade_markers WHERE marker = ?", [F10_MARKER]) as { detail: string };
+  assert.match(emptyDetail.detail, /no v0.0.x seed residue/);
+  const usersBeforeSecondEmptyRun = Number(dbGet("SELECT COUNT(*) as c FROM users").c);
+  cleanupV010SeedResidue();
+  assert.equal(Number(dbGet("SELECT COUNT(*) as c FROM users").c), usersBeforeSecondEmptyRun);
+
+  dbRun("DELETE FROM org_upgrade_markers WHERE marker = ?", [F10_MARKER]);
+  dbRun("INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (1, 'openXYOS', 'openxyos', 'suspended', 'community')");
+  dbRun("UPDATE tenants SET status = 'suspended' WHERE id = 1");
+  dbRun("INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, 'local', 'openxyos-local', 'trial', 'community')");
+  dbRun("UPDATE tenants SET status = 'trial' WHERE id = 2");
+
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, 'admin', 2, 0)",
+    ["demo@demo.com", "seed-hash-demo", "管理员"],
+  );
+  const colleagueId = Number(dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, 'user', 2, 0)",
+    ["user@demo.com", "seed-hash-user", "同事"],
+  ).lastInsertRowid);
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, 'super_admin', 1, 0)",
+    ["admin@example.com", "seed-hash-admin", "超级管理员"],
+  );
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, 'admin', 1, 0)",
+    ["owner@example.com", "hash-keep", "Owner"],
+  );
+  dbRun("INSERT INTO chats (title, created_by, tenant_id) VALUES ('owned', ?, 2)", [colleagueId]);
+  dbRun(
+    `INSERT INTO reflections (tenant_id, employee_id, task_id, reflection_type, success_factors, failure_reasons, knowledge_gaps, improvement_plans, extracted_skills, learned_knowledge, importance_score)
+     VALUES (1, 0, NULL, 'error_learning', NULL, ?, ?, ?, ?, ?, 95)`,
+    [
+      P16_ERROR_LEARNING.failure_reasons,
+      P16_ERROR_LEARNING.knowledge_gaps,
+      P16_ERROR_LEARNING.improvement_plans,
+      P16_ERROR_LEARNING.extracted_skills,
+      P16_ERROR_LEARNING.learned_knowledge,
+    ],
+  );
+  dbRun(
+    `INSERT INTO reflections (tenant_id, employee_id, task_id, reflection_type, success_factors, failure_reasons, knowledge_gaps, improvement_plans, extracted_skills, learned_knowledge, importance_score)
+     VALUES (1, 0, NULL, 'knowledge_capture', ?, NULL, NULL, NULL, ?, ?, 98)`,
+    [P16_KNOWLEDGE.success_factors, P16_KNOWLEDGE.extracted_skills, P16_KNOWLEDGE.learned_knowledge],
+  );
+  dbRun(
+    `INSERT INTO reflections (tenant_id, employee_id, task_id, reflection_type, success_factors, learned_knowledge, importance_score)
+     VALUES (1, 0, NULL, 'knowledge_capture', ?, ?, 98)`,
+    ["edited by a person", "部署铁律 but the operator rewrote this paragraph"],
+  );
+  dbRun(
+    `INSERT INTO reflections (tenant_id, employee_id, reflection_type, learned_knowledge, importance_score)
+     VALUES (1, 7, 'task_completion', 'unrelated note', 10)`,
+  );
+  const seededPluginId = Number(dbRun(
+    `INSERT INTO plugins (tenant_id, name, slug, category, description, icon, version, author, price, tags, install_count, rating, status)
+     VALUES (1, ?, ?, ?, ?, '🤖', ?, ?, ?, ?, 0, 5.0, 'active')`,
+    [SEED_PLUGIN.name, SEED_PLUGIN.slug, SEED_PLUGIN.category, SEED_PLUGIN.description, SEED_PLUGIN.version, SEED_PLUGIN.author, SEED_PLUGIN.price, SEED_PLUGIN.tags],
+  ).lastInsertRowid);
+  const editedPluginId = Number(dbRun(
+    `INSERT INTO plugins (tenant_id, name, slug, category, description, version, author, price, tags, install_count, rating, status, config_json)
+     VALUES (2, ?, ?, '法务合规', 'user edited', '1.0.0', '雄元科技', '¥99/月', 'AI', 12, 4.2, 'active', '{"enabled":true}')`,
+    [SEED_PLUGIN.name, SEED_PLUGIN.slug],
+  ).lastInsertRowid);
+
+  cleanupV010SeedResidue();
+
+  const demo = dbGet("SELECT status, must_change_password, password_hash FROM users WHERE email = ?", ["demo@demo.com"]) as any;
+  assert.equal(demo.status, "disabled");
+  assert.equal(Number(demo.must_change_password), 1);
+  assert.notEqual(demo.password_hash, "seed-hash-demo");
+  const colleague = dbGet("SELECT status, must_change_password, password_hash FROM users WHERE email = ?", ["user@demo.com"]) as any;
+  assert.equal(colleague.status, "active");
+  assert.equal(Number(colleague.must_change_password), 1);
+  assert.notEqual(colleague.password_hash, "seed-hash-user");
+  assert.equal(Number(dbGet("SELECT COUNT(*) as c FROM chats WHERE created_by = ?", [colleagueId]).c), 1);
+  const admin = dbGet("SELECT status, must_change_password, password_hash FROM users WHERE email = ?", ["admin@example.com"]) as any;
+  assert.equal(admin.status, "disabled");
+  assert.equal(Number(admin.must_change_password), 1);
+  assert.notEqual(admin.password_hash, "seed-hash-admin");
+  const owner = dbGet("SELECT status, must_change_password, password_hash FROM users WHERE email = ?", ["owner@example.com"]) as any;
+  assert.equal(owner.password_hash, "hash-keep");
+  assert.equal(Number(owner.must_change_password), 0);
+  assert.notEqual(owner.status, "disabled");
+  assert.equal(dbGet("SELECT status FROM tenants WHERE id = 1").status, "suspended");
+  assert.equal(dbGet("SELECT status FROM tenants WHERE id = 2").status, "trial");
+  assert.equal(Number(dbGet("SELECT COUNT(*) as c FROM reflections WHERE failure_reasons LIKE '%const 临时死区%'").c), 0);
+  const edited = dbGet("SELECT learned_knowledge FROM reflections WHERE learned_knowledge LIKE '%operator rewrote%'") as any;
+  assert.match(edited.learned_knowledge, /operator rewrote/);
+  assert.equal(Number(dbGet("SELECT COUNT(*) as c FROM reflections WHERE employee_id = 7").c), 1);
+  const seededPlugin = dbGet("SELECT id, status FROM plugins WHERE id = ?", [seededPluginId]) as any;
+  assert.equal(seededPlugin.status, "disabled");
+  assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [editedPluginId]).status, "active");
+  assert.equal(Number(dbGet("SELECT COUNT(*) as c FROM workflow_audit_log WHERE action LIKE 'f10_%'").c) > 0, true);
+
+  const after = {
+    demo: demo.password_hash,
+    colleague: colleague.password_hash,
+    admin: admin.password_hash,
+    owner: owner.password_hash,
+    plugin: seededPlugin.status,
+    editedReflection: edited.learned_knowledge,
+  };
+  cleanupV010SeedResidue();
+  assert.equal(dbGet("SELECT password_hash FROM users WHERE email = ?", ["demo@demo.com"]).password_hash, after.demo);
+  assert.equal(dbGet("SELECT password_hash FROM users WHERE email = ?", ["user@demo.com"]).password_hash, after.colleague);
+  assert.equal(dbGet("SELECT password_hash FROM users WHERE email = ?", ["admin@example.com"]).password_hash, after.admin);
+  assert.equal(dbGet("SELECT password_hash FROM users WHERE email = ?", ["owner@example.com"]).password_hash, after.owner);
+  assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [seededPluginId]).status, "disabled");
+  assert.equal(dbGet("SELECT learned_knowledge FROM reflections WHERE learned_knowledge LIKE '%operator rewrote%'").learned_knowledge, after.editedReflection);
+  console.log("f10 upgrade cleanup ok");
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});

From a70183f8d952f9d76eb58f0638e722443478bbd8 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:13:28 +0000
Subject: [PATCH 26/39] F10 release bundle: keep demo seed out of the shipped
 organization tree

Demo inserts live in backend/dev, which the sidecar bundle excludes. The release seed entry refuses to load them unless FREEOS_DEV_BUILD is set, and a scan of the shipped tree rejects the demo account strings.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 desktop/portable/bundle-org-sidecar.sh        |   10 +-
 modules/openxyos/backend/dev/demo-seed.ts     | 2454 ++++++++++++++++
 modules/openxyos/backend/seed.ts              | 2459 +----------------
 modules/openxyos/backend/server.ts            |    2 +-
 .../frontend/src/pages/OpenHomePage.tsx       |    2 +-
 modules/openxyos/package.json                 |    2 +-
 .../scripts/test-no-release-bootstrap.ts      |    2 +-
 tests/unit/test_org_release_bundle.py         |   70 +
 8 files changed, 2553 insertions(+), 2448 deletions(-)
 create mode 100644 modules/openxyos/backend/dev/demo-seed.ts
 create mode 100644 tests/unit/test_org_release_bundle.py

diff --git a/desktop/portable/bundle-org-sidecar.sh b/desktop/portable/bundle-org-sidecar.sh
index 99fb5ebe..2db54011 100755
--- a/desktop/portable/bundle-org-sidecar.sh
+++ b/desktop/portable/bundle-org-sidecar.sh
@@ -125,6 +125,7 @@ build_openxyos() {
     rsync -a --delete \
       --exclude node_modules --exclude dist --exclude .git --exclude .github \
       --exclude backups --exclude dist-backup-20260626 --exclude V0.5 \
+      --exclude backend/dev --exclude 'scripts/test-*' \
       --include '.env.example' --exclude '.env' --exclude '.env.*' \
       --exclude '.freeos' --exclude '.octop' --exclude 'octop.db' --exclude '*.sqlite' \
       "${src}/" "${work}/"
@@ -134,6 +135,13 @@ import shutil, sys
 from pathlib import Path
 src, dest = Path(sys.argv[1]), Path(sys.argv[2])
 skip = {"node_modules", "dist", ".git", ".github", "backups", "dist-backup-20260626", "V0.5", ".freeos", ".octop"}
+def ignore(directory, names):
+    dropped = {name for name in names if name in skip}
+    if Path(directory).name == "backend":
+        dropped.add("dev")
+    if Path(directory).name == "scripts":
+        dropped.update(name for name in names if name.startswith("test-"))
+    return dropped
 for item in src.iterdir():
     if item.name in skip:
         continue
@@ -143,7 +151,7 @@ for item in src.iterdir():
         continue
     target = dest / item.name
     if item.is_dir():
-        shutil.copytree(item, target, ignore=shutil.ignore_patterns(*skip))
+        shutil.copytree(item, target, ignore=ignore)
     else:
         shutil.copy2(item, target)
 PY
diff --git a/modules/openxyos/backend/dev/demo-seed.ts b/modules/openxyos/backend/dev/demo-seed.ts
new file mode 100644
index 00000000..7c059211
--- /dev/null
+++ b/modules/openxyos/backend/dev/demo-seed.ts
@@ -0,0 +1,2454 @@
+import bcrypt from "bcryptjs";
+import { randomBytes } from "crypto";
+import fs from "fs";
+import path from "path";
+import { dbAll, dbGet, dbRun, getDb, saveDb } from "../db";
+
+function requiredSeedSecret(name: "SEED_ADMIN_PASSWORD" | "SEED_DEMO_PASSWORD"): string {
+  const value = process.env[name]?.trim();
+  if (!value || value.length < 12) {
+    throw new Error(`${name} must be at least 12 characters when SEED_DEMO_DATA=true`);
+  }
+  return value;
+}
+
+function seedAdminEmail(): string {
+  return process.env.SEED_ADMIN_EMAIL?.trim() || "admin@example.com";
+}
+
+function explicitSeedPassword(name: "SEED_ADMIN_PASSWORD" | "SEED_DEMO_PASSWORD"): string | null {
+  const value = process.env[name]?.trim();
+  if (!value) return null;
+  if (value.length < 12) {
+    throw new Error(`${name} must be at least 12 characters`);
+  }
+  return value;
+}
+
+function bootstrapCredentialsPath(): string {
+  const dbPath = process.env.DATABASE_PATH || path.join(__dirname, "data/xiongyuan.db");
+  return path.join(path.dirname(dbPath), "bootstrap-credentials.txt");
+}
+
+function readBootstrapPassword(file: string): string | null {
+  if (!fs.existsSync(file)) return null;
+  const match = /^password=(.+)$/m.exec(fs.readFileSync(file, "utf8"));
+  const value = match?.[1]?.trim() ?? "";
+  return value.length >= 12 ? value : null;
+}
+
+/** Random local password, stored once beside the database. Never logged. */
+function generatedBootstrapPassword(): { password: string; created: boolean } {
+  const file = bootstrapCredentialsPath();
+  const existing = readBootstrapPassword(file);
+  if (existing) return { password: existing, created: false };
+  const password = randomBytes(24).toString("base64url");
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  fs.writeFileSync(
+    file,
+    [
+      "# Local bootstrap credentials for this machine only.",
+      "# Sign in once, then change the password. Do not commit this file.",
+      `password=${password}`,
+      "",
+    ].join("\n"),
+    { encoding: "utf8", mode: 0o600 },
+  );
+  try {
+    fs.chmodSync(file, 0o600);
+  } catch {
+    // Windows ACLs are not POSIX modes; the file still stays under the user profile.
+  }
+  console.log(`[seed] local bootstrap credentials written to ${file}`);
+  return { password, created: true };
+}
+
+function upsertBootstrapUser(opts: {
+  email: string;
+  password: string;
+  nickname: string;
+  role: string;
+  tenantId: number;
+  mustChange: boolean;
+}): void {
+  const existing = dbGet("SELECT id FROM users WHERE email = ?", [opts.email]);
+  if (existing) return;
+  const hash = bcrypt.hashSync(opts.password, 10);
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, ?, ?, ?)",
+    [opts.email, hash, opts.nickname, opts.role, opts.tenantId, opts.mustChange ? 1 : 0],
+  );
+  console.log(`[seed] local bootstrap account ${opts.email}`);
+}
+
+function envTruthy(name: string): boolean {
+  const value = (process.env[name] || "").trim().toLowerCase();
+  return value === "1" || value === "true" || value === "yes" || value === "on";
+}
+
+function devBootstrapRequested(): boolean {
+  // Inherited LOCAL_TEST / DEV_BOOTSTRAP is ignored unless this process is an
+  // explicit dev build. Release packages do not import this module at all.
+  if (!envTruthy("FREEOS_DEV_BUILD")) return false;
+  return envTruthy("FREEOS_ORG_DEV_BOOTSTRAP") || envTruthy("FREEOS_ORG_LOCAL_TEST");
+}
+
+function bootstrapMarkerPath(): string {
+  const dbPath = process.env.DATABASE_PATH || path.join(__dirname, "data/xiongyuan.db");
+  return path.join(path.dirname(dbPath), "local-bootstrap.done");
+}
+
+/** Dev-only first empty database. Release installs never create demo accounts. */
+export function ensureLocalBootstrap(): void {
+  if (!devBootstrapRequested()) return;
+  const marker = bootstrapMarkerPath();
+  if (fs.existsSync(marker)) return;
+  const userCount = dbGet("SELECT COUNT(*) as c FROM users") as { c?: number } | undefined;
+  if (userCount && Number(userCount.c) > 0) {
+    fs.mkdirSync(path.dirname(marker), { recursive: true });
+    fs.writeFileSync(marker, "skipped-existing-users\n", "utf8");
+    return;
+  }
+  dbRun(
+    "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (1, ?, ?, 'active', 'community')",
+    ["openXYOS", "openxyos"],
+  );
+  dbRun(
+    "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, ?, ?, 'active', 'community')",
+    ["openXYOS 本地租户", "openxyos-local"],
+  );
+
+  const demoExplicit = explicitSeedPassword("SEED_DEMO_PASSWORD");
+  const adminExplicit = explicitSeedPassword("SEED_ADMIN_PASSWORD");
+  const generated = demoExplicit && adminExplicit ? null : generatedBootstrapPassword();
+  const demoPassword = demoExplicit ?? generated!.password;
+  const adminPassword = adminExplicit ?? generated!.password;
+  const adminEmail = seedAdminEmail();
+
+  upsertBootstrapUser({
+    email: "demo@demo.com",
+    password: demoPassword,
+    nickname: "管理员",
+    role: "admin",
+    tenantId: 2,
+    mustChange: demoExplicit === null,
+  });
+  upsertBootstrapUser({
+    email: "user@demo.com",
+    password: demoPassword,
+    nickname: "同事",
+    role: "user",
+    tenantId: 2,
+    mustChange: demoExplicit === null,
+  });
+  if (adminEmail !== "demo@demo.com") {
+    upsertBootstrapUser({
+      email: adminEmail,
+      password: adminPassword,
+      nickname: "超级管理员",
+      role: "super_admin",
+      tenantId: 1,
+      mustChange: adminExplicit === null,
+    });
+  }
+  fs.mkdirSync(path.dirname(marker), { recursive: true });
+  fs.writeFileSync(marker, "created\n", "utf8");
+}
+
+// 辅助：日期加月份 → ISO日期字符串
+function addMonths(dateStr: string | null | undefined, months: number): string | null {
+  if (!dateStr) return null;
+  const d = new Date(dateStr);
+  d.setUTCMonth(d.getUTCMonth() + months);
+  return d.toISOString().split("T")[0];
+}
+
+export function seedDatabase() {
+  if (process.env.FREEOS_ORG_INTEGRATED === "1") {
+    // Real installs keep their own accounts. Demo users exist only behind an
+    // explicit dev switch, and only on a database that has never had a user.
+    if (devBootstrapRequested()) ensureLocalBootstrap();
+    return;
+  }
+  if (process.env.SEED_DEMO_DATA !== "true") {
+    console.log("[seed] Demo data is disabled. Release installs do not create demo@demo.com.");
+    return;
+  }
+
+  // Demo users, companies, departments and modules consistently belong to tenant #2.
+  // Keep the tenant row present even when a prior partial seed left user data behind.
+  dbRun(
+    "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, ?, ?, 'active', 'community')",
+    ["openXYOS 演示租户", "openxyos-demo"],
+  );
+
+  const userCount = dbGet("SELECT COUNT(*) as c FROM users") as any;
+
+  if (userCount.c === 0) {
+    console.log("[种子] 初始化演示数据...");
+
+    const adminHash = bcrypt.hashSync(requiredSeedSecret("SEED_ADMIN_PASSWORD"), 10);
+    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
+      [seedAdminEmail(), adminHash, "超级管理员", "super_admin", 1]);
+
+    const demoHash = bcrypt.hashSync(requiredSeedSecret("SEED_DEMO_PASSWORD"), 10);
+    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
+      ["demo@demo.com", demoHash, "张总", "admin", 2]);
+
+    const userHash = bcrypt.hashSync(requiredSeedSecret("SEED_DEMO_PASSWORD"), 10);
+    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
+      ["user@demo.com", userHash, "李员工", "user", 2]);
+
+    dbRun("INSERT INTO companies (name, tenant_id) VALUES (?, ?)", ["雄元科技", 1]);
+
+    // ===== 部门层级结构（17个部门，4级管理） =====
+    // L1: 董事长办公室
+    // L2: CEO办公室
+    // L3: CTO办公室 / COO办公室 / CAO办公室
+    // L4: 12个中心
+
+    const deptDefs: { name: string; parentIdx: number | null; desc: string }[] = [
+      // L1
+      { name: "董事长办公室", parentIdx: null, desc: "战略决策·资本运作" },                        // 0
+      // L2
+      { name: "CEO办公室", parentIdx: 0, desc: "经营决策·全局统筹" },                              // 1
+      // L3
+      { name: "CTO办公室", parentIdx: 1, desc: "技术战略·产品路线·研发资源·交付质量" },              // 2
+      { name: "COO办公室", parentIdx: 1, desc: "市场拓展·商务谈判·运营效率·客户成功" },              // 3
+      { name: "CAO办公室", parentIdx: 1, desc: "人才战略·财务管控·行政保障·合规风控" },              // 4
+      // L4 - CTO线
+      { name: "产品研发中心", parentIdx: 2, desc: "AI智能体产品技术引擎，核心平台研发" },             // 5
+      { name: "技术保障中心", parentIdx: 2, desc: "技术底座守护者，系统稳定与安全" },                // 6
+      { name: "数据中心", parentIdx: 2, desc: "数据资产管理，赋能业务数据驱动" },                    // 7
+      { name: "交付管理中心", parentIdx: 2, desc: "项目交付铁三角核心，客户项目高质量落地" },          // 8
+      // L4 - COO线
+      { name: "商务中心", parentIdx: 3, desc: "营收引擎，市场开拓与商务转化" },                     // 9
+      { name: "运营中心", parentIdx: 3, desc: "效率中枢，驱动公司内部运营效能" },                    // 10
+      { name: "客户成功中心", parentIdx: 3, desc: "客户关系守护者，驱动复购与口碑" },                // 11
+      { name: "顾问中心", parentIdx: 3, desc: "行业智库，AI落地咨询与方案设计" },                   // 12
+      // L4 - CAO线
+      { name: "行政中心", parentIdx: 4, desc: "后勤保障中枢" },                                   // 13
+      { name: "人力资源中心", parentIdx: 4, desc: "人才引擎，驱动组织能力建设" },                   // 14
+      { name: "财务中心", parentIdx: 4, desc: "资金管家，确保财务健康与合规" },                     // 15
+      { name: "质量管理与战略中心", parentIdx: 4, desc: "质量守门员与战略参谋" },                   // 16
+    ];
+
+    const deptIds: number[] = [];
+    for (let i = 0; i < deptDefs.length; i++) {
+      const d = deptDefs[i];
+      const r = dbRun(
+        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
+        [1, d.name, d.parentIdx !== null ? deptIds[d.parentIdx] : null, i, d.desc, 1]
+      );
+      deptIds.push(r.lastInsertRowid);
+    }
+
+    // ===== 员工数据（按文档：71人，12中心，人类+AI混合） =====
+    // 管理层（人类） + 各中心负责人（人类/AI） + 中心成员（AI）
+
+    // --- L1-L3 管理层（全部人类） ---
+    const executives = [
+      { name: "张总", role: "董事长", dept: 0, type: "human" as const, emoji: "👔", skills: "战略决策,资本运作,行业布局", agent: null },
+      { name: "陈远", role: "CEO", dept: 1, type: "human" as const, emoji: "👔", skills: "经营决策,全局统筹,资源调度", agent: null },
+      { name: "CEO助理", role: "总裁办秘书", dept: 1, type: "human" as const, emoji: "📋", skills: "会议纪要,决议督办,跨部门协调", agent: null },
+      { name: "林技", role: "CTO", dept: 2, type: "human" as const, emoji: "💻", skills: "技术战略,产品路线,研发管理", agent: null },
+      { name: "刘运", role: "COO", dept: 3, type: "human" as const, emoji: "📊", skills: "市场拓展,商务谈判,运营效率", agent: null },
+      { name: "孙行", role: "CAO", dept: 4, type: "human" as const, emoji: "🏢", skills: "人才战略,财务管控,行政保障", agent: null },
+    ];
+
+    // --- L4 总监（12位，部分人类、部分AI） ---
+    const directors = [
+      { name: "赵产", role: "产品研发中心总监", dept: 5, type: "human" as const, emoji: "🎯", skills: "产品架构,Sprint管理,代码质量", agent: null },
+      { name: "钱技", role: "技术保障中心总监", dept: 6, type: "human" as const, emoji: "🛡️", skills: "基础设施,信息安全,DevOps", agent: null },
+      { name: "孙数", role: "数据中心总监", dept: 7, type: "human" as const, emoji: "📈", skills: "数据平台,数据治理,BI分析", agent: null },
+      { name: "李交", role: "交付管理中心总监", dept: 8, type: "human" as const, emoji: "🚀", skills: "项目管理,交付标准,风险控制", agent: null },
+      { name: "周商", role: "商务中心总监", dept: 9, type: "human" as const, emoji: "💼", skills: "营收增长,客户开发,商务谈判", agent: null },
+      { name: "吴运", role: "运营中心总监", dept: 10, type: "human" as const, emoji: "⚙️", skills: "流程优化,效能管理,资源调度", agent: null },
+      { name: "郑客", role: "客户成功中心总监", dept: 11, type: "human" as const, emoji: "🤝", skills: "客户管理,满意度提升,续约推动", agent: null },
+      { name: "王问", role: "顾问中心总监", dept: 12, type: "human" as const, emoji: "💡", skills: "行业方案,售前支持,需求分析", agent: null },
+      { name: "冯行", role: "行政中心总监", dept: 13, type: "human" as const, emoji: "📎", skills: "办公环境,资产采购,制度管理", agent: null },
+      { name: "陈人", role: "人力资源中心总监", dept: 14, type: "human" as const, emoji: "👥", skills: "人才招聘,培训发展,绩效薪酬", agent: null },
+      { name: "褚财", role: "财务中心总监", dept: 15, type: "human" as const, emoji: "💰", skills: "财务核算,预算管理,税务合规", agent: null },
+      { name: "卫质", role: "质量管理与战略中心总监", dept: 16, type: "human" as const, emoji: "✅", skills: "质量标准,流程审计,战略跟踪", agent: null },
+    ];
+
+    // --- L5 各中心成员（AI数字员工，共53人，总计71人） ---
+    const centerStaff = [
+      // 产品研发中心 (10人)
+      { name: "周前", role: "前端工程师", dept: 5, type: "ai" as const, emoji: "🎨", skills: "React,TypeScript,Tailwind CSS", agent: "frontend_dev" },
+      { name: "吴后", role: "后端工程师", dept: 5, type: "ai" as const, emoji: "⚙️", skills: "Node.js,PostgreSQL,Redis", agent: "backend_dev" },
+      { name: "郑测", role: "测试工程师", dept: 5, type: "ai" as const, emoji: "🔍", skills: "自动化测试,性能测试,安全审计", agent: "qa_engineer" },
+      { name: "李知", role: "知识管理员", dept: 5, type: "ai" as const, emoji: "📚", skills: "知识沉淀,文档管理,信息检索", agent: "knowledge" },
+      { name: "AI产品经理", role: "产品经理", dept: 5, type: "ai" as const, emoji: "🎯", skills: "需求分析,产品规划,用户研究", agent: "product_manager" },
+      { name: "AI架构师", role: "技术架构师", dept: 5, type: "ai" as const, emoji: "🏗️", skills: "系统设计,技术选型,架构评审", agent: "tech_architect" },
+      { name: "AI全栈工程师", role: "全栈工程师", dept: 5, type: "ai" as const, emoji: "🔥", skills: "React,Node.js,数据库,系统设计", agent: "fullstack_dev" },
+      { name: "AI移动端工程师", role: "移动端工程师", dept: 5, type: "ai" as const, emoji: "📱", skills: "React Native,Flutter,iOS,Android", agent: "mobile_dev" },
+      { name: "AI小程序工程师", role: "小程序工程师", dept: 5, type: "ai" as const, emoji: "💬", skills: "微信小程序,Taro,uni-app", agent: "miniapp_dev" },
+      { name: "AI代码审查员", role: "代码审查员", dept: 5, type: "ai" as const, emoji: "🔎", skills: "代码审查,编码规范,质量把控", agent: "code_reviewer" },
+
+      // 技术保障中心 (6人)
+      { name: "AI运维工程师", role: "运维工程师", dept: 6, type: "ai" as const, emoji: "🔧", skills: "云运维,容器化,监控告警", agent: "backend_dev" },
+      { name: "AI安全工程师", role: "安全工程师", dept: 6, type: "ai" as const, emoji: "🔐", skills: "渗透测试,安全审计,合规检查", agent: "qa_engineer" },
+      { name: "AI DevOps工程师", role: "DevOps工程师", dept: 6, type: "ai" as const, emoji: "🔄", skills: "CI/CD,自动化部署,效能度量", agent: "sre_engineer" },
+      { name: "AI SRE工程师", role: "SRE工程师", dept: 6, type: "ai" as const, emoji: "🛠️", skills: "Linux,Docker,Kubernetes,监控告警", agent: "sre_engineer" },
+      { name: "AI网络工程师", role: "网络工程师", dept: 6, type: "ai" as const, emoji: "🌐", skills: "网络架构,负载均衡,CDN", agent: "sre_engineer" },
+      { name: "AI安全审计员", role: "安全审计员", dept: 6, type: "ai" as const, emoji: "🛡️", skills: "安全审计,合规检查,风险评估", agent: "qa_engineer" },
+
+      // 数据中心 (6人)
+      { name: "AI数据工程师", role: "数据工程师", dept: 7, type: "ai" as const, emoji: "🗄️", skills: "ETL,数据仓库,数据管道", agent: "data_engineer" },
+      { name: "AI数据分析师", role: "数据分析师", dept: 7, type: "ai" as const, emoji: "📊", skills: "BI报表,数据可视化,业务分析", agent: "bi_analyst" },
+      { name: "AI ML工程师", role: "ML工程师", dept: 7, type: "ai" as const, emoji: "🤖", skills: "模型训练,特征工程,AI应用", agent: "ai_engineer" },
+      { name: "AI DBA", role: "数据库管理员", dept: 7, type: "ai" as const, emoji: "🗃️", skills: "PostgreSQL,MySQL,数据库调优", agent: "dba" },
+      { name: "AI数据治理专员", role: "数据治理专员", dept: 7, type: "ai" as const, emoji: "📐", skills: "数据质量,数据标准,元数据管理", agent: "data_engineer" },
+      { name: "AI BI分析师", role: "BI分析师", dept: 7, type: "ai" as const, emoji: "📈", skills: "BI报表,数据可视化,SQL", agent: "bi_analyst" },
+
+      // 交付管理中心 (6人)
+      { name: "AI项目经理", role: "项目经理", dept: 8, type: "ai" as const, emoji: "📋", skills: "项目管理,进度控制,风险管理", agent: "product_manager" },
+      { name: "AI交付工程师", role: "交付工程师", dept: 8, type: "ai" as const, emoji: "🚀", skills: "部署实施,客户培训,知识转移", agent: "backend_dev" },
+      { name: "AI交付支持", role: "交付支持", dept: 8, type: "ai" as const, emoji: "🛠️", skills: "技术支持,问题排查,文档编写", agent: "qa_engineer" },
+      { name: "AI PMO", role: "PMO专员", dept: 8, type: "ai" as const, emoji: "📊", skills: "项目监控,资源协调,流程优化", agent: "strategy_executive" },
+      { name: "AI需求分析师", role: "需求分析师", dept: 8, type: "ai" as const, emoji: "📝", skills: "需求调研,方案设计,客户沟通", agent: "presales_architect" },
+      { name: "AI实施顾问", role: "实施顾问", dept: 8, type: "ai" as const, emoji: "🎓", skills: "系统实施,用户培训,上线支持", agent: "customer_success" },
+
+      // 商务中心 (6人)
+      { name: "AI商务经理", role: "商务经理", dept: 9, type: "ai" as const, emoji: "💼", skills: "客户开发,商务谈判,合同管理", agent: "sales_manager" },
+      { name: "AI渠道经理", role: "渠道经理", dept: 9, type: "ai" as const, emoji: "🔗", skills: "渠道建设,合作伙伴,市场拓展", agent: "sales_manager" },
+      { name: "AI市场分析师", role: "市场分析师", dept: 9, type: "ai" as const, emoji: "📈", skills: "竞品分析,市场洞察,情报收集", agent: "bi_analyst" },
+      { name: "AI售前架构师", role: "售前架构师", dept: 9, type: "ai" as const, emoji: "🏗️", skills: "方案设计,售前支持,需求分析,技术咨询", agent: "presales_architect" },
+      { name: "AI品牌经理", role: "品牌经理", dept: 9, type: "ai" as const, emoji: "📢", skills: "品牌推广,公关传播,内容营销", agent: "newmedia_ops" },
+      { name: "AI电商运营", role: "电商运营", dept: 9, type: "ai" as const, emoji: "🛒", skills: "电商运营,商品管理,活动策划", agent: "ecommerce_ops" },
+
+      // 运营中心 (5人)
+      { name: "AI运营专员", role: "运营专员", dept: 10, type: "ai" as const, emoji: "⚙️", skills: "流程优化,SOP建设,数据分析", agent: "product_manager" },
+      { name: "AI效能分析师", role: "效能分析师", dept: 10, type: "ai" as const, emoji: "📊", skills: "效能度量,资源调度,运营报告", agent: "bi_analyst" },
+      { name: "AI数字员工运营", role: "数字员工运营", dept: 10, type: "ai" as const, emoji: "🤖", skills: "数字员工管理,效能监控,任务调度", agent: "customer_success" },
+      { name: "AI流程优化师", role: "流程优化师", dept: 10, type: "ai" as const, emoji: "🔄", skills: "流程分析,SOP优化,自动化", agent: "strategy_executive" },
+      { name: "AI新媒体运营", role: "新媒体运营", dept: 10, type: "ai" as const, emoji: "📱", skills: "内容策划,社交媒体,用户增长", agent: "newmedia_ops" },
+
+      // 客户成功中心 (5人)
+      { name: "AI客户成功经理", role: "客户成功经理", dept: 11, type: "ai" as const, emoji: "🤝", skills: "客户管理,满意度跟踪,续约推动", agent: "customer_success" },
+      { name: "AI客户运营", role: "客户运营", dept: 11, type: "ai" as const, emoji: "📞", skills: "客户沟通,问题处理,案例沉淀", agent: "customer_success" },
+      { name: "AI客户培训师", role: "客户培训师", dept: 11, type: "ai" as const, emoji: "🎓", skills: "客户培训,课程设计,知识转移", agent: "customer_success" },
+      { name: "AI客户数据分析师", role: "客户数据分析师", dept: 11, type: "ai" as const, emoji: "📊", skills: "客户分析,流失预警,价值评估", agent: "bi_analyst" },
+      { name: "AI客户体验设计师", role: "客户体验设计师", dept: 11, type: "ai" as const, emoji: "✨", skills: "用户体验,服务设计,满意度提升", agent: "product_manager" },
+
+      // 顾问中心 (5人)
+      { name: "AI行业顾问", role: "行业顾问", dept: 12, type: "ai" as const, emoji: "💡", skills: "行业方案,需求分析,方案编写", agent: "presales_architect" },
+      { name: "AI解决方案架构师", role: "解决方案架构师", dept: 12, type: "ai" as const, emoji: "🏗️", skills: "方案设计,售前支持,技术咨询", agent: "tech_architect" },
+      { name: "AI金融科技顾问", role: "金融科技顾问", dept: 12, type: "ai" as const, emoji: "💳", skills: "金融科技,风控咨询,数字化升级", agent: "fintech_consultant" },
+      { name: "AI制造业顾问", role: "制造业顾问", dept: 12, type: "ai" as const, emoji: "🏭", skills: "智能制造,工业4.0,供应链优化", agent: "manufacturing_consultant" },
+      { name: "AI政务顾问", role: "政务顾问", dept: 12, type: "ai" as const, emoji: "🏛️", skills: "数字政务,智慧城市,政务信息化", agent: "gov_consultant" },
+
+      // 行政中心 (3人)
+      { name: "AI行政专员", role: "行政专员", dept: 13, type: "ai" as const, emoji: "📎", skills: "资产管理,制度执行,供应商管理", agent: "hr_manager" },
+      { name: "AI法务顾问", role: "法务顾问", dept: 13, type: "ai" as const, emoji: "⚖️", skills: "合同审查,法律咨询,合规检查,知识产权", agent: "legal_advisor" },
+      { name: "AI知识产权专员", role: "知识产权专员", dept: 13, type: "ai" as const, emoji: "📄", skills: "专利申请,商标注册,知识产权保护", agent: "ip_specialist" },
+
+      // 人力资源中心 (4人)
+      { name: "AI HRBP", role: "HRBP", dept: 14, type: "ai" as const, emoji: "👥", skills: "人才配置,员工关系,组织发展", agent: "hr_manager" },
+      { name: "AI招聘专员", role: "招聘专员", dept: 14, type: "ai" as const, emoji: "🎯", skills: "人才招聘,简历筛选,面试安排", agent: "hr_manager" },
+      { name: "AI培训专员", role: "培训专员", dept: 14, type: "ai" as const, emoji: "📖", skills: "培训开发,课程设计,学习发展", agent: "hr_manager" },
+      { name: "AI薪酬绩效专员", role: "薪酬绩效专员", dept: 14, type: "ai" as const, emoji: "💎", skills: "薪酬设计,绩效管理,激励方案", agent: "hr_manager" },
+
+      // 财务中心 (4人)
+      { name: "AI会计", role: "会计", dept: 15, type: "ai" as const, emoji: "💰", skills: "财务核算,报表编制,税务处理", agent: "financial_accountant" },
+      { name: "AI出纳", role: "出纳", dept: 15, type: "ai" as const, emoji: "💳", skills: "资金管理,费用审核,账务处理", agent: "cashier" },
+      { name: "AI财务经理", role: "财务经理", dept: 15, type: "ai" as const, emoji: "📊", skills: "财务核算,费用管理,报表编制", agent: "finance_manager" },
+      { name: "AI管理会计师", role: "管理会计师", dept: 15, type: "ai" as const, emoji: "📐", skills: "成本分析,预算编制,经营分析", agent: "mgmt_accountant" },
+
+      // 质量管理与战略中心 (4人)
+      { name: "AI质量工程师", role: "质量工程师", dept: 16, type: "ai" as const, emoji: "✅", skills: "质量审核,流程审计,标准制定", agent: "qa_engineer" },
+      { name: "AI战略分析师", role: "战略分析师", dept: 16, type: "ai" as const, emoji: "🔭", skills: "战略规划,OKR管理,行业研究", agent: "strategy_executive" },
+      { name: "AI投资经理", role: "投资经理", dept: 16, type: "ai" as const, emoji: "💎", skills: "项目尽调,投资分析,投后管理", agent: "investment_manager" },
+      { name: "AI医疗行业顾问", role: "医疗行业顾问", dept: 16, type: "ai" as const, emoji: "🏥", skills: "医疗行业,合规咨询,数字化转型", agent: "medical_consultant" },
+    ];
+
+    // 插入所有员工
+    const allEmployees = [...executives, ...directors, ...centerStaff];
+    for (const e of allEmployees) {
+      dbRun(
+        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)",
+        [1, deptIds[e.dept], e.name, e.role, e.agent, e.type, e.skills, e.emoji, 1]
+      );
+    }
+
+    // ===== 集团管控架构：区域分公司 + 外派分支 + 项目标段 + 现场试验室 =====
+    // COO线(属地管辖): COO办公室→区域分公司→外派分支→项目组→现场试验室
+    // CTO线(专业管辖): CTO办公室→交付管理中心→现场试验室(secondary_parent_id)
+    const cooDeptId = deptIds[3];    // COO办公室
+    const dmCenterId = deptIds[8];   // 交付管理中心(CTO线)
+    const allBranchDepts: Record<string, number> = {};
+    let deptSeq2 = 100;
+
+    // 4个区域分公司
+    const regions = [
+      { name: "华东区域分公司", code: "华东" },
+      { name: "华南区域分公司", code: "华南" },
+      { name: "西部区域分公司", code: "西部" },
+      { name: "华北区域分公司", code: "华北" },
+    ];
+    const regionIds2: number[] = [];
+    for (const r of regions) {
+      const rr = dbRun(
+        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (1,?,?,?,?,1,'regional','regional',?,1)",
+        [r.name, cooDeptId, deptSeq2++, `${r.code}区域业务统筹·下设外派分支`, r.code]
+      );
+      regionIds2.push(rr.lastInsertRowid);
+      allBranchDepts[r.name] = rr.lastInsertRowid;
+    }
+
+    // 外派分支定义: [区域索引, 分支名, 城市]
+    const branchDefs: [number, string, string][] = [
+      [0,"上海外派分支","上海"],[0,"南京外派分支","南京"],[0,"杭州外派分支","杭州"],
+      [0,"合肥外派分支","合肥"],[0,"苏州外派分支","苏州"],[0,"宁波外派分支","宁波"],
+      [1,"广州外派分支","广州"],[1,"深圳外派分支","深圳"],[1,"南宁外派分支","南宁"],
+      [1,"福州外派分支","福州"],[1,"海口外派分支","海口"],
+      [2,"成都外派分支","成都"],[2,"重庆外派分支","重庆"],[2,"昆明外派分支","昆明"],
+      [2,"西安外派分支","西安"],[2,"兰州外派分支","兰州"],
+      [3,"北京外派分支","北京"],[3,"天津外派分支","天津"],[3,"石家庄外派分支","石家庄"],
+      [3,"郑州外派分支","郑州"],
+    ];
+
+    // 外派分支 + 项目组 + 试验室
+    for (const [ri, bName, city] of branchDefs) {
+      const regionId = regionIds2[ri];
+      const rc = regions[ri];
+      const br = dbRun(
+        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (1,?,?,?,?,1,'branch','branch',?,2)",
+        [bName, regionId, deptSeq2++, `${city}外派·属地业务管理`, rc.code]
+      );
+      const branchId = br.lastInsertRowid;
+      allBranchDepts[bName] = branchId;
+
+      // 项目组 (每个分支2个)
+      const projNames = [`${city}一标项目组`, `${city}二标项目组`];
+      for (const projName of projNames) {
+        const pr = dbRun(
+          "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (1,?,?,?,?,1,'project','project',?,3)",
+          [projName, branchId, deptSeq2++, `${projName}—下设现场试验室`, rc.code]
+        );
+        const projId = pr.lastInsertRowid;
+        allBranchDepts[projName] = projId;
+
+        // 试验室 (一标2个，二标1个，交替)
+        const labCount = projName.includes("一标") ? 2 : 1;
+        for (let li = 0; li < labCount; li++) {
+          const labSuffix = labCount === 2 ? (li === 0 ? "A" : "B") : "";
+          const labName = projName.replace("项目组", labSuffix + "试验室");
+          const lr = dbRun(
+          "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level, secondary_parent_id) VALUES (1,?,?,?,?,1,'site_lab','site_lab',?,4,?)",
+            [labName, projId, deptSeq2++, `双重汇报·属地归${bName}·专业归交付管理中心`, rc.code, dmCenterId]
+          );
+          allBranchDepts[labName] = lr.lastInsertRowid;
+        }
+      }
+    }
+
+    // 统计
+    const totalBranchUnits = Object.keys(allBranchDepts).length;
+    const fieldBranchCount = branchDefs.length;
+    const labCount2 = Object.keys(allBranchDepts).filter(k => k.includes("试验室")).length;
+
+    // ===== 外派员工生成 =====
+    const surnames = ["王","李","张","刘","陈","杨","黄","赵","周","吴","徐","孙","马","朱","胡","林","郭","何","高","罗","郑","梁","谢","宋","唐","许","邓","韩","冯","曹","彭","曾","萧","田","董","袁","潘","于","蒋","蔡","余","杜","叶","程","苏","魏","吕","丁","任","沈","姚","卢","姜","崔","钟","谭","陆","汪","范","金","石","廖","贾","夏","韦","付","方","白","邹","孟","熊","秦","邱","江","尹","薛","闫","段","雷","侯","龙","史","陶","黎","贺","顾","毛","郝","龚","邵","万","钱","严","覃","武","戴","莫","孔","向","汤"];
+    let sIdx = 0;
+
+    // 分支经理 (人类, 20人)
+    const fieldEmpNames: string[] = [];
+    for (const [, bName, city] of branchDefs) {
+      const n = surnames[sIdx % surnames.length] + city.charAt(0) + "经理";
+      dbRun(
+        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
+        [allBranchDepts[bName], n, "分支经理", null, "human", "团队管理,属地协调,进度把控,安全管理", "👔", 1]
+      );
+      sIdx++;
+    }
+
+    // 分支AI核心人员 (每分支4人 = 80人)
+    const branchAIRoles = [
+      { role: "技术负责人", skills: "技术方案,质量把关,标准执行", e: "🔧", agent: "tech_architect" },
+      { role: "安全主管", skills: "安全巡检,隐患整改,安全教育", e: "🛡️", agent: "qa_engineer" },
+      { role: "资料主管", skills: "档案管理,报表编制,数据录入", e: "📄", agent: "data_engineer" },
+      { role: "综合管理员", skills: "行政后勤,物资管理,人事协调", e: "📎", agent: "hr_manager" },
+    ];
+    for (const [, bName, city] of branchDefs) {
+      for (const r of branchAIRoles) {
+        const n = surnames[sIdx % surnames.length] + city.charAt(0) + r.role.charAt(0);
+        dbRun(
+          "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
+          [allBranchDepts[bName], n, r.role, r.agent, "ai", r.skills, r.e, 1]
+        );
+        sIdx++;
+      }
+    }
+
+    // 项目级 (每项目1PM+2工程师)
+    for (const depName of Object.keys(allBranchDepts)) {
+      if (!depName.includes("项目组")) continue;
+      const n1 = surnames[sIdx % surnames.length] + "项" + (sIdx % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
+        [allBranchDepts[depName], n1, "项目经理", "product_manager", "ai", "项目管理,进度控制,风险管控,团队协调", "📋", 1]);
+      sIdx++;
+      const n2 = surnames[sIdx % surnames.length] + "工" + (sIdx % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
+        [allBranchDepts[depName], n2, "现场工程师", "backend_dev", "ai", "施工技术,检测方案,现场管理", "🔧", 1]);
+      sIdx++;
+      const n3 = surnames[sIdx % surnames.length] + "质" + (sIdx % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
+        [allBranchDepts[depName], n3, "质量工程师", "qa_engineer", "ai", "质量检测,材料试验,标准执行", "✅", 1]);
+      sIdx++;
+    }
+
+    // 试验室级 (每室1主任+2-3技术员)
+    for (const depName of Object.keys(allBranchDepts)) {
+      if (!depName.includes("试验室")) continue;
+      const n1 = surnames[sIdx % surnames.length] + "室" + (sIdx % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
+        [allBranchDepts[depName], n1, "试验室主任", "qa_engineer", "ai", "试验室管理,检测方案,报告审核", "🔬", 1]);
+      sIdx++;
+      const techRoles = [
+        { role: "检测技术员", skills: "材料试验,仪器操作,数据采集", e: "🧪", agent: "backend_dev" },
+        { role: "检测技术员", skills: "现场检测,取样分析,记录编制", e: "⚗️", agent: "qa_engineer" },
+        { role: "检测技术员", skills: "室内试验,养护管理,报告编制", e: "📊", agent: "data_engineer" },
+      ];
+      for (const t of techRoles) {
+        const n = surnames[sIdx % surnames.length] + "检" + (sIdx % 100);
+        dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
+          [allBranchDepts[depName], n, t.role, t.agent, "ai", t.skills, t.e, 1]);
+        sIdx++;
+      }
+    }
+
+    console.log(`[种子] 集团架构: ${totalBranchUnits}个分支组织单元 (含${fieldBranchCount}外派分支·${labCount2}试验室), ${sIdx}名外派员工`);
+
+    // 技能库种子数据（11大分类，完整技能市场）
+    const skillsLibrary = [
+      // 开发与技术
+      { name: "React", cat: "开发与技术", tags: "前端,JavaScript,UI", desc: "React 19 + Hooks + 状态管理，构建现代化前端应用", icon: "⚛️" },
+      { name: "TypeScript", cat: "开发与技术", tags: "前端,类型安全,JavaScript", desc: "TypeScript类型系统，提升代码质量和开发效率", icon: "🔷" },
+      { name: "Node.js", cat: "开发与技术", tags: "后端,JavaScript,服务端", desc: "Node.js服务端开发，Express/Koa/Fastify框架", icon: "💚" },
+      { name: "PostgreSQL", cat: "开发与技术", tags: "数据库,SQL,关系型", desc: "PostgreSQL数据库设计、优化与运维", icon: "🐘" },
+      { name: "Redis", cat: "开发与技术", tags: "缓存,NoSQL,内存数据库", desc: "Redis缓存策略、数据结构与高可用方案", icon: "🔴" },
+      { name: "Docker", cat: "开发与技术", tags: "容器,DevOps,部署", desc: "Docker容器化部署与镜像管理", icon: "🐳" },
+      { name: "Kubernetes", cat: "开发与技术", tags: "容器编排,云原生,运维", desc: "K8s集群管理、服务编排与自动扩缩容", icon: "☸️" },
+      { name: "Python", cat: "开发与技术", tags: "后端,AI,数据", desc: "Python编程，数据处理与AI应用开发", icon: "🐍" },
+      { name: "Go", cat: "开发与技术", tags: "后端,高并发,微服务", desc: "Go语言高并发服务开发", icon: "🔵" },
+      { name: "系统设计", cat: "开发与技术", tags: "架构,设计模式,分布式", desc: "大规模系统架构设计与技术选型", icon: "🏗️" },
+      { name: "API设计", cat: "开发与技术", tags: "REST,GraphQL,接口", desc: "RESTful/GraphQL API设计最佳实践", icon: "🔌" },
+      { name: "微服务架构", cat: "开发与技术", tags: "架构,分布式,服务治理", desc: "微服务拆分、服务治理与分布式事务", icon: "🧩" },
+      { name: "CI/CD", cat: "开发与技术", tags: "持续集成,持续部署,自动化", desc: "CI/CD流水线搭建与自动化部署", icon: "🔄" },
+      { name: "自动化测试", cat: "开发与技术", tags: "测试,质量保障,单元测试", desc: "单元测试、集成测试与E2E测试", icon: "🧪" },
+      { name: "性能优化", cat: "开发与技术", tags: "性能,调优,监控", desc: "应用性能分析、瓶颈定位与优化", icon: "⚡" },
+      { name: "安全测试", cat: "开发与技术", tags: "安全,渗透测试,漏洞", desc: "安全漏洞扫描、渗透测试与修复", icon: "🛡️" },
+      // 数据与金融
+      { name: "数据分析", cat: "数据与金融", tags: "数据,分析,可视化", desc: "数据采集、清洗、分析与可视化呈现", icon: "📊" },
+      { name: "BI报表", cat: "数据与金融", tags: "商业智能,报表,数据可视化", desc: "商业智能报表设计与数据看板搭建", icon: "📉" },
+      { name: "机器学习", cat: "数据与金融", tags: "AI,模型训练,预测", desc: "机器学习算法应用与模型训练", icon: "🧠" },
+      { name: "深度学习", cat: "数据与金融", tags: "AI,神经网络,NLP", desc: "深度学习框架与NLP/CV应用", icon: "🔬" },
+      { name: "ETL", cat: "数据与金融", tags: "数据管道,数据仓库,数据集成", desc: "数据抽取、转换、加载与数据仓库建设", icon: "🔀" },
+      { name: "数据治理", cat: "数据与金融", tags: "数据质量,数据标准,元数据", desc: "数据质量管理、数据标准制定与元数据管理", icon: "📐" },
+      { name: "财务分析", cat: "数据与金融", tags: "财务,报表分析,经营分析", desc: "财务报表分析、经营指标解读", icon: "💹" },
+      { name: "预算管理", cat: "数据与金融", tags: "预算,成本控制,财务管理", desc: "预算编制、执行监控与成本管控", icon: "💰" },
+      { name: "量化分析", cat: "数据与金融", tags: "量化,回测,策略", desc: "量化交易策略开发与回测验证", icon: "📈" },
+      { name: "税务筹划", cat: "数据与金融", tags: "税务,合规,税务优化", desc: "税务合规管理与合理税务筹划", icon: "🧾" },
+      // 营销与增长
+      { name: "市场策略", cat: "营销与增长", tags: "市场,品牌,定位", desc: "市场定位、品牌策略与竞争分析", icon: "🎯" },
+      { name: "品牌推广", cat: "营销与增长", tags: "品牌,传播,公关", desc: "品牌传播、公关活动与口碑管理", icon: "📢" },
+      { name: "SEO优化", cat: "营销与增长", tags: "SEO,搜索引擎,流量", desc: "搜索引擎优化与自然流量获取", icon: "🔍" },
+      { name: "内容营销", cat: "营销与增长", tags: "内容,营销,获客", desc: "内容策略、创作分发与获客转化", icon: "📝" },
+      { name: "社交媒体", cat: "营销与增长", tags: "社交,运营,用户增长", desc: "社交媒体运营与用户增长策略", icon: "📱" },
+      { name: "用户增长", cat: "营销与增长", tags: "增长,获客,留存", desc: "增长黑客方法论，拉新促活留存", icon: "🚀" },
+      { name: "广告投放", cat: "营销与增长", tags: "广告,投放,ROI", desc: "数字广告投放策略与ROI优化", icon: "💳" },
+      { name: "竞品分析", cat: "营销与增长", tags: "竞品,市场研究,差异化", desc: "竞品调研、差异化定位与策略制定", icon: "🔎" },
+      // 电商与跨境
+      { name: "电商运营", cat: "电商与跨境", tags: "电商,运营,商品管理", desc: "电商平台运营、商品管理与活动策划", icon: "🛒" },
+      { name: "跨境电商", cat: "电商与跨境", tags: "跨境,Amazon,速卖通", desc: "跨境电商平台运营与国际物流", icon: "🌍" },
+      { name: "供应链管理", cat: "电商与跨境", tags: "供应链,物流,采购", desc: "供应链优化、物流管理与采购策略", icon: "📦" },
+      { name: "选品分析", cat: "电商与跨境", tags: "选品,市场分析,爆品", desc: "市场趋势分析与爆品选品策略", icon: "🔎" },
+      { name: "店铺运营", cat: "电商与跨境", tags: "店铺,运营,转化率", desc: "店铺装修、流量运营与转化优化", icon: "🏪" },
+      // 内容与创作
+      { name: "文案写作", cat: "内容与创作", tags: "文案,写作,创意", desc: "商业文案、创意写作与内容策划", icon: "✍️" },
+      { name: "PPT设计", cat: "内容与创作", tags: "PPT,演示,设计", desc: "专业PPT设计与信息可视化呈现", icon: "📑" },
+      { name: "视频制作", cat: "内容与创作", tags: "视频,剪辑,创意", desc: "视频策划、拍摄剪辑与后期制作", icon: "🎬" },
+      { name: "UI设计", cat: "内容与创作", tags: "UI,设计,用户体验", desc: "用户界面设计与交互体验优化", icon: "🎨" },
+      { name: "信息可视化", cat: "内容与创作", tags: "可视化,图表,数据展示", desc: "数据可视化设计与图表呈现", icon: "📊" },
+      // 沟通与协作
+      { name: "商务谈判", cat: "沟通与协作", tags: "谈判,商务,沟通", desc: "商务谈判策略、沟通技巧与成交推动", icon: "🤝" },
+      { name: "项目管理", cat: "沟通与协作", tags: "项目,进度,协调", desc: "项目全生命周期管理与跨团队协调", icon: "📋" },
+      { name: "团队管理", cat: "沟通与协作", tags: "团队,领导力,管理", desc: "团队建设、人才培养与绩效管理", icon: "👥" },
+      { name: "客户沟通", cat: "沟通与协作", tags: "客户,沟通,关系维护", desc: "客户关系维护、需求理解与满意度提升", icon: "💬" },
+      { name: "跨部门协作", cat: "沟通与协作", tags: "协作,协调,组织", desc: "跨部门项目协调与资源整合", icon: "🔗" },
+      { name: "会议管理", cat: "沟通与协作", tags: "会议,效率,决策", desc: "高效会议组织、议程管理与决议跟踪", icon: "📅" },
+      // 法务与合规
+      { name: "合同审查", cat: "法务与合规", tags: "合同,法务,风险", desc: "合同条款审查、风险识别与修改建议", icon: "📜" },
+      { name: "知识产权", cat: "法务与合规", tags: "专利,商标,版权", desc: "专利申请、商标注册与知识产权保护", icon: "©️" },
+      { name: "合规检查", cat: "法务与合规", tags: "合规,审计,制度", desc: "合规体系搭建、制度审计与整改", icon: "✅" },
+      { name: "劳动法", cat: "法务与合规", tags: "劳动法,用工,员工关系", desc: "劳动法规咨询、用工风险防范", icon: "⚖️" },
+      // 学术与教育
+      { name: "培训开发", cat: "学术与教育", tags: "培训,课程,学习", desc: "企业培训体系搭建与课程开发", icon: "🎓" },
+      { name: "知识管理", cat: "学术与教育", tags: "知识,文档,沉淀", desc: "知识库建设、文档管理与知识沉淀", icon: "📚" },
+      { name: "行业研究", cat: "学术与教育", tags: "研究,分析,趋势", desc: "行业趋势研究、竞争格局分析", icon: "🔬" },
+      { name: "学术写作", cat: "学术与教育", tags: "论文,学术,研究", desc: "学术论文撰写、研究报告编制", icon: "📝" },
+      // AI增强与知识
+      { name: "Prompt工程", cat: "AI增强与知识", tags: "AI,Prompt,提示词", desc: "Prompt设计、优化与工程化实践", icon: "💡" },
+      { name: "RAG知识库", cat: "AI增强与知识", tags: "RAG,知识库,检索增强", desc: "检索增强生成架构设计与实现", icon: "🔍" },
+      { name: "Agent开发", cat: "AI增强与知识", tags: "AI Agent,智能体,自动化", desc: "AI Agent架构设计与工具集成", icon: "🤖" },
+      { name: "模型微调", cat: "AI增强与知识", tags: "微调,训练,LLM", desc: "大语言模型微调与领域适配", icon: "🔧" },
+      // 生活与健康
+      { name: "健康管理", cat: "生活与健康", tags: "健康,运动,饮食", desc: "健康生活方式、运动计划与营养指导", icon: "🌿" },
+      { name: "时间管理", cat: "生活与健康", tags: "时间,效率,规划", desc: "时间管理方法论与效率提升", icon: "⏰" },
+      // 沟通与协作（补充飞书生态）
+      { name: "飞书集成", cat: "沟通与协作", tags: "飞书,企业协作,API", desc: "飞书开放平台API集成与自动化", icon: "🐦" },
+      { name: "企业微信集成", cat: "沟通与协作", tags: "企业微信,微信,协作", desc: "企业微信API集成与消息自动化", icon: "💬" },
+    ];
+    for (const s of skillsLibrary) {
+      const slug = s.name.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, '-').replace(/-+$/, '');
+      const version = "1.0.0";
+      const installCount = Math.floor(Math.random() * 300) + 10;
+      const rating = parseFloat((3.5 + Math.random() * 1.5).toFixed(1));
+      dbRun(
+        "INSERT INTO skills (tenant_id, company_id, name, slug, category, description, tags, icon, source, version, author, install_count, rating, enabled) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
+        [1, 1, s.name, slug, s.cat, s.desc, s.tags, s.icon, "local", version, "雄元科技", installCount, rating, 1]
+      );
+    }
+
+    // 默认职级体系
+    const positionLevels = [
+      { code: "P1", name: "初级工程师", sequence: "P", level: 1 },
+      { code: "P2", name: "工程师", sequence: "P", level: 2 },
+      { code: "P3", name: "高级工程师", sequence: "P", level: 3 },
+      { code: "P4", name: "资深工程师", sequence: "P", level: 4 },
+      { code: "P5", name: "专家工程师", sequence: "P", level: 5 },
+      { code: "M1", name: "主管", sequence: "M", level: 1 },
+      { code: "M2", name: "经理", sequence: "M", level: 2 },
+      { code: "M3", name: "总监", sequence: "M", level: 3 },
+      { code: "D1", name: "副总裁", sequence: "D", level: 1 },
+      { code: "D2", name: "高级副总裁", sequence: "D", level: 2 },
+      { code: "C1", name: "C-Level", sequence: "C", level: 1 },
+      { code: "C2", name: "CEO", sequence: "C", level: 2 },
+    ];
+    for (const pl of positionLevels) {
+      dbRun("INSERT INTO position_levels (code, name, sequence, level, tenant_id) VALUES (?, ?, ?, ?, ?)",
+        [pl.code, pl.name, pl.sequence, pl.level, 1]);
+    }
+
+    const tasks = [
+      { title: "完成Q2产品路线图规划", priority: "high", status: "in_progress", assignee: 4 },
+      { title: "部署生产环境CI/CD流水线", priority: "critical", status: "in_progress", assignee: 2 },
+      { title: "编写API接口文档", priority: "medium", status: "todo", assignee: 3 },
+      { title: "设计新版Dashboard UI", priority: "high", status: "review", assignee: 7 },
+      { title: "性能压测报告", priority: "medium", status: "done", assignee: 9 },
+      { title: "月度财务分析报告", priority: "high", status: "in_progress", assignee: 3 },
+      { title: "竞品分析报告", priority: "low", status: "todo", assignee: 5 },
+      { title: "新员工入职培训方案", priority: "medium", status: "done", assignee: 6 },
+      { title: "数据库迁移方案评审", priority: "critical", status: "todo", assignee: 8 },
+      { title: "Q2市场推广计划", priority: "high", status: "in_progress", assignee: 5 },
+      { title: "安全审计漏洞修复", priority: "critical", status: "in_progress", assignee: 9 },
+      { title: "知识库文档整理", priority: "low", status: "done", assignee: 10 },
+    ];
+    for (const t of tasks) {
+      dbRun("INSERT INTO tasks (company_id, title, priority, status, assigned_to, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
+        [1, t.title, t.priority, t.status, t.assignee, 1]);
+    }
+
+    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [1, "总裁办战略会议", 2, 1]);
+    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [1, "CTO技术线周会", 2, 1]);
+    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [1, "产品需求讨论", 2, 1]);
+
+    const ceoMessages = [
+      { sender: "陈远 · CEO", type: "employee", content: "各位好，今天讨论Q2战略重点。核心目标：完成产品PMF验证、获取首批50家付费客户、建立Agent API基础架构。" },
+      { sender: "林技 · CTO", type: "employee", content: "技术侧建议：先完成数据库迁移，CI/CD流水线本周可以完成。" },
+      { sender: "赵产 · 产品研发中心总监", type: "employee", content: "产品侧反馈：Dashboard需要突出'AI员工正在工作'的实时感。" },
+      { sender: "褚财 · 财务中心总监", type: "employee", content: "财务提醒：建议尽快开通支付功能，启动收费。" },
+      { sender: "张总", type: "user", content: "好的，优先级明确了。散会。" },
+    ];
+    for (const m of ceoMessages) {
+      dbRun("INSERT INTO messages (chat_id, sender_type, sender_name, content, tenant_id) VALUES (?, ?, ?, ?, ?)",
+        [1, m.type, m.sender, m.content, 1]);
+    }
+
+    // 绩效评估种子数据
+    const performanceReviews = [
+      { employee_id: 7, type: "ai", period: "2026-Q2", overall: 88, task: 92, quality: 85, efficiency: 90, collab: 78, notes: "前端交付质量优秀，代码审查及时" },
+      { employee_id: 8, type: "ai", period: "2026-Q2", overall: 85, task: 88, quality: 82, efficiency: 86, collab: 80, notes: "后端架构稳定，API设计规范" },
+      { employee_id: 9, type: "ai", period: "2026-Q2", overall: 82, task: 85, quality: 80, efficiency: 78, collab: 85, notes: "测试覆盖率提升，发现多个关键bug" },
+      { employee_id: 10, type: "ai", period: "2026-Q2", overall: 90, task: 95, quality: 88, efficiency: 92, collab: 82, notes: "知识沉淀体系搭建完成，文档质量高" },
+      { employee_id: 11, type: "ai", period: "2026-Q2", overall: 86, task: 90, quality: 84, efficiency: 85, collab: 83, notes: "产品需求分析准确，用户反馈良好" },
+      { employee_id: 12, type: "ai", period: "2026-Q2", overall: 87, task: 88, quality: 90, efficiency: 84, collab: 82, notes: "技术架构设计合理，评审通过率高" },
+    ];
+    for (const r of performanceReviews) {
+      dbRun(
+        `INSERT INTO performance_reviews (tenant_id, employee_id, employee_type, review_period, overall_score, task_completion_score, quality_score, efficiency_score, collaboration_score, review_notes, status)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'approved')`,
+        [1, r.employee_id, r.type, r.period, r.overall, r.task, r.quality, r.efficiency, r.collab, r.notes]
+      );
+    }
+
+    // 绩效指标种子数据
+    const perfMetrics = [
+      { employee_id: 7, type: "task_completion_rate", value: 92, unit: "%", period: "2026-Q2" },
+      { employee_id: 7, type: "code_quality_score", value: 85, unit: "分", period: "2026-Q2" },
+      { employee_id: 7, type: "response_time_avg", value: 2.3, unit: "秒", period: "2026-Q2" },
+      { employee_id: 8, type: "task_completion_rate", value: 88, unit: "%", period: "2026-Q2" },
+      { employee_id: 8, type: "api_uptime", value: 99.9, unit: "%", period: "2026-Q2" },
+      { employee_id: 8, type: "response_time_avg", value: 1.8, unit: "秒", period: "2026-Q2" },
+      { employee_id: 9, type: "task_completion_rate", value: 85, unit: "%", period: "2026-Q2" },
+      { employee_id: 9, type: "bug_detection_rate", value: 94, unit: "%", period: "2026-Q2" },
+      { employee_id: 10, type: "task_completion_rate", value: 95, unit: "%", period: "2026-Q2" },
+      { employee_id: 10, type: "knowledge_entries", value: 156, unit: "篇", period: "2026-Q2" },
+      { employee_id: 11, type: "task_completion_rate", value: 90, unit: "%", period: "2026-Q2" },
+      { employee_id: 12, type: "task_completion_rate", value: 88, unit: "%", period: "2026-Q2" },
+    ];
+    for (const m of perfMetrics) {
+      dbRun(
+        "INSERT INTO performance_metrics (tenant_id, employee_id, employee_type, metric_type, metric_value, metric_unit, period) VALUES (?, ?, 'ai', ?, ?, ?, ?)",
+        [1, m.employee_id, m.type, m.value, m.unit, m.period]
+      );
+    }
+
+    // 心跳计划种子数据 - 为AI员工配置自动任务执行
+    const heartbeatSchedules = [
+      { agent_id: 7, task_type: "auto_execute", cron: "*/5 * * * *" },   // 周前 - 前端
+      { agent_id: 8, task_type: "auto_execute", cron: "*/5 * * * *" },   // 吴后 - 后端
+      { agent_id: 9, task_type: "auto_execute", cron: "*/5 * * * *" },   // 郑测 - 测试
+      { agent_id: 10, task_type: "auto_execute", cron: "*/10 * * * *" }, // 李知 - 知识管理
+      { agent_id: 11, task_type: "auto_execute", cron: "*/5 * * * *" },  // AI产品经理
+      { agent_id: 12, task_type: "auto_execute", cron: "*/5 * * * *" },  // AI架构师
+    ];
+    for (const hs of heartbeatSchedules) {
+      dbRun(
+        "INSERT INTO heartbeat_schedules (agent_id, task_type, cron_expression, enabled, next_run, tenant_id) VALUES (?, ?, ?, 1, datetime('now', '+1 minute'), ?)",
+        [hs.agent_id, hs.task_type, hs.cron, 1]
+      );
+    }
+
+    const notes = [
+      { title: "协作建议使用说明", content: "群聊中的智能助手可提供独立建议与纪要草稿；任务分配、批准和执行由组织成员确认。", tags: "协作,说明" },
+      { title: "开源示例说明", content: "示例数据仅用于本地开发和功能演示，不代表真实客户、合同、价格或业务承诺。", tags: "开源,示例" },
+    ];
+    for (const n of notes) {
+      dbRun("INSERT INTO knowledge_notes (title, content, tags, tenant_id) VALUES (?, ?, ?, ?)", [n.title, n.content, n.tags, 1]);
+    }
+
+    // ===== 演示公司（tenant_id=2, 独立租户）=====
+    dbRun("INSERT INTO companies (name, tenant_id) VALUES (?, ?)", ["演示公司", 2]);
+
+    const demoDeptIds: number[] = [];
+    for (let i = 0; i < deptDefs.length; i++) {
+      const d = deptDefs[i];
+      const r = dbRun(
+        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
+        [2, d.name, d.parentIdx !== null ? demoDeptIds[d.parentIdx] : null, i, d.desc, 2]
+      );
+      demoDeptIds.push(r.lastInsertRowid);
+    }
+
+    // ===== 演示公司集团架构：区域分公司 + 外派分支 + 项目标段 + 现场试验室 =====
+    const demoCooDeptId = demoDeptIds[3];    // COO办公室
+    const demoDmCenterId = demoDeptIds[8];   // 交付管理中心(CTO线)
+    const demoAllBranchDepts: Record<string, number> = {};
+    let demoDeptSeq = 200;
+
+    // 4个区域分公司
+    const demoRegionIds: number[] = [];
+    for (const r of regions) {
+      const rr = dbRun(
+        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (2,?,?,?,?,2,'regional','regional',?,1)",
+        [r.name, demoCooDeptId, demoDeptSeq++, `${r.code}区域业务统筹·下设外派分支`, r.code]
+      );
+      demoRegionIds.push(rr.lastInsertRowid);
+      demoAllBranchDepts[r.name] = rr.lastInsertRowid;
+    }
+
+    // 外派分支 + 项目组 + 试验室
+    for (const [ri, bName, city] of branchDefs) {
+      const regionId = demoRegionIds[ri];
+      const rc = regions[ri];
+      const br = dbRun(
+        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (2,?,?,?,?,2,'branch','branch',?,2)",
+        [bName, regionId, demoDeptSeq++, `${city}外派·属地业务管理`, rc.code]
+      );
+      const branchId = br.lastInsertRowid;
+      demoAllBranchDepts[bName] = branchId;
+
+      const projNames = [`${city}一标项目组`, `${city}二标项目组`];
+      for (const projName of projNames) {
+        const pr = dbRun(
+          "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (2,?,?,?,?,2,'project','project',?,3)",
+          [projName, branchId, demoDeptSeq++, `${projName}—下设现场试验室`, rc.code]
+        );
+        const projId = pr.lastInsertRowid;
+        demoAllBranchDepts[projName] = projId;
+
+        const labCount = projName.includes("一标") ? 2 : 1;
+        for (let li = 0; li < labCount; li++) {
+          const labSuffix = labCount === 2 ? (li === 0 ? "A" : "B") : "";
+          const labName = projName.replace("项目组", labSuffix + "试验室");
+          const lr = dbRun(
+            "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level, secondary_parent_id) VALUES (2,?,?,?,?,2,'site_lab','site_lab',?,4,?)",
+            [labName, projId, demoDeptSeq++, `双重汇报·属地归${bName}·专业归交付管理中心`, rc.code, demoDmCenterId]
+          );
+          demoAllBranchDepts[labName] = lr.lastInsertRowid;
+        }
+      }
+    }
+
+    const demoTotalBranchUnits = Object.keys(demoAllBranchDepts).length;
+    const demoLabCount = Object.keys(demoAllBranchDepts).filter(k => k.includes("试验室")).length;
+
+    for (const e of allEmployees) {
+      dbRun(
+        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)",
+        [2, demoDeptIds[e.dept], e.name, e.role, e.agent, e.type, e.skills, e.emoji, 2]
+      );
+    }
+
+    // ===== 演示公司外派员工生成 =====
+    let demoSEm = 0;
+
+    // 分支经理 (人类, 20人)
+    for (const [, bName, city] of branchDefs) {
+      const n = surnames[(demoSEm) % surnames.length] + city.charAt(0) + "经理";
+      dbRun(
+        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
+        [demoAllBranchDepts[bName], n, "分支经理", null, "human", "团队管理,属地协调,进度把控,安全管理", "👔", 2]
+      );
+      demoSEm++;
+    }
+
+    // 分支AI核心人员 (每分支4人 = 80人)
+    for (const [, bName, city] of branchDefs) {
+      for (const r of branchAIRoles) {
+        const n = surnames[demoSEm % surnames.length] + city.charAt(0) + r.role.charAt(0);
+        dbRun(
+          "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
+          [demoAllBranchDepts[bName], n, r.role, r.agent, "ai", r.skills, r.e, 2]
+        );
+        demoSEm++;
+      }
+    }
+
+    // 项目级 (每项目1PM+2工程师)
+    for (const depName of Object.keys(demoAllBranchDepts)) {
+      if (!depName.includes("项目组")) continue;
+      const n1 = surnames[demoSEm % surnames.length] + "项" + (demoSEm % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
+        [demoAllBranchDepts[depName], n1, "项目经理", "product_manager", "ai", "项目管理,进度控制,风险管控,团队协调", "📋", 2]);
+      demoSEm++;
+      const n2 = surnames[demoSEm % surnames.length] + "工" + (demoSEm % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
+        [demoAllBranchDepts[depName], n2, "现场工程师", "backend_dev", "ai", "施工技术,检测方案,现场管理", "🔧", 2]);
+      demoSEm++;
+      const n3 = surnames[demoSEm % surnames.length] + "质" + (demoSEm % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
+        [demoAllBranchDepts[depName], n3, "质量工程师", "qa_engineer", "ai", "质量检测,材料试验,标准执行", "✅", 2]);
+      demoSEm++;
+    }
+
+    // 试验室级 (每室1主任+2-3技术员)
+    for (const depName of Object.keys(demoAllBranchDepts)) {
+      if (!depName.includes("试验室")) continue;
+      const n1 = surnames[demoSEm % surnames.length] + "室" + (demoSEm % 100);
+      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
+        [demoAllBranchDepts[depName], n1, "试验室主任", "qa_engineer", "ai", "试验室管理,检测方案,报告审核", "🔬", 2]);
+      demoSEm++;
+      const techRoles = [
+        { role: "检测技术员", skills: "材料试验,仪器操作,数据采集", e: "🧪", agent: "backend_dev" },
+        { role: "检测技术员", skills: "现场检测,取样分析,记录编制", e: "⚗️", agent: "qa_engineer" },
+        { role: "检测技术员", skills: "室内试验,养护管理,报告编制", e: "📊", agent: "data_engineer" },
+      ];
+      for (const t of techRoles) {
+        const n = surnames[demoSEm % surnames.length] + "检" + (demoSEm % 100);
+        dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
+          [demoAllBranchDepts[depName], n, t.role, t.agent, "ai", t.skills, t.e, 2]);
+        demoSEm++;
+      }
+    }
+
+    console.log(`[种子] 演示公司集团架构: ${demoTotalBranchUnits}个分支组织单元 (含${fieldBranchCount}外派分支·${demoLabCount}试验室), ${demoSEm}名外派员工`);
+
+    for (const s of skillsLibrary) {
+      const slug = s.name.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, '-').replace(/-+$/, '');
+      dbRun(
+        "INSERT INTO skills (tenant_id, company_id, name, slug, category, description, tags, icon, source, version, author, install_count, rating, enabled) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
+        [2, 2, s.name, slug, s.cat, s.desc, s.tags, s.icon, "local", "1.0.0", "演示公司", Math.floor(Math.random() * 300) + 10, parseFloat((3.5 + Math.random() * 1.5).toFixed(1)), 1]
+      );
+    }
+
+    for (const pl of positionLevels) {
+      dbRun("INSERT INTO position_levels (code, name, sequence, level, tenant_id) VALUES (?, ?, ?, ?, ?)",
+        [pl.code, pl.name, pl.sequence, pl.level, 2]);
+    }
+
+    for (const t of tasks) {
+      dbRun("INSERT INTO tasks (company_id, title, priority, status, assigned_to, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
+        [2, t.title, t.priority, t.status, t.assignee, 2]);
+    }
+
+    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [2, "演示公司团队群", 2, 2]);
+    for (const m of ceoMessages) {
+      dbRun("INSERT INTO messages (chat_id, sender_type, sender_name, content, tenant_id) VALUES (?, ?, ?, ?, ?)",
+        [dbGet("SELECT MAX(id) as id FROM chats")?.id || 1, m.type, m.sender, m.content, 2]);
+    }
+
+    for (const r of performanceReviews) {
+      dbRun(
+        "INSERT INTO performance_reviews (tenant_id, employee_id, employee_type, review_period, overall_score, task_completion_score, quality_score, efficiency_score, collaboration_score, review_notes, status) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'approved')",
+        [2, r.employee_id, r.type, r.period, r.overall, r.task, r.quality, r.efficiency, r.collab, r.notes]
+      );
+    }
+    for (const m of perfMetrics) {
+      dbRun(
+        "INSERT INTO performance_metrics (tenant_id, employee_id, employee_type, metric_type, metric_value, metric_unit, period) VALUES (?, ?, 'ai', ?, ?, ?, ?)",
+        [2, m.employee_id, m.type, m.value, m.unit, m.period]
+      );
+    }
+    for (const hs of heartbeatSchedules) {
+      dbRun(
+        "INSERT INTO heartbeat_schedules (agent_id, task_type, cron_expression, enabled, next_run, tenant_id) VALUES (?, ?, ?, 1, datetime('now', '+1 minute'), ?)",
+        [hs.agent_id, hs.task_type, hs.cron, 2]
+      );
+    }
+    for (const n of notes) {
+      dbRun("INSERT INTO knowledge_notes (title, content, tags, tenant_id) VALUES (?, ?, ?, ?)", [n.title, n.content, n.tags, 2]);
+    }
+
+    // 人才市场种子数据（从agent模板+技能库生成）
+    seedTalentPool(1);
+    seedTalentPool(2);
+
+    // 插件中心种子数据
+    seedPlugins(1);
+    seedPlugins(2);
+
+    const totalHqEmps = allEmployees.length; // 71 HQ employees
+    const totalAllEmps = totalHqEmps * 2 + sIdx + demoSEm;
+    const totalAllAI = centerStaff.length * 2 + (sIdx - fieldBranchCount) + (demoSEm - fieldBranchCount);
+    const tenant1Depts = 17 + totalBranchUnits;
+    const tenant2Depts = 17 + demoTotalBranchUnits;
+    console.log(`[种子] 完成：3用户, ${totalAllEmps}员工(AI ${totalAllAI}+人类 ${totalAllEmps - totalAllAI}), ${tenant1Depts}+${tenant2Depts}部门(含${fieldBranchCount * 2}外派分支·${labCount2 + demoLabCount}试验室), ${skillsLibrary.length * 2}技能`);
+  }
+
+  migrateDatabase();
+}
+
+// 人才市场种子数据生成
+function seedTalentPool(tenantId: number) {
+  // AI智能体 — 从agent模板生成
+  const aiTalents: { name: string; emoji: string; agent_type: string; role: string; desc: string; skills: string; category: string; cost: string; rank: number }[] = [
+    { name: "AI-战略顾问", emoji: "🎯", agent_type: "strategy_advisor", role: "战略顾问", desc: "企业战略规划、行业趋势分析、竞争格局研判", skills: "战略规划,行业研究,竞争分析,商业模式", category: "战略管理", cost: "¥0.08", rank: 1 },
+    { name: "AI-财务分析师", emoji: "💰", agent_type: "financial_analyst", role: "财务分析师", desc: "财务报表分析、预算编制、成本优化、投资评估", skills: "财务分析,预算管理,成本控制,投资评估", category: "财务管理", cost: "¥0.06", rank: 2 },
+    { name: "AI-市场营销专家", emoji: "📊", agent_type: "marketing_specialist", role: "市场营销专家", desc: "市场策略制定、品牌推广、用户增长、数据分析", skills: "市场策略,品牌推广,数据分析,用户增长", category: "市场营销", cost: "¥0.07", rank: 2 },
+    { name: "AI-人力资源顾问", emoji: "👥", agent_type: "hr_consultant", role: "人力资源顾问", desc: "人才招聘、绩效设计、组织发展、文化建设", skills: "人才招聘,绩效管理,组织发展,文化建设", category: "人力资源", cost: "¥0.05", rank: 2 },
+    { name: "AI-法务合规官", emoji: "⚖️", agent_type: "compliance_officer", role: "法务合规官", desc: "合同审查、合规检查、风险评估、知识产权", skills: "合同审查,合规检查,风险评估,知识产权", category: "法务合规", cost: "¥0.09", rank: 2 },
+    { name: "AI-数据分析师", emoji: "📈", agent_type: "data_analyst", role: "数据分析师", desc: "数据可视化、BI报表、业务洞察、预测分析", skills: "BI报表,数据可视化,SQL,业务分析", category: "数据科学", cost: "¥0.06", rank: 3 },
+    { name: "AI-ML工程师", emoji: "🧠", agent_type: "ml_engineer", role: "ML工程师", desc: "机器学习模型训练、特征工程、模型部署", skills: "机器学习,深度学习,Python,模型部署", category: "AI研发", cost: "¥0.12", rank: 3 },
+    { name: "AI-DevOps工程师", emoji: "🔄", agent_type: "devops_engineer", role: "DevOps工程师", desc: "CI/CD流水线、容器化部署、监控告警、自动化运维", skills: "Docker,Kubernetes,CI/CD,监控告警", category: "技术研发", cost: "¥0.10", rank: 4 },
+    { name: "AI-安全工程师", emoji: "🔐", agent_type: "security_engineer", role: "安全工程师", desc: "渗透测试、安全审计、漏洞修复、安全架构", skills: "安全审计,渗透测试,漏洞扫描,安全架构", category: "技术研发", cost: "¥0.11", rank: 4 },
+    { name: "AI-UI设计师", emoji: "🎨", agent_type: "ui_designer", role: "UI设计师", desc: "用户界面设计、交互原型、设计系统、品牌视觉", skills: "UI设计,交互设计,Figma,设计系统", category: "设计创意", cost: "¥0.07", rank: 4 },
+    { name: "AI-内容创作师", emoji: "✍️", agent_type: "content_creator", role: "内容创作师", desc: "文案写作、内容策划、品牌故事、多媒体内容", skills: "文案写作,内容策划,品牌传播,视频脚本", category: "内容创意", cost: "¥0.05", rank: 4 },
+    { name: "AI-客户服务专员", emoji: "🎧", agent_type: "cs_specialist", role: "客户服务专员", desc: "客户咨询、问题处理、满意度回访、知识库维护", skills: "客户沟通,问题处理,满意度回访,知识管理", category: "客户服务", cost: "¥0.03", rank: 5 },
+    { name: "AI-项目经理", emoji: "📋", agent_type: "project_manager", role: "项目经理", desc: "项目规划、进度跟踪、资源协调、风险管控", skills: "项目管理,进度控制,资源协调,风险管控", category: "项目管理", cost: "¥0.08", rank: 3 },
+    { name: "AI-培训师", emoji: "🎓", agent_type: "trainer", role: "培训师", desc: "课程设计、员工培训、知识转移、能力评估", skills: "培训开发,课程设计,知识转移,能力评估", category: "人力资源", cost: "¥0.04", rank: 4 },
+    { name: "AI-供应链优化师", emoji: "📦", agent_type: "supply_chain", role: "供应链优化师", desc: "供应链分析、库存优化、物流规划、采购策略", skills: "供应链管理,库存优化,物流规划,采购策略", category: "运营管理", cost: "¥0.07", rank: 3 },
+  ];
+
+  for (const t of aiTalents) {
+    dbRun(
+      `INSERT INTO talent_pool (tenant_id, talent_type, name, avatar_emoji, skills, category, description, agent_type, capabilities, token_cost_per_k, provider, integration_type, rating, source, status)
+       VALUES (?, 'ai', ?, ?, ?, ?, ?, ?, ?, ?, '雄元AI市场', 'api', ?, 'system', 'available')`,
+      [tenantId, t.name, t.emoji, t.skills, t.category, t.desc, t.agent_type, t.desc, t.cost, 3.5 + Math.random() * 1.5]
+    );
+  }
+
+  // 人类人才 — 模拟行业人才库
+  const humanTalents = [
+    { name: "王明远", emoji: "👨‍💼", skills: "战略规划,团队管理,商业谈判,P&L管理", category: "高级管理", exp: 15, salary: "50-80K/月", availability: "1个月内" },
+    { name: "刘思涵", emoji: "👩‍💻", skills: "React,TypeScript,Node.js,系统架构", category: "技术研发", exp: 8, salary: "35-50K/月", availability: "2周内" },
+    { name: "陈大伟", emoji: "👨‍🔬", skills: "机器学习,深度学习,NLP,Python", category: "AI研发", exp: 6, salary: "40-60K/月", availability: "随时" },
+    { name: "张雪琳", emoji: "👩‍🎨", skills: "UI设计,UX研究,Figma,设计系统", category: "设计创意", exp: 5, salary: "25-35K/月", availability: "随时" },
+    { name: "赵建国", emoji: "👨‍💼", skills: "财务分析,预算管控,税务筹划,IPO经验", category: "财务管理", exp: 20, salary: "60-100K/月", availability: "3个月内" },
+    { name: "林小红", emoji: "👩‍🏫", skills: "人才招聘,组织发展,绩效体系,企业文化", category: "人力资源", exp: 10, salary: "30-45K/月", availability: "1个月内" },
+    { name: "黄志强", emoji: "👨‍🔧", skills: "DevOps,K8s,CI/CD,云原生架构", category: "技术研发", exp: 7, salary: "35-50K/月", availability: "2周内" },
+    { name: "周美玲", emoji: "👩‍💼", skills: "品牌营销,社交媒体,内容策略,增长黑客", category: "市场营销", exp: 6, salary: "25-40K/月", availability: "随时" },
+    { name: "吴国栋", emoji: "👨‍⚖️", skills: "合同审查,知识产权,公司法,诉讼经验", category: "法务合规", exp: 12, salary: "40-60K/月", availability: "1个月内" },
+    { name: "郑晓芳", emoji: "👩‍📊", skills: "数据分析,BI,SQL,Tableau,业务洞察", category: "数据科学", exp: 4, salary: "20-30K/月", availability: "随时" },
+  ];
+
+  for (const t of humanTalents) {
+    dbRun(
+      `INSERT INTO talent_pool (tenant_id, talent_type, name, avatar_emoji, skills, category, description, experience_years, expected_salary, availability, rating, source, status)
+       VALUES (?, 'human', ?, ?, ?, ?, ?, ?, ?, ?, ?, 'system', 'available')`,
+      [tenantId, t.name, t.emoji, t.skills, t.category, `${t.name} · ${t.exp}年经验 · ${t.category}`, t.exp, t.salary, t.availability, 3.5 + Math.random() * 1.5]
+    );
+  }
+}
+
+// 插件中心种子数据
+function seedPlugins(tenantId: number) {
+  const plugins = [
+    { name: "飞书集成", cat: "办公协作", desc: "飞书开放平台API集成，支持消息推送、审批流、日历同步", icon: "🐦", author: "雄元科技", version: "2.1.0", price: "免费", tags: "飞书,集成,消息,审批" },
+    { name: "企业微信集成", cat: "办公协作", desc: "企业微信API集成，支持通讯录同步、消息通知、应用消息", icon: "💬", author: "雄元科技", version: "1.8.0", price: "免费", tags: "企微,集成,通讯录" },
+    { name: "钉钉集成", cat: "办公协作", desc: "钉钉开放平台集成，支持群机器人、工作通知、OA审批", icon: "📌", author: "第三方", version: "1.5.0", price: "¥299/月", tags: "钉钉,集成,OA" },
+    { name: "微信支付", cat: "支付金融", desc: "微信支付API V3集成，支持JSAPI/Native/H5/APP全场景支付", icon: "💚", author: "雄元科技", version: "3.0.0", price: "免费", tags: "支付,微信,收款" },
+    { name: "支付宝支付", cat: "支付金融", desc: "支付宝开放平台集成，支持电脑/手机/当面付", icon: "🔵", author: "雄元科技", version: "2.2.0", price: "免费", tags: "支付,支付宝" },
+    { name: "银联支付", cat: "支付金融", desc: "银联在线支付网关集成，支持B2B/B2C/C2C", icon: "💳", author: "第三方", version: "1.3.0", price: "¥999/月", tags: "支付,银联" },
+    { name: "腾讯云短信", cat: "通信服务", desc: "腾讯云短信API集成，支持验证码、通知、营销短信", icon: "📱", author: "雄元科技", version: "1.6.0", price: "按量计费", tags: "短信,验证码,通知" },
+    { name: "阿里云OSS", cat: "存储服务", desc: "阿里云对象存储OSS集成，支持文件上传/下载/CDN加速", icon: "☁️", author: "雄元科技", version: "2.0.0", price: "按量计费", tags: "存储,OSS,CDN" },
+    { name: "七牛云存储", cat: "存储服务", desc: "七牛云Kodo对象存储集成，图片处理/音视频转码", icon: "🐂", author: "第三方", version: "1.9.0", price: "按量计费", tags: "存储,CDN,图片处理" },
+    { name: "百度地图", cat: "地图位置", desc: "百度地图API集成，支持地理编码/逆地理编码/路径规划", icon: "🗺️", author: "第三方", version: "2.4.0", price: "免费额度", tags: "地图,定位,导航" },
+    { name: "高德地图", cat: "地图位置", desc: "高德地图Web服务API，支持POI搜索/地理围栏/轨迹纠偏", icon: "📍", author: "雄元科技", version: "2.6.0", price: "免费额度", tags: "地图,定位,搜索" },
+    { name: "快递100", cat: "物流配送", desc: "快递100 API集成，支持快递查询/电子面单/物流推送", icon: "📦", author: "第三方", version: "1.4.0", price: "¥99/月", tags: "快递,物流,查询" },
+    { name: "电子签章", cat: "法务合规", desc: "e签宝/法大大电子签章集成，支持合同签署/存证/区块链", icon: "✍️", author: "第三方", version: "1.2.0", price: "¥299/月", tags: "签章,合同,法务" },
+    { name: "增值税发票", cat: "财务税务", desc: "电子发票开具与查验，支持数电票/增值税专票/普票", icon: "🧾", author: "雄元科技", version: "2.0.0", price: "¥199/月", tags: "发票,税务,财务" },
+    { name: "金蝶ERP", cat: "财务税务", desc: "金蝶云星空ERP集成，支持凭证/科目/报表同步", icon: "📊", author: "第三方", version: "1.7.0", price: "¥499/月", tags: "ERP,金蝶,财务" },
+    { name: "用友ERP", cat: "财务税务", desc: "用友U8/T+ ERP集成，支持采购/销售/库存/财务", icon: "🏢", author: "第三方", version: "1.5.0", price: "¥499/月", tags: "ERP,用友" },
+    { name: "抖音开放平台", cat: "营销获客", desc: "抖音小程序/直播间/商品橱窗API集成", icon: "🎵", author: "雄元科技", version: "1.3.0", price: "免费", tags: "抖音,直播,电商" },
+    { name: "小红书开放平台", cat: "营销获客", desc: "小红书商家/内容API集成，笔记管理/商品同步", icon: "📕", author: "第三方", version: "1.0.0", price: "¥199/月", tags: "小红书,内容,电商" },
+    { name: "百度AI开放平台", cat: "AI能力", desc: "百度AI文字识别/语音合成/NLP/图像识别API集成", icon: "🧠", author: "雄元科技", version: "2.3.0", price: "按量计费", tags: "AI,OCR,NLP,语音" },
+    { name: "讯飞语音", cat: "AI能力", desc: "科大讯飞语音识别/合成/翻译API集成", icon: "🎤", author: "第三方", version: "1.8.0", price: "按量计费", tags: "语音,识别,翻译" },
+    { name: "HubSpot CRM", cat: "客户管理", desc: "HubSpot CRM集成，客户/联系人/交易同步", icon: "🟠", author: "第三方", version: "1.2.0", price: "免费", tags: "CRM,客户,营销" },
+    { name: "飞书多维表格", cat: "办公协作", desc: "飞书多维表格API，支持数据读写/字段管理/视图操作", icon: "📋", author: "雄元科技", version: "1.4.0", price: "免费", tags: "飞书,表格,数据" },
+    { name: "Grafana监控", cat: "运维监控", desc: "Grafana仪表板集成，支持数据源配置/面板嵌入/告警", icon: "📈", author: "第三方", version: "1.1.0", price: "免费", tags: "监控,仪表板,告警" },
+    { name: "Jira项目管理", cat: "研发工具", desc: "Atlassian Jira集成，Issue同步/Sprint管理/Webhook", icon: "🎫", author: "第三方", version: "1.6.0", price: "¥199/月", tags: "Jira,项目管理,敏捷" },
+    { name: "GitLab代码仓库", cat: "研发工具", desc: "GitLab API集成，仓库管理/MR Webhook/CI触发", icon: "🦊", author: "雄元科技", version: "2.0.0", price: "免费", tags: "GitLab,代码,CI" },
+    { name: "Webhook推送", cat: "通信服务", desc: "通用Webhook集成，支持自定义URL/请求模板/重试机制", icon: "🔔", author: "雄元科技", version: "1.0.0", price: "免费", tags: "Webhook,通知,集成" },
+    { name: "AI合同智能解析", cat: "法务合规", desc: "上传PDF/DOCX合同文档，AI自动提取合同信息与收/付款节点，一键入库", icon: "🤖", author: "雄元科技", version: "1.0.0", price: "¥99/月", tags: "AI,合同,解析,文档" },
+  ];
+
+  for (const p of plugins) {
+    const slug = p.name.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, '-').replace(/-+$/, '');
+    dbRun(
+      `INSERT INTO plugins (tenant_id, name, slug, category, description, icon, version, author, price, tags, install_count, rating, status)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active')`,
+      [tenantId, p.name, slug, p.cat, p.desc, p.icon, p.version, p.author, p.price, p.tags, Math.floor(Math.random() * 500) + 50, parseFloat((3.0 + Math.random() * 2.0).toFixed(1))]
+    );
+  }
+}
+
+function migrateDatabase() {
+  console.log("[迁移] 检查数据库版本...");
+
+  const adminHash = bcrypt.hashSync(requiredSeedSecret("SEED_ADMIN_PASSWORD"), 10);
+  const adminEmail = seedAdminEmail();
+  const existingSuperAdmin = dbGet("SELECT id, role FROM users WHERE email = ?", [adminEmail]) as any;
+  if (!existingSuperAdmin) {
+    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
+      [adminEmail, adminHash, "超级管理员", "super_admin", 1]);
+    console.log(`[迁移] 已添加超级管理员 ${adminEmail}`);
+  }
+
+  const demoUser = dbGet("SELECT id, role FROM users WHERE email = ?", ["demo@demo.com"]) as any;
+  if (demoUser && demoUser.role === "super_admin") {
+    dbRun("UPDATE users SET role = 'admin' WHERE email = ?", ["demo@demo.com"]);
+    console.log("[迁移] demo@demo.com 已降级为 admin");
+  }
+
+  // Ensure ordinary demo user exists, same tenant as demo@demo.com
+  const userHash = bcrypt.hashSync(requiredSeedSecret("SEED_DEMO_PASSWORD"), 10);
+  const existingOrdinaryUser = dbGet("SELECT id FROM users WHERE email = ?", ["user@demo.com"]) as any;
+  if (!existingOrdinaryUser) {
+    // Place user@demo.com in the same tenant as demo@demo.com
+    const demoTenant = (dbGet("SELECT tenant_id FROM users WHERE email = ?", ["demo@demo.com"]) as any)?.tenant_id || 2;
+    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
+      ["user@demo.com", userHash, "李员工", "user", demoTenant]);
+    console.log(`[迁移] 已添加演示普通用户 user@demo.com (tenant#${demoTenant})`);
+  }
+
+  const existingConfig = dbGet("SELECT COUNT(*) as c FROM ai_config") as any;
+  if (existingConfig.c === 0) {
+    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["llm_api_key", "", "LLM API 密钥", 1]);
+    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["llm_api_base", process.env.LLM_API_BASE || "", "LLM API 地址", 1]);
+    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["llm_model", process.env.LLM_MODEL || "", "LLM 模型", 1]);
+    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["ai_reply_enabled", "true", "是否启用AI自动回复", 1]);
+    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["ai_reply_delay", "2000", "AI回复延迟(毫秒)", 1]);
+    console.log("[迁移] AI配置已初始化");
+  }
+
+  // 知识库存储限额（演示公司1GB，雄元科技5GB）
+  const storageLimit1 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'knowledge_storage_limit_kb' AND tenant_id = 1") as any;
+  if (!storageLimit1) {
+    dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (1, 'knowledge_storage_limit_kb', '5242880', 1)");
+  }
+  const storageLimit2 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'knowledge_storage_limit_kb' AND tenant_id = 2") as any;
+  if (!storageLimit2) {
+    const t2 = dbGet("SELECT id FROM tenants WHERE id = 2") as any;
+    if (t2) dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (2, 'knowledge_storage_limit_kb', '1048576', 2)");
+  }
+
+  // 网站名称（支持租户自定义）
+  const siteName1 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'site_name' AND tenant_id = 1") as any;
+  if (!siteName1) {
+    dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (1, 'site_name', '雄元智脑XYOS', 1)");
+  }
+  const siteName2 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'site_name' AND tenant_id = 2") as any;
+  if (!siteName2) {
+    const t2 = dbGet("SELECT id FROM tenants WHERE id = 2") as any;
+    if (t2) dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (2, 'site_name', '演示公司', 2)");
+  }
+
+  // 合同管理模块种子数据（科研机构业务场景）
+  const contractCount = dbGet("SELECT COUNT(*) as c FROM contracts WHERE tenant_id = ?", [1]) as any;
+  if (contractCount.c === 0) { seedContracts(1); }
+  // 付款计划独立补建：即使合同已存在也要检查是否缺少付款计划
+  seedContractPayments(1);
+
+  const contractCount2 = dbGet("SELECT COUNT(*) as c FROM contracts WHERE tenant_id = ?", [2]) as any;
+  if (contractCount2.c === 0) { seedContracts(2); }
+  seedContractPayments(2);
+
+  // 资产种子数据——安全守卫：表不存在则跳过
+  try {
+    const assetsTableExists = dbGet("SELECT COUNT(*) as c FROM sqlite_master WHERE type='table' AND name='assets'") as any;
+    if (assetsTableExists?.c > 0) {
+      const assetCount1 = dbGet("SELECT COUNT(*) as c FROM assets WHERE tenant_id = ?", [1]) as any;
+      if (assetCount1.c === 0) { seedAssets(1); }
+      const assetCount2 = dbGet("SELECT COUNT(*) as c FROM assets WHERE tenant_id = ?", [2]) as any;
+      if (assetCount2.c === 0) { seedAssets(2); }
+    }
+  } catch (err: any) {
+    console.error("[种子] 资产种子失败(非致命):", err.message);
+  }
+
+  // 修复旧试验室（A-F标段）：补齐 org_type 和 function_type（两个租户）
+  const fixedOldLabs = dbRun("UPDATE departments SET org_type='site_lab', function_type='site_lab' WHERE name LIKE '%标段试验室' AND (org_type IS NULL OR org_type='functional')");
+  if (fixedOldLabs.changes > 0) {
+    console.log(`[迁移] 已修复 ${fixedOldLabs.changes} 个旧试验室的 org_type/function_type`);
+  }
+
+  console.log("[迁移] 完成");
+}
+
+// 合同种子：以科研中心及其关联企业为背景的业务合同
+function seedContracts(tenantId: number) {
+  const isT1 = tenantId === 1;
+
+  const contracts: {
+    title: string; contract_no: string; party_a: string; party_b: string;
+    direction: string; amount: number; status: string; start_date: string | null; end_date: string | null;
+    contract_type: string; sign_date: string | null; signer: string | null; key_terms?: string; patent?: boolean;
+  }[] = isT1 ? [
+    // === 收入类合同（outbound / receivable）===
+    {
+      title: "城市道路沥青路面长期性能监测技术研究",
+      contract_no: "KY-HT-2026-001", party_a: "交通科学研究院",
+      party_b: "省交通运输厅科技处", direction: "outbound", amount: 680000,
+      status: "active", start_date: "2026-01-15", end_date: "2027-12-31",
+      contract_type: "service", sign_date: "2026-01-10", signer: "赵产",
+      key_terms: "按季度提交监测报告，年度总报告于12月底前完成"
+    },
+    {
+      title: "山区高速公路边坡稳定性智能预警系统开发",
+      contract_no: "HT-KF-2026-002", party_a: "智能交通工程技术有限公司",
+      party_b: "高速集团建设管理有限公司", direction: "outbound", amount: 1250000,
+      status: "active", start_date: "2026-03-01", end_date: "2027-02-28",
+      contract_type: "service", sign_date: "2026-02-20", signer: "林技",
+      key_terms: "分三期交付，首期30%预付款到账后启动"
+    },
+    {
+      title: "桥梁结构健康监测设备采购与安装服务",
+      contract_no: "SB-CG-2026-003", party_a: "工程检测技术有限公司",
+      party_b: "市市政桥梁管理处", direction: "outbound", amount: 420000,
+      status: "active", start_date: "2026-04-01", end_date: "2026-10-31",
+      contract_type: "service", sign_date: "2026-03-25", signer: "吴运",
+      key_terms: "含传感器采购、安装、调试及一年质保期运维"
+    },
+    {
+      title: "公路工程材料力学性能检测年度委托合同",
+      contract_no: "JC-DW-2026-004", party_a: "工程检测技术有限公司",
+      party_b: "市交通建设工程质量监督站", direction: "outbound", amount: 360000,
+      status: "active", start_date: "2026-01-01", end_date: "2026-12-31",
+      contract_type: "service", sign_date: "2025-12-28", signer: "褚财",
+      key_terms: "每月抽样检测不少于50组，出具正式检测报告"
+    },
+    {
+      title: "智慧工地综合管理平台定制开发项目",
+      contract_no: "RJ-KF-2026-005", party_a: "信息科技有限公司",
+      party_b: "中建八局第三建筑工程有限公司", direction: "outbound", amount: 890000,
+      status: "in_progress", start_date: "2026-05-06", end_date: "2026-11-30",
+      contract_type: "service", sign_date: "2026-04-28", signer: "钱技",
+      key_terms: "敏捷开发模式，按月迭代交付，验收后提供1年免费维保"
+    },
+    {
+      title: "交通运输行业碳排放核算方法学研究",
+      contract_no: "KY-HT-2026-006", party_a: "交通科学研究院",
+      party_b: "国家发改委能源研究所", direction: "outbound", amount: 350000,
+      status: "pending", start_date: "2026-07-01", end_date: "2027-06-30",
+      contract_type: "service", sign_date: null, signer: "李知",
+      key_terms: "课题研究成果归双方共有，论文发表需共同署名"
+    },
+    // === 支出类合同（inbound / payable）===
+    {
+      title: "高性能计算服务器集群采购",
+      contract_no: "CG-SB-2026-007", party_a: "联想（北京）信息技术有限公司",
+      party_b: "交通科学研究院", direction: "inbound", amount: 520000,
+      status: "active", start_date: "2026-02-15", end_date: null,
+      contract_type: "procurement", sign_date: "2026-02-08", signer: "陈远",
+      key_terms: "三年原厂上门保修，7×24小时技术响应"
+    },
+    {
+      title: "实验检测仪器设备年度校准服务",
+      contract_no: "CG-FW-2026-008", party_a: "省计量科学研究院",
+      party_b: "工程检测技术有限公司", direction: "inbound", amount: 85000,
+      status: "completed", start_date: "2026-01-01", end_date: "2026-03-31",
+      contract_type: "procurement", sign_date: "2025-12-20", signer: "褚财",
+      key_terms: "现场校准，出具CNAS认可校准证书"
+    },
+    {
+      title: "办公场地租赁协议（主楼B座）",
+      contract_no: "ZL-2026-009", party_a: "高新科技园物业管理有限公司",
+      party_b: "信息科技有限公司", direction: "inbound", amount: 480000,
+      status: "active", start_date: "2026-01-01", end_date: "2027-12-31",
+      contract_type: "other", sign_date: "2025-12-15", signer: "刘运",
+      key_terms: "年付，含物业费、中央空调费，停车位另计"
+    },
+    {
+      title: "专利独占许可——路面裂缝自动识别算法",
+      patent: true as const,
+      contract_no: "IP-2026-010", party_a: "某高校自动化学院",
+      party_b: "智能交通工程技术有限公司", direction: "inbound", amount: 200000,
+      status: "pending", start_date: "2026-09-01", end_date: null,
+      contract_type: "other", sign_date: null, signer: "李交",
+      key_terms: "五年独占使用权，后续改进成果归属受让方"
+    },
+  ] : [
+    // tenant#2 演示用简化版
+    {
+      title: "企业数字化转型咨询服务合同",
+      contract_no: "FW-2026-101", party_a: "雄元科技有限公司",
+      party_b: "某制造集团有限公司", direction: "outbound", amount: 500000,
+      status: "active", start_date: "2026-02-01", end_date: "2026-08-31",
+      contract_type: "service", sign_date: "2026-01-20", signer: "张总",
+    },
+    {
+      title: "云服务器资源年度采购",
+      contract_no: "CG-2026-102", party_a: "阿里云计算有限公司",
+      party_b: "雄元科技有限公司", direction: "inbound", amount: 120000,
+      status: "active", start_date: "2026-01-01", end_date: "2026-12-31",
+      contract_type: "procurement", sign_date: "2025-12-15", signer: "张总",
+    },
+    {
+      title: "AI员工协作平台SaaS订阅服务",
+      contract_no: "FW-2026-103", party_a: "雄元科技有限公司",
+      party_b: "某创业孵化器有限公司", direction: "outbound", amount: 299000,
+      status: "draft", start_date: null, end_date: null,
+      contract_type: "service", sign_date: null, signer: null,
+    },
+  ];
+
+  for (const c of contracts) {
+    dbRun(
+      `INSERT INTO contracts
+       (tenant_id, title, contract_no, party_a, party_b, direction, amount, status,
+        start_date, end_date, contract_type, sign_date, key_terms)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+      [tenantId, c.title, c.contract_no, c.party_a, c.party_b,
+       c.direction, c.amount, c.status, c.start_date, c.end_date,
+       c.contract_type, c.sign_date, c.key_terms || null]
+    );
+  }
+
+  // === 付款计划已提取到独立函数 seedContractPayments() ===
+}
+
+// 合同付款计划种子数据——独立函数，可重复执行补建
+function seedContractPayments(tenantId: number) {
+  const isT1 = tenantId === 1;
+
+  // 检查是否已有足够多的付款计划，避免重复插入
+  const existing = dbGet("SELECT COUNT(*) as c FROM contract_payments WHERE tenant_id = ?", [tenantId]) as any;
+  if (existing.c > 10) { console.log(`[种子] tenant#${tenantId} 付款计划已存在 (${existing.c}条)，跳过`); return; }
+
+  const paymentPlans: Record<string, { label: string; amount: number; due_date: string; paid?: number; paid_date?: string }[]> = isT1 ? {
+    "KY-HT-2026-001": [
+      { label: "首期拨款（启动经费）", amount: 272000, due_date: "2026-02-15", paid: 1, paid_date: "2026-02-18" },
+      { label: "二期拨款（中期检查通过后）", amount: 204000, due_date: "2026-07-31", paid: 1, paid_date: "2026-08-05" },
+      { label: "三期拨款（结题验收后）", amount: 204000, due_date: "2026-06-25" },           // ⚠️ 已逾期1天！
+    ],
+    "HT-KF-2026-002": [
+      { label: "预付款（合同签订后）", amount: 375000, due_date: "2026-03-10", paid: 1, paid_date: "2026-03-15" },
+      { label: "开发中期款（原型交付）", amount: 437500, due_date: "2026-08-31", paid: 1, paid_date: "2026-09-02" },
+      { label: "验收款（系统上线运行）", amount: 437500, due_date: "2027-01-31" },
+    ],
+    "SB-CG-2026-003": [
+      { label: "设备到货款", amount: 210000, due_date: "2026-05-15", paid: 1, paid_date: "2026-05-20" },
+      { label: "安装调试款", amount: 126000, due_date: "2026-06-28" },                   // ⚠️ 2天后到期！
+      { label: "质保金（一年后）", amount: 84000, due_date: "2027-06-01" },
+    ],
+    "JC-DW-2026-004": [
+      { label: "Q1检测费", amount: 90000, due_date: "2026-04-01", paid: 1, paid_date: "2026-04-10" },
+      { label: "Q2检测费", amount: 90000, due_date: "2026-07-01", paid: 1, paid_date: "2026-07-08" },
+      { label: "Q3检测费", amount: 90000, due_date: "2026-07-02" },                        // ⚠️ 6天后到期！
+      { label: "Q4检测费", amount: 90000, due_date: "2027-01-01" },
+    ],
+    "RJ-KF-2026-005": [
+      { label: "启动款（项目立项）", amount: 178000, due_date: "2026-05-15", paid: 1, paid_date: "2026-05-20" },
+      { label: "迭代一期款（M1-M3交付）", amount: 267000, due_date: "2026-06-30" },        // ⚠️ 4天后到期！
+      { label: "迭代二期款（M4-M6交付）", amount: 267000, due_date: "2026-10-31" },
+      { label: "最终验收款", amount: 178000, due_date: "2026-12-15" },
+    ],
+    "CG-SB-2026-007": [
+      { label: "设备到货款", amount: 364000, due_date: "2026-03-15", paid: 1, paid_date: "2026-03-20" },
+      { label: "验收尾款", amount: 156000, due_date: "2026-04-30", paid: 1, paid_date: "2026-05-05" },
+    ],
+    "CG-FW-2026-008": [
+      { label: "年度校准费（全额）", amount: 85000, due_date: "2026-03-31", paid: 1, paid_date: "2026-03-28" },
+    ],
+    "ZL-2026-009": [
+      { label: "Q1租金", amount: 120000, due_date: "2026-01-05", paid: 1, paid_date: "2026-01-08" },
+      { label: "Q2租金", amount: 120000, due_date: "2026-04-05", paid: 1, paid_date: "2026-04-08" },
+      { label: "Q3租金", amount: 120000, due_date: "2026-07-05", paid: 1, paid_date: "2026-07-08" },
+      { label: "Q4租金", amount: 120000, due_date: "2026-07-03" },                        // ⚠️ 7天后到期！
+    ],
+  } : {
+    "FW-2026-101": [
+      { label: "咨询启动费", amount: 150000, due_date: "2026-03-01", paid: 1, paid_date: "2026-03-05" },
+      { label: "中期服务费", amount: 200000, due_date: "2026-06-30", paid: 1, paid_date: "2026-07-02" },
+      { label: "结项服务费", amount: 150000, due_date: "2026-06-24" },                       // ⚠️ 已逾期2天！
+    ],
+    "CG-2026-102": [
+      { label: "H1云资源费", amount: 60000, due_date: "2026-06-30", paid: 1, paid_date: "2026-07-01" },
+      { label: "H2云资源费", amount: 60000, due_date: "2026-12-31" },
+    ],
+  };
+
+  let totalPayments = 0;
+  for (const [contractNo, payments] of Object.entries(paymentPlans)) {
+    const contract = dbGet("SELECT id FROM contracts WHERE contract_no = ? AND tenant_id = ?", [contractNo, tenantId]) as any;
+    if (!contract) continue;
+    for (let i = 0; i < payments.length; i++) {
+      const p = payments[i];
+      dbRun(
+        `INSERT INTO contract_payments
+         (tenant_id, contract_id, payment_no, label, amount, paid, paid_date, due_date, completion_condition)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+        [tenantId, contract.id, i + 1, p.label, p.amount, p.paid || 0, p.paid_date || null, p.due_date,
+         (p.paid || 0) === 1 ? "已完成结算" : null]
+      );
+      totalPayments++;
+    }
+  }
+
+  console.log(`[种子] tenant#${tenantId} 付款计划已补建 (${totalPayments}条)`);
+}
+
+// ===== 资产模块种子数据 =====
+function seedAssets(tenantId: number) {
+  const isT1 = tenantId === 1;
+  console.log(`[种子] tenant#${tenantId} 资产种子开始...`);
+
+  // 辅助函数
+  const deptNameToId = (name: string) => {
+    const r = dbGet("SELECT id FROM departments WHERE name = ? AND tenant_id = ?", [name, tenantId]) as any;
+    return r?.id || null;
+  };
+  const getEmployeeId = (name: string) => {
+    const r = dbGet("SELECT id FROM employees WHERE name = ? AND tenant_id = ?", [name, tenantId]) as any;
+    return r?.id || null;
+  };
+
+  // 为租户添加项目标段部门（驻外监理机构）
+  const dmCenter = deptNameToId("交付管理中心");
+  if (dmCenter) {
+    const siteDepts = ["A标段试验室", "B标段试验室", "C标段试验室", "D标段试验室", "E标段试验室", "F标段试验室"];
+    for (const name of siteDepts) {
+      const exists = dbGet("SELECT id FROM departments WHERE name = ? AND tenant_id = ?", [name, tenantId]) as any;
+      if (!exists) {
+        dbRun("INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type) VALUES (1, ?, ?, 99, ?, ?, 'site_lab', 'site_lab')",
+          [name, dmCenter, `${name} — 驻外监理检测`, tenantId]);
+        console.log(`[种子] tenant#${tenantId} 创建部门: ${name}`);
+      }
+    }
+  }
+
+  const hqOffice = deptNameToId("行政中心");
+  const techCenter = deptNameToId("技术保障中心");
+  const productCenter = deptNameToId("产品研发中心");
+  const siteA = deptNameToId("A标段试验室");
+  const siteB = deptNameToId("B标段试验室");
+  const siteC = deptNameToId("C标段试验室");
+  const siteD = deptNameToId("D标段试验室");
+  const siteE = deptNameToId("E标段试验室");
+  const siteF = deptNameToId("F标段试验室");
+  const bizCenter = deptNameToId("商务中心");
+  const opsCenter = deptNameToId("运营中心");
+  const qmCenter = deptNameToId("质量管理与战略中心");
+  const fengXing = getEmployeeId("冯行");
+  const chuCai = getEmployeeId("褚财");
+  const qianJi = getEmployeeId("钱技");
+  const liJiao = getEmployeeId("李交");
+  const zhouQian = getEmployeeId("周前");
+  const wuHou = getEmployeeId("吴后");
+  const zhouShang = getEmployeeId("周商");
+  const wuYun = getEmployeeId("吴运");
+  const weiZhi = getEmployeeId("卫质");
+  const sunShu = getEmployeeId("孙数");
+
+  const allAssets: { assetNo: string; name: string; category: string; subCat?: string; model?: string; sn?: string; mfr?: string; date?: string; price: number; dept: number | null; custodian: number | null; loc?: string; status: string; calDate?: string; calCycle?: number; calNext?: string; plate?: string; vin?: string; bp?: string; seats?: number; nextInsp?: string; insuranceExp?: string; mileage?: number; os?: string; cpu?: string; ram?: string; disk?: string }[] = [
+    { assetNo: "INS-2026-001", name: "数显回弹仪", category: "INSTRUMENT", subCat: "强度检测", model: "HT-225D", sn: "SN225D-20260108", mfr: "北京智博联", date: "2026-01-08", price: 12800, dept: siteA, custodian: liJiao, loc: "A标段试验室1号工位", status: "in_use", calDate: "2026-05-08", calCycle: 6, calNext: "2026-11-08" },
+    { assetNo: "INS-2026-002", name: "全自动压力试验机", category: "INSTRUMENT", subCat: "力学检测", model: "YAW-3000", sn: "YAW3000-20250512", mfr: "济南试金", date: "2025-05-12", price: 168000, dept: siteA, custodian: liJiao, loc: "A标段试验室力学室", status: "in_use", calDate: "2025-11-12", calCycle: 12, calNext: "2026-04-12" },
+    { assetNo: "INS-2026-003", name: "激光断面仪", category: "INSTRUMENT", subCat: "路面检测", model: "LR-200", sn: "LR200-20260315", mfr: "武汉夕睿", date: "2026-03-15", price: 95000, dept: siteB, custodian: liJiao, loc: "B标段试验室检测车", status: "in_use", calDate: "2026-03-15", calCycle: 6, calNext: "2026-09-15" },
+    { assetNo: "INS-2026-004", name: "基桩动测仪", category: "INSTRUMENT", subCat: "桩基检测", model: "PIT-V", sn: "PITV-20250820", mfr: "美国PDI", date: "2025-08-20", price: 220000, dept: siteB, custodian: liJiao, loc: "B标段试验室", status: "in_use", calDate: "2025-08-20", calCycle: 12, calNext: "2026-06-15" },
+    { assetNo: "INS-2026-005", name: "钢筋扫描仪", category: "INSTRUMENT", subCat: "钢筋检测", model: "HC-GY71", sn: "GY71-20260401", mfr: "北京海创", date: "2026-04-01", price: 8600, dept: siteC, custodian: liJiao, loc: "C标段试验室", status: "in_use", calDate: "2026-04-01", calCycle: 12, calNext: "2027-04-01" },
+    { assetNo: "INS-2026-006", name: "沥青延度仪", category: "INSTRUMENT", subCat: "沥青检测", model: "SYD-4508C", sn: "4508C-20250901", mfr: "上海昌吉", date: "2025-09-01", price: 35000, dept: siteA, custodian: liJiao, loc: "A标段试验室沥青室", status: "in_use", calDate: "2025-09-01", calCycle: 12, calNext: "2026-06-20" },
+    { assetNo: "INS-2026-007", name: "核子密度仪（备用）", category: "INSTRUMENT", subCat: "压实度检测", model: "MC-3", sn: "MC3-20241015", mfr: "美国CPN", date: "2024-10-15", price: 185000, dept: siteA, custodian: null, loc: "A标段仓库", status: "idle" },
+    { assetNo: "VEH-2026-001", name: "丰田普拉多越野车", category: "VEHICLE", subCat: "越野车", model: "PRADO 3.5L VX", sn: "VIN-PRADO-20251001", mfr: "一汽丰田", date: "2025-10-01", price: 528000, dept: hqOffice, custodian: fengXing, loc: "总部地下车库B1-12", status: "in_use", plate: "京A·HY001", vin: "LFMG1E729JS000001", bp: "汽油", seats: 7, nextInsp: "2026-10-01", insuranceExp: "2026-07-25", mileage: 28560 },
+    { assetNo: "VEH-2026-002", name: "长城皮卡工程车", category: "VEHICLE", subCat: "皮卡", model: "风骏7 2.0T", sn: "VIN-FJ7-20260301", mfr: "长城汽车", date: "2026-03-01", price: 128000, dept: siteB, custodian: liJiao, loc: "B标段驻地停车场", status: "in_use", plate: "京B·GC002", vin: "LGWDBE195MB000002", bp: "柴油", seats: 5, nextInsp: "2027-03-01", insuranceExp: "2026-06-28", mileage: 18200 },
+    { assetNo: "VEH-2026-003", name: "五菱宏光面包车", category: "VEHICLE", subCat: "MPV", model: "五菱宏光S 1.5L", sn: "VIN-WLHG-20251208", mfr: "上汽通用五菱", date: "2025-12-08", price: 56000, dept: siteA, custodian: liJiao, loc: "A标段驻地", status: "in_use", plate: "京C·WL003", vin: "LZWADAGA4MG000003", bp: "汽油", seats: 7, nextInsp: "2026-12-08", insuranceExp: "2026-12-08", mileage: 34500 },
+    { assetNo: "VEH-2026-004", name: "比亚迪汉EV公务车", category: "VEHICLE", subCat: "轿车", model: "汉EV 创世版 715km", sn: "VIN-HAN-20260415", mfr: "比亚迪", date: "2026-04-15", price: 289800, dept: hqOffice, custodian: chuCai, loc: "总部地面停车场A-03", status: "in_use", plate: "京A·HD004", vin: "LC0CE4CB6N0000004", bp: "电动", seats: 5, nextInsp: "2028-04-15", insuranceExp: "2027-04-15", mileage: 5200 },
+    { assetNo: "OFF-2026-001", name: "Dell Precision工作站", category: "OFFICE", subCat: "工作站", model: "Precision 7920 Tower", sn: "DELL-7920-20260115", mfr: "Dell", date: "2026-01-15", price: 48000, dept: techCenter, custodian: qianJi, loc: "总部3楼机房", status: "in_use", os: "Ubuntu 22.04", cpu: "Xeon Gold 6248R", ram: "128GB", disk: "2TB SSD" },
+    { assetNo: "OFF-2026-002", name: "ThinkPad X1 Carbon", category: "OFFICE", subCat: "笔记本", model: "X1 Carbon Gen11", sn: "TP-X1C-20260320", mfr: "联想", date: "2026-03-20", price: 12999, dept: productCenter, custodian: zhouQian, loc: "总部4楼工位A12", status: "in_use", os: "Windows 11 Pro", cpu: "i7-1365U", ram: "32GB", disk: "1TB SSD" },
+    { assetNo: "OFF-2026-003", name: "HP LaserJet打印机", category: "OFFICE", subCat: "打印机", model: "LaserJet Pro M404dn", sn: "HP-M404-20251120", mfr: "惠普", date: "2025-11-20", price: 3200, dept: hqOffice, custodian: fengXing, loc: "总部行政办公室", status: "in_use" },
+    { assetNo: "OFF-2026-004", name: "会议一体机", category: "OFFICE", subCat: "会议设备", model: "MAXHUB V6 86寸", sn: "MH-V6-20260210", mfr: "MAXHUB", date: "2026-02-10", price: 45000, dept: hqOffice, custodian: fengXing, loc: "总部大会议室", status: "in_use", os: "Android 12.0", cpu: "A73+A53", ram: "8GB", disk: "64GB" },
+    { assetNo: "OFF-2026-005", name: "华为交换机S5735", category: "OFFICE", subCat: "网络设备", model: "S5735-L48T4X-A", sn: "HW-S5735-20250901", mfr: "华为", date: "2025-09-01", price: 15800, dept: techCenter, custodian: wuHou, loc: "总部机房机柜B2", status: "in_use" },
+    { assetNo: "OFF-2026-006", name: "联想台式机（备用）", category: "OFFICE", subCat: "台式机", model: "启天M450-N000", sn: "LN-M450-20251225", mfr: "联想", date: "2025-12-25", price: 4500, dept: hqOffice, custodian: null, loc: "总部库房", status: "idle" },
+    { assetNo: "TOL-2026-001", name: "徕卡激光测距仪", category: "TOOL", subCat: "测量工具", model: "DISTO X4", sn: "LX4-20260201", mfr: "Leica", date: "2026-02-01", price: 3200, dept: siteA, custodian: liJiao, loc: "A标段工具柜", status: "in_use" },
+    { assetNo: "TOL-2026-002", name: "数字扭矩扳手", category: "TOOL", subCat: "紧固工具", model: "MWD-500", sn: "MWD500-20260110", mfr: "台湾美沃奇", date: "2026-01-10", price: 2800, dept: siteB, custodian: liJiao, loc: "B标段工具柜", status: "in_use" },
+    { assetNo: "TOL-2026-003", name: "裂缝宽度观测仪", category: "TOOL", subCat: "观测工具", model: "HC-CK102", sn: "CK102-20251101", mfr: "北京海创", date: "2025-11-01", price: 4800, dept: siteC, custodian: null, loc: "C标段（已报失）", status: "lost" },
+    { assetNo: "TOL-2026-004", name: "电子水准仪标尺", category: "TOOL", subCat: "测量工具", model: "GPCL3", sn: "GPCL3-20250801", mfr: "南方测绘", date: "2025-08-01", price: 1800, dept: siteB, custodian: liJiao, loc: "B标段仓库", status: "idle" },
+    { assetNo: "TOL-2026-005", name: "混凝土钻孔取芯机", category: "TOOL", subCat: "取样工具", model: "HZ-20A", sn: "HZ20A-20251001", mfr: "浙江土工仪器", date: "2025-10-01", price: 15000, dept: siteA, custodian: liJiao, loc: "A标段工具房", status: "repairing" },
+    // ===== 第二批：D/E/F标段 + 业务部门资产 =====
+    { assetNo: "INS-2026-008", name: "全站仪", category: "INSTRUMENT", subCat: "测量仪器", model: "TS16 1\"", sn: "TS16-20260215", mfr: "Leica", date: "2026-02-15", price: 198000, dept: siteD, custodian: liJiao, loc: "D标段测量室", status: "in_use", calDate: "2026-02-15", calCycle: 12, calNext: "2027-02-15" },
+    { assetNo: "INS-2026-009", name: "混凝土渗透仪", category: "INSTRUMENT", subCat: "耐久性检测", model: "HS-40", sn: "HS40-20260301", mfr: "天津建仪", date: "2026-03-01", price: 42000, dept: siteD, custodian: liJiao, loc: "D标段试验室", status: "in_use", calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },
+    { assetNo: "INS-2026-010", name: "桥梁挠度检测仪", category: "INSTRUMENT", subCat: "桥梁检测", model: "BJQN-V5.0", sn: "BJQN-20260410", mfr: "北京光电", date: "2026-04-10", price: 156000, dept: siteE, custodian: liJiao, loc: "E标段桥梁检测室", status: "in_use", calDate: "2026-04-10", calCycle: 6, calNext: "2026-10-10" },
+    { assetNo: "INS-2026-011", name: "超声测厚仪", category: "INSTRUMENT", subCat: "钢结构检测", model: "DMS-2TC", sn: "DMS2TC-20260105", mfr: "北京时代", date: "2026-01-05", price: 38000, dept: siteE, custodian: liJiao, loc: "E标段钢结构检测室", status: "in_use", calDate: "2026-01-05", calCycle: 12, calNext: "2027-01-05" },
+    { assetNo: "INS-2026-012", name: "桩基完整性测试仪", category: "INSTRUMENT", subCat: "桩基检测", model: "PIT-W", sn: "PITW-20260520", mfr: "美国PDI", date: "2026-05-20", price: 245000, dept: siteF, custodian: liJiao, loc: "F标段桩基检测室", status: "in_use", calDate: "2026-05-20", calCycle: 6, calNext: "2026-11-20" },
+    { assetNo: "INS-2026-013", name: "GPS-RTK测量仪", category: "INSTRUMENT", subCat: "测量仪器", model: "iRTK5", sn: "iRTK5-20251201", mfr: "中海达", date: "2025-12-01", price: 68000, dept: dmCenter, custodian: liJiao, loc: "交付中心外出巡检车", status: "in_use", calDate: "2025-12-01", calCycle: 12, calNext: "2026-12-01" },
+    { assetNo: "INS-2026-014", name: "涂层测厚仪", category: "INSTRUMENT", subCat: "钢结构检测", model: "TT260", sn: "TT260-20260320", mfr: "北京时代", date: "2026-03-20", price: 18000, dept: bizCenter, custodian: zhouShang, loc: "商务中心设备室", status: "in_use", calDate: "2026-03-20", calCycle: 6, calNext: "2026-09-20" },
+    { assetNo: "INS-2026-015", name: "标准恒温养护箱", category: "INSTRUMENT", subCat: "养护设备", model: "YH-40B", sn: "YH40B-20260120", mfr: "无锡建仪", date: "2026-01-20", price: 32000, dept: qmCenter, custodian: weiZhi, loc: "质量中心养护室", status: "in_use", calDate: "2026-01-20", calCycle: 12, calNext: "2027-01-20" },
+    // 新增车辆 4辆
+    { assetNo: "VEH-2026-005", name: "江铃域虎7工程车", category: "VEHICLE", subCat: "皮卡", model: "域虎7 2.0T", sn: "VIN-YH7-20260401", mfr: "江铃汽车", date: "2026-04-01", price: 138000, dept: siteD, custodian: liJiao, loc: "D标段驻地", status: "in_use", plate: "京D·YH005", vin: "LEFEDEF16MT000005", bp: "柴油", seats: 5, nextInsp: "2027-04-01", insuranceExp: "2026-12-15", mileage: 12500 },
+    { assetNo: "VEH-2026-006", name: "日产纳瓦拉皮卡", category: "VEHICLE", subCat: "皮卡", model: "纳瓦拉 2.5L", sn: "VIN-NVL-20260315", mfr: "郑州日产", date: "2026-03-15", price: 169800, dept: siteE, custodian: liJiao, loc: "E标段驻地", status: "in_use", plate: "京E·NV006", vin: "LJNTGU5G9MN000006", bp: "汽油", seats: 5, nextInsp: "2027-03-15", insuranceExp: "2026-09-20", mileage: 9800 },
+    { assetNo: "VEH-2026-007", name: "福田皮卡工程车", category: "VEHICLE", subCat: "皮卡", model: "拓陆者E7 2.0T", sn: "VIN-FT07-20260220", mfr: "福田汽车", date: "2026-02-20", price: 116000, dept: siteF, custodian: liJiao, loc: "F标段驻地", status: "in_use", plate: "京F·FT007", vin: "LVAV2MAB2ME000007", bp: "柴油", seats: 5, nextInsp: "2027-02-20", insuranceExp: "2027-02-20", mileage: 22000 },
+    { assetNo: "VEH-2026-008", name: "金杯海狮检测车", category: "VEHICLE", subCat: "MPV", model: "海狮王 2.4L", sn: "VIN-HSW-20260108", mfr: "华晨金杯", date: "2026-01-08", price: 145000, dept: dmCenter, custodian: liJiao, loc: "交付中心停车场", status: "in_use", plate: "京G·HS008", vin: "LSYADABF3MK000008", bp: "汽油", seats: 12, nextInsp: "2027-01-08", insuranceExp: "2027-01-08", mileage: 18800 },
+    // 新增办公设备 6件
+    { assetNo: "OFF-2026-007", name: "AOC 4K显示器", category: "OFFICE", subCat: "显示器", model: "U2790PQU", sn: "AOC-U2790-20260201", mfr: "AOC", date: "2026-02-01", price: 2800, dept: dmCenter, custodian: liJiao, loc: "交付中心工位A1", status: "in_use" },
+    { assetNo: "OFF-2026-008", name: "联想ThinkStation P360", category: "OFFICE", subCat: "工作站", model: "P360 Ultra", sn: "LEN-P360-20260310", mfr: "联想", date: "2026-03-10", price: 22000, dept: dmCenter, custodian: liJiao, loc: "交付中心数据处理室", status: "in_use", os: "Windows 11 Pro", cpu: "i7-12700", ram: "64GB", disk: "1TB SSD" },
+    { assetNo: "OFF-2026-009", name: "联想ThinkPad T14", category: "OFFICE", subCat: "笔记本", model: "T14 Gen4", sn: "TP-T14-20260405", mfr: "联想", date: "2026-04-05", price: 11500, dept: bizCenter, custodian: zhouShang, loc: "商务中心移动办公", status: "in_use", os: "Windows 11 Pro", cpu: "i7-1355U", ram: "32GB", disk: "512GB SSD" },
+    { assetNo: "OFF-2026-010", name: "HP彩色激光打印机", category: "OFFICE", subCat: "打印机", model: "Color LaserJet Pro M454dw", sn: "HP-M454-20251201", mfr: "惠普", date: "2025-12-01", price: 5800, dept: bizCenter, custodian: zhouShang, loc: "商务中心打印室", status: "in_use" },
+    { assetNo: "OFF-2026-011", name: "Apple iMac 24寸", category: "OFFICE", subCat: "一体机", model: "iMac M3 24\"", sn: "iMac-M3-20260501", mfr: "Apple", date: "2026-05-01", price: 14999, dept: opsCenter, custodian: wuYun, loc: "运营中心工位C3", status: "in_use", os: "macOS Sequoia", cpu: "M3", ram: "24GB", disk: "512GB SSD" },
+    { assetNo: "OFF-2026-012", name: "极米投影仪H6", category: "OFFICE", subCat: "会议设备", model: "H6 4K", sn: "JM-H6-20260315", mfr: "极米", date: "2026-03-15", price: 6999, dept: opsCenter, custodian: wuYun, loc: "运营中心会议室", status: "in_use", os: "Android TV", cpu: "MT9669", ram: "4GB", disk: "64GB" },
+    // 新增小型工具 6件
+    { assetNo: "TOL-2026-006", name: "红外测温仪", category: "TOOL", subCat: "测温工具", model: "FLIR E8-XT", sn: "FLIR-E8-20260401", mfr: "FLIR", date: "2026-04-01", price: 18000, dept: siteD, custodian: liJiao, loc: "D标段工具柜", status: "in_use" },
+    { assetNo: "TOL-2026-007", name: "超声波探伤仪", category: "TOOL", subCat: "探伤工具", model: "CTS-9009", sn: "CTS9009-20260210", mfr: "汕头超声", date: "2026-02-10", price: 35000, dept: siteD, custodian: liJiao, loc: "D标段检测室", status: "in_use" },
+    { assetNo: "TOL-2026-008", name: "数字温度记录仪", category: "TOOL", subCat: "记录设备", model: "TR-71wb", sn: "TR71-20260115", mfr: "T&D", date: "2026-01-15", price: 4500, dept: siteE, custodian: liJiao, loc: "E标段养护监控室", status: "in_use" },
+    { assetNo: "TOL-2026-009", name: "弹簧拉力计", category: "TOOL", subCat: "力学工具", model: "NK-500", sn: "NK500-20251201", mfr: "山度仪器", date: "2025-12-01", price: 2200, dept: siteF, custodian: liJiao, loc: "F标段工具柜", status: "in_use" },
+    { assetNo: "TOL-2026-010", name: "电子天平", category: "TOOL", subCat: "称量工具", model: "JA5003N", sn: "JA5003-20260120", mfr: "上海精科", date: "2026-01-20", price: 3800, dept: siteF, custodian: liJiao, loc: "F标段称量室", status: "in_use" },
+    { assetNo: "TOL-2026-011", name: "激光垂准仪（备用）", category: "TOOL", subCat: "测量工具", model: "DZJ-300", sn: "DZJ300-20251001", mfr: "博飞仪器", date: "2025-10-01", price: 12000, dept: dmCenter, custodian: null, loc: "交付中心仓库", status: "idle" },
+    // ===== 第三批：深度问题场景（覆盖分布式管理六大痛点维度） =====
+    // 痛点1: 外派自行采购不报备 — F标段买仪器3月未登记
+    { assetNo: "INS-2026-016", name: "混凝土电阻率仪", category: "INSTRUMENT", subCat: "耐久性检测", model: "R-Meter MK3", sn: "RMK3-20260301", mfr: "瑞士Proceq", date: "2026-03-01", price: 86000, dept: siteF, custodian: liJiao, loc: "F标段耐久性试验室", status: "in_use", calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },
+    // 痛点2: 标段间重复采购 — B标段买了和A标段同型号回弹仪（应共享而非重购）
+    { assetNo: "INS-2026-017", name: "数显回弹仪（B标自购）", category: "INSTRUMENT", subCat: "强度检测", model: "HT-225D", sn: "SN225D-20260415", mfr: "北京智博联", date: "2026-04-15", price: 13000, dept: siteB, custodian: liJiao, loc: "B标段试验室2号工位", status: "in_use", calDate: "2026-04-15", calCycle: 6, calNext: "2026-10-15" },
+    // 痛点3: 报废资产未下账 — A标段旧压力机实际已报废但系统状态仍为in_stock
+    { assetNo: "INS-2026-018", name: "老旧万能试验机（已报废）", category: "INSTRUMENT", subCat: "力学检测", model: "WE-1000B", sn: "WE1000-20180301", mfr: "济南试金", date: "2018-03-01", price: 45000, dept: siteA, custodian: null, loc: "A标段废弃设备区", status: "in_stock", calDate: "2022-09-01", calCycle: 12, calNext: "2023-09-01" },
+    // 痛点4: 借出外部未归还 — E标段测斜仪借给合作单位超期未还
+    { assetNo: "INS-2026-019", name: "滑动式测斜仪", category: "INSTRUMENT", subCat: "变形监测", model: "CX-901F", sn: "CX901-20250601", mfr: "北京航天", date: "2025-06-01", price: 125000, dept: siteE, custodian: null, loc: "借给中铁XX局未归还", status: "idle", calDate: "2025-06-01", calCycle: 12, calNext: "2026-06-01" },
+    // 痛点5: 公车私用嫌疑 — C标段车辆非工作时间使用频繁
+    { assetNo: "VEH-2026-009", name: "日产奇骏巡查车", category: "VEHICLE", subCat: "SUV", model: "奇骏 2.5L 4WD", sn: "VIN-QJ-20251101", mfr: "东风日产", date: "2025-11-01", price: 218000, dept: siteC, custodian: liJiao, loc: "C标段驻地", status: "in_use", plate: "京C·QJ009", vin: "LGBM2DE47MS000009", bp: "汽油", seats: 5, nextInsp: "2026-11-01", insuranceExp: "2026-05-15", mileage: 42300 },
+    // 痛点6: 维修费用异常 — D标段哈弗一年修3次花费高
+    { assetNo: "VEH-2026-010", name: "长城哈弗H9", category: "VEHICLE", subCat: "SUV", model: "哈弗H9 2.0T 四驱", sn: "VIN-H9-20250801", mfr: "长城汽车", date: "2025-08-01", price: 258000, dept: siteD, custodian: liJiao, loc: "D标段驻地", status: "in_use", plate: "京D·HH010", vin: "LGWFF7A56MH000010", bp: "柴油", seats: 7, nextInsp: "2026-08-01", insuranceExp: "2026-08-01", mileage: 31500 },
+    // 痛点7: 外派车辆长期闲置 — F标段依维柯极少使用
+    { assetNo: "VEH-2026-011", name: "依维柯检测车", category: "VEHICLE", subCat: "专项作业车", model: "Daily 3.0T", sn: "VIN-YWK-20241015", mfr: "南京依维柯", date: "2024-10-15", price: 320000, dept: siteF, custodian: null, loc: "F标段（长期闲置）", status: "idle", plate: "京F·YW011", vin: "LNYNBAA30MV000011", bp: "柴油", seats: 17, nextInsp: "2026-10-15", insuranceExp: "2026-10-15", mileage: 3200 },
+    // 痛点8: 离职员工资产未回收 — D标段技术员离职笔记本未归还
+    { assetNo: "OFF-2026-013", name: "Lenovo ThinkPad E15", category: "OFFICE", subCat: "笔记本", model: "E15 Gen4", sn: "TP-E15-20260110", mfr: "联想", date: "2026-01-10", price: 6500, dept: siteD, custodian: zhouShang, loc: "D标段（持有人已离职）", status: "in_use", os: "Windows 11 Pro", cpu: "i5-1235U", ram: "16GB", disk: "512GB SSD" },
+    // 痛点9: 新购未拆封虚增资产 — F标段UPS买了但未启用
+    { assetNo: "OFF-2026-014", name: "山特UPS不间断电源", category: "OFFICE", subCat: "电源设备", model: "C6KS 6kVA", sn: "STK-C6KS-20260501", mfr: "山特", date: "2026-05-01", price: 12000, dept: siteF, custodian: null, loc: "F标段库房（未拆封）", status: "in_stock" },
+    // 痛点10: 废旧办公设备未处置 — A标段台式机报废多年还挂着
+    { assetNo: "OFF-2026-015", name: "老旧联想台式机（待报废）", category: "OFFICE", subCat: "台式机", model: "启天M4350", sn: "LN-M4350-20190601", mfr: "联想", date: "2019-06-01", price: 3500, dept: siteA, custodian: null, loc: "A标段废弃设备区", status: "idle" },
+    // 痛点11: 外派点自行采购不备案 — C标段自行购买扫描仪未走采购流程
+    { assetNo: "OFF-2026-016", name: "Canon高速扫描仪", category: "OFFICE", subCat: "办公外设", model: "DR-M260", sn: "CN-M260-20260315", mfr: "佳能", date: "2026-03-15", price: 9800, dept: siteC, custodian: liJiao, loc: "C标段资料室", status: "in_use" },
+    // 痛点12: 损坏工具不报修 — E标段硬度计坏了3个月系统仍显示正常
+    { assetNo: "TOL-2026-012", name: "便携式里氏硬度计", category: "TOOL", subCat: "硬度测试", model: "TH110", sn: "TH110-20250901", mfr: "北京时代", date: "2025-09-01", price: 8500, dept: siteE, custodian: liJiao, loc: "E标段工具柜", status: "in_use" },
+    // 痛点13: 保管人信息不准 — D标段卡尺登记保管人是B标段员工
+    { assetNo: "TOL-2026-013", name: "数显卡尺", category: "TOOL", subCat: "测量工具", model: "500-196-30", sn: "MTG-196-20251201", mfr: "Mitutoyo", date: "2025-12-01", price: 2600, dept: siteD, custodian: zhouShang, loc: "D标段测量室", status: "in_use" },
+    // 痛点14: 标段间私下借用 — B标段砝码被A标段拿走未登记
+    { assetNo: "TOL-2026-014", name: "标准砝码组", category: "TOOL", subCat: "校准工具", model: "F1级 1mg-1kg", sn: "FM-F1-20250801", mfr: "上海实润", date: "2025-08-01", price: 9500, dept: siteB, custodian: liJiao, loc: "A标段（从B标段借用未还）", status: "in_use" },
+  ];
+
+  const assetIds: number[] = [];
+  const anoPrefix = isT1 ? "" : "DEMO-";
+  for (const a of allAssets) {
+    const r = dbRun(
+      `INSERT INTO assets (asset_no, name, category, sub_category, model, sn, manufacturer,
+        purchase_date, purchase_price, expected_life, status, owner_type,
+        department_id, location_detail, custodian_id, remark, tenant_id, created_by, warranty_expire_date)
+       VALUES (?,?,?,?,?,?,?,?,?,?,?,'owned',?,?,?,?,?,?,?)`,
+      [anoPrefix + a.assetNo, a.name, a.category, a.subCat || null, a.model || null,
+       a.sn || null, a.mfr || null, a.date || null, a.price, 60, a.status,
+       a.dept, a.loc || null, a.custodian, null, tenantId, 1, addMonths(a.date, 60)]
+    );
+    assetIds.push(r.lastInsertRowid as number);
+  }
+
+  // 车辆车牌也需去重：全局UNIQUE约束要求不同租户不能共用同车牌
+  const platePrefix = isT1 ? "" : "DEMO-";
+
+  // 仪器扩展数据（前15件，新增8件）
+  const instrumentExts = [
+    { calDate: "2026-05-08", calCycle: 6, calNext: "2026-11-08" },
+    { calDate: "2025-11-12", calCycle: 12, calNext: "2026-04-12" },
+    { calDate: "2026-03-15", calCycle: 6, calNext: "2026-09-15" },
+    { calDate: "2025-08-20", calCycle: 12, calNext: "2026-06-15" },
+    { calDate: "2026-04-01", calCycle: 12, calNext: "2027-04-01" },
+    { calDate: "2025-09-01", calCycle: 12, calNext: "2026-06-20" },
+    null,
+    // 新增8件仪器
+    { calDate: "2026-02-15", calCycle: 12, calNext: "2027-02-15" },
+    { calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },
+    { calDate: "2026-04-10", calCycle: 6, calNext: "2026-10-10" },
+    { calDate: "2026-01-05", calCycle: 12, calNext: "2027-01-05" },
+    { calDate: "2026-05-20", calCycle: 6, calNext: "2026-11-20" },
+    { calDate: "2025-12-01", calCycle: 12, calNext: "2026-12-01" },
+    { calDate: "2026-03-20", calCycle: 6, calNext: "2026-09-20" },
+    { calDate: "2026-01-20", calCycle: 12, calNext: "2027-01-20" },
+    // 第三批：4件（索引46-49）INS-016 ~ INS-019
+    { calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },    // INS-016 电阻率仪（外派自行采购3月未登记，但仪器已校准）
+    { calDate: "2026-04-15", calCycle: 6, calNext: "2026-10-15" },      // INS-017 回弹仪B标（重复采购，买了和A标段同型号）
+    { calDate: "2022-09-01", calCycle: 12, calNext: "2023-09-01" },     // INS-018 旧万能机（校准过期近3年！实际已报废）
+    { calDate: "2025-06-01", calCycle: 12, calNext: "2026-06-01" },     // INS-019 测斜仪（借出外部，校准已过期27天）
+  ];
+  for (let i = 0; i < instrumentExts.length; i++) {
+    const e = instrumentExts[i];
+    if (e) {
+      dbRun("INSERT INTO asset_instruments (asset_id, last_calibration, next_calibration, calibration_cycle) VALUES (?,?,?,?)",
+        [assetIds[i], e.calDate, e.calNext, e.calCycle]);
+    }
+  }
+
+  // 车辆扩展数据（索引7-10）+ 使用日志
+  const vehicleExts = [
+    { plate: "京A·HY001", vin: "LFMG1E729JS000001", bp: "汽油", seats: 7, nextInsp: "2026-10-01", insuranceExp: "2026-07-25", mileage: 28560, logs: [
+      { type: "refuel", cost: 680, mileage: 12500, date: "2026-03-15", desc: "京藏高速服务区加油 95#" },
+      { type: "refuel", cost: 720, mileage: 18600, date: "2026-04-22", desc: "城区中石化加油" },
+      { type: "maintenance", cost: 3200, mileage: 20000, date: "2026-05-05", desc: "2万公里常规保养" },
+      { type: "refuel", cost: 650, mileage: 24500, date: "2026-06-10", desc: "张家口出差加油" },
+      { type: "other", cost: 3500, mileage: 28000, date: "2026-06-20", desc: "更换四条轮胎" },
+    ] },
+    { plate: "京B·GC002", vin: "LGWDBE195MB000002", bp: "柴油", seats: 5, nextInsp: "2027-03-01", insuranceExp: "2026-06-28", mileage: 18200, logs: [
+      { type: "refuel", cost: 420, mileage: 8000, date: "2026-04-10", desc: "B标段附近加油站 0#柴油" },
+      { type: "refuel", cost: 380, mileage: 13500, date: "2026-05-18", desc: "出差采样加油" },
+      { type: "traffic_fine", cost: 200, mileage: 15000, date: "2026-06-05", desc: "G6高速超速 罚200记3分" },
+      { type: "maintenance", cost: 800, mileage: 16000, date: "2026-06-15", desc: "首保 更换机油机滤" },
+    ] },
+    { plate: "京C·WL003", vin: "LZWADAGA4MG000003", bp: "汽油", seats: 7, nextInsp: "2026-12-08", insuranceExp: "2026-12-08", mileage: 34500, logs: [
+      { type: "refuel", cost: 350, mileage: 15000, date: "2026-03-20", desc: "A标段附近加油站 92#" },
+      { type: "refuel", cost: 320, mileage: 22000, date: "2026-05-01", desc: "送检样品加油" },
+      { type: "insurance", cost: 3800, mileage: 30000, date: "2026-06-01", desc: "续保交强险+商业险" },
+      { type: "annual_inspection", cost: 500, mileage: 30000, date: "2026-06-10", desc: "年检上线检测" },
+    ] },
+    { plate: "京A·HD004", vin: "LC0CE4CB6N0000004", bp: "电动", seats: 5, nextInsp: "2028-04-15", insuranceExp: "2027-04-15", mileage: 5200, logs: [
+      { type: "refuel", cost: 85, mileage: 1200, date: "2026-05-01", desc: "特来电充电 62kWh" },
+      { type: "refuel", cost: 120, mileage: 3200, date: "2026-05-25", desc: "国网充电桩 88kWh" },
+      { type: "other", cost: 2600, mileage: 3800, date: "2026-06-15", desc: "安装家用充电桩" },
+    ] },
+  ];
+  const vOffset = 7;
+  for (let i = 0; i < vehicleExts.length; i++) {
+    const v = vehicleExts[i];
+    dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
+      [assetIds[vOffset + i], platePrefix + v.plate, v.vin, v.bp, v.seats, v.nextInsp, v.insuranceExp, v.mileage]);
+    for (const log of v.logs) {
+      dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
+        [assetIds[vOffset + i], log.type, log.cost, log.mileage, log.date, log.desc, tenantId]);
+    }
+  }
+
+  // 第二批车辆扩展（D/E/F标段 + 交付中心，索引30-33）
+  const vehicleExts2 = [
+    { plate: "京D·YH005", vin: "LEFEDEF16MT000005", bp: "柴油", seats: 5, nextInsp: "2027-04-01", insuranceExp: "2026-12-15", mileage: 12500, logs: [
+      { type: "refuel", cost: 380, mileage: 4200, date: "2026-04-20", desc: "D标段加油站 0#柴油" },
+      { type: "maintenance", cost: 1200, mileage: 8000, date: "2026-05-15", desc: "首保 更换机油三滤" },
+      { type: "refuel", cost: 450, mileage: 10500, date: "2026-06-10", desc: "送检桥梁构件加油" },
+    ] },
+    { plate: "京E·NV006", vin: "LJNTGU5G9MN000006", bp: "汽油", seats: 5, nextInsp: "2027-03-15", insuranceExp: "2026-09-20", mileage: 9800, logs: [
+      { type: "refuel", cost: 520, mileage: 3500, date: "2026-04-05", desc: "E标段附近加油站 92#" },
+      { type: "refuel", cost: 480, mileage: 6800, date: "2026-05-20", desc: "钢结构检测出差加油" },
+      { type: "traffic_fine", cost: 100, mileage: 8000, date: "2026-06-18", desc: "违停罚款 100元" },
+    ] },
+    { plate: "京F·FT007", vin: "LVAV2MAB2ME000007", bp: "柴油", seats: 5, nextInsp: "2027-02-20", insuranceExp: "2027-02-20", mileage: 22000, logs: [
+      { type: "refuel", cost: 360, mileage: 12000, date: "2026-03-10", desc: "F标段工地加油" },
+      { type: "maintenance", cost: 1500, mileage: 18000, date: "2026-05-01", desc: "2万公里大保养" },
+      { type: "refuel", cost: 390, mileage: 20000, date: "2026-06-05", desc: "桩基检测送样加油" },
+      { type: "insurance", cost: 4600, mileage: 22000, date: "2026-06-20", desc: "续保商业险+三者险" },
+    ] },
+    { plate: "京G·HS008", vin: "LSYADABF3MK000008", bp: "汽油", seats: 12, nextInsp: "2027-01-08", insuranceExp: "2027-01-08", mileage: 18800, logs: [
+      { type: "refuel", cost: 580, mileage: 8000, date: "2026-02-20", desc: "交付中心车队加油" },
+      { type: "refuel", cost: 620, mileage: 12500, date: "2026-04-15", desc: "跨标段巡检加油" },
+      { type: "maintenance", cost: 950, mileage: 15000, date: "2026-05-10", desc: "1.5万公里常规保养" },
+      { type: "refuel", cost: 550, mileage: 17500, date: "2026-06-15", desc: "D标段工地送设备加油" },
+    ] },
+  ];
+  const vOffset2 = 30;  // 新车辆从allAssets索引30开始
+  for (let i = 0; i < vehicleExts2.length; i++) {
+    const v = vehicleExts2[i];
+    dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
+      [assetIds[vOffset2 + i], platePrefix + v.plate, v.vin, v.bp, v.seats, v.nextInsp, v.insuranceExp, v.mileage]);
+    for (const log of v.logs) {
+      dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
+        [assetIds[vOffset2 + i], log.type, log.cost, log.mileage, log.date, log.desc, tenantId]);
+    }
+  }
+
+  // 第三批车辆扩展（索引50-52：奇骏公车私用、哈弗维修异常、依维柯闲置）
+  const vehicleExts3 = [
+    { plate: "京C·QJ009", vin: "LGBM2DE47MS000009", bp: "汽油", seats: 5, nextInsp: "2026-11-01", insuranceExp: "2026-05-15", mileage: 42300, logs: [
+      { type: "refuel", cost: 520, mileage: 18000, date: "2026-03-05", desc: "C标段附近加油站 92#" },
+      { type: "refuel", cost: 480, mileage: 23500, date: "2026-04-10", desc: "市区加油站（非工作日出车）⚠️公车私用嫌疑" },
+      { type: "traffic_fine", cost: 200, mileage: 28000, date: "2026-05-01", desc: "景区违停罚款（五一假期）⚠️非公务出行" },
+      { type: "refuel", cost: 550, mileage: 34000, date: "2026-05-30", desc: "高速服务区加油（周末出车）" },
+      { type: "other", cost: 800, mileage: 40000, date: "2026-06-15", desc: "车内饰清洗&空调保养（非必须）" },
+      { type: "traffic_fine", cost: 300, mileage: 42300, date: "2026-06-25", desc: "夜间超速抓拍（22:35 非工作时段）⚠️第三次违规" },
+    ] },
+    { plate: "京D·HH010", vin: "LGWFF7A56MH000010", bp: "柴油", seats: 7, nextInsp: "2026-08-01", insuranceExp: "2026-08-01", mileage: 31500, logs: [
+      { type: "refuel", cost: 450, mileage: 8000, date: "2025-11-15", desc: "D标段附近加油站 0#柴油" },
+      { type: "maintenance", cost: 6800, mileage: 11000, date: "2025-12-20", desc: "⚠️ 涡轮增压器维修（意外故障 不在保修期）" },
+      { type: "refuel", cost: 480, mileage: 16000, date: "2026-02-10", desc: "跨标段巡检加油" },
+      { type: "maintenance", cost: 12500, mileage: 20000, date: "2026-04-05", desc: "⚠️ 变速箱大修（质保期内但判定人为操作不当）" },
+      { type: "insurance", cost: 5800, mileage: 25000, date: "2026-05-20", desc: "出险维修前保险杠（单方事故）" },
+      { type: "other", cost: 4200, mileage: 30000, date: "2026-06-10", desc: "⚠️ 更换四条AT越野胎（原厂胎不到一年即报废）" },
+    ] },
+    { plate: "京F·YW011", vin: "LNYNBAA30MV000011", bp: "柴油", seats: 17, nextInsp: "2026-10-15", insuranceExp: "2026-10-15", mileage: 3200, logs: [
+      { type: "refuel", cost: 680, mileage: 50, date: "2024-10-20", desc: "首次加油（交车时）" },
+      { type: "refuel", cost: 650, mileage: 1200, date: "2025-03-01", desc: "F标段开工仪式运输物资" },
+      { type: "maintenance", cost: 1800, mileage: 3000, date: "2025-10-15", desc: "年检前保养（实际为强制年检要求）" },
+      { type: "insurance", cost: 7800, mileage: 3200, date: "2025-10-20", desc: "续保（车辆极少使用但仍需全额投保）⚠️沉没成本" },
+      { type: "other", cost: 2000, mileage: 3200, date: "2026-06-01", desc: "停车管理费年缴（闲置14个月仅行驶3200km）" },
+    ] },
+  ];
+  const vOffset3 = 50;  // 第三批车辆从 allAssets 索引50开始
+  for (let i = 0; i < vehicleExts3.length; i++) {
+    const v = vehicleExts3[i];
+    dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
+      [assetIds[vOffset3 + i], platePrefix + v.plate, v.vin, v.bp, v.seats, v.nextInsp, v.insuranceExp, v.mileage]);
+    for (const log of v.logs) {
+      dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
+        [assetIds[vOffset3 + i], log.type, log.cost, log.mileage, log.date, log.desc, tenantId]);
+    }
+  }
+
+  // 办公设备扩展（索引11-16中的3件有OS信息）
+  const officeData = [
+    { idx: 0, os: "Ubuntu 22.04", cpu: "Xeon Gold 6248R", ram: "128GB", disk: "2TB SSD" },
+    { idx: 1, os: "Windows 11 Pro", cpu: "i7-1365U", ram: "32GB", disk: "1TB SSD" },
+    { idx: 3, os: "Android 12.0", cpu: "A73+A53", ram: "8GB", disk: "64GB" },
+  ];
+  const oOffset = 11;
+  for (const d of officeData) {
+    dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
+      [assetIds[oOffset + d.idx], d.os, d.cpu, d.ram, d.disk]);
+  }
+
+  // 第二批办公设备扩展（索引34-39，其中3件有OS）
+  const officeData2 = [
+    { idx: 1, os: "Windows 11 Pro", cpu: "i7-12700", ram: "64GB", disk: "1TB SSD" },  // ThinkStation
+    { idx: 2, os: "Windows 11 Pro", cpu: "i7-1355U", ram: "32GB", disk: "512GB SSD" }, // ThinkPad T14
+    { idx: 4, os: "macOS Sequoia", cpu: "M3", ram: "24GB", disk: "512GB SSD" },       // iMac
+    { idx: 5, os: "Android TV", cpu: "MT9669", ram: "4GB", disk: "64GB" },             // 投影仪
+  ];
+  const oOffset2 = 34;
+  for (const d of officeData2) {
+    dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
+      [assetIds[oOffset2 + d.idx], d.os, d.cpu, d.ram, d.disk]);
+  }
+
+  // 第三批办公设备扩展（索引53-56，仅 OFF-013 ThinkPad E15 有OS）
+  const officeData3 = [
+    { idx: 0, os: "Windows 11 Pro", cpu: "i5-1235U", ram: "16GB", disk: "512GB SSD" },  // OFF-013 ThinkPad E15
+  ];
+  const oOffset3 = 53;
+  for (const d of officeData3) {
+    dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
+      [assetIds[oOffset3 + d.idx], d.os, d.cpu, d.ram, d.disk]);
+  }
+
+  // 流转记录
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, from_user_id, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', NULL, ?, '行政部配发公务用车', ?, 1, '2026-01-10 09:00:00')`,
+    [assetIds[vOffset], fengXing, tenantId]);
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'A标段路基检测领用', ?, 1, '2026-01-20 14:30:00')`,
+    [assetIds[0], liJiao, tenantId]);
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '长期未使用标记闲置', ?, 1, '2026-05-01 10:00:00')`,
+    [assetIds[6], tenantId]);
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '采购多余入库闲置', ?, 1, '2026-03-15 16:00:00')`,
+    [assetIds[oOffset + 5], tenantId]);
+  const toolLostIdx = 19;  // 裂缝宽度观测仪（原索引19）
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, condition, remark, tenant_id, created_by, created_at) VALUES (?, 'return', 'lost', '外检遗失已报保险', ?, 1, '2026-06-10 11:00:00')`,
+    [assetIds[toolLostIdx], tenantId]);
+
+  // 新增流转记录（第二批资产）
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'D标段桥梁检测领用', ?, 1, '2026-02-20 09:00:00')`,
+    [assetIds[22], liJiao, tenantId]); // 全站仪 → D标段
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'E标段配备桥梁检测设备', ?, 1, '2026-04-15 10:00:00')`,
+    [assetIds[24], liJiao, tenantId]); // 桥梁挠度检测仪 → E标段
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'F标段桩基检测配备', ?, 1, '2026-05-25 14:00:00')`,
+    [assetIds[26], liJiao, tenantId]); // 桩基完整性测试仪 → F标段
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '采购入库闲置待分配', ?, 1, '2026-04-01 16:00:00')`,
+    [assetIds[45], tenantId]); // 激光垂准仪标记闲置
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'D标段驻地工程车配发', ?, 1, '2026-04-10 08:00:00')`,
+    [assetIds[30], liJiao, tenantId]); // 江铃域虎 → D标段
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'E标段驻地车辆配置', ?, 1, '2026-03-20 09:00:00')`,
+    [assetIds[31], liJiao, tenantId]); // 纳瓦拉皮卡 → E标段
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'F标段驻地车辆配置', ?, 1, '2026-03-01 10:00:00')`,
+    [assetIds[32], liJiao, tenantId]); // 福田皮卡 → F标段
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '交付中心外出设备运输车', ?, 1, '2026-01-15 09:00:00')`,
+    [assetIds[33], liJiao, tenantId]); // 金杯海狮 → 交付中心
+
+  // 第三批：14件问题场景资产交易记录（讲述完整故事）
+  // INS-016 (idx46): F标段自行采购3月不报备 → 补登记入库（迟了90天）
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ F标段自行采购电阻率仪，3个月后补登记入库', ?, 1, '2026-06-01 15:00:00')`,
+    [assetIds[46], liJiao, tenantId]);
+  // INS-017 (idx47): B标段买了和A标段同型号回弹仪（重复采购，应共享而非重购）
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ B标段重复采购（A标段已有同型号HT-225D），未走共享调配', ?, 1, '2026-04-20 10:00:00')`,
+    [assetIds[47], liJiao, tenantId]);
+  // INS-018 (idx48): A标段旧万能机实际已报废但系统仍为in_stock
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ 2018年购入设备，2023年实际已报废拆除，但系统未执行scrap操作', ?, 1, '2023-06-15 09:00:00')`,
+    [assetIds[48], tenantId]);
+  // INS-019 (idx49): E标段测斜仪借给中铁XX局未归还 + 校准已过期
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'lend_out', ?, '⚠️ 借给中铁XX局3标段（合作单位），借期1个月，超期15天未还，校准已于2026-06-01过期', ?, 1, '2026-05-15 08:00:00')`,
+    [assetIds[49], zhouShang, tenantId]);
+  // VEH-009 (idx50): C标段奇骏公车私用嫌疑
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'C标段巡查车配发 ⚠️注意：多次非工作时段出车见用车日志', ?, 1, '2025-11-10 09:00:00')`,
+    [assetIds[50], liJiao, tenantId]);
+  // VEH-010 (idx51): D标段哈弗H9维修费用异常
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'D标段工程车 ⚠️一年内维修费用累计超2.3万元，详见维修日志', ?, 1, '2025-08-05 09:00:00')`,
+    [assetIds[51], liJiao, tenantId]);
+  // VEH-011 (idx52): F标段依维柯长期闲置
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ 购入后仅开工仪式使用一次，闲置14个月未分配任务，年维保+保险+停车费超1.1万元沉没成本', ?, 1, '2024-10-20 10:00:00')`,
+    [assetIds[52], tenantId]);
+  // OFF-013 (idx53): D标段ThinkPad E15被离职员工带走未归还
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ D标段技术员领用，该员工已于2026-04-30离职，笔记本未归还入库', ?, 1, '2026-01-15 09:00:00')`,
+    [assetIds[53], zhouShang, tenantId]);
+  // OFF-014 (idx54): F标段UPS未拆封 — 虚增资产争议
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ F标段自行采购UPS，入库后从未启用——是否虚增资产？', ?, 1, '2026-05-05 14:00:00')`,
+    [assetIds[54], tenantId]);
+  // OFF-015 (idx55): A标段旧台式机待报废未处置
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ 2019年购入台式机，已使用7年，3年前就应报废处置但一直挂账', ?, 1, '2024-01-10 10:00:00')`,
+    [assetIds[55], tenantId]);
+  // OFF-016 (idx56): C标段自行购买扫描仪不备案
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ C标段自行采购扫描仪，未走总部采购审批流程，3月后补录', ?, 1, '2026-06-20 16:00:00')`,
+    [assetIds[56], liJiao, tenantId]);
+  // TOL-012 (idx57): E标段硬度计损坏3月不报修
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'E标段工具配备 ⚠️该硬度计实际已损坏（探头断裂），但3个月未报修也未登记维修', ?, 1, '2025-09-10 09:00:00')`,
+    [assetIds[57], liJiao, tenantId]);
+  // TOL-013 (idx58): D标段卡尺保管人信息不准—登记的是商务中心员工而非D标段实际使用人
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ 实际使用人为D标段测量员，但系统登记保管人为商务中心周商（信息录入错误）', ?, 1, '2025-12-05 11:00:00')`,
+    [assetIds[58], zhouShang, tenantId]);
+  // TOL-014 (idx59): B标段砝码被A标段私下借用未登记
+  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'lend_out', ?, '⚠️ A标段私下借用B标段标准砝码组，未走正式借用流程，系统未登记跨标段调拨', ?, 1, '2026-05-20 13:00:00')`,
+    [assetIds[59], liJiao, tenantId]);
+
+  // 盘点任务
+  const task = dbRun(`INSERT INTO asset_count_tasks (title, description, scope, status, start_date, tenant_id, created_by) VALUES ('2026年Q2资产盘点','对全部6个标段及总部检测仪器、车辆、办公设备进行半年大盘点','all','in_progress','2026-06-25',?,1)`, [tenantId]);
+  const taskId = task.lastInsertRowid as number;
+  // 盘点前8件（原7件 + 全站仪）+ 2件差异
+  for (let i = 0; i <= 7; i++) {
+    const isDiff = i === 3 || i === 7;
+    dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
+      [taskId, assetIds[i], allAssets[i].loc || null, allAssets[i].loc || null, allAssets[i].status, allAssets[i].status, allAssets[i].custodian, allAssets[i].custodian, isDiff ? "difference" : "match", isDiff ? (i === 7 ? "全站仪GPS模块需固件升级" : "校准证书即将到期需安排送检") : null, tenantId]);
+  }
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,NULL,?,?,?,1,?)`,
+    [taskId, assetIds[6], "A标段仓库", "idle", "not_found", "C标段仓库未找到该仪器", tenantId]);
+  // 新增盘点——D/E/F标段仪器
+  for (let i = 22; i <= 28; i++) {
+    const isDiff = i === 25;
+    dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
+      [taskId, assetIds[i], allAssets[i].loc || null, allAssets[i].loc || null, allAssets[i].status, allAssets[i].status, allAssets[i].custodian, allAssets[i].custodian, isDiff ? "difference" : "match", isDiff ? "超声测厚仪探头磨损需更换" : null, tenantId]);
+  }
+  // 工具盘点差异
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[19], "A标段工具房", "A标段工具房", "repairing", "repairing", "match", "已在维修中", tenantId]);
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[45], "交付中心仓库", "交付中心仓库", "idle", "idle", "match", "闲置中可调拨", tenantId]);
+
+  // 第三批问题资产盘点结果 — 每个痛点映射到具体差异
+  // INS-016 (idx46): F标段电阻率仪 — 自行采购不报备，系统晚登记
+  const c46 = dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[46], "F标段耐久性试验室", "F标段耐久性试验室", "in_use", "in_use", "difference", "⚠️ 该设备由F标段2026-03自行采购，至2026-06才补登记入库（延迟90天），未走总部采购审批", tenantId]);
+  // INS-017 (idx47): B标段回弹仪 — 与A标段同型号重复采购
+  const c47 = dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[47], "B标段试验室2号工位", "B标段试验室2号工位", "in_use", "in_use", "difference", "⚠️ 与A标段INS-001同型号HT-225D，重复采购浪费1.3万元，应共享调拨而非各自购买", tenantId]);
+  // INS-018 (idx48): A标段旧万能机 — 已报废但系统为in_stock
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,NULL,?,?,1,?)`,
+    [taskId, assetIds[48], "A标段废弃设备区", "A标段废弃设备区（设备已物理拆除）", "in_stock", "scrapped", "difference", "⚠️ 严重问题！该设备2023年已报废拆除，但系统仍显示in_stock。资产台账与实际严重不符", tenantId]);
+  // INS-019 (idx49): E标段测斜仪 — 借出中铁XX局超期未还 + 校准过期
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,NULL,?,?,1,?)`,
+    [taskId, assetIds[49], "E标段检测室", "中铁XX局3标段（借出超期15天）", "in_use", "idle", "not_found", "⚠️ 该设备借给合作单位超期未归还，且校准已于2026-06-01过期（过期27天），需立即追回并送校", tenantId]);
+  // VEH-009 (idx50): C标段奇骏 — 公车私用嫌疑
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[50], "C标段驻地", "C标段驻地", "in_use", "in_use", liJiao, liJiao, "difference", "⚠️ 行车日志显示3次非工作时段出车（含五一假期景区违停、夜间超速），存在公车私用嫌疑，建议启动审计", tenantId]);
+  // VEH-010 (idx51): D标段哈弗H9 — 维修费用异常
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[51], "D标段驻地", "D标段驻地", "in_use", "in_use", liJiao, liJiao, "difference", "⚠️ 购置不到1年维修费累计2.35万元（含变速箱大修1.25万、涡轮维修0.68万），远高于同类型车辆正常水平", tenantId]);
+  // VEH-011 (idx52): F标段依维柯 — 长期闲置
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[52], "F标段驻地", "F标段（长期闲置）", "idle", "idle", "difference", "⚠️ 购入20个月仅行驶3200km，年维保+保险+停车费超1.1万元，建议调拨至有需求标段或处置", tenantId]);
+  // OFF-013 (idx53): D标段笔记本 — 离职员工未归还
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[53], "D标段", "不可追溯", "in_use", "in_use", "not_found", "⚠️ 资产已被离职员工带走，至今未归还。持有人2026-04-30离职，需启动追回流程", tenantId]);
+  // OFF-014 (idx54): F标段UPS — 未拆封虚增资产
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[54], "F标段库房", "F标段库房（原箱未拆封）", "in_stock", "in_stock", "match", "⚠️ 虽核实存在但从未启用——F标段表示'买错了用不上'。存在虚增资产嫌疑，建议核查采购合理性", tenantId]);
+  // OFF-015 (idx55): A标段旧台式机 — 待报废未处置
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[55], "A标段废弃设备区", "A标段废弃设备区（已无法开机）", "idle", "idle", "difference", "⚠️ 2019年购入，使用7年已无法开机，但系统一直未走报废流程。占库存指标，建议立即处置", tenantId]);
+  // OFF-016 (idx56): C标段扫描仪 — 自行采购不备案
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[56], "C标段资料室", "C标段资料室", "in_use", "in_use", "difference", "⚠️ C标段2026-03自行采购未走总部采购流程，6月才补录入库。外派点采购权限边界需明确", tenantId]);
+  // TOL-012 (idx57): E标段硬度计 — 损坏3月不报修
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[57], "E标段工具柜", "E标段工具柜", "in_use", "in_use", "difference", "⚠️ 探头已断裂损坏（经现场确认），但系统状态仍为in_use且无维修记录。损坏近3个月未报修", tenantId]);
+  // TOL-013 (idx58): D标段卡尺 — 保管人信息不准
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[58], "D标段测量室", "D标段测量室", "in_use", "in_use", zhouShang, liJiao, "difference", "⚠️ 系统登记保管人为商务中心周商，但实际使用人为D标段现场测量员。保管人信息严重失实", tenantId]);
+  // TOL-014 (idx59): B标段砝码 — 被A标段私下借用
+  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
+    [taskId, assetIds[59], "B标段称量室", "A标段称量室（从B标段私下借用）", "in_use", "in_use", "difference", "⚠️ 实物在A标段称量室找到！B标段前月私下借给A标段未走正式调拨流程，跨标段资产移动无记录", tenantId]);
+
+  // ===== 第四批：分支级集团管控资产种子（全20外派分支 + 痛点场景） =====
+  const branchRows = dbAll(
+    "SELECT id, name, region FROM departments WHERE tenant_id=? AND branch_level=2 ORDER BY id",
+    [tenantId]
+  ) as any[];
+  if (branchRows.length > 0) {
+    const getBranchManager = (deptId: number) =>
+      (dbGet("SELECT id FROM employees WHERE department_id=? AND tenant_id=? AND employee_type='human' LIMIT 1", [deptId, tenantId]) as any)?.id || null;
+    const getBranchAI = (deptId: number) =>
+      (dbGet("SELECT id FROM employees WHERE department_id=? AND tenant_id=? AND employee_type='ai' LIMIT 1", [deptId, tenantId]) as any)?.id || null;
+
+    // 仪器模板轮换
+    const instTmpl = [
+      ["强度检测","HT-225D","北京智博联",12800,12],
+      ["力学检测","YAW-2000","济南试金",158000,12],
+      ["测量仪器","TS09","Leica",98000,12],
+      ["无损检测","N2","汕头超声",36000,6],
+      ["桩基检测","PIT-V2","美国PDI",220000,6],
+      ["钢筋检测","HC-GY81","北京海创",8600,12],
+      ["沥青检测","SYD-4508F","上海昌吉",32000,12],
+      ["土工检测","GZQ-1","南京土壤",28000,12],
+      ["钢结构检测","HS610e","南通友联",45000,6],
+      ["化学分析","ICP-5000","PerkinElmer",180000,12],
+    ] as const;
+    // 车辆模板轮换
+    const vehTmpl = [
+      ["长城风骏7","皮卡","柴油",5,125000,"长城汽车"],
+      ["江铃域虎7","皮卡","柴油",5,138000,"江铃汽车"],
+      ["日产纳瓦拉","皮卡","汽油",5,169800,"郑州日产"],
+      ["福田拓陆者","皮卡","柴油",5,116000,"福田汽车"],
+      ["江淮帅铃T8","皮卡","柴油",5,108000,"江淮汽车"],
+      ["上汽大通T70","皮卡","柴油",5,132000,"上汽大通"],
+      ["五十铃D-MAX","皮卡","柴油",5,156000,"江西五十铃"],
+      ["哈弗H5","SUV","柴油",5,148000,"长城汽车"],
+      ["丰田RAV4","SUV","汽油",5,218000,"一汽丰田"],
+      ["别克GL8","MPV","汽油",7,258000,"上汽通用"],
+      ["金杯阁瑞斯","MPV","汽油",9,95000,"华晨金杯"],
+      ["东风风行菱智","MPV","汽油",7,78000,"东风风行"],
+      ["五菱宏光S","MPV","汽油",7,56000,"上汽通用五菱"],
+      ["江淮瑞风M4","MPV","柴油",7,128000,"江淮汽车"],
+      ["长安凯程F70","皮卡","柴油",5,112000,"长安汽车"],
+      ["中兴威虎","皮卡","柴油",5,98000,"中兴汽车"],
+      ["三菱欧蓝德","SUV","汽油",7,198000,"广汽三菱"],
+      ["北汽勇士","SUV","汽油",7,185000,"北京汽车"],
+      ["黄海N7","皮卡","汽油",5,119000,"黄海汽车"],
+      ["福特全顺","MPV","柴油",12,175000,"江铃福特"],
+    ] as const;
+
+    // 区域对应颜色标记
+    const regionMark = (r: string) => r === "华东" ? "🟦" : r === "华南" ? "🟩" : r === "西部" ? "🟨" : "🟥";
+
+    const newAssets: typeof allAssets = [];
+    const assetCounter = { instr: 19, veh: 11, off: 16, tool: 14 };
+
+    for (let bi = 0; bi < branchRows.length; bi++) {
+      const br = branchRows[bi];
+      const { id: branchId, name: bName, region } = br;
+      const mgr = getBranchManager(branchId);
+      const ai = getBranchAI(branchId);
+      const cus = ai || mgr;
+      const seq = bi + 1;
+      const pad2 = (n: number) => String(n).padStart(2, "0");
+      const rndDate = (mo: number) => `2026-0${mo}-${pad2(5 + (bi * 7) % 25)}`;
+
+      // === 基础车辆 ===
+      const vm = vehTmpl[bi];
+      const vPlate = `京H·BR${pad2(seq)}`;
+      const vDate = rndDate(Math.min(6, 1 + bi % 6));
+      const vMile = 3000 + Math.floor(Math.random() * 25000);
+      assetCounter.veh++;
+      const vNo = `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`;
+      newAssets.push({
+        assetNo: vNo, name: `${bName.replace("外派分支", "")}工程车`, category: "VEHICLE",
+        subCat: vm[1], model: vm[0], sn: `VIN-BR${String(seq).padStart(3, "0")}`, mfr: vm[5], date: vDate,
+        price: vm[4], dept: branchId, custodian: cus, loc: `${bName}驻地`, status: "in_use",
+        plate: vPlate, vin: `LGW${String.fromCharCode(65 + bi % 26)}${pad2(seq)}MH${pad2(seq + 50)}`,
+        bp: vm[2], seats: vm[3], nextInsp: `2027-0${vDate.substring(5, 6)}-${vDate.substring(7, 9)}`,
+        insuranceExp: `2027-${vDate.substring(5, 10)}`, mileage: vMile,
+      });
+
+      // === 基础仪器 ===
+      const im = instTmpl[bi % instTmpl.length];
+      const iDate = rndDate(Math.min(6, 2 + (bi * 2) % 5));
+      const calExp = bi === 16; // 昆明分支：校准超期
+      assetCounter.instr++;
+      const iNo = `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`;
+      newAssets.push({
+        assetNo: iNo, name: `${im[0]}检测仪`, category: "INSTRUMENT",
+        subCat: im[0], model: im[1], sn: `${im[1]}-BR${pad2(seq)}`, mfr: im[2], date: iDate,
+        price: im[3], dept: branchId, custodian: cus, loc: `${bName}检测室`, status: "in_use",
+        calDate: iDate, calCycle: im[4],
+        calNext: calExp
+          ? `2026-0${String(Math.min(6, 2 + bi % 5)).padStart(2, "0")}-${pad2(10 + bi % 20)}`
+          : `2027-${iDate.substring(5, 10)}`,
+      });
+
+      // === 基础办公设备 ===
+      const oDate = rndDate(Math.min(6, 3 + bi % 4));
+      assetCounter.off++;
+      const oNo = `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`;
+      newAssets.push({
+        assetNo: oNo, name: "联想ThinkPad T14", category: "OFFICE",
+        subCat: "笔记本", model: "T14 Gen5", sn: `TP-BR${pad2(seq)}`, mfr: "联想", date: oDate,
+        price: 11500, dept: branchId, custodian: cus, loc: `${bName}办公区`, status: "in_use",
+        os: "Windows 11 Pro", cpu: "i7-1365U", ram: "32GB", disk: "1TB SSD",
+      });
+
+      // === 基础工具 ===
+      assetCounter.tool++;
+      const tNo = `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`;
+      newAssets.push({
+        assetNo: tNo, name: "数字激光测距仪", category: "TOOL",
+        subCat: "测量工具", model: "DISTO X6", sn: `LX6-BR${pad2(seq)}`, mfr: "Leica",
+        date: rndDate(Math.min(6, 4 + bi % 3)), price: 4800, dept: branchId, custodian: cus,
+        loc: `${bName}工具柜`, status: "in_use",
+      });
+    }
+
+    // ===== 痛点注入：针对性集团管控问题资产 =====
+    // 痛点1：闲置进口设备 (上海分支 bi=0)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "三维激光扫描仪（闲置）", category: "INSTRUMENT",
+      subCat: "测量仪器", model: "P40", sn: "P40-SH-IMPORT", mfr: "Leica", date: "2025-09-01", price: 520000,
+      dept: branchRows[0].id, custodian: null, loc: "上海分支仓库（从未使用）", status: "idle",
+      calDate: "2025-09-01", calCycle: 12, calNext: "2026-09-01",
+    });
+    // 痛点2：重复采购 (南京 bi=1 — 和上海买同型号)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "三维激光扫描仪（重复采购）", category: "INSTRUMENT",
+      subCat: "测量仪器", model: "P40", sn: "P40-NJ-DUP", mfr: "Leica", date: "2026-02-15", price: 530000,
+      dept: branchRows[1].id, custodian: getBranchAI(branchRows[1].id), loc: "南京分支检测室", status: "in_use",
+      calDate: "2026-02-15", calCycle: 12, calNext: "2027-02-15",
+    });
+    // 痛点3：跨属地调拨未记账 (杭州 bi=2 — 实物在苏州 bi=4)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "地质雷达", category: "INSTRUMENT",
+      subCat: "地质雷达", model: "SIR-4000", sn: "SIR4000-HZ-SZ", mfr: "GSSI", date: "2026-01-20", price: 280000,
+      dept: branchRows[2].id, custodian: getBranchAI(branchRows[4].id), loc: "苏州分支（从杭州私下调拨）", status: "in_use",
+      calDate: "2026-01-20", calCycle: 12, calNext: "2027-01-20",
+    });
+    // 痛点4：自行采购不报备 (合肥 bi=3)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "X荧光光谱仪（自行采购）", category: "INSTRUMENT",
+      subCat: "化学分析", model: "XRF-200", sn: "XRF200-HF-SELF", mfr: "Olympus", date: "2026-03-10", price: 42000,
+      dept: branchRows[3].id, custodian: getBranchAI(branchRows[3].id), loc: "合肥分支检测室", status: "in_use",
+      calDate: "2026-03-10", calCycle: 12, calNext: "2027-03-10",
+    });
+    // 痛点5：借出未归还 (宁波 bi=5)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "静力触探仪", category: "INSTRUMENT",
+      subCat: "土工检测", model: "CPT-200", sn: "CPT200-NB-LENT", mfr: "荷兰Geomil", date: "2025-06-01", price: 165000,
+      dept: branchRows[5].id, custodian: null, loc: "借给宁波港务局超期未还（已超期45天）", status: "idle",
+      calDate: "2025-06-01", calCycle: 12, calNext: "2026-06-01",
+    });
+    // 痛点6：报废未下账 (广州 bi=6)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "老旧万能试验机（已报废）", category: "INSTRUMENT",
+      subCat: "力学检测", model: "WE-600B", sn: "WE600-GZ-SCRAP", mfr: "济南试金", date: "2017-03-01", price: 38000,
+      dept: branchRows[6].id, custodian: null, loc: "广州分支废弃设备区（已物理拆除）", status: "in_stock",
+      calDate: "2022-06-01", calCycle: 12, calNext: "2023-06-01",
+    });
+    // 痛点7：离职员工资产未回收 (深圳 bi=7)
+    assetCounter.off++;
+    newAssets.push({
+      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "HP EliteBook 840（员工离职未归还）", category: "OFFICE",
+      subCat: "笔记本", model: "EliteBook 840 G10", sn: "HP840-SZ-LOST", mfr: "惠普", date: "2025-11-01", price: 13999,
+      dept: branchRows[7].id, custodian: getBranchManager(branchRows[7].id), loc: "原持有员工已离职·资产下落不明", status: "in_use",
+      os: "Windows 11 Pro", cpu: "i7-1355U", ram: "16GB", disk: "512GB SSD",
+    });
+    // 痛点8：维修费用异常 (南宁 bi=8 — 皮卡一年修3次)
+    assetCounter.veh++;
+    newAssets.push({
+      assetNo: `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`, name: "日产纳瓦拉（维修异常）", category: "VEHICLE",
+      subCat: "皮卡", model: "纳瓦拉 2.5L", sn: "VIN-NN-FIX", mfr: "郑州日产", date: "2025-08-15", price: 169800,
+      dept: branchRows[8].id, custodian: getBranchAI(branchRows[8].id), loc: "南宁分支驻地", status: "in_use",
+      plate: "京I·NN09", vin: "LJNTGU5G8MN000009", bp: "汽油", seats: 5,
+      nextInsp: "2026-08-15", insuranceExp: "2026-08-15", mileage: 38500,
+    });
+    // 痛点9：保管人信息不准 (福州 bi=9 — 管家登记为广州分支员工)
+    assetCounter.tool++;
+    newAssets.push({
+      assetNo: `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`, name: "数显卡尺（保管人信息错误）", category: "TOOL",
+      subCat: "测量工具", model: "500-196-30", sn: "MTG196-FZ-ERR", mfr: "Mitutoyo", date: "2025-10-01", price: 2600,
+      dept: branchRows[9].id, custodian: getBranchManager(branchRows[6].id), loc: "福州分支测量室（实际使用人并非登记保管人）", status: "in_use",
+    });
+    // 痛点10：公车私用嫌疑 (海口 bi=10)
+    assetCounter.veh++;
+    newAssets.push({
+      assetNo: `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`, name: "丰田RAV4（公车私用嫌疑）", category: "VEHICLE",
+      subCat: "SUV", model: "RAV4 2.0L", sn: "VIN-HK-ABUSE", mfr: "一汽丰田", date: "2025-11-01", price: 218000,
+      dept: branchRows[10].id, custodian: getBranchAI(branchRows[10].id), loc: "海口分支驻地", status: "in_use",
+      plate: "京J·HK11", vin: "LFMK440F8MN000011", bp: "汽油", seats: 5,
+      nextInsp: "2026-11-01", insuranceExp: "2026-11-01", mileage: 52000,
+    });
+    // 痛点11：闲置资源池不互通 (成都 bi=11 — 设备闲置但其他分支不知)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "隧道地质超前预报仪（闲置）", category: "INSTRUMENT",
+      subCat: "隧道检测", model: "TSP-303", sn: "TSP303-CD-IDLE", mfr: "Amberg", date: "2025-05-01", price: 320000,
+      dept: branchRows[11].id, custodian: null, loc: "成都分支仓库（项目已结束·闲置中）", status: "idle",
+      calDate: "2025-05-01", calCycle: 12, calNext: "2026-05-01",
+    });
+    // 痛点12：新购未拆封虚增资产 (重庆 bi=12)
+    assetCounter.off++;
+    newAssets.push({
+      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "华为UPS5000-E（未拆封）", category: "OFFICE",
+      subCat: "电源设备", model: "UPS5000-E-60kVA", sn: "HW-UPS-CQ-BOX", mfr: "华为", date: "2026-04-01", price: 85000,
+      dept: branchRows[12].id, custodian: null, loc: "重庆分支库房（原箱未拆封）", status: "in_stock",
+    });
+    // 痛点13：借出外部未归还 (西安 bi=14)
+    assetCounter.instr++;
+    newAssets.push({
+      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "全站仪（借出中铁X局未归还）", category: "INSTRUMENT",
+      subCat: "测量仪器", model: "TS16", sn: "TS16-XA-LENT", mfr: "Leica", date: "2025-08-01", price: 198000,
+      dept: branchRows[14].id, custodian: null, loc: "借给中铁十四局3标（超期60天未还）", status: "idle",
+      calDate: "2025-08-01", calCycle: 12, calNext: "2026-08-01",
+    });
+    // 痛点14：废旧设备未处置 (兰州 bi=15)
+    assetCounter.tool++;
+    newAssets.push({
+      assetNo: `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`, name: "老旧混凝土取芯机（待报废）", category: "TOOL",
+      subCat: "取样工具", model: "HZ-15", sn: "HZ15-LZ-SCRAP", mfr: "浙江土工仪器", date: "2018-06-01", price: 12000,
+      dept: branchRows[15].id, custodian: null, loc: "兰州分支废弃库房（已锈蚀无法使用）", status: "idle",
+    });
+    // 痛点15：虚增资产·项目已结束 (北京 bi=16)
+    assetCounter.off++;
+    newAssets.push({
+      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "Dell服务器R740（项目已结但未销账）", category: "OFFICE",
+      subCat: "服务器", model: "PowerEdge R740", sn: "DELL740-BJ-GHOST", mfr: "Dell", date: "2024-03-01", price: 68000,
+      dept: branchRows[16].id, custodian: null, loc: "北京分支机房（对应项目已于2025年6月结项）", status: "idle",
+    });
+    // 痛点16：双属地管理·归属不清 (天津 bi=17)
+    assetCounter.tool++;
+    newAssets.push({
+      assetNo: `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`, name: "超声波探伤仪（属地争议）", category: "TOOL",
+      subCat: "探伤工具", model: "CTS-9009", sn: "CTS-TJ-DISPUTE", mfr: "汕头超声", date: "2025-12-01", price: 35000,
+      dept: branchRows[17].id, custodian: getBranchAI(branchRows[16].id), loc: "北京-天津共用（两个分支均声称归属权）", status: "in_use",
+    });
+    // 痛点17：私车公养嫌疑 (石家庄 bi=18)
+    assetCounter.veh++;
+    newAssets.push({
+      assetNo: `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`, name: "长城哈弗H9（油费异常）", category: "VEHICLE",
+      subCat: "SUV", model: "哈弗H9 2.0T", sn: "VIN-SJZ-FUEL", mfr: "长城汽车", date: "2025-09-01", price: 258000,
+      dept: branchRows[18].id, custodian: getBranchAI(branchRows[18].id), loc: "石家庄分支驻地", status: "in_use",
+      plate: "京K·SJ19", vin: "LGWFF7A59MH000019", bp: "柴油", seats: 7,
+      nextInsp: "2026-09-01", insuranceExp: "2026-09-01", mileage: 46000,
+    });
+    // 痛点18：账实地址不符 (郑州 bi=19)
+    assetCounter.off++;
+    newAssets.push({
+      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "联想ThinkStation P360", category: "OFFICE",
+      subCat: "工作站", model: "P360 Ultra", sn: "LEN360-ZZ-GONE", mfr: "联想", date: "2026-01-10", price: 22000,
+      dept: branchRows[19].id, custodian: getBranchAI(branchRows[19].id), loc: "注册地址郑州·实际在洛阳工地使用", status: "in_use",
+      os: "Windows 11 Pro", cpu: "i7-12700", ram: "64GB", disk: "1TB SSD",
+    });
+
+    // 插入所有分支新资产（沿用plate前缀规避跨租户车牌冲突）
+    const branchAssetIds: number[] = [];
+    for (const a of newAssets) {
+      const r = dbRun(
+        `INSERT INTO assets (asset_no, name, category, sub_category, model, sn, manufacturer,
+          purchase_date, purchase_price, expected_life, status, owner_type,
+          department_id, location_detail, custodian_id, remark, tenant_id, created_by, warranty_expire_date)
+         VALUES (?,?,?,?,?,?,?,?,?,?,?,'owned',?,?,?,?,?,?,?)`,
+        [anoPrefix + a.assetNo, a.name, a.category, a.subCat || null, a.model || null,
+         a.sn || null, a.mfr || null, a.date || null, a.price, 60, a.status,
+         a.dept, a.loc || null, a.custodian, null, tenantId, 1, addMonths(a.date, 60)]
+      );
+      branchAssetIds.push(r.lastInsertRowid as number);
+    }
+
+    // 车辆扩展 + 使用日志（仅基线20辆 + 痛点头3辆）
+    const allBranchVehAssets = newAssets.filter(a => a.category === "VEHICLE");
+    for (let vi = 0; vi < allBranchVehAssets.length; vi++) {
+      const a = allBranchVehAssets[vi];
+      const aid = branchAssetIds[newAssets.indexOf(a)];
+      dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
+        [aid, platePrefix + (a.plate || `京H·XX${vi}`), a.vin || `VIN-BR${vi}`, a.bp || "汽油", a.seats || 5, a.nextInsp || null, a.insuranceExp || null, a.mileage || 5000]);
+      // 每车3-5条使用日志
+      const logMiles = [a.mileage! * 0.2, a.mileage! * 0.5, a.mileage! * 0.75].map(m => Math.round(m));
+      const logTypes = ["refuel", "refuel", "maintenance", "refuel", "insurance"] as const;
+      const logCosts = [380 + vi * 30, 420 + vi * 25, 800 + vi * 100, 350 + vi * 20, 2500 + vi * 200];
+      const logDates = [`2026-0${Math.min(6,2+vi%5)}-${String(5+(vi*3)%25).padStart(2,'0')}`,
+                        `2026-0${Math.min(6,3+vi%4)}-${String(10+(vi*5)%20).padStart(2,'0')}`,
+                        `2026-0${Math.min(6,4+vi%3)}-${String(15+(vi*2)%15).padStart(2,'0')}`,
+                        `2026-0${Math.min(6,5+vi%2)}-${String(8+(vi*4)%22).padStart(2,'0')}`,
+                        `2026-06-${String(20+vi).padStart(2,'0')}`];
+      const logDescs = [`${['华东','华南','西部','华北'][vi%4]}区域巡检加油`, "日常出车加油", "定期保养", "送检样品加油", "续保"];
+      const logCount = vi < 20 ? 4 : 5;
+      for (let li = 0; li < logCount; li++) {
+        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
+          [aid, logTypes[li], logCosts[li], logMiles[Math.min(li, 2)], logDates[li], logDescs[li], tenantId]);
+      }
+    }
+
+    // 痛点车辆特殊日志：南宁维修异常（newAssets倒数第5辆）
+    const nnVehIdx = allBranchVehAssets.findIndex(a => a.assetNo.includes("VEH") && a.name.includes("纳瓦拉（维修异常）"));
+    if (nnVehIdx >= 0) {
+      const nnAid = branchAssetIds[newAssets.indexOf(allBranchVehAssets[nnVehIdx])];
+      const extraLogs = [
+        { type: "maintenance", cost: 8500, mileage: 12000, date: "2026-02-15", desc: "⚠️ 发动机大修（购置仅6个月）" },
+        { type: "maintenance", cost: 6800, mileage: 22000, date: "2026-05-10", desc: "⚠️ 变速箱故障维修（第二次大修）" },
+        { type: "other", cost: 3500, mileage: 32000, date: "2026-06-20", desc: "⚠️ 更换四条轮胎（异常磨损）" },
+      ];
+      for (const el of extraLogs) {
+        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
+          [nnAid, el.type, el.cost, el.mileage, el.date, el.desc, tenantId]);
+      }
+    }
+
+    // 痛点车辆特殊日志：海口公车私用（倒数第3辆）
+    const hkVehIdx = allBranchVehAssets.findIndex(a => a.assetNo.includes("VEH") && a.name.includes("RAV4（公车私用嫌疑）"));
+    if (hkVehIdx >= 0) {
+      const hkAid = branchAssetIds[newAssets.indexOf(allBranchVehAssets[hkVehIdx])];
+      const hkLogs = [
+        { type: "refuel", cost: 550, mileage: 25000, date: "2026-05-01", desc: "⚠️ 五一假期出车加油（非常规工作日）" },
+        { type: "traffic_fine", cost: 300, mileage: 35000, date: "2026-05-20", desc: "⚠️ 景区违停（三亚某景区·非公务）" },
+        { type: "refuel", cost: 620, mileage: 42000, date: "2026-06-15", desc: "⚠️ 周末出车长途加油（无出差审批记录）" },
+      ];
+      for (const hl of hkLogs) {
+        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
+          [hkAid, hl.type, hl.cost, hl.mileage, hl.date, hl.desc, tenantId]);
+      }
+    }
+
+    // 痛点车辆特殊日志：石家庄私车公养（最后一辆）
+    const sjzVehIdx = allBranchVehAssets.findIndex(a => a.assetNo.includes("VEH") && a.name.includes("哈弗H9（油费异常）"));
+    if (sjzVehIdx >= 0) {
+      const sjzAid = branchAssetIds[newAssets.indexOf(allBranchVehAssets[sjzVehIdx])];
+      const sjzLogs = [
+        { type: "refuel", cost: 850, mileage: 18000, date: "2026-03-08", desc: "⚠️ 单次加油850元超出油箱容量（容积80L×7.5=600元上限）" },
+        { type: "refuel", cost: 780, mileage: 26000, date: "2026-04-25", desc: "⚠️ 周末加油780元·无对应出差审批" },
+        { type: "refuel", cost: 920, mileage: 38000, date: "2026-06-10", desc: "⚠️ 加油量异常（按油价折算超出油箱容积40%）" },
+      ];
+      for (const sl of sjzLogs) {
+        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
+          [sjzAid, sl.type, sl.cost, sl.mileage, sl.date, sl.desc, tenantId]);
+      }
+    }
+
+    // 仪器扩展（所有仪器资产，含痛点仪器）
+    const allBranchInstAssets = newAssets.filter(a => a.category === "INSTRUMENT");
+    for (const ia of allBranchInstAssets) {
+      if (ia.calDate) {
+        const aid = branchAssetIds[newAssets.indexOf(ia)];
+        dbRun("INSERT INTO asset_instruments (asset_id, last_calibration, next_calibration, calibration_cycle) VALUES (?,?,?,?)",
+          [aid, ia.calDate, ia.calNext || null, ia.calCycle || 12]);
+      }
+    }
+
+    // 办公设备扩展
+    const allBranchOffAssets = newAssets.filter(a => a.category === "OFFICE" && a.os);
+    for (const oa of allBranchOffAssets) {
+      const aid = branchAssetIds[newAssets.indexOf(oa)];
+      dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
+        [aid, oa.os || null, oa.cpu || null, oa.ram || null, oa.disk || null]);
+    }
+
+    // 流转记录（痛点资产）
+    const tr = (assetIdx: number, type: string, remark: string, toUserId: number|null = null, date: string = "2026-06-01 10:00:00") => {
+      const aid = branchAssetIds[assetIdx];
+      if (toUserId) {
+        dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?,?,?,?,?,1,?)`,
+          [aid, type, toUserId, remark, tenantId, date]);
+      } else {
+        dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?,?,?,?,1,?)`,
+          [aid, type, remark, tenantId, date]);
+      }
+    };
+    // 痛点索引在newAssets中的位置: 80基线 + 0..17痛点 = 共98件
+    const pIdx = 80; // 痛点起始索引
+    tr(pIdx+0, "transfer", "⚠️ 上海分支2025年进口5.2万元扫描仪，购入后从未使用——闲置已超9个月，年维保费约8000元沉没成本。建议调拨至有需求标段");
+    tr(pIdx+1, "checkout", "⚠️ 南京分支重复采购P40扫描仪（上海已有同型号），浪费53万元。两分支间无资产共享机制", getBranchAI(branchRows[1].id));
+    tr(pIdx+2, "transfer", "⚠️ 账面归属杭州分支，但实物在苏州分支使用（2026-03私下调拨未走正式流程）。跨属地资产流动无系统记录", getBranchAI(branchRows[4].id));
+    tr(pIdx+3, "checkout", "⚠️ 合肥分支自行采购荧光光谱仪，未走总部采购审批流程，3个月后补登记。外派点采购权限边界模糊", getBranchAI(branchRows[3].id));
+    tr(pIdx+4, "lend_out", "⚠️ 宁波分支借给港务局，原定借期1个月，已超期45天未归还。借出流程缺失正式审批+归还提醒机制");
+    tr(pIdx+5, "transfer", "⚠️ 2017年购入万能试验机，2023年物理报废拆除但系统始终未执行scrap操作——报废审批流程阻断超过3年");
+    tr(pIdx+6, "checkout", "⚠️ 持有该笔记本的员工2026年4月离职，资产未回收入库。离职交接流程未覆盖资产归还环节", getBranchManager(branchRows[7].id));
+    tr(pIdx+7, "checkout", "⚠️ 购置不到1年大修3次（发动机+变速箱+轮胎），累计维修费1.88万元超过车辆残值50%。异常维修无溯源分析", getBranchAI(branchRows[8].id));
+    tr(pIdx+8, "checkout", "⚠️ 保管人登记为广州分支经理，实际使用人为福州分支测量员——保管人信息严重失实（跨区域错误）", getBranchManager(branchRows[6].id));
+    tr(pIdx+9, "checkout", "⚠️ 行车日志显示多次非工作时段出车（含五一假期三亚景区、周末长途），无对应出差审批——存在公车私用重大嫌疑", getBranchAI(branchRows[10].id));
+    tr(pIdx+10, "transfer", "⚠️ 32万元隧道预报仪项目结束后闲置7个月，总部闲置资产池不可见。各分支间无统一的闲置资产共享调度平台");
+    tr(pIdx+11, "transfer", "⚠️ 8.5万元UPS设备采购后原箱未拆封存放库房——'买错了用不上'。采购决策缺乏技术审核环节，存在虚增资产嫌疑");
+    tr(pIdx+12, "lend_out", "⚠️ 西安分支2025-08借给中铁十四局，原借期3个月已超期60天。对方口头表示'工程延后还需续借'，无正式续借审批");
+    tr(pIdx+13, "transfer", "⚠️ 2018年购入取芯机已完全锈蚀无法使用，但系统一直未走报废处置流程。废旧资产长期挂账影响资产利用率指标");
+    tr(pIdx+14, "transfer", "⚠️ 2024年购入服务器用于北京某市政项目，项目2025年6月已结项验收，但资产至今未销账也未调拨其他分支——虚增资产6.8万元");
+    tr(pIdx+15, "checkout", "⚠️ 设备被北京和天津两个分支同时主张归属权。因购买时使用'京-津联合作业组'名义，无明确部门归属标识", getBranchAI(branchRows[16].id));
+    tr(pIdx+16, "checkout", "⚠️ 加油记录3次异常：单次超油箱容量、周末无审批出车、折算超出油箱40%。疑似私车公养——油费转嫁到公务车辆", getBranchAI(branchRows[18].id));
+    tr(pIdx+17, "checkout", "⚠️ 账面注册地址为郑州分支，但设备长期在洛阳工地实际使用——台账地址与实际存放地严重不符，影响盘点准确率", getBranchAI(branchRows[19].id));
+
+    console.log(`[种子] tenant#${tenantId} 分支级资产完成: +${newAssets.length}件（含${18}件痛点场景）`);
+  }
+  console.log(`[种子] tenant#${tenantId} 资产种子完成: ${allAssets.length}件常规 + 分支级扩展`);
+
+  // ═══════════════════════════════════════════════════════════
+  // 第五批：集团管控规模扩展 → 每租户 5000 件
+  // 路桥通级别：总部十七部门 + 4大区 + 20分支 + 40项目 + 60标段
+  // ═══════════════════════════════════════════════════════════
+  const db = getDb();
+  const allDepts = dbAll("SELECT id, name, parent_id FROM departments WHERE tenant_id=?", [tenantId]) as any[];
+
+  // 部门分类（按名称模式，兼容两租户）
+  const hqDepts    = allDepts.filter(d => !d.name.includes("区域") && !d.name.includes("项目") && !d.name.includes("试验室") && !d.name.includes("标段") && (d.parent_id === null || d.parent_id === 0) && !d.name.includes("分支"));
+  const regionDepts = allDepts.filter(d => d.name.includes("区域"));                // 4大区
+  const branchDepts = allDepts.filter(d => d.name.includes("分支"));                // 20分支
+  const projectDepts= allDepts.filter(d => d.name.includes("项目") && !d.name.includes("试验室")); // 40项目
+  const labDepts    = allDepts.filter(d => d.name.includes("试验室") || d.name.includes("标段"));  // 60标段
+  // 漏网之鱼归入HQ
+  const usedIds = new Set([...hqDepts, ...regionDepts, ...branchDepts, ...projectDepts, ...labDepts].map(d => d.id));
+  const restDepts = allDepts.filter(d => !usedIds.has(d.id));
+  hqDepts.push(...restDepts);
+
+  // 配额：每部门追加额外资产数（加上现有158件后达5000）
+  const quotaHQ = 35;      // hqDepts件/部门
+  const quotaRegion = 45;   // 4区域件/部门
+  const quotaBranch = 70;   // 20分支件/部门（已含80基线，追加70≈150件/分支）
+  const quotaProject = 38;  // 40项目件/部门
+  const quotaLab = 14;      // 60标段件/部门
+  const quotaIdle = 250;    // 闲置池（无部门归属）
+
+  // 资产模板库
+  const tmpl = {
+    INSTRUMENT: [
+      { name: "全站仪", model: "TS16", mfr: "徕卡测量", subCat: "测绘仪器", price: 185000 },
+      { name: "电子水准仪", model: "DINI03", mfr: "Trimble", subCat: "测绘仪器", price: 42000 },
+      { name: "激光断面仪", model: "LPS-300", mfr: "中交一公院", subCat: "检测仪器", price: 260000 },
+      { name: "数显回弹仪", model: "HT-225D", mfr: "北京智博联", subCat: "检测仪器", price: 13000 },
+      { name: "钢筋扫描仪", model: "PS300", mfr: "Hilti", subCat: "检测仪器", price: 38000 },
+      { name: "裂缝测宽仪", model: "PTS-C10", mfr: "北京光电", subCat: "检测仪器", price: 15000 },
+      { name: "超声波探伤仪", model: "USN60", mfr: "GE检测", subCat: "检测仪器", price: 96000 },
+      { name: "地质雷达", model: "SIR-4000", mfr: "GSSI", subCat: "物探仪器", price: 420000 },
+      { name: "多功能气候试验箱", model: "CTC256", mfr: "Memmert", subCat: "试验设备", price: 185000 },
+      { name: "万能材料试验机", model: "WE-600B", mfr: "济南试金", subCat: "试验设备", price: 58000 },
+      { name: "标准养护箱", model: "HBY-40B", mfr: "浙江土工", subCat: "试验设备", price: 22000 },
+      { name: "混凝土电阻率仪", model: "Resipod", mfr: "Proceq", subCat: "检测仪器", price: 52000 },
+      { name: "激光平整度仪", model: "RSP-MK4", mfr: "Dynatest", subCat: "检测仪器", price: 350000 },
+      { name: "锚杆拉拔仪", model: "ML-300B", mfr: "北京海创", subCat: "检测仪器", price: 24000 },
+      { name: "基桩动测仪", model: "PIT-V", mfr: "PDI", subCat: "检测仪器", price: 128000 },
+    ],
+    VEHICLE: [
+      { name: "丰田普拉多", model: "3.5L V6", mfr: "一汽丰田", subCat: "SUV", price: 498000, plate: (i:number)=>`京A·PR${String(i).padStart(3,'0')}`, seats:7, bp:"汽油" },
+      { name: "三菱帕杰罗", model: "3.0L V6", mfr: "广汽三菱", subCat: "SUV", price: 368000, plate: (i:number)=>`京B·PJ${String(i).padStart(3,'0')}`, seats:7, bp:"汽油" },
+      { name: "长城炮皮卡", model: "2.0T 四驱", mfr: "长城汽车", subCat: "皮卡", price: 168000, plate: (i:number)=>`京C·CC${String(i).padStart(3,'0')}`, seats:5, bp:"柴油" },
+      { name: "江铃域虎", model: "2.4T 四驱", mfr: "江铃汽车", subCat: "皮卡", price: 135000, plate: (i:number)=>`京D·YH${String(i).padStart(3,'0')}`, seats:5, bp:"柴油" },
+      { name: "依维柯工程车", model: "Daily 3.0T", mfr: "南京依维柯", subCat: "专项作业车", price: 285000, plate: (i:number)=>`京E·GC${String(i).padStart(3,'0')}`, seats:17, bp:"柴油" },
+      { name: "金杯海狮", model: "2.0L", mfr: "华晨金杯", subCat: "面包车", price: 85000, plate: (i:number)=>`京F·HS${String(i).padStart(3,'0')}`, seats:11, bp:"汽油" },
+    ],
+    OFFICE: [
+      { name: "ThinkPad笔记本", model: "T14 Gen5", mfr: "联想", subCat: "笔记本", price: 9800 },
+      { name: "Dell台式机", model: "OptiPlex 7080", mfr: "戴尔", subCat: "台式机", price: 6500 },
+      { name: "HP激光打印机", model: "M404dn", mfr: "惠普", subCat: "打印机", price: 3200 },
+      { name: "Canon工程扫描仪", model: "DR-G2110", mfr: "佳能", subCat: "扫描仪", price: 28000 },
+      { name: "格力空调", model: "KFR-72LW", mfr: "格力", subCat: "空调", price: 6500 },
+      { name: "华为交换机", model: "S5735-L48P4X", mfr: "华为", subCat: "网络设备", price: 15000 },
+      { name: "山特UPS电源", model: "C6KS 6kVA", mfr: "山特", subCat: "电源设备", price: 12000 },
+      { name: "会议平板", model: "MAXHUB V6", mfr: "视源股份", subCat: "会议设备", price: 35000 },
+      { name: "SONY投影仪", model: "VPL-FHZ85", mfr: "索尼", subCat: "投影仪", price: 28000 },
+      { name: "海康威视监控", model: "DS-2CD2T47G2", mfr: "海康威视", subCat: "安防设备", price: 2500 },
+    ],
+    TOOL: [
+      { name: "混凝土试模", model: "150×150×150mm", mfr: "浙江土工", subCat: "试验模具", price: 120 },
+      { name: "精密电子天平", model: "ME204E", mfr: "梅特勒-托利多", subCat: "称量工具", price: 18000 },
+      { name: "数显卡尺", model: "500-196-30", mfr: "Mitutoyo", subCat: "测量工具", price: 2600 },
+      { name: "混凝土钻孔机", model: "HDE-1622", mfr: "Hilti", subCat: "取样工具", price: 15000 },
+      { name: "钢筋调直切断机", model: "GT4-14", mfr: "山东路通", subCat: "加工工具", price: 12000 },
+      { name: "电动扳手", model: "GDS 18V-1050", mfr: "Bosch", subCat: "安装工具", price: 3200 },
+      { name: "激光测距仪", model: "DISTO D5", mfr: "徕卡", subCat: "测量工具", price: 4800 },
+      { name: "土工密度仪", model: "SD-320", mfr: "北京航天", subCat: "检测工具", price: 8500 },
+    ],
+  };
+
+  const catKeys = ["INSTRUMENT", "VEHICLE", "OFFICE", "TOOL"] as const;
+  // 类目分布权重：按部门类型差异化
+  // 铁律：总部/区域=管理职能，绝不允许任何仪器/工具（全站仪/卡尺/天平/扫描仪不出现在管理层办公室）
+  //            INSTRUMENT VEHICLE OFFICE TOOL
+  const deptCatWeights: Record<string, number[]> = {
+    hq:      [0.00, 0.24, 0.76, 0.00],  // 总部: 只有OFFICE+SUV，0%仪器+工具
+    region:  [0.00, 0.22, 0.78, 0.00],  // 区域: 只有OFFICE+车辆，0%仪器+工具（管理非生产一线）
+    branch:  [0.30, 0.15, 0.30, 0.25],  // 分支/监理: 现场检测+办公
+    project: [0.42, 0.15, 0.10, 0.33],  // 项目: 工程仪器+工具为主，少量办公
+    lab:     [0.48, 0.05, 0.07, 0.40],  // 标段/试验室: 试验+检测为主
+    idle:    [0.30, 0.20, 0.25, 0.25],  // 闲置池: 混杂
+  };
+  const statusPool = [
+    { s:"in_use", w:0.60 }, { s:"in_stock", w:0.18 }, { s:"idle", w:0.10 },
+    { s:"repairing", w:0.05 }, { s:"transferring", w:0.03 }, { s:"scrapped", w:0.03 }, { s:"lost", w:0.01 },
+  ];
+
+  function pickCat(r: number, deptType: string): typeof catKeys[number] {
+    const w = deptCatWeights[deptType] || deptCatWeights.idle;
+    let acc = 0;
+    for (let i = 0; i < catKeys.length; i++) { acc += w[i]; if (r < acc) return catKeys[i]; }
+    return "OFFICE";
+  }
+  function pickStatus(r: number): string {
+    let acc = 0;
+    for (const st of statusPool) { acc += st.w; if (r < acc) return st.s; }
+    return "in_use";
+  }
+
+  // 按部门分配 & 批量生成（带类型标记，后续按类型分配合适类目）
+  const deptQuotas: { deptId: number; deptName: string; count: number; type: string }[] = [];
+  for (const d of hqDepts)    deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaHQ, type: "hq" });
+  for (const d of regionDepts) deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaRegion, type: "region" });
+  for (const d of branchDepts) deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaBranch, type: "branch" });
+  for (const d of projectDepts)deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaProject, type: "project" });
+  for (const d of labDepts)    deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaLab, type: "lab" });
+  deptQuotas.push({ deptId: 0, deptName: "闲置池(无归属)", count: quotaIdle, type: "idle" }); // deptId=0 → NULL
+
+  let globalSeq = allAssets.length; // 继续编号
+  const batchSize = 500;
+  let batchCount = 0;
+  let totalAdded = 0;
+  const startTime = Date.now();
+
+  db.run("BEGIN TRANSACTION");
+
+  for (const dq of deptQuotas) {
+    for (let i = 0; i < dq.count; i++) {
+      globalSeq++;
+      const cat = pickCat(Math.random(), dq.type);
+      let tArr = tmpl[cat];
+      // 常识约束：车辆类型按部门筛选
+      //   HQ→仅SUV(普拉多/帕杰罗，行政用车), 项目→工程车(皮卡/作业车/面包车)
+      if (cat === "VEHICLE") {
+        const vehFilter: Record<string, string[]> = {
+          hq: ["SUV"],                   // 总部只配SUV，不配面包车/皮卡
+          region: ["SUV","皮卡","面包车"],
+          branch: ["SUV","皮卡","面包车"],
+          project: ["皮卡","专项作业车","面包车"],
+          lab: ["皮卡"],
+          idle: ["SUV","皮卡","专项作业车","面包车"],
+        };
+        const allowed = vehFilter[dq.type] || vehFilter.idle;
+        tArr = tArr.filter((v: any) => allowed.includes(v.subCat));
+      }
+      // 常识约束：仪器类型按部门筛选（HQ/region权重已为0，此过滤为安全兜底）
+      if (cat === "INSTRUMENT") {
+        const instFilter: Record<string, string[] | null> = {
+          hq: null,     // HQ/region不应有仪器（权重已清零）
+          region: null,
+          branch: null,
+          project: null,
+          lab: null,
+          idle: null,
+        };
+        const filterSubcats = instFilter[dq.type];
+        if (filterSubcats) {
+          tArr = tArr.filter((v: any) => filterSubcats.includes(v.subCat));
+        }
+        if (tArr.length === 0) tArr = tmpl[cat];
+      }
+      // 常识约束：工具类型按部门筛选（HQ/region权重已为0，此过滤为安全兜底）
+      if (cat === "TOOL") {
+        const toolFilter: Record<string, string[] | null> = {
+          hq: null,     // HQ/region不应有工具（权重已清零）
+          region: null,
+          branch: null,  // 分支=全品类工具
+          project: null, // 项目=全品类
+          lab: null,     // 标段=全品类
+          idle: null,    // 闲置池=全品类
+        };
+        const filterSubcats = toolFilter[dq.type];
+        if (filterSubcats) {
+          tArr = tArr.filter((v: any) => filterSubcats.includes(v.subCat));
+        }
+        if (tArr.length === 0) tArr = tmpl[cat];
+      }
+      // 常识约束：总部办公设备排除工程扫描仪（CXO办公室不需要图纸扫描仪）
+      if (cat === "OFFICE" && (dq.type === "hq" || dq.type === "region")) {
+        tArr = tArr.filter((v: any) => v.subCat !== "扫描仪");
+      }
+      const t = tArr[globalSeq % tArr.length];
+      const sRnd = Math.random();
+      const status = pickStatus(sRnd);
+
+      // 日期：2022-2026 之间随机
+      const y = 2022 + (globalSeq % 5);
+      const m = String((globalSeq % 12) + 1).padStart(2, "0");
+      const d = String(((globalSeq * 7) % 28) + 1).padStart(2, "0");
+      const purchaseDate = `${y}-${m}-${d}`;
+      const priceVariation = 0.7 + Math.random() * 0.6; // 70%-130% 基准价
+      const price = Math.round((t.price || 10000) * priceVariation);
+      const life = cat === "VEHICLE" ? 96 : cat === "INSTRUMENT" ? 72 : cat === "OFFICE" ? 48 : 60;
+      const warrantyExp = addMonths(purchaseDate, life);
+      const deptId = dq.deptId === 0 ? null : dq.deptId;
+      const sn = `${t.mfr?.substring(0,2) || "XX"}${Date.now().toString(36).substring(4,8)}${globalSeq}`;
+      const assetNo = `${anoPrefix}${cat.substring(0,3)}-${y}-${String(globalSeq).padStart(5,"0")}`;
+      // 保管人：从该部门随机抽取一名员工（人类优先，AI其次）
+      const cEmp = deptId ? (dbGet("SELECT id FROM employees WHERE department_id=? AND tenant_id=? AND employee_type='human' LIMIT 1", [deptId, tenantId]) as any)?.id || null : null;
+      const custodianId = status === "in_use" ? cEmp : null;
+      const remark = status === "scrapped" ? "待报废处置" : status === "idle" ? "闲置中" : status === "lost" ? "盘亏待追责" : null;
+
+      db.run(
+        `INSERT INTO assets (asset_no,name,category,sub_category,model,sn,manufacturer,
+          purchase_date,purchase_price,expected_life,status,owner_type,
+          department_id,location_detail,custodian_id,remark,tenant_id,created_by,warranty_expire_date)
+         VALUES (?,?,?,?,?,?,?,?,?,?,?,'owned',?,?,?,?,?,?,?)`,
+        [assetNo, t.name, cat, (t as any).subCat || null, t.model, sn, t.mfr,
+         purchaseDate, price, life, status,
+         deptId, dq.deptName || null, custodianId, remark, tenantId, 1, warrantyExp]
+      );
+      totalAdded++;
+
+      // 车辆扩展表（约15%概率）
+      if (cat === "VEHICLE" && Math.random() < 0.15) {
+        const vT = t as any;
+        const plate = `${platePrefix}${vT.plate ? vT.plate(globalSeq) : `京G·BK${globalSeq}`}`;
+        const vin = `VIN-MASS-${String(globalSeq).padStart(6,"0")}`;
+        const inspDate = new Date(); inspDate.setFullYear(inspDate.getFullYear() + (globalSeq % 3));
+        const insDate = new Date(); insDate.setFullYear(insDate.getFullYear() + (globalSeq % 2));
+        db.run(`INSERT OR IGNORE INTO asset_vehicles (asset_id,plate_no,vin,fuel_type,seat_count,next_inspection,insurance_expire,current_mileage) VALUES ((SELECT last_insert_rowid()),?,?,?,?,?,?,?)`,
+          [plate, vin, vT.bp || "汽油", vT.seats || 5, inspDate.toISOString().split("T")[0], insDate.toISOString().split("T")[0], Math.round(5000 + Math.random() * 80000)]);
+      }
+      // 仪器校准（约15%概率）
+      if (cat === "INSTRUMENT" && Math.random() < 0.15) {
+        const calDate = new Date(); calDate.setMonth(calDate.getMonth() - (globalSeq % 18));
+        const calNext = new Date(calDate); calNext.setMonth(calNext.getMonth() + 12);
+        db.run(`INSERT OR IGNORE INTO asset_instruments (asset_id,calibration_cycle,last_calibration,next_calibration,calibration_agency,precision_level) VALUES ((SELECT last_insert_rowid()),?,?,?,?,?)`,
+          [12, calDate.toISOString().split("T")[0], calNext.toISOString().split("T")[0], `${["中国计量院","省计量院","市计量所"][globalSeq%3]}`, `${["1级","2级","3级"][globalSeq%3]}`]);
+      }
+      // 办公设备扩展（约10%概率）
+      if (cat === "OFFICE" && Math.random() < 0.10) {
+        db.run(`INSERT OR IGNORE INTO asset_office (asset_id,device_type,brand,cpu,ram,storage,os) VALUES ((SELECT last_insert_rowid()),?,?,?,?,?,?)`,
+          [(t as any).subCat, t.mfr, `${["i5","i7","i9","M1","M2"][globalSeq%5]}-${["12代","13代","14代"][globalSeq%3]}`, `${[8,16,32,64][globalSeq%4]}GB`, `${[256,512,1024][globalSeq%3]}GB SSD`, "Windows 11"]);
+      }
+
+      // 分批 commit 避免事务过大
+      if (totalAdded % batchSize === 0) {
+        db.run("COMMIT");
+        db.run("BEGIN TRANSACTION");
+        batchCount++;
+        if (batchCount % 5 === 0) console.log(`[种子] tenant#${tenantId} 集团扩展进度: ${totalAdded}件...`);
+      }
+    }
+  }
+
+  db.run("COMMIT");
+  saveDb();
+  const elapsed = Date.now() - startTime;
+  console.log(`[种子] tenant#${tenantId} 集团规模扩展完成: +${totalAdded}件, 耗时${elapsed}ms`);
+}
diff --git a/modules/openxyos/backend/seed.ts b/modules/openxyos/backend/seed.ts
index 020bc87c..5b41ca31 100644
--- a/modules/openxyos/backend/seed.ts
+++ b/modules/openxyos/backend/seed.ts
@@ -1,2450 +1,23 @@
-import bcrypt from "bcryptjs";
-import { randomBytes } from "crypto";
-import fs from "fs";
-import path from "path";
-import { dbAll, dbGet, dbRun, getDb, saveDb } from "./db";
-
-function requiredSeedSecret(name: "SEED_ADMIN_PASSWORD" | "SEED_DEMO_PASSWORD"): string {
-  const value = process.env[name]?.trim();
-  if (!value || value.length < 12) {
-    throw new Error(`${name} must be at least 12 characters when SEED_DEMO_DATA=true`);
-  }
-  return value;
-}
-
-function seedAdminEmail(): string {
-  return process.env.SEED_ADMIN_EMAIL?.trim() || "admin@example.com";
-}
-
-function explicitSeedPassword(name: "SEED_ADMIN_PASSWORD" | "SEED_DEMO_PASSWORD"): string | null {
-  const value = process.env[name]?.trim();
-  if (!value) return null;
-  if (value.length < 12) {
-    throw new Error(`${name} must be at least 12 characters`);
-  }
-  return value;
-}
-
-function bootstrapCredentialsPath(): string {
-  const dbPath = process.env.DATABASE_PATH || path.join(__dirname, "data/xiongyuan.db");
-  return path.join(path.dirname(dbPath), "bootstrap-credentials.txt");
-}
-
-function readBootstrapPassword(file: string): string | null {
-  if (!fs.existsSync(file)) return null;
-  const match = /^password=(.+)$/m.exec(fs.readFileSync(file, "utf8"));
-  const value = match?.[1]?.trim() ?? "";
-  return value.length >= 12 ? value : null;
-}
-
-/** Random local password, stored once beside the database. Never logged. */
-function generatedBootstrapPassword(): { password: string; created: boolean } {
-  const file = bootstrapCredentialsPath();
-  const existing = readBootstrapPassword(file);
-  if (existing) return { password: existing, created: false };
-  const password = randomBytes(24).toString("base64url");
-  fs.mkdirSync(path.dirname(file), { recursive: true });
-  fs.writeFileSync(
-    file,
-    [
-      "# Local bootstrap credentials for this machine only.",
-      "# Sign in once, then change the password. Do not commit this file.",
-      `password=${password}`,
-      "",
-    ].join("\n"),
-    { encoding: "utf8", mode: 0o600 },
-  );
-  try {
-    fs.chmodSync(file, 0o600);
-  } catch {
-    // Windows ACLs are not POSIX modes; the file still stays under the user profile.
-  }
-  console.log(`[seed] local bootstrap credentials written to ${file}`);
-  return { password, created: true };
-}
-
-function upsertBootstrapUser(opts: {
-  email: string;
-  password: string;
-  nickname: string;
-  role: string;
-  tenantId: number;
-  mustChange: boolean;
-}): void {
-  const existing = dbGet("SELECT id FROM users WHERE email = ?", [opts.email]);
-  if (existing) return;
-  const hash = bcrypt.hashSync(opts.password, 10);
-  dbRun(
-    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, ?, ?, ?)",
-    [opts.email, hash, opts.nickname, opts.role, opts.tenantId, opts.mustChange ? 1 : 0],
-  );
-  console.log(`[seed] local bootstrap account ${opts.email}`);
-}
-
-function devBootstrapRequested(): boolean {
-  for (const key of ["FREEOS_ORG_DEV_BOOTSTRAP", "FREEOS_ORG_LOCAL_TEST"]) {
-    const value = (process.env[key] || "").trim().toLowerCase();
-    if (value === "1" || value === "true" || value === "yes" || value === "on") return true;
-  }
-  return false;
-}
-
-function bootstrapMarkerPath(): string {
-  const dbPath = process.env.DATABASE_PATH || path.join(__dirname, "data/xiongyuan.db");
-  return path.join(path.dirname(dbPath), "local-bootstrap.done");
-}
-
-/** Dev-only first empty database. Release installs never create demo accounts. */
-export function ensureLocalBootstrap(): void {
-  if (!devBootstrapRequested()) return;
-  const marker = bootstrapMarkerPath();
-  if (fs.existsSync(marker)) return;
-  const userCount = dbGet("SELECT COUNT(*) as c FROM users") as { c?: number } | undefined;
-  if (userCount && Number(userCount.c) > 0) {
-    fs.mkdirSync(path.dirname(marker), { recursive: true });
-    fs.writeFileSync(marker, "skipped-existing-users\n", "utf8");
-    return;
-  }
-  dbRun(
-    "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (1, ?, ?, 'active', 'community')",
-    ["openXYOS", "openxyos"],
-  );
-  dbRun(
-    "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, ?, ?, 'active', 'community')",
-    ["openXYOS 本地租户", "openxyos-local"],
-  );
-
-  const demoExplicit = explicitSeedPassword("SEED_DEMO_PASSWORD");
-  const adminExplicit = explicitSeedPassword("SEED_ADMIN_PASSWORD");
-  const generated = demoExplicit && adminExplicit ? null : generatedBootstrapPassword();
-  const demoPassword = demoExplicit ?? generated!.password;
-  const adminPassword = adminExplicit ?? generated!.password;
-  const adminEmail = seedAdminEmail();
-
-  upsertBootstrapUser({
-    email: "demo@demo.com",
-    password: demoPassword,
-    nickname: "管理员",
-    role: "admin",
-    tenantId: 2,
-    mustChange: demoExplicit === null,
-  });
-  upsertBootstrapUser({
-    email: "user@demo.com",
-    password: demoPassword,
-    nickname: "同事",
-    role: "user",
-    tenantId: 2,
-    mustChange: demoExplicit === null,
-  });
-  if (adminEmail !== "demo@demo.com") {
-    upsertBootstrapUser({
-      email: adminEmail,
-      password: adminPassword,
-      nickname: "超级管理员",
-      role: "super_admin",
-      tenantId: 1,
-      mustChange: adminExplicit === null,
-    });
-  }
-  fs.mkdirSync(path.dirname(marker), { recursive: true });
-  fs.writeFileSync(marker, "created\n", "utf8");
+/**
+ * Release entry. Demo accounts and demo rows live in backend/dev/demo-seed.ts,
+ * which the sidecar bundle excludes. FREEOS_ORG_LOCAL_TEST inherited from a
+ * parent process is not enough; FREEOS_DEV_BUILD must be set as well.
+ */
+function envTruthy(name: string): boolean {
+  const value = (process.env[name] || "").trim().toLowerCase();
+  return value === "1" || value === "true" || value === "yes" || value === "on";
 }
 
-// 辅助：日期加月份 → ISO日期字符串
-function addMonths(dateStr: string | null | undefined, months: number): string | null {
-  if (!dateStr) return null;
-  const d = new Date(dateStr);
-  d.setUTCMonth(d.getUTCMonth() + months);
-  return d.toISOString().split("T")[0];
+export function devSeedAllowed(): boolean {
+  return envTruthy("FREEOS_DEV_BUILD");
 }
 
-export function seedDatabase() {
-  if (process.env.FREEOS_ORG_INTEGRATED === "1") {
-    // Real installs keep their own accounts. Demo users exist only behind an
-    // explicit dev switch, and only on a database that has never had a user.
-    if (devBootstrapRequested()) ensureLocalBootstrap();
+export async function seedDatabase(): Promise<void> {
+  if (!devSeedAllowed()) {
+    console.log("[seed] Release build does not include demo seed data.");
     return;
   }
-  if (process.env.SEED_DEMO_DATA !== "true") {
-    console.log("[seed] Demo data is disabled. Release installs do not create demo@demo.com.");
-    return;
-  }
-
-  // Demo users, companies, departments and modules consistently belong to tenant #2.
-  // Keep the tenant row present even when a prior partial seed left user data behind.
-  dbRun(
-    "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, ?, ?, 'active', 'community')",
-    ["openXYOS 演示租户", "openxyos-demo"],
-  );
-
-  const userCount = dbGet("SELECT COUNT(*) as c FROM users") as any;
-
-  if (userCount.c === 0) {
-    console.log("[种子] 初始化演示数据...");
-
-    const adminHash = bcrypt.hashSync(requiredSeedSecret("SEED_ADMIN_PASSWORD"), 10);
-    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
-      [seedAdminEmail(), adminHash, "超级管理员", "super_admin", 1]);
-
-    const demoHash = bcrypt.hashSync(requiredSeedSecret("SEED_DEMO_PASSWORD"), 10);
-    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
-      ["demo@demo.com", demoHash, "张总", "admin", 2]);
-
-    const userHash = bcrypt.hashSync(requiredSeedSecret("SEED_DEMO_PASSWORD"), 10);
-    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
-      ["user@demo.com", userHash, "李员工", "user", 2]);
-
-    dbRun("INSERT INTO companies (name, tenant_id) VALUES (?, ?)", ["雄元科技", 1]);
-
-    // ===== 部门层级结构（17个部门，4级管理） =====
-    // L1: 董事长办公室
-    // L2: CEO办公室
-    // L3: CTO办公室 / COO办公室 / CAO办公室
-    // L4: 12个中心
-
-    const deptDefs: { name: string; parentIdx: number | null; desc: string }[] = [
-      // L1
-      { name: "董事长办公室", parentIdx: null, desc: "战略决策·资本运作" },                        // 0
-      // L2
-      { name: "CEO办公室", parentIdx: 0, desc: "经营决策·全局统筹" },                              // 1
-      // L3
-      { name: "CTO办公室", parentIdx: 1, desc: "技术战略·产品路线·研发资源·交付质量" },              // 2
-      { name: "COO办公室", parentIdx: 1, desc: "市场拓展·商务谈判·运营效率·客户成功" },              // 3
-      { name: "CAO办公室", parentIdx: 1, desc: "人才战略·财务管控·行政保障·合规风控" },              // 4
-      // L4 - CTO线
-      { name: "产品研发中心", parentIdx: 2, desc: "AI智能体产品技术引擎，核心平台研发" },             // 5
-      { name: "技术保障中心", parentIdx: 2, desc: "技术底座守护者，系统稳定与安全" },                // 6
-      { name: "数据中心", parentIdx: 2, desc: "数据资产管理，赋能业务数据驱动" },                    // 7
-      { name: "交付管理中心", parentIdx: 2, desc: "项目交付铁三角核心，客户项目高质量落地" },          // 8
-      // L4 - COO线
-      { name: "商务中心", parentIdx: 3, desc: "营收引擎，市场开拓与商务转化" },                     // 9
-      { name: "运营中心", parentIdx: 3, desc: "效率中枢，驱动公司内部运营效能" },                    // 10
-      { name: "客户成功中心", parentIdx: 3, desc: "客户关系守护者，驱动复购与口碑" },                // 11
-      { name: "顾问中心", parentIdx: 3, desc: "行业智库，AI落地咨询与方案设计" },                   // 12
-      // L4 - CAO线
-      { name: "行政中心", parentIdx: 4, desc: "后勤保障中枢" },                                   // 13
-      { name: "人力资源中心", parentIdx: 4, desc: "人才引擎，驱动组织能力建设" },                   // 14
-      { name: "财务中心", parentIdx: 4, desc: "资金管家，确保财务健康与合规" },                     // 15
-      { name: "质量管理与战略中心", parentIdx: 4, desc: "质量守门员与战略参谋" },                   // 16
-    ];
-
-    const deptIds: number[] = [];
-    for (let i = 0; i < deptDefs.length; i++) {
-      const d = deptDefs[i];
-      const r = dbRun(
-        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
-        [1, d.name, d.parentIdx !== null ? deptIds[d.parentIdx] : null, i, d.desc, 1]
-      );
-      deptIds.push(r.lastInsertRowid);
-    }
-
-    // ===== 员工数据（按文档：71人，12中心，人类+AI混合） =====
-    // 管理层（人类） + 各中心负责人（人类/AI） + 中心成员（AI）
-
-    // --- L1-L3 管理层（全部人类） ---
-    const executives = [
-      { name: "张总", role: "董事长", dept: 0, type: "human" as const, emoji: "👔", skills: "战略决策,资本运作,行业布局", agent: null },
-      { name: "陈远", role: "CEO", dept: 1, type: "human" as const, emoji: "👔", skills: "经营决策,全局统筹,资源调度", agent: null },
-      { name: "CEO助理", role: "总裁办秘书", dept: 1, type: "human" as const, emoji: "📋", skills: "会议纪要,决议督办,跨部门协调", agent: null },
-      { name: "林技", role: "CTO", dept: 2, type: "human" as const, emoji: "💻", skills: "技术战略,产品路线,研发管理", agent: null },
-      { name: "刘运", role: "COO", dept: 3, type: "human" as const, emoji: "📊", skills: "市场拓展,商务谈判,运营效率", agent: null },
-      { name: "孙行", role: "CAO", dept: 4, type: "human" as const, emoji: "🏢", skills: "人才战略,财务管控,行政保障", agent: null },
-    ];
-
-    // --- L4 总监（12位，部分人类、部分AI） ---
-    const directors = [
-      { name: "赵产", role: "产品研发中心总监", dept: 5, type: "human" as const, emoji: "🎯", skills: "产品架构,Sprint管理,代码质量", agent: null },
-      { name: "钱技", role: "技术保障中心总监", dept: 6, type: "human" as const, emoji: "🛡️", skills: "基础设施,信息安全,DevOps", agent: null },
-      { name: "孙数", role: "数据中心总监", dept: 7, type: "human" as const, emoji: "📈", skills: "数据平台,数据治理,BI分析", agent: null },
-      { name: "李交", role: "交付管理中心总监", dept: 8, type: "human" as const, emoji: "🚀", skills: "项目管理,交付标准,风险控制", agent: null },
-      { name: "周商", role: "商务中心总监", dept: 9, type: "human" as const, emoji: "💼", skills: "营收增长,客户开发,商务谈判", agent: null },
-      { name: "吴运", role: "运营中心总监", dept: 10, type: "human" as const, emoji: "⚙️", skills: "流程优化,效能管理,资源调度", agent: null },
-      { name: "郑客", role: "客户成功中心总监", dept: 11, type: "human" as const, emoji: "🤝", skills: "客户管理,满意度提升,续约推动", agent: null },
-      { name: "王问", role: "顾问中心总监", dept: 12, type: "human" as const, emoji: "💡", skills: "行业方案,售前支持,需求分析", agent: null },
-      { name: "冯行", role: "行政中心总监", dept: 13, type: "human" as const, emoji: "📎", skills: "办公环境,资产采购,制度管理", agent: null },
-      { name: "陈人", role: "人力资源中心总监", dept: 14, type: "human" as const, emoji: "👥", skills: "人才招聘,培训发展,绩效薪酬", agent: null },
-      { name: "褚财", role: "财务中心总监", dept: 15, type: "human" as const, emoji: "💰", skills: "财务核算,预算管理,税务合规", agent: null },
-      { name: "卫质", role: "质量管理与战略中心总监", dept: 16, type: "human" as const, emoji: "✅", skills: "质量标准,流程审计,战略跟踪", agent: null },
-    ];
-
-    // --- L5 各中心成员（AI数字员工，共53人，总计71人） ---
-    const centerStaff = [
-      // 产品研发中心 (10人)
-      { name: "周前", role: "前端工程师", dept: 5, type: "ai" as const, emoji: "🎨", skills: "React,TypeScript,Tailwind CSS", agent: "frontend_dev" },
-      { name: "吴后", role: "后端工程师", dept: 5, type: "ai" as const, emoji: "⚙️", skills: "Node.js,PostgreSQL,Redis", agent: "backend_dev" },
-      { name: "郑测", role: "测试工程师", dept: 5, type: "ai" as const, emoji: "🔍", skills: "自动化测试,性能测试,安全审计", agent: "qa_engineer" },
-      { name: "李知", role: "知识管理员", dept: 5, type: "ai" as const, emoji: "📚", skills: "知识沉淀,文档管理,信息检索", agent: "knowledge" },
-      { name: "AI产品经理", role: "产品经理", dept: 5, type: "ai" as const, emoji: "🎯", skills: "需求分析,产品规划,用户研究", agent: "product_manager" },
-      { name: "AI架构师", role: "技术架构师", dept: 5, type: "ai" as const, emoji: "🏗️", skills: "系统设计,技术选型,架构评审", agent: "tech_architect" },
-      { name: "AI全栈工程师", role: "全栈工程师", dept: 5, type: "ai" as const, emoji: "🔥", skills: "React,Node.js,数据库,系统设计", agent: "fullstack_dev" },
-      { name: "AI移动端工程师", role: "移动端工程师", dept: 5, type: "ai" as const, emoji: "📱", skills: "React Native,Flutter,iOS,Android", agent: "mobile_dev" },
-      { name: "AI小程序工程师", role: "小程序工程师", dept: 5, type: "ai" as const, emoji: "💬", skills: "微信小程序,Taro,uni-app", agent: "miniapp_dev" },
-      { name: "AI代码审查员", role: "代码审查员", dept: 5, type: "ai" as const, emoji: "🔎", skills: "代码审查,编码规范,质量把控", agent: "code_reviewer" },
-
-      // 技术保障中心 (6人)
-      { name: "AI运维工程师", role: "运维工程师", dept: 6, type: "ai" as const, emoji: "🔧", skills: "云运维,容器化,监控告警", agent: "backend_dev" },
-      { name: "AI安全工程师", role: "安全工程师", dept: 6, type: "ai" as const, emoji: "🔐", skills: "渗透测试,安全审计,合规检查", agent: "qa_engineer" },
-      { name: "AI DevOps工程师", role: "DevOps工程师", dept: 6, type: "ai" as const, emoji: "🔄", skills: "CI/CD,自动化部署,效能度量", agent: "sre_engineer" },
-      { name: "AI SRE工程师", role: "SRE工程师", dept: 6, type: "ai" as const, emoji: "🛠️", skills: "Linux,Docker,Kubernetes,监控告警", agent: "sre_engineer" },
-      { name: "AI网络工程师", role: "网络工程师", dept: 6, type: "ai" as const, emoji: "🌐", skills: "网络架构,负载均衡,CDN", agent: "sre_engineer" },
-      { name: "AI安全审计员", role: "安全审计员", dept: 6, type: "ai" as const, emoji: "🛡️", skills: "安全审计,合规检查,风险评估", agent: "qa_engineer" },
-
-      // 数据中心 (6人)
-      { name: "AI数据工程师", role: "数据工程师", dept: 7, type: "ai" as const, emoji: "🗄️", skills: "ETL,数据仓库,数据管道", agent: "data_engineer" },
-      { name: "AI数据分析师", role: "数据分析师", dept: 7, type: "ai" as const, emoji: "📊", skills: "BI报表,数据可视化,业务分析", agent: "bi_analyst" },
-      { name: "AI ML工程师", role: "ML工程师", dept: 7, type: "ai" as const, emoji: "🤖", skills: "模型训练,特征工程,AI应用", agent: "ai_engineer" },
-      { name: "AI DBA", role: "数据库管理员", dept: 7, type: "ai" as const, emoji: "🗃️", skills: "PostgreSQL,MySQL,数据库调优", agent: "dba" },
-      { name: "AI数据治理专员", role: "数据治理专员", dept: 7, type: "ai" as const, emoji: "📐", skills: "数据质量,数据标准,元数据管理", agent: "data_engineer" },
-      { name: "AI BI分析师", role: "BI分析师", dept: 7, type: "ai" as const, emoji: "📈", skills: "BI报表,数据可视化,SQL", agent: "bi_analyst" },
-
-      // 交付管理中心 (6人)
-      { name: "AI项目经理", role: "项目经理", dept: 8, type: "ai" as const, emoji: "📋", skills: "项目管理,进度控制,风险管理", agent: "product_manager" },
-      { name: "AI交付工程师", role: "交付工程师", dept: 8, type: "ai" as const, emoji: "🚀", skills: "部署实施,客户培训,知识转移", agent: "backend_dev" },
-      { name: "AI交付支持", role: "交付支持", dept: 8, type: "ai" as const, emoji: "🛠️", skills: "技术支持,问题排查,文档编写", agent: "qa_engineer" },
-      { name: "AI PMO", role: "PMO专员", dept: 8, type: "ai" as const, emoji: "📊", skills: "项目监控,资源协调,流程优化", agent: "strategy_executive" },
-      { name: "AI需求分析师", role: "需求分析师", dept: 8, type: "ai" as const, emoji: "📝", skills: "需求调研,方案设计,客户沟通", agent: "presales_architect" },
-      { name: "AI实施顾问", role: "实施顾问", dept: 8, type: "ai" as const, emoji: "🎓", skills: "系统实施,用户培训,上线支持", agent: "customer_success" },
-
-      // 商务中心 (6人)
-      { name: "AI商务经理", role: "商务经理", dept: 9, type: "ai" as const, emoji: "💼", skills: "客户开发,商务谈判,合同管理", agent: "sales_manager" },
-      { name: "AI渠道经理", role: "渠道经理", dept: 9, type: "ai" as const, emoji: "🔗", skills: "渠道建设,合作伙伴,市场拓展", agent: "sales_manager" },
-      { name: "AI市场分析师", role: "市场分析师", dept: 9, type: "ai" as const, emoji: "📈", skills: "竞品分析,市场洞察,情报收集", agent: "bi_analyst" },
-      { name: "AI售前架构师", role: "售前架构师", dept: 9, type: "ai" as const, emoji: "🏗️", skills: "方案设计,售前支持,需求分析,技术咨询", agent: "presales_architect" },
-      { name: "AI品牌经理", role: "品牌经理", dept: 9, type: "ai" as const, emoji: "📢", skills: "品牌推广,公关传播,内容营销", agent: "newmedia_ops" },
-      { name: "AI电商运营", role: "电商运营", dept: 9, type: "ai" as const, emoji: "🛒", skills: "电商运营,商品管理,活动策划", agent: "ecommerce_ops" },
-
-      // 运营中心 (5人)
-      { name: "AI运营专员", role: "运营专员", dept: 10, type: "ai" as const, emoji: "⚙️", skills: "流程优化,SOP建设,数据分析", agent: "product_manager" },
-      { name: "AI效能分析师", role: "效能分析师", dept: 10, type: "ai" as const, emoji: "📊", skills: "效能度量,资源调度,运营报告", agent: "bi_analyst" },
-      { name: "AI数字员工运营", role: "数字员工运营", dept: 10, type: "ai" as const, emoji: "🤖", skills: "数字员工管理,效能监控,任务调度", agent: "customer_success" },
-      { name: "AI流程优化师", role: "流程优化师", dept: 10, type: "ai" as const, emoji: "🔄", skills: "流程分析,SOP优化,自动化", agent: "strategy_executive" },
-      { name: "AI新媒体运营", role: "新媒体运营", dept: 10, type: "ai" as const, emoji: "📱", skills: "内容策划,社交媒体,用户增长", agent: "newmedia_ops" },
-
-      // 客户成功中心 (5人)
-      { name: "AI客户成功经理", role: "客户成功经理", dept: 11, type: "ai" as const, emoji: "🤝", skills: "客户管理,满意度跟踪,续约推动", agent: "customer_success" },
-      { name: "AI客户运营", role: "客户运营", dept: 11, type: "ai" as const, emoji: "📞", skills: "客户沟通,问题处理,案例沉淀", agent: "customer_success" },
-      { name: "AI客户培训师", role: "客户培训师", dept: 11, type: "ai" as const, emoji: "🎓", skills: "客户培训,课程设计,知识转移", agent: "customer_success" },
-      { name: "AI客户数据分析师", role: "客户数据分析师", dept: 11, type: "ai" as const, emoji: "📊", skills: "客户分析,流失预警,价值评估", agent: "bi_analyst" },
-      { name: "AI客户体验设计师", role: "客户体验设计师", dept: 11, type: "ai" as const, emoji: "✨", skills: "用户体验,服务设计,满意度提升", agent: "product_manager" },
-
-      // 顾问中心 (5人)
-      { name: "AI行业顾问", role: "行业顾问", dept: 12, type: "ai" as const, emoji: "💡", skills: "行业方案,需求分析,方案编写", agent: "presales_architect" },
-      { name: "AI解决方案架构师", role: "解决方案架构师", dept: 12, type: "ai" as const, emoji: "🏗️", skills: "方案设计,售前支持,技术咨询", agent: "tech_architect" },
-      { name: "AI金融科技顾问", role: "金融科技顾问", dept: 12, type: "ai" as const, emoji: "💳", skills: "金融科技,风控咨询,数字化升级", agent: "fintech_consultant" },
-      { name: "AI制造业顾问", role: "制造业顾问", dept: 12, type: "ai" as const, emoji: "🏭", skills: "智能制造,工业4.0,供应链优化", agent: "manufacturing_consultant" },
-      { name: "AI政务顾问", role: "政务顾问", dept: 12, type: "ai" as const, emoji: "🏛️", skills: "数字政务,智慧城市,政务信息化", agent: "gov_consultant" },
-
-      // 行政中心 (3人)
-      { name: "AI行政专员", role: "行政专员", dept: 13, type: "ai" as const, emoji: "📎", skills: "资产管理,制度执行,供应商管理", agent: "hr_manager" },
-      { name: "AI法务顾问", role: "法务顾问", dept: 13, type: "ai" as const, emoji: "⚖️", skills: "合同审查,法律咨询,合规检查,知识产权", agent: "legal_advisor" },
-      { name: "AI知识产权专员", role: "知识产权专员", dept: 13, type: "ai" as const, emoji: "📄", skills: "专利申请,商标注册,知识产权保护", agent: "ip_specialist" },
-
-      // 人力资源中心 (4人)
-      { name: "AI HRBP", role: "HRBP", dept: 14, type: "ai" as const, emoji: "👥", skills: "人才配置,员工关系,组织发展", agent: "hr_manager" },
-      { name: "AI招聘专员", role: "招聘专员", dept: 14, type: "ai" as const, emoji: "🎯", skills: "人才招聘,简历筛选,面试安排", agent: "hr_manager" },
-      { name: "AI培训专员", role: "培训专员", dept: 14, type: "ai" as const, emoji: "📖", skills: "培训开发,课程设计,学习发展", agent: "hr_manager" },
-      { name: "AI薪酬绩效专员", role: "薪酬绩效专员", dept: 14, type: "ai" as const, emoji: "💎", skills: "薪酬设计,绩效管理,激励方案", agent: "hr_manager" },
-
-      // 财务中心 (4人)
-      { name: "AI会计", role: "会计", dept: 15, type: "ai" as const, emoji: "💰", skills: "财务核算,报表编制,税务处理", agent: "financial_accountant" },
-      { name: "AI出纳", role: "出纳", dept: 15, type: "ai" as const, emoji: "💳", skills: "资金管理,费用审核,账务处理", agent: "cashier" },
-      { name: "AI财务经理", role: "财务经理", dept: 15, type: "ai" as const, emoji: "📊", skills: "财务核算,费用管理,报表编制", agent: "finance_manager" },
-      { name: "AI管理会计师", role: "管理会计师", dept: 15, type: "ai" as const, emoji: "📐", skills: "成本分析,预算编制,经营分析", agent: "mgmt_accountant" },
-
-      // 质量管理与战略中心 (4人)
-      { name: "AI质量工程师", role: "质量工程师", dept: 16, type: "ai" as const, emoji: "✅", skills: "质量审核,流程审计,标准制定", agent: "qa_engineer" },
-      { name: "AI战略分析师", role: "战略分析师", dept: 16, type: "ai" as const, emoji: "🔭", skills: "战略规划,OKR管理,行业研究", agent: "strategy_executive" },
-      { name: "AI投资经理", role: "投资经理", dept: 16, type: "ai" as const, emoji: "💎", skills: "项目尽调,投资分析,投后管理", agent: "investment_manager" },
-      { name: "AI医疗行业顾问", role: "医疗行业顾问", dept: 16, type: "ai" as const, emoji: "🏥", skills: "医疗行业,合规咨询,数字化转型", agent: "medical_consultant" },
-    ];
-
-    // 插入所有员工
-    const allEmployees = [...executives, ...directors, ...centerStaff];
-    for (const e of allEmployees) {
-      dbRun(
-        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)",
-        [1, deptIds[e.dept], e.name, e.role, e.agent, e.type, e.skills, e.emoji, 1]
-      );
-    }
-
-    // ===== 集团管控架构：区域分公司 + 外派分支 + 项目标段 + 现场试验室 =====
-    // COO线(属地管辖): COO办公室→区域分公司→外派分支→项目组→现场试验室
-    // CTO线(专业管辖): CTO办公室→交付管理中心→现场试验室(secondary_parent_id)
-    const cooDeptId = deptIds[3];    // COO办公室
-    const dmCenterId = deptIds[8];   // 交付管理中心(CTO线)
-    const allBranchDepts: Record<string, number> = {};
-    let deptSeq2 = 100;
-
-    // 4个区域分公司
-    const regions = [
-      { name: "华东区域分公司", code: "华东" },
-      { name: "华南区域分公司", code: "华南" },
-      { name: "西部区域分公司", code: "西部" },
-      { name: "华北区域分公司", code: "华北" },
-    ];
-    const regionIds2: number[] = [];
-    for (const r of regions) {
-      const rr = dbRun(
-        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (1,?,?,?,?,1,'regional','regional',?,1)",
-        [r.name, cooDeptId, deptSeq2++, `${r.code}区域业务统筹·下设外派分支`, r.code]
-      );
-      regionIds2.push(rr.lastInsertRowid);
-      allBranchDepts[r.name] = rr.lastInsertRowid;
-    }
-
-    // 外派分支定义: [区域索引, 分支名, 城市]
-    const branchDefs: [number, string, string][] = [
-      [0,"上海外派分支","上海"],[0,"南京外派分支","南京"],[0,"杭州外派分支","杭州"],
-      [0,"合肥外派分支","合肥"],[0,"苏州外派分支","苏州"],[0,"宁波外派分支","宁波"],
-      [1,"广州外派分支","广州"],[1,"深圳外派分支","深圳"],[1,"南宁外派分支","南宁"],
-      [1,"福州外派分支","福州"],[1,"海口外派分支","海口"],
-      [2,"成都外派分支","成都"],[2,"重庆外派分支","重庆"],[2,"昆明外派分支","昆明"],
-      [2,"西安外派分支","西安"],[2,"兰州外派分支","兰州"],
-      [3,"北京外派分支","北京"],[3,"天津外派分支","天津"],[3,"石家庄外派分支","石家庄"],
-      [3,"郑州外派分支","郑州"],
-    ];
-
-    // 外派分支 + 项目组 + 试验室
-    for (const [ri, bName, city] of branchDefs) {
-      const regionId = regionIds2[ri];
-      const rc = regions[ri];
-      const br = dbRun(
-        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (1,?,?,?,?,1,'branch','branch',?,2)",
-        [bName, regionId, deptSeq2++, `${city}外派·属地业务管理`, rc.code]
-      );
-      const branchId = br.lastInsertRowid;
-      allBranchDepts[bName] = branchId;
-
-      // 项目组 (每个分支2个)
-      const projNames = [`${city}一标项目组`, `${city}二标项目组`];
-      for (const projName of projNames) {
-        const pr = dbRun(
-          "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (1,?,?,?,?,1,'project','project',?,3)",
-          [projName, branchId, deptSeq2++, `${projName}—下设现场试验室`, rc.code]
-        );
-        const projId = pr.lastInsertRowid;
-        allBranchDepts[projName] = projId;
-
-        // 试验室 (一标2个，二标1个，交替)
-        const labCount = projName.includes("一标") ? 2 : 1;
-        for (let li = 0; li < labCount; li++) {
-          const labSuffix = labCount === 2 ? (li === 0 ? "A" : "B") : "";
-          const labName = projName.replace("项目组", labSuffix + "试验室");
-          const lr = dbRun(
-          "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level, secondary_parent_id) VALUES (1,?,?,?,?,1,'site_lab','site_lab',?,4,?)",
-            [labName, projId, deptSeq2++, `双重汇报·属地归${bName}·专业归交付管理中心`, rc.code, dmCenterId]
-          );
-          allBranchDepts[labName] = lr.lastInsertRowid;
-        }
-      }
-    }
-
-    // 统计
-    const totalBranchUnits = Object.keys(allBranchDepts).length;
-    const fieldBranchCount = branchDefs.length;
-    const labCount2 = Object.keys(allBranchDepts).filter(k => k.includes("试验室")).length;
-
-    // ===== 外派员工生成 =====
-    const surnames = ["王","李","张","刘","陈","杨","黄","赵","周","吴","徐","孙","马","朱","胡","林","郭","何","高","罗","郑","梁","谢","宋","唐","许","邓","韩","冯","曹","彭","曾","萧","田","董","袁","潘","于","蒋","蔡","余","杜","叶","程","苏","魏","吕","丁","任","沈","姚","卢","姜","崔","钟","谭","陆","汪","范","金","石","廖","贾","夏","韦","付","方","白","邹","孟","熊","秦","邱","江","尹","薛","闫","段","雷","侯","龙","史","陶","黎","贺","顾","毛","郝","龚","邵","万","钱","严","覃","武","戴","莫","孔","向","汤"];
-    let sIdx = 0;
-
-    // 分支经理 (人类, 20人)
-    const fieldEmpNames: string[] = [];
-    for (const [, bName, city] of branchDefs) {
-      const n = surnames[sIdx % surnames.length] + city.charAt(0) + "经理";
-      dbRun(
-        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
-        [allBranchDepts[bName], n, "分支经理", null, "human", "团队管理,属地协调,进度把控,安全管理", "👔", 1]
-      );
-      sIdx++;
-    }
-
-    // 分支AI核心人员 (每分支4人 = 80人)
-    const branchAIRoles = [
-      { role: "技术负责人", skills: "技术方案,质量把关,标准执行", e: "🔧", agent: "tech_architect" },
-      { role: "安全主管", skills: "安全巡检,隐患整改,安全教育", e: "🛡️", agent: "qa_engineer" },
-      { role: "资料主管", skills: "档案管理,报表编制,数据录入", e: "📄", agent: "data_engineer" },
-      { role: "综合管理员", skills: "行政后勤,物资管理,人事协调", e: "📎", agent: "hr_manager" },
-    ];
-    for (const [, bName, city] of branchDefs) {
-      for (const r of branchAIRoles) {
-        const n = surnames[sIdx % surnames.length] + city.charAt(0) + r.role.charAt(0);
-        dbRun(
-          "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
-          [allBranchDepts[bName], n, r.role, r.agent, "ai", r.skills, r.e, 1]
-        );
-        sIdx++;
-      }
-    }
-
-    // 项目级 (每项目1PM+2工程师)
-    for (const depName of Object.keys(allBranchDepts)) {
-      if (!depName.includes("项目组")) continue;
-      const n1 = surnames[sIdx % surnames.length] + "项" + (sIdx % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
-        [allBranchDepts[depName], n1, "项目经理", "product_manager", "ai", "项目管理,进度控制,风险管控,团队协调", "📋", 1]);
-      sIdx++;
-      const n2 = surnames[sIdx % surnames.length] + "工" + (sIdx % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
-        [allBranchDepts[depName], n2, "现场工程师", "backend_dev", "ai", "施工技术,检测方案,现场管理", "🔧", 1]);
-      sIdx++;
-      const n3 = surnames[sIdx % surnames.length] + "质" + (sIdx % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
-        [allBranchDepts[depName], n3, "质量工程师", "qa_engineer", "ai", "质量检测,材料试验,标准执行", "✅", 1]);
-      sIdx++;
-    }
-
-    // 试验室级 (每室1主任+2-3技术员)
-    for (const depName of Object.keys(allBranchDepts)) {
-      if (!depName.includes("试验室")) continue;
-      const n1 = surnames[sIdx % surnames.length] + "室" + (sIdx % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
-        [allBranchDepts[depName], n1, "试验室主任", "qa_engineer", "ai", "试验室管理,检测方案,报告审核", "🔬", 1]);
-      sIdx++;
-      const techRoles = [
-        { role: "检测技术员", skills: "材料试验,仪器操作,数据采集", e: "🧪", agent: "backend_dev" },
-        { role: "检测技术员", skills: "现场检测,取样分析,记录编制", e: "⚗️", agent: "qa_engineer" },
-        { role: "检测技术员", skills: "室内试验,养护管理,报告编制", e: "📊", agent: "data_engineer" },
-      ];
-      for (const t of techRoles) {
-        const n = surnames[sIdx % surnames.length] + "检" + (sIdx % 100);
-        dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (1,?,?,?,?,?,?,?,?)",
-          [allBranchDepts[depName], n, t.role, t.agent, "ai", t.skills, t.e, 1]);
-        sIdx++;
-      }
-    }
-
-    console.log(`[种子] 集团架构: ${totalBranchUnits}个分支组织单元 (含${fieldBranchCount}外派分支·${labCount2}试验室), ${sIdx}名外派员工`);
-
-    // 技能库种子数据（11大分类，完整技能市场）
-    const skillsLibrary = [
-      // 开发与技术
-      { name: "React", cat: "开发与技术", tags: "前端,JavaScript,UI", desc: "React 19 + Hooks + 状态管理，构建现代化前端应用", icon: "⚛️" },
-      { name: "TypeScript", cat: "开发与技术", tags: "前端,类型安全,JavaScript", desc: "TypeScript类型系统，提升代码质量和开发效率", icon: "🔷" },
-      { name: "Node.js", cat: "开发与技术", tags: "后端,JavaScript,服务端", desc: "Node.js服务端开发，Express/Koa/Fastify框架", icon: "💚" },
-      { name: "PostgreSQL", cat: "开发与技术", tags: "数据库,SQL,关系型", desc: "PostgreSQL数据库设计、优化与运维", icon: "🐘" },
-      { name: "Redis", cat: "开发与技术", tags: "缓存,NoSQL,内存数据库", desc: "Redis缓存策略、数据结构与高可用方案", icon: "🔴" },
-      { name: "Docker", cat: "开发与技术", tags: "容器,DevOps,部署", desc: "Docker容器化部署与镜像管理", icon: "🐳" },
-      { name: "Kubernetes", cat: "开发与技术", tags: "容器编排,云原生,运维", desc: "K8s集群管理、服务编排与自动扩缩容", icon: "☸️" },
-      { name: "Python", cat: "开发与技术", tags: "后端,AI,数据", desc: "Python编程，数据处理与AI应用开发", icon: "🐍" },
-      { name: "Go", cat: "开发与技术", tags: "后端,高并发,微服务", desc: "Go语言高并发服务开发", icon: "🔵" },
-      { name: "系统设计", cat: "开发与技术", tags: "架构,设计模式,分布式", desc: "大规模系统架构设计与技术选型", icon: "🏗️" },
-      { name: "API设计", cat: "开发与技术", tags: "REST,GraphQL,接口", desc: "RESTful/GraphQL API设计最佳实践", icon: "🔌" },
-      { name: "微服务架构", cat: "开发与技术", tags: "架构,分布式,服务治理", desc: "微服务拆分、服务治理与分布式事务", icon: "🧩" },
-      { name: "CI/CD", cat: "开发与技术", tags: "持续集成,持续部署,自动化", desc: "CI/CD流水线搭建与自动化部署", icon: "🔄" },
-      { name: "自动化测试", cat: "开发与技术", tags: "测试,质量保障,单元测试", desc: "单元测试、集成测试与E2E测试", icon: "🧪" },
-      { name: "性能优化", cat: "开发与技术", tags: "性能,调优,监控", desc: "应用性能分析、瓶颈定位与优化", icon: "⚡" },
-      { name: "安全测试", cat: "开发与技术", tags: "安全,渗透测试,漏洞", desc: "安全漏洞扫描、渗透测试与修复", icon: "🛡️" },
-      // 数据与金融
-      { name: "数据分析", cat: "数据与金融", tags: "数据,分析,可视化", desc: "数据采集、清洗、分析与可视化呈现", icon: "📊" },
-      { name: "BI报表", cat: "数据与金融", tags: "商业智能,报表,数据可视化", desc: "商业智能报表设计与数据看板搭建", icon: "📉" },
-      { name: "机器学习", cat: "数据与金融", tags: "AI,模型训练,预测", desc: "机器学习算法应用与模型训练", icon: "🧠" },
-      { name: "深度学习", cat: "数据与金融", tags: "AI,神经网络,NLP", desc: "深度学习框架与NLP/CV应用", icon: "🔬" },
-      { name: "ETL", cat: "数据与金融", tags: "数据管道,数据仓库,数据集成", desc: "数据抽取、转换、加载与数据仓库建设", icon: "🔀" },
-      { name: "数据治理", cat: "数据与金融", tags: "数据质量,数据标准,元数据", desc: "数据质量管理、数据标准制定与元数据管理", icon: "📐" },
-      { name: "财务分析", cat: "数据与金融", tags: "财务,报表分析,经营分析", desc: "财务报表分析、经营指标解读", icon: "💹" },
-      { name: "预算管理", cat: "数据与金融", tags: "预算,成本控制,财务管理", desc: "预算编制、执行监控与成本管控", icon: "💰" },
-      { name: "量化分析", cat: "数据与金融", tags: "量化,回测,策略", desc: "量化交易策略开发与回测验证", icon: "📈" },
-      { name: "税务筹划", cat: "数据与金融", tags: "税务,合规,税务优化", desc: "税务合规管理与合理税务筹划", icon: "🧾" },
-      // 营销与增长
-      { name: "市场策略", cat: "营销与增长", tags: "市场,品牌,定位", desc: "市场定位、品牌策略与竞争分析", icon: "🎯" },
-      { name: "品牌推广", cat: "营销与增长", tags: "品牌,传播,公关", desc: "品牌传播、公关活动与口碑管理", icon: "📢" },
-      { name: "SEO优化", cat: "营销与增长", tags: "SEO,搜索引擎,流量", desc: "搜索引擎优化与自然流量获取", icon: "🔍" },
-      { name: "内容营销", cat: "营销与增长", tags: "内容,营销,获客", desc: "内容策略、创作分发与获客转化", icon: "📝" },
-      { name: "社交媒体", cat: "营销与增长", tags: "社交,运营,用户增长", desc: "社交媒体运营与用户增长策略", icon: "📱" },
-      { name: "用户增长", cat: "营销与增长", tags: "增长,获客,留存", desc: "增长黑客方法论，拉新促活留存", icon: "🚀" },
-      { name: "广告投放", cat: "营销与增长", tags: "广告,投放,ROI", desc: "数字广告投放策略与ROI优化", icon: "💳" },
-      { name: "竞品分析", cat: "营销与增长", tags: "竞品,市场研究,差异化", desc: "竞品调研、差异化定位与策略制定", icon: "🔎" },
-      // 电商与跨境
-      { name: "电商运营", cat: "电商与跨境", tags: "电商,运营,商品管理", desc: "电商平台运营、商品管理与活动策划", icon: "🛒" },
-      { name: "跨境电商", cat: "电商与跨境", tags: "跨境,Amazon,速卖通", desc: "跨境电商平台运营与国际物流", icon: "🌍" },
-      { name: "供应链管理", cat: "电商与跨境", tags: "供应链,物流,采购", desc: "供应链优化、物流管理与采购策略", icon: "📦" },
-      { name: "选品分析", cat: "电商与跨境", tags: "选品,市场分析,爆品", desc: "市场趋势分析与爆品选品策略", icon: "🔎" },
-      { name: "店铺运营", cat: "电商与跨境", tags: "店铺,运营,转化率", desc: "店铺装修、流量运营与转化优化", icon: "🏪" },
-      // 内容与创作
-      { name: "文案写作", cat: "内容与创作", tags: "文案,写作,创意", desc: "商业文案、创意写作与内容策划", icon: "✍️" },
-      { name: "PPT设计", cat: "内容与创作", tags: "PPT,演示,设计", desc: "专业PPT设计与信息可视化呈现", icon: "📑" },
-      { name: "视频制作", cat: "内容与创作", tags: "视频,剪辑,创意", desc: "视频策划、拍摄剪辑与后期制作", icon: "🎬" },
-      { name: "UI设计", cat: "内容与创作", tags: "UI,设计,用户体验", desc: "用户界面设计与交互体验优化", icon: "🎨" },
-      { name: "信息可视化", cat: "内容与创作", tags: "可视化,图表,数据展示", desc: "数据可视化设计与图表呈现", icon: "📊" },
-      // 沟通与协作
-      { name: "商务谈判", cat: "沟通与协作", tags: "谈判,商务,沟通", desc: "商务谈判策略、沟通技巧与成交推动", icon: "🤝" },
-      { name: "项目管理", cat: "沟通与协作", tags: "项目,进度,协调", desc: "项目全生命周期管理与跨团队协调", icon: "📋" },
-      { name: "团队管理", cat: "沟通与协作", tags: "团队,领导力,管理", desc: "团队建设、人才培养与绩效管理", icon: "👥" },
-      { name: "客户沟通", cat: "沟通与协作", tags: "客户,沟通,关系维护", desc: "客户关系维护、需求理解与满意度提升", icon: "💬" },
-      { name: "跨部门协作", cat: "沟通与协作", tags: "协作,协调,组织", desc: "跨部门项目协调与资源整合", icon: "🔗" },
-      { name: "会议管理", cat: "沟通与协作", tags: "会议,效率,决策", desc: "高效会议组织、议程管理与决议跟踪", icon: "📅" },
-      // 法务与合规
-      { name: "合同审查", cat: "法务与合规", tags: "合同,法务,风险", desc: "合同条款审查、风险识别与修改建议", icon: "📜" },
-      { name: "知识产权", cat: "法务与合规", tags: "专利,商标,版权", desc: "专利申请、商标注册与知识产权保护", icon: "©️" },
-      { name: "合规检查", cat: "法务与合规", tags: "合规,审计,制度", desc: "合规体系搭建、制度审计与整改", icon: "✅" },
-      { name: "劳动法", cat: "法务与合规", tags: "劳动法,用工,员工关系", desc: "劳动法规咨询、用工风险防范", icon: "⚖️" },
-      // 学术与教育
-      { name: "培训开发", cat: "学术与教育", tags: "培训,课程,学习", desc: "企业培训体系搭建与课程开发", icon: "🎓" },
-      { name: "知识管理", cat: "学术与教育", tags: "知识,文档,沉淀", desc: "知识库建设、文档管理与知识沉淀", icon: "📚" },
-      { name: "行业研究", cat: "学术与教育", tags: "研究,分析,趋势", desc: "行业趋势研究、竞争格局分析", icon: "🔬" },
-      { name: "学术写作", cat: "学术与教育", tags: "论文,学术,研究", desc: "学术论文撰写、研究报告编制", icon: "📝" },
-      // AI增强与知识
-      { name: "Prompt工程", cat: "AI增强与知识", tags: "AI,Prompt,提示词", desc: "Prompt设计、优化与工程化实践", icon: "💡" },
-      { name: "RAG知识库", cat: "AI增强与知识", tags: "RAG,知识库,检索增强", desc: "检索增强生成架构设计与实现", icon: "🔍" },
-      { name: "Agent开发", cat: "AI增强与知识", tags: "AI Agent,智能体,自动化", desc: "AI Agent架构设计与工具集成", icon: "🤖" },
-      { name: "模型微调", cat: "AI增强与知识", tags: "微调,训练,LLM", desc: "大语言模型微调与领域适配", icon: "🔧" },
-      // 生活与健康
-      { name: "健康管理", cat: "生活与健康", tags: "健康,运动,饮食", desc: "健康生活方式、运动计划与营养指导", icon: "🌿" },
-      { name: "时间管理", cat: "生活与健康", tags: "时间,效率,规划", desc: "时间管理方法论与效率提升", icon: "⏰" },
-      // 沟通与协作（补充飞书生态）
-      { name: "飞书集成", cat: "沟通与协作", tags: "飞书,企业协作,API", desc: "飞书开放平台API集成与自动化", icon: "🐦" },
-      { name: "企业微信集成", cat: "沟通与协作", tags: "企业微信,微信,协作", desc: "企业微信API集成与消息自动化", icon: "💬" },
-    ];
-    for (const s of skillsLibrary) {
-      const slug = s.name.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, '-').replace(/-+$/, '');
-      const version = "1.0.0";
-      const installCount = Math.floor(Math.random() * 300) + 10;
-      const rating = parseFloat((3.5 + Math.random() * 1.5).toFixed(1));
-      dbRun(
-        "INSERT INTO skills (tenant_id, company_id, name, slug, category, description, tags, icon, source, version, author, install_count, rating, enabled) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
-        [1, 1, s.name, slug, s.cat, s.desc, s.tags, s.icon, "local", version, "雄元科技", installCount, rating, 1]
-      );
-    }
-
-    // 默认职级体系
-    const positionLevels = [
-      { code: "P1", name: "初级工程师", sequence: "P", level: 1 },
-      { code: "P2", name: "工程师", sequence: "P", level: 2 },
-      { code: "P3", name: "高级工程师", sequence: "P", level: 3 },
-      { code: "P4", name: "资深工程师", sequence: "P", level: 4 },
-      { code: "P5", name: "专家工程师", sequence: "P", level: 5 },
-      { code: "M1", name: "主管", sequence: "M", level: 1 },
-      { code: "M2", name: "经理", sequence: "M", level: 2 },
-      { code: "M3", name: "总监", sequence: "M", level: 3 },
-      { code: "D1", name: "副总裁", sequence: "D", level: 1 },
-      { code: "D2", name: "高级副总裁", sequence: "D", level: 2 },
-      { code: "C1", name: "C-Level", sequence: "C", level: 1 },
-      { code: "C2", name: "CEO", sequence: "C", level: 2 },
-    ];
-    for (const pl of positionLevels) {
-      dbRun("INSERT INTO position_levels (code, name, sequence, level, tenant_id) VALUES (?, ?, ?, ?, ?)",
-        [pl.code, pl.name, pl.sequence, pl.level, 1]);
-    }
-
-    const tasks = [
-      { title: "完成Q2产品路线图规划", priority: "high", status: "in_progress", assignee: 4 },
-      { title: "部署生产环境CI/CD流水线", priority: "critical", status: "in_progress", assignee: 2 },
-      { title: "编写API接口文档", priority: "medium", status: "todo", assignee: 3 },
-      { title: "设计新版Dashboard UI", priority: "high", status: "review", assignee: 7 },
-      { title: "性能压测报告", priority: "medium", status: "done", assignee: 9 },
-      { title: "月度财务分析报告", priority: "high", status: "in_progress", assignee: 3 },
-      { title: "竞品分析报告", priority: "low", status: "todo", assignee: 5 },
-      { title: "新员工入职培训方案", priority: "medium", status: "done", assignee: 6 },
-      { title: "数据库迁移方案评审", priority: "critical", status: "todo", assignee: 8 },
-      { title: "Q2市场推广计划", priority: "high", status: "in_progress", assignee: 5 },
-      { title: "安全审计漏洞修复", priority: "critical", status: "in_progress", assignee: 9 },
-      { title: "知识库文档整理", priority: "low", status: "done", assignee: 10 },
-    ];
-    for (const t of tasks) {
-      dbRun("INSERT INTO tasks (company_id, title, priority, status, assigned_to, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
-        [1, t.title, t.priority, t.status, t.assignee, 1]);
-    }
-
-    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [1, "总裁办战略会议", 2, 1]);
-    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [1, "CTO技术线周会", 2, 1]);
-    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [1, "产品需求讨论", 2, 1]);
-
-    const ceoMessages = [
-      { sender: "陈远 · CEO", type: "employee", content: "各位好，今天讨论Q2战略重点。核心目标：完成产品PMF验证、获取首批50家付费客户、建立Agent API基础架构。" },
-      { sender: "林技 · CTO", type: "employee", content: "技术侧建议：先完成数据库迁移，CI/CD流水线本周可以完成。" },
-      { sender: "赵产 · 产品研发中心总监", type: "employee", content: "产品侧反馈：Dashboard需要突出'AI员工正在工作'的实时感。" },
-      { sender: "褚财 · 财务中心总监", type: "employee", content: "财务提醒：建议尽快开通支付功能，启动收费。" },
-      { sender: "张总", type: "user", content: "好的，优先级明确了。散会。" },
-    ];
-    for (const m of ceoMessages) {
-      dbRun("INSERT INTO messages (chat_id, sender_type, sender_name, content, tenant_id) VALUES (?, ?, ?, ?, ?)",
-        [1, m.type, m.sender, m.content, 1]);
-    }
-
-    // 绩效评估种子数据
-    const performanceReviews = [
-      { employee_id: 7, type: "ai", period: "2026-Q2", overall: 88, task: 92, quality: 85, efficiency: 90, collab: 78, notes: "前端交付质量优秀，代码审查及时" },
-      { employee_id: 8, type: "ai", period: "2026-Q2", overall: 85, task: 88, quality: 82, efficiency: 86, collab: 80, notes: "后端架构稳定，API设计规范" },
-      { employee_id: 9, type: "ai", period: "2026-Q2", overall: 82, task: 85, quality: 80, efficiency: 78, collab: 85, notes: "测试覆盖率提升，发现多个关键bug" },
-      { employee_id: 10, type: "ai", period: "2026-Q2", overall: 90, task: 95, quality: 88, efficiency: 92, collab: 82, notes: "知识沉淀体系搭建完成，文档质量高" },
-      { employee_id: 11, type: "ai", period: "2026-Q2", overall: 86, task: 90, quality: 84, efficiency: 85, collab: 83, notes: "产品需求分析准确，用户反馈良好" },
-      { employee_id: 12, type: "ai", period: "2026-Q2", overall: 87, task: 88, quality: 90, efficiency: 84, collab: 82, notes: "技术架构设计合理，评审通过率高" },
-    ];
-    for (const r of performanceReviews) {
-      dbRun(
-        `INSERT INTO performance_reviews (tenant_id, employee_id, employee_type, review_period, overall_score, task_completion_score, quality_score, efficiency_score, collaboration_score, review_notes, status)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'approved')`,
-        [1, r.employee_id, r.type, r.period, r.overall, r.task, r.quality, r.efficiency, r.collab, r.notes]
-      );
-    }
-
-    // 绩效指标种子数据
-    const perfMetrics = [
-      { employee_id: 7, type: "task_completion_rate", value: 92, unit: "%", period: "2026-Q2" },
-      { employee_id: 7, type: "code_quality_score", value: 85, unit: "分", period: "2026-Q2" },
-      { employee_id: 7, type: "response_time_avg", value: 2.3, unit: "秒", period: "2026-Q2" },
-      { employee_id: 8, type: "task_completion_rate", value: 88, unit: "%", period: "2026-Q2" },
-      { employee_id: 8, type: "api_uptime", value: 99.9, unit: "%", period: "2026-Q2" },
-      { employee_id: 8, type: "response_time_avg", value: 1.8, unit: "秒", period: "2026-Q2" },
-      { employee_id: 9, type: "task_completion_rate", value: 85, unit: "%", period: "2026-Q2" },
-      { employee_id: 9, type: "bug_detection_rate", value: 94, unit: "%", period: "2026-Q2" },
-      { employee_id: 10, type: "task_completion_rate", value: 95, unit: "%", period: "2026-Q2" },
-      { employee_id: 10, type: "knowledge_entries", value: 156, unit: "篇", period: "2026-Q2" },
-      { employee_id: 11, type: "task_completion_rate", value: 90, unit: "%", period: "2026-Q2" },
-      { employee_id: 12, type: "task_completion_rate", value: 88, unit: "%", period: "2026-Q2" },
-    ];
-    for (const m of perfMetrics) {
-      dbRun(
-        "INSERT INTO performance_metrics (tenant_id, employee_id, employee_type, metric_type, metric_value, metric_unit, period) VALUES (?, ?, 'ai', ?, ?, ?, ?)",
-        [1, m.employee_id, m.type, m.value, m.unit, m.period]
-      );
-    }
-
-    // 心跳计划种子数据 - 为AI员工配置自动任务执行
-    const heartbeatSchedules = [
-      { agent_id: 7, task_type: "auto_execute", cron: "*/5 * * * *" },   // 周前 - 前端
-      { agent_id: 8, task_type: "auto_execute", cron: "*/5 * * * *" },   // 吴后 - 后端
-      { agent_id: 9, task_type: "auto_execute", cron: "*/5 * * * *" },   // 郑测 - 测试
-      { agent_id: 10, task_type: "auto_execute", cron: "*/10 * * * *" }, // 李知 - 知识管理
-      { agent_id: 11, task_type: "auto_execute", cron: "*/5 * * * *" },  // AI产品经理
-      { agent_id: 12, task_type: "auto_execute", cron: "*/5 * * * *" },  // AI架构师
-    ];
-    for (const hs of heartbeatSchedules) {
-      dbRun(
-        "INSERT INTO heartbeat_schedules (agent_id, task_type, cron_expression, enabled, next_run, tenant_id) VALUES (?, ?, ?, 1, datetime('now', '+1 minute'), ?)",
-        [hs.agent_id, hs.task_type, hs.cron, 1]
-      );
-    }
-
-    const notes = [
-      { title: "协作建议使用说明", content: "群聊中的智能助手可提供独立建议与纪要草稿；任务分配、批准和执行由组织成员确认。", tags: "协作,说明" },
-      { title: "开源示例说明", content: "示例数据仅用于本地开发和功能演示，不代表真实客户、合同、价格或业务承诺。", tags: "开源,示例" },
-    ];
-    for (const n of notes) {
-      dbRun("INSERT INTO knowledge_notes (title, content, tags, tenant_id) VALUES (?, ?, ?, ?)", [n.title, n.content, n.tags, 1]);
-    }
-
-    // ===== 演示公司（tenant_id=2, 独立租户）=====
-    dbRun("INSERT INTO companies (name, tenant_id) VALUES (?, ?)", ["演示公司", 2]);
-
-    const demoDeptIds: number[] = [];
-    for (let i = 0; i < deptDefs.length; i++) {
-      const d = deptDefs[i];
-      const r = dbRun(
-        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
-        [2, d.name, d.parentIdx !== null ? demoDeptIds[d.parentIdx] : null, i, d.desc, 2]
-      );
-      demoDeptIds.push(r.lastInsertRowid);
-    }
-
-    // ===== 演示公司集团架构：区域分公司 + 外派分支 + 项目标段 + 现场试验室 =====
-    const demoCooDeptId = demoDeptIds[3];    // COO办公室
-    const demoDmCenterId = demoDeptIds[8];   // 交付管理中心(CTO线)
-    const demoAllBranchDepts: Record<string, number> = {};
-    let demoDeptSeq = 200;
-
-    // 4个区域分公司
-    const demoRegionIds: number[] = [];
-    for (const r of regions) {
-      const rr = dbRun(
-        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (2,?,?,?,?,2,'regional','regional',?,1)",
-        [r.name, demoCooDeptId, demoDeptSeq++, `${r.code}区域业务统筹·下设外派分支`, r.code]
-      );
-      demoRegionIds.push(rr.lastInsertRowid);
-      demoAllBranchDepts[r.name] = rr.lastInsertRowid;
-    }
-
-    // 外派分支 + 项目组 + 试验室
-    for (const [ri, bName, city] of branchDefs) {
-      const regionId = demoRegionIds[ri];
-      const rc = regions[ri];
-      const br = dbRun(
-        "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (2,?,?,?,?,2,'branch','branch',?,2)",
-        [bName, regionId, demoDeptSeq++, `${city}外派·属地业务管理`, rc.code]
-      );
-      const branchId = br.lastInsertRowid;
-      demoAllBranchDepts[bName] = branchId;
-
-      const projNames = [`${city}一标项目组`, `${city}二标项目组`];
-      for (const projName of projNames) {
-        const pr = dbRun(
-          "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level) VALUES (2,?,?,?,?,2,'project','project',?,3)",
-          [projName, branchId, demoDeptSeq++, `${projName}—下设现场试验室`, rc.code]
-        );
-        const projId = pr.lastInsertRowid;
-        demoAllBranchDepts[projName] = projId;
-
-        const labCount = projName.includes("一标") ? 2 : 1;
-        for (let li = 0; li < labCount; li++) {
-          const labSuffix = labCount === 2 ? (li === 0 ? "A" : "B") : "";
-          const labName = projName.replace("项目组", labSuffix + "试验室");
-          const lr = dbRun(
-            "INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type, region, branch_level, secondary_parent_id) VALUES (2,?,?,?,?,2,'site_lab','site_lab',?,4,?)",
-            [labName, projId, demoDeptSeq++, `双重汇报·属地归${bName}·专业归交付管理中心`, rc.code, demoDmCenterId]
-          );
-          demoAllBranchDepts[labName] = lr.lastInsertRowid;
-        }
-      }
-    }
-
-    const demoTotalBranchUnits = Object.keys(demoAllBranchDepts).length;
-    const demoLabCount = Object.keys(demoAllBranchDepts).filter(k => k.includes("试验室")).length;
-
-    for (const e of allEmployees) {
-      dbRun(
-        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)",
-        [2, demoDeptIds[e.dept], e.name, e.role, e.agent, e.type, e.skills, e.emoji, 2]
-      );
-    }
-
-    // ===== 演示公司外派员工生成 =====
-    let demoSEm = 0;
-
-    // 分支经理 (人类, 20人)
-    for (const [, bName, city] of branchDefs) {
-      const n = surnames[(demoSEm) % surnames.length] + city.charAt(0) + "经理";
-      dbRun(
-        "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
-        [demoAllBranchDepts[bName], n, "分支经理", null, "human", "团队管理,属地协调,进度把控,安全管理", "👔", 2]
-      );
-      demoSEm++;
-    }
-
-    // 分支AI核心人员 (每分支4人 = 80人)
-    for (const [, bName, city] of branchDefs) {
-      for (const r of branchAIRoles) {
-        const n = surnames[demoSEm % surnames.length] + city.charAt(0) + r.role.charAt(0);
-        dbRun(
-          "INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
-          [demoAllBranchDepts[bName], n, r.role, r.agent, "ai", r.skills, r.e, 2]
-        );
-        demoSEm++;
-      }
-    }
-
-    // 项目级 (每项目1PM+2工程师)
-    for (const depName of Object.keys(demoAllBranchDepts)) {
-      if (!depName.includes("项目组")) continue;
-      const n1 = surnames[demoSEm % surnames.length] + "项" + (demoSEm % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
-        [demoAllBranchDepts[depName], n1, "项目经理", "product_manager", "ai", "项目管理,进度控制,风险管控,团队协调", "📋", 2]);
-      demoSEm++;
-      const n2 = surnames[demoSEm % surnames.length] + "工" + (demoSEm % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
-        [demoAllBranchDepts[depName], n2, "现场工程师", "backend_dev", "ai", "施工技术,检测方案,现场管理", "🔧", 2]);
-      demoSEm++;
-      const n3 = surnames[demoSEm % surnames.length] + "质" + (demoSEm % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
-        [demoAllBranchDepts[depName], n3, "质量工程师", "qa_engineer", "ai", "质量检测,材料试验,标准执行", "✅", 2]);
-      demoSEm++;
-    }
-
-    // 试验室级 (每室1主任+2-3技术员)
-    for (const depName of Object.keys(demoAllBranchDepts)) {
-      if (!depName.includes("试验室")) continue;
-      const n1 = surnames[demoSEm % surnames.length] + "室" + (demoSEm % 100);
-      dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
-        [demoAllBranchDepts[depName], n1, "试验室主任", "qa_engineer", "ai", "试验室管理,检测方案,报告审核", "🔬", 2]);
-      demoSEm++;
-      const techRoles = [
-        { role: "检测技术员", skills: "材料试验,仪器操作,数据采集", e: "🧪", agent: "backend_dev" },
-        { role: "检测技术员", skills: "现场检测,取样分析,记录编制", e: "⚗️", agent: "qa_engineer" },
-        { role: "检测技术员", skills: "室内试验,养护管理,报告编制", e: "📊", agent: "data_engineer" },
-      ];
-      for (const t of techRoles) {
-        const n = surnames[demoSEm % surnames.length] + "检" + (demoSEm % 100);
-        dbRun("INSERT INTO employees (company_id, department_id, name, role, agent_type, employee_type, skills, avatar_emoji, tenant_id) VALUES (2,?,?,?,?,?,?,?,?)",
-          [demoAllBranchDepts[depName], n, t.role, t.agent, "ai", t.skills, t.e, 2]);
-        demoSEm++;
-      }
-    }
-
-    console.log(`[种子] 演示公司集团架构: ${demoTotalBranchUnits}个分支组织单元 (含${fieldBranchCount}外派分支·${demoLabCount}试验室), ${demoSEm}名外派员工`);
-
-    for (const s of skillsLibrary) {
-      const slug = s.name.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, '-').replace(/-+$/, '');
-      dbRun(
-        "INSERT INTO skills (tenant_id, company_id, name, slug, category, description, tags, icon, source, version, author, install_count, rating, enabled) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
-        [2, 2, s.name, slug, s.cat, s.desc, s.tags, s.icon, "local", "1.0.0", "演示公司", Math.floor(Math.random() * 300) + 10, parseFloat((3.5 + Math.random() * 1.5).toFixed(1)), 1]
-      );
-    }
-
-    for (const pl of positionLevels) {
-      dbRun("INSERT INTO position_levels (code, name, sequence, level, tenant_id) VALUES (?, ?, ?, ?, ?)",
-        [pl.code, pl.name, pl.sequence, pl.level, 2]);
-    }
-
-    for (const t of tasks) {
-      dbRun("INSERT INTO tasks (company_id, title, priority, status, assigned_to, tenant_id) VALUES (?, ?, ?, ?, ?, ?)",
-        [2, t.title, t.priority, t.status, t.assignee, 2]);
-    }
-
-    dbRun("INSERT INTO chats (company_id, title, type, created_by, tenant_id) VALUES (?, ?, 'group', ?, ?)", [2, "演示公司团队群", 2, 2]);
-    for (const m of ceoMessages) {
-      dbRun("INSERT INTO messages (chat_id, sender_type, sender_name, content, tenant_id) VALUES (?, ?, ?, ?, ?)",
-        [dbGet("SELECT MAX(id) as id FROM chats")?.id || 1, m.type, m.sender, m.content, 2]);
-    }
-
-    for (const r of performanceReviews) {
-      dbRun(
-        "INSERT INTO performance_reviews (tenant_id, employee_id, employee_type, review_period, overall_score, task_completion_score, quality_score, efficiency_score, collaboration_score, review_notes, status) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'approved')",
-        [2, r.employee_id, r.type, r.period, r.overall, r.task, r.quality, r.efficiency, r.collab, r.notes]
-      );
-    }
-    for (const m of perfMetrics) {
-      dbRun(
-        "INSERT INTO performance_metrics (tenant_id, employee_id, employee_type, metric_type, metric_value, metric_unit, period) VALUES (?, ?, 'ai', ?, ?, ?, ?)",
-        [2, m.employee_id, m.type, m.value, m.unit, m.period]
-      );
-    }
-    for (const hs of heartbeatSchedules) {
-      dbRun(
-        "INSERT INTO heartbeat_schedules (agent_id, task_type, cron_expression, enabled, next_run, tenant_id) VALUES (?, ?, ?, 1, datetime('now', '+1 minute'), ?)",
-        [hs.agent_id, hs.task_type, hs.cron, 2]
-      );
-    }
-    for (const n of notes) {
-      dbRun("INSERT INTO knowledge_notes (title, content, tags, tenant_id) VALUES (?, ?, ?, ?)", [n.title, n.content, n.tags, 2]);
-    }
-
-    // 人才市场种子数据（从agent模板+技能库生成）
-    seedTalentPool(1);
-    seedTalentPool(2);
-
-    // 插件中心种子数据
-    seedPlugins(1);
-    seedPlugins(2);
-
-    const totalHqEmps = allEmployees.length; // 71 HQ employees
-    const totalAllEmps = totalHqEmps * 2 + sIdx + demoSEm;
-    const totalAllAI = centerStaff.length * 2 + (sIdx - fieldBranchCount) + (demoSEm - fieldBranchCount);
-    const tenant1Depts = 17 + totalBranchUnits;
-    const tenant2Depts = 17 + demoTotalBranchUnits;
-    console.log(`[种子] 完成：3用户, ${totalAllEmps}员工(AI ${totalAllAI}+人类 ${totalAllEmps - totalAllAI}), ${tenant1Depts}+${tenant2Depts}部门(含${fieldBranchCount * 2}外派分支·${labCount2 + demoLabCount}试验室), ${skillsLibrary.length * 2}技能`);
-  }
-
-  migrateDatabase();
-}
-
-// 人才市场种子数据生成
-function seedTalentPool(tenantId: number) {
-  // AI智能体 — 从agent模板生成
-  const aiTalents: { name: string; emoji: string; agent_type: string; role: string; desc: string; skills: string; category: string; cost: string; rank: number }[] = [
-    { name: "AI-战略顾问", emoji: "🎯", agent_type: "strategy_advisor", role: "战略顾问", desc: "企业战略规划、行业趋势分析、竞争格局研判", skills: "战略规划,行业研究,竞争分析,商业模式", category: "战略管理", cost: "¥0.08", rank: 1 },
-    { name: "AI-财务分析师", emoji: "💰", agent_type: "financial_analyst", role: "财务分析师", desc: "财务报表分析、预算编制、成本优化、投资评估", skills: "财务分析,预算管理,成本控制,投资评估", category: "财务管理", cost: "¥0.06", rank: 2 },
-    { name: "AI-市场营销专家", emoji: "📊", agent_type: "marketing_specialist", role: "市场营销专家", desc: "市场策略制定、品牌推广、用户增长、数据分析", skills: "市场策略,品牌推广,数据分析,用户增长", category: "市场营销", cost: "¥0.07", rank: 2 },
-    { name: "AI-人力资源顾问", emoji: "👥", agent_type: "hr_consultant", role: "人力资源顾问", desc: "人才招聘、绩效设计、组织发展、文化建设", skills: "人才招聘,绩效管理,组织发展,文化建设", category: "人力资源", cost: "¥0.05", rank: 2 },
-    { name: "AI-法务合规官", emoji: "⚖️", agent_type: "compliance_officer", role: "法务合规官", desc: "合同审查、合规检查、风险评估、知识产权", skills: "合同审查,合规检查,风险评估,知识产权", category: "法务合规", cost: "¥0.09", rank: 2 },
-    { name: "AI-数据分析师", emoji: "📈", agent_type: "data_analyst", role: "数据分析师", desc: "数据可视化、BI报表、业务洞察、预测分析", skills: "BI报表,数据可视化,SQL,业务分析", category: "数据科学", cost: "¥0.06", rank: 3 },
-    { name: "AI-ML工程师", emoji: "🧠", agent_type: "ml_engineer", role: "ML工程师", desc: "机器学习模型训练、特征工程、模型部署", skills: "机器学习,深度学习,Python,模型部署", category: "AI研发", cost: "¥0.12", rank: 3 },
-    { name: "AI-DevOps工程师", emoji: "🔄", agent_type: "devops_engineer", role: "DevOps工程师", desc: "CI/CD流水线、容器化部署、监控告警、自动化运维", skills: "Docker,Kubernetes,CI/CD,监控告警", category: "技术研发", cost: "¥0.10", rank: 4 },
-    { name: "AI-安全工程师", emoji: "🔐", agent_type: "security_engineer", role: "安全工程师", desc: "渗透测试、安全审计、漏洞修复、安全架构", skills: "安全审计,渗透测试,漏洞扫描,安全架构", category: "技术研发", cost: "¥0.11", rank: 4 },
-    { name: "AI-UI设计师", emoji: "🎨", agent_type: "ui_designer", role: "UI设计师", desc: "用户界面设计、交互原型、设计系统、品牌视觉", skills: "UI设计,交互设计,Figma,设计系统", category: "设计创意", cost: "¥0.07", rank: 4 },
-    { name: "AI-内容创作师", emoji: "✍️", agent_type: "content_creator", role: "内容创作师", desc: "文案写作、内容策划、品牌故事、多媒体内容", skills: "文案写作,内容策划,品牌传播,视频脚本", category: "内容创意", cost: "¥0.05", rank: 4 },
-    { name: "AI-客户服务专员", emoji: "🎧", agent_type: "cs_specialist", role: "客户服务专员", desc: "客户咨询、问题处理、满意度回访、知识库维护", skills: "客户沟通,问题处理,满意度回访,知识管理", category: "客户服务", cost: "¥0.03", rank: 5 },
-    { name: "AI-项目经理", emoji: "📋", agent_type: "project_manager", role: "项目经理", desc: "项目规划、进度跟踪、资源协调、风险管控", skills: "项目管理,进度控制,资源协调,风险管控", category: "项目管理", cost: "¥0.08", rank: 3 },
-    { name: "AI-培训师", emoji: "🎓", agent_type: "trainer", role: "培训师", desc: "课程设计、员工培训、知识转移、能力评估", skills: "培训开发,课程设计,知识转移,能力评估", category: "人力资源", cost: "¥0.04", rank: 4 },
-    { name: "AI-供应链优化师", emoji: "📦", agent_type: "supply_chain", role: "供应链优化师", desc: "供应链分析、库存优化、物流规划、采购策略", skills: "供应链管理,库存优化,物流规划,采购策略", category: "运营管理", cost: "¥0.07", rank: 3 },
-  ];
-
-  for (const t of aiTalents) {
-    dbRun(
-      `INSERT INTO talent_pool (tenant_id, talent_type, name, avatar_emoji, skills, category, description, agent_type, capabilities, token_cost_per_k, provider, integration_type, rating, source, status)
-       VALUES (?, 'ai', ?, ?, ?, ?, ?, ?, ?, ?, '雄元AI市场', 'api', ?, 'system', 'available')`,
-      [tenantId, t.name, t.emoji, t.skills, t.category, t.desc, t.agent_type, t.desc, t.cost, 3.5 + Math.random() * 1.5]
-    );
-  }
-
-  // 人类人才 — 模拟行业人才库
-  const humanTalents = [
-    { name: "王明远", emoji: "👨‍💼", skills: "战略规划,团队管理,商业谈判,P&L管理", category: "高级管理", exp: 15, salary: "50-80K/月", availability: "1个月内" },
-    { name: "刘思涵", emoji: "👩‍💻", skills: "React,TypeScript,Node.js,系统架构", category: "技术研发", exp: 8, salary: "35-50K/月", availability: "2周内" },
-    { name: "陈大伟", emoji: "👨‍🔬", skills: "机器学习,深度学习,NLP,Python", category: "AI研发", exp: 6, salary: "40-60K/月", availability: "随时" },
-    { name: "张雪琳", emoji: "👩‍🎨", skills: "UI设计,UX研究,Figma,设计系统", category: "设计创意", exp: 5, salary: "25-35K/月", availability: "随时" },
-    { name: "赵建国", emoji: "👨‍💼", skills: "财务分析,预算管控,税务筹划,IPO经验", category: "财务管理", exp: 20, salary: "60-100K/月", availability: "3个月内" },
-    { name: "林小红", emoji: "👩‍🏫", skills: "人才招聘,组织发展,绩效体系,企业文化", category: "人力资源", exp: 10, salary: "30-45K/月", availability: "1个月内" },
-    { name: "黄志强", emoji: "👨‍🔧", skills: "DevOps,K8s,CI/CD,云原生架构", category: "技术研发", exp: 7, salary: "35-50K/月", availability: "2周内" },
-    { name: "周美玲", emoji: "👩‍💼", skills: "品牌营销,社交媒体,内容策略,增长黑客", category: "市场营销", exp: 6, salary: "25-40K/月", availability: "随时" },
-    { name: "吴国栋", emoji: "👨‍⚖️", skills: "合同审查,知识产权,公司法,诉讼经验", category: "法务合规", exp: 12, salary: "40-60K/月", availability: "1个月内" },
-    { name: "郑晓芳", emoji: "👩‍📊", skills: "数据分析,BI,SQL,Tableau,业务洞察", category: "数据科学", exp: 4, salary: "20-30K/月", availability: "随时" },
-  ];
-
-  for (const t of humanTalents) {
-    dbRun(
-      `INSERT INTO talent_pool (tenant_id, talent_type, name, avatar_emoji, skills, category, description, experience_years, expected_salary, availability, rating, source, status)
-       VALUES (?, 'human', ?, ?, ?, ?, ?, ?, ?, ?, ?, 'system', 'available')`,
-      [tenantId, t.name, t.emoji, t.skills, t.category, `${t.name} · ${t.exp}年经验 · ${t.category}`, t.exp, t.salary, t.availability, 3.5 + Math.random() * 1.5]
-    );
-  }
-}
-
-// 插件中心种子数据
-function seedPlugins(tenantId: number) {
-  const plugins = [
-    { name: "飞书集成", cat: "办公协作", desc: "飞书开放平台API集成，支持消息推送、审批流、日历同步", icon: "🐦", author: "雄元科技", version: "2.1.0", price: "免费", tags: "飞书,集成,消息,审批" },
-    { name: "企业微信集成", cat: "办公协作", desc: "企业微信API集成，支持通讯录同步、消息通知、应用消息", icon: "💬", author: "雄元科技", version: "1.8.0", price: "免费", tags: "企微,集成,通讯录" },
-    { name: "钉钉集成", cat: "办公协作", desc: "钉钉开放平台集成，支持群机器人、工作通知、OA审批", icon: "📌", author: "第三方", version: "1.5.0", price: "¥299/月", tags: "钉钉,集成,OA" },
-    { name: "微信支付", cat: "支付金融", desc: "微信支付API V3集成，支持JSAPI/Native/H5/APP全场景支付", icon: "💚", author: "雄元科技", version: "3.0.0", price: "免费", tags: "支付,微信,收款" },
-    { name: "支付宝支付", cat: "支付金融", desc: "支付宝开放平台集成，支持电脑/手机/当面付", icon: "🔵", author: "雄元科技", version: "2.2.0", price: "免费", tags: "支付,支付宝" },
-    { name: "银联支付", cat: "支付金融", desc: "银联在线支付网关集成，支持B2B/B2C/C2C", icon: "💳", author: "第三方", version: "1.3.0", price: "¥999/月", tags: "支付,银联" },
-    { name: "腾讯云短信", cat: "通信服务", desc: "腾讯云短信API集成，支持验证码、通知、营销短信", icon: "📱", author: "雄元科技", version: "1.6.0", price: "按量计费", tags: "短信,验证码,通知" },
-    { name: "阿里云OSS", cat: "存储服务", desc: "阿里云对象存储OSS集成，支持文件上传/下载/CDN加速", icon: "☁️", author: "雄元科技", version: "2.0.0", price: "按量计费", tags: "存储,OSS,CDN" },
-    { name: "七牛云存储", cat: "存储服务", desc: "七牛云Kodo对象存储集成，图片处理/音视频转码", icon: "🐂", author: "第三方", version: "1.9.0", price: "按量计费", tags: "存储,CDN,图片处理" },
-    { name: "百度地图", cat: "地图位置", desc: "百度地图API集成，支持地理编码/逆地理编码/路径规划", icon: "🗺️", author: "第三方", version: "2.4.0", price: "免费额度", tags: "地图,定位,导航" },
-    { name: "高德地图", cat: "地图位置", desc: "高德地图Web服务API，支持POI搜索/地理围栏/轨迹纠偏", icon: "📍", author: "雄元科技", version: "2.6.0", price: "免费额度", tags: "地图,定位,搜索" },
-    { name: "快递100", cat: "物流配送", desc: "快递100 API集成，支持快递查询/电子面单/物流推送", icon: "📦", author: "第三方", version: "1.4.0", price: "¥99/月", tags: "快递,物流,查询" },
-    { name: "电子签章", cat: "法务合规", desc: "e签宝/法大大电子签章集成，支持合同签署/存证/区块链", icon: "✍️", author: "第三方", version: "1.2.0", price: "¥299/月", tags: "签章,合同,法务" },
-    { name: "增值税发票", cat: "财务税务", desc: "电子发票开具与查验，支持数电票/增值税专票/普票", icon: "🧾", author: "雄元科技", version: "2.0.0", price: "¥199/月", tags: "发票,税务,财务" },
-    { name: "金蝶ERP", cat: "财务税务", desc: "金蝶云星空ERP集成，支持凭证/科目/报表同步", icon: "📊", author: "第三方", version: "1.7.0", price: "¥499/月", tags: "ERP,金蝶,财务" },
-    { name: "用友ERP", cat: "财务税务", desc: "用友U8/T+ ERP集成，支持采购/销售/库存/财务", icon: "🏢", author: "第三方", version: "1.5.0", price: "¥499/月", tags: "ERP,用友" },
-    { name: "抖音开放平台", cat: "营销获客", desc: "抖音小程序/直播间/商品橱窗API集成", icon: "🎵", author: "雄元科技", version: "1.3.0", price: "免费", tags: "抖音,直播,电商" },
-    { name: "小红书开放平台", cat: "营销获客", desc: "小红书商家/内容API集成，笔记管理/商品同步", icon: "📕", author: "第三方", version: "1.0.0", price: "¥199/月", tags: "小红书,内容,电商" },
-    { name: "百度AI开放平台", cat: "AI能力", desc: "百度AI文字识别/语音合成/NLP/图像识别API集成", icon: "🧠", author: "雄元科技", version: "2.3.0", price: "按量计费", tags: "AI,OCR,NLP,语音" },
-    { name: "讯飞语音", cat: "AI能力", desc: "科大讯飞语音识别/合成/翻译API集成", icon: "🎤", author: "第三方", version: "1.8.0", price: "按量计费", tags: "语音,识别,翻译" },
-    { name: "HubSpot CRM", cat: "客户管理", desc: "HubSpot CRM集成，客户/联系人/交易同步", icon: "🟠", author: "第三方", version: "1.2.0", price: "免费", tags: "CRM,客户,营销" },
-    { name: "飞书多维表格", cat: "办公协作", desc: "飞书多维表格API，支持数据读写/字段管理/视图操作", icon: "📋", author: "雄元科技", version: "1.4.0", price: "免费", tags: "飞书,表格,数据" },
-    { name: "Grafana监控", cat: "运维监控", desc: "Grafana仪表板集成，支持数据源配置/面板嵌入/告警", icon: "📈", author: "第三方", version: "1.1.0", price: "免费", tags: "监控,仪表板,告警" },
-    { name: "Jira项目管理", cat: "研发工具", desc: "Atlassian Jira集成，Issue同步/Sprint管理/Webhook", icon: "🎫", author: "第三方", version: "1.6.0", price: "¥199/月", tags: "Jira,项目管理,敏捷" },
-    { name: "GitLab代码仓库", cat: "研发工具", desc: "GitLab API集成，仓库管理/MR Webhook/CI触发", icon: "🦊", author: "雄元科技", version: "2.0.0", price: "免费", tags: "GitLab,代码,CI" },
-    { name: "Webhook推送", cat: "通信服务", desc: "通用Webhook集成，支持自定义URL/请求模板/重试机制", icon: "🔔", author: "雄元科技", version: "1.0.0", price: "免费", tags: "Webhook,通知,集成" },
-    { name: "AI合同智能解析", cat: "法务合规", desc: "上传PDF/DOCX合同文档，AI自动提取合同信息与收/付款节点，一键入库", icon: "🤖", author: "雄元科技", version: "1.0.0", price: "¥99/月", tags: "AI,合同,解析,文档" },
-  ];
-
-  for (const p of plugins) {
-    const slug = p.name.toLowerCase().replace(/[^a-z0-9\u4e00-\u9fa5]+/g, '-').replace(/-+$/, '');
-    dbRun(
-      `INSERT INTO plugins (tenant_id, name, slug, category, description, icon, version, author, price, tags, install_count, rating, status)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active')`,
-      [tenantId, p.name, slug, p.cat, p.desc, p.icon, p.version, p.author, p.price, p.tags, Math.floor(Math.random() * 500) + 50, parseFloat((3.0 + Math.random() * 2.0).toFixed(1))]
-    );
-  }
-}
-
-function migrateDatabase() {
-  console.log("[迁移] 检查数据库版本...");
-
-  const adminHash = bcrypt.hashSync(requiredSeedSecret("SEED_ADMIN_PASSWORD"), 10);
-  const adminEmail = seedAdminEmail();
-  const existingSuperAdmin = dbGet("SELECT id, role FROM users WHERE email = ?", [adminEmail]) as any;
-  if (!existingSuperAdmin) {
-    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
-      [adminEmail, adminHash, "超级管理员", "super_admin", 1]);
-    console.log(`[迁移] 已添加超级管理员 ${adminEmail}`);
-  }
-
-  const demoUser = dbGet("SELECT id, role FROM users WHERE email = ?", ["demo@demo.com"]) as any;
-  if (demoUser && demoUser.role === "super_admin") {
-    dbRun("UPDATE users SET role = 'admin' WHERE email = ?", ["demo@demo.com"]);
-    console.log("[迁移] demo@demo.com 已降级为 admin");
-  }
-
-  // Ensure ordinary demo user exists, same tenant as demo@demo.com
-  const userHash = bcrypt.hashSync(requiredSeedSecret("SEED_DEMO_PASSWORD"), 10);
-  const existingOrdinaryUser = dbGet("SELECT id FROM users WHERE email = ?", ["user@demo.com"]) as any;
-  if (!existingOrdinaryUser) {
-    // Place user@demo.com in the same tenant as demo@demo.com
-    const demoTenant = (dbGet("SELECT tenant_id FROM users WHERE email = ?", ["demo@demo.com"]) as any)?.tenant_id || 2;
-    dbRun("INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, ?, ?)",
-      ["user@demo.com", userHash, "李员工", "user", demoTenant]);
-    console.log(`[迁移] 已添加演示普通用户 user@demo.com (tenant#${demoTenant})`);
-  }
-
-  const existingConfig = dbGet("SELECT COUNT(*) as c FROM ai_config") as any;
-  if (existingConfig.c === 0) {
-    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["llm_api_key", "", "LLM API 密钥", 1]);
-    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["llm_api_base", process.env.LLM_API_BASE || "", "LLM API 地址", 1]);
-    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["llm_model", process.env.LLM_MODEL || "", "LLM 模型", 1]);
-    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["ai_reply_enabled", "true", "是否启用AI自动回复", 1]);
-    dbRun("INSERT INTO ai_config (key, value, description, tenant_id) VALUES (?, ?, ?, ?)", ["ai_reply_delay", "2000", "AI回复延迟(毫秒)", 1]);
-    console.log("[迁移] AI配置已初始化");
-  }
-
-  // 知识库存储限额（演示公司1GB，雄元科技5GB）
-  const storageLimit1 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'knowledge_storage_limit_kb' AND tenant_id = 1") as any;
-  if (!storageLimit1) {
-    dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (1, 'knowledge_storage_limit_kb', '5242880', 1)");
-  }
-  const storageLimit2 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'knowledge_storage_limit_kb' AND tenant_id = 2") as any;
-  if (!storageLimit2) {
-    const t2 = dbGet("SELECT id FROM tenants WHERE id = 2") as any;
-    if (t2) dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (2, 'knowledge_storage_limit_kb', '1048576', 2)");
-  }
-
-  // 网站名称（支持租户自定义）
-  const siteName1 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'site_name' AND tenant_id = 1") as any;
-  if (!siteName1) {
-    dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (1, 'site_name', '雄元智脑XYOS', 1)");
-  }
-  const siteName2 = dbGet("SELECT id FROM company_settings WHERE setting_key = 'site_name' AND tenant_id = 2") as any;
-  if (!siteName2) {
-    const t2 = dbGet("SELECT id FROM tenants WHERE id = 2") as any;
-    if (t2) dbRun("INSERT INTO company_settings (company_id, setting_key, setting_value, tenant_id) VALUES (2, 'site_name', '演示公司', 2)");
-  }
-
-  // 合同管理模块种子数据（科研机构业务场景）
-  const contractCount = dbGet("SELECT COUNT(*) as c FROM contracts WHERE tenant_id = ?", [1]) as any;
-  if (contractCount.c === 0) { seedContracts(1); }
-  // 付款计划独立补建：即使合同已存在也要检查是否缺少付款计划
-  seedContractPayments(1);
-
-  const contractCount2 = dbGet("SELECT COUNT(*) as c FROM contracts WHERE tenant_id = ?", [2]) as any;
-  if (contractCount2.c === 0) { seedContracts(2); }
-  seedContractPayments(2);
-
-  // 资产种子数据——安全守卫：表不存在则跳过
-  try {
-    const assetsTableExists = dbGet("SELECT COUNT(*) as c FROM sqlite_master WHERE type='table' AND name='assets'") as any;
-    if (assetsTableExists?.c > 0) {
-      const assetCount1 = dbGet("SELECT COUNT(*) as c FROM assets WHERE tenant_id = ?", [1]) as any;
-      if (assetCount1.c === 0) { seedAssets(1); }
-      const assetCount2 = dbGet("SELECT COUNT(*) as c FROM assets WHERE tenant_id = ?", [2]) as any;
-      if (assetCount2.c === 0) { seedAssets(2); }
-    }
-  } catch (err: any) {
-    console.error("[种子] 资产种子失败(非致命):", err.message);
-  }
-
-  // 修复旧试验室（A-F标段）：补齐 org_type 和 function_type（两个租户）
-  const fixedOldLabs = dbRun("UPDATE departments SET org_type='site_lab', function_type='site_lab' WHERE name LIKE '%标段试验室' AND (org_type IS NULL OR org_type='functional')");
-  if (fixedOldLabs.changes > 0) {
-    console.log(`[迁移] 已修复 ${fixedOldLabs.changes} 个旧试验室的 org_type/function_type`);
-  }
-
-  console.log("[迁移] 完成");
-}
-
-// 合同种子：以科研中心及其关联企业为背景的业务合同
-function seedContracts(tenantId: number) {
-  const isT1 = tenantId === 1;
-
-  const contracts: {
-    title: string; contract_no: string; party_a: string; party_b: string;
-    direction: string; amount: number; status: string; start_date: string | null; end_date: string | null;
-    contract_type: string; sign_date: string | null; signer: string | null; key_terms?: string; patent?: boolean;
-  }[] = isT1 ? [
-    // === 收入类合同（outbound / receivable）===
-    {
-      title: "城市道路沥青路面长期性能监测技术研究",
-      contract_no: "KY-HT-2026-001", party_a: "交通科学研究院",
-      party_b: "省交通运输厅科技处", direction: "outbound", amount: 680000,
-      status: "active", start_date: "2026-01-15", end_date: "2027-12-31",
-      contract_type: "service", sign_date: "2026-01-10", signer: "赵产",
-      key_terms: "按季度提交监测报告，年度总报告于12月底前完成"
-    },
-    {
-      title: "山区高速公路边坡稳定性智能预警系统开发",
-      contract_no: "HT-KF-2026-002", party_a: "智能交通工程技术有限公司",
-      party_b: "高速集团建设管理有限公司", direction: "outbound", amount: 1250000,
-      status: "active", start_date: "2026-03-01", end_date: "2027-02-28",
-      contract_type: "service", sign_date: "2026-02-20", signer: "林技",
-      key_terms: "分三期交付，首期30%预付款到账后启动"
-    },
-    {
-      title: "桥梁结构健康监测设备采购与安装服务",
-      contract_no: "SB-CG-2026-003", party_a: "工程检测技术有限公司",
-      party_b: "市市政桥梁管理处", direction: "outbound", amount: 420000,
-      status: "active", start_date: "2026-04-01", end_date: "2026-10-31",
-      contract_type: "service", sign_date: "2026-03-25", signer: "吴运",
-      key_terms: "含传感器采购、安装、调试及一年质保期运维"
-    },
-    {
-      title: "公路工程材料力学性能检测年度委托合同",
-      contract_no: "JC-DW-2026-004", party_a: "工程检测技术有限公司",
-      party_b: "市交通建设工程质量监督站", direction: "outbound", amount: 360000,
-      status: "active", start_date: "2026-01-01", end_date: "2026-12-31",
-      contract_type: "service", sign_date: "2025-12-28", signer: "褚财",
-      key_terms: "每月抽样检测不少于50组，出具正式检测报告"
-    },
-    {
-      title: "智慧工地综合管理平台定制开发项目",
-      contract_no: "RJ-KF-2026-005", party_a: "信息科技有限公司",
-      party_b: "中建八局第三建筑工程有限公司", direction: "outbound", amount: 890000,
-      status: "in_progress", start_date: "2026-05-06", end_date: "2026-11-30",
-      contract_type: "service", sign_date: "2026-04-28", signer: "钱技",
-      key_terms: "敏捷开发模式，按月迭代交付，验收后提供1年免费维保"
-    },
-    {
-      title: "交通运输行业碳排放核算方法学研究",
-      contract_no: "KY-HT-2026-006", party_a: "交通科学研究院",
-      party_b: "国家发改委能源研究所", direction: "outbound", amount: 350000,
-      status: "pending", start_date: "2026-07-01", end_date: "2027-06-30",
-      contract_type: "service", sign_date: null, signer: "李知",
-      key_terms: "课题研究成果归双方共有，论文发表需共同署名"
-    },
-    // === 支出类合同（inbound / payable）===
-    {
-      title: "高性能计算服务器集群采购",
-      contract_no: "CG-SB-2026-007", party_a: "联想（北京）信息技术有限公司",
-      party_b: "交通科学研究院", direction: "inbound", amount: 520000,
-      status: "active", start_date: "2026-02-15", end_date: null,
-      contract_type: "procurement", sign_date: "2026-02-08", signer: "陈远",
-      key_terms: "三年原厂上门保修，7×24小时技术响应"
-    },
-    {
-      title: "实验检测仪器设备年度校准服务",
-      contract_no: "CG-FW-2026-008", party_a: "省计量科学研究院",
-      party_b: "工程检测技术有限公司", direction: "inbound", amount: 85000,
-      status: "completed", start_date: "2026-01-01", end_date: "2026-03-31",
-      contract_type: "procurement", sign_date: "2025-12-20", signer: "褚财",
-      key_terms: "现场校准，出具CNAS认可校准证书"
-    },
-    {
-      title: "办公场地租赁协议（主楼B座）",
-      contract_no: "ZL-2026-009", party_a: "高新科技园物业管理有限公司",
-      party_b: "信息科技有限公司", direction: "inbound", amount: 480000,
-      status: "active", start_date: "2026-01-01", end_date: "2027-12-31",
-      contract_type: "other", sign_date: "2025-12-15", signer: "刘运",
-      key_terms: "年付，含物业费、中央空调费，停车位另计"
-    },
-    {
-      title: "专利独占许可——路面裂缝自动识别算法",
-      patent: true as const,
-      contract_no: "IP-2026-010", party_a: "某高校自动化学院",
-      party_b: "智能交通工程技术有限公司", direction: "inbound", amount: 200000,
-      status: "pending", start_date: "2026-09-01", end_date: null,
-      contract_type: "other", sign_date: null, signer: "李交",
-      key_terms: "五年独占使用权，后续改进成果归属受让方"
-    },
-  ] : [
-    // tenant#2 演示用简化版
-    {
-      title: "企业数字化转型咨询服务合同",
-      contract_no: "FW-2026-101", party_a: "雄元科技有限公司",
-      party_b: "某制造集团有限公司", direction: "outbound", amount: 500000,
-      status: "active", start_date: "2026-02-01", end_date: "2026-08-31",
-      contract_type: "service", sign_date: "2026-01-20", signer: "张总",
-    },
-    {
-      title: "云服务器资源年度采购",
-      contract_no: "CG-2026-102", party_a: "阿里云计算有限公司",
-      party_b: "雄元科技有限公司", direction: "inbound", amount: 120000,
-      status: "active", start_date: "2026-01-01", end_date: "2026-12-31",
-      contract_type: "procurement", sign_date: "2025-12-15", signer: "张总",
-    },
-    {
-      title: "AI员工协作平台SaaS订阅服务",
-      contract_no: "FW-2026-103", party_a: "雄元科技有限公司",
-      party_b: "某创业孵化器有限公司", direction: "outbound", amount: 299000,
-      status: "draft", start_date: null, end_date: null,
-      contract_type: "service", sign_date: null, signer: null,
-    },
-  ];
-
-  for (const c of contracts) {
-    dbRun(
-      `INSERT INTO contracts
-       (tenant_id, title, contract_no, party_a, party_b, direction, amount, status,
-        start_date, end_date, contract_type, sign_date, key_terms)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
-      [tenantId, c.title, c.contract_no, c.party_a, c.party_b,
-       c.direction, c.amount, c.status, c.start_date, c.end_date,
-       c.contract_type, c.sign_date, c.key_terms || null]
-    );
-  }
-
-  // === 付款计划已提取到独立函数 seedContractPayments() ===
-}
-
-// 合同付款计划种子数据——独立函数，可重复执行补建
-function seedContractPayments(tenantId: number) {
-  const isT1 = tenantId === 1;
-
-  // 检查是否已有足够多的付款计划，避免重复插入
-  const existing = dbGet("SELECT COUNT(*) as c FROM contract_payments WHERE tenant_id = ?", [tenantId]) as any;
-  if (existing.c > 10) { console.log(`[种子] tenant#${tenantId} 付款计划已存在 (${existing.c}条)，跳过`); return; }
-
-  const paymentPlans: Record<string, { label: string; amount: number; due_date: string; paid?: number; paid_date?: string }[]> = isT1 ? {
-    "KY-HT-2026-001": [
-      { label: "首期拨款（启动经费）", amount: 272000, due_date: "2026-02-15", paid: 1, paid_date: "2026-02-18" },
-      { label: "二期拨款（中期检查通过后）", amount: 204000, due_date: "2026-07-31", paid: 1, paid_date: "2026-08-05" },
-      { label: "三期拨款（结题验收后）", amount: 204000, due_date: "2026-06-25" },           // ⚠️ 已逾期1天！
-    ],
-    "HT-KF-2026-002": [
-      { label: "预付款（合同签订后）", amount: 375000, due_date: "2026-03-10", paid: 1, paid_date: "2026-03-15" },
-      { label: "开发中期款（原型交付）", amount: 437500, due_date: "2026-08-31", paid: 1, paid_date: "2026-09-02" },
-      { label: "验收款（系统上线运行）", amount: 437500, due_date: "2027-01-31" },
-    ],
-    "SB-CG-2026-003": [
-      { label: "设备到货款", amount: 210000, due_date: "2026-05-15", paid: 1, paid_date: "2026-05-20" },
-      { label: "安装调试款", amount: 126000, due_date: "2026-06-28" },                   // ⚠️ 2天后到期！
-      { label: "质保金（一年后）", amount: 84000, due_date: "2027-06-01" },
-    ],
-    "JC-DW-2026-004": [
-      { label: "Q1检测费", amount: 90000, due_date: "2026-04-01", paid: 1, paid_date: "2026-04-10" },
-      { label: "Q2检测费", amount: 90000, due_date: "2026-07-01", paid: 1, paid_date: "2026-07-08" },
-      { label: "Q3检测费", amount: 90000, due_date: "2026-07-02" },                        // ⚠️ 6天后到期！
-      { label: "Q4检测费", amount: 90000, due_date: "2027-01-01" },
-    ],
-    "RJ-KF-2026-005": [
-      { label: "启动款（项目立项）", amount: 178000, due_date: "2026-05-15", paid: 1, paid_date: "2026-05-20" },
-      { label: "迭代一期款（M1-M3交付）", amount: 267000, due_date: "2026-06-30" },        // ⚠️ 4天后到期！
-      { label: "迭代二期款（M4-M6交付）", amount: 267000, due_date: "2026-10-31" },
-      { label: "最终验收款", amount: 178000, due_date: "2026-12-15" },
-    ],
-    "CG-SB-2026-007": [
-      { label: "设备到货款", amount: 364000, due_date: "2026-03-15", paid: 1, paid_date: "2026-03-20" },
-      { label: "验收尾款", amount: 156000, due_date: "2026-04-30", paid: 1, paid_date: "2026-05-05" },
-    ],
-    "CG-FW-2026-008": [
-      { label: "年度校准费（全额）", amount: 85000, due_date: "2026-03-31", paid: 1, paid_date: "2026-03-28" },
-    ],
-    "ZL-2026-009": [
-      { label: "Q1租金", amount: 120000, due_date: "2026-01-05", paid: 1, paid_date: "2026-01-08" },
-      { label: "Q2租金", amount: 120000, due_date: "2026-04-05", paid: 1, paid_date: "2026-04-08" },
-      { label: "Q3租金", amount: 120000, due_date: "2026-07-05", paid: 1, paid_date: "2026-07-08" },
-      { label: "Q4租金", amount: 120000, due_date: "2026-07-03" },                        // ⚠️ 7天后到期！
-    ],
-  } : {
-    "FW-2026-101": [
-      { label: "咨询启动费", amount: 150000, due_date: "2026-03-01", paid: 1, paid_date: "2026-03-05" },
-      { label: "中期服务费", amount: 200000, due_date: "2026-06-30", paid: 1, paid_date: "2026-07-02" },
-      { label: "结项服务费", amount: 150000, due_date: "2026-06-24" },                       // ⚠️ 已逾期2天！
-    ],
-    "CG-2026-102": [
-      { label: "H1云资源费", amount: 60000, due_date: "2026-06-30", paid: 1, paid_date: "2026-07-01" },
-      { label: "H2云资源费", amount: 60000, due_date: "2026-12-31" },
-    ],
-  };
-
-  let totalPayments = 0;
-  for (const [contractNo, payments] of Object.entries(paymentPlans)) {
-    const contract = dbGet("SELECT id FROM contracts WHERE contract_no = ? AND tenant_id = ?", [contractNo, tenantId]) as any;
-    if (!contract) continue;
-    for (let i = 0; i < payments.length; i++) {
-      const p = payments[i];
-      dbRun(
-        `INSERT INTO contract_payments
-         (tenant_id, contract_id, payment_no, label, amount, paid, paid_date, due_date, completion_condition)
-         VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,
-        [tenantId, contract.id, i + 1, p.label, p.amount, p.paid || 0, p.paid_date || null, p.due_date,
-         (p.paid || 0) === 1 ? "已完成结算" : null]
-      );
-      totalPayments++;
-    }
-  }
-
-  console.log(`[种子] tenant#${tenantId} 付款计划已补建 (${totalPayments}条)`);
-}
-
-// ===== 资产模块种子数据 =====
-function seedAssets(tenantId: number) {
-  const isT1 = tenantId === 1;
-  console.log(`[种子] tenant#${tenantId} 资产种子开始...`);
-
-  // 辅助函数
-  const deptNameToId = (name: string) => {
-    const r = dbGet("SELECT id FROM departments WHERE name = ? AND tenant_id = ?", [name, tenantId]) as any;
-    return r?.id || null;
-  };
-  const getEmployeeId = (name: string) => {
-    const r = dbGet("SELECT id FROM employees WHERE name = ? AND tenant_id = ?", [name, tenantId]) as any;
-    return r?.id || null;
-  };
-
-  // 为租户添加项目标段部门（驻外监理机构）
-  const dmCenter = deptNameToId("交付管理中心");
-  if (dmCenter) {
-    const siteDepts = ["A标段试验室", "B标段试验室", "C标段试验室", "D标段试验室", "E标段试验室", "F标段试验室"];
-    for (const name of siteDepts) {
-      const exists = dbGet("SELECT id FROM departments WHERE name = ? AND tenant_id = ?", [name, tenantId]) as any;
-      if (!exists) {
-        dbRun("INSERT INTO departments (company_id, name, parent_id, sort_order, description, tenant_id, org_type, function_type) VALUES (1, ?, ?, 99, ?, ?, 'site_lab', 'site_lab')",
-          [name, dmCenter, `${name} — 驻外监理检测`, tenantId]);
-        console.log(`[种子] tenant#${tenantId} 创建部门: ${name}`);
-      }
-    }
-  }
-
-  const hqOffice = deptNameToId("行政中心");
-  const techCenter = deptNameToId("技术保障中心");
-  const productCenter = deptNameToId("产品研发中心");
-  const siteA = deptNameToId("A标段试验室");
-  const siteB = deptNameToId("B标段试验室");
-  const siteC = deptNameToId("C标段试验室");
-  const siteD = deptNameToId("D标段试验室");
-  const siteE = deptNameToId("E标段试验室");
-  const siteF = deptNameToId("F标段试验室");
-  const bizCenter = deptNameToId("商务中心");
-  const opsCenter = deptNameToId("运营中心");
-  const qmCenter = deptNameToId("质量管理与战略中心");
-  const fengXing = getEmployeeId("冯行");
-  const chuCai = getEmployeeId("褚财");
-  const qianJi = getEmployeeId("钱技");
-  const liJiao = getEmployeeId("李交");
-  const zhouQian = getEmployeeId("周前");
-  const wuHou = getEmployeeId("吴后");
-  const zhouShang = getEmployeeId("周商");
-  const wuYun = getEmployeeId("吴运");
-  const weiZhi = getEmployeeId("卫质");
-  const sunShu = getEmployeeId("孙数");
-
-  const allAssets: { assetNo: string; name: string; category: string; subCat?: string; model?: string; sn?: string; mfr?: string; date?: string; price: number; dept: number | null; custodian: number | null; loc?: string; status: string; calDate?: string; calCycle?: number; calNext?: string; plate?: string; vin?: string; bp?: string; seats?: number; nextInsp?: string; insuranceExp?: string; mileage?: number; os?: string; cpu?: string; ram?: string; disk?: string }[] = [
-    { assetNo: "INS-2026-001", name: "数显回弹仪", category: "INSTRUMENT", subCat: "强度检测", model: "HT-225D", sn: "SN225D-20260108", mfr: "北京智博联", date: "2026-01-08", price: 12800, dept: siteA, custodian: liJiao, loc: "A标段试验室1号工位", status: "in_use", calDate: "2026-05-08", calCycle: 6, calNext: "2026-11-08" },
-    { assetNo: "INS-2026-002", name: "全自动压力试验机", category: "INSTRUMENT", subCat: "力学检测", model: "YAW-3000", sn: "YAW3000-20250512", mfr: "济南试金", date: "2025-05-12", price: 168000, dept: siteA, custodian: liJiao, loc: "A标段试验室力学室", status: "in_use", calDate: "2025-11-12", calCycle: 12, calNext: "2026-04-12" },
-    { assetNo: "INS-2026-003", name: "激光断面仪", category: "INSTRUMENT", subCat: "路面检测", model: "LR-200", sn: "LR200-20260315", mfr: "武汉夕睿", date: "2026-03-15", price: 95000, dept: siteB, custodian: liJiao, loc: "B标段试验室检测车", status: "in_use", calDate: "2026-03-15", calCycle: 6, calNext: "2026-09-15" },
-    { assetNo: "INS-2026-004", name: "基桩动测仪", category: "INSTRUMENT", subCat: "桩基检测", model: "PIT-V", sn: "PITV-20250820", mfr: "美国PDI", date: "2025-08-20", price: 220000, dept: siteB, custodian: liJiao, loc: "B标段试验室", status: "in_use", calDate: "2025-08-20", calCycle: 12, calNext: "2026-06-15" },
-    { assetNo: "INS-2026-005", name: "钢筋扫描仪", category: "INSTRUMENT", subCat: "钢筋检测", model: "HC-GY71", sn: "GY71-20260401", mfr: "北京海创", date: "2026-04-01", price: 8600, dept: siteC, custodian: liJiao, loc: "C标段试验室", status: "in_use", calDate: "2026-04-01", calCycle: 12, calNext: "2027-04-01" },
-    { assetNo: "INS-2026-006", name: "沥青延度仪", category: "INSTRUMENT", subCat: "沥青检测", model: "SYD-4508C", sn: "4508C-20250901", mfr: "上海昌吉", date: "2025-09-01", price: 35000, dept: siteA, custodian: liJiao, loc: "A标段试验室沥青室", status: "in_use", calDate: "2025-09-01", calCycle: 12, calNext: "2026-06-20" },
-    { assetNo: "INS-2026-007", name: "核子密度仪（备用）", category: "INSTRUMENT", subCat: "压实度检测", model: "MC-3", sn: "MC3-20241015", mfr: "美国CPN", date: "2024-10-15", price: 185000, dept: siteA, custodian: null, loc: "A标段仓库", status: "idle" },
-    { assetNo: "VEH-2026-001", name: "丰田普拉多越野车", category: "VEHICLE", subCat: "越野车", model: "PRADO 3.5L VX", sn: "VIN-PRADO-20251001", mfr: "一汽丰田", date: "2025-10-01", price: 528000, dept: hqOffice, custodian: fengXing, loc: "总部地下车库B1-12", status: "in_use", plate: "京A·HY001", vin: "LFMG1E729JS000001", bp: "汽油", seats: 7, nextInsp: "2026-10-01", insuranceExp: "2026-07-25", mileage: 28560 },
-    { assetNo: "VEH-2026-002", name: "长城皮卡工程车", category: "VEHICLE", subCat: "皮卡", model: "风骏7 2.0T", sn: "VIN-FJ7-20260301", mfr: "长城汽车", date: "2026-03-01", price: 128000, dept: siteB, custodian: liJiao, loc: "B标段驻地停车场", status: "in_use", plate: "京B·GC002", vin: "LGWDBE195MB000002", bp: "柴油", seats: 5, nextInsp: "2027-03-01", insuranceExp: "2026-06-28", mileage: 18200 },
-    { assetNo: "VEH-2026-003", name: "五菱宏光面包车", category: "VEHICLE", subCat: "MPV", model: "五菱宏光S 1.5L", sn: "VIN-WLHG-20251208", mfr: "上汽通用五菱", date: "2025-12-08", price: 56000, dept: siteA, custodian: liJiao, loc: "A标段驻地", status: "in_use", plate: "京C·WL003", vin: "LZWADAGA4MG000003", bp: "汽油", seats: 7, nextInsp: "2026-12-08", insuranceExp: "2026-12-08", mileage: 34500 },
-    { assetNo: "VEH-2026-004", name: "比亚迪汉EV公务车", category: "VEHICLE", subCat: "轿车", model: "汉EV 创世版 715km", sn: "VIN-HAN-20260415", mfr: "比亚迪", date: "2026-04-15", price: 289800, dept: hqOffice, custodian: chuCai, loc: "总部地面停车场A-03", status: "in_use", plate: "京A·HD004", vin: "LC0CE4CB6N0000004", bp: "电动", seats: 5, nextInsp: "2028-04-15", insuranceExp: "2027-04-15", mileage: 5200 },
-    { assetNo: "OFF-2026-001", name: "Dell Precision工作站", category: "OFFICE", subCat: "工作站", model: "Precision 7920 Tower", sn: "DELL-7920-20260115", mfr: "Dell", date: "2026-01-15", price: 48000, dept: techCenter, custodian: qianJi, loc: "总部3楼机房", status: "in_use", os: "Ubuntu 22.04", cpu: "Xeon Gold 6248R", ram: "128GB", disk: "2TB SSD" },
-    { assetNo: "OFF-2026-002", name: "ThinkPad X1 Carbon", category: "OFFICE", subCat: "笔记本", model: "X1 Carbon Gen11", sn: "TP-X1C-20260320", mfr: "联想", date: "2026-03-20", price: 12999, dept: productCenter, custodian: zhouQian, loc: "总部4楼工位A12", status: "in_use", os: "Windows 11 Pro", cpu: "i7-1365U", ram: "32GB", disk: "1TB SSD" },
-    { assetNo: "OFF-2026-003", name: "HP LaserJet打印机", category: "OFFICE", subCat: "打印机", model: "LaserJet Pro M404dn", sn: "HP-M404-20251120", mfr: "惠普", date: "2025-11-20", price: 3200, dept: hqOffice, custodian: fengXing, loc: "总部行政办公室", status: "in_use" },
-    { assetNo: "OFF-2026-004", name: "会议一体机", category: "OFFICE", subCat: "会议设备", model: "MAXHUB V6 86寸", sn: "MH-V6-20260210", mfr: "MAXHUB", date: "2026-02-10", price: 45000, dept: hqOffice, custodian: fengXing, loc: "总部大会议室", status: "in_use", os: "Android 12.0", cpu: "A73+A53", ram: "8GB", disk: "64GB" },
-    { assetNo: "OFF-2026-005", name: "华为交换机S5735", category: "OFFICE", subCat: "网络设备", model: "S5735-L48T4X-A", sn: "HW-S5735-20250901", mfr: "华为", date: "2025-09-01", price: 15800, dept: techCenter, custodian: wuHou, loc: "总部机房机柜B2", status: "in_use" },
-    { assetNo: "OFF-2026-006", name: "联想台式机（备用）", category: "OFFICE", subCat: "台式机", model: "启天M450-N000", sn: "LN-M450-20251225", mfr: "联想", date: "2025-12-25", price: 4500, dept: hqOffice, custodian: null, loc: "总部库房", status: "idle" },
-    { assetNo: "TOL-2026-001", name: "徕卡激光测距仪", category: "TOOL", subCat: "测量工具", model: "DISTO X4", sn: "LX4-20260201", mfr: "Leica", date: "2026-02-01", price: 3200, dept: siteA, custodian: liJiao, loc: "A标段工具柜", status: "in_use" },
-    { assetNo: "TOL-2026-002", name: "数字扭矩扳手", category: "TOOL", subCat: "紧固工具", model: "MWD-500", sn: "MWD500-20260110", mfr: "台湾美沃奇", date: "2026-01-10", price: 2800, dept: siteB, custodian: liJiao, loc: "B标段工具柜", status: "in_use" },
-    { assetNo: "TOL-2026-003", name: "裂缝宽度观测仪", category: "TOOL", subCat: "观测工具", model: "HC-CK102", sn: "CK102-20251101", mfr: "北京海创", date: "2025-11-01", price: 4800, dept: siteC, custodian: null, loc: "C标段（已报失）", status: "lost" },
-    { assetNo: "TOL-2026-004", name: "电子水准仪标尺", category: "TOOL", subCat: "测量工具", model: "GPCL3", sn: "GPCL3-20250801", mfr: "南方测绘", date: "2025-08-01", price: 1800, dept: siteB, custodian: liJiao, loc: "B标段仓库", status: "idle" },
-    { assetNo: "TOL-2026-005", name: "混凝土钻孔取芯机", category: "TOOL", subCat: "取样工具", model: "HZ-20A", sn: "HZ20A-20251001", mfr: "浙江土工仪器", date: "2025-10-01", price: 15000, dept: siteA, custodian: liJiao, loc: "A标段工具房", status: "repairing" },
-    // ===== 第二批：D/E/F标段 + 业务部门资产 =====
-    { assetNo: "INS-2026-008", name: "全站仪", category: "INSTRUMENT", subCat: "测量仪器", model: "TS16 1\"", sn: "TS16-20260215", mfr: "Leica", date: "2026-02-15", price: 198000, dept: siteD, custodian: liJiao, loc: "D标段测量室", status: "in_use", calDate: "2026-02-15", calCycle: 12, calNext: "2027-02-15" },
-    { assetNo: "INS-2026-009", name: "混凝土渗透仪", category: "INSTRUMENT", subCat: "耐久性检测", model: "HS-40", sn: "HS40-20260301", mfr: "天津建仪", date: "2026-03-01", price: 42000, dept: siteD, custodian: liJiao, loc: "D标段试验室", status: "in_use", calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },
-    { assetNo: "INS-2026-010", name: "桥梁挠度检测仪", category: "INSTRUMENT", subCat: "桥梁检测", model: "BJQN-V5.0", sn: "BJQN-20260410", mfr: "北京光电", date: "2026-04-10", price: 156000, dept: siteE, custodian: liJiao, loc: "E标段桥梁检测室", status: "in_use", calDate: "2026-04-10", calCycle: 6, calNext: "2026-10-10" },
-    { assetNo: "INS-2026-011", name: "超声测厚仪", category: "INSTRUMENT", subCat: "钢结构检测", model: "DMS-2TC", sn: "DMS2TC-20260105", mfr: "北京时代", date: "2026-01-05", price: 38000, dept: siteE, custodian: liJiao, loc: "E标段钢结构检测室", status: "in_use", calDate: "2026-01-05", calCycle: 12, calNext: "2027-01-05" },
-    { assetNo: "INS-2026-012", name: "桩基完整性测试仪", category: "INSTRUMENT", subCat: "桩基检测", model: "PIT-W", sn: "PITW-20260520", mfr: "美国PDI", date: "2026-05-20", price: 245000, dept: siteF, custodian: liJiao, loc: "F标段桩基检测室", status: "in_use", calDate: "2026-05-20", calCycle: 6, calNext: "2026-11-20" },
-    { assetNo: "INS-2026-013", name: "GPS-RTK测量仪", category: "INSTRUMENT", subCat: "测量仪器", model: "iRTK5", sn: "iRTK5-20251201", mfr: "中海达", date: "2025-12-01", price: 68000, dept: dmCenter, custodian: liJiao, loc: "交付中心外出巡检车", status: "in_use", calDate: "2025-12-01", calCycle: 12, calNext: "2026-12-01" },
-    { assetNo: "INS-2026-014", name: "涂层测厚仪", category: "INSTRUMENT", subCat: "钢结构检测", model: "TT260", sn: "TT260-20260320", mfr: "北京时代", date: "2026-03-20", price: 18000, dept: bizCenter, custodian: zhouShang, loc: "商务中心设备室", status: "in_use", calDate: "2026-03-20", calCycle: 6, calNext: "2026-09-20" },
-    { assetNo: "INS-2026-015", name: "标准恒温养护箱", category: "INSTRUMENT", subCat: "养护设备", model: "YH-40B", sn: "YH40B-20260120", mfr: "无锡建仪", date: "2026-01-20", price: 32000, dept: qmCenter, custodian: weiZhi, loc: "质量中心养护室", status: "in_use", calDate: "2026-01-20", calCycle: 12, calNext: "2027-01-20" },
-    // 新增车辆 4辆
-    { assetNo: "VEH-2026-005", name: "江铃域虎7工程车", category: "VEHICLE", subCat: "皮卡", model: "域虎7 2.0T", sn: "VIN-YH7-20260401", mfr: "江铃汽车", date: "2026-04-01", price: 138000, dept: siteD, custodian: liJiao, loc: "D标段驻地", status: "in_use", plate: "京D·YH005", vin: "LEFEDEF16MT000005", bp: "柴油", seats: 5, nextInsp: "2027-04-01", insuranceExp: "2026-12-15", mileage: 12500 },
-    { assetNo: "VEH-2026-006", name: "日产纳瓦拉皮卡", category: "VEHICLE", subCat: "皮卡", model: "纳瓦拉 2.5L", sn: "VIN-NVL-20260315", mfr: "郑州日产", date: "2026-03-15", price: 169800, dept: siteE, custodian: liJiao, loc: "E标段驻地", status: "in_use", plate: "京E·NV006", vin: "LJNTGU5G9MN000006", bp: "汽油", seats: 5, nextInsp: "2027-03-15", insuranceExp: "2026-09-20", mileage: 9800 },
-    { assetNo: "VEH-2026-007", name: "福田皮卡工程车", category: "VEHICLE", subCat: "皮卡", model: "拓陆者E7 2.0T", sn: "VIN-FT07-20260220", mfr: "福田汽车", date: "2026-02-20", price: 116000, dept: siteF, custodian: liJiao, loc: "F标段驻地", status: "in_use", plate: "京F·FT007", vin: "LVAV2MAB2ME000007", bp: "柴油", seats: 5, nextInsp: "2027-02-20", insuranceExp: "2027-02-20", mileage: 22000 },
-    { assetNo: "VEH-2026-008", name: "金杯海狮检测车", category: "VEHICLE", subCat: "MPV", model: "海狮王 2.4L", sn: "VIN-HSW-20260108", mfr: "华晨金杯", date: "2026-01-08", price: 145000, dept: dmCenter, custodian: liJiao, loc: "交付中心停车场", status: "in_use", plate: "京G·HS008", vin: "LSYADABF3MK000008", bp: "汽油", seats: 12, nextInsp: "2027-01-08", insuranceExp: "2027-01-08", mileage: 18800 },
-    // 新增办公设备 6件
-    { assetNo: "OFF-2026-007", name: "AOC 4K显示器", category: "OFFICE", subCat: "显示器", model: "U2790PQU", sn: "AOC-U2790-20260201", mfr: "AOC", date: "2026-02-01", price: 2800, dept: dmCenter, custodian: liJiao, loc: "交付中心工位A1", status: "in_use" },
-    { assetNo: "OFF-2026-008", name: "联想ThinkStation P360", category: "OFFICE", subCat: "工作站", model: "P360 Ultra", sn: "LEN-P360-20260310", mfr: "联想", date: "2026-03-10", price: 22000, dept: dmCenter, custodian: liJiao, loc: "交付中心数据处理室", status: "in_use", os: "Windows 11 Pro", cpu: "i7-12700", ram: "64GB", disk: "1TB SSD" },
-    { assetNo: "OFF-2026-009", name: "联想ThinkPad T14", category: "OFFICE", subCat: "笔记本", model: "T14 Gen4", sn: "TP-T14-20260405", mfr: "联想", date: "2026-04-05", price: 11500, dept: bizCenter, custodian: zhouShang, loc: "商务中心移动办公", status: "in_use", os: "Windows 11 Pro", cpu: "i7-1355U", ram: "32GB", disk: "512GB SSD" },
-    { assetNo: "OFF-2026-010", name: "HP彩色激光打印机", category: "OFFICE", subCat: "打印机", model: "Color LaserJet Pro M454dw", sn: "HP-M454-20251201", mfr: "惠普", date: "2025-12-01", price: 5800, dept: bizCenter, custodian: zhouShang, loc: "商务中心打印室", status: "in_use" },
-    { assetNo: "OFF-2026-011", name: "Apple iMac 24寸", category: "OFFICE", subCat: "一体机", model: "iMac M3 24\"", sn: "iMac-M3-20260501", mfr: "Apple", date: "2026-05-01", price: 14999, dept: opsCenter, custodian: wuYun, loc: "运营中心工位C3", status: "in_use", os: "macOS Sequoia", cpu: "M3", ram: "24GB", disk: "512GB SSD" },
-    { assetNo: "OFF-2026-012", name: "极米投影仪H6", category: "OFFICE", subCat: "会议设备", model: "H6 4K", sn: "JM-H6-20260315", mfr: "极米", date: "2026-03-15", price: 6999, dept: opsCenter, custodian: wuYun, loc: "运营中心会议室", status: "in_use", os: "Android TV", cpu: "MT9669", ram: "4GB", disk: "64GB" },
-    // 新增小型工具 6件
-    { assetNo: "TOL-2026-006", name: "红外测温仪", category: "TOOL", subCat: "测温工具", model: "FLIR E8-XT", sn: "FLIR-E8-20260401", mfr: "FLIR", date: "2026-04-01", price: 18000, dept: siteD, custodian: liJiao, loc: "D标段工具柜", status: "in_use" },
-    { assetNo: "TOL-2026-007", name: "超声波探伤仪", category: "TOOL", subCat: "探伤工具", model: "CTS-9009", sn: "CTS9009-20260210", mfr: "汕头超声", date: "2026-02-10", price: 35000, dept: siteD, custodian: liJiao, loc: "D标段检测室", status: "in_use" },
-    { assetNo: "TOL-2026-008", name: "数字温度记录仪", category: "TOOL", subCat: "记录设备", model: "TR-71wb", sn: "TR71-20260115", mfr: "T&D", date: "2026-01-15", price: 4500, dept: siteE, custodian: liJiao, loc: "E标段养护监控室", status: "in_use" },
-    { assetNo: "TOL-2026-009", name: "弹簧拉力计", category: "TOOL", subCat: "力学工具", model: "NK-500", sn: "NK500-20251201", mfr: "山度仪器", date: "2025-12-01", price: 2200, dept: siteF, custodian: liJiao, loc: "F标段工具柜", status: "in_use" },
-    { assetNo: "TOL-2026-010", name: "电子天平", category: "TOOL", subCat: "称量工具", model: "JA5003N", sn: "JA5003-20260120", mfr: "上海精科", date: "2026-01-20", price: 3800, dept: siteF, custodian: liJiao, loc: "F标段称量室", status: "in_use" },
-    { assetNo: "TOL-2026-011", name: "激光垂准仪（备用）", category: "TOOL", subCat: "测量工具", model: "DZJ-300", sn: "DZJ300-20251001", mfr: "博飞仪器", date: "2025-10-01", price: 12000, dept: dmCenter, custodian: null, loc: "交付中心仓库", status: "idle" },
-    // ===== 第三批：深度问题场景（覆盖分布式管理六大痛点维度） =====
-    // 痛点1: 外派自行采购不报备 — F标段买仪器3月未登记
-    { assetNo: "INS-2026-016", name: "混凝土电阻率仪", category: "INSTRUMENT", subCat: "耐久性检测", model: "R-Meter MK3", sn: "RMK3-20260301", mfr: "瑞士Proceq", date: "2026-03-01", price: 86000, dept: siteF, custodian: liJiao, loc: "F标段耐久性试验室", status: "in_use", calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },
-    // 痛点2: 标段间重复采购 — B标段买了和A标段同型号回弹仪（应共享而非重购）
-    { assetNo: "INS-2026-017", name: "数显回弹仪（B标自购）", category: "INSTRUMENT", subCat: "强度检测", model: "HT-225D", sn: "SN225D-20260415", mfr: "北京智博联", date: "2026-04-15", price: 13000, dept: siteB, custodian: liJiao, loc: "B标段试验室2号工位", status: "in_use", calDate: "2026-04-15", calCycle: 6, calNext: "2026-10-15" },
-    // 痛点3: 报废资产未下账 — A标段旧压力机实际已报废但系统状态仍为in_stock
-    { assetNo: "INS-2026-018", name: "老旧万能试验机（已报废）", category: "INSTRUMENT", subCat: "力学检测", model: "WE-1000B", sn: "WE1000-20180301", mfr: "济南试金", date: "2018-03-01", price: 45000, dept: siteA, custodian: null, loc: "A标段废弃设备区", status: "in_stock", calDate: "2022-09-01", calCycle: 12, calNext: "2023-09-01" },
-    // 痛点4: 借出外部未归还 — E标段测斜仪借给合作单位超期未还
-    { assetNo: "INS-2026-019", name: "滑动式测斜仪", category: "INSTRUMENT", subCat: "变形监测", model: "CX-901F", sn: "CX901-20250601", mfr: "北京航天", date: "2025-06-01", price: 125000, dept: siteE, custodian: null, loc: "借给中铁XX局未归还", status: "idle", calDate: "2025-06-01", calCycle: 12, calNext: "2026-06-01" },
-    // 痛点5: 公车私用嫌疑 — C标段车辆非工作时间使用频繁
-    { assetNo: "VEH-2026-009", name: "日产奇骏巡查车", category: "VEHICLE", subCat: "SUV", model: "奇骏 2.5L 4WD", sn: "VIN-QJ-20251101", mfr: "东风日产", date: "2025-11-01", price: 218000, dept: siteC, custodian: liJiao, loc: "C标段驻地", status: "in_use", plate: "京C·QJ009", vin: "LGBM2DE47MS000009", bp: "汽油", seats: 5, nextInsp: "2026-11-01", insuranceExp: "2026-05-15", mileage: 42300 },
-    // 痛点6: 维修费用异常 — D标段哈弗一年修3次花费高
-    { assetNo: "VEH-2026-010", name: "长城哈弗H9", category: "VEHICLE", subCat: "SUV", model: "哈弗H9 2.0T 四驱", sn: "VIN-H9-20250801", mfr: "长城汽车", date: "2025-08-01", price: 258000, dept: siteD, custodian: liJiao, loc: "D标段驻地", status: "in_use", plate: "京D·HH010", vin: "LGWFF7A56MH000010", bp: "柴油", seats: 7, nextInsp: "2026-08-01", insuranceExp: "2026-08-01", mileage: 31500 },
-    // 痛点7: 外派车辆长期闲置 — F标段依维柯极少使用
-    { assetNo: "VEH-2026-011", name: "依维柯检测车", category: "VEHICLE", subCat: "专项作业车", model: "Daily 3.0T", sn: "VIN-YWK-20241015", mfr: "南京依维柯", date: "2024-10-15", price: 320000, dept: siteF, custodian: null, loc: "F标段（长期闲置）", status: "idle", plate: "京F·YW011", vin: "LNYNBAA30MV000011", bp: "柴油", seats: 17, nextInsp: "2026-10-15", insuranceExp: "2026-10-15", mileage: 3200 },
-    // 痛点8: 离职员工资产未回收 — D标段技术员离职笔记本未归还
-    { assetNo: "OFF-2026-013", name: "Lenovo ThinkPad E15", category: "OFFICE", subCat: "笔记本", model: "E15 Gen4", sn: "TP-E15-20260110", mfr: "联想", date: "2026-01-10", price: 6500, dept: siteD, custodian: zhouShang, loc: "D标段（持有人已离职）", status: "in_use", os: "Windows 11 Pro", cpu: "i5-1235U", ram: "16GB", disk: "512GB SSD" },
-    // 痛点9: 新购未拆封虚增资产 — F标段UPS买了但未启用
-    { assetNo: "OFF-2026-014", name: "山特UPS不间断电源", category: "OFFICE", subCat: "电源设备", model: "C6KS 6kVA", sn: "STK-C6KS-20260501", mfr: "山特", date: "2026-05-01", price: 12000, dept: siteF, custodian: null, loc: "F标段库房（未拆封）", status: "in_stock" },
-    // 痛点10: 废旧办公设备未处置 — A标段台式机报废多年还挂着
-    { assetNo: "OFF-2026-015", name: "老旧联想台式机（待报废）", category: "OFFICE", subCat: "台式机", model: "启天M4350", sn: "LN-M4350-20190601", mfr: "联想", date: "2019-06-01", price: 3500, dept: siteA, custodian: null, loc: "A标段废弃设备区", status: "idle" },
-    // 痛点11: 外派点自行采购不备案 — C标段自行购买扫描仪未走采购流程
-    { assetNo: "OFF-2026-016", name: "Canon高速扫描仪", category: "OFFICE", subCat: "办公外设", model: "DR-M260", sn: "CN-M260-20260315", mfr: "佳能", date: "2026-03-15", price: 9800, dept: siteC, custodian: liJiao, loc: "C标段资料室", status: "in_use" },
-    // 痛点12: 损坏工具不报修 — E标段硬度计坏了3个月系统仍显示正常
-    { assetNo: "TOL-2026-012", name: "便携式里氏硬度计", category: "TOOL", subCat: "硬度测试", model: "TH110", sn: "TH110-20250901", mfr: "北京时代", date: "2025-09-01", price: 8500, dept: siteE, custodian: liJiao, loc: "E标段工具柜", status: "in_use" },
-    // 痛点13: 保管人信息不准 — D标段卡尺登记保管人是B标段员工
-    { assetNo: "TOL-2026-013", name: "数显卡尺", category: "TOOL", subCat: "测量工具", model: "500-196-30", sn: "MTG-196-20251201", mfr: "Mitutoyo", date: "2025-12-01", price: 2600, dept: siteD, custodian: zhouShang, loc: "D标段测量室", status: "in_use" },
-    // 痛点14: 标段间私下借用 — B标段砝码被A标段拿走未登记
-    { assetNo: "TOL-2026-014", name: "标准砝码组", category: "TOOL", subCat: "校准工具", model: "F1级 1mg-1kg", sn: "FM-F1-20250801", mfr: "上海实润", date: "2025-08-01", price: 9500, dept: siteB, custodian: liJiao, loc: "A标段（从B标段借用未还）", status: "in_use" },
-  ];
-
-  const assetIds: number[] = [];
-  const anoPrefix = isT1 ? "" : "DEMO-";
-  for (const a of allAssets) {
-    const r = dbRun(
-      `INSERT INTO assets (asset_no, name, category, sub_category, model, sn, manufacturer,
-        purchase_date, purchase_price, expected_life, status, owner_type,
-        department_id, location_detail, custodian_id, remark, tenant_id, created_by, warranty_expire_date)
-       VALUES (?,?,?,?,?,?,?,?,?,?,?,'owned',?,?,?,?,?,?,?)`,
-      [anoPrefix + a.assetNo, a.name, a.category, a.subCat || null, a.model || null,
-       a.sn || null, a.mfr || null, a.date || null, a.price, 60, a.status,
-       a.dept, a.loc || null, a.custodian, null, tenantId, 1, addMonths(a.date, 60)]
-    );
-    assetIds.push(r.lastInsertRowid as number);
-  }
-
-  // 车辆车牌也需去重：全局UNIQUE约束要求不同租户不能共用同车牌
-  const platePrefix = isT1 ? "" : "DEMO-";
-
-  // 仪器扩展数据（前15件，新增8件）
-  const instrumentExts = [
-    { calDate: "2026-05-08", calCycle: 6, calNext: "2026-11-08" },
-    { calDate: "2025-11-12", calCycle: 12, calNext: "2026-04-12" },
-    { calDate: "2026-03-15", calCycle: 6, calNext: "2026-09-15" },
-    { calDate: "2025-08-20", calCycle: 12, calNext: "2026-06-15" },
-    { calDate: "2026-04-01", calCycle: 12, calNext: "2027-04-01" },
-    { calDate: "2025-09-01", calCycle: 12, calNext: "2026-06-20" },
-    null,
-    // 新增8件仪器
-    { calDate: "2026-02-15", calCycle: 12, calNext: "2027-02-15" },
-    { calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },
-    { calDate: "2026-04-10", calCycle: 6, calNext: "2026-10-10" },
-    { calDate: "2026-01-05", calCycle: 12, calNext: "2027-01-05" },
-    { calDate: "2026-05-20", calCycle: 6, calNext: "2026-11-20" },
-    { calDate: "2025-12-01", calCycle: 12, calNext: "2026-12-01" },
-    { calDate: "2026-03-20", calCycle: 6, calNext: "2026-09-20" },
-    { calDate: "2026-01-20", calCycle: 12, calNext: "2027-01-20" },
-    // 第三批：4件（索引46-49）INS-016 ~ INS-019
-    { calDate: "2026-03-01", calCycle: 12, calNext: "2027-03-01" },    // INS-016 电阻率仪（外派自行采购3月未登记，但仪器已校准）
-    { calDate: "2026-04-15", calCycle: 6, calNext: "2026-10-15" },      // INS-017 回弹仪B标（重复采购，买了和A标段同型号）
-    { calDate: "2022-09-01", calCycle: 12, calNext: "2023-09-01" },     // INS-018 旧万能机（校准过期近3年！实际已报废）
-    { calDate: "2025-06-01", calCycle: 12, calNext: "2026-06-01" },     // INS-019 测斜仪（借出外部，校准已过期27天）
-  ];
-  for (let i = 0; i < instrumentExts.length; i++) {
-    const e = instrumentExts[i];
-    if (e) {
-      dbRun("INSERT INTO asset_instruments (asset_id, last_calibration, next_calibration, calibration_cycle) VALUES (?,?,?,?)",
-        [assetIds[i], e.calDate, e.calNext, e.calCycle]);
-    }
-  }
-
-  // 车辆扩展数据（索引7-10）+ 使用日志
-  const vehicleExts = [
-    { plate: "京A·HY001", vin: "LFMG1E729JS000001", bp: "汽油", seats: 7, nextInsp: "2026-10-01", insuranceExp: "2026-07-25", mileage: 28560, logs: [
-      { type: "refuel", cost: 680, mileage: 12500, date: "2026-03-15", desc: "京藏高速服务区加油 95#" },
-      { type: "refuel", cost: 720, mileage: 18600, date: "2026-04-22", desc: "城区中石化加油" },
-      { type: "maintenance", cost: 3200, mileage: 20000, date: "2026-05-05", desc: "2万公里常规保养" },
-      { type: "refuel", cost: 650, mileage: 24500, date: "2026-06-10", desc: "张家口出差加油" },
-      { type: "other", cost: 3500, mileage: 28000, date: "2026-06-20", desc: "更换四条轮胎" },
-    ] },
-    { plate: "京B·GC002", vin: "LGWDBE195MB000002", bp: "柴油", seats: 5, nextInsp: "2027-03-01", insuranceExp: "2026-06-28", mileage: 18200, logs: [
-      { type: "refuel", cost: 420, mileage: 8000, date: "2026-04-10", desc: "B标段附近加油站 0#柴油" },
-      { type: "refuel", cost: 380, mileage: 13500, date: "2026-05-18", desc: "出差采样加油" },
-      { type: "traffic_fine", cost: 200, mileage: 15000, date: "2026-06-05", desc: "G6高速超速 罚200记3分" },
-      { type: "maintenance", cost: 800, mileage: 16000, date: "2026-06-15", desc: "首保 更换机油机滤" },
-    ] },
-    { plate: "京C·WL003", vin: "LZWADAGA4MG000003", bp: "汽油", seats: 7, nextInsp: "2026-12-08", insuranceExp: "2026-12-08", mileage: 34500, logs: [
-      { type: "refuel", cost: 350, mileage: 15000, date: "2026-03-20", desc: "A标段附近加油站 92#" },
-      { type: "refuel", cost: 320, mileage: 22000, date: "2026-05-01", desc: "送检样品加油" },
-      { type: "insurance", cost: 3800, mileage: 30000, date: "2026-06-01", desc: "续保交强险+商业险" },
-      { type: "annual_inspection", cost: 500, mileage: 30000, date: "2026-06-10", desc: "年检上线检测" },
-    ] },
-    { plate: "京A·HD004", vin: "LC0CE4CB6N0000004", bp: "电动", seats: 5, nextInsp: "2028-04-15", insuranceExp: "2027-04-15", mileage: 5200, logs: [
-      { type: "refuel", cost: 85, mileage: 1200, date: "2026-05-01", desc: "特来电充电 62kWh" },
-      { type: "refuel", cost: 120, mileage: 3200, date: "2026-05-25", desc: "国网充电桩 88kWh" },
-      { type: "other", cost: 2600, mileage: 3800, date: "2026-06-15", desc: "安装家用充电桩" },
-    ] },
-  ];
-  const vOffset = 7;
-  for (let i = 0; i < vehicleExts.length; i++) {
-    const v = vehicleExts[i];
-    dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
-      [assetIds[vOffset + i], platePrefix + v.plate, v.vin, v.bp, v.seats, v.nextInsp, v.insuranceExp, v.mileage]);
-    for (const log of v.logs) {
-      dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
-        [assetIds[vOffset + i], log.type, log.cost, log.mileage, log.date, log.desc, tenantId]);
-    }
-  }
-
-  // 第二批车辆扩展（D/E/F标段 + 交付中心，索引30-33）
-  const vehicleExts2 = [
-    { plate: "京D·YH005", vin: "LEFEDEF16MT000005", bp: "柴油", seats: 5, nextInsp: "2027-04-01", insuranceExp: "2026-12-15", mileage: 12500, logs: [
-      { type: "refuel", cost: 380, mileage: 4200, date: "2026-04-20", desc: "D标段加油站 0#柴油" },
-      { type: "maintenance", cost: 1200, mileage: 8000, date: "2026-05-15", desc: "首保 更换机油三滤" },
-      { type: "refuel", cost: 450, mileage: 10500, date: "2026-06-10", desc: "送检桥梁构件加油" },
-    ] },
-    { plate: "京E·NV006", vin: "LJNTGU5G9MN000006", bp: "汽油", seats: 5, nextInsp: "2027-03-15", insuranceExp: "2026-09-20", mileage: 9800, logs: [
-      { type: "refuel", cost: 520, mileage: 3500, date: "2026-04-05", desc: "E标段附近加油站 92#" },
-      { type: "refuel", cost: 480, mileage: 6800, date: "2026-05-20", desc: "钢结构检测出差加油" },
-      { type: "traffic_fine", cost: 100, mileage: 8000, date: "2026-06-18", desc: "违停罚款 100元" },
-    ] },
-    { plate: "京F·FT007", vin: "LVAV2MAB2ME000007", bp: "柴油", seats: 5, nextInsp: "2027-02-20", insuranceExp: "2027-02-20", mileage: 22000, logs: [
-      { type: "refuel", cost: 360, mileage: 12000, date: "2026-03-10", desc: "F标段工地加油" },
-      { type: "maintenance", cost: 1500, mileage: 18000, date: "2026-05-01", desc: "2万公里大保养" },
-      { type: "refuel", cost: 390, mileage: 20000, date: "2026-06-05", desc: "桩基检测送样加油" },
-      { type: "insurance", cost: 4600, mileage: 22000, date: "2026-06-20", desc: "续保商业险+三者险" },
-    ] },
-    { plate: "京G·HS008", vin: "LSYADABF3MK000008", bp: "汽油", seats: 12, nextInsp: "2027-01-08", insuranceExp: "2027-01-08", mileage: 18800, logs: [
-      { type: "refuel", cost: 580, mileage: 8000, date: "2026-02-20", desc: "交付中心车队加油" },
-      { type: "refuel", cost: 620, mileage: 12500, date: "2026-04-15", desc: "跨标段巡检加油" },
-      { type: "maintenance", cost: 950, mileage: 15000, date: "2026-05-10", desc: "1.5万公里常规保养" },
-      { type: "refuel", cost: 550, mileage: 17500, date: "2026-06-15", desc: "D标段工地送设备加油" },
-    ] },
-  ];
-  const vOffset2 = 30;  // 新车辆从allAssets索引30开始
-  for (let i = 0; i < vehicleExts2.length; i++) {
-    const v = vehicleExts2[i];
-    dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
-      [assetIds[vOffset2 + i], platePrefix + v.plate, v.vin, v.bp, v.seats, v.nextInsp, v.insuranceExp, v.mileage]);
-    for (const log of v.logs) {
-      dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
-        [assetIds[vOffset2 + i], log.type, log.cost, log.mileage, log.date, log.desc, tenantId]);
-    }
-  }
-
-  // 第三批车辆扩展（索引50-52：奇骏公车私用、哈弗维修异常、依维柯闲置）
-  const vehicleExts3 = [
-    { plate: "京C·QJ009", vin: "LGBM2DE47MS000009", bp: "汽油", seats: 5, nextInsp: "2026-11-01", insuranceExp: "2026-05-15", mileage: 42300, logs: [
-      { type: "refuel", cost: 520, mileage: 18000, date: "2026-03-05", desc: "C标段附近加油站 92#" },
-      { type: "refuel", cost: 480, mileage: 23500, date: "2026-04-10", desc: "市区加油站（非工作日出车）⚠️公车私用嫌疑" },
-      { type: "traffic_fine", cost: 200, mileage: 28000, date: "2026-05-01", desc: "景区违停罚款（五一假期）⚠️非公务出行" },
-      { type: "refuel", cost: 550, mileage: 34000, date: "2026-05-30", desc: "高速服务区加油（周末出车）" },
-      { type: "other", cost: 800, mileage: 40000, date: "2026-06-15", desc: "车内饰清洗&空调保养（非必须）" },
-      { type: "traffic_fine", cost: 300, mileage: 42300, date: "2026-06-25", desc: "夜间超速抓拍（22:35 非工作时段）⚠️第三次违规" },
-    ] },
-    { plate: "京D·HH010", vin: "LGWFF7A56MH000010", bp: "柴油", seats: 7, nextInsp: "2026-08-01", insuranceExp: "2026-08-01", mileage: 31500, logs: [
-      { type: "refuel", cost: 450, mileage: 8000, date: "2025-11-15", desc: "D标段附近加油站 0#柴油" },
-      { type: "maintenance", cost: 6800, mileage: 11000, date: "2025-12-20", desc: "⚠️ 涡轮增压器维修（意外故障 不在保修期）" },
-      { type: "refuel", cost: 480, mileage: 16000, date: "2026-02-10", desc: "跨标段巡检加油" },
-      { type: "maintenance", cost: 12500, mileage: 20000, date: "2026-04-05", desc: "⚠️ 变速箱大修（质保期内但判定人为操作不当）" },
-      { type: "insurance", cost: 5800, mileage: 25000, date: "2026-05-20", desc: "出险维修前保险杠（单方事故）" },
-      { type: "other", cost: 4200, mileage: 30000, date: "2026-06-10", desc: "⚠️ 更换四条AT越野胎（原厂胎不到一年即报废）" },
-    ] },
-    { plate: "京F·YW011", vin: "LNYNBAA30MV000011", bp: "柴油", seats: 17, nextInsp: "2026-10-15", insuranceExp: "2026-10-15", mileage: 3200, logs: [
-      { type: "refuel", cost: 680, mileage: 50, date: "2024-10-20", desc: "首次加油（交车时）" },
-      { type: "refuel", cost: 650, mileage: 1200, date: "2025-03-01", desc: "F标段开工仪式运输物资" },
-      { type: "maintenance", cost: 1800, mileage: 3000, date: "2025-10-15", desc: "年检前保养（实际为强制年检要求）" },
-      { type: "insurance", cost: 7800, mileage: 3200, date: "2025-10-20", desc: "续保（车辆极少使用但仍需全额投保）⚠️沉没成本" },
-      { type: "other", cost: 2000, mileage: 3200, date: "2026-06-01", desc: "停车管理费年缴（闲置14个月仅行驶3200km）" },
-    ] },
-  ];
-  const vOffset3 = 50;  // 第三批车辆从 allAssets 索引50开始
-  for (let i = 0; i < vehicleExts3.length; i++) {
-    const v = vehicleExts3[i];
-    dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
-      [assetIds[vOffset3 + i], platePrefix + v.plate, v.vin, v.bp, v.seats, v.nextInsp, v.insuranceExp, v.mileage]);
-    for (const log of v.logs) {
-      dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
-        [assetIds[vOffset3 + i], log.type, log.cost, log.mileage, log.date, log.desc, tenantId]);
-    }
-  }
-
-  // 办公设备扩展（索引11-16中的3件有OS信息）
-  const officeData = [
-    { idx: 0, os: "Ubuntu 22.04", cpu: "Xeon Gold 6248R", ram: "128GB", disk: "2TB SSD" },
-    { idx: 1, os: "Windows 11 Pro", cpu: "i7-1365U", ram: "32GB", disk: "1TB SSD" },
-    { idx: 3, os: "Android 12.0", cpu: "A73+A53", ram: "8GB", disk: "64GB" },
-  ];
-  const oOffset = 11;
-  for (const d of officeData) {
-    dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
-      [assetIds[oOffset + d.idx], d.os, d.cpu, d.ram, d.disk]);
-  }
-
-  // 第二批办公设备扩展（索引34-39，其中3件有OS）
-  const officeData2 = [
-    { idx: 1, os: "Windows 11 Pro", cpu: "i7-12700", ram: "64GB", disk: "1TB SSD" },  // ThinkStation
-    { idx: 2, os: "Windows 11 Pro", cpu: "i7-1355U", ram: "32GB", disk: "512GB SSD" }, // ThinkPad T14
-    { idx: 4, os: "macOS Sequoia", cpu: "M3", ram: "24GB", disk: "512GB SSD" },       // iMac
-    { idx: 5, os: "Android TV", cpu: "MT9669", ram: "4GB", disk: "64GB" },             // 投影仪
-  ];
-  const oOffset2 = 34;
-  for (const d of officeData2) {
-    dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
-      [assetIds[oOffset2 + d.idx], d.os, d.cpu, d.ram, d.disk]);
-  }
-
-  // 第三批办公设备扩展（索引53-56，仅 OFF-013 ThinkPad E15 有OS）
-  const officeData3 = [
-    { idx: 0, os: "Windows 11 Pro", cpu: "i5-1235U", ram: "16GB", disk: "512GB SSD" },  // OFF-013 ThinkPad E15
-  ];
-  const oOffset3 = 53;
-  for (const d of officeData3) {
-    dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
-      [assetIds[oOffset3 + d.idx], d.os, d.cpu, d.ram, d.disk]);
-  }
-
-  // 流转记录
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, from_user_id, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', NULL, ?, '行政部配发公务用车', ?, 1, '2026-01-10 09:00:00')`,
-    [assetIds[vOffset], fengXing, tenantId]);
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'A标段路基检测领用', ?, 1, '2026-01-20 14:30:00')`,
-    [assetIds[0], liJiao, tenantId]);
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '长期未使用标记闲置', ?, 1, '2026-05-01 10:00:00')`,
-    [assetIds[6], tenantId]);
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '采购多余入库闲置', ?, 1, '2026-03-15 16:00:00')`,
-    [assetIds[oOffset + 5], tenantId]);
-  const toolLostIdx = 19;  // 裂缝宽度观测仪（原索引19）
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, condition, remark, tenant_id, created_by, created_at) VALUES (?, 'return', 'lost', '外检遗失已报保险', ?, 1, '2026-06-10 11:00:00')`,
-    [assetIds[toolLostIdx], tenantId]);
-
-  // 新增流转记录（第二批资产）
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'D标段桥梁检测领用', ?, 1, '2026-02-20 09:00:00')`,
-    [assetIds[22], liJiao, tenantId]); // 全站仪 → D标段
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'E标段配备桥梁检测设备', ?, 1, '2026-04-15 10:00:00')`,
-    [assetIds[24], liJiao, tenantId]); // 桥梁挠度检测仪 → E标段
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'F标段桩基检测配备', ?, 1, '2026-05-25 14:00:00')`,
-    [assetIds[26], liJiao, tenantId]); // 桩基完整性测试仪 → F标段
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '采购入库闲置待分配', ?, 1, '2026-04-01 16:00:00')`,
-    [assetIds[45], tenantId]); // 激光垂准仪标记闲置
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'D标段驻地工程车配发', ?, 1, '2026-04-10 08:00:00')`,
-    [assetIds[30], liJiao, tenantId]); // 江铃域虎 → D标段
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'E标段驻地车辆配置', ?, 1, '2026-03-20 09:00:00')`,
-    [assetIds[31], liJiao, tenantId]); // 纳瓦拉皮卡 → E标段
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'F标段驻地车辆配置', ?, 1, '2026-03-01 10:00:00')`,
-    [assetIds[32], liJiao, tenantId]); // 福田皮卡 → F标段
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '交付中心外出设备运输车', ?, 1, '2026-01-15 09:00:00')`,
-    [assetIds[33], liJiao, tenantId]); // 金杯海狮 → 交付中心
-
-  // 第三批：14件问题场景资产交易记录（讲述完整故事）
-  // INS-016 (idx46): F标段自行采购3月不报备 → 补登记入库（迟了90天）
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ F标段自行采购电阻率仪，3个月后补登记入库', ?, 1, '2026-06-01 15:00:00')`,
-    [assetIds[46], liJiao, tenantId]);
-  // INS-017 (idx47): B标段买了和A标段同型号回弹仪（重复采购，应共享而非重购）
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ B标段重复采购（A标段已有同型号HT-225D），未走共享调配', ?, 1, '2026-04-20 10:00:00')`,
-    [assetIds[47], liJiao, tenantId]);
-  // INS-018 (idx48): A标段旧万能机实际已报废但系统仍为in_stock
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ 2018年购入设备，2023年实际已报废拆除，但系统未执行scrap操作', ?, 1, '2023-06-15 09:00:00')`,
-    [assetIds[48], tenantId]);
-  // INS-019 (idx49): E标段测斜仪借给中铁XX局未归还 + 校准已过期
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'lend_out', ?, '⚠️ 借给中铁XX局3标段（合作单位），借期1个月，超期15天未还，校准已于2026-06-01过期', ?, 1, '2026-05-15 08:00:00')`,
-    [assetIds[49], zhouShang, tenantId]);
-  // VEH-009 (idx50): C标段奇骏公车私用嫌疑
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'C标段巡查车配发 ⚠️注意：多次非工作时段出车见用车日志', ?, 1, '2025-11-10 09:00:00')`,
-    [assetIds[50], liJiao, tenantId]);
-  // VEH-010 (idx51): D标段哈弗H9维修费用异常
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'D标段工程车 ⚠️一年内维修费用累计超2.3万元，详见维修日志', ?, 1, '2025-08-05 09:00:00')`,
-    [assetIds[51], liJiao, tenantId]);
-  // VEH-011 (idx52): F标段依维柯长期闲置
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ 购入后仅开工仪式使用一次，闲置14个月未分配任务，年维保+保险+停车费超1.1万元沉没成本', ?, 1, '2024-10-20 10:00:00')`,
-    [assetIds[52], tenantId]);
-  // OFF-013 (idx53): D标段ThinkPad E15被离职员工带走未归还
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ D标段技术员领用，该员工已于2026-04-30离职，笔记本未归还入库', ?, 1, '2026-01-15 09:00:00')`,
-    [assetIds[53], zhouShang, tenantId]);
-  // OFF-014 (idx54): F标段UPS未拆封 — 虚增资产争议
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ F标段自行采购UPS，入库后从未启用——是否虚增资产？', ?, 1, '2026-05-05 14:00:00')`,
-    [assetIds[54], tenantId]);
-  // OFF-015 (idx55): A标段旧台式机待报废未处置
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?, 'transfer', '⚠️ 2019年购入台式机，已使用7年，3年前就应报废处置但一直挂账', ?, 1, '2024-01-10 10:00:00')`,
-    [assetIds[55], tenantId]);
-  // OFF-016 (idx56): C标段自行购买扫描仪不备案
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ C标段自行采购扫描仪，未走总部采购审批流程，3月后补录', ?, 1, '2026-06-20 16:00:00')`,
-    [assetIds[56], liJiao, tenantId]);
-  // TOL-012 (idx57): E标段硬度计损坏3月不报修
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, 'E标段工具配备 ⚠️该硬度计实际已损坏（探头断裂），但3个月未报修也未登记维修', ?, 1, '2025-09-10 09:00:00')`,
-    [assetIds[57], liJiao, tenantId]);
-  // TOL-013 (idx58): D标段卡尺保管人信息不准—登记的是商务中心员工而非D标段实际使用人
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'checkout', ?, '⚠️ 实际使用人为D标段测量员，但系统登记保管人为商务中心周商（信息录入错误）', ?, 1, '2025-12-05 11:00:00')`,
-    [assetIds[58], zhouShang, tenantId]);
-  // TOL-014 (idx59): B标段砝码被A标段私下借用未登记
-  dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?, 'lend_out', ?, '⚠️ A标段私下借用B标段标准砝码组，未走正式借用流程，系统未登记跨标段调拨', ?, 1, '2026-05-20 13:00:00')`,
-    [assetIds[59], liJiao, tenantId]);
-
-  // 盘点任务
-  const task = dbRun(`INSERT INTO asset_count_tasks (title, description, scope, status, start_date, tenant_id, created_by) VALUES ('2026年Q2资产盘点','对全部6个标段及总部检测仪器、车辆、办公设备进行半年大盘点','all','in_progress','2026-06-25',?,1)`, [tenantId]);
-  const taskId = task.lastInsertRowid as number;
-  // 盘点前8件（原7件 + 全站仪）+ 2件差异
-  for (let i = 0; i <= 7; i++) {
-    const isDiff = i === 3 || i === 7;
-    dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
-      [taskId, assetIds[i], allAssets[i].loc || null, allAssets[i].loc || null, allAssets[i].status, allAssets[i].status, allAssets[i].custodian, allAssets[i].custodian, isDiff ? "difference" : "match", isDiff ? (i === 7 ? "全站仪GPS模块需固件升级" : "校准证书即将到期需安排送检") : null, tenantId]);
-  }
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,NULL,?,?,?,1,?)`,
-    [taskId, assetIds[6], "A标段仓库", "idle", "not_found", "C标段仓库未找到该仪器", tenantId]);
-  // 新增盘点——D/E/F标段仪器
-  for (let i = 22; i <= 28; i++) {
-    const isDiff = i === 25;
-    dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
-      [taskId, assetIds[i], allAssets[i].loc || null, allAssets[i].loc || null, allAssets[i].status, allAssets[i].status, allAssets[i].custodian, allAssets[i].custodian, isDiff ? "difference" : "match", isDiff ? "超声测厚仪探头磨损需更换" : null, tenantId]);
-  }
-  // 工具盘点差异
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[19], "A标段工具房", "A标段工具房", "repairing", "repairing", "match", "已在维修中", tenantId]);
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[45], "交付中心仓库", "交付中心仓库", "idle", "idle", "match", "闲置中可调拨", tenantId]);
-
-  // 第三批问题资产盘点结果 — 每个痛点映射到具体差异
-  // INS-016 (idx46): F标段电阻率仪 — 自行采购不报备，系统晚登记
-  const c46 = dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[46], "F标段耐久性试验室", "F标段耐久性试验室", "in_use", "in_use", "difference", "⚠️ 该设备由F标段2026-03自行采购，至2026-06才补登记入库（延迟90天），未走总部采购审批", tenantId]);
-  // INS-017 (idx47): B标段回弹仪 — 与A标段同型号重复采购
-  const c47 = dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[47], "B标段试验室2号工位", "B标段试验室2号工位", "in_use", "in_use", "difference", "⚠️ 与A标段INS-001同型号HT-225D，重复采购浪费1.3万元，应共享调拨而非各自购买", tenantId]);
-  // INS-018 (idx48): A标段旧万能机 — 已报废但系统为in_stock
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,NULL,?,?,1,?)`,
-    [taskId, assetIds[48], "A标段废弃设备区", "A标段废弃设备区（设备已物理拆除）", "in_stock", "scrapped", "difference", "⚠️ 严重问题！该设备2023年已报废拆除，但系统仍显示in_stock。资产台账与实际严重不符", tenantId]);
-  // INS-019 (idx49): E标段测斜仪 — 借出中铁XX局超期未还 + 校准过期
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,NULL,?,?,1,?)`,
-    [taskId, assetIds[49], "E标段检测室", "中铁XX局3标段（借出超期15天）", "in_use", "idle", "not_found", "⚠️ 该设备借给合作单位超期未归还，且校准已于2026-06-01过期（过期27天），需立即追回并送校", tenantId]);
-  // VEH-009 (idx50): C标段奇骏 — 公车私用嫌疑
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[50], "C标段驻地", "C标段驻地", "in_use", "in_use", liJiao, liJiao, "difference", "⚠️ 行车日志显示3次非工作时段出车（含五一假期景区违停、夜间超速），存在公车私用嫌疑，建议启动审计", tenantId]);
-  // VEH-010 (idx51): D标段哈弗H9 — 维修费用异常
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[51], "D标段驻地", "D标段驻地", "in_use", "in_use", liJiao, liJiao, "difference", "⚠️ 购置不到1年维修费累计2.35万元（含变速箱大修1.25万、涡轮维修0.68万），远高于同类型车辆正常水平", tenantId]);
-  // VEH-011 (idx52): F标段依维柯 — 长期闲置
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[52], "F标段驻地", "F标段（长期闲置）", "idle", "idle", "difference", "⚠️ 购入20个月仅行驶3200km，年维保+保险+停车费超1.1万元，建议调拨至有需求标段或处置", tenantId]);
-  // OFF-013 (idx53): D标段笔记本 — 离职员工未归还
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[53], "D标段", "不可追溯", "in_use", "in_use", "not_found", "⚠️ 资产已被离职员工带走，至今未归还。持有人2026-04-30离职，需启动追回流程", tenantId]);
-  // OFF-014 (idx54): F标段UPS — 未拆封虚增资产
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[54], "F标段库房", "F标段库房（原箱未拆封）", "in_stock", "in_stock", "match", "⚠️ 虽核实存在但从未启用——F标段表示'买错了用不上'。存在虚增资产嫌疑，建议核查采购合理性", tenantId]);
-  // OFF-015 (idx55): A标段旧台式机 — 待报废未处置
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[55], "A标段废弃设备区", "A标段废弃设备区（已无法开机）", "idle", "idle", "difference", "⚠️ 2019年购入，使用7年已无法开机，但系统一直未走报废流程。占库存指标，建议立即处置", tenantId]);
-  // OFF-016 (idx56): C标段扫描仪 — 自行采购不备案
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[56], "C标段资料室", "C标段资料室", "in_use", "in_use", "difference", "⚠️ C标段2026-03自行采购未走总部采购流程，6月才补录入库。外派点采购权限边界需明确", tenantId]);
-  // TOL-012 (idx57): E标段硬度计 — 损坏3月不报修
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[57], "E标段工具柜", "E标段工具柜", "in_use", "in_use", "difference", "⚠️ 探头已断裂损坏（经现场确认），但系统状态仍为in_use且无维修记录。损坏近3个月未报修", tenantId]);
-  // TOL-013 (idx58): D标段卡尺 — 保管人信息不准
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, expected_custodian_id, actual_custodian_id, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[58], "D标段测量室", "D标段测量室", "in_use", "in_use", zhouShang, liJiao, "difference", "⚠️ 系统登记保管人为商务中心周商，但实际使用人为D标段现场测量员。保管人信息严重失实", tenantId]);
-  // TOL-014 (idx59): B标段砝码 — 被A标段私下借用
-  dbRun(`INSERT INTO asset_count_results (task_id, asset_id, expected_location, actual_location, expected_status, actual_status, result, remark, counted_by, tenant_id) VALUES (?,?,?,?,?,?,?,?,1,?)`,
-    [taskId, assetIds[59], "B标段称量室", "A标段称量室（从B标段私下借用）", "in_use", "in_use", "difference", "⚠️ 实物在A标段称量室找到！B标段前月私下借给A标段未走正式调拨流程，跨标段资产移动无记录", tenantId]);
-
-  // ===== 第四批：分支级集团管控资产种子（全20外派分支 + 痛点场景） =====
-  const branchRows = dbAll(
-    "SELECT id, name, region FROM departments WHERE tenant_id=? AND branch_level=2 ORDER BY id",
-    [tenantId]
-  ) as any[];
-  if (branchRows.length > 0) {
-    const getBranchManager = (deptId: number) =>
-      (dbGet("SELECT id FROM employees WHERE department_id=? AND tenant_id=? AND employee_type='human' LIMIT 1", [deptId, tenantId]) as any)?.id || null;
-    const getBranchAI = (deptId: number) =>
-      (dbGet("SELECT id FROM employees WHERE department_id=? AND tenant_id=? AND employee_type='ai' LIMIT 1", [deptId, tenantId]) as any)?.id || null;
-
-    // 仪器模板轮换
-    const instTmpl = [
-      ["强度检测","HT-225D","北京智博联",12800,12],
-      ["力学检测","YAW-2000","济南试金",158000,12],
-      ["测量仪器","TS09","Leica",98000,12],
-      ["无损检测","N2","汕头超声",36000,6],
-      ["桩基检测","PIT-V2","美国PDI",220000,6],
-      ["钢筋检测","HC-GY81","北京海创",8600,12],
-      ["沥青检测","SYD-4508F","上海昌吉",32000,12],
-      ["土工检测","GZQ-1","南京土壤",28000,12],
-      ["钢结构检测","HS610e","南通友联",45000,6],
-      ["化学分析","ICP-5000","PerkinElmer",180000,12],
-    ] as const;
-    // 车辆模板轮换
-    const vehTmpl = [
-      ["长城风骏7","皮卡","柴油",5,125000,"长城汽车"],
-      ["江铃域虎7","皮卡","柴油",5,138000,"江铃汽车"],
-      ["日产纳瓦拉","皮卡","汽油",5,169800,"郑州日产"],
-      ["福田拓陆者","皮卡","柴油",5,116000,"福田汽车"],
-      ["江淮帅铃T8","皮卡","柴油",5,108000,"江淮汽车"],
-      ["上汽大通T70","皮卡","柴油",5,132000,"上汽大通"],
-      ["五十铃D-MAX","皮卡","柴油",5,156000,"江西五十铃"],
-      ["哈弗H5","SUV","柴油",5,148000,"长城汽车"],
-      ["丰田RAV4","SUV","汽油",5,218000,"一汽丰田"],
-      ["别克GL8","MPV","汽油",7,258000,"上汽通用"],
-      ["金杯阁瑞斯","MPV","汽油",9,95000,"华晨金杯"],
-      ["东风风行菱智","MPV","汽油",7,78000,"东风风行"],
-      ["五菱宏光S","MPV","汽油",7,56000,"上汽通用五菱"],
-      ["江淮瑞风M4","MPV","柴油",7,128000,"江淮汽车"],
-      ["长安凯程F70","皮卡","柴油",5,112000,"长安汽车"],
-      ["中兴威虎","皮卡","柴油",5,98000,"中兴汽车"],
-      ["三菱欧蓝德","SUV","汽油",7,198000,"广汽三菱"],
-      ["北汽勇士","SUV","汽油",7,185000,"北京汽车"],
-      ["黄海N7","皮卡","汽油",5,119000,"黄海汽车"],
-      ["福特全顺","MPV","柴油",12,175000,"江铃福特"],
-    ] as const;
-
-    // 区域对应颜色标记
-    const regionMark = (r: string) => r === "华东" ? "🟦" : r === "华南" ? "🟩" : r === "西部" ? "🟨" : "🟥";
-
-    const newAssets: typeof allAssets = [];
-    const assetCounter = { instr: 19, veh: 11, off: 16, tool: 14 };
-
-    for (let bi = 0; bi < branchRows.length; bi++) {
-      const br = branchRows[bi];
-      const { id: branchId, name: bName, region } = br;
-      const mgr = getBranchManager(branchId);
-      const ai = getBranchAI(branchId);
-      const cus = ai || mgr;
-      const seq = bi + 1;
-      const pad2 = (n: number) => String(n).padStart(2, "0");
-      const rndDate = (mo: number) => `2026-0${mo}-${pad2(5 + (bi * 7) % 25)}`;
-
-      // === 基础车辆 ===
-      const vm = vehTmpl[bi];
-      const vPlate = `京H·BR${pad2(seq)}`;
-      const vDate = rndDate(Math.min(6, 1 + bi % 6));
-      const vMile = 3000 + Math.floor(Math.random() * 25000);
-      assetCounter.veh++;
-      const vNo = `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`;
-      newAssets.push({
-        assetNo: vNo, name: `${bName.replace("外派分支", "")}工程车`, category: "VEHICLE",
-        subCat: vm[1], model: vm[0], sn: `VIN-BR${String(seq).padStart(3, "0")}`, mfr: vm[5], date: vDate,
-        price: vm[4], dept: branchId, custodian: cus, loc: `${bName}驻地`, status: "in_use",
-        plate: vPlate, vin: `LGW${String.fromCharCode(65 + bi % 26)}${pad2(seq)}MH${pad2(seq + 50)}`,
-        bp: vm[2], seats: vm[3], nextInsp: `2027-0${vDate.substring(5, 6)}-${vDate.substring(7, 9)}`,
-        insuranceExp: `2027-${vDate.substring(5, 10)}`, mileage: vMile,
-      });
-
-      // === 基础仪器 ===
-      const im = instTmpl[bi % instTmpl.length];
-      const iDate = rndDate(Math.min(6, 2 + (bi * 2) % 5));
-      const calExp = bi === 16; // 昆明分支：校准超期
-      assetCounter.instr++;
-      const iNo = `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`;
-      newAssets.push({
-        assetNo: iNo, name: `${im[0]}检测仪`, category: "INSTRUMENT",
-        subCat: im[0], model: im[1], sn: `${im[1]}-BR${pad2(seq)}`, mfr: im[2], date: iDate,
-        price: im[3], dept: branchId, custodian: cus, loc: `${bName}检测室`, status: "in_use",
-        calDate: iDate, calCycle: im[4],
-        calNext: calExp
-          ? `2026-0${String(Math.min(6, 2 + bi % 5)).padStart(2, "0")}-${pad2(10 + bi % 20)}`
-          : `2027-${iDate.substring(5, 10)}`,
-      });
-
-      // === 基础办公设备 ===
-      const oDate = rndDate(Math.min(6, 3 + bi % 4));
-      assetCounter.off++;
-      const oNo = `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`;
-      newAssets.push({
-        assetNo: oNo, name: "联想ThinkPad T14", category: "OFFICE",
-        subCat: "笔记本", model: "T14 Gen5", sn: `TP-BR${pad2(seq)}`, mfr: "联想", date: oDate,
-        price: 11500, dept: branchId, custodian: cus, loc: `${bName}办公区`, status: "in_use",
-        os: "Windows 11 Pro", cpu: "i7-1365U", ram: "32GB", disk: "1TB SSD",
-      });
-
-      // === 基础工具 ===
-      assetCounter.tool++;
-      const tNo = `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`;
-      newAssets.push({
-        assetNo: tNo, name: "数字激光测距仪", category: "TOOL",
-        subCat: "测量工具", model: "DISTO X6", sn: `LX6-BR${pad2(seq)}`, mfr: "Leica",
-        date: rndDate(Math.min(6, 4 + bi % 3)), price: 4800, dept: branchId, custodian: cus,
-        loc: `${bName}工具柜`, status: "in_use",
-      });
-    }
-
-    // ===== 痛点注入：针对性集团管控问题资产 =====
-    // 痛点1：闲置进口设备 (上海分支 bi=0)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "三维激光扫描仪（闲置）", category: "INSTRUMENT",
-      subCat: "测量仪器", model: "P40", sn: "P40-SH-IMPORT", mfr: "Leica", date: "2025-09-01", price: 520000,
-      dept: branchRows[0].id, custodian: null, loc: "上海分支仓库（从未使用）", status: "idle",
-      calDate: "2025-09-01", calCycle: 12, calNext: "2026-09-01",
-    });
-    // 痛点2：重复采购 (南京 bi=1 — 和上海买同型号)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "三维激光扫描仪（重复采购）", category: "INSTRUMENT",
-      subCat: "测量仪器", model: "P40", sn: "P40-NJ-DUP", mfr: "Leica", date: "2026-02-15", price: 530000,
-      dept: branchRows[1].id, custodian: getBranchAI(branchRows[1].id), loc: "南京分支检测室", status: "in_use",
-      calDate: "2026-02-15", calCycle: 12, calNext: "2027-02-15",
-    });
-    // 痛点3：跨属地调拨未记账 (杭州 bi=2 — 实物在苏州 bi=4)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "地质雷达", category: "INSTRUMENT",
-      subCat: "地质雷达", model: "SIR-4000", sn: "SIR4000-HZ-SZ", mfr: "GSSI", date: "2026-01-20", price: 280000,
-      dept: branchRows[2].id, custodian: getBranchAI(branchRows[4].id), loc: "苏州分支（从杭州私下调拨）", status: "in_use",
-      calDate: "2026-01-20", calCycle: 12, calNext: "2027-01-20",
-    });
-    // 痛点4：自行采购不报备 (合肥 bi=3)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "X荧光光谱仪（自行采购）", category: "INSTRUMENT",
-      subCat: "化学分析", model: "XRF-200", sn: "XRF200-HF-SELF", mfr: "Olympus", date: "2026-03-10", price: 42000,
-      dept: branchRows[3].id, custodian: getBranchAI(branchRows[3].id), loc: "合肥分支检测室", status: "in_use",
-      calDate: "2026-03-10", calCycle: 12, calNext: "2027-03-10",
-    });
-    // 痛点5：借出未归还 (宁波 bi=5)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "静力触探仪", category: "INSTRUMENT",
-      subCat: "土工检测", model: "CPT-200", sn: "CPT200-NB-LENT", mfr: "荷兰Geomil", date: "2025-06-01", price: 165000,
-      dept: branchRows[5].id, custodian: null, loc: "借给宁波港务局超期未还（已超期45天）", status: "idle",
-      calDate: "2025-06-01", calCycle: 12, calNext: "2026-06-01",
-    });
-    // 痛点6：报废未下账 (广州 bi=6)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "老旧万能试验机（已报废）", category: "INSTRUMENT",
-      subCat: "力学检测", model: "WE-600B", sn: "WE600-GZ-SCRAP", mfr: "济南试金", date: "2017-03-01", price: 38000,
-      dept: branchRows[6].id, custodian: null, loc: "广州分支废弃设备区（已物理拆除）", status: "in_stock",
-      calDate: "2022-06-01", calCycle: 12, calNext: "2023-06-01",
-    });
-    // 痛点7：离职员工资产未回收 (深圳 bi=7)
-    assetCounter.off++;
-    newAssets.push({
-      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "HP EliteBook 840（员工离职未归还）", category: "OFFICE",
-      subCat: "笔记本", model: "EliteBook 840 G10", sn: "HP840-SZ-LOST", mfr: "惠普", date: "2025-11-01", price: 13999,
-      dept: branchRows[7].id, custodian: getBranchManager(branchRows[7].id), loc: "原持有员工已离职·资产下落不明", status: "in_use",
-      os: "Windows 11 Pro", cpu: "i7-1355U", ram: "16GB", disk: "512GB SSD",
-    });
-    // 痛点8：维修费用异常 (南宁 bi=8 — 皮卡一年修3次)
-    assetCounter.veh++;
-    newAssets.push({
-      assetNo: `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`, name: "日产纳瓦拉（维修异常）", category: "VEHICLE",
-      subCat: "皮卡", model: "纳瓦拉 2.5L", sn: "VIN-NN-FIX", mfr: "郑州日产", date: "2025-08-15", price: 169800,
-      dept: branchRows[8].id, custodian: getBranchAI(branchRows[8].id), loc: "南宁分支驻地", status: "in_use",
-      plate: "京I·NN09", vin: "LJNTGU5G8MN000009", bp: "汽油", seats: 5,
-      nextInsp: "2026-08-15", insuranceExp: "2026-08-15", mileage: 38500,
-    });
-    // 痛点9：保管人信息不准 (福州 bi=9 — 管家登记为广州分支员工)
-    assetCounter.tool++;
-    newAssets.push({
-      assetNo: `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`, name: "数显卡尺（保管人信息错误）", category: "TOOL",
-      subCat: "测量工具", model: "500-196-30", sn: "MTG196-FZ-ERR", mfr: "Mitutoyo", date: "2025-10-01", price: 2600,
-      dept: branchRows[9].id, custodian: getBranchManager(branchRows[6].id), loc: "福州分支测量室（实际使用人并非登记保管人）", status: "in_use",
-    });
-    // 痛点10：公车私用嫌疑 (海口 bi=10)
-    assetCounter.veh++;
-    newAssets.push({
-      assetNo: `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`, name: "丰田RAV4（公车私用嫌疑）", category: "VEHICLE",
-      subCat: "SUV", model: "RAV4 2.0L", sn: "VIN-HK-ABUSE", mfr: "一汽丰田", date: "2025-11-01", price: 218000,
-      dept: branchRows[10].id, custodian: getBranchAI(branchRows[10].id), loc: "海口分支驻地", status: "in_use",
-      plate: "京J·HK11", vin: "LFMK440F8MN000011", bp: "汽油", seats: 5,
-      nextInsp: "2026-11-01", insuranceExp: "2026-11-01", mileage: 52000,
-    });
-    // 痛点11：闲置资源池不互通 (成都 bi=11 — 设备闲置但其他分支不知)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "隧道地质超前预报仪（闲置）", category: "INSTRUMENT",
-      subCat: "隧道检测", model: "TSP-303", sn: "TSP303-CD-IDLE", mfr: "Amberg", date: "2025-05-01", price: 320000,
-      dept: branchRows[11].id, custodian: null, loc: "成都分支仓库（项目已结束·闲置中）", status: "idle",
-      calDate: "2025-05-01", calCycle: 12, calNext: "2026-05-01",
-    });
-    // 痛点12：新购未拆封虚增资产 (重庆 bi=12)
-    assetCounter.off++;
-    newAssets.push({
-      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "华为UPS5000-E（未拆封）", category: "OFFICE",
-      subCat: "电源设备", model: "UPS5000-E-60kVA", sn: "HW-UPS-CQ-BOX", mfr: "华为", date: "2026-04-01", price: 85000,
-      dept: branchRows[12].id, custodian: null, loc: "重庆分支库房（原箱未拆封）", status: "in_stock",
-    });
-    // 痛点13：借出外部未归还 (西安 bi=14)
-    assetCounter.instr++;
-    newAssets.push({
-      assetNo: `INS-2026-${String(assetCounter.instr).padStart(3, "0")}`, name: "全站仪（借出中铁X局未归还）", category: "INSTRUMENT",
-      subCat: "测量仪器", model: "TS16", sn: "TS16-XA-LENT", mfr: "Leica", date: "2025-08-01", price: 198000,
-      dept: branchRows[14].id, custodian: null, loc: "借给中铁十四局3标（超期60天未还）", status: "idle",
-      calDate: "2025-08-01", calCycle: 12, calNext: "2026-08-01",
-    });
-    // 痛点14：废旧设备未处置 (兰州 bi=15)
-    assetCounter.tool++;
-    newAssets.push({
-      assetNo: `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`, name: "老旧混凝土取芯机（待报废）", category: "TOOL",
-      subCat: "取样工具", model: "HZ-15", sn: "HZ15-LZ-SCRAP", mfr: "浙江土工仪器", date: "2018-06-01", price: 12000,
-      dept: branchRows[15].id, custodian: null, loc: "兰州分支废弃库房（已锈蚀无法使用）", status: "idle",
-    });
-    // 痛点15：虚增资产·项目已结束 (北京 bi=16)
-    assetCounter.off++;
-    newAssets.push({
-      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "Dell服务器R740（项目已结但未销账）", category: "OFFICE",
-      subCat: "服务器", model: "PowerEdge R740", sn: "DELL740-BJ-GHOST", mfr: "Dell", date: "2024-03-01", price: 68000,
-      dept: branchRows[16].id, custodian: null, loc: "北京分支机房（对应项目已于2025年6月结项）", status: "idle",
-    });
-    // 痛点16：双属地管理·归属不清 (天津 bi=17)
-    assetCounter.tool++;
-    newAssets.push({
-      assetNo: `TOL-2026-${String(assetCounter.tool).padStart(3, "0")}`, name: "超声波探伤仪（属地争议）", category: "TOOL",
-      subCat: "探伤工具", model: "CTS-9009", sn: "CTS-TJ-DISPUTE", mfr: "汕头超声", date: "2025-12-01", price: 35000,
-      dept: branchRows[17].id, custodian: getBranchAI(branchRows[16].id), loc: "北京-天津共用（两个分支均声称归属权）", status: "in_use",
-    });
-    // 痛点17：私车公养嫌疑 (石家庄 bi=18)
-    assetCounter.veh++;
-    newAssets.push({
-      assetNo: `VEH-2026-${String(assetCounter.veh).padStart(3, "0")}`, name: "长城哈弗H9（油费异常）", category: "VEHICLE",
-      subCat: "SUV", model: "哈弗H9 2.0T", sn: "VIN-SJZ-FUEL", mfr: "长城汽车", date: "2025-09-01", price: 258000,
-      dept: branchRows[18].id, custodian: getBranchAI(branchRows[18].id), loc: "石家庄分支驻地", status: "in_use",
-      plate: "京K·SJ19", vin: "LGWFF7A59MH000019", bp: "柴油", seats: 7,
-      nextInsp: "2026-09-01", insuranceExp: "2026-09-01", mileage: 46000,
-    });
-    // 痛点18：账实地址不符 (郑州 bi=19)
-    assetCounter.off++;
-    newAssets.push({
-      assetNo: `OFF-2026-${String(assetCounter.off).padStart(3, "0")}`, name: "联想ThinkStation P360", category: "OFFICE",
-      subCat: "工作站", model: "P360 Ultra", sn: "LEN360-ZZ-GONE", mfr: "联想", date: "2026-01-10", price: 22000,
-      dept: branchRows[19].id, custodian: getBranchAI(branchRows[19].id), loc: "注册地址郑州·实际在洛阳工地使用", status: "in_use",
-      os: "Windows 11 Pro", cpu: "i7-12700", ram: "64GB", disk: "1TB SSD",
-    });
-
-    // 插入所有分支新资产（沿用plate前缀规避跨租户车牌冲突）
-    const branchAssetIds: number[] = [];
-    for (const a of newAssets) {
-      const r = dbRun(
-        `INSERT INTO assets (asset_no, name, category, sub_category, model, sn, manufacturer,
-          purchase_date, purchase_price, expected_life, status, owner_type,
-          department_id, location_detail, custodian_id, remark, tenant_id, created_by, warranty_expire_date)
-         VALUES (?,?,?,?,?,?,?,?,?,?,?,'owned',?,?,?,?,?,?,?)`,
-        [anoPrefix + a.assetNo, a.name, a.category, a.subCat || null, a.model || null,
-         a.sn || null, a.mfr || null, a.date || null, a.price, 60, a.status,
-         a.dept, a.loc || null, a.custodian, null, tenantId, 1, addMonths(a.date, 60)]
-      );
-      branchAssetIds.push(r.lastInsertRowid as number);
-    }
-
-    // 车辆扩展 + 使用日志（仅基线20辆 + 痛点头3辆）
-    const allBranchVehAssets = newAssets.filter(a => a.category === "VEHICLE");
-    for (let vi = 0; vi < allBranchVehAssets.length; vi++) {
-      const a = allBranchVehAssets[vi];
-      const aid = branchAssetIds[newAssets.indexOf(a)];
-      dbRun(`INSERT INTO asset_vehicles (asset_id, plate_no, vin, fuel_type, seat_count, next_inspection, insurance_expire, current_mileage) VALUES (?,?,?,?,?,?,?,?)`,
-        [aid, platePrefix + (a.plate || `京H·XX${vi}`), a.vin || `VIN-BR${vi}`, a.bp || "汽油", a.seats || 5, a.nextInsp || null, a.insuranceExp || null, a.mileage || 5000]);
-      // 每车3-5条使用日志
-      const logMiles = [a.mileage! * 0.2, a.mileage! * 0.5, a.mileage! * 0.75].map(m => Math.round(m));
-      const logTypes = ["refuel", "refuel", "maintenance", "refuel", "insurance"] as const;
-      const logCosts = [380 + vi * 30, 420 + vi * 25, 800 + vi * 100, 350 + vi * 20, 2500 + vi * 200];
-      const logDates = [`2026-0${Math.min(6,2+vi%5)}-${String(5+(vi*3)%25).padStart(2,'0')}`,
-                        `2026-0${Math.min(6,3+vi%4)}-${String(10+(vi*5)%20).padStart(2,'0')}`,
-                        `2026-0${Math.min(6,4+vi%3)}-${String(15+(vi*2)%15).padStart(2,'0')}`,
-                        `2026-0${Math.min(6,5+vi%2)}-${String(8+(vi*4)%22).padStart(2,'0')}`,
-                        `2026-06-${String(20+vi).padStart(2,'0')}`];
-      const logDescs = [`${['华东','华南','西部','华北'][vi%4]}区域巡检加油`, "日常出车加油", "定期保养", "送检样品加油", "续保"];
-      const logCount = vi < 20 ? 4 : 5;
-      for (let li = 0; li < logCount; li++) {
-        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
-          [aid, logTypes[li], logCosts[li], logMiles[Math.min(li, 2)], logDates[li], logDescs[li], tenantId]);
-      }
-    }
-
-    // 痛点车辆特殊日志：南宁维修异常（newAssets倒数第5辆）
-    const nnVehIdx = allBranchVehAssets.findIndex(a => a.assetNo.includes("VEH") && a.name.includes("纳瓦拉（维修异常）"));
-    if (nnVehIdx >= 0) {
-      const nnAid = branchAssetIds[newAssets.indexOf(allBranchVehAssets[nnVehIdx])];
-      const extraLogs = [
-        { type: "maintenance", cost: 8500, mileage: 12000, date: "2026-02-15", desc: "⚠️ 发动机大修（购置仅6个月）" },
-        { type: "maintenance", cost: 6800, mileage: 22000, date: "2026-05-10", desc: "⚠️ 变速箱故障维修（第二次大修）" },
-        { type: "other", cost: 3500, mileage: 32000, date: "2026-06-20", desc: "⚠️ 更换四条轮胎（异常磨损）" },
-      ];
-      for (const el of extraLogs) {
-        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
-          [nnAid, el.type, el.cost, el.mileage, el.date, el.desc, tenantId]);
-      }
-    }
-
-    // 痛点车辆特殊日志：海口公车私用（倒数第3辆）
-    const hkVehIdx = allBranchVehAssets.findIndex(a => a.assetNo.includes("VEH") && a.name.includes("RAV4（公车私用嫌疑）"));
-    if (hkVehIdx >= 0) {
-      const hkAid = branchAssetIds[newAssets.indexOf(allBranchVehAssets[hkVehIdx])];
-      const hkLogs = [
-        { type: "refuel", cost: 550, mileage: 25000, date: "2026-05-01", desc: "⚠️ 五一假期出车加油（非常规工作日）" },
-        { type: "traffic_fine", cost: 300, mileage: 35000, date: "2026-05-20", desc: "⚠️ 景区违停（三亚某景区·非公务）" },
-        { type: "refuel", cost: 620, mileage: 42000, date: "2026-06-15", desc: "⚠️ 周末出车长途加油（无出差审批记录）" },
-      ];
-      for (const hl of hkLogs) {
-        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
-          [hkAid, hl.type, hl.cost, hl.mileage, hl.date, hl.desc, tenantId]);
-      }
-    }
-
-    // 痛点车辆特殊日志：石家庄私车公养（最后一辆）
-    const sjzVehIdx = allBranchVehAssets.findIndex(a => a.assetNo.includes("VEH") && a.name.includes("哈弗H9（油费异常）"));
-    if (sjzVehIdx >= 0) {
-      const sjzAid = branchAssetIds[newAssets.indexOf(allBranchVehAssets[sjzVehIdx])];
-      const sjzLogs = [
-        { type: "refuel", cost: 850, mileage: 18000, date: "2026-03-08", desc: "⚠️ 单次加油850元超出油箱容量（容积80L×7.5=600元上限）" },
-        { type: "refuel", cost: 780, mileage: 26000, date: "2026-04-25", desc: "⚠️ 周末加油780元·无对应出差审批" },
-        { type: "refuel", cost: 920, mileage: 38000, date: "2026-06-10", desc: "⚠️ 加油量异常（按油价折算超出油箱容积40%）" },
-      ];
-      for (const sl of sjzLogs) {
-        dbRun(`INSERT INTO asset_vehicle_logs (vehicle_asset_id, log_type, cost, mileage, log_date, description, created_by, tenant_id) VALUES (?,?,?,?,?,?,1,?)`,
-          [sjzAid, sl.type, sl.cost, sl.mileage, sl.date, sl.desc, tenantId]);
-      }
-    }
-
-    // 仪器扩展（所有仪器资产，含痛点仪器）
-    const allBranchInstAssets = newAssets.filter(a => a.category === "INSTRUMENT");
-    for (const ia of allBranchInstAssets) {
-      if (ia.calDate) {
-        const aid = branchAssetIds[newAssets.indexOf(ia)];
-        dbRun("INSERT INTO asset_instruments (asset_id, last_calibration, next_calibration, calibration_cycle) VALUES (?,?,?,?)",
-          [aid, ia.calDate, ia.calNext || null, ia.calCycle || 12]);
-      }
-    }
-
-    // 办公设备扩展
-    const allBranchOffAssets = newAssets.filter(a => a.category === "OFFICE" && a.os);
-    for (const oa of allBranchOffAssets) {
-      const aid = branchAssetIds[newAssets.indexOf(oa)];
-      dbRun("INSERT INTO asset_office (asset_id, os, cpu, ram, storage) VALUES (?,?,?,?,?)",
-        [aid, oa.os || null, oa.cpu || null, oa.ram || null, oa.disk || null]);
-    }
-
-    // 流转记录（痛点资产）
-    const tr = (assetIdx: number, type: string, remark: string, toUserId: number|null = null, date: string = "2026-06-01 10:00:00") => {
-      const aid = branchAssetIds[assetIdx];
-      if (toUserId) {
-        dbRun(`INSERT INTO asset_transactions (asset_id, type, to_user_id, remark, tenant_id, created_by, created_at) VALUES (?,?,?,?,?,1,?)`,
-          [aid, type, toUserId, remark, tenantId, date]);
-      } else {
-        dbRun(`INSERT INTO asset_transactions (asset_id, type, remark, tenant_id, created_by, created_at) VALUES (?,?,?,?,1,?)`,
-          [aid, type, remark, tenantId, date]);
-      }
-    };
-    // 痛点索引在newAssets中的位置: 80基线 + 0..17痛点 = 共98件
-    const pIdx = 80; // 痛点起始索引
-    tr(pIdx+0, "transfer", "⚠️ 上海分支2025年进口5.2万元扫描仪，购入后从未使用——闲置已超9个月，年维保费约8000元沉没成本。建议调拨至有需求标段");
-    tr(pIdx+1, "checkout", "⚠️ 南京分支重复采购P40扫描仪（上海已有同型号），浪费53万元。两分支间无资产共享机制", getBranchAI(branchRows[1].id));
-    tr(pIdx+2, "transfer", "⚠️ 账面归属杭州分支，但实物在苏州分支使用（2026-03私下调拨未走正式流程）。跨属地资产流动无系统记录", getBranchAI(branchRows[4].id));
-    tr(pIdx+3, "checkout", "⚠️ 合肥分支自行采购荧光光谱仪，未走总部采购审批流程，3个月后补登记。外派点采购权限边界模糊", getBranchAI(branchRows[3].id));
-    tr(pIdx+4, "lend_out", "⚠️ 宁波分支借给港务局，原定借期1个月，已超期45天未归还。借出流程缺失正式审批+归还提醒机制");
-    tr(pIdx+5, "transfer", "⚠️ 2017年购入万能试验机，2023年物理报废拆除但系统始终未执行scrap操作——报废审批流程阻断超过3年");
-    tr(pIdx+6, "checkout", "⚠️ 持有该笔记本的员工2026年4月离职，资产未回收入库。离职交接流程未覆盖资产归还环节", getBranchManager(branchRows[7].id));
-    tr(pIdx+7, "checkout", "⚠️ 购置不到1年大修3次（发动机+变速箱+轮胎），累计维修费1.88万元超过车辆残值50%。异常维修无溯源分析", getBranchAI(branchRows[8].id));
-    tr(pIdx+8, "checkout", "⚠️ 保管人登记为广州分支经理，实际使用人为福州分支测量员——保管人信息严重失实（跨区域错误）", getBranchManager(branchRows[6].id));
-    tr(pIdx+9, "checkout", "⚠️ 行车日志显示多次非工作时段出车（含五一假期三亚景区、周末长途），无对应出差审批——存在公车私用重大嫌疑", getBranchAI(branchRows[10].id));
-    tr(pIdx+10, "transfer", "⚠️ 32万元隧道预报仪项目结束后闲置7个月，总部闲置资产池不可见。各分支间无统一的闲置资产共享调度平台");
-    tr(pIdx+11, "transfer", "⚠️ 8.5万元UPS设备采购后原箱未拆封存放库房——'买错了用不上'。采购决策缺乏技术审核环节，存在虚增资产嫌疑");
-    tr(pIdx+12, "lend_out", "⚠️ 西安分支2025-08借给中铁十四局，原借期3个月已超期60天。对方口头表示'工程延后还需续借'，无正式续借审批");
-    tr(pIdx+13, "transfer", "⚠️ 2018年购入取芯机已完全锈蚀无法使用，但系统一直未走报废处置流程。废旧资产长期挂账影响资产利用率指标");
-    tr(pIdx+14, "transfer", "⚠️ 2024年购入服务器用于北京某市政项目，项目2025年6月已结项验收，但资产至今未销账也未调拨其他分支——虚增资产6.8万元");
-    tr(pIdx+15, "checkout", "⚠️ 设备被北京和天津两个分支同时主张归属权。因购买时使用'京-津联合作业组'名义，无明确部门归属标识", getBranchAI(branchRows[16].id));
-    tr(pIdx+16, "checkout", "⚠️ 加油记录3次异常：单次超油箱容量、周末无审批出车、折算超出油箱40%。疑似私车公养——油费转嫁到公务车辆", getBranchAI(branchRows[18].id));
-    tr(pIdx+17, "checkout", "⚠️ 账面注册地址为郑州分支，但设备长期在洛阳工地实际使用——台账地址与实际存放地严重不符，影响盘点准确率", getBranchAI(branchRows[19].id));
-
-    console.log(`[种子] tenant#${tenantId} 分支级资产完成: +${newAssets.length}件（含${18}件痛点场景）`);
-  }
-  console.log(`[种子] tenant#${tenantId} 资产种子完成: ${allAssets.length}件常规 + 分支级扩展`);
-
-  // ═══════════════════════════════════════════════════════════
-  // 第五批：集团管控规模扩展 → 每租户 5000 件
-  // 路桥通级别：总部十七部门 + 4大区 + 20分支 + 40项目 + 60标段
-  // ═══════════════════════════════════════════════════════════
-  const db = getDb();
-  const allDepts = dbAll("SELECT id, name, parent_id FROM departments WHERE tenant_id=?", [tenantId]) as any[];
-
-  // 部门分类（按名称模式，兼容两租户）
-  const hqDepts    = allDepts.filter(d => !d.name.includes("区域") && !d.name.includes("项目") && !d.name.includes("试验室") && !d.name.includes("标段") && (d.parent_id === null || d.parent_id === 0) && !d.name.includes("分支"));
-  const regionDepts = allDepts.filter(d => d.name.includes("区域"));                // 4大区
-  const branchDepts = allDepts.filter(d => d.name.includes("分支"));                // 20分支
-  const projectDepts= allDepts.filter(d => d.name.includes("项目") && !d.name.includes("试验室")); // 40项目
-  const labDepts    = allDepts.filter(d => d.name.includes("试验室") || d.name.includes("标段"));  // 60标段
-  // 漏网之鱼归入HQ
-  const usedIds = new Set([...hqDepts, ...regionDepts, ...branchDepts, ...projectDepts, ...labDepts].map(d => d.id));
-  const restDepts = allDepts.filter(d => !usedIds.has(d.id));
-  hqDepts.push(...restDepts);
-
-  // 配额：每部门追加额外资产数（加上现有158件后达5000）
-  const quotaHQ = 35;      // hqDepts件/部门
-  const quotaRegion = 45;   // 4区域件/部门
-  const quotaBranch = 70;   // 20分支件/部门（已含80基线，追加70≈150件/分支）
-  const quotaProject = 38;  // 40项目件/部门
-  const quotaLab = 14;      // 60标段件/部门
-  const quotaIdle = 250;    // 闲置池（无部门归属）
-
-  // 资产模板库
-  const tmpl = {
-    INSTRUMENT: [
-      { name: "全站仪", model: "TS16", mfr: "徕卡测量", subCat: "测绘仪器", price: 185000 },
-      { name: "电子水准仪", model: "DINI03", mfr: "Trimble", subCat: "测绘仪器", price: 42000 },
-      { name: "激光断面仪", model: "LPS-300", mfr: "中交一公院", subCat: "检测仪器", price: 260000 },
-      { name: "数显回弹仪", model: "HT-225D", mfr: "北京智博联", subCat: "检测仪器", price: 13000 },
-      { name: "钢筋扫描仪", model: "PS300", mfr: "Hilti", subCat: "检测仪器", price: 38000 },
-      { name: "裂缝测宽仪", model: "PTS-C10", mfr: "北京光电", subCat: "检测仪器", price: 15000 },
-      { name: "超声波探伤仪", model: "USN60", mfr: "GE检测", subCat: "检测仪器", price: 96000 },
-      { name: "地质雷达", model: "SIR-4000", mfr: "GSSI", subCat: "物探仪器", price: 420000 },
-      { name: "多功能气候试验箱", model: "CTC256", mfr: "Memmert", subCat: "试验设备", price: 185000 },
-      { name: "万能材料试验机", model: "WE-600B", mfr: "济南试金", subCat: "试验设备", price: 58000 },
-      { name: "标准养护箱", model: "HBY-40B", mfr: "浙江土工", subCat: "试验设备", price: 22000 },
-      { name: "混凝土电阻率仪", model: "Resipod", mfr: "Proceq", subCat: "检测仪器", price: 52000 },
-      { name: "激光平整度仪", model: "RSP-MK4", mfr: "Dynatest", subCat: "检测仪器", price: 350000 },
-      { name: "锚杆拉拔仪", model: "ML-300B", mfr: "北京海创", subCat: "检测仪器", price: 24000 },
-      { name: "基桩动测仪", model: "PIT-V", mfr: "PDI", subCat: "检测仪器", price: 128000 },
-    ],
-    VEHICLE: [
-      { name: "丰田普拉多", model: "3.5L V6", mfr: "一汽丰田", subCat: "SUV", price: 498000, plate: (i:number)=>`京A·PR${String(i).padStart(3,'0')}`, seats:7, bp:"汽油" },
-      { name: "三菱帕杰罗", model: "3.0L V6", mfr: "广汽三菱", subCat: "SUV", price: 368000, plate: (i:number)=>`京B·PJ${String(i).padStart(3,'0')}`, seats:7, bp:"汽油" },
-      { name: "长城炮皮卡", model: "2.0T 四驱", mfr: "长城汽车", subCat: "皮卡", price: 168000, plate: (i:number)=>`京C·CC${String(i).padStart(3,'0')}`, seats:5, bp:"柴油" },
-      { name: "江铃域虎", model: "2.4T 四驱", mfr: "江铃汽车", subCat: "皮卡", price: 135000, plate: (i:number)=>`京D·YH${String(i).padStart(3,'0')}`, seats:5, bp:"柴油" },
-      { name: "依维柯工程车", model: "Daily 3.0T", mfr: "南京依维柯", subCat: "专项作业车", price: 285000, plate: (i:number)=>`京E·GC${String(i).padStart(3,'0')}`, seats:17, bp:"柴油" },
-      { name: "金杯海狮", model: "2.0L", mfr: "华晨金杯", subCat: "面包车", price: 85000, plate: (i:number)=>`京F·HS${String(i).padStart(3,'0')}`, seats:11, bp:"汽油" },
-    ],
-    OFFICE: [
-      { name: "ThinkPad笔记本", model: "T14 Gen5", mfr: "联想", subCat: "笔记本", price: 9800 },
-      { name: "Dell台式机", model: "OptiPlex 7080", mfr: "戴尔", subCat: "台式机", price: 6500 },
-      { name: "HP激光打印机", model: "M404dn", mfr: "惠普", subCat: "打印机", price: 3200 },
-      { name: "Canon工程扫描仪", model: "DR-G2110", mfr: "佳能", subCat: "扫描仪", price: 28000 },
-      { name: "格力空调", model: "KFR-72LW", mfr: "格力", subCat: "空调", price: 6500 },
-      { name: "华为交换机", model: "S5735-L48P4X", mfr: "华为", subCat: "网络设备", price: 15000 },
-      { name: "山特UPS电源", model: "C6KS 6kVA", mfr: "山特", subCat: "电源设备", price: 12000 },
-      { name: "会议平板", model: "MAXHUB V6", mfr: "视源股份", subCat: "会议设备", price: 35000 },
-      { name: "SONY投影仪", model: "VPL-FHZ85", mfr: "索尼", subCat: "投影仪", price: 28000 },
-      { name: "海康威视监控", model: "DS-2CD2T47G2", mfr: "海康威视", subCat: "安防设备", price: 2500 },
-    ],
-    TOOL: [
-      { name: "混凝土试模", model: "150×150×150mm", mfr: "浙江土工", subCat: "试验模具", price: 120 },
-      { name: "精密电子天平", model: "ME204E", mfr: "梅特勒-托利多", subCat: "称量工具", price: 18000 },
-      { name: "数显卡尺", model: "500-196-30", mfr: "Mitutoyo", subCat: "测量工具", price: 2600 },
-      { name: "混凝土钻孔机", model: "HDE-1622", mfr: "Hilti", subCat: "取样工具", price: 15000 },
-      { name: "钢筋调直切断机", model: "GT4-14", mfr: "山东路通", subCat: "加工工具", price: 12000 },
-      { name: "电动扳手", model: "GDS 18V-1050", mfr: "Bosch", subCat: "安装工具", price: 3200 },
-      { name: "激光测距仪", model: "DISTO D5", mfr: "徕卡", subCat: "测量工具", price: 4800 },
-      { name: "土工密度仪", model: "SD-320", mfr: "北京航天", subCat: "检测工具", price: 8500 },
-    ],
-  };
-
-  const catKeys = ["INSTRUMENT", "VEHICLE", "OFFICE", "TOOL"] as const;
-  // 类目分布权重：按部门类型差异化
-  // 铁律：总部/区域=管理职能，绝不允许任何仪器/工具（全站仪/卡尺/天平/扫描仪不出现在管理层办公室）
-  //            INSTRUMENT VEHICLE OFFICE TOOL
-  const deptCatWeights: Record<string, number[]> = {
-    hq:      [0.00, 0.24, 0.76, 0.00],  // 总部: 只有OFFICE+SUV，0%仪器+工具
-    region:  [0.00, 0.22, 0.78, 0.00],  // 区域: 只有OFFICE+车辆，0%仪器+工具（管理非生产一线）
-    branch:  [0.30, 0.15, 0.30, 0.25],  // 分支/监理: 现场检测+办公
-    project: [0.42, 0.15, 0.10, 0.33],  // 项目: 工程仪器+工具为主，少量办公
-    lab:     [0.48, 0.05, 0.07, 0.40],  // 标段/试验室: 试验+检测为主
-    idle:    [0.30, 0.20, 0.25, 0.25],  // 闲置池: 混杂
-  };
-  const statusPool = [
-    { s:"in_use", w:0.60 }, { s:"in_stock", w:0.18 }, { s:"idle", w:0.10 },
-    { s:"repairing", w:0.05 }, { s:"transferring", w:0.03 }, { s:"scrapped", w:0.03 }, { s:"lost", w:0.01 },
-  ];
-
-  function pickCat(r: number, deptType: string): typeof catKeys[number] {
-    const w = deptCatWeights[deptType] || deptCatWeights.idle;
-    let acc = 0;
-    for (let i = 0; i < catKeys.length; i++) { acc += w[i]; if (r < acc) return catKeys[i]; }
-    return "OFFICE";
-  }
-  function pickStatus(r: number): string {
-    let acc = 0;
-    for (const st of statusPool) { acc += st.w; if (r < acc) return st.s; }
-    return "in_use";
-  }
-
-  // 按部门分配 & 批量生成（带类型标记，后续按类型分配合适类目）
-  const deptQuotas: { deptId: number; deptName: string; count: number; type: string }[] = [];
-  for (const d of hqDepts)    deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaHQ, type: "hq" });
-  for (const d of regionDepts) deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaRegion, type: "region" });
-  for (const d of branchDepts) deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaBranch, type: "branch" });
-  for (const d of projectDepts)deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaProject, type: "project" });
-  for (const d of labDepts)    deptQuotas.push({ deptId: d.id, deptName: d.name, count: quotaLab, type: "lab" });
-  deptQuotas.push({ deptId: 0, deptName: "闲置池(无归属)", count: quotaIdle, type: "idle" }); // deptId=0 → NULL
-
-  let globalSeq = allAssets.length; // 继续编号
-  const batchSize = 500;
-  let batchCount = 0;
-  let totalAdded = 0;
-  const startTime = Date.now();
-
-  db.run("BEGIN TRANSACTION");
-
-  for (const dq of deptQuotas) {
-    for (let i = 0; i < dq.count; i++) {
-      globalSeq++;
-      const cat = pickCat(Math.random(), dq.type);
-      let tArr = tmpl[cat];
-      // 常识约束：车辆类型按部门筛选
-      //   HQ→仅SUV(普拉多/帕杰罗，行政用车), 项目→工程车(皮卡/作业车/面包车)
-      if (cat === "VEHICLE") {
-        const vehFilter: Record<string, string[]> = {
-          hq: ["SUV"],                   // 总部只配SUV，不配面包车/皮卡
-          region: ["SUV","皮卡","面包车"],
-          branch: ["SUV","皮卡","面包车"],
-          project: ["皮卡","专项作业车","面包车"],
-          lab: ["皮卡"],
-          idle: ["SUV","皮卡","专项作业车","面包车"],
-        };
-        const allowed = vehFilter[dq.type] || vehFilter.idle;
-        tArr = tArr.filter((v: any) => allowed.includes(v.subCat));
-      }
-      // 常识约束：仪器类型按部门筛选（HQ/region权重已为0，此过滤为安全兜底）
-      if (cat === "INSTRUMENT") {
-        const instFilter: Record<string, string[] | null> = {
-          hq: null,     // HQ/region不应有仪器（权重已清零）
-          region: null,
-          branch: null,
-          project: null,
-          lab: null,
-          idle: null,
-        };
-        const filterSubcats = instFilter[dq.type];
-        if (filterSubcats) {
-          tArr = tArr.filter((v: any) => filterSubcats.includes(v.subCat));
-        }
-        if (tArr.length === 0) tArr = tmpl[cat];
-      }
-      // 常识约束：工具类型按部门筛选（HQ/region权重已为0，此过滤为安全兜底）
-      if (cat === "TOOL") {
-        const toolFilter: Record<string, string[] | null> = {
-          hq: null,     // HQ/region不应有工具（权重已清零）
-          region: null,
-          branch: null,  // 分支=全品类工具
-          project: null, // 项目=全品类
-          lab: null,     // 标段=全品类
-          idle: null,    // 闲置池=全品类
-        };
-        const filterSubcats = toolFilter[dq.type];
-        if (filterSubcats) {
-          tArr = tArr.filter((v: any) => filterSubcats.includes(v.subCat));
-        }
-        if (tArr.length === 0) tArr = tmpl[cat];
-      }
-      // 常识约束：总部办公设备排除工程扫描仪（CXO办公室不需要图纸扫描仪）
-      if (cat === "OFFICE" && (dq.type === "hq" || dq.type === "region")) {
-        tArr = tArr.filter((v: any) => v.subCat !== "扫描仪");
-      }
-      const t = tArr[globalSeq % tArr.length];
-      const sRnd = Math.random();
-      const status = pickStatus(sRnd);
-
-      // 日期：2022-2026 之间随机
-      const y = 2022 + (globalSeq % 5);
-      const m = String((globalSeq % 12) + 1).padStart(2, "0");
-      const d = String(((globalSeq * 7) % 28) + 1).padStart(2, "0");
-      const purchaseDate = `${y}-${m}-${d}`;
-      const priceVariation = 0.7 + Math.random() * 0.6; // 70%-130% 基准价
-      const price = Math.round((t.price || 10000) * priceVariation);
-      const life = cat === "VEHICLE" ? 96 : cat === "INSTRUMENT" ? 72 : cat === "OFFICE" ? 48 : 60;
-      const warrantyExp = addMonths(purchaseDate, life);
-      const deptId = dq.deptId === 0 ? null : dq.deptId;
-      const sn = `${t.mfr?.substring(0,2) || "XX"}${Date.now().toString(36).substring(4,8)}${globalSeq}`;
-      const assetNo = `${anoPrefix}${cat.substring(0,3)}-${y}-${String(globalSeq).padStart(5,"0")}`;
-      // 保管人：从该部门随机抽取一名员工（人类优先，AI其次）
-      const cEmp = deptId ? (dbGet("SELECT id FROM employees WHERE department_id=? AND tenant_id=? AND employee_type='human' LIMIT 1", [deptId, tenantId]) as any)?.id || null : null;
-      const custodianId = status === "in_use" ? cEmp : null;
-      const remark = status === "scrapped" ? "待报废处置" : status === "idle" ? "闲置中" : status === "lost" ? "盘亏待追责" : null;
-
-      db.run(
-        `INSERT INTO assets (asset_no,name,category,sub_category,model,sn,manufacturer,
-          purchase_date,purchase_price,expected_life,status,owner_type,
-          department_id,location_detail,custodian_id,remark,tenant_id,created_by,warranty_expire_date)
-         VALUES (?,?,?,?,?,?,?,?,?,?,?,'owned',?,?,?,?,?,?,?)`,
-        [assetNo, t.name, cat, (t as any).subCat || null, t.model, sn, t.mfr,
-         purchaseDate, price, life, status,
-         deptId, dq.deptName || null, custodianId, remark, tenantId, 1, warrantyExp]
-      );
-      totalAdded++;
-
-      // 车辆扩展表（约15%概率）
-      if (cat === "VEHICLE" && Math.random() < 0.15) {
-        const vT = t as any;
-        const plate = `${platePrefix}${vT.plate ? vT.plate(globalSeq) : `京G·BK${globalSeq}`}`;
-        const vin = `VIN-MASS-${String(globalSeq).padStart(6,"0")}`;
-        const inspDate = new Date(); inspDate.setFullYear(inspDate.getFullYear() + (globalSeq % 3));
-        const insDate = new Date(); insDate.setFullYear(insDate.getFullYear() + (globalSeq % 2));
-        db.run(`INSERT OR IGNORE INTO asset_vehicles (asset_id,plate_no,vin,fuel_type,seat_count,next_inspection,insurance_expire,current_mileage) VALUES ((SELECT last_insert_rowid()),?,?,?,?,?,?,?)`,
-          [plate, vin, vT.bp || "汽油", vT.seats || 5, inspDate.toISOString().split("T")[0], insDate.toISOString().split("T")[0], Math.round(5000 + Math.random() * 80000)]);
-      }
-      // 仪器校准（约15%概率）
-      if (cat === "INSTRUMENT" && Math.random() < 0.15) {
-        const calDate = new Date(); calDate.setMonth(calDate.getMonth() - (globalSeq % 18));
-        const calNext = new Date(calDate); calNext.setMonth(calNext.getMonth() + 12);
-        db.run(`INSERT OR IGNORE INTO asset_instruments (asset_id,calibration_cycle,last_calibration,next_calibration,calibration_agency,precision_level) VALUES ((SELECT last_insert_rowid()),?,?,?,?,?)`,
-          [12, calDate.toISOString().split("T")[0], calNext.toISOString().split("T")[0], `${["中国计量院","省计量院","市计量所"][globalSeq%3]}`, `${["1级","2级","3级"][globalSeq%3]}`]);
-      }
-      // 办公设备扩展（约10%概率）
-      if (cat === "OFFICE" && Math.random() < 0.10) {
-        db.run(`INSERT OR IGNORE INTO asset_office (asset_id,device_type,brand,cpu,ram,storage,os) VALUES ((SELECT last_insert_rowid()),?,?,?,?,?,?)`,
-          [(t as any).subCat, t.mfr, `${["i5","i7","i9","M1","M2"][globalSeq%5]}-${["12代","13代","14代"][globalSeq%3]}`, `${[8,16,32,64][globalSeq%4]}GB`, `${[256,512,1024][globalSeq%3]}GB SSD`, "Windows 11"]);
-      }
-
-      // 分批 commit 避免事务过大
-      if (totalAdded % batchSize === 0) {
-        db.run("COMMIT");
-        db.run("BEGIN TRANSACTION");
-        batchCount++;
-        if (batchCount % 5 === 0) console.log(`[种子] tenant#${tenantId} 集团扩展进度: ${totalAdded}件...`);
-      }
-    }
-  }
-
-  db.run("COMMIT");
-  saveDb();
-  const elapsed = Date.now() - startTime;
-  console.log(`[种子] tenant#${tenantId} 集团规模扩展完成: +${totalAdded}件, 耗时${elapsed}ms`);
+  const specifier = "./dev/demo-seed.ts";
+  const mod = await import(specifier) as { seedDatabase: () => void };
+  mod.seedDatabase();
 }
diff --git a/modules/openxyos/backend/server.ts b/modules/openxyos/backend/server.ts
index 39052c49..73e8f75c 100644
--- a/modules/openxyos/backend/server.ts
+++ b/modules/openxyos/backend/server.ts
@@ -278,7 +278,7 @@ app.get("/admin/database", (req, res) => {
   });
 
   await initDatabase();
-  seedDatabase();
+  await seedDatabase();
 
   setupWebSocket(server);
 
diff --git a/modules/openxyos/frontend/src/pages/OpenHomePage.tsx b/modules/openxyos/frontend/src/pages/OpenHomePage.tsx
index 42d9021e..71bf6a3b 100644
--- a/modules/openxyos/frontend/src/pages/OpenHomePage.tsx
+++ b/modules/openxyos/frontend/src/pages/OpenHomePage.tsx
@@ -445,6 +445,6 @@ export default function OpenHomePage() {
       <section id="contribute" className="ox-contribute"><div><Users size={31}/></div><small>BUILD WITH US</small><h2>{tx("不只使用系统，一起定义人机组织的未来", "Do more than use the system—define the future of human–AI organizations")}</h2><p>{tx("欢迎从组织模型、智能体协作、治理策略、模块生态和工程质量开始贡献。", "Contribute through organization models, agent collaboration, governance policy, module ecosystems, and engineering quality.")}</p><div className="ox-actions">{GITHUB_URL ? <a className="ox-primary" href={GITHUB_URL + "/issues"} target="_blank" rel="noreferrer"><Github size={18}/> {tx("查看 Issues", "View issues")}</a> : <a className="ox-primary" href="#source"><Code2 size={18}/> {tx("阅读源码边界", "Read source boundary")}</a>}<button className="ox-secondary" onClick={() => openDemo("model")}>{tx("进入系统", "Enter system")} <ArrowRight size={16}/></button></div></section>
     </main>
     <footer className="ox-footer"><span className="ox-brand"><i><Network size={16}/></i><b>open<span>XYOS</span></b></span><p>Open-source operating system for human–agent organizations.</p><small>Apache License 2.0 · Built in the open</small></footer>
-    {demoOpen && <div className="ox-overlay" onMouseDown={() => setDemoOpen(false)}><div className={`ox-dialog ${demoPhase === "model" ? "model-dialog" : ""}`} role="dialog" aria-modal="true" aria-labelledby="demo-title" onMouseDown={e => e.stopPropagation()}><button className="close" onClick={() => setDemoOpen(false)} aria-label={tx("关闭", "Close")}><X size={18}/></button>{demoPhase === "model" ? <><i className="icon"><KeyRound size={22}/></i><h2 id="demo-title">{tx("接入大模型，体验完整智能能力", "Connect a model to experience full intelligence")}</h2><p>{tx("优先使用本机 Ollama；云厂商需要你自己的 API Key，安装包不会预填密钥。密钥保存到当前本地演示租户，页面不会回显原文；之后可在“系统设置 → AI 大模型”中更换。", "Prefer local Ollama first. Cloud providers need your own API key — installers never prefill one. The key is stored only in the current demo tenant and is never shown back in plain text; change it later in System Settings → AI Models.")}</p><div className="model-presets">{EXPERIENCE_MODELS.map(model => <button key={model.id} className={providerId === model.id ? "selected" : ""} onClick={() => setProviderId(model.id)}><b>{model.name}</b><span>{model.provider}</span><small>{isEnglish ? model.hintEn : model.hint}</small></button>)}</div><label className="api-key-field"><span>API Key</span><div><KeyRound size={15}/><input type={showKey ? "text" : "password"} value={apiKey} onChange={event => setApiKey(event.target.value)} placeholder={tx("输入所选模型服务商的 API Key", "Enter the selected provider API key")} autoComplete="off" spellCheck={false}/><button onClick={() => setShowKey(value => !value)} aria-label={showKey ? tx("隐藏 API Key", "Hide API key") : tx("显示 API Key", "Show API key")}>{showKey ? <EyeOff size={16}/> : <Eye size={16}/>}</button></div></label><div className="key-notice"><ShieldCheck size={15}/><span>{tx("Key 仅发送到当前 openXYOS 后端，不写入浏览器日志，也不会再次明文返回。", "The key is sent only to the current openXYOS backend, never logged in the browser, and never returned in plain text.")}</span></div>{loginState !== "idle" && <p className="feedback">{tx("正在登录演示租户并保存模型配置…", "Signing in to the demo tenant and saving model configuration…")}</p>}{loginError && <p className="error">{loginError}</p>}<div className="model-actions"><button className="ox-primary" onClick={() => void saveModelAndEnter()} disabled={loginState !== "idle"}>{tx("保存并进入智能体验", "Save and enter intelligent experience")} <ArrowRight size={16}/></button><button className="ox-secondary" onClick={() => { setDemoPhase("account"); setLoginError(""); }}>{tx("暂不配置，只体验基础功能", "Skip for now and explore core functions")}</button></div></> : <><i className="icon"><LockKeyhole size={22}/></i><h2 id="demo-title">{tx("选择测试视角", "Choose a demo perspective")}</h2><p>{tx("使用本地演示租户进入真实系统。管理员可体验模块开关和名称编辑，普通员工只看到已授权能力。", "Enter the live system with the local demo tenant. Administrators can manage modules and labels; users see only authorized capabilities.")}</p><button className="account" onClick={() => void enterDemo("admin")} disabled={loginState !== "idle"}><span><b>{tx("管理员", "Administrator")}</b><small>demo@demo.com</small></span><ArrowRight size={17}/></button><button className="account" onClick={() => void enterDemo("user")} disabled={loginState !== "idle"}><span><b>{tx("普通员工", "Employee")}</b><small>user@demo.com</small></span><ArrowRight size={17}/></button>{loginState !== "idle" && <p className="feedback">{tx("正在连接演示环境…", "Connecting to the demo environment…")}</p>}{loginError && <p className="error">{loginError}</p>}<button className="manual" onClick={() => navigate("/auth")}>{tx("使用其他账号登录", "Sign in with another account")}</button></>}</div></div>}
+    {demoOpen && <div className="ox-overlay" onMouseDown={() => setDemoOpen(false)}><div className={`ox-dialog ${demoPhase === "model" ? "model-dialog" : ""}`} role="dialog" aria-modal="true" aria-labelledby="demo-title" onMouseDown={e => e.stopPropagation()}><button className="close" onClick={() => setDemoOpen(false)} aria-label={tx("关闭", "Close")}><X size={18}/></button>{demoPhase === "model" ? <><i className="icon"><KeyRound size={22}/></i><h2 id="demo-title">{tx("接入大模型，体验完整智能能力", "Connect a model to experience full intelligence")}</h2><p>{tx("优先使用本机 Ollama；云厂商需要你自己的 API Key，安装包不会预填密钥。密钥保存到当前本地演示租户，页面不会回显原文；之后可在“系统设置 → AI 大模型”中更换。", "Prefer local Ollama first. Cloud providers need your own API key — installers never prefill one. The key is stored only in the current demo tenant and is never shown back in plain text; change it later in System Settings → AI Models.")}</p><div className="model-presets">{EXPERIENCE_MODELS.map(model => <button key={model.id} className={providerId === model.id ? "selected" : ""} onClick={() => setProviderId(model.id)}><b>{model.name}</b><span>{model.provider}</span><small>{isEnglish ? model.hintEn : model.hint}</small></button>)}</div><label className="api-key-field"><span>API Key</span><div><KeyRound size={15}/><input type={showKey ? "text" : "password"} value={apiKey} onChange={event => setApiKey(event.target.value)} placeholder={tx("输入所选模型服务商的 API Key", "Enter the selected provider API key")} autoComplete="off" spellCheck={false}/><button onClick={() => setShowKey(value => !value)} aria-label={showKey ? tx("隐藏 API Key", "Hide API key") : tx("显示 API Key", "Show API key")}>{showKey ? <EyeOff size={16}/> : <Eye size={16}/>}</button></div></label><div className="key-notice"><ShieldCheck size={15}/><span>{tx("Key 仅发送到当前 openXYOS 后端，不写入浏览器日志，也不会再次明文返回。", "The key is sent only to the current openXYOS backend, never logged in the browser, and never returned in plain text.")}</span></div>{loginState !== "idle" && <p className="feedback">{tx("正在登录演示租户并保存模型配置…", "Signing in to the demo tenant and saving model configuration…")}</p>}{loginError && <p className="error">{loginError}</p>}<div className="model-actions"><button className="ox-primary" onClick={() => void saveModelAndEnter()} disabled={loginState !== "idle"}>{tx("保存并进入智能体验", "Save and enter intelligent experience")} <ArrowRight size={16}/></button><button className="ox-secondary" onClick={() => { setDemoPhase("account"); setLoginError(""); }}>{tx("暂不配置，只体验基础功能", "Skip for now and explore core functions")}</button></div></> : <><i className="icon"><LockKeyhole size={22}/></i><h2 id="demo-title">{tx("选择测试视角", "Choose a demo perspective")}</h2><p>{tx("使用本地演示租户进入真实系统。管理员可体验模块开关和名称编辑，普通员工只看到已授权能力。", "Enter the live system with the local demo tenant. Administrators can manage modules and labels; users see only authorized capabilities.")}</p><button className="account" onClick={() => void enterDemo("admin")} disabled={loginState !== "idle"}><span><b>{tx("管理员", "Administrator")}</b><small>{tx("本地入口", "Local entry")}</small></span><ArrowRight size={17}/></button><button className="account" onClick={() => void enterDemo("user")} disabled={loginState !== "idle"}><span><b>{tx("普通员工", "Employee")}</b><small>{tx("同事入口", "Colleague entry")}</small></span><ArrowRight size={17}/></button>{loginState !== "idle" && <p className="feedback">{tx("正在连接演示环境…", "Connecting to the demo environment…")}</p>}{loginError && <p className="error">{loginError}</p>}<button className="manual" onClick={() => navigate("/auth")}>{tx("使用其他账号登录", "Sign in with another account")}</button></>}</div></div>}
   </div>;
 }
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 8d4067a9..8e729130 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -32,7 +32,7 @@
     "audit:legacy-knowledge-files": "tsx scripts/audit-legacy-knowledge-files.ts",
     "ci": "npm run lint && npm run typecheck && npm test && npm run verify:open-source && npm run build",
     "start": "node --import tsx backend/server.ts",
-    "seed": "tsx backend/seed.ts",
+    "seed": "FREEOS_DEV_BUILD=1 tsx backend/seed.ts",
     "verify:open-source": "node scripts/verify-open-source.mjs",
     "test:module-settings": "tsx scripts/test-module-settings.ts",
     "test:agent-studio": "tsx scripts/test-agent-studio.ts",
diff --git a/modules/openxyos/scripts/test-no-release-bootstrap.ts b/modules/openxyos/scripts/test-no-release-bootstrap.ts
index f3c70f73..c811c220 100644
--- a/modules/openxyos/scripts/test-no-release-bootstrap.ts
+++ b/modules/openxyos/scripts/test-no-release-bootstrap.ts
@@ -36,7 +36,7 @@ async function main() {
     colleague: dbGet("SELECT id FROM users WHERE email = ?", ["user@demo.com"]),
   });
   const before = snapshot();
-  for (let i = 0; i < 3; i += 1) seedDatabase();
+  for (let i = 0; i < 3; i += 1) await seedDatabase();
   assert.deepEqual(snapshot(), before);
   assert.equal(before.demo, undefined);
   assert.equal(before.users.password_hash, "hash-keep");
diff --git a/tests/unit/test_org_release_bundle.py b/tests/unit/test_org_release_bundle.py
new file mode 100644
index 00000000..934b301f
--- /dev/null
+++ b/tests/unit/test_org_release_bundle.py
@@ -0,0 +1,70 @@
+"""The shipped organization tree must not contain the demo seed module."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+REPO = Path(__file__).resolve().parents[2]
+ORG = REPO / "modules" / "openxyos"
+BUNDLE = REPO / "desktop" / "portable" / "bundle-org-sidecar.sh"
+
+SKIP_DIRS = {
+    "node_modules",
+    "dist",
+    ".git",
+    ".github",
+    "backups",
+    "dist-backup-20260626",
+    "V0.5",
+    ".freeos",
+    ".octop",
+}
+SEED_MARKERS = (
+    "openxyos-demo-2026",
+    "ensureLocalBootstrap",
+    "demo@demo.com",
+    "user@demo.com",
+)
+# Cleanup and the UI-tenant denylist name the accounts they must not prefer.
+# They do not insert demo rows.
+ALLOW = {
+    ORG / "backend" / "upgrade-cleanup.ts",
+    ORG / "backend" / "routes" / "freeos-bridge.ts",
+}
+
+
+def _shipped_files() -> list[Path]:
+    files: list[Path] = []
+    for path in ORG.rglob("*"):
+        if not path.is_file():
+            continue
+        relative = path.relative_to(ORG)
+        if any(part in SKIP_DIRS for part in relative.parts):
+            continue
+        if relative.parts[:2] == ("backend", "dev"):
+            continue
+        if relative.parts[:1] == ("scripts",) and path.name.startswith("test-"):
+            continue
+        files.append(path)
+    return files
+
+
+def test_bundle_script_excludes_demo_seed() -> None:
+    text = BUNDLE.read_text(encoding="utf-8")
+    assert "--exclude backend/dev" in text
+    assert "scripts/test-*" in text
+    assert 'dropped.add("dev")' in text
+
+
+def test_release_tree_has_no_demo_seed_strings() -> None:
+    hits: list[str] = []
+    for path in _shipped_files():
+        if path.suffix not in {".ts", ".tsx", ".js", ".mjs", ".sh", ".json", ".ps1"}:
+            continue
+        if path in ALLOW:
+            continue
+        text = path.read_text(encoding="utf-8", errors="replace")
+        for marker in SEED_MARKERS:
+            if marker in text:
+                hits.append(f"{path.relative_to(REPO)}: {marker}")
+    assert hits == []

From 2073c3c86ccf9caf6f468c2cf1688989d8902aad Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:14:05 +0000
Subject: [PATCH 27/39] F6 plugin install: disable on uninstall and require
 paid-price confirmation

Uninstall now sets the plugin status to disabled so the contract parser gate turns off, and a paid install stays disabled until the client confirms the exact price. Both actions write an audit row. The catalog row is kept.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 modules/openxyos/backend/routes/plugins.ts    | 87 ++++++++++++++---
 modules/openxyos/package.json                 |  3 +-
 .../openxyos/scripts/test-plugin-install.ts   | 95 +++++++++++++++++++
 3 files changed, 170 insertions(+), 15 deletions(-)
 create mode 100644 modules/openxyos/scripts/test-plugin-install.ts

diff --git a/modules/openxyos/backend/routes/plugins.ts b/modules/openxyos/backend/routes/plugins.ts
index e4121dc6..eb244689 100644
--- a/modules/openxyos/backend/routes/plugins.ts
+++ b/modules/openxyos/backend/routes/plugins.ts
@@ -5,6 +5,33 @@ import { authenticate, AuthRequest } from "../middleware";
 export const pluginRoutes = Router();
 pluginRoutes.use(authenticate);
 
+const FREE_PRICES = new Set(["", "免费", "免费额度", "free", "free tier", "0"]);
+
+function isPaidPrice(price: unknown): boolean {
+  return !FREE_PRICES.has(String(price || "").trim().toLowerCase());
+}
+
+function writePluginAudit(tenantId: number, userId: number, action: string, pluginId: number, detail: string): void {
+  dbRun(
+    `CREATE TABLE IF NOT EXISTS workflow_audit_log (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      tenant_id INTEGER NOT NULL,
+      user_id INTEGER NOT NULL,
+      action TEXT NOT NULL,
+      target_type TEXT NOT NULL,
+      target_id INTEGER,
+      old_value TEXT,
+      new_value TEXT,
+      created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+    )`,
+  );
+  dbRun(
+    `INSERT INTO workflow_audit_log (tenant_id, user_id, action, target_type, target_id, new_value)
+     VALUES (?, ?, ?, 'plugin', ?, ?)`,
+    [tenantId, userId, action, pluginId, detail],
+  );
+}
+
 pluginRoutes.get("/", (req: AuthRequest, res) => {
   try {
     const { category, search, sort } = req.query;
@@ -75,34 +102,66 @@ pluginRoutes.post("/:id/install", (req: AuthRequest, res) => {
     ) as any;
     if (!plugin) return res.status(404).json({ success: false, error: "插件不存在" });
 
+    if (isPaidPrice(plugin.price)) {
+      const confirmed = req.body?.confirm_price === true && String(req.body?.price || "") === String(plugin.price);
+      if (!confirmed) {
+        return res.status(409).json({
+          success: false,
+          code: "PRICE_CONFIRMATION_REQUIRED",
+          error: "付费插件需要明确确认价格后才能启用",
+          data: { price: plugin.price, enabled: false },
+        });
+      }
+    }
+
     const already = dbGet(
       "SELECT id FROM tenant_plugin_installs WHERE tenant_id = ? AND plugin_id = ?",
       [req.user!.tenant_id, plugin.id]
     );
-    if (already) return res.json({ success: true, data: { installed: true, message: "已安装" } });
-
-    dbRun(
-      "INSERT INTO tenant_plugin_installs (tenant_id, plugin_id) VALUES (?, ?)",
-      [req.user!.tenant_id, plugin.id]
-    );
-    dbRun("UPDATE plugins SET install_count = install_count + 1 WHERE id = ?", [plugin.id]);
-
-    // 如果安装的是AI合同智能解析插件，自动启用
-    if (plugin.slug === "ai合同智能解析") {
-      dbRun("UPDATE plugins SET status = 'active' WHERE id = ? AND tenant_id = ?", [plugin.id, req.user!.tenant_id]);
+    if (!already) {
+      dbRun(
+        "INSERT INTO tenant_plugin_installs (tenant_id, plugin_id) VALUES (?, ?)",
+        [req.user!.tenant_id, plugin.id]
+      );
+      dbRun("UPDATE plugins SET install_count = install_count + 1 WHERE id = ?", [plugin.id]);
     }
+    dbRun("UPDATE plugins SET status = 'active' WHERE id = ? AND tenant_id = ?", [plugin.id, req.user!.tenant_id]);
+    writePluginAudit(
+      req.user!.tenant_id,
+      req.user!.id,
+      "f6_install_plugin",
+      plugin.id,
+      `enabled ${plugin.slug || plugin.name} after ${isPaidPrice(plugin.price) ? "price confirmation" : "free install"}`,
+    );
 
-    res.json({ success: true, data: { installed: true, message: "安装成功" } });
+    res.json({ success: true, data: { installed: true, enabled: true, message: "安装成功" } });
   } catch (err: any) { res.status(500).json({ success: false, error: err.message }); }
 });
 
 // 卸载插件
 pluginRoutes.post("/:id/uninstall", (req: AuthRequest, res) => {
   try {
+    const pluginId = parseInt(req.params.id);
+    const plugin = dbGet(
+      "SELECT id, slug, name FROM plugins WHERE id = ? AND tenant_id = ?",
+      [pluginId, req.user!.tenant_id]
+    ) as { id: number; slug?: string; name?: string } | undefined;
+    if (!plugin) return res.status(404).json({ success: false, error: "插件不存在" });
     dbRun(
       "DELETE FROM tenant_plugin_installs WHERE tenant_id = ? AND plugin_id = ?",
-      [req.user!.tenant_id, parseInt(req.params.id)]
+      [req.user!.tenant_id, plugin.id]
+    );
+    dbRun(
+      "UPDATE plugins SET status = 'disabled' WHERE id = ? AND tenant_id = ?",
+      [plugin.id, req.user!.tenant_id]
+    );
+    writePluginAudit(
+      req.user!.tenant_id,
+      req.user!.id,
+      "f6_uninstall_plugin",
+      plugin.id,
+      `disabled ${plugin.slug || plugin.name}; catalog row kept`,
     );
-    res.json({ success: true, data: { installed: false } });
+    res.json({ success: true, data: { installed: false, enabled: false, status: "disabled" } });
   } catch (err: any) { res.status(500).json({ success: false, error: err.message }); }
 });
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 8e729130..5837b0d9 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -11,8 +11,9 @@
     "postinstall": "node scripts/patch-express-types.cjs",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts,.tsx --max-warnings 0",
-    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:f10-upgrade-cleanup && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:f10-upgrade-cleanup && npm run test:plugin-install && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
     "test:f10-upgrade-cleanup": "tsx scripts/test-f10-upgrade-cleanup.ts",
+    "test:plugin-install": "tsx scripts/test-plugin-install.ts",
     "test:no-release-bootstrap": "tsx scripts/test-no-release-bootstrap.ts",
     "test:db-persistence": "tsx scripts/test-db-persistence.ts",
     "test:runtime-config": "tsx scripts/test-runtime-config.ts",
diff --git a/modules/openxyos/scripts/test-plugin-install.ts b/modules/openxyos/scripts/test-plugin-install.ts
new file mode 100644
index 00000000..1572ce37
--- /dev/null
+++ b/modules/openxyos/scripts/test-plugin-install.ts
@@ -0,0 +1,95 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import type { AddressInfo } from "node:net";
+import express from "express";
+
+async function main() {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "freeos-plugin-"));
+  process.env.NODE_ENV = "development";
+  process.env.JWT_SECRET = "plugin-install-test-secret-at-least-32-characters";
+  process.env.COOKIE_SECRET = "plugin-install-cookie-secret-at-least-32-chars";
+  process.env.DATABASE_PATH = path.join(dir, "xiongyuan.db");
+  delete process.env.FREEOS_DEV_BUILD;
+
+  const { initDatabase, dbGet, dbRun } = await import("../backend/db");
+  const { pluginRoutes } = await import("../backend/routes/plugins");
+  const { contractRoutes } = await import("../backend/routes/contracts");
+  const { signToken } = await import("../backend/middleware");
+  await initDatabase();
+
+  dbRun("INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (1, 'Acme', 'acme', 'active', 'community')");
+  const userId = Number(dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, 'admin', 1)",
+    ["owner@example.com", "hash", "Owner"],
+  ).lastInsertRowid);
+  const pluginId = Number(dbRun(
+    `INSERT INTO plugins (tenant_id, name, slug, category, description, version, author, price, tags, install_count, rating, status)
+     VALUES (1, 'AI合同智能解析', 'ai合同智能解析', '法务合规', 'paid', '1.0.0', '雄元科技', '¥99/月', 'AI', 0, 5, 'active')`,
+  ).lastInsertRowid);
+  dbRun("INSERT INTO tenant_plugin_installs (tenant_id, plugin_id) VALUES (1, ?)", [pluginId]);
+
+  const token = signToken({ id: userId, email: "owner@example.com", nickname: "Owner", role: "admin", tenant_id: 1 });
+  const app = express();
+  app.use(express.json());
+  app.use("/api/plugins", pluginRoutes);
+  app.use("/api/contracts", contractRoutes);
+  const server = app.listen(0, "127.0.0.1");
+  await new Promise<void>((resolve) => server.once("listening", resolve));
+  const base = `http://127.0.0.1:${(server.address() as AddressInfo).port}`;
+
+  async function call(url: string, method = "GET", body?: unknown) {
+    return fetch(`${base}${url}`, {
+      method,
+      headers: {
+        Authorization: `Bearer ${token}`,
+        ...(body ? { "Content-Type": "application/json" } : {}),
+      },
+      body: body ? JSON.stringify(body) : undefined,
+    });
+  }
+
+  try {
+    const removed = await call(`/api/plugins/${pluginId}/uninstall`, "POST");
+    assert.equal(removed.status, 200);
+    const removedBody = await removed.json() as { data: { enabled: boolean; status: string } };
+    assert.equal(removedBody.data.enabled, false);
+    assert.equal(removedBody.data.status, "disabled");
+    assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [pluginId]).status, "disabled");
+    assert.equal(dbGet("SELECT id FROM plugins WHERE id = ?", [pluginId]).id, pluginId);
+    assert.equal(dbGet("SELECT id FROM tenant_plugin_installs WHERE plugin_id = ?", [pluginId]), undefined);
+    const gated = await call("/api/contracts/approval/rules/parse", "POST");
+    assert.equal(gated.status, 402);
+
+    const listed = await call("/api/plugins");
+    const listedBody = await listed.json() as { data: Array<{ id: number }> };
+    assert.equal(listedBody.data.some((row) => row.id === pluginId), false);
+
+    const refused = await call(`/api/plugins/${pluginId}/install`, "POST", {});
+    assert.equal(refused.status, 409);
+    const refusedBody = await refused.json() as { code: string; data: { price: string; enabled: boolean } };
+    assert.equal(refusedBody.code, "PRICE_CONFIRMATION_REQUIRED");
+    assert.equal(refusedBody.data.enabled, false);
+    assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [pluginId]).status, "disabled");
+
+    const confirmed = await call(`/api/plugins/${pluginId}/install`, "POST", { confirm_price: true, price: "¥99/月" });
+    assert.equal(confirmed.status, 200);
+    assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [pluginId]).status, "active");
+    assert.equal(Number(dbGet("SELECT COUNT(*) as c FROM workflow_audit_log WHERE action = 'f6_install_plugin'").c), 1);
+
+    const again = await call(`/api/plugins/${pluginId}/uninstall`, "POST");
+    assert.equal(again.status, 200);
+    assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [pluginId]).status, "disabled");
+    assert.equal(Number(dbGet("SELECT COUNT(*) as c FROM workflow_audit_log WHERE action = 'f6_uninstall_plugin'").c), 2);
+    console.log("plugin install confirmation and uninstall ok");
+  } finally {
+    await new Promise<void>((resolve) => server.close(() => resolve()));
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});

From 3c1a0703244fed162f1fe1ac85a22b187cc9a8d3 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:14:46 +0000
Subject: [PATCH 28/39] F7 audit: pin qs 6.16.2 and deepmerge 4.1.2

CI run 40838520982 failed npm audit, not the compile. qs 6.16.0 is inside GHSA-6pq8-jhm2-2vcw, and vite-plugin-pwa pulls deepmerge >=4.2.0 (GHSA-gcqx-w48m-w2h4) which has no patched 4.2 release. Overrides move both trees onto versions outside those ranges.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 dashboard/package-lock.json        | 19 ++++++++++---------
 dashboard/package.json             |  3 ++-
 modules/openxyos/package-lock.json | 26 +++++++++++++-------------
 modules/openxyos/package.json      |  3 ++-
 4 files changed, 27 insertions(+), 24 deletions(-)

diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
index 25e4dd81..7d81acd5 100644
--- a/dashboard/package-lock.json
+++ b/dashboard/package-lock.json
@@ -3372,6 +3372,16 @@
         }
       }
     },
+    "node_modules/@rollup/plugin-node-resolve/node_modules/deepmerge": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.1.2.tgz",
+      "integrity": "sha512-9ZXh/8Fp+ggcscoRg324S1aNdGSCl2X1P8F1FPTHbtq3RAxy9ECbU2Wgy2J12r6x/O0BStDlkzcpKK/HptX+Kg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/@rollup/plugin-replace": {
       "version": "6.0.3",
       "resolved": "https://mirrors.tencent.com/npm/@rollup/plugin-replace/-/plugin-replace-6.0.3.tgz",
@@ -6445,15 +6455,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/deepmerge": {
-      "version": "4.3.1",
-      "resolved": "https://mirrors.tencent.com/npm/deepmerge/-/deepmerge-4.3.1.tgz",
-      "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==",
-      "dev": true,
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/define-data-property": {
       "version": "1.1.4",
       "resolved": "https://mirrors.tencent.com/npm/define-data-property/-/define-data-property-1.1.4.tgz",
diff --git a/dashboard/package.json b/dashboard/package.json
index c5ea36b2..f66155e3 100644
--- a/dashboard/package.json
+++ b/dashboard/package.json
@@ -55,7 +55,8 @@
     "@rollup/plugin-terser": "^1.0.0",
     "katex": "^0.19.0",
     "dompurify": "^3.4.16",
-    "vite": "^6.4.5"
+    "vite": "^6.4.5",
+    "deepmerge": "4.1.2"
   },
   "devDependencies": {
     "@eslint/js": "^9.25.0",
diff --git a/modules/openxyos/package-lock.json b/modules/openxyos/package-lock.json
index 8d6c8323..c6e19d49 100644
--- a/modules/openxyos/package-lock.json
+++ b/modules/openxyos/package-lock.json
@@ -3593,6 +3593,16 @@
         }
       }
     },
+    "node_modules/@rollup/plugin-node-resolve/node_modules/deepmerge": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.1.2.tgz",
+      "integrity": "sha512-9ZXh/8Fp+ggcscoRg324S1aNdGSCl2X1P8F1FPTHbtq3RAxy9ECbU2Wgy2J12r6x/O0BStDlkzcpKK/HptX+Kg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/@rollup/plugin-replace": {
       "version": "6.0.3",
       "resolved": "https://registry.npmmirror.com/@rollup/plugin-replace/-/plugin-replace-6.0.3.tgz",
@@ -7166,16 +7176,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/deepmerge": {
-      "version": "4.3.1",
-      "resolved": "https://registry.npmmirror.com/deepmerge/-/deepmerge-4.3.1.tgz",
-      "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/define-data-property": {
       "version": "1.1.4",
       "resolved": "https://registry.npmmirror.com/define-data-property/-/define-data-property-1.1.4.tgz",
@@ -11384,9 +11384,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.16.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
-      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
+      "version": "6.16.2",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.2.tgz",
+      "integrity": "sha512-VYdnB5S7/0IeXzBacUtwNAaM6d7Y/PgYnNC7bJCI6meqA/OgnsQbZMtVW8Dt2D1PHgbHGtYmhSoEIgvt7xZ2ZA==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "es-define-property": "^1.0.1",
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 5837b0d9..0722e489 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -112,7 +112,8 @@
     "node": ">=22.12"
   },
   "overrides": {
-    "qs": "6.16.0",
+    "qs": "6.16.2",
+    "deepmerge": "4.1.2",
     "follow-redirects": "1.16.1",
     "vite": "^6.4.5",
     "katex": "^0.18.2",

From 25468e4d3440c212d18c91135b56a87ee614b198 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:15:42 +0000
Subject: [PATCH 29/39] F9 backup: exercise install.sh upgrade backup and block
 NSIS overwrite without one

install.sh can run the real pre-upgrade backup against a fake existing home and abort when that backup fails. The Windows NSIS overwrite path now runs the same full backup before copying files and aborts Setup when it fails. makensis itself is not executed here.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .../windows/nsis/backup-before-overwrite.ps1  | 45 +++++++++
 desktop/src/build/windows/nsis/project.nsi    |  2 +
 .../src/build/windows/nsis/wails_tools.nsh    | 14 +++
 scripts/install.sh                            | 81 +++++++++--------
 tests/unit/test_upgrade_backup.py             | 91 +++++++++++++++++++
 5 files changed, 197 insertions(+), 36 deletions(-)
 create mode 100644 desktop/src/build/windows/nsis/backup-before-overwrite.ps1

diff --git a/desktop/src/build/windows/nsis/backup-before-overwrite.ps1 b/desktop/src/build/windows/nsis/backup-before-overwrite.ps1
new file mode 100644
index 00000000..4714bf8e
--- /dev/null
+++ b/desktop/src/build/windows/nsis/backup-before-overwrite.ps1
@@ -0,0 +1,45 @@
+# Pre-install backup for an NSIS overwrite. Fresh installs (no database and no
+# config) exit 0. An existing home must produce a full archive plus sha256
+# before Setup copies files; otherwise this script exits non-zero and Setup aborts.
+# Not executed by the Linux CI runner. The NSIS section calls it before wails.files.
+$ErrorActionPreference = "Stop"
+
+function Resolve-FreeOSHome {
+    if ($env:FREEOS_HOME) { return $env:FREEOS_HOME }
+    if ($env:OCTOP_HOME) { return $env:OCTOP_HOME }
+    $freeos = Join-Path $env:USERPROFILE ".freeos"
+    $legacy = Join-Path $env:USERPROFILE ".octop"
+    if (Test-Path $freeos) { return $freeos }
+    if (Test-Path $legacy) { return $legacy }
+    return $freeos
+}
+
+$home = Resolve-FreeOSHome
+$db = Join-Path $home "octop.db"
+$config = Join-Path $home "config.json"
+if (-not (Test-Path $db) -and -not (Test-Path $config)) { exit 0 }
+
+$stamp = (Get-Date).ToUniversalTime().ToString("yyyyMMddTHHmmssZ")
+$backupDir = Join-Path $home "backups"
+New-Item -ItemType Directory -Force -Path $backupDir | Out-Null
+$out = Join-Path $backupDir "pre-upgrade-nsis-$stamp.tar.gz"
+
+$candidates = @(
+    (Join-Path $home "venv\Scripts\octop.exe"),
+    (Join-Path $home "portable\runtime\python.exe")
+)
+$octop = $candidates | Where-Object { Test-Path $_ } | Select-Object -First 1
+if (-not $octop) { Write-Error "Upgrade aborted: backup CLI missing"; exit 2 }
+
+if ($octop.EndsWith("python.exe")) {
+    $launch = Join-Path $home "portable\launch.py"
+    if (-not (Test-Path $launch)) { Write-Error "Upgrade aborted: launch.py missing"; exit 2 }
+    & $octop $launch backup create --home $home --include-chats -o $out
+} else {
+    & $octop backup create --home $home --include-chats -o $out
+}
+if ($LASTEXITCODE -ne 0 -or -not (Test-Path $out)) { Write-Error "Upgrade aborted: backup failed"; exit 1 }
+$hash = (Get-FileHash -Algorithm SHA256 -Path $out).Hash.ToLower()
+$leaf = Split-Path -Leaf $out
+Set-Content -Encoding ascii -Path "$out.sha256" -Value "$hash  $leaf"
+exit 0
diff --git a/desktop/src/build/windows/nsis/project.nsi b/desktop/src/build/windows/nsis/project.nsi
index 4125fc5c..043432b0 100644
--- a/desktop/src/build/windows/nsis/project.nsi
+++ b/desktop/src/build/windows/nsis/project.nsi
@@ -135,6 +135,8 @@ Section
 
     !insertmacro wails.webview2runtime
 
+    !insertmacro wails.backupBeforeOverwrite
+
     SetOutPath $INSTDIR
 
     !insertmacro wails.files
diff --git a/desktop/src/build/windows/nsis/wails_tools.nsh b/desktop/src/build/windows/nsis/wails_tools.nsh
index ddd5fb61..ba879d19 100644
--- a/desktop/src/build/windows/nsis/wails_tools.nsh
+++ b/desktop/src/build/windows/nsis/wails_tools.nsh
@@ -331,6 +331,20 @@ RequestExecutionLevel "${REQUEST_EXECUTION_LEVEL}"
     ${EndIf}
 !macroend
 
+# Overwrite install: full backup of an existing home before files are copied.
+# A non-zero exit aborts Setup. Fresh installs with no database/config continue.
+# Linux CI does not run makensis or this PowerShell path.
+!macro wails.backupBeforeOverwrite
+    InitPluginsDir
+    File "/oname=$PLUGINSDIR\backup-before-overwrite.ps1" "backup-before-overwrite.ps1"
+    nsExec::ExecToLog 'powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$PLUGINSDIR\backup-before-overwrite.ps1"'
+    Pop $0
+    ${If} $0 != 0
+        MessageBox MB_ICONSTOP|MB_OK "Upgrade aborted: backup failed (exit $0). Existing data was not overwritten."
+        Abort
+    ${EndIf}
+!macroend
+
 # Install/reinstall: stop a running shell so Setup can overwrite FreeOS.exe
 # and the next launch can refresh ~/.freeos/portable. Silent installs stop
 # without asking. LangString INSTALL_FREEOS_RUNNING is in project.nsi.
diff --git a/scripts/install.sh b/scripts/install.sh
index 56804724..8eda097c 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -82,6 +82,43 @@ warn()  { printf "${YELLOW}[freeos]${RESET} %s\n" "$*"; }
 error() { printf "${RED}[freeos]${RESET} %s\n" "$*" >&2; }
 die()   { error "$@"; exit 1; }
 
+_sha256_file() {
+    local file="$1"
+    if command -v sha256sum >/dev/null 2>&1; then
+        sha256sum "$file" > "${file}.sha256"
+    elif command -v shasum >/dev/null 2>&1; then
+        shasum -a 256 "$file" > "${file}.sha256"
+    else
+        return 1
+    fi
+}
+
+# Existing installs get a full archive before the package is replaced.
+# A failed backup aborts the upgrade; the recorded sha256 is the checksum of that archive.
+_backup_before_upgrade() {
+    local cli="$OCTOP_VENV/bin/octop"
+    if [ ! -x "$cli" ]; then
+        return 0
+    fi
+    if [ ! -e "$OCTOP_HOME/octop.db" ] && [ ! -e "$OCTOP_HOME/config.json" ]; then
+        info "No existing database or config; skipping pre-upgrade backup"
+        return 0
+    fi
+    mkdir -p "$OCTOP_HOME/backups" || die "Upgrade aborted: cannot create $OCTOP_HOME/backups"
+    local stamp out
+    stamp="$(date -u +%Y%m%dT%H%M%SZ)"
+    out="$OCTOP_HOME/backups/pre-upgrade-${stamp}.tar.gz"
+    info "Full backup before upgrade: $out"
+    if ! "$cli" backup create --home "$OCTOP_HOME" --include-chats -o "$out"; then
+        die "Upgrade aborted: backup failed"
+    fi
+    if ! _sha256_file "$out"; then
+        die "Upgrade aborted: could not record sha256 for $out"
+    fi
+    info "Backup sha256 written to ${out}.sha256"
+}
+
+
 # ── 解析参数 ──────────────────────────────────────────────────────────────────
 while [[ $# -gt 0 ]]; do
     case "$1" in
@@ -155,6 +192,14 @@ case "$OS" in
     *) die "Unsupported OS: $OS. Use install.ps1 or install.bat on Windows." ;;
 esac
 
+# Test hook: run the same pre-upgrade backup the upgrade path uses, then stop
+# before uv/pip. Production upgrades call _backup_before_upgrade again below,
+# immediately before the package is replaced.
+if [ "${FREEOS_INSTALL_BACKUP_ONLY:-}" = "1" ]; then
+    _backup_before_upgrade
+    exit 0
+fi
+
 printf "${GREEN}[freeos]${RESET} Installing FreeOS into ${BOLD}%s${RESET}\n" "$OCTOP_HOME"
 
 # ── 步骤 1: 确保 uv 可用 ────────────────────────────────────────────────────
@@ -687,42 +732,6 @@ _clone_source_workspace() {
     fi
 }
 
-_sha256_file() {
-    local file="$1"
-    if command -v sha256sum >/dev/null 2>&1; then
-        sha256sum "$file" > "${file}.sha256"
-    elif command -v shasum >/dev/null 2>&1; then
-        shasum -a 256 "$file" > "${file}.sha256"
-    else
-        return 1
-    fi
-}
-
-# Existing installs get a full archive before the package is replaced.
-# A failed backup aborts the upgrade; the recorded sha256 is the checksum of that archive.
-_backup_before_upgrade() {
-    local cli="$OCTOP_VENV/bin/octop"
-    if [ ! -x "$cli" ]; then
-        return 0
-    fi
-    if [ ! -e "$OCTOP_HOME/octop.db" ] && [ ! -e "$OCTOP_HOME/config.json" ]; then
-        info "No existing database or config; skipping pre-upgrade backup"
-        return 0
-    fi
-    mkdir -p "$OCTOP_HOME/backups" || die "Upgrade aborted: cannot create $OCTOP_HOME/backups"
-    local stamp out
-    stamp="$(date -u +%Y%m%dT%H%M%SZ)"
-    out="$OCTOP_HOME/backups/pre-upgrade-${stamp}.tar.gz"
-    info "Full backup before upgrade: $out"
-    if ! "$cli" backup create --home "$OCTOP_HOME" --include-chats -o "$out"; then
-        die "Upgrade aborted: backup failed"
-    fi
-    if ! _sha256_file "$out"; then
-        die "Upgrade aborted: could not record sha256 for $out"
-    fi
-    info "Backup sha256 written to ${out}.sha256"
-}
-
 _backup_before_upgrade
 
 if [ "$FROM_SOURCE" = true ]; then
diff --git a/tests/unit/test_upgrade_backup.py b/tests/unit/test_upgrade_backup.py
index 7902b6a5..c0c7083a 100644
--- a/tests/unit/test_upgrade_backup.py
+++ b/tests/unit/test_upgrade_backup.py
@@ -29,6 +29,97 @@ def test_install_ps1_backs_up_before_venv_clear() -> None:
     assert "SHA256" in text
 
 
+def test_install_sh_backup_only_writes_archive_and_sha256(tmp_path: Path) -> None:
+    home = tmp_path / "home"
+    bin_dir = home / "venv" / "bin"
+    bin_dir.mkdir(parents=True)
+    (home / "octop.db").write_bytes(b"sqlite")
+    octop = bin_dir / "octop"
+    octop.write_text(
+        "#!/bin/sh\n"
+        "out=\n"
+        "prev=\n"
+        "for arg in \"$@\"; do\n"
+        "  if [ \"$prev\" = \"-o\" ]; then out=$arg; fi\n"
+        "  prev=$arg\n"
+        "done\n"
+        "mkdir -p \"$(dirname \"$out\")\"\n"
+        "printf backup > \"$out\"\n",
+        encoding="utf-8",
+    )
+    octop.chmod(0o755)
+    python = bin_dir / "python"
+    python.write_text("#!/bin/sh\necho Python 3.12.12\n", encoding="utf-8")
+    python.chmod(0o755)
+    env = {
+        "HOME": str(home),
+        "FREEOS_HOME": str(home),
+        "PATH": "/usr/bin:/bin",
+        "FREEOS_INSTALL_BACKUP_ONLY": "1",
+    }
+    import os
+    import subprocess
+
+    result = subprocess.run(
+        ["bash", str(REPO / "scripts" / "install.sh")],
+        cwd=REPO,
+        env=env,
+        capture_output=True,
+        text=True,
+        check=False,
+    )
+    assert result.returncode == 0, result.stderr
+    archives = list((home / "backups").glob("pre-upgrade-*.tar.gz"))
+    assert len(archives) == 1
+    checksum = Path(str(archives[0]) + ".sha256").read_text(encoding="utf-8")
+    assert archives[0].name in checksum
+    assert os.path.getsize(archives[0]) > 0
+
+
+def test_install_sh_backup_failure_aborts(tmp_path: Path) -> None:
+    home = tmp_path / "home"
+    bin_dir = home / "venv" / "bin"
+    bin_dir.mkdir(parents=True)
+    (home / "config.json").write_text("{}\n", encoding="utf-8")
+    octop = bin_dir / "octop"
+    octop.write_text("#!/bin/sh\nexit 1\n", encoding="utf-8")
+    octop.chmod(0o755)
+    python = bin_dir / "python"
+    python.write_text("#!/bin/sh\necho Python 3.12.12\n", encoding="utf-8")
+    python.chmod(0o755)
+    import subprocess
+
+    result = subprocess.run(
+        ["bash", str(REPO / "scripts" / "install.sh")],
+        cwd=REPO,
+        env={
+            "HOME": str(home),
+            "FREEOS_HOME": str(home),
+            "PATH": "/usr/bin:/bin",
+            "FREEOS_INSTALL_BACKUP_ONLY": "1",
+        },
+        capture_output=True,
+        text=True,
+        check=False,
+    )
+    assert result.returncode != 0
+    assert "Upgrade aborted: backup failed" in result.stderr
+    assert list((home / "backups").glob("pre-upgrade-*.tar.gz.sha256")) == []
+
+
+def test_nsis_overwrite_backs_up_before_copying_files() -> None:
+    nsi = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "project.nsi").read_text(encoding="utf-8")
+    tools = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "wails_tools.nsh").read_text(encoding="utf-8")
+    backup = nsi.index("wails.backupBeforeOverwrite")
+    files = nsi.index("wails.files", backup)
+    assert backup < files
+    assert "Abort" in tools[tools.index("wails.backupBeforeOverwrite"):]
+    assert "backup-before-overwrite.ps1" in tools
+    script = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "backup-before-overwrite.ps1").read_text(encoding="utf-8")
+    assert "--include-chats" in script
+    assert "Upgrade aborted: backup failed" in script
+
+
 def test_in_app_upgrade_runs_full_backup_not_only_sqlite() -> None:
     text = (REPO / "desktop" / "src" / "portable_upgrade.go").read_text(encoding="utf-8")
     assert '"backup", "create"' in text

From af078e987d618cb842320cf7fd0f7181c45bc2f5 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:15:54 +0000
Subject: [PATCH 30/39] F2 bootstrap tests: empty database and upgrade residue
 stay unchanged

A release process with inherited local-test flags creates no demo accounts on an empty database, and three later starts leave an existing password hash and tenant status alone.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 modules/openxyos/package.json                 |  3 +-
 modules/openxyos/scripts/test-f2-bootstrap.ts | 50 +++++++++++++++++++
 2 files changed, 52 insertions(+), 1 deletion(-)
 create mode 100644 modules/openxyos/scripts/test-f2-bootstrap.ts

diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index 0722e489..da7bd4d2 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -11,9 +11,10 @@
     "postinstall": "node scripts/patch-express-types.cjs",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts,.tsx --max-warnings 0",
-    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:f10-upgrade-cleanup && npm run test:plugin-install && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:f10-upgrade-cleanup && npm run test:plugin-install && npm run test:f2-bootstrap && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
     "test:f10-upgrade-cleanup": "tsx scripts/test-f10-upgrade-cleanup.ts",
     "test:plugin-install": "tsx scripts/test-plugin-install.ts",
+    "test:f2-bootstrap": "tsx scripts/test-f2-bootstrap.ts",
     "test:no-release-bootstrap": "tsx scripts/test-no-release-bootstrap.ts",
     "test:db-persistence": "tsx scripts/test-db-persistence.ts",
     "test:runtime-config": "tsx scripts/test-runtime-config.ts",
diff --git a/modules/openxyos/scripts/test-f2-bootstrap.ts b/modules/openxyos/scripts/test-f2-bootstrap.ts
new file mode 100644
index 00000000..d51ef367
--- /dev/null
+++ b/modules/openxyos/scripts/test-f2-bootstrap.ts
@@ -0,0 +1,50 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+
+async function main() {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "freeos-f2-"));
+  process.env.DATABASE_PATH = path.join(dir, "xiongyuan.db");
+  process.env.FREEOS_ORG_INTEGRATED = "1";
+  process.env.FREEOS_ORG_LOCAL_TEST = "1";
+  process.env.FREEOS_ORG_DEV_BOOTSTRAP = "1";
+  delete process.env.FREEOS_DEV_BUILD;
+  delete process.env.SEED_DEMO_DATA;
+
+  const { initDatabase, dbRun, dbGet } = await import("../backend/db");
+  const { seedDatabase } = await import("../backend/seed");
+  await initDatabase();
+  await seedDatabase();
+  assert.equal(dbGet("SELECT id FROM users WHERE email = ?", ["demo@demo.com"]), undefined);
+  assert.equal(dbGet("SELECT id FROM users WHERE email = ?", ["user@demo.com"]), undefined);
+  assert.equal(dbGet("SELECT id FROM users WHERE email = ?", ["admin@example.com"]), undefined);
+  assert.equal(fs.existsSync(path.join(dir, "bootstrap-credentials.txt")), false);
+
+  dbRun("INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, 'local', 'openxyos-local', 'suspended', 'community')");
+  dbRun("UPDATE tenants SET status = 'suspended' WHERE id = 2");
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, 'admin', 2, 0)",
+    ["demo@demo.com", "hash-keep-demo", "管理员"],
+  );
+  dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id, must_change_password) VALUES (?, ?, ?, 'admin', 1, 0)",
+    ["owner@example.com", "hash-keep-owner", "Owner"],
+  );
+  const before = {
+    demo: dbGet("SELECT password_hash, must_change_password, status FROM users WHERE email = ?", ["demo@demo.com"]),
+    owner: dbGet("SELECT password_hash, must_change_password FROM users WHERE email = ?", ["owner@example.com"]),
+    tenant: dbGet("SELECT status FROM tenants WHERE id = 2"),
+  };
+  for (let i = 0; i < 3; i += 1) await seedDatabase();
+  assert.deepEqual(dbGet("SELECT password_hash, must_change_password, status FROM users WHERE email = ?", ["demo@demo.com"]), before.demo);
+  assert.deepEqual(dbGet("SELECT password_hash, must_change_password FROM users WHERE email = ?", ["owner@example.com"]), before.owner);
+  assert.deepEqual(dbGet("SELECT status FROM tenants WHERE id = 2"), before.tenant);
+  assert.equal(fs.existsSync(path.join(dir, "bootstrap-credentials.txt")), false);
+  console.log("f2 empty db and upgrade residue ok");
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exitCode = 1;
+});

From c28cabe325d64f80ac3ba570c06affbe566e8e99 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:16:41 +0000
Subject: [PATCH 31/39] F1 launch flags: ignore inherited demo-seed switches in
 release builds

FREEOS_ORG_LOCAL_TEST and FREEOS_ORG_DEV_BOOTSTRAP are dropped unless FREEOS_DEV_BUILD is explicitly set. Parent environments can no longer turn demo seeding on for a release sidecar.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 desktop/portable/bundle-org-sidecar.sh        | 27 ++++++++++++-------
 .../src/build/windows/nsis/start-sidecar.ps1  |  7 ++---
 desktop/src/process_sidecar.go                | 17 ++++++++++--
 desktop/src/process_sidecar_test.go           | 14 ++++++++++
 src/octop/modules/org_os/sidecar_launch.py    | 13 +++++----
 tests/unit/test_sidecar_launch.py             | 12 +++++++++
 6 files changed, 71 insertions(+), 19 deletions(-)

diff --git a/desktop/portable/bundle-org-sidecar.sh b/desktop/portable/bundle-org-sidecar.sh
index 2db54011..4e18b262 100755
--- a/desktop/portable/bundle-org-sidecar.sh
+++ b/desktop/portable/bundle-org-sidecar.sh
@@ -228,16 +228,22 @@ export AIR_GAP_MODE=true
 export ALLOW_PUBLIC_REGISTRATION="${ALLOW_PUBLIC_REGISTRATION:-false}"
 export SEED_DEMO_DATA="${SEED_DEMO_DATA:-false}"
 export FREEOS_ORG_INTEGRATED="${FREEOS_ORG_INTEGRATED:-1}"
+# Release builds ignore inherited demo-seed switches unless FREEOS_DEV_BUILD is set.
 org_local_test=0
-for value in "${FREEOS_ORG_DEV_BOOTSTRAP:-}" "${FREEOS_ORG_LOCAL_TEST:-}"; do
-  case "$(printf '%s' "$value" | tr '[:upper:]' '[:lower:]')" in
-    1|true|yes|on) org_local_test=1 ;;
-  esac
-done
+case "$(printf '%s' "${FREEOS_DEV_BUILD:-}" | tr '[:upper:]' '[:lower:]')" in
+  1|true|yes|on)
+    for value in "${FREEOS_ORG_DEV_BOOTSTRAP:-}" "${FREEOS_ORG_LOCAL_TEST:-}"; do
+      case "$(printf '%s' "$value" | tr '[:upper:]' '[:lower:]')" in
+        1|true|yes|on) org_local_test=1 ;;
+      esac
+    done
+    ;;
+esac
 if [ "$org_local_test" = 1 ]; then
   export FREEOS_ORG_LOCAL_TEST=1
 else
   unset FREEOS_ORG_LOCAL_TEST || true
+  unset FREEOS_ORG_DEV_BOOTSTRAP || true
 fi
 export JWT_SECRET COOKIE_SECRET
 export CORS_ORIGIN="${CORS_ORIGIN:-http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:18900,http://localhost:18900}"
@@ -281,14 +287,17 @@ if not defined ALLOW_PUBLIC_REGISTRATION set "ALLOW_PUBLIC_REGISTRATION=false"
 if not defined SEED_DEMO_DATA set "SEED_DEMO_DATA=false"
 if not defined FREEOS_ORG_INTEGRATED set "FREEOS_ORG_INTEGRATED=1"
 set "ORG_LOCAL_TEST="
-if /I "%FREEOS_ORG_DEV_BOOTSTRAP%"=="1" set "ORG_LOCAL_TEST=1"
-if /I "%FREEOS_ORG_DEV_BOOTSTRAP%"=="true" set "ORG_LOCAL_TEST=1"
-if /I "%FREEOS_ORG_LOCAL_TEST%"=="1" set "ORG_LOCAL_TEST=1"
-if /I "%FREEOS_ORG_LOCAL_TEST%"=="true" set "ORG_LOCAL_TEST=1"
+if /I "%FREEOS_DEV_BUILD%"=="1" set "ORG_DEV_OK=1"
+if /I "%FREEOS_DEV_BUILD%"=="true" set "ORG_DEV_OK=1"
+if defined ORG_DEV_OK if /I "%FREEOS_ORG_DEV_BOOTSTRAP%"=="1" set "ORG_LOCAL_TEST=1"
+if defined ORG_DEV_OK if /I "%FREEOS_ORG_DEV_BOOTSTRAP%"=="true" set "ORG_LOCAL_TEST=1"
+if defined ORG_DEV_OK if /I "%FREEOS_ORG_LOCAL_TEST%"=="1" set "ORG_LOCAL_TEST=1"
+if defined ORG_DEV_OK if /I "%FREEOS_ORG_LOCAL_TEST%"=="true" set "ORG_LOCAL_TEST=1"
 if defined ORG_LOCAL_TEST (
   set "FREEOS_ORG_LOCAL_TEST=1"
 ) else (
   set "FREEOS_ORG_LOCAL_TEST="
+  set "FREEOS_ORG_DEV_BOOTSTRAP="
 )
 if not defined CORS_ORIGIN set "CORS_ORIGIN=http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:18900,http://localhost:18900"
 cd /d "%APP%"
diff --git a/desktop/src/build/windows/nsis/start-sidecar.ps1 b/desktop/src/build/windows/nsis/start-sidecar.ps1
index 6c971d7b..9a962c97 100644
--- a/desktop/src/build/windows/nsis/start-sidecar.ps1
+++ b/desktop/src/build/windows/nsis/start-sidecar.ps1
@@ -252,12 +252,13 @@ $env:FREEOS_HOME = $freeosHome
 $env:OCTOP_HOME = $freeosHome
 $env:FREEOS_ORG_SIDECAR_PORT = '3780'
 $env:FREEOS_ORG_INTEGRATED = '1'
-# Demo accounts (demo@demo.com) only when an operator opts in. Release launches
-# leave FREEOS_ORG_LOCAL_TEST unset so the sidecar does not seed or rotate them.
-if ($env:FREEOS_ORG_DEV_BOOTSTRAP -match '^(1|true|yes|on)$') {
+# Release builds ignore inherited demo-seed switches. They are honoured only
+# when FREEOS_DEV_BUILD is explicitly set.
+if ($env:FREEOS_DEV_BUILD -match '^(1|true|yes|on)$' -and ($env:FREEOS_ORG_DEV_BOOTSTRAP -match '^(1|true|yes|on)$' -or $env:FREEOS_ORG_LOCAL_TEST -match '^(1|true|yes|on)$')) {
     $env:FREEOS_ORG_LOCAL_TEST = '1'
 } else {
     Remove-Item Env:\FREEOS_ORG_LOCAL_TEST -ErrorAction SilentlyContinue
+    Remove-Item Env:\FREEOS_ORG_DEV_BOOTSTRAP -ErrorAction SilentlyContinue
 }
 $compiled = Join-Path $app 'backend-dist\server.js'
 if (Test-Path -LiteralPath $compiled) {
diff --git a/desktop/src/process_sidecar.go b/desktop/src/process_sidecar.go
index b0f4ec5c..4cedeaa2 100644
--- a/desktop/src/process_sidecar.go
+++ b/desktop/src/process_sidecar.go
@@ -318,8 +318,8 @@ func sidecarLaunchEnv(home string, dashboardPort int) (map[string]string, error)
 		"OCTOP_HOME":                home,
 		"FREEOS_ORG_SIDECAR_PORT":   strconv.Itoa(defaultSidecarPort),
 		// Integrated mode is the real FreeOS organization bridge (distinct
-		// tenants, host identity). Demo accounts stay off unless a dev switch
-		// is already set in the parent environment.
+		// tenants, host identity). Release builds ignore inherited demo-seed
+		// switches; only FREEOS_DEV_BUILD honours them.
 		"FREEOS_ORG_INTEGRATED": "1",
 	}
 	if orgLocalTestRequested() {
@@ -328,7 +328,20 @@ func sidecarLaunchEnv(home string, dashboardPort int) (map[string]string, error)
 	return env, nil
 }
 
+func envTruthy(key string) bool {
+	switch strings.ToLower(strings.TrimSpace(os.Getenv(key))) {
+	case "1", "true", "yes", "on":
+		return true
+	default:
+		return false
+	}
+}
+
 func orgLocalTestRequested() bool {
+	// Release builds hard-ignore a parent FREEOS_ORG_LOCAL_TEST.
+	if !envTruthy("FREEOS_DEV_BUILD") {
+		return false
+	}
 	for _, key := range []string{"FREEOS_ORG_DEV_BOOTSTRAP", "FREEOS_ORG_LOCAL_TEST"} {
 		switch strings.ToLower(strings.TrimSpace(os.Getenv(key))) {
 		case "1", "true", "yes", "on":
diff --git a/desktop/src/process_sidecar_test.go b/desktop/src/process_sidecar_test.go
index b290ee8e..95ddc633 100644
--- a/desktop/src/process_sidecar_test.go
+++ b/desktop/src/process_sidecar_test.go
@@ -67,6 +67,7 @@ func TestSidecarLaunchEnvPointsAtHomeDatabase(t *testing.T) {
 }
 
 func TestSidecarLaunchEnvLocalTestRequiresDevSwitch(t *testing.T) {
+	t.Setenv("FREEOS_DEV_BUILD", "1")
 	t.Setenv("FREEOS_ORG_DEV_BOOTSTRAP", "1")
 	t.Setenv("FREEOS_ORG_LOCAL_TEST", "")
 	env, err := sidecarLaunchEnv(t.TempDir(), 8088)
@@ -78,6 +79,19 @@ func TestSidecarLaunchEnvLocalTestRequiresDevSwitch(t *testing.T) {
 	}
 }
 
+func TestSidecarLaunchEnvIgnoresInheritedLocalTest(t *testing.T) {
+	t.Setenv("FREEOS_DEV_BUILD", "")
+	t.Setenv("FREEOS_ORG_DEV_BOOTSTRAP", "1")
+	t.Setenv("FREEOS_ORG_LOCAL_TEST", "1")
+	env, err := sidecarLaunchEnv(t.TempDir(), 8088)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if value, ok := env["FREEOS_ORG_LOCAL_TEST"]; ok && value != "" {
+		t.Fatalf("release launch kept FREEOS_ORG_LOCAL_TEST=%q", value)
+	}
+}
+
 func TestSidecarReadyRequiresFrontendBuild(t *testing.T) {
 	root := t.TempDir()
 	t.Setenv("FREEOS_HOME", root)
diff --git a/src/octop/modules/org_os/sidecar_launch.py b/src/octop/modules/org_os/sidecar_launch.py
index 9dafa0bd..2c6a59ae 100644
--- a/src/octop/modules/org_os/sidecar_launch.py
+++ b/src/octop/modules/org_os/sidecar_launch.py
@@ -359,13 +359,16 @@ def apply_org_launch_flags(env: dict[str, str]) -> None:
     """Mark the sidecar as the FreeOS organization module, without demo users.
 
     ``FREEOS_ORG_INTEGRATED`` is required for a real install: registration
-    creates a distinct tenant instead of the shared demo tenant, and the host
-    accepts organization identity. ``FREEOS_ORG_LOCAL_TEST`` seeds
-    ``demo@demo.com`` and is set only when ``FREEOS_ORG_DEV_BOOTSTRAP`` or
-    ``FREEOS_ORG_LOCAL_TEST`` is already explicitly on. Release launches leave
-    it unset.
+    creates a distinct tenant instead of a shared tenant, and the host accepts
+    organization identity. Release builds hard-ignore inherited
+    ``FREEOS_ORG_LOCAL_TEST`` and ``FREEOS_ORG_DEV_BOOTSTRAP``. Those switches
+    are honoured only when ``FREEOS_DEV_BUILD`` is explicitly set.
     """
     env["FREEOS_ORG_INTEGRATED"] = "1"
+    if not _env_truthy(env, "FREEOS_DEV_BUILD"):
+        env.pop("FREEOS_ORG_LOCAL_TEST", None)
+        env.pop("FREEOS_ORG_DEV_BOOTSTRAP", None)
+        return
     if _env_truthy(env, "FREEOS_ORG_DEV_BOOTSTRAP") or _env_truthy(env, "FREEOS_ORG_LOCAL_TEST"):
         env["FREEOS_ORG_LOCAL_TEST"] = "1"
         return
diff --git a/tests/unit/test_sidecar_launch.py b/tests/unit/test_sidecar_launch.py
index da533ea7..20c359d0 100644
--- a/tests/unit/test_sidecar_launch.py
+++ b/tests/unit/test_sidecar_launch.py
@@ -313,11 +313,23 @@ def test_sidecar_launch_env_local_test_requires_explicit_switch(
 ) -> None:
     monkeypatch.delenv("FREEOS_ORG_LOCAL_TEST", raising=False)
     monkeypatch.setenv("FREEOS_ORG_DEV_BOOTSTRAP", "1")
+    monkeypatch.setenv("FREEOS_DEV_BUILD", "1")
     env = sidecar_launch_env(tmp_path, dashboard_port=8099)
     assert env["FREEOS_ORG_INTEGRATED"] == "1"
     assert env["FREEOS_ORG_LOCAL_TEST"] == "1"
 
 
+def test_sidecar_launch_env_ignores_inherited_local_test(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    monkeypatch.setenv("FREEOS_ORG_LOCAL_TEST", "1")
+    monkeypatch.setenv("FREEOS_ORG_DEV_BOOTSTRAP", "true")
+    monkeypatch.delenv("FREEOS_DEV_BUILD", raising=False)
+    env = sidecar_launch_env(tmp_path, dashboard_port=8099)
+    assert "FREEOS_ORG_LOCAL_TEST" not in env
+    assert "FREEOS_ORG_DEV_BOOTSTRAP" not in env
+
+
 def test_sidecar_launch_env_merges_existing_cors(
     tmp_path: Path, monkeypatch: pytest.MonkeyPatch
 ) -> None:

From afde946b1e3b8ac6621e32c7652b495ae53b3691 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:18:09 +0000
Subject: [PATCH 32/39] H bind loopback: default organization and Docker
 listeners to 127.0.0.1

Inherited HOST is ignored. LAN or NAS exposure requires FREEOS_ORG_BIND_HOST or OCTOP_BIND_HOST. Compose keeps a container-internal 0.0.0.0 only where the published port defaults to 127.0.0.1; host-network mobile stays on loopback.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 desktop/portable/bundle-org-sidecar.sh        |  4 ++++
 .../src/build/windows/nsis/start-sidecar.ps1  |  2 ++
 desktop/src/process_sidecar.go                |  7 +++++-
 docker/docker-compose.mobile.yml              |  4 +++-
 docker/docker-compose.yml                     |  5 +++-
 docker/docker-entrypoint.sh                   |  8 +++++--
 modules/openxyos/backend/listen-host.ts       | 16 +++++++++++++
 modules/openxyos/backend/server.ts            |  3 ++-
 modules/openxyos/deploy/docker-compose.yml    |  6 ++++-
 modules/openxyos/package.json                 |  3 ++-
 modules/openxyos/scripts/test-listen-host.ts  |  8 +++++++
 modules/openxyos/vite.config.ts               |  3 ++-
 src/octop/modules/org_os/sidecar_launch.py    |  4 +++-
 tests/unit/test_bind_loopback.py              | 23 +++++++++++++++++++
 tests/unit/test_sidecar_launch.py             | 12 ++++++++++
 15 files changed, 98 insertions(+), 10 deletions(-)
 create mode 100644 modules/openxyos/backend/listen-host.ts
 create mode 100644 modules/openxyos/scripts/test-listen-host.ts
 create mode 100644 tests/unit/test_bind_loopback.py

diff --git a/desktop/portable/bundle-org-sidecar.sh b/desktop/portable/bundle-org-sidecar.sh
index 4e18b262..23dff8d6 100755
--- a/desktop/portable/bundle-org-sidecar.sh
+++ b/desktop/portable/bundle-org-sidecar.sh
@@ -222,6 +222,9 @@ fi
 export NODE_ENV=production
 export PORT
 export HOST=127.0.0.1
+if [ -n "${FREEOS_ORG_BIND_HOST:-}" ]; then
+  export HOST="${FREEOS_ORG_BIND_HOST}"
+fi
 export DB_DIALECT=sqlite
 export DATABASE_PATH="${DATA_DIR}/xiongyuan.db"
 export AIR_GAP_MODE=true
@@ -280,6 +283,7 @@ if not defined COOKIE_SECRET (
 set "NODE_ENV=production"
 set "PORT=%FREEOS_ORG_SIDECAR_PORT%"
 set "HOST=127.0.0.1"
+if defined FREEOS_ORG_BIND_HOST set "HOST=%FREEOS_ORG_BIND_HOST%"
 set "DB_DIALECT=sqlite"
 set "DATABASE_PATH=%FREEOS_ORG_DATA%\xiongyuan.db"
 set "AIR_GAP_MODE=true"
diff --git a/desktop/src/build/windows/nsis/start-sidecar.ps1 b/desktop/src/build/windows/nsis/start-sidecar.ps1
index 9a962c97..3f4304d5 100644
--- a/desktop/src/build/windows/nsis/start-sidecar.ps1
+++ b/desktop/src/build/windows/nsis/start-sidecar.ps1
@@ -236,6 +236,8 @@ if (-not $ingest) { $ingest = [guid]::NewGuid().ToString('N') + [guid]::NewGuid(
 $env:NODE_ENV = 'production'
 $env:PORT = '3780'
 $env:HOST = '127.0.0.1'
+# Inherited HOST is ignored. FREEOS_ORG_BIND_HOST is the LAN/NAS opt-in.
+if ($env:FREEOS_ORG_BIND_HOST) { $env:HOST = $env:FREEOS_ORG_BIND_HOST }
 $env:DB_DIALECT = 'sqlite'
 $env:DATABASE_PATH = Join-Path $data 'xiongyuan.db'
 $env:AIR_GAP_MODE = 'true'
diff --git a/desktop/src/process_sidecar.go b/desktop/src/process_sidecar.go
index 4cedeaa2..e30c0139 100644
--- a/desktop/src/process_sidecar.go
+++ b/desktop/src/process_sidecar.go
@@ -301,10 +301,15 @@ func sidecarLaunchEnv(home string, dashboardPort int) (map[string]string, error)
 		"http://127.0.0.1:%d,http://localhost:%d,http://127.0.0.1:18900,http://localhost:18900,http://127.0.0.1:8088,http://localhost:8088,http://127.0.0.1:%d,http://localhost:%d,http://[::1]:%d",
 		dashboardPort, dashboardPort, defaultSidecarPort, defaultSidecarPort, defaultSidecarPort,
 	)
+	bindHost := "127.0.0.1"
+	if explicit := strings.TrimSpace(os.Getenv("FREEOS_ORG_BIND_HOST")); explicit != "" {
+		// Explicit opt-in for LAN/NAS. Inherited HOST is ignored.
+		bindHost = explicit
+	}
 	env := map[string]string{
 		"NODE_ENV":                  "production",
 		"PORT":                      strconv.Itoa(defaultSidecarPort),
-		"HOST":                      "127.0.0.1",
+		"HOST":                      bindHost,
 		"DB_DIALECT":                "sqlite",
 		"DATABASE_PATH":             filepath.Join(sidecarDataDir(home), "xiongyuan.db"),
 		"AIR_GAP_MODE":              "true",
diff --git a/docker/docker-compose.mobile.yml b/docker/docker-compose.mobile.yml
index 7c38a0ba..a74972eb 100644
--- a/docker/docker-compose.mobile.yml
+++ b/docker/docker-compose.mobile.yml
@@ -35,7 +35,9 @@ services:
       - ${OCTOP_PLATFORM_TOOLS:-../.tools/platform-tools}:/opt/android-sdk/platform-tools:ro
     environment:
       - HOME=/data
-      - OCTOP_BIND_HOST=0.0.0.0
+      # network_mode: host has no port mapping, so this bind is the host bind.
+      # Stay on loopback unless the operator sets OCTOP_BIND_HOST=0.0.0.0.
+      - OCTOP_BIND_HOST=${OCTOP_BIND_HOST:-127.0.0.1}
       - OCTOP_PORT=${OCTOP_PORT:-8088}
       - OCTOP_LOG_LEVEL=${OCTOP_LOG_LEVEL:-info}
       - OCTOP_DEFAULT_PASSWORD=${OCTOP_DEFAULT_PASSWORD:-}
diff --git a/docker/docker-compose.yml b/docker/docker-compose.yml
index 26236f8a..2dd475ab 100644
--- a/docker/docker-compose.yml
+++ b/docker/docker-compose.yml
@@ -34,7 +34,10 @@ services:
     container_name: octop
     restart: unless-stopped
     ports:
-      - "${OCTOP_PORT:-8088}:${OCTOP_PORT:-8088}"
+      # Host side is loopback. Set OCTOP_PUBLISH_HOST=0.0.0.0 to opt into LAN.
+      # OCTOP_BIND_HOST=0.0.0.0 below is container-internal so the published
+      # port can reach the process; it does not open the host LAN by itself.
+      - "${OCTOP_PUBLISH_HOST:-127.0.0.1}:${OCTOP_PORT:-8088}:${OCTOP_PORT:-8088}"
     volumes:
       - ${OCTOP_DATA:-~/.freeos}:/data/.freeos
     environment:
diff --git a/docker/docker-entrypoint.sh b/docker/docker-entrypoint.sh
index 6b10405d..416311f7 100644
--- a/docker/docker-entrypoint.sh
+++ b/docker/docker-entrypoint.sh
@@ -103,8 +103,12 @@ EOF
 fi
 
 if [ $# -eq 0 ]; then
-    echo "[entrypoint] 正在启动 FreeOS，端口 $PORT..."
-    exec octop run --host 0.0.0.0 --port "$PORT"
+    # Loopback unless OCTOP_BIND_HOST is set. Compose sets 0.0.0.0 inside the
+    # container only together with a 127.0.0.1 published port. A bare docker
+    # run stays on loopback. Host-network mode must not default to 0.0.0.0.
+    BIND_HOST="${OCTOP_BIND_HOST:-127.0.0.1}"
+    echo "[entrypoint] 正在启动 FreeOS，端口 $PORT，绑定 $BIND_HOST..."
+    exec octop run --host "$BIND_HOST" --port "$PORT"
 fi
 
 if [ "$1" = "octop" ]; then
diff --git a/modules/openxyos/backend/listen-host.ts b/modules/openxyos/backend/listen-host.ts
new file mode 100644
index 00000000..65e07be4
--- /dev/null
+++ b/modules/openxyos/backend/listen-host.ts
@@ -0,0 +1,16 @@
+/**
+ * Listen address for the organization process.
+ *
+ * The default is loopback. Inherited HOST is ignored so a parent 0.0.0.0
+ * cannot expose the process. LAN, NAS, and Docker exposure require the
+ * explicit FREEOS_ORG_BIND_HOST opt-in.
+ *
+ * Docker compose publishes 127.0.0.1:host:container and may set
+ * FREEOS_ORG_BIND_HOST=0.0.0.0 so the process is reachable from the container
+ * proxy without opening the host LAN. Host-network compose has no published
+ * port, so the process itself stays on 127.0.0.1 unless the operator opts in.
+ */
+export function resolveListenHost(env: NodeJS.ProcessEnv = process.env): string {
+  const explicit = (env.FREEOS_ORG_BIND_HOST || "").trim();
+  return explicit || "127.0.0.1";
+}
diff --git a/modules/openxyos/backend/server.ts b/modules/openxyos/backend/server.ts
index 73e8f75c..10ee9ec4 100644
--- a/modules/openxyos/backend/server.ts
+++ b/modules/openxyos/backend/server.ts
@@ -8,6 +8,7 @@ import path from "path";
 import fs from "fs";
 import { createServer } from "http";
 import { initDatabase } from "./db";
+import { resolveListenHost } from "./listen-host";
 import { authRoutes } from "./routes/auth";
 import { employeeRoutes } from "./routes/employees";
 import { taskRoutes } from "./routes/tasks";
@@ -282,7 +283,7 @@ app.get("/admin/database", (req, res) => {
 
   setupWebSocket(server);
 
-  server.listen(PORT, process.env.HOST || '127.0.0.1', () => {
+  server.listen(PORT, resolveListenHost(), () => {
     console.log(`\n  🌐 openXYOS Community — Human + Agent OS`);
     console.log(`  ─────────────────────────────────────`);
     console.log(`  Server:     http://localhost:${PORT}`);
diff --git a/modules/openxyos/deploy/docker-compose.yml b/modules/openxyos/deploy/docker-compose.yml
index 053e827f..b85a1247 100644
--- a/modules/openxyos/deploy/docker-compose.yml
+++ b/modules/openxyos/deploy/docker-compose.yml
@@ -13,8 +13,12 @@ services:
       DEPLOY_MODE: community
       PORT: "3000"
       SEED_DEMO_DATA: "false"
+      # Container-internal only. The published port below is loopback, so this
+      # does not expose the process on the host LAN. Set the host mapping to
+      # 0.0.0.0:3000:3000 only as an explicit opt-in.
+      FREEOS_ORG_BIND_HOST: "0.0.0.0"
     ports:
-      - "3000:3000"
+      - "127.0.0.1:3000:3000"
     volumes:
       - xyos_data:/app/backend/data
       - xyos_uploads:/app/uploads
diff --git a/modules/openxyos/package.json b/modules/openxyos/package.json
index da7bd4d2..7a43451b 100644
--- a/modules/openxyos/package.json
+++ b/modules/openxyos/package.json
@@ -11,10 +11,11 @@
     "postinstall": "node scripts/patch-express-types.cjs",
     "typecheck": "tsc --noEmit",
     "lint": "eslint . --ext .ts,.tsx --max-warnings 0",
-    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:f10-upgrade-cleanup && npm run test:plugin-install && npm run test:f2-bootstrap && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
+    "test": "npm run test:db-persistence && npm run test:no-release-bootstrap && npm run test:f10-upgrade-cleanup && npm run test:plugin-install && npm run test:f2-bootstrap && npm run test:listen-host && npm run test:runtime-config && npm run test:cors-origins && npm run test:embed-trap && npm run test:hero-mascot && npm run test:r0-access-control && npm run test:module-settings && npm run test:llm-onboarding && npm run test:agent-studio && npm run test:freeos-ingest && npm run test:file-security && npm run test:doc-parser && npm run test:download-token && npm run test:ws-ticket && npm run test:auth-provider && npm run test:pep && npm run test:audit-bundle && npm run test:tool-gateway && npm run test:v100",
     "test:f10-upgrade-cleanup": "tsx scripts/test-f10-upgrade-cleanup.ts",
     "test:plugin-install": "tsx scripts/test-plugin-install.ts",
     "test:f2-bootstrap": "tsx scripts/test-f2-bootstrap.ts",
+    "test:listen-host": "tsx scripts/test-listen-host.ts",
     "test:no-release-bootstrap": "tsx scripts/test-no-release-bootstrap.ts",
     "test:db-persistence": "tsx scripts/test-db-persistence.ts",
     "test:runtime-config": "tsx scripts/test-runtime-config.ts",
diff --git a/modules/openxyos/scripts/test-listen-host.ts b/modules/openxyos/scripts/test-listen-host.ts
new file mode 100644
index 00000000..babbf82f
--- /dev/null
+++ b/modules/openxyos/scripts/test-listen-host.ts
@@ -0,0 +1,8 @@
+import assert from "node:assert/strict";
+import { resolveListenHost } from "../backend/listen-host";
+
+assert.equal(resolveListenHost({}), "127.0.0.1");
+assert.equal(resolveListenHost({ HOST: "0.0.0.0" }), "127.0.0.1");
+assert.equal(resolveListenHost({ FREEOS_ORG_BIND_HOST: "0.0.0.0" }), "0.0.0.0");
+assert.equal(resolveListenHost({ FREEOS_ORG_BIND_HOST: "  " }), "127.0.0.1");
+console.log("listen host ok");
diff --git a/modules/openxyos/vite.config.ts b/modules/openxyos/vite.config.ts
index fb658bd0..959f5a00 100644
--- a/modules/openxyos/vite.config.ts
+++ b/modules/openxyos/vite.config.ts
@@ -44,7 +44,8 @@ export default defineConfig(({ mode }) => {
       alias: { "@": path.resolve(__dirname, "./frontend/src") },
     },
     server: {
-      host: "0.0.0.0",
+      // Dev server stays on loopback. Set FREEOS_ORG_BIND_HOST to opt into LAN.
+      host: process.env.FREEOS_ORG_BIND_HOST || "127.0.0.1",
       port: 5174,
       proxy: {
         "/api": "http://localhost:3000",
diff --git a/src/octop/modules/org_os/sidecar_launch.py b/src/octop/modules/org_os/sidecar_launch.py
index 2c6a59ae..a7c48dda 100644
--- a/src/octop/modules/org_os/sidecar_launch.py
+++ b/src/octop/modules/org_os/sidecar_launch.py
@@ -397,11 +397,13 @@ def sidecar_launch_env(home: Path, *, dashboard_port: int | None = None) -> dict
         if configured
         else origin
     )
+    # Inherited HOST is not an opt-in. FREEOS_ORG_BIND_HOST is.
+    bind_host = (env.get("FREEOS_ORG_BIND_HOST") or "127.0.0.1").strip() or "127.0.0.1"
     env.update(
         {
             "NODE_ENV": "production",
             "PORT": port,
-            "HOST": "127.0.0.1",
+            "HOST": bind_host,
             "DB_DIALECT": "sqlite",
             "DATABASE_PATH": str(sidecar_data_dir(home) / "xiongyuan.db"),
             "AIR_GAP_MODE": "true",
diff --git a/tests/unit/test_bind_loopback.py b/tests/unit/test_bind_loopback.py
new file mode 100644
index 00000000..bdb9ea3f
--- /dev/null
+++ b/tests/unit/test_bind_loopback.py
@@ -0,0 +1,23 @@
+"""Organization and Docker binds stay on loopback unless explicitly opted in."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+REPO = Path(__file__).resolve().parents[2]
+
+
+def test_compose_publishes_loopback_and_documents_container_bind() -> None:
+    compose = (REPO / "docker" / "docker-compose.yml").read_text(encoding="utf-8")
+    assert "127.0.0.1}:${OCTOP_PORT:-8088}:${OCTOP_PORT:-8088}" in compose
+    assert "OCTOP_BIND_HOST=0.0.0.0" in compose
+    assert "container-internal" in compose
+    mobile = (REPO / "docker" / "docker-compose.mobile.yml").read_text(encoding="utf-8")
+    assert "OCTOP_BIND_HOST=${OCTOP_BIND_HOST:-127.0.0.1}" in mobile
+    assert "network_mode: host" in mobile
+    entry = (REPO / "docker" / "docker-entrypoint.sh").read_text(encoding="utf-8")
+    assert 'BIND_HOST="${OCTOP_BIND_HOST:-127.0.0.1}"' in entry
+    assert "--host 0.0.0.0" not in entry
+    org = (REPO / "modules" / "openxyos" / "deploy" / "docker-compose.yml").read_text(encoding="utf-8")
+    assert "127.0.0.1:3000:3000" in org
+    assert 'FREEOS_ORG_BIND_HOST: "0.0.0.0"' in org
diff --git a/tests/unit/test_sidecar_launch.py b/tests/unit/test_sidecar_launch.py
index 20c359d0..0e28ed24 100644
--- a/tests/unit/test_sidecar_launch.py
+++ b/tests/unit/test_sidecar_launch.py
@@ -319,6 +319,18 @@ def test_sidecar_launch_env_local_test_requires_explicit_switch(
     assert env["FREEOS_ORG_LOCAL_TEST"] == "1"
 
 
+def test_sidecar_launch_env_ignores_inherited_bind_all(
+    tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+) -> None:
+    monkeypatch.setenv("HOST", "0.0.0.0")
+    monkeypatch.delenv("FREEOS_ORG_BIND_HOST", raising=False)
+    env = sidecar_launch_env(tmp_path, dashboard_port=8099)
+    assert env["HOST"] == "127.0.0.1"
+    monkeypatch.setenv("FREEOS_ORG_BIND_HOST", "0.0.0.0")
+    exposed = sidecar_launch_env(tmp_path, dashboard_port=8099)
+    assert exposed["HOST"] == "0.0.0.0"
+
+
 def test_sidecar_launch_env_ignores_inherited_local_test(
     tmp_path: Path, monkeypatch: pytest.MonkeyPatch
 ) -> None:

From 8227926395e9f6b8b59d18d0112ccd6f41a3eade Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:18:09 +0000
Subject: [PATCH 33/39] I ui tenant: never prefer demo or seed tenants

resolveUiTenantId follows the logged-in non-seed user. A later demo login and the openxyos-local slug no longer win over that user's own tenant.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 .../openxyos/backend/routes/freeos-bridge.ts  | 43 +++++++++++--------
 .../openxyos/scripts/test-freeos-ingest.ts    | 32 +++++++++-----
 2 files changed, 46 insertions(+), 29 deletions(-)

diff --git a/modules/openxyos/backend/routes/freeos-bridge.ts b/modules/openxyos/backend/routes/freeos-bridge.ts
index f468eeaf..16c52c86 100644
--- a/modules/openxyos/backend/routes/freeos-bridge.ts
+++ b/modules/openxyos/backend/routes/freeos-bridge.ts
@@ -50,38 +50,43 @@ function tenantExists(id: number): boolean {
   return Boolean(dbGet("SELECT id FROM tenants WHERE id = ?", [id]));
 }
 
-/** Tenant the embedded / local login actually uses — never assume id=1. */
+const SEED_EMAILS = "('demo@demo.com', 'user@demo.com')";
+const SEED_SLUGS = "('openxyos-demo', 'openxyos-local')";
+
+/** Tenant the signed-in operator owns. Demo and seed tenants are never preferred. */
 export function resolveUiTenantId(): number {
   const recent = dbGet(
-    `SELECT tenant_id FROM users
-     WHERE last_login IS NOT NULL
-     ORDER BY datetime(last_login) DESC, id DESC
+    `SELECT u.tenant_id AS tenant_id
+     FROM users u
+     LEFT JOIN tenants t ON t.id = u.tenant_id
+     WHERE u.last_login IS NOT NULL
+       AND lower(u.email) NOT IN ${SEED_EMAILS}
+       AND COALESCE(t.slug, '') NOT IN ${SEED_SLUGS}
+     ORDER BY datetime(u.last_login) DESC, u.id DESC
      LIMIT 1`,
   ) as { tenant_id?: number } | undefined;
   const recentId = Number(recent?.tenant_id);
   if (tenantExists(recentId)) return recentId;
 
-  const demo = dbGet(
-    `SELECT tenant_id FROM users
-     WHERE email IN ('demo@demo.com', 'user@demo.com')
-     ORDER BY CASE email WHEN 'demo@demo.com' THEN 0 ELSE 1 END
+  const owned = dbGet(
+    `SELECT u.tenant_id AS tenant_id
+     FROM users u
+     LEFT JOIN tenants t ON t.id = u.tenant_id
+     WHERE lower(u.email) NOT IN ${SEED_EMAILS}
+       AND COALESCE(t.slug, '') NOT IN ${SEED_SLUGS}
+     ORDER BY u.id ASC
      LIMIT 1`,
   ) as { tenant_id?: number } | undefined;
-  const demoId = Number(demo?.tenant_id);
-  if (tenantExists(demoId)) return demoId;
+  const ownedId = Number(owned?.tenant_id);
+  if (tenantExists(ownedId)) return ownedId;
 
-  const local = dbGet(
+  const first = dbGet(
     `SELECT id FROM tenants
-     WHERE slug IN ('openxyos-local', 'openxyos-demo')
-       AND status IN ('active', 'trial')
-     ORDER BY id DESC
+     WHERE COALESCE(slug, '') NOT IN ${SEED_SLUGS}
+     ORDER BY id
      LIMIT 1`,
   ) as { id?: number } | undefined;
-  const localId = Number(local?.id);
-  if (tenantExists(localId)) return localId;
-
-  const first = dbGet("SELECT id FROM tenants ORDER BY id LIMIT 1") as { id?: number } | undefined;
-  return Number(first?.id) || 1;
+  return Number(first?.id) || 0;
 }
 
 export function resolveIngestTenantIds(requested: unknown): { primary: number; mirror: number[] } {
diff --git a/modules/openxyos/scripts/test-freeos-ingest.ts b/modules/openxyos/scripts/test-freeos-ingest.ts
index 91fd6973..d489174a 100644
--- a/modules/openxyos/scripts/test-freeos-ingest.ts
+++ b/modules/openxyos/scripts/test-freeos-ingest.ts
@@ -32,6 +32,9 @@ async function main() {
     "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (2, ?, ?, 'active', 'community')",
     ["openXYOS 本地租户", "openxyos-local"],
   );
+  dbRun(
+    "INSERT OR IGNORE INTO tenants (id, name, slug, status, plan) VALUES (3, 'Acme', 'acme', 'active', 'community')",
+  );
   dbRun(
     "INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, 'super_admin', 1)",
     ["admin@example.com", "unused", "超级管理员"],
@@ -40,14 +43,19 @@ async function main() {
     "INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, 'admin', 2)",
     ["demo@demo.com", "unused", "管理员"],
   ).lastInsertRowid);
-  dbRun("UPDATE users SET last_login = CURRENT_TIMESTAMP WHERE id = ?", [demoId]);
+  const ownerId = Number(dbRun(
+    "INSERT INTO users (email, password_hash, nickname, role, tenant_id) VALUES (?, ?, ?, 'admin', 3)",
+    ["owner@example.com", "unused", "Owner"],
+  ).lastInsertRowid);
+  dbRun("UPDATE users SET last_login = '2020-01-01 00:00:00' WHERE id = ?", [ownerId]);
+  dbRun("UPDATE users SET last_login = '2099-01-01 00:00:00' WHERE id = ?", [demoId]);
 
   const token = signToken({
-    id: demoId,
-    email: "demo@demo.com",
-    nickname: "管理员",
+    id: ownerId,
+    email: "owner@example.com",
+    nickname: "Owner",
     role: "admin",
-    tenant_id: 2,
+    tenant_id: 3,
   });
 
   const app = express();
@@ -84,7 +92,7 @@ async function main() {
     const health = await fetch(`${baseUrl}/api/freeos/health`);
     assert.equal(health.status, 200);
     const healthBody = await health.json() as { data: { ui_tenant_id: number } };
-    assert.equal(healthBody.data.ui_tenant_id, 2);
+    assert.equal(healthBody.data.ui_tenant_id, 3);
 
     const ingested = await ingest({
       tenant_id: 1,
@@ -118,7 +126,7 @@ async function main() {
       data: { tenant_id: number; also_tenants: number[]; landed: Record<string, { created: number }> };
     };
     assert.equal(ingestBody.success, true);
-    assert.equal(ingestBody.data.tenant_id, 2);
+    assert.equal(ingestBody.data.tenant_id, 3);
     assert.deepEqual(ingestBody.data.also_tenants, [1]);
     assert.equal(ingestBody.data.landed.employees.created, 2);
     assert.equal(ingestBody.data.landed.talent.created, 2);
@@ -131,7 +139,7 @@ async function main() {
     assert.deepEqual(names, ["Ops Coordinator", "Policy Analyst"]);
     assert(employeeBody.data.every((row) => row.employment_category === "internal"));
     assert(employeeBody.data.every((row) => row.status === "active"));
-    assert(employeeBody.data.every((row) => row.tenant_id === 2));
+    assert(employeeBody.data.every((row) => row.tenant_id === 3));
 
     const talent = await asDemo("/api/talent");
     assert.equal(talent.status, 200);
@@ -155,10 +163,14 @@ async function main() {
       "SELECT name FROM employees WHERE tenant_id = 1 ORDER BY name",
     ) as Array<{ name: string }>;
     assert.deepEqual(tenant1Employees.map((row) => row.name), ["Ops Coordinator", "Policy Analyst"]);
-    const tenant2Count = dbGet(
+    const tenant3Count = dbGet(
+      "SELECT COUNT(*) as c FROM employees WHERE tenant_id = 3",
+    ) as { c: number };
+    assert.equal(Number(tenant3Count.c), 2);
+    const seedTenantCount = dbGet(
       "SELECT COUNT(*) as c FROM employees WHERE tenant_id = 2",
     ) as { c: number };
-    assert.equal(Number(tenant2Count.c), 2);
+    assert.equal(Number(seedTenantCount.c), 0);
 
     console.log("freeos ingest writes to the active UI tenant and list APIs see the rows");
   } finally {

From d4701a5ff8389a50211fc82fc962b621c6c43a4a Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:19:20 +0000
Subject: [PATCH 34/39] J plugin price: hide paid plugins after cleanup until
 price is confirmed

The catalog list no longer returns a price, and the plugin center shows an amount only after the install API asks for confirmation. A migrated contract plugin stays out of the active list; uninstall goes through the HTTP route and leaves the row disabled.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 modules/openxyos/backend/routes/plugins.ts    |  6 ++-
 .../frontend/src/pages/SkillsPage.tsx         | 33 ++++++++++------
 .../scripts/test-f10-upgrade-cleanup.ts       | 38 +++++++++++++++++++
 3 files changed, 64 insertions(+), 13 deletions(-)

diff --git a/modules/openxyos/backend/routes/plugins.ts b/modules/openxyos/backend/routes/plugins.ts
index eb244689..aef366db 100644
--- a/modules/openxyos/backend/routes/plugins.ts
+++ b/modules/openxyos/backend/routes/plugins.ts
@@ -46,7 +46,11 @@ pluginRoutes.get("/", (req: AuthRequest, res) => {
     else if (sort === "newest") sql += " ORDER BY created_at DESC";
     else sql += " ORDER BY category, name";
 
-    res.json({ success: true, data: dbAll(sql, params) });
+    const rows = (dbAll(sql, params) as Array<Record<string, unknown>>).map((row) => {
+      const { price, ...rest } = row;
+      return { ...rest, paid: isPaidPrice(price) };
+    });
+    res.json({ success: true, data: rows });
   } catch (err: any) {
     res.status(500).json({ success: false, error: err.message });
   }
diff --git a/modules/openxyos/frontend/src/pages/SkillsPage.tsx b/modules/openxyos/frontend/src/pages/SkillsPage.tsx
index 2ca241af..19fcf3b8 100644
--- a/modules/openxyos/frontend/src/pages/SkillsPage.tsx
+++ b/modules/openxyos/frontend/src/pages/SkillsPage.tsx
@@ -537,26 +537,33 @@ function PluginCenter() {
 
   async function handleInstall(p: any) {
     if (installing.has(p.id)) return;
-
-    // 付费插件 → 弹出付费窗口
-    if (p.price !== "免费" && p.price !== "免费额度") {
-      setPayPlugin(p);
+    if (p.paid) {
+      const r = await authFetch(`/api/plugins/${p.id}/install`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({}),
+      });
+      const j = await r.json().catch(() => null);
+      if (r.status === 409 && j?.data?.price) {
+        setPayPlugin({ ...p, price: j.data.price });
+      }
       return;
     }
-
-    // 免费插件 → 直接安装
     await doInstall(p.id);
   }
 
-  async function doInstall(pluginId: number) {
+  async function doInstall(pluginId: number, body?: Record<string, unknown>) {
     setInstalling(prev => new Set(prev).add(pluginId));
     try {
-      const r = await authFetch(`/api/plugins/${pluginId}/install`, { method: "POST" });
+      const r = await authFetch(`/api/plugins/${pluginId}/install`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body || {}),
+      });
       if (r.ok) {
         const j = await r.json();
         if (j.success) {
           setInstalledIds(prev => new Set(prev).add(pluginId));
-          // 刷新安装数
           load();
         }
       }
@@ -570,8 +577,10 @@ function PluginCenter() {
 
   function handlePayConfirm() {
     if (!payPlugin) return;
-    alert(t("商业插件需通过正式采购或授权流程开通，当前演示站不会模拟支付或自动安装。", "Commercial plugins require formal procurement or authorization. This demo site does not simulate payment or auto-installation."));
+    const pluginId = payPlugin.id;
+    const price = payPlugin.price;
     setPayPlugin(null);
+    void doInstall(pluginId, { confirm_price: true, price });
   }
 
   const filtered = search ? plugins.filter((p: any) =>
@@ -616,7 +625,7 @@ function PluginCenter() {
           {filtered.map((p: any) => {
             const isInstalled = installedIds.has(p.id);
             const isInstalling = installing.has(p.id);
-            const isFree = p.price === "免费" || p.price === "免费额度" || p.price === "free" || p.price === "free tier";
+            const isFree = !p.paid;
 
             return (
             <div key={p.id} className="bg-bg-card border border-border rounded-xl p-4 hover:border-primary/30 hover:shadow-sm transition-all">
@@ -632,7 +641,7 @@ function PluginCenter() {
                 {isFree ? (
                   <span className="text-[10px] px-2 py-1 bg-green-500/10 text-green-500 rounded-full font-medium">{t("免费", "Free")}</span>
                 ) : (
-                  <span className="text-[10px] px-2 py-1 bg-amber-500/10 text-amber-500 rounded-full font-medium">{pluginPriceLabel(p.price, locale)}</span>
+                  <span className="text-[10px] px-2 py-1 bg-amber-500/10 text-amber-500 rounded-full font-medium">{t("需确认价格", "Confirm price")}</span>
                 )}
               </div>
               <p className="text-xs text-text-muted leading-relaxed mb-3 line-clamp-2">{p.description}</p>
diff --git a/modules/openxyos/scripts/test-f10-upgrade-cleanup.ts b/modules/openxyos/scripts/test-f10-upgrade-cleanup.ts
index c49a2979..1082e1b3 100644
--- a/modules/openxyos/scripts/test-f10-upgrade-cleanup.ts
+++ b/modules/openxyos/scripts/test-f10-upgrade-cleanup.ts
@@ -2,6 +2,8 @@ import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import type { AddressInfo } from "node:net";
+import express from "express";
 
 async function main() {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), "freeos-f10-"));
@@ -131,6 +133,42 @@ async function main() {
   assert.equal(dbGet("SELECT password_hash FROM users WHERE email = ?", ["owner@example.com"]).password_hash, after.owner);
   assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [seededPluginId]).status, "disabled");
   assert.equal(dbGet("SELECT learned_knowledge FROM reflections WHERE learned_knowledge LIKE '%operator rewrote%'").learned_knowledge, after.editedReflection);
+
+  dbRun("UPDATE tenants SET status = 'active' WHERE id = 1");
+  process.env.JWT_SECRET = "f10-plugin-list-secret-at-least-32-characters";
+  process.env.COOKIE_SECRET = "f10-plugin-list-cookie-secret-at-least-32-chars";
+  const { pluginRoutes } = await import("../backend/routes/plugins");
+  const { signToken } = await import("../backend/middleware");
+  const ownerRow = dbGet("SELECT id FROM users WHERE email = ?", ["owner@example.com"]) as { id: number };
+  const token = signToken({
+    id: ownerRow.id,
+    email: "owner@example.com",
+    nickname: "Owner",
+    role: "admin",
+    tenant_id: 1,
+  });
+  const app = express();
+  app.use(express.json());
+  app.use("/api/plugins", pluginRoutes);
+  const server = app.listen(0, "127.0.0.1");
+  await new Promise<void>((resolve) => server.once("listening", resolve));
+  const base = `http://127.0.0.1:${(server.address() as AddressInfo).port}`;
+  try {
+    const listed = await fetch(`${base}/api/plugins`, { headers: { Authorization: `Bearer ${token}` } });
+    const listedBody = await listed.json() as { data?: Array<{ name: string; status: string; paid?: boolean; price?: string }>; error?: string };
+    assert.equal(listed.status, 200, JSON.stringify(listedBody));
+    assert.equal(listedBody.data.some((row) => row.name === "AI合同智能解析" && row.status === "active"), false);
+    assert.equal(listedBody.data.some((row) => row.price), false);
+    const removed = await fetch(`${base}/api/plugins/${seededPluginId}/uninstall`, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${token}` },
+    });
+    assert.equal(removed.status, 200);
+    assert.equal(dbGet("SELECT status FROM plugins WHERE id = ?", [seededPluginId]).status, "disabled");
+    assert.ok(dbGet("SELECT id FROM plugins WHERE id = ?", [seededPluginId]));
+  } finally {
+    await new Promise<void>((resolve) => server.close(() => resolve()));
+  }
   console.log("f10 upgrade cleanup ok");
 }
 

From 4aed65cff49007d16210d9ca07b8ef422ae1947b Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:19:20 +0000
Subject: [PATCH 35/39] K security contact: replace the personal mailbox with
 the pending placeholder
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The vulnerability contact line is now 「漏洞接收邮箱：待董事长指定」 and does not name an inbox.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 SECURITY.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/SECURITY.md b/SECURITY.md
index de44f56b..62d2cc49 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -12,7 +12,7 @@
 **Please do not open a public GitHub issue for security vulnerabilities.**
 
 - **GitHub Security Advisory:** [Create advisory](https://github.com/XYAIStudio/FreeOS/security/advisories/new)
-- **Email:** jubaoliang@gmail.com
+- 漏洞接收邮箱：待董事长指定
 
 We aim to acknowledge reports within **3 business days** and provide a fix timeline within **7 business days** for confirmed issues.
 

From 54231f28fd07c1ff22e7d4438f841e9000affce9 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:24:00 +0000
Subject: [PATCH 36/39] F9 lint: format the new backup and bind-loopback tests

Ruff format --check failed CI on these two files.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 tests/unit/test_bind_loopback.py  |  4 +++-
 tests/unit/test_upgrade_backup.py | 22 ++++++++++++++--------
 2 files changed, 17 insertions(+), 9 deletions(-)

diff --git a/tests/unit/test_bind_loopback.py b/tests/unit/test_bind_loopback.py
index bdb9ea3f..73f30966 100644
--- a/tests/unit/test_bind_loopback.py
+++ b/tests/unit/test_bind_loopback.py
@@ -18,6 +18,8 @@ def test_compose_publishes_loopback_and_documents_container_bind() -> None:
     entry = (REPO / "docker" / "docker-entrypoint.sh").read_text(encoding="utf-8")
     assert 'BIND_HOST="${OCTOP_BIND_HOST:-127.0.0.1}"' in entry
     assert "--host 0.0.0.0" not in entry
-    org = (REPO / "modules" / "openxyos" / "deploy" / "docker-compose.yml").read_text(encoding="utf-8")
+    org = (REPO / "modules" / "openxyos" / "deploy" / "docker-compose.yml").read_text(
+        encoding="utf-8"
+    )
     assert "127.0.0.1:3000:3000" in org
     assert 'FREEOS_ORG_BIND_HOST: "0.0.0.0"' in org
diff --git a/tests/unit/test_upgrade_backup.py b/tests/unit/test_upgrade_backup.py
index c0c7083a..ead2a48f 100644
--- a/tests/unit/test_upgrade_backup.py
+++ b/tests/unit/test_upgrade_backup.py
@@ -39,12 +39,12 @@ def test_install_sh_backup_only_writes_archive_and_sha256(tmp_path: Path) -> Non
         "#!/bin/sh\n"
         "out=\n"
         "prev=\n"
-        "for arg in \"$@\"; do\n"
-        "  if [ \"$prev\" = \"-o\" ]; then out=$arg; fi\n"
+        'for arg in "$@"; do\n'
+        '  if [ "$prev" = "-o" ]; then out=$arg; fi\n'
         "  prev=$arg\n"
         "done\n"
-        "mkdir -p \"$(dirname \"$out\")\"\n"
-        "printf backup > \"$out\"\n",
+        'mkdir -p "$(dirname "$out")"\n'
+        'printf backup > "$out"\n',
         encoding="utf-8",
     )
     octop.chmod(0o755)
@@ -108,14 +108,20 @@ def test_install_sh_backup_failure_aborts(tmp_path: Path) -> None:
 
 
 def test_nsis_overwrite_backs_up_before_copying_files() -> None:
-    nsi = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "project.nsi").read_text(encoding="utf-8")
-    tools = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "wails_tools.nsh").read_text(encoding="utf-8")
+    nsi = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "project.nsi").read_text(
+        encoding="utf-8"
+    )
+    tools = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "wails_tools.nsh").read_text(
+        encoding="utf-8"
+    )
     backup = nsi.index("wails.backupBeforeOverwrite")
     files = nsi.index("wails.files", backup)
     assert backup < files
-    assert "Abort" in tools[tools.index("wails.backupBeforeOverwrite"):]
+    assert "Abort" in tools[tools.index("wails.backupBeforeOverwrite") :]
     assert "backup-before-overwrite.ps1" in tools
-    script = (REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "backup-before-overwrite.ps1").read_text(encoding="utf-8")
+    script = (
+        REPO / "desktop" / "src" / "build" / "windows" / "nsis" / "backup-before-overwrite.ps1"
+    ).read_text(encoding="utf-8")
     assert "--include-chats" in script
     assert "Upgrade aborted: backup failed" in script
 

From 1c5597c1aac079cf724a81750516c91c8ee0286a Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:44:04 +0000
Subject: [PATCH 37/39] fix test: custom agent create fake exposes
 agent_workspace

create() now resolves the workspace through agent_workspace before ensure_agent_workspace. The unit fake only stubbed the old method, so CI make test failed with AttributeError.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 tests/unit/agents/test_custom_agent_id.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/tests/unit/agents/test_custom_agent_id.py b/tests/unit/agents/test_custom_agent_id.py
index 8a60a8e0..1896f1ef 100644
--- a/tests/unit/agents/test_custom_agent_id.py
+++ b/tests/unit/agents/test_custom_agent_id.py
@@ -62,7 +62,12 @@ def ensure_workspace(agent_id: str):
         agent_repo=SimpleNamespace(get=repo_get),
         user_policy_repo=SimpleNamespace(get=lambda *args, **kwargs: None),
     )
-    mgr._paths = SimpleNamespace(ensure_agent_workspace=ensure_workspace)
+    # create() resolves the workspace through agent_workspace before ensure_agent_workspace.
+    mgr._paths = SimpleNamespace(
+        ensure_agent_workspace=ensure_workspace,
+        agent_workspace=ensure_workspace,
+        root="/tmp/freeos-home",
+    )
     mgr._lock = asyncio.Lock()
     mgr._assert_agent_name_available = lambda user_id, name: None  # type: ignore[method-assign]
     return mgr, WorkspaceReached

From dc04535b1e77d8496675a424daec08934b767d32 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 08:57:42 +0000
Subject: [PATCH 38/39] F9 tests: stub the desktop pre-upgrade backup by
 default

Portable upgrade tests embed a fake python. After the full backup became mandatory, those tests executed it and failed with exec format error. The default stub writes an archive; the backup-specific tests still replace it.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 desktop/src/download_test.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/desktop/src/download_test.go b/desktop/src/download_test.go
index a2c76106..f1151217 100644
--- a/desktop/src/download_test.go
+++ b/desktop/src/download_test.go
@@ -22,6 +22,11 @@ func TestMain(m *testing.M) {
 	if os.Getenv("OCTOP_DESKTOP_INSTALL_STAMP_FILE") == "" {
 		_ = os.Setenv("OCTOP_DESKTOP_INSTALL_STAMP_FILE", "")
 	}
+	// Upgrade tests ship a fake python, not a runnable interpreter. The real
+	// backup command is covered by the tests that replace this stub.
+	runPreUpgradeBackup = func(_, _, _, dest string) error {
+		return os.WriteFile(dest, []byte("backup"), 0o600)
+	}
 	os.Exit(m.Run())
 }
 

From df18457ccf1f970e5ca1889da44b921ab5228086 Mon Sep 17 00:00:00 2001
From: Cursor Agent <cursoragent@cursor.com>
Date: Thu, 29 Oct 2026 09:28:49 +0000
Subject: [PATCH 39/39] F9 tests: run install.sh backup behaviour only on POSIX

install.sh exits immediately when uname is not Linux or Darwin. The Windows CI runner was executing that path through Git bash and failing before the backup hook.

Co-authored-by: haoboy007-sudo <haoboy007-sudo@users.noreply.github.com>
---
 tests/unit/test_upgrade_backup.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tests/unit/test_upgrade_backup.py b/tests/unit/test_upgrade_backup.py
index ead2a48f..ac299921 100644
--- a/tests/unit/test_upgrade_backup.py
+++ b/tests/unit/test_upgrade_backup.py
@@ -2,9 +2,13 @@
 
 from __future__ import annotations
 
+import os
 from pathlib import Path
 
+import pytest
+
 REPO = Path(__file__).resolve().parents[2]
+posix_only = pytest.mark.skipif(os.name != "posix", reason="install.sh refuses non-POSIX uname")
 
 
 def test_install_sh_backs_up_before_package_install() -> None:
@@ -29,6 +33,7 @@ def test_install_ps1_backs_up_before_venv_clear() -> None:
     assert "SHA256" in text
 
 
+@posix_only
 def test_install_sh_backup_only_writes_archive_and_sha256(tmp_path: Path) -> None:
     home = tmp_path / "home"
     bin_dir = home / "venv" / "bin"
@@ -76,6 +81,7 @@ def test_install_sh_backup_only_writes_archive_and_sha256(tmp_path: Path) -> Non
     assert os.path.getsize(archives[0]) > 0
 
 
+@posix_only
 def test_install_sh_backup_failure_aborts(tmp_path: Path) -> None:
     home = tmp_path / "home"
     bin_dir = home / "venv" / "bin"