Merge remote-tracking branch 'educraft/main' into merge/educraft-cph

# Conflicts:
#	.gitignore
#	hub/.env.example
#	hub/deploy/deploy_fleet_release.sh
#	hub/deploy/deploy_platform.sh
#	hub/test/integration/helpers.ts

hub/.env.example

@@ -20,12 +20,16 @@ DATABASE_URL="postgresql://paradigm:paradigm@127.0.0.1:5432/paradigm"
 
 # Alpha Silo safety limits. max turns may use its default; every other value is
 # mandatory in production and should be calibrated on the target host.
-# HUB_AGENT_MAX_TURNS=25
+HUB_AGENT_MAX_TURNS="150"
 HUB_AGENT_MAX_CONCURRENT_RUNS="1"
-HUB_AGENT_MAX_RUN_SECONDS="900"
+HUB_AGENT_MAX_RUN_SECONDS="1800"
+# 文件库上传把内容放在 JSON body 里,所以 body limit 与
+# HUB_FILELIB_MAX_FILE_BYTES 串联(见下方注释),不能降回 1 MiB。
 HUB_HTTP_BODY_LIMIT_BYTES="73400320"
-HUB_MAX_FILES_PER_MESSAGE="8"
+HUB_MAX_FILES_PER_MESSAGE="20"
 HUB_MAX_FILE_BYTES="26214400"
+# Max concurrent Alibaba Docmind jobs for one convert_pdf_to_md batch (1-8).
+HUB_PDF_TO_MD_MAX_CONCURRENT="3"
 HUB_HTTP_REQUESTS_PER_MINUTE="120"
 HUB_FEISHU_EVENTS_PER_MINUTE="120"
 
@@ -44,9 +48,24 @@ HUB_PROJECT_WORKSPACE_ROOT="/var/lib/cph-hub/workspaces"
 # startup unless XDG_STATE_HOME is set (then defaults to $XDG_STATE_HOME/skills).
 HUB_SKILL_STORE_ROOT="/var/lib/cph-hub/state/skills"
 
+# Optional tenant-local Typst package roots. When configured, the agent
+# sandbox forwards these exact paths to Typst. The preinstalled package path is
+# read-only; the cache path is the only additional write location.
+# Keep the preinstalled package path outside the release tree and provision it
+# with the namespace layout expected by Typst, for example:
+#   <root>/paradigm/paradigm-templates/0.2.20/
+# Use a separate service-writable cache path when runtime dependencies may be
+# downloaded; do not make the immutable preinstalled directory the cache.
+# TYPST_PACKAGE_PATH="/srv/curriculum-project-hub/typst-packages/org-a"
+# TYPST_PACKAGE_CACHE_PATH="/var/cache/cph-hub/org-a/typst"
+
 # This process is pinned to exactly one Organization. Feishu credentials are
 # resolved from that Organization's encrypted ACTIVE connection.
 HUB_SILO_ORGANIZATION_ID=""
+# Absolute path to the bot-only lark-cli binary used by Agent Feishu tools.
+# The CLI is invoked by Hub with a disposable HOME and the ACTIVE Feishu
+# Application Connection; the App Secret is never put in Agent argv/env.
+HUB_FEISHU_CLI_BIN="/usr/local/bin/lark-cli"
 HUB_SYSTEMD_UNIT="cph-hub-example.service"
 
 # Absolute path to the `cph` binary (ADR-0016). Production preflight requires