@@ -1,6 +1,8 @@
 # Teable v2 agent guide
 
-DDD/domain-model guidance has moved to the skill `teable-ddd-domain-model` in `.codex/skills/teable-ddd-domain-model`. Use that skill for any v2/core domain, specification, or aggregate changes.
+DDD/domain-model skill: `teable-ddd-domain-model` in `.claude/skills`, `.codex/skills`, and `.opencode/skills`. Use it for any v2/core domain, command, port, import/host integration, or field that core "does not interpret".
+
+v2-core is the Table bounded context (table, field, view, record, formula). Do not leak host folder / base-node / billing into `@teable/v2-core` as command fields or Noop ports, even as opaque ids. Nest attaches after `commandBus.execute` (the table is already ready). See `packages/v2/core/src/ARCHITECTURE.md`.
 
 ## Git hygiene
 
 
@@ -126,18 +126,18 @@
     "webpack": "5.91.0"
   },
   "dependencies": {
-    "@ai-sdk/amazon-bedrock": "4.0.97",
-    "@ai-sdk/anthropic": "3.0.72",
-    "@ai-sdk/azure": "3.0.55",
-    "@ai-sdk/cohere": "3.0.31",
-    "@ai-sdk/deepseek": "2.0.30",
-    "@ai-sdk/google": "3.0.65",
-    "@ai-sdk/mistral": "3.0.31",
-    "@ai-sdk/openai": "3.0.54",
-    "@ai-sdk/openai-compatible": "2.0.42",
-    "@ai-sdk/provider": "3.0.9",
-    "@ai-sdk/togetherai": "2.0.46",
-    "@ai-sdk/xai": "3.0.84",
+    "@ai-sdk/amazon-bedrock": "4.0.148",
+    "@ai-sdk/anthropic": "3.0.107",
+    "@ai-sdk/azure": "3.0.96",
+    "@ai-sdk/cohere": "3.0.51",
+    "@ai-sdk/deepseek": "2.0.52",
+    "@ai-sdk/google": "3.0.104",
+    "@ai-sdk/mistral": "3.0.54",
+    "@ai-sdk/openai": "3.0.91",
+    "@ai-sdk/openai-compatible": "2.0.64",
+    "@ai-sdk/provider": "3.0.14",
+    "@ai-sdk/togetherai": "2.0.70",
+    "@ai-sdk/xai": "3.0.115",
     "@an-epiphany/websocket-json-stream": "1.2.0",
     "@aws-sdk/client-s3": "3.609.0",
     "@aws-sdk/lib-storage": "3.609.0",
@@ -160,21 +160,21 @@
     "@nestjs/websockets": "10.3.5",
     "@openrouter/ai-sdk-provider": "2.8.1",
     "@opentelemetry/api": "1.9.0",
-    "@opentelemetry/context-async-hooks": "2.5.0",
-    "@opentelemetry/exporter-logs-otlp-http": "0.201.1",
-    "@opentelemetry/exporter-metrics-otlp-http": "0.201.1",
-    "@opentelemetry/exporter-trace-otlp-http": "0.201.1",
-    "@opentelemetry/instrumentation-express": "0.50.0",
-    "@opentelemetry/instrumentation-http": "0.201.1",
-    "@opentelemetry/instrumentation-ioredis": "0.49.0",
-    "@opentelemetry/instrumentation-nestjs-core": "0.49.0",
-    "@opentelemetry/instrumentation-pg": "0.49.0",
-    "@opentelemetry/instrumentation-pino": "0.54.0",
-    "@opentelemetry/instrumentation-runtime-node": "0.24.0",
-    "@opentelemetry/resources": "2.0.1",
-    "@opentelemetry/sdk-node": "0.201.1",
-    "@opentelemetry/sdk-trace-base": "2.0.1",
-    "@opentelemetry/semantic-conventions": "1.34.0",
+    "@opentelemetry/context-async-hooks": "2.10.0",
+    "@opentelemetry/exporter-logs-otlp-http": "0.221.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "0.221.0",
+    "@opentelemetry/exporter-trace-otlp-http": "0.221.0",
+    "@opentelemetry/instrumentation-express": "0.69.0",
+    "@opentelemetry/instrumentation-http": "0.221.0",
+    "@opentelemetry/instrumentation-ioredis": "0.69.0",
+    "@opentelemetry/instrumentation-nestjs-core": "0.67.0",
+    "@opentelemetry/instrumentation-pg": "0.73.0",
+    "@opentelemetry/instrumentation-pino": "0.67.0",
+    "@opentelemetry/instrumentation-runtime-node": "0.34.0",
+    "@opentelemetry/resources": "2.10.0",
+    "@opentelemetry/sdk-node": "0.221.0",
+    "@opentelemetry/sdk-trace-base": "2.10.0",
+    "@opentelemetry/semantic-conventions": "1.43.0",
     "@orpc/nest": "1.13.0",
     "@prisma/client": "6.2.1",
     "@prisma/instrumentation": "6.2.1",
@@ -189,6 +189,7 @@
     "@teable/openapi": "workspace:^",
     "@teable/v2-adapter-db-postgres-pg": "workspace:*",
     "@teable/v2-adapter-realtime-sharedb": "workspace:*",
+    "@teable/v2-adapter-table-query-ops-postgres": "workspace:^",
     "@teable/v2-adapter-table-repository-postgres": "workspace:^",
     "@teable/v2-adapter-undo-redo-keyv": "workspace:*",
     "@teable/v2-container-node": "workspace:*",
@@ -202,7 +203,7 @@
     "@teable/v2-table-query-ops": "workspace:*",
     "@teable/v2-utils": "workspace:*",
     "@valibot/to-json-schema": "1.3.0",
-    "ai": "6.0.169",
+    "ai": "6.0.246",
     "ajv": "8.12.0",
     "archiver": "7.0.1",
     "axios": "1.7.7",
@@ -239,7 +240,7 @@
     "minio": "7.1.3",
     "ms": "2.1.3",
     "multer": "1.4.5-lts.1",
-    "nanoid": "3.3.7",
+    "nanoid": "3.3.18",
     "nest-knexjs": "0.0.22",
     "nestjs-cls": "4.3.0",
     "nestjs-i18n": "10.5.1",
@@ -265,6 +266,7 @@
     "passport-openidconnect": "0.1.2",
     "pause": "0.1.0",
     "pdf-parse": "2.4.5",
+    "permessage-deflate": "0.1.7",
     "pg": "8.11.5",
     "pino-http": "10.5.0",
     "pino-pretty": "11.0.0",
 
@@ -24,6 +24,7 @@ import { CommentOpenApiModule } from './features/comment/comment-open-api.module
 import { DashboardModule } from './features/dashboard/dashboard.module';
 import { ExportOpenApiModule } from './features/export/open-api/export-open-api.module';
 import { FieldOpenApiModule } from './features/field/open-api/field-open-api.module';
+import { GoogleSheetImportModule } from './features/google-sheet-import/google-sheet-import.module';
 import { HealthModule } from './features/health/health.module';
 import { ImportOpenApiModule } from './features/import/open-api/import-open-api.module';
 import { IntegrityModule } from './features/integrity/integrity.module';
@@ -40,6 +41,7 @@ import { PluginModule } from './features/plugin/plugin.module';
 import { PluginContextMenuModule } from './features/plugin-context-menu/plugin-context-menu.module';
 import { PluginPanelModule } from './features/plugin-panel/plugin-panel.module';
 import { RecordHistoryColdModule } from './features/record-history-cold/record-history-cold.module';
+import { RecordRemovalColdModule } from './features/record-removal-cold/record-removal-cold.module';
 import { SelectionModule } from './features/selection/selection.module';
 import { AdminOpenApiModule } from './features/setting/open-api/admin-open-api.module';
 import { SettingOpenApiModule } from './features/setting/open-api/setting-open-api.module';
@@ -89,6 +91,7 @@ export const appModules = {
     AccessTokenModule,
     ImportOpenApiModule,
     AirtableImportModule,
+    GoogleSheetImportModule,
     ExportOpenApiModule,
     PinModule,
     AdminOpenApiModule,
@@ -102,10 +105,11 @@ export const appModules = {
     AiModule,
     PluginModule,
     PluginPanelModule,
-    // the ONLY mount of the cold queue CONSUMER: feature modules import
-    // RecordHistoryColdCoreModule (services only), so auxiliary entrypoints
-    // composing them never become competing cold-queue workers
+    // the ONLY mount of the cold queue CONSUMERS: feature modules import
+    // the Core modules (services only), so auxiliary entrypoints composing
+    // them never become competing cold-queue workers
     RecordHistoryColdModule,
+    RecordRemovalColdModule,
     PluginContextMenuModule,
     PluginChartModule,
     ObservabilityModule,
 
@@ -4,6 +4,7 @@ import type { INestApplication } from '@nestjs/common';
 import { ValidationPipe } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { NestFactory } from '@nestjs/core';
+import { isDomainError, toError } from '@teable/v2-core';
 import { json, urlencoded } from 'express';
 import helmet from 'helmet';
 import isPortReachable from 'is-port-reachable';
@@ -84,9 +85,13 @@ export async function bootstrap() {
   logger.log(`> System Time Zone: ${timeZone}`);
   logger.log(`> Current System Time: ${now.toString()}`);
 
-  process.on('unhandledRejection', (reason: string, promise: Promise<unknown>) => {
-    logger.error(`Unhandled Rejection at: ${promise}, reason: ${reason}`);
-    throw reason;
+  process.on('unhandledRejection', (reason: unknown, promise: Promise<unknown>) => {
+    // DomainError is intentionally a POJO (Result-based, not thrown). If one
+    // still escapes as an unhandled rejection, wrap it so Sentry gets a real
+    // stack-bearing Error instead of collapsing into activeSpanWrapper.
+    const normalized = isDomainError(reason) ? toError(reason) : reason;
+    logger.error(`Unhandled Rejection at: ${promise}, reason: ${normalized}`);
+    throw normalized;
   });
 
   process.on('uncaughtException', (error) => {
 
@@ -23,3 +23,91 @@ describe('CacheService.getMany', () => {
     expect(keyv.get).toHaveBeenCalledWith(['a', 'b']);
   });
 });
+
+/**
+ * The raw Redis commands (setnx, incr) must land on the same physical key the
+ * keyv path reads — the key name comes from the store's own `_getKeyName`,
+ * and setnx writes the keyv `{value, expires}` envelope. A hand-built
+ * `namespace:key` once diverged from the real layout, making every
+ * setnx-written key invisible to get()/del().
+ */
+describe('CacheService raw-command interop with the keyv layout', () => {
+  let redis: {
+    set: ReturnType<typeof vi.fn>;
+    incr: ReturnType<typeof vi.fn>;
+    expire: ReturnType<typeof vi.fn>;
+  };
+  let service: CacheService;
+
+  const makeService = (storeExtras: Record<string, unknown> = {}) => {
+    redis = {
+      set: vi.fn().mockResolvedValue('OK'),
+      incr: vi.fn().mockResolvedValue(1),
+      expire: vi.fn().mockResolvedValue(1),
+    };
+    const keyv = {
+      opts: {
+        namespace: 'teable_cache',
+        serialize: JSON.stringify,
+        store: {
+          // KeyvRedis(useRedisSets: false) prefixes every key like this.
+          // eslint-disable-next-line @typescript-eslint/naming-convention
+          _getKeyName: (key: string) => `sets:namespace:teable_cache:${key}`,
+          redis,
+          ...storeExtras,
+        },
+      },
+    };
+    service = new CacheService(keyv as unknown as Keyv<any>);
+  };
+
+  beforeEach(() => makeService());
+
+  it('setnx writes the store-derived key with a get()-readable envelope', async () => {
+    await service.setnx('lock:x', 'owner-1', 30);
+
+    const [physicalKey, payload, ex, ttl, nx] = redis.set.mock.calls[0];
+    expect(physicalKey).toBe('sets:namespace:teable_cache:teable_cache:lock:x');
+    expect([ex, ttl, nx]).toEqual(['EX', 30, 'NX']);
+    // The envelope is what keyv's get() deserializes: {value, expires}.
+    const envelope = JSON.parse(payload);
+    expect(envelope.value).toBe('owner-1');
+    expect(envelope.expires).toBeGreaterThan(Date.now());
+    expect(envelope.expires).toBeLessThanOrEqual(Date.now() + 30_000);
+  });
+
+  it('incr counts on the store-derived key and applies the first-hit ttl', async () => {
+    await service.incr('oauth:device-rate:ip', 60);
+
+    expect(redis.incr).toHaveBeenCalledWith(
+      'sets:namespace:teable_cache:teable_cache:oauth:device-rate:ip'
+    );
+    expect(redis.expire).toHaveBeenCalledWith(
+      'sets:namespace:teable_cache:teable_cache:oauth:device-rate:ip',
+      60
+    );
+  });
+
+  it('expire retargets the same derived key that incr counts on', async () => {
+    // The sign-in limiter pairs these two: incr counts attempts, expire cuts
+    // the counter short at lockout. Split layouts made expire a silent no-op.
+    await service.incr('signin:attempts:a@b.c', 30);
+    await service.expire('signin:attempts:a@b.c', 1);
+
+    expect(redis.incr).toHaveBeenCalledWith(
+      'sets:namespace:teable_cache:teable_cache:signin:attempts:a@b.c'
+    );
+    expect(redis.expire).toHaveBeenLastCalledWith(
+      'sets:namespace:teable_cache:teable_cache:signin:attempts:a@b.c',
+      1
+    );
+  });
+
+  it('falls back to a plain namespace prefix when the store has no _getKeyName', async () => {
+    makeService({ _getKeyName: undefined });
+
+    await service.setnx('lock:x', 'owner-1', 30);
+
+    expect(redis.set.mock.calls[0][0]).toBe('teable_cache:lock:x');
+  });
+});
@@ -32,11 +32,37 @@ export class CacheService<T extends ICacheStore = ICacheStore> {
   }
 
   /**
-   * Atomic set-if-not-exists operation (Redis SETNX with EX)
-   * Returns true if the key was set, false if it already existed
-   * @param key - The key to set
-   * @param value - The value to set
-   * @param ttlSeconds - TTL in seconds
+   * Physical Redis key for `key`, exactly as the keyv stack lays it out: the
+   * keyv namespace prefix, then the store's own key naming (KeyvRedis with
+   * `useRedisSets: false` adds `sets:namespace:<ns>:` on top). Asking the
+   * store for its name instead of hand-building the layout is what keeps raw
+   * commands and the keyv read path pointed at the same bytes — a hand-built
+   * `namespace:key` silently diverged from the real layout, so keys written
+   * by raw commands were invisible to get()/del().
+   */
+  private getRedisKey(key: string): string {
+    const prefixed = `${this.cacheManager.opts.namespace}:${key}`;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const store = this.cacheManager.opts?.store as any;
+    return typeof store?._getKeyName === 'function' ? store._getKeyName(prefixed) : prefixed;
+  }
+
+  /**
+   * The envelope keyv wraps every value in (`{value, expires}`), produced with
+   * the instance's own serializer — this is what makes a raw-written key
+   * readable back through get().
+   */
+  private serializeEnvelope(value: unknown, ttlSeconds: number): string {
+    const serialize = this.cacheManager.opts.serialize ?? JSON.stringify;
+    return serialize({ value, expires: Date.now() + ttlSeconds * 1000 }) as string;
+  }
+
+  /**
+   * Atomic set-if-not-exists operation (Redis SET NX EX).
+   * Returns true if the key was set, false if it already existed.
+   *
+   * Fully interoperable with get()/del(): the write lands on the same
+   * physical key, in the same envelope, as a set() would.
    */
   async setnx<TKey extends keyof T>(
     key: TKey,
@@ -54,18 +80,23 @@ export class CacheService<T extends ICacheStore = ICacheStore> {
       return true;
     }
 
-    // Use Redis SET with NX and EX for atomic operation
-    const fullKey = `${this.cacheManager.opts.namespace}:${key as string}`;
-    const serializedValue = JSON.stringify(value);
-    const result = await redis.set(fullKey, serializedValue, 'EX', ttlSeconds, 'NX');
+    const result = await redis.set(
+      this.getRedisKey(key as string),
+      this.serializeEnvelope(value, ttlSeconds),
+      'EX',
+      ttlSeconds,
+      'NX'
+    );
     return result === 'OK';
   }
 
   /**
-   * Atomic increment operation (Redis INCR with optional EX)
-   * Returns the new value after increment
-   * @param key - The key to increment
-   * @param ttlSeconds - Optional TTL in seconds (only set on first increment)
+   * Atomic increment operation (Redis INCR with optional EX).
+   * Returns the new value after increment.
+   *
+   * The counter is NOT readable via get(): atomic INCR requires a bare
+   * integer on the wire, which the keyv envelope cannot carry. Read the
+   * count only from this method's return value. del() does work on it.
    */
   async incr<TKey extends keyof T>(key: TKey, ttlSeconds?: number): Promise<number> {
     const redis = this.getRedisClient();
@@ -77,7 +108,7 @@ export class CacheService<T extends ICacheStore = ICacheStore> {
       return newValue;
     }
 
-    const fullKey = `${this.cacheManager.opts.namespace}:${key as string}`;
+    const fullKey = this.getRedisKey(key as string);
     const newValue = await redis.incr(fullKey);
 
     // Set TTL only if provided and this is the first increment (value is 1)
@@ -139,8 +170,13 @@ export class CacheService<T extends ICacheStore = ICacheStore> {
   }
 
   /**
-   * Update the TTL of an existing key without reading/writing data
-   * Returns true if the key exists and TTL was updated
+   * Update the TTL of an existing key without reading/writing data.
+   * Returns true if the key exists and TTL was updated.
+   *
+   * Only safe for SHORTENING the life of set()/setnx()-written values: their
+   * keyv envelope embeds an absolute `expires` that get() honors regardless of
+   * the Redis TTL, so an extension keeps the key alive but not readable.
+   * incr() counters carry no envelope and can go either way.
    */
   async expire<TKey extends keyof T>(key: TKey, ttl: number | string): Promise<boolean> {
     const ttlSeconds = typeof ttl === 'string' ? second(ttl) : ttl;
@@ -155,8 +191,7 @@ export class CacheService<T extends ICacheStore = ICacheStore> {
       return false;
     }
 
-    const fullKey = `${this.cacheManager.opts.namespace}:${key as string}`;
-    const result = await redis.expire(fullKey, ttlSeconds);
+    const result = await redis.expire(this.getRedisKey(key as string), ttlSeconds);
     return result === 1;
   }
 }