diff --git a/README.md b/README.md
index 2a3c6d4..c32d910 100644
--- a/README.md
+++ b/README.md
@@ -12,7 +12,7 @@ Served via jsDelivr; fetched automatically during install — you never need to
 - `arcrun-mcp/` — **arcrun-mcp**
 - `daemon/` — 桌面 App（Mac／Windows）安裝檔
 
-Built from `Arcrun@94d545242589` by `installer/scripts/ship.mjs`（arcrun-rag repo，release 1.4.45，built 2026-08-14）。
+Built from `Arcrun@340b461f58ed` by `installer/scripts/ship.mjs`（arcrun-rag repo，release 1.4.46，built 2026-08-14）。
 
 ⚠️ 這份檔案由出貨管線每次自動重寫（`installer/scripts/render-bundles-readme.mjs`）——
 不要手動改這裡列的零件清單，要改就改 `installer/scripts/bundle-components.mjs`（唯一真相源，改一個地方兩條出貨路徑同時生效）。
diff --git a/arcrun-cypher-executor/worker.mjs b/arcrun-cypher-executor/worker.mjs
index dcaa5bc..f069da7 100644
--- a/arcrun-cypher-executor/worker.mjs
+++ b/arcrun-cypher-executor/worker.mjs
@@ -3791,6 +3791,9 @@ async function resolveCredentialRefs(data, env, apiKey) {
   if (names.size === 0) return data;
   const nameList = [...names];
   const resolvedSecrets = await resolveSecretsFromNewHome(env, apiKey, nameList);
+  if (nameList.every((n) => Object.prototype.hasOwnProperty.call(resolvedSecrets, n))) {
+    return replaceCredentialRefs(data, resolvedSecrets);
+  }
   const url = wasmWorkerUrl("auth_static_key", env.WORKER_SUBDOMAIN);
   const res = await fetch(url, {
     method: "POST",
diff --git a/manifest.json b/manifest.json
index 50e95dd..d554d62 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,14 +1,14 @@
 {
  "schema": 1,
  "built": "2026-08-14",
- "source": "Arcrun@94d545242589",
+ "source": "Arcrun@340b461f58ed",
  "core": [
   {
    "name": "arcrun-cypher-executor",
    "canonical": null,
    "main_module": "worker.mjs",
    "main_file": "arcrun-cypher-executor/worker.mjs",
-   "js_bytes": 589935,
+   "js_bytes": 590085,
    "modules": [],
    "compat_date": "2025-02-19",
    "compat_flags": [
@@ -49,10 +49,10 @@
    "stripped": {
     "services": 13
    },
-   "source_commit": "4b6cc159b8b264ddca27da86922b2d4847ba0871",
-   "source_content_sha256": "8e6487478bc86bd289afaa5192cbd394b80b5235ea1eefb30ed716e6446a9312",
-   "sha256": "8e6487478bc86bd289afaa5192cbd394b80b5235ea1eefb30ed716e6446a9312",
-   "bytes": 589935
+   "source_commit": "340b461f58ed6a9958850f8871cf05381ce95c9d",
+   "source_content_sha256": "1da6a46e6a1781cb1a518635ff7e6b43a035710673066f4f764671c75441fdaf",
+   "sha256": "1da6a46e6a1781cb1a518635ff7e6b43a035710673066f4f764671c75441fdaf",
+   "bytes": 590085
   },
   {
    "name": "arcrun-kbdb",
@@ -207,8 +207,8 @@
    "sha256": "782a3b2212884f789e1725f82046cf34ef6bb02e1a8b585cab8e4ae6c6e441ca"
   }
  },
- "release": "1.4.45",
+ "release": "1.4.46",
  "built_for": "oauth-installer-lazy-load",
  "notes": [],
- "fingerprint": "bc4ee7a2b988df5b7282557741137625453545db7a7e11c5d41cd7edb6387e16"
+ "fingerprint": "1d5b4a9b91d61ce9274b40899dc453ee43a7aa7d081bff0114a3c1fbf5a19a1f"
 }