@co0ontty/wand 4.89.2 → 4.89.5

package/README.md

@@ -233,7 +233,7 @@ npm install -g @google/gemini-cli@latest
 
 #### 交互体验
 
-- **结构化对话** — 代码块语法高亮、工具调用折叠/展开、多问题分组渲染、Token 用量按轮累计
+- **结构化对话** — 代码块语法高亮、工具调用折叠/展开、多问题分组渲染、输入区展示最近一轮 Token 用量与费用
 - **个性化角色** — 像素风猫咪头像（赛博虎妞 / 勤劳初二），支持自定义对话角色名称
 - **消息排队** — 在 AI 思考时可继续输入，消息自动排队发送
 - **文件浏览器** — 内置路径浏览和搜索功能
@@ -245,6 +245,17 @@ npm install -g @google/gemini-cli@latest
 - **多平台客户端** — Android / iOS / macOS 原生客户端，支持加密连接码分发、自动更新检查
 - **HTTPS** — 可选自签证书，适合远程或移动端访问
 - **版本管理** — 内置更新检查与升级提示，支持 stable/beta 双通道
+
+Web 设置中的「Beta 通道」决定服务端 npm 更新来源：关闭时仅检查
+`@co0ontty/wand@latest`，开启时检查 `@co0ontty/wand@beta`；「自动更新 Web 服务」
+独立决定是否自动安装。检查后安装锁定具体版本，避免 dist-tag 在安装期间移动。
+关闭 Beta 不会自动降级；需要立即返回较旧正式版时，点击「更新或重新安装」。
+
+正式 npm 发布由 `vX.Y.Z` Git tag 触发，只写入 `latest`，拒绝预发布版本。
+master 的 Beta 发布只写入 `beta`，版本为下一补丁号加
+`-beta.<构建序号>.<重试序号>.g<提交>`，例如 `4.89.5-beta.100.1.gabcdef0`。
+版本基数同时检查正式 Git tags 和 npm latest，兼容未推送 Git 的本地正式发布。
+Beta 尚未发布、通道版本无效或 npm 暂不可达时，不自动安装其他通道。
 - **CLI 更新** — 在服务端设置中检查并快速更新 Claude Code、Codex、OpenCode、Qoder CLI、Pi 和 Gemini CLI，也可开启自动更新
 
 ### 配置

package/dist/ai-team-employee-binding.js

@@ -31,7 +31,8 @@ export function requireTeamEmployee(source, id) {
     }
     // The default partner's read projection includes short-term habits; they are not team snapshot data.
     return isDefaultSiliconEmployee(employee)
-        ? defaultEmployeeDefinition(employee.agents, employee.updatedAt, source.getSiliconEmployeeDefinition?.(id) ?? employee, null)
+        ? { ...defaultEmployeeDefinition(employee.agents, employee.updatedAt, source.getSiliconEmployeeDefinition?.(id) ?? employee, null),
+            avatar: employee.avatar }
         : employee;
 }
 /** Resolve once per new run. Team duty/role/leadership remain local; no knowledge is read. */

package/dist/archive-policy.d.ts

@@ -0,0 +1,17 @@
+/** Shared execution facts for archive controls and server enforcement. An idle PTY shell is safe. */
+export interface ArchiveSessionFacts {
+    sessionKind?: string;
+    runner?: string;
+    status?: string;
+    ptyBusy?: boolean;
+    ptyCommandRunning?: boolean;
+    inFlight?: boolean;
+    structuredState?: {
+        inFlight?: boolean;
+    } | null;
+    permissionBlocked?: boolean;
+    pendingEscalation?: unknown;
+    queuedMessages?: readonly unknown[];
+    queuedMessageCount?: number;
+}
+export declare function isArchiveBlocked(session: ArchiveSessionFacts): boolean;

package/dist/archive-policy.js

@@ -0,0 +1,8 @@
+export function isArchiveBlocked(session) {
+    if (session.ptyBusy || session.ptyCommandRunning || session.inFlight || session.structuredState?.inFlight
+        || session.permissionBlocked || session.pendingEscalation || session.queuedMessages?.length || session.queuedMessageCount)
+        return true;
+    if (["thinking", "initializing", "starting", "reconnecting", "permission-blocked", "waiting-input", "waiting_input"].includes(session.status ?? ""))
+        return true;
+    return session.status === "running" && (session.sessionKind === "structured" || session.runner === "claude-cli-print");
+}

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commit": "d071c20396020d559bc1d7ed8bcc036d9379ca0e",
-  "builtAt": "2026-10-10T03:24:36.047Z",
-  "version": "4.89.2",
+  "commit": "ec13fefa558fb2d1236d377d46e6c3152e4eb79b",
+  "builtAt": "2026-10-10T07:01:42.094Z",
+  "version": "4.89.5",
   "channel": "stable"
 }

package/dist/fixed-employee-avatar.d.ts

@@ -12,6 +12,12 @@ export declare function fixedEmployeeAvatar(identity: {
     id?: string | null;
     systemKey?: string | null;
 }): string | null;
+/** One read-only avatar value for API projections and client drafts; never migrate saved data while displaying it. */
+export declare function employeeAvatarValue(identity: {
+    id?: string | null;
+    systemKey?: string | null;
+    avatar?: string | null;
+}): string;
 /** The avatar exception does not change any other built-in employee's edit policy. */
 export declare function isFixedAvatarEmployee(identity: {
     id?: string | null;

package/dist/fixed-employee-avatar.js

@@ -7,6 +7,10 @@ export const FIXED_EMPLOYEE_AVATARS = [
 export function fixedEmployeeAvatar(identity) {
     return FIXED_EMPLOYEE_AVATARS.find((entry) => entry.id === identity.id && entry.systemKey === identity.systemKey)?.avatar ?? null;
 }
+/** One read-only avatar value for API projections and client drafts; never migrate saved data while displaying it. */
+export function employeeAvatarValue(identity) {
+    return fixedEmployeeAvatar(identity) ?? identity.avatar ?? "";
+}
 /** The avatar exception does not change any other built-in employee's edit policy. */
 export function isFixedAvatarEmployee(identity) {
     return fixedEmployeeAvatar(identity) !== null;

package/dist/npm-update-utils.js

@@ -45,16 +45,19 @@ export function getInstallSpecForChannel(channel) {
 function cleanVersion(value) {
     return value.trim().replace(/^v/, "");
 }
-function getStableTagVersion(version) {
-    return cleanVersion(version).split("+")[0]?.split("-")[0] ?? cleanVersion(version);
-}
-function computeUpdateAvailable(currentVersion, latestVersion, channel) {
+function acceptedVersion(version, channel) {
+    const value = version ? cleanVersion(version) : "";
+    // Never turn a prerelease into a nonexistent stable version or install a tag
+    // that changed between checking and installing.
+    const stable = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+    const beta = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+    return (channel === "stable" ? stable : beta).test(value) ? value : null;
+}
+function computeUpdateAvailable(currentVersion, latestVersion) {
     if (!latestVersion)
         return false;
     const current = cleanVersion(currentVersion);
-    const target = channel === "stable"
-        ? getStableTagVersion(latestVersion)
-        : cleanVersion(latestVersion);
+    const target = latestVersion;
     // Invalid/manual labels cannot be ordered safely, so offer the selected
     // dist-tag. Valid versions only update forward. In particular, Wand's local
     // X.Y.Z-debug.* build represents code after X.Y.Z and must not be replaced
@@ -64,15 +67,14 @@ function computeUpdateAvailable(currentVersion, latestVersion, channel) {
     return compareWandInstallOrder(target, current) > 0;
 }
 export function buildPackageUpdateInfo(currentVersion, channel, latestVersion) {
-    const latest = latestVersion?.trim() || null;
-    const stableLatest = channel === "stable" && latest ? getStableTagVersion(latest) : latest;
+    const latest = acceptedVersion(latestVersion, channel);
     return {
         channel,
         current: cleanVersion(currentVersion),
-        latest: stableLatest,
-        updateAvailable: computeUpdateAvailable(currentVersion, stableLatest, channel),
+        latest,
+        updateAvailable: computeUpdateAvailable(currentVersion, latest),
         distTag: getUpdateDistTag(channel),
-        installSpec: getInstallSpecForChannel(channel),
+        installSpec: latest ? `${PACKAGE_NAME}@${latest}` : getInstallSpecForChannel(channel),
     };
 }
 async function viewPackageVersionAsync(channel, timeoutMs = NPM_VIEW_TIMEOUT_MS) {

package/dist/plush-avatar.d.ts

@@ -84,12 +84,13 @@ export type PlushRenderConfig = PlushAvatarConfig | PlushCatAvatarConfig;
 export declare function isPlushCatAvatar(config: PlushRenderConfig): config is PlushCatAvatarConfig;
 export declare function parsePlushCatAvatar(value: string): PlushCatAvatarConfig | null;
 export declare function encodePlushCatAvatar(config: PlushCatAvatarConfig): string;
-/** Common identity projection; only an explicit cat value opts into this exception. */
+/** All employee surfaces share the API's avatar policy, including stale fixed-identity drafts. */
 export declare function resolveEmployeeAvatar(identity: PlushAvatarIdentity): PlushRenderConfig | null;
 export interface PlushAvatarIdentity {
     id?: string | null;
     name?: string | null;
     avatar?: string | null;
+    systemKey?: string | null;
 }
 /** Only the exact known v1 contract is accepted for explicit configuration; no URL or future-version guessing. */
 export declare function parsePlushAvatar(value: string): PlushAvatarConfig | null;

package/dist/plush-avatar.js

@@ -1,3 +1,4 @@
+import { employeeAvatarValue } from "./fixed-employee-avatar.js";
 /** Shared, versioned employee avatar contract. Keep v1 option IDs and seed rules stable across clients. */
 export const PLUSH_SHAPES = [
     { id: "heart", label: "心形" },
@@ -41,9 +42,10 @@ export function encodePlushCatAvatar(config) {
         throw new Error("毛绒猫头像配置无效。");
     return value;
 }
-/** Common identity projection; only an explicit cat value opts into this exception. */
+/** All employee surfaces share the API's avatar policy, including stale fixed-identity drafts. */
 export function resolveEmployeeAvatar(identity) {
-    return parsePlushCatAvatar(identity.avatar ?? "") ?? resolvePlushAvatar(identity);
+    const avatar = employeeAvatarValue(identity);
+    return parsePlushCatAvatar(avatar) ?? resolvePlushAvatar({ ...identity, avatar });
 }
 function hasId(options, id) {
     return options.some(option => option.id === id);

package/dist/retention.js

@@ -1,3 +1,5 @@
+import { AI_TEAM_ACTIVE_RUN_STATUSES } from "./ai-team-types.js";
+import { isArchiveBlocked } from "./archive-policy.js";
 import { cleanupWorktreeSync } from "./git-worktree.js";
 import { taskRetentionWindows } from "./task-retention.js";
 /**
@@ -12,13 +14,7 @@ export const RETENTION_ARCHIVED_MS = 7 * 24 * 60 * 60 * 1000;
  * 空闲 zsh 不算。真正挡住清理的是正在回复、或停在权限/确认上。
  */
 export function isRetentionBusy(session) {
-    if (session.ptyBusy === true || session.structuredState?.inFlight === true)
-        return true;
-    if (session.permissionBlocked || session.pendingEscalation)
-        return true;
-    if ((session.sessionKind ?? "pty") === "pty" || session.runner === "pty")
-        return false;
-    return session.status === "running";
+    return isArchiveBlocked(session);
 }
 function isIdleLivePty(session) {
     return session.status === "running" && !isRetentionBusy(session)
@@ -62,7 +58,7 @@ export function runRetentionSweep(deps, now = Date.now()) {
     const snapshots = deps.sessions.listSlim();
     for (const session of snapshots) {
         // 真正还在处理的会话不能归档或杀掉。空闲 PTY 壳不算。
-        if (isRetentionBusy(session))
+        if (isArchiveBlocked(session))
             continue;
         if (session.archived) {
             if (taskWindows.archivedMs === null)
@@ -113,9 +109,11 @@ export function runRetentionSweep(deps, now = Date.now()) {
         else
             sessionsByTask.set(taskId, [session]);
     }
+    const activeTeamTaskIds = new Set(deps.storage.listAiTeamRuns({ statuses: AI_TEAM_ACTIVE_RUN_STATUSES }).map(run => run.taskId));
     for (const task of deps.storage.listWandTasks()) {
         const bound = task.workspaceTaskId ? sessionsByTask.get(task.workspaceTaskId) ?? [] : [];
-        const running = bound.some((session) => isRetentionBusy(session));
+        const running = bound.some((session) => isArchiveBlocked(session))
+            || activeTeamTaskIds.has(task.id) || (!!task.workspaceTaskId && activeTeamTaskIds.has(task.workspaceTaskId));
         if (task.status === "archived") {
             if (running || taskWindows.archivedMs === null)
                 continue;
@@ -138,7 +136,7 @@ export function runRetentionSweep(deps, now = Date.now()) {
             result.purgedTasks += 1;
             continue;
         }
-        if (running || taskWindows.idleMs === null)
+        if (running || task.status === "doing" || taskWindows.idleMs === null)
             continue;
         const lastActivity = taskLastActivity(deps.storage, task, bound);
         if (lastActivity === null || now - lastActivity < taskWindows.idleMs)

package/dist/server-employee-routes.js

@@ -1,4 +1,4 @@
-import { isFixedAvatarEmployee } from "./fixed-employee-avatar.js";
+import { employeeAvatarValue, isFixedAvatarEmployee } from "./fixed-employee-avatar.js";
 import { randomUUID } from "node:crypto";
 import { AI_TEAM_MAX_CANDIDATES, SILICON_EMPLOYEE_AVATAR_MAX_CHARS, agentKey, isBuiltinSiliconEmployee, parseSiliconEmployeeTags, siliconEmployeeTags, } from "./ai-team-types.js";
 import { getErrorMessage } from "./error-utils.js";
@@ -93,7 +93,8 @@ export function parseSystemEmployeeAgents(value, existing) {
         if (incoming === undefined || (incoming === null && !isFixedAvatarEmployee(existing)))
             continue;
         const current = existing[field.key];
-        const isSame = typeof incoming === "string" && incoming === current;
+        const isSame = typeof incoming === "string" && (incoming === current
+            || (field.key === "avatar" && isFixedAvatarEmployee(existing) && incoming === employeeAvatarValue(existing)));
         if (!isSame) {
             throw new Error(`该员工是内置的，${field.label}不可修改。`);
         }
@@ -214,6 +215,11 @@ export function registerSiliconEmployeeRoutes(app, deps) {
             console.error("[SiliconEmployee] definition notification failed:", getErrorMessage(error));
         }
     };
+    // Identity is live data, not a versioned asset; old HTTP caches must not retain another face.
+    app.use("/api/silicon-employees", (_req, res, next) => {
+        res.setHeader("Cache-Control", "no-store");
+        next();
+    });
     app.get("/api/silicon-employees", (req, res) => {
         try {
             const includeArchived = req.query.includeArchived === "true" || req.query.includeArchived === "1";
@@ -361,7 +367,7 @@ export function registerSiliconEmployeeRoutes(app, deps) {
                     : parseSiliconEmployeeInput(input, existing, now);
             storage.saveSiliconEmployee(employee);
             notifyEmployee(employee.id);
-            res.json(employee);
+            res.json(storage.getSiliconEmployee(employee.id));
         }
         catch (error) {
             sendEmployeeError(res, error);

package/dist/server-session-routes.js

@@ -11,7 +11,6 @@ import { resolveSessionCwd } from "./session-cwd.js";
 import { resolveSystemAiContext } from "./session-ai-context.js";
 import { getGitStatusAsync, QuickCommitError, runQuickCommitWithFallback, runTagHead, runPush, generateCommitMessageOnly, } from "./git-quick-commit.js";
 import { getErrorMessage } from "./error-utils.js";
-import { archiveCommitTasks, archiveCommitStandaloneSessions } from "./commit-task-archive.js";
 import { buildIterationCommitContext, COMMIT_CONTEXT_MODE_PREF_KEY, isCommitContextMode, readCommitContextMode, resolveCommitContextInput, } from "./iteration-log.js";
 import { inferProviderFromCommand, isSessionProvider, providerCliCommand, SESSION_PROVIDERS } from "./session-provider.js";
 import { selectEmployeeCandidate } from "./silicon-employee-dispatch.js";
@@ -597,6 +596,29 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
             sendRouteError(res, error, "切换运行目录失败。");
         }
     });
+    app.post("/api/sessions/:id/employee", (req, res) => {
+        const employeeId = req.body?.employeeId;
+        if (typeof employeeId !== "string" || !employeeId.trim()) {
+            res.status(400).json({ error: "请选择有效的员工身份。" });
+            return;
+        }
+        const id = req.params.id;
+        const owner = sessions.ownerOf(id);
+        if (!owner) {
+            res.status(404).json({ error: "未找到该会话。" });
+            return;
+        }
+        if (owner !== "structured") {
+            res.status(400).json({ error: "只有新建空白结构化对话可以更换员工。" });
+            return;
+        }
+        try {
+            res.json(sessionResponseDTO(structured.setSessionEmployee(id, employeeId.trim()), req));
+        }
+        catch (error) {
+            sendRouteError(res, error, "切换员工失败。");
+        }
+    });
     app.post("/api/sessions/:id/provider", (req, res) => {
         const provider = req.body?.provider;
         const engine = req.body?.engine;
@@ -1119,29 +1141,11 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
             const consumed = result.ok && result.commit?.hash && context.entryIds.length > 0
                 ? storage.markIterationPromptsConsumed(context.entryIds, result.commit.hash)
                 : 0;
-            let archivedTaskIds = [];
-            const archivedSessionIds = [];
-            let archiveError;
-            if (body.archiveRelatedTasks === true && result.ok && result.commit?.hash) {
-                try {
-                    // A commit is already durable, even when push failed. Archiving must not turn that
-                    // successful commit into a retryable HTTP error (which would duplicate the commit).
-                    const openedTaskId = typeof body.workspaceTaskId === "string" ? body.workspaceTaskId.trim() : "";
-                    archivedTaskIds = archiveCommitTasks(storage, snapshot, context.entryIds, {
-                        workspaceTaskId: openedTaskId || null,
-                    });
-                    archiveCommitStandaloneSessions(storage, sessions, snapshot, archivedSessionIds);
-                }
-                catch (error) {
-                    archiveError = getErrorMessage(error, "归档任务与会话失败。");
-                    console.error("[QuickCommit] Failed to archive related tasks:", archiveError);
-                }
-            }
             res.json({
                 ...result,
-                archivedTaskIds,
-                archivedSessionIds,
-                ...(archiveError ? { archiveError } : {}),
+                // Compatibility for older clients: Git never changes task/session lifecycle.
+                archivedTaskIds: [],
+                archivedSessionIds: [],
                 commitContext: {
                     source: commitMessageFromIteration(body) && context.digest ? "iteration" : "diff",
                     entryIds: context.entryIds,
@@ -1747,7 +1751,7 @@ export function registerSessionRoutes(app, processes, structured, storage, defau
             res.json(sessionResponseDTO(updated, req));
         }
         catch (error) {
-            sendRouteError(res, error, "无法归档会话。");
+            sendRouteError(res, error, "无法归档会话。", 409);
         }
     });
     app.post("/api/sessions/:id/unarchive", asyncRoute(async (req, res) => {

package/dist/server-task-routes.js

@@ -1,3 +1,4 @@
+import { canArchiveTask } from "./task-archive-policy.js";
 import { dispatchAgentForTask, resolveTaskDispatchTarget } from "./agent-dispatch.js";
 import { asyncRoute } from "./express-async.js";
 import { getErrorMessage } from "./error-utils.js";
@@ -207,6 +208,7 @@ function taskDto({ storage, sessions }, task) {
     const milestone = resolvedMilestoneFields(storage, task.milestoneId);
     return {
         ...task,
+        canArchive: canArchiveTask(storage, sessions, task.id),
         sessionIds,
         sessions: sessionIds.flatMap((id) => {
             const session = sessions?.getLatest(id) ?? storage.getSession(id);
@@ -587,6 +589,10 @@ export function registerTaskRoutes(app, deps) {
             if (body.sortOrder !== undefined && Number.isFinite(Number(body.sortOrder))) {
                 patch.sortOrder = Math.floor(Number(body.sortOrder));
             }
+            if (patch.status === "archived" && !canArchiveTask(storage, sessions, currentTask.id)) {
+                res.status(409).json({ error: "任务尚未完成或仍有执行，完成后才能归档。" });
+                return;
+            }
             const task = storage.updateWandTask(req.params.id, patch);
             if (!task) {
                 res.status(404).json({ error: "未找到该任务。" });
@@ -637,6 +643,10 @@ export function registerTaskRoutes(app, deps) {
         }
     });
     app.delete("/api/wand-tasks/:id", (req, res) => {
+        if (storage.getWandTask(req.params.id) && !canArchiveTask(storage, sessions, req.params.id)) {
+            res.status(409).json({ error: "任务尚未完成或仍有执行，完成后才能归档。" });
+            return;
+        }
         const archived = storage.updateWandTask(req.params.id, { status: "archived" });
         if (!archived) {
             res.status(404).json({ error: "未找到该任务。" });

package/dist/server-update-routes.js

@@ -449,9 +449,14 @@ export function registerAdminUpdateRoutes(app, deps) {
         }
         state.updateInFlight = true;
         try {
-            const info = await deps.checkLatestPackageVersion(deps.getUpdateChannel(), true);
+            const channel = deps.getUpdateChannel();
+            const info = await deps.checkLatestPackageVersion(channel, true);
+            if (channel !== deps.getUpdateChannel()) {
+                res.status(409).json({ error: "更新通道已切换，请重新检查更新。" });
+                return;
+            }
             if (!info.latest) {
-                res.status(502).json({ error: "无法连接到 npm registry。" });
+                res.status(502).json({ error: "npm 所选通道暂无有效版本，或 registry 暂时不可用。" });
                 return;
             }
             if (!canUseDetachedUpdateHelper()) {
@@ -529,7 +534,11 @@ export function registerAdminUpdateRoutes(app, deps) {
     });
     app.post("/api/update-channel", requireAdmin, (req, res) => {
         const body = (req.body ?? {});
-        const channel = body.channel === "beta" ? "beta" : "stable";
+        if (body.channel !== "beta" && body.channel !== "stable") {
+            res.status(400).json({ error: "更新通道必须为 stable 或 beta。" });
+            return;
+        }
+        const channel = body.channel;
         storage.setConfigValue("updateChannel", channel);
         res.json({ channel });
     });

package/dist/server-workspace-routes.js

@@ -1,3 +1,5 @@
+import { canArchiveTask } from "./task-archive-policy.js";
+import { isArchiveBlocked } from "./archive-policy.js";
 import path from "node:path";
 import crypto from "node:crypto";
 import { existsSync, statSync } from "node:fs";
@@ -44,6 +46,7 @@ function workspaceSessionSummary(session, names = {}, registry, team = {}) {
         providerCliActive: live.providerCliActive,
         providerCliExitCode: live.providerCliExitCode,
         inFlight: live.structuredState?.inFlight === true,
+        canArchive: !isArchiveBlocked(live),
         cwd: live.cwd,
         startedAt: live.startedAt,
         employeeId: live.employeeId,
@@ -88,6 +91,7 @@ function cheapTasksRevision(storage, registry, includeArchived = false) {
             session.ptyCommandRunning === true ? 1 : 0,
             session.providerCliActive ? 1 : 0,
             session.structuredState?.inFlight === true ? 1 : 0,
+            isArchiveBlocked(session) ? 1 : 0,
             session.title ?? "",
             session.workspaceId ?? "",
             session.workspaceTaskId ?? "",
@@ -610,6 +614,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             }
             return snapshots;
         };
+        const sessionRegistry = sessions;
         const appendTask = (target, workspace, task) => {
             const visibleSessions = taskSessions(task.id).filter(sessionVisible);
             const sessions = visibleSessions
@@ -620,6 +625,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             }));
             target.tasks.push({
                 ...task,
+                canArchive: (() => { const card = storage.getWandTaskByWorkspaceTaskId(task.id); return card ? canArchiveTask(storage, sessionRegistry, card.id) : true; })(),
                 // 没单独指定迭代的任务读作默认迭代（id 与名字成对）。
                 ...resolvedMilestoneFields(storage, task.milestoneId),
                 cwd: taskRuntimeCwd(task, workspace),
@@ -746,6 +752,7 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             .filter((task) => req.query.includeArchived === "1" || !task.archived)
             .map((task) => ({
             ...task,
+            canArchive: (() => { const card = storage.getWandTaskByWorkspaceTaskId(task.id); return card ? canArchiveTask(storage, sessions, card.id) : true; })(),
             ...resolvedMilestoneFields(storage, task.milestoneId),
         })));
     });
@@ -923,6 +930,11 @@ export function registerWorkspaceRoutes(app, storage, sessions, titleOptions = {
             res.status(404).json({ error: "未找到该任务。" });
             return;
         }
+        const card = storage.getWandTaskByWorkspaceTaskId(existing.id);
+        if (card && !canArchiveTask(storage, sessions, card.id)) {
+            res.status(409).json({ error: "任务尚未完成或仍有执行，完成后才能归档。" });
+            return;
+        }
         storage.archiveWorkspaceTask(existing.id);
         const archived = storage.getWorkspaceTask(existing.id);
         res.json({

package/dist/server.js

@@ -821,8 +821,8 @@ export async function startServer(config, configPath, options = {}) {
             // 把语言偏好暴露给前端做 UI 文案 i18n。后端原本只用它给 Claude 拼 system prompt，
             // 前端没收到 → "SUBAGENT" / "Read" 这些 UI label 一直是英文，跟用户设的中文不匹配。
             language: config.language ?? "",
-            updateAvailable: cachedUpdateInfo?.updateAvailable ?? false,
-            latestVersion: cachedUpdateInfo?.latest ?? null,
+            updateAvailable: cachedUpdateInfo?.channel === getUpdateChannel() ? cachedUpdateInfo.updateAvailable : false,
+            latestVersion: cachedUpdateInfo?.channel === getUpdateChannel() ? cachedUpdateInfo.latest : null,
             updateChannel: getUpdateChannel(),
             currentVersion: DISPLAY_VERSION,
             packageVersion: PKG_VERSION,
@@ -844,7 +844,7 @@ export async function startServer(config, configPath, options = {}) {
         requireAdminOrSessionPreferences,
         packageInfo: { version: DISPLAY_VERSION, name: PKG_NAME, nodeVersion: PKG_NODE_REQ, repoUrl: PKG_REPO_URL },
         buildInfo: BUILD_INFO,
-        getCachedUpdateInfo: () => cachedUpdateInfo,
+        getCachedUpdateInfo: () => cachedUpdateInfo?.channel === getUpdateChannel() ? cachedUpdateInfo : null,
         getUpdateChannel,
         getDistributionSettings,
         getGithubConnector: () => getGithubConnectorStatus(storage),
@@ -1327,7 +1327,7 @@ export async function startServer(config, configPath, options = {}) {
             return;
         const channel = getUpdateChannel();
         const info = await checkLatestPackageVersion(channel, true);
-        if (shuttingDown)
+        if (shuttingDown || channel !== getUpdateChannel())
             return;
         cachedUpdateInfo = info;
         if (!info.latest || !info.updateAvailable)

package/dist/session-registry.js

@@ -1,3 +1,4 @@
+import { isArchiveBlocked } from "./archive-policy.js";
 import { cleanupWorktreeSync } from "./git-worktree.js";
 import { inferProviderFromCommand } from "./session-provider.js";
 export function deleteProviderNativeHistory(deleter, provider, providerSessionId, cwd) {
@@ -180,6 +181,12 @@ export class SessionRegistry {
         return this.processes.stop(id);
     }
     setArchived(id, archived) {
+        const current = this.getLatest(id);
+        if (current && !!current.archived === archived && (!archived || current.archivedAt))
+            return current;
+        if (archived && current && isArchiveBlocked(current)) {
+            throw Object.assign(new Error("会话仍在执行或等待处理，完成后才能归档。"), { statusCode: 409 });
+        }
         const owner = this.ownerOf(id);
         if (owner === "structured")
             return this.structured.setSessionArchived(id, archived);

package/dist/storage.js

@@ -1,5 +1,5 @@
 import crypto from "node:crypto";
-import { FIXED_EMPLOYEE_AVATARS, fixedEmployeeAvatar, isFixedAvatarEmployee } from "./fixed-employee-avatar.js";
+import { FIXED_EMPLOYEE_AVATARS, employeeAvatarValue, fixedEmployeeAvatar, isFixedAvatarEmployee } from "./fixed-employee-avatar.js";
 import { CONVERSATION_OWNER } from "./conversation-types.js";
 import { chmodSync, existsSync, mkdirSync } from "node:fs";
 import path from "node:path";
@@ -2715,6 +2715,8 @@ export class WandStorage {
         return rows.map((row) => this.projectDefaultEmployee(mapSiliconEmployeeRow(row)));
     }
     projectDefaultEmployee(employee) {
+        // Presentation only: legacy columns stay untouched until an explicit migration.
+        employee = { ...employee, avatar: employeeAvatarValue(employee) };
         if (employee.systemKey !== DEFAULT_EMPLOYEE_KEY)
             return employee;
         const state = this.getUserMemoryState();
@@ -2745,7 +2747,10 @@ export class WandStorage {
     /** 内置「系统运维」员工；未创建（或被删除过）时返回 null。 */
     getSystemSiliconEmployee(key = SYSTEM_EMPLOYEE_KEY) {
         const row = this.db.prepare("SELECT * FROM silicon_employees WHERE system_key = ?").get(key);
-        return row ? mapSiliconEmployeeRow(row) : null;
+        if (!row)
+            return null;
+        const employee = mapSiliconEmployeeRow(row);
+        return { ...employee, avatar: employeeAvatarValue(employee) };
     }
     /** Seed only when missing; restart never overwrites user profile, candidates, or legacy avatars. */
     ensureSystemSiliconEmployee(seed = {}) {
@@ -2786,8 +2791,9 @@ export class WandStorage {
                 throw new Error("内置员工身份不可修改或冒用。");
             if (existing && !isFixedAvatarEmployee(existing))
                 throw new Error("内置员工身份冲突，不能覆盖已有记录。");
-            if (employee.avatar !== (existing?.avatar ?? target.avatar))
+            if (employee.avatar !== (existing?.avatar ?? target.avatar) && employee.avatar !== employeeAvatarValue(employee)) {
                 throw new Error("该员工是内置的，头像不可修改。");
+            }
             if (existing && JSON.stringify(employee.tags) !== JSON.stringify(existing.tags))
                 throw new Error("该员工是内置的，标签不可修改。");
             if (employee.archivedAt !== existing?.archivedAt)
@@ -2808,7 +2814,9 @@ export class WandStorage {
          tags_json = excluded.tags_json,
          system_key = excluded.system_key,
          archived_at = excluded.archived_at,
-         updated_at = excluded.updated_at`).run(employee.id, employee.name, employee.duty, employee.prompt, employee.avatar, JSON.stringify(employee.agents), employee.systemKey ?? null, employee.archivedAt ?? null, employee.createdAt, employee.updatedAt, JSON.stringify(tags));
+         updated_at = excluded.updated_at`).run(employee.id, employee.name, employee.duty, employee.prompt, 
+        // Accept a canonical read echo without persisting a display projection over a legacy value.
+        target && existing ? existing.avatar : employee.avatar, JSON.stringify(employee.agents), employee.systemKey ?? null, employee.archivedAt ?? null, employee.createdAt, employee.updatedAt, JSON.stringify(tags));
     }
     /** Explicit, atomic migration; not called from GET, config load, seeds, or ordinary saves.
      * Compare all expected avatar values first; change only avatar, including preserving timestamps.

package/dist/structured-session-manager.d.ts

@@ -236,6 +236,11 @@ export declare class StructuredSessionManager {
     setSessionDirectory(sessionId: string, cwd: string): SessionSnapshot;
     /** 空白对话原位换执行工具；引擎也是工具身份，不跨工具搬历史或能力设置。 */
     setSessionProvider(sessionId: string, provider: SessionProvider, engine?: "cli" | "sdk"): SessionSnapshot;
+    /** 首次发送前显式选择真实员工；同一会话、目录和未发送输入的归属不变。 */
+    setSessionEmployee(sessionId: string, employeeId: string): SessionSnapshot;
+    private requireBlankSessionSelection;
+    private blankSessionToolSelection;
+    private saveBlankSessionSelection;
     /**
      * 新建 pi 结构化会话前的引擎裁决。
      *