@crabcloud/cli 0.2.4 → 0.3.1

package/dist/crab.js

@@ -2390,6 +2390,89 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
     });
   };
 });
+function discriminatorMap(def) {
+  const map = new Map;
+  for (const option of def.options) {
+    const values = option._zod.propValues?.[def.discriminator];
+    if (!values || values.size === 0)
+      throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(option)}"`);
+    for (const value of values) {
+      if (map.has(value)) {
+        if (value !== undefined)
+          throw new Error(`Duplicate discriminator value "${String(value)}"`);
+        map.set(value, null);
+      } else {
+        map.set(value, option);
+      }
+    }
+  }
+  return map;
+}
+var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnion", (inst, def) => {
+  def.inclusive = false;
+  $ZodUnion.init(inst, def);
+  const _super = inst._zod.parse;
+  defineLazyInternal(inst, "propValues", (zod) => {
+    const propValues = {};
+    let undefinedCount = 0;
+    for (const option of zod.def.options) {
+      const pv = option._zod.propValues;
+      if (!pv || Object.keys(pv).length === 0)
+        throw new Error(`Invalid discriminated union option at index "${zod.def.options.indexOf(option)}"`);
+      if (pv[zod.def.discriminator]?.has(undefined))
+        undefinedCount++;
+      for (const [k, v] of Object.entries(pv)) {
+        if (!Object.prototype.hasOwnProperty.call(propValues, k)) {
+          assignProp(propValues, k, new Set);
+        }
+        for (const val of v) {
+          propValues[k].add(val);
+        }
+      }
+    }
+    if (!zod.def.unionFallback && undefinedCount > 1)
+      propValues[zod.def.discriminator]?.delete(undefined);
+    return propValues;
+  });
+  def.options.forEach((option, i) => {
+    const propShape = rawShape(option._zod.def);
+    if (propShape && !Object.prototype.hasOwnProperty.call(propShape, def.discriminator)) {
+      throw new Error(`Invalid discriminated union option at index "${i}"`);
+    }
+  });
+  const disc = cached(() => discriminatorMap(def));
+  inst._zod.parse = (payload, ctx) => {
+    const input = payload.value;
+    if (!isObject(input)) {
+      payload.issues.push({
+        code: "invalid_type",
+        expected: "object",
+        input,
+        inst
+      });
+      return payload;
+    }
+    const value = input?.[def.discriminator];
+    const opt = disc.value.get(value);
+    if (opt && (value !== undefined || ctx.direction !== "backward")) {
+      return opt._zod.run(payload, ctx);
+    }
+    if (def.unionFallback || ctx.direction === "backward") {
+      return _super(payload, ctx);
+    }
+    payload.issues.push({
+      code: "invalid_union",
+      errors: [],
+      note: "No matching discriminator",
+      discriminator: def.discriminator,
+      options: Array.from(disc.value.keys()).filter((value) => disc.value.get(value) !== null),
+      input,
+      path: [def.discriminator],
+      inst
+    });
+    return payload;
+  };
+});
 var $ZodIntersection = /* @__PURE__ */ $constructor("$ZodIntersection", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.parse = (payload, ctx) => {
@@ -2682,6 +2765,28 @@ var $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
     return payload;
   };
 });
+var $ZodLiteral = /* @__PURE__ */ $constructor("$ZodLiteral", (inst, def) => {
+  $ZodType.init(inst, def);
+  const values = new Set(def.values);
+  inst._zod.values = values;
+  defineLazyInternal(inst, "pattern", (zod) => {
+    const vals = zod.def.values;
+    return new RegExp(vals.length ? `^(${vals.map((o) => typeof o === "string" ? escapeRegex(o) : o ? escapeRegex(o.toString()) : String(o)).join("|")})$` : "^[^\\s\\S]$");
+  });
+  inst._zod.parse = (payload, _ctx) => {
+    const input = payload.value;
+    if (values.has(input)) {
+      return payload;
+    }
+    payload.issues.push({
+      code: "invalid_value",
+      values: def.values,
+      input,
+      inst
+    });
+    return payload;
+  };
+});
 var $ZodTransform = /* @__PURE__ */ $constructor("$ZodTransform", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.optin = "optional";
@@ -4587,6 +4692,45 @@ var enumProcessor = (schema, _ctx, json, _params) => {
     json.type = "string";
   json.enum = values;
 };
+var literalProcessor = (schema, ctx, json, params) => {
+  const def = schema._zod.def;
+  if (def.values.length === 0) {
+    json.not = {};
+    return;
+  }
+  const vals = [];
+  for (const val of def.values) {
+    if (val === undefined) {
+      if (handleUnrepresentable(schema, ctx, json, params, "Literal `undefined` cannot be represented in JSON Schema"))
+        return;
+    } else if (typeof val === "bigint") {
+      if (handleUnrepresentable(schema, ctx, json, params, "BigInt literals cannot be represented in JSON Schema"))
+        return;
+      vals.push(Number(val));
+    } else {
+      vals.push(val);
+    }
+  }
+  if (vals.length === 0) {} else if (vals.length === 1) {
+    const val = vals[0];
+    json.type = val === null ? "null" : typeof val;
+    if (ctx.target === "draft-04" || ctx.target === "openapi-3.0") {
+      json.enum = [val];
+    } else {
+      json.const = val;
+    }
+  } else {
+    if (vals.every((v) => typeof v === "number"))
+      json.type = "number";
+    if (vals.every((v) => typeof v === "string"))
+      json.type = "string";
+    if (vals.every((v) => typeof v === "boolean"))
+      json.type = "boolean";
+    if (vals.every((v) => v === null))
+      json.type = "null";
+    json.enum = vals;
+  }
+};
 var customProcessor = (schema, ctx, json, params) => {
   handleUnrepresentable(schema, ctx, json, params, "Custom types cannot be represented in JSON Schema");
 };
@@ -5618,6 +5762,18 @@ function union(options, params) {
     ...normalizeParams(params)
   });
 }
+var ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("ZodDiscriminatedUnion", (inst, def) => {
+  ZodUnion.init(inst, def);
+  $ZodDiscriminatedUnion.init(inst, def);
+});
+function discriminatedUnion(discriminator, options, params) {
+  return new ZodDiscriminatedUnion({
+    type: "union",
+    options,
+    discriminator,
+    ...normalizeParams(params)
+  });
+}
 var ZodIntersection = /* @__PURE__ */ $constructor("ZodIntersection", (inst, def) => {
   $ZodIntersection.init(inst, def);
   ZodType.init(inst, def);
@@ -5700,6 +5856,27 @@ function _enum(values, params) {
     ...normalizeParams(params)
   });
 }
+var ZodLiteral = /* @__PURE__ */ $constructor("ZodLiteral", (inst, def) => {
+  $ZodLiteral.init(inst, def);
+  ZodType.init(inst, def);
+  inst._zod.processJSONSchema = (ctx, json, params) => literalProcessor(inst, ctx, json, params);
+  inst.values = new Set(def.values);
+  Object.defineProperty(inst, "value", {
+    get() {
+      if (def.values.length > 1) {
+        throw new Error("This schema contains multiple valid literal values. Use `.values` instead.");
+      }
+      return def.values[0];
+    }
+  });
+});
+function literal(value, params) {
+  return new ZodLiteral({
+    type: "literal",
+    values: Array.isArray(value) ? value : [value],
+    ...normalizeParams(params)
+  });
+}
 var ZodTransform = /* @__PURE__ */ $constructor("ZodTransform", (inst, def) => {
   _ensureDefaultMemoizer();
   $ZodTransform.init(inst, def);
@@ -5916,14 +6093,16 @@ var scopes = [
   "contacts.read",
   "contacts.write",
   "collab.read",
-  "collab.write"
+  "collab.write",
+  "agent.read"
 ];
 var scopeGroups = [
   { id: "account", scopes: ["account.read", "credits.read"] },
   { id: "mail", scopes: ["mail.read", "mail.send", "mail.search", "mail.delete"] },
   { id: "storage", scopes: ["storage.read", "storage.write", "storage.delete"] },
   { id: "collab", scopes: ["collab.read", "collab.write"] },
-  { id: "contacts", scopes: ["contacts.read", "contacts.write"] }
+  { id: "contacts", scopes: ["contacts.read", "contacts.write"] },
+  { id: "agent", scopes: ["agent.read"] }
 ];
 function expandScopes(input) {
   const expanded = input.flatMap((item) => {
@@ -6034,6 +6213,10 @@ var oauthBindLoginInput = object({
   password: string2().min(1).max(256)
 });
 var adminSettingsInput = object({ registrationOpen: boolean2() });
+var collabContentViewInput = object({
+  reason: string2().trim().min(1).max(200),
+  cursor: string2().trim().max(200).optional()
+});
 var creditBuckets = ["granted", "topup"];
 var creditPackStatuses = ["draft", "live", "delisted"];
 var adminCreditAdjustInput = object({
@@ -6140,6 +6323,7 @@ var mailSendInput = object({
   cc: mailRecipientList.default([]),
   subject: string2().trim().min(1).max(200),
   body: string2().min(1).max(1e5),
+  bodyHtml: string2().max(300000).optional(),
   inReplyTo: string2().max(998).optional(),
   attachmentIds: array(string2().min(1).max(64)).max(10).optional()
 });
@@ -6147,7 +6331,8 @@ var mailDraftInput = object({
   to: mailRecipientList.default([]),
   cc: mailRecipientList.default([]),
   subject: string2().trim().max(200).default(""),
-  body: string2().max(1e5).default("")
+  body: string2().max(1e5).default(""),
+  bodyHtml: string2().max(1e6).optional()
 });
 var mailReadInput = object({ unread: boolean2() });
 var mailDevInboundInput = object({
@@ -6155,6 +6340,7 @@ var mailDevInboundInput = object({
   to: mailAddressSchema,
   subject: string2().trim().min(1).max(200),
   body: string2().max(1e5),
+  html: string2().max(1e6).optional(),
   attachments: array(object({
     filename: string2().min(1).max(120),
     mimeType: string2().regex(/^[\w.+-]+\/[\w.+-]+$/).max(100),
@@ -6222,6 +6408,123 @@ var collabRecordListQuery = object({
   cursor: string2().trim().max(200).optional(),
   limit: exports_coerce.number().int().min(1).max(200).optional()
 });
+var agentPermissionModes = ["confirm", "auto_edit", "yolo"];
+var agentSessionKinds = ["chat", "task"];
+var agentMemoryTypes = ["preference", "contact", "project"];
+var AGENT_TITLE_MAX = 120;
+var AGENT_MEMORY_MAX = 2000;
+var AGENT_PERSONA_MAX = 2000;
+var agentToolsConfigSchema = object({
+  web: boolean2().optional(),
+  code: boolean2().optional(),
+  workspace: boolean2().optional(),
+  crab: object({
+    credits: boolean2().optional(),
+    mail: boolean2().optional(),
+    storage: boolean2().optional(),
+    collab: boolean2().optional(),
+    contacts: boolean2().optional()
+  }).optional()
+});
+var agentConfigUpdateInput = object({
+  activeModelId: string2().trim().min(1).max(64).optional(),
+  persona: string2().max(AGENT_PERSONA_MAX).optional(),
+  mode: _enum(agentPermissionModes).optional(),
+  tools: agentToolsConfigSchema.optional()
+});
+var AGENT_PROVIDER_LABEL_MAX = 60;
+var agentProviderInput = object({
+  label: string2().trim().min(1).max(AGENT_PROVIDER_LABEL_MAX),
+  baseUrl: string2().trim().min(1).max(500),
+  apiKey: string2().trim().min(1).max(500)
+});
+var agentProviderModelInput = object({
+  model: string2().trim().min(1).max(200),
+  contextWindow: number2().int().min(1000).max(1e8).nullable().optional(),
+  maxOutput: number2().int().min(100).max(1e7).nullable().optional(),
+  inputText: boolean2().optional(),
+  inputImage: boolean2().optional(),
+  inputVideo: boolean2().optional()
+});
+var agentSessionCreateInput = object({
+  kind: _enum(agentSessionKinds).default("chat"),
+  title: string2().trim().max(AGENT_TITLE_MAX).optional(),
+  repeatCron: string2().trim().max(100).optional(),
+  notifyMail: boolean2().optional()
+}).refine((v) => v.kind === "chat" || !!v.title && v.title.length > 0, {
+  message: "task requires title"
+});
+var agentSessionRenameInput = object({ title: string2().trim().min(1).max(AGENT_TITLE_MAX) });
+var agentSessionListQuery = object({
+  kind: _enum(agentSessionKinds).optional(),
+  limit: exports_coerce.number().int().min(1).max(200).optional()
+});
+var agentMemoryCreateInput = object({
+  type: _enum(agentMemoryTypes),
+  content: string2().trim().min(1).max(AGENT_MEMORY_MAX),
+  sessionId: string2().max(64).optional()
+});
+var agentTraceStatuses = ["running", "ok", "error", "pending", "approved", "rejected"];
+var agentPlanItemStates = ["done", "current", "todo"];
+var agentTraceCommon = {
+  id: string2().min(1).max(64),
+  status: _enum(agentTraceStatuses),
+  round: number2().int().min(1),
+  title: string2().max(200),
+  durationMs: number2().int().min(0).optional()
+};
+var agentPlanTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("plan"),
+  items: array(object({ text: string2().max(500), state: _enum(agentPlanItemStates) })).max(50)
+});
+var agentWebTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("web"),
+  url: string2().max(2000),
+  summary: string2().max(8000)
+});
+var agentArtifactSchema = object({
+  name: string2().max(200),
+  mime: string2().max(100),
+  path: string2().max(500),
+  rows: number2().int().min(0).optional()
+});
+var agentCodeTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("code"),
+  code: string2().max(50000).optional(),
+  result: string2().max(20000).optional(),
+  artifact: agentArtifactSchema.optional()
+});
+var agentCrabTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("crab"),
+  command: string2().max(2000),
+  response: string2().max(8000).optional()
+});
+var agentApprovalTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("approval"),
+  tool: string2().max(64),
+  action: string2().max(200),
+  detail: string2().max(8000)
+});
+var agentTraceSchema = discriminatedUnion("kind", [
+  agentPlanTraceSchema,
+  agentWebTraceSchema,
+  agentCodeTraceSchema,
+  agentCrabTraceSchema,
+  agentApprovalTraceSchema
+]);
+var agentMemoryChipSchema = object({
+  text: string2().max(200),
+  memoryId: string2().max(64).optional()
+});
+var agentCompressionChipSchema = object({
+  foldedRounds: number2().int().min(1),
+  summary: string2().max(4000)
+});
 
 // ../../packages/cloudkit/src/crypto.ts
 var enc = new TextEncoder;
@@ -6548,9 +6851,6 @@ function formatTime(ms) {
 function fmtCredits(cents) {
   return (cents / 100).toLocaleString("en-US");
 }
-function fmtUsd(cents) {
-  return `$${cents / 100}`;
-}
 var usage = `crab — Crab Cloud CLI（Agent-first 入口）
 发布物经 npm 分发：npx @crabcloud/cli <command>（全局安装后短名 crab 等价）
 
@@ -6574,7 +6874,10 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
   mail list [--folder inbox|sent|drafts|archive|trash] [--unread] [--limit N] [--json]
                        列出邮件（cursor 分页契约与 Web 工作台一致）
   mail read <id> [--json]            读取邮件正文（自动置已读）
+  mail unread <id>                   标记为未读
   mail search <query> [--json]       全文搜索（主题/发件人/收件人/正文）
+  mail folders [--json]              邮箱概览（各夹总数/未读 + 本月收发统计）
+  mail activity [--json]             邮箱操作流（谁读过/谁代发，最近 50 条）
   mail send --to a@x.cc|联系人名,b@y.cn [--cc c@z.io] --subject "..." --body "..." | --body-file <path>
        [--attach <云盘id|文件名>,...] [--in-reply-to <message-id>]
                                          回信线程锚点（原信 RFC Message-ID，crab mail read 可见）
@@ -6582,7 +6885,7 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
                        命中采用，多候选报错列出）；--attach 引用云盘已有对象
                        （id 或文件名精确唯一命中，未绑信对象，≤10 个，大文件
                        自动转下载链接）；平台内（@crabcloud.cc）免费，外部出站
-                       2 积分/封
+                       0.02 积分/封
   mail archive|trash|delete <id>     移夹 / 废纸篓 / 彻底删除（delete 不可恢复）
   contacts list [query] [--offset N] [--json]     列出联系人（地址前缀/显示名匹配）
   contacts add <address> [--name 名] [--note 备注] [--json]
@@ -6591,13 +6894,15 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
   contacts invite [--reset] [--json] 我的邀请码、链接与统计（--reset 重置，旧链接失效）
   contacts invitees [--offset N] [--json]
                                      我邀请的人（直接下级 + 间接计数）
-  storage ls [--q 关键字] [--source files|media|mail] [--category <id|none>]
+  storage ls [--q 关键字] [--source files|media|mail|collab|agent] [--category <id|none>]
                [--type doc|image|video|archive|code] [--tag a,b] [--trash]
-               [--shared] [--recent] [--message-id <id>] [--limit N] [--offset N] [--json]
-                                     列出云盘对象（跨来源统一视图，能力与 Web 云盘一致）
+               [--shared] [--recent] [--encrypted only|plain] [--message-id <id>]
+               [--limit N] [--offset N] [--json]
+                                     列出云盘对象（跨来源统一视图，能力与 Web 云盘一致；
+                                     --encrypted only=仅保险箱、plain=排除保险箱）
   storage upload <file...> [--json]  上传一个或多个文件（直传优先，自动回退中转）；
-                                     files 域默认端到端加密，口令 --passphrase /
-                                     CRAB_PASSPHRASE 提供，终端内运行时交互输入
+                                     默认明文上传（2026-10 基础服务化）；--passphrase /
+                                     CRAB_PASSPHRASE 提供时端到端加密（保险箱文件）
   storage download <id|文件名> [-o 输出路径]
                                      下载对象内容（默认按原文件名存到当前目录；
                                      加密对象需口令，终端内运行时交互输入）
@@ -6610,7 +6915,7 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
                                      公开 / 收回公开（公开时打印公开直链）
   storage rm|restore|purge <id|文件名>
                                      回收站 / 恢复 / 彻底删除（purge 不可恢复）
-  storage quota [--json]             存储水位（统一容量账：文件/素材/邮件附件一本账）
+  storage quota [--json]             存储水位（统一一本账：五来源分项 + 保险箱计数）
   storage share <id|文件名> [--expires 7|30|90|forever] [--passcode 提取码]
                        创建分享链接（加密文件链接自带解密钥匙 #fragment）
   storage key [--remember|--forget]
@@ -6625,10 +6930,11 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
                                      分类重命名 / 改色
   storage rmcat <id|分类名>          删除分类（其中文件回落未分类）
   storage tags [--json]              标签汇总
+  storage activity [--json]          云盘操作流（读取/上传/删除/建分享，最近 50 条）
   collab spaces [--json]             列出我所在的协作空间（任务/成员计数与限额）
   collab space create <名称> [--allocation-mb N] [--json]
                                      创建独立协作空间（消耗 5 积分；默认自分配 500MB
-                                     存储占订阅总池，可随时调）
+                                     存储占订阅总池；后续调整在网页端空间设置）
   collab tasks [--space <arg>] [--status open|done] [--q 关键字]
                [--limit N] [--cursor <cursor>] [--json]
                                      列出任务（含摘要/记录数；--q 搜标题与记录正文）
@@ -6859,10 +7165,10 @@ async function creditsPricing() {
     console.log("暂无动作计价项。");
     return 0;
   }
-  console.log("动作计价（1 积分 = $1，价目为 $ 口径）：");
+  console.log("动作计价（1 积分 = $1，价目为积分数）：");
   for (const item of actions) {
     const label = CREDIT_ACTION_LABELS[item.action] ?? item.action;
-    console.log(`  ${item.action.padEnd(24)} ${label}  ${fmtUsd(item.creditCents)}`);
+    console.log(`  ${item.action.padEnd(24)} ${label}  ${fmtCredits(item.creditCents)} 积分`);
   }
   return 0;
 }
@@ -7114,8 +7420,8 @@ async function mailSend() {
     const hit = await resolveStorageObject(credentials, token);
     if (typeof hit === "number")
       return hit;
-    if (typeof hit === "object" && hit.isEncrypted) {
-      console.error(`「${token}」是端到端加密文件，暂不能作为邮件附件发送（服务端无法解密）。`);
+    if (typeof hit === "object" && hit.isEncrypted && hit.wrappedDataKey?.startsWith("u1.")) {
+      console.error(`「${token}」是保险箱文件（端到端加密），不能作为邮件附件发送。`);
       return EXIT_USAGE;
     }
     const id = typeof hit === "object" ? hit.id : hit;
@@ -7140,7 +7446,7 @@ async function mailSend() {
   if (attachmentIds.length > 0)
     console.log(`  附件 ${attachmentIds.length} 个（云盘引用，不复制）`);
   if (result.chargedCredits > 0)
-    console.log(`  消耗：${fmtUsd(result.chargedCredits)}`);
+    console.log(`  消耗：${fmtCredits(result.chargedCredits)} 积分`);
   if (result.failedExternal > 0)
     console.log(`  ⚠ ${result.failedExternal} 个外部收件人发送失败，对应积分已退回`);
   return 0;
@@ -7161,6 +7467,72 @@ async function mailMove(action, id) {
   console.log(`✓ ${action === "archive" ? "已归档" : action === "trash" ? "已移入废纸篓" : "已彻底删除"}（${id}）`);
   return 0;
 }
+async function mailUnread(id) {
+  if (!id) {
+    console.error("用法：crab mail unread <id>（id 见 crab mail list）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, `/v1/mail/messages/${encodeURIComponent(id)}/read`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ unread: true })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "标记未读失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  console.log(`✓ 已标为未读（${id}）。`);
+  return 0;
+}
+var MAILBOX_FOLDER_LABELS = { inbox: "收件箱", sent: "已发送", drafts: "草稿", archive: "归档", trash: "废纸篓" };
+async function mailFoldersOverview() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/mail/folders", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取邮箱概览失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const overview = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(overview, null, 2));
+    return 0;
+  }
+  console.log(overview.address);
+  for (const folder of overview.folders) {
+    console.log(`  ${MAILBOX_FOLDER_LABELS[folder.folder] ?? folder.folder}  ${folder.total} 封${folder.unread > 0 ? `（未读 ${folder.unread}）` : ""}`);
+  }
+  console.log(`本月：收 ${overview.month.received} · 发 ${overview.month.sent}（外部出站 ${overview.month.outbound}）`);
+  return 0;
+}
+var MAIL_ACTIVITY_LABELS = { read: "读取", drafted: "撰写", sent: "发送" };
+async function mailActivity() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/mail/agent-activity", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取邮箱活动失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const activity = res.body.data.activity;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(activity, null, 2));
+    return 0;
+  }
+  if (activity.length === 0) {
+    console.log("还没有邮箱操作记录。");
+    return 0;
+  }
+  for (const entry of activity) {
+    console.log(`${formatTime(entry.createdAt)}  ${(MAIL_ACTIVITY_LABELS[entry.action] ?? entry.action).padEnd(4)}  ${entry.actorType === "agent" ? "agent" : "user "}  ${entry.actorLabel ?? "—"}  ${entry.subject || "（无主题）"}`);
+  }
+  return 0;
+}
 function contactDisplayName(contact) {
   return contact.displayName ?? contact.resolvedName ?? contact.address;
 }
@@ -7272,10 +7644,7 @@ async function contactsInvite(reset) {
   const credentials = requireCredentials();
   if (typeof credentials === "number")
     return credentials;
-  const res = await api2(credentials.apiBase, "/v1/contacts/invite/reset", {
-    method: reset ? "POST" : "GET",
-    headers: authHeaders(credentials)
-  });
+  const res = await api2(credentials.apiBase, reset ? "/v1/contacts/invite/reset" : "/v1/contacts/invite", { method: reset ? "POST" : "GET", headers: authHeaders(credentials) });
   if (res.status !== 200) {
     console.error(errorMessage(res.body, "获取邀请链接失败。"));
     return exitCodeForApiError(res.body);
@@ -7321,7 +7690,7 @@ async function contactsInvitees() {
     console.log(`（还有更多：contacts invitees --offset ${page.nextOffset}）`);
   return 0;
 }
-var STORAGE_SOURCES = ["files", "media", "mail"];
+var STORAGE_SOURCES = ["files", "media", "mail", "collab", "agent"];
 var STORAGE_TYPES = ["doc", "image", "video", "archive", "code"];
 var MIME_BY_EXT = {
   png: "image/png",
@@ -7358,9 +7727,10 @@ function formatBytesCli(n) {
   return `${n} B`;
 }
 function printStorageRow(o) {
+  const encFlag = o.isEncrypted ? o.wrappedDataKey?.startsWith("u1.") ? "保险箱" : "平台加密" : null;
   const flags = [
-    o.source !== "files" ? o.source === "media" ? "素材" : "邮件附件" : null,
-    o.isEncrypted ? "加密" : null,
+    o.source !== "files" ? o.source === "media" ? "素材" : o.source === "mail" ? "邮件附件" : o.source === "collab" ? "协作" : "Agent 产物" : null,
+    encFlag,
     o.isPublic ? "公开" : null
   ].filter(Boolean);
   console.log(`${o.id}  ${o.filename}  ${formatBytesCli(o.sizeBytes)}  ${formatTime(o.createdAt)}${flags.length > 0 ? `  [${flags.join(" · ")}]` : ""}`);
@@ -7430,6 +7800,15 @@ async function storageList() {
   const tags = readFlag("--tag");
   if (tags)
     params.set("tags", tags);
+  const encrypted = readFlag("--encrypted");
+  if (encrypted) {
+    if (encrypted !== "only" && encrypted !== "plain") {
+      console.error(`未知 encrypted 过滤：${encrypted}
+可用：only（仅保险箱）、plain（排除保险箱）`);
+      return EXIT_USAGE;
+    }
+    params.set("encrypted", encrypted);
+  }
   if (hasFlag("--trash"))
     params.set("trash", "1");
   if (hasFlag("--shared"))
@@ -7688,7 +8067,7 @@ async function driveMasterKey(credentials) {
     return raw;
   return importAesKey(raw);
 }
-async function storageUploadOne(credentials, filePath) {
+async function storageUploadOne(credentials, filePath, encrypt) {
   let buf;
   try {
     buf = readFileSync2(filePath);
@@ -7698,22 +8077,26 @@ async function storageUploadOne(credentials, filePath) {
   }
   const filename = basename(filePath);
   const mimeType = mimeFor(filename);
-  const master = await driveMasterKey(credentials);
-  if (typeof master === "number")
-    return master;
-  const dataKey = randomKeyBytes(32);
-  const sealed = await aeadEncrypt(await importAesKey(dataKey), new Uint8Array(buf), DATA_AAD);
-  const cipher = new Uint8Array([...sealed.iv, ...sealed.ciphertext]);
-  const wrapped = await aeadEncrypt(master, dataKey, DATA_AAD);
-  const wrappedDataKey = `u1.${sealToB64url({ iv: wrapped.iv, ciphertext: wrapped.ciphertext })}`;
+  let body = new Uint8Array(buf);
+  let wrappedDataKey = null;
+  if (encrypt) {
+    const master = await driveMasterKey(credentials);
+    if (typeof master === "number")
+      return master;
+    const dataKey = randomKeyBytes(32);
+    const sealed = await aeadEncrypt(await importAesKey(dataKey), body, DATA_AAD);
+    body = new Uint8Array([...sealed.iv, ...sealed.ciphertext]);
+    const wrapped = await aeadEncrypt(master, dataKey, DATA_AAD);
+    wrappedDataKey = `u1.${sealToB64url({ iv: wrapped.iv, ciphertext: wrapped.ciphertext })}`;
+  }
   const presign = await api2(credentials.apiBase, "/v1/storage/presign", {
     method: "POST",
     headers: authHeaders(credentials),
-    body: JSON.stringify({ filename, mimeType, sizeBytes: cipher.byteLength, enc: true })
+    body: JSON.stringify({ filename, mimeType, sizeBytes: body.byteLength, enc: wrappedDataKey !== null })
   });
   if (presign.status === 200 || presign.status === 201) {
     const { fileId, uploadUrl } = presign.body.data;
-    const put = await fetch(uploadUrl, { method: "PUT", body: cipher, headers: { "content-type": mimeType } });
+    const put = await fetch(uploadUrl, { method: "PUT", body, headers: { "content-type": mimeType } });
     if (!put.ok) {
       console.error(`直传失败（${put.status}）：${filename}`);
       return 1;
@@ -7721,7 +8104,7 @@ async function storageUploadOne(credentials, filePath) {
     const complete = await api2(credentials.apiBase, `/v1/storage/${encodeURIComponent(fileId)}/complete`, {
       method: "POST",
       headers: authHeaders(credentials),
-      body: JSON.stringify({ isEncrypted: true, wrappedDataKey })
+      body: JSON.stringify(wrappedDataKey ? { isEncrypted: true, wrappedDataKey } : {})
     });
     if (complete.status !== 200 && complete.status !== 201) {
       console.error(errorMessage(complete.body, `记账失败：${filename}`));
@@ -7731,28 +8114,30 @@ async function storageUploadOne(credentials, filePath) {
     if (hasFlag("--json"))
       console.log(JSON.stringify(object, null, 2));
     else
-      console.log(`✓ 已上传（已加密）：${object.filename}（id ${object.id}）`);
+      console.log(`✓ 已上传${wrappedDataKey ? "（已加密）" : ""}：${object.filename}（id ${object.id}）`);
     return 0;
   }
   if (presign.body?.error?.code === "presign_unavailable") {
     const form = new FormData;
-    form.append("file", new Blob([cipher], { type: mimeType }), filename);
-    form.append("enc", "1");
-    form.append("wrappedDataKey", wrappedDataKey);
+    form.append("file", new Blob([body], { type: mimeType }), filename);
+    if (wrappedDataKey) {
+      form.append("enc", "1");
+      form.append("wrappedDataKey", wrappedDataKey);
+    }
     const res = await fetch(`${credentials.apiBase}/v1/storage`, {
       method: "POST",
       headers: authHeaders(credentials),
       body: form
     });
-    const body = await res.json().catch(() => ({}));
+    const body2 = await res.json().catch(() => ({}));
     if (res.status !== 200 && res.status !== 201) {
-      console.error(body.error?.message ?? `上传失败：${filename}`);
-      return exitCodeForApiError(body);
+      console.error(body2.error?.message ?? `上传失败：${filename}`);
+      return exitCodeForApiError(body2);
     }
     if (hasFlag("--json"))
-      console.log(JSON.stringify(body.data, null, 2));
+      console.log(JSON.stringify(body2.data, null, 2));
     else
-      console.log(`✓ 已上传（已加密）：${body.data?.filename}（id ${body.data?.id}）`);
+      console.log(`✓ 已上传${wrappedDataKey ? "（已加密）" : ""}：${body2.data?.filename}（id ${body2.data?.id}）`);
     return 0;
   }
   console.error(errorMessage(presign.body, `上传失败：${filename}`));
@@ -7760,16 +8145,21 @@ async function storageUploadOne(credentials, filePath) {
 }
 async function storageUpload(paths) {
   const files = [];
+  let encrypt = false;
   for (let i = 0;i < paths.length; i++) {
     if (paths[i].startsWith("--")) {
-      if (paths[i] === "--passphrase")
+      if (paths[i] === "--passphrase") {
+        encrypt = true;
         i++;
+      }
       continue;
     }
     files.push(paths[i]);
   }
+  if (!encrypt && process.env.CRAB_PASSPHRASE)
+    encrypt = true;
   if (files.length === 0) {
-    console.error("用法：crab storage upload <file...> [--passphrase 口令] [--json]");
+    console.error("用法：crab storage upload <file...> [--passphrase 口令] [--json]（缺省明文上传；带口令则端到端加密）");
     return EXIT_USAGE;
   }
   const credentials = requireCredentials();
@@ -7777,7 +8167,7 @@ async function storageUpload(paths) {
     return credentials;
   let code = 0;
   for (const file of files) {
-    const result = await storageUploadOne(credentials, file);
+    const result = await storageUploadOne(credentials, file, encrypt);
     if (result !== 0 && code === 0)
       code = result;
     if (result === EXIT_AUTH || result === EXIT_SCOPE)
@@ -8034,7 +8424,8 @@ async function storageShares(token) {
   }
   for (const s of rows) {
     const state = s.revokedAt ? "已撤销" : s.expiresAt !== null && s.expiresAt <= Date.now() ? "已过期" : "生效中";
-    console.log(`${s.id}  …${s.token.slice(-12)}  ${state}  下载 ${s.downloadCount} 次  ${formatTime(s.createdAt)}${s.hasPasscode ? "  [提取码]" : ""}`);
+    const srcLabel = { drive: "云盘", mail: "邮件引用", collab: "协作引用", api: "API" }[s.source ?? "drive"];
+    console.log(`${s.id}  …${s.token.slice(-12)}  ${state}  ${srcLabel}  下载 ${s.downloadCount} 次  ${formatTime(s.createdAt)}${s.hasPasscode ? "  [提取码]" : ""}`);
   }
   return 0;
 }
@@ -8072,9 +8463,10 @@ async function storageQuota() {
     return 0;
   }
   const pct = quota.quotaBytes > 0 ? (quota.usedBytes / quota.quotaBytes * 100).toFixed(1) : "0";
+  const libraryCount = (quota.counts.all ?? 0) - (quota.counts.vault ?? 0);
   console.log(`已用 ${formatBytesCli(quota.usedBytes)} / ${formatBytesCli(quota.quotaBytes)}（${pct}%）`);
-  console.log(`  文件 ${formatBytesCli(quota.bySource.files)} · 素材 ${formatBytesCli(quota.bySource.media)} · 邮件附件 ${formatBytesCli(quota.bySource.mail)} · 回收站 ${formatBytesCli(quota.trashBytes)}`);
-  console.log(`  对象数：全部 ${quota.counts.all ?? 0} · 素材 ${quota.counts.media ?? 0} · 邮件附件 ${quota.counts.mail ?? 0} · 共享 ${quota.counts.shared ?? 0} · 回收站 ${quota.counts.trash ?? 0}`);
+  console.log(`  文件 ${formatBytesCli(quota.bySource.files)} · 素材 ${formatBytesCli(quota.bySource.media)} · ` + `邮件附件 ${formatBytesCli(quota.bySource.mail)} · 协作 ${formatBytesCli(quota.bySource.collab)} · ` + `Agent ${formatBytesCli(quota.bySource.agent)} · 回收站 ${formatBytesCli(quota.trashBytes)}`);
+  console.log(`  对象数：全部 ${quota.counts.all ?? 0} · 素材库 ${libraryCount}（保险箱 ${quota.counts.vault ?? 0}） · ` + `共享 ${quota.counts.shared ?? 0} · 回收站 ${quota.counts.trash ?? 0}`);
   return 0;
 }
 async function storageCategories() {
@@ -8230,6 +8622,35 @@ async function storageTags() {
     console.log(`${row.tag}  (${row.count})`);
   return 0;
 }
+var STORAGE_ACTIVITY_LABELS = {
+  "object.read": "读取",
+  "object.uploaded": "上传",
+  "object.deleted": "删除",
+  "share.created": "建分享"
+};
+async function storageActivity() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/storage/agent-activity", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取云盘活动失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const activity = res.body.data.activity;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(activity, null, 2));
+    return 0;
+  }
+  if (activity.length === 0) {
+    console.log("还没有云盘操作记录。");
+    return 0;
+  }
+  for (const entry of activity) {
+    console.log(`${formatTime(entry.createdAt)}  ${(STORAGE_ACTIVITY_LABELS[entry.action] ?? entry.action).padEnd(4)}  ${entry.actorType === "agent" ? "agent" : "user "}  ${entry.actorLabel ?? "—"}  ${entry.objectName || entry.objectId}`);
+  }
+  return 0;
+}
 var COLLAB_TASK_STATUSES = ["open", "done"];
 function collabSpaceToken(space) {
   return space.kind === "default" ? "default" : `space:${space.name}`;
@@ -8306,7 +8727,7 @@ async function collabSpacesList() {
   }
   for (const s of data.spaces) {
     const storage = s.kind === "independent" ? ` · 存储 ${formatBytesCli(s.storageUsedBytes)}/${formatBytesCli(s.storageAllocatedBytes)}` : "";
-    console.log(`${collabSpaceToken(s)}  ${s.status === "archived" ? "[已归档·只读] " : ""}任务 ${s.taskCount}/${s.limits.taskLimit} · 受邀成员 ${s.memberCount}/${s.limits.invitedMemberLimit}${storage}`);
+    console.log(`${collabSpaceToken(s)}  ${s.status === "archived" ? "[已归档·只读] " : ""}任务 ${s.taskCount}/${s.limits.taskLimit} · 成员 ${s.memberCount}/${s.limits.memberLimit}${storage}`);
     console.log(`    id ${s.id}`);
   }
   console.log(`独立空间名额：${data.independentUsed}/${data.independentLimit}（创建消耗 5 积分：crab collab space create <名称>）`);
@@ -8339,7 +8760,7 @@ async function collabSpaceCreate(name) {
     return 0;
   }
   console.log(`✓ 独立协作空间已创建（id ${data.spaceId}）`);
-  console.log(`  消耗：${fmtUsd(data.chargedCredits)} · --space space:${name} 即可指向它`);
+  console.log(`  消耗：${fmtCredits(data.chargedCredits)} 积分 · --space space:${name} 即可指向它`);
   return 0;
 }
 async function collabTasksList() {
@@ -8782,14 +9203,20 @@ switch (command) {
       process.exit(await mailList());
     if (sub === "read")
       process.exit(await mailRead(args[2]));
+    if (sub === "unread")
+      process.exit(await mailUnread(args[2]));
     if (sub === "search")
       process.exit(await mailSearch(args.slice(2).join(" ") || undefined));
     if (sub === "send")
       process.exit(await mailSend());
     if (sub === "archive" || sub === "trash" || sub === "delete")
       process.exit(await mailMove(sub, args[2]));
+    if (sub === "folders")
+      process.exit(await mailFoldersOverview());
+    if (sub === "activity")
+      process.exit(await mailActivity());
     console.error(sub ? `未知子命令：mail ${sub}
-` : `缺少子命令：mail list | read | search | send | archive | trash | delete
+` : `缺少子命令：mail list | read | unread | search | send | archive | trash | delete | folders | activity
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);
@@ -8852,8 +9279,24 @@ switch (command) {
       process.exit(await storageUnshare(args[2]));
     if (sub === "key")
       process.exit(await storageKeyCmd());
+    if (sub === "activity")
+      process.exit(await storageActivity());
     console.error(sub ? `未知子命令：storage ${sub}
-` : `缺少子命令：storage ls | upload | download | rename | tag | category | publish | unpublish | rm | restore | purge | quota | categories | mkcat | rencat | rmcat | tags | share | shares | unshare | key
+` : `缺少子命令：storage ls | upload | download | rename | tag | category | publish | unpublish | rm | restore | purge | quota | categories | mkcat | rencat | rmcat | tags | share | shares | unshare | key | activity
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "agent": {
+    const sub = args[1];
+    if (sub === "status")
+      process.exit(await agentStatus());
+    if (sub === "sessions")
+      process.exit(await agentSessions());
+    if (sub === "approvals")
+      process.exit(await agentApprovals());
+    console.error(sub ? `未知子命令：agent ${sub}
+` : `缺少子命令：agent status | sessions | approvals
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);
@@ -8928,3 +9371,73 @@ switch (command) {
     console.log(usage);
     process.exit(EXIT_USAGE);
 }
+async function agentStatus() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const [sessionsRes, approvalsRes] = await Promise.all([
+    api2(credentials.apiBase, "/v1/agent/sessions", { headers: authHeaders(credentials) }),
+    api2(credentials.apiBase, "/v1/agent/approvals", { headers: authHeaders(credentials) })
+  ]);
+  if (sessionsRes.status !== 200 || approvalsRes.status !== 200) {
+    console.error(errorMessage(sessionsRes.body ?? approvalsRes.body, "获取 Agent 状态失败。"));
+    if (sessionsRes.body?.error?.code === "scope_denied") {
+      console.error("提示：需要 agent.read scope——运行 crab login --scopes agent 重新授权。");
+    }
+    return 1;
+  }
+  const sessions = sessionsRes.body.data?.sessions ?? [];
+  const approvals = approvalsRes.body.data?.approvals ?? [];
+  const running = sessions.filter((x) => x.status === "running").length;
+  const pending = approvals.filter((x) => x.status === "pending").length;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ sessions: sessions.length, running, pendingApprovals: pending }, null, 2));
+    return 0;
+  }
+  console.log(`个人云 Agent：会话 ${sessions.length} · 运行中 ${running} · 待审批 ${pending}`);
+  return 0;
+}
+async function agentSessions() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/agent/sessions", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取会话列表失败。"));
+    return 1;
+  }
+  const sessions = res.body.data?.sessions ?? [];
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(sessions, null, 2));
+    return 0;
+  }
+  for (const x of sessions) {
+    console.log(`${x.kind === "task" ? "[任务]" : "[对话]"} ${x.title}  ${x.status}${x.repeatCron ? `  cron ${x.repeatCron}` : ""}  ${new Date(x.updatedAt).toLocaleString("zh-CN")}`);
+  }
+  console.log(`共 ${sessions.length} 个会话`);
+  return 0;
+}
+async function agentApprovals() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/agent/approvals", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取审批队列失败。"));
+    return 1;
+  }
+  const approvals = res.body.data?.approvals ?? [];
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(approvals, null, 2));
+    return 0;
+  }
+  if (approvals.length === 0) {
+    console.log("没有待处理或已过期的审批。");
+    return 0;
+  }
+  for (const x of approvals) {
+    console.log(`${x.status === "pending" ? "[待审批]" : "[已超时]"} ${x.tool}  ${x.sessionTitle}`);
+    console.log(`  ${x.summary.slice(0, 160)}`);
+  }
+  return 0;
+}

package/dist/skills/crabcloud/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: crabcloud
-description: Manage the user's Crab Cloud personal cloud account and agent tokens through the `crab` CLI — check identity/subscription/credits, list and revoke authorized agent tokens, and re-authorize with specific scopes or scope groups. Use this skill whenever the user asks about their Crab Cloud account ("我的账号信息", "who am I on crabcloud"), wants to see or clean up authorized agents/tokens ("看看我授权了哪些 agent", "revoke that old token", "撤销那个旧令牌"), manages their contacts ("我的联系人", "把 zhangsan 加到联系人", "我的邀请码"), or asks how to connect their coding agent to Crab Cloud — even if they never say "crab" or "Crab Cloud" explicitly. Contacts are managed with `crab contacts …` in this skill; email lives in the crabcloud-mail skill (crab mail …) and the Drive in crabcloud-storage (crab storage …); collab ships in a later phase.
+description: Manage the user's Crab Cloud personal cloud account and agent tokens through the `crab` CLI — check identity/subscription/credits, list and revoke authorized agent tokens, and re-authorize with specific scopes or scope groups. Use this skill whenever the user asks about their Crab Cloud account ("我的账号信息", "who am I on crabcloud"), wants to see or clean up authorized agents/tokens ("看看我授权了哪些 agent", "revoke that old token", "撤销那个旧令牌"), manages their contacts ("我的联系人", "把 zhangsan 加到联系人", "我的邀请码"), or asks how to connect their coding agent to Crab Cloud — even if they never say "crab" or "Crab Cloud" explicitly. Contacts are managed with `crab contacts …` in this skill; email lives in the crabcloud-mail skill (crab mail …), the Drive in crabcloud-storage (crab storage …), and collab in crabcloud-collab (crab collab …).
 ---
 
 # Crab Cloud（平台 / 账号域）
@@ -10,8 +10,8 @@ Crab Cloud 是用户的个人云底座：账号、订阅与积分是平台层，
 （`~/.config/crabcloud/credentials.json`，0600），服务端只存令牌哈希、全程审计。
 本 skill 覆盖**平台、账号域与联系人**（`crab contacts …`）；邮箱见
 `crabcloud-mail` skill（`crab mail …`），
-云盘见 `crabcloud-storage` skill（`crab storage …`）；协作随后续阶段
-提供——用户问到时如实说明，**不要猜命令**。
+云盘见 `crabcloud-storage` skill（`crab storage …`）；协作见
+`crabcloud-collab` skill（`crab collab …`）。
 
 ## 第一步：确认 CLI 可用
 
@@ -45,7 +45,7 @@ Crab Cloud 是用户的个人云底座：账号、订阅与积分是平台层，
 
 积分命令需 `credits.read` scope（`account` 组含它）：退出码 4 报缺该 scope 时，
 引导 `crab login --scopes account` 重新授权。积分额度一律以**积分数**表述
-（100 积分 = $1.00，仅价格类口径用美元）；充值/下单是 Web 会话能力，CLI/Agent
+（**1 积分 = $1**，仅价格类口径用美元）；充值/下单是 Web 会话能力，CLI/Agent
 令牌不动账——用户要充值时引导网页账单页（crabcloud.cc/account/billing）。
 拿不准令牌 id 时先 `crab tokens list` 核对；`revoke` 只接受列表里的 id。
 
@@ -76,11 +76,11 @@ Crab Cloud 是用户的个人云底座：账号、订阅与积分是平台层，
   不要怂恿用户一次性给全量 scope。`--scopes` 支持组名（`mail` = 读写搜删四项
   整组）与单个 scope 混用；组目录见 `crab help`，可用组：account / mail /
   storage（云盘，含素材与附件）/ collab / contacts。
-- 如实转述能力边界：协作尚未上线——相关请求如实说明，引导用户
-  用网页（crabcloud.cc），不要编造命令或输出；联系人已上线，用 `crab contacts`
+- 如实转述能力边界，不要编造命令或输出：联系人用 `crab contacts`
   （list / add / rm / invite / invitees；scope contacts.read/write，程序消费加
-  `--json`）处理；邮箱请求转交 `crabcloud-mail`
-  skill，云盘请求转交 `crabcloud-storage` skill。
+  `--json`）处理；邮箱请求转交 `crabcloud-mail` skill，云盘请求转交
+  `crabcloud-storage` skill，协作请求转交 `crabcloud-collab` skill
+  （`crab collab …`，已上线）。
 - 账号安全操作（修改密码、登录设备/会话的查看与吊销）**有意不开放给 agent
   通道**：改密对令牌持有者是账号接管面，会话属于"人的浏览器会话"。用户让
   agent 做这些时，如实说明并引导到网页个人中心（crabcloud.cc/account）操作，

package/dist/skills/crabcloud-agent/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: crabcloud-agent
+description: Check the status of the user's personal cloud Agent in Crab Cloud through the `crab agent` CLI — running sessions and tasks, and the outbound-action approval queue (pending / expired). Use this skill whenever the user asks about their in-cloud agent ("我的 agent 在干嘛", "agent 跑完了吗", "有没有待审批的操作", "看看 agent 审批队列"), wants a quick health check of their Agent workbench, or asks what the agent has been doing — even if they never say "crab" or "Crab Cloud" explicitly. This skill is read-only; approving or rejecting happens in the Agent workbench web UI (agent.crabcloud.cc), not from the CLI.
+---
+
+# 个人云 Agent（查看域）
+
+Crab Cloud 的个人云 Agent 是一个用户一个固定 agent：长记忆、权限三档、
+能读平台数据（邮箱/云盘/协作）、写动作过审批全留痕。本 skill 覆盖**只读
+查看**（`crab agent …`，需 `agent.read` scope）；审批的批准/拒绝在网页
+工作台完成（流内卡片），CLI 不做决策。
+
+## 第一步：确认可用
+
+先确认 `crab` 命令存在：`crab --help`。若命令缺失，引导安装：
+
+```
+npx @crabcloud/cli init
+```
+
+已安装但命令缺失时升级：`npx @crabcloud/cli@latest init`。所有
+`crab <cmd>` 都可用 `npx @crabcloud/cli <cmd>` 等价执行。
+
+## 命令
+
+### 状态总览
+
+```
+crab agent status
+```
+
+输出：会话总数、运行中数量、待审批数量。`--json` 输出机器可读 JSON。
+
+### 会话列表
+
+```
+crab agent sessions
+```
+
+列出对话与任务（标题 / 状态 / 定时 cron / 最近更新时间）。`--json` 可用。
+
+### 审批队列
+
+```
+crab agent approvals
+```
+
+列出待处理与已超时的出站审批（工具名 / 参数摘要 / 来源会话）。
+**这里只看，不批**——告诉用户：打开 Agent 工作台（agent.crabcloud.cc）→
+对应会话的流内审批卡上点「批准执行 / 拒绝」；24 小时未处理的会自动失效，
+且失效后即使补批也不会执行（agent 需重新发起）。
+
+## 边界
+
+- 只读：本 skill 的命令都不会改变 agent 状态；决策一律引导到工作台网页。
+- BYOK 配置（API 端点 / Key）不在 CLI 视野——在「模型」管理页维护。
+- 需要写操作走平台时，外部 agent 用既有域命令：`crab mail …` /
+  `crab storage …` / `crab collab …`（各自 skill），与本 skill 互补。

package/dist/skills/crabcloud-collab/SKILL.md

@@ -83,6 +83,10 @@ skill 覆盖协作域的 agent 通道；账号/令牌管理见 `crabcloud` skill
   补一条更正记录，不要试图「撤回」。
 - **摘要是可变当前态**：表达「现在进展到哪」，不是流水账；每次推送记录后若
   摘要已过时，顺手 `crab collab task summary` 刷新，让不看全程的人一眼看懂。
+- **空间级管理走网页端**：改名/归档/调整自分配存储/扩容（任务+20、成员+5）/
+  移除成员是 owner 的网页操作，Agent 令牌一律被服务端拒绝——用户要这些时如实
+  说明并引导网页端，**不要换姿势重试**；建独立空间（`collab space create`）与
+  邀请成员（`collab invite`）例外，Agent 可执行。
 - **建独立空间是付费动作（5 积分）**：先向用户复述名称与自分配存储（默认
   500MB，占订阅总池），确认后再执行；`collab space create` 不要当作顺手操作。
 - **邀请有前置**：目标必须是联系人簿里已关联的平台用户（`crab contacts add`
@@ -90,6 +94,8 @@ skill 覆盖协作域的 agent 通道；账号/令牌管理见 `crabcloud` skill
   系人，不要换名字硬试。
 - **附件引用不复制**：`--attach` 的 fileId 是云盘/空间已有文件的引用（≤10 个），
   只能引用空间成员的云盘文件或本空间直传文件；跨空间文件会被 403 拒绝。
+  **只接受明文 / 平台加密(p1)对象，保险箱(u1) 文件引用会被拒**——见
+  `crabcloud-storage` skill。
 - 单任务记录流上限 500 条（状态变更也占位）：任务粒度别太粗，做完就 `done`，
   新工作开新任务。
 - 读记录流对 Agent 是一等审计事件（thread.read 入活动流）——正常读即可，但

package/dist/skills/crabcloud-mail/SKILL.md

@@ -7,8 +7,8 @@ description: Read, search and send the user's Crab Cloud platform email (usernam
 
 用户的 Crab Cloud 账号自带平台邮箱 `username@crabcloud.cc`（用户名即地址本地部分）。
 本 skill 覆盖邮箱域的 agent 通道；账号/令牌管理见 `crabcloud` skill。云盘见
-`crabcloud-storage` skill（`crab storage …`），协作尚未上线——用户问到时如实说明，
-**不要猜命令**。
+`crabcloud-storage` skill（`crab storage …`），协作见 `crabcloud-collab` skill
+（`crab collab …`）。
 
 ## 第一步：确认可用
 
@@ -32,6 +32,9 @@ description: Read, search and send the user's Crab Cloud platform email (usernam
 | 只看未读 | `crab mail list --unread` |
 | 翻页 | `crab mail list --cursor <nextCursor>`（列表末尾会提示） |
 | 读某封邮件 | `crab mail read <id>`（自动置已读；正文 + 操作记录） |
+| 标回未读 | `crab mail unread <id>` |
+| 看各文件夹总量/未读、本月收发 | `crab mail folders`（判断「有没有新邮件」先看这个，别翻列表） |
+| 看邮箱操作流（谁读过/谁代发） | `crab mail activity`（最近 50 条，审计源） |
 | 找邮件 | `crab mail search <关键词>`（主题/发件人/收件人/正文，不含废纸篓） |
 | 发邮件 | `crab mail send --to a@x.cc --subject "..." --body "..."`（长正文用 `--body-file`） |
 | 发邮件带附件 | `crab mail send … --attach <云盘id\|文件名>[,…]`（引用云盘已有对象，不复制，≤10 个；先 `crab storage ls` 核对对象，文件名需精确唯一命中） |
@@ -44,7 +47,7 @@ description: Read, search and send the user's Crab Cloud platform email (usernam
 ## 计费口径（必须如实转述）
 
 - **平台内互发免费**：收件人也是 `@crabcloud.cc` 地址时不消耗积分。
-- **外部出站 2 积分/封**：发送前向用户复述收件人与计费；退出码 7 = 积分不足，
+- **外部出站 0.02 积分/封（$0.02）**：发送前向用户复述收件人与计费；退出码 7 = 积分不足，
   告知用户不要自动重试。
 - 发送结果会报告 `消耗积分` 与失败数；部分失败时失败部分的积分自动退回
   （`发送:partial` 标记）。
@@ -57,7 +60,9 @@ description: Read, search and send the user's Crab Cloud platform email (usernam
   `id/folder/fromAddr/to/subject/snippet/isUnread/hasAttachments/createdAt`；
 - `mail read --json` → 完整正文 + `attachments`（id/filename/mimeType/sizeBytes）
   + `actors`（谁读过/谁代发，审计源）；
-- `mail send --json` → `{ message, chargedCredits, failedExternal }`。
+- `mail send --json` → `{ message, chargedCredits, failedExternal }`；
+- `mail folders --json` → `{ address, folders: [{ folder, total, unread }], month: { received, sent, outbound } }`；
+- `mail activity --json` → 条目含 `action（read/drafted/sent）/ actorType / actorLabel / subject / messageId / createdAt`。
 
 ## 纪律
 
@@ -71,5 +76,6 @@ description: Read, search and send the user's Crab Cloud platform email (usernam
 - 附件：`mail read` 输出附件清单（id/文件名/类型/体积）；附件内容归云盘管
   ——下载用 `crab storage download <id>`（见 `crabcloud-storage` skill，跨来
   源通用），发送引用云盘对象用 `mail send --attach`（对象须未被其他邮件绑
-  定；若报错说明已被引用，改走正文链接）。邮件详情附件显示「已在云盘删除」
-  表示对象已被软删，如实转述。
+  定；若报错说明已被引用，改走正文链接）。**附件只接受明文 / 平台加密(p1)
+  对象，保险箱(u1) 文件不能作附件**——CLI 会明确拒绝，需要分享时改走正文
+  链接。邮件详情附件显示「已在云盘删除」表示对象已被软删，如实转述。

package/dist/skills/crabcloud-storage/SKILL.md

@@ -1,15 +1,18 @@
 ---
 name: crabcloud-storage
-description: Manage the user's Crab Cloud Drive (云盘 — unified storage for drive uploads, media assets and mail attachments on one quota, with end-to-end encryption) through the `crab` CLI — list and filter objects, upload and download files (including decrypting share links), rename, tag, categorize, publish/unpublish public links, create expiring share links with passcodes, manage the locally remembered encryption key, trash/restore/purge, and check the storage quota. Use this skill when the user asks to upload, find, organize, share or clean up files on Crab Cloud ("上传这个文件", "云盘里有什么", "把这个文件公开分享", "看看存储用了多少", "crab storage"), or wants files moved in or out of their drive — even if they never say "crab" or "Crab Cloud" explicitly.
+description: Manage the user's Crab Cloud storage (云盘 — one base file service carrying drive uploads, media assets, mail attachments, collab files and agent files on one quota; vault-grade end-to-end encryption is optional) through the `crab` CLI — list and filter objects, upload and download files (including decrypting share links), rename, tag, categorize, publish/unpublish public links, create expiring share links with passcodes, manage the locally remembered encryption key, trash/restore/purge, and check the storage quota. Use this skill when the user asks to upload, find, organize, share or clean up files on Crab Cloud ("上传这个文件", "云盘里有什么", "把这个文件公开分享", "看看存储用了多少", "crab storage"), or wants files moved in or out of their drive — even if they never say "crab" or "Crab Cloud" explicitly.
 ---
 
 # Crab Cloud 云盘（crab storage）
 
-云盘是用户的统一存储：云盘上传 / 素材库 / 邮件附件三来源共用一本 2 GB 容量账；
-属性优先、位置无关——分类（至多一个）+ 标签（AND 检索）代替文件夹。files 域
-上传默认端到端加密（服务器只有包裹态密钥，明文密钥只在本机）。本 skill 覆盖
-云盘域的 agent 通道；账号/令牌管理见 `crabcloud` skill，邮箱见 `crabcloud-mail`
-skill。
+云盘是用户的统一存储基础服务：云盘上传 / 素材库 / 邮件附件 / 协作文件 /
+Agent 产物五来源共用一本容量账（按档位，Free 1GB / Plus 10GB）；属性优先、
+位置无关——分类（至多一个）+ 标签（AND 检索）代替文件夹。**上传缺省明文**
+（2026-10 基础服务化：其他应用可直接引用）；提供口令时才端到端加密（保险箱
+文件，服务器只有包裹态密钥，明文密钥只在本机）。加密三态以 `wrappedDataKey`
+前缀区分：无前缀 = 明文、`p1.` = 平台加密（如邮件附件，服务端可透明解密）、
+`u1.` = 保险箱（用户持钥）。本 skill 覆盖存储域的 agent 通道；账号/令牌管理见
+`crabcloud` skill，邮箱见 `crabcloud-mail` skill。
 
 ## 第一步：确认可用
 
@@ -24,7 +27,7 @@ skill。
   `storage.write`，移回收站/恢复/彻底删除 `storage.delete`。退出码 4 = scope
   不足：如实转述缺哪个，引导 `crab login --scopes storage`（组名 = 三项整组）
   重新授权（你只发起，不代批）。
-- 退出码 7 = `storage.quotaExceeded`（统一容量账满，2 GB）：告知用户，可建议
+- 退出码 7 = `storage.quotaExceeded`（统一容量账满）：告知用户，可建议
   清理回收站或大文件（`storage quota` 看分项），不要自动重试。
 
 ## 意图 → 命令映射
@@ -32,9 +35,9 @@ skill。
 | 用户意图 | 命令 |
 |---|---|
 | 云盘里有什么 | `crab storage ls`（按时间倒序，默认 30 条；`--limit` / `--offset` 翻页） |
-| 找文件 | `crab storage ls --q 关键字`（文件名匹配；可叠 `--source files\|media\|mail`、`--type doc\|image\|video\|archive\|code`、`--category 分类id\|none`、`--tag a,b`、`--shared`、`--recent`、`--message-id <id>`） |
+| 找文件 | `crab storage ls --q 关键字`（文件名匹配；可叠 `--source files\|media\|mail\|collab\|agent`、`--type doc\|image\|video\|archive\|code`、`--category 分类id\|none`、`--tag a,b`、`--shared`、`--recent`、`--encrypted only\|plain`、`--message-id <id>`；`--encrypted only` = 仅保险箱、`plain` = 排除保险箱） |
 | 看回收站 | `crab storage ls --trash` |
-| 上传文件 | `crab storage upload <路径...>`（多文件串行；直传优先，自动回退中转；默认端到端加密——口令三来源见下节，首次使用自动初始化并打印一次性恢复码） |
+| 上传文件 | `crab storage upload <路径...>`（多文件串行；直传优先，自动回退中转；**缺省明文直传**，其他应用可直接引用；`--passphrase` 或 `CRAB_PASSPHRASE` 提供时端到端加密为保险箱文件——口令三来源见下节，首次使用自动初始化并打印一次性恢复码） |
 | 下载文件 | `crab storage download <id\|文件名\|分享链接> [-o 输出路径] [--passcode 提取码]`（默认按原文件名存当前目录；**凭完整分享链接可免登录下载并本地解密**——`#` 后是密钥片段，这是 agent→agent 的主通道；带提取码的分享加 `--passcode`） |
 | 改名 | `crab storage rename <id\|文件名> <新名称>` |
 | 加/删标签 | `crab storage tag <id\|文件名> --add a,b [--remove c,d]` |
@@ -46,7 +49,8 @@ skill。
 | 可控分享（有效期/提取码/撤销） | `crab storage share <id\|文件名> [--expires 7\|30\|90\|forever] [--passcode 提取码]`（打印完整分享链接；加密对象链接自带 `#` 密钥片段）；列表 `crab storage shares <id\|文件名>`、撤销 `crab storage unshare <shareId>` |
 | 云盘钥匙管理 | `crab storage key`（查状态）/ `--remember`（解锁一次并记住，之后免口令）/ `--forget`（清除）——见下节 |
 | 删除 | `crab storage rm <id\|文件名>`（进回收站，7 天后自动清理）→ `restore` 恢复 / `purge` 彻底删除 |
-| 看水位 | `crab storage quota`（三来源分项 + 回收站占用 + 对象计数） |
+| 看水位 | `crab storage quota`（五来源分项 + 保险箱计数 + 回收站占用 + 对象计数） |
+| 看云盘操作流 | `crab storage activity`（读取/上传/删除/建分享，最近 50 条） |
 
 `<id|文件名>`：文件名全库精确唯一命中时自动解析为 id（回收站内同样可解析，
 restore/purge 直接用文件名即可）；命中多个或查不到时按字面当 id 用——拿不准
@@ -58,16 +62,20 @@ restore/purge 直接用文件名即可）；命中多个或查不到时按字面
 程序化消费**始终加 `--json`**：
 
 - `storage ls --json` → `{ objects: [...], nextOffset, total }`，条目含
-  `id / source / filename / mimeType / sizeBytes / categoryId / tags / isPublic / createdAt`；
-- `storage quota --json` → `{ usedBytes, quotaBytes, bySource: { files, media, mail }, trashBytes, counts }`；
+  `id / source / filename / mimeType / sizeBytes / categoryId / tags / isEncrypted / wrappedDataKey / isPublic / createdAt`
+  （`source` = `files|media|mail|collab|agent`；u1 判定 = `isEncrypted && wrappedDataKey` 以 `u1.` 开头）；
+- `storage quota --json` → `{ usedBytes, quotaBytes, bySource: { files, media, mail, collab, agent }, trashBytes, counts: { all, files, media, mail, collab, agent, shared, vault, trash } }`
+  （素材库条数 = `counts.all - counts.vault`）；
+- `storage activity --json` → 条目含 `action（object.read/object.uploaded/object.deleted/share.created）/ actorType / actorLabel / objectId / objectName / createdAt`；
 - `upload` / `categories` / `tags` / `shares` 的 `--json` 同构（单对象 / 分类数组 /
   标签数组 / 分享数组）。
 
-## 云盘口令与本机钥匙
+## 保险箱口令与本机钥匙
 
-files 域是端到端加密：服务器只有口令包裹态的主密钥，**明文密钥只存在于用户
-本机**——CLI 不可能也不允许向服务器索取。涉及加密对象的命令（upload /
-download / share 加密文件）需要云盘口令，来源优先级：
+保险箱（u1）是端到端加密：服务器只有口令包裹态的主密钥，**明文密钥只存在于
+用户本机**——CLI 不可能也不允许向服务器索取。**只有涉及保险箱文件的命令才
+需要口令**（带口令 upload / download 或 share u1 对象；明文与 p1 平台加密对象
+全程免口令）。口令来源优先级：
 
 1. `--passphrase <口令>`（flag）
 2. 环境变量 `CRAB_PASSPHRASE`（**Agent/脚本推荐**——非交互终端不会弹提问，
@@ -94,6 +102,9 @@ download / share 加密文件）需要云盘口令，来源优先级：
   等待即可；凭链接下载时提取码用 `--passcode` 正确携带。
 - **purge 是彻底删除**，不可恢复；用户没明说「彻底删除」时一律用 `rm`
   （回收站保留 7 天可找回）。
+- **保险箱（u1）不能被其他应用引用**：邮件附件（`mail send --attach`）与协作
+  记录引用都只接受明文 / p1 平台加密对象，u1 对象会被明确拒绝——需要跨应用
+  使用时用分享链接（u1 链接自带密钥片段），或等互转功能；不要尝试绕过。
 - 邮件附件与用户上传同账：水位告急时用 `quota` 分项定位来源再建议清理。
 - 公开直链的呈现方式由服务端策略决定（图片/视频/音频/PDF/纯文本内联，SVG 与
   其他类型强制下载），CLI 侧没有、也不需要有开关。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crabcloud/cli",
-  "version": "0.2.4",
+  "version": "0.3.1",
   "type": "module",
   "description": "Crab Cloud CLI (crab) — agent-first entry to your personal cloud, with skills bundled for Claude Code / Codex / ZCode.",
   "bin": {