@crabcloud/cli 0.3.0 → 0.3.1

package/dist/crab.js

@@ -2390,6 +2390,89 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
     });
   };
 });
+function discriminatorMap(def) {
+  const map = new Map;
+  for (const option of def.options) {
+    const values = option._zod.propValues?.[def.discriminator];
+    if (!values || values.size === 0)
+      throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(option)}"`);
+    for (const value of values) {
+      if (map.has(value)) {
+        if (value !== undefined)
+          throw new Error(`Duplicate discriminator value "${String(value)}"`);
+        map.set(value, null);
+      } else {
+        map.set(value, option);
+      }
+    }
+  }
+  return map;
+}
+var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnion", (inst, def) => {
+  def.inclusive = false;
+  $ZodUnion.init(inst, def);
+  const _super = inst._zod.parse;
+  defineLazyInternal(inst, "propValues", (zod) => {
+    const propValues = {};
+    let undefinedCount = 0;
+    for (const option of zod.def.options) {
+      const pv = option._zod.propValues;
+      if (!pv || Object.keys(pv).length === 0)
+        throw new Error(`Invalid discriminated union option at index "${zod.def.options.indexOf(option)}"`);
+      if (pv[zod.def.discriminator]?.has(undefined))
+        undefinedCount++;
+      for (const [k, v] of Object.entries(pv)) {
+        if (!Object.prototype.hasOwnProperty.call(propValues, k)) {
+          assignProp(propValues, k, new Set);
+        }
+        for (const val of v) {
+          propValues[k].add(val);
+        }
+      }
+    }
+    if (!zod.def.unionFallback && undefinedCount > 1)
+      propValues[zod.def.discriminator]?.delete(undefined);
+    return propValues;
+  });
+  def.options.forEach((option, i) => {
+    const propShape = rawShape(option._zod.def);
+    if (propShape && !Object.prototype.hasOwnProperty.call(propShape, def.discriminator)) {
+      throw new Error(`Invalid discriminated union option at index "${i}"`);
+    }
+  });
+  const disc = cached(() => discriminatorMap(def));
+  inst._zod.parse = (payload, ctx) => {
+    const input = payload.value;
+    if (!isObject(input)) {
+      payload.issues.push({
+        code: "invalid_type",
+        expected: "object",
+        input,
+        inst
+      });
+      return payload;
+    }
+    const value = input?.[def.discriminator];
+    const opt = disc.value.get(value);
+    if (opt && (value !== undefined || ctx.direction !== "backward")) {
+      return opt._zod.run(payload, ctx);
+    }
+    if (def.unionFallback || ctx.direction === "backward") {
+      return _super(payload, ctx);
+    }
+    payload.issues.push({
+      code: "invalid_union",
+      errors: [],
+      note: "No matching discriminator",
+      discriminator: def.discriminator,
+      options: Array.from(disc.value.keys()).filter((value) => disc.value.get(value) !== null),
+      input,
+      path: [def.discriminator],
+      inst
+    });
+    return payload;
+  };
+});
 var $ZodIntersection = /* @__PURE__ */ $constructor("$ZodIntersection", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.parse = (payload, ctx) => {
@@ -2682,6 +2765,28 @@ var $ZodEnum = /* @__PURE__ */ $constructor("$ZodEnum", (inst, def) => {
     return payload;
   };
 });
+var $ZodLiteral = /* @__PURE__ */ $constructor("$ZodLiteral", (inst, def) => {
+  $ZodType.init(inst, def);
+  const values = new Set(def.values);
+  inst._zod.values = values;
+  defineLazyInternal(inst, "pattern", (zod) => {
+    const vals = zod.def.values;
+    return new RegExp(vals.length ? `^(${vals.map((o) => typeof o === "string" ? escapeRegex(o) : o ? escapeRegex(o.toString()) : String(o)).join("|")})$` : "^[^\\s\\S]$");
+  });
+  inst._zod.parse = (payload, _ctx) => {
+    const input = payload.value;
+    if (values.has(input)) {
+      return payload;
+    }
+    payload.issues.push({
+      code: "invalid_value",
+      values: def.values,
+      input,
+      inst
+    });
+    return payload;
+  };
+});
 var $ZodTransform = /* @__PURE__ */ $constructor("$ZodTransform", (inst, def) => {
   $ZodType.init(inst, def);
   inst._zod.optin = "optional";
@@ -4587,6 +4692,45 @@ var enumProcessor = (schema, _ctx, json, _params) => {
     json.type = "string";
   json.enum = values;
 };
+var literalProcessor = (schema, ctx, json, params) => {
+  const def = schema._zod.def;
+  if (def.values.length === 0) {
+    json.not = {};
+    return;
+  }
+  const vals = [];
+  for (const val of def.values) {
+    if (val === undefined) {
+      if (handleUnrepresentable(schema, ctx, json, params, "Literal `undefined` cannot be represented in JSON Schema"))
+        return;
+    } else if (typeof val === "bigint") {
+      if (handleUnrepresentable(schema, ctx, json, params, "BigInt literals cannot be represented in JSON Schema"))
+        return;
+      vals.push(Number(val));
+    } else {
+      vals.push(val);
+    }
+  }
+  if (vals.length === 0) {} else if (vals.length === 1) {
+    const val = vals[0];
+    json.type = val === null ? "null" : typeof val;
+    if (ctx.target === "draft-04" || ctx.target === "openapi-3.0") {
+      json.enum = [val];
+    } else {
+      json.const = val;
+    }
+  } else {
+    if (vals.every((v) => typeof v === "number"))
+      json.type = "number";
+    if (vals.every((v) => typeof v === "string"))
+      json.type = "string";
+    if (vals.every((v) => typeof v === "boolean"))
+      json.type = "boolean";
+    if (vals.every((v) => v === null))
+      json.type = "null";
+    json.enum = vals;
+  }
+};
 var customProcessor = (schema, ctx, json, params) => {
   handleUnrepresentable(schema, ctx, json, params, "Custom types cannot be represented in JSON Schema");
 };
@@ -5618,6 +5762,18 @@ function union(options, params) {
     ...normalizeParams(params)
   });
 }
+var ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("ZodDiscriminatedUnion", (inst, def) => {
+  ZodUnion.init(inst, def);
+  $ZodDiscriminatedUnion.init(inst, def);
+});
+function discriminatedUnion(discriminator, options, params) {
+  return new ZodDiscriminatedUnion({
+    type: "union",
+    options,
+    discriminator,
+    ...normalizeParams(params)
+  });
+}
 var ZodIntersection = /* @__PURE__ */ $constructor("ZodIntersection", (inst, def) => {
   $ZodIntersection.init(inst, def);
   ZodType.init(inst, def);
@@ -5700,6 +5856,27 @@ function _enum(values, params) {
     ...normalizeParams(params)
   });
 }
+var ZodLiteral = /* @__PURE__ */ $constructor("ZodLiteral", (inst, def) => {
+  $ZodLiteral.init(inst, def);
+  ZodType.init(inst, def);
+  inst._zod.processJSONSchema = (ctx, json, params) => literalProcessor(inst, ctx, json, params);
+  inst.values = new Set(def.values);
+  Object.defineProperty(inst, "value", {
+    get() {
+      if (def.values.length > 1) {
+        throw new Error("This schema contains multiple valid literal values. Use `.values` instead.");
+      }
+      return def.values[0];
+    }
+  });
+});
+function literal(value, params) {
+  return new ZodLiteral({
+    type: "literal",
+    values: Array.isArray(value) ? value : [value],
+    ...normalizeParams(params)
+  });
+}
 var ZodTransform = /* @__PURE__ */ $constructor("ZodTransform", (inst, def) => {
   _ensureDefaultMemoizer();
   $ZodTransform.init(inst, def);
@@ -5916,14 +6093,16 @@ var scopes = [
   "contacts.read",
   "contacts.write",
   "collab.read",
-  "collab.write"
+  "collab.write",
+  "agent.read"
 ];
 var scopeGroups = [
   { id: "account", scopes: ["account.read", "credits.read"] },
   { id: "mail", scopes: ["mail.read", "mail.send", "mail.search", "mail.delete"] },
   { id: "storage", scopes: ["storage.read", "storage.write", "storage.delete"] },
   { id: "collab", scopes: ["collab.read", "collab.write"] },
-  { id: "contacts", scopes: ["contacts.read", "contacts.write"] }
+  { id: "contacts", scopes: ["contacts.read", "contacts.write"] },
+  { id: "agent", scopes: ["agent.read"] }
 ];
 function expandScopes(input) {
   const expanded = input.flatMap((item) => {
@@ -6229,6 +6408,123 @@ var collabRecordListQuery = object({
   cursor: string2().trim().max(200).optional(),
   limit: exports_coerce.number().int().min(1).max(200).optional()
 });
+var agentPermissionModes = ["confirm", "auto_edit", "yolo"];
+var agentSessionKinds = ["chat", "task"];
+var agentMemoryTypes = ["preference", "contact", "project"];
+var AGENT_TITLE_MAX = 120;
+var AGENT_MEMORY_MAX = 2000;
+var AGENT_PERSONA_MAX = 2000;
+var agentToolsConfigSchema = object({
+  web: boolean2().optional(),
+  code: boolean2().optional(),
+  workspace: boolean2().optional(),
+  crab: object({
+    credits: boolean2().optional(),
+    mail: boolean2().optional(),
+    storage: boolean2().optional(),
+    collab: boolean2().optional(),
+    contacts: boolean2().optional()
+  }).optional()
+});
+var agentConfigUpdateInput = object({
+  activeModelId: string2().trim().min(1).max(64).optional(),
+  persona: string2().max(AGENT_PERSONA_MAX).optional(),
+  mode: _enum(agentPermissionModes).optional(),
+  tools: agentToolsConfigSchema.optional()
+});
+var AGENT_PROVIDER_LABEL_MAX = 60;
+var agentProviderInput = object({
+  label: string2().trim().min(1).max(AGENT_PROVIDER_LABEL_MAX),
+  baseUrl: string2().trim().min(1).max(500),
+  apiKey: string2().trim().min(1).max(500)
+});
+var agentProviderModelInput = object({
+  model: string2().trim().min(1).max(200),
+  contextWindow: number2().int().min(1000).max(1e8).nullable().optional(),
+  maxOutput: number2().int().min(100).max(1e7).nullable().optional(),
+  inputText: boolean2().optional(),
+  inputImage: boolean2().optional(),
+  inputVideo: boolean2().optional()
+});
+var agentSessionCreateInput = object({
+  kind: _enum(agentSessionKinds).default("chat"),
+  title: string2().trim().max(AGENT_TITLE_MAX).optional(),
+  repeatCron: string2().trim().max(100).optional(),
+  notifyMail: boolean2().optional()
+}).refine((v) => v.kind === "chat" || !!v.title && v.title.length > 0, {
+  message: "task requires title"
+});
+var agentSessionRenameInput = object({ title: string2().trim().min(1).max(AGENT_TITLE_MAX) });
+var agentSessionListQuery = object({
+  kind: _enum(agentSessionKinds).optional(),
+  limit: exports_coerce.number().int().min(1).max(200).optional()
+});
+var agentMemoryCreateInput = object({
+  type: _enum(agentMemoryTypes),
+  content: string2().trim().min(1).max(AGENT_MEMORY_MAX),
+  sessionId: string2().max(64).optional()
+});
+var agentTraceStatuses = ["running", "ok", "error", "pending", "approved", "rejected"];
+var agentPlanItemStates = ["done", "current", "todo"];
+var agentTraceCommon = {
+  id: string2().min(1).max(64),
+  status: _enum(agentTraceStatuses),
+  round: number2().int().min(1),
+  title: string2().max(200),
+  durationMs: number2().int().min(0).optional()
+};
+var agentPlanTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("plan"),
+  items: array(object({ text: string2().max(500), state: _enum(agentPlanItemStates) })).max(50)
+});
+var agentWebTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("web"),
+  url: string2().max(2000),
+  summary: string2().max(8000)
+});
+var agentArtifactSchema = object({
+  name: string2().max(200),
+  mime: string2().max(100),
+  path: string2().max(500),
+  rows: number2().int().min(0).optional()
+});
+var agentCodeTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("code"),
+  code: string2().max(50000).optional(),
+  result: string2().max(20000).optional(),
+  artifact: agentArtifactSchema.optional()
+});
+var agentCrabTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("crab"),
+  command: string2().max(2000),
+  response: string2().max(8000).optional()
+});
+var agentApprovalTraceSchema = object({
+  ...agentTraceCommon,
+  kind: literal("approval"),
+  tool: string2().max(64),
+  action: string2().max(200),
+  detail: string2().max(8000)
+});
+var agentTraceSchema = discriminatedUnion("kind", [
+  agentPlanTraceSchema,
+  agentWebTraceSchema,
+  agentCodeTraceSchema,
+  agentCrabTraceSchema,
+  agentApprovalTraceSchema
+]);
+var agentMemoryChipSchema = object({
+  text: string2().max(200),
+  memoryId: string2().max(64).optional()
+});
+var agentCompressionChipSchema = object({
+  foldedRounds: number2().int().min(1),
+  summary: string2().max(4000)
+});
 
 // ../../packages/cloudkit/src/crypto.ts
 var enc = new TextEncoder;
@@ -6598,13 +6894,15 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
   contacts invite [--reset] [--json] 我的邀请码、链接与统计（--reset 重置，旧链接失效）
   contacts invitees [--offset N] [--json]
                                      我邀请的人（直接下级 + 间接计数）
-  storage ls [--q 关键字] [--source files|media|mail] [--category <id|none>]
+  storage ls [--q 关键字] [--source files|media|mail|collab|agent] [--category <id|none>]
                [--type doc|image|video|archive|code] [--tag a,b] [--trash]
-               [--shared] [--recent] [--message-id <id>] [--limit N] [--offset N] [--json]
-                                     列出云盘对象（跨来源统一视图，能力与 Web 云盘一致）
+               [--shared] [--recent] [--encrypted only|plain] [--message-id <id>]
+               [--limit N] [--offset N] [--json]
+                                     列出云盘对象（跨来源统一视图，能力与 Web 云盘一致；
+                                     --encrypted only=仅保险箱、plain=排除保险箱）
   storage upload <file...> [--json]  上传一个或多个文件（直传优先，自动回退中转）；
-                                     files 域默认端到端加密，口令 --passphrase /
-                                     CRAB_PASSPHRASE 提供，终端内运行时交互输入
+                                     默认明文上传（2026-10 基础服务化）；--passphrase /
+                                     CRAB_PASSPHRASE 提供时端到端加密（保险箱文件）
   storage download <id|文件名> [-o 输出路径]
                                      下载对象内容（默认按原文件名存到当前目录；
                                      加密对象需口令，终端内运行时交互输入）
@@ -6617,7 +6915,7 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
                                      公开 / 收回公开（公开时打印公开直链）
   storage rm|restore|purge <id|文件名>
                                      回收站 / 恢复 / 彻底删除（purge 不可恢复）
-  storage quota [--json]             存储水位（统一容量账：文件/素材/邮件附件一本账）
+  storage quota [--json]             存储水位（统一一本账：五来源分项 + 保险箱计数）
   storage share <id|文件名> [--expires 7|30|90|forever] [--passcode 提取码]
                        创建分享链接（加密文件链接自带解密钥匙 #fragment）
   storage key [--remember|--forget]
@@ -7122,8 +7420,8 @@ async function mailSend() {
     const hit = await resolveStorageObject(credentials, token);
     if (typeof hit === "number")
       return hit;
-    if (typeof hit === "object" && hit.isEncrypted) {
-      console.error(`「${token}」是端到端加密文件，暂不能作为邮件附件发送（服务端无法解密）。`);
+    if (typeof hit === "object" && hit.isEncrypted && hit.wrappedDataKey?.startsWith("u1.")) {
+      console.error(`「${token}」是保险箱文件（端到端加密），不能作为邮件附件发送。`);
       return EXIT_USAGE;
     }
     const id = typeof hit === "object" ? hit.id : hit;
@@ -7392,7 +7690,7 @@ async function contactsInvitees() {
     console.log(`（还有更多：contacts invitees --offset ${page.nextOffset}）`);
   return 0;
 }
-var STORAGE_SOURCES = ["files", "media", "mail"];
+var STORAGE_SOURCES = ["files", "media", "mail", "collab", "agent"];
 var STORAGE_TYPES = ["doc", "image", "video", "archive", "code"];
 var MIME_BY_EXT = {
   png: "image/png",
@@ -7429,9 +7727,10 @@ function formatBytesCli(n) {
   return `${n} B`;
 }
 function printStorageRow(o) {
+  const encFlag = o.isEncrypted ? o.wrappedDataKey?.startsWith("u1.") ? "保险箱" : "平台加密" : null;
   const flags = [
-    o.source !== "files" ? o.source === "media" ? "素材" : "邮件附件" : null,
-    o.isEncrypted ? "加密" : null,
+    o.source !== "files" ? o.source === "media" ? "素材" : o.source === "mail" ? "邮件附件" : o.source === "collab" ? "协作" : "Agent 产物" : null,
+    encFlag,
     o.isPublic ? "公开" : null
   ].filter(Boolean);
   console.log(`${o.id}  ${o.filename}  ${formatBytesCli(o.sizeBytes)}  ${formatTime(o.createdAt)}${flags.length > 0 ? `  [${flags.join(" · ")}]` : ""}`);
@@ -7501,6 +7800,15 @@ async function storageList() {
   const tags = readFlag("--tag");
   if (tags)
     params.set("tags", tags);
+  const encrypted = readFlag("--encrypted");
+  if (encrypted) {
+    if (encrypted !== "only" && encrypted !== "plain") {
+      console.error(`未知 encrypted 过滤：${encrypted}
+可用：only（仅保险箱）、plain（排除保险箱）`);
+      return EXIT_USAGE;
+    }
+    params.set("encrypted", encrypted);
+  }
   if (hasFlag("--trash"))
     params.set("trash", "1");
   if (hasFlag("--shared"))
@@ -7759,7 +8067,7 @@ async function driveMasterKey(credentials) {
     return raw;
   return importAesKey(raw);
 }
-async function storageUploadOne(credentials, filePath) {
+async function storageUploadOne(credentials, filePath, encrypt) {
   let buf;
   try {
     buf = readFileSync2(filePath);
@@ -7769,22 +8077,26 @@ async function storageUploadOne(credentials, filePath) {
   }
   const filename = basename(filePath);
   const mimeType = mimeFor(filename);
-  const master = await driveMasterKey(credentials);
-  if (typeof master === "number")
-    return master;
-  const dataKey = randomKeyBytes(32);
-  const sealed = await aeadEncrypt(await importAesKey(dataKey), new Uint8Array(buf), DATA_AAD);
-  const cipher = new Uint8Array([...sealed.iv, ...sealed.ciphertext]);
-  const wrapped = await aeadEncrypt(master, dataKey, DATA_AAD);
-  const wrappedDataKey = `u1.${sealToB64url({ iv: wrapped.iv, ciphertext: wrapped.ciphertext })}`;
+  let body = new Uint8Array(buf);
+  let wrappedDataKey = null;
+  if (encrypt) {
+    const master = await driveMasterKey(credentials);
+    if (typeof master === "number")
+      return master;
+    const dataKey = randomKeyBytes(32);
+    const sealed = await aeadEncrypt(await importAesKey(dataKey), body, DATA_AAD);
+    body = new Uint8Array([...sealed.iv, ...sealed.ciphertext]);
+    const wrapped = await aeadEncrypt(master, dataKey, DATA_AAD);
+    wrappedDataKey = `u1.${sealToB64url({ iv: wrapped.iv, ciphertext: wrapped.ciphertext })}`;
+  }
   const presign = await api2(credentials.apiBase, "/v1/storage/presign", {
     method: "POST",
     headers: authHeaders(credentials),
-    body: JSON.stringify({ filename, mimeType, sizeBytes: cipher.byteLength, enc: true })
+    body: JSON.stringify({ filename, mimeType, sizeBytes: body.byteLength, enc: wrappedDataKey !== null })
   });
   if (presign.status === 200 || presign.status === 201) {
     const { fileId, uploadUrl } = presign.body.data;
-    const put = await fetch(uploadUrl, { method: "PUT", body: cipher, headers: { "content-type": mimeType } });
+    const put = await fetch(uploadUrl, { method: "PUT", body, headers: { "content-type": mimeType } });
     if (!put.ok) {
       console.error(`直传失败（${put.status}）：${filename}`);
       return 1;
@@ -7792,7 +8104,7 @@ async function storageUploadOne(credentials, filePath) {
     const complete = await api2(credentials.apiBase, `/v1/storage/${encodeURIComponent(fileId)}/complete`, {
       method: "POST",
       headers: authHeaders(credentials),
-      body: JSON.stringify({ isEncrypted: true, wrappedDataKey })
+      body: JSON.stringify(wrappedDataKey ? { isEncrypted: true, wrappedDataKey } : {})
     });
     if (complete.status !== 200 && complete.status !== 201) {
       console.error(errorMessage(complete.body, `记账失败：${filename}`));
@@ -7802,28 +8114,30 @@ async function storageUploadOne(credentials, filePath) {
     if (hasFlag("--json"))
       console.log(JSON.stringify(object, null, 2));
     else
-      console.log(`✓ 已上传（已加密）：${object.filename}（id ${object.id}）`);
+      console.log(`✓ 已上传${wrappedDataKey ? "（已加密）" : ""}：${object.filename}（id ${object.id}）`);
     return 0;
   }
   if (presign.body?.error?.code === "presign_unavailable") {
     const form = new FormData;
-    form.append("file", new Blob([cipher], { type: mimeType }), filename);
-    form.append("enc", "1");
-    form.append("wrappedDataKey", wrappedDataKey);
+    form.append("file", new Blob([body], { type: mimeType }), filename);
+    if (wrappedDataKey) {
+      form.append("enc", "1");
+      form.append("wrappedDataKey", wrappedDataKey);
+    }
     const res = await fetch(`${credentials.apiBase}/v1/storage`, {
       method: "POST",
       headers: authHeaders(credentials),
       body: form
     });
-    const body = await res.json().catch(() => ({}));
+    const body2 = await res.json().catch(() => ({}));
     if (res.status !== 200 && res.status !== 201) {
-      console.error(body.error?.message ?? `上传失败：${filename}`);
-      return exitCodeForApiError(body);
+      console.error(body2.error?.message ?? `上传失败：${filename}`);
+      return exitCodeForApiError(body2);
     }
     if (hasFlag("--json"))
-      console.log(JSON.stringify(body.data, null, 2));
+      console.log(JSON.stringify(body2.data, null, 2));
     else
-      console.log(`✓ 已上传（已加密）：${body.data?.filename}（id ${body.data?.id}）`);
+      console.log(`✓ 已上传${wrappedDataKey ? "（已加密）" : ""}：${body2.data?.filename}（id ${body2.data?.id}）`);
     return 0;
   }
   console.error(errorMessage(presign.body, `上传失败：${filename}`));
@@ -7831,16 +8145,21 @@ async function storageUploadOne(credentials, filePath) {
 }
 async function storageUpload(paths) {
   const files = [];
+  let encrypt = false;
   for (let i = 0;i < paths.length; i++) {
     if (paths[i].startsWith("--")) {
-      if (paths[i] === "--passphrase")
+      if (paths[i] === "--passphrase") {
+        encrypt = true;
         i++;
+      }
       continue;
     }
     files.push(paths[i]);
   }
+  if (!encrypt && process.env.CRAB_PASSPHRASE)
+    encrypt = true;
   if (files.length === 0) {
-    console.error("用法：crab storage upload <file...> [--passphrase 口令] [--json]");
+    console.error("用法：crab storage upload <file...> [--passphrase 口令] [--json]（缺省明文上传；带口令则端到端加密）");
     return EXIT_USAGE;
   }
   const credentials = requireCredentials();
@@ -7848,7 +8167,7 @@ async function storageUpload(paths) {
     return credentials;
   let code = 0;
   for (const file of files) {
-    const result = await storageUploadOne(credentials, file);
+    const result = await storageUploadOne(credentials, file, encrypt);
     if (result !== 0 && code === 0)
       code = result;
     if (result === EXIT_AUTH || result === EXIT_SCOPE)
@@ -8144,9 +8463,10 @@ async function storageQuota() {
     return 0;
   }
   const pct = quota.quotaBytes > 0 ? (quota.usedBytes / quota.quotaBytes * 100).toFixed(1) : "0";
+  const libraryCount = (quota.counts.all ?? 0) - (quota.counts.vault ?? 0);
   console.log(`已用 ${formatBytesCli(quota.usedBytes)} / ${formatBytesCli(quota.quotaBytes)}（${pct}%）`);
-  console.log(`  文件 ${formatBytesCli(quota.bySource.files)} · 素材 ${formatBytesCli(quota.bySource.media)} · 邮件附件 ${formatBytesCli(quota.bySource.mail)} · 回收站 ${formatBytesCli(quota.trashBytes)}`);
-  console.log(`  对象数：全部 ${quota.counts.all ?? 0} · 素材 ${quota.counts.media ?? 0} · 邮件附件 ${quota.counts.mail ?? 0} · 共享 ${quota.counts.shared ?? 0} · 回收站 ${quota.counts.trash ?? 0}`);
+  console.log(`  文件 ${formatBytesCli(quota.bySource.files)} · 素材 ${formatBytesCli(quota.bySource.media)} · ` + `邮件附件 ${formatBytesCli(quota.bySource.mail)} · 协作 ${formatBytesCli(quota.bySource.collab)} · ` + `Agent ${formatBytesCli(quota.bySource.agent)} · 回收站 ${formatBytesCli(quota.trashBytes)}`);
+  console.log(`  对象数：全部 ${quota.counts.all ?? 0} · 素材库 ${libraryCount}（保险箱 ${quota.counts.vault ?? 0}） · ` + `共享 ${quota.counts.shared ?? 0} · 回收站 ${quota.counts.trash ?? 0}`);
   return 0;
 }
 async function storageCategories() {
@@ -8407,7 +8727,7 @@ async function collabSpacesList() {
   }
   for (const s of data.spaces) {
     const storage = s.kind === "independent" ? ` · 存储 ${formatBytesCli(s.storageUsedBytes)}/${formatBytesCli(s.storageAllocatedBytes)}` : "";
-    console.log(`${collabSpaceToken(s)}  ${s.status === "archived" ? "[已归档·只读] " : ""}任务 ${s.taskCount}/${s.limits.taskLimit} · 受邀成员 ${s.memberCount}/${s.limits.invitedMemberLimit}${storage}`);
+    console.log(`${collabSpaceToken(s)}  ${s.status === "archived" ? "[已归档·只读] " : ""}任务 ${s.taskCount}/${s.limits.taskLimit} · 成员 ${s.memberCount}/${s.limits.memberLimit}${storage}`);
     console.log(`    id ${s.id}`);
   }
   console.log(`独立空间名额：${data.independentUsed}/${data.independentLimit}（创建消耗 5 积分：crab collab space create <名称>）`);
@@ -8963,6 +9283,20 @@ switch (command) {
       process.exit(await storageActivity());
     console.error(sub ? `未知子命令：storage ${sub}
 ` : `缺少子命令：storage ls | upload | download | rename | tag | category | publish | unpublish | rm | restore | purge | quota | categories | mkcat | rencat | rmcat | tags | share | shares | unshare | key | activity
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "agent": {
+    const sub = args[1];
+    if (sub === "status")
+      process.exit(await agentStatus());
+    if (sub === "sessions")
+      process.exit(await agentSessions());
+    if (sub === "approvals")
+      process.exit(await agentApprovals());
+    console.error(sub ? `未知子命令：agent ${sub}
+` : `缺少子命令：agent status | sessions | approvals
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);
@@ -9037,3 +9371,73 @@ switch (command) {
     console.log(usage);
     process.exit(EXIT_USAGE);
 }
+async function agentStatus() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const [sessionsRes, approvalsRes] = await Promise.all([
+    api2(credentials.apiBase, "/v1/agent/sessions", { headers: authHeaders(credentials) }),
+    api2(credentials.apiBase, "/v1/agent/approvals", { headers: authHeaders(credentials) })
+  ]);
+  if (sessionsRes.status !== 200 || approvalsRes.status !== 200) {
+    console.error(errorMessage(sessionsRes.body ?? approvalsRes.body, "获取 Agent 状态失败。"));
+    if (sessionsRes.body?.error?.code === "scope_denied") {
+      console.error("提示：需要 agent.read scope——运行 crab login --scopes agent 重新授权。");
+    }
+    return 1;
+  }
+  const sessions = sessionsRes.body.data?.sessions ?? [];
+  const approvals = approvalsRes.body.data?.approvals ?? [];
+  const running = sessions.filter((x) => x.status === "running").length;
+  const pending = approvals.filter((x) => x.status === "pending").length;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ sessions: sessions.length, running, pendingApprovals: pending }, null, 2));
+    return 0;
+  }
+  console.log(`个人云 Agent：会话 ${sessions.length} · 运行中 ${running} · 待审批 ${pending}`);
+  return 0;
+}
+async function agentSessions() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/agent/sessions", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取会话列表失败。"));
+    return 1;
+  }
+  const sessions = res.body.data?.sessions ?? [];
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(sessions, null, 2));
+    return 0;
+  }
+  for (const x of sessions) {
+    console.log(`${x.kind === "task" ? "[任务]" : "[对话]"} ${x.title}  ${x.status}${x.repeatCron ? `  cron ${x.repeatCron}` : ""}  ${new Date(x.updatedAt).toLocaleString("zh-CN")}`);
+  }
+  console.log(`共 ${sessions.length} 个会话`);
+  return 0;
+}
+async function agentApprovals() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/agent/approvals", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取审批队列失败。"));
+    return 1;
+  }
+  const approvals = res.body.data?.approvals ?? [];
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(approvals, null, 2));
+    return 0;
+  }
+  if (approvals.length === 0) {
+    console.log("没有待处理或已过期的审批。");
+    return 0;
+  }
+  for (const x of approvals) {
+    console.log(`${x.status === "pending" ? "[待审批]" : "[已超时]"} ${x.tool}  ${x.sessionTitle}`);
+    console.log(`  ${x.summary.slice(0, 160)}`);
+  }
+  return 0;
+}

package/dist/skills/crabcloud-agent/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: crabcloud-agent
+description: Check the status of the user's personal cloud Agent in Crab Cloud through the `crab agent` CLI — running sessions and tasks, and the outbound-action approval queue (pending / expired). Use this skill whenever the user asks about their in-cloud agent ("我的 agent 在干嘛", "agent 跑完了吗", "有没有待审批的操作", "看看 agent 审批队列"), wants a quick health check of their Agent workbench, or asks what the agent has been doing — even if they never say "crab" or "Crab Cloud" explicitly. This skill is read-only; approving or rejecting happens in the Agent workbench web UI (agent.crabcloud.cc), not from the CLI.
+---
+
+# 个人云 Agent（查看域）
+
+Crab Cloud 的个人云 Agent 是一个用户一个固定 agent：长记忆、权限三档、
+能读平台数据（邮箱/云盘/协作）、写动作过审批全留痕。本 skill 覆盖**只读
+查看**（`crab agent …`，需 `agent.read` scope）；审批的批准/拒绝在网页
+工作台完成（流内卡片），CLI 不做决策。
+
+## 第一步：确认可用
+
+先确认 `crab` 命令存在：`crab --help`。若命令缺失，引导安装：
+
+```
+npx @crabcloud/cli init
+```
+
+已安装但命令缺失时升级：`npx @crabcloud/cli@latest init`。所有
+`crab <cmd>` 都可用 `npx @crabcloud/cli <cmd>` 等价执行。
+
+## 命令
+
+### 状态总览
+
+```
+crab agent status
+```
+
+输出：会话总数、运行中数量、待审批数量。`--json` 输出机器可读 JSON。
+
+### 会话列表
+
+```
+crab agent sessions
+```
+
+列出对话与任务（标题 / 状态 / 定时 cron / 最近更新时间）。`--json` 可用。
+
+### 审批队列
+
+```
+crab agent approvals
+```
+
+列出待处理与已超时的出站审批（工具名 / 参数摘要 / 来源会话）。
+**这里只看，不批**——告诉用户：打开 Agent 工作台（agent.crabcloud.cc）→
+对应会话的流内审批卡上点「批准执行 / 拒绝」；24 小时未处理的会自动失效，
+且失效后即使补批也不会执行（agent 需重新发起）。
+
+## 边界
+
+- 只读：本 skill 的命令都不会改变 agent 状态；决策一律引导到工作台网页。
+- BYOK 配置（API 端点 / Key）不在 CLI 视野——在「模型」管理页维护。
+- 需要写操作走平台时，外部 agent 用既有域命令：`crab mail …` /
+  `crab storage …` / `crab collab …`（各自 skill），与本 skill 互补。

package/dist/skills/crabcloud-collab/SKILL.md

@@ -94,6 +94,8 @@ skill 覆盖协作域的 agent 通道；账号/令牌管理见 `crabcloud` skill
   系人，不要换名字硬试。
 - **附件引用不复制**：`--attach` 的 fileId 是云盘/空间已有文件的引用（≤10 个），
   只能引用空间成员的云盘文件或本空间直传文件；跨空间文件会被 403 拒绝。
+  **只接受明文 / 平台加密(p1)对象，保险箱(u1) 文件引用会被拒**——见
+  `crabcloud-storage` skill。
 - 单任务记录流上限 500 条（状态变更也占位）：任务粒度别太粗，做完就 `done`，
   新工作开新任务。
 - 读记录流对 Agent 是一等审计事件（thread.read 入活动流）——正常读即可，但

package/dist/skills/crabcloud-mail/SKILL.md

@@ -76,5 +76,6 @@ description: Read, search and send the user's Crab Cloud platform email (usernam
 - 附件：`mail read` 输出附件清单（id/文件名/类型/体积）；附件内容归云盘管
   ——下载用 `crab storage download <id>`（见 `crabcloud-storage` skill，跨来
   源通用），发送引用云盘对象用 `mail send --attach`（对象须未被其他邮件绑
-  定；若报错说明已被引用，改走正文链接）。邮件详情附件显示「已在云盘删除」
-  表示对象已被软删，如实转述。
+  定；若报错说明已被引用，改走正文链接）。**附件只接受明文 / 平台加密(p1)
+  对象，保险箱(u1) 文件不能作附件**——CLI 会明确拒绝，需要分享时改走正文
+  链接。邮件详情附件显示「已在云盘删除」表示对象已被软删，如实转述。

package/dist/skills/crabcloud-storage/SKILL.md

@@ -1,15 +1,18 @@
 ---
 name: crabcloud-storage
-description: Manage the user's Crab Cloud Drive (云盘 — unified storage for drive uploads, media assets and mail attachments on one quota, with end-to-end encryption) through the `crab` CLI — list and filter objects, upload and download files (including decrypting share links), rename, tag, categorize, publish/unpublish public links, create expiring share links with passcodes, manage the locally remembered encryption key, trash/restore/purge, and check the storage quota. Use this skill when the user asks to upload, find, organize, share or clean up files on Crab Cloud ("上传这个文件", "云盘里有什么", "把这个文件公开分享", "看看存储用了多少", "crab storage"), or wants files moved in or out of their drive — even if they never say "crab" or "Crab Cloud" explicitly.
+description: Manage the user's Crab Cloud storage (云盘 — one base file service carrying drive uploads, media assets, mail attachments, collab files and agent files on one quota; vault-grade end-to-end encryption is optional) through the `crab` CLI — list and filter objects, upload and download files (including decrypting share links), rename, tag, categorize, publish/unpublish public links, create expiring share links with passcodes, manage the locally remembered encryption key, trash/restore/purge, and check the storage quota. Use this skill when the user asks to upload, find, organize, share or clean up files on Crab Cloud ("上传这个文件", "云盘里有什么", "把这个文件公开分享", "看看存储用了多少", "crab storage"), or wants files moved in or out of their drive — even if they never say "crab" or "Crab Cloud" explicitly.
 ---
 
 # Crab Cloud 云盘（crab storage）
 
-云盘是用户的统一存储：云盘上传 / 素材库 / 邮件附件三来源共用一本 2 GB 容量账；
-属性优先、位置无关——分类（至多一个）+ 标签（AND 检索）代替文件夹。files 域
-上传默认端到端加密（服务器只有包裹态密钥，明文密钥只在本机）。本 skill 覆盖
-云盘域的 agent 通道；账号/令牌管理见 `crabcloud` skill，邮箱见 `crabcloud-mail`
-skill。
+云盘是用户的统一存储基础服务：云盘上传 / 素材库 / 邮件附件 / 协作文件 /
+Agent 产物五来源共用一本容量账（按档位，Free 1GB / Plus 10GB）；属性优先、
+位置无关——分类（至多一个）+ 标签（AND 检索）代替文件夹。**上传缺省明文**
+（2026-10 基础服务化：其他应用可直接引用）；提供口令时才端到端加密（保险箱
+文件，服务器只有包裹态密钥，明文密钥只在本机）。加密三态以 `wrappedDataKey`
+前缀区分：无前缀 = 明文、`p1.` = 平台加密（如邮件附件，服务端可透明解密）、
+`u1.` = 保险箱（用户持钥）。本 skill 覆盖存储域的 agent 通道；账号/令牌管理见
+`crabcloud` skill，邮箱见 `crabcloud-mail` skill。
 
 ## 第一步：确认可用
 
@@ -24,7 +27,7 @@ skill。
   `storage.write`，移回收站/恢复/彻底删除 `storage.delete`。退出码 4 = scope
   不足：如实转述缺哪个，引导 `crab login --scopes storage`（组名 = 三项整组）
   重新授权（你只发起，不代批）。
-- 退出码 7 = `storage.quotaExceeded`（统一容量账满，2 GB）：告知用户，可建议
+- 退出码 7 = `storage.quotaExceeded`（统一容量账满）：告知用户，可建议
   清理回收站或大文件（`storage quota` 看分项），不要自动重试。
 
 ## 意图 → 命令映射
@@ -32,9 +35,9 @@ skill。
 | 用户意图 | 命令 |
 |---|---|
 | 云盘里有什么 | `crab storage ls`（按时间倒序，默认 30 条；`--limit` / `--offset` 翻页） |
-| 找文件 | `crab storage ls --q 关键字`（文件名匹配；可叠 `--source files\|media\|mail`、`--type doc\|image\|video\|archive\|code`、`--category 分类id\|none`、`--tag a,b`、`--shared`、`--recent`、`--message-id <id>`） |
+| 找文件 | `crab storage ls --q 关键字`（文件名匹配；可叠 `--source files\|media\|mail\|collab\|agent`、`--type doc\|image\|video\|archive\|code`、`--category 分类id\|none`、`--tag a,b`、`--shared`、`--recent`、`--encrypted only\|plain`、`--message-id <id>`；`--encrypted only` = 仅保险箱、`plain` = 排除保险箱） |
 | 看回收站 | `crab storage ls --trash` |
-| 上传文件 | `crab storage upload <路径...>`（多文件串行；直传优先，自动回退中转；默认端到端加密——口令三来源见下节，首次使用自动初始化并打印一次性恢复码） |
+| 上传文件 | `crab storage upload <路径...>`（多文件串行；直传优先，自动回退中转；**缺省明文直传**，其他应用可直接引用；`--passphrase` 或 `CRAB_PASSPHRASE` 提供时端到端加密为保险箱文件——口令三来源见下节，首次使用自动初始化并打印一次性恢复码） |
 | 下载文件 | `crab storage download <id\|文件名\|分享链接> [-o 输出路径] [--passcode 提取码]`（默认按原文件名存当前目录；**凭完整分享链接可免登录下载并本地解密**——`#` 后是密钥片段，这是 agent→agent 的主通道；带提取码的分享加 `--passcode`） |
 | 改名 | `crab storage rename <id\|文件名> <新名称>` |
 | 加/删标签 | `crab storage tag <id\|文件名> --add a,b [--remove c,d]` |
@@ -46,7 +49,7 @@ skill。
 | 可控分享（有效期/提取码/撤销） | `crab storage share <id\|文件名> [--expires 7\|30\|90\|forever] [--passcode 提取码]`（打印完整分享链接；加密对象链接自带 `#` 密钥片段）；列表 `crab storage shares <id\|文件名>`、撤销 `crab storage unshare <shareId>` |
 | 云盘钥匙管理 | `crab storage key`（查状态）/ `--remember`（解锁一次并记住，之后免口令）/ `--forget`（清除）——见下节 |
 | 删除 | `crab storage rm <id\|文件名>`（进回收站，7 天后自动清理）→ `restore` 恢复 / `purge` 彻底删除 |
-| 看水位 | `crab storage quota`（三来源分项 + 回收站占用 + 对象计数） |
+| 看水位 | `crab storage quota`（五来源分项 + 保险箱计数 + 回收站占用 + 对象计数） |
 | 看云盘操作流 | `crab storage activity`（读取/上传/删除/建分享，最近 50 条） |
 
 `<id|文件名>`：文件名全库精确唯一命中时自动解析为 id（回收站内同样可解析，
@@ -59,17 +62,20 @@ restore/purge 直接用文件名即可）；命中多个或查不到时按字面
 程序化消费**始终加 `--json`**：
 
 - `storage ls --json` → `{ objects: [...], nextOffset, total }`，条目含
-  `id / source / filename / mimeType / sizeBytes / categoryId / tags / isPublic / createdAt`；
-- `storage quota --json` → `{ usedBytes, quotaBytes, bySource: { files, media, mail }, trashBytes, counts }`；
+  `id / source / filename / mimeType / sizeBytes / categoryId / tags / isEncrypted / wrappedDataKey / isPublic / createdAt`
+  （`source` = `files|media|mail|collab|agent`；u1 判定 = `isEncrypted && wrappedDataKey` 以 `u1.` 开头）；
+- `storage quota --json` → `{ usedBytes, quotaBytes, bySource: { files, media, mail, collab, agent }, trashBytes, counts: { all, files, media, mail, collab, agent, shared, vault, trash } }`
+  （素材库条数 = `counts.all - counts.vault`）；
 - `storage activity --json` → 条目含 `action（object.read/object.uploaded/object.deleted/share.created）/ actorType / actorLabel / objectId / objectName / createdAt`；
 - `upload` / `categories` / `tags` / `shares` 的 `--json` 同构（单对象 / 分类数组 /
   标签数组 / 分享数组）。
 
-## 云盘口令与本机钥匙
+## 保险箱口令与本机钥匙
 
-files 域是端到端加密：服务器只有口令包裹态的主密钥，**明文密钥只存在于用户
-本机**——CLI 不可能也不允许向服务器索取。涉及加密对象的命令（upload /
-download / share 加密文件）需要云盘口令，来源优先级：
+保险箱（u1）是端到端加密：服务器只有口令包裹态的主密钥，**明文密钥只存在于
+用户本机**——CLI 不可能也不允许向服务器索取。**只有涉及保险箱文件的命令才
+需要口令**（带口令 upload / download 或 share u1 对象；明文与 p1 平台加密对象
+全程免口令）。口令来源优先级：
 
 1. `--passphrase <口令>`（flag）
 2. 环境变量 `CRAB_PASSPHRASE`（**Agent/脚本推荐**——非交互终端不会弹提问，
@@ -96,6 +102,9 @@ download / share 加密文件）需要云盘口令，来源优先级：
   等待即可；凭链接下载时提取码用 `--passcode` 正确携带。
 - **purge 是彻底删除**，不可恢复；用户没明说「彻底删除」时一律用 `rm`
   （回收站保留 7 天可找回）。
+- **保险箱（u1）不能被其他应用引用**：邮件附件（`mail send --attach`）与协作
+  记录引用都只接受明文 / p1 平台加密对象，u1 对象会被明确拒绝——需要跨应用
+  使用时用分享链接（u1 链接自带密钥片段），或等互转功能；不要尝试绕过。
 - 邮件附件与用户上传同账：水位告急时用 `quota` 分项定位来源再建议清理。
 - 公开直链的呈现方式由服务端策略决定（图片/视频/音频/PDF/纯文本内联，SVG 与
   其他类型强制下载），CLI 侧没有、也不需要有开关。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crabcloud/cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "type": "module",
   "description": "Crab Cloud CLI (crab) — agent-first entry to your personal cloud, with skills bundled for Claude Code / Codex / ZCode.",
   "bin": {
@@ -24,9 +24,9 @@
     "prepublishOnly": "bun run typecheck && bun run build"
   },
   "devDependencies": {
-    "@crabcloud/cloudkit": "0.1.0",
-    "@crabcloud/contracts": "0.1.0",
-    "@crabcloud/skills": "0.1.5",
+    "@crabcloud/cloudkit": "workspace:*",
+    "@crabcloud/contracts": "workspace:*",
+    "@crabcloud/skills": "workspace:*",
     "@types/bun": "latest",
     "typescript": "^5.9.3"
   }