@sanqianx/claude-ai-workbench 0.13.2-rc.2 → 0.13.2-rc.4

package/README.md

@@ -12,6 +12,8 @@
 
 工作台是产品供应商与凭据的活动配置源。后台维护默认模型持久化，不随会话临时模型切换；解析后的凭据只交给鉴权本地服务，不进入浏览器消息。SDK 会话从当前项目登记的工作区恢复，也兼容旧登记文件。
 
+四客户端的会话历史使用同目录临时文件原子替换。磁盘写满、临时写入失败或 Windows 拒绝替换时保留上一次完整记录，不截断或删除原历史；空间恢复后新会话仍可正常持久化。已经被旧版截断的历史不能凭空恢复。
+
 MiniMax 向量模型使用独立的 `/v1/embeddings` 接口，不复用聊天的 `/anthropic` 路由。官方域名的已知接口后缀在运行期规范化为服务根地址，现有配置文件不被迁移或改写；自定义网关路径保持原样。
 
 Windows 上 Claude Code 探测与实际启动使用同一解析结果：失效的 `CLAUDE_CODE_EXECPATH` 不遮住有效安装，npm/CMD/PowerShell 启动脚本解析成实际文件，JavaScript 入口用当前 Node 探测版本。`/system/doctor` 返回实际启动路径、被跳过的失效路径及版本探测错误。发现和会话失败使用 `log/v2`；受外壳守护时写入外壳统一诊断，独立运行保存在工作台数据目录的 `diagnostics.jsonl`，不记录凭据或原始提示词。
@@ -62,7 +64,7 @@ npm run start:agent-terminal
 - 数据目录：`~/.agent-terminal`（`AGENT_TERMINAL_DATA_DIR` 覆盖；端口 `AGENT_TERMINAL_PORT`）
 - 首次使用：设置 → 模型供应商 → 添加供应商（Base URL / API Key / 模型列表），然后添加本地项目文件夹即可开聊。
 - Agent 发现自动扫描本机：Claude Code（Agent SDK，支持 Anthropic 兼容端点如 MiniMax）、Codex（app-server，保留 CLI 回退）、OpenCode（serve + SSE，保留 CLI 回退）、ZCode（桌面内置 app-server）。版本探测成功不等于认证或任务执行成功，实际运行失败另写诊断日志。
-- ZCode 启动只引用安装目录里已有的供应商配置，并保留显式环境变量覆盖及个人配置。不会改写桌面安装资源、生成假配置或复制凭据。
+- ZCode 原生认证使用已有桌面供应商配置，保留显式环境变量覆盖及个人配置；共享 Workbench 模型通过临时本机连接接入，上游 API Key 只在内存中，临时文件仅保存本机访问令牌，关闭时清理。不改写桌面安装资源或用户模型配置。同时支持旧版 runtimeModel 与新版 modelSelection 协议，失败和完成事件均结束当前任务。
 - 零点击模型检测：填好 Base URL 与 API Key 后自动探测 `/v1/models` 并合并 models.dev 能力数据（上下文窗口、模态、推理），保存时自动填充模型列表与上下文大小。
 - 会话内模型切换：切换供应商/模型不换会话，历史跨供应商延续（Claude 保留 resume，CLI 保留线程参数）。
 - 运行时体验对齐：中断不再误报退出码错误、stderr 聚合为单个折叠、上下文用量按轮取最大值而非累计求和。

package/docs/sdk/openapi.yaml

@@ -1,7 +1,7 @@
 openapi: 3.1.0
 info:
   title: Claude AI Workbench API
-  version: 0.13.2-rc.2
+  version: 0.13.2-rc.4
   description: Versioned local API for AI Profile, credential and Claude Code session management.
 servers:
   - url: http://127.0.0.1:5760/api/claude-workbench/v1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sanqianx/claude-ai-workbench",
-  "version": "0.13.2-rc.2",
+  "version": "0.13.2-rc.4",
   "description": "Shared Claude Code terminal and Anthropic-compatible AI profile modules for local developer tools.",
   "type": "commonjs",
   "main": "src/index.js",

package/packages/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-ai-workbench/client",
-  "version": "0.13.2-rc.2",
+  "version": "0.13.2-rc.4",
   "type": "commonjs",
   "main": "index.js",
   "browser": "index.js",
@@ -20,7 +20,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@claude-ai-workbench/contracts": "0.13.2-rc.2"
+    "@claude-ai-workbench/contracts": "0.13.2-rc.4"
   },
   "engines": {
     "node": ">=18"

package/packages/contracts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-ai-workbench/contracts",
-  "version": "0.13.2-rc.2",
+  "version": "0.13.2-rc.4",
   "type": "commonjs",
   "main": "index.js",
   "types": "index.d.ts",

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-ai-workbench/core",
-  "version": "0.13.2-rc.2",
+  "version": "0.13.2-rc.4",
   "type": "commonjs",
   "main": "index.js",
   "browser": "index.js",
@@ -20,7 +20,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@claude-ai-workbench/contracts": "0.13.2-rc.2"
+    "@claude-ai-workbench/contracts": "0.13.2-rc.4"
   },
   "engines": {
     "node": ">=18"

package/packages/server/bin/agent-terminal-server.js

@@ -29,12 +29,13 @@ app.server.listen(port, host, () => {
 });
 
 let stopping = false;
-function shutdown() {
+async function shutdown() {
   if (stopping) return; stopping = true;
-  app.service.destroy();
+  setTimeout(() => process.exit(1), 10000).unref();
+  try { await app.service.destroy(); }
+  catch { process.stderr.write('SHUTDOWN_FAILED: 客户端运行环境未能完整关闭。\n'); process.exitCode = 1; }
   app.server.closeAllConnections?.();
-  app.server.close(() => process.exit(0));
-  setTimeout(() => process.exit(0), 3000).unref();
+  app.server.close(() => process.exit(process.exitCode || 0));
 }
 process.on('SIGINT', shutdown);
 process.on('SIGTERM', shutdown);

package/packages/server/bin/claude-workbench-server.js

@@ -41,6 +41,14 @@ app.server.listen(port, host, () => {
   warmFolderPicker({ title: '选择项目文件夹' }).catch(() => {});
 });
 
-function shutdown() { app.server.close(() => process.exit(0)); }
+let stopping = false;
+async function shutdown() {
+  if (stopping) return; stopping = true;
+  setTimeout(() => process.exit(1), 10000).unref();
+  try { await app.service.destroy(); }
+  catch { process.stderr.write('SHUTDOWN_FAILED: 客户端运行环境未能完整关闭。\n'); process.exitCode = 1; }
+  app.server.closeAllConnections?.();
+  app.server.close(() => process.exit(process.exitCode || 0));
+}
 process.on('SIGINT', shutdown);
 process.on('SIGTERM', shutdown);

package/packages/server/index.js

@@ -30,6 +30,7 @@ function createWorkbenchServer(options = {}) {
   const apiPrefix = options.apiPrefix || DEFAULT_API_PREFIX;
   const testRoot = path.join(dataDir, 'test-workspaces');
   const projects = options.projects || new ProjectStore({ dataDir });
+  require('./lib/cli-session-recovery').recoverOwnedCliSessions({ dataDir, projects });
   const sessionArchive = options.sessionArchive || new SessionArchiveStore({ dataDir });
   const workspaces = {
     'test-workspace-a': path.join(testRoot, 'context-a'),
@@ -62,9 +63,9 @@ function createWorkbenchServer(options = {}) {
     drivers: {
       'claude-code': claudeDriver,
       ...(options.drivers || {
-        codex: createCodexDriver(),
-        opencode: createOpenCodeDriver(),
-        zcode: createZCodeDriver(),
+        codex: createCodexDriver({ persistence: { dir: path.join(dataDir, 'cli-sessions') } }),
+        opencode: createOpenCodeDriver({ persistence: { dir: path.join(dataDir, 'cli-sessions') } }),
+        zcode: createZCodeDriver({ persistence: { dir: path.join(dataDir, 'cli-sessions') } }),
       }),
     },
   });
@@ -136,7 +137,7 @@ function createWorkbenchServer(options = {}) {
     res.writeHead(404, { 'Content-Type': 'application/json; charset=utf-8' });
     res.end(JSON.stringify({ ok: false, error: 'not found' }));
   });
-  server.on('close', () => service.destroy());
+  server.on('close', () => { Promise.resolve(service.destroy()).catch(error => diagnostics.error('agent.shutdown.failed', '客户端运行环境关闭失败。', { phase: 'shutdown', error: { code: error.code || 'SHUTDOWN_FAILED', message: error.message } })); });
   return { server, service, profiles, contexts, attachments, projects, sessionArchive, registry, agentDiscovery, apiPrefix, dataDir };
 }
 

package/packages/server/lib/agent-registry.js

@@ -46,6 +46,9 @@ class AgentRegistry {
   asRunner() {
     const registry = this;
     return {
+      async destroy() {
+        await Promise.all([...registry.drivers.values()].map(driver => typeof driver.destroy === 'function' ? driver.destroy() : undefined));
+      },
       startChatSession(args = {}) {
         const agentId = normalizeAgentId(args.agentId);
         const driver = registry.driverFor(agentId);

package/packages/server/lib/cli-session-recovery.js

@@ -0,0 +1,28 @@
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+const os = require('node:os');
+const SCHEMAS = new Set(['cli-json-runner-session/v1', 'codex-appserver-session/v1', 'opencode-serve-session/v1', 'zcode-appserver-session/v1']);
+
+function recoverOwnedCliSessions({ dataDir, projects, sourceDir = path.join(os.homedir(), '.agent-terminal/cli-sessions') }) {
+  const targetDir = path.join(dataDir, 'cli-sessions');
+  if (path.resolve(sourceDir) === path.resolve(targetDir) || !fs.existsSync(sourceDir)) return;
+  const owners = new Map(projects.list().map(project => [project.id, path.resolve(project.rootPath)]));
+  // Earlier v5 wiring put CLI records in the standalone directory. Preserve
+  // only records whose project ID AND code directory belong to this product.
+  for (const name of fs.readdirSync(sourceDir)) {
+    if (!/^[\w.-]+\.json$/.test(name)) continue;
+    const source = path.join(sourceDir, name); const target = path.join(targetDir, name);
+    let record;
+    try {
+      const stat = fs.lstatSync(source);
+      if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 8 * 1024 * 1024 || fs.existsSync(target)) continue;
+      record = JSON.parse(fs.readFileSync(source, 'utf8'));
+    } catch { continue; }
+    if (!SCHEMAS.has(record.schema) || !owners.has(record.projectSlug) || typeof record.projectPath !== 'string' || path.resolve(record.projectPath) !== owners.get(record.projectSlug) || `${record.sessionId}.json` !== name) continue;
+    fs.mkdirSync(targetDir, { recursive: true });
+    try { fs.copyFileSync(source, target, fs.constants.COPYFILE_EXCL); }
+    catch (error) { if (error.code !== 'EEXIST') throw error; }
+  }
+}
+module.exports = { recoverOwnedCliSessions };

package/packages/server/lib/drivers/cli-json-runner.js

@@ -292,16 +292,7 @@ function createCliJsonRunner(config) {
       try {
         fs.mkdirSync(path.dirname(file), { recursive: true });
         fs.writeFileSync(tmp, payload, 'utf8');
-        try {
-          fs.renameSync(tmp, file); // same-volume atomic replace
-        } catch {
-          // Windows can refuse to replace a destination an AV scanner or
-          // indexer still holds open: drop the old copy and retry the move.
-          // The temp file always carries the complete new version, so the
-          // destination is only ever missing for one rename call.
-          try { fs.unlinkSync(file); } catch { /* nothing to drop */ }
-          fs.renameSync(tmp, file);
-        }
+        fs.renameSync(tmp, file); // failed replacement keeps the old history
         persistFailures = 0;
         if (diskIndex) diskIndex.set(session.sessionId, { file, summary: summary(session) });
         return;

package/packages/server/lib/drivers/codex-driver.js

@@ -4,6 +4,7 @@ const fs = require('fs');
 const os = require('os');
 const path = require('path');
 const crypto = require('crypto');
+const { writeJson } = require('../json-file');
 const { createCliJsonRunner, resolveCliInvocation } = require('./cli-json-runner');
 const { createAppServerBridge } = require('../bridges/app-server-bridge');
 const {
@@ -335,8 +336,7 @@ function createAppServerCodexDriver(options = {}) {
     if (!appServerPersist.enabled) return;
     try {
       const file = appServerRecordFile(session.sessionId);
-      fs.mkdirSync(path.dirname(file), { recursive: true });
-      fs.writeFileSync(file, `${JSON.stringify({
+      writeJson(file, {
         schema: APP_SERVER_PERSIST_SCHEMA,
         agentId: 'codex',
         transport: 'app-server',
@@ -360,7 +360,7 @@ function createAppServerCodexDriver(options = {}) {
         peakTurnTokens: session.peakTurnTokens || 0,
         events: session.outputBuffer.slice(-MAX_APP_SERVER_PERSISTED_EVENTS),
         updatedAt: new Date().toISOString(),
-      })}\n`, 'utf8');
+      });
       if (appServerDiskIndex) appServerDiskIndex.set(session.sessionId, { file: appServerRecordFile(session.sessionId), summary: summary(session) });
     } catch {
       // Read-only home or full disk degrades to memory-only behavior.

package/packages/server/lib/drivers/opencode-driver.js

@@ -1,6 +1,7 @@
 'use strict';
 
 const fs = require('fs');
+const { writeJson } = require('../json-file');
 const os = require('os');
 const path = require('path');
 const crypto = require('crypto');
@@ -249,8 +250,7 @@ function createServeOpenCodeDriver(options = {}) {
     if (!persist.enabled) return;
     try {
       const file = serveRecordFile(session.sessionId);
-      fs.mkdirSync(path.dirname(file), { recursive: true });
-      fs.writeFileSync(file, `${JSON.stringify({
+      writeJson(file, {
         schema: SERVE_PERSIST_SCHEMA,
         agentId: 'opencode',
         transport: 'serve',
@@ -275,7 +275,7 @@ function createServeOpenCodeDriver(options = {}) {
         peakTurnTokens: session.peakTurnTokens || 0,
         events: session.outputBuffer.slice(-MAX_SERVE_PERSISTED_EVENTS),
         updatedAt: new Date().toISOString(),
-      })}\n`, 'utf8');
+      });
       if (serveDiskIndex) serveDiskIndex.set(session.sessionId, { file: serveRecordFile(session.sessionId), summary: summary(session) });
     } catch {
       // Read-only home or full disk degrades to memory-only behavior.
@@ -493,6 +493,7 @@ function createServeOpenCodeDriver(options = {}) {
       session.lastResult = '';
       session.currentTurn = {
         assistantMessageID: null,
+        assistantMessageIDs: new Set(),
         userMessageIDs: new Set(), // echoed prompts never stream as output
         parts: new Map(), // partID -> tracking state
         sawEvent: false,
@@ -849,8 +850,11 @@ function createServeOpenCodeDriver(options = {}) {
       return;
     }
     if (info.role !== 'assistant') return;
+    const turn = session.currentTurn;
+    if (info.id && !turn.assistantMessageIDs.has(info.id) && info.time?.created && info.time.created < turn.startedAt - 5000) return;
     markActivity(session);
-    if (!session.currentTurn.assistantMessageID && info.id) session.currentTurn.assistantMessageID = info.id;
+    // Tool rounds and the final answer have distinct assistant message IDs.
+    if (info.id) { turn.assistantMessageIDs.add(info.id); turn.assistantMessageID = info.id; }
     // Completed assistant messages carry the final token totals; they back
     // up the per-step-finish usage when a turn had no step-finish parts.
     if (info.time && info.time.completed && info.tokens && info.tokens.total != null) {
@@ -863,6 +867,7 @@ function createServeOpenCodeDriver(options = {}) {
   // the assistant message this turn belongs to.
   function partBelongsToTurn(turn, messageID) {
     if (messageID && turn.userMessageIDs.has(messageID)) return false;
+    if (messageID && turn.assistantMessageIDs.has(messageID)) return true;
     if (turn.assistantMessageID && messageID && messageID !== turn.assistantMessageID) return false;
     return true;
   }
@@ -872,6 +877,7 @@ function createServeOpenCodeDriver(options = {}) {
     if (!partBelongsToTurn(session.currentTurn, part.messageID)) return;
     if (!session.currentTurn.assistantMessageID && part.messageID) {
       session.currentTurn.assistantMessageID = part.messageID;
+      session.currentTurn.assistantMessageIDs.add(part.messageID);
     }
     markActivity(session);
     if (part.type === 'step-start') {
@@ -961,7 +967,7 @@ function createServeOpenCodeDriver(options = {}) {
     const turn = session.currentTurn;
     if (!turn || field !== 'text' || !partID) return;
     if (!partBelongsToTurn(turn, messageID)) return;
-    if (!turn.assistantMessageID && messageID) turn.assistantMessageID = messageID;
+    if (!turn.assistantMessageID && messageID) { turn.assistantMessageID = messageID; turn.assistantMessageIDs.add(messageID); }
     markActivity(session);
     const tracker = partTracker(session, partID);
     if (!tracker) return;

package/packages/server/lib/drivers/zcode-driver.js

@@ -1,6 +1,7 @@
 'use strict';
 
 const fs = require('fs');
+const { writeJson } = require('../json-file');
 const os = require('os');
 const path = require('path');
 const crypto = require('crypto');
@@ -234,6 +235,11 @@ function createAppServerZCodeDriver(options, cli) {
   let nextId = 1;
   let nextPermissionId = 1;
   let bridge = null;
+  let protocolMode = null;
+  let profileRuntime = null;
+  let profileRuntimeSignature = null;
+  let bridgeSetup = Promise.resolve();
+  let destroyed = false;
   let desktopProviderCache; // lazily-read ~/.zcode/v2 providers (agent-owned auth)
 
   function summary(session) {
@@ -317,8 +323,7 @@ function createAppServerZCodeDriver(options, cli) {
     if (!persist.enabled) return;
     try {
       const file = recordFile(session.sessionId);
-      fs.mkdirSync(path.dirname(file), { recursive: true });
-      fs.writeFileSync(file, `${JSON.stringify({
+      writeJson(file, {
         schema: APP_SERVER_PERSIST_SCHEMA,
         agentId: 'zcode',
         transport: 'app-server',
@@ -341,7 +346,7 @@ function createAppServerZCodeDriver(options, cli) {
         peakTurnTokens: session.peakTurnTokens || 0,
         events: session.outputBuffer.slice(-MAX_PERSISTED_EVENTS),
         updatedAt: new Date().toISOString(),
-      })}\n`, 'utf8');
+      });
       if (diskIndex) diskIndex.set(session.sessionId, { file: recordFile(session.sessionId), summary: summary(session) });
     } catch {
       // Read-only home or full disk degrades to memory-only behavior.
@@ -519,13 +524,15 @@ function createAppServerZCodeDriver(options, cli) {
         // Invalid injected profiles (no base URL) throw here and surface as a
         // turn error, mirroring the codex driver's bridgeSpecFor contract.
         runtimeModel = runtimeModelFor(profile);
-        await ensureBridge();
+        session.preparing = true;
+        session.runtimeSignature = profile?.apiKey ? runtimeModel.revision : 'agent-owned';
+        await ensureBridge(profile, session);
         await ensureZcodeSession(session, runtimeModel);
       } catch (error) {
         emit(session, { type: 'claude/error', message: `zcode app-server unavailable: ${error.message}`.slice(0, 500) });
         setState(session, 'idle');
         return { started: false };
-      }
+      } finally { session.preparing = false; }
 
       emit(session, {
         type: 'claude/user-prompt',
@@ -544,11 +551,6 @@ function createAppServerZCodeDriver(options, cli) {
         if (images.length) {
           emitDiag(session, { type: 'claude/stderr', text: 'the zcode app-server driver does not support image attachments yet' });
         }
-        await bridge.request('session/send', {
-          sessionId: session.zcodeSessionId,
-          content: appendTextAttachments(value, attachments) + (sendOptions.knowledgeContext || ''),
-          ...(runtimeModel ? { runtimeModel } : {}),
-        }, { timeoutMs: 30000 });
         session.currentTurn = {
           turnId: null,
           announcedText: new Set(),
@@ -558,11 +560,14 @@ function createAppServerZCodeDriver(options, cli) {
           sawEvent: false,
         };
         session.turnPromise = new Promise(resolve => { session.currentTurn.resolve = resolve; });
+        await bridge.request('session/send', {
+          sessionId: session.zcodeSessionId,
+          content: appendTextAttachments(value, attachments) + (sendOptions.knowledgeContext || ''),
+          ...(protocolMode === 'selection' ? (session.nativeModel ? { modelSelection: session.nativeModel } : {}) : runtimeModel ? { runtimeModel } : {}),
+        }, { timeoutMs: 30000 });
         return { started: true };
       } catch (error) {
-        emit(session, { type: 'claude/error', message: `zcode turn failed to start: ${error.message}`.slice(0, 500) });
-        session.currentTurn = null;
-        setState(session, 'idle');
+        finishTurn(session, { resultType: 'error', response: '' }, `zcode turn failed to start: ${error.message}`);
         return { started: false };
       }
     },
@@ -650,6 +655,15 @@ function createAppServerZCodeDriver(options, cli) {
 
     findClaudeExecutableForSdk() { return null; },
 
+    async destroy() {
+      destroyed = true;
+      for (const session of sessions.values()) if (ACTIVE_STATES.has(session.state)) runner.abort(session.sessionId);
+      await bridge?.close(); bridge = null;
+      await bridgeSetup.catch(() => {});
+      await bridge?.close(); bridge = null;
+      await profileRuntime?.close(); profileRuntime = null;
+    },
+
     // Test seams.
     get transportMode() { return 'app-server'; },
     get bridgeState() { return bridge ? bridge.state : 'uncreated'; },
@@ -658,7 +672,22 @@ function createAppServerZCodeDriver(options, cli) {
 
   // -- bridge lifecycle ----------------------------------------------------
 
-  function ensureBridge() {
+  function ensureBridge(profile, session) {
+    const preparing = bridgeSetup.then(() => prepareBridge(profile, session));
+    bridgeSetup = preparing.catch(() => {});
+    return preparing;
+  }
+
+  async function prepareBridge(profile, session) {
+    if (destroyed) throw new Error('ZCode 工作台正在关闭。');
+    if (protocolMode === 'selection' && profileRuntimeSignature !== session.runtimeSignature) {
+      if ([...sessions.values()].some(other => other !== session && (other.preparing || ACTIVE_STATES.has(other.state)) && other.runtimeSignature !== session.runtimeSignature)) throw new Error('另一个 ZCode 任务正在使用不同的模型配置，请等待任务结束。');
+      if (profileRuntimeSignature !== null || profile?.apiKey) { await bridge?.close(); bridge = null; }
+      await profileRuntime?.close(); profileRuntime = null;
+      if (profile?.apiKey) profileRuntime = await require('./zcode-profile-runtime').createZCodeProfileRuntime(injectedRuntimeModel(profile));
+      profileRuntimeSignature = session.runtimeSignature;
+    }
+    if (destroyed) throw new Error('ZCode 工作台正在关闭。');
     if (bridge && bridge.state === 'closed') { bridge = null; }
     if (bridge && bridge.state === 'crashed') { recycleBridge('bridge exhausted its restart budget'); }
     if (!bridge) {
@@ -667,7 +696,7 @@ function createAppServerZCodeDriver(options, cli) {
         // runtime with the app-server stdio subcommand.
         command: options.nodePath || process.execPath,
         args: [cli.path, 'app-server', '--stdio'],
-        env: providerRuntimeEnvironment(cli.path, { env: options.env || process.env }),
+        env: { ...providerRuntimeEnvironment(cli.path, { env: options.env || process.env }), ...(profileRuntime ? { ZCODE_PERSONAL_PROVIDER_CONFIG_FILE: profileRuntime.file } : {}) },
         spawn: options.appServerSpawn,
         onEvent: handleNotification,
         onServerRequest: handleServerRequest,
@@ -678,7 +707,12 @@ function createAppServerZCodeDriver(options, cli) {
         log,
       });
     }
-    return bridge.start();
+    await bridge.start();
+    if (protocolMode === null) {
+      try { const capabilities = await bridge.request('runtime/capabilities', {}, { timeoutMs: 10000 }); protocolMode = capabilities?.independentPlanState === true ? 'selection' : 'runtime-model'; }
+      catch (error) { if (error.rpcCode !== -32601) throw error; protocolMode = 'runtime-model'; }
+      if (protocolMode === 'selection') return prepareBridge(profile, session);
+    }
   }
 
   function recycleBridge(reason) {
@@ -708,10 +742,11 @@ function createAppServerZCodeDriver(options, cli) {
   async function ensureZcodeSession(session, runtimeModel) {
     if (session.zcodeSessionId) {
       try {
-        await bridge.request('session/resume', {
+        const resumed = await bridge.request('session/resume', {
           sessionId: session.zcodeSessionId,
-          ...(runtimeModel ? { runtimeModel } : {}),
+          ...(protocolMode !== 'selection' && runtimeModel ? { runtimeModel } : {}),
         }, { timeoutMs: 30000 });
+        if (protocolMode === 'selection') { session.nativeModel = resumed.settings?.model?.current || session.nativeModel || null; await selectNativeModel(session); }
         zcodeSessions.set(session.zcodeSessionId, session.sessionId);
         await subscribeZcodeSession(session);
         return;
@@ -726,17 +761,28 @@ function createAppServerZCodeDriver(options, cli) {
     const result = await bridge.request('session/create', {
       workspace: { workspacePath: session.projectPath, workspaceKey: session.projectPath },
       mode: MODE_FOR_PERMISSION[session.permissionMode] || 'build',
-      ...(runtimeModel ? { runtimeModel } : {}),
+      ...(protocolMode === 'selection' ? { titleGenerationEnabled: false } : runtimeModel ? { runtimeModel } : {}),
     }, { timeoutMs: 60000 });
     const zcodeId = result && result.session && (result.session.sessionId || result.session.id);
     if (!zcodeId) throw new Error('zcode app-server did not return a session');
     session.zcodeSessionId = zcodeId;
+    if (protocolMode === 'selection') { session.nativeModel = result.settings?.model?.current || null; await selectNativeModel(session); }
     zcodeSessions.set(zcodeId, session.sessionId);
     if (result.session && result.session.title && !session.title) session.title = result.session.title;
     await subscribeZcodeSession(session);
     persistSession(session);
   }
 
+  async function selectNativeModel(session) {
+    if (profileRuntime) session.nativeModel = profileRuntime.selection;
+    else if (session.selectedModel) {
+      const slash = session.selectedModel.indexOf('/');
+      if (slash > 0) session.nativeModel = { providerId: session.selectedModel.slice(0, slash), modelId: session.selectedModel.slice(slash + 1), options: { reasoningLevel: 'enabled' } };
+      else if (session.nativeModel) session.nativeModel = { ...session.nativeModel, modelId: session.selectedModel };
+    }
+    await bridge.request('session/setMode', { sessionId: session.zcodeSessionId, mode: MODE_FOR_PERMISSION[session.permissionMode] || 'build' }, { timeoutMs: 10000 });
+  }
+
   async function subscribeZcodeSession(session) {
     await bridge.request('session/subscribe', {
       sessionId: session.zcodeSessionId,
@@ -788,6 +834,7 @@ function createAppServerZCodeDriver(options, cli) {
       case 'model.streaming': return onModelStreaming(session, payload || {});
       case 'tool.updated': return onToolUpdated(session, payload || {});
       case 'turn.completed': return finishTurn(session, payload || {});
+      case 'turn.failed': return finishTurn(session, { resultType: 'error', response: '' }, payload?.error?.message || payload?.error?.code || 'ZCode 任务失败');
       case 'session.titleUpdated': {
         if (payload && payload.title) session.title = String(payload.title).slice(0, 200);
         return;

package/packages/server/lib/drivers/zcode-profile-runtime.js

@@ -0,0 +1,71 @@
+'use strict';
+const http = require('node:http');
+const https = require('node:https');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { writeJson } = require('../json-file');
+
+// ZCode 0.16.9 removed inline provider configuration. Its requestAuth override
+// only applies to off-peak account models, not ordinary API-key providers.
+// A private loopback transport keeps the upstream credential in memory; the
+// native provider file contains only a short-lived local capability.
+async function createZCodeProfileRuntime(spec) {
+  const upstream = new URL(spec.provider.baseURL);
+  if (!['http:', 'https:'].includes(upstream.protocol) || upstream.username || upstream.password || upstream.search || upstream.hash) throw new Error('ZCode 模型地址不支持内嵌凭据或查询参数。');
+  const key = spec.provider.apiKey.value;
+  const token = crypto.randomBytes(24).toString('hex');
+  const requests = new Set();
+  const prefix = `/${token}`;
+  const server = http.createServer((req, res) => {
+    const parsed = new URL(req.url, 'http://127.0.0.1');
+    const supplied = req.headers['x-api-key'] || String(req.headers.authorization || '').replace(/^Bearer\s+/i, '');
+    const suffix = parsed.pathname.slice(prefix.length);
+    if (supplied !== token || !parsed.pathname.startsWith(prefix + '/') || req.method !== 'POST' || !['/v1/messages', '/messages', '/chat/completions', '/v1/chat/completions', '/responses', '/v1/responses'].includes(suffix) || parsed.search) { req.resume(); res.writeHead(404); res.end(); return; }
+    const target = new URL(upstream);
+    target.pathname = upstream.pathname.replace(/\/$/, '') + suffix;
+    if (upstream.pathname.endsWith('/v1') && suffix.startsWith('/v1/')) target.pathname = upstream.pathname + suffix.slice(3);
+    const headers = { 'content-type': req.headers['content-type'] || 'application/json' };
+    for (const name of ['anthropic-version', 'anthropic-beta', 'content-length']) if (req.headers[name]) headers[name] = req.headers[name];
+    if (spec.provider.kind === 'anthropic') headers['x-api-key'] = key;
+    else headers.authorization = `Bearer ${key}`;
+    const remote = (target.protocol === 'https:' ? https : http).request(target, { method: 'POST', headers }, incoming => {
+      const allowed = {};
+      for (const name of ['content-type', 'cache-control', 'x-request-id', 'request-id']) if (incoming.headers[name]) allowed[name] = incoming.headers[name];
+      res.writeHead(incoming.statusCode, allowed); res.flushHeaders(); incoming.pipe(res);
+    });
+    requests.add(remote);
+    remote.once('close', () => requests.delete(remote));
+    remote.on('error', () => { if (!res.headersSent) res.writeHead(502, { 'content-type': 'application/json' }); res.end('{"error":{"message":"模型连接失败"}}'); });
+    remote.setTimeout(300000, () => remote.destroy());
+    req.on('aborted', () => remote.destroy());
+    res.on('close', () => { if (!res.writableFinished) remote.destroy(); });
+    let size = 0;
+    req.on('data', bytes => { size += bytes.length; if (size > 8 * 1024 * 1024) { remote.destroy(); req.destroy(); } });
+    req.pipe(remote);
+  });
+  await new Promise((resolve, reject) => { server.once('error', reject); server.listen(0, '127.0.0.1', resolve); });
+  let root;
+  let file;
+  const selection = { ...spec.model, options: { reasoningLevel: 'enabled' } };
+  try {
+    root = fs.mkdtempSync(path.join(os.tmpdir(), 'workbench-zcode-runtime-'));
+    file = path.join(root, 'provider-config.json');
+    writeJson(file, { schemaVersion: 1, config: { providerOrder: [selection.providerId], defaultModelSelection: selection, providerConfigRules: { providerRules: [{ providerId: selection.providerId, providerName: 'Workbench', enabled: true, config: { group: 'standard-personal', access: { type: 'api-key', apiKey: token }, api: { type: spec.provider.kind === 'anthropic' ? 'anthropic-messages' : 'openai-chat-completions', baseUrl: `http://127.0.0.1:${server.address().port}${prefix}` }, personalModelIds: [selection.modelId] } }] }, modelConfigRules: { providerModelRules: [], manualProviderModelRules: [] } } });
+  } catch (error) {
+    await new Promise(resolve => server.close(resolve));
+    if (file) { fs.rmSync(file, { force: true }); fs.rmSync(`${file}.${process.pid}.tmp`, { force: true }); }
+    if (root) { try { fs.rmdirSync(root); } catch {} }
+    throw error;
+  }
+  let closed = false;
+  return { selection, file, async close() {
+    if (closed) return; closed = true;
+    for (const request of requests) request.destroy();
+    server.closeAllConnections(); await new Promise(resolve => server.close(resolve));
+    fs.rmSync(file, { force: true });
+    try { fs.rmdirSync(root); } catch { /* never recursively remove native-created files */ }
+  } };
+}
+module.exports = { createZCodeProfileRuntime };

package/packages/server/lib/json-file.js

@@ -2,6 +2,7 @@
 
 const fs = require('fs');
 const path = require('path');
+const crypto = require('crypto');
 
 function readJson(file, fallback) {
   try { return JSON.parse(fs.readFileSync(file, 'utf8')); }
@@ -10,10 +11,16 @@ function readJson(file, fallback) {
 
 function writeJson(file, value, mode = 0o600) {
   fs.mkdirSync(path.dirname(file), { recursive: true });
-  const temp = `${file}.${process.pid}.tmp`;
-  fs.writeFileSync(temp, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode });
-  fs.renameSync(temp, file);
-  try { fs.chmodSync(file, mode); } catch {}
+  const temp = `${file}.${process.pid}-${crypto.randomUUID()}.tmp`;
+  try {
+    fs.writeFileSync(temp, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode, flag: 'wx' });
+    // Never unlink the previous record if Windows refuses replacement.
+    // ENOSPC or a locked destination must preserve the last durable history.
+    fs.renameSync(temp, file);
+    try { fs.chmodSync(file, mode); } catch {}
+  } finally {
+    try { fs.unlinkSync(temp); } catch {}
+  }
 }
 
 module.exports = { readJson, writeJson };

package/packages/server/lib/workbench-service.js

@@ -503,6 +503,7 @@ class WorkbenchService {
   }
 
   destroy() {
+    if (this.destroyPromise) return this.destroyPromise;
     this.conversationCapture?.close();
     if (this.archiveSweeper) { clearInterval(this.archiveSweeper); this.archiveSweeper = null; }
     for (const sessionId of this.timers.keys()) this._clearTimeout(sessionId);
@@ -510,6 +511,8 @@ class WorkbenchService {
     for (const session of this.runner.listSessions({})) {
       if (ACTIVE_STATES.has(session.state)) try { this.runner.abort(session.sessionId); } catch {}
     }
+    this.destroyPromise = Promise.resolve(this.runner.destroy?.());
+    return this.destroyPromise;
   }
 
   _runtimeProfile(profileId, selectedModel) {

package/packages/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-ai-workbench/server",
-  "version": "0.13.2-rc.2",
+  "version": "0.13.2-rc.4",
   "type": "commonjs",
   "main": "index.js",
   "types": "index.d.ts",
@@ -25,7 +25,7 @@
   ],
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.141",
-    "@claude-ai-workbench/contracts": "0.13.2-rc.2"
+    "@claude-ai-workbench/contracts": "0.13.2-rc.4"
   },
   "engines": {
     "node": ">=18"

package/packages/ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-ai-workbench/ui",
-  "version": "0.13.2-rc.2",
+  "version": "0.13.2-rc.4",
   "type": "commonjs",
   "main": "ai-profile-settings.js",
   "browser": "ai-profile-settings.js",
@@ -33,7 +33,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@claude-ai-workbench/core": "0.13.2-rc.2"
+    "@claude-ai-workbench/core": "0.13.2-rc.4"
   },
   "engines": {
     "node": ">=18"

package/src/backend/lib/claude-cli-runner.js

@@ -19,6 +19,7 @@ const { execFileSync, spawn } = require('child_process');
 const crypto = require('crypto');
 const fs = require('fs');
 const path = require('path');
+const { writeJson } = require('../../../packages/server/lib/json-file');
 const { renderPrompt } = require('./prompt-registry');
 const aiWorkspace = require('./ai-workspace');
 const {
@@ -223,8 +224,7 @@ function persistSession(session) {
   const file = sessionRecordPath(session);
   if (!file) return;
   try {
-    fs.mkdirSync(path.dirname(file), { recursive: true });
-    fs.writeFileSync(file, JSON.stringify(toPersistedSession(session), null, 2) + '\n', 'utf-8');
+    writeJson(file, toPersistedSession(session));
   } catch (e) {
     // Persistence should never interrupt the live Claude process.
   }