@skylandnpm/octopus-proxy 0.1.63 → 0.1.65

package/README.md

@@ -60,7 +60,7 @@ octopus-proxy restart
 
 Claw 完成主机信任和账号认证后，通过端到端会话向 Proxy 发送只读 `runtime.snapshot` 命令。响应包含当前运行状态、Hub 和工具设置、授权项目路径，以及工具可提供的模型信息；机器人 Secret、工具密码和提供商凭据不会返回。工作区的“Proxy 信息”按钮可查看这些内容。
 
-Codex 和 ZCode 由 Proxy 按授权项目启动各自的 app-server，默认随 Proxy 自动启动；服务未就绪时也可在 Claw 点击“启动服务”。若命令不可执行或某个项目启动失败，工作区会显示失败项目及原因。修改命令路径或授权项目后，运行 `octopus-proxy restart` 使配置生效。
+Codex 和 ZCode 由 Proxy 按授权项目启动各自的 app-server，默认随 Proxy 自动启动；服务未就绪时也可在 Claw 点击“启动服务”。若命令不可执行或某个项目启动失败，工作区会显示失败项目及原因。通过 `onboard` 或配置文件修改授权项目后，Claw 打开、切换或刷新工作区项目时会读取最新项目配置；目录变化会释放该项目的旧运行资源和终端，并刷新文件面板。Proxy 不轮询配置文件，也不因主机配置变化主动推送刷新通知。Claw 也可在授权项目菜单中点击“修改项目”，修改“Proxy 主机上的目录”并保存；Proxy 校验目录存在且未重复授权后写入主机配置，Claw 随即刷新工作区，无需重启 Proxy。修改工具命令、机器人凭据等其他设置后，仍需运行 `octopus-proxy restart`。
 
 ## Claw 设备配对与撤销
 
@@ -123,6 +123,30 @@ octopus-proxy update
 
 安装或版本校验失败时不会触发服务重启；包安装失败不保证旧版本文件完整保留。已安装新版本但重启失败时会单独提示，可运行 `octopus-proxy doctor` 和 `octopus-proxy logs` 排查。此命令用于 npm 全局安装，覆盖安装前会检查 npm 安装目录是否与当前命令一致；源码、本地安装或 Node.js 环境不一致时会中止并给出提示。
 
+## Linux 服务在线，但终端显示“未运行、未启用”
+
+后台服务创建的终端可能没有登录会话中的 `XDG_RUNTIME_DIR`。此时 `systemctl --user` 会报 `Failed to connect to bus: No medium found`，不能据此判断服务已停止。CLI 会在未显式配置用户会话环境时，检查 `/run/user/<当前 UID>` 是否存在且属于当前用户，并用于服务查询和控制；查询失败会报告错误。此检查也支持只有 `systemd/private`、没有会话 `bus` socket 的环境。
+
+旧版可先验证：
+
+```sh
+XDG_RUNTIME_DIR=/run/user/$(id -u) octopus-proxy status
+```
+
+如果显示正常，可在该服务账号的 `~/.bashrc` 中补上以下设置，使 Claw 新建的 Bash 终端也能查询用户服务：
+
+```sh
+if [ -z "${XDG_RUNTIME_DIR:-}" ] && [ -z "${DBUS_SESSION_BUS_ADDRESS:-}" ]; then
+    octopus_runtime_dir="/run/user/$(id -u)"
+    if [ -d "$octopus_runtime_dir" ] && [ -O "$octopus_runtime_dir" ]; then
+        export XDG_RUNTIME_DIR="$octopus_runtime_dir"
+    fi
+    unset octopus_runtime_dir
+fi
+```
+
+重新打开终端或运行 `source ~/.bashrc` 后验证 `octopus-proxy status`。如果对应用户运行目录或用户服务管理器不存在，仍需检查主机的登录会话和 linger 配置。
+
 ## 服务启动时报 `Unexpected token '??='`
 
 这通常表示服务实际使用了旧版 Node.js。错误栈中 `.nvm/versions/node/v22.../lib/node_modules` 是包的安装位置，不能说明运行它的 Node.js 版本。安装器只会选择 Node.js 22 或更高版本；旧版安装器可能优先选中能执行 `--version` 的旧系统 Node。

package/dist/{chunk-R73E3EFB.js → chunk-6RJKEA3I.js}

@@ -8334,6 +8334,7 @@ var Operations = [
   "configuration.get",
   "configuration.patch",
   "configuration.models",
+  "configuration.permissionModes",
   "configuration.agents",
   "configuration.commands",
   "configuration.providers",
@@ -8373,7 +8374,7 @@ var CommandSchema = z.object({
   sessionId: z.string().optional(),
   payload: z.record(z.unknown()).default({})
 }).strict();
-var isReadOperation = (operation) => operation === "desktop.capture" || /\.(status|snapshot|list|get|messages|diff|todos|children|logs|projects|read|search|history|models|agents|commands|providers|mcp)$/.test(operation);
+var isReadOperation = (operation) => operation === "desktop.capture" || /\.(status|snapshot|list|get|messages|diff|todos|children|logs|projects|read|search|history|models|permissionModes|agents|commands|providers|mcp)$/.test(operation);
 
 // src/journal.ts
 var Journal = class {
@@ -11031,6 +11032,10 @@ var OpenCodeAdapter = class {
       await this.session(project, id);
     }
     const base = `/api/session/${encodeURIComponent(id ?? "")}`;
+    if (op === "configuration.permissionModes") return { defaultMode: "ask", modes: [
+      { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u6BCF\u6B21\u4F7F\u7528\u5DE5\u5177\u524D\u8BF7\u6C42\u6279\u51C6" },
+      { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u81EA\u52A8\u5141\u8BB8\u5DE5\u5177\u64CD\u4F5C\uFF1B\u4ECD\u9075\u5B88\u4E3B\u673A\u548C\u5DE5\u5177\u81EA\u8EAB\u7684\u8BBF\u95EE\u9650\u5236" }
+    ] };
     if (op === "sessions.prompt") return this.prompt(project, id, p, base);
     if (op === "sessions.command" || op === "sessions.shell") {
       await this.switchSelection(project, base, p);
@@ -11098,6 +11103,13 @@ var OpenCodeAdapter = class {
     return this.data(project, "POST", `${base}/prompt`, { text, files, delivery: "queue", ...p.messageID ? { id: p.messageID } : {} });
   }
   async switchSelection(project, base, payload) {
+    if (payload.permissionMode !== void 0) {
+      if (!["ask", "full"].includes(String(payload.permissionMode))) throw new Error("Unsupported permission mode");
+      const states = await this.data(project, "GET", "/api/session/active");
+      const state = states?.[decodeURIComponent(base.split("/").at(-1))];
+      if (state && !["idle", "completed", "failed", "interrupted"].includes(state.type)) throw new Error("Wait for the active task before changing permission mode");
+      await this.data(project, "PATCH", base, { permissions: [{ action: "*", resource: "*", effect: payload.permissionMode === "full" ? "allow" : "ask" }] });
+    }
     if (payload.agent) await this.data(project, "POST", `${base}/agent`, { agent: payload.agent });
     if (!payload.model) return;
     let model;
@@ -11604,7 +11616,13 @@ function standaloneZcodeSource(source) {
     throw new Error("Unsupported ZCode account bootstrap; native compatibility check failed");
   }
   body = body.replace(registryCall, `${registry}($1,{standalone:{}})`).replace(nativePorts, "$&providerRuntimeHeadersPort:$1.providerRuntimeHeadersPort,");
-  return source.slice(0, start) + body + source.slice(end);
+  source = source.slice(0, start) + body + source.slice(end);
+  const close = /\br\(([$\w]+),"closeSession"\)/.exec(source)?.[1];
+  if (!close) throw new Error("Unsupported ZCode bundle: session close is unavailable");
+  const escapedClose = close.replace(/[$]/g, "\\$&");
+  const closeBody = new RegExp(`async function ${escapedClose}\\(([$\\w]+),([$\\w]+)\\)\\{[^}]*?await ([$\\w]+)\\.eventStore\\.deleteSession\\(([$\\w]+)\\.sessionId\\),\\{closed:!0\\}`, "g");
+  if ([...source.matchAll(closeBody)].length !== 1) throw new Error("Unsupported ZCode session close; native compatibility check failed");
+  return source.replace(closeBody, (match, context, _params, record2, parsed) => match.replace(",{closed:!0}", `,${record2}.persistence!=="deferred"&&await ${context}.deps.sessionStore.updateSession({id:${parsed}.sessionId,timeArchived:Date.now()}),{closed:!0}`));
 }
 function zcodeServerLaunch(command, args) {
   if (basename4(command) !== "zcode.cjs") return { command, args: [...args] };
@@ -12129,6 +12147,7 @@ var OPERATIONS = [
   "sessions.abort",
   "sessions.delete",
   "configuration.models",
+  "configuration.permissionModes",
   "permissions.list",
   "permissions.reply",
   "questions.list",
@@ -12403,6 +12422,31 @@ var CodexAdapter = class {
     }
     return { decision: accept ? reply === "always" ? "acceptForSession" : "accept" : "decline" };
   }
+  async permissionModes(project, rpc) {
+    const result = await rpc.request("config/read", { cwd: await this.workspace.root(project), includeLayers: false }).catch(() => void 0);
+    const autoReview = !!result?.config && Object.hasOwn(result.config, "approvals_reviewer");
+    return {
+      defaultMode: "ask",
+      modes: [
+        { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u7F16\u8F91\u9879\u76EE\u5916\u7684\u6587\u4EF6\u548C\u4F7F\u7528\u4E92\u8054\u7F51\u65F6\u8BF7\u6C42\u6279\u51C6" },
+        ...autoReview ? [{ id: "auto", label: "\u5E2E\u6211\u6279\u51C6", description: "\u7531 Codex \u81EA\u52A8\u5BA1\u6838\u64CD\u4F5C\u98CE\u9669\uFF0C\u9700\u8981\u4F60\u786E\u8BA4\u65F6\u518D\u8BF7\u6C42\u6279\u51C6" }] : [],
+        { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u5141\u8BB8\u8BBF\u95EE\u4E92\u8054\u7F51\u548C Proxy \u4E3B\u673A\u4E0A\u7684\u4EFB\u4F55\u6587\u4EF6\uFF0C\u65E0\u9700\u64CD\u4F5C\u6279\u51C6" }
+      ],
+      autoReview
+    };
+  }
+  async permissionOverrides(project, rpc, mode) {
+    if (mode === void 0) return {};
+    const options = await this.permissionModes(project, rpc);
+    if (!options.modes.some((entry) => entry.id === mode)) throw new Error("Unsupported permission mode");
+    const reviewer = options.autoReview ? { approvalsReviewer: mode === "auto" ? "guardian_subagent" : "user" } : {};
+    if (mode === "full") return { approvalPolicy: "never", sandboxPolicy: { type: "dangerFullAccess" }, ...reviewer };
+    return {
+      approvalPolicy: "on-request",
+      sandboxPolicy: { type: "workspaceWrite", writableRoots: [await this.workspace.root(project)], networkAccess: false },
+      ...reviewer
+    };
+  }
   async session(project, id) {
     if (!describeTool("codex").sessionPattern.test(id)) throw new Error("Invalid session id");
     const rpc = await this.rpc(project);
@@ -12431,6 +12475,10 @@ var CodexAdapter = class {
     if (op === "auth.poll") return this.auth.poll(project, p);
     if (op === "auth.cancel") return this.auth.cancel(project, p.flowId);
     const rpc = await this.rpc(project);
+    if (op === "configuration.permissionModes") {
+      const { autoReview: _, ...options } = await this.permissionModes(project, rpc);
+      return options;
+    }
     if (op === "auth.status") {
       const result = await rpc.request("account/read", { refreshToken: false });
       return {
@@ -12530,6 +12578,7 @@ var CodexAdapter = class {
     if (op === "sessions.prompt") {
       if (!id) throw new Error("Session required");
       await this.session(project, id);
+      const permissions = await this.permissionOverrides(project, rpc, p.permissionMode);
       await this.resume(project, id, rpc);
       const input = [];
       const lines = [];
@@ -12544,7 +12593,7 @@ var CodexAdapter = class {
       const selectedModel = p.model;
       const model = selectedModel?.providerID === "codex" && typeof selectedModel.modelID === "string" ? selectedModel.modelID : void 0;
       const effort = selectedReasoningLevel(p, "effort");
-      const result = await rpc.request("turn/start", { threadId: id, input, ...model ? { model } : {}, ...effort ? { effort } : {} });
+      const result = await rpc.request("turn/start", { threadId: id, input, ...model ? { model } : {}, ...effort ? { effort } : {}, ...permissions });
       this.activeTurns.set(id, result.turn.id);
       return result;
     }
@@ -12619,6 +12668,7 @@ var OPERATIONS2 = [
   ...DAEMON_OPERATIONS,
   ...AUTH_OPERATIONS,
   "configuration.models",
+  "configuration.permissionModes",
   "sessions.list",
   "sessions.create",
   "sessions.get",
@@ -12811,6 +12861,12 @@ var ZcodeAdapter = class {
     if (op === "auth.poll") return this.auth.poll(project, p);
     if (op === "auth.cancel") return this.auth.cancel(project, p.flowId);
     const rpc = await this.rpc(project);
+    if (op === "configuration.permissionModes") return { defaultMode: "ask", modes: [
+      { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u4F7F\u7528 ZCode build \u6A21\u5F0F\uFF0C\u4FEE\u6539\u6587\u4EF6\u524D\u8BF7\u6C42\u6279\u51C6" },
+      { id: "edit", label: "\u81EA\u52A8\u7F16\u8F91", description: "\u81EA\u52A8\u7F16\u8F91\u76F8\u5173\u6587\u4EF6\uFF0C\u5176\u4ED6\u64CD\u4F5C\u6309 ZCode \u539F\u751F\u89C4\u5219\u5BA1\u6279" },
+      { id: "plan", label: "\u53EA\u8BFB\u89C4\u5212", description: "\u4F7F\u7528 ZCode plan \u6A21\u5F0F\uFF0C\u68C0\u67E5\u9879\u76EE\u5E76\u5236\u5B9A\u8BA1\u5212" },
+      { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u4F7F\u7528 ZCode yolo \u6A21\u5F0F\uFF0C\u51CF\u5C11\u5DE5\u5177\u64CD\u4F5C\u786E\u8BA4" }
+    ] };
     if (op === "configuration.models" || op === "auth.status") {
       const snapshot = await rpc.request("session/create", { workspace: await this.workspaceRef(project), persistence: "deferred", titleGenerationEnabled: false, toolAllowlist: [] });
       try {
@@ -12886,7 +12942,8 @@ var ZcodeAdapter = class {
     }
     if (op === "sessions.prompt") {
       if (!id) throw new Error("Session required");
-      await this.session(project, id);
+      const session = await this.session(project, id);
+      if (p.permissionMode !== void 0 && typeof session.status === "string" && !["idle", "completed", "stopped", "closed", "failed", "error"].includes(session.status.toLowerCase())) throw new Error("Wait for the active task before changing permission mode");
       await this.watch(project, rpc, id);
       const lines = [];
       if (typeof p.text === "string" && p.text.trim()) lines.push(screenshotPrompt(p.text));
@@ -12895,6 +12952,12 @@ var ZcodeAdapter = class {
         lines.push(`Attached file: ${upload.destination} (${upload.name}, ${upload.mime}). Read this file if relevant to the task.`);
       }
       if (!lines.length) throw new Error("Message or attachments required");
+      if (p.permissionMode !== void 0) {
+        const modes = { ask: "build", edit: "edit", plan: "plan", full: "yolo" };
+        const mode = typeof p.permissionMode === "string" && Object.hasOwn(modes, p.permissionMode) ? modes[p.permissionMode] : void 0;
+        if (!mode) throw new Error("Unsupported permission mode");
+        await rpc.request("session/setMode", { sessionId: id, mode });
+      }
       const selected = p.model;
       if (selected?.providerID && selected.modelID) {
         let level = selectedReasoningLevel(p, "model.options.reasoningLevel");
@@ -12986,6 +13049,22 @@ var ZcodeAdapter = class {
 import { randomUUID as randomUUID15 } from "node:crypto";
 import { readFile as readFile8, readdir as readdir3, rm as rm2 } from "node:fs/promises";
 import { dirname as dirname5 } from "node:path";
+
+// src/tools/pi-permissions.ts
+var PI_PERMISSION_TITLE = "Octopus \u5DE5\u5177\u6388\u6743";
+var PI_PERMISSION_EXTENSION = `
+export default function (pi) {
+  const ready = process.env.OCTOPUS_PI_PERMISSION_READY;
+  pi.on('session_start', (_event, ctx) => ctx.ui.notify(ready, 'info'));
+  pi.on('tool_call', async (event, ctx) => {
+    if (!ctx.hasUI) return { block: true, reason: '\u5DE5\u5177\u64CD\u4F5C\u9700\u8981\u7528\u6237\u6279\u51C6' };
+    const allowed = await ctx.ui.confirm(${JSON.stringify(PI_PERMISSION_TITLE)}, JSON.stringify({ toolName: event.toolName, input: event.input }));
+    if (allowed !== true) return { block: true, reason: '\u7528\u6237\u62D2\u7EDD\u4E86\u5DE5\u5177\u64CD\u4F5C' };
+  });
+}
+`;
+
+// src/tools/pi.ts
 var OPERATIONS3 = [
   ...DAEMON_OPERATIONS,
   "sessions.list",
@@ -12998,7 +13077,9 @@ var OPERATIONS3 = [
   "sessions.delete",
   "auth.status",
   "configuration.models",
+  "configuration.permissionModes",
   "permissions.list",
+  "permissions.reply",
   "questions.list",
   "questions.reply",
   "questions.reject"
@@ -13018,6 +13099,7 @@ var PiAdapter = class {
   questions = /* @__PURE__ */ new Map();
   mutations = /* @__PURE__ */ new Map();
   deleting = /* @__PURE__ */ new Set();
+  reconfiguring = /* @__PURE__ */ new Set();
   supportedOperations() {
     return OPERATIONS3;
   }
@@ -13072,7 +13154,7 @@ var PiAdapter = class {
         this.partials.delete(this.key(project, id));
         this.active.delete(this.key(project, id));
         this.clearQuestions(project, id);
-        this.emit(project, "session.error", { sessionID: id, message: "Pi connection closed; reconnect to resume the saved session" });
+        if (!this.reconfiguring.has(this.key(project, id))) this.emit(project, "session.error", { sessionID: id, message: "Pi connection closed; reconnect to resume the saved session" });
       }
     });
   }
@@ -13090,16 +13172,20 @@ var PiAdapter = class {
         question.timer.unref();
       }
       this.questions.set(id, question);
-      this.emit(project, "question.request", { sessionID: sessionId, requestId: id });
+      this.emit(project, this.isPermission(question) ? "permission.request" : "question.request", { sessionID: sessionId, requestId: id });
     }).catch(() => {
     });
   }
   clearQuestions(project, id) {
     for (const [key, question] of this.questions) if (question.project === project && question.sessionId === id) {
       clearTimeout(question.timer);
+      if (!question.rpc.exited) question.rpc.notify("extension_ui_response", { id: question.detail.id, cancelled: true });
       this.questions.delete(key);
     }
   }
+  isPermission(question) {
+    return question.detail.method === "confirm" && question.detail.title === PI_PERMISSION_TITLE;
+  }
   close() {
     for (const question of this.questions.values()) {
       clearTimeout(question.timer);
@@ -13157,6 +13243,10 @@ var PiAdapter = class {
   async execute(command, project) {
     const op = command.operation, p = command.payload, id = command.sessionId;
     if (!OPERATIONS3.includes(op)) unsupportedOperation("pi", op);
+    if (op === "configuration.permissionModes") return { defaultMode: "ask", modes: [
+      { id: "ask", label: "\u8BF7\u6C42\u6279\u51C6", description: "\u901A\u8FC7 Pi \u5DE5\u5177\u6388\u6743\u6269\u5C55\uFF0C\u5728\u6BCF\u6B21\u5DE5\u5177\u6267\u884C\u524D\u8BF7\u6C42\u6279\u51C6" },
+      { id: "full", label: "\u5B8C\u5168\u8BBF\u95EE", description: "\u6309 Pi \u539F\u751F\u6743\u9650\u6267\u884C\u5DE5\u5177\uFF0C\u4E0D\u542F\u7528\u9010\u6B21\u5BA1\u6279\uFF1B\u4E0D\u63D0\u4F9B\u7CFB\u7EDF\u6C99\u7BB1" }
+    ] };
     if (op === "auth.status") {
       const rpc2 = await this.runtime.connect(project);
       const result = await rpc2.request("get_available_models");
@@ -13198,11 +13288,26 @@ var PiAdapter = class {
     }
     if (op === "permissions.list") {
       if (id) await this.session(project, id);
-      return [];
+      return [...this.questions.values()].filter((q) => q.project === project && (!id || q.sessionId === id) && this.isPermission(q)).map((q) => ({
+        id: q.id,
+        sessionID: q.sessionId,
+        permission: "Pi \u5DE5\u5177\u64CD\u4F5C",
+        patterns: [q.detail.message ?? ""],
+        replies: ["once", "reject"]
+      }));
+    }
+    if (op === "permissions.reply") {
+      const question = this.questions.get(String(p.requestId));
+      if (!question || !this.isPermission(question) || question.project !== project || id && id !== question.sessionId) throw new Error("Request is no longer pending in this session");
+      if (p.reply !== "once" && p.reply !== "reject") throw new Error("Invalid permission reply");
+      question.rpc.notify("extension_ui_response", { id: question.detail.id, confirmed: p.reply === "once" });
+      clearTimeout(question.timer);
+      this.questions.delete(question.id);
+      return { ok: true };
     }
     if (op === "questions.list") {
       if (id) await this.session(project, id);
-      return [...this.questions.values()].filter((q) => q.project === project && (!id || q.sessionId === id)).map((q) => ({
+      return [...this.questions.values()].filter((q) => q.project === project && (!id || q.sessionId === id) && !this.isPermission(q)).map((q) => ({
         id: q.id,
         sessionID: q.sessionId,
         questions: [{
@@ -13216,7 +13321,7 @@ var PiAdapter = class {
     }
     if (op === "questions.reply" || op === "questions.reject") {
       const question = this.questions.get(String(p.requestId));
-      if (!question || question.project !== project || id && id !== question.sessionId) throw new Error("Request is no longer pending in this session");
+      if (!question || this.isPermission(question) || question.project !== project || id && id !== question.sessionId) throw new Error("Request is no longer pending in this session");
       const answers = Array.isArray(p.answers) ? p.answers : [];
       const first = Array.isArray(answers[0]) ? answers[0][0] : answers[0];
       const value = typeof first === "string" ? first : "";
@@ -13234,13 +13339,14 @@ var PiAdapter = class {
         await this.runtime.closeSession(project, id);
         await rm2(this.runtime.sessionFile(project, id), { force: true });
         await rm2(this.metadataPath(project, id));
+        await rm2(this.runtime.sessionFile(project, id).replace(/\.jsonl$/, ".permission.ts"), { force: true });
         this.clearQuestions(project, id);
       } finally {
         this.deleting.delete(this.key(project, id));
       }
       return { ok: true };
     }
-    const rpc = await this.rpc(project, id);
+    let rpc = await this.rpc(project, id);
     if (op === "sessions.status") {
       const state = await rpc.request("get_state");
       return { [id]: { type: this.active.has(this.key(project, id)) || state.isStreaming || state.isCompacting || (state.pendingMessageCount ?? 0) > 0 ? "busy" : "idle" } };
@@ -13256,6 +13362,7 @@ var PiAdapter = class {
       return this.media.messages(project, id, this.messages(messages, this.key(project, id)));
     }
     if (op === "sessions.abort") {
+      this.clearQuestions(project, id);
       await rpc.request("clear_queue");
       await rpc.request("abort");
       return { ok: true };
@@ -13270,6 +13377,22 @@ var PiAdapter = class {
         } else lines.push(`Attached file: ${upload.destination} (${upload.name}, ${upload.mime}). Read this file if relevant to the task.`);
       }
       if (!lines.length && !images.length) throw new Error("Message or attachments required");
+      if (p.permissionMode !== void 0) {
+        if (p.permissionMode !== "ask" && p.permissionMode !== "full") throw new Error("Unsupported permission mode");
+        if (p.permissionMode !== (session.permissionMode ?? "full")) {
+          const state = await rpc.request("get_state");
+          if (this.active.has(this.key(project, id)) || state.isStreaming || state.isCompacting || (state.pendingMessageCount ?? 0) > 0) throw new Error("Wait for the active task before changing permission mode");
+          session.permissionMode = p.permissionMode;
+          await atomicJson(this.metadataPath(project, id), session);
+          this.reconfiguring.add(this.key(project, id));
+          try {
+            await this.runtime.closeSession(project, id);
+            rpc = await this.rpc(project, id);
+          } finally {
+            this.reconfiguring.delete(this.key(project, id));
+          }
+        }
+      }
       const model = p.model;
       const level = selectedReasoningLevel(p, "level");
       if (model && typeof model.providerID === "string" && typeof model.modelID === "string") await rpc.request("set_model", { provider: model.providerID, modelId: model.modelID });
@@ -13286,7 +13409,8 @@ var PiAdapter = class {
 
 // src/tools/pi-runtime.ts
 import { execFile as execFile5, spawn as spawn5 } from "node:child_process";
-import { mkdir as mkdir8, open as open8 } from "node:fs/promises";
+import { mkdir as mkdir8, open as open8, writeFile as writeFile6 } from "node:fs/promises";
+import { randomUUID as randomUUID16 } from "node:crypto";
 import { join as join13 } from "node:path";
 import { promisify as promisify5 } from "node:util";
 var run3 = promisify5(execFile5);
@@ -13405,32 +13529,58 @@ ${bytes.toString("utf8")}`);
     await this.kill(key);
     const directory = this.project(projectId).directory;
     await mkdir8(join13(this.config.stateDirectory, "pi-sessions", projectId), { recursive: true, mode: 448 });
+    const sessionFile = sessionId ? this.sessionFile(projectId, sessionId) : void 0;
+    const policy = sessionFile ? await readJson(sessionFile.replace(/\.jsonl$/, ".json")) : void 0;
+    const gated = policy?.permissionMode === "ask";
+    const extension = sessionFile?.replace(/\.jsonl$/, ".permission.ts");
+    if (gated) await writeFile6(extension, PI_PERMISSION_EXTENSION, { mode: 384 });
+    const readyToken = gated ? `octopus-permissions-ready:${randomUUID16()}` : "";
     const logPath = join13(this.config.stateDirectory, `pi-${key}.log`);
     const log = await open8(logPath, "a", 384);
     if (generation !== this.generation) {
       await log.close();
       throw new Error("Pi runtime stopped during startup");
     }
-    const args = [...describeTool("pi").serverArgs, ...sessionId ? ["--session", this.sessionFile(projectId, sessionId)] : ["--no-session"]];
-    const child = spawn5(this.config.tool.command, args, { cwd: directory, env: { ...process.env }, stdio: ["pipe", "pipe", log.fd] });
+    const args = [...describeTool("pi").serverArgs, ...sessionFile ? ["--session", sessionFile] : ["--no-session"], ...gated ? ["--extension", extension] : []];
+    const child = spawn5(this.config.tool.command, args, { cwd: directory, env: { ...process.env, OCTOPUS_PI_PERMISSION_READY: readyToken }, stdio: ["pipe", "pipe", log.fd] });
     child.once("close", () => {
       void log.close();
     });
     this.logPaths.add(logPath);
+    let resolveReady = () => {
+    }, rejectReady = (_error) => {
+    };
+    let readyTimeout;
+    const ready = gated ? new Promise((resolve5, reject) => {
+      resolveReady = resolve5;
+      rejectReady = reject;
+      readyTimeout = setTimeout(() => reject(new Error("Pi \u5DE5\u5177\u6388\u6743\u6269\u5C55\u672A\u5C31\u7EEA\uFF0C\u5DF2\u505C\u6B62\u4F1A\u8BDD\u4EE5\u907F\u514D\u8DF3\u8FC7\u5BA1\u6279")), 1e4);
+    }) : Promise.resolve();
     const rpc = new LineRpc(child, {
       ...handlers,
+      onNotification: (type, data) => {
+        const detail = data;
+        if (gated && type === "extension_ui_request" && detail.method === "notify" && detail.message === readyToken) {
+          resolveReady();
+          return;
+        }
+        handlers.onNotification?.(type, data);
+      },
       onClose: (reason) => {
+        rejectReady(new Error("Pi \u5DE5\u5177\u6388\u6743\u8FDE\u63A5\u5DF2\u5173\u95ED"));
         handlers.onClose?.(reason);
       }
     }, "pi");
     this.processes.set(key, { child, rpc, projectId, sessionId });
     try {
-      await rpc.request("get_state");
+      await Promise.all([rpc.request("get_state"), ready]);
       if (generation !== this.generation) throw new Error("Pi runtime stopped during startup");
       return rpc;
     } catch (error) {
       await this.kill(key);
       throw error;
+    } finally {
+      clearTimeout(readyTimeout);
     }
   }
   async kill(key) {
@@ -13469,6 +13619,7 @@ function createAdapter(runtime, workspace, uploads, emit) {
 // src/project-registry.ts
 import { realpath as realpath6, readFile as readFile9, stat as stat7 } from "node:fs/promises";
 import { isAbsolute as isAbsolute4 } from "node:path";
+import { isDeepStrictEqual } from "node:util";
 var ProjectMutationSchema = ProjectSchema.extend({
   name: ProjectSchema.shape.name.trim().max(120),
   specDirectories: ProjectSchema.shape.specDirectories.removeDefault().element.min(1).array().max(20).default(["specs", "docs"])
@@ -13484,13 +13635,21 @@ function rawProjectId(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) && typeof value.id === "string" ? value.id : void 0;
 }
 var ProjectRegistry = class {
-  constructor(configPath, config, runtime, adapter) {
+  constructor(configPath, config, runtime, adapter, onChanged = () => {
+  }) {
     this.configPath = configPath;
     this.config = config;
     this.runtime = runtime;
     this.adapter = adapter;
+    this.onChanged = onChanged;
   }
   pending = Promise.resolve();
+  // The daemon runs this under the same lock as tool selection and project mutations.
+  reload() {
+    return this.serial(async () => {
+      await this.readCurrent();
+    });
+  }
   add(payload) {
     return this.serial(() => this.addUnlocked(payload));
   }
@@ -13514,17 +13673,36 @@ var ProjectRegistry = class {
   }
   async readCurrent() {
     const current = rawConfig(JSON.parse(await readFile9(this.configPath, "utf8")));
-    const diskProjects = current.projects.map((value) => {
-      const project = ProjectSchema.parse(value);
-      return { ...project, directory: expandHome(project.directory) };
-    });
-    if (JSON.stringify(diskProjects) !== JSON.stringify(this.config.projects)) {
-      throw new Error("Proxy \u914D\u7F6E\u5DF2\u5728\u4E3B\u673A\u4E0A\u88AB\u4FEE\u6539\uFF1B\u8BF7\u91CD\u542F Proxy \u540E\u518D\u7BA1\u7406\u9879\u76EE");
-    }
+    const diskProjects = ConfigSchema.shape.projects.parse(current.projects).map((project) => ({ ...project, directory: expandHome(project.directory) }));
+    if (new Set(diskProjects.map((project) => project.id)).size !== diskProjects.length) throw new Error("\u9879\u76EE ID \u91CD\u590D");
+    if (diskProjects.some((project) => !isAbsolute4(project.directory))) throw new Error("\u9879\u76EE\u76EE\u5F55\u5FC5\u987B\u662F Proxy \u4E3B\u673A\u4E0A\u7684\u7EDD\u5BF9\u8DEF\u5F84");
+    await this.applyProjects(diskProjects);
     return current;
   }
+  async persist(expected, projects) {
+    const latest = rawConfig(JSON.parse(await readFile9(this.configPath, "utf8")));
+    if (!isDeepStrictEqual(latest.projects, expected.projects)) {
+      throw new Error("\u4E3B\u673A\u4E0A\u7684\u9879\u76EE\u914D\u7F6E\u5728\u4FDD\u5B58\u671F\u95F4\u53D1\u751F\u53D8\u5316\uFF0C\u8BF7\u5237\u65B0\u540E\u91CD\u8BD5");
+    }
+    await atomicJson(this.configPath, { ...latest, projects });
+  }
+  async applyProjects(projects) {
+    if (isDeepStrictEqual(projects, this.config.projects)) return;
+    const reset = this.config.projects.filter((previous) => !projects.some((project) => project.id === previous.id && project.directory === previous.directory));
+    const added = projects.filter((project) => !this.config.projects.some((previous) => previous.id === project.id && previous.directory === project.directory));
+    for (const project of reset) {
+      await Promise.all([
+        this.bestEffort(() => this.adapter.removeProject?.(project.id)),
+        this.bestEffort(() => this.runtime.removeProject?.(project.id))
+      ]);
+    }
+    this.config.projects.splice(0, this.config.projects.length, ...projects);
+    for (const project of added) await this.bestEffort(() => this.runtime.addProject?.(project.id));
+    this.onChanged(reset.map((project) => project.id));
+  }
   async addUnlocked(payload) {
     const parsed = ProjectMutationSchema.parse(payload);
+    const raw = await this.readCurrent();
     const directory = expandHome(parsed.directory);
     if (!isAbsolute4(directory)) throw new Error("\u9879\u76EE\u76EE\u5F55\u5FC5\u987B\u662F Proxy \u4E3B\u673A\u4E0A\u7684\u7EDD\u5BF9\u8DEF\u5F84");
     const info = await stat7(directory).catch(() => void 0);
@@ -13535,14 +13713,13 @@ var ProjectRegistry = class {
       if (await realpath6(project2.directory).catch(() => project2.directory) === canonical) throw new Error("\u8BE5\u76EE\u5F55\u5DF2\u7ECF\u662F\u6388\u6743\u9879\u76EE");
     }
     const project = { ...parsed, directory: canonical };
-    const raw = await this.readCurrent();
-    await atomicJson(this.configPath, { ...raw, projects: [...raw.projects, project] });
-    this.config.projects.push(project);
-    await this.bestEffort(() => this.runtime.addProject?.(project.id));
+    await this.persist(raw, [...raw.projects, project]);
+    await this.applyProjects([...this.config.projects, project]);
     return publicProjects(this.config);
   }
   async updateUnlocked(payload) {
     const parsed = ProjectUpdateSchema.parse(payload);
+    const raw = await this.readCurrent();
     const index = this.config.projects.findIndex((project) => project.id === parsed.id);
     if (index < 0) throw new Error(`\u672A\u77E5\u6388\u6743\u9879\u76EE\uFF1A${parsed.id}`);
     const directory = expandHome(parsed.directory);
@@ -13556,21 +13733,8 @@ var ProjectRegistry = class {
       }
     }
     const current = this.config.projects[index];
-    const oldDirectory = await realpath6(current.directory).catch(() => current.directory);
-    const directoryChanged = oldDirectory !== canonical;
-    const raw = await this.readCurrent();
-    await atomicJson(this.configPath, {
-      ...raw,
-      projects: raw.projects.map((project) => rawProjectId(project) === parsed.id ? { ...project, name: parsed.name, directory: canonical } : project)
-    });
-    if (directoryChanged) {
-      await Promise.all([
-        this.bestEffort(() => this.adapter.removeProject?.(parsed.id)),
-        this.bestEffort(() => this.runtime.removeProject?.(parsed.id))
-      ]);
-    }
-    this.config.projects[index] = { ...current, name: parsed.name, directory: canonical };
-    if (directoryChanged) await this.bestEffort(() => this.runtime.addProject?.(parsed.id));
+    await this.persist(raw, raw.projects.map((project) => rawProjectId(project) === parsed.id ? { ...project, name: parsed.name, directory: canonical } : project));
+    await this.applyProjects(this.config.projects.map((project) => project.id === parsed.id ? { ...current, name: parsed.name, directory: canonical } : project));
     return publicProjects(this.config);
   }
   async removeUnlocked(payload) {
@@ -13579,22 +13743,18 @@ var ProjectRegistry = class {
       throw new Error("\u5220\u9664\u9879\u76EE\u9700\u8981\u5408\u6CD5\u7684\u9879\u76EE ID");
     }
     const id = payload.id;
+    const raw = await this.readCurrent();
     if (this.config.projects.length === 1) throw new Error("\u81F3\u5C11\u9700\u8981\u4FDD\u7559\u4E00\u4E2A\u6388\u6743\u9879\u76EE");
     const index = this.config.projects.findIndex((project) => project.id === id);
     if (index < 0) throw new Error(`\u672A\u77E5\u6388\u6743\u9879\u76EE\uFF1A${id}`);
-    const raw = await this.readCurrent();
-    await atomicJson(this.configPath, { ...raw, projects: raw.projects.filter((project) => rawProjectId(project) !== id) });
-    await Promise.all([
-      this.bestEffort(() => this.adapter.removeProject?.(id)),
-      this.bestEffort(() => this.runtime.removeProject?.(id))
-    ]);
-    this.config.projects.splice(index, 1);
+    await this.persist(raw, raw.projects.filter((project) => rawProjectId(project) !== id));
+    await this.applyProjects(this.config.projects.filter((project) => project.id !== id));
     return publicProjects(this.config);
   }
 };
 
 // src/terminal.ts
-import { randomUUID as randomUUID16 } from "node:crypto";
+import { randomUUID as randomUUID17 } from "node:crypto";
 import { access as access2, stat as stat9 } from "node:fs/promises";
 import { constants as constants5 } from "node:fs";
 import { platform as platform3, userInfo as userInfo3 } from "node:os";
@@ -13680,7 +13840,7 @@ var TerminalManager = class {
         throw new Error(`\u7EC8\u7AEF Shell \u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u6267\u884C\uFF1A${shell}\uFF1B\u8BF7\u4FEE\u6B63 Proxy \u670D\u52A1\u7684 SHELL \u73AF\u5883\u53D8\u91CF`);
       }
       const { helper } = await ensureTerminalSupport();
-      const id = randomUUID16();
+      const id = randomUUID17();
       const path = [
         process.env.PATH,
         "/usr/bin",
@@ -13745,6 +13905,13 @@ var TerminalManager = class {
       terminal.process.kill();
     }
   }
+  closeProject(project) {
+    for (const terminal of this.terminals.values()) if (terminal.project === project) {
+      this.terminals.delete(terminal.id);
+      terminal.process.kill();
+      this.emit(terminal.owner, project, "terminal.closed", { id: terminal.id });
+    }
+  }
   close() {
     for (const owner of new Set([...this.terminals.values()].map((t) => t.owner))) this.closeOwned(owner);
   }
@@ -13779,7 +13946,7 @@ var PlatformDesktopSession = class {
 
 // src/remote-manager.ts
 import { fork } from "node:child_process";
-import { randomBytes as randomBytes2, randomUUID as randomUUID17 } from "node:crypto";
+import { randomBytes as randomBytes2, randomUUID as randomUUID18 } from "node:crypto";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 
 // src/remote-stun.ts
@@ -13913,7 +14080,7 @@ var RemoteManager = class {
     if (this.current) throw new Error("\u4E3B\u673A\u6B63\u5728\u88AB\u63A7\u5236");
     const quality = RemoteQualitySchema.parse(payload.quality ?? "hd");
     const budget = remoteSessionBudget(this.config, quality, payload.quality === void 0);
-    const session = { remoteId: randomUUID17(), owner, closed: false, signaling: Promise.resolve(), signals: 0, signalWindow: Date.now(), candidates: 0 };
+    const session = { remoteId: randomUUID18(), owner, closed: false, signaling: Promise.resolve(), signals: 0, signalWindow: Date.now(), candidates: 0 };
     this.current = session;
     try {
       const [permissions, stunUrls] = await Promise.all([
@@ -13992,10 +14159,10 @@ var RemoteManager = class {
 };
 
 // src/tool-selection.ts
-import { randomBytes as randomBytes3, randomUUID as randomUUID18 } from "node:crypto";
+import { randomBytes as randomBytes3, randomUUID as randomUUID19 } from "node:crypto";
 import { access as access3, constants as constants6, readFile as readFile10 } from "node:fs/promises";
 import { platform as platform5 } from "node:os";
-import { isDeepStrictEqual } from "node:util";
+import { isDeepStrictEqual as isDeepStrictEqual2 } from "node:util";
 
 // src/node-resolution.ts
 import { realpath as realpath7, stat as stat10 } from "node:fs/promises";
@@ -14136,7 +14303,7 @@ var ToolSelection = class {
     });
   }
   modelCommand(projectId) {
-    return { type: "command", id: randomUUID18(), botId: this.config.botId, operation: "configuration.models", projectId, payload: {} };
+    return { type: "command", id: randomUUID19(), botId: this.config.botId, operation: "configuration.models", projectId, payload: {} };
   }
   profiles(raw) {
     return raw.toolProfiles && typeof raw.toolProfiles === "object" && !Array.isArray(raw.toolProfiles) ? raw.toolProfiles : {};
@@ -14175,7 +14342,7 @@ var ToolSelection = class {
   }
   async readCurrent() {
     const disk = await loadConfig(this.configPath);
-    if (!isDeepStrictEqual(JSON.parse(JSON.stringify(disk.tool)), JSON.parse(JSON.stringify(this.config.tool))) || !isDeepStrictEqual(disk.projects, this.config.projects) || disk.botId !== this.config.botId || disk.secretKey !== this.config.secretKey) {
+    if (!isDeepStrictEqual2(JSON.parse(JSON.stringify(disk.tool)), JSON.parse(JSON.stringify(this.config.tool))) || !isDeepStrictEqual2(disk.projects, this.config.projects) || disk.botId !== this.config.botId || disk.secretKey !== this.config.secretKey) {
       throw new Error("Proxy \u914D\u7F6E\u5DF2\u5728\u4E3B\u673A\u4E0A\u88AB\u4FEE\u6539\uFF1B\u8BF7\u91CD\u542F Proxy \u540E\u518D\u5207\u6362\u667A\u80FD\u4F53");
     }
     return JSON.parse(await readFile10(this.configPath, "utf8"));
@@ -14219,7 +14386,12 @@ async function runDaemon(configPath, authenticate = verifyHostPassword) {
     return { runtime, adapter };
   });
   const artifacts = new Artifacts(workspace, join15(config.stateDirectory, "artifacts"), emit);
+  const projectRegistry = () => new ProjectRegistry(configPath, config, tools.current.runtime, tools.current.adapter, (resetProjects) => {
+    for (const id of resetProjects) terminals.closeProject(id);
+  });
+  const reloadProjects = () => tools.exclusive(() => projectRegistry().reload());
   async function dispatch(c, secureSessionId) {
+    if (["runtime.snapshot", "workspace.projects", "runtime.models", "runtime.switchTool"].includes(c.operation)) await reloadProjects();
     if (c.operation.startsWith("desktop.remote.")) return remote.dispatch(c, secureSessionId);
     if (c.operation.startsWith("desktop.")) return desktop.dispatch(c, secureSessionId);
     if (c.operation.startsWith("terminal.")) return terminals.dispatch(c, secureSessionId);
@@ -14239,17 +14411,17 @@ async function runDaemon(configPath, authenticate = verifyHostPassword) {
     if (c.operation === "runtime.restart") return runtime.restart();
     if (c.operation === "workspace.projects") return publicProjects(config);
     if (c.operation === "workspace.projects.add") {
-      const result2 = await tools.exclusive(() => new ProjectRegistry(configPath, config, tools.current.runtime, tools.current.adapter).add(p));
+      const result2 = await tools.exclusive(() => projectRegistry().add(p));
       emit(String(p.id), "octopus.resync", {});
       return result2;
     }
     if (c.operation === "workspace.projects.update") {
-      const result2 = await tools.exclusive(() => new ProjectRegistry(configPath, config, tools.current.runtime, tools.current.adapter).update(p));
+      const result2 = await tools.exclusive(() => projectRegistry().update(p));
       emit(String(p.id), "octopus.resync", {});
       return result2;
     }
     if (c.operation === "workspace.projects.remove") {
-      const result2 = await tools.exclusive(() => new ProjectRegistry(configPath, config, tools.current.runtime, tools.current.adapter).remove(p));
+      const result2 = await tools.exclusive(() => projectRegistry().remove(p));
       emit(String(p.id), "octopus.resync", {});
       return result2;
     }

package/dist/cli.js

@@ -35,7 +35,7 @@ import {
   supportedPlatform,
   systemdUnitPath,
   toolSearchDirs
-} from "./chunk-R73E3EFB.js";
+} from "./chunk-6RJKEA3I.js";
 import {
   DESKTOP_PERMISSION_GUIDANCE,
   PlatformDesktop,
@@ -48,7 +48,7 @@ import { spawn as spawn2 } from "node:child_process";
 import { access as access4 } from "node:fs/promises";
 
 // src/doctor.ts
-import { access as access2, chmod, constants, mkdir as mkdir3, stat } from "node:fs/promises";
+import { access as access2, chmod, constants, mkdir as mkdir3, stat as stat2 } from "node:fs/promises";
 import { isAbsolute as isAbsolute3, join } from "node:path";
 import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
@@ -130,8 +130,9 @@ async function launchdStatus() {
 }
 
 // src/systemd.ts
-import { mkdir as mkdir2, rm as rm2, writeFile as writeFile2 } from "node:fs/promises";
+import { mkdir as mkdir2, rm as rm2, stat, writeFile as writeFile2 } from "node:fs/promises";
 import { dirname as dirname2 } from "node:path";
+import { userInfo as userInfo2 } from "node:os";
 import { execFile as execFile2 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
 var run2 = promisify2(execFile2);
@@ -170,8 +171,15 @@ async function writeUnitFile(text) {
   return path;
 }
 async function systemctl(args) {
+  const env = { ...process.env };
+  if (!env.XDG_RUNTIME_DIR && !env.DBUS_SESSION_BUS_ADDRESS) {
+    const uid = userInfo2().uid;
+    const runtimeDirectory = `/run/user/${uid}`;
+    const info = await stat(runtimeDirectory).catch(() => void 0);
+    if (info?.isDirectory() && info.uid === uid) env.XDG_RUNTIME_DIR = runtimeDirectory;
+  }
   try {
-    const { stdout: stdout3 } = await run2("systemctl", ["--user", ...args]);
+    const { stdout: stdout3 } = await run2("systemctl", ["--user", ...args], { env });
     return stdout3;
   } catch (error) {
     const stderr = error instanceof Error ? error.stderr ?? error.message : String(error);
@@ -214,9 +222,9 @@ async function systemdUninstall() {
   await systemdReload();
 }
 async function systemdStatus() {
-  const active = await ignoreFailure(() => systemctl(["is-active", SYSTEMD_UNIT]));
-  const enabled = await ignoreFailure(() => systemctl(["is-enabled", SYSTEMD_UNIT]));
-  return { active: active?.trim() === "active", enabled: enabled?.trim() === "enabled" };
+  const output = await systemctl(["show", SYSTEMD_UNIT, "--property=ActiveState", "--property=UnitFileState"]);
+  const properties = Object.fromEntries(output.trim().split("\n").map((line) => line.split("=")));
+  return { active: properties.ActiveState === "active", enabled: properties.UnitFileState === "enabled" };
 }
 
 // src/service.ts
@@ -339,7 +347,7 @@ async function runDoctor(opts) {
   results.push(await checkTerminalSupport(opts.fix));
   let config;
   try {
-    const info = await stat(opts.configPath).catch((error) => {
+    const info = await stat2(opts.configPath).catch((error) => {
       if (error.code === "ENOENT") throw new Error(`\u914D\u7F6E\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${opts.configPath}\uFF1B\u5148\u8FD0\u884C octopus-proxy onboard`);
       throw error;
     });
@@ -457,7 +465,7 @@ async function runDoctor(opts) {
 import { createInterface } from "node:readline/promises";
 import { randomBytes } from "node:crypto";
 import { stdin, stdout } from "node:process";
-import { access as access3, constants as constants2, mkdir as mkdir4, stat as stat2 } from "node:fs/promises";
+import { access as access3, constants as constants2, mkdir as mkdir4, stat as stat3 } from "node:fs/promises";
 import { execFile as execFile4 } from "node:child_process";
 import { platform } from "node:os";
 import { isAbsolute as isAbsolute4, join as join2 } from "node:path";
@@ -501,7 +509,7 @@ async function validateToolCommand(value, kind) {
   const command2 = expandHome(value);
   if (!isAbsolute4(command2)) return "\u670D\u52A1\u73AF\u5883\u9700\u8981\u7EDD\u5BF9\u8DEF\u5F84";
   try {
-    if (!(await stat2(command2)).isFile()) return "\u547D\u4EE4\u8DEF\u5F84\u5FC5\u987B\u6307\u5411\u53EF\u6267\u884C\u6587\u4EF6";
+    if (!(await stat3(command2)).isFile()) return "\u547D\u4EE4\u8DEF\u5F84\u5FC5\u987B\u6307\u5411\u53EF\u6267\u884C\u6587\u4EF6";
     await access3(command2, constants2.X_OK);
   } catch {
     return `\u547D\u4EE4\u4E0D\u5B58\u5728\u6216\u4E0D\u53EF\u6267\u884C\uFF1A${command2}`;
@@ -514,7 +522,7 @@ async function validateToolCommand(value, kind) {
   return void 0;
 }
 async function runOnboard(opts) {
-  const configExists = await stat2(opts.configPath).then(() => true, (error) => {
+  const configExists = await stat3(opts.configPath).then(() => true, (error) => {
     if (error.code === "ENOENT") return false;
     throw error;
   });
@@ -564,7 +572,7 @@ async function runOnboard(opts) {
           console.log("  \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
           continue;
         }
-        if (!await stat2(project.directory).then(() => true, () => false)) {
+        if (!await stat3(project.directory).then(() => true, () => false)) {
           console.log("  \u76EE\u5F55\u4E0D\u5B58\u5728");
           continue;
         }
@@ -593,7 +601,7 @@ async function runOnboard(opts) {
           console.log("  \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
           continue;
         }
-        if (!await stat2(directory).then(() => true, () => false)) {
+        if (!await stat3(directory).then(() => true, () => false)) {
           console.log("  \u76EE\u5F55\u4E0D\u5B58\u5728");
           continue;
         }

package/dist/main.js

@@ -2,7 +2,7 @@
 import {
   ConfigError,
   runDaemon
-} from "./chunk-R73E3EFB.js";
+} from "./chunk-6RJKEA3I.js";
 import "./chunk-GS3Q6EU5.js";
 
 // src/main.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skylandnpm/octopus-proxy",
-  "version": "0.1.63",
+  "version": "0.1.65",
   "type": "module",
   "description": "Octopus host proxy: OpenCode, Codex, ZCode and Pi adapters with service installer CLI",
   "bin": {