@walkhi/code-relax 0.1.0-beta.59 → 0.1.0-beta.65

package/README.md

@@ -18,9 +18,9 @@ npm i -g @walkhi/code-relax@latest --allow-scripts=@walkhi/code-relax --foregrou
 
 ## Linux 源码测试
 
-公开 beta.30 尚不含 Linux，不能用上面的 registry 命令取得本轮修改。Linux 源码测试需要官方 ChatGPT 桌面版、Node >=22.12、`secret-tool` 和已解锁的 Secret Service；Ubuntu/Debian 的工具包为 `libsecret-tools`。以普通用户在图形桌面会话中安装，不使用 sudo 运行 npm/relax。
+公开 beta.30 尚不含 Linux，不能用上面的 registry 命令取得本轮修改。Linux 源码测试需要官方 ChatGPT 桌面版、Node >=22.12；工作站身份使用当前用户状态目录的普通 JSON，不再依赖 Secret Service。以普通用户在图形桌面会话中安装，不使用 sudo 运行 npm/relax。
 
-数据与服务位于 XDG Data 下的 `CodexRemote`，状态位于 XDG State 下；登录启动使用 `~/.config/autostart/cn.walkhi.code-relax.desktop`（遵循 XDG_CONFIG_HOME）。只为启动的 Desktop 实例设置托管地址；普通应用菜单启动不会自动继承，需使用 `relax desktop-recover --confirm` 接入。目录、自定义 CODEX_HOME、运行时更新与验收边界见 [Linux 实现](../docs/workstation-platforms.md#linux-工作站2026-10-15)。Mac 的钥匙串/LaunchAgent 说明也在该文档。
+数据与服务位于 XDG Data 下的 `CodexRemote`，状态位于 XDG State 下；登录启动使用 `~/.config/autostart/cn.walkhi.code-relax.desktop`（遵循 XDG_CONFIG_HOME）。只为启动的 Desktop 实例设置托管地址；普通应用菜单启动不会自动继承，需使用 `relax desktop-recover --confirm` 接入。目录、自定义 CODEX_HOME、运行时更新与验收边界见 [Linux 实现](../docs/workstation-platforms.md#linux-工作站2026-10-15)。Mac 的普通配置/LaunchAgent 说明也在该文档；旧安装身份转存与失败不停服规则见[配置存储](../docs/relay-config-storage.md)。
 
 ## Codex 内核
 

package/dist/bin/codex-remote.mjs

@@ -10,6 +10,7 @@ import { doctor, formatDoctorOutput } from '../src/service-doctor.mjs';
 import { launchDesktop } from '../src/desktop-launcher.mjs';
 import { desktopHost, removeDesktopShortcut, residentStartup, resolveStateRoot } from '../src/platform/desktop-host.mjs';
 import { selfRelay } from '../src/self-relay/lifecycle.mjs';
+import { importRelayConfig } from '../src/relay-config-import.mjs';
 import { fileURLToPath } from 'node:url';
 import path from 'node:path';
 import { executableKey } from '../src/platform/path-identity.mjs';
@@ -265,6 +266,7 @@ async function main() {
     }
     const hadInstalledService = fs.existsSync(path.join(serviceRoot, 'installation.json'));
     const previousInstallation = readRecord(path.join(serviceRoot, 'installation.json'));
+    await importRelayConfig(serviceRoot, physicalStateRoot, previousInstallation?.nodeExecutable);
     if (previousInstallation?.nodeExecutable) await removeDesktopShortcut({ serviceRoot, nodeExecutable: previousInstallation.nodeExecutable });
     const desktopBeforeSetup = desktopHost.desktopIntegration === false ? { running: false, desktop: null } : await desktopHost.inspect();
     const runtime = await resolveCodexRuntime(physicalStateRoot, { refresh: true });
@@ -281,10 +283,20 @@ async function main() {
       let errors = '';
       child.stderr.on('data', chunk => { errors += chunk; });
       const code = await new Promise((resolve, reject) => { child.once('error', reject); child.once('exit', resolve); });
-      if (code) {
+      try {
+        if (code !== 0) throw new Error(errors.trim().replace(/^(?:Code Relax：)+/u, '') || '桌面服务启动失败');
+        if (previousRelay.deviceId) {
+          const restoredRelay = await selfRelay('relay-status', stateRoot);
+          if (restoredRelay.deviceId !== previousRelay.deviceId ||
+              (previousRelay.relayConnected && !restoredRelay.relayConnected) ||
+              (previousRelay.paired && !restoredRelay.paired)) {
+            throw new Error('更新后未确认原工作站身份和中继授权恢复，安装未完成。');
+          }
+        }
+      } catch (error) {
         try { await selfRelay('relay-stop', stateRoot); } catch {}
         try { await service.stop(); } catch {}
-        throw new Error(errors.trim().replace(/^(?:Code Relax：)+/u, '') || '桌面服务启动失败');
+        throw error;
       }
     };
     let stoppedForUpdate = false;

package/dist/build-platform.json

@@ -1 +1 @@
-{"layout":"npm-platform-packages","version":"0.1.0-beta.59"}
+{"layout":"npm-platform-packages","version":"0.1.0-beta.65"}

package/dist/shared/app-server-events.cjs

@@ -250,10 +250,43 @@
   }
   const permissionPresets = {
     ask: { permissions: ':workspace', approvalPolicy: 'on-request', approvalsReviewer: 'user' },
-    auto: { permissions: ':workspace', approvalPolicy: 'on-request', approvalsReviewer: 'guardian_subagent' },
+    auto: { permissions: ':workspace', approvalPolicy: 'on-request', approvalsReviewer: 'auto_review' },
     full: { permissions: ':danger-full-access', approvalPolicy: 'never', approvalsReviewer: 'user' },
   };
-  function isAutoReviewer(value) { return value === 'auto_review' || value === 'guardian_subagent'; }
+  function isAutoReviewer(value) { return value === 'auto_review'; }
+  const globalPermissionKey = 'code-relax-approval-mode';
+  async function readGlobalPermissions(request, context = {}, optionsCache = new PermissionOptionsCache(), threadId = '') {
+    const { config } = await request('config/read', { includeLayers: false });
+    const preferred = config.desktop?.[globalPermissionKey] ?? context.desktopPermissionMode;
+    await optionsCache.read(request, threadId, context);
+    const configured = permissionState({ approvalPolicy: config.approval_policy,
+      approvalsReviewer: config.approvals_reviewer ?? 'user',
+      activePermissionProfile: config.default_permissions ? { id: config.default_permissions } : null,
+      sandboxPolicy: config.sandbox_mode === 'danger-full-access' ? { type: 'dangerFullAccess' }
+        : config.sandbox_mode === 'workspace-write' ? { type: 'workspaceWrite', networkAccess: config.sandbox_workspace_write?.network_access === true } : null });
+    return { ...optionsCache.context(threadId, context),
+      permissionMode: Object.hasOwn(permissionPresets, preferred) ? preferred : context.permissionMode ?? configured.permissionMode,
+      globalPermissionMode: Object.hasOwn(permissionPresets, preferred) ? preferred : null };
+  }
+  async function writeGlobalPermissions(request, mode, context = {}, optionsCache, threadId = '') {
+    if (!Object.hasOwn(permissionPresets, mode)) throw new Error('不支持的审批方式');
+    const current = await readGlobalPermissions(request, context, optionsCache, threadId);
+    if (!current.permissionModes.includes(mode)) throw new Error('此主机或项目配置不支持该审批方式');
+    const result = await request('config/batchWrite', { edits: [{ keyPath: `desktop.${globalPermissionKey}`,
+      value: mode, mergeStrategy: 'upsert' }], filePath: null, expectedVersion: null });
+    if (result.status !== 'ok') throw new Error('全局审批方式被其他配置覆盖，请核对配置');
+    const confirmed = await readGlobalPermissions(request, context, optionsCache, threadId);
+    if (confirmed.globalPermissionMode !== mode) throw new Error('全局审批方式未确认，请以当前显示为准');
+    return confirmed;
+  }
+  async function globalPermissionOverrides(request, context = {}, threadId = '') {
+    const { config } = await request('config/read', { includeLayers: false });
+    const mode = config.desktop?.[globalPermissionKey] ?? context.desktopPermissionMode;
+    if (!Object.hasOwn(permissionPresets, mode)) return {};
+    const options = await readPermissionOptions(request, threadId, context.cwd);
+    if (!availablePermissionModes(options, context).includes(mode)) throw new Error('全局审批方式不符合当前项目或模型的权限限制，请先调整审批方式');
+    return { ...permissionPresets[mode] };
+  }
   function permissionState(settings) {
     const sandboxPolicy = settings.sandboxPolicy ?? settings.sandbox;
     const { approvalPolicy, approvalsReviewer, activePermissionProfile } = settings;
@@ -281,7 +314,7 @@
     };
     const [profiles, features, requirements] = await Promise.all([
       list('permissionProfile/list', cwd ? { cwd } : {}),
-      list('experimentalFeature/list', { threadId }),
+      list('experimentalFeature/list', threadId ? { threadId } : {}),
       request('configRequirements/read', {}),
     ]);
     return { profiles, guardianEnabled: features.some(feature => feature.name === 'guardian_approval' && feature.enabled), requirements: requirements.requirements };
@@ -298,7 +331,7 @@
       if (requirements?.allowedSandboxModes && !requirements.allowedSandboxModes.includes(mode === 'full' ? 'danger-full-access' : 'workspace-write')) return false;
       if (requirements?.allowedPermissionProfiles && requirements.allowedPermissionProfiles[preset.permissions] !== true) return false;
       const reviewers = requirements?.allowedApprovalsReviewers;
-      return !reviewers || reviewers.includes(preset.approvalsReviewer) || (mode === 'auto' && reviewers.some(isAutoReviewer));
+      return !reviewers || reviewers.includes(preset.approvalsReviewer);
     }).map(([mode]) => mode);
   }
   class PermissionOptionsCache {
@@ -322,20 +355,59 @@
       await entry.promise;
     }
   }
+  class SettingsNotifications extends Map {
+    constructor() { super(); this.permissionWaiters = new Map(); }
+    set(threadId, settings) {
+      super.set(threadId, settings);
+      const waiter = this.permissionWaiters.get(threadId);
+      if (waiter && permissionState(settings).permissionMode === waiter.mode) waiter.finish(settings);
+      return this;
+    }
+    waitForPermission(threadId, mode, timeoutMs = 10_000) {
+      if (this.permissionWaiters.has(threadId)) throw new Error('该对话的权限变更正在等待内核确认');
+      let finish, settled = false;
+      const promise = new Promise(resolve => {
+        const timer = setTimeout(() => finish(new Error('权限变更结果尚未确认；请核对当前权限，不会自动重发。')), timeoutMs);
+        finish = result => {
+          if (settled) return;
+          settled = true;
+          clearTimeout(timer);
+          this.permissionWaiters.delete(threadId);
+          resolve(result);
+        };
+      });
+      this.permissionWaiters.set(threadId, { mode, finish });
+      return { promise, cancel: () => finish(null) };
+    }
+    clear() {
+      for (const waiter of this.permissionWaiters.values()) waiter.finish(new Error('连接已断开，权限变更结果尚未确认；不会自动重发。'));
+      super.clear();
+    }
+  }
   async function updatePermissions(request, contexts, notifications, optionsCache, threadId, mode) {
     if (!Object.hasOwn(permissionPresets, mode)) throw new Error('不支持的权限模式');
+    if (notifications.permissionWaiters.has(threadId)) throw new Error('该对话的权限变更正在等待内核确认');
     const context = contexts.get(threadId);
     if (!context) throw new Error('请先打开对话');
     await optionsCache.read(request, threadId, context);
+    if (!contexts.has(threadId)) throw new Error('连接已变化，请重新打开对话后设置权限');
     if (!optionsCache.context(threadId, contexts.get(threadId)).permissionModes.includes(mode)) throw new Error('此主机或项目配置不支持该权限模式');
-    const previous = notifications.get(threadId), preset = permissionPresets[mode];
-    await request('thread/settings/update', { threadId, ...preset });
-    if (notifications.get(threadId) === previous) {
-      contexts.set(threadId, { ...contexts.get(threadId), ...preset, activePermissionProfile: { id: preset.permissions, extends: null }, permissionMode: mode });
-    }
+    if (contexts.get(threadId).permissionMode === mode) return optionsCache.context(threadId, contexts.get(threadId));
+    const waiting = notifications.waitForPermission(threadId, mode);
+    try {
+      await request('thread/settings/update', { threadId, ...permissionPresets[mode] });
+      // An empty RPC response only acknowledges queuing. Never invent applied settings.
+      const result = await waiting.promise;
+      if (result instanceof Error) throw result;
+      if (!contexts.has(threadId)) throw new Error('连接已变化，权限变更结果尚未确认');
+    } finally { waiting.cancel(); }
     return optionsCache.context(threadId, contexts.get(threadId));
   }
   async function createThread(request, target, input, settings, additionalContext, onThreadCreated = () => {}) {
+    let permissions;
+    try { permissions = await globalPermissionOverrides(request, { cwd: target.cwd, model: settings.model, desktopPermissionMode: settings.desktopPermissionMode }); }
+    catch (error) { error.deliveryUnknown = false; throw error; }
+    target = { ...target, ...permissions };
     let response;
     try { response = await request('thread/start', target); }
     catch (error) {
@@ -349,6 +421,7 @@
       const result = started => ({ threadId:thread.id, turnId:started?.turn?.id || null });
       try {
         const started = await request('turn/start', { threadId:thread.id, input,
+          ...permissions,
           ...mobileTurnSource(settings.clientUserMessageId, settings.containsVoiceInput),
           ...(additionalContext ? { additionalContext: { ...additionalContext,
             ...mobileTurnSource(settings.clientUserMessageId, settings.containsVoiceInput).additionalContext } } : {}),
@@ -390,6 +463,11 @@
       createdAt: item.createdAt ?? '', error: '', native: true })) };
   }
   async function addQueue(request, threadId, input, clientUserMessageId, containsVoiceInput = false) {
+    try {
+      const { thread } = await request('thread/read', { threadId, includeTurns: false });
+      const permissions = await globalPermissionOverrides(request, thread, threadId);
+      if (Object.keys(permissions).length) await request('thread/settings/update', { threadId, ...permissions });
+    } catch (error) { error.deliveryUnknown = false; throw error; }
     input = [...input, { type: 'text', text: containsVoiceInput === true ? voiceInputNotice : mobileInputNotice }];
     await request('thread/queue/add', { threadId, input, clientUserMessageId });
     return readQueue(request, threadId);
@@ -428,5 +506,6 @@
     };
   }
   return { isMobileInputNotice, parseCodexDelegation, toolDelegation, projectThreadTarget, createThread, readQueue, addQueue, changeQueue, compactItem, compactTurn, beginSnapshot, mergeItems, applyNotification, mergeUsage, UsageCache, readProjects, orderDesktopProjects, threadProjectId, catalogThreadProjectId, projectlessThreadTarget, updateSettings,
-    permissionState, availablePermissionModes, PermissionOptionsCache, updatePermissions, mobileTurnSource };
+    permissionState, availablePermissionModes, PermissionOptionsCache, SettingsNotifications, updatePermissions,
+    readGlobalPermissions, writeGlobalPermissions, globalPermissionOverrides, mobileTurnSource };
 });

package/dist/src/dots-chat-server.mjs

@@ -165,8 +165,10 @@ export class DotsChatServer extends HostedHistoryAppServer {
       // The room remains observed while the phone is away. Its epoch/sequence
       // identifies the body; the expiring token only owns snapshot-to-stream handoff.
       const same = !force && (this.matchesUpdatedAt(record.thread, knownSync?.updatedAt)
+        && typeof knownSync?.chatRevision === 'string' && knownSync.chatRevision === record.thread.chatRevision
         || Boolean(retained && record === observed && knownSync?.epoch === this.epoch && Number.isSafeInteger(knownSync.seq)
-          && record.sequence === knownSync.seq));
+          && record.sequence === knownSync.seq
+          && (knownSync.chatRevision == null || knownSync.chatRevision === record.thread.chatRevision)));
       this.traceSync('window-ready', threadId, { connectMs: connectedAt - started,
         readMs: Date.now() - connectedAt, retained: Boolean(retained), notModified: same,
         sequence: record.sequence, knownSequence: knownSync?.seq ?? null, turns: record.thread.turns.length });
@@ -291,7 +293,11 @@ export class DotsChatServer extends HostedHistoryAppServer {
       do {
         const dirty = record.dirty; record.dirty = 0;
         const updates = new Set(record.updates); record.updates.clear();
-        if (dirty) {
+        // An update can be the first notification for a new message (or arrive
+        // after an add whose HTTP read did not include it yet). Establish its
+        // position through the room's after cursor before treating it as old.
+        const unknown = [...updates].some(id => !record.thread.turns.some(turn => turn.id === id));
+        if (dirty || unknown) {
           let after = record.thread.turns.filter(turn => turn.roomMessage).at(-1)?.id;
           do {
             const page = await this.rooms.messages(room.id, { after }); check();
@@ -307,7 +313,16 @@ export class DotsChatServer extends HostedHistoryAppServer {
           if (!message) throw new Error('点点消息更新尚未确认。');
           const turns = dotsRoomTurns(room, [message]);
           if (record.thread.turns.some(turn => turn.id === id)) this.publish(threadId, record, mergeTurns(record.thread.turns, turns));
-          else this.publishChanges(threadId, record, turns.map(turn => ({ ...turn, historyOnly: true })));
+          else {
+            const first = record.thread.turns.find(turn => turn.roomMessage);
+            // Only messages created before the retained window can safely be
+            // sent as edits of older history. A recent/ambiguous omission is a
+            // real gap: retain the body and let the existing recovery handle it.
+            if (!(Date.parse(message.created_at) < Date.parse(first?.createdAt))) {
+              throw new Error('点点新消息尚未完整接续，请重新同步。');
+            }
+            this.publishChanges(threadId, record, turns.map(turn => ({ ...turn, historyOnly: true })));
+          }
         }
       } while (record.dirty || record.updates.size);
       this.trimWindow(record);

package/dist/src/dots-room-activity.mjs

@@ -49,7 +49,8 @@ export class DotsRoomActivity extends EventEmitter {
   refresh(watch) {
     const activity = watch.typing ? { kind: 'replying', label: '正在回复…', spinning: true }
       : watch.liveActivity || (watch.handoffTimer ? { kind: 'replying', label: '正在回复…', spinning: true }
-        : watch.unavailable ? { kind: 'unavailable', label: '活动状态暂不可用', spinning: false } : null);
+        : watch.unavailable ? { kind: 'unavailable', label: '活动状态暂不可用', spinning: false }
+          : watch.idle ? { kind: 'idle', label: '空闲', spinning: false } : null);
     this.publish(watch, activity);
   }
   clearReply(watch) {
@@ -105,15 +106,20 @@ export class DotsRoomActivity extends EventEmitter {
     }
     if (value.type !== 'calpico-room-live-state' || !Array.isArray(value.threads)) return;
     const current = value.threads[0];
+    watch.idle = value.threads.length === 0;
     watch.attempts = 0; watch.unavailable = false; watch.liveActivity = null;
     if (current?.stream_state !== 'attached') { this.refresh(watch); return; }
     if (current.turn_status === 'failed') {
       this.clearReply(watch); watch.liveActivity = { kind: 'error', label: '回复出错', spinning: false };
       this.refresh(watch); return;
     }
-    if (current.turn_status !== 'in_progress') { this.refresh(watch); return; }
     const status = typeof current.activity_status?.status_type === 'string' ? current.activity_status.status_type.toLowerCase() : '';
+    if (current.turn_status !== 'in_progress') {
+      watch.idle = ['completed', 'interrupted'].includes(current.turn_status) || status === 'ready';
+      this.refresh(watch); return;
+    }
     const label = current.activity_status?.status_label;
+    watch.idle = status === 'ready';
     if (status !== 'ready') {
       const waiting = waitingStates.has(status);
       const fallback = Object.hasOwn(statusLabels, status) ? statusLabels[status] : null;
@@ -161,7 +167,7 @@ export class DotsRoomActivity extends EventEmitter {
   stop(watch, keepReply = false) {
     watch.generation++; clearTimeout(watch.timer); watch.timer = null;
     watch.controller?.abort(); watch.controller = null; watch.pending?.clear(); watch.liveActivity = null;
-    watch.subscriptionId = null; watch.revision = -1;
+    watch.subscriptionId = null; watch.revision = -1; watch.idle = false;
     if (!keepReply) { this.clearReply(watch); watch.unavailable = false; watch.roomId = null; }
     if (!keepReply) this.publish(watch, null);
     // The SSE cancellation ends the server watch. The shared topic remains

package/dist/src/dots-task-catalog.mjs

@@ -268,7 +268,7 @@ export class DotsAppServer extends HostedHistoryAppServer {
         turnArgs.input = [{ type: 'text', text: taskFilePrompt(text, references) }, ...turnArgs.input.filter(item => item.type !== 'text')];
       }
     } catch (error) { error.deliveryUnknown = false; throw error; }
-    return super.send(turnArgs, { assertCurrent });
+    return super.send(turnArgs, { assertCurrent, useGlobalPermissions: false });
   }
 
   async interrupt(threadId) {

package/dist/src/platform/README.md

@@ -1,12 +1,7 @@
-# 被控主机平台适配
-
-当前只实现 Windows Codex：
-
-- `windows/runtime-paths.mjs`：固定服务、用户状态、Codex 数据、附件和长期凭据路径。
-- `windows/service-host.mjs`：网卡、Bridge 进程环境和旧状态迁移。
-- `windows/desktop-host.mjs`、PowerShell 脚本：普通/共享 Desktop、快捷方式和隐藏控制台启动。
-- `windows/credential-store.mjs/.ps1`：私有中继电脑凭据的 DPAPI 与 ACL。
-
-Windows 专有脚本兼容系统自带 PowerShell 5.1。通用生命周期使用 Node 接口；系统检测和凭据保护不扩散到业务代码。
-
-macOS、Linux 目录仅保留规划说明，尚无路径、IPC、进程或安装实现。接入排在控制端扩展之后，并需分别验证 Codex Desktop/app-server 的可用连接方式；只有独立 app-server 时不能宣称接管 Desktop 当前任务。
+# 被控主机平台适配
+
+Windows/macOS/Linux 通过公共入口选择系统路径、进程、Desktop 和后台启动适配。通用生命周期使用 Node 接口，Windows 专有脚本兼容系统自带 PowerShell 5.1。
+
+`credential-store.mjs` 已统一为当前用户状态目录内的普通 JSON 身份配置，不再选择 DPAPI、Keychain 或 Secret Service 适配器。一次性旧身份转存只由安装前的 `relay-config-import.mjs` 执行，失败不停止旧服务。
+
+范围、平台验收及账号登录保护边界见[工作站跨平台](../../../docs/workstation-platforms.md)和[配置存储](../../../docs/relay-config-storage.md)。

package/dist/src/platform/credential-store.mjs

@@ -1,3 +1,19 @@
-import { platformModule } from './select.mjs';
-const adapter = await import(platformModule('credential-store'));
-export const { credentialStore } = adapter;
+import fs from 'node:fs';
+import path from 'node:path';
+import { runtimePaths } from './runtime-paths.mjs';
+import { readRecord, writeRecord } from '../service-lifecycle.mjs';
+import { assertPlainPath } from '../skill-install.mjs';
+
+// Workstation identity is ordinary per-user configuration, outside the service
+// installation. No platform vault or interactive permission is needed on load.
+export function credentialStore(action, record, root = runtimePaths().stateRoot) {
+  if (!['load', 'save'].includes(action)) throw new Error('无效的工作站配置操作。');
+  const file = path.join(root, 'self-relay-identity.json');
+  assertPlainPath(file);
+  if (action === 'save') {
+    if (!record || typeof record !== 'object' || Array.isArray(record)) throw new Error('无效的工作站身份配置。');
+    fs.mkdirSync(root, { recursive: true, mode: 0o700 });
+    writeRecord(file, record);
+  }
+  return { path: file, record: readRecord(file) };
+}

package/dist/src/platform/desktop-permission-mode.mjs

@@ -0,0 +1,17 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { runtimePaths } from './runtime-paths.mjs';
+
+// Desktop 26.1013.4894.0: LCo / agent-mode-by-host-id, local execution host.
+// Read the preference only; Desktop remains the owner of its state file.
+export async function desktopPermissionMode(codexDataRoot = runtimePaths().codexDataRoot) {
+  let state;
+  try {
+    state = JSON.parse(await fs.readFile(path.join(codexDataRoot, '.codex-global-state.json'), 'utf8'));
+  } catch (error) {
+    if (error.code === 'ENOENT') return null;
+    throw error;
+  }
+  const mode = state?.['electron-persisted-atom-state']?.['agent-mode-by-host-id']?.local;
+  return ({ auto: 'ask', 'guardian-approvals': 'auto', 'full-access': 'full' })[mode] ?? null;
+}

package/dist/src/relay-config-import.mjs

@@ -0,0 +1,45 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { credentialStore } from './platform/credential-store.mjs';
+import { readRecord } from './service-lifecycle.mjs';
+
+const exec = promisify(execFile);
+
+// One-time installation transfer. Execute the previously installed reader at
+// its original location before replacing it; the new runtime never uses a vault.
+export async function importRelayConfig(serviceRoot, stateRoot, nodeExecutable = process.execPath) {
+  const configuredId = readRecord(path.join(stateRoot, 'self-relay-config.json'))?.deviceId;
+  const validate = record => {
+    if (record?.version !== 2 || !record.devices || typeof record.devices !== 'object' || Array.isArray(record.devices)
+        || Object.entries(record.devices).some(([id, item]) => !/^[\w-]{16,128}$/.test(id) || item?.id !== id
+          || !/^[A-Za-z0-9_-]{43}$/.test(item.secret || '') || typeof item.registered !== 'boolean')
+        || (configuredId && configuredId !== 'new' && !record.devices[configuredId])) {
+      throw new Error('工作站身份配置不完整或与当前工作站不一致，未停止旧服务。');
+    }
+  };
+  const current = credentialStore('load', undefined, stateRoot).record;
+  if (current) { validate(current); return { status: 'already-configured' }; }
+  const legacy = path.join(serviceRoot, 'dist/src/platform', process.platform === 'win32' ? 'windows'
+    : process.platform === 'darwin' ? 'macos' : 'linux', 'credential-store.mjs');
+  if (!fs.existsSync(legacy)) {
+    if (configuredId && configuredId !== 'new') throw new Error('缺少当前工作站身份配置，未停止旧服务；请先完成原配对转存。');
+    return { status: 'not-needed' };
+  }
+  let record;
+  try {
+    const script = 'import { pathToFileURL } from "node:url"; const {credentialStore} = await import(pathToFileURL(process.argv[1])); '
+      + 'process.stdout.write(JSON.stringify((await credentialStore("load")).record));';
+    const { stdout } = await exec(nodeExecutable, ['--input-type=module', '-e', script, legacy],
+      { windowsHide: true, timeout: 65000, maxBuffer: 1024 * 1024 });
+    record = JSON.parse(stdout.replace(/^\uFEFF/, ''));
+    if (record === null && !configuredId) return { status: 'not-found' };
+    validate(record);
+  } catch {
+    // Never log execFile's error: it can contain stdout with the old identity.
+    throw new Error('原设备配对配置转存失败，未停止旧服务。无人值守更新已中止，未更换工作站身份；请先完成原配对转存。');
+  }
+  credentialStore('save', record, stateRoot);
+  return { status: 'imported' };
+}

package/dist/src/self-relay/lifecycle.mjs

@@ -50,12 +50,15 @@ async function createRelayRuntime(stateRoot) {
   const session = () => readRecord(path.join(stateRoot, 'bridge-session.json'));
   let health = await serviceHealth(session());
   if (health?.status !== 'ok') throw new Error('桌面服务尚未运行，请先执行 relax start --json。');
-  const stored = await credentialStore('load');
+  const stored = await credentialStore('load', undefined, stateRoot);
   const identities = stored.record || { version: 2, devices: {} };
   const validIdentity = (id, item) => /^[\w-]{16,128}$/.test(id) && item?.id === id &&
     validSecret(item.secret) && typeof item.registered === 'boolean';
   if (identities.version !== 2 || !identities.devices || typeof identities.devices !== 'object' || Array.isArray(identities.devices) ||
       Object.entries(identities.devices).some(([id, item]) => !validIdentity(id, item))) throw new Error('本机设备身份损坏，未自动覆盖');
+  if (!stored.record && config.deviceId && config.deviceId !== 'new') {
+    throw new Error('缺少已配对工作站的身份配置，请先完成原配对转存；未自动更换工作站身份。');
+  }
   if (!config.deviceId) {
     const known = Object.values(identities.devices);
     if (known.length > 1) throw new Error('存在多个工作站身份，请在 self-relay-config.json 中指定 deviceId。');
@@ -69,7 +72,7 @@ async function createRelayRuntime(stateRoot) {
     if (!createIdentity && Object.keys(identities.devices).length) throw new Error('找不到配置指定的工作站身份，未自动创建新身份。');
     identity = { id: config.deviceId, secret: randomBytes(32).toString('base64url'), registered: false };
     identities.devices[identity.id] = identity;
-    await credentialStore('save', identities);
+    await credentialStore('save', identities, stateRoot);
   }
   const persistedConfig = readRecord(configPath) || {};
   if (persistedConfig.deviceId !== identity.id) writeRecord(configPath, { ...persistedConfig, deviceId: identity.id });
@@ -172,7 +175,7 @@ async function createRelayRuntime(stateRoot) {
       if (!identity.registered) {
         const registeredIdentity = { ...identity, registered: true };
         identities.devices[identity.id] = registeredIdentity;
-        await credentialStore('save', identities); identity = registeredIdentity;
+        await credentialStore('save', identities, stateRoot); identity = registeredIdentity;
       }
       if (closing) return;
       current.assertConnected();

package/dist/src/server.mjs

@@ -451,6 +451,16 @@ async function handleRequest(request, response) {
       && await dotsServer.source(decodeURIComponent(taskPath[1])) === 'aeon';
     const execution = rootChat ? dotsChat : hostId === 'durable' ? dotsServer : sharedServer;
 
+    if (url.pathname === '/api/permissions' && ['GET', 'POST'].includes(request.method)) {
+      if (hostId !== 'local') throw new RequestError(405, '当前来源不提供工作站全局审批方式。');
+      const body = request.method === 'POST' ? await readJsonBody(request) : {};
+      if (request.method === 'POST' && typeof body.mode !== 'string') throw new RequestError(400, '缺少审批方式。');
+      sendJson(response, 200, await sharedServer.globalPermissions(body.mode, {
+        threadId: url.searchParams.get('threadId') || '', cwd: url.searchParams.get('cwd') || '',
+      }));
+      return;
+    }
+
     const dotsActivityMatch = /^\/api\/threads\/([^/]+)\/dots-activity-events$/.exec(url.pathname);
     if (request.method === 'GET' && dotsActivityMatch) {
       if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此活动面板。');
@@ -768,10 +778,12 @@ async function handleRequest(request, response) {
             target = appServerEvents.projectThreadTarget(nativeProject);
           }
           const { input } = appServerTurnArguments('', body);
+          const preference = await execution.globalPermissions(undefined, { cwd: target.cwd });
           messageSubmissionStarted = true;
           const createRpc = (method, params) => method === 'thread/start'
             ? execution.startThread(params) : rpc(method, params);
-          const created = await appServerEvents.createThread(createRpc, target, input, body, undefined, bindCreation);
+          const created = await appServerEvents.createThread(createRpc, target, input,
+            { ...body, desktopPermissionMode: preference.globalPermissionMode }, undefined, bindCreation);
           const prompt = input.filter(part => part.type === 'text').map(part => part.text).join('\n');
           void generateAndSetThreadTitle({
             request: rpc,
@@ -802,7 +814,7 @@ async function handleRequest(request, response) {
       const knownSeq = url.searchParams.get('knownSeq');
       const knownSync = { id: url.searchParams.get('knownSyncId'),
         epoch: url.searchParams.get('knownEpoch'), seq: knownSeq === null ? undefined : Number(knownSeq),
-        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
+        updatedAt: Number(url.searchParams.get('knownUpdatedAt')), chatRevision: url.searchParams.get('knownChatRevision') };
       const pageOptions = sharedHistoryPageOptions();
       pageOptions.reconcileObserved = url.searchParams.get('refresh') === '1';
       if (request.socketRequest) {
@@ -840,7 +852,7 @@ async function handleRequest(request, response) {
       const after = Number(url.searchParams.get('afterSeq'));
       const requestedSync = { id: url.searchParams.get('syncId'), epoch: url.searchParams.get('syncEpoch'),
         after: Number.isSafeInteger(after) && after >= 0 ? after : undefined,
-        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
+        updatedAt: Number(url.searchParams.get('knownUpdatedAt')), chatRevision: url.searchParams.get('knownChatRevision') };
       await streamSharedThread(response, threadId, execution,
         prepareSharedTimeline, requestedSync);
       return;
@@ -859,7 +871,7 @@ async function handleRequest(request, response) {
       const current = hostId === 'durable' ? { available: false } : readContextUsage(threadId);
       const native = await execution.readContext(threadId, url.searchParams.get('refreshSettings') === 'true');
       sendJson(response, 200, { ...current, ...(native.model ? { model: native.model, thinking: native.thinking, serviceTier: native.serviceTier,
-        permissionMode: native.permissionMode, permissionModes: native.permissionModes } : {}), ...(native.available ? native : {}) });
+        permissionMode: native.permissionMode, permissionModes: native.permissionModes, globalPermissionMode: native.globalPermissionMode } : {}), ...(native.available ? native : {}) });
       return;
     }
 

package/dist/src/shared-app-server.mjs

@@ -4,6 +4,7 @@ import { randomUUID } from 'node:crypto';
 import events from '../shared/app-server-events.cjs';
 import messageDelivery from '../shared/message-delivery.cjs';
 import serverRequests from '../shared/server-requests.cjs';
+import { desktopPermissionMode } from './platform/desktop-permission-mode.mjs';
 
 const syncTokenTtlMs = 30_000;
 const syncBufferMaxBytes = 8 * 1024 * 1024;
@@ -45,7 +46,7 @@ export class SharedAppServer extends EventEmitter {
     });
     this.threads = new Map();
     this.contexts = new Map();
-    this.settingsNotifications = new Map();
+    this.settingsNotifications = new events.SettingsNotifications();
     this.permissionOptions = new events.PermissionOptionsCache();
     this.subscriptions = new Map();
     this.usageCache = new events.UsageCache(value => this.emit('usage', value));
@@ -190,7 +191,7 @@ export class SharedAppServer extends EventEmitter {
     });
   }
 
-  async send(args, { assertCurrent = () => {} } = {}) {
+  async send(args, { assertCurrent = () => {}, useGlobalPermissions = true } = {}) {
     let submitted = false;
     try {
       await this.connect();
@@ -211,8 +212,11 @@ export class SharedAppServer extends EventEmitter {
         return await this.request('turn/steer', { threadId: args.threadId, expectedTurnId: active.id, input: args.input, ...source, ...(args.clientUserMessageId ? { clientUserMessageId: args.clientUserMessageId } : {}) },
           result => ({ result, usage: { kind: 'steer', turnId: active.id } }));
       }
+      const permissions = useGlobalPermissions ? await events.globalPermissionOverrides((method, params) => this.request(method, params),
+        { ...this.contexts.get(args.threadId), desktopPermissionMode: await desktopPermissionMode(), model: args.model || this.contexts.get(args.threadId)?.model }, args.threadId) : {};
+      assertCurrent();
       submitted = true;
-      return await this.request('turn/start', args,
+      return await this.request('turn/start', { ...args, ...permissions },
         result => ({ result, usage: { kind: 'start', turnId: result?.turn?.id || null } }));
     } catch (error) {
       if (!submitted || messageDelivery.rejectedBeforeSubmission(error)) error.deliveryUnknown = false;
@@ -484,7 +488,7 @@ export class SharedAppServer extends EventEmitter {
     let snapshot = false, catchup, confirmed = false;
     if (!record || !token || record.needsReload
       || ((record.historyTrimmed || record.metadataOnly) && requested.after < record.recoverAfter)) {
-      const fresh = await this.timeline(threadId, {}, { updatedAt: requested?.updatedAt });
+      const fresh = await this.timeline(threadId, {}, { updatedAt: requested?.updatedAt, chatRevision: requested?.chatRevision });
       record = this.threads.get(threadId); token = record.tokens.get(fresh.sync.id);
       requested = { id: fresh.sync.id, epoch: fresh.sync.epoch, after: fresh.sync.seq };
       snapshot = fresh.notModified !== true;
@@ -662,9 +666,18 @@ export class SharedAppServer extends EventEmitter {
   }
 
   async readContext(threadId) {
-    const context = this.contexts.get(threadId);
-    if (context) await this.permissionOptions.read((method, params) => this.request(method, params), threadId, context);
-    return this.context(threadId);
+    const context = { ...this.contexts.get(threadId), desktopPermissionMode: await desktopPermissionMode() };
+    const permissions = await events.readGlobalPermissions((method, params) => this.request(method, params), context || {}, this.permissionOptions, threadId);
+    return { ...this.context(threadId), ...permissions };
+  }
+
+  async globalPermissions(mode, { threadId = '', cwd = '' } = {}) {
+    await this.connect();
+    if (threadId && !this.contexts.has(threadId)) throw new Error('对话设置尚未加载');
+    const context = { ...(threadId ? this.contexts.get(threadId) : { cwd }), desktopPermissionMode: await desktopPermissionMode() };
+    const request = (method, params) => this.request(method, params);
+    return mode === undefined ? events.readGlobalPermissions(request, context, this.permissionOptions, threadId)
+      : events.writeGlobalPermissions(request, mode, context, this.permissionOptions, threadId);
   }
 
   context(threadId) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@walkhi/code-relax",
-  "version": "0.1.0-beta.59",
+  "version": "0.1.0-beta.65",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",
@@ -41,8 +41,8 @@
     "tag": "beta"
   },
   "optionalDependencies": {
-    "@walkhi/code-relax-native-win32-x64": "0.1.0-beta.59",
-    "@walkhi/code-relax-native-darwin-arm64": "0.1.0-beta.59",
-    "@walkhi/code-relax-native-darwin-x64": "0.1.0-beta.59"
+    "@walkhi/code-relax-native-win32-x64": "0.1.0-beta.65",
+    "@walkhi/code-relax-native-darwin-arm64": "0.1.0-beta.65",
+    "@walkhi/code-relax-native-darwin-x64": "0.1.0-beta.65"
   }
 }

package/dist/src/platform/linux/credential-store.mjs

@@ -1,28 +0,0 @@
-import path from 'node:path';
-import { createHash } from 'node:crypto';
-import { execFile } from 'node:child_process';
-import { runtimePaths } from '../runtime-paths.mjs';
-
-export async function credentialStore(action, record, root = runtimePaths().credentialsRoot) {
-  if (!['load', 'save'].includes(action)) throw new Error('无效的凭据操作。');
-  if (action === 'save' && (!record || typeof record !== 'object' || Array.isArray(record))) throw new Error('无效的凭据记录。');
-  const account = createHash('sha256').update(path.resolve(root)).digest('hex');
-  const args = action === 'load' ? ['lookup'] : ['store', '--label=Code Relax'];
-  args.push('service', 'cn.walkhi.code-relax', 'account', account);
-  return new Promise((resolve, reject) => {
-    const child = execFile('secret-tool', args, { encoding: 'utf8', timeout: 60000, maxBuffer: 1024 * 1024 }, (error, stdout, stderr) => {
-      if (error) {
-        if (action === 'load' && error.code === 1 && !stderr.trim()) return resolve({ record: null });
-        return reject(new Error(error.code === 'ENOENT' ? '请安装 libsecret 的 secret-tool，并在已解锁钥匙环的 Linux 桌面会话中运行。'
-          : `Linux Secret Service 操作失败：${stderr.trim() || error.code}`));
-      }
-      try {
-        const value = action === 'load' ? JSON.parse(stdout) : record;
-        if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error('Linux 钥匙环中的凭据记录无效。');
-        resolve({ record: value });
-      } catch (error) { reject(error); }
-    });
-    child.stdin.on('error', error => { if (error.code !== 'EPIPE') reject(error); });
-    child.stdin.end(action === 'save' ? JSON.stringify(record) : undefined);
-  });
-}

package/dist/src/platform/macos/credential-store.mjs

@@ -1,10 +0,0 @@
-import path from 'node:path';
-import { createHash } from 'node:crypto';
-import { runtimePaths } from '../runtime-paths.mjs';
-import { systemRequest } from './system.mjs';
-
-export function credentialStore(action, record, root = runtimePaths().credentialsRoot) {
-  if (!['load', 'save'].includes(action)) throw new Error('无效的钥匙串操作。');
-  const account = createHash('sha256').update(path.resolve(root)).digest('hex');
-  return systemRequest({ operation: 'credentials', action, account, record });
-}

package/dist/src/platform/windows/credential-store.mjs

@@ -1,27 +0,0 @@
-import { spawn } from 'node:child_process';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { runtimePaths } from './runtime-paths.mjs';
-
-// Secrets travel over stdin/stdout only; never PowerShell arguments or errors.
-export function credentialStore(action, record, root = runtimePaths().credentialsRoot) {
-  if (process.platform !== 'win32') throw new Error('Credential platform adapter unavailable');
-  return new Promise((resolve, reject) => {
-    const child = spawn(path.join(process.env.SystemRoot, 'System32/WindowsPowerShell/v1.0/powershell.exe'),
-      ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File',
-        fileURLToPath(new URL('./credential-store.ps1', import.meta.url))],
-      { windowsHide: true, stdio: ['pipe', 'pipe', 'pipe'] });
-    let output = '', diagnostic = '';
-    const timer = setTimeout(() => child.kill(), 15000);
-    child.stdout.setEncoding('utf8'); child.stdout.on('data', data => { output += data; });
-    child.stderr.setEncoding('utf8'); child.stderr.on('data', data => { diagnostic += data; }); child.stdin.on('error', () => {});
-    child.once('error', () => { clearTimeout(timer); reject(new Error('无法启动 Windows 凭据保护组件')); });
-    child.once('close', code => {
-      clearTimeout(timer);
-      if (code !== 0) return reject(new Error('Windows 凭据保护失败，未使用明文替代；请检查目录权限或 Windows 用户是否一致；' + diagnostic.trim()));
-      try { resolve(JSON.parse(output.replace(/^\uFEFF/, ''))); }
-      catch { reject(new Error('Windows 凭据保护返回无效结果')); }
-    });
-    child.stdin.end(JSON.stringify({ action, root, record }));
-  });
-}

package/dist/src/platform/windows/credential-store.ps1

@@ -1,49 +0,0 @@
-$ErrorActionPreference = 'Stop'
-[Console]::InputEncoding = New-Object System.Text.UTF8Encoding($false)
-[Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-try {
-  Add-Type -AssemblyName System.Security
-  $request = [Console]::In.ReadToEnd() | ConvertFrom-Json
-  $sid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
-  $directory = Join-Path ([System.IO.Path]::GetFullPath($request.root)) $sid.Value
-  if (!(Test-Path -LiteralPath $directory)) { New-Item -ItemType Directory -Path $directory -Force | Out-Null }
-  if ((Get-Item -LiteralPath $directory).Attributes -band [System.IO.FileAttributes]::ReparsePoint) { throw 'Invalid credential directory' }
-  $acl = New-Object System.Security.AccessControl.DirectorySecurity
-  $acl.SetAccessRuleProtection($true, $false)
-  foreach ($principal in @($sid.Value, 'S-1-5-18', 'S-1-5-32-544')) {
-    $identity = New-Object System.Security.Principal.SecurityIdentifier($principal)
-    $rule = New-Object System.Security.AccessControl.FileSystemAccessRule($identity, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
-    $acl.AddAccessRule($rule)
-  }
-  [System.IO.Directory]::SetAccessControl($directory, $acl)
-  $file = Join-Path $directory 'self-relay.json'
-  if (Test-Path -LiteralPath $file) {
-    if ((Get-Item -LiteralPath $file).Attributes -band [System.IO.FileAttributes]::ReparsePoint) { throw 'Invalid credential file' }
-  }
-  if ($request.action -eq 'save') {
-    $plain = [System.Text.Encoding]::UTF8.GetBytes(($request.record | ConvertTo-Json -Depth 12 -Compress))
-    $encrypted = [System.Security.Cryptography.ProtectedData]::Protect($plain, $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
-    $json = @{ version = 1; protection = 'DPAPI-CurrentUser'; data = [Convert]::ToBase64String($encrypted) } | ConvertTo-Json -Compress
-    $temporary = Join-Path $directory ([Guid]::NewGuid().ToString() + '.tmp')
-    $backup = $temporary + '.bak'
-    try {
-      $stream = [System.IO.File]::Open($temporary, [System.IO.FileMode]::CreateNew, [System.IO.FileAccess]::Write)
-      try { $bytes = [System.Text.Encoding]::UTF8.GetBytes($json); $stream.Write($bytes, 0, $bytes.Length); $stream.Flush($true) } finally { $stream.Dispose() }
-      if (Test-Path -LiteralPath $file) { [System.IO.File]::Replace($temporary, $file, $backup) } else { [System.IO.File]::Move($temporary, $file) }
-    } finally {
-      if (Test-Path -LiteralPath $temporary) { Remove-Item -LiteralPath $temporary -Force }
-      if (Test-Path -LiteralPath $backup) { Remove-Item -LiteralPath $backup -Force }
-    }
-  } elseif ($request.action -ne 'load') { throw 'Invalid operation' }
-  $record = $null
-  if (Test-Path -LiteralPath $file) {
-    $envelope = [System.IO.File]::ReadAllText($file, [System.Text.Encoding]::UTF8) | ConvertFrom-Json
-    if ($envelope.version -ne 1 -or $envelope.protection -ne 'DPAPI-CurrentUser') { throw 'Invalid credential envelope' }
-    $plain = [System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($envelope.data), $null, [System.Security.Cryptography.DataProtectionScope]::CurrentUser)
-    $record = [System.Text.Encoding]::UTF8.GetString($plain) | ConvertFrom-Json
-  }
-  [Console]::Write((@{ path = $file; record = $record } | ConvertTo-Json -Depth 12 -Compress))
-} catch {
-  [Console]::Error.WriteLine('Credential protection failed: ' + $_.Exception.GetType().Name + ' at line ' + $_.InvocationInfo.ScriptLineNumber)
-  exit 1
-}