@zqagent/core 0.2.7 → 0.2.10

package/dist/cli/index.js

@@ -3724,10 +3724,10 @@ var OpenAIProvider = class {
     let timer;
     try {
       for (; ; ) {
-        const idle = new Promise((resolve23) => {
+        const idle = new Promise((resolve24) => {
           timer = setTimeout(() => {
             onIdle();
-            resolve23({ timedOut: true });
+            resolve24({ timedOut: true });
           }, idleMs);
         });
         const next = iter.next();
@@ -6048,12 +6048,12 @@ function makeSink(maxBuffer) {
   };
 }
 function execAsync(file, argv, opts = {}) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     const maxBuffer = opts.maxBuffer ?? DEFAULT_MAX_BUFFER;
     const out = makeSink(maxBuffer);
     const err = makeSink(maxBuffer);
     if (opts.signal?.aborted) {
-      resolve23({
+      resolve24({
         status: null,
         stdout: Buffer.alloc(0),
         stderr: Buffer.alloc(0),
@@ -6074,7 +6074,7 @@ function execAsync(file, argv, opts = {}) {
         windowsHide: true
       });
     } catch (e) {
-      resolve23({
+      resolve24({
         status: null,
         stdout: Buffer.alloc(0),
         stderr: Buffer.alloc(0),
@@ -6111,7 +6111,7 @@ function execAsync(file, argv, opts = {}) {
       };
       if (aborted) result.aborted = true;
       if (spawnError) result.error = spawnError;
-      resolve23(result);
+      resolve24(result);
     };
     const killAndSettle = () => {
       killTree(child.pid);
@@ -10201,8 +10201,8 @@ var InputRouter = class {
   }
   /** 询问一行:显示 prompt,返回该行内容 */
   ask(prompt) {
-    return new Promise((resolve23) => {
-      this.pendingAsks.push({ prompt, resolve: resolve23 });
+    return new Promise((resolve24) => {
+      this.pendingAsks.push({ prompt, resolve: resolve24 });
       this.pumpAsks();
     });
   }
@@ -10299,16 +10299,16 @@ import chalk2 from "chalk";
 var BRAND_TEXT = "ZQAGENT";
 var BRAND_TAGLINE = "ZQAgent \xB7 AI Agent CLI";
 var GLYPHS = {
-  Z: ["\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557", "\u255A\u2550\u2550\u2588\u2588\u2588\u2554\u255D", "  \u2588\u2588\u2588\u2554\u255D ", " \u2588\u2588\u2588\u2554\u255D  ", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557", "\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D"],
-  Q: [" \u2588\u2588\u2588\u2588\u2588\u2588\u2557 ", "\u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557", "\u2588\u2588\u2551   \u2588\u2588\u2551", "\u2588\u2588\u2551\u2584\u2584 \u2588\u2588\u2551", "\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D", " \u255A\u2550\u2550\u2580\u2580\u2550\u255D "],
-  A: [" \u2588\u2588\u2588\u2588\u2588\u2557 ", "\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2551", "\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2551", "\u2588\u2588\u2551  \u2588\u2588\u2551", "\u255A\u2550\u255D  \u255A\u2550\u255D"],
-  G: [" \u2588\u2588\u2588\u2588\u2588\u2588\u2557 ", "\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D ", "\u2588\u2588\u2551  \u2588\u2588\u2588\u2557", "\u2588\u2588\u2551   \u2588\u2588\u2551", "\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D", " \u255A\u2550\u2550\u2550\u2550\u2550\u255D "],
-  E: ["\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557", "\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D", "\u2588\u2588\u2588\u2588\u2588\u2557  ", "\u2588\u2588\u2554\u2550\u2550\u255D  ", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557", "\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D"],
-  N: ["\u2588\u2588\u2588\u2557   \u2588\u2588\u2557", "\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551", "\u2588\u2588\u2554\u2588\u2588\u2557 \u2588\u2588\u2551", "\u2588\u2588\u2551\u255A\u2588\u2588\u2557\u2588\u2588\u2551", "\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551", "\u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D"],
-  T: ["\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557", "\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D", "   \u2588\u2588\u2551   ", "   \u2588\u2588\u2551   ", "   \u2588\u2588\u2551   ", "   \u255A\u2550\u255D   "]
+  Z: ["\u2588\u2588\u2588\u2588\u2588\u2588\u2588 ", "   \u2588\u2588\u2588  ", "  \u2588\u2588\u2588   ", " \u2588\u2588\u2588    ", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588 ", "        "],
+  Q: [" \u2588\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588    \u2588\u2588", "\u2588\u2588    \u2588\u2588", "\u2588\u2588 \u2584\u2584 \u2588\u2588", " \u2588\u2588\u2588\u2588\u2588\u2588 ", "     \u2580\u2580 "],
+  A: [" \u2588\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588    \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588    \u2588\u2588", "\u2588\u2588    \u2588\u2588", "        "],
+  G: [" \u2588\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588      ", "\u2588\u2588   \u2588\u2588\u2588", "\u2588\u2588    \u2588\u2588", " \u2588\u2588\u2588\u2588\u2588\u2588 ", "        "],
+  E: ["\u2588\u2588\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588      ", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588      ", "\u2588\u2588\u2588\u2588\u2588\u2588\u2588 ", "        "],
+  N: ["\u2588\u2588    \u2588\u2588", "\u2588\u2588\u2588   \u2588\u2588", "\u2588\u2588\u2588\u2588  \u2588\u2588", "\u2588\u2588 \u2588\u2588 \u2588\u2588", "\u2588\u2588  \u2588\u2588\u2588\u2588", "        "],
+  T: ["\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588", "   \u2588\u2588   ", "   \u2588\u2588   ", "   \u2588\u2588   ", "   \u2588\u2588   ", "        "]
 };
 var GLYPH_ROWS = 6;
-var GLYPH_COLS = 8;
+var GLYPH_COLS = 9;
 var GRADIENT = [
   [34, 211, 238],
   [99, 102, 241],
@@ -10913,15 +10913,36 @@ function parseServeArgs(argv) {
   return { dataDir, host, port };
 }
 function buildHotCandidates(explicitDataDir, discovered, fallback) {
-  if (explicitDataDir) {
-    return [{ dataDir: path21.resolve(explicitDataDir), ...fallback }];
-  }
-  const out = [{ dataDir: path21.resolve(DEFAULT_DATA_DIR), ...fallback }];
+  const out = explicitDataDir ? [{ dataDir: path21.resolve(explicitDataDir), ...fallback }] : [{ dataDir: path21.resolve(DEFAULT_DATA_DIR), ...fallback }];
   for (const inst of discovered) {
     if (!out.some((o) => o.dataDir === inst.dataDir)) out.push(inst);
   }
   return out;
 }
+function isWindowsAbsolute(p) {
+  return /^[A-Za-z]:[\\/]/.test(p) || /^\\\\/.test(p);
+}
+function isAbsolutePath(p) {
+  return path21.isAbsolute(p) || isWindowsAbsolute(p);
+}
+function normalizePath(p) {
+  return isWindowsAbsolute(p) ? path21.win32.normalize(p) : path21.normalize(p);
+}
+function parseServeCommandLine(line) {
+  if (!/(?:^|\s)["']?serve["']?(?=\s|$)/.test(line)) return null;
+  const m = /--data-dir(?:=|\s+)(?:"([^"]+)"|'([^']+)'|(.+?))(?=\s+--\w|\s*$)/.exec(line);
+  const rawDataDir = (m?.[1] ?? m?.[2] ?? m?.[3] ?? "").trim();
+  if (!rawDataDir || !isAbsolutePath(rawDataDir)) return null;
+  const host = /--host(?:=|\s+)(?:"([^"]+)"|'([^']+)'|(\S+))/.exec(line);
+  const rawHost = (host?.[1] ?? host?.[2] ?? host?.[3] ?? DEFAULT_SERVE_HOST).trim();
+  const portMatch = /--port(?:=|\s+)(\d+)/.exec(line);
+  const port = Number(portMatch?.[1] ?? DEFAULT_SERVE_PORT);
+  return {
+    dataDir: normalizePath(rawDataDir),
+    host: rawHost === "0.0.0.0" || rawHost === "::" || rawHost === "" ? DEFAULT_SERVE_HOST : rawHost,
+    port: Number.isFinite(port) && port > 0 ? port : DEFAULT_SERVE_PORT
+  };
+}
 function processCwd(pid) {
   try {
     return fs18.readlinkSync(`/proc/${pid}/cwd`);
@@ -10977,23 +10998,28 @@ function discoverFromPs() {
   const res = spawnSync2("ps", ["-axo", "command="], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] });
   if (res.status !== 0 || !res.stdout) return out;
   for (const line of res.stdout.split("\n")) {
-    if (!line.includes(" serve")) continue;
-    const m = /--data-dir(?:=|\s+)(.+?)(?=\s+--|\s*$)/.exec(line);
-    if (!m) continue;
-    const raw = m[1].trim();
-    if (!raw || !path21.isAbsolute(raw)) continue;
-    const host = /--host(?:=|\s+)(\S+)/.exec(line)?.[1] ?? DEFAULT_SERVE_HOST;
-    const port = Number(/--port(?:=|\s+)(\d+)/.exec(line)?.[1] ?? DEFAULT_SERVE_PORT);
-    out.push({
-      dataDir: path21.normalize(raw),
-      host: host === "0.0.0.0" || host === "::" ? DEFAULT_SERVE_HOST : host,
-      port: Number.isFinite(port) && port > 0 ? port : DEFAULT_SERVE_PORT
-    });
+    const inst = parseServeCommandLine(line);
+    if (inst) out.push(inst);
+  }
+  return out;
+}
+function discoverFromWindows() {
+  const out = [];
+  const script = `[Console]::OutputEncoding=[Text.Encoding]::UTF8; Get-CimInstance Win32_Process -Filter "Name='zqagent.exe' OR Name='node.exe'" | ForEach-Object { $_.CommandLine }`;
+  const res = spawnSync2(
+    "powershell.exe",
+    ["-NoProfile", "-NonInteractive", "-Command", script],
+    { encoding: "utf-8", timeout: 15e3, windowsHide: true, stdio: ["ignore", "pipe", "ignore"] }
+  );
+  if (res.status !== 0 || !res.stdout) return out;
+  for (const line of res.stdout.replace(/^\uFEFF/, "").split(/\r?\n/)) {
+    const inst = parseServeCommandLine(line);
+    if (inst) out.push(inst);
   }
   return out;
 }
 function discoverRunningServeInstances() {
-  const found = process.platform === "linux" ? discoverFromProc() : discoverFromPs();
+  const found = process.platform === "linux" ? discoverFromProc() : process.platform === "win32" ? discoverFromWindows() : discoverFromPs();
   const seen = /* @__PURE__ */ new Set();
   return found.filter((inst) => {
     if (seen.has(inst.dataDir)) return false;
@@ -11003,6 +11029,18 @@ function discoverRunningServeInstances() {
 }
 
 // src/cli/link.ts
+function expandHome(p) {
+  const home = process.env.HOME || process.env.USERPROFILE;
+  if (!home) return p;
+  if (p === "~") return home;
+  if (p.startsWith("~/") || p.startsWith("~\\")) return path22.join(home, p.slice(2));
+  return p;
+}
+function installDataDirHint() {
+  if (process.platform === "darwin") return "$HOME/Library/Application Support/zqagent";
+  if (process.platform === "win32") return "%LOCALAPPDATA%\\zqagent";
+  return "/var/lib/zqagent\uFF08\u9700 root\uFF1B\u666E\u901A\u7528\u6237\u7528 ~/.zqagent_data\uFF09";
+}
 function parseLinkArgs(argv) {
   const out = {};
   for (let i = 0; i < argv.length; i++) {
@@ -11076,10 +11114,12 @@ async function enrollViaServer(host, port, adminKey, opts) {
   return payload?.data;
 }
 async function linkNode(opts) {
-  const explicitDataDir = opts.dataDir?.trim() || process.env.DATA_DIR?.trim() || void 0;
+  const rawDataDir = opts.dataDir?.trim() || process.env.DATA_DIR?.trim() || void 0;
+  const explicitDataDir = rawDataDir ? expandHome(rawDataDir) : void 0;
   const host = opts.host?.trim() || process.env.HOST?.trim() || DEFAULT_SERVE_HOST;
   const port = opts.port ?? Number(process.env.PORT ?? DEFAULT_SERVE_PORT);
-  const candidates = explicitDataDir ? buildHotCandidates(explicitDataDir, [], { host, port }) : buildHotCandidates(void 0, discoverRunningServeInstances(), { host, port });
+  const running = discoverRunningServeInstances();
+  const candidates = buildHotCandidates(explicitDataDir, running, { host, port });
   for (const inst of candidates) {
     const store2 = new Store(inst.dataDir);
     const adminKey = process.env.ADMIN_API_KEY ?? store2.loadAdminKey();
@@ -11096,18 +11136,36 @@ async function linkNode(opts) {
     nodeId,
     label: opts.label
   });
-  store.saveFleetCredential({
-    ...cred,
-    label: opts.label ?? cred.label,
-    enrolledAt: (/* @__PURE__ */ new Date()).toISOString()
-  });
+  try {
+    store.saveFleetCredential({
+      ...cred,
+      label: opts.label ?? cred.label,
+      enrolledAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+  } catch (e) {
+    const err = e;
+    if (err.code === "EACCES" || err.code === "EPERM") {
+      throw new Error(
+        `\u65E0\u6CD5\u5199\u5165\u6570\u636E\u76EE\u5F55 ${dataDir}\uFF08${err.code}: ${err.message}\uFF09
+  \u8BE5\u76EE\u5F55\u5F53\u524D\u7528\u6237\u6CA1\u6709\u5199\u6743\u9650\u3002\u4E24\u79CD\u6539\u6CD5\uFF1A
+    1) \u53BB\u6389 --data-dir\uFF0C\u8BA9 link \u81EA\u52A8\u53D1\u73B0\u672C\u673A\u8FD0\u884C\u7684\u8282\u70B9\uFF08\u63A8\u8350\uFF09\uFF1B
+    2) \u7528\u5F53\u524D\u7528\u6237\u53EF\u5199\u7684\u76EE\u5F55\uFF0C\u672C\u5E73\u53F0\u5B89\u88C5\u811A\u672C\u9ED8\u8BA4\uFF1A${installDataDirHint()}
+  \uFF08\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF09`
+      );
+    }
+    throw e;
+  }
+  const otherRunningDirs = [
+    ...new Set(running.map((r) => r.dataDir).filter((d) => d !== dataDir))
+  ];
   return {
     mode: "saved",
     nodeId,
     gatewayUrl: cred.gatewayUrl,
     label: opts.label,
     dataDir,
-    explicitDataDir: Boolean(explicitDataDir)
+    explicitDataDir: Boolean(explicitDataDir),
+    runningServiceDirs: otherRunningDirs
   };
 }
 function printLinkHelp() {
@@ -11149,13 +11207,21 @@ async function runLinkCommand(argv) {
       cliLog(`   \u7F51\u5173: ${r.gatewayUrl ?? "\uFF08\u672A\u4E0B\u53D1\uFF09"}`);
       cliLog(`   \u6570\u636E\u76EE\u5F55: ${r.dataDir}`);
       cliLog("   \u4E0B\u6B21\u542F\u52A8 server \u5373\u81EA\u52A8\u63A5\u5165\uFF1B\u6216\u8FD0\u884C zqagent serve \u5E38\u9A7B\u4E3A\u8282\u70B9\u3002");
-      if (!r.explicitDataDir) {
+      if (r.runningServiceDirs.length > 0) {
+        cliLog("");
+        cliLog("\u26A0\uFE0F  \u672C\u673A\u6709\u6B63\u5728\u8FD0\u884C\u7684\u8282\u70B9\uFF0C\u4F46\u6570\u636E\u76EE\u5F55\u4E0E\u672C\u6B21\u5199\u5165\u7684\u4E0D\u4E00\u81F4\uFF1A");
+        cliLog(`    \u672C\u6B21\u5199\u5165: ${r.dataDir}`);
+        for (const d of r.runningServiceDirs) cliLog(`    \u670D\u52A1\u4F7F\u7528: ${d}`);
+        cliLog("    \u6B63\u5728\u8FD0\u884C\u7684\u670D\u52A1\u8BFB\u4E0D\u5230\u8FD9\u4EFD\u51ED\u636E\uFF0CHub \u4F1A\u4E00\u76F4\u663E\u793A\u672A\u63A5\u5165\u3002");
+        cliLog("    \u8BF7\u786E\u8BA4\u670D\u52A1\u7684\u6570\u636E\u76EE\u5F55\u540E\u91CD\u65B0\u6267\u884C\uFF08\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF09\uFF1A");
+        cliLog(`      zqagent link --hub <Hub\u5730\u5740> --code <\u65B0\u63A5\u5165\u7801> --data-dir "${r.runningServiceDirs[0]}"`);
+      } else if (!r.explicitDataDir) {
         cliLog("");
         cliLog("\u26A0\uFE0F  \u672A\u6307\u5B9A --data-dir\uFF0C\u51ED\u636E\u5199\u5165\u4E86\u5F53\u524D\u76EE\u5F55\u4E0B\u7684 .zqagent_data\u3002");
         cliLog("    \u82E5\u672C\u673A\u670D\u52A1\u662F\u7531\u5B89\u88C5\u811A\u672C\uFF08systemd / launchd\uFF09\u542F\u52A8\u7684\uFF0C\u5B83\u8BFB\u4E0D\u5230\u8FD9\u4EFD\u51ED\u636E\uFF0C");
         cliLog("    Hub \u4F1A\u4E00\u76F4\u663E\u793A\u672A\u5728\u7EBF\u3002\u8BF7\u7528\u670D\u52A1\u7684\u6570\u636E\u76EE\u5F55\u91CD\u65B0\u6267\u884C\uFF1A");
         cliLog("      zqagent link --hub <Hub\u5730\u5740> --code <\u65B0\u63A5\u5165\u7801> --data-dir <\u670D\u52A1\u6570\u636E\u76EE\u5F55>");
-        cliLog("      \uFF08Linux \u5B89\u88C5\u811A\u672C\u9ED8\u8BA4 /var/lib/zqagent\uFF1B\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF09");
+        cliLog(`      \uFF08\u672C\u5E73\u53F0\u5B89\u88C5\u811A\u672C\u9ED8\u8BA4\uFF1A${installDataDirHint()}\uFF1B\u63A5\u5165\u7801\u4E00\u6B21\u6027\uFF0C\u9700\u8981\u91CD\u65B0\u751F\u6210\uFF09`);
       }
     }
     return true;
@@ -12006,11 +12072,11 @@ function isAffirmative(answer) {
   return /^(yes|approve|同意|批准|允许|确定|可以|好的|确认)/.test(a);
 }
 function defer() {
-  let resolve23;
+  let resolve24;
   const promise = new Promise((r) => {
-    resolve23 = r;
+    resolve24 = r;
   });
-  return { promise, resolve: resolve23 };
+  return { promise, resolve: resolve24 };
 }
 var SessionManager = class {
   constructor(store, approvalTimeoutMs = APPROVAL_TIMEOUT_MS, opts = {}) {
@@ -12582,11 +12648,11 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
         status: "pending",
         createdAt: (/* @__PURE__ */ new Date()).toISOString()
       };
-      const { promise, resolve: resolve23 } = defer();
+      const { promise, resolve: resolve24 } = defer();
       const timer = setTimeout(() => {
         this._recycleApproval(rt, id);
       }, this.approvalTimeoutMs);
-      rt.pendingApprovals.set(id, { promise, resolve: resolve23, record, timer });
+      rt.pendingApprovals.set(id, { promise, resolve: resolve24, record, timer });
       rt.approvals.set(id, record);
       this._setStatus(rt, "waiting_approval");
       this._persist(rt);
@@ -12664,11 +12730,11 @@ data: ${JSON.stringify({ sessionId, seq: entry.seq, ts: entry.ts, data: entry.da
       status: "pending",
       createdAt: (/* @__PURE__ */ new Date()).toISOString()
     };
-    const { promise, resolve: resolve23 } = defer();
+    const { promise, resolve: resolve24 } = defer();
     const timer = setTimeout(() => {
       this._recycleQuestion(rt, qid);
     }, this.approvalTimeoutMs);
-    rt.pendingQuestions.set(qid, { promise, resolve: resolve23, record, timer });
+    rt.pendingQuestions.set(qid, { promise, resolve: resolve24, record, timer });
     rt.questions.set(qid, record);
     this._setStatus(rt, "waiting_question");
     this._persist(rt);
@@ -12977,7 +13043,7 @@ data: ${JSON.stringify(entry.data)}
         if (rt.mcpReady) {
           await Promise.race([
             rt.mcpReady,
-            new Promise((resolve23) => setTimeout(resolve23, 15e3))
+            new Promise((resolve24) => setTimeout(resolve24, 15e3))
           ]).catch(() => void 0);
         }
         for await (const event of gen) {
@@ -13562,7 +13628,7 @@ function buildNodeInfo(store, opts) {
     nodeId: opts.nodeId ?? ensureNodeId2(store),
     platform: process.platform,
     mode: process.env.NODE_MODE ?? "standalone",
-    version: "0.2.7",
+    version: "0.2.10",
     admin: opts.admin,
     projects: opts.projects
   };
@@ -14555,7 +14621,7 @@ function buildNodeHost(store, manager, diskPath) {
     arch: process.arch,
     release: os6.release(),
     uptimeSec: Math.round(os6.uptime()),
-    version: "0.2.7",
+    version: "0.2.10",
     mode: process.env.NODE_MODE ?? "standalone",
     cpu: {
       count: cpus2.length,
@@ -14599,7 +14665,7 @@ function saveNotifications(tenant, secretBox, notifications) {
 var API_PREFIX = "/api/v1";
 var MAX_BODY_BYTES = 10 * 1024 * 1024;
 function readBody(req2) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve24, reject) => {
     const chunks = [];
     let size = 0;
     req2.on("data", (c) => {
@@ -14612,9 +14678,9 @@ function readBody(req2) {
       chunks.push(c);
     });
     req2.on("end", () => {
-      if (chunks.length === 0) return resolve23(void 0);
+      if (chunks.length === 0) return resolve24(void 0);
       try {
-        resolve23(JSON.parse(Buffer.concat(chunks).toString("utf-8")));
+        resolve24(JSON.parse(Buffer.concat(chunks).toString("utf-8")));
       } catch {
         reject(new ApiError(400, "bad_request", "\u8BF7\u6C42\u4F53\u4E0D\u662F\u5408\u6CD5 JSON"));
       }
@@ -15130,8 +15196,18 @@ function createApp(store, manager, opts = {}) {
         applyProvidersPatch(tenant, raw);
         if (typeof raw.workspaceRoot === "string") {
           const ws = raw.workspaceRoot.trim();
-          if (ws) tenant.workspaceRoot = path30.resolve(ws);
-          else delete tenant.workspaceRoot;
+          const next = ws ? path30.resolve(ws) : void 0;
+          if (tenant.workspaceRoot) {
+            if (next !== tenant.workspaceRoot) {
+              throw new ApiError(
+                409,
+                "workspace_locked",
+                "\u8BE5\u9879\u76EE\u5DF2\u8BBE\u7F6E\u5DE5\u4F5C\u76EE\u5F55\uFF0C\u4E0D\u80FD\u518D\u4FEE\u6539"
+              );
+            }
+          } else if (next) {
+            tenant.workspaceRoot = next;
+          }
         }
         if (typeof raw.name === "string" && raw.name.trim()) {
           tenant.name = raw.name.trim();
@@ -16107,7 +16183,7 @@ function createApp(store, manager, opts = {}) {
       json(res, 200, {
         status: "ok",
         // 版本让运维/探针能确认线上跑的是哪个构建（更新与回滚据此判断）
-        version: "0.2.7",
+        version: "0.2.10",
         features: { mcp: hasServerMcpConfig() }
       });
       return;
@@ -16223,8 +16299,8 @@ async function cachedFetchModels(baseURL, apiKey) {
   try {
     result = await Promise.race([
       fetchModels(baseURL, apiKey),
-      new Promise((resolve23) => {
-        const t = setTimeout(() => resolve23(null), MODEL_FETCH_TIMEOUT_MS);
+      new Promise((resolve24) => {
+        const t = setTimeout(() => resolve24(null), MODEL_FETCH_TIMEOUT_MS);
         t.unref?.();
       })
     ]);
@@ -16249,8 +16325,8 @@ async function cachedFetchModelsEnriched(baseURL, apiKey, preferred) {
   if (!target) return r;
   const ctx = await Promise.race([
     fetchModelContext(baseURL, apiKey, target),
-    new Promise((resolve23) => {
-      const t = setTimeout(() => resolve23(void 0), MODEL_FETCH_TIMEOUT_MS);
+    new Promise((resolve24) => {
+      const t = setTimeout(() => resolve24(void 0), MODEL_FETCH_TIMEOUT_MS);
       t.unref?.();
     })
   ]);
@@ -17379,13 +17455,13 @@ var EVENT_FLUSH_MAX_EVENTS = 60;
 var EVENT_FLUSH_MAX_BYTES = 200 * 1024;
 var LOOP_LAG_WARN_MS = 2e3;
 function withTimeout(p, ms) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve24, reject) => {
     const timer = setTimeout(() => reject(new Error(`\u5B50\u6307\u4EE4\u8D85\u65F6\uFF08${ms}ms\uFF09`)), ms);
     timer.unref?.();
     p.then(
       (v) => {
         clearTimeout(timer);
-        resolve23(v);
+        resolve24(v);
       },
       (e) => {
         clearTimeout(timer);
@@ -17745,7 +17821,7 @@ var FleetNodeBridge = class {
       label: this.opts.deps.store.loadNodeLabel() ?? void 0,
       platform: process.platform,
       mode: process.env.NODE_MODE ?? "standalone",
-      version: "0.2.7",
+      version: "0.2.10",
       ip: primaryIp()
     };
   }
@@ -17800,7 +17876,7 @@ var FleetNodeBridge = class {
         label: this.opts.deps.store.loadNodeLabel() ?? void 0,
         platform: process.platform,
         mode: process.env.NODE_MODE ?? "standalone",
-        version: "0.2.7",
+        version: "0.2.10",
         ip: primaryIp(),
         projects,
         totals,
@@ -19277,8 +19353,10 @@ var PLATFORM_NAMES = {
   linux: "linux",
   win32: "windows"
 };
+var LIBC_VARIANT = "";
 function platformKey(platform = process.platform, arch = process.arch) {
-  return `${PLATFORM_NAMES[platform] ?? platform}-${arch}`;
+  const base = `${PLATFORM_NAMES[platform] ?? platform}-${arch}`;
+  return LIBC_VARIANT ? `${base}-${LIBC_VARIANT}` : base;
 }
 var SHA256_HEX = /^[0-9a-f]{64}$/;
 function isRecord(v) {
@@ -19465,10 +19543,12 @@ function selfCheck(binPath, expectedVersion) {
 // src/update/platform.ts
 init_esm_shims();
 import * as fs27 from "fs";
+import * as os8 from "os";
 import * as path34 from "path";
+import { spawnSync as spawnSync4 } from "child_process";
 import { createRequire as createRequire3 } from "module";
 function currentVersion() {
-  const injected = "0.2.7"?.trim();
+  const injected = "0.2.10"?.trim();
   if (injected) return injected;
   try {
     const req2 = createRequire3(import.meta.url);
@@ -19484,6 +19564,7 @@ function isSeaRuntime() {
   return base !== "node" && base !== "nodejs";
 }
 var DEFAULT_SERVICE_NAME = "zqagent";
+var DEFAULT_SERVICE_LABEL = "com.zqagent.node";
 function serviceManagerFromCgroup(cgroup, serviceName = DEFAULT_SERVICE_NAME) {
   const unitName = `${serviceName}.service`;
   for (const line of cgroup.split("\n")) {
@@ -19494,7 +19575,46 @@ function serviceManagerFromCgroup(cgroup, serviceName = DEFAULT_SERVICE_NAME) {
   }
   return null;
 }
+function launchdDomain() {
+  const uid = typeof process.getuid === "function" ? process.getuid() : -1;
+  return uid === 0 ? "system" : `gui/${uid}`;
+}
+function launchdLabel() {
+  return process.env.ZQAGENT_SERVICE_LABEL?.trim() || DEFAULT_SERVICE_LABEL;
+}
+function launchdPlistPath() {
+  const label = launchdLabel();
+  const uid = typeof process.getuid === "function" ? process.getuid() : -1;
+  if (uid === 0) return `/Library/LaunchDaemons/${label}.plist`;
+  return path34.join(os8.homedir(), "Library", "LaunchAgents", `${label}.plist`);
+}
+function serviceManagerFromLaunchctl(output, pid, execPath, sea = true) {
+  const pidMatch = /^\s*pid = (\d+)\s*$/m.exec(output);
+  if (pidMatch && Number(pidMatch[1]) === pid) return "launchd";
+  const program = /^\s*program = (.+?)\s*$/m.exec(output);
+  if (program) {
+    const shown = program[1].replace(/^"|"$/g, "");
+    if (path34.resolve(shown) === path34.resolve(execPath)) return "launchd";
+  }
+  if (!sea && /^\s*state = /m.test(output)) return "launchd";
+  return null;
+}
+function parseLaunchdEnvironment(xml) {
+  const out = {};
+  const marker = xml.indexOf("<key>EnvironmentVariables</key>");
+  if (marker < 0) return out;
+  const open = xml.indexOf("<dict>", marker);
+  if (open < 0) return out;
+  const close = xml.indexOf("</dict>", open);
+  if (close < 0) return out;
+  const body = xml.slice(open + "<dict>".length, close);
+  for (const m of body.matchAll(/<key>([^<]+)<\/key>\s*<string>([^<]*)<\/string>/g)) {
+    out[m[1]] = m[2];
+  }
+  return out;
+}
 function detectServiceManager() {
+  if (process.platform === "darwin") return detectLaunchd();
   if (process.platform !== "linux") return null;
   const serviceName = process.env.ZQAGENT_SERVICE_NAME?.trim() || DEFAULT_SERVICE_NAME;
   try {
@@ -19506,11 +19626,71 @@ function detectServiceManager() {
     return null;
   }
 }
+function detectLaunchd() {
+  try {
+    const res = spawnSync4(
+      "launchctl",
+      ["print", `${launchdDomain()}/${launchdLabel()}`],
+      { encoding: "utf8", timeout: 3e3 }
+    );
+    if (res.status !== 0 || !res.stdout) return null;
+    return serviceManagerFromLaunchctl(
+      res.stdout,
+      process.pid,
+      process.execPath,
+      isSeaRuntime()
+    );
+  } catch {
+    return null;
+  }
+}
 function serviceManager() {
   const v = process.env.ZQAGENT_SERVICE_MANAGER?.trim().toLowerCase();
   if (v === "systemd" || v === "launchd") return v;
   return detectServiceManager();
 }
+function parseServiceEnvironment(raw) {
+  const out = {};
+  for (const token of raw.trim().split(/\s+/)) {
+    const idx = token.indexOf("=");
+    if (idx > 0) out[token.slice(0, idx)] = token.slice(idx + 1);
+  }
+  return out;
+}
+var cachedServiceEnv = null;
+function readServiceEnvironment() {
+  const serviceName = process.env.ZQAGENT_SERVICE_NAME?.trim() || DEFAULT_SERVICE_NAME;
+  try {
+    const res = spawnSync4(
+      "systemctl",
+      ["show", serviceName, "--property=Environment", "--value", "--no-pager"],
+      { encoding: "utf8", timeout: 3e3 }
+    );
+    if (res.status !== 0 || !res.stdout) return {};
+    return parseServiceEnvironment(res.stdout);
+  } catch {
+    return {};
+  }
+}
+function serviceEnvValue(key) {
+  if (process.platform === "darwin") {
+    if (serviceManager() !== "launchd") return void 0;
+    cachedLaunchdEnv ??= readLaunchdEnvironment();
+    return cachedLaunchdEnv[key];
+  }
+  if (process.platform !== "linux") return void 0;
+  if (serviceManager() !== "systemd") return void 0;
+  cachedServiceEnv ??= readServiceEnvironment();
+  return cachedServiceEnv[key];
+}
+var cachedLaunchdEnv = null;
+function readLaunchdEnvironment() {
+  try {
+    return parseLaunchdEnvironment(fs27.readFileSync(launchdPlistPath(), "utf8"));
+  } catch {
+    return {};
+  }
+}
 function selfUpdateCapability(hasPublicKey) {
   if (!isSeaRuntime()) {
     return {
@@ -19663,7 +19843,9 @@ function readRollbackTarget(dataDir) {
 var DEFAULT_BASE = "https://agent.cd-zq.com/downloads/zqagent";
 function env(key) {
   const v = process.env[key]?.trim();
-  return v ? v : void 0;
+  if (v) return v;
+  const fromService = serviceEnvValue(key)?.trim();
+  return fromService ? fromService : void 0;
 }
 function num(key, fallback) {
   const n = Number(env(key));
@@ -19700,7 +19882,7 @@ var UpdateController = class {
     return parsePublicKey(env("ZQAGENT_UPDATE_PUBKEY") ?? "");
   }
   get autoUpdateOff() {
-    return process.env.ZQAGENT_AUTO_UPDATE?.trim() === "0";
+    return env("ZQAGENT_AUTO_UPDATE") === "0";
   }
   get enabled() {
     return !this.autoUpdateOff && selfUpdateCapability(Boolean(this.publicKey)).ok;
@@ -19893,11 +20075,11 @@ var UpdateController = class {
     const minUptime = num("ZQAGENT_UPDATE_MIN_UPTIME_MS", 10 * 60 * 1e3);
     const idleMs = num("ZQAGENT_UPDATE_IDLE_MS", 60 * 1e3);
     let idleSince = null;
-    return new Promise((resolve23) => {
+    return new Promise((resolve24) => {
       const timer = setInterval(() => {
         if (this.stopped) {
           clearInterval(timer);
-          resolve23(false);
+          resolve24(false);
           return;
         }
         if (Date.now() - this.startedAt < minUptime || !this.opts.isIdle()) {
@@ -19907,7 +20089,7 @@ var UpdateController = class {
         idleSince ??= Date.now();
         if (Date.now() - idleSince >= idleMs) {
           clearInterval(timer);
-          resolve23(true);
+          resolve24(true);
         }
       }, 1e3);
       timer.unref();
@@ -20088,6 +20270,46 @@ function exitWhenOrphaned() {
   }, 1500);
   timer.unref();
 }
+var PORT_FALLBACK_LIMIT = 20;
+function listenWithPortFallback(server, startPort, host, dataDir, limit = PORT_FALLBACK_LIMIT) {
+  return new Promise((resolve24, reject) => {
+    let attempts = 0;
+    const tryListen = (port) => {
+      server.removeAllListeners("listening");
+      const onError = (err) => {
+        if (err.code === "EADDRINUSE" && attempts < limit) {
+          attempts += 1;
+          const next = port + 1;
+          console.warn(`[server] \u7AEF\u53E3 ${port} \u5DF2\u88AB\u5360\u7528\uFF08EADDRINUSE\uFF09\uFF0C\u5C1D\u8BD5 ${next} \u2026`);
+          tryListen(next);
+          return;
+        }
+        server.removeListener("error", onError);
+        console.error(
+          `[server] \u65E0\u6CD5\u76D1\u542C ${host}:${port}\uFF1A${err.message}` + (err.code === "EADDRINUSE" ? `\uFF08\u5DF2\u5C1D\u8BD5 ${attempts + 1} \u4E2A\u7AEF\u53E3\u5747\u88AB\u5360\u7528\uFF09` : "")
+        );
+        reject(err);
+      };
+      server.once("error", onError);
+      server.listen(port, host, () => {
+        server.removeListener("error", onError);
+        const addr = server.address();
+        const actualPort = typeof addr === "object" && addr !== null ? addr.port : port;
+        if (actualPort !== startPort) {
+          console.warn(`[server] \u5DF2\u6539\u7528\u7AEF\u53E3 ${actualPort}\uFF08\u539F\u5B9A ${startPort} \u88AB\u5360\u7528\uFF09`);
+        }
+        try {
+          fs31.mkdirSync(dataDir, { recursive: true });
+          fs31.writeFileSync(path38.join(dataDir, "server-port"), `${actualPort}
+`);
+        } catch {
+        }
+        resolve24(actualPort);
+      });
+    };
+    tryListen(startPort);
+  });
+}
 function startServer(opts = {}) {
   const dataDir = path38.resolve(opts.dataDir ?? env2("DATA_DIR") ?? DEFAULT_DATA_DIR);
   const port = opts.port ?? Number(env2("PORT") ?? 8787);
@@ -20313,11 +20535,11 @@ function startServer(opts = {}) {
   server.timeout = 0;
   server.keepAliveTimeout = 65e3;
   server.headersTimeout = 66e3;
-  const ready = new Promise((resolve23) => {
-    server.listen(port, host, () => {
+  const ready = new Promise((resolve24, reject) => {
+    listenWithPortFallback(server, port, host, dataDir).then((actualPort) => {
       const info = {
         host,
-        port,
+        port: actualPort,
         dataDir,
         adminKey,
         fleetNodeId: fleet ? fleet.getNodeId() : void 0,
@@ -20330,8 +20552,8 @@ function startServer(opts = {}) {
         printReady(info, qq);
       }
       updater?.start();
-      resolve23(info);
-    });
+      resolve24(info);
+    }, reject);
   });
   return {
     store,
@@ -20467,7 +20689,7 @@ async function runWizard(rl2, store, opts) {
 }
 async function askHidden(rl2, prompt) {
   if (!process.stdin.isTTY) return (await rl2.question(prompt)).trim();
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     const saved = process.stdin.listeners("data");
     process.stdin.removeAllListeners("data");
     cliWrite(prompt);
@@ -20489,13 +20711,13 @@ async function askHidden(rl2, prompt) {
         if (ch === "\r" || ch === "\n") {
           cleanup();
           cliWrite("\n");
-          resolve23(buf);
+          resolve24(buf);
           return;
         }
         if (ch === "") {
           cleanup();
           cliWrite("\n");
-          resolve23("");
+          resolve24("");
           return;
         }
         if (ch === "\x7F" || ch === "\b") {
@@ -20684,7 +20906,7 @@ function updateSessionMetaFile(stateDir2, sessionId, patch) {
 // src/cli/debug.ts
 init_esm_shims();
 import * as fs33 from "fs";
-import * as os8 from "os";
+import * as os9 from "os";
 import * as path42 from "path";
 var LOG_NAME = "zqagent-debug.log";
 var TRUTHY = /^(1|true|yes|on)$/i;
@@ -20698,7 +20920,7 @@ function resolveLogFile() {
   const explicit = process.env.ZQAGENT_DEBUG_LOG;
   if (explicit) return path42.resolve(explicit);
   const dir = process.env.ZQAGENT_DEBUG_DIR;
-  return path42.join(dir ? path42.resolve(dir) : os8.tmpdir(), LOG_NAME);
+  return path42.join(dir ? path42.resolve(dir) : os9.tmpdir(), LOG_NAME);
 }
 function enableDebug(argv = process.argv) {
   if (enabled) return true;
@@ -21156,7 +21378,7 @@ function question(prompt) {
 }
 function readPassword(prompt) {
   if (!process.stdin.isTTY) return question(prompt);
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     const savedDataListeners = process.stdin.listeners("data");
     process.stdin.removeAllListeners("data");
     cliWrite(prompt);
@@ -21172,13 +21394,13 @@ function readPassword(prompt) {
         if (ch === "\r" || ch === "\n") {
           cleanup();
           cliWrite("\n");
-          resolve23(buf);
+          resolve24(buf);
           return;
         }
         if (ch === "") {
           cleanup();
           cliWrite("\n");
-          resolve23("");
+          resolve24("");
           return;
         }
         if (ch === "\x7F" || ch === "\b") {
@@ -21613,7 +21835,7 @@ async function offerTerminalSetup(engine, canUseAgent) {
 }
 var KNOWN_SUBCOMMANDS = /* @__PURE__ */ new Set(["link", "serve", "update"]);
 function cliVersion() {
-  const env3 = "0.2.7"?.trim();
+  const env3 = "0.2.10"?.trim();
   if (env3) return env3;
   try {
     const req2 = createRequire4(import.meta.url);