lark-remote 0.4.4 → 0.4.5

package/dist/card/card-shared.d.ts

@@ -34,7 +34,7 @@ export declare function newSessionButton(): object;
 /**
  * Create a CardKit 2.0 Compact button for any runCompact-capable runner
  * (codex/kimi/opencode/pi/claude，鸭子类型 `'runCompact' in runner` 探测）。
- * Triggers the compact flow via the codex.compact callback（handler 按
+ * Triggers the compact flow via the compact callback（handler 按
  * runId 解析 agentKind，claude 走 stream-json 内建 /compact）。
  */
 export declare function compactButton(runId: string): object;

package/dist/card/card-shared.js

@@ -84,11 +84,11 @@ export function newSessionButton() {
 /**
  * Create a CardKit 2.0 Compact button for any runCompact-capable runner
  * (codex/kimi/opencode/pi/claude，鸭子类型 `'runCompact' in runner` 探测）。
- * Triggers the compact flow via the codex.compact callback（handler 按
+ * Triggers the compact flow via the compact callback（handler 按
  * runId 解析 agentKind，claude 走 stream-json 内建 /compact）。
  */
 export function compactButton(runId) {
-    return cardButton('🗜 Compact', { cmd: 'codex.compact', runId }, { type: 'primary' });
+    return cardButton('🗜 Compact', { cmd: 'compact', runId }, { type: 'primary' });
 }
 /**
  * Create a CardKit 2.0 Compact button for resume cards (auto-resume / `/resume <id>`).

package/dist/card/run-renderer.js

@@ -3,7 +3,7 @@ import { collapsibleMarkdownPanel, markdownDiv } from './collapsible.js';
 import { toolBodyMd, toolHeaderText } from './tool-render.js';
 import { truncateUtf8, truncateMarkdownTables, CARD_BUDGET_BYTES } from './text-truncate.js';
 import { formatTimestamp } from './time.js';
-import { formatUsageStats } from '../router/utils.js';
+import { formatUsageStats } from '../router/usage-format.js';
 import { renderApprovalArea } from './approval-render.js';
 const REASONING_BYTES = 4_500;
 const TEXT_BYTES = 10_000;
@@ -318,8 +318,8 @@ function assembleRunCard(state, options, elements) {
         schema: '2.0',
         config: { wide_screen_mode: true, update_multi: true },
         header: {
-            template: headerTemplate2(state),
-            title: { content: headerTitle2(state, options), tag: 'plain_text' },
+            template: headerTemplate(state),
+            title: { content: headerTitle(state, options), tag: 'plain_text' },
         },
         body: { elements },
     };
@@ -762,7 +762,7 @@ function buildSummaryContent(state, options = {}) {
         // 压缩（operationKind='compaction'）不会返回 agent 正文——引擎只压缩上下文
         // 窗口，空内容属正常，不能沿用普通 run 的「（未返回内容）」异常信号
         // （2026-09 用户反馈）。所有会压缩的 agent（codex/claude/kimi/opencode/pi）
-        // 都经 streamCodexCompact 走这条共享渲染路径，一处覆盖全部。
+        // 都经 streamCompact 走这条共享渲染路径，一处覆盖全部。
         const empty = hasContent
             ? ''
             : state.operationKind === 'compaction'
@@ -802,9 +802,9 @@ function buildDurationInfo(state) {
     // 与标题一致：审批等待期间状态行显示「等待审批中」，而不是「工具调用中」。
     if (hasPendingApproval(state))
         return '✋ 等待审批中';
-    return footerText2(state.footer);
+    return footerText(state.footer);
 }
-function footerText2(footer) {
+function footerText(footer) {
     if (footer === 'tool_running')
         return '🧰 工具调用中';
     if (footer === 'streaming')
@@ -816,7 +816,7 @@ function statusTagLabel(terminal) {
     return terminalToLabel(terminal);
 }
 /** CardKit 2.0 header title — agent-aware via options.agentKind. */
-function headerTitle2(state, options = {}) {
+function headerTitle(state, options = {}) {
     const agent = agentDisplayName(options.agentKind ?? 'claude');
     if (state.terminal === 'done')
         return `✅ ${agent} · 已完成`;
@@ -845,7 +845,7 @@ function hasPendingApproval(state) {
     return (state.approvals ?? []).some((a) => !a.expired);
 }
 /** CardKit 2.0 header template color */
-function headerTemplate2(state) {
+function headerTemplate(state) {
     return terminalToColor(state.terminal);
 }
 //# sourceMappingURL=run-renderer.js.map

package/dist/cli.js

@@ -2,9 +2,8 @@
 /**
  * CLI 引导层（bootstrap）：在 import 应用模块图之前决定运行时（bun/node）并拉起它。
  *
- * **这是全仓唯一被认可的 spawn 收口例外**（即 AGENTS.md「子进程 spawn 只走
- * platform/spawn.ts」红线的显式豁免）。三个理由缺一不可：
- *   1. 时序：preflight（Node 版本守卫、-v/-h/--advance-help）必须在 import 应用
+ *XX * 缺一不可：
+ *   1. 时序：preflight（Node 版本守卫、-v/-h/--advanced-help）必须在 import 应用
  *      模块图之前跑完——dist/cli.js 刻意不使用 ES2020+ 语法以便在 node 12 上仍
  *      可被解析，而 dist/index.js 是 ES2022；先 import platform/spawn 就等于先把
  *      应用模块图拖进来，守卫当场失效（报错堆栈全落在 Node 内部）。
@@ -20,7 +19,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { spawn, spawnSync } from 'node:child_process';
 import { fileURLToPath, pathToFileURL } from 'node:url';
-import { printAdvanceHelp, printHelp, printVersion } from './config/dir.js';
+import { printAdvancedHelp, printHelp, printVersion } from './config/dir.js';
 const entryUrl = new URL('./index.js', import.meta.url);
 const entry = fileURLToPath(entryUrl);
 /**
@@ -49,8 +48,8 @@ export function handlePreflight(args, nodeVersion = process.versions.node) {
             printHelp();
             return 0;
         }
-        if (arg === '--advance-help') {
-            printAdvanceHelp();
+        if (arg === '--advanced-help') {
+            printAdvancedHelp();
             return 0;
         }
     }

package/dist/clone.d.ts

@@ -59,11 +59,6 @@ type RegisterAppFn = (options: {
         status: string;
     }) => void;
 }) => Promise<RegisterAppResult>;
-/**
- * 默认新实例拉起：同入口 + 同参数，仅替换 --config-dir（detached，返回 pid）。
- * spawn 骨架（log fd / windowsHide / error 兜底）单源于 restart.ts。
- */
-export declare function spawnDetachedCloneBridge(targetDir: string): number | undefined;
 export interface CloneSessionOptions {
     connector: CloneConnector;
     /** 当前实例的 config.yaml 路径（配置复制源）。 */
@@ -111,7 +106,7 @@ export declare class CloneSession {
     /**
      * 扫码成功后的自动绑定落地：
      * 1. 复制当前 config.yaml，仅替换 feishu.appId/appSecret；
-     * 2. 同步 workspace / 常用指令 / 会话状态（session 按 openId 重绑）；
+     * 2. 同步 cwd / 常用指令 / 会话状态（session 按 openId 重绑）；
      * 3. 用 registerApp 返回的新应用 openId 写 startup-contact.json（免认领绑定）；
      * 4. detached 拉起指向新目录的新实例（启动后自动向新应用发启动通知）；
      * 5. 在原应用回执「绑定完成 + 配置目录」，退出流程。

package/dist/clone.js

@@ -6,7 +6,7 @@ import path from 'node:path';
 import YAML from 'yaml';
 import { getLogger } from './logger/index.js';
 import { renderQrImage } from './config/qr.js';
-import { silentlyUnlink } from './common/fs.js';
+import { bestEffortUnlink } from './common/fs.js';
 import { atomicWrite, atomicWriteJson } from './persistence/atomic-write.js';
 import { spawnDetachedBridge } from './restart.js';
 /** 退出命令（不区分大小写）。 */
@@ -48,7 +48,7 @@ export function generateCloneSuffix() {
  * 默认新实例拉起：同入口 + 同参数，仅替换 --config-dir（detached，返回 pid）。
  * spawn 骨架（log fd / windowsHide / error 兜底）单源于 restart.ts。
  */
-export function spawnDetachedCloneBridge(targetDir) {
+function spawnDetachedCloneBridge(targetDir) {
     const args = [];
     const argv = process.argv.slice(2);
     for (let i = 0; i < argv.length; i++) {
@@ -238,7 +238,7 @@ export class CloneSession {
             return;
         }
         finally {
-            silentlyUnlink(qrPath);
+            bestEffortUnlink(qrPath);
         }
         await this.connector
             .sendWithRetry(ctx.chatId, {
@@ -264,7 +264,7 @@ export class CloneSession {
     /**
      * 扫码成功后的自动绑定落地：
      * 1. 复制当前 config.yaml，仅替换 feishu.appId/appSecret；
-     * 2. 同步 workspace / 常用指令 / 会话状态（session 按 openId 重绑）；
+     * 2. 同步 cwd / 常用指令 / 会话状态（session 按 openId 重绑）；
      * 3. 用 registerApp 返回的新应用 openId 写 startup-contact.json（免认领绑定）；
      * 4. detached 拉起指向新目录的新实例（启动后自动向新应用发启动通知）；
      * 5. 在原应用回执「绑定完成 + 配置目录」，退出流程。

package/dist/common/clamp.d.ts

@@ -0,0 +1,2 @@
+/** Clamp `v` into [min, max]. */
+export declare function clampInt(v: number, min: number, max: number): number;

package/dist/common/clamp.js

@@ -0,0 +1,5 @@
+/** Clamp `v` into [min, max]. */
+export function clampInt(v, min, max) {
+    return Math.min(Math.max(v, min), max);
+}
+//# sourceMappingURL=clamp.js.map

package/dist/common/fs.d.ts

@@ -1,11 +1,12 @@
 /**
- * Unlink a file, silently ignoring ENOENT and other errors.
+ * Unlink a file, swallowing errors instead of throwing to the caller.
  *
  * Use for cleanup paths (pid files, temp files, stale locks) where the
  * file may already be gone or was never created — a missing file is not
- * an error worth propagating.
+ * an error worth propagating. Not truly silent: gives up on busy files
+ * with a warning log (see below).
  */
-export declare function silentlyUnlink(path: string): void;
+export declare function bestEffortUnlink(path: string): void;
 export declare function isBusyError(err: unknown): boolean;
 export interface BusyRetryOptions {
     /** 平台注入（测试用）；默认当前宿主。占用重试仅 win32 生效 */

package/dist/common/fs.js

@@ -2,20 +2,21 @@ import fs from 'node:fs';
 import { getLogger } from '../logger/index.js';
 import { currentPlatform, isWin32 } from '../platform/select.js';
 /**
- * Unlink a file, silently ignoring ENOENT and other errors.
+ * Unlink a file, swallowing errors instead of throwing to the caller.
  *
  * Use for cleanup paths (pid files, temp files, stale locks) where the
  * file may already be gone or was never created — a missing file is not
- * an error worth propagating.
+ * an error worth propagating. Not truly silent: gives up on busy files
+ * with a warning log (see below).
  */
-export function silentlyUnlink(path) {
+export function bestEffortUnlink(path) {
     try {
         withBusyRetry(() => fs.unlinkSync(path));
     }
     catch (err) {
         // 占用放弃（win32 重试耗尽 / posix 首次占用即失败）：按设计「告警，
         // 不静默吞」，但清理路径不向调用方抛错（保持本函数契约）
-        getLogger().warn(`[fs] silentlyUnlink gave up on busy file ${path}: ${String(err)}`);
+        getLogger().warn(`[fs] bestEffortUnlink gave up on busy file ${path}: ${String(err)}`);
     }
 }
 /**

package/dist/config/dir.d.ts

@@ -5,7 +5,7 @@ interface CliArgs {
     help?: boolean;
     version?: boolean;
     update?: boolean;
-    advanceHelp?: boolean;
+    advancedHelp?: boolean;
 }
 export declare function resolveConfigDir(configDirArg: string | undefined): string;
 export declare function getConfigDir(): string;
@@ -18,11 +18,10 @@ export declare function printVersion(): void;
 /** Print CLI help to stdout. */
 export declare function printHelp(): void;
 /**
- * Print advanced-config reference to stdout (CLI `--advance-help`).
+ * Print advanced-config reference to stdout (CLI `--advanced-help`).
  *
  * 目标读者是 coding agent（用户让 agent 代改 config.yaml）：披露所有
- * /config 卡片未暴露的 YAML 字段——名称、默认值、语义、改法。飞书侧
- * 等价命令为 /advancehelp（内容同源，卡片渲染）。
+ * /config 卡片未暴露的 YAML 字段——名称、默认值、语义、改法。
  */
-export declare function printAdvanceHelp(): void;
+export declare function printAdvancedHelp(): void;
 export {};

package/dist/config/dir.js

@@ -52,8 +52,8 @@ export function parseCliArgs(args = process.argv.slice(2)) {
         else if (arg === '--dev') {
             result.dev = true;
         }
-        else if (arg === '--advance-help') {
-            result.advanceHelp = true;
+        else if (arg === '--advanced-help') {
+            result.advancedHelp = true;
         }
         else if (arg === '--update' || arg === 'update') {
             // 裸子命令等价形式：`lark-remote update` 与 `--update` 同义。
@@ -94,24 +94,23 @@ export function printHelp() {
         '  --settings <path>     指定 Claude 配置文件路径',
         '  --dev                 开发模式：标记从源码 bun src/index.ts 启动（看门狗据此选择拉起方式）',
         '  --update              升级到最新版本后退出（用于 cron/脚本自动化升级）',
-        '  --advance-help        高级配置参考：config.yaml 全部高级字段的语义与改法（面向 coding agent）',
+        '  --advanced-help        高级配置参考：config.yaml 全部高级字段的语义与改法（面向 coding agent）',
         '  -h, --help            显示本帮助信息',
         '  -v, --version         显示版本号',
     ];
     process.stdout.write(lines.join('\n') + '\n');
 }
 /**
- * Print advanced-config reference to stdout (CLI `--advance-help`).
+ * Print advanced-config reference to stdout (CLI `--advanced-help`).
  *
  * 目标读者是 coding agent（用户让 agent 代改 config.yaml）：披露所有
- * /config 卡片未暴露的 YAML 字段——名称、默认值、语义、改法。飞书侧
- * 等价命令为 /advancehelp（内容同源，卡片渲染）。
+ * /config 卡片未暴露的 YAML 字段——名称、默认值、语义、改法。
  */
-export function printAdvanceHelp() {
+export function printAdvancedHelp() {
     const configDir = resolveConfigDir(parseCliArgs().configDir);
     const configPath = configDir + '/config.yaml';
     const lines = [
-        'lark-remote 高级配置参考（--advance-help）',
+        'lark-remote 高级配置参考（--advanced-help）',
         '',
         '目标读者：coding agent。用户把本输出交给 agent，agent 据此代改配置。',
         '',

package/dist/config/wizard.js

@@ -4,7 +4,7 @@ import path from 'node:path';
 import YAML from 'yaml';
 import { AppConfigSchema } from './index.js';
 import { needsQrImage, renderQrImage, renderTerminalQr } from './qr.js';
-import { silentlyUnlink } from '../common/fs.js';
+import { bestEffortUnlink } from '../common/fs.js';
 import { atomicWrite } from '../persistence/atomic-write.js';
 /** Where the fallback QR image is written (next to the config it will seed). */
 const QR_IMAGE_NAME = 'qr-code.gif';
@@ -77,7 +77,7 @@ async function runRegistrationWizard(configPath) {
     }
     finally {
         if (wroteImage)
-            silentlyUnlink(imagePath);
+            bestEffortUnlink(imagePath);
     }
 }
 function isInteractiveTerminal() {

package/dist/connector/index.d.ts

@@ -107,8 +107,6 @@ type CardActionHandler = (action: CardActionEvent) => void | CardActionResponse
  * 卡片 patch 的重试上限。含义：1 次原始尝试 + 最多 PATCH_MAX_RETRIES 次重试。
  */
 export declare const PATCH_MAX_RETRIES = 3;
-/** 重试退避基数（ms）；第 n 次重试前等待 n × 基数，给对端恢复的时间。 */
-export declare const PATCH_RETRY_BASE_DELAY_MS = 150;
 export declare class FeishuConnector {
     /** 飞书 channel 实例（public：测试直接访问/注入 mock，替代 as unknown as）。 */
     channel: LarkChannel;

package/dist/connector/index.js

@@ -7,7 +7,7 @@ import { sleep } from '../common/sleep.js';
 import { isTransientTransportError } from '../error-classification.js';
 import axios from 'axios';
 import fs from 'node:fs';
-import { silentlyUnlink } from '../common/fs.js';
+import { bestEffortUnlink } from '../common/fs.js';
 import { displayName } from '../platform/path.js';
 import https from 'node:https';
 import os from 'node:os';
@@ -145,7 +145,7 @@ function shouldRetrySendError(err) {
  */
 export const PATCH_MAX_RETRIES = 3;
 /** 重试退避基数（ms）；第 n 次重试前等待 n × 基数，给对端恢复的时间。 */
-export const PATCH_RETRY_BASE_DELAY_MS = 150;
+const PATCH_RETRY_BASE_DELAY_MS = 150;
 /** 记日志用的错误摘要（不打印 axios 巨型循环对象）。 */
 function formatErrorForLog(err) {
     if (err instanceof Error) {
@@ -403,9 +403,9 @@ export class FeishuConnector {
         for (const res of msg.resources) {
             const tmpPath = path.join(os.tmpdir(), `lark-remote-inbound-${randomUUID()}`);
             try {
-                const { contentType, bytesWritten } = await withTimeout(this.channel.downloadResourceToFile(msg.messageId, res.fileKey, res.type, tmpPath), timeoutMs, `downloadResource fileKey=${res.fileKey}`, () => silentlyUnlink(tmpPath));
+                const { contentType, bytesWritten } = await withTimeout(this.channel.downloadResourceToFile(msg.messageId, res.fileKey, res.type, tmpPath), timeoutMs, `downloadResource fileKey=${res.fileKey}`, () => bestEffortUnlink(tmpPath));
                 if (bytesWritten > maxBytes) {
-                    silentlyUnlink(tmpPath);
+                    bestEffortUnlink(tmpPath);
                     const limitMb = maxBytes / (1024 * 1024);
                     failures.push({
                         kind: res.kind,
@@ -429,7 +429,7 @@ export class FeishuConnector {
             catch (err) {
                 // 超时不在这里删文件：上面已把清理挂到底层传输的 settle 上。
                 if (!(err instanceof ResourceTimeoutError))
-                    silentlyUnlink(tmpPath);
+                    bestEffortUnlink(tmpPath);
                 getLogger().warn(`[feishu] downloadResource failed fileKey=${res.fileKey} type=${res.type}:`, err.message);
                 failures.push({
                     kind: res.kind,

package/dist/inbound/receipt.d.ts

@@ -1,5 +1,5 @@
 /**
- * 入站回执文案（设计依据见 `docs/zh/architecture/inbound-unified-input-design.md`）。
+ * 入站回执文案（`inbound-unified-input-design.md` §5.7）。
  *
  * 两类回执合并成一条：
  * 1. 无文本纯附件（决策 2）：不自动起 turn，只回已保存路径 + 引导语；
@@ -10,8 +10,6 @@
  */
 import type { PlaceholderKind } from './placeholder.js';
 import type { RejectedItem } from './turn.js';
-/** 单条回执最多列出的文件数；超出折叠为 "… 等 N 个文件"（沿用旧提示口径）。 */
-export declare const MAX_PATHS_IN_RECEIPT = 10;
 /** 「不支持」回执句式（§5.7 表：不支持类型统一「暂不支持 X」）。 */
 export declare function unsupportedReason(kind: PlaceholderKind): string;
 export interface ReceiptInput {

package/dist/inbound/receipt.js

@@ -1,5 +1,5 @@
 /**
- * 入站回执文案（设计依据见 `docs/zh/architecture/inbound-unified-input-design.md`）。
+ * 入站回执文案（`inbound-unified-input-design.md` §5.7）。
  *
  * 两类回执合并成一条：
  * 1. 无文本纯附件（决策 2）：不自动起 turn，只回已保存路径 + 引导语；
@@ -10,7 +10,7 @@
  */
 import path from 'node:path';
 /** 单条回执最多列出的文件数；超出折叠为 "… 等 N 个文件"（沿用旧提示口径）。 */
-export const MAX_PATHS_IN_RECEIPT = 10;
+const MAX_PATHS_IN_RECEIPT = 10;
 /** 占位符种类 → 面向人的名称。 */
 const PLACEHOLDER_LABELS = {
     image: '图片',

package/dist/inbound/turn-assembler.d.ts

@@ -1,7 +1,7 @@
 /**
  * InboundTurnAssembler：统一静默期窗口 + 合并 + 下载等待 + commit。
  *
- * 设计依据：`docs/zh/architecture/inbound-unified-input-design.md` §4/§5.2。
+ * 设计依据：`docs/zh/architecture/inbound-unified-input-design.md` §4、§5.2。
  *
  * 规则：
  * - 任何事件到达 → **重置** 700ms 定时器（按 `userId:chatId` 分桶），保证图/文任意顺序等价；
@@ -13,8 +13,6 @@
  */
 import type { InboundEvent } from './event.js';
 import { type CommitReason, type InboundTurn } from './turn.js';
-/** 统一静默期窗口（ms）——决策 1：不做「纯文本零延迟」快路径。 */
-export declare const DEFAULT_TURN_WINDOW_MS = 700;
 export interface AssemblerContext {
     userId: string;
     chatId: string;

package/dist/inbound/turn-assembler.js

@@ -1,7 +1,7 @@
 /**
  * InboundTurnAssembler：统一静默期窗口 + 合并 + 下载等待 + commit。
  *
- * 设计依据：`docs/zh/architecture/inbound-unified-input-design.md` §4/§5.2。
+ * 设计依据：`docs/zh/architecture/inbound-unified-input-design.md` §4、§5.2。
  *
  * 规则：
  * - 任何事件到达 → **重置** 700ms 定时器（按 `userId:chatId` 分桶），保证图/文任意顺序等价；
@@ -17,7 +17,7 @@ import { buildPrompt } from './prompt.js';
 import { buildReceipt, unsupportedReason } from './receipt.js';
 import { bucketKey, } from './turn.js';
 /** 统一静默期窗口（ms）——决策 1：不做「纯文本零延迟」快路径。 */
-export const DEFAULT_TURN_WINDOW_MS = 700;
+const DEFAULT_TURN_WINDOW_MS = 700;
 export class InboundTurnAssembler {
     deps;
     buckets = new Map();

package/dist/index.js

@@ -9,7 +9,7 @@ import { probeAllAgents } from './runner/probe.js';
 import { warmCodexCatalogCache } from './config/codex-config.js';
 import { SessionReaderRegistry, SessionStore } from './session/index.js';
 import { ClaudeSessionReader, CodexSessionReader, OpencodeSessionReader, PiSessionReader, KimiSessionReader, DshSessionReader, } from './session/index.js';
-import { CommandRouter, isImmediateAction, DIRECT_RETURN_CMDS, } from './router/index.js';
+import { CommandRouter, isImmediateAction, DIRECT_RETURN_CMDS, SESSION_MUTATING_ACTION_CMDS, } from './router/index.js';
 import { dispatchOrderExecForQueue } from './router/order-exec-dispatch.js';
 import { buildCardActionFullValue } from './router/card-action-payload.js';
 import { actionFeedbackText } from './router/card-action-feedback.js';
@@ -22,7 +22,7 @@ import { InstanceAlreadyRunningError, InstanceLock } from './instance-lock.js';
 import { spawnReplacementBridge, waitForPreviousInstance } from './restart.js';
 import { currentPlatform } from './platform/select.js';
 import { startSleepBlocker } from './platform/sleep-blocker.js';
-import { checkLatestVersion, isNewer, runInstallLatest, formatUpdateHint } from './update/index.js';
+import { checkLatestVersion, compareVersions, runInstallLatest, formatUpdateHint, } from './update/index.js';
 import { classifyRejection } from './error-classification.js';
 import { WorkspaceStore } from './workspace/index.js';
 import { InboundTurnAssembler } from './inbound/turn-assembler.js';
@@ -31,7 +31,7 @@ import { buildSessionHistoryCard } from './router/card-helpers.js';
 import { newSessionButton, resumeCompactButton, agentDisplayName } from './card/card-shared.js';
 import path from 'node:path';
 import fs from 'node:fs';
-import { silentlyUnlink } from './common/fs.js';
+import { bestEffortUnlink } from './common/fs.js';
 /**
  * /stop 命令别名单源：普通消息的停止分支与 clone 活跃期拦截的排除条件
  * 共用同一判定，防止将来加别名时两处漂移。
@@ -147,7 +147,7 @@ function initializeRunner(config, configDir, cliArgs) {
             stopGraceMs: claudeConfig.stopGraceMs,
             settings: cliArgs.settings,
             pidDir: configDir,
-            workspace: ws,
+            cwd: ws,
             permissionMode: claudeConfig.permissionMode,
             idleTtlMs: claudeConfig.idleTtlMinutes != null ? claudeConfig.idleTtlMinutes * 60_000 : undefined,
         });
@@ -228,7 +228,7 @@ function initializeRunner(config, configDir, cliArgs) {
                 .split(',')
                 .map((t) => t.trim())
                 .filter(Boolean),
-            workspace: ws,
+            cwd: ws,
             sessionReader: piSessionReader,
         });
     });
@@ -308,7 +308,7 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
     // 附件路径统一注入 prompt；无文本纯附件只回执（决策 2）。
     const assembler = new InboundTurnAssembler({
         onCommit: (turn, prompt) => {
-            // 入队时刻（T0）快照 workspace + agent/session 绑定，语义与旧路径一致
+            // 入队时刻（T0）快照 cwd + agent/session 绑定，语义与旧路径一致
             // （排队期间 /cd、/config 不再导致语义漂移）。
             const messageId = turn.messageIds[turn.messageIds.length - 1] ?? '';
             // turnMessageIds：终态收尾要覆盖本轮每一条消息（逐条挂的 Typing 得逐条撤）
@@ -318,17 +318,17 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
                 messageId,
                 turnMessageIds: turn.messageIds,
             };
-            let workspace = sessionStore.getCwd(turn.userId) ?? '';
-            if (!workspace && workspaceStore) {
+            let cwd = sessionStore.getCwd(turn.userId) ?? '';
+            if (!cwd && workspaceStore) {
                 const workspaces = workspaceStore.list();
                 if (workspaces.length > 0)
-                    workspace = workspaces[0].path;
+                    cwd = workspaces[0].path;
             }
             const binding = bridge.currentBinding(turn.userId);
-            bridge.enqueue(workspace, async () => {
+            bridge.enqueue(cwd, async () => {
                 // allowCommandPrefix: false —— prompt 已剥离占位符，绝不再做命令分发。
                 await router.handle(prompt, ctx, {
-                    cwdOverride: workspace,
+                    cwdOverride: cwd,
                     binding,
                     allowCommandPrefix: false,
                 });
@@ -386,7 +386,7 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
                 // save() 的正常路径会清理临时文件；这里兜底 save 进入 mkdir
                 // try 之前意外抛错的情况，避免 os.tmpdir 残留。
                 for (const item of payload.media) {
-                    silentlyUnlink(item.tempPath);
+                    bestEffortUnlink(item.tempPath);
                 }
                 throw err;
             }
@@ -402,8 +402,8 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
         });
     });
     connector.setMessageHandler((msg) => {
-        // 绑定/授权闸门：仅 owner 放行；非 owner 静默丢弃；未绑定时首条消息（任意内容）认领
-        const decision = binder.classify(msg.userId, msg.content, msg.chatId);
+        // 绑定/授权闸门：仅 owner 放行；非 owner 静默丢弃；未绑定时首条消息认领
+        const decision = binder.authorize(msg.userId, msg.chatId);
         if (decision.kind === 'rejected')
             return;
         if (decision.kind === 'bind_success') {
@@ -562,11 +562,19 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
             return;
         }
         const isImmediate = isImmediateAction(actionValue.cmd);
-        const workspace = sessionStore.getCwd(userId) ?? '';
+        const cwd = sessionStore.getCwd(userId) ?? '';
         // Build full value object — spread all fields from actionValue, then merge
         // component out-of-band fields (option/formValue/inputValue/options) where
         // present. See card-action-payload.ts for the component-type contract.
         const fullValue = buildCardActionFullValue(actionValue, action);
+        // 定序（2026-10-07）：会话 / cwd / agent 变更类卡片动作（new-session、
+        // resume.use、ls.switch、ws.use、config.save）执行前先冲刷入站装配窗口，
+        // 保证窗口内先到的文本消息在本动作之前 commit（绑定旧 session/cwd/agent）。
+        // 否则 700ms 静默窗内的消息会漂移到动作之后的新状态：例如输入「重新构建」
+        // 后立即点「新会话」，消息会落到新会话。名单以 router 单源为准。
+        if (SESSION_MUTATING_ACTION_CMDS.has(actionValue.cmd)) {
+            await assembler.flush(userId, chatId, 'flush');
+        }
         // queue.input / config.save / approval.respond / approval.toggle /
         // approval.answer 系列返回 CardActionResponse toast 给点击用户即时反馈。
         // 必须直接返回值 -- enqueueImmediate / enqueueConfigAction 是
@@ -591,7 +599,7 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
             void dispatchOrderExecForQueue({
                 router,
                 bridge,
-                workspace,
+                cwd,
                 orderId: actionValue.orderId,
                 ctx: { userId, chatId, messageId },
             }).catch((err) => logger.error('[control] order.exec dispatch failed:', err));
@@ -608,13 +616,13 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
                 .catch((err) => logger.error('[control] card action feedback failed:', err));
         };
         if (isImmediate) {
-            bridge.enqueueImmediate(workspace, async () => {
+            bridge.enqueueImmediate(cwd, async () => {
                 const res = await router.handleCardAction(fullValue, { userId, chatId, messageId });
                 forwardActionFeedback(res);
             });
         }
         else {
-            bridge.enqueue(workspace, async () => {
+            bridge.enqueue(cwd, async () => {
                 const res = await router.handleCardAction(fullValue, { userId, chatId, messageId });
                 forwardActionFeedback(res);
             }, {
@@ -624,7 +632,7 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
                     messageId,
                     messagePreview: `card action: ${actionValue.cmd}`,
                     // Compact 是单向操作，排队卡不允许编辑（编辑预览无意义）。
-                    editable: actionValue.cmd !== 'codex.compact' && actionValue.cmd !== 'resume.compact',
+                    editable: actionValue.cmd !== 'compact' && actionValue.cmd !== 'resume.compact',
                 },
             });
         }
@@ -651,7 +659,7 @@ async function main() {
         initLogger({ dir: path.join(updateConfigDir, 'logs') });
         try {
             const { current, latest } = await checkLatestVersion();
-            if (!isNewer(current, latest)) {
+            if (compareVersions(current, latest) !== 1) {
                 console.log(`Already up to date: ${current}`);
                 process.exit(0);
             }
@@ -699,9 +707,9 @@ async function main() {
         logger.info('[binder] awaiting first binding (any first private message binds)');
     }
     else {
-        logger.info(`[binder] bound to owner openId=${binder.boundOpenId()}`);
+        logger.info(`[binder] bound to owner userId=${binder.boundUserId()}`);
     }
-    const sessionStore = new SessionStore(path.join(configDir, 'last-session.json'), config.defaultAgent);
+    const sessionStore = new SessionStore(path.join(configDir, 'last-session.json'));
     const workspaceStore = new WorkspaceStore(path.join(configDir, 'workspace.json'));
     const bridge = new Bridge({
         connector,

package/dist/instance-lock.js

@@ -17,7 +17,7 @@
  */
 import fs from 'node:fs';
 import path from 'node:path';
-import { silentlyUnlink } from './common/fs.js';
+import { bestEffortUnlink } from './common/fs.js';
 import { binaryName, verifyPidIdentityVerdict } from './platform/identity.js';
 export class InstanceAlreadyRunningError extends Error {
     pid;
@@ -86,7 +86,7 @@ export class InstanceLock {
                     throw new InstanceAlreadyRunningError(pid, this.lockPath);
                 }
                 // Stale lock: remove and retry once
-                silentlyUnlink(this.lockPath);
+                bestEffortUnlink(this.lockPath);
                 try {
                     const fd = fs.openSync(this.lockPath, 'wx');
                     fs.writeSync(fd, this.lockContents(process.pid));
@@ -114,7 +114,7 @@ export class InstanceLock {
     release() {
         const { pid } = this.readPidAndName();
         if (pid === process.pid) {
-            silentlyUnlink(this.lockPath);
+            bestEffortUnlink(this.lockPath);
         }
     }
     registerExitHandlers() {
@@ -160,7 +160,7 @@ export class InstanceLock {
         if (Number.isInteger(pid) && pid > 0 && name)
             return { pid, name };
         // Malformed or missing name — treat as corrupt, unlink and return undefined
-        silentlyUnlink(this.lockPath);
+        bestEffortUnlink(this.lockPath);
         return { pid: undefined, name: undefined };
     }
     /**